dd0d17892e4f9435adfffe0fdf7cb8e05c82cbc1b6741afd7afa772a2edd982d

Resubmissions

10/05/2026, 11:48

260510-nylj4sfs2v8

10/05/2026, 10:18

260510-mbzyjsgv8p8

Analysis

user interaction
yes
max time kernel
555s
max time network
556s
platform
windows10-2004_x64
resource
win10v2004-20260130-en
resource tags

arch:x64arch:x86image:win10v2004-20260130-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
10/05/2026, 11:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
WandEnhancer.exe
Size 1.1MB
Sample260510-nylj4sfs2v
SHA256 dd0d17892e4f9435adfffe0fdf7cb8e05c82cbc1b6741afd7afa772a2edd982d
MD5 2352d5290d8a6042e97200bf72a25d4e
SHA1 869fec4292d98fd68d14e5c1c8db91598497fa57
SHA512 2e0ad56578e774952711f37cd87184bdc62cdba0182b017fc87027053ddc87c0810b6356c71b1382c71436072edc69b11982173774df47600e8b36ffef4a3faa
SSDEEP 24576:QAtDKHcHmABLUBEolhlr6F8fpWWTB3G2Tb2yz8:QqKqHLUBEolhlrb7B3G
TLSH
T16F4528406FA4DE26F5AF1B75A074403846BBFC41AA6BD74FE608BDAD1877304BC1076A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

adware discovery spyware

Malware Config

Signatures

Downloads MZ/PE file 3 IoCs

flow	pid	Process
87	3036	chrome.exe
236	5000	WeMod-Setup.exe
567	3036	chrome.exe

Checks computer location settings 2 TTPs 10 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\Control Panel\International\Geo\Nation	Wand.exe
Key value queried	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\Control Panel\International\Geo\Nation	Wand.exe
Key value queried	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\Control Panel\International\Geo\Nation	Wand.exe
Key value queried	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\Control Panel\International\Geo\Nation	Update.exe
Key value queried	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\Control Panel\International\Geo\Nation	Wand.exe
Key value queried	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\Control Panel\International\Geo\Nation	Wand.exe
Key value queried	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\Control Panel\International\Geo\Nation	Wand.exe
Key value queried	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\Control Panel\International\Geo\Nation	Wand.exe
Key value queried	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\Control Panel\International\Geo\Nation	Update.exe
Key value queried	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\Control Panel\International\Geo\Nation	WeMod-Setup.exe

Executes dropped EXE 30 IoCs

pid	Process
5000	WeMod-Setup.exe
1108	WeMod-Setup-639140106670069152.exe
2896	Update.exe
3436	Squirrel.exe
3924	Wand.exe
2436	Update.exe
2764	Wand.exe
4412	Wand.exe
3740	Wand.exe
556	Wand.exe
1972	Update.exe
4376	WandAuxiliaryService.exe
3076	Wand.exe
6436	Wand.exe
1552	Wand.exe
5616	Wand.exe
1280	Wand.exe
5128	Wand.exe
5300	Wand.exe
4272	Wand.exe
4888	WandEnhancer.exe
5140	Wand.exe
3804	Wand.exe
7816	Wand.exe
7568	Wand.exe
7692	Wand.exe
7860	Update.exe
7984	WandAuxiliaryService.exe
8136	Wand.exe
6412	Wand.exe

Loads dropped DLL 43 IoCs

pid	Process
3924	Wand.exe
3924	Wand.exe
3924	Wand.exe
2764	Wand.exe
2764	Wand.exe
2764	Wand.exe
4412	Wand.exe
3740	Wand.exe
556	Wand.exe
4412	Wand.exe
4412	Wand.exe
4412	Wand.exe
4412	Wand.exe
4412	Wand.exe
3076	Wand.exe
6436	Wand.exe
6436	Wand.exe
1552	Wand.exe
5616	Wand.exe
5128	Wand.exe
5128	Wand.exe
5128	Wand.exe
5300	Wand.exe
4272	Wand.exe
3804	Wand.exe
3804	Wand.exe
3804	Wand.exe
3804	Wand.exe
7816	Wand.exe
7816	Wand.exe
7568	Wand.exe
7568	Wand.exe
7692	Wand.exe
7692	Wand.exe
7816	Wand.exe
7816	Wand.exe
7816	Wand.exe
7816	Wand.exe
7816	Wand.exe
8136	Wand.exe
8136	Wand.exe
6412	Wand.exe
6412	Wand.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
548	raw.githubusercontent.com
533	camo.githubusercontent.com
543	camo.githubusercontent.com

Drops file in Program Files directory 18 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_43383479\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_26284842\nav_config.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_2014618019\travel-facilitated-booking-bing.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_374208214\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_2014618019\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_43383479\protocols.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_374208214\_metadata\verified_contents.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_2014618019\automation.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_2014618019\extraction.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_2014618019\travel-facilitated-booking-kayak.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_26284842\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_283862306\manifest.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_283862306\office_endpoints_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_283862306\smart_switch_list.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_374208214\LICENSE	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_374208214\sets.json	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_2014618019\classification.js	msedge.exe
File created	C:\Program Files\chrome_Unpacker_BeginUnzipping5384_2099555147\manifest.json	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	WeMod-Setup-639140106670069152.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Wand.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Wand.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3036	chrome.exe
5736	msedge.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	Wand.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	Wand.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	Wand.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	Wand.exe

Checks processor information in registry 2 TTPs 52 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\ProcessorNameString	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\ProcessorNameString	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\ProcessorNameString	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\ProcessorNameString	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\~MHz	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\~MHz	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\~MHz	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\~MHz	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\~MHz	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\ProcessorNameString	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\ProcessorNameString	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\ProcessorNameString	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\ProcessorNameString	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\~MHz	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\ProcessorNameString	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\ProcessorNameString	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\~MHz	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\~MHz	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\ProcessorNameString	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\ProcessorNameString	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\~MHz	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\~MHz	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\~MHz	Wand.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6	Wand.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\~MHz	Wand.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies Internet Explorer settings 1 TTPs 9 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\Total\ = "35"	WeMod-Setup.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\Software\Microsoft\Internet Explorer\DOMStorage\api.wemod.com	WeMod-Setup.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\wemod.com\Total = "35"	WeMod-Setup.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\Software\Microsoft\Internet Explorer\DOMStorage\wemod.com	WeMod-Setup.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\api.wemod.com\ = "35"	WeMod-Setup.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage	WeMod-Setup.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\wemod.com	WeMod-Setup.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\SOFTWARE\Microsoft\Internet Explorer\DOMStorage\wemod.com\NumberOfSubdomains = "1"	WeMod-Setup.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000\Software\Microsoft\Internet Explorer\DOMStorage\Total	WeMod-Setup.exe

Modifies data under HKEY_USERS 3 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134228873686516523"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe

Modifies registry class 41 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wemod\shell	Wand.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Children	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\DisplayName = "Chrome Sandbox"	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wemod\shell\open\command	Wand.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428\Moniker = "cr.sb.odm3E4D1A088C1F6D498C84F3C86DE73CE49F82A104"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wand\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Wand\\app-12.23.1\\Wand.exe\" \"%1\""	Wand.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wemod\URL Protocol	Wand.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wemod\ = "URL:wemod"	Wand.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wand\shell	Wand.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wemod\shell\open	Wand.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wemod\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Wand\\app-12.23.1\\Wand.exe\" \"%1\""	Wand.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wand\URL Protocol	Wand.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wand\ = "URL:wand"	Wand.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wand\shell\open\command	Wand.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wand\URL Protocol	Wand.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wemod\ = "URL:wemod"	Wand.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-620072444-2846605723-1118207114-1642104096-81213792-2370344205-2712285428	chrome.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wand\shell\open\command	Wand.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wand\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Wand\\app-12.23.1\\Wand.exe\" \"%1\""	Wand.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-745935970-1373868228-562466063-1000\{BB91983E-9054-4531-837C-6ECC7099AAD3}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wand	Wand.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wand	Wand.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wand\ = "URL:wand"	Wand.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-745935970-1373868228-562466063-1000\{388BD95F-3517-430F-B482-84C0B57BF6EC}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wemod	Wand.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wemod\shell\open\command	Wand.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wemod\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Wand\\app-12.23.1\\Wand.exe\" \"%1\""	Wand.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wand\shell\open	Wand.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wemod	Wand.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\wemod\URL Protocol	Wand.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-745935970-1373868228-562466063-1000\{323D1158-31D6-4CC1-95DA-1E185E4E00EF}	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-745935970-1373868228-562466063-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe

