hxxps://drive[.]google[.]com/drive/folders/1iLRRJPSOEAmzTOopkHjIKvUCegNJKQ5R?usp=drive_link

Analysis

user interaction
yes
max time kernel
717s
max time network
715s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/05/2026, 04:30

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://drive.google.com/drive/folders/1iLRRJPSOEAmzTOopkHjIKvUCegNJKQ5R?usp=drive_link
Sample260501-e4se6sby3z

Score

7^/10

discovery installer

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
behavioral1/files/0x000a00000002438b-1272.dat	acprotect

Executes dropped EXE 5 IoCs

pid	Process
3952	setup.tmp
2420	FlushFileCache.exe
1912	cls-magic2_x64.exe
100	CLS-srep_x64.exe
1780	precomp.exe

Loads dropped DLL 22 IoCs

pid	Process
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
3952	setup.tmp
4604	msedge.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Contacts third-party web service commonly abused for C2 1 TTPs 6 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
7	drive.google.com
8	drive.google.com
11	drive.google.com
29	drive.google.com
53	drive.google.com
111	drive.google.com

Enumerates connected drives 3 TTPs 1 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\F:	setup.tmp

Drops file in Program Files directory 43 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_1350635348\smart_switch_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_796012107\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1164_1695395200\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_1358606636\deny_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_1481075262\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_93182921\nav_config.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_1350635348\office_endpoints_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_1963167034\travel-facilitated-booking-bing.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_1014058722\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_254064936\arbitration_metadata.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_2086319421\typosquatting_list.pb	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_1611837509\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_1101603088\protocols.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_1350635348\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_2074438330\edge_autofill_global_block_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_28743835\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_796012107\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_796012107\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1164_1695395200\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_1358606636\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_254064936\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_2086319421\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_796012107\sets.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_1963167034\automation.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_1963167034\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1164_1695395200\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_1358606636\deny_full_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_93182921\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_1963167034\classification.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_1963167034\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_1358606636\deny_etld1_domains.list	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_2074438330\autofill_bypass_cache_forms.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_2074438330\regex_patterns.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_2074438330\v1FieldTypes.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_1481075262\data.txt	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_1101603088\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3384_1963167034\extraction.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_1014058722\crl-set	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_28743835\domain_actions.dll	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping1164_1695395200\keys.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_2074438330\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_2086319421\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping4604_2086319421\safety_tips.pb	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	setup.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	FlushFileCache.exe

System Time Discovery 1 TTPs 4 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3784	msedge.exe
5524	msedge.exe
3672	msedge.exe
1056	chrome.exe

Inno Setup is an open-source installation builder for Windows applications. 2 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/5168-1096-0x0000000000400000-0x000000000042D000-memory.dmp	innosetup
behavioral1/memory/5168-1194-0x0000000000400000-0x000000000042D000-memory.dmp	innosetup

Checks SCSI registry key(s) 3 TTPs 14 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000003\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000003\HardwareID	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000003\ConfigFlags	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000003	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_MSFT&PROD_VIRTUAL_DVD-ROM\2&1F4ADFFE&0&000003	msedge.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_Msft&Prod_Virtual_DVD-ROM\2&1f4adffe&0&000003\Service	msedge.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	msedge.exe

Checks processor information in registry 2 TTPs 8 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 12 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies data under HKEY_USERS 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134220834318676309"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe

Modifies registry class 37 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Settings\Cache\History\CachePrefix = "Visited:"	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoft.windows.search	SearchApp.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "6488"	SearchApp.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Settings\Cache\Content\CachePrefix	SearchApp.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\windows.search\Total = "56"	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-312252282-3884318443-358092420-1000\{E9DE6D0B-6999-46EB-BF09-7B75AC1985FD}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\microsoft.windows.search	SearchApp.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-312252282-3884318443-358092420-1000\{FDC1E0E4-CBDB-4981-B226-21B99161313C}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\EdpDomStorage	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\MuiCache	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\Total	SearchApp.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoft.windows.search\ = "23"	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\windows.search	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\EdpDomStorage\windows.search	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage	SearchApp.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total\ = "6521"	SearchApp.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Settings\Cache\Cookies\CachePrefix = "Cookie:"	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\Total	SearchApp.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-312252282-3884318443-358092420-1000\{B41EF483-82AB-4F87-B301-C1830F3E5E63}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DomStorageState	SearchApp.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\microsoft.windows.search\ = "56"	SearchApp.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.windows.search_cw5n1h2txyewy\Internet Explorer\DOMStorage\windows.search\Total = "23"	SearchApp.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-312252282-3884318443-358092420-1000\{7C44B45F-321A-44F9-9FE1-CD9546130907}	chrome.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
5356	msedge.exe
5356	msedge.exe
3952	setup.tmp
3952	setup.tmp
4604	msedge.exe
4604	msedge.exe
5920	chrome.exe
5920	chrome.exe
1616	msedge.exe
1616	msedge.exe
5920	chrome.exe
5920	chrome.exe

Suspicious behavior: LoadsDriver 6 IoCs

pid	Process
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
4	Process not Found
668	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 64 IoCs

pid	Process
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
5920	chrome.exe
5920	chrome.exe
5920	chrome.exe
5920	chrome.exe
5920	chrome.exe
5920	chrome.exe
5920	chrome.exe
5920	chrome.exe
5920	chrome.exe
5920	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeManageVolumePrivilege	5340	svchost.exe
Token: SeIncreaseQuotaPrivilege	2420	FlushFileCache.exe
Token: SeProfSingleProcessPrivilege	2420	FlushFileCache.exe
Token: SeLockMemoryPrivilege	3952	setup.tmp
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe
Token: SeShutdownPrivilege	5920	chrome.exe
Token: SeCreatePagefilePrivilege	5920	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
3384	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe
1164	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4940	SearchApp.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3384 wrote to memory of 1356	3384	msedge.exe	85
PID 3384 wrote to memory of 3784	3384	msedge.exe	86
PID 3384 wrote to memory of 3688	3384	msedge.exe	87
PID 3384 wrote to memory of 3688	3384	msedge.exe	87
PID 3384 wrote to memory of 3688	3384	msedge.exe	87
PID 3384 wrote to memory of 1072	3384	msedge.exe	89
PID 3384 wrote to memory of 1072	3384	msedge.exe	89
PID 3384 wrote to memory of 1856	3384	msedge.exe	90
PID 3384 wrote to memory of 1856	3384	msedge.exe	90
PID 3384 wrote to memory of 1508	3384	msedge.exe	91
PID 3384 wrote to memory of 1856	3384	msedge.exe	90
PID 3384 wrote to memory of 1508	3384	msedge.exe	91
PID 3384 wrote to memory of 1508	3384	msedge.exe	91
PID 3384 wrote to memory of 3264	3384	msedge.exe	92
PID 3384 wrote to memory of 3920	3384	msedge.exe	93
PID 3384 wrote to memory of 3264	3384	msedge.exe	92
PID 3384 wrote to memory of 3264	3384	msedge.exe	92
PID 3384 wrote to memory of 3920	3384	msedge.exe	93
PID 3384 wrote to memory of 3920	3384	msedge.exe	93
PID 3384 wrote to memory of 3360	3384	msedge.exe	96
PID 3384 wrote to memory of 3360	3384	msedge.exe	96
PID 3384 wrote to memory of 876	3384	msedge.exe	97
PID 3384 wrote to memory of 876	3384	msedge.exe	97
PID 3384 wrote to memory of 876	3384	msedge.exe	97
PID 3384 wrote to memory of 2692	3384	msedge.exe	99
PID 3384 wrote to memory of 2692	3384	msedge.exe	99
PID 3384 wrote to memory of 1044	3384	msedge.exe	100
PID 3384 wrote to memory of 5076	3384	msedge.exe	101
PID 3384 wrote to memory of 1044	3384	msedge.exe	100
PID 3384 wrote to memory of 5076	3384	msedge.exe	101
PID 3384 wrote to memory of 4916	3384	msedge.exe	103
PID 3384 wrote to memory of 3680	3384	msedge.exe	104
PID 3384 wrote to memory of 3680	3384	msedge.exe	104
PID 3384 wrote to memory of 728	3384	msedge.exe	105
PID 3384 wrote to memory of 728	3384	msedge.exe	105
PID 3384 wrote to memory of 1444	3384	msedge.exe	106
PID 3384 wrote to memory of 1444	3384	msedge.exe	106
PID 3384 wrote to memory of 224	3384	msedge.exe	107
PID 3384 wrote to memory of 224	3384	msedge.exe	107
PID 3384 wrote to memory of 1744	3384	msedge.exe	108
PID 3384 wrote to memory of 1744	3384	msedge.exe	108
PID 3384 wrote to memory of 1372	3384	msedge.exe	110
PID 3384 wrote to memory of 1372	3384	msedge.exe	110
PID 3384 wrote to memory of 1372	3384	msedge.exe	110
PID 3384 wrote to memory of 3632	3384	msedge.exe	111
PID 3384 wrote to memory of 3632	3384	msedge.exe	111
PID 3384 wrote to memory of 1164	3384	msedge.exe	112
PID 3384 wrote to memory of 1164	3384	msedge.exe	112
PID 3384 wrote to memory of 1164	3384	msedge.exe	112
PID 3384 wrote to memory of 2080	3384	msedge.exe	113
PID 3384 wrote to memory of 3516	3384	msedge.exe	114
PID 3384 wrote to memory of 2680	3384	msedge.exe	115
PID 3384 wrote to memory of 2400	3384	msedge.exe	122
PID 3384 wrote to memory of 2400	3384	msedge.exe	122
PID 3384 wrote to memory of 1560	3384	msedge.exe	127
PID 3384 wrote to memory of 1560	3384	msedge.exe	127
PID 3384 wrote to memory of 5356	3384	msedge.exe	137
PID 3384 wrote to memory of 5800	3384	msedge.exe	139
PID 3384 wrote to memory of 5800	3384	msedge.exe	139
PID 3384 wrote to memory of 5800	3384	msedge.exe	139
PID 3384 wrote to memory of 5872	3384	msedge.exe	140
PID 3384 wrote to memory of 5872	3384	msedge.exe	140
PID 3384 wrote to memory of 5872	3384	msedge.exe	140
PID 3384 wrote to memory of 5960	3384	msedge.exe	141

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://drive.google.com/drive/folders/1iLRRJPSOEAmzTOopkHjIKvUCegNJKQ5R?usp=drive_link
1⤵
- Drops file in Program Files directory
- Checks SCSI registry key(s)
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3384
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffba0f7c188,0x7ffba0f7c194,0x7ffba0f7c1a0
  2⤵
  PID:1356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1984,i,10537384604194401613,1088477609821480712,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
  2⤵
  - System Time Discovery
  PID:3784
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1720,i,4924484724750233325,16656802036569490623,262144 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:2
  2⤵
  PID:3688
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,13080677473818557647,1947746583477460031,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=2728 /prefetch:8
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,13799342414112948409,529904057809130078,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,796312156538987623,16900912248361392640,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=3612 /prefetch:1
  2⤵
  PID:1508
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4248,i,14150886857519944490,13461650566837338926,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=4312 /prefetch:1
  2⤵
  PID:3264
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,3046937167852030803,11765439679595678211,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=4364 /prefetch:2
  2⤵
  PID:3920
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5032,i,10044540689731826307,12189952473292855119,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:8
  2⤵
  PID:3360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5288,i,10530826510153453677,11099504572841602216,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:1
  2⤵
  PID:876
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3708,i,15062230397758555754,12482893187000184456,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:8
  2⤵
  PID:2692
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3428,i,17819633148061826436,1867679329140971228,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5540 /prefetch:8
  2⤵
  PID:1044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4308,i,7942727140614585906,10475346346486283627,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:8
  2⤵
  PID:5076
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,15310888327012188706,781523226636518516,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:8
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,15310888327012188706,781523226636518516,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5376 /prefetch:8
  2⤵
  PID:4916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6284,i,5758010662696479156,10410756942800877823,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:8
  2⤵
  PID:3680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6304,i,11586759627075619650,2587528133977186067,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=6296 /prefetch:8
  2⤵
  PID:728
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3712,i,4879791596058959528,3549818386919638365,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:8
  2⤵
  PID:1444
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6544,i,2716163529967142790,14449966950245347629,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=3596 /prefetch:8
  2⤵
  PID:224
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3764,i,4776950933413119574,9088995787125120281,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=6520 /prefetch:8
  2⤵
  PID:1744
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=3720,i,13893708950032664413,6784339617367030090,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=6328 /prefetch:1
  2⤵
  PID:1372
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5156,i,4921039765022106321,9545788116189783101,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5180 /prefetch:8
  2⤵
  PID:3632
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --always-read-main-dll --metrics-shmem-handle=5140,i,16108303146410651072,15606679466136626272,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:1
  2⤵
  PID:1164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6792,i,7168964181568388256,6251955457304403663,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=760 /prefetch:8
  2⤵
  PID:2080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6360,i,7746914346894672728,16147043944569615620,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=6780 /prefetch:8
  2⤵
  PID:3516
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6720,i,17675778493532944777,9609481261103725393,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=6812 /prefetch:8
  2⤵
  PID:2680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5240,i,737543385959549348,11141565952574931128,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=4504 /prefetch:8
  2⤵
  PID:2400
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6244,i,12529940348926762659,1898077088036018338,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=4368 /prefetch:8
  2⤵
  PID:1560
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4572,i,13411951429768501573,13215190749347367354,262144 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5584 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:5356
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=6556,i,15806755697563541639,8452004171349021030,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=3720 /prefetch:1
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=33 --always-read-main-dll --metrics-shmem-handle=6588,i,6359419367508525451,5481957562259242944,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=6600 /prefetch:1
  2⤵
  PID:5872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=34 --always-read-main-dll --metrics-shmem-handle=4868,i,17277461160163385501,3803927072151236952,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:1
  2⤵
  PID:5960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6296,i,10587432314100896098,8321474896393130437,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5724 /prefetch:8
  2⤵
  PID:5404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5192,i,16241228379463522867,14413848103674647337,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5224 /prefetch:8
  2⤵
  PID:5720
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5520,i,1359423539552243005,715055105187571262,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=6364 /prefetch:8
  2⤵
  PID:4436
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,2673916590601367518,5017585337913146850,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5784 /prefetch:8
  2⤵
  PID:5568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,11282475572676860083,18147754817505586146,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5592 /prefetch:8
  2⤵
  PID:3208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6804,i,2885045131282948447,17097393339784336328,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5788 /prefetch:8
  2⤵
  PID:5416
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5728,i,11678940272852463417,11962271587323533797,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=6036 /prefetch:8
  2⤵
  PID:1656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4020,i,12413145557377780723,1804914159786514094,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=6800 /prefetch:8
  2⤵
  PID:4520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3492,i,2168400019532718738,4219347084521070549,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:8
  2⤵
  PID:5948
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3496,i,13438760272049573182,12752692564684437149,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:8
  2⤵
  PID:3824
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=45 --always-read-main-dll --metrics-shmem-handle=5236,i,3172744345416802066,15358951658391147333,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:1
  2⤵
  PID:4568
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=46 --always-read-main-dll --metrics-shmem-handle=5656,i,14128907042500390316,10468917883837999752,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=7120 /prefetch:1
  2⤵
  PID:312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=47 --always-read-main-dll --metrics-shmem-handle=4548,i,5038439768113504554,2857651259100469135,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=7160 /prefetch:1
  2⤵
  PID:5460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=48 --always-read-main-dll --metrics-shmem-handle=5544,i,15322219947695757982,5711677422583138898,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:1
  2⤵
  PID:2268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=49 --always-read-main-dll --metrics-shmem-handle=7332,i,1931905187606925432,2729647633893342438,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=7352 /prefetch:1
  2⤵
  PID:1956
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=50 --always-read-main-dll --metrics-shmem-handle=7372,i,7213644970493762587,2084489256649396866,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=7280 /prefetch:1
  2⤵
  PID:5520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=51 --always-read-main-dll --metrics-shmem-handle=7668,i,3666029124300243058,4775362455436766883,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=7368 /prefetch:1
  2⤵
  PID:5040
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=52 --always-read-main-dll --metrics-shmem-handle=7808,i,4521023958190904769,8702483718942964729,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=7324 /prefetch:1
  2⤵
  PID:3712
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=53 --always-read-main-dll --metrics-shmem-handle=4540,i,12180403246956025539,3717845415338389952,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=7084 /prefetch:1
  2⤵
  PID:176
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=54 --always-read-main-dll --metrics-shmem-handle=5620,i,3555853725015715714,10089581570281416538,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5572 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=55 --always-read-main-dll --metrics-shmem-handle=5216,i,17080092400550825852,2341563567923886244,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=3560 /prefetch:1
  2⤵
  PID:3492
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=56 --always-read-main-dll --metrics-shmem-handle=3452,i,14637746179349935285,3831722839912947170,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=4012 /prefetch:1
  2⤵
  PID:5032
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=57 --always-read-main-dll --metrics-shmem-handle=7912,i,18233658435992471499,12871243299580993165,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:1
  2⤵
  PID:5136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=58 --always-read-main-dll --metrics-shmem-handle=7840,i,2724305624196738089,11519381629259698604,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=7224 /prefetch:1
  2⤵
  PID:5996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=59 --always-read-main-dll --metrics-shmem-handle=7860,i,13413504858322201014,18402036620491162788,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5576 /prefetch:1
  2⤵
  PID:3684
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=60 --always-read-main-dll --metrics-shmem-handle=8004,i,12735156426964492962,10470294147740823930,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=7864 /prefetch:1
  2⤵
  PID:6132
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=61 --always-read-main-dll --metrics-shmem-handle=7232,i,13320591045164247265,9875196232059382680,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=7180 /prefetch:1
  2⤵
  PID:3864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=62 --always-read-main-dll --metrics-shmem-handle=7444,i,4503571197445031773,6800723343311115105,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=7384 /prefetch:1
  2⤵
  PID:3144
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6520,i,11807138976924483010,10536732308982728744,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5668 /prefetch:8
  2⤵
  PID:5764
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=65 --always-read-main-dll --metrics-shmem-handle=7988,i,8062871390461380946,9158659994820097148,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=4508 /prefetch:1
  2⤵
  PID:4168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=67 --always-read-main-dll --metrics-shmem-handle=7056,i,13177111550566920596,2409388675011787228,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=4360 /prefetch:1
  2⤵
  PID:540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=68 --always-read-main-dll --metrics-shmem-handle=3564,i,2218495947634945380,2715700811854821937,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:1
  2⤵
  PID:4756
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=69 --always-read-main-dll --metrics-shmem-handle=7868,i,2971763404167059798,8205673817047871300,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:1
  2⤵
  PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=70 --always-read-main-dll --metrics-shmem-handle=7316,i,2217168667335981261,12749962066269197549,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=8212 /prefetch:1
  2⤵
  PID:4072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=71 --always-read-main-dll --metrics-shmem-handle=8376,i,12799897862410676979,683480496986267663,2097152 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=8364 /prefetch:1
  2⤵
  PID:3412
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8616,i,11974443953456818652,596304154711176494,524288 --field-trial-handle=2268,i,14938052085376029494,16910483456402732946,262144 --variations-seed-version --mojo-platform-channel-handle=7160 /prefetch:8
  2⤵
  PID:3720

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3716

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k UnistackSvcGroup
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5340

C:\Windows\system32\werfault.exe
werfault.exe /hc /shared Global\5baf8c4aa68845f392881ee47eee33a0 /t 3832 /p 3804
1⤵
PID:5492

C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
1⤵
- Modifies registry class
- Suspicious use of SetWindowsHookEx
PID:4940

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:5036

\??\E:\setup.exe
"E:\setup.exe"
1⤵
- System Location Discovery: System Language Discovery
PID:5168
- C:\Users\Admin\AppData\Local\Temp\is-RL499.tmp\setup.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-RL499.tmp\setup.tmp" /SL5="$301FE,7843701,140800,E:\setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Enumerates connected drives
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:3952
- - C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\FlushFileCache.exe
    "C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\FlushFileCache.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of AdjustPrivilegeToken
    PID:2420
- - C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\cls-magic2_x64.exe
    "C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\cls-magic2_x64.exe" d - - -idx=00
    3⤵
    - Executes dropped EXE
    PID:1912
- - C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\CLS-srep_x64.exe
    "C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\CLS-srep_x64.exe" d - - -idx=00
    3⤵
    - Executes dropped EXE
    PID:100
- - C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\precomp.exe
    precomp.exe -ostdout -r stdin
    3⤵
    - Executes dropped EXE
    PID:1780
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://bit.ly/fitgirl-repacks-site
    3⤵
    PID:2216
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument http://bit.ly/fitgirl-repacks-site
      4⤵
      PID:4604
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://bit.ly/1InHOqK
    3⤵
    PID:5056
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument http://bit.ly/1InHOqK
      4⤵
      PID:932
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://bit.ly/fitgirl-repacks-site
    3⤵
    PID:2904
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument http://bit.ly/fitgirl-repacks-site
      4⤵
      Drops file in Program Files directory
      Checks SCSI registry key(s)
      Checks processor information in registry
      Enumerates system info in registry
      Modifies data under HKEY_USERS
      Modifies registry class
      Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
      Suspicious use of SendNotifyMessage
      PID:1164
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x244,0x7ffba0f7c188,0x7ffba0f7c194,0x7ffba0f7c1a0
        5⤵
        
        PID:3812
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2032,i,14351074857735351926,1759316610012821448,524288 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:3
        5⤵
        System Time Discovery
        
        PID:5524
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1748,i,14024494334622447981,3414842504395495511,262144 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=1940 /prefetch:2
        5⤵
        
        PID:6048
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2556,i,16073712541720240873,8588936341506535470,524288 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=2564 /prefetch:8
        5⤵
        
        PID:4900
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3564,i,1563492289088257708,1643876275652921549,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=3640 /prefetch:1
        5⤵
        
        PID:4576
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3548,i,15028896090440892461,2148242447290280259,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=3592 /prefetch:1
        5⤵
        
        PID:5368
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4892,i,14457858615138763045,12213239272019962980,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=4876 /prefetch:1
        5⤵
        
        PID:2420
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=5044,i,9910009555609685523,18243128449725535624,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=5060 /prefetch:1
        5⤵
        
        PID:5640
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5252,i,7783021474526589417,906852759584639307,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=5268 /prefetch:1
        5⤵
        
        PID:6012
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5236,i,14319844836693591479,6466730077321073605,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=4332 /prefetch:1
        5⤵
        
        PID:6128
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5552,i,10311208723972320190,1416360075977616205,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=5568 /prefetch:1
        5⤵
        
        PID:1756
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5760,i,1518729428518801100,14242324524134934036,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=5976 /prefetch:1
        5⤵
        
        PID:5816
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5852,i,12208696157227677306,16152741327183072430,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=5860 /prefetch:1
        5⤵
        
        PID:5412
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6052,i,311215311794236365,15483043936614641084,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:1
        5⤵
        
        PID:3872
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5044,i,7365775953830911226,12450068927652564981,524288 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=5368 /prefetch:8
        5⤵
        
        PID:5024
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5720,i,10322482704386816297,9469920172607895699,524288 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=5360 /prefetch:8
        5⤵
        
        PID:5588
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6532,i,13181551855658314779,17661223242689182056,524288 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:8
        5⤵
        
        PID:5140
    - - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6532,i,13181551855658314779,17661223242689182056,524288 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:8
        5⤵
        
        PID:3784
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6608,i,1681946403145712296,9792918245783021827,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=6700 /prefetch:1
        5⤵
        
        PID:1576
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7652,i,7690157957599349727,9114162209486442679,524288 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=7388 /prefetch:8
        5⤵
        
        PID:4728
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7584,i,17114133577929036565,1698129495393698940,524288 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=7576 /prefetch:8
        5⤵
        
        PID:5100
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7500,i,5953245018534853889,13475053874335730705,524288 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=7684 /prefetch:8
        5⤵
        
        PID:4092
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=7524,i,7786943252477401235,10384056877829647531,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=7712 /prefetch:1
        5⤵
        
        PID:1556
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5224,i,13691449111001278508,17923405604270883193,524288 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=5620 /prefetch:8
        5⤵
        
        PID:5280
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=5212,i,14676786077721020064,2928086971796192536,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=5344 /prefetch:1
        5⤵
        
        PID:4056
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=6168,i,16148525677543911910,9922154886638437409,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=7268 /prefetch:1
        5⤵
        
        PID:4260
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --always-read-main-dll --metrics-shmem-handle=7360,i,13016162217960114684,9992406306092748383,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=5208 /prefetch:1
        5⤵
        
        PID:5288
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=29 --always-read-main-dll --metrics-shmem-handle=7876,i,5885570337805229366,14927772873855743165,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=7572 /prefetch:1
        5⤵
        
        PID:1720
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=30 --always-read-main-dll --metrics-shmem-handle=7940,i,16118779537534317982,8788713973387741976,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=7936 /prefetch:1
        5⤵
        
        PID:1968
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7472,i,6022717522730467791,4210778419993016857,524288 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=7480 /prefetch:8
        5⤵
        
        PID:4076
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=32 --always-read-main-dll --metrics-shmem-handle=8620,i,7101252604420470490,13645674927269036634,2097152 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=8632 /prefetch:1
        5⤵
        
        PID:5464
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8588,i,18224261198854979203,16476438250485409803,524288 --field-trial-handle=1948,i,17359543169435752636,11102428336789834077,262144 --variations-seed-version --mojo-platform-channel-handle=8864 /prefetch:8
        5⤵
        
        PID:4648
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
        5⤵
        Loads dropped DLL
        Drops file in Program Files directory
        Checks processor information in registry
        Enumerates system info in registry
        Modifies data under HKEY_USERS
        Modifies registry class
        Suspicious behavior: EnumeratesProcesses
        
        PID:4604
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x260,0x7ffba0f7c188,0x7ffba0f7c194,0x7ffba0f7c1a0
        6⤵
        
        PID:4612
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1916,i,254121656164576310,12520390018515142300,524288 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=2244 /prefetch:3
        6⤵
        System Time Discovery
        
        PID:3672
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1644,i,8143961989705660009,6257048463603679371,262144 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:2
        6⤵
        
        PID:3272
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2572,i,14895261471749331630,319825601473190607,524288 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=2744 /prefetch:8
        6⤵
        
        PID:312
      - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,12360231988824609656,8047141782446890191,524288 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
        6⤵
        
        PID:3472
      - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4392,i,12360231988824609656,8047141782446890191,524288 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:8
        6⤵
        
        PID:1780
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4440,i,6989407864955286110,8348331529410530898,524288 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=4728 /prefetch:8
        6⤵
        
        PID:5556
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4424,i,7950433351400215731,14927777530745621597,524288 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=4740 /prefetch:8
        6⤵
        
        PID:3192
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4692,i,5968665980091031368,6185758852355121876,524288 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=4784 /prefetch:8
        6⤵
        
        PID:5332
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,12083894900774830624,4736812603405557185,524288 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:8
        6⤵
        
        PID:3832
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4960,i,11223942658260799225,12829821581000888274,524288 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=4956 /prefetch:8
        6⤵
        
        PID:2208
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4848,i,4058109419295519909,2287779832722924294,524288 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=4992 /prefetch:8
        6⤵
        
        PID:6108
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4792,i,3251290123794598712,8230901055209199476,524288 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=4772 /prefetch:8
        6⤵
        
        PID:5864
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4748,i,12995217521937364567,14471398265630075568,262144 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=4976 /prefetch:8
        6⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:1616
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4756,i,1972636747006394569,3704464429898935264,524288 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=4452 /prefetch:8
        6⤵
        
        PID:308
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4076,i,2509867049416695105,7615144498404543169,524288 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=4048 /prefetch:8
        6⤵
        
        PID:5956
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4552,i,16169258559302351375,6213821637822724553,524288 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=3960 /prefetch:8
        6⤵
        
        PID:548
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3632,i,1506413537524652734,11033045375491259026,524288 --field-trial-handle=2168,i,7230954330729808037,9737514890427152761,262144 --variations-seed-version --mojo-platform-channel-handle=3636 /prefetch:8
        6⤵
        
        PID:4312

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2548

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:3076

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4812

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
PID:5920
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x118,0x11c,0x120,0xf4,0x124,0x7ffb9e94c728,0x7ffb9e94c734,0x7ffb9e94c740
  2⤵
  PID:1756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1956,i,12886338153426052997,3671936828199489416,262144 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1964 /prefetch:2
  2⤵
  PID:4108
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=2324,i,5684872736223371213,18142297182087111001,524288 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2328 /prefetch:3
  2⤵
  - System Time Discovery
  PID:1056
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=1468,i,5659542853644658038,2700049768521231431,524288 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2468 /prefetch:8
  2⤵
  PID:3208
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3304,i,3885984062757788254,10978076531207696597,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3320 /prefetch:1
  2⤵
  PID:5780
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3592,i,7754782967515132022,12391620423871383796,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:2776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4332,i,8785049520838649555,17647837061682878654,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4548 /prefetch:2
  2⤵
  PID:4052
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4764,i,14863739463593400121,10813476278890501817,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4796 /prefetch:1
  2⤵
  PID:556
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5516,i,4509373423871537683,6817995219436967720,524288 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5520 /prefetch:8
  2⤵
  PID:2436
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5512,i,7065288221839159794,16922205786323323164,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5552 /prefetch:1
  2⤵
  PID:3080
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3684,i,5250874222251815607,2296735249605163685,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:1012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=3476,i,9223897151183191119,4822766829190808485,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3644 /prefetch:1
  2⤵
  PID:1124
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5928,i,7070203172601138747,17940896800331940156,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5940 /prefetch:1
  2⤵
  PID:5084
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6092,i,18410544853221957257,2404726522828266196,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5900 /prefetch:1
  2⤵
  PID:1212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6316,i,2450484629192450184,5362717910314825837,524288 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6368 /prefetch:8
  2⤵
  - Modifies registry class
  PID:3460
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=6324,i,12956085891526539576,7025232732199920905,524288 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6328 /prefetch:8
  2⤵
  PID:4516
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6616,i,11859433594698204549,7355905742290440455,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6600 /prefetch:1
  2⤵
  PID:828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=6756,i,13616145815697224026,7535499985080831136,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6768 /prefetch:1
  2⤵
  PID:1900
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6200,i,8358684503341197152,4253916028180215220,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6176 /prefetch:1
  2⤵
  PID:3308
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6964,i,4678035184210406492,1340892807691167327,524288 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=240 /prefetch:8
  2⤵
  PID:2272
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6992,i,14835164347809342561,17200649929407813465,524288 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6184 /prefetch:8
  2⤵
  PID:1720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6996,i,9932469187457564907,7987185576046668875,524288 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6148 /prefetch:8
  2⤵
  PID:2424
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=6836,i,14464021967072542284,11685680577705075204,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6896 /prefetch:1
  2⤵
  PID:4148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6164,i,4324821231963776990,16656887909642937638,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6108 /prefetch:1
  2⤵
  PID:3948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=4600,i,5494571505084898289,5216333174499373218,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7112 /prefetch:1
  2⤵
  PID:5488
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=7140,i,899920974729938951,4433379126161480060,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4628 /prefetch:1
  2⤵
  PID:5884
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6340,i,11378068363037712359,9999217155149263176,2097152 --field-trial-handle=1976,i,1472457779669035797,9508938795990989951,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7164 /prefetch:1
  2⤵
  PID:980

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1212

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:3084

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
PID:5152

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

LICENSE

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1164_1695395200\LICENSE
Size 1KB
SHA256 3dbd2c90050b652d63656481c3e5871c52261575292db77d4ea63419f187a55b
MD5 ee002cb9e51bb8dfa89640a406a1090a
SHA1 49ee3ad535947d8821ffdeb67ffc9bc37d1ebbb2
SHA512 d1fdcc436b8ca8c68d4dc7077f84f803a535bf2ce31d9eb5d0c466b62d6567b2c59974995060403ed757e92245db07e70c6bddbf1c3519fed300cc5b9bf9177c
TLSH
T17D31535723840B9306DA2B4566AEBDC4B0DDC02D7F27AE05186EF394537B52ED8B3443
MD5 SHA1 SHA512 TLSH

Submit Download

keys.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1164_1695395200\keys.json
Size 8KB
SHA256 ae6e69a145f84c0a261b4e82888779fbf137f193881d687588e1af71609ae947
MD5 d3ebc1cb4b692c6e2d29a4625420fe73
SHA1 4ce74c1e9af6fd34d6379ec0fec6afb24082a7c1
SHA512 e34b855615e6a3bf770f27d85aa29ca57a324c08bd8f8d9c0130e2a142c0e4a5f17bffd0861b725acc8a2316f73b7fe50406b0af26264a5c2d8f37599b260860
SSDEEP 192:uNtGbR+mFGfvPNyR9Pm4lOvMwkoR9PuGMXcy:ORmqwKjA
TLSH
T18402A57F14A41181CE7FC1698F0B78B78FA038065BCA3A83539BFA49494296D173B5B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping1164_1695395200\manifest.json
Size 79B
SHA256 7ea98f2308a9c51d17a1ac71b64afbe2a41ff0a083a166a0e4cc428bf44f0715
MD5 817fea104100763cd1bf4f15a51bfe94
SHA1 589717cf98cf7e2d55fc0d6025a4b8e215ed13d6
SHA512 da7b959d93113c5a6be360f90d9c721989c5e7acad7fa592081b582c4c3a0c4a9066a71473fd8492ce7fe7b0fbfd6870d939428a67fbd508fcf6b2c6dc1a41ea
TLSH
T15EA0122058019233108407600360478243551C022015244809461041258813A12A3128
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3384_1101603088\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3384_1611837509\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3384_1963167034\manifest.json
Size 135B
SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
MD5 4055ba4ebd5546fb6306d6a3151a236a
SHA1 609a989f14f8ee9ed9bffbd6ddba3214fd0d0109
SHA512 58d39f7ae0dafd067c6dba34c686506c1718112ad5af8a255eb9a7d6ec0edca318b557565f5914c5140eb9d1b6e2ffbb08c9d596f43e7a79fdb4ef95457bf29a
TLSH
T1CEC09223CC019CB119743B642AB2AB82F7B41B0B6869705A3AB3148C1F7E1B48082680
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3384_796012107\manifest.json
Size 85B
SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
MD5 8ce95626b39ebc2401eee0b34c24fc7c
SHA1 f97a2fefe756f7a03e388e1333573b884730c2b0
SHA512 f04e4f695977918adf6e0603386b6f9c75a4a2202b0fe7215b642f3db491a1db398039cc28633b8e2541749403581622d28c1400f3f8fc66a3daab200e27266d
TLSH
T106A0121018015DE318880320213143D2D3A51C05247437001106108019B8636027A22E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3384_93182921\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4604_1014058722\manifest.json
Size 113B
SHA256 98821f71a1973ac61b45967ce0c121eb598ac6e95abaa23c912d2f33e4237d8c
MD5 7ef3c71464d0fef472bc1d81fd363c62
SHA1 230e8ec0f849bf34d444c55ef548ba0c9c94d39b
SHA512 f74b96ec3b9569e360a02bfdd4fe237efad8ee2a5deaf46db891bcadd39dba22fd6d59a4e9aafe5511152625ce9f468519dadd53fc0c9b6c8826dc58cbe6cd7c
TLSH
T1C8B09262DC80D872693A93AC0E2246C4F228234B2558AA493630048C0A3A3F082A2321
MD5 SHA1 SHA512 TLSH

Submit Download

deny_domains.list

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4604_1358606636\deny_domains.list
Size 12B
SHA256 f51a7acfffec56d6751561966d947d3fd199b74528c07dabdcf5fcb33d5b2e85
MD5 085a334bdb7c8e27b7d925a596bfc19a
SHA1 1e4ad53dc335af5c6a8da2e4b4a175f37fafe2f2
SHA512 c883cb43c97a136825c6fd143f539210c234c66f9b76dfd8431f6ff014094e20b9410d7462aadee2344df8ca158def6b9a807e7cadbdfa947f6f8592e7283e34
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4604_1358606636\manifest.json
Size 177B
SHA256 096e772e0f2e8c15e6dec9087ee0a1fb8b0c56b25061626aedc9e7e705adfc2e
MD5 2714a51ed8c2a891ad73b7488ab655b9
SHA1 9a8cc479aec8de1b4eb678e5d68b23b16a39dc99
SHA512 4811522c06ad6946626a9f4d12eb62a1d623825d18a1cd0ad7b628f4c059f37d299b5857abffd959e4ea53239412490539f5705b4aa6c6951d13c68e6d5b72ad
TLSH
T1E6C012EFDC509DB215EB4323156D43C4E733CF4B1546490935FB66082A25981C193500
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4604_1481075262\manifest.json
Size 52B
SHA256 eb3cf0abd2ad7de40910be5f35246574a6de00ce226c6e9cef465ce6691bb937
MD5 bd68a51e561ab1326b00278d86346486
SHA1 0929e44106b4b17dbac9104a716a05aeae6dba3a
SHA512 beaf2390b2c037268ce9518e6e7a49ebe123fa1bb6ba59e3d0641e778a11fed8f863a3c0cf6a505a5e404d4f9cb14f0eca72efc1efb56384e3ba190a57c41c43
TLSH
T1E2900270042495175AC10E606571F8C59391661955850D1D04451548029546CE0602D8
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4604_2074438330\manifest.json
Size 119B
SHA256 7169d86e87f904218238cd293e043e20b7828afad9acd1ff2e5d64188530b9d7
MD5 7382260298fc06c135b7c7399e9acff9
SHA1 6a829f795a3b8be25200675e00abfa1908fdefdf
SHA512 f0ce77f9f72fb6721bcfa9b03f77b0771e8217988183787c00dba4f9d9f19cdba252ddd656422336035f81939cb97c8b5dcb4f036a39280198c17cd04faaaed4
TLSH
T191B09273A800E83830E9EB91093A8243F320AB4BA585640A3625485C0B2B9F990606C4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4604_2086319421\manifest.json
Size 72B
SHA256 9811cd3e1fbf80feb6a52ad2141fc1096165a100c2d5846dd48f9ed612c6fc9f
MD5 a30b19bb414d78fff00fc7855d6ed5fd
SHA1 2a6408f2829e964c578751bf29ec4f702412c11e
SHA512 66b6db60e9e6f3059d1a47db14f05d35587aa2019bc06e6cf352dfbb237d9dfe6dce7cb21c9127320a7fdca5b9d3eb21e799abe6a926ae51b5f62cf646c30490
TLSH
T154A02230AC20A03330880B300032838383B02C0A2020FE0A0F0B2080A28823E20B220C
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4604_254064936\manifest.json
Size 238B
SHA256 1bdda4a8fc3e2b965fbb52c9b23a9a34871bc345abfb332a87ea878f4472efbd
MD5 15b69964f6f79654cbf54953aad0513f
SHA1 013fb9737790b034195cdeddaa620049484c53a7
SHA512 7eeee58e06bba59b1ef874436035202416079617b7953593abf6d9af42a55088ab37f45fdee394166344f0186c0cb7092f55ed201c213737bb5d5318e9f47908
TLSH
T178D0A727EC008DB611B207580AF5A742E3B1630F7C012509377308CC0F3D1744081285
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping4604_28743835\manifest.json
Size 165B
SHA256 daf50c160ae8f5935baa4a7207e9d04afbbc81a6dd9ed02d99de12056743eeb6
MD5 8ff4c35081337b1ba6731cc36163c2a8
SHA1 31c80c4a98e5492fbf1b6b3e050446e7240c24a6
SHA512 1a616b9b797441fb438c89864beae36c1a151b1c85e1288481dc61d9f82df2c1fd5e002dbacc05d3070323f56325ed960df3e353d314eb2ee218f8e93aea3fac
TLSH
T1D6C0805294011D7419CE47150D5CE3889723D7152980B0155BD7C218DC3DC8B68F3B4D
MD5 SHA1 SHA512 TLSH

