b9335b55d4449a22628bdd4cea856183b2512aa9f2b07ddc17c5b36452802a21

Analysis

user interaction
yes
max time kernel
899s
max time network
489s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
08/05/2026, 03:52

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Logseq-win-x64-0.10.15.exe
Size 220.6MB
Sample260508-ee6lhacy71
SHA256 b9335b55d4449a22628bdd4cea856183b2512aa9f2b07ddc17c5b36452802a21
MD5 3450837014844a55effc32f0eba36d00
SHA1 c7d240f825a308628a1501e78ba9bb3b5c3ed8b7
SHA512 d819bfafb56e5b548135e2e0d622ef5b873f81ecf6a7fd668a145bff466af079b12fd84a357cee9cd3ab12a1434644b5354d38fbe036a12f69cdedb8abf3adaf
SSDEEP 6291456:IAdj1nKMmF/+yqdjlNTmAth9N27KU4i+YhVUWLZiXRFSDO5:IADKJFGyaRmApjYhVUWNiXRFS2
TLSH
T1C4B83381A251A382EE81297F6FD70173C87DA5B29BD36CF9B20F530C96D36D5488CB46
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery spyware stealer

Malware Config

Signatures

Reads ssh keys stored on the system 2 TTPs
Tries to access SSH used by SSH programs.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Contacts third-party web service commonly abused for C2 1 TTPs 5 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
132	raw.githubusercontent.com
17	raw.githubusercontent.com
18	raw.githubusercontent.com
130	raw.githubusercontent.com
131	raw.githubusercontent.com

Checks computer location settings 2 TTPs 5 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation	Update.exe
Key value queried	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation	Logseq.exe
Key value queried	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation	Logseq.exe
Key value queried	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation	Logseq.exe
Key value queried	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000\Control Panel\International\Geo\Nation	Logseq.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 18 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_577403305\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_927343705\automation.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_927343705\extraction.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_927343705\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_1847194655\protocols.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_853274876\nav_config.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_782973574\smart_switch_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_577403305\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_927343705\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_782973574\office_endpoints_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_577403305\sets.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_577403305\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_218791246\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_1847194655\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_853274876\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_782973574\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_927343705\classification.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping3468_927343705\travel-facilitated-booking-bing.js	msedge.exe

Executes dropped EXE 12 IoCs

pid	Process
2656	Update.exe
1752	Squirrel.exe
844	Logseq.exe
2252	Update.exe
5060	Logseq.exe
4188	Logseq.exe
1732	Logseq.exe
4996	Logseq.exe
3828	Logseq.exe
3808	Logseq.exe
5088	Logseq.exe
1352	Logseq.exe

Loads dropped DLL 21 IoCs

pid	Process
844	Logseq.exe
5060	Logseq.exe
5060	Logseq.exe
5060	Logseq.exe
5060	Logseq.exe
5060	Logseq.exe
5060	Logseq.exe
5060	Logseq.exe
1732	Logseq.exe
4996	Logseq.exe
5088	Logseq.exe
3828	Logseq.exe
3828	Logseq.exe
3828	Logseq.exe
3828	Logseq.exe
3828	Logseq.exe
3828	Logseq.exe
3828	Logseq.exe
1352	Logseq.exe
1352	Logseq.exe
1352	Logseq.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Logseq-win-x64-0.10.15.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1948	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134226860510141162"	msedge.exe

Modifies registry class 57 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\logseq\URL Protocol	Logseq.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\logseq\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Logseq\\app-0.10.15\\Logseq.exe\" \"%1\""	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:PID = "0"	Logseq.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\logseq\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Logseq\\app-0.10.15\\Logseq.exe\" \"C:\\Users\\Admin\\AppData\\Local\\SquirrelTemp\\--squirrel-install\" \"%1\""	Logseq.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\logseq\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Logseq\\app-0.10.15\\Logseq.exe\" \"C:\\Users\\Admin\\AppData\\Local\\Logseq\\app-0.10.15\\--squirrel-firstrun\" \"%1\""	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0 = 14002e80922b16d365937a46956b92703aca08af0000	Logseq.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\MRUListEx = 00000000ffffffff	Logseq.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1092616257"	Logseq.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	Logseq.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\logseq\URL Protocol	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\logseq\shell\open\command	Logseq.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-312252282-3884318443-358092420-1000\{045D0C83-478B-4268-BCDE-D2118A1C3194}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	Logseq.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\IconSize = "16"	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1	Logseq.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	Logseq.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	Logseq.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\Shell\SniffedFolderType = "Documents"	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\logseq\shell\open\command	Logseq.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\MRUListEx = ffffffff	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	Logseq.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings	Logseq.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByDirection = "1"	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	Logseq.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupView = "0"	Logseq.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\logseq\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Logseq\\app-0.10.15\\Logseq.exe\" \"%1\""	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0	Logseq.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Mode = "4"	Logseq.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0 = 14001f50e04fd020ea3a6910a2d808002b30309d0000	Logseq.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\0\0\NodeSlot = "1"	Logseq.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\LogicalViewMode = "1"	Logseq.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1"	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	Logseq.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\logseq\ = "URL:logseq"	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\logseq\shell\open	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\logseq	Logseq.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\logseq\ = "URL:logseq"	Logseq.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	Logseq.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	Logseq.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\logseq	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\logseq\shell	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	Logseq.exe
Key created	\REGISTRY\USER\S-1-5-21-312252282-3884318443-358092420-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\1\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}	Logseq.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
2656	Update.exe
2656	Update.exe
1352	Logseq.exe
1352	Logseq.exe
1592	msedge.exe
1592	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	2656	Update.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe
Token: SeCreatePagefilePrivilege	4996	Logseq.exe
Token: SeShutdownPrivilege	4996	Logseq.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
2656	Update.exe
3468	msedge.exe
3468	msedge.exe
3468	msedge.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4996	Logseq.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2264 wrote to memory of 2656	2264	Logseq-win-x64-0.10.15.exe	85
PID 2656 wrote to memory of 1752	2656	Update.exe	92
PID 2656 wrote to memory of 844	2656	Update.exe	94
PID 844 wrote to memory of 2252	844	Logseq.exe	95
PID 844 wrote to memory of 5060	844	Logseq.exe	96
PID 844 wrote to memory of 5060	844	Logseq.exe	96
PID 844 wrote to memory of 4188	844	Logseq.exe	97
PID 844 wrote to memory of 1732	844	Logseq.exe	98
PID 2656 wrote to memory of 4996	2656	Update.exe	99
PID 4996 wrote to memory of 3828	4996	Logseq.exe	101
PID 4996 wrote to memory of 3828	4996	Logseq.exe	101
PID 4996 wrote to memory of 3808	4996	Logseq.exe	102
PID 4996 wrote to memory of 5088	4996	Logseq.exe	103
PID 5088 wrote to memory of 3468	5088	Logseq.exe	106
PID 3468 wrote to memory of 2792	3468	msedge.exe	107
PID 3468 wrote to memory of 1948	3468	msedge.exe	108
PID 3468 wrote to memory of 1612	3468	msedge.exe	109
PID 3468 wrote to memory of 1612	3468	msedge.exe	109
PID 3468 wrote to memory of 1612	3468	msedge.exe	109
PID 3468 wrote to memory of 3000	3468	msedge.exe	110
PID 3468 wrote to memory of 3000	3468	msedge.exe	110
PID 3468 wrote to memory of 5104	3468	msedge.exe	112
PID 3468 wrote to memory of 5104	3468	msedge.exe	112
PID 3468 wrote to memory of 5104	3468	msedge.exe	112
PID 3468 wrote to memory of 4848	3468	msedge.exe	113
PID 3468 wrote to memory of 4848	3468	msedge.exe	113
PID 3468 wrote to memory of 4848	3468	msedge.exe	113
PID 3468 wrote to memory of 4812	3468	msedge.exe	114
PID 3468 wrote to memory of 4700	3468	msedge.exe	115
PID 3468 wrote to memory of 4812	3468	msedge.exe	114
PID 3468 wrote to memory of 4812	3468	msedge.exe	114
PID 3468 wrote to memory of 4700	3468	msedge.exe	115
PID 3468 wrote to memory of 4700	3468	msedge.exe	115
PID 3468 wrote to memory of 2284	3468	msedge.exe	118
PID 3468 wrote to memory of 2284	3468	msedge.exe	118
PID 3468 wrote to memory of 2808	3468	msedge.exe	119
PID 3468 wrote to memory of 2808	3468	msedge.exe	119
PID 3468 wrote to memory of 5292	3468	msedge.exe	121
PID 3468 wrote to memory of 5292	3468	msedge.exe	121
PID 3468 wrote to memory of 5300	3468	msedge.exe	122
PID 3468 wrote to memory of 5300	3468	msedge.exe	122
PID 3468 wrote to memory of 5912	3468	msedge.exe	124
PID 3468 wrote to memory of 5188	3468	msedge.exe	125
PID 3468 wrote to memory of 5188	3468	msedge.exe	125
PID 3468 wrote to memory of 5200	3468	msedge.exe	126
PID 3468 wrote to memory of 5200	3468	msedge.exe	126
PID 3468 wrote to memory of 5460	3468	msedge.exe	127
PID 3468 wrote to memory of 5460	3468	msedge.exe	127
PID 3468 wrote to memory of 5468	3468	msedge.exe	128
PID 3468 wrote to memory of 5468	3468	msedge.exe	128
PID 3468 wrote to memory of 6128	3468	msedge.exe	129
PID 3468 wrote to memory of 6128	3468	msedge.exe	129
PID 3468 wrote to memory of 5656	3468	msedge.exe	130
PID 3468 wrote to memory of 5668	3468	msedge.exe	131
PID 3468 wrote to memory of 5676	3468	msedge.exe	132
PID 3468 wrote to memory of 6072	3468	msedge.exe	133
PID 3468 wrote to memory of 6072	3468	msedge.exe	133
PID 3468 wrote to memory of 4328	3468	msedge.exe	136
PID 3468 wrote to memory of 4328	3468	msedge.exe	136
PID 4996 wrote to memory of 1352	4996	Logseq.exe	137
PID 3468 wrote to memory of 5840	3468	msedge.exe	138
PID 3468 wrote to memory of 5840	3468	msedge.exe	138
PID 3468 wrote to memory of 5332	3468	msedge.exe	139
PID 3468 wrote to memory of 5332	3468	msedge.exe	139

C:\Users\Admin\AppData\Local\Temp\Logseq-win-x64-0.10.15.exe
"C:\Users\Admin\AppData\Local\Temp\Logseq-win-x64-0.10.15.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2264
- C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
  "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2656
- - C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Squirrel.exe
    "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
    3⤵
    - Executes dropped EXE
    PID:1752
- - C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
    "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --squirrel-install 0.10.15
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:844
  - - C:\Users\Admin\AppData\Local\Logseq\Update.exe
      C:\Users\Admin\AppData\Local\Logseq\Update.exe --createShortcut=Logseq.exe
      4⤵
      Executes dropped EXE
      PID:2252
  - - C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
      "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Logseq" --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1984,i,2396142383970354308,9392212478730682776,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1960 /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5060
  - - C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
      "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Logseq" --standard-schemes=logseq,lsp --secure-schemes=logseq,lsp --bypasscsp-schemes=logseq,lsp --fetch-schemes=logseq,lsp --field-trial-handle=1984,i,2396142383970354308,9392212478730682776,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:3
      4⤵
      Executes dropped EXE
      PID:4188
  - - C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
      "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Logseq" --standard-schemes=logseq,lsp --secure-schemes=logseq,lsp --bypasscsp-schemes=logseq,lsp --fetch-schemes=logseq,lsp --app-user-model-id=com.squirrel.Logseq.Logseq --app-path="C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app" --no-sandbox --no-zygote --enable-blink-features=OverlayScrollbars' --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1984,i,2396142383970354308,9392212478730682776,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2768 /prefetch:1
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      PID:1732
- - C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
    "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --squirrel-firstrun
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    - Modifies registry class
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:4996
  - - C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
      "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Logseq" --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1892,i,7754571706546870826,6241026888286301304,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1888 /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:3828
  - - C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
      "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Logseq" --standard-schemes=logseq,lsp --secure-schemes=logseq,lsp --bypasscsp-schemes=logseq,lsp --fetch-schemes=logseq,lsp --field-trial-handle=1892,i,7754571706546870826,6241026888286301304,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2248 /prefetch:3
      4⤵
      Executes dropped EXE
      PID:3808
  - - C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
      "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Logseq" --standard-schemes=logseq,lsp --secure-schemes=logseq,lsp --bypasscsp-schemes=logseq,lsp --fetch-schemes=logseq,lsp --app-user-model-id=com.squirrel.Logseq.Logseq --app-path="C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app" --no-sandbox --no-zygote --enable-blink-features=OverlayScrollbars' --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1778211868728287 --launch-time-ticks=545990225 --field-trial-handle=1892,i,7754571706546870826,6241026888286301304,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2620 /prefetch:1
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      Suspicious use of WriteProcessMemory
      PID:5088
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://docs.logseq.com/#/page/changelog
        5⤵
        Drops file in Program Files directory
        Checks processor information in registry
        Enumerates system info in registry
        Modifies data under HKEY_USERS
        Modifies registry class
        Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        Suspicious use of FindShellTrayWindow
        Suspicious use of WriteProcessMemory
        