Suspicious behavior: EnumeratesProcesses 29 IoCs

pid	Process
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1176	chrome.exe
1176	chrome.exe
2896	Update.exe
2896	Update.exe
6436	Wand.exe
6436	Wand.exe
6880	msedge.exe
6880	msedge.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe
4888	WandEnhancer.exe

Suspicious behavior: LoadsDriver 2 IoCs

pid	Process
656	Process not Found
656	Process not Found

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 22 IoCs

pid	Process
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	4204	WandEnhancer.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe
Token: SeCreatePagefilePrivilege	1288	chrome.exe
Token: SeShutdownPrivilege	1288	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
5384	msedge.exe
5384	msedge.exe
5384	msedge.exe
2764	Wand.exe
2764	Wand.exe
2764	Wand.exe
2764	Wand.exe
2764	Wand.exe
2764	Wand.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe

Suspicious use of SendNotifyMessage 47 IoCs

pid	Process
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
2764	Wand.exe
2764	Wand.exe
2764	Wand.exe
2764	Wand.exe
2764	Wand.exe
2764	Wand.exe
2764	Wand.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe
1288	chrome.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
5000	WeMod-Setup.exe
5000	WeMod-Setup.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1288 wrote to memory of 1988	1288	chrome.exe	89
PID 1288 wrote to memory of 3544	1288	chrome.exe	90
PID 1288 wrote to memory of 3544	1288	chrome.exe	90
PID 1288 wrote to memory of 3036	1288	chrome.exe	91
PID 1288 wrote to memory of 3964	1288	chrome.exe	93
PID 1288 wrote to memory of 3964	1288	chrome.exe	93
PID 1288 wrote to memory of 4844	1288	chrome.exe	94
PID 1288 wrote to memory of 736	1288	chrome.exe	95
PID 1288 wrote to memory of 4844	1288	chrome.exe	94
PID 1288 wrote to memory of 736	1288	chrome.exe	95
PID 1288 wrote to memory of 4836	1288	chrome.exe	96
PID 1288 wrote to memory of 4836	1288	chrome.exe	96
PID 1288 wrote to memory of 2148	1288	chrome.exe	97
PID 1288 wrote to memory of 2148	1288	chrome.exe	97
PID 1288 wrote to memory of 4112	1288	chrome.exe	98
PID 1288 wrote to memory of 4112	1288	chrome.exe	98
PID 1288 wrote to memory of 4280	1288	chrome.exe	99
PID 1288 wrote to memory of 1256	1288	chrome.exe	103
PID 1288 wrote to memory of 1256	1288	chrome.exe	103
PID 1288 wrote to memory of 1092	1288	chrome.exe	104
PID 1288 wrote to memory of 4936	1288	chrome.exe	105
PID 1288 wrote to memory of 696	1288	chrome.exe	106
PID 1288 wrote to memory of 4692	1288	chrome.exe	107
PID 1288 wrote to memory of 4692	1288	chrome.exe	107
PID 1288 wrote to memory of 4552	1288	chrome.exe	108
PID 1288 wrote to memory of 4552	1288	chrome.exe	108
PID 1288 wrote to memory of 2400	1288	chrome.exe	109
PID 1288 wrote to memory of 2400	1288	chrome.exe	109
PID 1288 wrote to memory of 4680	1288	chrome.exe	116
PID 1288 wrote to memory of 5000	1288	chrome.exe	117
PID 5000 wrote to memory of 1108	5000	WeMod-Setup.exe	118
PID 1288 wrote to memory of 1176	1288	chrome.exe	119
PID 1108 wrote to memory of 2896	1108	WeMod-Setup-639140106670069152.exe	120
PID 2896 wrote to memory of 3436	2896	Update.exe	121
PID 2896 wrote to memory of 3924	2896	Update.exe	122
PID 5000 wrote to memory of 2436	5000	WeMod-Setup.exe	124
PID 2436 wrote to memory of 2764	2436	Update.exe	125
PID 2764 wrote to memory of 4412	2764	Wand.exe	126
PID 2764 wrote to memory of 4412	2764	Wand.exe	126
PID 2764 wrote to memory of 3740	2764	Wand.exe	127
PID 2764 wrote to memory of 556	2764	Wand.exe	128
PID 2764 wrote to memory of 1972	2764	Wand.exe	129
PID 556 wrote to memory of 4376	556	Wand.exe	130
PID 2764 wrote to memory of 3076	2764	Wand.exe	131
PID 2764 wrote to memory of 3076	2764	Wand.exe	131
PID 2764 wrote to memory of 5368	2764	Wand.exe	133
PID 5368 wrote to memory of 5384	5368	msedge.exe	134
PID 5384 wrote to memory of 5412	5384	msedge.exe	135
PID 5384 wrote to memory of 5736	5384	msedge.exe	136
PID 5384 wrote to memory of 5744	5384	msedge.exe	137
PID 5384 wrote to memory of 5752	5384	msedge.exe	138
PID 5384 wrote to memory of 5744	5384	msedge.exe	137
PID 5384 wrote to memory of 5744	5384	msedge.exe	137
PID 5384 wrote to memory of 5752	5384	msedge.exe	138
PID 5384 wrote to memory of 5840	5384	msedge.exe	139
PID 5384 wrote to memory of 5840	5384	msedge.exe	139
PID 5384 wrote to memory of 5840	5384	msedge.exe	139
PID 5384 wrote to memory of 5848	5384	msedge.exe	140
PID 5384 wrote to memory of 5848	5384	msedge.exe	140
PID 5384 wrote to memory of 5848	5384	msedge.exe	140
PID 5384 wrote to memory of 5988	5384	msedge.exe	141
PID 5384 wrote to memory of 5996	5384	msedge.exe	142
PID 5384 wrote to memory of 5988	5384	msedge.exe	141
PID 5384 wrote to memory of 5988	5384	msedge.exe	141

C:\Users\Admin\AppData\Local\Temp\WandEnhancer.exe
"C:\Users\Admin\AppData\Local\Temp\WandEnhancer.exe"
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4204