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 20f13e8b641219e5a34ed8c88d4114f22269d0fba0562b6f4d3efb87fa3263ab
MD5 9e3dda03f1e7cd69c82295e82469d089
SHA1 fc0ebf0292e82834384325994a4efabf4379685f
SHA512 acb4fddc1493535ce54fe5626af6386b4b465d43f2f8e83d0ecc4376299ca9bd9f8f8ccb7c4dcebb8fe1f8a5989927b87ae755f4dec80692f84cf65bf2b676fb
TLSH
T1EEE09BB7C921ED3B09FD1B5860554786E740235A7BD0594F3E3D860D8FB56360586C5C
MD5 SHA1 SHA512 TLSH

Submit Download

f_000010

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000010
Size 21KB
SHA256 3396049fde9681cb0673782a6ec5ac7714659e181d3dc2a9a606e3b02aadad4d
MD5 1533908e43fa1f55ea88e9e40a83121c
SHA1 381e4f625fa4685e22eaca4eb8e9d70e2ac463bb
SHA512 224e1686739a715955e1567a93a2fe9a7fc1cddb9ddb6b74b0e01c833360c5dae51ebfb2a25c0918cc0d7d4171b5ef15cf6ab8cd9be80e2757b18e3a29344899
SSDEEP 384:/TQ17L6ksm+VYzDeLMw5UyEtsKFIaY/1B6nGF627bAnhPIvXr45rtGxvpuPKz:bcc560l2sKFIaYNB6nGFRbAZIDgrtGxt
TLSH
T153A2D12E701917B9EDE91A087DBE9A35C76D085CF3609780FD9F201993EB8D2760174E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000017

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000017
Size 27KB
SHA256 6e997b301aa9d4639159014e77ae98bd9a165024a62ce20a02a927ce25c2df9c
MD5 9c70a804b7465ccca25785cd6b515671
SHA1 0074c99b411a98c6c84a9d411ae3ad61e0893cb8
SHA512 151ff13fe0e700d44249f7c2ca7a6a7b8090a200b7867176a3d50f75a08b31a8ae54565ec60b113bb8d9fcfd231851eabe499a8bab25885726e2065534aa227e
SSDEEP 768:/jmGYmUe4tYGxV+Pb8mwflPrLUT5Lh8PXmmiGV:/nYmHmhKoFfZmLBGV
TLSH
T119C2E12231B719418378302C1BED1F5A31F4B83EF4AA8FD8ED88166273DAD555547A2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001c

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001c
Size 436KB
SHA256 325a352a2dc6fa96572d18e27b621a17fb1b5c5065b82815a31ebae7827cfa1c
MD5 13a2b350e560cc3247f65d9c9dafbb21
SHA1 7bade65e1e5eb586739ea6fc95647188bd4d1f48
SHA512 b2af7bc342c2df77d8efde712302b885a586b995a0c858159aa8af782a866b5a5bd5b4da56643a4e0d5aebe4203d9c36e750ea60d9cbe91e4857fe998e94369f
SSDEEP 12288:xmblR+dJt1y0fUeibE+RMHpSnjJE2JDO3OVIEBP:xelc7weSEAbjqaDO+qEd
TLSH
T1B1942399130CA25C0B91325C18FA576CDCF26296F732CF6442A5D36EFB439E3887859E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001f

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_00001f
Size 302KB
SHA256 4b3e73a45d5176d06652aea80f20906c3adfc2bc173a3771de0bdccb678dd2b9
MD5 e6eb09d73f770431dfb2f86180221dfa
SHA1 07d92183f8073078ba8f6f54142a2e1319694c7a
SHA512 d283625f03e5c886578b27b8430ada8ef80f6ff297d5723a90a90d121d48c423a539edf48f4ce2c963c0e47ccda061e3cf29d87f7f995c4129c965889572e1e2
SSDEEP 6144:vkzjYQLXyRESZQE3An8yOyM9wVtGTAnBn6vdrVQyrqU+EN:sQNlQEQn1T2icdVQyrqNEN
TLSH
T1E26423ECEB0599BBC4DD11B0B10E751C669EDC27B638C77C6A543AEE38514368BEC908
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000020

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000020
Size 30KB
SHA256 dcfdac29cb18908a01e947409cc0b5d2675d7c1c178865ace5a8bbec931d39a7
MD5 aa33df19464e4d15506365c83dc442f0
SHA1 36f0b1697df951c02ea15255058e1effa7e9564e
SHA512 290e1ec17d5382bedb029129bc6891f5113216bdb191b20cf1154d896fcb75314b8aaa6a7ed7a440c754427ef320050457d2cc0f55a97b0042a2049b11391d17
SSDEEP 768:QhioH5tJOnYkCGveHCAOTKeGEYk5+yLGLkQX4:1ktgYaveiV1t95lQX4
TLSH
T1C9E2F1E759E0424ABE2B9AABF6761BE46203943F036296D9D8B40F011E1F6CC37D1374
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000021

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000021
Size 47KB
SHA256 9b1b9d7cb74a9923d83f36f0026f421940b861fd6e1a51b8f79af45492ed4ed5
MD5 e2d74c5e631bc53a7240bbfe4be99c8f
SHA1 eb513857bb01cc4f7249067fc7e969bef415fc90
SHA512 ce26a692dbae0d0a5a0ccda9d5e10b0bd135d104428beddee0edaf7da6961f9dbf27bae19130cfd11564f2acfdc414559bb8c918cfe459d7a7fae44abb5fe1b8
SSDEEP 768:XB5SYCg36D2GCHVDsCemwehTeQoAcJT7T7R+CAJ+PK3ZDK/4zJ9KDsg48rmBk1jm:XB7u2GApMwhTHoA2T7RLPKJ+AzJ9KVxG
TLSH
T17923F26B7522B9C814766679FB8331E814E7386844F93E114236B3AC752ADF7D3D8708
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000022

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_000022
Size 85KB
SHA256 52f092d3c4d4d89e52a1b9770fee7c4ce9dbc168ff50da041ba30e050a8d7081
MD5 e123418be68cd8eccbe45ff0ff3abb39
SHA1 8087db848f4277690022ff3fd64ea8bb6e5711f6
SHA512 c92eb2c3b97f4e7480c053a34e28034f01b11a26df4421dc743158ee07f46982f4fd59b869587c8c1f568b62823c88e11a97a5e1d442b72a44b6c191cd2a7dd2
SSDEEP 1536:DCcKGDMQs4rElvlVHRaI6lY1dVq4VOUxz4Yn7Kddiy8D6Q5VktNT4RVRfy4hy:DKGgd4rc3Hb6lYtq48Ux0Y7Kddiy8D6B
TLSH
T1F08302F87CE093516B1BA62A515E27444ECEEC4253C3A7FF1D71B00AB2AA7C7ED04489
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000c3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Cache\Cache_Data\f_0000c3
Size 21KB
SHA256 2b904ffaee28de0fc214b9f8a32c23003f736720a633b78b9ca8c7f5ac98a314
MD5 b506ba49f8206be847aec8a74b1ae7fd
SHA1 d626ffbeb9ccede1e2ed008c1c65c29a80843358
SHA512 7640c8c8ba89412397822ea9a2a39b20ba1b3f372af363792ba96c6efa6356d48d83d7444cae0fb53032719e43f3d6b1102df2db037587c08cd1363aedb929cf
SSDEEP 384:lUs98mdiTj4A9sSq1YNmb9PLS4vxic3prGpW9DwwOtEyWuvT/nf96pG:v8ToA9o+NmJZ3kWmfDTnEo
TLSH
T137A2CF33990A90E6E50247DB72EA901C353CD6A0CBABD7BD518F02C0DED963F525A877
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 730d192c793eb38aae41bda88b4514046b0b429b10602b130f4662dfbb08c334
MD5 b29316ebd030912597383efa90c00660
SHA1 c9334f44904fd1936eeae3def00414d7f93fdb71
SHA512 f30264c6a3bfed771cb4793fe4b466f47f0721ea3897455d4a39b55787cd04d4b182446bbf2ec4c7e3473e3bbd8efee41fd9932f7177d790a6279a0c8b657aaa
TLSH
T18541103855A90D6FCFAA8CB9AAD83D063F7658C9C06FEF536740ACB49B023A801C5C51
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 21KB
SHA256 3379b75f557b08674926dd343c3b5743fa42b27148d2edf4afcd13e089bf3b9f
MD5 1b0d545fa07c6b00b55875f10874a89f
SHA1 272e7ea769a233021f39b88ec7a40ff6d7d27024
SHA512 1cbb348fdacec48bb11957c9cb94cd6060ba8a4faa9ce9cfbcacc5d013853b216912aa979270fa67cdc087daf13d2b902f415f84c5f72f427f01a08f3e338db8
SSDEEP 384:D6QY9bil1WcJe2GVj++LKifsVipaIaft9zR+Vj8RMzN9aOfBLnZKrR5Cx6ohJikh:MgqScZ8fOr
TLSH
T1E3A28BF7C7E4C63D891265F4AA153E1FCE590925136C3C6AC9E8AF0B93F2871E14164E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 18KB
SHA256 848dd930d64ee92704c42527cc391c540a2ba0c2e37281da1c0360af5479ae7b
MD5 897adc1c8522d9037f4f7824d8a94e58
SHA1 83cf61958e4027909d1d6da9e64c5bae1f9256e9
SHA512 2653e59d4a22b491877c5dbee68e1901ad84f341ae3ff5937c4435ebbf77717be311a32d3ea3c0936f89d543e69198e4721e991a8ec91d442edef8462fe3fc17
SSDEEP 384:D6QY9bil1WcJe2GVj++LKiDaIaft9zR+Vj8RMzN9aOfBLnZKrR5Cx84KnK7ok4ka:sgqSRKOCa
TLSH
T1F7829AF7C7E8C63D891265F4AA153E1FCE590969135C3C6AC9E8AF0B93F2871D10168E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 2KB
SHA256 617ec1c745f5cf06685792090dbd64e1de61f294fca1dfd8a3bd593ff4ad41e5
MD5 d175f7b7ed0c70b827faf3325ad4fd9d
SHA1 1246e830f3f9c584f1e8593870cf650e6fe38e51
SHA512 094c0a38a46d810b7ac8281aec3ba7e16547c8fd8e238778d8b257b43d7546ffe6535bb7936f28fa076a0f00a5e1bfc26a918689ba6b34eb689e927522606cba
TLSH
T19751FD5BD77EB89B117C49A72E0C780725B6E47381C2A4F5DE6AC2ACB0C14F71B16072
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 b79400a40827b7c83a252ae3953bd105fcff84dc30abc9581f67d37365a14548
MD5 08264e22550e63a9424480e7cb28da2f
SHA1 493aa88b5f594edbdfdbffdc0fa4e352b7354d71
SHA512 d0da9ba02cbf17593da76cc61bef044a78ce9afc1a753e1dff0ed6e10f65347b6501541ade0cdeb03225a81158eb930df574438f3458f7282301c52c24aa6a09
SSDEEP 192:CRUYcBzStY9vS0XFdPv7CMpAPRp2fHYl93Hsb+WNDOVa4xm20beX2opJaLVyIsnH:CRUYmzStIzbHxUXpxw1v2v28aN8
TLSH
T1EA52C82EA924793B8CFBC319F961772BD7F5102161952D84EAFCCA2C04E76CD621B817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 fecc6d72c42a8f323f3c6ec72ff3568227abea4843b5357fa746ba4db9fd3e3a
MD5 512d4b6cb64e61d0bd2aad5b6e7aa6d2
SHA1 ee0b19b13334138d1801204c7e60c826ceb58815
SHA512 6d7114854a8c7be2bc7f16cf5c0bda8386e2f3b54fe2cfc7dc0743c4a3bb697ba53eb54d2e09d36d92349d88926873eccd7465a7bd6f3cafbd35db2d61841c6a
SSDEEP 192:CRUYcBzStY9vS0XFdBv7EMpAPRp2fH3l93Hsb+WNDOVa4xm2kbeX2opJaLVyIsnH:CRUYmzStIzbRrUXQxw1v2/28aN8
TLSH
T1BB52C92EAD24693B8CFBC319F961772BD7F5102161952D84EAFCCA2C04E76CD621B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 11147cca0a34455801f68162581bf705abdd79a61239fe4725959aa37cf43de2
MD5 d77121b426f33338a1cc070e246b791f
SHA1 cf41da34f8111bd621207ca2c0aa6b23b8970284
SHA512 20c2bc4ebc0f33fb17d42f6d3d1e1f30f358bfeb32e74e2154bf29cc27ea083397f24f6a2b758c82dda4f29faf7c5b0f153e4964b0ccb8a560d6923eb1b1ccae
SSDEEP 192:CRUYcBzStY9vS0XFguv7EMptPRpdfEll+blW93Hsb+WNmgiOVaR/k+xm2NbeX2od:CRUYmzStIzSKrHX2xwUG92E28ale
TLSH
T13462C76EA924697B8CFBC229F961772BD7F5202151D42D84EAFCCB2C04E76CD221B413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 15KB
SHA256 4a6d6dce228ecf81666c42a4daff814db7d2a9ff555bf537a9959c47b1ea68c6
MD5 b7f08e6e5c42bcf6c459e4057f8c59fe
SHA1 46b60fa677ea42be2e53d4c97ff70e2c9feac3d6
SHA512 632658c982e84aaa9ee9102a71356fa3475912c6d349a167cea3a9b008b01ccbf3caa9a54487c19ea6f8905aedc81e40c8eba19d2ccfb7ab8085dfcdc748a012
SSDEEP 192:CRUYcBzStY9vS0XFgev7EMptPRpdfEll+ckClW93Hsb+WNmo2diOVaRh++xm2ibl:CRUYmzStIzSarHXRxwxS92N28aIe
TLSH
T1AE62A66EA820697B8CFAD229F951B76BD7F5202191C42D84EAFCCE2C14D76CD220B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 9c430f8c17feb865c008f25efcb04058f5ca91ec3e589c4f1ad8c3f157cbd990
MD5 d8cfe36a6891342c51bc518f22217e71
SHA1 73290bff0114201260216b0cb931cd9bda0228c8
SHA512 7e9778e0fd6323fceb05d3cc91303d1d284a486f525d995ef288db3363d58c76ff756e8e5e9add87e5a95e7ffd83adb3cf949ed5b7444a047d33f0fd1fa9184a
SSDEEP 384:AmjUj7KxkXqKf/pUZNCgVLH2Hfgsl5x7pLuLcifuvXODUf+ErU3xeHGHHe7omBcw:AGUj7KxkXqKf/pUZNCgVLH2Hfgsfx7pH
TLSH
T15772EA677C4C9D3B0F94C68CD816BF4FADB6024B55ED886443FA982903D5ACB110A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 432e1327f44aca136fa650d717668eddd3d16fc53f78ba3344159232e1b26595
MD5 c1365f9b7c23dbd1d15285dad1fcbfcd
SHA1 5b1787fc1fec1be1495ecb0f6913b9b2f34464c9
SHA512 66d06ea762939ef04fa97cd1a4e09497d8d95bfd7871fd3152a9ce169a4cf5c737a70652d3d98c6313c3dbe85900e562b766f7ed731d73eb3106375029f0b445
TLSH
T1EAB01250C0016941C00702F5728A54A833189F10E705530163F46DB1A92659280142E0
MD5 SHA1 SHA512 TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\03bb55e4-c4a5-4d26-9873-a627d4b8b5d0\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 244B
SHA256 def48b82c9b31a6e7bdfaf50f629e1b6ede9a5044c0d592b9da24fe87b903b0a
MD5 6fc9acdb3dd0d291e46b74fb3a53c64e
SHA1 624c4c3d000da35c563b065bb52eafce619f50c2
SHA512 ffeaeb01f3515c7554d9cc66979c49d620979bbf05b2d39d94d6a27b7ff8d4bdcbdffbca54232ec6ecf60213e79e9fe5016a15ba2ac47404c665d56e761c95a4
TLSH
T1AAD0A7D796788D871A75AF9C6234B01D91178E19DC96CCE09808B19B1578503C407724
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 244B
SHA256 4d19ee0dc0cd23631335aaacc28f3ba773b398293c20a351be27712a25f1be6e
MD5 3ce0c1aa4e17182d2cef932aa6f7d215
SHA1 3d5448ea740b5dea31493980a79e32f476605f6e
SHA512 2a249844c43a1adf0f3fb02a413bb20edfad5ef1ef811466f8798b526b6c0591362a719233375c4e7614e37e12adeba20a8f71e4712a0bf03a1d2db1e1e26985
TLSH
T1A3D0A7E75B759D4B2E38AEE85134B41D915B4E18CC85CCD4D854B18E6174502C013A66
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 160B
SHA256 6a2d32c2b6f022e7de8d18c696d0a88be028e1fc6c98666b307ddae05b216310
MD5 aa24b58c7a42d8935fc0aa8ea2ed17b3
SHA1 f3d8d6d65b7762d2055d372bb81ae52ecdca8fb7
SHA512 1555b1e81484fcfaf2adf012a403f756651179038d7c59384b8639f995d340e9bac8c4506ecb8745b6d11e50e2b1a3f77388a0640d0e74c32c31b06d1ce035a4
TLSH
T1C5C08CE34A288A8B0E75AFEC2134F62DE10B460CCCC5CCE0A418408A11348538403A20
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe61fde7.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe61fde7.TMP
Size 167B
SHA256 975966e74ce7415f963cb7fe079175545d41d029efd6e02d118f51bc196685c2
MD5 7468865a7362e65562c72a51f65a69e8
SHA1 73a8ab0e993cc2e6d76948a30b2ef6a18cea5d91
SHA512 1769a8466cd506b56b53e9dd08b5c9641143f230d8bf7d14211f1b608b2c8c38b78b5c86f3f976801d97465e3b358fe903a5b7136ae9061747543f3f817fb0da
TLSH
T1CEC08CE34A284E870B726AE86134F22DE10B4E1CCCC4CCE0A808708A21348538402A20
MD5 SHA1 SHA512 TLSH

Submit Download

000005.ldb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\IndexedDB\indexeddb.leveldb\000005.ldb
Size 1KB
SHA256 bacddf3fe4431505c6e6a9d7f6dbb48c214f40f5ec513879767c9243c6999ab3
MD5 d5c287313af1d52113befe0677b1e42d
SHA1 32d170a887102b17a4c9ce7a1f68a72498d266ee
SHA512 4b5f1955651c4aed2f632736a7ec75e3ffb3f0248aadc9a6495e9a45d25d2d6ad3c91920c42ffc89a39d456de4701198e2c1da149462d52ce9e964ad030e166a
TLSH
T112219613A72C543AE4B20733E9F93BDA87F3B1093D255F8D192477A4241821CE1FA60A
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 5f9954de61dcc950ea61f0ac3789ceb4d358026ec159e5fd897bdca43cefd374
MD5 3a3a6ab5e90390a6f063cf27bf1d7d6c
SHA1 669da396256bd2db61c4308551407965e2cdabc3
SHA512 0f5547bdf24ad89c6b8913abe167fc2a512eb13f06db1724ecd97381a50254a361bd3127b5f2bfffba94abbf59811ed6f3ce5a324d65edf8e5d9cad4e48d66b0
SSDEEP 6144:Wov8V6Yjp1eD1nJV8EB3rOk0HOGm/SFyEEs:XkV6oGZH84rOjuGdF2s
TLSH
T1AF1412654E668892F63AA325324F3C06CE41538E11DE75E4F2AC37ADA2F93C41752E22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 c2dd3f01d6d91a5c30062a3f971dc631ea73bdbc043a89a84e1fc202dd56cdc5
MD5 13977b224c12ada85a12c81e2d01904f
SHA1 a181f84aa3b0cd0439f547770017d3853c8d0f78
SHA512 fe64c71e0025a1bb770783de7081ce70cebf9c0b20ea1b455d5184e584bdcb755e382f5bf36393368248e1b42fc0746f2509592abe4d5b257a5a5d160847232b
SSDEEP 6144:/ov8V6Yjp1eD1nJV8EB3rOk0HOGm/SFyEEs:wkV6oGZH84rOjuGdF2s
TLSH
T15E1412654E668892F63AA325324F3C06CD41538E11DE75E4F2AC37ADA2F93C41752E22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 93fa48872a50fed4fb226e84d96533051ceb0a8ce9dfa5ec20e4070f25c4ebef
MD5 1ca5d122700ac2a5353c2f1255c9916e
SHA1 8cd32f45f83b2ac32c8fa708b6a11644453d3644
SHA512 b4c12de0f053e4fa2cc1f9e42d790e3d48e7478b6519f26a63799476bc4a930e046da0af1bebe7f5dadae023ed4c30ba2e59423f6ddf453855e037ad99d75f3f
SSDEEP 1536:ip/9cYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YW:a93Qw/xLANk0mUW5GmRntSFCjEENL
TLSH
T1E49312BA4E2646E7997D4A8176AD7909CE12530D705FB9CC326C638C61D02C82F72F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 197KB
SHA256 d32772e5a17200693d23f8891685d179c4d8568f471daff82c3ae06865c9772b
MD5 1b499c5ff2adacf5ac9d7b3fb7c647e7
SHA1 df48c8bfb161be3fa6129115a55bec0b5b6ab8e8
SHA512 68d009448dcda67cdad8d01443017c3357b151639fd66b57aceca7a359fdda677df37620e551002b92c4c63c83b8d3686cd6ac53ae67f2493658d45ffab18c62
SSDEEP 6144:Qov8V6Yjp1eD1nJV8EB3rOk0HOGm/SFyEEs:FkV6oGZH84rOjuGdF2s
TLSH
T16B1412654E668892F63AA325324F3C06CE4153CE11DE75E4F2AC37ADA3F93C41752E22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 c79f856fec2636e2bdce8a81dabbd92f31d405aba99a68093e368bf62cd12c44
MD5 a16c6d00e254875d84a9137d3b57fb73
SHA1 bdff7321ea7c87b9a76a65449155ef5dce05e934
SHA512 f393c3ebae6e2498844745911b47a09d9fcf66377ca2c4ac2459c3092aacd4d02018dde85cc8f159deb0d3d3bb0cc1eb0d174080e9babbfcc28bf5d7ef9d3529
SSDEEP 6144:iov8V6Yjp1eD1nJV8EB3rOk0HOGm/SFyEEs:7kV6oGZH84rOjuGdF2s
TLSH
T1CA1412654E668892F63AA325324F3C06CD41538E11DE75E4F2AC37ADA2F93C41752E22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 5c543213d3875ab203a9f67b43dc86fcf8091195dac4c2ed768a1045d923950f
MD5 9173808a3da1569efdda62dcd93b8bc1
SHA1 258968548c09aec2b14c8c8d992a0d8dbff49665
SHA512 ba8783e7e0fa11feb93f9b43158529acb3113ed16d8baf65e3b5dff6476f696acc16a26316f6dd2c226049ec6d5d894c83f67661ac5f73a1ecfa6889409c9683
SSDEEP 6144:mjov8V6Yjp1eD1nJV8EB3rOk0HOGm/SFyEEs:5kV6oGZH84rOjuGdF2s
TLSH
T1BF1412754E268892E67AA329324E3C06CE9153CF518E74D8F2AC379DA2FD3C41B52D21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 199KB
SHA256 652b7d65257f8be4f114a51a59e0e31243569175e402c5ffb164cc3d50846a0f
MD5 185bddd66ac2192be1024852544ec0dc
SHA1 4ffd9dedbfec9857caea5e1e54dc929a5bdea079
SHA512 6e7d1fc0b143fa480082c4717894d9317fa57e0ca2f7bbd9e37c735493794d418cc9c7b290845f7b322d53261e54e988d9712dbb993fb43ee1216fb03f7d65ea
SSDEEP 6144:GUov8V6Yjp1eD1nJV8EB3rOk0HOGm/SFyEEs:MkV6oGZH84rOjuGdF2s
TLSH
T17C1412754E268892E67AA329324F3C06CD9153CF519E74D8F1AC379DA2FD3C41B52D21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 198KB
SHA256 482b0f7ba082cae13ab0904b784dc75fc4576d5cccc24a2f1bdd1938d50685fe
MD5 f7a977fc9bcae5d46663c2ff01285abc
SHA1 eddf61da723c72a47291002e57b1509b62e3be34
SHA512 a13470890549711ecb2544c00341c1822d2ed988aecdd58af41767ecbbc17b229d048422fce2e774d5bd789715da973b2e9224c36a1d3ba1284b605cbb469da3
SSDEEP 6144:3ov8V6Yjp1eD1nJV8EB3rOk0HOGm/SFyEEs:4kV6oGZH84rOjuGdF2s
TLSH
T1061412654E668892F63AA325324F3C06CE4153CE11DE75E4F2AC37ADA3F93C41752E22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0123434d-0114-4cf7-a3ed-b0583572a126.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0123434d-0114-4cf7-a3ed-b0583572a126.tmp
Size 37KB
SHA256 dad409297a0ad5dd5644f597c05b59adc9a3b49cec1f968f06996cc35480c167
MD5 b35e7659803360f030af93440a3e903a
SHA1 e358c26c3dcb5fdeaf323c699a4ae49364ca6800
SHA512 a2274095f699d2597371cda7e62490a63ac87606687fd07924b71864287fe7d5ee4bf5e0942151cedc2ce9ebbfc36457860d51f7a0e47ba9742b096d1b32b6b8
SSDEEP 384:nHiFIcXqnosa48TUNTUlIRDTw3/gbQ1gTxfDpEqMCzz4vOPSEM8GSYG9o5P4e0jG:CFaokwgi3h2xGlQuqSYo5P4e0jzK
TLSH
T19C036EF194D78DBBD49E87C7536EAD02A9B8C133B5484988B7E4692CEC8B4BFC305815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9dfa6aedebac0b2a7a6a4b7cf7a5385b714d5fbe36a5f334877adc4e59f7bed3
MD5 3c974a700ca35a09f8c2b49b1532d825
SHA1 c8bfc7bbffa5a8b16f303fb3855c7272f8cd2207
SHA512 d0f0c915c5c5723353ebb14545f03ebb586f6004eadf2c4989a392b096d18eb0d4d7b393ef79d0e5b3d4fcce239d92a12d86c978f01ea96a23a5eccc24d012f9
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7z:fwUQC5VwBIiElEd2K57P7z
TLSH
T1AAB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

autofill_bypass_cache_forms.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\autofill_bypass_cache_forms.json
Size 161B
SHA256 f7510e38f81f8a84027304070205dd55127e3233fdf011411465ede67b5b5d92
MD5 4b1a79b1996f03fb926a97912835c881
SHA1 ca43e23f7bbb4ff3839751f722df3c38ef7bd8a7
SHA512 c2e07a1b311ab71d94c7b874d645fe1114fdccfe4468875d6b23318fbe327481a60b2782af105b7546b3c1e6c3a7ec67261b21a0587f914cc7bf77c55f1f568e
TLSH
T1E5C08C07ABB804230B414E0B590DEFC9990476F6D5C146FEAB75A5A98A3C6B0005B74A
MD5 SHA1 SHA512 TLSH

Submit Download

edge_autofill_global_block_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\edge_autofill_global_block_list.json
Size 6KB
SHA256 7d3c45c8207ba69066516e51e10a2137bc4f1fce070a692e0c65225f9856e04c
MD5 5d4464dabc1289c3a010e14c05b92c57
SHA1 d2d185faca1cd13a6d42dea68803a9941074707d
SHA512 f93f4b58efc0127946ffa1b2950a1cf71da6f77a6ab4cf98ad8ada6a751d6261be4818ff8c64fe1f1d45467aa070e0823d15be36c8259c1044fb2d1289df9994
SSDEEP 192:C73stL7O9FnLk25+tF4B8K5b+QiGoztWuDpR6lFuftdHAa4/i:nwJ2r
TLSH
T133D16A2BA91C54B32A044839128E5BE47DDD73B6DD6008D6D650C0B9AEDFCB8203FDA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v1FieldTypes.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Autofill\4.0.1.32\v1FieldTypes.json
Size 509KB
SHA256 611e7995ab7599a0c89f98d6c6152a42aaedf7449748109a465bb5b0badd0af2
MD5 b1c140ef49f01eea089d3957da1a529f
SHA1 de64781f20aac98b4d2bbc497e3defa83b25aa8f
SHA512 02ddfcbaf9eaff793f251bd983394cf473b1340182ac1f3217cb7258ddfbd2de066ab08af16b47a378644bcc1871ad6ed8c641f6a053802c90e77f648e4f4be8
SSDEEP 1536:jlKS/dYt+dtxX9U2/W++dGcUooTHR6rF1azQmkEMUmxralqDAtyttVJAC5c8KrVx:B
TLSH
T148B48E2BF9F25C634D822A32053E18996A30615F5CEC6CD4BB3E211F4F2C1791E797A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crl-set

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CertificateRevocation\6498.2025.9.4\crl-set
Size 22KB
SHA256 6ddcaf50aaff98b960d067054ce2ce17872ac0719d02abbb7fe56b9eabc818f2
MD5 d01869348d5a783f61f90cbb27b82a78
SHA1 d4eccc91435adaf01f8589cf7f3589cf65425de2
SHA512 7ad7f27d1f559d1f50f1f009518ccca5d6d01696cd70657ad94c9fe37db7bbe06e4afc13170bc5c065cf72d69a92c3df78f637b7faa2f968bb89aa154fe371da
SSDEEP 384:2t71+UygzeWhU6yVS2Ddc0fp/9yYoIJgWUeJuDzeG0LOsr2h9ltQYX9hVPz/HG1y:m4OBwVPDdFhVyYoPWUiuXeG0K5dQYXFr
TLSH
T1B8A2BE9FAF48F112E211523D94245F40DD24D54A23996AB74F943F30ADAE42AAF3CC7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 90683947ca9dc7e152aac9078e0a08fa38c107818c74ba4adcfaf6a2722c26ac
MD5 a34d0db9a1369d24b467966bd8be94ba
SHA1 12b76879a9ec71944f4ccf1397b7443c26708635
SHA512 954405fb5277fbd9eb84f02236f6026a0dcd7a137428b38c606554278942dbb1efc4e8608581d9b7c3dcf4f2d7c340894ea99d0544c667129b703b8975514cf3
TLSH
T1C9D0A772E6999006D1960CF2115342912646819ABA8B8181F116840D8CA5A69A3D7242
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9d094dc4c409ef5e4dbd44528ce65d85d5ad5486373894c8e3b8fd05f0874277
MD5 b245f906f2226a770caae4d9b4a1b82a
SHA1 2defbac437463365d7f5a3c4849a91997d3f3a7e
SHA512 7468daf5512812bb4cada03cf0273607a044c93f0269eedac4ff42eb5af8b53807b330132c04b7108dc336d2f6022e5c72184074cdf7277c70a9d9ee01e1df44
TLSH
T12AD02362F798D84AC1C30CF7604143521693C19EBF8781C7E02A8C0DEC51DE8A3D7382
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 73d48486a2ed3ac1964deeefa12769292b81711d7bce10d1bf91efac86121ddf
MD5 d422bd59f6b50f724cfac2a7d6cafb3e
SHA1 6af8d8f4fd715cd8bdb20fa9bdc4d32754da0c73
SHA512 043a5fe15b617b49c47602068098d7a958e1f52a557a8429787a02d328ce312ac3b0b6d659753a7889fe0b677df433c54fe8f45db46cb56384377c14a3409d98
TLSH
T1FCD0A762FA98D84AC1C20CF7A05142522692819EAA8681C6A02A8C0DDC519E8A2D7382
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d084fddc35d62ab10457432373865714cd0577ad9bebe9188135998b9f802bd3
MD5 ff587c8337b9997eb40f19fb41bffd1a
SHA1 75e9be1412e32cbe6e960e041e872bbb48ab464e
SHA512 d50cc729f4f047045aba003643fd356cb1ac85c1d90f9ed992f787f682a862005a91103e9e388ad5cbd4f884c2668a35a0e5a0d011d0684ef2d6bc59a10b1701
TLSH
T15ED08089D5B15C35D1D78CF1154B37067915C577DF42532274633C3C8C435919546283
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6b65e3f6d57bee85b90392c47f2236ea7ffcfe9cba07ca29930764c7dacc0ea2
MD5 726476576ad538c648305e214c389ece
SHA1 03960d925aa07a6736b28a431ddf422fa8bba04d
SHA512 7b99250e71a507574a7ea1c326ff4f687cffd7e1a0eb1ba5aa847f5b5e0c5d997dbef37ede7c2815a11e03b25f291a4f19173dd0aa9d22472d224e9b1d6349a5
TLSH
T11ED0808995F15C35D5D78CF1154B37067915C577DF42932374633C3C8C435D19546283
MD5 SHA1 SHA512 TLSH

Submit Download

6c23aa3f-8404-401b-a2fa-3afe95973d0f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\6c23aa3f-8404-401b-a2fa-3afe95973d0f.tmp
Size 414B
SHA256 d1a15a6ab58d3694a7a4d40f33a1e29d189ed7b0c052bbb4d33470c00a62be5b
MD5 3906deb5b9c38fd9cb615003e40ab881
SHA1 7c1dfcfa0abfe4b06d136cb2963537248e78cbb3
SHA512 aed6dd2ba30a9e7bcb8b677e344cdcd54cb717c613e5b0ee92e258c5b9cc8d5ef3b8f554585f3d3c7de92403ad93301aa99f672023c494f4f0babb57f9efacf7
TLSH
T193E02BAAC831EC3B04FC0B58A0544ED5E74403572B41850F763D82098FB063741C28AC
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 57608e674eca13196f8d30415c45a2baf23538f2ac7f386a4c4858af1dc5563e
MD5 b36dcd5e1d7ebd90cfb1a9d5adf2debc
SHA1 99c06d2e3232d48e907427a428f8aa0af6f0016e
SHA512 34e4fb2fc9e2db2860f1735ab2e27dc16e4f64b4b1a91ea7ae07e9b289ebcca82319ce8eed7815c77dd486b3308d405982b60f5175cc5954c603244c6c05f56c
TLSH
T157E0208549C9C35DD31466C7837D430CC3D03F0F93C4AF4E6728C848308245462EF964
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_00008c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008c
Size 361KB
SHA256 02ff49f4431a46d64078b37db37186bd2f8c65655c9a81086ff174ead4486a18
MD5 10f1c35cb246fe221073a913340b48a8
SHA1 8101001026872a40a3653a4ece0da291b90458a5
SHA512 00031ac8af944b437463ef2027fa381873b6e08f68945248e58007a4ef7a5cec37adff6d14f67fcf7de2f5c85ffd1e723c1f1652d6a014eee66f84bdcaad2a6b
SSDEEP 6144:0OJ1vV2jDLDukAPWOlTbj19gCY/tqglNixzN4LtBDRPqyQK6+fWAyU+8tWncBl5y:0OJv2PLKkAPWATbj1ah/cgnAN4LtBDR8
TLSH
T14974236687ED80BD68F6890D1BCC7FA768CF928FF46EC8D9428E5185C408F7921B7611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000099

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
Size 26KB
SHA256 089a00c27213b2feedb90d7e446e8b5b65a77e4fbcc2567783281469150c2ed5
MD5 121badb0709b80c406d86ceb183fcda1
SHA1 36a6417ff43aa0485698e93bd7110b15a51e661b
SHA512 db0da5c890db465677fae31af68bac631c88eaef92f7247fe772db5551a6ba71a9ced0a76455a78de5ce67d2e684bdaecd5a4b499cb492e619fcffeaedba0fe8
SSDEEP 768:aeDcVhDXsR1GmtKmlLRFQWid+o3vz1r/d+wfECa9:5sh8G2KSLRF01r/d+KEd
TLSH
T197C2F15164B05C6900862A38713BA541B6587E078AD4C303AB9E9CCADF368D77FBCC8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_0000dc

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000dc
Size 39KB
SHA256 20b535fa80c8189e3b87d1803038389960203a886d502bc2ef1857affc2f38d2
MD5 9a01b69183a9604ab3a439e388b30501
SHA1 8ed1d59003d0dbe6360481017b44665153665fbe
SHA512 0e6795255b6eea00b5403fd7e3b904d52776d49ac63a31c2778361262883697943aedcb29feee85694ba6f19eaa34dddb9a5bfe7118f4a25b4757e92c331feca
SSDEEP 768:Vce3jkow68wmT4IBX0tXdlSirS61gSjcz0GPwHbP+w2jec56O:VcI/iEEEtXdFJj+0GPwHbP+w5rO
TLSH
T13703023A5E3CCF1A84157A703950F6D9A8481E548E9D143B4F1AC7BF085DDE2209B6D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000190

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000190
Size 27KB
SHA256 c83d6f5d9b61177a3a9497885f7f67121e8c72a48b956256fbc8c93d27984850
MD5 8283c146d72155a134980aceaf24f1f0
SHA1 20d8171534fb90736e9768c7f286d14156261a1d
SHA512 8bab6a762ef12e011bc212a00f484364c85d86117b077ae81e288e98eee96f2f785b0846db552178994dff86fd8e694969bf83eb13d0b00f694033919b36cca7
SSDEEP 768:6VVhT3pfN4JP/QRyOHg6+lehdWu1vFEupbcSM+g:6V3p14JPYRPHlgeLZ2/
TLSH
T158C2F20AEED1555CDD744D2C3E1CD4075926905C92A593182CABEAB0BBCBBBFC4918E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000198

