Analysis

  • max time kernel
    899s
  • max time network
    643s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    08/05/2026, 03:52

General

  • Target
    Logseq-win-x64-0.10.15.exe
  • Size 220.6MB
  • Sample260508-ee6lhacy71
  • SHA256 b9335b55d4449a22628bdd4cea856183b2512aa9f2b07ddc17c5b36452802a21
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Windows directory 1 IoCs
  • Executes dropped EXE 12 IoCs
  • Loads dropped DLL 21 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies registry class 14 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 14 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Logseq-win-x64-0.10.15.exe
    "C:\Users\Admin\AppData\Local\Temp\Logseq-win-x64-0.10.15.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4372
    • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
      "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
      2⤵
      • Executes dropped EXE
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:5624
      • C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Squirrel.exe
        "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
        3⤵
        • Executes dropped EXE
        PID:3256
      • C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
        "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --squirrel-install 0.10.15
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        • Suspicious use of WriteProcessMemory
        PID:3392
        • C:\Users\Admin\AppData\Local\Logseq\Update.exe
          C:\Users\Admin\AppData\Local\Logseq\Update.exe --createShortcut=Logseq.exe
          4⤵
          • Executes dropped EXE
          PID:1044
        • C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
          "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Logseq" --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1936,i,9180594088894411608,14816361574533469879,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1932 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2872
        • C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
          "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Logseq" --standard-schemes=logseq,lsp --secure-schemes=logseq,lsp --bypasscsp-schemes=logseq,lsp --fetch-schemes=logseq,lsp --field-trial-handle=1936,i,9180594088894411608,14816361574533469879,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2228 /prefetch:11
          4⤵
          • Executes dropped EXE
          PID:4976
        • C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
          "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Logseq" --standard-schemes=logseq,lsp --secure-schemes=logseq,lsp --bypasscsp-schemes=logseq,lsp --fetch-schemes=logseq,lsp --app-user-model-id=com.squirrel.Logseq.Logseq --app-path="C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app" --no-sandbox --no-zygote --enable-blink-features=OverlayScrollbars' --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1936,i,9180594088894411608,14816361574533469879,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4376
      • C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
        "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --squirrel-firstrun
        3⤵
        • Drops file in Windows directory
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:6052
        • C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
          "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Logseq" --standard-schemes=logseq,lsp --secure-schemes=logseq,lsp --bypasscsp-schemes=logseq,lsp --fetch-schemes=logseq,lsp --field-trial-handle=2360,i,17303076716910300289,10385846576713634979,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:11
          4⤵
          • Executes dropped EXE
          PID:3756
        • C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
          "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Logseq" --standard-schemes=logseq,lsp --secure-schemes=logseq,lsp --bypasscsp-schemes=logseq,lsp --fetch-schemes=logseq,lsp --app-user-model-id=com.squirrel.Logseq.Logseq --app-path="C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app" --no-sandbox --no-zygote --enable-blink-features=OverlayScrollbars' --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2360,i,17303076716910300289,10385846576713634979,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2428 /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2092
        • C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
          "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Logseq" --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2360,i,17303076716910300289,10385846576713634979,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2356 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5228
        • C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe
          "C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\Logseq.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\Logseq" --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2360,i,17303076716910300289,10385846576713634979,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2872 /prefetch:10
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:2552

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        config.edn

        • Path C:\Users\Admin\.logseq\config\config.edn
        • Size 523B
        • SHA256 95e2d43b1840bce2966b9b9045726211f235ea355c6c8afc230ec7df7c13e66f
        • MD5 SHA1 SHA512 TLSH

        plugins.edn

        • Path C:\Users\Admin\.logseq\config\plugins.edn
        • Size 3B
        • SHA256 ca3d163bab055381827226140568f3bef7eaac187cebd76878e0b63e9e442356
        • MD5 SHA1 SHA512

        preferences.json

        • Path C:\Users\Admin\.logseq\preferences.json
        • Size 114B
        • SHA256 5ca5fa50d924b3d227417d9be3feb392938d4ac17543e69431d130c050bbc728
        • MD5 SHA1 SHA512 TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\icudtl.dat
        • Size 10.0MB
        • SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        electron.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\electron.js
        • Size 1.6MB
        • SHA256 0643077e46be824f578a6a03df53b309cf6e8d26d010f04bb313636594a4eb6b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        eslint.config.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\@fastify\merge-json-schemas\eslint.config.js
        • Size 135B
        • SHA256 52e3a2601a98f23c954d664ab8de95fddb390789f8b067815e484b010d3da2d0
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\@sentry\node\LICENSE
        • Size 1KB
        • SHA256 dba8e6ce88f07f7a55f62bcbe01e436d6af3454e108825fa9d3a47e6e0c90197
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\@types\node\LICENSE
        • Size 1KB
        • SHA256 c2cfccb812fe482101a8f04597dfc5a9991a6b2748266c47ac91b6a5aae15383
        • MD5 SHA1 SHA512 TLSH