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:1288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x124,0x128,0x12c,0x100,0x130,0x7ffabd42c728,0x7ffabd42c734,0x7ffabd42c740
  2⤵
  PID:1988
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1692,i,8819270986540332989,6894773515807373399,262144 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1916 /prefetch:2
  2⤵
  PID:3544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1604,i,10342692939672790407,4836504007960291945,524288 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2312 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:3036
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2428,i,424946026753060319,5628143633936023271,524288 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=2496 /prefetch:8
  2⤵
  PID:3964
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3280,i,11402259253718481655,14316747974097160634,2097152 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3292 /prefetch:1
  2⤵
  PID:4844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3300,i,1463680418247535619,13802336896542594559,2097152 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3348 /prefetch:1
  2⤵
  PID:736
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4476,i,14887037712760838015,7331474971061128565,2097152 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3952 /prefetch:2
  2⤵
  PID:4836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4640,i,16080308665083864814,7390607195348861663,2097152 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4616 /prefetch:1
  2⤵
  PID:2148
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=5000,i,14170985132938029296,2888949501341538999,2097152 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4976 /prefetch:1
  2⤵
  PID:4112
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6340,i,6162760631860285608,6641161060961755671,524288 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6344 /prefetch:8
  2⤵
  PID:4280
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=3692,i,8984769308796784088,14724118118327595235,2097152 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3360 /prefetch:1
  2⤵
  PID:1256
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3596,i,1784361177400503838,8495455559094940278,524288 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3720 /prefetch:8
  2⤵
  PID:1092
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3348,i,11635986490953614054,7604515948130811379,524288 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3064 /prefetch:8
  2⤵
  PID:4936
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3296,i,14172405206342911276,11838882815459499574,524288 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5536 /prefetch:8
  2⤵
  PID:696
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4464,i,3134767826082736785,6098638796347114510,2097152 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=4596 /prefetch:1
  2⤵
  PID:4692
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3632,i,17737986902990354095,2263594373479463599,2097152 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3604 /prefetch:1
  2⤵
  PID:4552
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=5364,i,17504296886552581562,3636626529074891139,2097152 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=5340 /prefetch:1
  2⤵
  PID:2400
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6584,i,6357307415537766592,8552130800187742847,524288 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6612 /prefetch:8
  2⤵
  PID:4680
- C:\Users\Admin\Downloads\WeMod-Setup.exe
  "C:\Users\Admin\Downloads\WeMod-Setup.exe"
  2⤵
  - Downloads MZ/PE file
  - Checks computer location settings
  - Executes dropped EXE
  - Modifies Internet Explorer settings
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:5000
- - C:\Users\Admin\AppData\Local\Temp\WeMod-Setup-639140106670069152.exe
    "C:\Users\Admin\AppData\Local\Temp\WeMod-Setup-639140106670069152.exe" --silent
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:1108
  - - C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
      "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install . --silent
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of WriteProcessMemory
      PID:2896
    - - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Squirrel.exe
        
        "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
        5⤵
        Executes dropped EXE
        
        PID:3436
    - - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
        
        "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" --squirrel-install 12.23.1
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:3924
- - C:\Users\Admin\AppData\Local\Wand\Update.exe
    "C:\Users\Admin\AppData\Local\Wand\Update.exe" --processStart "Wand.exe" --process-start-args "wemod://?_inst=kHLfQkrjKI1nVROc"
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:2436
  - - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
      "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" wemod://?_inst=kHLfQkrjKI1nVROc
      4⤵
      Checks computer location settings
      Executes dropped EXE
      Loads dropped DLL
      Checks SCSI registry key(s)
      Checks processor information in registry
      Modifies registry class
      Suspicious use of FindShellTrayWindow
      Suspicious use of SendNotifyMessage
      Suspicious use of WriteProcessMemory
      PID:2764
    - - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
        
        "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Wand" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1824,i,17687032656191626328,14110201587539730777,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1816 /prefetch:2
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:4412
    - - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
        
        "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-ui-direction=ltr --user-data-dir="C:\Users\Admin\AppData\Roaming\Wand" --field-trial-handle=2228,i,17687032656191626328,14110201587539730777,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2224 /prefetch:3
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:3740
    - - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
        
        "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Wand" --app-user-model-id=com.squirrel.WeMod.WeMod --app-path="C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2472,i,17687032656191626328,14110201587539730777,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2468 /prefetch:1
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Loads dropped DLL
        Suspicious use of WriteProcessMemory
        
        PID:556
      - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\static\unpacked\auxiliary\WandAuxiliaryService.exe
        
        C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\static\unpacked\auxiliary\WandAuxiliaryService.exe Wand\Support_1778413892507_Out
        6⤵
        Executes dropped EXE
        
        PID:4376
    - - C:\Users\Admin\AppData\Local\Wand\Update.exe
        
        C:\Users\Admin\AppData\Local\Wand\Update.exe --checkForUpdate https://api.wemod.com/client/channels/stable?osVersion=10.0.19041
        5⤵
        Executes dropped EXE
        
        PID:1972
    - - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
        
        "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Wand" --app-user-model-id=com.squirrel.WeMod.WeMod --app-path="C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=4016,i,17687032656191626328,14110201587539730777,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=5712 /prefetch:1
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Loads dropped DLL
        
        PID:3076
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://wand.com/oauth/authorize?response_type=code&client_id=infinity&redirect_uri=wemod%3A%2F%2Foauth&code_challenge=HEqxhCevNol9Dp2NKPrNCyVKDj98L4C7ILIi1UD_RDE&code_challenge_method=S256&state=N5d_qmfcDzt6dCG4Yu0QGzDDlqnXzR83Ggji1n7ZCqs&provider=google
        5⤵
        Suspicious use of WriteProcessMemory
        
        PID:5368
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://wand.com/oauth/authorize?response_type=code&client_id=infinity&redirect_uri=wemod%3A%2F%2Foauth&code_challenge=HEqxhCevNol9Dp2NKPrNCyVKDj98L4C7ILIi1UD_RDE&code_challenge_method=S256&state=N5d_qmfcDzt6dCG4Yu0QGzDDlqnXzR83Ggji1n7ZCqs&provider=google
        6⤵
        Drops file in Program Files directory
        Checks processor information in registry
        Enumerates system info in registry
        Modifies data under HKEY_USERS
        Modifies registry class
        Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        Suspicious use of FindShellTrayWindow
        Suspicious use of WriteProcessMemory
        
        PID:5384
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x25c,0x7ffaa20dc188,0x7ffaa20dc194,0x7ffaa20dc1a0
        7⤵
        
        PID:5412
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1940,i,14970516449709933166,9914652171247757869,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=2948 /prefetch:3
        7⤵
        System Time Discovery
        
        PID:5736
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1732,i,13313291621657921917,18262424653074944519,262144 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=2344 /prefetch:2
        7⤵
        
        PID:5744
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2296,i,6243385499931760574,17938379520923139781,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=2956 /prefetch:8
        7⤵
        
        PID:5752
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,869068687896979770,17676854207572004965,2097152 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
        7⤵
        
        PID:5840
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3448,i,2043842024856951260,7220296638677003812,2097152 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=3508 /prefetch:1
        7⤵
        
        PID:5848
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,13563274330951597596,3026563062764870362,2097152 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=4232 /prefetch:1
        7⤵
        
        PID:5988
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4192,i,13953015883257626875,53649636405006682,2097152 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=4236 /prefetch:2
        7⤵
        
        PID:5996
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,9673619477699609311,11677841403919860156,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=3516 /prefetch:8
        7⤵
        
        PID:5380
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,6585261077430838061,8296640108104563933,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=4416 /prefetch:8
        7⤵
        
        PID:4404
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5252,i,6069093692629371030,6198552805657916167,2097152 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:1
        7⤵
        
        PID:5280
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=3664,i,13952080509071784324,3227339933905174890,2097152 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:1
        7⤵
        
        PID:5424
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,825868811261355642,8758504772490011713,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:8
        7⤵
        
        PID:5644
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4324,i,2576616909305249473,3943167139013707127,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=5500 /prefetch:8
        7⤵
        
        PID:5340
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6036,i,5829172720488240228,745325776424397419,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=5772 /prefetch:8
        7⤵
        
        PID:6148
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5996,i,5745545811292075778,3811782197627888974,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=6044 /prefetch:8
        7⤵
        Modifies registry class
        
        PID:6156
        
        C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6540,i,15326708277818958551,4021866453677311609,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:8
        7⤵
        