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000198
Size 109KB
SHA256 82ade36518014e84d77a9b994166afe155b18f0a3bda7451ad2875acc5a77fe2
MD5 b434609c1c40090c13855af11e913eb4
SHA1 dabe4d12fae1a1dc29b1ced1e662a1c739530f38
SHA512 11bfc06840924e52f779514998c1fcf12dfefcfb0ccbfded610cbe7f62a7aad76ba435b859625099e7bcd7a2767f01864ff93bbfa007fee513d291a61c4964cd
SSDEEP 3072:hL4mcMHC5pM2roSFpTXf9YYuRgr/BMr3ee8pxLMHZ:F4kCZrHfPnz2rOHL0
TLSH
T1EEB312D23042A1B17C658FB9DE4A463BDD00C371D04EC758792EA2C6BA4FE095FA199F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 513ece0f2e6d69974d4e893acfc92c8e8bc9fa9c4314ca3e2d5946f961616580
MD5 52beea791124083b53f1f9d70b7b92d4
SHA1 dde28a0369997f7c960a568a023b2980e66ff1b8
SHA512 89a63fa2c78c5f8e7206e4f0c47840e8a2d947855f1de0dc01895336d7078e029949b06f6d36310b6bc47d28d8e1c7db9ec6cca59e6a695d2648db9906784107
SSDEEP 96:Gu8aT9ksPSUj/ate+iZ9pXOh30ie9jnC0rmP8ps8:Z8aTjPSeaQ+o9p+h30ieoZP8K8
TLSH
T111A1976570E1B25DE3E020BA9D9B00667BB083E8C697DD1A3AB4563EDFD1F6024B2D04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 9KB
SHA256 2dbe4cf6cf91c622751ff6fef03fc966fb8e12083f097a61ae35c755a022b5f6
MD5 51ac9849e58e650a2e0b285810008db5
SHA1 483250fedab9db5da15bb172cce3696556db504e
SHA512 a0a3c7cc3fc0d026bca919576887fdde2466fcf2e1e642c1c508eb5852060c26aa7851c8bf9237827dfa2f0263bb5fbf5f48b6fef3dad7faaf4587ad0eeba5ec
SSDEEP 192:jDs3LldJpEOjGAlYxKkulOofOvlpCxu0CiBd1E4:ns7XL/qAm1cOHpou0C01E4
TLSH
T11122FD3D61E17A5BDBE178B16CE7089236734399C18FCE0732B0653D9F92FA96866C04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 fb3285994c23a108e5b861ac53f41d30c16fc0abb1654aace2698038be165cc3
MD5 3badcd2ffad073cd8e6870ea1d800965
SHA1 80dbdf5a1064e9f7a7a24152a2de0521cdb47e3f
SHA512 1889e7d47c6d90ec0db5b654d1fcd5319c361d05883a0ca37e6c704ae8b2865df919c7997b6bb2b91db0e4ea2a0776db2f94d5ce72eea0e08e8347f1d4d0fe55
SSDEEP 96:vu8aT9ksPSUIV/ate+RZ9pp8Ohq0ie9jnCArmPzpsj:28aTjPSHaQ+39pJhq0ieodPzKj
TLSH
T109A1957570E1B25CE3E020B69D9B00A67BB083E9C697CD1636B4663EDFD1F6164A6D00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 12KB
SHA256 d64d4c3274d56ef5436cfed5172fe68d600f5a5c507a4734e438a521eac20190
MD5 d5e0bc1141bf33a225e93402a4d78710
SHA1 d70e17be4c032d5fda58116964114bb8f8c5a14f
SHA512 a4c343601ffbb77b6a30d1c08a222f84ff9ab78eed6a537d9ed4f120b6917a80025e854fb1e23a1002a0dd8f1bbe0e5d28fda090332389b0fd12154804a8087e
SSDEEP 192:fFixsTRRFoemOHH6laXLjnsbXxXau7AmhbDpNb0cSbGctIcqeg9U59:NixqDfmKaybEXxV7AmhbDpBaSS1qeOUD
TLSH
T1FA42403D60D97A5ADBE129F16E9708A33772438CD18BCE0A35B4553DFB93FA82462C14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58b35d.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b35d.TMP
Size 3KB
SHA256 b656a63e28829b5ec6e086b1aaaf11411c4dc1caa48427c73367758910420f58
MD5 0ce4699c62ecc45501a41772c0a873d3
SHA1 0a6342a1884fb787f27a8339b75aa06d0bde886a
SHA512 ed76651008cd6ebe0465fc7ba213fef6cdfcfecc18fe21bac52a94a50c52c67a1abd7eb93edc27ec498fb3334e41969d3909ef4a56c4683b295c4895c8fe972a
TLSH
T18561FB48B0E1B62DE3F071B26E9F14677FB587A907071E2A32F5113ECE96F216866C04
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_en.riotpixels.com_0.indexeddb.leveldb\MANIFEST-000001
Size 23B
SHA256 720a78803b84cbcc8eb204d5cf8ea6ee2f693be0ab2124ddf2b81455de02a3ed
MD5 3fd11ff447c1ee23538dc4d9724427a3
SHA1 1335e6f71cc4e3cf7025233523b4760f8893e9c9
SHA512 10a3bd3813014eb6f8c2993182e1fa382d745372f8921519e1d25f70d76f08640e84cb8d0b554ccd329a6b4e6de6872328650fefa91f98c3c0cfc204899ee824
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 7KB
SHA256 84911b6fb3e45c74980acae9591b3f72e77ffa92745c948141a953023f939a0e
MD5 b19f1f6e80b5aca01e25e61d050458f7
SHA1 c5f8f6a136caa930f4366d4dbe2135b45874bd9c
SHA512 9177bdd85895f6eed8e26e2097b31d41c63786b4264cd693ed351b6dba621ddc8a6cfa303355a68937abe0aa9d57a28b5ee1e76dc939e52f895df28adedb506c
SSDEEP 192:DW3F3td69h5V1vjwKWYFQaVaqYY7ziPdRIWNQXdGuZj6VmiGj44e9:DW3F3td69h5V1vjwKWYFQaVaqYY7ziP9
TLSH
T14AF179F783E5822DC91196F4D705AF1FCE2D1624432C397A88D4AE6BD3E2431E11676E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 9KB
SHA256 22d846eb11c78fb5e3b36ba3a9a0ff6262f90b06f831a4685563688621d7ebb4
MD5 400a7adf36ba0e51eeeb05557d7201ee
SHA1 dd03b28d0dcfeb1132461b89e2cb9134e1968900
SHA512 6bb1ba135241bb64e582e4d0f222be81bcb49b5ad4da967050281a87866b54c3b4779f9e4b7b944445f0192f4ea5d5b363bdb962c5ea3bb9a32790f735258873
SSDEEP 192:D+MMxXjUk3cqmpBaDrIwNVheOSYfzj6nGRwNaS83crzGNcFOR:D+MMxXjUk3cqmpBaDrIwNVheOSYfzGn6
TLSH
T13E22ABF7C7D9812DC91156F4A716BF1FCE2D0A24432C3C6A88D4AF5BA3E2471E21625E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 36KB
SHA256 88d61f5d01ce2b3cd4f5075f4aed190d4f8278aeed53e7e195ac07073174a508
MD5 708c2fc09fc04953393525b2a721d1c6
SHA1 606f63c3750dcc03a0c6f2d5743c08524b388f83
SHA512 485ae217d3b823a1c1930412728ca18808bb073d811ff63e114182b4f492d760f18a772ec8a4bf7cfdc5d6a578865ce7ef6792ffb4057103baaec62115e431d9
SSDEEP 384:DW3F3td69h5V1vjwKWYFVKUJTewFPmXDahmZRemYsqBecUJLVeM0OssNYnxZsl0j:T380kquHO+hqndOPB6D+a
TLSH
T15F03CFF787E9862DCD1161F0AB187E2FCE1D0556436C3C6A85D8AF4BA3E2471E241B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 33KB
SHA256 f2c7d49051d8c2f2c3d6fa8021192d5475a1eb54d94ae850124b2db70ea8c42f
MD5 63c6dc96ba343c3ad179beccf11d824c
SHA1 f760fcb5bdd343fd5385d2798917581793944b40
SHA512 6de0c17afb423670462b0def00acaf1937ff610b2cf16f34c9d89937ebb0c8708cc55d3fa36018effcaf6fb5a1dfc4ac890f027d81496c197df0855d57be44e4
SSDEEP 384:DW3F3td69h5V1vjwKWYFw/bJKeP2I5wurhCZNebdpLBeH7Je2ePnYftCjk1QsYP6:CFmDqaw/EkysQycgU
TLSH
T14FF2ADF7C7E9862EC91161F0AB147E1FCE1D0555436C3C6A89E8AF4BA3E2471E241B4E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 52ff374b587b92a0262fea508d664bfe36d994963a92efca68d0b9aa18da8985
MD5 c80624bb0de7762c6ae150c1c8d3ae7a
SHA1 d862b90d09af5f66afc6a5e3c6dfc82dc9538157
SHA512 2271459f9a5b883279aba573198c249cdfaefe639c5152af86e6742dcbc55320138b4dbba9d43dc75a60de1890d35872806db623c19a48aafc1617656787292c
TLSH
T16CD02233234070B5ADEC3EC250AEEC8FC7BA20314883D9D824F09C9E4D3687C4517294
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 3b1731b15331490af17e0a3c1eec7c2c5297861972223e18c6b9786c1027fc1a
MD5 e9a043b72146597b0d89b3d11c6396d6
SHA1 d5a1364d7176cad88faf2b868db1d9a485adcebc
SHA512 86902e1836a28c492e5a6456b87e187d313065f3f51a7305549b2a9f7a25d393135b72fc4c878496c07a31dbf4b10bf51864921e12a7de0d4329cb3ac2ef3ce3
TLSH
T106D02273230071B4A99D7ED690AEEC8FCB76207108839DD914F09C9D0D3A86D05175A0
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5eb757.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5eb757.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 5KB
SHA256 114d7b00b059a957ec769ce49a35fa22e0f4eff0c1956b36652b4d9d2a44c636
MD5 f4e9f09d773ffb3245ea0211ff297d30
SHA1 f0a16feb4be3621d455648376f5de0e2adeb3ab4
SHA512 28cdf967880b203724e07931f6f62165991251c23099f3f16afec8f4c6b5ebe7a1b2ebbc99687bc22ef2abcca3fa2fca82bc203dbf05999e3a9154cdfa804bd6
SSDEEP 96:j4UwQUrRUwWULieUFU1UfvVjQhUxURUG0U7mU/UTrUlKUalBU1RDUQzUUkTUMUfa:UUlUVU1UVUFU1UBQhUxURUG0UqU/UTrD
TLSH
T173B19DA3D2BFAC57117C5CBB1E1CF80719B9A87682C264F8DA66C1AC70855F34B16437
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 1128a11cb1277845320db852992e384c7495ab4aa95c4eda214c80eb1dbc187f
MD5 303ac17170054b73f1b85a23477d06a2
SHA1 fbbf7d909fe968863db4b07d268036f6085f19b4
SHA512 d934519c9e7ca9ac59d15efb6a8becc1d30a856a4d82dee820dfb0675d9d86c31e64ee5677e839aff2461c4fa5ec875a359bb7bcdb23214c4cad1a20fcd54808
SSDEEP 192:sxZ/zRXyM//K1Ml8Mk+O/feQsCM5SY8rgWUGYEIdp3fHyHW6+WNyPL/YJj8spIgc:sxZrVMf/fzsCB9rgWT4PyHbi/Gc
TLSH
T19952E8526A349D77CCDBD309F651BB63D6F5192292900E44AAFC9B1C04E6BED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 41KB
SHA256 575662b5125c404eaefb25e06c2ae45ec2e74e0cee6716017e35f93cf3130490
MD5 87c9a0bb9f8cb7ed8143ef0aeed7df98
SHA1 33a77ebf80b7056f7c9e8482cd4a392e48708e57
SHA512 f04a41ce8ae25316b8f451c63cea209454730abf5c2ccf83fae9efc16dbd215ad062cace20bb7c53ca693cc86deb794772718f964689216fe48c471a490d7765
SSDEEP 768:sZX6m4f/fkYQW4Mnc7WeT+pGrgv6JcFHbhs6vYb9VSCM:sX6m4MYQHMmWXW46Chs8CVDM
TLSH
T1CE13D747A420C9A7CAD39E29B43DBE36D6AC145696C4CED95AECCE0C00DD6FD6B03853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 4e13d51a8b69581986044cb240b5c07b5d9a27807d695df206234144415e2c0f
MD5 91fb2766ca0adb5299e032ba787357a3
SHA1 de3a83d57e3594549aa9b610f5360c1bf15ead1a
SHA512 51fbabd770d9928b81866b6d6ee71b76761373d1a540ad72f3cabc077b016c252b3a6d1d7b20ed7b4ea78eda73847feb805c9cc5df6be490d9817979d0043872
SSDEEP 192:sxZ/zRXyM//K1Ml8UQ0j+O/feQsLMASY8rgWUGYEIdpVfHyHW6+WNyNqZYMH8yXP:sxZrVqsf/fzsL09rgWT49yHbzZPWS
TLSH
T11D62F952AA345D77CCDBD31DB651BB63D6F5182392900E44AAFC9B1C00E6BED621382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 30KB
SHA256 f91a3d8978284282851c7187aba5c608a8acbcdb373fda6ee2156eea7e840df1
MD5 7cf91972d15ca1125e8e66ed9a95df8c
SHA1 b985c51bc06de5b6370b1186ac3dd81ebf6edd51
SHA512 7d8e2df83c27b5f1a9ef2909407e29428dda49314e6c4a2e679c2de386307c9538ce0606209ceba9b4a265e697460ab72bca6d32f9fbc30d5cda05efb0477e2b
SSDEEP 384:sxZrAqsf/fzsLa66s8qMpRiYnazAW8pZS15posJWeT+n9rgWT49yHbzZP2S:sznsf/fsa4Mnc7WeT+n9rgmGyHbVz
TLSH
T13ED21706A924C837DEC35E19B47D7E33DAAC04525285CEDA5AECCA1C019D6FDAB07827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 ee90569a960e11131b1381e8d6324c531e313089c237ebd1920b948d8c6f3476
MD5 6262541d71856cf0e3e53c6b2c60ca9b
SHA1 073a07ed48efe9035697fc04c1955508174dde07
SHA512 cc668535dcaef7535a0b56c447e0df2ba409df641e300c154fd1e49f62a06b2e5c28fc46e86402af27a5a3c37fd158b7c6217e35299de5e0a62d90126f33c859
SSDEEP 192:sxZ/zRXyM//K1Ml8M9+O/feQsLM5SY8rgWUGYEIdp3fHyHW6+WNyLoXYJb8spIgi:sxZrV1f/fzsLB9rgWT4PyHb9Xqi
TLSH
T10362E952AA345D77CCDBD309B641BB63D6F5193292900E44AAFC9B1C04E6BED221782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 38KB
SHA256 e60f7d4a89558a5fdf8c40802a90c820e37ea94bfa78ac5eaff0a1888b33a65d
MD5 ba1e27de4de1131d2444595f3fa49915
SHA1 04a2f13cca9f29f553d1b58c2ef067b6ab852857
SHA512 24104b322f29076bc0eeb3ab9bc38009192b4c50bb26245e413d3e0862a248ba764855783080f7b8eadc9937c527514dca2c339c37385194ba39f5e40c2eddf1
SSDEEP 768:sZnTm4f/fsa4Mnc7WeT+n9rgOUPuHbw7/a7TUGM:snTm40LMmWxJlBwTYUGM
TLSH
T1F103D653A520C9A78AC35E29B43CBE3796AC045296C5CEDA6AECCE0C00DD5FD7B07857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 40KB
SHA256 920066932719f35c8af4cf740f0f1eebfd75f06e8ad6644dc98d1f35007cfff9
MD5 9fd591a9292fd5362808c2a1a9a69a4e
SHA1 3a3237383eadca19257ce3b716fa1dbdf421489d
SHA512 8221c6bfff7d0380aa0a7f7a83a47b5cc9cf814d706e34655dbcf2570c1f8c22ca283db3ca2a0ccc82366a47c34fde213525b1b929eb6dd9453f9e6348cd6030
SSDEEP 768:sZn6m4f/f3Y1a4Mnc7WeT+n9rgZUTFHbwsAnaWoUPM:sn6m4fY1LMmWxJOawsiwUPM
TLSH
T1F503C757A420C9A7CAD35E29B43CBE3796AC145296C5CED96AECCE0C00DD6FD7B02853
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 41KB
SHA256 510285c2a570ccabc7c4fd10129e7c8511ca8eac6f78861703d503a27955b257
MD5 357142c338fd29aa1e1ed8b42704b2c5
SHA1 a40cacf348e0e4aa819f722b2321ab4a5dbcf0cb
SHA512 d578bbeab97cf9700d74e135b5d69227bc3cf0fa6d28c2affcf304ed1e4c118820eed4cebb97150913f9f89c4913e6968f3e7935beb8dd631264118d8570a3be
SSDEEP 768:sCX6m4f/fkYQW4Mnc7WeT+pGrgC6u8HbhttZYDV8YM:zX6m4MYQHMmWXWb6/htDkVnM
TLSH
T17D13C747A420C9A7CAD39E29B43CBE36D6AC145296C4CED95AECCE1C00DD6FD6B03857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 b6711c319117f169df54dcc57a3f93c01b584ec9082326107bb0ddeabdf816b6
MD5 c3830415e6d89abe1c505173338b6b33
SHA1 33651b2169d538b58b8ba4dc03ae0f97edba5e0f
SHA512 f268a024b8f793c9bfecab8a8d12e2e79a33d0d62de76aa0b67b2e588373f61e986be5f10392203f2787b4b727dc687b95fef98e6600416e73189b623d3d4815
SSDEEP 192:sxZ/zRXyM//K1Ml8UQ09+O/feQsLMASY8rgWUGYEIdpVfHyHW6+WNyNqZYMH8yXP:sxZrVqyf/fzsL09rgWT49yHbzZPWS
TLSH
T10A62F952AA345D77CCDBD31DB651BB63D6F5182392900E44AAFC9B1C00E6BED621382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 40KB
SHA256 f6a7d302971614e0f3408798cb653f7a2c513f653346df6a328358a612325d95
MD5 e9c2c281171801f9e7e8954de970a133
SHA1 0a31b0cf57d9b7d496ce47bb79daf38d0b8e9bd1
SHA512 4cc174ef7452b04d36011be273a3170d2ac9a20e37f55595dc104409634f45ebc0461f29fa10f209b7ecfbbff350f6343b69c4d6a6057b128a278e258166429d
SSDEEP 768:sZM6m4f/fkYQW4Mnc7WeT+p9rgXy6FHbhs6nYk+VmM:sM6m4MYQHMmWXJ2zhsISVmM
TLSH
T19413D847A520C9A7CAD39E29B43CBE36D6AC145296C4CED95AECCE0C00DD6FD6B03857
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 dfe59ac6c2c13f97ffe02b2c7572d5fac1c1dfdb7cada109a9747db06aac288e
MD5 431b053bb182ef9791464775c7cf2cfb
SHA1 8481391fc8fdeef44b741cf06ad2d4437169b7d0
SHA512 e0296fda5b108b7bc82cd2d8b0a7e23ca3b767ff57563fdae519e57221eb8482e1935b3f8c658309ada22d4489fe00e1ed560ccf563cc30c2b4b7ea43d239e94
SSDEEP 768:FKQv2Ai7pLuLneqWve+l+8F1+UoAYDCx9Tuqh0VfUC9xbog/OV6cnFLllnWhOroZ:FKQv2A6EneqWve+l+u1ja/cnFLfWhFxL
TLSH
T18DF20C3B6C0CCB7E4F804E9CEC2A7E8E6DE8018B96D8895447FA845C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 16741f9a1d9d9fb13ac2fa9eea94ac98d6a8321fb3959d722d73029e533d07b4
MD5 a176e3eef39dd8203427072f77ad8b53
SHA1 2c6f9ec2a642ae1a839a8f886e60915c0725fa22
SHA512 b99e3ab76f79fa15a66b820a4b4581174e748ddca24415ae5e6235d13b15e229ce8e9b933dd025f5955d4d3415b511408402bbabde95976ccee436d893806d85
SSDEEP 768:FASv2Ai7pLuLnYqWve+3+8F1+UoAYDCx9Tuqh0VfUC9xbog/OV6cNFLllnWdOrox:FASv2A6EnYqWve+3+u1ja/cNFLfWdFdD
TLSH
T1EDF20A3B6C0CCB7E4F804E9CEC2A6E8E6DE802CB9698895447F9485C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a8685028-8a71-4316-b2b9-e9c8eb46c656\index-dir\the-real-index
Size 2KB
SHA256 979537b010d8e57ce362b9cef3fe008636e7448ea687ffd63714efacd43d3e92
MD5 7f12008c95c3aba5309ae2a4b15f5c6a
SHA1 3ae42d6dec6326463f4f45099b0bd659901b10e9
SHA512 f1753741d1ed59ed742a87f88443ce5615944062eba1a9d56578545fd81fc8c30866d4392a5e03fe9fed57c8e97ba3bf88c7c02139e245093319f84f396a9288
TLSH
T17E41B45D9C8A8E23D97D41B158FA142D337458FE0A8847076CFCA639BC8B2991D9B318
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a8685028-8a71-4316-b2b9-e9c8eb46c656\index-dir\the-real-index
Size 3KB
SHA256 0872e4109ee2cb483eb6fd246335e431ee86bec3723529afbaec753bc0e2b082
MD5 bffbc6ac285f5eec772c2259a37dc1f6
SHA1 42e8509c5dcb5d762e580e5367c4d0ab9702f7f4
SHA512 771f7b68c735dd1ff1a638180c8bd3bfe493ee56c1dd85bea24189d3ebf428498b8c415883aff1272830302bb7f6b30ff70b20958a5a7b1639f4f9d9b3462a21
TLSH
T18751B78D9E475B6BD8AC45B319F304C1337809CD5B949A135CAD6179B88B32E1E0B359
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5cb1b4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\a8685028-8a71-4316-b2b9-e9c8eb46c656\index-dir\the-real-index~RFe5cb1b4.TMP
Size 2KB
SHA256 5f13a16b068c3848ef85274c95fb7ee1206077d43832c13d23a6bd9c26662150
MD5 dfaf72e78603b5b8d86371533680e1c8
SHA1 e807f4e18e6c4efbf8dfe2697a3592e6cfa19e44
SHA512 ea06bd5fef47ad0a938d3007a5b18c4aebe98a62117eb88de0f15df67f2ef1ae2f00e5ca8ea197a374b8068af59b5d8a4031c98448e53e88fd8ce6a765c2b05e
TLSH
T14D41955E9C864A36CD6184B249C9646D333AB8A54944AF0B34FC8B33ECC77AD3E53254
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 3a489c9f4afd70af497967d8b959da648515e8ecb8011203b9fd1274fe392073
MD5 795e9965f75138741dc70b8407892a83
SHA1 bc39410f023cafbdefd4fff339b0e5f273f8f0e8
SHA512 4e70c75fff70e0ceb3cf48df0b66756b3e897c6f9f16ab7197b3cf5f1a945cf0f153c626b9855bd1035a24cf18b89c38136e829a92193699df94d946af0063f6
TLSH
T153E0D8BB2CE31414EC9FD3D1283254A50149B8958951EC4E54AAA6D714F2640248AC22
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 0873dd0b689ee2b023492f8c9d694a3adc7e9260de166576006610b4c175bc90
MD5 4175f28ad4836204d05aa6550cff2db7
SHA1 e22ed6b61d2010dd7de800bc78b90d31ce626ab8
SHA512 2cb008fe21a1ade75c518788e4196c36989bc32faa4e918a5b0b64c66a6a76300a99d6d5e8a8fea993c41e00345bff20293962196fffa42d3c1f9b4ff769b465
TLSH
T157E0D8BB2CE71414ECAF93D5283164A50149F8558951EC4E54AAA6D714F2650248AC62
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 96B
SHA256 2ed8ba200ceb1f89e351ee4d7dace94d11af08ed3c76656f6fbca2770b870e82
MD5 13899c14edd69852043c45be70fdb024
SHA1 f43e70dedc08120597bd127998f8ed8f3ca664f9
SHA512 0bd507f88ef591dfdc5300c2df986624c3c2759f198b2111df35c75339eb2f6ad27d7ed009cd4b70971302128a0dcb2e2cb5ebae5dd56bf71a1c1c38beb60528
TLSH
T132B002565D2585D1C51413B990550489A169995D1B1A651140BC05544924544819A856
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 021391aaec327c19639d8365c709e2f496ac311905bb6a3039bf7db09af1c73a
MD5 2d30aa2c45d223b06e3e9455a871ea6e
SHA1 9aa44e0ec3e7681fb26a79cd412e126a9e924fc8
SHA512 9a2c1d4a80235b50b2d7d55e142e8b97749be2992b44017f972f198819e383f7ac8937b658bb3809b67eed52d3345a9d4ceb23194d175ac1d7765020f29f01fa
TLSH
T139A0022521A41445C00157709082518D32304C530607A21258E555958DA5389411B4C6
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5ed158.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5ed158.TMP
Size 48B
SHA256 a1ba5bc41e0a7b6486b0cfefe9ca2a7141b70449deb1a3a2235ef195140377a2
MD5 afe68251ef2133a655753d298cdf4a6f
SHA1 b7d506d88518aab87d543e56e554cd7b9ab70de4
SHA512 8a4f4b03d51720cf44441d6c6b35f8ccc65c1130c54ba3306b344973d9bc8fcc858a059cd320bca65b195cb852ba113252ee82a806eeb07e9c5b5c5da422b663
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 4ba3fe575962bb6494b4066d23b9b6b486c6ae2f5e5955fb546fdf8f3a6f286d
MD5 75117703b779553265e2a808f3122a95
SHA1 392ff9e969167ab104024965e00d343c0a9e2709
SHA512 7806ece59c81c0a99e08dc92bfcc758eb1246696cbb38b1f78736f79ceb26e8d56b2cf57d73a0d74f9a4d5b1e20b2aefd32a4ab07d2228325b9223fbe93ff6a2
TLSH
T18FA0045053443005D455C37450F557C03314DC110311434374F5C454CF553DCDD35C4C
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 7KB
SHA256 667bef3b2dbc60ee67d2b20e72c6944d28f1c5466c15d07e924d830e36c5261d
MD5 5a088a378e7cff07f2e32c08ecd1a40b
SHA1 4e2e880f2cb56d063c09784c7658989b24a119e8
SHA512 da8ae44d59d4cfeb0b89b24c13b315d82db36ecd0bf85817d2f107bdc017ae52518bf42f712c1acd11472946d93ef9441920e6eab3f8ba2bdebe89148e36618c
SSDEEP 96:KkE4Kh6C6gwK5yu2lmKmo55aKSoye/6KMAv8:SnH79H5Fp
TLSH
T116E17455303F16A13A3F298EA954B52F02C276633559E42B3BB900A54F2BE31DCFD8D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\dcaajljecejllikfgbhjdgeognacjkkp\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 86B
SHA256 429a859a7dba726aeca648094eb785a5194b8fd8dd8f9cfc27317b2a186c949e
MD5 0353d2fe8324be912cb6ac14c955d87d
SHA1 e22de95399e356c74f798eac0dcc90cea3743d5b
SHA512 feae614ab3016cf121e2ef47aa7f98c0800626721eea53eef3ad80a5ba4420da62556d920cfdd1ef5dd14198fd03c2df37d20aa319718646af7ae7382c8a825a
TLSH
T19FA001FB8A54999A0A61A9E86139B62EE08F829CCCD8DDF0840891D66269A621006A10
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 167B
SHA256 ce46250b22d8765bcaeb6d5d05daa8e2d513e152c6029a22e3cffadb543947b2
MD5 b77225511d2a66a173b8d511187d6481
SHA1 3a7671b19f7efe57d61ab3d12903c3c12280af51
SHA512 b1ffc3055c82b5eb2b21bfdbcf497b54ef23e214602b40d5a41982586d9935e39f4d0d8282fc988a511ddcfad63dec57252125531d707c6777789f4f8d963bd5
TLSH
T195C08CE3173009E30BB0A9F4983C758ED54FCE8CCCC8CCA4940971812034513841A634
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 167B
SHA256 306571dfb6b48b6c8891798718cdfd5716316063d8fc52e9de16517a1b111a86
MD5 b0c3140fa296c2827224449977df2629
SHA1 550271ce757347776e7c125f8d31e65e9235a8b6
SHA512 f4a9a09cd907fed6956e4221f8901c693d944f8b4653ffe0e75584499b15abfd110964cb52c5f28235782411507cc6c24424a2c64bd103a4bff3df421335859e
TLSH
T1D1C08CF787640A830B7199D81124B61DD20B9C1DCCC8CCE4C80AB18A227AA234409628
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 160B
SHA256 bbdb7612f2f3c5e7e8e8112b5024e99571b96207c36544e682767d1c5a7edfe1
MD5 a56f45c92f3210a0cb0a81f23f62e999
SHA1 97aa9b690e9e72c518f968027ae36b5090310581
SHA512 d5129490cdefd34e998183a6934a836e617a3dece20923445ff5e454dbdd610b5aee612324bfa01d97f44c656bd5a4ad575e1b50b130c5e12d59a7fc8933304e
TLSH
T197C08CF787649A870A70DEDC1124B62DD20B914CCCC8CCE488088086227AA220406628
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt
Size 244B
SHA256 103cbf5a75d8f3fd09a8d8ff9cda495a9464d969760b4412f5025ce418b90a50
MD5 1d4a3f8eb64d778f101aeba08310ab9e
SHA1 0884695b0044070426279e92249c8c93af6cf7f9
SHA512 832bbe330b443b04a9ee84afc1bb77071db36e23c87e3299c1d31f3acacc3d0acb81ceb22e306d830a3cb7d69ac69f70e84948ec756a3d5ab38d233c50470306
TLSH
T1C7D097FB83386C431270DA880124311CC31FFD08CC88CCC08C08B2AB32F9A02C806A38
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5e100b.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\CacheStorage\index.txt~RFe5e100b.TMP
Size 167B
SHA256 c7996dc681f43a0a1222a00593aa0f2e579b959f85eb28d17656d40675586f16
MD5 67838375d246a478b4988da30882682d
SHA1 53760bef8742f49fc8d5be43b135ea904ccd3c84
SHA512 0db8d1567b86ce636b7aebc27a0b53eac4e3fdeacf7482dcbd8a0a7d3f7066a1aa180e63d6e67031233cc5be7385c3a855030e19af4241cd9909eb7b424d0e2b
TLSH
T1D7C08CEB86704B8A87709AF85038712DE04B8E1DCCD4DCF0A008B2C62238523410AA22
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\3\IndexedDB\indexeddb.leveldb\000003.log
Size 339KB
SHA256 8076e166b4bdf51255717f0de03adde5b899af328300f236da24b1eacfffe1e2
MD5 51a3dff5b6984cd33ae92b149945083e
SHA1 876f4714619e19070cb2df5b34c90098d438a043
SHA512 47df9f8f0a07deabfc2d094f3618c17b835fc33c3fadce8cc0afd908caaa1d8625ec724d0b667c0453ce69c18dc6ae4bf4ae72df609b9715a8186ac6a567befa
SSDEEP 3072:7zG6jKEmfny9jFfBABf2DEfcfpfQjfgnf5Y5hUYfs5t/ucLQBcDaKvkhRgWS5ftC:qfifIfIfpfmfWf6S5fGZXF
TLSH
T15F74C820622324A0F53B03379A92EE4BC735CAD7D7116025BD72695C3AFB7882E5727D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

domain_actions.dll

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Domain Actions\3.0.0.18\domain_actions.dll
Size 83KB
SHA256 d35c8efcb710239f009633bcc5ae904ac6dafa985d451bedf791cf6909f014d4
MD5 956f610121cd5827fd5549097b79cd9f
SHA1 dbd23f99895a3a92fbe04c3c35d475a6f6998fd0
SHA512 3cc4712f64474497495d229ddd743c6bf25c30c3fbfca2525f46227d99a59a0f9e80e2119ffb40bc8a707b539f65f907e2e1565ea937e0387db47cf7269944e6
SSDEEP 1536:sNGnmI1FOxAdgxBf8paY3JQzQik428fKagFVbydki8yyafuzWk:sNG91FPgrfrPza428fIenya2Sk
TLSH
T16D83F180DF58411BF86F4835E0B269857A78E6B50FE092DF2376C9590E12FD1AF39705
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\EADPData Component\4.0.4.5\data.txt
Size 145KB
SHA256 8a4065abfc1647d1c28b75bf085aa56548564259e7397c4c69ac8897fe32dfe8
MD5 b0b20dbce9a6cb67e97955ab73f93e88
SHA1 0e7127af885c382f161187e7a024e807022ff099
SHA512 68530316e481625d6a5760791bde390e953fc3ee244211889d05148f54740335b096a2e0000c329a53e5c1be0dc9e5054146158d12dc72946c43508b66abdf4a
SSDEEP 3072:gPAgDcCHaLHl65aynyosxb3+B1xh0OrlwYElKb5ZPa:sX1aI5aZoKzMJ07NeZPa
TLSH
T194E3F120CDC51FE8CFAC252CA0BE0F0963D1C65DC42A668AD773FD4AAF9790496275C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5dd55370-6605-4865-918b-afa78a36e636.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\5dd55370-6605-4865-918b-afa78a36e636.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 f69896226737c54929afe82cef09624a16401c1b551ca2104e122bcce6343534
MD5 7c1af6870ecba6063a901d9bccfa56af
SHA1 84de4034922fe37805df3558a7e40480b7a8bfdb
SHA512 791d4abd0d34c4c426240e375d0ef0e209a7568503109136b2c3aab33f92ebef320b46e24d9725b6fb835f73e7f44c01bc185cf74229dfee3db4b89076b6ba2b
SSDEEP 192:uuK8Obt0tvXHKMg6sN6F6QU1R5/zT0PB3RQmiU19Tx4gDbF62RKBqMCzekHqS8lk:nWcXqn6sN6c53/gx7+gDEqMCHT8FZ1w
TLSH
T1B4827C72A8795C3B8AE71F49B04737239FF4A1AB87C52F94DAE45B0D04CB6DC1306826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 598a7681236c59fee327c70f9e38e36023daaefd72a3ae2cc213b36211927440
MD5 8d4ca97b8eed2e039fe0c4c60f6854c5
SHA1 dd595d34dfce3a8f0e43d8d08222d313ed2fb992
SHA512 a08221a8b3c56d51681705140a8b83671340bbaad16a6f1bc67bcca50334a9bbf47ea7a66ba0c95d5cde5e8808ad800128aa6fb021d44f1d10a383ed8a6da558
SSDEEP 384:nHiFscXqnvsNp8TUNTUlIlD53/gw7+gTDfVpEqMCtT8FZ1w:CFuv6wgz3RbVGluAzK
TLSH
T111D2B4F598D7893BD9AE0B87A33E6E529EBCD153B5881990FB841D4CCC861BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 554981d08efebd82cd6e923f403736e925b57bd1f11fb8a863875b182bd075b7
MD5 ba4f2cef12093a31c1de885fa7c7b640
SHA1 15a9ab847a22eb899de848e75b0af3bf0f9fffa0
SHA512 cc200037b6d4961604dc5ebbfbafe82368bd85ed75fe47f97f2c6dd1769fa90335b6be101b0cf3d86729a79de1d83933ef41faaf71d00c42298de106ccf365a3
SSDEEP 384:nHiFKcXqnfsNp8TUNTUlIlD53/ge7+gTDfVpEqMCtT8FZ1w:CFof6wgz3hbVGluAzK
TLSH
T1BFD2B4F598D7893BD9AE0B87A33E6E529EBCD153B5881990FB841D4CCC861BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 686fb4c5be4a656a016b73d15cbcf43afad024236ce72021924855b7e9c8a7be
MD5 d47da933bc52d3b0c9ed213665add977
SHA1 bb157aa5b443b47871001ea07232a4bce51b19df
SHA512 e1f4b63dffc37a990849cc95d9c3f5214a36e8fecfa9b23d6447e3034c748b3c506487d50c009cf9fbad92f2686b33e474b877eb70a99468a16a0a3ffaeb42be
SSDEEP 192:ZONA6IT0JZQmiUyAJOgibF62RKBFFujFU6:ZONA6B3bOgiE+JU6
TLSH
T14A02E875A868AC7F8EE3AE45B08B3B235FA4116FDAD52F84DAD45B1C00D728C1703836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 c490c47a6a96d7f3386fcb0f7ac273d5b194f9e529324e053b8dfbe5392fc9a7
MD5 5a34a6e1199706cd942170179c3a36fe
SHA1 0c565e5a45a0e6bc62fd4fdc962f00d59679191d
SHA512 37db85159cb4aa7e7b7c2be03ec19048a06b96f0d13e2a569e1320c332fc713fcd5511151dde31487a81b252cf97dde47645dd6b7e15d59c14911ca3cc5f3437
SSDEEP 384:neiFdcXqnh3sau8TUNTUlIRYTw3/gY01gTFfDpEqMCtSRPSS8f7O1KMzDFZ1r/xJ:1Fhh3ywgf3G2FGl0qSg1KMzDz1
TLSH
T10A0360F194D78CB6D89E87C7532DAD1269BCC133B5884998B7E4696DEC8B0BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 c96af1ffd14fafe6aa8e68a483c7777af8ce922035e908f376f8bc6f1ae48162
MD5 bd4b82ee26feb471a36dcd0377cb852e
SHA1 bf416829f583bb7bfe876952429328c03c461790
SHA512 2b92145d1f8e3a0ffd74a53dc676aa0d32ba5da81902830b6b5dc961fc4242c0dbf5703dd1e0a5704d2c212e49e137208fe01a86fd6950104a0d94a1f07fa25d
SSDEEP 384:neiFscXqnQsau8TUNTUlIRYTw3/gY11gTFfDpEqMCtCFZ1r/x/7IgD:1FuQywgf3n2FGl0Cz1
TLSH
T190E2B2F598D7883BD89E078BA33E2E529AFCC163B5884A94B7D44D4CCC821BFD706805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 6c107a61dc114be1ec89b71c20f82264ff4318d239549f04e7153e082b7bc5dd
MD5 3ad3c04e30c42879215373ed95c4832d
SHA1 107c343d5600ca42b2854cbd42c2e515704e2931
SHA512 064af283c302773e28c80fd1255a166b8ec0c7b69ec7b9dec850036ab8a44a18318a5d1c67b28d4f9a26510f7525bf7c7df66725d4206a54db6a9c2eb620f084
SSDEEP 384:nHiFrcXqnrsNC8TUNTUlIlP53/gx7+gTDf0pEqMCuT8FZ1w:CFzrPwgj3Ob0GlPAzK
TLSH
T19FD2B4F598D7893BD9AE0B87A33E6E529EBCD153B5881990BBC45D4CCC861BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 32KB
SHA256 401f8bd24e4a6e83f1e49d15544284a4d2f047b409327c4b228e9da0a5a81adf
MD5 75b3dff1f3ba8a29b699b9e0e9d36380
SHA1 9b00e7236710ec6163f489f5d043f84ffe390a78
SHA512 e4f6f66b304b8ca35953bd11209a43f6c1cc3623d83801a0e7d23aeffd846d05216a5da2afe40c6ad821f13249c37aafd8be1e48c31fa7b7f50453d86e1a3058
SSDEEP 384:nkiFdcXqnh3sa08TUNTUlIRYTw3/gYC1gTFfDpEnbDtA609S5uZ1r/x/7IgD:/Fhh3Qwgf382FGnfK609SS1
TLSH
T19EE2C4F198D78977D89E47C7633E6E02A9BCC163B6885994B7E85D0CDC8A1BFC306811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 b70e2f35ba86f9ea2944f37b4ef327f6321dad6a8f920e4eb251677ee5997269
MD5 96f4690e33bf8f0ccffd86594bfe0821
SHA1 bdd3ab4ffaa4a02c54aaeddc3ea11a3aa6ad59e6
SHA512 62bb44e803eb83e82fcf8e3755c4f697fd95285213ef6455c00e17220397c57e9adca6f917134b34fd8a0a8564146d96aaa1ec682848f775a41fdac527184971
SSDEEP 192:3OND6IT0hQmiUyDJ6gibF62RKBqMCuh1HqS8U6:3OND6H+6giEqMCAT8U6
TLSH
T1CA12FA71A868AC6B8EE3AE55F08737239FE0516BDBC56F94DAD44B1D04C769C2306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 c5db145a38bda652e04c4ec9137658cf58f20b2621c4fdae5a2c17d05c7f01ea
MD5 472b8e42a147571e1b6ab12285e84198
SHA1 7569223df4d40e92f7bb430964a877f918a0db0a
SHA512 0b485eaf5143704db4c3abf45508719507a4d94c98c295795c58847880c0bf6e6a0470714bdcc3ba8d8952a4f079b1cd19aaec23c251c5c1a7c21f0a26c2921f
SSDEEP 192:uur8Obt0tvXHKMg6sN6Q6QU1R5/zT0PB3RQmiU19Tx4gDbF62RKBqMCzekHqS8lk:nZcXqn6sN6P53/gx7+gDEqMCHT8FZ1w
TLSH
T1E8826C72A8795C2B8AE71F49B04737239FF4A1AB87C52F94DAE45B0D04CB6DC1306926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 30KB
SHA256 83853edc870a01faf2fb80f287ed90167cc4c7d718942980976fc612e4d1d9ca
MD5 6fe828f0c8373f6b92fd5173ba13c13e
SHA1 b1fa59b4d801e0a76e460ca66f52c877561673e6
SHA512 7bcc9e844c6be4b3f37e214573b0194a74f16755d5a62b045639a1fa9f936991f7e1204a57923289826e9830e33c8761bdb98f9a6969fe0f9e5c16c2b0a855af
SSDEEP 384:nyiFscXqnQsak8TUNTUlIRYTw3/gYB1gTxfDpEqMCnyCFZ1r/x/7IgD:5FuQIwgf3r2xGlPCz1
TLSH
T147E2B2F598D7893BD89E4787A33E2E529AFCC1A3B5885A84B7C44D4CCC821BFD306805
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 779f7a6d89677e062370f0a2abf33f60620221598a4283ece8688299bbbaa8d5
MD5 d94c9683903d51a623281b1d7e3fbb40
SHA1 ee11c40a01c2153370657e6f8c90825f044c8e9f
SHA512 9070aa965def69a28ca4c1f18963949cd09d5cf18126e8ec6c9c4a67653c4db856ca9abdd8fed6f0d83ab434d1eefd7e51fa351848acc638afb751d9e09df1df
TLSH
T1DCE00842A78584DBC025033A41935F657AE7952553B2421A9F2445782D233096E286C1
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 2fc8bfd72b2c7f74cd7664ce209940b92a7c3b7d8bcd4693b4be3792c731a90a
MD5 9d41d0b75c8da298362615d606e4dbeb
SHA1 6b14040ca166a327fb7444cce3a4d1ad8b660a37
SHA512 eb52dc706c3abcb505b335564f9b85d2a9f670012cb474ca86e71a133ce5c9c7c352c292d3d11a8260a578289199c26f03a7968a877f0821ab7051885dce006a
TLSH
T180E00942970048DBC028033A01C3AF213EF2913043731206AB34467C5C337007E28780
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f28c3caf5db11c804b5cda2addc3a249e780359376b3d3ecf41fa06d471f59b9
MD5 0318f452de0256fd9de9959b8bd71552
SHA1 190aebdf30e72de0d8daa0cf59f69d42d53f5fbc
SHA512 ca6f30d271eb3c524162efab6f0de442752d281807cd083a0608f6d1b0418927cf31cbc1d15654bcce3dec7b1314b7a9edf6a8a51291cbe7b7d3461ff22b6996
TLSH
T137E00202E74184D7C014033501D35F193EF39132537301069F2445782D233057E287C0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 422c3d7c26632742e23c99d7c5c298f9ee0614230735510653e95e0b2fcf5102
MD5 c189e53fea904a8743e4c63a6964ce5a
SHA1 178ec5722e54f404a7049779b90aef89baa659a3
SHA512 046d28995296740ffc593a64b4c7e509f815e79bcb67879d9b96ec55c85362a393a71035c7b6f93b8b3d353e5535855a9b4d24b115e648a022162f416b9edc47
TLSH
T13AE00802E74184D7C024033501D35F293EE3912253B202069F2545782D233057E286C0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d90ccae3bd484c191c91f7efaf00ef34a3360b12f7767affc53f38355594dcfa
MD5 7a14dba0638ffcd8802501dcac8e74a5
SHA1 e0c42109ff3be76984ed30dbe648c4748a5b1f42
SHA512 94385b4a48ffb8c968be29f6d89d5f4242a8890415825f54014e05745a8209289e4e83bf1b1b2edb1ec68536c70a9f79ebe2387386cd28818719225d3d86413e
TLSH
T130E04803E38A80DBC028033A01835F2A7EF3913603B2021A9F3846382D333056F28AC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 6cfae0b28a05239086940855c39f2fcd1e106b530586315b79fd51d83fa3dd53
MD5 d96660bbb776e8d5875c9a4f8add41c9
SHA1 5aa05bccac3b249ceaad8a4cd5be3b3fb6eb159e
SHA512 7f7dde629c92b4bff2fa50df30a2904f64ef74cc46290aa23105a566cf0bd3d3e2f41490bdd14a88a3d7d66dff92d0dd376c4d951c5655583ae3c3ff7f26ff8d
MD5 SHA1 SHA512