        PID:3468
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2f0,0x7fff7b98c188,0x7fff7b98c194,0x7fff7b98c1a0
        6⤵
        
        PID:2792
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1956,i,11434762426475424421,6965125871054544138,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:3
        6⤵
        System Time Discovery
        
        PID:1948
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1736,i,1978506077411530383,6878452652157801732,262144 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:2
        6⤵
        
        PID:1612
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2564,i,5054642098160946363,7855508743712797105,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=2736 /prefetch:8
        6⤵
        
        PID:3000
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,4111896408074798396,11008672492472949774,2097152 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=3532 /prefetch:1
        6⤵
        
        PID:5104
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,17603456621232630794,11191746785248384531,2097152 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
        6⤵
        
        PID:4848
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4164,i,11324293971769163150,4178365736213422676,2097152 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=4328 /prefetch:1
        6⤵
        
        PID:4812
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,10788736123089461493,13486773892441749812,2097152 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=4672 /prefetch:2
        6⤵
        
        PID:4700
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3652,i,3349390456808882842,12823881194261793829,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=3604 /prefetch:8
        6⤵
        
        PID:2284
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,15346438293288594945,665609251309083185,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=5232 /prefetch:8
        6⤵
        
        PID:2808
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,248602325116092655,6394193706637447697,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=5488 /prefetch:8
        6⤵
        
        PID:5292
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5452,i,3903682709014793557,2150671007316964919,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=5516 /prefetch:8
        6⤵
        
        PID:5300
      - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,15663323849486453227,14060699569320109730,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
        6⤵
        
        PID:5896
      - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5104,i,15663323849486453227,14060699569320109730,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=5084 /prefetch:8
        6⤵
        
        PID:5912
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,509415563231737076,2961147468560448570,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=6244 /prefetch:8
        6⤵
        
        PID:5188
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6424,i,9909010350207542803,8884819028536407718,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=6428 /prefetch:8
        6⤵
        
        PID:5200
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6536,i,3549788566466615270,1896213780141559927,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=6540 /prefetch:8
        6⤵
        
        PID:5460
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6428,i,2906400795837233831,14429657948100348810,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=6436 /prefetch:8
        6⤵
        
        PID:5468
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,12791473595115930346,16914834066631462759,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=6516 /prefetch:8
        6⤵
        
        PID:6128
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4704,i,6484313241831186765,7152371842857133139,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:8
        6⤵
        
        PID:5656
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4336,i,5901449058904759403,14517072924827539877,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=4756 /prefetch:8
        6⤵
        
        PID:5668
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4900,i,9985580768383659248,14459721075899444322,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:8
        6⤵
        
        PID:5676
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,9845226239678459203,699432505669544716,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=5660 /prefetch:8
        6⤵
        
        PID:6072
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5172,i,1282073136824666207,8943715130550988883,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:8
        6⤵
        
        PID:4328
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,9916155332561671075,7611819789559267868,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=5172 /prefetch:8
        6⤵
        
        PID:5840
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5652,i,17664909813894506853,17180736830313866090,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:8
        6⤵
        
        PID:5332
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6840,i,18074901982584422235,6767327900262770700,262144 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=5616 /prefetch:8
        6⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:1592
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6016,i,4261260225505932209,9620584298280610557,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=1148 /prefetch:8
        6⤵
        
        PID:400
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2740,i,18208150612882821294,13463736066122535965,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=6352 /prefetch:8
        6⤵
        
        PID:1472
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3468,i,8206201747976735468,9125671453250238892,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=5600 /prefetch:8
        6⤵
        
        PID:5072
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6696,i,16923504687781678223,11725253429372826755,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=6692 /prefetch:8
        6⤵
        
        PID:512
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2112,i,7990655417442082314,14831928227047134334,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
        6⤵
        
        PID:5740
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5468,i,721763166041749921,12137449154454180125,524288 --field-trial-handle=2284,i,1320412570343418520,13940654022908654246,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:8
        6⤵
        
        PID:2160
  - - C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
      "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\Logseq" --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1892,i,7754571706546870826,6241026888286301304,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1212 /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Suspicious behavior: EnumeratesProcesses
      PID:1352

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:2728

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3468_1847194655\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3468_218791246\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3468_577403305\manifest.json
Size 85B
SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
MD5 8ce95626b39ebc2401eee0b34c24fc7c
SHA1 f97a2fefe756f7a03e388e1333573b884730c2b0
SHA512 f04e4f695977918adf6e0603386b6f9c75a4a2202b0fe7215b642f3db491a1db398039cc28633b8e2541749403581622d28c1400f3f8fc66a3daab200e27266d
TLSH
T106A0121018015DE318880320213143D2D3A51C05247437001106108019B8636027A22E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3468_782973574\manifest.json
Size 160B
SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
MD5 a24a1941bbb8d90784f5ef76712002f5
SHA1 5c2b6323c7ed8913b5d0d65a4d21062c96df24eb
SHA512 fd7dfec3d46b2af0bddb5aaeae79467507e0c29bab814007a39ea61231e76123659f18a453ed3feb25f16652a0c63c33545e2a0d419fafea89f563fca6a07ce2
TLSH
T133C04C23ED18BABA12F587D40971DB43F7F0031B34E169463B39948C5F761B8925175A
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3468_853274876\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping3468_927343705\manifest.json
Size 135B
SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
MD5 4055ba4ebd5546fb6306d6a3151a236a
SHA1 609a989f14f8ee9ed9bffbd6ddba3214fd0d0109
SHA512 58d39f7ae0dafd067c6dba34c686506c1718112ad5af8a255eb9a7d6ec0edca318b557565f5914c5140eb9d1b6e2ffbb08c9d596f43e7a79fdb4ef95457bf29a
TLSH
T1CEC09223CC019CB119743B642AB2AB82F7B41B0B6869705A3AB3148C1F7E1B48082680
MD5 SHA1 SHA512 TLSH

Submit Download

config.edn

Path C:\Users\Admin\.logseq\config\config.edn
Size 523B
SHA256 95e2d43b1840bce2966b9b9045726211f235ea355c6c8afc230ec7df7c13e66f
MD5 58752980926bb1f66553f86d367dacde
SHA1 17bc911a37c64bf7f9bb894f63f6161937f63136
SHA512 4c4945fe4e0c161a1272e750d9b0ab264a72c4136a1d1b209ca99516edc5c5e55e8070eadcabac3c34d7cf09b60f8af775e69dc23cec0599b63619c26bba527d
TLSH
T11BF0596B9E8F695340512A2AC7CE8635FD266D8E020F0E84B0ECE00C63CA0116257760
MD5 SHA1 SHA512 TLSH

Submit Download

plugins.edn

Path C:\Users\Admin\.logseq\config\plugins.edn
Size 3B
SHA256 ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
MD5 8a80554c91d9fca8acb82f023de02f11
SHA1 5f36b2ea290645ee34d943220a14b54ee5ea5be5
SHA512 ca4b6defb8adcc010050bc8b1bb8f8092c4928b8a0fba32146abcfb256e4d91672f88ca2cdf6210e754e5b8ac5e23fb023806ccd749ac8b701f79a691f03c87a
MD5 SHA1 SHA512

Submit Download

preferences.json

Path C:\Users\Admin\.logseq\preferences.json
Size 114B
SHA256 5ca5fa50d924b3d227417d9be3feb392938d4ac17543e69431d130c050bbc728
MD5 6fad5c5864d9efef88a476a8ba9346c8
SHA1 4b97287b5eb847c976c4d6ed66668b053aaddeac
SHA512 b12e4b69f36f8048216dfe7ee6f1c58642dcdb394aa48abd75b8f333bab01391e811ab07cfc2a5656abbaa83f6cce86d41444086d4a62ae36b2f4d92435bd649
TLSH
T1F4B0922498388C0303C1249D989992E3AB2C998316887C34E2825A0C0F5961C4433396
MD5 SHA1 SHA512 TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\icudtl.dat
Size 10.0MB
SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
MD5 4171402e385f07007de57f45ff540e9a
SHA1 aab98edda310e6ddd3e4b71f95b6225c4defa7fc
SHA512 53e303895fa80944f7b0e0f64ab657b79bfe0d7c462b853ed06b556e42d78c639021c4c337743f18174614a1f74c805198ae868c52dfd8a2e270e4ce4a2880ff
SSDEEP 196608:rwPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2YDU:rswkpHiXUxY/iJ53IWhlVjEeI0U
TLSH
T1CEB63807A2FB8DC6F9F76F30E8F452679567BD496E32805911042F3B1D332A08661BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

electron.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\electron.js
Size 1.6MB
SHA256 0643077e46be824f578a6a03df53b309cf6e8d26d010f04bb313636594a4eb6b
MD5 487ec5a84aae9798eaef285c27f1b369
SHA1 ec66f80d07d2beb0701bb0305a0cb598ce5851da
SHA512 94997c5aa34fc2e77172e4e12b66203d1ff326d112ac7e00f0affc91647b82d520ad9d15320d2700a1e3a98524f35cd7dd20ce1c692740de23a630f0cc76cf1a
SSDEEP 12288:deuxIHK1oQNWJ2bxN51W5nTP1n4nuWjn7jhnK:wuxIHK1oQNWJ2bxNq
TLSH
T147750DF699B50828335165281706FBAA13A6CC335CA8F949BFFC4658A7407D4D3BF12E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

eslint.config.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\@fastify\merge-json-schemas\eslint.config.js
Size 135B
SHA256 52e3a2601a98f23c954d664ab8de95fddb390789f8b067815e484b010d3da2d0
MD5 b59e733920216d1c614936abaee5e8a9
SHA1 9c0534ff9dcc0b1f4e8c7cffd5fcb27a6d8a8c81
SHA512 02ad83f11332a281c4dcd0c45747f83155fd08af258e3820d95cc4c18f988dc60e1c363e296063be26f03cdce2a2ec951f5b02f18f5f6e62f9df589f7f0b9214
TLSH
T1F8C02BC713F8717A11345080C23078426251C04080402578C60CBE630009BCA36338AD
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\@sentry\node\LICENSE
Size 1KB
SHA256 dba8e6ce88f07f7a55f62bcbe01e436d6af3454e108825fa9d3a47e6e0c90197
MD5 aab64b279ca32d1181acca077463177a
SHA1 7d606b92f2bc3d8043e26b5dd0fdc5972cebb6d0
SHA512 2da8207a8a630c491b97c29fee3764f427a2cb27389bc416536328d1cc6dc8b89b6d41d0d7ff207dc115039f7eb6ade884234abbe66b179cf21de3e67237bc8c
TLSH
T17331655B12444BE709E21791666AB9C4B08DD02D3F337D01186DF348677B52ED4B7094
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\@types\node\LICENSE
Size 1KB
SHA256 c2cfccb812fe482101a8f04597dfc5a9991a6b2748266c47ac91b6a5aae15383
MD5 d4a904ca135bb7bc912156fee12726f0
SHA1 689ec0681815ecc32bee639c68e7740add7bd301
SHA512 1d0688424f69c0e7322aeb720e4e28d9af3b5a7a2dc18b8b198156e377a61a6e05bc824528fca0f8e61ac39b137a028029ff82e5229ad400a3cc22e2bdb687ad
TLSH
T1EB21631E32140B66299713705966A8C4B13AB19B7E5B2A44346DF3451F2A07CC2FB840
MD5 SHA1 SHA512 TLSH