        PID:6360
        
        C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6540,i,15326708277818958551,4021866453677311609,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=6556 /prefetch:8
        7⤵
        
        PID:6372
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6668,i,9147940034984670976,9671437505376570344,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:8
        7⤵
        
        PID:6704
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,11596943738006761091,10432205664680529637,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=5912 /prefetch:8
        7⤵
        
        PID:6812
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6992,i,5919063656464319768,15008438664027458960,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=7076 /prefetch:8
        7⤵
        
        PID:7140
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7028,i,15986609660837509864,16385939101599209052,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=7096 /prefetch:8
        7⤵
        
        PID:7148
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7100,i,16362234283840887183,13513245370955684529,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=7056 /prefetch:8
        7⤵
        
        PID:6796
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4312,i,10224428164623913232,13172239178911840769,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=4572 /prefetch:8
        7⤵
        
        PID:4324
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,8810543554977966154,18409999600842504160,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=5092 /prefetch:8
        7⤵
        
        PID:7152
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3592,i,13341184708262631805,15520579696408319999,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=4584 /prefetch:8
        7⤵
        
        PID:6316
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5496,i,10515395264428087472,7480827511030722007,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:8
        7⤵
        
        PID:6756
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6452,i,9125233627924810246,9034766781473184192,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=4604 /prefetch:8
        7⤵
        
        PID:5996
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7256,i,1548588066019005510,2080445658311207799,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=4528 /prefetch:8
        7⤵
        
        PID:4404
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6864,i,4176077260038795324,5957820966141989323,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=7224 /prefetch:8
        7⤵
        
        PID:6820
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=5672,i,13530743501207023846,2811072373146350187,262144 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=6864 /prefetch:8
        7⤵
        Suspicious behavior: EnumeratesProcesses
        
        PID:6880
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3476,i,5261542515786142378,16662071422006613471,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=7056 /prefetch:8
        7⤵
        
        PID:4540
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=36 --always-read-main-dll --metrics-shmem-handle=6008,i,4791415345622851919,1369516728237008500,2097152 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=3548 /prefetch:1
        7⤵
        
        PID:5048
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,9816757433581775648,16993644384235915908,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
        7⤵
        
        PID:1920
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7280,i,7214348872506733950,12093524930025173047,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=7400 /prefetch:8
        7⤵
        
        PID:2564
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6240,i,12061620993096349152,8024524294186065547,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:8
        7⤵
        
        PID:3404
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7432,i,7259678786578502897,2847613986014111787,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=7560 /prefetch:8
        7⤵
        
        PID:6476
        
        C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7216,i,17268212966809546528,12125291249843067244,524288 --field-trial-handle=2920,i,2997322811097035764,3912090928628952719,262144 --variations-seed-version --mojo-platform-channel-handle=7580 /prefetch:8
        7⤵
        
        PID:7128
    - - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
        
        "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\Wand" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=3104,i,17687032656191626328,14110201587539730777,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=5880 /prefetch:8
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        Suspicious behavior: EnumeratesProcesses
        
        PID:6436
    - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.wemod.com/forgot
        5⤵
        
        PID:1828
      - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch --single-argument https://www.wemod.com/forgot
        6⤵
        
        PID:2176
    - - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
        
        "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Wand" --app-user-model-id=com.squirrel.WeMod.WeMod --app-path="C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=2700,i,17687032656191626328,14110201587539730777,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=6068 /prefetch:1
        5⤵
        Checks computer location settings
        Executes dropped EXE
        Loads dropped DLL
        
        PID:1552
    - - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
        
        "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-ui-direction=ltr --user-data-dir="C:\Users\Admin\AppData\Roaming\Wand" --field-trial-handle=5176,i,17687032656191626328,14110201587539730777,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=5260 /prefetch:8
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:5616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=2600,i,8158585785391846166,4357625179491669450,262144 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3708 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1176
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --metrics-shmem-handle=4648,i,5860724454367724883,10623000761451199771,524288 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6092 /prefetch:8
  2⤵
  PID:6452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --metrics-shmem-handle=6588,i,12772623019916689029,12945555396654809815,2097152 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6436 /prefetch:1
  2⤵
  PID:5800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --metrics-shmem-handle=6780,i,16225952770884979705,13170618003418232706,2097152 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6748 /prefetch:1
  2⤵
  PID:5844
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=6916,i,6990336864453623613,2592902323675547384,2097152 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6836 /prefetch:1
  2⤵
  PID:5752
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5500,i,18107432214221308626,17180445448734342887,2097152 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=6632 /prefetch:1
  2⤵
  PID:6260
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=6948,i,12562863908612449377,2360181473777472918,2097152 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=3344 /prefetch:1
  2⤵
  PID:6784
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --metrics-shmem-handle=7036,i,16883278500979904786,5117651414087894508,524288 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7012 /prefetch:8
  2⤵
  PID:5860
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6992,i,5273291287275162813,10005004976940953229,524288 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=7048 /prefetch:8
  2⤵
  - Modifies registry class
  PID:912
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=7620,i,15479088427461439487,13763518269957451787,524288 --field-trial-handle=1920,i,1378388613405142412,15264994813986493928,262144 --variations-seed-version=20260129-090048.396000 --mojo-platform-channel-handle=1528 /prefetch:8
  2⤵
  PID:7060
- C:\Users\Admin\Downloads\WandEnhancer.exe
  "C:\Users\Admin\Downloads\WandEnhancer.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  PID:4888

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1412

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4344

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:6012

C:\Users\Admin\AppData\Local\Wand\Wand.exe
"C:\Users\Admin\AppData\Local\Wand\Wand.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:1280
- C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
  "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5128
- - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
    "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Wand" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2208,i,13650571286217344265,2357818361157512973,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:2
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:5300
- - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
    "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-ui-direction=ltr --user-data-dir="C:\Users\Admin\AppData\Roaming\Wand" --field-trial-handle=860,i,13650571286217344265,2357818361157512973,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2352 /prefetch:3
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:4272

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:6428

C:\Users\Admin\AppData\Local\Wand\Wand.exe
"C:\Users\Admin\AppData\Local\Wand\Wand.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5140
- C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
  "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks processor information in registry
  - Modifies registry class
  PID:3804
- - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
    "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Wand" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1876,i,12774709363904519052,11288674554644482620,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1868 /prefetch:2
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:7816
- - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
    "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-ui-direction=ltr --user-data-dir="C:\Users\Admin\AppData\Roaming\Wand" --field-trial-handle=2268,i,12774709363904519052,11288674554644482620,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:3
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:7568
- - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
    "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Wand" --app-user-model-id=com.squirrel.WeMod.WeMod --app-path="C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2524,i,12774709363904519052,11288674554644482620,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2520 /prefetch:1
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    PID:7692
  - - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\static\unpacked\auxiliary\WandAuxiliaryService.exe
      C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\static\unpacked\auxiliary\WandAuxiliaryService.exe Wand\Support_1778414276371_Out
      4⤵
      Executes dropped EXE
      PID:7984
- - C:\Users\Admin\AppData\Local\Wand\Update.exe
    C:\Users\Admin\AppData\Local\Wand\Update.exe --checkForUpdate https://api.wemod.com/client/channels/stable?osVersion=10.0.19041
    3⤵
    - Executes dropped EXE
    PID:7860
- - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
    "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Wand" --app-user-model-id=com.squirrel.WeMod.WeMod --app-path="C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=5376,i,12774709363904519052,11288674554644482620,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4152 /prefetch:1
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    PID:8136
- - C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe
    "C:\Users\Admin\AppData\Local\Wand\app-12.23.1\Wand.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-ui-direction=ltr --user-data-dir="C:\Users\Admin\AppData\Roaming\Wand" --field-trial-handle=5368,i,12774709363904519052,11288674554644482620,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=4612 /prefetch:8
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:6412