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 d780400f7435fe44ac2b607edc3318681f7bd0b24606183a9014dc1ad0de347a
MD5 0f3ab12dd7f56fd20cb2658ac983eb5b
SHA1 61e8ad7975cb4f788d7f824aa507fddd48cb3299
SHA512 04e133517b892a7d659f9a62abdcf033d4317e8e2e5bee47662f8f86bce468a98995ac548e8e676d5037785e77f766153cd19588feccc17ff4069a300dbd52d9
TLSH
T128E00102970044CBC024033901C3AF213EF2913043330206AB34467C2C333007E18280
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5e10b7.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5e10b7.TMP
Size 392B
SHA256 535372e72eff12eca134c9b66acf206a7be0e3c2acec236934af02e9df1a0c6c
MD5 62e905cb07125b54d763721c67f502aa
SHA1 b2182442210ac61cfb801968ba17f1217ac1b986
SHA512 2082289d7a3d2b0f1d24a9950b2495f41370c57d7c955de2d2f7544fca108adf751b9ddac9654d124db2df9acbd05b88908da43e8448c8017485ccf01ed800c2
MD5 SHA1 SHA512

Submit Download

safety_tips.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\safety_tips.pb
Size 163KB
SHA256 854b7eb22303ec3c920966732bc29f58140a82e1101dffe2702252af0f185666
MD5 bd6846ffa7f4cf897b5323e4a5dcd551
SHA1 a6596cdc8de199492791faa39ce6096cf39295cd
SHA512 aa19b278f7211ffaf16b14b59d509ce6b80708e2bb5af87d98848747de4cba13b6626135dd3ec7aabd51b4c2cfb46ed96800a520d2dae8af8105054b6cd40e0b
SSDEEP 3072:K1W97njdmeMAYV2ig7ARGHNxmfltItcGJ97WgbT:K1WVZyArBmbI+IfX
TLSH
T1F7F33B49F85703A06F1780C98FAD62972504B2F47395CDDFB3BFB6A5AD40C9B10990BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

typosquatting_list.pb

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\SafetyTips\3057\typosquatting_list.pb
Size 3KB
SHA256 3ad368c74c9bb5da4d4750866f16d361b0675a6b6dc4e06e2edd72488663450e
MD5 17c10dbe88d84b9309e6d151923ce116
SHA1 9ad2553c061ddcc07e6f66ce4f9e30290c056bdf
SHA512 ad8ed3797941c9cad21ae2af03b77ce06a23931d9c059fe880935e2b07c08f85fc628e39873fb352c07714b4e44328799b264f4adb3513975add4e6b67e4a63c
TLSH
T1895130C109286CC63CD599E71D55BA08B61B0DE846F9C3C2CC7E80894F4548362BADFD
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 07104b8d1073106b589fb94a8240151e5d65a23b69b64d726567d82a906ab0b1
MD5 3209aa2e0642fc3da4bd23652bba9165
SHA1 69eb52c52001019f5d6785ac270da793cdd09be1
SHA512 5363ce57058b3584b1e3651d6464ded90bb215d850bfee380e6c44c880d3b7b74e2b8732c34c26fd3835e2797c2168d3fc183aaaa13b309ce546c89fba1f5132
SSDEEP 3:MsEllllkEthXllkl2zEjlwU1Dt:/M/xT02zBU1h
TLSH
T11E4402166BD05505C54022708015835013A0D41045129B836A5194225DC55445C00980
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 1ebd85ec26ed4be6be1703036ae2e7780b8b941d2e6ac06529e066bc2f21d6dd
MD5 a515afe19bae292380da55d9bde6aada
SHA1 3174c994cc2c3e578183128295e713daf1ba9d05
SHA512 dfe9949a29b004fd1213e63bbc9355e4473892632964db847523dbca85449fcb45df139a79b461ac93e9ccadecbeb18777a58ac9055da4f2ced496b4590c43a0
TLSH
T1941112E15D7E25C1D0BE0D6FE44B29FC90DCC306F89874392858FE98923E51A15418BF
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
MD5 bf165c172af1f75083dd4c7e8915ad0e
SHA1 2eb27e18672fd0a1816ab00d00078a570eb62711
SHA512 a58ad7ee2e18750242b9c5d53224218bef54ecd50e067170da12510559c455979fb0523044d4c23d5d5a523562165e471f95d939376df623bfdea9228ca25256
TLSH
T181F09ED29D7E36C0D6E50F6ED44B64FC40D89506F05CB579484CEAD8913950B254287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
MD5 a15cd0a1e68c6b9c3945d3192091dc4a
SHA1 5162188f19a245162594501e5febb31a7626aeb4
SHA512 a7ec103cf7c6fa801e1850205c4c06cadf96c21b1fd56db058a2980c472b1ff2f25c69a73f943de8dff815d69217995ad880e85ca7b8ced8cfa1c506315f7368
TLSH
T18DF0ACD29D7E35C2D5AA0F2ED44B25EC54D89606F49CB57A484CEAD4913940F248287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 69e827e68d7ed2491538f606b72d82ed1532613bdb94ebf44ad131eee0221f11
MD5 63038817a908b9f9013ae8dc115e4139
SHA1 56b1d053903cd13e20fabba784e45f6428a2f5c2
SHA512 f5817ff5f9d4043eeb3c83b46ee334e0983c6656fc1450bca6c17cc9a8bc8f0a0d81ab32075171457ce9421a88226f7d5f433a4754e5f349da57d64f9f335dc1
TLSH
T11121F0E19D7D29D1D0BE0DAFE44B28FC90ECC312F898743D6858EE98963A51E154087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 972B
SHA256 26c783d7fd9f97ac7e7d14d1f61d25a4e1db3c454dd364673563e93a590a14ef
MD5 3411bae74661d36d999f043bbca85fd9
SHA1 69d1e82861941441007c5c67bc06a4448c8a83ca
SHA512 9185edd80b749585655f3dff61c939a8ddb26d708522557bd0889ccb549f6cdcb35e65345234957a04244c06b6c655650b98c57e7a4cb27030cfc1d597b5dd65
TLSH
T1ED11EDE25D6E29D2D0AE0E6FE48729FD90E8D206F49870391848EE98923D11A154187F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 852B
SHA256 a7a3e890b6a73c301b6704fab81ee7e879258be87ae177326e854f67efe9734d
MD5 ca13221b8bc825e6d34595a687e4c089
SHA1 5f5ba9d2d7aace74148be5ae3f6737be89e90a92
SHA512 565d9c955656f9b329c85896143ace80be7d3f61a9e2f202a794d8fe624f9662b212acb61bdf2f5fb980d6c2269ab02f87d087d854fc5fd2c332127b02950b90
TLSH
T1EE01CED25E7E25C2D1AE0E2ED84739FD90E8D706F4ACB0391848EE94923950F15418BF
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 386f2fd5afc771f2bea65823eba7fe730434b9865786746aa7d42d960eca09fa
MD5 8109e9540391b2a09145b9e02a5d1933
SHA1 e178c26cf837e7b70c82404fc53abc39a0f6bfbd
SHA512 59d5f0eb7e437f51729cae5d3e26c747958497194af03bce0b6c045327d56a0ec82b9799209494fb705c62b9cc5269fe9a7a79aa2d232615c398184f4ff983cf
TLSH
T15621DFE15D6E29C1D0BE0DAFA84B29EC90E89315F49874396858ED98923911E158087F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 d84735be9be4349cc8869368ae57a8eeb8bf28587af3d8a0c0ab99cde6d4927b
MD5 b188be0dafc476875151dfecdeba292c
SHA1 91305dbd083bf7fdc8a129daff9c5b45d9072595
SHA512 8e0f056d3de1070911b2eea823df1d4dffc14724a2a7939e6256707fa5aa2499c2e3c14b558b06273628b2b2b093f11e04a16f0d1e9671a7d1879422e64c8b1a
TLSH
T19F41F85CA6E91108B3B76F569BF7A86E487BBD772F07C1AD10110E4E4A62B00C8A1733
MD5 SHA1 SHA512 TLSH

Submit Download

AppCache134220837063589341.txt

Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.Search_cw5n1h2txyewy\LocalState\DeviceSearchCache\AppCache134220837063589341.txt
Size 80KB
SHA256 bf0f77e1e0860b7184126a14b9117d602b9061b48006c21e1f3823ba4560cab6
MD5 3aee5f0551611f875e3e5ec6a5d1c6cd
SHA1 d53b8d35e5a826d30b386c0a92b355f62bc04520
SHA512 bcf1d5dc51b78445e9e726e7f9d26ee7bde9ec751f91d683ae94adc34595be7eeea85897df4ea800212b9c2a36261e74f63060ef5322fbb850b8116c1a49e986
SSDEEP 384:i/v8/n5U/ymL/aNU/gT2/Hl/M1/h8r/hJ/Zk/Ey/eX/MA/NV/CzS/1o/Yd/er/iY:vYGzozZRUV1D
TLSH
T17383B4A53281CBF3313966A0BCD9E435E13926B1E0A88F4561FA9617FC5ADDC62313D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

51bcc271-8738-4151-a988-218dee0aad36.tmp

Path C:\Users\Admin\AppData\Local\Temp\51bcc271-8738-4151-a988-218dee0aad36.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

c074b7cd-cec4-4440-beaf-4cc3345efc98.tmp

Path C:\Users\Admin\AppData\Local\Temp\c074b7cd-cec4-4440-beaf-4cc3345efc98.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BASS.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\BASS.dll
Size 103KB
SHA256 df9f56c4da160101567b0526845228ee481ee7d2f98391696fa27fe41f8acf15
MD5 8005750ec63eb5292884ad6183ae2e77
SHA1 c83e31655e271cd9ef5bff62b10f8d51eb3ebf29
SHA512 febbc6374e9a5c7c9029ccbff2c0ecf448d76927c8d720a4eae513b345d2a3f6de8cf774ae40dcd335af59537666e83ce994ec0adc8b9e8ab4575415e3c3e206
SSDEEP 3072:75yP416sLgrTWiKc0rUH9rRq/SJIJmECqc2QOeH:czsMH0Yl2QE3zY
TLSH
T193A301CA68D54913E28B2D73B59B61EA63D8A3C4DB63DFD11E0A030A76FA5D406B3304
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CLS-MSC.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\CLS-MSC.dll
Size 334KB
SHA256 6d3d6b0ff25fd2ac2c8d478b068af55cb053d9b2c08c53964d6559c7c8b8047d
MD5 67a3a34ecafc68afdf05f71657ee0009
SHA1 2ed842e3244992dc2d5d36e5c481d048f433329a
SHA512 a673ff2c79d59cc2c02ffc79269bf4ea019a19f5b7766f375ccb4d5cda68335ea1f36c4875ebaa0f390f1abb37494cb13c075359a1735982621c61e42f34e3af
SSDEEP 6144:vsh4MeMBtdQg19DA+G5lskemd4n/NIM61O+VNk:k2nM1bk/LnO/NIM61O+k
TLSH
T11074D017FAD24C72C1C22A350839A6369A7EBF480B1F45F1E7CA9D58BD2DE803559393
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CLS-srep.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\CLS-srep.dll
Size 15KB
SHA256 39c965edc8f577695dadd68d6d40ace4e1e17625ca4669e3f1321b6b26e470c7
MD5 bcd4ebd26140038f1e45ba5c639d9ad4
SHA1 315a5e4f3bc5472dea5375a986dd6f6fb35b2f17
SHA512 4d9d88f8062288f3586dabd95baad19ab3fcfe22cbf28f60f051d73f9158d2d697951b86dbd8094345d70ff494c3a2a4233b3cac7975e06c2355390fe93021cc
SSDEEP 192:QwLOr/f8IfoIORXVcvEK42iG1Ane6cp0c5gJBG5LXYd5q4GEu2/:VKrqpVw7VieAJ45LXYd5q4GF0
TLSH
T1DA6294D61FB540A1C04166B0792E6A37AF39685EF3CE076A97028524C23B95CBE1DFCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CLS.ini

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\CLS.ini
Size 1KB
SHA256 c2e8c4e1aa2a6ccffbd7e635bd2b16d180ce1a6d0d8413a89fc9aaedd1f65bdf
MD5 d8165e18fd3d794601b4c82757ca9689
SHA1 1760a3a46467fa334954b103575bb875154237ae
SHA512 8c4277bc950ad3e6d166df4922cc45a57b75121564a71b6e3ff597076acac18df82a18bff37ddf38a7b8a8d9108784bac59d0a80ff7a15c7cbab6da5162ba60a
TLSH
T1DF11511429AE45A92211006338E27D1D4C79CF74C519FE2D33A714FF25D997AA0BF2F6
MD5 SHA1 SHA512 TLSH

Submit Download

CallbackCtrl.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\CallbackCtrl.dll
Size 4KB
SHA256 68f42a7823ed7ee88a5c59020ac52d4bbcadf1036611e96e470d986c8faa172d
MD5 f07e819ba2e46a897cfabf816d7557b2
SHA1 8d5fd0a741dd3fd84650e40dd3928ae1f15323cc
SHA512 7ed26d41ead2ace0b5379639474d319af9a3e4ed2dd9795c018f8c5b9b533fd36bfc1713a1f871789bf14884d186fd0559939de511dde24673b0515165d405af
TLSH
T1F281BB43B3F81059F5B75BB07EE39B8729BAFD315E39C61E0A50011A2830A55AD36B33
MD5 SHA1 SHA512 TLSH

Submit Download

FlushFileCache.exe

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\FlushFileCache.exe
Size 29KB
SHA256 a4cc6683393795f7b84d0b49eea2d7d7fbe1392bb7612cf39896af6832ffe0b8
MD5 df77f2b6126f4f258f2e952b53b22879
SHA1 fedda8401ebfe872dd081538deec58965e82f675
SHA512 623c5a2b3382b610bf2a2812db94ea77e52051f307fd1ba7767927719277a7d99e844f9286a52549f888ad818c4d4d09759c031a8ab6dbc58911257987028a37
SSDEEP 768:kd82J2m8FCija+1I9ETzJHI6JeLzT3O1:kd82J25TzJHI6JeLz
TLSH
T18FD25A9282D1C0FDE762C5714F389411E97B3A31153196BE3AED55DE4E98760AB0C3CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ISDone.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\ISDone.dll
Size 380KB
SHA256 c652b4b564b3c85c399155cbb45c6fb5a9f56f074e566bfd20f01da6e0412c74
MD5 63dc27b7bc65243efaa59a9797a140ba
SHA1 22f893aefcebecc9376e2122a3321befa22cdd73
SHA512 3df72dc171baa4698dfd0c324a96dde79eb1c8909f2ff7d8da40e5ca1de08f1fc26298139ab618e0bb3fa168efe5d6059398b90d8ff5f88e54c7988c21fb679e
SSDEEP 6144:YAua3SAQSoYo+1Cjnqakl6j+vn+nLE4FZZHYg5mcQXQJSnI4EUiy:biAKg1C7qmvLE4FZR5mcHSnI4EG
TLSH
T18884BE27F686C1B2D10221319D56E7F66279FB804F2904C3BBDDEE1C5D3AB916A38253
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MusicButton.png

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\MusicButton.png
Size 1KB
SHA256 7f4ad4d912cdabdfbb227387759db81434e20583687737f263d4f247326f0c1a
MD5 473a683962d3375a00f93dd8ce302158
SHA1 1c0709631834fd3715995514eef875b2b968a6be
SHA512 24ffe03b5de8aec324c363b4be1d0ae4c8981176a9f78a359f140de792251e4f2e3e82e2a6f3c19ff686de5588e8665409ddc56fc9532418f6d476869f3f1f9e
TLSH
T1AC21657F52385772496C03A18FAD75C10F94B65903A563CDA65EFE2807E48A60179045
MD5 SHA1 SHA512 TLSH

Submit Download

botva2.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\botva2.dll
Size 37KB
SHA256 450b9b0ba25bf068afbc2b23d252585a19e282939bf38326384ea9112dfd0105
MD5 67965a5957a61867d661f05ae1f4773e
SHA1 f14c0a4f154dc685bb7c65b2d804a02a0fb2360d
SHA512 c6942818b9026dc5db2d62999d32cf99fe7289f79a28b8345af17acf9d13b2229a5e917a48ff1f6d59715bdbcb00c1625e0302abcfe10ca7e0475762e0a3f41b
SSDEEP 768:kyNq+QWR4gxSUzF08/zFlKcLdQxNld36fJPHw5g4wT1C:jNq+Qw0+JLAqf9Hw5C1C
TLSH
T125034961E9E2D030C096DAFE7D34E224E76F3D201E264AFD5E996ACCDE5BE02141C167
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cls-lollypop.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\cls-lollypop.dll
Size 16KB
SHA256 f84677643d9977aa1e8a4aa8c85a12665d29a4e8292485a0b4df846dd161f824
MD5 0ef04bc15fd1b28975aff2951b857f03
SHA1 817434cffcef953111182a34aba7d7b6c56495f9
SHA512 93bd57efc27523c0df0b9960fdd194190cd09766f3ef5972713c0c8a10c7ec5ae06f5eb60de44f57667bc8c89df346d85cc29e10f26068b8bdf2e4bc1c54f2ef
SSDEEP 192:+LOrPv8IfoIyf3e2Ep0mL4Mim1Ane6cp0c5wJBG5LXYd5qIGEu23lg:+KrCe2KXLri+AZ45LXYd5qIGF
TLSH
T1BF72A4D61FB540A1C08166B0792E6A37BF39681EF3CD066A97028524C23B95CBE1DFCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cls-magic2.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\cls-magic2.dll
Size 16KB
SHA256 87df573ac240e09ea4941e169fb2d15d5316a1b0e053446b8144e04b1154f061
MD5 9e1e200472d66356a4ae5d597b01dabc
SHA1 8d93246907a422d2333697cfe999cd9aeaea764c
SHA512 dd16e9c0831e72d19b1bf1431a2c8c74bcc183cfa16f494b5f11f56168209948744e0add7f2afe62db7f34adddf940fd570e28d60bebf636e07f57a0bf0346cc
SSDEEP 192:ViqxKy8IfoIqixWXFHsR61Ane6cp0c5ZJBG5LXYd5qrGmbz+q:cOcbXQqA645LXYd5qrGmbz+q
TLSH
T18872B6C61FB54061C09166B4752AAA37BF39641EF3C90B6697028528C63BD4CBE1DFCE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cls-magic2_x64.exe

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\cls-magic2_x64.exe
Size 335KB
SHA256 d92f7c60256509f74e36d9b5aab041fe44999b1a3910d70aa83c9d01f062ea29
MD5 7234c4334a7523b1ac6f51c072497071
SHA1 e06a12c60a99bc4ccc2a21774c82c80a6159aa67
SHA512 9e51c0348ed975ba62482486581a03d5d6c17707542dd46eaa09ca15bcc85aab0f489092d974a4a998c3595a7de9873901e6e590ea25c739c6e976997dd86503
SSDEEP 6144:klTwtAltyt4ZzUp7RGUgayD3Ggw/u5FcKODiXklJguBgcyGzFoW5NjQj+S:MT7at4ZZ8yD3GgxIJgqb5oWw
TLSH
T112749E8BF68140F4F163C538926B9623E77FF85D9320166E1B958241AE97AC46F2FF40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cls-mpzz.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\cls-mpzz.dll
Size 94KB
SHA256 da1aff62524fc3c70a7811d3ff526b2f5f3b454937e75b9400eb98da6d90e235
MD5 a404b1f29f69fbfcbf0ef6a92a7fe8ac
SHA1 177c504a934a6542e74f0cc70eafc8832d79082d
SHA512 8efcdf9eb84a3c4cba37af7207bbe9e8a179ee831449af1b2a44ba1d7796a679a1ae6acb2b12525e049e10b81be312d00e9f765c18fe1c908b43538f72cf0c4e
SSDEEP 1536:ZDjWQS/nZ9kwujvuNlaX6CMuYa++PGmGkUZ/hjM+0uc6lb7uwVZD2U4z+t0athzy:ZD61B9kD+aXHYa+HB10cN75ZEzx6hC/7
TLSH
T1199302DA1484B8F8C74911332B38F60E5A82CF5454A8CD75DAEC51BAA9D6FF0F921D28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cls-srep_x64.exe

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\cls-srep_x64.exe
Size 265KB
SHA256 ed8a485b9984997306ea6b5c6d98b5026a5b7903c1df4c229bf93bf113c78ee9
MD5 6ae2add85ec2b642d865ffaaa391d5bb
SHA1 bf6cf31ebd6856472a6023f2084684a887d6fbbe
SHA512 51fabf502971c8298e673f869f37cfe4583af8b7777d3251bb40217fabf5dcaea90637773ad2b211a8f206e69fb9754dba86b45655026603f83ad9690bcbf2d6
SSDEEP 6144:VxqLnmjX7FM95b2vq12/lyTaR+1CxkCnCjnVxxK:3qLmFM9NOLoCRenk
TLSH
T151445A47A6D06CFACCA641BD4DAA0755F371BC718321CB5B23A88AB61F337814E1DB25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

facompress.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\facompress.dll
Size 165KB
SHA256 148fa9a255bfff3f7d8a74f25394944f20611af31f26ef9700cbc0edc19a3483
MD5 fb5ecb3f135465ac61a78ca3c177485c
SHA1 1eaa2cc250e8191f6206f710fbd1d34bb88a9f49
SHA512 cbe65374073c7aeaeb185d5ba47c358e7d48ca39bd31c1ef92fa2f98ad9e1667658d96fe707bb4da9f8660b5824d6450873c978dcf3c7950270e92e50e8c1da4
SSDEEP 3072:/dhLcEX3bNT7tbh4g5kaiBInnM4BkcJ3ctPTA5Fm5Ha:/dhLcIRcJ/BIIMctPc
TLSH
T1D9F3AF11F6A1C0B2C08748B408EFFBF6AD7E66B157618993FF94262D6D207E0923574B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

idp.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\idp.dll
Size 220KB
SHA256 f4fc0187491a9cb89e233197ff72c2405b5ec02e8b8ea640ee68d034ddbc44bb
MD5 af555ac9c073f88fe5bf0d677f085025
SHA1 5fff803cf273057c889538886f6992ea05dd146e
SHA512 c61bf21a5b81806e61aae1968d39833791fd534fc7bd2c85887a5c0b2caedab023d94efdbbfed2190b087086d3fd7b98f2737a65f4536ab603dec67c9a8989f5
SSDEEP 3072:00EeiIJYud1RvIOACb918qbQ0XY3chnBLqRAJUZxChtDUOZlLFv:LEIVd1VIW18qbQ0/hn4EUZxmfN
TLSH
T15624AE0079CBC437DA4F0378842AD719073AF99617744ACBEF985EAD8D352C39E36296
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

innocallback.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\innocallback.dll
Size 63KB
SHA256 6afa2d104be6efe3d9a2ab96dbb75db31565dad64dd0b791e402ecc25529809f
MD5 1c55ae5ef9980e3b1028447da6105c75
SHA1 f85218e10e6aa23b2f5a3ed512895b437e41b45c
SHA512 1ec4d52f49747b29cfd83e1a75fc6ae4101add68ada0b9add5770c10be6dffb004bb47d0854d50871ed8d77acf67d4e0445e97f0548a95c182e83b94ddf2eb6b
SSDEEP 1536:+VqUE7JhgAzj/ZuhnOwKWSAXvze/V2C0mswp91:gWgAnB3XDAqt/p91
TLSH
T198534A17B5E14AB1E0A2CABC5C399314873FBD302E78D599A7BD0DCE8D393829858357
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unarc.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\unarc.dll
Size 350KB
SHA256 7ded3fb8947e3b42c157de34ac8a6340c75cbea54bc44a949c4e5124c72f14bc
MD5 da1fe7b7699ee3d96c2056b09e580129
SHA1 0cf70c324e299f089e5dd95a70d3f524cbcf156c
SHA512 6f104c94eb124fcc624fd192ccb8a3d420d9ef7061be73f5126456f3112ecfe6d467464bec94bfe4ca5b3353679ee77573a9d3f997c022f10090f0e5f9ca830c
SSDEEP 6144:FMSeiA5j38ZmpYVturLzTmgxpm30xr6l2m5wymCb6/4az6sfRiEPAu:xmpYS/zXxpmXrmCm5rN
TLSH
T1E1745B44FAC740F1E8470D70806AB33FAF3997498034CE76DF98AE56EA73B225929745
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wintb.dll

Path C:\Users\Admin\AppData\Local\Temp\is-PS2FM.tmp\wintb.dll
Size 16KB
SHA256 1910537aa95684142250ca0c7426a0b5f082e39f6fbdbdba649aecb179541435
MD5 9436df49e08c83bad8ddc906478c2041
SHA1 a4fa6bdd2fe146fda2e78fdbab355797f53b7dce
SHA512 f9dc6602ab46d709efdaf937dcb8ae517caeb2bb1f06488c937be794fd9ea87f907101ae5c7f394c7656a6059dc18472f4a6747dcc8cc6a1e4f0518f920cc9bf
SSDEEP 384:6j34r4daxbDGQhh5tfEMrg+dOVMVjG+nHL:iorhyepdOVMVRL
TLSH
T16072D68ABF6B24F3E37206F8D1FBB73F3A792910C821AD71DB094515EE33611920521A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setup.tmp

Path C:\Users\Admin\AppData\Local\Temp\is-RL499.tmp\setup.tmp
Size 1.4MB
SHA256 09af8004b85478e1eca09fa4cb5e3081dddcb2f68a353f3ef6849d92be47b449
MD5 ae9890548f2fcab56a4e9ae446f55b3f
SHA1 e17c970eebbe6d7d693c8ac5a7733218800a5a96
SHA512 154b6f66ff47db48ec0788b8e67e71f005b51434920d5d921ac2a5c75745576b9b960e2e53c6a711f90f110ad2372ef63045d2a838bc302367369ef1731c80eb
SSDEEP 24576:sH9/gqpQYze0XKvc4BYCsCS3D4kjiIUjyeyXEDq8UbVlc3GYgl4KvjKRextx:0IEJxCWluyZ8UbMK
TLSH
T15B654A12A2A28833E1733F359D2B86946C367D642E74988B3FF45E0C0E79B417D39796
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a809a854-3747-4017-8ba5-5577263c158b.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3384_260603166\a809a854-3747-4017-8ba5-5577263c158b.tmp
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3384_267637228\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 10KB
SHA256 671eb88faf58bc0f0e0862a1fc9f7bbbf23599dbf7d170643f579d97a6c0ed4a
MD5 7da9ab01ef58cc0c2c6a6561bdc3b896
SHA1 854218aedabe795814e8e715facd48d13d176ef3
SHA512 8ddbe01824bbf1bc6116d2d6729cd1db306eb0165664af6276b51227a9ab424cfcf4f2bbe9d7f34ab51125fcec9709f0996e27219e8d04232dd2819dfa0375ae
SSDEEP 192:Mi5vBXlH8ci8TKjj8VdUoi7Sex8kBWiU80i185:Mi5vBVvi8TKjyUoi7Se/BWiEi4
TLSH
T1E022F1117BFA1A19F3F3DA76ADB533914F3AF9128A14DD1E5198820D0871B106A9CF3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 6KB
SHA256 232a717f853f2ede450f3e8935a56aa7d245f69ee1ae993d6f6e3f4c6fe85ae2
MD5 6fe477a4dcdfcf06a4440d20af54f9e6
SHA1 630ee710e901761ad1e56d7bb7af548e0d6ffb99
SHA512 da60aa57ca15b275f56e8a02b4f9e378259dcd1647ea5600e1fe0deea3f5b779e443c3e36ba1950cae5c26660dee0e4fdc5fda01bf48855ce69c558301f91b28
SSDEEP 96:3Jz1er7SzqIZOmO8kBLLq0erdPCBxO8PsLq0erJO81zSq0ergdO8jd:3i7Sex8kB1idSc8PKiU8ei185
TLSH
T1F8D1CE016BF61F19F2F3CA7668B637524F3AF913CA55991E5198430C08B1A106ADDF3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5d696d521de238c3.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\5d696d521de238c3.customDestinations-ms
Size 8KB
SHA256 fd745c62ed0cb78cf903fc56d4516c23dae6de00d8a1f2a3d7c1d162167028f8
MD5 8da6beb43f3f27b2b891441038610769
SHA1 5ea4961c3c76f00805fd787d6f470103866c9d85
SHA512 b78bdebb80bfd4714735bd64f7c11be30dba64b9e37546d86eea0cfb36244c72b128e8a0a753141b4f6eda6b3db5a54decba7182b541b3d4e6d498b9ff8f5d7e
SSDEEP 192:ii8TKjj8VdUOi7Sex8kBNidSc8PCiU8Wi185:ii8TKjyUOi7Se/BNidUCiGi4
TLSH
T19012D1016BF61A19F3F3DA76A9B637914F3AF913CA149D1E5198420D0871B006ADDF3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ccba5a5986c77e43.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\ccba5a5986c77e43.customDestinations-ms
Size 8KB
SHA256 dbec8a6d44ef079d9369150b7f8af4eea871fe6d19096d96e173b731bf5b529b
MD5 d2463e86962b74ef68dd934dc283338e
SHA1 116f2291aa5c1d04c9f045cb049eec19fb7bfc9a
SHA512 606487360f5cc36476b90b844d1fd83e959b8d05985692d5aa04ff68fdc77ce6ff9a07a0006671b404c76a36eb38afce6cf1997c33ccb402d636eafebb50267b
SSDEEP 96:aYDdJbSJzLHVJ4SkTwZkx3bYEidJl8tAXw57A1dfaY6idJruJPOYxidJnIuJR:acdROJ4Thidj84ybid5/0idBIu
TLSH
T1FE02EE00A7EA5656F3F7DD72E6B666129F36F9059E04990E009042081D33B04AA7BFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RE-J10.dds

Path F:\Games\Kerbal Space Program\GameData\SquadExpansion\MakingHistory\Parts\Engine\Assets\RE-J10.dds
Size 1.3MB
SHA256 d8cdc8d21d2e355de1baec452b929a143dea15171c0c9708443be867b4b58c5b
MD5 5e1321d2f6ac5ed476954780e5d36321
SHA1 02d2c8386f95aeced5cbd8099dbc5097d309c620
SHA512 0969c193abac4fbeef61699843ba171f0454ae5120a577d074c73612ee0705ff8cfffddda96019b0d2a9ff69d50cde890ad3e3bfd7507fcf82f73e446ab81a3f
SSDEEP 12288:tt/tRSXzcE1RM2PAvXKL3VgCYdMKRwjnLC:tt/tRSXzH1RMB/KbmdMKRwjnLC
TLSH
T1E355D446F4D0D0FFC04A45BCD538F0E65A6F3C30C4697ED772A74E9A821A4A39B48AD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KV1_Props_Normal.dds

Path F:\Games\Kerbal Space Program\GameData\SquadExpansion\MakingHistory\Spaces\KVPods\KV1_Props_Normal.dds
Size 5.3MB
SHA256 9ec3e5e1188dadc775f871c74fae243e2f0fa34af846ff74f53a2c45094e37f0
MD5 de97106afd72e8ce2f90d5280e9d1343
SHA1 cecfdbc4a1cab91f8ae8a6a2f436e8eb9f34ff9b
SHA512 7fb3d6b8a11e13eb9a450dd8462af51b4a8ada4ef0dceb7b80d36467ade3ad5e5c66cd85e24f1359d06683b22da00a9212d7a344a0c12c2a620eeedb7afeed4d
SSDEEP 1536:9cXTW4E2MaXRogu+msQpepWnNgACLOJcjMyb/XJ7GgS/1egKNsbQQYqR0wHV:FKBR0pe0+JiJcjMy757GgS/1eglfj0w1
TLSH
T17D46114A49B0890AC8694932DC2F0D9CECF0DD7566CC9E76245EF1FE8C477298E3B990
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PANELS_NORMAL.dds

Path F:\Games\Kerbal Space Program\GameData\SquadExpansion\MakingHistory\Spaces\MEM\PANELS_NORMAL.dds
Size 4.0MB
SHA256 10685018544120035e9f6aacb83d6907e597b25c98344194f96c325a0919a649
MD5 8fdf371dc38e1651a85602ab96748e15
SHA1 268b742bd859fc7eaa8ac64e3aac3beb29af236d
SHA512 7c9417edbd7f40fc3d70aab893d3c1add1160ae9e744f113fbae810fab9d4df5b5bbb3cd59489d24ff985f5eabe5799a0aaf89dfc7873832e908bdd99b275ad5
SSDEEP 6144:P9U+0HOi5nlsTogHaSTwaiiwTPGae3OfT1al0:6kWnlsToWaSTwaiiwTPGaFfT1al0
TLSH
T1771622208AB6D582C4640579DD2B4D9CEDF1AD78BAC8CE72999AF1FD4C437185E3B0E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GenericParts_normal.dds

Path F:\Games\Kerbal Space Program\GameData\SquadExpansion\Serenity\Parts\DeployedScience\Assets\GenericParts_normal.dds
Size 1.3MB
SHA256 8eefa38f5fa362fd0ed8d511753217ef3edb8484082f115c99fbccb5189b6f5c
MD5 91449672fa1464eb596912a850312654
SHA1 f8fe50135f9f7f95ec043fd10ab4654835c10470
SHA512 0b344e4dedb654dddcbf96d117933ea8a390f4f6fa12e6eace940b512ebeff932dbdb0689dba9fa9e6b3f0e7fbf12d3ae46f1ab0d69ccd48f5942fec164ed26f
SSDEEP 6144:1+PFWLYRmpPLB4+Wps4M5dAqgHFJbayaPFTW66F7ORIdAhvhpnAFsAnKIW+mLYCn:C8q+CNHdKIyhvhpnAFsAnbW+mSe1XPb
TLSH
T11B55AE6905F4D44BC1385978CE2F185EE9F2CD7269D8AE3B216DF1F9095BB008C7AAD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Rotor_02_diffuse_color.dds

Path F:\Games\Kerbal Space Program\GameData\SquadExpansion\Serenity\Parts\Robotics\Assets\Rotor_02_diffuse_color.dds
Size 682KB
SHA256 a0453a54efe8f33ca32a778c358f3e016039389c37cbcf0af3911e920543f247
MD5 a7eb36c5d8032beff85aec66749aa195
SHA1 d60fac6970bc438a24f0c7e4a342d89558e563b5
SHA512 6feee37f6b03d493ca96bbd3d14c0da80f59db03eb53861247300712b80ca5e3e7b588c4f2a573002547b10f0cc2fa8377c9ef03859a1ff25a0e3259f97c4ac2
SSDEEP 12288:TfK6xEdsw9boofHKV2x1d7A1+R8Tbc7hnJ89HL3noU1804uwvoviyNw:TMrU+GcJ8NXoU1mufiy+
TLSH
T121E48C1AA732804DD45C95B2873512D2F7D099709C9DC3B7BF14A3DCE93B812EE2E899
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ConesHeat_White.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Aero\cones\Assets\ConesHeat_White.dds
Size 1.3MB
SHA256 0f9150654dbd141731c785e03f58a827dc81537540430c337957ea925263f813
MD5 474e5ef8813bf245078a2fd4468c6e7e
SHA1 564640dcc5d1d36185f2ce84915309198a2b1d65
SHA512 957eb229e090278ad3eb4295c158eab7a2cc156b1f46b0fbb27688b011aeb978adad3407c9453d10375856fa8332a63630c429eaa371ad8feb2630c37a1c0d99
SSDEEP 6144:cSKRRkf/+h9kBSpYcBj/mkAsgEPyQJwPwcWSFSdg/cad/pSYDvC1FI4meUfPe+1v:k+0kZsrwn6TMksbMAgyjmBgT
TLSH
T11455ED522E42EAECC0604870CD32D7FAA6EBBD9D510806E7B7D1A78F85F39487D61B50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ksp_s_landerCan_normal.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Command\mk1LanderCan\ksp_s_landerCan_normal.dds
Size 341KB
SHA256 32008712f21949d1c49e7d51875d981a4f68a218c6af4a65923fd633dbf488de
MD5 4e41e7a4330f374fcba35b5586fb0653
SHA1 0f1af664d20d4bfdc0ba9d292d2f3d1accc9c230
SHA512 a433a929a2a282102be60af43d54492476d395a3c70c49b984971307a0e2fc64ab6abcd579d0a8d802bb2b10140d5dc0d6fc611e5175eae7c25696f0247da6ea
SSDEEP 384:Hk3WkXOtTlD/Q+wsvp+1svuLfAs+6SuckNc:E34xDo+NpT56Skc
TLSH
T16E7411564636888EC0A805750E2B1C81D0F5DC7A560C8F7369AEB1C6BE5FB05E36FEB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ksp_s_landerCan_psd_illum.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Command\mk1LanderCan\ksp_s_landerCan_psd_illum.dds
Size 170KB
SHA256 62ef94d58e207a1c544dcd2e5a0e0574352e9696ff858fbe3b1b287ca8c1a25d
MD5 e95769baaa9b6672b330eda63c6ef398
SHA1 d0e241b95a78ea6211a3e0aae554580b1dfb2bef
SHA512 1813b5f2a74adc06805020f931227005f77cd3b7b1e4b450519bf18acd3168180f311289f6a37e1376658c6a0af93a9bd73bdbb7bd8133c6b6d1e312888f198d
SSDEEP 96:GZubnz5eM02cldFKI6AU0jufQfj433b1D2HyuFMrwNZ34HFDOIuWWNT:9N0ndFK70C8sngpNN4lDzwT
TLSH
T161041D6FC99C98A8D7E5DE719ABC0544EFD2CA580E001BDB4215280EDDFF23E4D1A9E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model001.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Command\probeRoverBody\model001.dds
Size 341KB
SHA256 e273f52003f4e7cf219b79addec8f903aefc3d0ed40bd42cc80cfa23b78b767b
MD5 2a382249e09a6219c0109ddd74332c83
SHA1 7888b35205e3c25c0523980e83b9df99c7456de7
SHA512 6dc6c0bb238bb283294646042994cd8133be7197b90388245e8491301baf85172d4f37825bf1591106522a0aa4a6f3e9f7e5c14dabd0de1487289c6bb74d7539
SSDEEP 768:tT3yGawz9IIoEZ3VEgBwl/Wji64CEY1Cot2PdUuYcZ0WjoKhxtenSVL:IqIEbQ/eCIVu2BKXESt
TLSH
T13A74160585B1C44AC1640574CE1FAC9AFCF0DC74689C9E77299EF5FA2C8B3019E7B9A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