        abort-controller.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\abort-controller\dist\abort-controller.js
        • Size 3KB
        • SHA256 6b0b8d42ccfc69741b3f11b8268f094ce2a456715a5c8d2042ca5b2a033ea842
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\abort-controller\package.json
        • Size 2KB
        • SHA256 3d64dcdcf9d0a1d045eb6bcaa5013d486f15527a3668e64b1155839a797da164
        • MD5 SHA1 SHA512 TLSH

        properties.d.ts

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\ajv\dist\vocabularies\applicator\properties.d.ts
        • Size 120B
        • SHA256 e99ba2bf1ceb28ce6a3e60093bd8cb09e05eca71d0004254d3baf97c02152564
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\at-least-node\index.js
        • Size 234B
        • SHA256 b71333cd05a553a7f4a9451d942d0f8ced014909ef2a268baef6f411f31cc6e4
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\at-least-node\package.json
        • Size 702B
        • SHA256 cf26ac7a79b89eed8c70f7ee8b5195ed925f535b7c52577b9034702e7117fbc5
        • MD5 SHA1 SHA512 TLSH

        .gitattributes

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\avvio\.gitattributes
        • Size 80B
        • SHA256 e173bffc6cde613d3e6d06e49f2b1d05385cb02aa68c4931656b5b051ab649dd
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\diff-match-patch\index.js
        • Size 76KB
        • SHA256 7cead2c7cb3e4ff5c02e173cd6b81d22005e67c47ac2ce28e4b5c73d9ffcfdb2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\diff-match-patch\package.json
        • Size 467B
        • SHA256 912519c458314dade9d95c1c3d138ce377065d36dd4408bdf3113f414eeb0fc6
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\electron-window-state\index.js
        • Size 4KB
        • SHA256 115015854f6dd8d02bc4df80d00f37d54aad1403b5ea6993eb7d7f2eda5a343b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\electron-window-state\package.json
        • Size 892B
        • SHA256 da0a07f217798d1e9cf2d650adb242104a7aaeea5dc0af3fa499316fbe47d204
        • MD5 SHA1 SHA512 TLSH

        event-target-shim.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\event-target-shim\dist\event-target-shim.js
        • Size 23KB
        • SHA256 927f1aa229bf227acec02b374b7120b5c971dc97136e55152ce5d49b4c20cbf5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\event-target-shim\package.json
        • Size 2KB
        • SHA256 980bdd7706c72d04a4df2e3ee2c8ffccf3bc72bd8e7cd13ca38be00cafc6e8db
        • MD5 SHA1 SHA512 TLSH

        dependabot.yml

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fast-uri\.github\dependabot.yml
        • Size 274B
        • SHA256 60ffc0c7159ff6af5e36ad3ecc56fe63782e4defaabafa94a13df7150d9a84c6
        • MD5 SHA1 SHA512 TLSH

        dependabot.yml

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fastify-plugin\.github\dependabot.yml
        • Size 273B
        • SHA256 67dcd2013ebde5683fd6684194a6df609eeed7de80098198f59a7e07b5c19eba
        • MD5 SHA1 SHA512 TLSH

        copy-sync.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\copy-sync\copy-sync.js
        • Size 5KB
        • SHA256 c9e73ad9492a4a1e2242f1e941302d01f21f3978fa30119db2b3eaad17feb87d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\copy-sync\index.js
        • Size 70B
        • SHA256 43d2fc28f9a6071056f3055cca70d810555a7229c93c70810881c048bf3dce73
        • MD5 SHA1 SHA512 TLSH

        copy.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\copy\copy.js
        • Size 7KB
        • SHA256 3c0bb54aa431fac2a9b0a1c26562e465e4b540d20cb40e5400d9c2d01f0d9dfd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\copy\index.js
        • Size 111B
        • SHA256 06f95d3bdf12008047c254fdd977e43ca451c1470ab7ef0fefbb48b7dbb39008
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\empty\index.js
        • Size 986B
        • SHA256 e32d83a6fd73dd1399e5a755f34d070788a68b0f215a679945b226c1b3f00a8b
        • MD5 SHA1 SHA512 TLSH