Submit Download

abort-controller.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\abort-controller\dist\abort-controller.js
Size 3KB
SHA256 6b0b8d42ccfc69741b3f11b8268f094ce2a456715a5c8d2042ca5b2a033ea842
MD5 cc7068930c09996c9d34d8546863dcae
SHA1 4b19caea692199aa3cab8599fe8180322222695c
SHA512 f953e89a758488a99aa5b635ce299e0f6d77cfcd35bf398019553292c26d7792084194c933802bd8720f7242bd5a4de23d89eed2301aa797032e51702e00e008
TLSH
T10671E1F569F1937612BF2D49E31B9468E27092A311E8B9A17F5CCBB45F4108442D3F47
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\abort-controller\package.json
Size 2KB
SHA256 3d64dcdcf9d0a1d045eb6bcaa5013d486f15527a3668e64b1155839a797da164
MD5 15bcee0787c160d6f5462d57e0a6fa88
SHA1 1919f0e7e241c60fff52bdd87df08ceee790ba05
SHA512 94163274394788266e20949ec7d8236f044a5f09df9bda103a4e080205ff2cfd22ef62e27baf8b838611f9225f1d2b9422b11758c6b933a5ef989ec3d2694d71
TLSH
T14C51BB30CD18CEF30ED421E8E56A51A3612581978D81F80A7365DF5C4F4DABF217AB1D
MD5 SHA1 SHA512 TLSH

Submit Download

properties.d.ts

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\ajv\dist\vocabularies\applicator\properties.d.ts
Size 120B
SHA256 e99ba2bf1ceb28ce6a3e60093bd8cb09e05eca71d0004254d3baf97c02152564
MD5 fd8156073b135818229d91ccc8d7e3d5
SHA1 6b3b347842eacc7270856ca5d8d05368389deba6
SHA512 3931704ceece610fcf13fa0c1fc0e20dd6363cc12a7199d37789c4d488f2e9df4bbd8bcb260c99dfc0062615ab66119ca1b88a6104705ed2fa86e1e3507ada9c
TLSH
T1C5B0120AA48FA442A8E2C053F6F581437F78FECD3D076C8C91290275C6F2058600BBEC
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\at-least-node\index.js
Size 234B
SHA256 b71333cd05a553a7f4a9451d942d0f8ced014909ef2a268baef6f411f31cc6e4
MD5 0c96b113af6677070e149a225e0bdca3
SHA1 9c002b0e9446eff8a384d0a4b1c3494bb49a1e1f
SHA512 2f688e9bec13e13cd3ce75bd82ab18e970060dc279cf13545f7b4ebcab6579dee013b507fdc67e071d2ad934269e926e381be182f57f6587cd59b27a77095be1
TLSH
T190D0A7801DF22E685356C1A12B0EC8A36E68A4981B45484C86BCB3D62A004162FF5F2D
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\at-least-node\package.json
Size 702B
SHA256 cf26ac7a79b89eed8c70f7ee8b5195ed925f535b7c52577b9034702e7117fbc5
MD5 3979df18a05f450cba974c1d8257d345
SHA1 9271d65ae400dff5e800ae6f031d1bf6f58252c6
SHA512 180f927cbb1f0056b7b3197bc2d372d2b9d69ea78dec9e0303d628ca3b025d6ccd1f9207a76e895e16b9b27aa1e9776762abebe643898372ea27889104cb9049
TLSH
T1FC017B25EC349A671FC966E19C5D0942B2618D4B8848FC4D73D3401D478D63B11FE25C
MD5 SHA1 SHA512 TLSH

Submit Download

.gitattributes

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\avvio\.gitattributes
Size 80B
SHA256 e173bffc6cde613d3e6d06e49f2b1d05385cb02aa68c4931656b5b051ab649dd
MD5 012a5af22c8c6d392364f5e1db396210
SHA1 112cc730f49d3a22c661306ed32b3abf6995a057
SHA512 a201a181c895feb7ecf902ac2d97ae5ca427f15068691cea0b929d505242cc8e21c4c710f5d60884e7f3b78a466d9f2148e61e4323a760023b749a4a79d9d261
TLSH
T1A6A0241034C0D7C011D071417511F47017305FFD10C370CCC44C444CC54110171F0311
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\diff-match-patch\index.js
Size 76KB
SHA256 7cead2c7cb3e4ff5c02e173cd6b81d22005e67c47ac2ce28e4b5c73d9ffcfdb2
MD5 62ad999bb5a0576a1b6f6c23962a89f1
SHA1 b85b2c1246f3d09b9cdd68e2eb1a9fa9bb2baa6b
SHA512 4e5c28e1fef71a2ffcac98a79c95091ec19a1838d4f91030f745ec6334817fb5c818d941290c1b8f8e1ec3d7f99b66726e9df8e516d8c91705449befb0b32676
SSDEEP 768:NrIGZmTRDeDRDee8A6y2Ahooffj2EqRO2JsUxUY0M+sVq9+AG:NUGIw8A6A0uT+AG
TLSH
T1C47373F916D60225D44360A09B8FA446A2378A6F1529ED95BCEEF3447FC2A3045FCFE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\diff-match-patch\package.json
Size 467B
SHA256 912519c458314dade9d95c1c3d138ce377065d36dd4408bdf3113f414eeb0fc6
MD5 74471eccdbe4147e5438358f4f721da0
SHA1 593fe81c23ac632cd4dd7d41fe3464719b4ca8cc
SHA512 09d1c9fd21a120798297fbffacf9cf2c44918e078282b9808c6ca94d2d5c437f318dc1c0c2702f0b759289a1bfb741fe0ad290d5fb0d28c215f55c9b241cfed0
TLSH
T16BF0ECF19874E47326E837A25F5557256E335B0F884CFE0CB6C2541C574D8A711FD194
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\electron-window-state\index.js
Size 4KB
SHA256 115015854f6dd8d02bc4df80d00f37d54aad1403b5ea6993eb7d7f2eda5a343b
MD5 e40cb3c11008cc274be883f2160b0ea0
SHA1 181bc4b69fb56cf5a098728b06fb8d7f3cb6cef7
SHA512 4a3c2b4d9d2823967de1a7324b1dba8504b148805bb5f47bdbe024cde2b27d857aad154256a16ae7a4171d8709d1fcf62383e66a8c09a68d059c7ec9df1e8ba1
SSDEEP 96:sz4uqFG9eidDw2pT1ITsIyrKmNZx+GvyKwsBXUjm7Rc6QN1ftP+KpYZ18:szJFsidDw2pTahyWuTN6dsXkDftPtps8
TLSH
T180A1558FB0F2521DCC33B8778A9F51262C63426B210BEE81BE9D83502F9181B576DBD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\electron-window-state\package.json
Size 892B
SHA256 da0a07f217798d1e9cf2d650adb242104a7aaeea5dc0af3fa499316fbe47d204
MD5 3e5e034c04edba884501af2330770e68
SHA1 3d71a5be4e499e411a5d570e1423dabb335d717b
SHA512 3f3111c5099b823ac40ef1dd2956a835325f8d638366aa9d32dac481eede4698b27ed899bc88cc1aa60a68775009a3f891715fae15e8fd4d8ef328d003b0f618
TLSH
T139116B21C8345DB304DD76B05C6E2586A62248835998BE1C36CE412C0FAD67B25FD6ED
MD5 SHA1 SHA512 TLSH

Submit Download

event-target-shim.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\event-target-shim\dist\event-target-shim.js
Size 23KB
SHA256 927f1aa229bf227acec02b374b7120b5c971dc97136e55152ce5d49b4c20cbf5
MD5 f419225a1432de6d86e6cb58b5910592
SHA1 67bb3cc1ad19c6f6dc2173822a9b6165c3b57f30
SHA512 96be10692e9407457b6f13277f708d7f9da9516ece506bf76ebeccf3c328265d8b6b7fb90679fdf2ce0939a24d83f06734659ef40798f0ad54ddffeb7202e710
SSDEEP 384:WGiD34Dk1ECFoFylw+9hJf6FcKm+4m2HCynW:nU34Dk1tFoFylp9hJSFcK7ft
TLSH
T1BAB2544C79F952A3018BF97E278F6140B174C6EB22286994BD9CDFF84F49A1486F1BC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\event-target-shim\package.json
Size 2KB
SHA256 980bdd7706c72d04a4df2e3ee2c8ffccf3bc72bd8e7cd13ca38be00cafc6e8db
MD5 eb154b24f5e7a23050ba631382b27b2b
SHA1 ce8a2ce9da7170ce539fb64b1f91287aed3c5910
SHA512 65d98f81bd99b13f55d012a6fc1fa4a63e5dd9ad542a516364a5b2fe6d6c1c935d6b852c6ec591059b3d28633e7d1220ba4afcfa38aa606318efa93960b86b57
TLSH
T12351DD30CD18CDE30EC822E8646E5293B12085975D01FC497BAA5F6C0F5E66F7179B1E
MD5 SHA1 SHA512 TLSH

Submit Download

dependabot.yml

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fast-uri\.github\dependabot.yml
Size 274B
SHA256 60ffc0c7159ff6af5e36ad3ecc56fe63782e4defaabafa94a13df7150d9a84c6
MD5 a3d716d017a3cd79b03dbb0e664157a5
SHA1 a9f71d11f6f4a399e3b2819c2a19a3fec4e8b72b
SHA512 da2b6717e974649461c9db88f70a73ec38bfc1a8c9099a944f797bb6503156f27e1870db3002722429057b6a871b9bc749ae258118333180f8407ff7c2fc8803
TLSH
T12CD0C2C7CB2138A09B8C19484DA080D13939B477A34518AC3BC912D58FA5150C386B19
MD5 SHA1 SHA512 TLSH

Submit Download

dependabot.yml

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fastify-plugin\.github\dependabot.yml
Size 273B
SHA256 67dcd2013ebde5683fd6684194a6df609eeed7de80098198f59a7e07b5c19eba
MD5 728bba7c19f6ccf54b60212f61e65483
SHA1 46a5adc03812841496080ea5968a4d7d33446b16
SHA512 b53ea69d58394614ac430db0aac7d5ecba85b1732ed36bff73cd876dda2b2b16a24f97850e4a9b5868f70e23a04fbba680ed5ddf8c9f34169885aa5dcf9675ab
TLSH
T19BD0C2C7CB2138B0AB8C19484D6480D02939B467A24518AC3BC912D58F66150D382B19
MD5 SHA1 SHA512 TLSH

Submit Download

copy-sync.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\copy-sync\copy-sync.js
Size 5KB
SHA256 c9e73ad9492a4a1e2242f1e941302d01f21f3978fa30119db2b3eaad17feb87d
MD5 23f879c19b9f42b90b56648362e092a2
SHA1 3577d8fb71b1143769781f886e5e91a28458591c
SHA512 e9f2b6da3d6ead4b00a88c90bb973d21862a84f29f969b8169b3a2de178a0aa47b44ab70ea0e55b1b7fc5905d73af0ab5a45ea9b9cf7c0924bb4c3f01f554571
SSDEEP 96:TIWTsAsFhj/3AzOalAvxx6OLItjCKLqMm+qIn6iv0EWg5C5KfM2JQD0N:TIadyNYzrmxBSCKOx+qIn6iv0v+C5uQ4
TLSH
T199C1E04D73EC37286E12B9F4BC56513AAB49800B39380A54D09C4BC6EB52978BFB6D58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\copy-sync\index.js
Size 70B
SHA256 43d2fc28f9a6071056f3055cca70d810555a7229c93c70810881c048bf3dce73
MD5 95494fc7a02209518e070c5470727df1
SHA1 3cf1fca7a7d2c1aba4a508a38e31c344d7255108
SHA512 61056113a22611bd2c41ee042fc7e6b126ee84b57770fe3292bdebc3709b99a3d1733716c81971849c2087acff3b0ad75f43b2297b677ada2a32dd94fd5294b2
TLSH
T132A0228F00F8F2CB2B0C0BA8C200A800B0C0F0200C0C3A230AEC08C30008CA88BE0CBC
MD5 SHA1 SHA512 TLSH