QBE_New_specular.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Command\probeRoverBody_v2\QBE_New_specular.dds
Size 144B
SHA256 eefe05e7bafa08cc5bc5121df04b8d602570127b6790811c57f12a2dc1503749
MD5 baadc74aa412864634a78cf2be8100cf
SHA1 84f84044538d362ad512244721fc275c92d805f1
SHA512 8c942a3204ab9bb0b44a89a24a91f0a6432b9de818b58747400dc9e416989cfa129e18297aad91e0b70f8275196cd3f2762378630e2bb266d1b2399f03033d03
TLSH
T133C0040470C1F130C10C05304103D1D5015F341F5DD0F00333C41F0F104143401F0D10
MD5 SHA1 SHA512 TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Electrical\3x2SolarPanels\model000.dds
Size 21KB
SHA256 de8837d760c97144ae1a43d3d61c572e986a5969be5aa799e29fed85caaefb6e
MD5 00b31065e8edd7e3155ce7e8ef2a924f
SHA1 f74210eed852b2df23002238f9f2297f29eda174
SHA512 cfb5a5147321a06445b19219e4b1387fd44289a63e4c3d805664825b8df11ddfe4e47a9e35dfb25df17c2583420a33c9c5ffe94e051ef4571745545f9488555b
SSDEEP 96:GZOXXXXXXXXXXXXXXgoooqllllllllllNmmfmmfmmIjjjjjjjjjjzmmmmmmmmmm6:thZ8l953aYHFtlf97w/JXeTw6KA75P
TLSH
T10BA2BD11ACB9F29ED01B81755908DA99E9EF3C25D9D902D73AD837FB4973D0288703AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SRB_Y.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Engine\Size1_SRBs\SRB_Y.dds
Size 682KB
SHA256 84a7e1593de65a6ef85efdd02bdc6b4296ad9d24a39ea06561809798e4b25eef
MD5 a8187297181e7fddb267d9859a95faa1
SHA1 b2587afcc61943708eced610d3a3d5bcfb5f9d22
SHA512 65f531ccf693643d5ee9d2703c50de2a71fe641f2e5c1b363ba824f43ed3a930d1de623da56b2e9d3051d30067d063af0facfffa4026d58e6bbc67010fca47b5
SSDEEP 6144:Mttnb2b9ElwqyD414pDXjqREovjANbZ2Mdsi5yOocN2a0Zn+qRZwg/aer56:MtU9vb6OvBZb5foI2agn+qRZL/aqw
TLSH
T1D8E45C66F1D8D1FFCA9C067CC67DB8E2920F5D70C481BED639AB1E2152021BBAB585C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Swivel_v2_Normal.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Engine\liquidEngineLV-T45_v2\Swivel_v2_Normal.dds
Size 5.3MB
SHA256 d33a7c5f0d122d3542570932855373feb2a97c94423db6c84bac60ff24a72f36
MD5 ecc7da393748c7cb72b5a78df1829ec0
SHA1 d8b433b5d98b02437a444356a746d9fb4394c50e
SHA512 e2e93fb6ec980f7d66c98472e852daa70732985df0436a1fe48d5b900d5e006ad6be4014887831f2b4cd3d52377b957f966665f23fe6170708f2f22390d77604
SSDEEP 6144:ryVCYw3I6gVRo3WlE2T5PBbtqQ/x//F95UmC1P:ryVC5hGlE2T5PBbtqQ/x/N9TyP
TLSH
T15646115F352270C0C58E1DB80F4FE8A7AF3A1D125A199BA33511B3CD45F8369A58AF4B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PoodleShroud.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Engine\liquidEnginePoodle_v2\PoodleShroud.dds
Size 341KB
SHA256 8486e60bebb6dad7887c81d39aaa4dd55a1006e07d05cb25d18ef2366dd8bf8f
MD5 ead97f0992dc4e154b95429f2fc4ac4a
SHA1 3eb82f4e4df0d87c2aef3ec2a2c5ce11442ae7b7
SHA512 bc7f632a3f843b83f49ad4916b6a55b1909a3622257761c413db74bb6249d14abf63d66a7b022f4a793b8e65d3f9d24d9c3e65b4c4b790657a0e28a6ba45b0d0
SSDEEP 6144:FBg+ddIvsqBxzpSrzEBEpDFfoR4IT42dwK:LgYdIvsmzGmEppfoR4+rwK
TLSH
T1D3749328AD5DD2D3D628486DDB7941D6FB8F0C30E62E7EE54617D62CB0201E78B5E2C8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model001.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Structural\structuralPanel1x1\model001.dds
Size 170KB
SHA256 72cde7cc91576a73dfc68ea01db7717017dfc5ca61d8ce7a23c62722ecbd9a68
MD5 58ec8b0c71af71cebb69834ac2ca9ffe
SHA1 5bd20e29acffa4c6697d2e29dd86f1d9fee3a090
SHA512 93b348d5f8133fbce12619e43ea2747a978c5d557345071922e66770baf6bdb1408d47f53a47150f16be4bafe2d877bafdb79a2abf2d89863837cab1309bc63b
SSDEEP 3072:j3J1GploYizH+/Ih1g2yZbHmUNzIk9mZXV4:jZHBzH+ASZbGqzeF4
TLSH
T12804AE5569B0C65BC47160349C1F0D9EF8F1DD74248AAE73696CF5FA2E0B3408ABB8E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Structural\trussGirderXL\model000.dds
Size 682KB
SHA256 c1441ac2b181e7bdbf7099f4bbcb3a95ca1a4acafb43a90d9791d8c4a5fa6ebc
MD5 be7ced5914c7bcebf27e7f27349d1e41
SHA1 f2dbc8d95d4d754b242ac3ca813c4e9070962a65
SHA512 b8c91ade39ee30d95e077eecb4b669715cd461cbae376a3ab7a11a014affe05375c1c2fb9fba57448ab62c6a6f0dc98a323baeaf678d2bf9b0c03fab58817e8f
SSDEEP 3072:YVferyez/gNBb/DYUiXUnkfVtTnTB4bkwHHfFFyNi7oI4Czo3NNZuHjAodtXKPec:RfgT7YURkfXTBaOHCzrnTz52
TLSH
T166E47656B11D428FDF67DCD2AC5418E1FADAB00488E018E2670C919BD9B79276CCEBC7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DockingPorts_Clampotron_Emissive.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Utility\dockingPortInline\DockingPorts_Clampotron_Emissive.dds
Size 1.3MB
SHA256 28399d9a7f4979518bd424b8a1243d53ad171ae5c686414f00d835d45a2477f1
MD5 5c112d929e56e0bb4075692885e25513
SHA1 9253e0f4a524474c647db6b5b7391271804676c8
SHA512 4c85d3d3a2a5d8eb85bbae1287ae097b332efa10012d513d1435cee2f4de6050d58508514f8719acfa3ead15439749df3f1b71170eb0f46024252dcc17854cfb
SSDEEP 96:GZS6rCs5vilJPSpHVRl0dVA89xY5CR2l+COSg7wfP47YbFVCJGBmo0Cm:l6rCsgrqpHTG8qxECR2ZY7A8J0rm
TLSH
T113553610B760E218C15A8C3A9A31D3E867F2FED896AC5BC733C86F1FCC5425B5E19498
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Arrow Pointer.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Utility\dockingPortJr\Arrow Pointer.dds
Size 5KB
SHA256 ca79aa0e753404001b770bcfc9a719efb4bbff8ef3f7e3fb06903c59e85c47bf
MD5 731c15569f586764c83ab6180c1aec1b
SHA1 00f9faa2bf44bb7ed849c509ceb6f368fb263f32
SHA512 9b3ca6edcb3789eea7e11a3c04f2c110deb6d7f8699e5a3dca190ae4d2e6952f53668174f697820f633abdd77a57be5cf8afa66ad11b378c79d6741090da2e4d
SSDEEP 24:GZAR4nRF1dtB51NFdZBlFNN9p8eeeeeBt6KSRGtZK6RCtVKiRfIyHRfoVtqLiAl:GZZR1tVtVaeeeeeLeCHWrflHRfoHqL
TLSH
T1ACC17C9837C1F8BFC41B15320D61E7CC1359FC298E9917A772D2AF2F0E624241E10E52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DockingPorts_Clampotron_Diffuse.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Utility\dockingPortShielded\DockingPorts_Clampotron_Diffuse.dds
Size 5.3MB
SHA256 f5f9377fd39580b2c4b97b8721a63f34b1063e9232a93dd6c5d7889326417ee9
MD5 c83da6531c51a7073da6ac068773d3aa
SHA1 e503b822ae0d6d559cdcd2edce4973c6a9f69b72
SHA512 60cdb4c86f0d08d59224052c8b1039dcf38d419e8eff55a85cb7403ffd0f4147c62e16862c842d259cf5def70a5ac00fcdff71bbc49f839bfbf1d4360903356d
SSDEEP 98304:WPNRVcNkJ/Zuk6g+6HHefj3Yz/Bi99UbJcUzv8JXOiUNVMfSJvQQkVlSlsZHpTFC:yVcNkJ/Zuk6g+6Qj3Yz/Bi92JX8JXmVn
TLSH
T18D46191AB8E2C149C55A06BCAB2716F0F7E208E54D0D9F97A9016BAED4F700BCF45D6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DockingPorts_Clampotron_Normal.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Utility\dockingPortShielded\DockingPorts_Clampotron_Normal.dds
Size 5.3MB
SHA256 2057972fec77a10ed8feb5cc3309bb51479bcf21b85fa3b83692518d3c4e2846
MD5 09f5b19a2322343a6fb3ff2924116d97
SHA1 539b4e9176747f8fbb30b41cd4c5c538727754de
SHA512 4d0bd33a33794c7724c0dde954f20118ad06db3a6d66145cfa2325a3692820a89c0772eb8cd6ef3991fec1e620a796e7b1ee5b222161e5d5ea9c91bf1884a781
SSDEEP 12288:5sUVeeyyHaTUTte1RxblHVrrr36Lec87Y7bn7gNLaHyW5TEX8gH4lc05bcM2FcWZ:arrrFvyG/Gw7nCT9I0Hrxw
TLSH
T19D46344A77117494C60DA9701E0BFC56DEF19E9A4380537B21CD62EE78AB3853C1BA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model001.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Parts\Utility\parachuteMk25\model001.dds
Size 85KB
SHA256 f0ea4927ada479b74621ffc6237c5369224c216648f95664c7ca5ec819526bd5
MD5 53bb3e6536d9f41696fb0d7f6d96f417
SHA1 3bee937bb12b1a3544876a82447f5d8a942a9323
SHA512 1b7a8ccad097d78f7d208d7c8327675b0d23e8efff29d3b7a7bda2bed90e6c641d16f2ffa71857272714c4ec9f4f7bdf9f7aa45ef36c06871d7dfaa97996e791
SSDEEP 1536:gZ44qxAHNVgWKlWKlWKlWKlWKlWKlWKzFEadZ2ZZBt:gZ44qxAHNVgWKlWKlWKlWKlWKlWKlWKU
TLSH
T1ED8334DBD6DEBC86712138B2E6081F00E9DFD01671036E5AA065B436484B47F69FECE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model001.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Spaces\GenericSpace1\model001.dds
Size 1.3MB
SHA256 420c60ed35c37231f10c890f2a8797029e7ba2ff56b4b6e43e77d504656ca762
MD5 6670309174edcddb9c37b5045245cd57
SHA1 eba6e6cd93b59177ea097890934ade38deaa25c2
SHA512 e85e92a706f8ac264c55b61806f73365887f5c11d70ab09bf41df70f9a41735d62fa87033aec31da0f81336bcf0199f1d52156200ae7745f536bf187c8099674
SSDEEP 6144:2eWBk+jd0mFdmMlB90CYNsBenN9bOl9EI/6/UrUxFpBtXe2eLYclLpRV6EMVSFmP:3WBbjd0mF9lYSBeA1IZ
TLSH
T12655DA496C60F5ACC49940BC0974CCBAE7BF3C5A805C1A8B36C8AFD70A3BD516669F74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Glass.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Spaces\MK3_CrewCab_Int\Glass.dds
Size 341KB
SHA256 5c2f074beb42743788995a96250d3776c460a1b578cff63345fcbc61468d0660
MD5 d0ebbb701fcd2c3fb82344897c39b4f3
SHA1 e17befb6fc1ccd421de3b3f38d533e226c300813
SHA512 4d657bcbbf4c0d27b8329f29e1b1dd572459c1a0363f31efd970f532b1c7522062788aa964df60412548546f4cb201e682c5f863140f9a346c063f769050a13f
SSDEEP 6144:2y8zV+lFAcF8pv81GkhJRrGBlzdZD4MuZi3Yb3yGKWjuUGmnJqc20I51x:2BVwFY01jhJRiBlzdK9Xl1j9I4Ux
TLSH
T10C74CF68BF094731F2446E3951BB2D81E2706AF8CDC80F76BC57326B99F3518786219E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mk2StandardIVA.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Spaces\MK3_CrewCab_Int\Mk2StandardIVA.dds
Size 682KB
SHA256 457bc0787f4972eeb8c011d537980bbe8b10029dba260c5c53b87ca2eb8998d8
MD5 8ad348a5b45b388431fd19f1f83850d5
SHA1 7eca2dda0a2c244d58a520cce5ffb9f442e51d59
SHA512 73030d246e2b8332744d5a47b0aaf59ff3003818bdb7fd1df403db3889537bce6ac13bc8fbe375d86a58a4238005043c1bc869ab8b503758e8fe53a6dff8dd0d
SSDEEP 12288:TpFAws2G4lfntUKBdFcvKHcfHfz90KtWrHW7xy:1Fw14lfntUKfavOYHfz90KtWjR
TLSH
T163E417A3B6F6775B56A188D02B275F20E8DB44110FD4F7A6CB1C5288D53B83AC990DB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model002.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Spaces\PodCockpit\model002.dds
Size 1.3MB
SHA256 ef34f9c9961956add9338d65acef811793593e49acaa91b2b280fe5ec4ab0332
MD5 f4766b5cff480562de5a8af9d52ad204
SHA1 e9f661fc5c2db7f7ce79d2b5018039cf144f39cb
SHA512 a379ee578def15196633f5bfefa60a6aa24ecb8695ce8b2e8826d70f8c471e2bbc7e6f43cc42033aed87c3a28c69e88cb641a03322fb364fb09018d410d1d94a
SSDEEP 6144:61nOqBfQNJipGZM0aGFYLYqM/TrF+YejZx3oRXjyvwPYepUWbyxAFJSy9jfaiYNv:KuX7rwqRPYWzbJJSUR73S
TLSH
T11F55675604B0C48AC17518349D2F0C8AF9F5DC7426CC9E7B956DF0FE2C8BB499A3B9A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Spaces\crewCabinInternals\model000.dds
Size 824B
SHA256 9a8d027020153e24f62c1a70db3cc8140b833591dbb9aa971e060574c578940e
MD5 5af293599f13b6e66c88a0976c4ac27a
SHA1 937f40d2868cd8b60012dde6bbe020ca027d9ed5
SHA512 0975fd5bbef27bf66afc904d0c06fef536ca66bb44cbaabd6b7d1b415c3a6717a069252c237f6e3361dd3cf5f3760ef569f87308f2f277ddbd3f08523339c11a
TLSH
T19F01AE0A0EC9180EE2E7CBF7074E0644F0D2CB5D357301E93268E6EB1D0BF1A59815A4
MD5 SHA1 SHA512 TLSH

Submit Download

model005.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Spaces\crewCabinInternals\model005.dds
Size 1.3MB
SHA256 6228312f9c8117cade53d05274db3b7f022d8ccd0d12a0551cf35c4580dd7d6e
MD5 ae751b92319be8cdab740249e5945729
SHA1 70874eb93d29a81c159ac47bb277487f75e72909
SHA512 7f80af0636ad28418892a72de7cbc55d1f1c417690034cbcfad4afd20e77f271ed233df2d155925360a47e8c439355c5729f894b8d5fb3bb683ff72eb4cc617a
SSDEEP 6144:JBjMZpf0Ebv4FHwYI4GfCxiTM7ROdXHF9OrrSrrhrfesJEjFC0YVIbjkerCr8lr7:J0fkQlnTEVU9sYXr29cW
TLSH
T17955BB017CA0F26DC19240B46C09D8E9EBEFBEA995A511933AD43FEF8937E125C34794
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CockpitGeneric.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Spaces\mk1InlineInternal\CockpitGeneric.dds
Size 5KB
SHA256 9813ca929b15769da637c358bcada9a9161023ae9f5565727acd7b46ae2f9186
MD5 f2e55a1f76202d67623dfcad29230645
SHA1 3f4d6ea184cc2c2fb51ef4e31e190bce028b3fe7
SHA512 7fbfb0340e46a7756a41c730bb382350c78500cc10fe5024077ea47ab3165fbabe2eeb962480fdb3a1a7fd809f5777f0ead3a315715917badeba4b69485b8a65
SSDEEP 96:GZldIIIIIIIIIIIII6IIIIIIIIIIIII6IIIIIIIIIIIII6IIIIIIIIIIIII6IIIE:eP3
TLSH
T14BC13C274D61E5CCE38405BEEA61EDD4D37EFAC42722D26B37B112B280BF9308A41749
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CockpitGeneric_NRM.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Spaces\mk1InlineInternal\CockpitGeneric_NRM.dds
Size 5KB
SHA256 b7f44591b957b4290725853270a9d8300b6ee1bc927311b345d15b185fe4a713
MD5 e7c14820337eebbdd5af09f558c0dac2
SHA1 40c4a9ff6877e038d569b09956566e5c68f8c0cf
SHA512 ea62298396b9a48d0bd5f62167ea52a69918b00a39a19e17dacb69aa04cef0086eb19149f5fbb12bfd9ab4ad403996686a4950e6a5a962f51bcb7b35faab4e0e
SSDEEP 12:GZAlEBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBBB9:GZAy3qClPh
TLSH
T182C1000600F0914BC02801308E0B0E4CE8FA9C307598DD33061CF4E8184B30049778E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model001.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Spaces\mk1PodCockpit\model001.dds
Size 1.3MB
SHA256 40d57e4784a1aca29913826d82a8febdf2e5bf58fabf70174fe7eb0226a69ee6
MD5 2d0b1dbf7631ae707d91737d1d9a384b
SHA1 e59aa9cf69f8b4eafb0ceccbdde601c453c712b7
SHA512 9286019500e132ad110a7852a4727170e123dd0c5f8d8aa3a83b6a804b627de17c4f797f17f7e0102ce8197c0566cfa214db3a5fbfb521b777141751950f37f3
SSDEEP 6144:kHaGJAZOqVOweBI6Brro0DkxDtXqWmioeImxDxo:kHVFqSR5mo
TLSH
T14C55FB0138EAFA2DC76180F1AC00D5EDF6E77D989A68150371CABFDF05339265499BB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model002.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Spaces\mk1PodCockpit\model002.dds
Size 1.3MB
SHA256 3a41930d018a560db9b029993107362c39a31b37946875456fadc76b067cfc70
MD5 f84c89a4b4cfe519851f39b0ba911166
SHA1 d59814f925aa8390be5233a80ce3e53c400b5e9b
SHA512 ef822500111408d882e45c0c9e9344389578b21875e45791535238ebbaa25e40c7be419f1dcc8289cccbf241b8875f85bb6ddfe8b32b0c3c1cbd6803cf48618c
SSDEEP 6144:SU+dOZe4VlDOFL1uAfR4VNr2rrrzx5s7ur6C5xPzw/zCfdwa8zAOd0Z/cOxCPr8M:j+8DQLwmR4ALbIVW0Gm5V
TLSH
T16455B8027DA0F66DC68644B16D15DAF8EBEBBC80889416873AC43FDF4973D12AC18B5D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model007.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\Spaces\mk1PodCockpit\model007.dds
Size 496B
SHA256 e6d4dd18d9e63959206b40a6734986459529b4e0668ef4883e8a8d7694139ed1
MD5 ccbb70f068c834b3d6f86bdbcafe7dfb
SHA1 72cda766fef7fae0b8c655677a34fa45a99de019
SHA512 cac619c56c8e64fdef8f33078763dd887a23a0a527142763c69bc5cf61dd4b7bb758f115c55e404ff79b4fffcb4c0dc03398ba1b002aa5b0d567a23bfd2bcf0a
TLSH
T134F0AB8A40C6F032E01D9B35AB2BE330A9A2F47A8A065A6373856A32207012504E0EE0
MD5 SHA1 SHA512 TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\zDeprecated\Parts\Engine\liquidEngineMainsail_v1\model000.dds
Size 170KB
SHA256 c42d1bf4bd99d7f839a58c1429f79d37b2a9e79f94a4eae584cd97fc560e93f9
MD5 a89ff8d112c8601a530b27a077c83d1d
SHA1 2e757bf22c63d3159707704b61ab2a1828248b79
SHA512 6bdc34131f93ab5603671a1d177c52710bcb07ab4677fe3b430699edc0e0f066e76c642bd53eb5af15dcc397302d273af9bf37cc2f69a3997e5b9bd3b980ecb8
SSDEEP 3072:AqkE24rx9uHbZSqShqx3glE3KcI5gOIN7T27TboC3sD5zlPDt/x1xneAiseowavO:mE79u7I9W5v3neAisetam
TLSH
T13D040A9FD20E919FF4D21DAD683628A2EEEBD5606D0048C34D0B800DDCF7DB69E295D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

decoupler_and_adaptor_cm.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\zDeprecated\Parts\Structural\Size3To2Adapter_v1\decoupler_and_adaptor_cm.dds
Size 1.3MB
SHA256 865fc8493d4784eecf62eb577ecf6e769a2e9e7e15eb0131f7f7ab64eac224fe
MD5 754167655233cd5a4987a29c6aded210
SHA1 92cde38ace9ef4ddc59af0faa8fd902e560a78c7
SHA512 84a683dee948bfb1781db300d1a1a6b0844d582c39fcee96d255af693931ad79fbf57c8022386c0ae716233e3731fe528ed01d56a4ed9ef14aa631a1ca0dadf2
SSDEEP 24576:PxsuvMii0a7Inb0aPd7MSUil1fQu6vSHyPwshNa3iYzCgvVke2DAGYq9sNS:PxsHKb0aPd7MSUil1fQ3vSswsTa3dhvQ
TLSH
T188554C6AB139D056D3F433B5602A0BC6E9C544719B99CFEA420EC6FEC0B354BDE199B0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model001.dds

Path F:\Games\Kerbal Space Program\GameData\Squad\zDeprecated\Parts\Utility\dockingPort_v1\model001.dds
Size 170KB
SHA256 82ebc436e2ffa8ef0872c06d98c6f0b068738e3a887a8c3574190c72a600efed
MD5 0b6512eae105ed9e46a925b2ab92d5de
SHA1 2d4999a52d28eb8daf3be839f8e02081f1075ac2
SHA512 ff590a5f060d65a0818ab9e996e2fb7d08a300c0cf1374c2347135fccb6e27ea2632f82988c86cae01066071bbed2933920b7efb200e67508dab6b432983acff
SSDEEP 1536:cl4OFrkxcU4s6LKP9WyR3QPpiMcFw4ppZDt548M34Irn1ruQEBHP4lh6sk9rp+67:c2OFrZsPtpFF3ppZcI0CSosk986R0po9
TLSH
T167041D66B8A2424EF8E5A4913E342224F0CAD65C255215F5DB2C82C9FA7F71F8EC4CD7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Compat.browser

Path F:\Games\Kerbal Space Program\MonoBleedingEdge\etc\mono\4.5\Browsers\Compat.browser
Size 1KB
SHA256 8a1082057ac5681dcd4e9c227ed7fb8eb42ac1618963b5de3b65739dd77e2741
MD5 0d831c1264b5b32a39fa347de368fe48
SHA1 187dff516f9448e63ea5078190b3347922c4b3eb
SHA512 4b7549eda1f8ed2c4533d056b62ca5030445393f9c6003e5ee47301ff7f44b4bd5022b74d54f571aa890b6e4593c6eded1a881500ac5ba2a720dc0ff280300af
TLSH
T1EA3171A238DCACE0ED7300B3FA1F14897F1A897F5B8A1505748BA1560B019B443BB39D
MD5 SHA1 SHA512 TLSH

Submit Download

DefaultWsdlHelpGenerator.aspx

Path F:\Games\Kerbal Space Program\MonoBleedingEdge\etc\mono\4.5\DefaultWsdlHelpGenerator.aspx
Size 59KB
SHA256 751861040b69ea63a3827507b7c8da9c7f549dc181c1c8af4b7ca78cc97d710a
MD5 f7be9f1841ff92f9d4040aed832e0c79
SHA1 b3e4b508aab3cf201c06892713b43ddb0c43b7ae
SHA512 380e97f7c17ee0fdf6177ed65f6e30de662a33a8a727d9f1874e9f26bd573434c3dedd655b47a21b998d32aaa72a0566df37e901fd6c618854039d5e0cbef3f5
SSDEEP 768:6CEPutHjvpMgMwP9h5Ij7khsp/6JtEZwMXVtkUI3t3CXyEyk3VbNbqDvJ4oT1y:/r6CdsCOZwMX3k5dWyklh+Dvbw
TLSH
T18C43C4A0EE5C8D36499B52D9F48140DCB9BCC43191299CF3FCDDA12AF09CC6DA278676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IntegratedIntegrals.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Agencies\IntegratedIntegrals.dds
Size 170KB
SHA256 81b782e18d401d4917ec258bb2b12dd8ca750f0345627b60892cec71847e8be2
MD5 a9bb123c7e3a13a20bc9a6f0402c79de
SHA1 2f6975980b09d0fc35294a9315516fbeae8c6ac0
SHA512 3de82c8cdcb8cf7fcf5aeec2c59291fc2b6eacd132afa874d38a44adae1a3730c12b07ed5c015d7dbda2ea8b247b9055e1f3cd267be41cd127c9b42611779cb7
SSDEEP 192:9zXcaal2q9I6lrE6Pu+bIKGXRemsTVSjY3LU82zf+2xId0sDMnvZfKuu/:5XcRHW6W+b8MhSU3uxIvDMnvZzG
TLSH
T1FF04DDACC74499A4D1064C349AB9635E03FFEA7A170A03E761E36269ECFF5574F021D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IonicSymphonicProtonicElectronics.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Agencies\IonicSymphonicProtonicElectronics.dds
Size 170KB
SHA256 1e68d8238d5adce0683c520e3f50e07ed5efbbe5f6ccb1c5193c4d658ea86d8a
MD5 967046637dca5e8bc445c768c6fdf3b0
SHA1 5f74443ff84a867a4d24b0c1ac64dc3c9ef46f3a
SHA512 b0f2adc51e539ac16ad92bf29cd87e752dff147bc7934af7fa1b4e91b01e69c154ce46d45a1b048029b290fca330d6f18083004bb3a1ca6c10e8dedc780ed018
SSDEEP 1536:i55555555555555555555555555555555555555555555555555555555555555z:rw7jwSvug9XGPvYyq
TLSH
T1C704B559BBA5D628D0590DB38978C7F823F2FDC14A6C17EB33C12B2FDDA60964E14258
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KerbalMotion.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Agencies\KerbalMotion.dds
Size 170KB
SHA256 6925e4bfe1cbaad9f58589c93f288e9c245f3086b688897550670e94222e3034
MD5 10451178c6e1e68c466f4972250a0bff
SHA1 1925f531b692d99804d518e54459dbb77dca8391
SHA512 b0975762814b3165d6f1dec11cd2cc11bf10574b2b39e550a030168a9094b3da08baf21c8e41ec565d496c6433f5f63c71daf22a72d9edcd0ec07d1e9f91613a
SSDEEP 1536:UKZVbbbbbbbbbbAbbbBbbb4bbbbbbbbbbbb5bbMbbIbbbbbbbbbgWFzUozl:YWFNR
TLSH
T18E04A1475769C87ED12948B01FB1876E931579A48C3953B73EE12B31BE3B24EBA03C91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

KerbinWorldFirstRecordKeepingSociety.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Agencies\KerbinWorldFirstRecordKeepingSociety.dds
Size 170KB
SHA256 b5070d2c7fd6e4d0932156aa7380d94ddd9a20d743191ec64e3fe9cf9b914e93
MD5 c2ba35748c2e5c7c58ce4e375d8f4bab
SHA1 8e5c03aaf2d61ecc3bda61759100d7711b687652
SHA512 ccfc6464d25a488ebfce7e2f6e932117119a0e81fd3340489b8c011ba3b6dd53d27f1021ed6880fd7b0705cbac8a98f144e63bed94b01b11b9a7746ab3e63915
SSDEEP 768:2+/Nd8RCsidEgmeOcXs+SMUqy4F5nl3BUFD3LWQaZALYu5CzSSqRslISyNfj4Cs:LldVCcEUnl34LLRex4sloNy
TLSH
T1EC04E6ECC794D880E5025C748431E38D07FAF8B9664B4BD776E25BA2CCBD9969F022C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PeriapsisCo.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Agencies\PeriapsisCo.dds
Size 170KB
SHA256 95680b9c851950ab7afbc510966aceeda6633df8d9db4e58b0cbd5c1819a0d8c
MD5 417d18a4c86696ea05eff4b76769ad89
SHA1 81b807c1852be3b82adbc61dadd45f5f96e4d55a
SHA512 f593eed591820cfb4c30e15e1d3bdf1dbc012cdc24b76745cec810ed5f4a5e6e4520e57d1ba1ef26ec9492ab9259cb58c51796818d5f91d87f972acaf2f5ff14
SSDEEP 768:4JK8KiHXehXs4/T5FDUqK8XWeQKrAIOu8T9c:DfiuRtFYt8vQKkIOud
TLSH
T1930470AEFB88C868C1501C354A38D3DA93E7F8A08A491BDB36D26F4FCC7E8564D511E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReactionSystemsLtd.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Agencies\ReactionSystemsLtd.dds
Size 170KB
SHA256 9332c9b501a43d17460dedd1fefedcc59ae243ba54ffaca797b710bba280a1f6
MD5 d0192723a4ca1abb567b281f289c65d4
SHA1 b4e9442c322151413033fd71be8377ca8cecd3b4
SHA512 bbf5c64f64572369e346e703f59c2b4a544b11380ea6e255fed901a1992d1118cfbcfdfaae11f5b51e95d41eccae4427f911d1c04cf26f268927960a3fa65e03
SSDEEP 768:lJEON71J7x+BHLzddddBsfejFlCNWdY11zU/zpO12ki4qwvU3HLC2N6FQ8fNiN01:DoEW6kZ/zn1c4rC7GcQeCkiJJR2R
TLSH
T16804957A89C4F46CD5881EB0E5E847E6CB39A5E1C7E543C3E2531D8C8E2B7CE564E284
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SteadlerEngineeringCorps.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Agencies\SteadlerEngineeringCorps.dds
Size 170KB
SHA256 cb2a622e4a8cc5eaa8e31d86d23f5f7e07bbb4f1a8de17f69ae8b487f2af1266
MD5 3f0ff546a63e988e0d5ffa713ea9aad3
SHA1 e0d8fe2b5293957e557e68d17be5dc45821fcfa4
SHA512 316cec1a07edb409559fd7551e9db68bd534355465cf66b183b6321d504a2e05715d8548e5828874354162f4cd30ae627978cad5bc234d00664658510e795e54
SSDEEP 384:hwP2J+8wR98cCch7Sbiwtrvi8AfUXSUtTz+RgWLeOF8fEQHoZup4T8iEcY:KHGcAHGKtTzDWoHoZup08+Y
TLSH
T101049C6FF3448A44D0780C355977B3DE43E5FAB8994B47E3329AAB62ED784C69E420C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ZaltonicElectronics.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Agencies\ZaltonicElectronics.dds
Size 170KB
SHA256 e9ad1d4b7ffed7ec318df935695257fbc86281f3064c5a99701a0b56ad48f9bb
MD5 96f1191b8b48778b1cfec7b3148c2144
SHA1 06317883f92c95474361fbfbc4214316d81bb25e
SHA512 bf832009baf73678fe38978c8ed66770719b5aaad85da4ba72085615e5ecb2db4d94238fdecf6d3fde7204197d188ca67366f62fa2802c10a39b41a3301ce05f
SSDEEP 768:I6QlobHbt7CaEzb1lLAXC+UJ8lXyYYO1TlSXM:IvlobxmaEzbQy+UJd8IM
TLSH
T1BC0477ACC784C890D0460C34A975E38A13FAFCB6164E47D377E2ABA6DDBD9964F121C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mk1_v2.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Parts\Command\mk1pod_v2\Mk1_v2.dds
Size 1.3MB
SHA256 76a865f21a08b02e15988afd18f7cd2f97de5ffccb08821c6fa07eef4a0274c3
MD5 028097bda5d73b9a43a9c56f05a3fef3
SHA1 b297f3fa3edeebdc1aebb555de6bca88cb0c9c12
SHA512 40ceb9bc1fb5c30af1cd434069ed0db719725436e27ce57af36d8ba004a9810a12ae7eb7ee9d95c54dda9764387df04d1498a32737e05ab985eebb4b99480395
SSDEEP 24576:OFa9lTm1g6+xCFFXPDiVHfV4GkERFElzBCbfUw2Nzcd6PsS+:OcTT8g6+xCFFX7iVQEKQ4ds6P4
TLSH
T13D557C8BA9D1C576C88844F87872D39AFBA538319D56075B3A84232EFEB3513C05DDE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mk1_v2_GW.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Parts\Command\mk1pod_v2\Mk1_v2_GW.dds
Size 1.3MB
SHA256 176601ee221a0f2fb1f22cb8238a5c1892ce374c9661a123f41173379b9edec9
MD5 5210e5d55f14d49e12d5c74401e413a2
SHA1 440e89cac1311d61f59e85d58305933a33ce0d10
SHA512 3bc7dc125b3a0adfed18d41b9abce970c59ba637b0943726ce14b8575fd6fffea4cee7c08b184105a3ecade7f694507c8b47b52515307b6d77ead87c87cb1588
SSDEEP 12288:Q0Jpz0qzxCCX+agb0Z8vBkgPri6PuZbBmf0AEsEvqHPmuY6IOVtHLfUVa3Pu3:lpz0qIPaulugPri+uNc/EsEETTr1W
TLSH
T1BB5539139981E1A3CC9401B6B907A76BF79D74219DCD0B7B7A88131DBEB3087D82DE94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mk1_v2_W.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Parts\Command\mk1pod_v2\Mk1_v2_W.dds
Size 1.3MB
SHA256 a74ab065ef8485ffe6b82aaf7fee639dbc1a3ae5bd5c939a88653dcf97550b19
MD5 555fa802719a343497c9e79017da3d7d
SHA1 a289c9539180b8d9e5784eb651a4acf9e7dc5d01
SHA512 8a7a7cda527dbcc3591d804bedaed5f694a5b077207f74299e741545c7580cb3d353703a4c3094efe19a7901753b689d5f359277329eb4fd3baa8c18bad7cbe0
SSDEEP 24576:GRze69JtjoTOK7CT9CWP9EixQsIzd5tt3Nsianpxrptg8haUXp63xzpAZrEozJiy:GUEx+Q1IPCiG1+4JEzw
TLSH
T1295529039A90E163CC9805B5B557A726FB9C78316DCD1B7B2A08572DAEB3187DC2CED0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

outershell.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Parts\Command\mk2LanderCan\outershell.dds
Size 1.3MB
SHA256 d2e407e126e84c939131c74ce377d12f1cce4031266625eb138e63255096b7a5
MD5 7380a1f9bace6c25c68c7fb9d3eb5d12
SHA1 c761fac72324dee4da2eeea0ae538bdb8040a50f
SHA512 0f922052a1187dd94bd1321eef4164defc907adebc1980c32c7c1f979d917b49a3c625ac6197580a77862ff10e242a7373ba2a641add358089bf5f5a4bbc3ad8
SSDEEP 12288:N65VkF90+f1UwuNrdTvb86HEO0o/efPns/ZkOvOQA:W5HEs/ZkUA
TLSH
T10255B83AEB5A825CC4560C7A784CC71AFB69E99148150FCF6940962CCD3E2E7A478DCF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Parts\Electrical\1x6ShroudSolarPanels\model000.dds
Size 256KB
SHA256 f47e54ae6f0951baed1a366714d38007f57c274c703764caf2a2b0e7f0f7d13e
MD5 c8cbf97bae1c33550fd651755dbbdbb4
SHA1 246790a83d62d71bd5a8021708188d30063d3d50
SHA512 8013e7c27c1473e4a757a773c930753137fa088b4269b04d25786f2190ae6b99314e28483ed4b70ebf67d76d46fd1cc21b58dca9b462923e2e12428822e5e1a1
SSDEEP 768:7cmOdhnnnnnnnnnnnnnnnnnnnnnnnnnnnnnnudrtMsbxDF70D/u20jNbYdAlX18D:bdrtVvYdAl11Wj3k2OEPbZ
TLSH
T1C1440E13BE44F10DC96625785E54C6ABD6AF3E86A50A0ECB3EC03FDB0433C9999187E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Ant_and_Spider_diffuse.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Parts\Engine\liquidEngineLV-1_v2\Assets\Ant_and_Spider_diffuse.dds
Size 341KB
SHA256 704c8965315f1eb6dc6e8060eb54910c274d269b2b97a069635cb720d9cafb86
MD5 49793801884c2cbc6af06080087e6a2b
SHA1 372d2b9e390e77ad603636039ad15d6280fc798e
SHA512 b6c7c450d65bf348eed12bac383bd4e451e8ea3dbb97bae619ba3b64f33347c25ae56a4232a69b5505cf83eafaf1eecb48a31badf38e8bc674bc25b1f6599f75
SSDEEP 6144:bWGsyYslGk9RY0vUWcuY1H/Kd9iSItAsdGWjbTv5JMyyHtL5i9UAgmWGpZpN0A:qGs0lOz1fK3NhYbj5JMyyHZjC32A
TLSH
T116748D59A953E02AC1D5417DF835E5C7F2FE8E207E0E26DF4B00651EECB254BC8289E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Parts\Utility\parachuteMk12-R\model000.dds
Size 256KB
SHA256 1acf130c098791d49142b8b2c7cf81a25c4b4b26cb1f26d7673564ba4c0829e2
MD5 a7befa641e6ab228a016fc79a8f80c1e
SHA1 6a5930e07f8203721c63a78822cc732db15d233f
SHA512 bde07f4636022b85129cf21b78e84308a841100d5e08155e7868a58e6a39e8ee9a08316dcd78aafbdd9c8055f9ff58f4d96229ab77d9e83c29bafb16edaede4c
SSDEEP 768:ICY2o0T7W/G9B9frR05apPnFvoAvySySyNySiyNySyQu7ptskD62KF5WyzySOBXt:IjYW/G99pxnF5VzFDQ33nPwdjP5D
TLSH
T15144E0467B68E14CC5212D745AA0C3E6E7FAFEC1591C4FC37FD52B9BCC2292A6C04A94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Parts\Utility\parachuteMk16-XL\model000.dds
Size 341KB
SHA256 b35ee21ca72171625325266ebb94f8154f89c0461949c2d96b2ff20226c5f033
MD5 aa3c79fcc83986600d4effcb0c4f9e39
SHA1 67293cd7a7db02ae966ce16404d1625a9da89713
SHA512 b31539ecd6b8a0be325bed9f7f2506e38da38ffd8f6bc77ee60c920183d8a45e009c0f6244894739c70ee8379f26712dc1104e52a29ff25e2fe13a73327cf343
SSDEEP 3072:w3xNgiP1JALrIrCrMrT3O+UH2Iuc/+YlwcmZ:w3xNgiP1JALrIrCrMrT3O+UHozcmZ
TLSH
T1267471016B68F10DC4910D706934C7AAE7FBFEC5995D5BCB3BC067ABCC229565C88BA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Parts\Utility\parachuteMk25\model000.dds
Size 256KB
SHA256 e40f7597e39d61ebedf1d9152200866972eb51e02d063f70b5f23a4b233d0a51
MD5 e82faef115a0e8eb0c2dba604d130eb3
SHA1 a1d1d0149b7adae65a7a264047282dd35d3a3022
SHA512 5d66c195200e109eb8624df6973512724aca46a4c6c2ee0d639d3cee91217bd436e073467a6d9e5aab9ea11c0d0fcd1d1c455e0c14ebacde3bedae85f4ecc0b8
SSDEEP 1536:iFS7kX44veYo6RidMHUkRYoJUd3hX7o/bZo1jaV1K:iS7kX442ZLCUkA7+dCck
TLSH
T18A4450026BA4F10DC4611D706534C7A9E7FBFED0594E9BC73BC06BABCC2AC525D88A94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GaugeGee.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Props\NavBall\GaugeGee.dds
Size 22KB
SHA256 0f52ee612e4323e08586018a526399bdfb06e9cf0209fd5b80f72fc7eeae8706
MD5 82fa59a48224228fc40276ebffd3265c
SHA1 1914797e61b5dbbc3ab140457d38d61fb6063895
SHA512 0c86c995f959b0577477cbfa07c84c08060c3f0b37d4972b49c5f8db23b8e4091c1c2d91f2f4f8d542ccc7d688512ce7564f489c2902478e2a5464e263fb27ad
SSDEEP 12:GZmjc9E9E9E9E9E9E9E9E9E9E9E9E9E9E9E9E9E9E9E9E9E9E9E9E9E9E9E9E9Em:GZirbk+rSe33Uya8lJE
TLSH
T110A2249933C5F5A4D02750719DA4DBD1130BF46D491B4BA373D22F2F4C550810FC1C24
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model001.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Spaces\crewCabinInternals\model001.dds
Size 4.0MB
SHA256 9a1fede2cc8dea17e8b32eb6b97deabbd22b62320e501fc9ce26fd1dc267720f
MD5 0669b1dd1842dee5483a96b0f3461f3a
SHA1 d885cee39c949395f05306da5689efe54e86945b
SHA512 277fec565fee00426ddd138ec7906c30d96ffedb3943f5b36422a645e263b5e7ea7cf43e5534b8ac4d0f8088f941234eae5ccbb09232dae19c37d973c0e64a2e
SSDEEP 6144:IqUjduBhiMqK6LxgoJ6KJ16pRia/HNjkuuuM0S1qR0uJnwOkKfPHDBQwMI6SNBUA:Wg1PKGca/HNwuuuM0S1uxzoe
TLSH
T13316ED927F19F10CC07219386A24C2ABE2EBFE8098595ED73FC52BDBD827C695C54784
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mk1pod_iva_shell_normal.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Spaces\mk1pod_IVA\mk1pod_iva_shell_normal.dds
Size 5.3MB
SHA256 516595482c24a20cd98dad78c77a2ec5b4e5183fb291500b00bada7f0584681d
MD5 baa5ee6f54566c338d23880c4bf43e9f
SHA1 2c8ed1f6696f73c8ae84711df4826e7b4d204555
SHA512 8d90d643722692d0c06088859aa9fc08acb4714d177a2f307143007e7010496d0cc7138edb0650d68f551890ce5b1b0b38c11d011cd050ca6e4b4aa0ed33865f
SSDEEP 49152:KII1v2GRVPbpgb/IAMvFzy+xNFyACClfguHC5WLhlKwm:KII1vTRRpgkAMNVbbhlTq
TLSH
T138467A7911E1DB06C92B3F3C079F7532FFE208A00851659C29FA9D9A3D5F7E5B8AA140
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mk2StandardIVA.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Spaces\mk2CockpitStandardInternal\Mk2StandardIVA.dds
Size 1.3MB
SHA256 ecb331cae27c71fe88302ec711597fc08e2dc6e3f40359ae333fe363b1721b0b
MD5 e15c72263e127623c3cf823e04fcf9b8
SHA1 c850f368a84c873d7d0a5364e4eb98ff222da54d
SHA512 7640b7de5fce54f45c7fbc2fa171aea10a9a528a1ea9456971dffded38221b7554a5d3e7f2c73b2a7b22213ffb45f90a3f4c33262003034166eda4b0eff00378
SSDEEP 6144:bhttwROEXrvTlk5VlEjTyh6NoJ6FK8vX/yozFvw2ie7wU4ARY7WSP76uEDGECpDn:aaMCmKIb4bx0H8I7akUF
TLSH
T19E55FEA27C54E2DCC09608F07804C5F9FBBB3ED5844D6BCB3BC06F9F4526942A96DA58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mk2LanderCan_props_diffuse.dds