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5384_2014618019\manifest.json
Size 135B
SHA256 cb929ae2d466e597ecc4f588ba22faf68f7cfc204b3986819c85ac608d6f82b5
MD5 4055ba4ebd5546fb6306d6a3151a236a
SHA1 609a989f14f8ee9ed9bffbd6ddba3214fd0d0109
SHA512 58d39f7ae0dafd067c6dba34c686506c1718112ad5af8a255eb9a7d6ec0edca318b557565f5914c5140eb9d1b6e2ffbb08c9d596f43e7a79fdb4ef95457bf29a
TLSH
T1CEC09223CC019CB119743B642AB2AB82F7B41B0B6869705A3AB3148C1F7E1B48082680
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5384_2099555147\manifest.json
Size 43B
SHA256 81bd82ac27612a58be30a72dd8956b13f883e32ffb54a58076bd6a42b8afaeea
MD5 af3a9104ca46f35bb5f6123d89c25966
SHA1 1ffb1b0aa9f44bdbc57bdf4b98d26d3be0207ee8
SHA512 6a7a543fa2d1ead3574b4897d2fc714bb218c60a04a70a7e92ecfd2ea59d67028f91b6a2094313f606560087336c619093f1d38d66a3c63a1d1d235ca03d36d1
MD5 SHA1 SHA512