Submit Download

copy.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\copy\copy.js
Size 7KB
SHA256 3c0bb54aa431fac2a9b0a1c26562e465e4b540d20cb40e5400d9c2d01f0d9dfd
MD5 f7d861c3469b46cc419136ff585c9f97
SHA1 7715091e1e3173e3f5375092f035992cba09b39e
SHA512 99bb76f6f2d3ad22edaf2fcc13a70dd199e62fea175760acc0ad6060adc662e84747dbfed412c0821433b310e7acf1604d6fd1e0d7fa520c7ae110f1a155b7d2
SSDEEP 192:MPILG4sH/d+BZCI+9MqhvQK//C4qeH0GbUEypnf4du:sD+EoKi3aUsu
TLSH
T1D1F1AD8A22ED762D6B637DF67D67403AB61D8807387D0A10F4CC8785FB51834BBB2A54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\copy\index.js
Size 111B
SHA256 06f95d3bdf12008047c254fdd977e43ca451c1470ab7ef0fefbb48b7dbb39008
MD5 562ca7a595a7b1b7270f140c32689ac2
SHA1 f685df7a46989c967bf917a5632a587298e22e40
SHA512 41fbdf651fd47f436c9c1edd6fe198c58ef09ffb61799e86554d93d00c85bfc4443795acd39b1048410174daefc398f5aabfed77a90cebb40290e278b3bafd4e
TLSH
T12CB0929506F1A66FA92885C09200A912B4CBD121398D9161C5884AD2008889997618A9
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\empty\index.js
Size 986B
SHA256 e32d83a6fd73dd1399e5a755f34d070788a68b0f215a679945b226c1b3f00a8b
MD5 d2e0e0eb95ac259bc7f8fb65b992ef0f
SHA1 72cfa757c416b468768d363ece8e71b66527577e
SHA512 6adc99e707e82322e33861325a2db5d84d16ab01b2ea78716761819d67ee5947c4cbad2e64b64e244b3b229830902ecc2d09299c2aef5032f3486b220bdfd11d
TLSH
T16C11228606E633080B67FA966DAE4212F04AD413B65D9D86F9CC12E92F0D8E547F3CDC
MD5 SHA1 SHA512 TLSH

Submit Download

file.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\ensure\file.js
Size 1KB
SHA256 a104ff42c9aefd0e34556b9df2e4b5c9cd15315b0b0f70b07938901428b3c608
MD5 cf3696fe43fe778d704fcf8fcd486d74
SHA1 80c2a847a193ab5a9732746b6f5953cb50593f33
SHA512 ce5cc7fb9fa23a2ed9489e17fcc9702d6291ec656e2c6c56a340c14e60cf154fc3d9fd274c59e3fcee7c940ed0c66a0e1d56476b11b0c554126b37ba15a9c571
TLSH
T18731F9E621E6732A4F97AE2B521A8631F347C4A7253D828078CC4350AF4253407FDEEC
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\ensure\index.js
Size 623B
SHA256 6c8e1d92d85d04c25c1a076b1270e26dfaa36583ba95d6d5b7874f3b1700cead
MD5 27a43257b6009138ffaa8a7462ddba66
SHA1 68e93d6534353e9665f5d954de79edb27297b68f
SHA512 7957919ba39c0cdb4c9ae7b1a72e2493ec199aa58d5306bb263b6b0038e6428fe4183897f9a2c720957db9a79000ad23f822fcc03aaaee032fabcbae1003305d
TLSH
T11CF0ECC5AD6402987FA0424BC9B27E00E2D2952F21C87112D298CC7CE94E5147AFF8EF
MD5 SHA1 SHA512 TLSH

Submit Download

link.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\ensure\link.js
Size 1KB
SHA256 61ea4823cfb1abd1c3f3bbc51ed284d4d7a73f9d074efccee06cd4d64eaebfb6
MD5 ff62149b525aef3fbfbd4accd2256aca
SHA1 87a056a34d6f9e0afcc150c235c6b972afc8cf7f
SHA512 89f098cc23c192306519e14a886268738d89f2246d4c6c6f1ba793f5936f9260a8f734c88cbadfa9240345e1c265122f6e39e4595050ba69bd5a3d8745712035
TLSH
T19F3170C05AE632158FE757A7149A3E25B245C9E3237D05C1F5CC47B0AF4057C86399D8
MD5 SHA1 SHA512 TLSH

Submit Download

symlink-paths.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\ensure\symlink-paths.js
Size 3KB
SHA256 5595b764059fb90ce4a13f5cdf43988da97e636521d3c599ce5260681d75bdfc
MD5 be9c8f74132d37198fabee775b684481
SHA1 50fbb32d40b697a96fde72b07259933a9a72411a
SHA512 be3430875e0fec0030c263aac0757b559a4fdc3accd681d2bf58371be1873d6eb959bd3678b7b72d8b785c4b74215560bb9bd169b5b81ac689c9080cdf905156
TLSH
T1CB618E4A43E53230DF9333D54A5B2BA9930485FB223A2941B68C52F07F5983C46B9BD4
MD5 SHA1 SHA512 TLSH

Submit Download

symlink-type.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\ensure\symlink-type.js
Size 694B
SHA256 17abe9590176305dd04316b2ac5c972dcf54cea32d279f955fbcf25098743dc8
MD5 75871bc803a6046deefe24a3f02f4f3d
SHA1 60686b2062037afe9661f006a43e124441409353
SHA512 a6702949cdc3b80afa6af280508c9514cd4f98907f2b109ff1ab63e030fdb9e9c1be6117d52b4f603bd402ec9fc1ef2a3e5b234280679d0cc4b8f043e0de96af
TLSH
T17B0197D820EEF1114E92A69982EBEBB4B1CDDC130B0E1CE1C5C01230EA44238462FB1C
MD5 SHA1 SHA512 TLSH

Submit Download

symlink.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\ensure\symlink.js
Size 2KB
SHA256 428bef8f6e9f46ac23f6fa8b9a60f7c6328564e663f33547fb338a1f42421b32
MD5 f8f10d59b5a7630a949c716876003c3f
SHA1 dfc14c66722e60dc6879221877aecf9481d96b91
SHA512 b7fad5e739627ae12717be922f57da7e5a61482d95472729cd38eab262683ed1687525edb0adcece1aece6de96802f4a668e7cd9c1ede8844d808f4ca44a80ce
TLSH
T13E415BC453B67214AFD397D684E32E69F149C893236E1981F08C22F45B0197C862AFEC
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\fs\index.js
Size 3KB
SHA256 6fc38ce67d60cc5dc9b52a6385ff133007fb1bc446bfc6ccc5971a4b418eec27
MD5 605f637e4a7753f3124035794c882c4f
SHA1 5362fe9fd2c8d632b37b2602ded1a0926a273f6b
SHA512 46519635db7d0184cab2933ff0c40177d8d649a1a9e609e1ac372fb615b156c847be26b9a595c3e9dbb5bf57dc012965662d6d02be7c0d39c6ffe7468427e885
TLSH
T12B61526728B622949B23B17B451FE65FB33AC02590AC3634F0CC96741BCB57C82B2D69
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\index.js
Size 719B
SHA256 24ca8c7fb0666041f080415bf1bcfb4ae4815a21073557d9a85c01173f8947c8
MD5 f42d0d00f3abb1bd2153a75dcc7a0c49
SHA1 b7111abcfec63f3c14d78fa1ab083daadb2a70d0
SHA512 8f5e540cf5a239e51473c8da1f0ce4c60400c031f17a9e899ab39cd1620324ef56776ad591a6dfa9288ef6e5c4b2f846fa36ea5f8b788fc13ba31141cab5bd14
TLSH
T15101B5835FE5E98EB843B6D0764E61B27547D010C42AAC80C6983DD704899ED0BA0CF3
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\json\index.js
Size 508B
SHA256 c5ac6a8005308e5bb36619fed225c987872300d356fa95d0d56878029ebbdc45
MD5 dbced9952c4222c32a88bba2d8b4ef06
SHA1 047cedb67b8047183dfded82b56969c688dc5008
SHA512 47860f155814c0744fbb2788010c0d8188e811e562b653fa5de5c6b852b870a0d29c7e8cc6d1fa55278311b8c8625c93ed1435bf06ccf6e1598ca864b369e06a
TLSH
T1C7F08261056C4F191C0F0AE2649CFD5D302EEE92DA54A97C73CB659C1AC6D6446D34CE
MD5 SHA1 SHA512 TLSH

Submit Download

jsonfile.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\json\jsonfile.js
Size 238B
SHA256 a986ad3c13166f3bf8f30b18140bfc8ea1754760ab3802aa7c8c3780d54f07ba
MD5 9a378d46c0c6a89b9e32d5c90ae44be9
SHA1 6631d5dab8ea65a104dd9113357b4f0a2ada6fcc
SHA512 f3e3743064dcc5bcf399892415ab04d85b9ced33b35ef64b9ad9b65b000d77f25f1ea39a80b13d309a34b6dbf596d83fdac825e7ebd001db32ca4ec887d07510
TLSH
T101D0A78285AC4F850F0C4278954DF906712DEC96C31C717C23D9921C738EB0808D39DC
MD5 SHA1 SHA512 TLSH

Submit Download

output-json-sync.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\json\output-json-sync.js
Size 271B
SHA256 7e84f5c478c02d8507238dc355ed5fe649fe61959bdc100da7c2a29599bcb714
MD5 2e5409e141cc5ed747bf744dc62b3362
SHA1 2f46f4bf9814aea91b0f6763c5d0f07e0ea9de05
SHA512 9b0e9a08050133f5e56d32016c74f725ee1f9d20a91d0bad8d47721513fb84adae2301fd00d5a92d932729442b11f4dd27a320d092f755ab2ed815ce28c509a2
TLSH
T120D02B8604D573092D8F37D0C0AC2C6C61F2F054301CE8E0485D1ED6028283DEAE38E8
MD5 SHA1 SHA512 TLSH

Submit Download

output-json.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\json\output-json.js
Size 272B
SHA256 1f58fdf60cdbc9d34cd7a4e2688be218572bc8beb4ce3ce377dca515a06e3b50
MD5 551ad6b0fe72dd3b16fdbde88679f03a
SHA1 7a5ab88d3e20934904d7bffb20995b852442c0bb
SHA512 0ae4120714e0520fac950802665987a9f4d82b06951d0aec3431a982d323a60aa3d1497e712b03f6a66b32043d41d3e9f329c50087f041459b0d37d340b10621
TLSH
T18BD02E0700E6B7192A8F31D8C0AD08BC20B2E184350C88E04D5E1EE2128186CBAE3CE8
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\mkdirs\index.js
Size 328B
SHA256 adcd576e2e3868b94adb1bad6d1e3cf2312ffdfa71e49a57fe6247e116e75ecf
MD5 9cc1d8bb2c89810566f60c0664d974b9
SHA1 b0d9fcf6032f19505d113a6ea1ba769600751f28
SHA512 58652f4f9e3a082a0471b2705472e126ab8249f1805f78c6966625aeac306ed187323b0c4cc145eafb39f6f9d0465aa8c2abbe13f273ab2a722e03901994bb78
TLSH
T112E0B6D501A7F76E5DC08589A50C50917353C9233E087C9D829D1EE9538F8A4556F8EA
MD5 SHA1 SHA512 TLSH

Submit Download

make-dir.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\mkdirs\make-dir.js
Size 4KB
SHA256 58755be7dd1c7a78a7c137c7eea18c2e6ccfe221a720ae1da2a0fff3dc3114d4
MD5 4ff0d3aa621c19135e377be1dd121bca
SHA1 66271453d9f0bdaadba03b78c7c95a862c52e970
SHA512 53b7fadf3617d4e820e75037bc92967b1805a77ba685386533eaebde69f77d3c86a1db394b0895e4ffbb04e09e1fe061543e409fdd88c68fd8f6fad3cf14ec5a
SSDEEP 96:5Ps/QHnov6SaDo8l4qxT7zvzZhixO3vzZN:kQHnC6SCnl1xTPvzZhixO3vzZN
TLSH
T117913F5966FE233246E332F8658D540673B6D06B3A3E1E457A8C83406F460B8CEE3ED0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\move-sync\index.js
Size 70B
SHA256 0ba99125dccf6e55d9a7d0bcbcae341a6187579f24ad0b63d15c0dadce80cd7b
MD5 c2e4f586bcc5bc6e0db8369003bcfd6b
SHA1 ac40f3d0062886869329d8c31810935ad7c34ff5
SHA512 83044946f684f2275d4e84dd63afdd4a4bb5caf0ae22534622c9dc9c5b6d480fcd17859d6458183830fe6dd585e4d0d4f22791bd6adc21984c49d44b4cb4b82f
TLSH
T180A002DF05F9BEDB5BCCD198E249B44275D1C4754C0C69624BDC59875448CE80BE2CBD
MD5 SHA1 SHA512 TLSH