        file.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\ensure\file.js
        • Size 1KB
        • SHA256 a104ff42c9aefd0e34556b9df2e4b5c9cd15315b0b0f70b07938901428b3c608
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\ensure\index.js
        • Size 623B
        • SHA256 6c8e1d92d85d04c25c1a076b1270e26dfaa36583ba95d6d5b7874f3b1700cead
        • MD5 SHA1 SHA512 TLSH

        link.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\ensure\link.js
        • Size 1KB
        • SHA256 61ea4823cfb1abd1c3f3bbc51ed284d4d7a73f9d074efccee06cd4d64eaebfb6
        • MD5 SHA1 SHA512 TLSH

        symlink-paths.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\ensure\symlink-paths.js
        • Size 3KB
        • SHA256 5595b764059fb90ce4a13f5cdf43988da97e636521d3c599ce5260681d75bdfc
        • MD5 SHA1 SHA512 TLSH

        symlink-type.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\ensure\symlink-type.js
        • Size 694B
        • SHA256 17abe9590176305dd04316b2ac5c972dcf54cea32d279f955fbcf25098743dc8
        • MD5 SHA1 SHA512 TLSH

        symlink.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\ensure\symlink.js
        • Size 2KB
        • SHA256 428bef8f6e9f46ac23f6fa8b9a60f7c6328564e663f33547fb338a1f42421b32
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\fs\index.js
        • Size 3KB
        • SHA256 6fc38ce67d60cc5dc9b52a6385ff133007fb1bc446bfc6ccc5971a4b418eec27
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\index.js
        • Size 719B
        • SHA256 24ca8c7fb0666041f080415bf1bcfb4ae4815a21073557d9a85c01173f8947c8
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\json\index.js
        • Size 508B
        • SHA256 c5ac6a8005308e5bb36619fed225c987872300d356fa95d0d56878029ebbdc45
        • MD5 SHA1 SHA512 TLSH

        jsonfile.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\json\jsonfile.js
        • Size 238B
        • SHA256 a986ad3c13166f3bf8f30b18140bfc8ea1754760ab3802aa7c8c3780d54f07ba
        • MD5 SHA1 SHA512 TLSH

        output-json-sync.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\json\output-json-sync.js
        • Size 271B
        • SHA256 7e84f5c478c02d8507238dc355ed5fe649fe61959bdc100da7c2a29599bcb714
        • MD5 SHA1 SHA512 TLSH

        output-json.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\json\output-json.js
        • Size 272B
        • SHA256 1f58fdf60cdbc9d34cd7a4e2688be218572bc8beb4ce3ce377dca515a06e3b50
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\mkdirs\index.js
        • Size 328B
        • SHA256 adcd576e2e3868b94adb1bad6d1e3cf2312ffdfa71e49a57fe6247e116e75ecf
        • MD5 SHA1 SHA512 TLSH

        make-dir.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\mkdirs\make-dir.js
        • Size 4KB
        • SHA256 58755be7dd1c7a78a7c137c7eea18c2e6ccfe221a720ae1da2a0fff3dc3114d4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\move-sync\index.js
        • Size 70B
        • SHA256 0ba99125dccf6e55d9a7d0bcbcae341a6187579f24ad0b63d15c0dadce80cd7b
        • MD5 SHA1 SHA512 TLSH

        move-sync.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\move-sync\move-sync.js
        • Size 1KB
        • SHA256 43ca1ece8c76d268df3c58c7916c680779d0f4db78e73a40b42197b90c510275
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\move\index.js
        • Size 111B
        • SHA256 6ccdbb83772d9b80cecbbcc04ecf8b6fc0529e8daed1c395e27b6a83d5708ee6
        • MD5 SHA1 SHA512 TLSH

        move.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\move\move.js
        • Size 1KB
        • SHA256 9df4b4df8f35eb01cc171c8c086124862f2173c7d37d890730fdb5137c2161a3
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\output\index.js
        • Size 947B
        • SHA256 a27d1a72ed1ecddffc57e70187a4b72467ed0dd34092b7e3d2817b9f4359ab5d
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\path-exists\index.js
        • Size 263B
        • SHA256 5ce096c95daec0259817248921b39a9e0df4d342db171138ccb62440cc7a0cbe
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\remove\index.js
        • Size 165B
        • SHA256 dff95c5640a0b4b769290126940a7683e0e6d29ec591df63b7296712f81d9c56
        • MD5 SHA1 SHA512 TLSH