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5384_26284842\manifest.json
Size 160B
SHA256 31952875f8bb2e71f49231c95349945ffc0c1dd975f06309a0d138f002cfd23d
MD5 c3911ceb35539db42e5654bdd60ac956
SHA1 71be0751e5fc583b119730dbceb2c723f2389f6c
SHA512 d8b2c7c5b7105a6f0c4bc9c79c05b1202bc8deb90e60a037fec59429c04fc688a745ee1a0d06a8311466b4d14e2921dfb4476104432178c01df1e99deb48b331
TLSH
T1F1C08C73CC08AE7911B14B371B214642E3B8030B600039093A32084C0BA47B00262328
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5384_283862306\manifest.json
Size 160B
SHA256 2a7fe18a087d8e8be847d9569420b6e8907917ff6ca0fa42be15d4e3653c8747
MD5 a24a1941bbb8d90784f5ef76712002f5
SHA1 5c2b6323c7ed8913b5d0d65a4d21062c96df24eb
SHA512 fd7dfec3d46b2af0bddb5aaeae79467507e0c29bab814007a39ea61231e76123659f18a453ed3feb25f16652a0c63c33545e2a0d419fafea89f563fca6a07ce2
TLSH
T133C04C23ED18BABA12F587D40971DB43F7F0031B34E169463B39948C5F761B8925175A
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5384_374208214\manifest.json
Size 85B
SHA256 2d905d7b28b1afd313753d14f6a916a2e56ec4c1316bfa43046b09214ceb6090
MD5 8ce95626b39ebc2401eee0b34c24fc7c
SHA1 f97a2fefe756f7a03e388e1333573b884730c2b0
SHA512 f04e4f695977918adf6e0603386b6f9c75a4a2202b0fe7215b642f3db491a1db398039cc28633b8e2541749403581622d28c1400f3f8fc66a3daab200e27266d
TLSH
T106A0121018015DE318880320213143D2D3A51C05247437001106108019B8636027A22E
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Program Files\chrome_Unpacker_BeginUnzipping5384_43383479\manifest.json
Size 135B
SHA256 ba5c9096d20a482aaa1aa9e5f98ad6127d3e97c2f21de84f7c78d9b8073c8e26
MD5 fbebd68ecaa98928909421f66909c054
SHA1 99d787d90f7ed2e5ad924f9c5668eb988b5a6c07
SHA512 749a3b2be47fe28399dc763888654a3e8d397e06e8d3c3af3965bb45846a1336e6ab4ca82c82c3df846b34a2afafa2156f2690e9bf347ab175408dc0171c61cc
TLSH
T158C04C668D51DEAB00A747A56B295315E23B4B4B5044800A7AF5429C1A288964171944
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 09d955e452d108c085367992fd1c914992aee819fca8631b9ce8ba2ad55d8ae7
MD5 b253d410bb6ff4fe6344fc6139150da6
SHA1 c8b18dfad559f1a5beee93e16141a82c85d867fa
SHA512 9f4eeb98d2df48fbe0a9cc7d8b23f3d17eb067136c16ee4ec1ab0131725504130a396cfaca6d0264f2a09b75b3232dd6b63c79a25133ad433a9055069653fd38
TLSH
T103E02B9AD921AC2B19FD471A20845746E70403571B41551F363C420C8FB023E9286A1C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 85cd05eb0c32e8fb56ee49d78f4c4c31ba6bd0dbb8e74cb15244f94d1ad70968
MD5 a73036eca0f0412daecd0f997d092ac8
SHA1 a5a087fd146cbcbfa64ade1b8800c2ba41d2a9af
SHA512 6b66d62e0e189b331b746bea6ea632debf19f007365a42f1f80c345be90e24aca6df810616cd2e90d1a2db894a7e361f4fd29b297e78fcc9307933285939599a
TLSH
T1CC2138081F985565FB6000F6CFE0EFBD2E35CD84456D868AD6543CBC09D36ADC4E6689
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 3a1f1ba251f8ba71da2566a193ed3419e9dccb71213ae4d0ff98c0817dd608ed
MD5 055977c31feeb12869c21241063660e2
SHA1 9b49672f5c33fc645ba31a181f7ba75ade8a51fd
SHA512 0a6e40739ffe8aaaa2c885c79d1846400bc28bc7d0037a11796a802f698921194eb57f9a8ef2e7914e0368c638a190186fbe6f46ab34e4e0fb602af19aa06ee2
SSDEEP 96:GQU1C1ScVDH2bIrvlL7f4aIzjjiHiWmVt64obJpCz8XhDeoESwwSCw3Hn5Y1u1tH:GF1C1ScVDH2bIrvlQaIzjjiHiWmf64oY
TLSH
T1E4913D944EC86229FF1000B6CED09F777A30CA55001B9F4B86E979BC1673FCAB487586
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 12KB
SHA256 c10c328ed740efe3ac81b9492aa5069c38095c3967554c4dbd7cd9517f4be87d
MD5 ddfb4e7dacd69443d8b1051ec2271a02
SHA1 9b91a8c386c2c5f83448544d70bdcb10c0745ba1
SHA512 e13ce47a9c685b53ce7c5ee5a1af578b2edd04465d48bd3e57c7d3c50bb32196c81fd2356e61d9c46a603d68abcc33e21d06336dc188825ae7cc90958d733779
SSDEEP 384:D0XOitxNghPMVlhLSwnihaIaJbEr1rtkZqaUSV40G05S4q63coR1Su0VWLRaUdnd:FoCiMHc
TLSH
T1D142EFF783F4812DC92296F0DB15AE1FCEA90524931C797AC9E07E0793E2971E201B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 2787606b2afe0b7aa1a9201a7ca85fcc33088a18e596a2236fad1771ef27d10d
MD5 640b092c89caa82e5552b49943434a4b
SHA1 3857533bb2715775a35503a7739b206a398dd1eb
SHA512 6a2c0d371ed7fe742ac7cfd35a75c02177503a2f69f9e91f29076ddb8bb8c3265365a3ddec3de233baf61c8d5388d23237dc9cb188d9ba93a15974d8ccf49b30
SSDEEP 384:D0XitxNghPMVlhLSwniE0baW+KeJm0meaIaJGQ40G05S4q63coR1Su0VWLRaUdnM:2t3CiMHV+xLBqLXDZB
TLSH
T14182ACF783F8852D891295F0EB15AE1FCE690514932C397AC9E4BE0793E2971E201B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 371c8c5bd2d6213dc64c98227567eb8a73b5cf1f482586fdea82b72ef2985dea
MD5 f08ec9987f4b08a79dac1d49efabe3d1
SHA1 ac696c26db1494fe4406308e602010639aff65f9
SHA512 02c54a38e906268b1a79c48d591413c78ea62bff18be532e51d1dc5323708b4d399430a701a7705dd1df44a9f4643eab957283fa585e8f8a82d73478e5d8f35b
SSDEEP 384:DUXsYfwc8B4lCQaIgJYchaIaJb/r1rtyfKapGV40G05S4q6dco+KCSu0VWnRaUdz:K5ym6hH7
TLSH
T13762AEF3C3E8812DC92296F1EB156E1FCD690514935C3D6AC9E4BE0B93E2971E201B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 14KB
SHA256 03d66f19397da03ab732eabe946cb535db271da3d6df1a35ce8ec51d6af53f96
MD5 3b8ff3c147a8913faab30312b5924b69
SHA1 fa4c8bf31ffe98d2f5fef3e963a635b9540b3a2d
SHA512 13575d5814527d76b5ac8e2cafe8e69289be9054220315aeead8f1b14be0bc2dfcc3228ee48149f47100f41d02ed29cdfd837a5569477704f95f4714a8f43bf6
SSDEEP 384:DUXsYfwc8B4lCQaIgJYYaIaJb/r1rtyfKapGV40G05S4q6dco+KCSu0VWnRBHUd7:c5ym1UHO
TLSH
T18262ADF3C3E8812DC92296F0EB156E1FCD690514935C3D6AC9E4BE0B93E2971E201B5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f1c610a1ed2c39332320d25fabf12f64c0bc183bdb6f71f1684ff5e3c06be1a6
MD5 f44062bf5592d5f6382c27899738ddea
SHA1 871b58cbd57390c3690c8555b8ab48521e87f8b3
SHA512 7b18ee311d525a9ea3e706f48f4cc9b2a6d6c8c7b211904aab1ec103481dbaf05836349a5ebf5dd4e99af9c782fb24caf545dbb675254c30b2d8f74dfb7b0f1a
SSDEEP 192:oRUucBz72nZ0auv7rpAPRp2/Y2q9+Hsb+WNDeyO4v72XzokwUanVyIsnAUgraJ:oRUumz763KfUXpEwyc200aBe
TLSH
T19752C72EB9186A3BDCDAC21DF9127B27D7F52021B1841E84EAFCCA2C15D75CD6217127
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 0a7ff38dcf103d4b0e11d5dccdeb43860818875c07f3b643e3912e9ad0eccd47
MD5 3758d63089d09739385e2e2894d276cc
SHA1 821530a51ba86f2f9a9d54bb5dbb9a453f0c35d8
SHA512 167ff90c6b1140a6c560fe628dd4e52c4e6909609a9833328ab7479860266842bf8a4209f1cc0b6a20600c20d7329ddaafc308958cfe8fe233d3a49aa79ae3a0
SSDEEP 192:oRUJcBzH2nZ0aIv7rpgPRpu/Y209+Hsb+WNDeyO4v7Jum2izokwUa7VyIsnAUgrK:oRUJmzH63UfYXrEwych230a9e
TLSH
T1CE62D82EB8146E3BDCDAC219F9127B66D7F52021B1841E84EAFCCA2C15E75CD6317127