Submit Download

move-sync.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\move-sync\move-sync.js
Size 1KB
SHA256 43ca1ece8c76d268df3c58c7916c680779d0f4db78e73a40b42197b90c510275
MD5 cc9339e7d4e2ce08f6d79d08d348d824
SHA1 a391900c2c6e74e81d81c4414d9ef2bea7dd8ad9
SHA512 376cc5c0f5bb4b79f28816addc51c5f493dfa83139c9bac0872329e39f3457492edb3144a133e62734c3cf158f48d7b708fb311646f748fe11971430d0dd1696
TLSH
T15D219DD897D937102F0565F8BC1AD433B246C526FA2D5B00D0CD32D3A352AACBD83D58
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\move\index.js
Size 111B
SHA256 6ccdbb83772d9b80cecbbcc04ecf8b6fc0529e8daed1c395e27b6a83d5708ee6
MD5 1895bdcd799c951badcafda242a46247
SHA1 482e376c2d37368c3c202905b93429f3d46c9914
SHA512 cdf6943dfc80986d4d49cb9062082adf39e8214f3f683fa06ea51286708632e525b952b70f13f5b8e4e0563940fa1ce194ee72310930ec238373b599ee825900
TLSH
T115B092951AE1AA5FA9A881C0A240A9037087C1212D4C8561CA4C4AD2008889807618AD
MD5 SHA1 SHA512 TLSH

Submit Download

move.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\move\move.js
Size 1KB
SHA256 9df4b4df8f35eb01cc171c8c086124862f2173c7d37d890730fdb5137c2161a3
MD5 75b52861f7cd90b6ed7cece7279ce037
SHA1 5f4c2db7135a3cfc04d9711474173fa4fb606c6a
SHA512 1f3c698c5185190ab82dcd2b6872887ef99d5936514e1b7d3532591bf15215e7ef6f75f7817410b03ee310b61955a9f3718bb00b66212504187d20c6e51b5ebc
TLSH
T1C5317EC466F67A2957A35CF97C27C437F209C827A53E0640F4CD02D5BB41D7C69A1E84
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\output\index.js
Size 947B
SHA256 a27d1a72ed1ecddffc57e70187a4b72467ed0dd34092b7e3d2817b9f4359ab5d
MD5 b0adfc74c8e51ce2ab659bfc13752ed3
SHA1 1b0879db53a00bbfeddcfdc0c190901387bab7bd
SHA512 4bd96fa626592e856431c3da18f7f2c5262fcf7f8fc95a4fa8b3ecd6bd7f53e82ee27d3255711df0addaaaa3fc7ba5e11104dd448f90f490e5517eabc1cdad42
TLSH
T174117DE123F273994FD6A3679017DA1EB567E0A1321D4AD1949C09E51BC157C42E2CEC
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\path-exists\index.js
Size 263B
SHA256 5ce096c95daec0259817248921b39a9e0df4d342db171138ccb62440cc7a0cbe
MD5 dfb2813673ea5279a9aa7305e5fe33f3
SHA1 6e6491c1ab3389433d1b39a33b3ac8760649a2c8
SHA512 53d93b66ed4a2eca23046e6f2b08fcbe4cde40a2b841ab38db838ac75b0882947371024cb74ae43d2c9a2e095e2457e2207979c45f07d46e6e2b5f99efcfc794
TLSH
T1D6D02B054BE1B47B9EA002C5D1187D07F047C0F111A850D2C04C06C5138E4AC05708F4
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\remove\index.js
Size 165B
SHA256 dff95c5640a0b4b769290126940a7683e0e6d29ec591df63b7296712f81d9c56
MD5 e8c6a5092ac319dec6888ff3686e1dd5
SHA1 43a7630664db987ce37fc634b7474b6b9428ab4e
SHA512 279cd38d75bbe85536c175f6080ed91891a90e15ae81da328b465049ee6a1593d721481f060058280ecb29e2b05e4caa8dd141983fdaa66cdd95fec3123a6642
TLSH
T187C0808105D3756F1A5880C0D10097013147C81137585451464D07ED50DD8942F92C69
MD5 SHA1 SHA512 TLSH

Submit Download

rimraf.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\remove\rimraf.js
Size 7KB
SHA256 931cd85d1564a59db583841196cf2773940e7eee30830514b448d2d4919cc534
MD5 8af4d4abb5011a6543699bfc934d2522
SHA1 9aaf8a271693de5fad3f942d7ca303e10be07c40
SHA512 81c82cc109b2fd05d2158a258bce6c4457f3a39d305c68243e18e01faa8c10cfd2a7a85e8980b339f2b266efc5f8eba8888f55b1a0f56355a81b266cf535a86c
SSDEEP 192:ZoLKCXrsNPuOqrCMZA/FPjUZaL/rTtTLDXpM0OwOs6DEYyn1J71iNfM8Dnp:yKCXANPuXZAN5VTLDXpixIDJUp
TLSH
T13FE1208416E533204BE337B9469F856EB235EB6724AC29407D8D43D4AF50238A7F7EB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stat.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\util\stat.js
Size 4KB
SHA256 c92fca3e541916d2138c18bcd887a6e4fa46bb2e9746cc05d63ba2edc522cf5d
MD5 cbbd1b4970fa837c23013c2431b8c35e
SHA1 38d324d1535d3303f3eb12af0eccb268194d267e
SHA512 b6c96f7e1a9fe9b4b58a9a50c9a313cc95d9bb4e3f306afc71d2fcf7fde1e7ed3fddf151077695fa9b59d0a6f50cfc8a1b809dc68324aee17cc9faa7dede4892
SSDEEP 96:GKr6X85PDM/UQrcNmTSYeK+PUQ8xVxTdBG0yCOgU:M8KsQ8rh8Q835vG0agU
TLSH
T160A1BE4536FC322ECE46AFF17C15553BBE2BC44B35395940F59C1B09A74292C8FA2EA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

utimes.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\util\utimes.js
Size 615B
SHA256 4a049bcd580984957b8690fb05f7a6bf5c7e59bfc78d6817882945c35f3a44d4
MD5 b95e8f0f6d31e27cacaf907e04d44ad7
SHA1 dad744f8edf8218685028574c168f77f9f1d75a8
SHA512 24eec0a03ccf8625a8c86cb4bc70a05ea4365ffee5190411995d54ef5fc5248247e56b87a8d4e5cb56e6cd9d929b2dfabbbde7c6fff31fbbe4b0cdbf6c8234f8
TLSH
T1E3F0285611B223329B9BD7932127DEF1F3D9C005172C2641B1C9939A2A1593CD2E09F8
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\node_modules\jsonfile\index.js
Size 1KB
SHA256 2cdf22ffb5a170ad2cf10cbdf647e2a9366b6afa11e9b4c2370d0cf5b1f700b1
MD5 c18cdb1953c23651297eecd0c2a35df9
SHA1 91c9c57af8bd81ee9a62a5b25797ea32883c15b0
SHA512 14ec70b8aac0017d3e8f7d4bd3bcd9d078957f6a639a0217d84310f198e8652eea06af3940658c91fb5e8a140d7e1c52d40f0f65d5afcc342060fffa48daa56d
TLSH
T14D41C4825DEE7B248BC37AE094467009F17AC392356C9990A5CE53D06F8601CF0E7EDC
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\node_modules\jsonfile\package.json
Size 762B
SHA256 8e41bd8df7c353108f0df01103bf0776e00a23b4a9262bb7d5fd597a3876ce81
MD5 e27717dfc4310ca320bc5321b2ea7f96
SHA1 029e464bb2b94e09c44278fc0af038f59fa879cb
SHA512 7b4f44022c9c8b5b3a2955ec5de10e34295ce6d80a5bef0613703f8bea6bc30ed363e4ee7cfed5dbaf974ea0516dda5c50c42018e2c98ae8e2df94c17078bb52
TLSH
T185016804CD694DA306ED329A9C9AA60361118F574959FC1C73CA510E8F1F19F21FD96C
MD5 SHA1 SHA512 TLSH

Submit Download

utils.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\node_modules\jsonfile\utils.js
Size 498B
SHA256 b0c188696676561411f3c5784d7de61bf21927f9c334e0cfb9136a8b7c82be5d
MD5 dbf76159ea111d8f0a848e94285b0b68
SHA1 9fcb3c2e8d7b909360c945cd568cc32fe7cf4596
SHA512 dd6df7add03726a8528cbc261258a4b133da7267ba082a8ce83fe23a646fb7d68e1ae4e1709025673914b6dbc2355ed486129039a993089f250a1801a7a93b3f
TLSH
T16DF09E63B5D524840FBAA321C5CBB0BBE274C5B5803057F095D6586B34C5229D1FF714
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\package.json
Size 1KB
SHA256 528b7d9a7708b1694510f752f286e7ef70f669fb604411645909252b3f99cd96
MD5 2cc14a7007d6d2b959051d6724ceaebd
SHA1 dd47b6994e49f103b9c06ef05a5ef7fc210135a6
SHA512 3f0d0f4d0312f0c481ea7b8539a6d19ebb1dd654907deb9c27ff9cf09d678cb8b554a4a1e023919bd0abaf7220f407e8ffbe2dc68cf662614e3e262b770465dc
TLSH
T1CB31C016DD8E4EA31AD9658E3C4D654666209E478E05FC1C3BA6438C8F0D12F62F99AC
MD5 SHA1 SHA512 TLSH

Submit Download

license

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\got\license
Size 1KB
SHA256 48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0
MD5 915042b5df33c31a6db2b37eadaa00e3
SHA1 5aaf48196ddd4d007a3067aa7f30303ca8e4b29c
SHA512 9c8b2def76ae5ffe4d636166bf9635d7abd69cdac4bf819a2145f7969646d39ae95c96364bc117f9fa544b98518c294233455d4f665af430c75d70798dd4ab13
TLSH
T1EC11931D7254136318BA13A069696CC4B32BB11F79AF6B8418AEF244233B46CD4FB840
MD5 SHA1 SHA512 TLSH

Submit Download

clone.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\graceful-fs\clone.js
Size 496B
SHA256 7258eca52e65d69845759503f9fdd66c252f40e5eafb76db5d481172e31ac9ed
MD5 f8b8f88d8550294c47ee5cc6e8ec141c
SHA1 c912f366fe0025ea74e0e76e58277147dc0a3167
SHA512 57fd42c80a8db172734ca9d270348eb29825e52efb0619d53149084d6cd8cdbce8159abc2f89a3bc127aa7be44e223bcf1f43dd0f4b0de607dec2e80b1b5a1e4
TLSH
T11AF059C5F9F09AA10973A5D0609FB505F26CA437403CE540AF94FDE0D49112B82ABEAE
MD5 SHA1 SHA512 TLSH