Path F:\Games\Kerbal Space Program\loc\chi\GameData\Squad\Spaces\mk2LanderCanInternal\mk2LanderCan_props_diffuse.dds
Size 5.3MB
SHA256 17f7ab4b8413e3dfe7b7bc9e97b4bb8ec3242fc9b2496b0f969334c6b6599561
MD5 e9e16294b5c132f30c47792403ffab9f
SHA1 c0fd532432880fb8121c7724e25ac8eaff86e91f
SHA512 7858634f9e7ae68d7b05a874b7299e360c0c9ee45a68a71e5b925811cc80238f2768c0e0dd8967dfb75b985f41a3781477d6bcec2a58d61a27f9b08379a3fec6
SSDEEP 98304:1KhK5ezHY3BCGM0t3qv4WCGT+DYQ8VoWqcrQI3LtAlH2kI2kr/aL5QJdlGXGtD/z:1K2ezkYGMQiCGTvQ8V3qcrvtAHI2kr/B
TLSH
T11246CF6B153ADC35DF4188B039A05D9AF3F0AA06BE0D6FD3EE1E129DF472058D906E46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AdminBuilding_Lvl1.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Interiors\Administration\AdminBuilding_Lvl1.dds
Size 3.9MB
SHA256 d3580c6521e61fa9c5919dca32d7d37e06de43de09d0b2a4c88f05011236d707
MD5 77a012262194027685e21dfe6713f3dc
SHA1 9216d16e122b76ab63299307ea22c7455ac288c6
SHA512 84ed2e74ca1d86d976a65467957339e3c2689937588fa3e48b52a1428d1050d6c154eee82d5087bd3c4779f62ea0b434eb4bbc128cd95137cb4963ebd4f305ea
SSDEEP 49152:9vazJtrJTAQwUxl9CuiNoHMPOGHjX2gmEh8fjLMYXsl+ShTmnUqEGo3ChNC2qgCw:oljFLMYXsl+Sh8Do38NCnQQvc
TLSH
T155164B02B845E3A4C527157A0D48E0FC77B33C98A8A8274BFBC92FFB483945599356F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AdminBuilding_Lvl2.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Interiors\Administration\AdminBuilding_Lvl2.dds
Size 3.9MB
SHA256 11989e2f619746cb71450182c14a399626c4fe5d7d8e607dfadd54e634d5f47c
MD5 b074b8923605f33bfac95fd29b0e092c
SHA1 4ebcb56f38614e2853f5c910db5d82b24b508779
SHA512 9ef0bb6c692901b9b01adbaa87fb1268136c3063570a8a67acdc2a890104e1bf2cfafba64f9c2e1f44d606c481c26f176428e80912e2939761b84eaee097f0ac
SSDEEP 49152:MssYeveXXt5T0AxU3NhXoX0hPpeb6whiP3pSwJTJj56InMSdQFW:Msmvkbx879Jj5VhdQFW
TLSH
T1D416C4053C59F28CC95608B50C04E9EDDBBB7E68D178A607B7C43BEB0536D4325A87EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MunOrBust.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\MenuProps\MunOrBust.dds
Size 1.0MB
SHA256 04e2d11ea74b3714a06d73c69e82d7c4b73efdbd816c09885b0768b0c48fead8
MD5 61a37aa3e231ecb6b2ac2a3ca80eab16
SHA1 0ed0ac41fa3317190001105223bb1261d737bc07
SHA512 ea9d6a64da06d685a861fe29ecea5e8487fcc6843a84a42d328b0658f2cede3f6cdc0dc6c213f228d2a86be8225e4de3d65f36fa2966970eac8f6fc217678fa1
SSDEEP 3072:2T7JzxOA8y0SfZPyrYTcugwVvG0/so0CiBvd1Py5eFWe3EEsl2Mh0fNBzk3k1wEJ:2T7JzxOE0SfDTXM0EtdX3F1pSK
TLSH
T11E2540077930F01BC40D40F069D3871AD7DB7B4098587796F694FAAE8F3B84285E9EA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FairingBase.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Parts\Aero\fairings\FairingBase.dds
Size 341KB
SHA256 e4a337dfda891815c1512967fde7921b7fc6231a1e5d343b747a6283c665d040
MD5 31268ffcfc2de2db53c1b8c284595e6e
SHA1 648a5166319487c5663cb375537a472edfdefc72
SHA512 c6cca7240200d200cdfecbe9af2aa96d99cfd3dd5a1bd5f4325695fa154d5523ca80495044e66a59243f42fc8cb85b98e75a04bfc4d16454f15a7298230c71b3
SSDEEP 6144:a634Tqc9JDZfNVM7B1HxuxnW8HZpxIuVMvW/XaIOBFOuyK7PvZtvZ7J4:aEWdfPMVmQohIg4W/qoVK7P8
TLSH
T11B749EAD517E88FF810A57B2525845D6FFE406234EDE49F3FF0441DAEB3208D8B5A829
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FairingBase_goldDiffuse.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Parts\Aero\fairings\FairingBase_goldDiffuse.dds
Size 341KB
SHA256 45de1ce6bc518edb49bce7efc80eaadce066d2da79e1e44e7166889d3382991e
MD5 5b87b432bcd6f18fc066da6402bd7531
SHA1 c628f03d69f83a97b909620143c327fc1811c15f
SHA512 9bb92030f0f8562ac9cf6e9a6a26c99def3b6401db99eed83a66baf465840649a8b347a90a16a3c09ffd10f4d6d36d8f1ac7983d2bcd44b9fcf9a5586c9d521e
SSDEEP 6144:Oo+Ac/DqGJ/bbvMVZnvuadACS052jVKy3c2vcoVUkQIO6KR2IN+5GM+dR66jUpWn:OHAmkGad52jVKy3c2bjONWUr3kyWZTTS
TLSH
T133749DE7F129F1F5C4357D78A378229BE6C102F9F792C2891D1C459F88323461EAA49E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FairingBase_goldSpecular.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Parts\Aero\fairings\FairingBase_goldSpecular.dds
Size 341KB
SHA256 17eacbc76325f11201e712f46840a48203daacfde9d66d1211d4838766889b77
MD5 ed1ee690ff8543d892d0894e3d14e5a2
SHA1 fcbaef3715e77cfaae59fbbac8223271ff2cdfa0
SHA512 8ca644181f348318e3f2e4df3cf1126a3c866f94d402c7eaaa6e07e333559dc2ca3bd43e31ce845acd44f0e6d8b32ea90ac52f5194388a65ecbe0e404d2a0ad8
SSDEEP 6144:VC8eVMCv5EDNz0kkqp+K1pMxnuWswe1UApSSSShN3w3G:VEyNMRK1pinNswamS1DSG
TLSH
T1E374E5A2B4B15D7BC11D8AB9DA18B198C9C307348E18F26AE5C9CD4CD7BB06D4847FE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Parts\Command\probeStackLarge\model000.dds
Size 1.0MB
SHA256 a2757d1285d220cdbbca2d35d695ed1dad508cfa73938b9c9fed64c76aa1ec3e
MD5 db21b312650eac19e42f4b35bf21b032
SHA1 49d6f4d51c3e3c4f67c541719b98d2f6091df9a4
SHA512 7d5b3b274f757433cefba142eb7ca9784724fe71d771386854632d19ceccfc56b1ff40eb2d6aaf4eeb06c97fd16234b7d2d0663341971d91f428a2a96233ac4f
SSDEEP 24576:RgQJdJDGhXYdj5rGldieGih572XsVSj6vB6cSc:RgQJdsioB6cSc
TLSH
T145252C0A6E55CA34D1990CB17C646B68EFE0F1808D9D1743BAC89B16BD3B443F92FD98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Parts\Engine\solidBoosterSep\model000.dds
Size 64KB
SHA256 fb8055a70f985b54f6ecf0f2947901e2e38390978ce535784c5b130fb2cb7970
MD5 0af5539f9e8c31c2b1fcc7b85eb2c9ad
SHA1 567168c854648ea6e7d1182a1d511fb2ef336761
SHA512 8a440c003b42cb6c2fd45087389b81d75b463e912700e424fe775b3f6126650e5492dab213b0b17475d32338a48289281a0cd1c4360ddee1dd029530a0916ef3
SSDEEP 768:7uV79sPASR3k4nttaeZHKcp4RRCYa+uu9BFiNkVtKJ:7uV79khk4nHZP4TpaW3+kVtKJ
TLSH
T17D5397196D5CF90DC5841630F821C6AAE6FFBDA9A86966C733C477EB4C3BD016E24B04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mk3Fuselage.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Parts\FuelTank\mk3Fuselage\Mk3Fuselage.dds
Size 2.0MB
SHA256 48853a18940e2c1572298f96e714151faa0f2af02206247074f7cb68e9130930
MD5 00476cc0cddd15d0f6cfcd3389fcbbd0
SHA1 29fddd161696636e21b7fc099684032c5bf29af5
SHA512 267b2030d240ea11296da32306cc64f167008f3c0949378297a9a9ab45b53a345f5f8472b81b4c190f0e370ab858105e8b0aa873e7ac9733f551e261bb6f3e95
SSDEEP 24576:zHhtNR1U71yN5s2Du6QRP6lOS+qJRKdhyqf9xtFUE8O9asSt4aRTnLPOHT0XZFnS:zakLACJRgfr//qTLGz0p1bY0fk1
TLSH
T139A5086B727A71F0D5211F7E531E8F12E691CD3535BA5EA36D240D089E331A8D0E2FA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ksp_s_resourceContainer_diff.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Parts\Resources\SmallTank\ksp_s_resourceContainer_diff.dds
Size 1.3MB
SHA256 c32546ed9ef92eacd2239dbf095c1a2162a023aece583bae2a9390646fb0f2ca
MD5 13423e28070149661b5121447e292df5
SHA1 d92fedacb19ba14b57454d69794696f3a0784110
SHA512 969966ffcfcf962d2c558be67b3d04eef80d200aa5c224052765146cf61179c6ccf7bd4337d97cf905ad45e4b9546c10a40d1a84faeb5b1c8fb5d74315bf9d55
SSDEEP 24576:Tu5+es/WpPQIAfXGrO53PN+JnEl1OX3AHoWKerBNK:dIjrO5gElUX3AHBBY
TLSH
T18E5590C3FB9096B5C2BF81BD1466FBC7F8C12E43AAA61E874C511D59C573A0C672A8C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Container.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Parts\Science\ScienceBox\Container.dds
Size 256KB
SHA256 57c5d359237da67c7dc39fca9d29e65d1004cf852f46d1f47b70af8d82bacd85
MD5 d2592eb356f8fd4aec5d2a5b83c51f97
SHA1 a968f9460f89963bcd1eaf04f1bebdbe9cf86457
SHA512 c0c8042b6ef73260de76b820493c81133edcd12a2f73130294d7b7c2c1c43ada19da10ef795f988e265f823d0189a948272c19cf286b465a0fa41a4450fe0067
SSDEEP 6144:OWxxXwpDaKXg4p6x4MfzJ2+r5uPPIN3M+jIC4mx:OWxB6x9CV
TLSH
T15444E94236E4C678D06288B6A824D6F877F2FEC6469C13C777C8BB4F8D212265C655BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mount.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Parts\Wheel\roverWheelXL3\mount.dds
Size 1.3MB
SHA256 b8cd3492b2d121a3327020f9c04b13e1f677884c2e27f63500241df127e42ad0
MD5 e9b6461cc9ee7d0ec73ad35db23983c7
SHA1 3b08bad8de7c7a8028de9fc243499c124ca78fa6
SHA512 9d1b2703270f661b5af61075f8ef0e0cdfc9cf006bda31453cd5845ed7035c210f82e4b1fb2f57078b3fe18f22f6570aa06d2dd32dc9a713e5d4c3bff6df487e
SSDEEP 12288:yZt4S3bV5qJXGBc+dX8MQbKQvWh5gzKfLHpQlMUbZTzoI/DGjlWzRIhk4oZhrCNP:wXVmGZr0ShpbCFTzoIiAOhk4oZ4NNsm
TLSH
T164555EBEAA848425C9E94CB59974835DD7FAF4008C0963BB3390775FDC7E882DC1E998
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Props\Compass\model000.dds
Size 256KB
SHA256 a96b270d33cd073970f433ec51cf144eded43d62a61bedd1a6e502b927a8f7e2
MD5 205386dbab0b1e0d9a597cab4846d660
SHA1 fedeff2c03e90d61a9d2930926be143b65d3a6f3
SHA512 69d7a3432bb4e300a6d56924a16f4a82e2c93b190316db9748044014678aa1163795d5b0f8ad4451f84012f39ac7fa02a93927085a8558a74ef39dd9a3adf63f
SSDEEP 6144:J+gmUvzjTYNMtufgeoGl5uYPCRobj82so5:JgUXDtc5u9Cb2o5
TLSH
T14044F65C3920F1A6D8964278E46CE7F1F2560E274EC6076BEB44362FFCF2907894AD94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MPL_Int.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Spaces\LargeCrewedLabInternals\MPL_Int.dds
Size 4.0MB
SHA256 4abfd328afcfe1882d969faaf542fe6dc72a22f0dd4d6181b4ff0f262e9a208e
MD5 cdf01ae12624c9d0a20b7dd57be40822
SHA1 8efde5fbdd7f05d91def7f5e532fce0f94b76d26
SHA512 1b0b1b071ddb0d4efa9a05d7460d89f1727bc74aef562719016c00e1212b0171c4484000936b5850772e5a77fdebcc1521bc62cf03d149a0600cac216e32854d
SSDEEP 49152:CnmItyjD1UAHBnG/4jw+ZHWr8PsbKHhE6MAz2SkKcs+ZkWRTYwtYfPnggaxwdqJy:jIICABs78s/ls2YQBkzdqr4IUW+b
TLSH
T1D816E0B1FE6FC6C6E858B473505047663FE0E472DE8AB7E83D841666CCE14436A8C46B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MK3_CrewCab_Int.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Spaces\MK3_CrewCab_Int\MK3_CrewCab_Int.dds
Size 1.0MB
SHA256 27191035eb5b72b914c8fc08c0871bdefab31d1482de26709101168cb84a81af
MD5 e5e56cf1f46ab6e67cc1d7b0981903de
SHA1 4561dc360ed3af338c6fc9174272fca84661ad1e
SHA512 c8bdf47f157c3aa236dc8c9d04212f9d84f9ecbdb13723c16049ba87af85f2c802c5ffa609f199a202fcee9e1bf197f947c464830c09940669083a41a31674c9
SSDEEP 24576:orx9koE9FTmGZWmS+yXfxB+fHrvWUbu+XplgfZxvH:2koAFTmZDRgPreUSOevH
TLSH
T19025CFEAAF7AD8B5C8048E60F1182EE1D6958574CE4A5230B731111FDCF74EBE62BC49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mk2StandardIVA.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Spaces\MK3_CrewCab_Int\Mk2StandardIVA.dds
Size 1.3MB
SHA256 24d89e858840f0a14ae984ecf4747dcc8450d4802b4de6f06943e4d7af2a1c51
MD5 0709ce0bc34d7947aa8282f6ad5a131a
SHA1 1290114bddca9252f7fe26ab5ba208f0cd3f21c3
SHA512 edcbcb44a4cf53e1e9ef27cf1ec7cbad46e3547494909db2cd66cf263d2c3e349a517f04b3a37bedcd109c3c6c76540c6fb5700026bc1e1f28c5e0c784515f52
SSDEEP 6144:Nhtt1qCFhr+pMRsvvV8jAqx+h65wtMU5FK8vX/yozFvw2ie7wU4ARY7WSP76uEDd:JP3mKIb4bxGq8I7aH+hE
TLSH
T1F4550CA27C54E2DCC09608F06804C4F9FBFB3E95844D6BCB3BC47F9F4526942A96DA58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ksp_l_cupola_internal_diff.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Spaces\cupolaInternal\ksp_l_cupola_internal_diff.dds
Size 4.0MB
SHA256 98e9bdeb360ee362b2d7db48ee446ca601542d1ef269f13e42a76b8c42c9337d
MD5 5d487f377aaaaccd7769810749aa6ad9
SHA1 a7b796dca44eca05151f8abc8a746ffdcf6da286
SHA512 66dd0367f9f59f92f9944c880f0ffdbb62a567fb88fbce057ba5b3110a34e3cbf6465591c067557459afb0070e20e616ae260f9ee06d40183c6682ef45fa788d
SSDEEP 49152:uBtzJZub+C2eewq+6n+CrE2zjOoeP52VG+t+erA9EG:6RJCv2eNq+6+GFzKoeP5aG+OEG
TLSH
T10716511F6EA0C5BCC59D09F268D827B8E781B6018C5A435339C12B29AD7B503FD5EDAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model003.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Spaces\mk1PodCockpit\model003.dds
Size 1.3MB
SHA256 6d1d323fe929268576874658606c7909208d3a6ee55745d5f8e65173f6539fb5
MD5 65b1c549c7eafa2c5043563b6b17a134
SHA1 fe9d948363827c9e16fec8cea16b075152fc37a4
SHA512 f53210b0c4c91ac480dbf969beee7e5c98a7a77a20f69072997d6fb92e876014ab75856748e9c646e0296456f87cd228a2af7189983c787ca3b7087f21bb7fea
SSDEEP 6144:iKU01W4XzEBttc7FCoWkmTGEtuM9doh4BJlg:MS7FCoWkEtZ9doh4BA
TLSH
T1A455585EEB60CA98C46A4DF228B52B68E7E5E4808C6D03C3B4819314ED7F947ED4F5D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mk1pod_iva_shell_diffuse.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Spaces\mk1pod_IVA\mk1pod_iva_shell_diffuse.dds
Size 5.3MB
SHA256 af7a679a16d09ba1a5ede12a06d3f292bb563c1b5388538cadeb03b1e84a9b6f
MD5 1be49d1b62ff4c89a1d44988bdd3d774
SHA1 29fb89db1fe3cde362735f2f1c8bf82f573eb485
SHA512 8bb0e11e58fa02b77432009da03b5e95bd405a26721fb4d354be71ef3968935377aff09472cec2a08a45b90b03ee1f75bbaf8e52b64e8e7aa17eeb8331473ebe
SSDEEP 98304:fhjBYSvtEHMyuQYTI3xnR6rs2s9lfqGnhpeYFHsM8DCdjdV+4mqZxXKJW1ofLPl:p9YA2OUkO9lfDP3pICdWpqZxXwWeN
TLSH
T19046CF729FA1E4B8C2D1C5E844B816D0B3F8FB928A4DDDDAD2501A36CC7054BFE58E49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

propsGeneric.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Spaces\mk2InlineInternal\propsGeneric.dds
Size 1.3MB
SHA256 25971c779082c203c617f48b1211fd0bf59a283e69d3ffdb448308d2f544649b
MD5 5a5d45c9e26025a2481e8ffa7baf4e9d
SHA1 67adc23d19dabdbc5f1b22e7fe51b974234490c1
SHA512 252af07af3d0321adab731588a7c01fe2c31802b1e868e32653047095c8d4600312158ade7b218559f4e207f286379793b2f4c379f9cf7b7716003236e3e224d
SSDEEP 12288:jN6LFtpd8yzjAdU4q44wmA+sRoAAcnO9L+cEJL4d4AZ2aBlnVSlF+7OxQmc:kFtpdNjqHjO9lOm2EzSzDc
TLSH
T1FF55BD21B981D0A6D1740139ECEA6FCDA3463521DC881BA7F48A533DBC72643D63BBB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mk2LanderCan_props_normal.dds

Path F:\Games\Kerbal Space Program\loc\esp\GameData\Squad\Spaces\mk2LanderCanInternal\mk2LanderCan_props_normal.dds
Size 5.3MB
SHA256 b898d1aff6bbed14d0aa8ecb67c49796e081be57f72513a071b6f59d4a83e7cc
MD5 d452102d4965b838fb416ca837ed58b7
SHA1 1569466820a67faf5b66a6003d6eb472b57b1a8d
SHA512 c1340420a71c3a889e037df2111f5070ba3bea3622897078a95ae4a876c463a6027d370ad04ea6f9d9b8411a58288bfab054bd1ba434ac130298f569c6c9cf73
SSDEEP 98304:OdSJK4uxEKperW2hA35CGSH/qQzze5iMFSxOeeXkmm7Mm35GUYCDgOeXrl/zMwi4:vRuxEKoW2HtHiAzeIMkxOkr3PDQ7lU0J
TLSH
T14F467C2AE2327041D2AE8AB4CF4FAECEDD75CD2F0769D92B420571C479923725947E23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

036.fgu

Path F:\Games\Kerbal Space Program\loc\esp\temp\036.fgu
Size 10KB
SHA256 6f553b445b1c7dc3645ab0ae33fdc211757c1942ef74e5f3ebc2ec79282e66b4
MD5 3365482649426ffb99449ce4cee85939
SHA1 c47935974e2fcbfd4e2fea64c52d485efe159a98
SHA512 39831297e1990839b078729b6c0c37dd670ddf54cbdc105b238b9e15669f983bf6d0a4149ea945540d790264968b48f9948e751c8c93eeb80ee7411b3add5ee7
SSDEEP 96:ElJWBZFJQMO0PTDM93ZwxOIgfbkDyKFE8lK1Owy0CwAQF6UZ8JQeXKK/qN:ElJWBL1O0bqCFE/aqN
TLSH
T1F722CE22D2D48881DA320FB3D81BEB8DDD51A2570014965BF19C773F5F3AE901F5B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

038.fgu

Path F:\Games\Kerbal Space Program\loc\esp\temp\038.fgu
Size 75KB
SHA256 d2e0bd1ed68b32323bd512a38dd1994b1791ffab184b61f7324901fae09a649f
MD5 132c554386025a747ab59ed5b0dd8c82
SHA1 2f2275ecfb26dafc52e008b95447bbdc5cba1033
SHA512 4bbace04751f300b7e3879c0623b9d5581da479c3051f6f0c24aa32ae1aa87fd85776fddf328b6f5e33e440cf4bc20b389316462b24df5922df867f4549bfa7b
SSDEEP 768:ONpe37bOr6F5K78OgI03Y5cPsqw9wk4SZ:KM37bOr668a03Y5cPsqw9wk4e
TLSH
T1A1733A33D4E8A5C1EA326FF3D91EB49DDD6022670018A55BB48CA77B0F3AD5017A7D22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C7AerospaceDivision.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Agencies\C7AerospaceDivision.dds
Size 170KB
SHA256 d8d5817225a214c6ae8dc2cd463e3f73fecc19da04ba7b9269720f3676f087d1
MD5 81ccaf7837dfb9919fec2900839053f6
SHA1 7fac7d47276c479c2938d7deb21bf7973d600110
SHA512 37a0eeaffcf6c677d63176b0bb49dcce646ae2604df30715086aa2b309809628d5784e82fac65bd64a94290d10e327245287be8fe19d6c9c4a8a2e797d86439b
SSDEEP 768:aVPefv1lcymHSCdhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhhn:aYlUGp43TbSYtRm2ljh
TLSH
T18404F50649B0D3BFE017A7710C599B3D9F3A7CA1E80E5793B2C5FB626CB654B8122253
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MovingPartsExpertsGroup.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Agencies\MovingPartsExpertsGroup.dds
Size 170KB
SHA256 7dc79beed7cc48a75a8d7bdb771dc01809c6cc5ba30db7ee573eb8d7b6ae056e
MD5 8ea152ddbaac80cb9b1ec237f962be35
SHA1 31e02a58a71d89dea51db2b6aaac7d88d0754e0f
SHA512 23a9d8dccdbbed243d304909e00a9ffd77f93837c81a9d5c3ae14db639a93da7c7328d93a38f45b80d5891d08657ba4482e7ddbfb59c9a06bce458a084fc0205
SSDEEP 768:CnbPx5RvEgcu1jYXLhGstVaGQKIATDhd7+LPk:2Px5RvEgf10XYtGhIoDD7+4
TLSH
T1EE045C2F8A31D049E4781CB00ED4A7ADC7493DED9991D38B7ED7238A6E33AD791921C0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OMBDemolition.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Agencies\OMBDemolition.dds
Size 170KB
SHA256 32cd22d3099011489b01bdfde4cdb3107b8dad88181fd2780201247a1f8ef10c
MD5 59e274b26d1f5beac89faac4304421ae
SHA1 29ade8489bde86aa91031712df8b1860eed788b8
SHA512 e35430e8e9b050bfaf28bd6c1ff390055cdd6ab790e36582c4e65237e5718700f64188ac8fecc38106b6f4ecfbec38a20a80d5cf0652409c1d3630f33b213dcb
SSDEEP 1536:JElE4ZfsJhB3AYL4X2nXAgPFr+fo+D6PMISrHr6:Af2heSBtxMI3
TLSH
T13604B6012C01EF84D08104F47D1ACBFEAB7678DDC83D1BA7F5CA675A6A72A03ED4A645
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Rockomax.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Agencies\Rockomax.dds
Size 170KB
SHA256 2927d87c9623107efcc622b9ac550ec5e9e7b2041091ace5e67fd9e24fa37b4e
MD5 41a30d010fd23d2ba47efe8d8ae9429a
SHA1 53c682d8b3a5443c2f2bb605f1df5b061861a666
SHA512 a0b9b0f5cbae249a40c90a8fc9e533c15ec8479142c6a0ebd4afc0209400b0b3166b3224f7f622c25d16f2640c4e4a030d33f0fc8873750c59a5500aefeef725
SSDEEP 1536:xxpWQo1ljIQXex49XqWC41TLT/Rw6c5pdQuLhMI7En0U/E:xxpMlaxxWK6cxQuLH4n0Us
TLSH
T16A04F0164621D125D92C08B89AA8B3ACF33AB1C0B929435FB5F5D396ED3706BD47F072
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Rokea.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Agencies\Rokea.dds
Size 170KB
SHA256 80c11eb74451f17496cc86277cb6555bd7fcc3bc16a668a45375eba90b66bfd2
MD5 1bbbb24a4b4edc23b3588c520583655f
SHA1 6229d8f4f76b53597dcca607ef6d15fd0b059de7
SHA512 36dcecbf0f84044157689d74df75ebf86382e3a2f45e200458391d7740dea6dd33aa27cf11da6a9b2d6f08d641539a4c1cf87280b8c1ca37a393d4c4c4dfea8f
SSDEEP 3072:cOHTXFZF9vt8W5r59TRCJJd1DI9CnnnnnPFz6:ceTXFZFBoDIgF6
TLSH
T1F804871BC604E848D44DC8F19AC9C37AF3CAB845AB5A6B9730C017F2AEA7D637233545
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RadialIntake.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Aero\airIntakeRadialXM-G50\RadialIntake.dds
Size 256KB
SHA256 10e546f9a500b4cb5ba109b158395617bc381596dbd7d627c2859dcd619f0830
MD5 7c9df5a26ebd6d7ee927760c45cf371d
SHA1 b022b1f236736a9cf7a16cdcfc44afdfe535a9ef
SHA512 878ded1bf920f6ac985073e19e85cbbfe88c0997a84eb1bfcf1c6ea83f13bd58e00432c36bc3b3e8ea5a1a09646d243c2594b84f82a05e009d21f3f33fc3c48e
SSDEEP 6144:HmMku8vA/q7fGtcuquFqKpesdN5ZoG3zt:9F8gqatXqu4KMsD5Z/3h
TLSH
T16A445A25977C80AEC2B289313665C3B6E3D197735A1FAF3F1D0026566C1309FE4A4EE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RampIntake.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Aero\ramAirIntake\RampIntake.dds
Size 256KB
SHA256 071db0fc39c4ce93874d2e9bca638efbe67c7742380a7f3e77deb53c275269c0
MD5 d056d4d226f77b5babe1eb0eab425231
SHA1 e9c5ad625773326799a2034a502fe3fa30e36391
SHA512 1c8f89d315052642a06da6e8734442a87792d7915de4a293305f7e1ec218c27bf34661be5d8ad9a71308acaf4a6a4024b56c833d67593791659c18e8cf4077a0
SSDEEP 6144:X1fk4h0+LGptOkVZ7TeGDFhZ+f/seh8iPt81P7jqMv0T8hkCw:yC0VpUkVZPeGDF7+f/seGiPt8NjqMHVw
TLSH
T1AF447D4E7145D9B9C725083B38E927A0FB80CDB75D098FE79E023DA55C330CA9A5AD9C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mk 1-2 external shell Variant-Hatch.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Command\Mk1-2Pod\mk 1-2 external shell Variant-Hatch.dds
Size 1.0MB
SHA256 44f0b34e07ba808188dd79ffd6d706df8257296e67586be4592da68f04c289f8
MD5 c473c95ef1d187514acaab746a8e0656
SHA1 db67bd27608c55304d4d5ea97774a1ac6f494719
SHA512 4b7f66f2f9fd61d88f368374468f3c4cb97847e58617b4a69388062870952c6a8479c80088b8cfc0b4d9a62bc511ea2907800e18d28b047ee92306ae3e76d067
SSDEEP 6144:HvIAb1iHeyay8YTxjeUyR+br7UrVrArnrbUSCxUpinMmk6ClMqtF5138Gsu0BqX4:HAB7Jd+BcwTcu
TLSH
T162253E023CA4F6ACCA9115B5AC05D1F9FBF77E5898981A873AC87F9F0433D129458B6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ksp_l_cupola_diff.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Command\cupola\ksp_l_cupola_diff.dds
Size 1.0MB
SHA256 69bf782c42d7eb4b95b7df24eee3bdf90fdff0f121b18bb79576e902f329e0d0
MD5 d62e31e12f1239cdd17093a92a3b5c4b
SHA1 648b071bf7fe54ace33a531abdd20d72b932df24
SHA512 c9db42864589557554175c9bc4611a2850f15902c72516ba006f1ebc8e10d6d4409e48bcd13ea0d3046a33ba6b253d4accf85adbab0687c7b0c9c8a920ab25ca
SSDEEP 24576:HuVRc1Fq+nDqZcOdkk09H8Oa0pKNbGbM4x5UMa0gbc2QPeJGrWPe0RfR1CtIjOy0:HuVRc1Fq+mZcOdkk09H8Oa0pKBGblxGi
TLSH
T15525AE269168F569D2661CF030AF4682FE941D377DEA0BF62D913096CE33905ED3CBA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Command\inlineReactionWheel\model000.dds
Size 128KB
SHA256 35ba6847a1f45db7589d8c411dec7a207b39b2d88d0a095b285861eac6fdc113
MD5 136902dd0c4b80013ed473d94df98fd6
SHA1 e4d0c0c30da65a7c1d49d93284b1c81933269ec6
SHA512 e2e18b7b100f842704ee6bbdd868ba17c0b432d0afb10e11557bfa31054fa9d4cc265a93cc87bb255a0a4b8ff21cedc3f0900d7cfdabb0fa600865ddc5cf027c
SSDEEP 768:qzPTUJzZEXBmBBjYBpKFIHoHcH4mkpUQLwYXA9FMqx7u+Bl0BjmlKsF7VXPcOWJ+:qzrUJzKt4jpl7poHdX1XHVN
TLSH
T1C9D32A1A0E44CF84C44649F07C555BF92B71B889CC3C278BF1DE47A0AD79587EC6BAA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GLOW.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Command\mk1Cockpits\GLOW.dds
Size 1.0MB
SHA256 975ab8212831a61d5f50278f172dec263e8ad405ad2c947fdd2c1359091dc15b
MD5 b30c366d0b3092c6ba3fd2bfaa5b567c
SHA1 644fbaa7bceec2341dc1875714b3a6bd5d731d48
SHA512 57cf9ae3ab28cb8c90be041112971047f19ad7c481addb3285c4982dec6fa1e8c29639a07dc154ef67c81d16417dde9c20c0a63a25b6461584ab45a56471f54d
SSDEEP 768:Ya5plXkOt9MbgV+rfsDknbFMjWRwvrYK1adiJK/OMALzFLkV/rHyo:Z+TbuW7iMRB
TLSH
T158250C4077A0E668C2929C799976CBE8B7F2FDE5406C13C333D86F8FCC629650D456A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mk1Cockpit.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Command\mk1Cockpits\Mk1Cockpit.dds
Size 1.0MB
SHA256 189edfaf8bfd5911e0f75b0d502bb5e3ff0ff26ee80cbd05b058def47dafa21e
MD5 811a0824efd670a6a63c78bfa08b26da
SHA1 dd168f4eb5f8c173b7381df7d7eea43104ea30e3
SHA512 41e89087dc7fabbbba234d40ef090670b21f94d86899e902242b6c5b223002eec5558f836420337c8b1f4935bf747610957e1adb95201cf45b1f961a9a9c5a8e
SSDEEP 24576:CLiISv082Kzld3/7FcfN+Kp/jVI6iD/CT7GSc23nPHnXovtCP7ax:N5v082clLE/Zdl6CXovt870
TLSH
T1E725D01DB09CD8D6D71DA532652CC37EF6EDB238191D4A133AF0160A88E21CADB78B75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