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 c253015199ecfb9900006f0ec4b0ecfebefd4749f8d0fff11c90b4982b353b01
MD5 3d943298b62e643112a6190e61e27da5
SHA1 9fcf090d628c8f0282d6017c11789778f9bc9af5
SHA512 37c445585e585ab36e1f0c1b1ad4f15c4a72dc09cd88e1b88285050eb8de907af640654f99525ff73eb68a9298c86f236c6ed8723615890dc29fd9520e71dc74
SSDEEP 192:oRUW72nZ0ntv7rpAPRp2O9+Hsb+WNnyO0lzokwUaBVyIsnAUgtaJ:oRUW76uNfUXlEwD0K0an8
TLSH
T1B842C52EB9187A3BDCDAC21DF9127B57D7F5202171841E88EAF8CA2C15D75CD621702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 e4af2487691596432ce53ed6b89ad1a82daa7980f3320882fdcef281a7a2b4dc
MD5 68e8143fec37d18222dc2d5c1965d9cf
SHA1 2f673015a0bc1296210e9a8b431f3f6058fba280
SHA512 26c94d96c5a0d1086947064f21e2df138c74fe3100110a352b01639a416990e6f66ebc46ff06711447eb8b86cd36f1f9d667791fc99ee96e4d75f468d93e7618
SSDEEP 192:oRUucBzH2nZ0a+v7rpgPRpu/Y209+Hsb+WNDeyO4v7Jqe2WzokwUa7VyIsnAUgrK:oRUumzH636fYXrEwyct270a9e
TLSH
T1DE62D82EB8146E7BDCDAC21DF9127B26D7F52021A1841E84EAFCCA2C15D75CD6317127
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 82581410b45bb831a55d4340442148d32c0a07a4498e83a1d8e21ce7bf42b86e
MD5 909983ef91f5e9a2b5f093ec22a4d1f5
SHA1 d6ea892444ecee6873aba79d87333ee348078bb5
SHA512 765cb50264e872c5cef99e9d7f42bc41060fe0041ae487af8832ee86d547c9ab8b6431f33a2bd0cbb9b921af28a275ca07142a82e0252f03438d0ccf3c9fb957
SSDEEP 192:MRUucBzu2nZ02Iv7dhgPRpu1um+909+Hsb+WNDeCh+l6+gxpum2JzokwUa7VyIsB:MRUumzu6jURAXmEwtH3B2+0a9e
TLSH
T18C62E81FB8186E7BCDDAD229F9117B26E7F52021A1841E84EAFCCA1C15D76CD6317027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 42538cf0e6abb9c70ea88fa5cd103a42dc112356cbc55520be3ce131d4988257
MD5 095228a92e202e1ecdfe3398e747dbff
SHA1 ec2e10ddeafb970f7d186c5c1882871d27888303
SHA512 f697eac957ef12f3424ca91cccf1fac7f88b453832b7511e2a087763d326e19c31baeb9cdbaa54b059ed0e05e21b24c5d8c50a85b305ca7712f9c6e289370898
SSDEEP 192:oRUucBzH2nZ0aIv7rpgPRpu/Y209+Hsb+WNDeyO4v7Jum2izokwUa7VyIsnAUgrK:oRUumzH63UfYXrEwych230a9e
TLSH
T1DE62D82EB8146E3BDCDAC219F9127B66D7F52021A1841E84EAFCCA2C15E75CD6317127
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 f8444da0069bb1bd6e4ecf465373056eeca31db864ca20607d76f8f820e15989
MD5 b0450fbfeec6202760a7694cc78bfc4f
SHA1 8f55a456044f491bd020d1ccfde2b1d3409db9f5
SHA512 e64505d224691e28f344c6610a7c50431144d631cb299a6376f1890ff4b37a8b9c2f748a79c398875a4c74b99af04949157dffd90ddf3ace88b899b7c93a8ac0
SSDEEP 192:oRUucBz72nZ0atv7rpAPRp2/Y2q9+Hsb+WNDeyO4v72yzokwUaBVyIsnAUgtaJ:oRUumz763NfUXpEwyc2n0an8
TLSH
T19C52C71EBD286A3BDCDAC219F9127B67D7F52021B1841E84EAFCCA2C04D75CD6217527
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 dee1438d44de28e780e2a7b7a9d0247836c18c3d3d6c128ba1c15ff8eb8080bd
MD5 4d489891fd48775c4d07ca74af03f0f7
SHA1 dcbc4881b4aa1ab9a9b76714a6771c6cdbd997d7
SHA512 cfa2cf8df9e95b0905abd22983b415672e09d81d9aa6bf901101379b29ede68f09850e36e92614958cfba4a230e7a98df12b5083d71a5f2d6e5c2cfab6ce2fc2
SSDEEP 192:MRUucBzH2nZ02Iv7rhgPRpu/y909+Hsb+WNDeChBgxpum2ozokwUa7VyIsnAUgrK:MRUumzH6jUfAXwEwtSB290a9e
TLSH
T19562E81EB8186E3BDCDAC229F9117B26D7F52021A1841E88EBFCCA2C15D75CD631712B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 7f0a83ba682045c9af93e89609521d80920ea6c7596be132d5225d8618c90851
MD5 f597564b1519a555985fb5da8503a8f3
SHA1 27cd57de3efd1ddab3d0599118e47e33b8bd3e37
SHA512 84009042119b2c64fb37b5a8e0ee5cd121bc40f81d99758bae402837ad45c4df2ceb58c0d49d457561e42732b4bc47f4031fd996f1b8d2fab6d36055c4996bd7
SSDEEP 192:MRUucBzH2nZ02Iv7dhgPRpu1um+909+Hsb+WNDeChBgxpum2ozokwUa7VyIsnAUp:MRUumzH6jURAXmEwtSB290a9e
TLSH
T19C62E81FB8182E7BDDDAC229F9117B26D7F52021A1841E84EAFCCA1C15D76CD631702B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 bba75670360fd8e5e5118eb7d7c57b400878083dd2d784c210c6b82e0528aee1
MD5 d01a8cf2775b3227931089749e5f1233
SHA1 9320124bcf4b977ac101bddee8c23b8e953a81ae
SHA512 ea17429f093290e943a9f9f95b9601c09d6ccb22faf4ed647a532fe7efae32c2ff5e7b4be8a0c0782db222af1dd0326b1f4f0c289e197f3d7760296099cd1f54
SSDEEP 192:MRUJcBzu2nZ02Iv7dhgPRpu1um+909+Hsb+WNDeCh+l6+gxpum2JzokwUa7VyIsB:MRUJmzu6jURAXmEwtH3B2+0a9e
TLSH
T14D62E81FB8186E7BCDDAD229F9117B26E7F52021A1841E84EAFCCA1C15D76CD6317027
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 5e2b5e210e57061bdb272980be64bf92e452a3971fce3ff6f49d570300ef2e5e
MD5 5f39af6d061166474f4b02beeb5c17a8
SHA1 e01482dd2849cb67617d9e365aa01a285357bd96
SHA512 ce110f67f8cefe0416dcb5c3d8f10a81bcd9214a7a036f46bb6c955bb0da6b023ff9253490be9d594b4c1765e7f00a1e1b68a5ea264fede57dac5a823ef8a687
SSDEEP 192:oRUucBzH2nZ0auv7rpAPRp2/Y209+Hsb+WNDeyO4v7Jqe2mzokwUanVyIsnAUgrK:oRUumzH63KfUXjEwyct2r0aBe
TLSH
T19752D82EB8186A3BDCDAC21DF9127B26D7F52021B1841E84EAFCCA2C14D75CD6217527
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 14KB
SHA256 9fa409f4d6fbcb9296c792cf2f21cc07770d3d0e2a146937695bafe91bd7bab5
MD5 9a2df1655b597e3777d3645e9c4b8851
SHA1 057659db03bca86a33ab98b8772cdd694dcbd7da
SHA512 d8b891a201460c756296007bd4768012c748bcec5763124c6dd8c9165f1d8ef341e4a9fb8ba44d14a226f20bc49613b78adbb1a6e0f2cc713286b171176a4262
SSDEEP 192:MRUucBzH2nZ0aIv7rpgPRpu/Y209+Hsb+WNDeChBv7Jum2qzokwUa7VyIsnAUgrK:MRUumzH63UfYXrEwtBh2v0a9e
TLSH
T1D062D81EB8246E3BDCDAC229F9117B26D7F52021B1841E88EAFCCA2C15D75CD6317127
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 4c5dbe3f3071c1cdd70e39a99dd2a8e7a0233b08f2fef9e58bef03d6b9f0f954
MD5 eaf45e095eaf8d2e1b455626d5895959
SHA1 23bbb40f8390c77932f41805e60e5023c08cbcfb
SHA512 92ecc61b66421f057e483c277097699444f9b664b973b2ed4406a72d4c026914714c5b5c5496330675ccc8e112b23772dfe4e83882fbc0b2de5ba584e72837e6
SSDEEP 384:Wcji97KxkXqKf/pUZNCgVLH2HfgslE27pLuLcifU1XODid+ErU3+NHGSdTFO:Wwi97KxkXqKf/pUZNCgVLH2Hfgs227pA
TLSH
T1EB72F8676C0C9E3B4F98C68CD9267F4FACB5014B65EA885493FA982903D5BCB11061FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 25dfcc74be9575a61ea9f5aa6248edaeb1b498cd5348e714f6cc668178696b19
MD5 e70ad809b0c2f3a65427ac85996c1e02
SHA1 a9c719d46851bea16bdd61f3f2c6a1880f55aa0d
SHA512 bac53969709fa8ea74c144d637002b2714aa2ff4b4c5db0d11624415251a2c3d136f5fde27201680f6464f4008c765b55033c97916eafa372dc70384c883153d
TLSH
T1E7B0122488415502C45302B061C704D831146F10C705530553E06DF1D82B1A28124250
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 144B
SHA256 2584a1db9f40cef8f8485dfe564b520b90180c6f081a2639a0420e66b51bcab2
MD5 cb43378a1008e7e43c1083483e1db0d2