        rimraf.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\remove\rimraf.js
        • Size 7KB
        • SHA256 931cd85d1564a59db583841196cf2773940e7eee30830514b448d2d4919cc534
        • MD5 SHA1 SHA512 SSDEEP TLSH

        stat.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\util\stat.js
        • Size 4KB
        • SHA256 c92fca3e541916d2138c18bcd887a6e4fa46bb2e9746cc05d63ba2edc522cf5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        utimes.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\lib\util\utimes.js
        • Size 615B
        • SHA256 4a049bcd580984957b8690fb05f7a6bf5c7e59bfc78d6817882945c35f3a44d4
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\node_modules\jsonfile\index.js
        • Size 1KB
        • SHA256 2cdf22ffb5a170ad2cf10cbdf647e2a9366b6afa11e9b4c2370d0cf5b1f700b1
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\node_modules\jsonfile\package.json
        • Size 762B
        • SHA256 8e41bd8df7c353108f0df01103bf0776e00a23b4a9262bb7d5fd597a3876ce81
        • MD5 SHA1 SHA512 TLSH

        utils.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\node_modules\jsonfile\utils.js
        • Size 498B
        • SHA256 b0c188696676561411f3c5784d7de61bf21927f9c334e0cfb9136a8b7c82be5d
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\fs-extra\package.json
        • Size 1KB
        • SHA256 528b7d9a7708b1694510f752f286e7ef70f669fb604411645909252b3f99cd96
        • MD5 SHA1 SHA512 TLSH

        license

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\got\license
        • Size 1KB
        • SHA256 48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0
        • MD5 SHA1 SHA512 TLSH

        clone.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\graceful-fs\clone.js
        • Size 496B
        • SHA256 7258eca52e65d69845759503f9fdd66c252f40e5eafb76db5d481172e31ac9ed
        • MD5 SHA1 SHA512 TLSH

        graceful-fs.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\graceful-fs\graceful-fs.js
        • Size 12KB
        • SHA256 7da35669b6b6b0e4aafee31674c033f2cebb0c8f9ae010f709dcc185d3f17786
        • MD5 SHA1 SHA512 SSDEEP TLSH

        legacy-streams.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\graceful-fs\legacy-streams.js
        • Size 2KB
        • SHA256 60a6a7ecf7c3e55a3ffaae13433b6cff388b7205bba6daf393c863f77a949e36
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\graceful-fs\package.json
        • Size 1KB
        • SHA256 5747d4ba6b17165c6ecac30ab3a331715f41c7ad546e1f1574dab1bdcb116181
        • MD5 SHA1 SHA512 TLSH

        polyfills.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\graceful-fs\polyfills.js
        • Size 9KB
        • SHA256 66ea1687ed5edf39d67296d26edccc8da695d9a869303a78d0e580cd770aca27
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\json-stringify-safe\LICENSE
        • Size 765B
        • SHA256 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b
        • MD5 SHA1 SHA512 TLSH

        stale.yml

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\light-my-request\.github\stale.yml
        • Size 772B
        • SHA256 37d3b5006981593361f22e1e77d08f01c279543cdbc3cf97aff5d32d275536da
        • MD5 SHA1 SHA512 TLSH

        license

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\matcher\license
        • Size 1KB
        • SHA256 5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3
        • MD5 SHA1 SHA512 TLSH

        license

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\strip-json-comments\license
        • Size 1KB
        • SHA256 6fb9754611c20f6649f68805e8c990e83261f29316e29de9e6cedae607b8634c
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\universalify\index.js
        • Size 706B
        • SHA256 83b02adb3872f6c482db4e57c300fa39b5cad65e317fc2f70b9de7d305c035a1
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\node_modules\universalify\package.json
        • Size 857B
        • SHA256 10e53f10939bb8a4a73af6e06829b670bbf9da66a36edcc644441852806b87ee
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\resources\app\package.json
        • Size 2KB
        • SHA256 3de2102b53f3d54fb1060252120efc6882e61ca85e952a9c374d049d16df23d1
        • MD5 SHA1 SHA512 TLSH

        squirrel.exe

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\squirrel.exe
        • Size 2.0MB
        • SHA256 c702ccbad9a04d50849dcb5081dae7331f8d1b66c4f3143b47bb3201e0ed582a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Logseq\app-0.10.15\v8_context_snapshot.bin
        • Size 695KB
        • SHA256 a61f101cbc99ea43e0e4663da80bf0c6a00c9248565845102ac86617c4e6cbff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        RELEASES

        • Path C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
        • Size 79B
        • SHA256 616ecb01a3fcf13d7a0c7524fd84b563b663cccd8b2ca59d33399ca82dace947
        • MD5 SHA1 SHA512 TLSH