Submit Download

graceful-fs.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\graceful-fs\graceful-fs.js
Size 12KB
SHA256 7da35669b6b6b0e4aafee31674c033f2cebb0c8f9ae010f709dcc185d3f17786
MD5 63d49916c84e2bbda13d6563d9dc18b5
SHA1 55efc5a24c26495d0341c7884f0de5eb36520efa
SHA512 36c3cf7d8eefc90640dd0bc48379f81e194f596084869003eaadd95db34951e6a19c202c244a9f3894047db0a312723ca1fd8171b27b29b2b78fff87a03f3239
SSDEEP 384:bUczwvwXo5VX/Jln6alEXS3dXnjVXAgcacec6csXULs2X5:bdlXozX/cXYdXnhXjcacec6csXULx5
TLSH
T151425196ADFA22924BC330F9541F9516B3F8D567506C4A10789DE2E02F2247E92E3FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

legacy-streams.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\graceful-fs\legacy-streams.js
Size 2KB
SHA256 60a6a7ecf7c3e55a3ffaae13433b6cff388b7205bba6daf393c863f77a949e36
MD5 620fc152dc9bfa087f9901703b1e2616
SHA1 f4a3583d4c3e8b0c407ab8406bdafb02b4055b7f
SHA512 7c9da94d2dadecafe60da4c7b739ae00b150610b2b5c0a45450453adf932a852fb655114cb27249c21e31c2a0f647605a21a7fe1d06fff7848ea996a367cd9f2
TLSH
T1CB51884A9BEF1542D09372704F9B620561B8C21F054ECA1C7D2C96D49FC917D86FAFB4
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\graceful-fs\package.json
Size 1KB
SHA256 5747d4ba6b17165c6ecac30ab3a331715f41c7ad546e1f1574dab1bdcb116181
MD5 babc4604a4e9958a063e1941f873d11f
SHA1 21a733b3f7e2ee153041de90fb03d5596934f346
SHA512 25df7bbded9ec1e4766e94c2e0c41013612afeae586b0a2469ec9a47181a8fbf5e599adbd96cd6b77b84ef20896f1888af3202cb1a87948a2efda88b7b7b95ed
TLSH
T1BD119C10ECA84DF350C9665A3868840BB779898B0E18BC0C37E2574D0F2E47F45FA7AD
MD5 SHA1 SHA512 TLSH

Submit Download

polyfills.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\graceful-fs\polyfills.js
Size 9KB
SHA256 66ea1687ed5edf39d67296d26edccc8da695d9a869303a78d0e580cd770aca27
MD5 14cbbf8e8d0632089994286844259752
SHA1 38f3028ea7d9ec6b57f56ef32128499522c87a7f
SHA512 7d49278c50a12a70028ae3d5adf7cd78b2fed80de1c5677c220e4eb05487fa4ecdc69e13e7fceee7490ba7af49687012d3c4ac2d87d6ff46e71ecc4b71ac5136
SSDEEP 192:Bx7F/EGChb9KvrtD2kaBTZJv+WabKmtmy8F/wFd+5wpjWjWhlw8kZkxjRKPu/b:Bxa3LwNXPS1zGzOY
TLSH
T18222328E61F96221CF9371BA6A4F651DB239D413102DAD403C4E93986F8153583EAFFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\json-stringify-safe\LICENSE
Size 765B
SHA256 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b
MD5 82703a69f6d7411dde679954c2fd9dca
SHA1 bb408e929caeb1731945b2ba54bc337edb87cc66
SHA512 3fa748e59fb3af0c5293530844faa9606d9271836489d2c8013417779d10cc180187f5e670477f9ec77d341e0ef64eab7dcfb876c6390f027bc6f869a12d0f46
TLSH
T1E401FD9FB2E26BD458D09B603DA16DC962CAB03B7803AA152468E298DB7740FA47A400
MD5 SHA1 SHA512 TLSH

Submit Download

stale.yml

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\light-my-request\.github\stale.yml
Size 772B
SHA256 37d3b5006981593361f22e1e77d08f01c279543cdbc3cf97aff5d32d275536da
MD5 65759106888116a7eb94bb04a8504b4e
SHA1 1e8b52a1868ae5394d093212a9df009dfb504a94
SHA512 9525bb028c14270bf5d174d361fef5528418e97605c28219812c413df20bc45d951ee9dc3117118aead4e56cfb2c02b233e28ad175fbd2378011c1458f09d18b
TLSH
T1B801BD2CD1492329880622B0994D8E64EAF817DCA332303E6DCD516C274FB92487386E
MD5 SHA1 SHA512 TLSH

Submit Download

license

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\matcher\license
Size 1KB
SHA256 5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3
MD5 d5f2a6dd0192dcc7c833e50bb9017337
SHA1 80674912e3033be358331910ba27d5812369c2fc
SHA512 d1f336ff272bc6b96dc9a04a7d0ef8f02936dd594f514060340478ee575fe01d55fc7a174df5814a4faf72c8462b012998eca7bb898e3f9a3e87205fb9135af2
TLSH
T18221931E7254136318BA13A0696A6CC4B32BB11F7DAF6B8418ADF244233B46CD4FB840
MD5 SHA1 SHA512 TLSH

Submit Download

license

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\strip-json-comments\license
Size 1KB
SHA256 6fb9754611c20f6649f68805e8c990e83261f29316e29de9e6cedae607b8634c
MD5 a12ebca0510a773644101a99a867d210
SHA1 0c94f137f6e0536db8cb2622a9dc84253b91b90c
SHA512 ae79e7a4209a451aef6b78f7b0b88170e7a22335126ac345522bf4eafe0818da5865aae1507c5dc0224ef854548c721df9a84371822f36d50cbcd97fa946eee9
TLSH
T12B21B91D72554762187A13A0557CBCC8B22B715F79AF5A84186EF340233B46CD5FB840
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\universalify\index.js
Size 706B
SHA256 83b02adb3872f6c482db4e57c300fa39b5cad65e317fc2f70b9de7d305c035a1
MD5 73040b43068b93f153c437a77fa66bf5
SHA1 b89986d9f8a85f0ed20f038ad79a69fcb68a8288
SHA512 80bf8581b7e7c06a1718b3a36d1e47cd045318515256eb3691e8b3958c2d54290646acb1c8299f7e480be51f1ee7f0717a1a013103e0e38209d5d2742259828f
TLSH
T12A01F75B21F556604723E479584BB848B5145833209E2D743D1CBBE06FA197852AAABC
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\universalify\package.json
Size 857B
SHA256 10e53f10939bb8a4a73af6e06829b670bbf9da66a36edcc644441852806b87ee
MD5 7c961033900027e7d31e928fca65e750
SHA1 ee873fdef51ff8bb443eaa2e404c470fee171133
SHA512 56eff8d31b2d31f75816c1c1c4f14c51c7c642bd765dd4182c270f9104b3cbb294917f4665cac070e056f53a7df14d73833381091ed7e58481c1bf7b9825d246
TLSH
T1F811AB32DD242C230AD96A91786D2A83B225580B8944FC1EB79F431C878D5AB61BE26C
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\package.json
Size 2KB
SHA256 3de2102b53f3d54fb1060252120efc6882e61ca85e952a9c374d049d16df23d1
MD5 28f764bd383b15a2ca8f811ebc4a949b
SHA1 087930486357ead6d839bbd960a1b3a38b6fb55b
SHA512 57dd241e35c806f33dbaf6462203cfe9ac7404a6ad5b8ae6671ee1f7b2eaa3b2b374755d3f815c055964659eec59f2ace869d18c0f03ee24a0a37333d618d851
TLSH
T15B41BB90E5814EB309AC4D9B98500E8961764A5B8D4CBC1D33A1634C4F7C69F62FDBEF
MD5 SHA1 SHA512 TLSH