outer shell.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Command\mk1pod\outer shell.dds
Size 256KB
SHA256 dbea478c0295a6e37eb24c898e80bb7ce2bbf167430a7f2c781a0f4998d6f08f
MD5 6beee1f4dd72f1d2299fc4d75eb8bc1c
SHA1 7443b905b30833d309044362f30338453bebb716
SHA512 c1c986b737eef715044b7e31b7ec7b1879b9e11e97e08bbc5acfe782baa5445dda07038ed55ed9ea3bbc109c7233d1ff4042e2ab335cfcf55da118d7e1b360cd
SSDEEP 1536:g4y4RVIOj0v0SSLK2DJw5AifVyrT9bSVX/6d7Il8sS:1/oSL3DJw5A5xdpsS
TLSH
T10344CC296C54EF9CD35201B27C04E4ECEEA63E44D54905CBB6CABBDF0232D8B755CA29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Cockpit.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Command\mk2CockpitStandard\Cockpit.dds
Size 2.0MB
SHA256 4feed0a9e7f804e39de548e2a3e4f8e786d9a70f42c322d9f223ef148871a55e
MD5 bdc7454b9e5e8740de297fbb778f2568
SHA1 6a90a11196e1e542c622f77a4ae25265f7a33b0e
SHA512 e54a0ba615623a1236b9935ab5314218b52a539ade5493d254e99b4e9a33749324a454d1406add474beae5e89dab9737a072bd50bfd6a95b2763407237e2a5dd
SSDEEP 49152:4x1y3arGAuxCOeJTt6nm+q21zK0fqy6f6+2H:4xlr4w0m+jzK0fqy6f6rH
TLSH
T170A56A2A6704FC48C22F48782E6A4FFCD7207D26ED964B537E9D174868F2543E11AE6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mk2Dronecore.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Command\mk2DroneCore\mk2Dronecore.dds
Size 128KB
SHA256 652e94839cad543c5f4f964b16928628d5bfebf843f12b53eda9980b28b71f3e
MD5 02ba76512768ccce22579ab10697f86a
SHA1 2ec01e31cc2738b45398696c6dffce3e3f7d887d
SHA512 9e4451863dd1c9c67abd834ad6b4048db3ca050f18cbfb6debb9af58152a26830fdd01912c70e0c27648a9aae0e368c8d5818e05d7ac538d5b6ad6a4bd43e10a
SSDEEP 3072:Gl0efbnwckiYidGiYeun+wHrQcOda+iBfB9M5JfJ7Q:GhrkiYoDdw+PLdaFuJq
TLSH
T1C3D35B3E5980CB66CB0B08B0602E53D9E34486311909D33B599D59D8ED5FB86CBAFBF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mk3CockpitShuttle.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Command\mk3CockpitShuttle\Mk3CockpitShuttle.dds
Size 1.0MB
SHA256 4e5a64ebfff9b0f0cba8cf0a00587ee5815908a61dd8348a1a2aacc92a35a296
MD5 e797ef89957022f96ed03b589b2a6eb8
SHA1 43ae5ac82d5b67ef4521f5d4b58ed0d279edd8a9
SHA512 7ad0b7a89f1457805ff43a755925b0a64806bfc3d304316e4c592d33cf13c704645c07cdbc9bcdf0479f12d31687afc94ec8f21ef495f885e4d97c7ac1679d2e
SSDEEP 24576:2THidLQ58mchVXThDb9CBoP8VIYMhg/C50JO0m:2THioWx9SMhg/CWJFm
TLSH
T1CC25F72FB250F451C6395939AA968FDED3807530AD0A1F97BD940B3C6C7319BD826FA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Command\probeStackSmall\model000.dds
Size 1.0MB
SHA256 b15392052dc68436f0c882f300a667fbb91405282ba81701b1d21d0605888b44
MD5 b216d6795ae2a43951fc00c80b15be9d
SHA1 25a8ca0721d7d66f8a99d75a3d41d9d7c020a655
SHA512 8ceae4be5137c48b90f5bc09055ed51b6a8c9d69452e61dbf7fed22625f7239e6ead06c0190d9e3f8e8826b2ff9d7fc0c1880fa916583af5abc388e86ec69cf6
SSDEEP 12288:gEc957WH7f+ndcKlED+AY2QjCjvECYfcLPuA:Tdb+d7EDVu+Z
TLSH
T12A25B25F4B91917AC1DE4CF1A0DCBF64FFD090154B054742EC4C6E288EA7A86B2ADF68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

probeStackSphere_specular.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Command\probeStackSphere_v2\probeStackSphere_specular.dds
Size 1.3MB
SHA256 be369da7ce47316bd5524b80d1b92b304da8cdfaaa84d8ebe7852d4a91c71184
MD5 e75cce854a03d5185b6f9eab8490d57a
SHA1 87072602f4029f196edfd246f1c31d7724cde3ab
SHA512 d50b37e8e196d4d606dcf1e21c421a3a7adbb61facc9f2b5e39d356f9053a084828568b654482f8694a1539b3781c3233811c94434768982e2ba1da33733d2db
SSDEEP 24576:8iHusUO9KqX5P58XjxQpyOQMy0WaD36SenHUvipi7wx3AycL4yL2ead24:8iHusUON5h8XjwdvWaBMi7w0aeaM4
TLSH
T103558CC9AB71D178ACD9C96115103296F1C93B12AEC8F227BE4072BDCA7251F7E4186F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Electrical\z-100Battery\model000.dds
Size 64KB
SHA256 4eb82d812b3c68b1584e60ba0ca20c0a35b88991e7e0586ebade8bb741b6fe77
MD5 54334638b6181e984b9b0519d33e601d
SHA1 7eaa917c8ecfeebacab9001e330e9fc2ccdf320e
SHA512 e21f1a56898b89b007ce5294ecd664795e5ef1a435c95d4a099db520de59265e43e23d31bb974a83750e97633a07894fb6585da75ad1d4b9172686135b42ff7d
SSDEEP 384:zBUTh9D+K4NcehvCoXiJtXa6/EnOw/0QyJyun1bKeCL4iETQkYRZfffs:VWvivhvCMrxn1/WJx1bV4A8vRZfffs
TLSH
T1FA5396103C95F56EC44545B20844C5E8C6BF3D68994883A73ACCABEF652FC65CA3EFA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Electrical\z-400Battery\model000.dds
Size 256KB
SHA256 cd2e083ce668f7e01cbe5ff7b8b03ee896a3d5b1a72e0449f1cfe65bfa8aee19
MD5 ca01842121d16869be8a95016dbfd8cf
SHA1 9734e21eceed523b03e726892b97d68194db06e7
SHA512 7773bfc2f6ee970320af1a6aca9dec2aea274c15ddbea5b630e9710dbb17ff4c6a8e1c873e3281888922f908378b1e8524ae9213d9ad083f081907fdf4997ef1
SSDEEP 1536:Pj2sPj2rBGWNiBVrjcZ7qj05SVC40SBc1/nb:L7jNdESVC3/b
TLSH
T15A44DA01BC98F16DD92151B12C15CAEDC6FF3C8099686987BBD07BEF0A7BD80A94479C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RT5.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Engine\solidBoosterRT-5\RT5.dds
Size 256KB
SHA256 52a28bd735ef1b731cd92ebf333bc99b84e6aebe38463d4658391cd0b61bcc26
MD5 d60108984ee9b82d1ff786a2c214a147
SHA1 562f54380e4a47248c523711879539ba86aa62ce
SHA512 c089b95109636843382d6bfecf3ba578adb1bc6f9e37b552241044dae909cfe671b7030e8889eed5db41c6e37182583fc5620f8f58dde45d2e96e4d63fed42d1
SSDEEP 1536:49FVMjA4TQbWVq9txTwt1I+KT44aq7cYe+lmc1NU:41MDWiIxTwzIHTLcylmkU
TLSH
T16A4408026B94D668C0514CB46E24D7ECABF2FDC69D4C12C7B7C4774FCC3984A1E5AAA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fuellcell.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Resources\FuelCell\fuellcell.dds
Size 64KB
SHA256 c7d78f566cd158f4dc3021dcc7c54a8a4e61fbd561c16da5bf70312a0c6a5bdb
MD5 85b8d112de46f0f62fe03df730cf71a9
SHA1 e828f7ba563fcdc2c90af08725193e795b93bc33
SHA512 05577abf25670ab4a00ba02386804fa3875d45a7ac36a99f035d333202d57a9d2a29f66a8e9b278573753bbd4b2615c9f7695d4a7ffa8649688397b7c19ae378
SSDEEP 768:hMiP8QQCFSC2bwCGA5g1k0I9n0QjELQD+BqN0JzSC:hhPbFlCCIcL1BhJzSC
TLSH
T17453AB01AD98D92DC39646F1A528DAE46FF7BC84554902C37BC47B6B8A31D12BC3CE6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Processor_Large.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Resources\ISRU\Processor_Large.dds
Size 256KB
SHA256 f9ec210faef2d0a7c8403f08971e039ecab9cd16f9c136197910c28aa5d08e4d
MD5 c78b774fb08d3ee289e63faf8d93e434
SHA1 9ba1351be39afaff1a6e0fe6af79d0584d85b922
SHA512 e6dc93bb646bac9b8a22697e307dc9a1d1a239123acebaf6b183332eb30b3e33431587f9c957f11526a08a438825c75d227a72aff4a2de18a55968b6aecc7e55
SSDEEP 6144:0x6UvSUHWeBmBIw0TLe/ANTRdy5xtjxwpo:JUvZWeBmBIwSealdyZCpo
TLSH
T13C446B4178ECC84AC1BA8531B22813F8F2D5B6665D4CB7B33B9A9B0F85730F52D4B859
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

detector.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Resources\OrbitalScanner\detector.dds
Size 256KB
SHA256 d84d3656734f2165cf9c7ecfd0beb206ac24b2f6d87ca57298a1a40629813a11
MD5 10e9f2add8f8aef71c6e016b0600a870
SHA1 90f4dbd4cc01f268ed69ab707b027918dd73107b
SHA512 ec6750b06d8c99e2c7845862e683f37640db5ec3e5a6215b4be0856b9f39471a034d58a986ab512c09135f6e42715da63caa7ac5e7934ed9c6137a3edad172c6
SSDEEP 3072:V6XaL6Uqn3JDrzirlKXLMjQ0lyGZTufu/36zAX74ot:0zMQrzAX74ot
TLSH
T1DB44BEA079A4E859C4E10430AC44DABDAEAAFE92C44525A77BC1734FD63DE27EC1CD4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GooExperiment.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Science\GooExperiment\GooExperiment.dds
Size 1.0MB
SHA256 80122b1082ce727989ad0c0a1738fe5f4dde7028ff4eeddf6569e858c061be44
MD5 f03a0ada0a6da8eb6655d28495519d13
SHA1 2bffc842738026f1c9ddb93301d61ba174436fd5
SHA512 df8dc70b62ae784e22dbd90bc3d53e9ee868287d36f56a9822db01b7e9e5323632c2bc1a755dcd195270205d11be80f6cfd8808afbd0a29cad5cc5a82bbc9ce0
SSDEEP 6144:h6GQFAZ4pGK50g7RxcAK7JRi9A3M69I/Xgxb1VgMywm4:PGvRxcD669KXS0a
TLSH
T19A25A9177596C844C35806F99984778CEB80F584DE09035F78E2EB4AAD3743BFA1F9A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

radPanel.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Thermal\RadiatorPanels\radPanel.dds
Size 1.0MB
SHA256 dd022206864319f52e23ad8812e243f3335c53901a2739b6ee85a61fa06c44da
MD5 65eb9b302bee1ec0518e3238fa9f92b1
SHA1 9e8fc4581544497aaa3f28abc03ec45e62645086
SHA512 416559e27f5f865083beee678d1c83fcae8c0ee7426e40e6f3307149f1de7556bd3c7a216fbdef82fe7487d0891c8c04084f7900496c23a8ef23c85f67f7543d
SSDEEP 6144:JRWvV9yzXBMAonDibVaxYiTBewrrK7J8wpGj0WG0PWadwdhPC+C5PvUhCyCJ/:7WLyeZDqV6FYJc0WkdhE
TLSH
T103251C822B54D1D8C4741C35A834D3EABBF2FCC5E85E67DBB3C81B8BCD266426C68954
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ServiceBay.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Utility\ServiceBay\ServiceBay.dds
Size 256KB
SHA256 0e755188178919dede1ce2b6b3db85cac88d566a5f28cba4b3af705e71623d09
MD5 5b68c4ac9897f03b40da252c3d2e9070
SHA1 85802e77c4af8412f485a99bc6e51cdbef90f999
SHA512 46b0578eff5cbb251437a6db1eda3091581555af3fabef9eaaafb4054508a1e26a832f2a743ea4f5cb3566edcd26a315cf176477a857b610e6b8581de6d288ea
SSDEEP 3072:Iga7OI2CJQ6D79k/5+NcA7EsODTGgQyL5WN2O4zcyqqLotCp0p557tMDA1W:o/KpWg9O/yqqUl52DF
TLSH
T157443101BEB4E26CC44249755C29DAA8EBF7BDC5C85D22CB7BC07BDB883AC422D19754
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Utility\dockingPortJr\model000.dds
Size 64KB
SHA256 86e81f8adbd688a576895e06e8ab5badaa436132ef7e56016fd3716289f1bbbc
MD5 b2c9aea75c7d18edad3cb6c1d6f33bf5
SHA1 f960e21c45015486ef74678d1d5218f13472bbdd
SHA512 3fa4e7ac6f55060c1a8a0bde3f19beba401a9392caf062c1f254df75e09d76c8c3896914f2903857531878a6b247fdf0214dbfa371ad81f61982c67429ddb9c5
SSDEEP 384:vBhffff7fRjAhOrq7P9YfB566XUzDD8R/LhdaHYA9/TPaWA/OhtgNqqRyWhP9APJ:Z26fQgRjhdaLyWjqIWTAB
TLSH
T1BB53EA19AB55EDBDDC4285B43D08F9BC13B2FE91C4E956873FC03B6B49F885198A098C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model002.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Utility\ladderTelescopic\model002.dds
Size 1.0MB
SHA256 8128688f1e81a53a6ae2c8f9db673d0e14831c4c490d1abde15f3bd9ed5de0b4
MD5 e0113a86e5aee77c78f48a2a6259591a
SHA1 081d4632b8867b8031ea2536eeb95c20e0bdb60a
SHA512 70d47020b7562e4ec4a3a2d45ac3fb3360fec7f6695b7aca86f0e1f8bb6c761dc3a08763859f0c8de01f68ad9933fd24004f5441fb15d2191cabdb0b2bec7b90
SSDEEP 6144:ZkKKF+0W/1f+IrAIEmIHrNdkMTWE8J0Zfuib:T2+LIIrmrvZKErhb
TLSH
T1FF25B856BD68F21DC44106702D01C8EDEAFF3EA5A84E6A9BB7C07BDF0837D416658B48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LandingGear.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Wheel\LandingGear\LandingGear.dds
Size 1.0MB
SHA256 932774d60397e860f39bb7e076d7c98c1a42662767425df30262e0e21e66c66c
MD5 02a956331bea72939f849eaf21b3da41
SHA1 eeb9de52109369d13b5852bde25552a33c23f595
SHA512 fc432a521a485896009fe813a4a5c7f635fe17886b720da67ec8f5cdfb38590477ef4fe9b64cc2f0b77db5f53b533ed66c408eaf5a05f891ad66cbae52c0847e
SSDEEP 12288:ixhHK/SxiDLwzLVBAICb43zLXwxD/01Mx6a+02KzJGuVWISX:mUxDIxCcQ/01pa+5Kzpo
TLSH
T16C25D66FEEB48028C2188D74286D4BB4E7C1E3615E0E0B9B1D88275CDD3E18FED569D6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ksp_r_medWheel_diff.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Parts\Wheel\roverWheelTR-2L\ksp_r_medWheel_diff.dds
Size 1.0MB
SHA256 d79f1373fa171c8beeec9864ee3a5345bf89e6b4f6a2b845abd9536862fe789b
MD5 a212908716e20c1668a5b56d214aa499
SHA1 01ad137757f29eae26a57e4f058d01a73e44cd9a
SHA512 e612848e65e5cfb7178d95be8f9c80765d79d2d1d1720955353f9b478ea419d48c57e5d270634b4229359fb00ddcdb1c705da0d5656dee0b8868eae70311538f
SSDEEP 12288:UUS3hYgizbEZI8GLgh2kAcxCnOHMWvL5oFrlMNB8HY:U1Di81GUGneD
TLSH
T12C25E72B5DA4D168C54E01F074D8276AEBA0B415CD1E138B79C0A7A44E7F5C3E8BEDAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model001.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Props\AtmosphereDepth\model001.dds
Size 64KB
SHA256 7f455dd266f8575e2e7a28a896f180fff1794844465d78c51d3c0e12e3f3ba7a
MD5 4ff850932400ded94bea780e2ec7365b
SHA1 bad32665bb7e1d11665d8dd78b3e1cd380242c6f
SHA512 bb8cede483bc02da1dd90c5a2814d4a91f6d45553df0e5be22e56f4043fd38a487bcde1eed7e971a141c6cddac89eddd96b4bf44829acbb4c1a9163101974860
SSDEEP 768:zppWv7nwA/6Oi2zNI3oBmXAGEYSU7BWG1zgBBcQ:Tk9hIYmwESU70tBv
TLSH
T13E532E739FC183BDC04D89F9A0D9471AC3A9E416852A8364E9D84AD0DC3F1538B7E9BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Props\IndicatorPanel\model000.dds
Size 256KB
SHA256 da68aa234aea88adacc6e34ca6fd0c6d2306889a57fa90839e22cd0a613f5127
MD5 581582cb1693c00724af01b16dfaef08
SHA1 eefaf3c05b54651e6805fc4a2a28cb749df46dfc
SHA512 3cf5a8a9f83b29ef6a010f34ef55ccf5a6a9a35e9393680a682c208e40038eb7e22ce2d88ed343438151e5cbd19796a71dd047028bc61913ea177af741b0f8ec
SSDEEP 3072:hR11i00gmt752rcFWbRd7ASQrlmz1aC/nghGu:hR11pmt7JF6l1D/ns
TLSH
T14444340A3CE0E07DC95151B2AD50E5F9DA7B3C04EE9645837AC03FEF25B6C06A528F99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model001.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Props\IndicatorPanel\model001.dds
Size 64KB
SHA256 8137b6bd45b8061125c501bdf205fe92deed70eb20e5456157c174c4171bca5d
MD5 2e8f5d8cf42ab260d0ce0590270c0a0e
SHA1 4668e3055271048eff58b6d9cd83522702456cb0
SHA512 15a4773a0f8b26fd1eabae6e9b6f263f9e68168ab6771cb71d9f71717020ba1079464c6cb5d028a997cac4e9fc56f586b2dcb97d5a78d5551aba306830d63710
SSDEEP 384:fqb5a7EmuhXtxMRbcF483RwKC6ATYrLmo7jvLak9V111VC111Vko7BC2Xmxu3Mso:aRTIGVqKC6A0rLp7t9VnCn+2XSUM6Bq
TLSH
T15E5310263DD5E47DCB5142B2AD10E2FDE5E63D04EE8B440377E0BFEFA5B18065A24A84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Emissives_glow.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Props\Monitor\Emissives_glow.dds
Size 64KB
SHA256 2031f6e0b6bcbe3d56e89e7bf48cd47f93a2e27c220f4e8e272d7561517d3e93
MD5 0fc2a05e0862c6090cb29b825dbd4f5b
SHA1 63628c008df155e92e5b0ad12b50f8824d990560
SHA512 f0ba11f4a46180fa8fb16236aabcea0155e9b8795eb22c6ead4b7500ed9ae3abb95ac51b480620dd175a219dda2c6018c88c2806cc82c0c78f3b23ddb11b757e
SSDEEP 384:F/+L+aUlQDeeeeeeeeULheeeeeeeePOA/HrFYsV:F/+ZgLpVfrFYsV
TLSH
T11C53BA422F26D91ED17A2EB149B4D79983F2FEC05A4C47CB73C27727DD18AA79C06860
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model003.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Spaces\landerCabinInternals\model003.dds
Size 4.0MB
SHA256 1a9b64c51aa8616b86c4f1b1644ea5052749c6266a47fb44e68b5cb99d64c9e4
MD5 1d8c056349419c38bafde549b8e6d690
SHA1 24e04e2b737517ab1dc69367731d922153eeeb15
SHA512 4a727662842316d2627ee9a96a8bcf0aa3e099255cb7fcbdc4b34ac5c07a7030ce1bd49bb4d82b13b6c4803ea110b53f6409a37dde49dec0f3712aabd0836d91
SSDEEP 12288:bq5Rh7hrku1mapwnRQpTw0JibIvljwLSejhkCkYNrFOLg3KQrpBwxVemO:+7F/1DpHRvEbIvlj/+hkVKrVTrpBZ
TLSH
T19D164405AC55FA9CC5114AB13D48ECFC9B7B7DE894AD5BC3FBDA37AB0139C022908649
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ksp_s_landerCan_internal_diff.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Spaces\landerCabinSmallInternal\ksp_s_landerCan_internal_diff.dds
Size 4.0MB
SHA256 de8b3e97a6f3d202e7a2a54548b1960273e9775e03be39eea158d633dc8b653a
MD5 aa668d1cf7185001d2382a62166a286c
SHA1 6034aedd392d5d38f0c27b09c2bfa924238c2172
SHA512 8e8440b3818d74092ebd9d0b707bc4904f8c0801234e55a76d40652228b031d9bbd1e045456bb322e25f13be169887b6529c70e4c915bbe43d43570157ae0c96
SSDEEP 49152:MA+DuFApblRsTyZQ+2Lx680EvIR3/hgKBe4UyAfyBSSQF:MA+6FAPRw9tIR3ZgMeKSz
TLSH
T1B016B35FADA0C5ACC59C08F068D53368EBA1B914CC4593973AC06B287DBB443E85FDAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model003.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\Spaces\mk1PodCockpit\model003.dds
Size 1.0MB
SHA256 8574130a66a3cd855a0031c8ac369c7bea158b6287d6dd31f2acd972afe7e971
MD5 5e792a9a0541f672257be25ef5eadf2f
SHA1 427773f39e53e988b94036e277ea001f4f1f878f
SHA512 93b7ff1bc001346b24e7d527a3be933a71b9af508debeadee982623d17d0513c06c2b5fc5ffbfa2fdde82aa96e81fe7314e51ada250970395436ca480b3a139a
SSDEEP 3072:pJKrw0J/Gb4XzEBifTtc7uO/TmL/X8WMtNkCzSH:fKU01W4XzEBItc7FCoWkm6O
TLSH
T12625015EEB60CA98C4694DF228B52B68E7E5E4808C6D03C3B481A315ED7F947ED0F5D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

JumboHexProbe.dds

Path F:\Games\Kerbal Space Program\loc\fra\GameData\Squad\zDeprecated\Parts\Misc\AsteroidDay_v1\JumboHexProbe.dds
Size 256KB
SHA256 02dffdf7f537f049974f664a0bb5affc0096ec4ab93e68d06f50c4601cc41e2c
MD5 99c2d641b8e57cad98d0e739a2b8a1c9
SHA1 c74f4496a2389f2c2eebb77d78455affa1239653
SHA512 6367e0932f91a701ecbd8e104e429ff7186648a08e9b17cc283d4ad04f31700e2c1eb203e08ed744f2ab42d4831174333410906d54b1eab64b66b1cca28d422b
SSDEEP 6144:VmKiUsjFR6MJW3LdNLMUoccdG3kqs56KZ0rFlVmm5O:VjuaXknZ0Z8
TLSH
T166446310AA9AE69DC44558305C29CAE897F6FDD0DC4CA7E33BC4B7AFCC368909D05798
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

019.fgu

Path F:\Games\Kerbal Space Program\loc\fra\temp\019.fgu
Size 10KB
SHA256 b499785e3efef16a607001a489a8df7b61eff00b088393a26df2f0e9bab38683
MD5 a22973f47c07e16c15fede727a52cd93
SHA1 78593aa58a4ac17d652c323a3f47f2202f7af6fd
SHA512 875532b5b7f5984c2ba3fd63648173ffb73bb14af3aa1d173009f5931d429d49084b40f810a3b26c3af54535406c57d16a059bae737ebda467f4cd6173f02f7f
SSDEEP 96:IlpWBZFJQMO0PTDM949OYypNKsafgaMAazkacCaUp6aLoaxQa1QtKaRg5a60haRK:IlpWBL1O0bq4qNK6BvC4Nc
TLSH
T1D1227C23E6E49491D6320FB3882BEADDDD61A2970409970F71CC677F5F36A904F27912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

229.fgu

Path F:\Games\Kerbal Space Program\loc\fra\temp\229.fgu
Size 4.4MB
SHA256 271c92e9df59493408e4bdb4581172c6e29c8cc10765351e1515c14593cf0fa3
MD5 5bf8e5fc875b359572bcd04c02bd3084
SHA1 13497889d6c4d209c0512c54336e663a51163e06
SHA512 1a7ffd4b59d7753da93da762cb5561061e2b167056ffcd0dcda5e4ef0e382ae2936e4c3d19617f5cbec1a1088f0acd97749e0a93ca2cc538b97e51631b32b427
SSDEEP 49152:X75iWDUsbpcDWMcIFmnzU0tANKRBXYZ1hl11IeKpLdqCe7R3v/1s7fC2wM:mFt4wM
TLSH
T18F2629ACE422B933CB598C756A9FB71CAEE212F95C5F1133961AEDFD78520E1410B10B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Airbrake.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Aero\airbrake\Airbrake.dds
Size 128KB
SHA256 6f6bf213c5578bc4b80b8b7f9e1034b4d85a4c01c240d13e5e4100af86bce216
MD5 6a7ddb37c8f99448d62c659e708d524e
SHA1 605f4aad830d004023f2046b95027cb10478a874
SHA512 0d25a5473af5d2540ece9066abfec28a90d3ce41ae6d4a6de7a81f8dc846eab251edd7441117013276b974a52a663726beab5998b443b333e8a1b4bbe4076638
SSDEEP 3072:WME18cY4ikmOPbXSA0zAKzbSLBSYx+KG9:WYjabCBA6SdpG9
TLSH
T17FD32AA61E54E041C608C9F0389B1B58D391A9355D2DBBC7A9602F185C3F1CADDBAFDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

outershell.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Command\mk2LanderCan\outershell.dds
Size 1.0MB
SHA256 e74a049f397b97689f1826ec2823a223313800e2c96c7984dc1c9098c5200c63
MD5 ca26541ee842e16ccb01e19012d63a26
SHA1 de25f100b5b9c98f11a4ac77cb0c1901087caa19
SHA512 806d76ef497434766ab2a7bfbf2e0edbcad5b9d978896c7118f26e205efe7a8f2f9804ce28dbf7fd3a85c15772ee2799958d192016dcd2834e5bb71805ce00e6
SSDEEP 12288:Wd5VkF90+f1UwuNrdTvb86HEO0o/efPnO:w5HEO
TLSH
T1B525973AEB5A825CC4560C7A785CC71AFB69ED9148050FCF6940962CCC3A2E7A478DDF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ksp_m_liquidEngine_diff.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Engine\liquidEngine48-7S\ksp_m_liquidEngine_diff.dds
Size 256KB
SHA256 d860b41273ad28fa0ae48c5cf9aa9a52b24aa59d07730ba5843d2f74bb7fe445
MD5 93652ecf383aebfa5334aab910b42843
SHA1 abe701d6d839f363a6615868eb8e2697ae8e7deb
SHA512 4ce77717ed4a73ee768c8a0d030b1129a3a1adeda3607dbaecf36b5ab134b8a8e2608139f68350ca273b746e3e5dbae6b54a5d4361f5de4c38988ea9a7582600
SSDEEP 1536:aenxfyQst5Db5rueBa/teMDyFLdaj7uKZiWTsKZIsyYU4mK3qXkHo:JnxfyBDb5rgALtKk6sKZbEK3zI
TLSH
T1254486AAAB60C15CD1A94CB458581B7CC7D0F610CC1813A776C02768EE3F867DE6B9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SSME.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Engine\liquidEngineSSME\SSME.dds
Size 128KB
SHA256 2af6a80f93c3b85836a8bea9c9b9a52a070ce8dd553f3002375fec650fd19786
MD5 2211a30534a7db57691a5a384e53a899
SHA1 13216b82d544b2e85609f9c1c137ebf9eed2f1a2
SHA512 15e1704d772feee412c8509ad3e8bc8ebbbce8685efe31719071917ca53f4528c3d3066904c76d1f6cf09ec08d2e01cadd3fe851928c41cccc4e0ea397f896f8
SSDEEP 3072:91vIuCCAX3UE4/QW2JVzg64tmKEhyNCnkLmmGU/laUU7S/:cYO0
TLSH
T199D3185EA79AC95AC78489F24038B3D56FD2D01C5E1593D731C83E08CE3754A8FAACB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FL-R25 RCS Fuel Tank_D.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\FuelTank\RCSFuelTankR25\FL-R25 RCS Fuel Tank_D.dds
Size 128KB
SHA256 45bdcdc3caff22fe7ee67839f4e36207c6e94e4e748be302495a1a4c8c74f420
MD5 018eada883e9e032cf130a9b277e6366
SHA1 39d9a11b6345ecda4ce2b5c21852c3f26a24438b
SHA512 8876df87de3839377c6c68396a4142bcc51bb2d336396f5b714a6885798b012cb5b8bf394272476830e31444355e8b7c756863fc2d56ed909ee6c668c23aefeb
SSDEEP 384:d7RolS1la/s/14k2ZSKcm04m1k6da0OSxVTmhkR4FCDuAI/6+7iVWgzy41lNAMdK:cwy3ZZdLpePyJ6xvu6N0/c6F2TJ8z
TLSH
T189D3A281250AE618E3A49C307408CCA75BB63CE59D3D77C37BD82F9B881F9C139656B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CamSat.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Misc\AsteroidDay\CamSat.dds
Size 1.0MB
SHA256 25c560012d1704b0dd542a238b8c88efa5a09004321b4b0154cbff20413ec00a
MD5 59e457e21fec8f49911395c13e00bc00
SHA1 50df489fa5c651507afc87caa6a0e2d73480c4dc
SHA512 88f69ec0b49789d6c9494122f0e03fc9ce3e300bae694ac9106a312f7d7b0c9e0037e737b0403b888a038e13eaca6ce5fe37ba330d03d8d6d3db7a9c723e3c7a
SSDEEP 6144:y33WgresrrrrrrraFErGmxfMroYh5qIjZPe0jPvulNcaHRbWSbmndW/Q:yWNyBMwl0bvMNcaHcDndW/Q
TLSH
T10425B2357DA4E56CC11155716C04C8ECEABB3E84EC49D7877AC4FBEF4536C82A848AAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FuelCellRack.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Resources\FuelCell\FuelCellRack.dds
Size 256KB
SHA256 6de105f1dd4da14dceaa5e4f3878dbfec419adca8cf53a4290b6e897b4512fbd
MD5 db4f925aae6852d2215bb425974ab4c3
SHA1 d689f50861e7d02146ee3b7dab9b6da8fd106ce5
SHA512 f7c1db922b20ed5aed0c93df32692ddc15669b6746d9bd0e28cce0bbc75ca5399e642664017a118121cc0d3807d4b3d3b874b75dde0c12a161e1bae45c3b0e3d
SSDEEP 1536:w734CgpIigfbdqYgZnMnIyDEpWkh/+q2e+d8AA4Zu0Y3jd2RQAW+39I:w7ICgXgDyZh1WAwUAZu0uQJb39I
TLSH
T1B244DA51BC98F15CC40255B42D05D8BCCAFF3C91996EA187BAC433DB483FE862E59B98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ksp_l_resourceContainer_diff.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Resources\LargeTank\ksp_l_resourceContainer_diff.dds
Size 1.0MB
SHA256 c91703242f9ae0e33d35f9b3c85c8f2a8efe9d0aec85a8ee371d5426804d952f
MD5 b1307c698d36fd9d8812066ed34c2750
SHA1 0b87bab64d6ea1e0a8efb6281b02adc01b3d7faf
SHA512 58c5ff0f25e0e322f4093ec419f36351a7a49c169a609b67a0f795a086f68e6c315aa78179e5be91dfebbc8ca8495abf0e17e8ab89c7b2e43dad4f665d31abd9
SSDEEP 12288:rZt9/3RC1G9O+7lRep9MT87mPNnqHAFwpTFWG5SBnONfpap9pfyrrt:1v/3RCJETDNFwHB5iO9p6Nyl
TLSH
T1B7252B10BA59F87DC384C4BD3870A5D4D8C10F36EEAE5EEB4E216A3E4233A61991DCD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ksp_r_rockProbe_diff.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Resources\MiniDrill\ksp_r_rockProbe_diff.dds
Size 1.3MB
SHA256 1a36c3a451efdba7fca96e23e47116d93eff976e83d86d1b0b4a687a1373e612
MD5 e00861194a14e21f4ff347fbac6ef9ba
SHA1 8aab5ef8d7aa5de224d0cb8393516061b5d4f360
SHA512 6adf7b073ab01721d97bc5fc3e7e7eb1556c65beed97295291802343f50be74c38f6a988d0a32423736f70d84cb4b8bd07d5f483e8b6691b234cd109e044c488
SSDEEP 24576:fFW10doiB27AVx1L6ehR+L3Pltv9S7Sd2SVu/oH:fFW10doiB27AVx1LLhR+L39tNd27c
TLSH
T17255396ADFE092ECC08BC174596D7B780750F4B7581B078E3E9016B44E3E1CBBDA59A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TriBitDrill.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Resources\RadialDrill\TriBitDrill.dds
Size 256KB
SHA256 f71e12cdee65d3aa8743eff89536a34c557285fc78d58c6f44fb6ef2408b5752
MD5 419d0ea4da8adcbafaa46c21f6c58663
SHA1 a8f21cff4485acd8877f80bfb19498452f08595c
SHA512 469709c22c2bd35162239b04391c9cae0d3b8fdcb861ef4b0dc6849c75c1551eb07729a8cbf65923ae282ddcdf29fe2ad595599aeac5d75074cfbed3042435ee
SSDEEP 3072:wrZJf2AxoLUICsrAZ8NeNv/ofXYqJ97NiFpa0zxHnZ5a12JT1nFZrcwVouP/uz++:w1Jhx8trm8gNIfoARNiFY2Ho/1Xmacu
TLSH
T19D44D19630D6E9DBC29AC534EA7A133DD3284A284F1797D76E2173148C670CECE82F95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ksp_r_resourceContainer_psd_2.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Resources\RadialTank\ksp_r_resourceContainer_psd_2.dds
Size 256KB
SHA256 d12fba87a34ce81b5e86c9bacead3aea5487d08d6f9c96d8246b2b7c728ba3f3
MD5 43ac6c5acd0fa87a4fc7758d6920f1a3
SHA1 11786070758e7b47120e6a84df7f4d5176227d18
SHA512 dbd0489f300d19a5d0297fd5f5b72a4d422eb6335bcaf6a5e8fe12038022012d5032cecad2d6db2c7395d5f5ca99128ff75341ceb16f999f04e01de0c21275f6
SSDEEP 1536:xNx1aFF4VRz6mzRmKiwJgCrMO7iDeWiecTU08CumhZwGTHfSfLkYUKqm1:zx44VdHYiJXrMFliecTRbh6GSlU0
TLSH
T1FD4487137830D145EA3646F28C52F7E4CAE6BF8491D8B18736C47F974A97407ACC9AAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ksp_s_resourceContainer_diff.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Resources\SmallTank\ksp_s_resourceContainer_diff.dds
Size 1.0MB
SHA256 ba9fb45f086332a49a601e6575297ee8adf1f311aea6ff686c8d2b690ef87918
MD5 a4a3db395a8e74ba8d39536e2514bb06
SHA1 f6d0a2042cf1684247de2fa89e84aa88c0eff48a
SHA512 d3490e3b7116448687d27ba8d97c0d77bd6c059e001013b1be04153bbbff7e305b3925c13311eaf277fbd26da2c48c89e7cabe561d97fb341dc789cdec5bc640
SSDEEP 24576:0u5+es/WpPQIhTXGrO53PN+JnEl1OX3AI:wIorO5gElUX3AI
TLSH
T1AD255DC3FB905A79C27F81BD1456FBC7F8C12E53AAA60E974C610D5AC573A0C672A8C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dish.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Resources\SurveyScanner\dish.dds
Size 1.0MB
SHA256 6b79adc4fc2ff98481fe142562881a8bfc28639e02ac90d32a263bf321f2c3d3
MD5 e02b2def67389ca208c69c288ee8d6a5
SHA1 1b3a9236a9eae81b1d29a2a916d9ae5d7cbd8a13
SHA512 705402c6f8cc7f6ab7597b88cda9bc85a24f2e00cff1aff3672b859308181181d4b14ec873dab2c294af1b583b2456e3173782d168dc43432bc5fb00a9ddfba1
SSDEEP 6144:/VzxhvccH/Q9Srr0r3rJtrrprrrPrHrrrrMrMrrrfrhrILvFhzrRrfrehMrIrmr+:/Fcc4dpke
TLSH
T1BB25F605BDE8E81DC4225474BD84C4ADEEAF3D40D54579873EC2BB9F063AE27A41CE98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

science_module_small.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Science\MaterialBay\science_module_small.dds
Size 1.0MB
SHA256 94366be4fa4e65eebfa193372cf0d1459dfbd865f3f009f0df468658abe370ad
MD5 3a64ef4b3e3610bf97837b7c8a3c38b2
SHA1 9284e448449febedd6a9d0c5b62473f85e80495f
SHA512 76b488d62dd92fd3cb9e842c59848fc0f90b159a7742c56bb9a386a8ebc20400858f5d2801d7e7689b758fe70735bf3e4e2c00df31dc149151eb8a0fd7a8ae63
SSDEEP 24576:x/FsNCWInLIwS97C86U7yGzKuULRurQhmFWyVjZ8:tuCWwSxCvU7yGzKuUArQheHF2
TLSH
T1CD25F745F5A2CF21E98C8CA0281191F5F16637BC3CBF6777F526520CAA3364BB81606B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Science\sensorBarometer\model000.dds
Size 16KB
SHA256 baf1e718a61593cd54e1dfc450afad7f875ab7158e306c01fb1e02aff5c24b93
MD5 bc9f3c98415aad162e43a8a21187bfb3
SHA1 b6004129cf1f3a4f1e252ecb57bc93d6579dfa1b
SHA512 5506bb40a59bf37117f1dac0819b688023e56d7a7e88a454b3023e628b05780826487474c326e2d4cd59ebc8f43d69db39cf8e4c61328018d725b004fb268762
SSDEEP 192:8jR9999kMfel/MavS1mFQHHHH1rpIIK2W4LcmTnqb7Dx2er7kdCmm55:Mr6Mq0fX2r7Bme
TLSH
T102722001764AD5DAC6A25D707078C7E51BF3FCC0944C5BC77BC46BAFCC25664ACA88A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Science\sensorGravimeter\model000.dds
Size 64KB
SHA256 cbe5346fc16878132f09fe6f4ddd8d53fecea1ec610f8c1ad78da08a60b5240c
MD5 08a77a67db8d95554912fe0caa155675
SHA1 f361f3b372bee5f9c755a9424eb4ffb1a2fda1eb
SHA512 d4be85b852d6f5f97ebfda9f7e40462a53f1693f3f687c053407b11613cc943e36a95647b197efcf4eeaafcd1b71e8785d43875fac6935c71679322079f8ef7e
SSDEEP 384:bIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIIf:wEr2iiX6Amst2VhT3KIVi2iZONFzr/HF
TLSH
T120539422BD1AF54DC92E64F9F594C496CBEF39A8294C4F533AC58FDBC003DA94A04B81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mediumDishAntenna.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Utility\commsAntennaDTS-M1\mediumDishAntenna.dds
Size 1.0MB
SHA256 6e25733f5a9d882fc27a91f040e42ae5003cfcd351eb78ef06c1c2e36040cfc9
MD5 0db040af9ec930d8cf3153f8164c46ea
SHA1 a38dbba11500bba79bd78950ad6ffa09dff234ac
SHA512 b1bb0cb63d9a5427d29c95a4eaf352d813b0a3a13ccedb489d1a36c6e13b87e0a6546cc4be2259d602eb93423faea38792032e91be38e228d7381cc0ff4d53c8
SSDEEP 12288:Gybw0jwobZPLFkqSM/a2VvsOvezBLyMc0ODj3Y:9bXkodTFnB/VvrvixKD8
TLSH
T16325602BB714E954E26E08FD50D5E787DBC0AE1899050F436C407F268D3B58AED2DBE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mk2DockingPort.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Utility\mk2DockingPort\mk2DockingPort.dds
Size 1.0MB
SHA256 48347c2d99b4445217b2fcbe8ea3bd33c065cb94fa137dbcaf9eba530724fe54
MD5 ae89428e4e825b702e2f8beb9e78aa00
SHA1 460405718665ada7d3b43aafd3e85e93987f7439
SHA512 1e67baebde49f618314af37b24fd73348d163096d3bab1f23310bbc1b0dc8249f6111e48a454fb895f26c458b969d2acb30a7031251f5da6ba19cd65c6c00414
SSDEEP 24576:n3OBsKCsA+/zViPjAdaRRHuRvhny2lNHKj29F9mKnzF:32oyzVAsWHKPij2R
TLSH
T1B2256BE7DAA4A71DE58C48701479C3A0C3E086604A0597B3598C69CCFEAF465C72FBB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mount.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Parts\Wheel\roverWheelXL3\mount.dds
Size 1.0MB
SHA256 01b1d9831b74850b8dacd9f53169472394821022a15fcabce06327e104fd1ea6
MD5 2782ae3d32e365d77945473db5921e30
SHA1 9391f68b401d699f751dbc614b2294dd0b7eba27
SHA512 e2f674bfcca0e5950f874a649a30b220c3977909f11c7f1ddbbf71d13a4097342af3385665b5b3a35bdeea53999a6dc59a219846b8080a49b3a3b6662ea36a66
SSDEEP 12288:3Zt4S3bV5qJXGBc+dX8MQbKQvWh5gzKfLHpQlMUbZTzHw/DGjdWma:/XVmGZr0ShpbCFTzHwipa
TLSH
T115252BAEEA848429C9A94CB55974835DD7FAF4008C4963BB3390735FDC7F842DC5EA88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Props\VSI\model000.dds
Size 256KB
SHA256 6aea9455fbd3e60480994fff6b1f577c5d827c8f591782d9cafd016b9b27fd64
MD5 6bf1e7d630b3b01c8448d87e74960b43
SHA1 e91406911b77800347f6096bfd9259ea25d93a60
SHA512 071e88f04d833e727d13518f2dc7b822d78dfd93259e268aa207d5a9a5880c36285aa56702655313e842e3b6d7bbe36a78e438571e923c474dc7d1f1c06c3c52
SSDEEP 6144:3Yo4/TJ24irlVLeGsZ8xwYtvUkQxknUX4c8I977TMRQZ:Io4rU4iBVLeCwYtlQxT7vM6Z
TLSH
T18644594BFD22D445C88D48B0C83092F0DB6B0E345C7962533D6A7E2EA973BDA815D6B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Props\radarAltitude\model000.dds
Size 256KB
SHA256 6fd35099a20b8fadd94233c2e48d0efb4a27432c40598fc4b9023d8338ae7eda
MD5 ae0091be5fc948439999436027ca0bd4
SHA1 51a8fa64a9f4a0b349efad476b83cbb6698f6dba
SHA512 79b52bad5b67bdb94ea161c3004f8a555c49835e9f7f76f7a832eacd8b6d2b4d9eab112107d198de2e43ee225b022ed2fbb1773bebdceb9d47ad32c34942f30b
SSDEEP 6144:AmckYDEmxfURHfTkTtxwBQsZxE7ADbvpvPcl:mkAEdT6KBpxE7Kpcl
TLSH
T14744E30BEF06D477C8B88970C43291F1AF9D09206E8756171E92E76FA5727C4C09BE9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

propsGeneric.dds

Path F:\Games\Kerbal Space Program\loc\ger\GameData\Squad\Spaces\mk2InlineInternal\propsGeneric.dds
Size 1.0MB
SHA256 f8c7bf87622b5d192a3f4922af2a285234999faca72cf772d10be7cdc884e7a4
MD5 dfdd3ed74e2886099512ff986ddd4f78
SHA1 617f0754148b642f4d43c16e417a7060e1e90523
SHA512 c466f19019afd4db542747d18553be79cab83185c3960fa1984e6b30c594a91b8dd858ded5319ed6dd6b6ba22b733badb53fd4600b19c6152a015175337c0bc8
SSDEEP 12288:QN6LFtpd8yzjAdU4q44wmA+sRoAAcnO9L+cEJL45+/ynAZ2ae:HFtpdNjqHjO9lTm2b
TLSH
T18025AB657980E4A2D1B40138ECEA6FCDA7463521DC891BA7F4C9173DAC32643D63BBB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FlooydResearchLab.dds