        Update.exe

        • Path C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
        • Size 1.8MB
        • SHA256 76359cd4b0349a83337b941332ad042c90351c2bb0a4628307740324c97984cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        background.gif

        • Path C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif
        • Size 143KB
        • SHA256 01b82e7629041c6f6068a6416bb09de44f50623dca5f85417129e5419e1c2c5c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        setupIcon.ico

        • Path C:\Users\Admin\AppData\Local\SquirrelTemp\setupIcon.ico
        • Size 171KB
        • SHA256 90f1dfae8ea7389899a0ded7e31294ba29e5f7eaa821c69046c4195cc31801d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        data_0

        • Path C:\Users\Admin\AppData\Roaming\Logseq\GPUCache\data_0
        • Size 8KB
        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
        • MD5 SHA1 SHA512 SSDEEP

        data_1

        • Path C:\Users\Admin\AppData\Roaming\Logseq\GPUCache\data_1
        • Size 264KB
        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
        • MD5 SHA1 SHA512 SSDEEP

        data_2

        • Path C:\Users\Admin\AppData\Roaming\Logseq\GPUCache\data_2
        • Size 8KB
        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
        • MD5 SHA1 SHA512 SSDEEP

        data_3

        • Path C:\Users\Admin\AppData\Roaming\Logseq\GPUCache\data_3
        • Size 8KB
        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
        • MD5 SHA1 SHA512 SSDEEP

        Network Persistent State

        • Path C:\Users\Admin\AppData\Roaming\Logseq\Network\Network Persistent State
        • Size 111B
        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
        • MD5 SHA1 SHA512 TLSH

        Network Persistent State

        • Path C:\Users\Admin\AppData\Roaming\Logseq\Network\Network Persistent State
        • Size 391B
        • SHA256 93d6c5235506611a4eb035aa52a08eddfc2802e260e1c59fbe4dd608b379a5af
        • MD5 SHA1 SHA512 TLSH

        CURRENT

        • Path C:\Users\Admin\AppData\Roaming\Logseq\Session Storage\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512

        MANIFEST-000001

        • Path C:\Users\Admin\AppData\Roaming\Logseq\Session Storage\MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512

        c5630b43-466f-4559-82f4-0c61dd678a84.tmp

        • Path C:\Users\Admin\AppData\Roaming\Logseq\c5630b43-466f-4559-82f4-0c61dd678a84.tmp
        • Size 122B
        • SHA256 3489a9fcea842f7bd4152b6ac5a20d493dfba1fdadaec75b503c8e5ffa0d9042
        • MD5 SHA1 SHA512 TLSH

        default.dic

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512

        memory/1044-6487-0x0000000001890000-0x000000000189C000-memory.dmp

        memory/1044-6450-0x0000000001B60000-0x0000000001B80000-memory.dmp

        memory/2552-6602-0x00000269EED90000-0x00000269EED91000-memory.dmp

        memory/2552-6612-0x00000269EED90000-0x00000269EED91000-memory.dmp

        memory/2552-6608-0x00000269EED90000-0x00000269EED91000-memory.dmp

        memory/2552-6609-0x00000269EED90000-0x00000269EED91000-memory.dmp

        memory/2552-6610-0x00000269EED90000-0x00000269EED91000-memory.dmp

        memory/2552-6611-0x00000269EED90000-0x00000269EED91000-memory.dmp

        memory/2552-6613-0x00000269EED90000-0x00000269EED91000-memory.dmp

        memory/2552-6614-0x00000269EED90000-0x00000269EED91000-memory.dmp

        memory/2552-6604-0x00000269EED90000-0x00000269EED91000-memory.dmp

        memory/2552-6603-0x00000269EED90000-0x00000269EED91000-memory.dmp

        memory/3256-6332-0x00000000003F0000-0x00000000005F0000-memory.dmp

        memory/3256-6538-0x0000000000E10000-0x0000000000E1C000-memory.dmp

        memory/5624-6534-0x000000001C0E0000-0x000000001C0F2000-memory.dmp

        memory/5624-3600-0x00000000022C0000-0x00000000022CC000-memory.dmp

        memory/5624-6533-0x00000000022C0000-0x00000000022CC000-memory.dmp

        memory/5624-8-0x0000000000010000-0x00000000001E6000-memory.dmp

        memory/5624-355-0x000000001FC80000-0x000000001FC8E000-memory.dmp

        memory/5624-349-0x000000001FCB0000-0x000000001FCE8000-memory.dmp