Submit Download

squirrel.exe

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\squirrel.exe
Size 2.0MB
SHA256 c702ccbad9a04d50849dcb5081dae7331f8d1b66c4f3143b47bb3201e0ed582a
MD5 3cdc6a9bae272fcba7938948b0c50a62
SHA1 1c1e7dff5df149541711ff56d5d8d81657a951a8
SHA512 25f11d753909451632e89d1d4a809a0fbda1fe608cbefb4350bbb49c8da581a5a61d9eacdf1d30c70d0ec34bbd7c2cfca1ea5d3bb1b3e56e711345cf22c95b49
SSDEEP 24576:vWltPuAnUCiag6CKM2zCy9sQuOjj1VgZej6GeS4lNrCze5qhYp4t9mp:mt3UCiag6CKM2zCyZuOjJaxSS5qh
TLSH
T175A55C01A7E84F27EC5E167FAB22057693BEE58563E3EF6B2648617D2AC37104D01363
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\v8_context_snapshot.bin
Size 695KB
SHA256 a61f101cbc99ea43e0e4663da80bf0c6a00c9248565845102ac86617c4e6cbff
MD5 f10206b1ab61a21767eebac606c6eff9
SHA1 e30e2c9a991459636831203b5c7fe0f317f9412b
SHA512 b12138553b13aacc43a778f6c4f705b15b24543910cd124114d0c64233403f103704e788fb914bd8878b22a0c6356dc385e7b1cb61aaa7483c909d3dd11cc456
SSDEEP 6144:US9cowVafAdRjt+OUjIoZ1Cjs5vN8bnecHRWSmMFImJpz6nl5Pbp5QCV/xdFzQ6S:iowAAlevN8HRWSxmQz+bp5QO/xdNS
TLSH
T115E494A2FB1ACF2FC58D267E5DEA86463534B08E5F4BC25B715403BC38B95780E29358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0cad17dd-876c-4309-9753-d9ad41c41325.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\0cad17dd-876c-4309-9753-d9ad41c41325.tmp
Size 8KB
SHA256 a9451b0381de4de644dd8c1e33149ad10015abdeb065cae35d161807af098c07
MD5 a4289e2d581a8d2f3a570ec9b2f3b4c5
SHA1 abe99cebec0f2f31d88f2ae63d81efd702ef0a65
SHA512 2c2f08a73722681964d255f4e7658f691e2f41833a334103cd0f411a716c3c95a019e9f27986b4b78902e61ea35532a4a2427755f36e2c6d786752a66d63e2ae
SSDEEP 96:iqONkoQsjpfKTzDXcJRC5ih/cIPURHl8h4otop5UyD8BEPgpYvJKxCbTqNGLNxIp:ZONc6IT0JZQmiUyDQOgibFP+mFuzkWU6
TLSH
T1C502D735AC6C6C7B8EB36E45F48B3B235FA4206BDA952F94DAD80B1C04D765C2703822
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 44e9a43c63982734361d58f6dbb1502c3d740628b05ab5bec57406bde04add60
MD5 723a748e44caadd71195ffe4e217722d
SHA1 7c7f1c75f1efbe6ba044a556d11f863c98b2acda
SHA512 44b8b021f13d2c8587120e726b58a313a8c6936ade23d6930d74e692ecbb5ad90bf9aaefec94e7110419575515c29551e0ec9551d3e4937f1f999d88b062c3f8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7L:fwUQC5VwBIiElEd2K57P7L
TLSH
T16BB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6b65e3f6d57bee85b90392c47f2236ea7ffcfe9cba07ca29930764c7dacc0ea2
MD5 726476576ad538c648305e214c389ece
SHA1 03960d925aa07a6736b28a431ddf422fa8bba04d
SHA512 7b99250e71a507574a7ea1c326ff4f687cffd7e1a0eb1ba5aa847f5b5e0c5d997dbef37ede7c2815a11e03b25f291a4f19173dd0aa9d22472d224e9b1d6349a5
TLSH
T11ED0808995F15C35D5D78CF1154B37067915C577DF42932374633C3C8C435D19546283
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 d084fddc35d62ab10457432373865714cd0577ad9bebe9188135998b9f802bd3
MD5 ff587c8337b9997eb40f19fb41bffd1a
SHA1 75e9be1412e32cbe6e960e041e872bbb48ab464e
SHA512 d50cc729f4f047045aba003643fd356cb1ac85c1d90f9ed992f787f682a862005a91103e9e388ad5cbd4f884c2668a35a0e5a0d011d0684ef2d6bc59a10b1701
TLSH
T15ED08089D5B15C35D1D78CF1154B37067915C577DF42532274633C3C8C435919546283
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5ffe048d16b280d159b9f3005f5c5ae1d61c5490bcea1d88aa6b38d9a02f3962
MD5 526d3a8e497d74dbad8614bfc30d4197
SHA1 b247927cbce169a316f3b4264f3a7bc2a1cc8530
SHA512 feabad212c4d5e2cb3192258587cc72e18e0965776ae95dad60ed5093cce4fa8ba975a5918b217a2d898ec38f7437842f7210dd11d5f91cbaf064d2772ade989
TLSH
T187D02373EE4DA015E36F45F16213831527168175BE434511F205C44CCDB95E9A3C22C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG
Size 7KB
SHA256 34384c5a03def870f3a0a188c0d138f07fa4ecd47a66226f47c3780150af94ae
MD5 2e87bed18cbbad2f8557621d58ef9ca0
SHA1 45acac00ab713f913aff9643ab11441451b14ac3
SHA512 8423fa09b0c4054e4938628c5ff1109ad9bd4fa3c031b7e5a61e1af80179baf2f1a879353fcc01fbaf45f4cc755594f02c581d7d5e306e8300f1d9c932fc1e0b
SSDEEP 192:IjJFsiiLLm555EEHHSl15mjjjjIbbKK99005LO:IjJFsiiLLm555EEHHSl15mjjjjIbbKKw
TLSH
T154E1415383D8D3AA8B1510CB4A90636D84F17709EFDCDA18575CCDED304E49EF8B9AA4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 7dd86865f6ef783a25f42ecb77d3a03458d2efa2acd2ffc7d90e39dac5828396
MD5 f4fd80cc53df02d176c9260c61b77be8
SHA1 24352606b4a147d8bec60eef995f566ee0e0260e
SHA512 e2f65a10b7b88e65e354be9af126428432bce20f19c4f49ed26b3d98d245e1147203156e918ab8019b0caa4e983dcd72ef14f74c09abdb54707e67ad33e1b671
TLSH
T1CD716F84C2D9442BEBE00D7406DE041E72B3830B4E1F1E293AF45D7F5A86B61C387CA9
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe599541.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe599541.TMP
Size 3KB
SHA256 1ff4aa65662fc95a7eea1976e400fd836b40266ad96f1b653030470eba5137c0
MD5 ee8568c8bae54bd16f6a8883a9e4370c
SHA1 4c938c454f2376266356471df9dcccade23184c1
SHA512 851a1e19cab285f4ddbf7f91b78519c9cfc2e7932a4d411fca1f8a07b0b3dd8e5f4bc506bc6f5732f9e8cb7b57f734e9d77349806cfc9f61e8c9d2adeccf2700
TLSH
T126615ED4D2D5842BE7E00C705AEA141E7273475B4E0F1E243AF44DBF5A86B62D393C69
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 2cc0d6a6ffdb5db3cf7b855c1ef7475834895b1082d876558092b865f9af8739
MD5 edd60bc1277012ecb0a5e0c58230c706
SHA1 72e567b7c3559510177e3911af38c42b8a979940
SHA512 f98dcef427321eb4ae09171c54d6eb869593acc4d866b2a97d31becc52da7ce8ac7d8fe477ddde0c30245688bfad40d38d4daaf5f37d5d33ec1ad675858689e2
TLSH
T16D419CF3C3E8856D8A1195F0AA146E2BCE2D0954432C3D5A89E4AF1B93E2871E14195E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 4abf328a1976e46b091153f948f4106bb59e85230e868a0321ae4a2b463e0582
MD5 d87ad262765e49b2e620efe2ad1f5368
SHA1 0985f585826bfa0de7554d9cd739c2f5c8040142
SHA512 09f9b1fb10735c461b2b0578487846ad2cc9348dd83e29c8bb5fd4344c42c263a633da4d40fb4bff773e709844fc9a97bc56afa0041628a7b4bccce0d8f09705
TLSH
T14B419CF3C3E8856D8A1195F0AA146E2BCE2D0954432C3D5A89E4AF1B93E2871E14195E
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 71e1e0c6c661e1d7c242743c0356295739e7414a47c7559e437ec375e07570d3
MD5 0632c4d73aca3119aafd0f31a2a5a5e3
SHA1 43b2079db49e7e01360c88aab2f4420e7341ed40
SHA512 c6c4d66e5a8d6bde988e945cffcb65a99a9d24fcc029ec38ff1fab8fe1f34f0e3157c29507e74596ee95b2208037e842d800f45c195027c0c768e460e6af84fd
SSDEEP 192:sxZDRlyM//K1Ml8Mji/fxs3EU1jGyIdpNaHW6+WNNy3/YJav0+4BIg4J:sxZDz7i/fxs3EEy78HbG/u7tc
TLSH
T12752FA16AA349977CCDBD209FA55BF53D6F50572D6900E44AEFCCA0C05E6AED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 c6011342519684ddf404ec956b37b0008c61c19413a1cb3fc5a5df0b5b5ecf14
MD5 3c02099c4282f194eecc9345b7fe07c0
SHA1 b41ebb8246beb208f30f996acdbd400dccfe34ad
SHA512 0bf8b902767e85c69547181d3925e67e07e83878140e7102bf75c4f54e53defca8346f99a2f78dd05af798e82237aa5f38a0fdb5491b6f74d26626aa27cf990c
SSDEEP 192:sxZDRlyM//K1Ml8UQ9ji/fxsxBuU1jGyIdpvaHW6+WNNy3/YJL+A+4BIg5CJ:sxZDzqZi/fxsxBuEy7CHbG/G7tc
TLSH
T1F862E916AA349977CCDBD209FA55BF53D6F5057296900E44AEFCCA0C01E6BED221382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 c2128d686d42bbc100aeeeb9e9d00d623a539d9b4fdb994f9b7db092b5b2709a
MD5 49761e1948697b23def0ad387b1c30f0
SHA1 5f4eed549f29e2147c5b65017f4572871e1bdec7
SHA512 d605f1c03767cce65420043ea8f95065fa545e059a97e71998a1cc9cb75b3b8d55915c99b0edf044cbacd15c8385030cd156587d058db5bd098524247a142f85
SSDEEP 192:sxZDRlyM//K1Ml8UQtji/fxsxTWpVsuU1CGyIdpvaHW6+WNHmpy3/YN/jAGCBIgK:sxZDzqpi/fxsxTWvsuE57CHbGy/F9tK
TLSH
T11C62FA16AA349977CCD7D20DFA55BF53D6F9157296900E44AAFCCA0C01E6BED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 300ee488dc8c9c3e6ad6040357e664b4828c72b26d5e85fe02145155d31489d8
MD5 dc51135ab6e3c761cd8df8969e0acbe4
SHA1 8f490ecb4305b533916afe7a7002f3066d2f3baf
SHA512 72fbb9deef97fdbcfbd14707ab2042676debf9437030d8ec2a6f734540702efeb07f3fb6650e33061442b4d8a683860260f448f23c3e3a6e2af53def47c427d9
SSDEEP 768:KTQv2wB7pLuLneqWve+l+8F1+UoAYDCx9Tuqh0VfUC9xbog/OV4YnFLllnWhProI:KTQv2w3EneqWve+l+u1jalYnFLfWhcxO
TLSH
T1A2F20B3B6C0CCB7E4F804E9CED2ABE8E6DE801CB9698895447FA444C03C66EB55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 6babf62bbb593ec710e52d5e75d3f1e846128fb05684cefa33bc027ec1bb88a9
MD5 2e072bae26176c2eefc1660764890803
SHA1 3ac026446f4a4391c53c7ff556310f17240d95a0
SHA512 72da3e063786486f9126be702c0bddb76cc145141dc58c6f9cfc90117953c6122604045f418d247523f4db82a83c3ce8c0d996a9e02a7b03485904cc82f13f4f
SSDEEP 96:KkE4Kh6CCioKbiRgJU9pTLL+pbWlDJ+KrLDn+PhJ+XZfSMgKVuB:SnvUnjDu
TLSH
T180C1229131378A903B7E668E9850B82A56C171A33554E42B37F840660F7FE65CDFC8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig~RFe5a0c27.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig~RFe5a0c27.TMP
Size 3KB
SHA256 8b2e057387e9714efef3580a36459acf56aab53c806cd7d7dbb6e17cef977ef9
MD5 904e6e94a1d46374c8630cfd86cc729f
SHA1 e1d9c3f7813878acc6510d48d95b2bf48b2e1a0d
SHA512 081e2a26252860ff8d8f7a9d0378ae56f0cc50574d13d2a121afdf74284963747ef874a4d73b1df7774cd8570972f4f513eefe0a0325fd088556d5b1ba946712
TLSH
T1DB815C4FCC0CBE77ABAB6A719A35D6B2F79131EA94518A977F8C444EE3050ED0242E50
MD5 SHA1 SHA512 TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
Size 3KB
SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
MD5 94406cdd51b55c0f006cfea05745effb
SHA1 a15dc50ca0fd54d6f54fbc6e0788f6dcfc876cc9
SHA512 d4e621f57454fea7049cffc9cc3adfb0d8016360912e6a580f6fe16677e7dd7aa2ee0671cb3c5092a9435708a817f497c3b2cc7aba237d32dbdaae82f10591c3
TLSH
T1F681BE27C5B58E2796F060119750E654F53D43AFA600C6AFB5FC825C2F373ECE88A4A8
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 e1f3eeb0b4cac4f10c8dec5b3ff1415f381c109a6cf9450b4e56bd060e65a468
MD5 a3947ef6fb45f9e50bd65973565e52ed
SHA1 c387cc223c4aba37e25e092e81e2cfcac0c8ba1b
SHA512 9933b2ff6ceb5fc14155f3aa4295537d7a948c449c7fc2e2cd949fec0d8ce66c33c68e977b837295ccd4fcbf605ccd74a4afdad5c4a5a8cf3992bf6f7ef18d0c
SSDEEP 384:n8CcmyWC0sN5U6MMAIFvgDJ+aM0YoZde4KV8p0QLZ:Hcp0AMko1u0BdI8p0QLZ
TLSH
T1E9827E32A87D9C378DE7A518F44B36535DB460BB8BC06FA8DADC8B0D05DB2981B0B517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 09cae733b0f8ce973fe019a8471ccea4aa2e46089b6959d3dbf4a01830286184
MD5 70d53a1a606c7f78d699be614241e87e
SHA1 b4dbbeb21ac65d1e41d8cebc5a1eb062568c859d
SHA512 eb2366f845c667e33fb5bb09abc98b43bcf67e800fc1f5e9107b7b5f5cbb4807badf00f4512f4d838821cbcb7f91f391b335959b843711f1e8c1cf33330d8677
SSDEEP 384:nMCcmyWC0sN5UPMMAIFvgDJ+aM0YoZde4KV8p0QLZ:Xcp05Mko1u0BdI8p0QLZ
TLSH
T161827E32A87D9C378DE7A518F44B36535DB460BB8BC06FA8DADC8B0D05DB2981B0B517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 c398a423c9d46954f3c72084344d95a4d41cdda090ea7544b9fcf335182e6545
MD5 f8aba1d2bb15cd77a9c15ba77930f630
SHA1 f24250db33f4a02dc1b57e228f7fcba0a57ae702
SHA512 d82fff7129bb37457bff426d8c0025ab8debf0c80dbd81f7ae333e4b6a1907c536d93472fec0a4edf3e7d224960b25490ddd14eb96c52b84a3fb9614a378d301
SSDEEP 384:nMiF9CcmyWCNsNa8TUNTUlIlPMMAIEvgTDf0pJ+aM0Yocde4KV8p0QLZ:3FccpNXwgxMpo03u0kdI8p0QLZ
TLSH
T126D293F298D78937D8AE4747A73E6E428DBCD16775845994FB884E0CCC861BFC70A806
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 0002cec8a02c064b779c39b5f124cd44341f23f0b21e2e81bed64ed5b8bc8ca0
MD5 4608d335878cd1e81a1c81dc711a856e
SHA1 38e0b52f47a236c2ea906c0883036aaf7061e1c5
SHA512 fea628ba1b6360040edd7025fa368a8e1107b33db6b82247736812609ec5e8c9a58c573cb26a46700b0862457a7e1f4011c301ba5609d971b3c222145fe3c9a8
SSDEEP 768:3FycpNMwglMiox3u0XoS7s5H4e0JI8p0QLZ:NN4MNRu0noYzJI8p0QLZ
TLSH
T19CF25EF194D78DB6C89E8BC7637EAD0259BCC12775884998BBE4691CEC4B0BFC306815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 64943c7bbe4e98fc8533c02040049e7ea6936c23905b7c0c3083cf2a9b93d6e8
MD5 175b0862cafe68ebb9820043ac05cbc6
SHA1 5061660464cfeb07a843046bd9daf9f397ec215e
SHA512 89e44c3ca4fb19d7d567eb6a28db1bb1c1b92b2fdd66396dc0f27d57d750a81935e64d12a62510477892637dd2af17a739908ea76828b510b463ad8c3078fadd
SSDEEP 192:7ONj6IT0FQmiUy/QtgibFP+aMVuPwoP3oCh18qbrrU6:7ONj6LjtgiJ+aM0YopdU6
TLSH
T122122B71A86CDC2B4EE3A855F0873B635EA421BBDE856F54D5D84B0C04DB78C2B0B827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
MD5 0ad641099b286eebf58a290b5bde86c0
SHA1 922d3e17ccc238f1bf276051af3ad5cdffb20397
SHA512 8661612608382058967a1f2ef25c7fbee41a3c2c748838346c044a48058ba081e84750e4a0de424903813499876fa7f69beba345d8ebc396340d830f1a7c81e0
TLSH
T1220110D29D7E26C2C1AA0F6ED08B26EC40C8D106F19CB07A0C8CF9D4823880E188283F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
MD5 bf165c172af1f75083dd4c7e8915ad0e
SHA1 2eb27e18672fd0a1816ab00d00078a570eb62711
SHA512 a58ad7ee2e18750242b9c5d53224218bef54ecd50e067170da12510559c455979fb0523044d4c23d5d5a523562165e471f95d939376df623bfdea9228ca25256
TLSH
T181F09ED29D7E36C0D6E50F6ED44B64FC40D89506F05CB579484CEAD8913950B254287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
MD5 a15cd0a1e68c6b9c3945d3192091dc4a
SHA1 5162188f19a245162594501e5febb31a7626aeb4
SHA512 a7ec103cf7c6fa801e1850205c4c06cadf96c21b1fd56db058a2980c472b1ff2f25c69a73f943de8dff815d69217995ad880e85ca7b8ced8cfa1c506315f7368
TLSH
T18DF0ACD29D7E35C2D5AA0F2ED44B25EC54D89606F49CB57A484CEAD4913940F248287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 fcbd93dd15dad07cf83d995b9f2b1c4159863329a8918b9f68146f2afb94d68c
MD5 2f8857a4fb9bb3b4266d4aa18611e50d
SHA1 e151080418271787f31568ab1c04bb8aca2d45d0
SHA512 5ecc04a51d26b4b2bc317b9c1ec5d6a6c3568f6890aea694a6acdd79ce177a49cea45e27ff17e9d275c47dbaa2592d488de9fd6d7fb7d3b13dd830343fd748d3
TLSH
T17D410648B6E91148B3B76F569BF7A86E487EB8772E0BD55E00110E4F0626E40C9B1737
MD5 SHA1 SHA512 TLSH