Path F:\Games\Kerbal Space Program\loc\ita\GameData\Squad\Agencies\FlooydResearchLab.dds
Size 170KB
SHA256 4a0bbb85ec731b3113fc510a7127b93bd652de68761adfcddc21fe5c800f0149
MD5 fdc44d13f860b214a0be8da0d2e91f2e
SHA1 830e3bf775d52141edf72e7cd66aed0ee354e694
SHA512 04612e5a6dc2556601a2c48b6e708190ca460181e818a93c3ffba16a43fac0e2944f09f4e8271f9f995f6b7c38647d04f74dbef77cf6e7872b3c95c7ce5f8369
SSDEEP 768:gOdGhv4PjJ0YQH5jn0N1eHdGWg0/9V9IesLVaOYUDL2/:OwpQj0GsAVV9I7Jaw32/
TLSH
T12904F3E01987DD84C2A5A4726C87874C6B4A7760CF36AB57B3D01BB1BCB5093D277B82
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FairingBase_bw.dds

Path F:\Games\Kerbal Space Program\loc\ita\GameData\Squad\Parts\Aero\fairings\FairingBase_bw.dds
Size 341KB
SHA256 c893204b5a8ccc3658f25eb5e25017c554247838755392ee0783d8e4dce501a5
MD5 3562291a1a9cfadbb7405cb9cf52d006
SHA1 ae4d7eae7171eaf6412b7b5d9860b8fcec5149e4
SHA512 97343889d2212c9066f655b5c7fcc0c8f08d0712b30ac72c02857b1a33d93cc6bfb6a32bd0eeea27a3a51b0cb95300a22dfd6b6563c9a604eed1724b9598b3de
SSDEEP 6144:PPxJmK8SH+ni+VFGEdWzTA+z+HCD3ncylnTfQWSuADW4QMfrR:PvmK8U+nJDGEdWzTAHCTnTZvGlQkF
TLSH
T19F749EB466E2A57788EC60A6F93680E3F459CC146E84426A0E0D750CFEB3C49C5FDDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FairingBase_orange.dds

Path F:\Games\Kerbal Space Program\loc\ita\GameData\Squad\Parts\Aero\fairings\FairingBase_orange.dds
Size 341KB
SHA256 98e6b468a07a690356117baf15be86c8b111d9b01c12de43bc73e80f32a4b502
MD5 69ce6095a6307cd12d999880f7a5386c
SHA1 b93eb755d1125c678df01342e86dfe694aed26b0
SHA512 6687a8cd23a12ed7378bd6bfc52e601e0d8186cb066d38815830515f44aaf9353e88c58395d3d672494947cfda96a388fe70cc10d4b47593631d640928a6e464
SSDEEP 6144:j2H8tZAgkG2ePS4w1j76kb2LDscrMSZcIBMvEj2f9xU54u2hntL8icrTeyXW7:qukga4ujmkb2kcrMSvYox54XhnZ8icHS
TLSH
T117747B9581D0ECFACA7BA0AC76E38CB2F6A78A6379054D15573F500848717E3C21AD7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

probeStackSphere_diffuse.dds

Path F:\Games\Kerbal Space Program\loc\ita\GameData\Squad\Parts\Command\probeStackSphere_v2\probeStackSphere_diffuse.dds
Size 1.3MB
SHA256 e5c7e43bb82f0b05fbadac93c4010699356976315ae36d58e93964a174798168
MD5 51f165fde6d912c82050f26ac4efbf85
SHA1 c8bb0d859642c206eb9cea1610bcf1b092893d01
SHA512 1f53a0570d5894b62ba61a5c804971720d2205ba38227ab10b819648389ccbce06b4ad177e125833bd87e631b89ecb200fa2b245a12ec58d733e8abcd668b8a4
SSDEEP 24576:KqgU+ojLu3Z3tak7NwzhO/noAt7zptKJU9TagvJvLT9jzz71x2R8SQD8MIH3gw:KxU+oja3Z31x8s/oAtnpuMTN19jzT2A+
TLSH
T14855CE1A9672E63F8054863485101393F9D9C171494C72BEDF416BEACF2286FCBACBB5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ksp_r_rockProbe_diff.dds

Path F:\Games\Kerbal Space Program\loc\ita\GameData\Squad\Parts\Resources\MiniDrill\ksp_r_rockProbe_diff.dds
Size 1.0MB
SHA256 e5535295d45c310f3b198b5688a19e0b5645796d47462fdc8d487f4f8cb31c2c
MD5 51ff9ee6051bc6db158c3e6acffa1d25
SHA1 26784480cbbd8fe13ab297b328b01ac0a43e7ab5
SHA512 92ef3e4e1bc858c249c0d327519e5a1c2ea5fb6a5e56967deb5b7f9b6189f76c05be5cc16ca54a48c5f89b9c4a69569038fe63ab44ac8d1a906bcedd22b2928f
SSDEEP 24576:+FW10doiB27AVx1L6ehR+L3PlQx0S7SdV:+FW10doiB27AVx1LLhR+L39QWdV
TLSH
T1AE252976EEE052ECC48BC274196D7BB80780F4B7581B1B8D3E9019B44F7D1C6BDA09A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

019.fgu

Path F:\Games\Kerbal Space Program\loc\ita\temp\019.fgu
Size 10KB
SHA256 cbff87962920b4c7c4471c5e6cfd66e12fa412caedbc876dee8c1cd48197a9fa
MD5 4a348744a2333c11311e7a164b0d3eea
SHA1 1e17b4de0144463819cf2bb98975032a6d25fa49
SHA512 53d6e2c2763a72f8646ffb06a755144f4ae8215903a092c404b7c4be55099350b259c9429130a3fd9aa796cc1d9baf77d36916b48549ba94a312ab5bfc7060c9
SSDEEP 96:wlpWBZFJQMO0PTDM9DOYypNKsggHA+kHCnp6iocQwQtKWg5v0hiDyvU08Qy:wlpWBL1O0bqDwNKIT7mcx
TLSH
T1B0228E23D6E49491D6320FB3882BEADDDE60E2970409960F71CC677F5F3AA904F27912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

038.fgu

Path F:\Games\Kerbal Space Program\loc\ita\temp\038.fgu
Size 75KB
SHA256 11159b27a73ec2123c19054717bf28913eba76b8781fdf2fd579eb5e19cfd22c
MD5 f6594ff300b5864b729b6291ab0d22bc
SHA1 73ed4d1f4dd50400f56b79d46bfd24ce2cb8bfc8
SHA512 e2309053e234d6a1c0ea0d8432c52da2a9f55ec4ef4529bdff251c76208a77953b07f5b919fca6a085c047a1fe375ed4ed6f0f678bb4c02109984c4eb6ad9091
SSDEEP 768:+Npe37bOr6lnOpgGqcS3e5KPaqm9mk+MF:aM37bOr6qg4S3e5KPaqm9mk+2
TLSH
T18E732733D4E8A9C2E6335FB3D51EB49DDD6022670019A55BB48C637F0F3ADA0176B922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\jap\GameData\Squad\Parts\Command\inlineAdvancedStabilizer\model000.dds
Size 341KB
SHA256 183d118ecab8366643b0efb6469968ad3d0b0217f0db51edb775a465c81d272e
MD5 1f9c3f471b8a959cf6835820f28d2c23
SHA1 fbffc9b634a429f2bba4d676ccac4b5d8565d9f3
SHA512 404508678faf34375b82ccefcee154cbc5ad6875b9d012aeea0b707ac46efaf484439cda27fd1cfce8e54c8d2bcb8c1d358020e046d5ab5b6fe8ef023a697c61
SSDEEP 1536:8CqWdb6A7LMCXL2fnXuXfy4vYpI+d5tj4KKzE1gvzIuw86/xc9/E67Jqnt4PgW5R:P7jXLGQfy4aD5BAzIIN9/ETnt4PgW5Uy
TLSH
T101742EA97D4AF15CC82A0230B904C49DEAEF3D5A907916873AC02BFB4427FDD5AD4BD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FuelCellRack.dds

Path F:\Games\Kerbal Space Program\loc\jap\GameData\Squad\Parts\Resources\FuelCell\FuelCellRack.dds
Size 341KB
SHA256 f1c8a39c1edc92eb56edf2fe976ca603ee2afa821b69fd27e385f6d9166aae87
MD5 0eee5cd481939da76b3fa74ecfb20574
SHA1 000f3a8df39b98bcb547317e5cbe13b03443c5cf
SHA512 731eef5dc0403fa7b70367a800a30054599a8432c8bace971bf9e66ff5f0935ef52022ff234ae88a3dc1ffda313bd1cbee86c8b0c2bdfd2fdce1208676599ce4
SSDEEP 3072:g7ICgXgDyZh1WnoUAZu0uQJb39JEmcXQL1IXfqMruWbTSY:+I0yZ5Zu0hZNJpLCq6uWSY
TLSH
T1C4741C01BC98F15CC40245B42D05D9ACCAFF3C92997E6187BAC437DB493FE862E59B98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ksp_r_resourceContainer_psd_2.dds

Path F:\Games\Kerbal Space Program\loc\jap\GameData\Squad\Parts\Resources\RadialTank\ksp_r_resourceContainer_psd_2.dds
Size 341KB
SHA256 5908be19233a66c4cf16cc3660fb531441d561e2f98a6680939582adb4ed3ae8
MD5 480595244972f7a77a3498f1ee741b05
SHA1 95a41eec440b7e6e97c195311ad67a4d6c42ac67
SHA512 9af69817d85f4328f85407c2520a195957594c5daac02acb2c5a54b71ea785107ef06fe0ca55960e894f032542039a616793771fa54d2314eb61911444cbc8a3
SSDEEP 3072:jxR/SeHYiJXrMFliecTRbh6GSlUdhWpeVpNL9Izy:jH77hKlUdVVpNJ+y
TLSH
T1DB74A9137830D149DA3646F28C56F3D4DAE6BF8491D8B28736C47F978697807ACC8A6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

science_module_small.dds

Path F:\Games\Kerbal Space Program\loc\jap\GameData\Squad\Parts\Science\MaterialBay\science_module_small.dds
Size 1.0MB
SHA256 8c35c3fa8e25412dbc3040930975819dd80c251ad328e266689b54f1454063a0
MD5 292559649fd83b3fe472d1c39426487c
SHA1 7fcd5ae5e47cfb2d6b662c82ace2b4fc95281b2b
SHA512 2937c6a7570a634d93f4cd79407150ce577034d14aa89c451a22d3f2c61cd507d3c5a182094c2fefe7a164349511179e1839885bcdeda45b5cc3c25ee9d0a51c
SSDEEP 12288:9WaPY91WefW+VM64UNknV72/GcMgMTJeb1g29CQrUt8H9QI9l:9lYmIM6KnV78GnTMba2ezm
TLSH
T100252F957BD2CEB4C84C59B7B81176FCF125A5B96C9EBB5AF807121CC273B08B60904B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mk1Structural.dds

Path F:\Games\Kerbal Space Program\loc\jap\GameData\Squad\Parts\Structural\mk1Parts\Mk1Structural.dds
Size 1.0MB
SHA256 17d72c65cba766a446126700c788e7ff551c4d1d12717b1870693eab129b6797
MD5 1837bfec1c146d47a6aac0784c690b57
SHA1 2cc15b95fd888835fe8c155b80d85021f05795e6
SHA512 f1665fcf97bade96c2db0e6abef2eca46912d7f3c773604159687e5b3f3a968e975f89eee4324b41d9e0c4851254c4d645044cc0c7cf4ad8ae1fa07b5b4f9032
SSDEEP 12288:rWrz/IFQvOqpzHEKPn9mOWfGYzg2NeYyFJZX33skDWcTeO5x7CpOdOaOOphOONec:k/IyvGfgsiLt5pN3PTDLWHSA0F
TLSH
T1C2253A6D99C4F1A0E3B189387DBDAFB4E79046B97B497BD70F1032584C530A9F026B98
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IVANavBall.dds

Path F:\Games\Kerbal Space Program\loc\jap\GameData\Squad\Props\IVANavBall\IVANavBall.dds
Size 170KB
SHA256 b1d1eee504c484965b31e79f2a4c213ac81a302a7fe10b87eb0b55cf10cce98b
MD5 2bc67ba374ed620ef85665291afcaaec
SHA1 89164288cbd9246281d2e5f6abd60a39593d397e
SHA512 33fd2d50f50199d09dd904ebd9e98bb13f7eaac471cf115ceb17fa1380abb9cdd1eca511dc95200b6ae5fa994e10b832e9aca6217d4e5df7002090f5822fb5b7
SSDEEP 1536:53B13ePpnCSNCzP3WpL0pLg1161kPh1e7h1eLgv1q44RmSdOPszef721vq:5373ePp6v1yDOPDf720
TLSH
T15504F8527A81E14EC28A1632EE44E0D9DB7FFCA2814C26F733D47BCBD5B6812891578D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IVANavBall_Glow.dds

Path F:\Games\Kerbal Space Program\loc\jap\GameData\Squad\Props\IVANavBall\IVANavBall_Glow.dds
Size 170KB
SHA256 3e06039eb73f498539d0d62094f44fcabf606dd7a25c8b387d9cf74deba66796
MD5 e1a43cde223f90d55ba3e39f201cc1ad
SHA1 2fe339b75e70a032f0874ec32ba86c358146b4d3
SHA512 39dc819993cccb2ee7aa3346897dd10e6a30f740b99bf46ae035a2995c6e65cded720b2e98fe9d0631caffddeb97f664158112caaa407579c741965c458f1364
SSDEEP 384:dz6oqZWdp7tO6e3YZTlWHve4fFo08X6BBLuPUz33NKCKO75eawgL+7:l8ZWbtO6eoZwfFo08XPUz33Q9Ge1gLW
TLSH
T18F04010E9792D691C6810E31453EC39287F3FCD0396E83D73BC96B2BCE196950E6A95C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\jap\GameData\Squad\Props\radarAltitude\model000.dds
Size 256KB
SHA256 09d95b0e1aa61668129056bfd8e9953d9bf47f5e854034a51b1bc939cd3f129e
MD5 58d6c9a0423c9d9787deb2f867e45b23
SHA1 ba1c2fe810b6a950a9b0a4dd5f8ccd7e631aa887
SHA512 f05ea02e6363ffe4c991117e5bfbe4162da5992374379f664eb8201753e814a2d51a62b422c54c8e33b8e5c9ca241c1a629fc3cc148013bd3d0b329fef700495
SSDEEP 6144:ENSG+BGHChHJ358hJFNRuVA21bT+XIfok:PGixrkKpTwI3
TLSH
T1C7449F6BFC91E4A7D88982748C359EF09F500A31ADC6095F2E60AB7FA57378284DCD47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Mk2StandardIVA.dds

Path F:\Games\Kerbal Space Program\loc\jap\GameData\Squad\Spaces\Mk2CrewCabinInternal\Mk2StandardIVA.dds
Size 1.3MB
SHA256 d2437142510c2bad97a16e26d6bb6dcd9dd4948f833f06af7c80811b6b122798
MD5 7b912c4afb92fd90a18917b885af5924
SHA1 be21caa3993a0fcdc1f6713289d836ed8bede9c8
SHA512 67f31ec6d1234bb78efd911bbc9554203b5b929fae978b9aecec771bb7a1ebc56ceabbdef767072a790fce4deb195a9563d1bc7edbd87b0dd02d765abb9b21c6
SSDEEP 6144:BQvnvmlpEGqbSpCbY0yNh+X4p6P6oiGUeRS/dhazG1z6rWjNKgh7kWdQmlF5ebh3:gtuAD6dnQZzGZdLIYwkrgbqgfEQ
TLSH
T1AE551A817CA4F39CC09A01F86C04C9E9EAEB3E95D84956877BC47BDF4437D42A95CB88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

036.fgu

Path F:\Games\Kerbal Space Program\loc\jap\temp\036.fgu
Size 10KB
SHA256 957876a626d9ab59c30ed2b3d2d0cdc84e9eec4c9dbc62ca7c30456192e4a985
MD5 758863b68ef78bb37dfb6356916818c8
SHA1 b1193197a200605ae02becb26a2695dfb3e1b6e2
SHA512 ecf5f37ec4ece3e9e011dfe5ecfc2c48279f1fd1b049f7f8d8c2476172dca136ee044b9bb3ea13cd2bce95f9e561fadc7ffeeac93a6137efa71f57122885b352
SSDEEP 96:MlJWBZFJQMO0PTDM9PZwlOcgjbknyKFE85K1iwO0uwEQkUN8FQKXKuvqD:MlJWBL1O0bquFE5oqD
TLSH
T1E422CD22D2D48881D6320FB3D41BEB8DDD51E2670015A65BB19C373FAF3AE911F2B912
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Kerbodyne.dds

Path F:\Games\Kerbal Space Program\loc\rus\GameData\Squad\Agencies\Kerbodyne.dds
Size 170KB
SHA256 dc83ff6b28197e38c96aba7facf3e37b56be67785e13ca80a5bc5ef32e61094b
MD5 2b529bcc98b606cf6b209d0e11fe3b75
SHA1 411453e8842b3e3bad53534d76b984b6bcaa5605
SHA512 9536f601a1ea72af81c79d9396395fe1c9bb2f8d9e8217aef2371977160894b05e224b63bbfbc89e83e2300cf7928356c2532e48b5a00149b9a78a4c5b2253eb
SSDEEP 768:ZMnnHyMr2D4cTU2dgpTzuXas8jxw9LCuEueFfAdIN4LAZE:aF8yGXt82NCuEu5B
TLSH
T13A049FDE460FC588F048B8B7CC998379D3A97810B95D937A72B16396FA76583C00E74E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SeansCannery.dds

Path F:\Games\Kerbal Space Program\loc\rus\GameData\Squad\Agencies\SeansCannery.dds
Size 170KB
SHA256 f59c1a256a476ab27323ba1c47375df3dce66f85033d420410f94e554e58b320
MD5 0658a6908d5b3172e4c91b7b8d9a7a62
SHA1 14a82cfe8c97272341c478366ee83711c7a51ae5
SHA512 acc6168e48dcf77a6c3a7e7455bba628c0aa4aa342574dfb027f09163a9686cc796b783f7a8068fa1b7b7cdcbecbb8282341627c0e9230c1d0b65ca8bfb19e35
SSDEEP 1536:sXcIP7XrnW+dDZ7aPo8NL+e2dxAGCAWqHHGHikoj33L8o1p4JOAi2:sXRxdDZ7avJQdxZHWekoj3bz0r
TLSH
T1350408172587D425CF5D08B23DA1F38BDBA17C828A0BAF5B31D56F5B6C3789ADE02118
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WinterOwl.dds

Path F:\Games\Kerbal Space Program\loc\rus\GameData\Squad\Agencies\WinterOwl.dds
Size 170KB
SHA256 fbd659d5b4894aa204fb7062f22030571e672aaa179179e330f281422cb7c8db
MD5 045d6316d4238638e50f4e7a4152f2cc
SHA1 c2d3dc782edc750bc33376f70b20277107c143b4
SHA512 aead7c0e1ed00f361e8419db935522b9565a0a258e676540d6c6e164dcdbee95bc45d403e8583730b95a915f1a4452ed1e90671f86b3bb874c8eaaf701c3f13f
SSDEEP 1536:5uqWb8vRAwOcFFV0Xq5iyMfERWoI+Cc2fUQDnd:5uw40ApyMsRlUU0d
TLSH
T19304115EFB20D699C8582EF158B9F779A3CAF814469803CB35C52793DDFE04A8D122D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Airbrake.dds

Path F:\Games\Kerbal Space Program\loc\rus\GameData\Squad\Parts\Aero\airbrake\Airbrake.dds
Size 170KB
SHA256 72e5f7c7e4f85c8a2c26c020ed1d8f2f8ecee191a6c9aefe6dd8c1ee57417353
MD5 7e1b5861e7c0c470cabf697ae1b94b86
SHA1 279ad2d22742a821c412eec4d96bd3dc25a533be
SHA512 5387fd23f3c24a76d7ff8e7ac0364dd6dc740a7fefff74122840a87ffb9aa1fc2e3e21b31a39a7cd7f6c0c73706753ef16ea70d1e07b8029aed3a865f7be1b45
SSDEEP 3072:CME18cY4ckmOPbXSA0zAKzbSLBSYx+KGl3iP+7evXVb:qYdabCBA6SdpGl3N7U5
TLSH
T1A1045B661A60D081C609C9B0389F4728E3A1A9359D3D7BC7A9702B585C3F1C6D9BEFDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FairingBase_bw.dds

Path F:\Games\Kerbal Space Program\loc\rus\GameData\Squad\Parts\Aero\fairings\FairingBase_bw.dds
Size 341KB
SHA256 6d81c5a994242ac7ca9b9075585ae0b53900040ef5bb43ea1ca8b7f554e2f931
MD5 9c5c06abded6dbeac2571ddb4fd47c98
SHA1 0b940ad0a0b7761009737f31b6744a148dae9c16
SHA512 505c245bba1764630c2e3c5cf578cc1ceb1690aeb23b472cd58d6eaa723ecc4fcc80db193f4c3f108cfa99d57dfa080bc798ab32d2000cd82a02eb68f84d960e
SSDEEP 6144:mExYHK8ub+nkrbFGw5zzomGm5Z5jC9ls0EZwSNUu24QaKN3J:mnHK8M+nepGw5zzosZ5+s0Tk/FQaoZ
TLSH
T16F749DB462E5A97788EC60A6FD3680E3F459CC146E84426A0E0D750CFAB3C49C5FDDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

FairingBase_orange.dds

Path F:\Games\Kerbal Space Program\loc\rus\GameData\Squad\Parts\Aero\fairings\FairingBase_orange.dds
Size 341KB
SHA256 92fb8c5ce8aef65630f6f7ff3b313b26a62fc66c4f4cb98113a854e5bd17fd84
MD5 b75dcb9617c7d9c0dd3a628721cbb7a2
SHA1 66ef86516d7e723ee1dc55b7d3fc890ae79dc117
SHA512 a6b570f5614a8a5f9b19dd72ca12e8aceb918688b31b0344916af0bc1d7e2ee3ebcd29cef5a6ee6fa909a526c32a53ad61334c84f7a80a9ac459435539e2bc69
SSDEEP 6144:rWO95ZKYkOHemS451Y7o8G2z7UvqAGFJbxLDAEjiFxkawt9vVtITicMT8E0e:yWaXT4DYc8G2HUvqAwbGo7awTV6Ticq9
TLSH
T1DB747C9581D0ECEACA7BA0AD76E38CB2F6A74A6379080D15573F500848717F7C21AD7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

probeStackSphere_specular.dds

Path F:\Games\Kerbal Space Program\loc\rus\GameData\Squad\Parts\Command\probeStackSphere_v2\probeStackSphere_specular.dds
Size 1.3MB
SHA256 246b3ed1511be287b348c160aaf28b227ab290ea1648a077d4f0d7e1cd23da67
MD5 b67ae81eb0fb63f285abc147d9c7140e
SHA1 5d63e4c0cfa2527f385d1b13b3f0ffcf88415f1b
SHA512 232af79d659a9c26ef21d3c8c5f2905fc82fe3331406657dc50d78c9adedde42321c2c56df89ef177a5b1653b2e5f9b599d65558da65df94519d6a3bb9b553f9
SSDEEP 24576:Hr5yMUcLKu+wIZ8Xjpapc34My0WaD36SWsnHUvipi7wx3AdukZyPmead2R:Hr5yMUcWwK8Xj6OXWaBBi7wd+eaMR
TLSH
T123558CC9AB71D178ACD9C96115103296F1C93B12AEC8F227BE4072BDCA7251F7E4186F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CamSat.dds

Path F:\Games\Kerbal Space Program\loc\rus\GameData\Squad\Parts\Misc\AsteroidDay\CamSat.dds
Size 1.3MB
SHA256 930b19fc19b56ea26b3e83e8f590a12d8b9875dfcef0d5dc55e603bff1dacccd
MD5 4a36c975303620ae02022af2db144b7c
SHA1 b90d9a852b4e3aec2ecc5c5b1b5dfb44baebefde
SHA512 b07a4909d4c29b160cf74ec9752d8078192c3fbc7a9c42b73d16c7e658176110ca2dbc5c860fd6ffa91c6f09ded6fc8685dd8f7d45764d0c4af41dfd0a0017ea
SSDEEP 12288:nWNyBM0lPQvMNcaHcDndW/rLwetiP920mZI:X58eBI
TLSH
T1845529317DA4E16DC14155716C04C8ECEABB3E84EC49D7877AC4FBEF45368C2A858AAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dish.dds

Path F:\Games\Kerbal Space Program\loc\rus\GameData\Squad\Parts\Resources\SurveyScanner\dish.dds
Size 1.3MB
SHA256 d5b049896123943e49eb6bdc68fa92cbccf9797ba3c5508040ec39234775b551
MD5 4c0590db8ee79a0aa0275546c01af648
SHA1 e83a432b6a1e0c854785f83a044afc13c8df4bc3
SHA512 8b6dfb9212d32bf13a279d10ab439c811ea71962cae9f4cc07519a780f4af75b7de7ba27013eebf47306466d04627dd496224ef20fafd4a6014aa367f2444f2a
SSDEEP 6144:8PmsDOccH/Q9Srr0r3rJtrrprrrPrHrrrrMrMrrrfrhrILvFhzrRrfrehMrIrmrs:8scc4dj+CkS
TLSH
T168552605BDE8E86DC4624474BD84C4ADEEAF3D40D54579473EC2BB9F063AE27A41CE88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\rus\GameData\Squad\Parts\Science\sensorGravimeter\model000.dds
Size 85KB
SHA256 815d8cc0e6cc191ed86806d49ece43ddbb2aaf1bcd7549010f790ada2b6cbcf4
MD5 59823be50bb5fa0252b62826e6760ac7
SHA1 96bc629a9631bf11623d6ced46252d84df15e630
SHA512 a87972c18caff98cedbe8cae93fbc25187261cd49f30dafb88733f1226b7f171da3c159cc3e45351986c5b6e31aa42f384d2494bb55c35fb7804e3fa2cfcc5aa
SSDEEP 768:9Er2iiXqAmpL2VhT3KIVi2iZONoAPr/HI62JS10fU4jDybWV:rmpL2XoON5/HInSWlD1
TLSH
T15083D7227D1AF54DC56E64F9B4A4C096CBEF39A8694C4F633AC5CFDBC403DA94A04B81
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ServiceBay.dds

Path F:\Games\Kerbal Space Program\loc\rus\GameData\Squad\Parts\Utility\ServiceBay\ServiceBay.dds
Size 341KB
SHA256 aa2de1162a22fbc2f34fe97a71b4cd1b449cc267e82421176d64f8cafde2258e
MD5 0cc52a1279658e81018271d60918cdc4
SHA1 731720ba5b3262380cd8ca348dcb1e96b8753279
SHA512 8cb69562c7b306ac7eb1947b4382692a87f254ba6fdc14f982771487e8e4726c346fe3e7988432ad19bf0d5379109c6bf69b37967ddea94d8bc6018a71305ebc
SSDEEP 3072:YgaxjBvCJQ6oR29kS5+TpA7EsOTlS2a/QN2O4zcyqqLotCp0p557tMDA1pWJDFOV:OVEoAO/yqqUl52DMWanxRCYl
TLSH
T124745101BEB4E25CC4424D755C29DAA8EBF7BDC5C85C22CB7BC07BDB883A8422D59794
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

model000.dds

Path F:\Games\Kerbal Space Program\loc\rus\GameData\Squad\Parts\Utility\dockingPortJr\model000.dds
Size 85KB
SHA256 894b6d2ffe70324405d2671b00f6a8103e634a414e2e6fbfb6435d7a0367e98f
MD5 5dfb0d203a44795e3ee1c505a946ca0c
SHA1 7e3f782d69e8dbba9815d7e287747f8bece4e950
SHA512 9813dcd104337a6ff690175a8d7d9a8f1350f6d30b1034b1ccdcb92c508b4374d9450431152e04e49d96a97e71a6a07157a9947b3d96957b47312ee8e05cb185
SSDEEP 768:m26fQgRjudabHyWjqIWTAsywBeb879LNvI:mBRjRbHybySeb4pI
TLSH
T12C832D05AB55EDBCDC4685703D18F9BCA3B2FD91C4E852873FC43BAB49F985294A098C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mk2DockingPort.dds

Path F:\Games\Kerbal Space Program\loc\rus\GameData\Squad\Parts\Utility\mk2DockingPort\mk2DockingPort.dds
Size 1.0MB
SHA256 f55d77704e8a91fd3894d77522639ef15fc6c699adcdcb33cb742fafb19c4f3f
MD5 c18b292a93991cda0a603cbb37488408
SHA1 175ca6a79e13b224af60daca9e57b597f5bc628b
SHA512 aabe91dca710a805a0909f878567ba0a1ef2086481ff9c917c2524983d862aa972ba82393c2ba6d83ccdee722788c9056d55641492edb0ccef794ddc7d790f94
SSDEEP 12288:Gz833Tsm+9S6DWQROax4VulesUezC1FxJ/G8Hm3nFm5nF/eNFVJr:GgnwmSS5yJx3eCO+uYFm5nF/eNFVR
TLSH
T1EE257B6AA174963DC008C6B4064D0BBEC3A3C2251D1963B71D8C58D8BD6F859EB2FFB5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1912-1324-0x0000000140000000-0x0000000140057000-memory.dmp

Download

memory/1912-11802-0x0000000140000000-0x0000000140057000-memory.dmp

Download

memory/1912-9869-0x0000000140000000-0x0000000140057000-memory.dmp

Download

memory/2420-1258-0x0000000000400000-0x0000000000410000-memory.dmp

Download

memory/3952-7092-0x0000000003560000-0x00000000035C5000-memory.dmp

Download

memory/3952-8632-0x000000006B080000-0x000000006B08D000-memory.dmp

Download

memory/3952-6018-0x0000000003560000-0x00000000035C5000-memory.dmp

Download

memory/3952-6013-0x0000000000400000-0x0000000000579000-memory.dmp

Download

memory/3952-11190-0x0000000000400000-0x0000000000579000-memory.dmp

Download

memory/3952-10977-0x0000000003560000-0x00000000035C5000-memory.dmp

Download

memory/3952-7093-0x000000006B080000-0x000000006B08D000-memory.dmp

Download

memory/3952-10590-0x0000000000400000-0x0000000000579000-memory.dmp

Download

memory/3952-10591-0x0000000000B70000-0x0000000000BB5000-memory.dmp

Download

memory/3952-10592-0x00000000033E0000-0x00000000033F5000-memory.dmp

Download

memory/3952-10593-0x0000000003560000-0x00000000035C5000-memory.dmp

Download

memory/3952-10594-0x000000006B080000-0x000000006B08D000-memory.dmp

Download

memory/3952-10388-0x000000006B080000-0x000000006B08D000-memory.dmp

Download

memory/3952-10387-0x0000000003560000-0x00000000035C5000-memory.dmp

Download

memory/3952-9911-0x000000006B080000-0x000000006B08D000-memory.dmp

Download

memory/3952-9910-0x0000000003560000-0x00000000035C5000-memory.dmp

Download

memory/3952-9732-0x00000000720D0000-0x00000000720D7000-memory.dmp

Download

memory/3952-9643-0x0000000072150000-0x0000000072157000-memory.dmp

Download

memory/3952-9511-0x0000000003560000-0x00000000035C5000-memory.dmp

Download

memory/3952-9512-0x000000006B080000-0x000000006B08D000-memory.dmp

Download

memory/3952-9140-0x000000006B080000-0x000000006B08D000-memory.dmp

Download

memory/3952-9139-0x0000000003560000-0x00000000035C5000-memory.dmp

Download

memory/3952-8631-0x0000000003560000-0x00000000035C5000-memory.dmp

Download

memory/3952-1460-0x0000000000400000-0x0000000000579000-memory.dmp

Download

memory/3952-1462-0x00000000033E0000-0x00000000033F5000-memory.dmp

Download

memory/3952-1463-0x0000000003560000-0x00000000035C5000-memory.dmp

Download

memory/3952-1467-0x0000000061080000-0x000000006111D000-memory.dmp

Download

memory/3952-1464-0x000000006B080000-0x000000006B08D000-memory.dmp

Download

memory/3952-1337-0x00000000720E0000-0x0000000072139000-memory.dmp

Download

memory/3952-1329-0x0000000000B70000-0x0000000000BB5000-memory.dmp

Download

memory/3952-1330-0x00000000033E0000-0x00000000033F5000-memory.dmp

Download

memory/3952-1331-0x0000000003560000-0x00000000035C5000-memory.dmp

Download

memory/3952-1336-0x0000000006B50000-0x0000000006BA9000-memory.dmp

Download

memory/3952-1335-0x0000000061080000-0x000000006111D000-memory.dmp

Download

memory/3952-1328-0x0000000000400000-0x0000000000579000-memory.dmp

Download

memory/3952-6019-0x000000006B080000-0x000000006B08D000-memory.dmp

Download

memory/3952-1291-0x0000000007020000-0x0000000007079000-memory.dmp

Download

memory/3952-1287-0x00000000720D0000-0x00000000720D7000-memory.dmp

Download

memory/3952-1275-0x0000000072160000-0x0000000072167000-memory.dmp

Download

memory/3952-1276-0x0000000072150000-0x0000000072157000-memory.dmp

Download

memory/3952-1277-0x0000000072140000-0x0000000072147000-memory.dmp

Download

memory/3952-1278-0x00000000720E0000-0x0000000072139000-memory.dmp

Download

memory/3952-7966-0x000000006B080000-0x000000006B08D000-memory.dmp

Download

memory/3952-1220-0x0000000000400000-0x0000000000579000-memory.dmp

Download

memory/3952-1212-0x0000000000400000-0x0000000000579000-memory.dmp

Download

memory/3952-1214-0x00000000033E0000-0x00000000033F5000-memory.dmp

Download

memory/3952-1218-0x00000000062F0000-0x00000000062FF000-memory.dmp

Download

memory/3952-1204-0x0000000000400000-0x0000000000579000-memory.dmp

Download

memory/3952-1196-0x0000000000B70000-0x0000000000BB5000-memory.dmp

Download

memory/3952-1197-0x00000000033E0000-0x00000000033F5000-memory.dmp

Download

memory/3952-1198-0x0000000003560000-0x00000000035C5000-memory.dmp

Download

memory/3952-1199-0x000000006B080000-0x000000006B08D000-memory.dmp

Download

memory/3952-1200-0x0000000011000000-0x000000001104C000-memory.dmp

Download

memory/3952-1201-0x00000000062F0000-0x00000000062FF000-memory.dmp

Download

memory/3952-1195-0x0000000000400000-0x0000000000579000-memory.dmp

Download

memory/3952-7965-0x0000000003560000-0x00000000035C5000-memory.dmp

Download

memory/3952-1187-0x00000000062F0000-0x00000000062FF000-memory.dmp

Download

memory/3952-1177-0x0000000011000000-0x000000001104C000-memory.dmp

Download

memory/3952-1122-0x0000000003560000-0x00000000035C5000-memory.dmp

Download

memory/3952-1115-0x00000000033E0000-0x00000000033F5000-memory.dmp

Download

memory/4940-936-0x0000024CE4680000-0x0000024CE46A0000-memory.dmp

Download

memory/4940-917-0x0000024CE4270000-0x0000024CE4290000-memory.dmp

Download

memory/4940-905-0x0000024CE42B0000-0x0000024CE42D0000-memory.dmp

Download

memory/4940-900-0x0000024CE3160000-0x0000024CE3260000-memory.dmp

Download

memory/5168-1096-0x0000000000400000-0x000000000042D000-memory.dmp

Download

memory/5168-1194-0x0000000000400000-0x000000000042D000-memory.dmp

Download

memory/5340-779-0x000001FDEA760000-0x000001FDEA770000-memory.dmp

Download

memory/5340-795-0x000001FDEA860000-0x000001FDEA870000-memory.dmp

Download

memory/5340-811-0x000001FDFABD0000-0x000001FDFABD1000-memory.dmp

Download

memory/5340-813-0x000001FDFAC00000-0x000001FDFAC01000-memory.dmp

Download

memory/5340-814-0x000001FDFAC00000-0x000001FDFAC01000-memory.dmp

Download

memory/5340-815-0x000001FDFAD10000-0x000001FDFAD11000-memory.dmp

Download