Submit Download

RELEASES

Path C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
Size 79B
SHA256 616ecb01a3fcf13d7a0c7524fd84b563b663cccd8b2ca59d33399ca82dace947
MD5 1d7bedeece30fad025cfbc5a32427b1f
SHA1 ac84bc3b95e286308e4278dbeff8f27fc7824f1c
SHA512 2ca1658e56daefc86ff62e44b73d4c904890eeeadc6d9db260c9e178c3bc69a1ec7f2898d423e4fff5ebd2a3a9338751f479d2d6dd3550f919c2576b4831dbcc
TLSH
T124A01243020014D17ACC11405129009F7C8067A10540415C416CB3060CE0D132510049
MD5 SHA1 SHA512 TLSH

Submit Download

Update.exe

Path C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
Size 1.8MB
SHA256 76359cd4b0349a83337b941332ad042c90351c2bb0a4628307740324c97984cc
MD5 a560bad9e373ea5223792d60bede2b13
SHA1 82a0da9b52741d8994f28ad9ed6cbd3e6d3538fa
SHA512 58a1b4e1580273e1e5021dd2309b1841767d2a4be76ab4a7d4ff11b53fa9de068f6da67bf0dccfb19b4c91351387c0e6e200a2a864ec3fa737a1cb0970c8242c
SSDEEP 24576:pWltPuAnUCiag6CKM2zCy9sQuOjj1VgZej6GeS4lNrCze5qhYp4t9m2:0t3UCiag6CKM2zCyZuOjJaxSS5qh
TLSH
T15A956C01E7E89F2BE56F6B76E030055813F3E9867376F78B2A4871792A937504E053A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

background.gif

Path C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif
Size 143KB
SHA256 01b82e7629041c6f6068a6416bb09de44f50623dca5f85417129e5419e1c2c5c
MD5 42d74bbdee699afda5189e11d82aa8a8
SHA1 1da5333e4ca974423d2f43fc263805bdcf2f9052
SHA512 84b70b34f31e00a403408e42387284a51dbf4f04276de9683ffb10978b768be70d9c4eefbaf0471af7a7126b083df4af405051ddee25373015523aa41a3466f7
SSDEEP 3072:C6eLIkDvg0JGqvN/i4pVKt220NxsnD/Cxuph1l19VdouPaPVxcHnpk:CshY1/i4pMtJIxsnD/C0phLHVdouPan/
TLSH
T121E3124FA5682E0EB8BF536230351FE9AEB8AC38F644A216051D7E522E701ED5F13D47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setupIcon.ico

Path C:\Users\Admin\AppData\Local\SquirrelTemp\setupIcon.ico
Size 171KB
SHA256 90f1dfae8ea7389899a0ded7e31294ba29e5f7eaa821c69046c4195cc31801d8
MD5 f0625fe8c54c05cb6f4376f75f7ca512
SHA1 98919471cb597a1df17cb25176bddcae81fb9a51
SHA512 6fb5072dee50159ab38f9d5d21be8323365401fe2aaa39e79a2c1aa73c95d16cbf86d38fd9ee6e8408973c8618cd3d86ab2c5efa7f34134add903da330c63537
SSDEEP 768:zmExzFt2Y0IFSPfCrClsYPVfpDeA55RoUUr2ntm7JoJ:tO+F5CKkDj535+oeE
TLSH
T111041C240689B316ED139BBF8F6B9577C57E62A4E3DB6E3125239E0C49C82D4D25338C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b0dd330e-128e-4eab-88fe-3bfac1958e80.tmp

Path C:\Users\Admin\AppData\Local\Temp\b0dd330e-128e-4eab-88fe-3bfac1958e80.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cc07c69f-45a8-42fd-9b90-3ae50efd65ba.tmp

Path C:\Users\Admin\AppData\Local\Temp\cc07c69f-45a8-42fd-9b90-3ae50efd65ba.tmp
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

15a0750e-b7c9-48c5-9cba-3b817c4ebc89.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3468_753510202\15a0750e-b7c9-48c5-9cba-3b817c4ebc89.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir3468_753510202\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1aa6535a-31d2-4ffa-a7ce-a3c07d07133c.tmp

Path C:\Users\Admin\AppData\Roaming\Logseq\1aa6535a-31d2-4ffa-a7ce-a3c07d07133c.tmp
Size 122B
SHA256 3489a9fcea842f7bd4152b6ac5a20d493dfba1fdadaec75b503c8e5ffa0d9042
MD5 c2211c33b4af50e74d888ca4d28f3fad
SHA1 804e6bad9e0d0deb2d4cd221803d362fe2c310fa
SHA512 83d929bb34348fa0552897b526eb97fe3568f5d00a04b2ed5d9e4446fe68f1ed38fc33c7eeefa02090cf15179fd3d9337b783ba0dbae2434ff745d60bfbd172e
TLSH
T104B02B03B4005033020A16A40007CF0A28AD00341D07F504D0E0F2A82429C4C084701B
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\Logseq\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\Logseq\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\Logseq\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\Logseq\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Logseq\Network\Network Persistent State
Size 391B
SHA256 7ef1fb3b8d010227824c7ac350b1ebef0bef5a5d2aa830540f143c4f95f4cffd
MD5 174e3223a612e3d19abdaa85d8f3eed8
SHA1 663c44b405b1a25e9aa75290fcbf0a4cb0e707f3
SHA512 3a168644ccd01e473a8d4b54739883d68b18281e9e8a57692d55c2f0352558a68b61b0e3da256b031f6b4d560a03472907769046352a03fe3658a0873dfbb234
TLSH
T1F3E061D7C3F549BE472593F41E143E67C5FD0405131C5D4AC5D4AF1D4B6247D540044E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Logseq\Network\Network Persistent State
Size 478B
SHA256 b381671759c379fb44db393a5bd103de347e5bcb3a5b528c501339eb3254e14c
MD5 b844702d8362f28b297d0673ee977d65
SHA1 6b6978192465b84f2fc4523c6d1b0cccdd365919
SHA512 7976115e39e651f5fb96e527d8ef5c3c50b7c86ec0af24101f81a48f09611f4e042a46125e07f31ec810337a2673d0a912467a6dd6632ea7110535d8d87db442
TLSH
T1CFF027EBC3F54ABE472693F41E243EA7C5FD0419131CAC5A85D4AF1D8BA287A550098E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Logseq\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\Logseq\Session Storage\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\Logseq\Session Storage\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/844-6519-0x0000019F5CAA0000-0x0000019F5CB4D000-memory.dmp

Download

memory/1352-7349-0x0000017684A40000-0x0000017684A41000-memory.dmp

Download

memory/1352-7350-0x0000017684A40000-0x0000017684A41000-memory.dmp

Download

memory/1352-7351-0x0000017684A40000-0x0000017684A41000-memory.dmp

Download

memory/1352-7352-0x0000017684A40000-0x0000017684A41000-memory.dmp

Download

memory/1352-7353-0x0000017684A40000-0x0000017684A41000-memory.dmp

Download

memory/1352-7354-0x0000017684A40000-0x0000017684A41000-memory.dmp

Download

memory/1352-7342-0x0000017684A40000-0x0000017684A41000-memory.dmp

Download

memory/1352-7344-0x0000017684A40000-0x0000017684A41000-memory.dmp

Download

memory/1352-7343-0x0000017684A40000-0x0000017684A41000-memory.dmp

Download

memory/1352-7348-0x0000017684A40000-0x0000017684A41000-memory.dmp

Download

memory/1352-7355-0x0000017682D80000-0x0000017682E2D000-memory.dmp

Download

memory/1732-6518-0x000001B3BE2E0000-0x000001B3BE38D000-memory.dmp

Download

memory/1752-6570-0x0000000001980000-0x000000000198C000-memory.dmp

Download

memory/1752-6333-0x0000000000FD0000-0x00000000011D0000-memory.dmp

Download

memory/1752-6571-0x000000001BD00000-0x000000001BDAD000-memory.dmp

Download

memory/2252-6473-0x00000000015D0000-0x00000000015F0000-memory.dmp

Download

memory/2252-6485-0x00000000015A0000-0x00000000015AC000-memory.dmp

Download

memory/2252-6486-0x00000000030A0000-0x000000000314D000-memory.dmp

Download

memory/2264-3292-0x00000000008D0000-0x000000000098F000-memory.dmp

Download

memory/2264-6566-0x00000000008D0000-0x000000000098F000-memory.dmp

Download

memory/2656-6565-0x0000000002530000-0x00000000025DD000-memory.dmp

Download

memory/2656-8-0x00000000003B0000-0x0000000000586000-memory.dmp

Download

memory/2656-3953-0x0000000002530000-0x00000000025DD000-memory.dmp

Download

memory/2656-3951-0x0000000000D30000-0x0000000000D3C000-memory.dmp

Download

memory/2656-372-0x0000000020840000-0x0000000020878000-memory.dmp

Download

memory/2656-373-0x0000000020810000-0x000000002081E000-memory.dmp

Download

memory/2656-6564-0x0000000000D30000-0x0000000000D3C000-memory.dmp

Download

memory/2728-6676-0x00000248082D0000-0x0000024808471000-memory.dmp

Download

memory/3808-7662-0x0000024D78880000-0x0000024D7892D000-memory.dmp

Download

memory/3808-6618-0x0000024D78880000-0x0000024D7892D000-memory.dmp

Download

memory/3828-6617-0x000002926D4E0000-0x000002926D58D000-memory.dmp

Download

memory/4188-6479-0x0000014E21010000-0x0000014E210BD000-memory.dmp

Download

memory/4996-7666-0x0000024805DE0000-0x0000024805E8D000-memory.dmp

Download

memory/4996-7618-0x0000024805DE0000-0x0000024805E8D000-memory.dmp

Download

memory/4996-6616-0x0000024805DE0000-0x0000024805E8D000-memory.dmp

Download

memory/5060-6517-0x000002252B160000-0x000002252B20D000-memory.dmp

Download

memory/5088-6644-0x0000026F31BE0000-0x0000026F31C8D000-memory.dmp

Download

memory/5088-7227-0x0000026F31BE0000-0x0000026F31C8D000-memory.dmp

Download

memory/5088-6619-0x0000026F31BE0000-0x0000026F31C8D000-memory.dmp

Download

memory/5912-7211-0x000001EC6A200000-0x000001EC6A2AD000-memory.dmp

Download