SHA1 f10421ad9eb2e15c6210d42c71b195b78df50a2b
SHA512 673787125b96bb5643f6ff3998f0db64abe568400c3c211f5bef715381e60284e103f1c0ebd6bc0ed47204fcff744bdfe59e94ef6d6d6855732ee69398e0f636
TLSH
T162C01251C802F222C04A03B0509BCCAC315C5F20DF06038963E86D2AD835235403B251
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5897a7.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5897a7.TMP
Size 96B
SHA256 c07257e4704dbfb1b9a036285589bbe3a469aa67b01be255d07dee836c291ccc
MD5 a431f2d9ef8a980c7b75ccd01d4fad49
SHA1 13f5ab820df227d6b5e9cbfa5ec9ba447bc0e9ba
SHA512 ce09aa3778e8e3cbd15a574abcd22370cbde14704775290a56b760173d3c9d9cffaff1f104f67c69cb491d2f90571c4feb9e98b8ace09346efe73578435f9e7b
TLSH
T13CB02280C00222A3C00203B030ACA0CC3020CFA8C203023382E00AA3CC322300020020
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 69d3a53c9de01aa92e18a4a8e435a39b1755fb55f7a07cdff5ce952b52f405e2
MD5 9e74b0ef8ae4f06d725305734f41cd09
SHA1 7927108e80f6e4d8dbb24310d17187ccd0099cde
SHA512 f1fdc20c2a184c3233466a1fa2125a5d562028cec1023cdbdac78affe8535bc64c088f7f560f0752f9b04e5adb519eefd5b23edb3dcdccd42a76b81a753aea3f
TLSH
T129A002198F485483C49662B6B582479433658C132781062352D04644AC701414AB1020
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 234B
SHA256 2db2487a2fd5c5d6404305407ff35a5f6ce480281895433f9f26c861621a2650
MD5 97a494ea7ce5fe766c266fd3c0b6873c
SHA1 8e2b1b8ce9283bbeeb849e40d6bd14ce7619a374
SHA512 ead9fe8358968d0897211c766b8f35f9f47f8bd606f4dc9e36e05d8f5b005a3a987b5eb3e38276604d2e970c691e0dcbd5977d5594583a670b7517a83265aa35
TLSH
T1F5D0A7DB05308957133499D91028752ED4975D098DD4DDF8D905725725F4A238105939
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt
Size 150B
SHA256 db812fed4e4edf39b96a905df7c7e6b77a183219c910e3695e93c0e1bca4aefe
MD5 170b378ef7d8e4350b1b93e1257512b8
SHA1 229d6f421dc523f39de48d6c2943b3c878d35b76
SHA512 181a253f4b85dd96cfda9eae30525a676a6d6b04fa3edce63f282a3c8158c9125ccee19312fb5369920d5c767bcc670cb1922a97f4194956eb87cbcea83773f6
TLSH
T149C02BE704108EDB0670DDDC102C713FE447410C4CC8CDF8D40501532074E334101538
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5f2cb6.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\WebStorage\4\CacheStorage\index.txt~RFe5f2cb6.TMP
Size 157B
SHA256 841d189010112ed877e6cb9e631e4d258c79515f0cf8c756dffa93b5e055ae4c
MD5 b43096541588557ccce51f8973acf6c0
SHA1 7439c7158e7a7ea4a7b62de7a26030350f07e169
SHA512 7383f5b32b448cb6eeceb469586366f38458703c7a666bab9d65cb749d1fa2da3751f960651dc1d68e330eb1328617baaebf525637a7b2aeb9f387a65bbc90c2
TLSH
T1F5C08CE704204A9B077195D91028712EE4574C0C4CC8CEF8D40631432074E334200528
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 202KB
SHA256 dabd5461362b4c4c4dfa6f18903f078c2daca891c51a162a4e9f2189a9388be6
MD5 944499728346cd686e2bd57396f82e23
SHA1 0ed2fcd7b0043c5a9c4779004a68e9f1e86276a1
SHA512 a51011291d9ed8b42bb36b74aefead64752bb0ccc2d6bb38185bd470e0d89a27606b5f4f042e60bdba32a1f113668eef883b0581c68de0628bb4a983799545cb
SSDEEP 6144:WReBb6OuQRPKVBTIsTrOk0HOGm/SFyEEd:vYtVBTIsTrOjuGdF2d
TLSH
T10A1412725C15FDE72A7E8D54B8997E06CC56B28E96D8FDCC26A8534C14D40CC2B33EA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 202KB
SHA256 2433a78e3d177f50899fd811f3818b4901276a50f7683d93553668e4c227d73f
MD5 87f03d44c1a56948fa246001d19ecef3
SHA1 a6864bce088161cc55418901d6a002901dc601d4
SHA512 44414dafad43e37f616030d245401314856d2a185dd48cc1d64524b4141f9af58a76708a465c451c1bfd3a045f7cf8f5d4c25ef6bcbacb9ea3af32193754bcb2
SSDEEP 6144:NReBb6OuQRPKVBTIsTrOk0HOGm/SFyEEd:eYtVBTIsTrOjuGdF2d
TLSH
T1981412725C15FDE72A7E8D54B8997E06CC56B28E96D8FDCC26A8534C14D40CC2B33EA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 202KB
SHA256 8517ba152cdf82c22fc817b88612722d29b0d7be21134b463283725ed46ddd6b
MD5 a86a7907543b55b4613201a8b269fc46
SHA1 962007b3f30e67da1417bd08b22ebd0a804aa197
SHA512 970b34b63700187922aeffdad21ddcdbb4ad7b9ec0dd4ffc8917d04b3d91c781a499e90bcd4eac2c1a4e3b09409ec2b10cb59d1486e8be99acfb41fbe1c87c9a
SSDEEP 6144:9ReBb6OuQRPKVBTIsTrOk0HOGm/SFyEEd:uYtVBTIsTrOjuGdF2d
TLSH
T1A01412725C15FDE72A7E8D54B8997E06CC56B28E96D8FDCC26A8534C14D40CC2B33EA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 89KB
SHA256 fcb78c3e48560000a14b9812cf0b27f3b542d9d14010e3d3d10cd256d5df6344
MD5 349d95384c8f2a320c8e4132484a71f3
SHA1 aa92cf1887c0ffb930a1dd2508e2cbcc89e42a0b
SHA512 18a006fb3cc7d663bbb734c62c07e29aa4ea1365c4b6d807cb2c0b0a71a65e3e2fdaff77a3895c9294d0bb01fff0f79cb955066817a637c1ddbd90f1aacfafed
SSDEEP 1536:jVQcYRrL+PTA5F9/EO93Sos5EA3A820kOzXmUWUSGbqRszr6vFAlZLPm+6jR9YEm:xQ3Qw/xLANk0mUW5GmRntSFCjEENQ
TLSH
T1639302BA5E174AE7957D4A9176AA7809CE12630D70AFA8CC319C638C61D01C92F73F73
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 201KB
SHA256 4e108c634b1db37c26974429e287df88ea44a8c9d7430b0fd1fce5249dcfa7f6
MD5 ebce43ea53af9ca37667cb2d48941a2b
SHA1 f0646bf23c03a43ed033d12bbe77ce4d41c0312b
SHA512 eb011d8071928b6a090cd3099eca470a91eecbf89cc6720283c454280e87d6e18a8ff7f349ffa714b8e60b7c320352b22befd1b58316b46d5797d894e7263927
SSDEEP 3072:i+CyeFMmbFtKOuQRP5ko71knkYBvrgmjAbJ7sFnre23Qw/xLANk0mUW5GmRntSFW:3eBb6OuQRPKVBTIsTrOk0HOGm/SFyEEd
TLSH
T1331412715D15FEA72A7E8964B9997E06CC27B38C91E8F9C823AC528C15D10CC2B33E53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 202KB
SHA256 858b933940e3f5506288de67595ac044b731979e148ae60715f0a10d53799d9e
MD5 ecaaef4a10eab51aae207fb0e19000df
SHA1 09e1d1968b091d704a9fbbd139a6836ff67fd5e5
SHA512 3b0923b6de4d8e7dafaa69c7a23cb95a4aa96729c57681c8fd9becd8dcbf18cc5326c2c064a35331d32efbc04c353d890a833303ddae17cad5f3a5a77367eae1
SSDEEP 6144:IReBb6OuQRPKVBTIsTrOk0HOGm/SFyEEd:ZYtVBTIsTrOjuGdF2d
TLSH
T1821412725C15FDE72A7E8D54B8997E06CC56B28E96D8FDCC26A8534C14D40CC2B33EA2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 201KB
SHA256 e6dac48696e848d639785b7c7927acd7c78a0057a9e5d0ec4cc976aca344735d
MD5 f895169099bcead4f8b784f01b010655
SHA1 8e83ef53417c74a1c51f180204d35445269f8afc
SHA512 c79502fcb65e0f406857d5cc5ce485ae2a5ee901013800138005d693c070a8f72a87000987ab6238a3255df03d78a55b312d8512434a37c27ee699534554155e
SSDEEP 3072:V+CyeFMmbFtKOuQRP5ko71knkYBvrgmjAbJ7sFnre23Qw/xLANk0mUW5GmRntSFW:KeBb6OuQRPKVBTIsTrOk0HOGm/SFyEEd
TLSH
T1CB1412715D15FEA72A7E8964B9997E06CC27B38C91E8F9C823AC528C15D50CC2B33E53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Update.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\Update.exe.log
Size 2KB
SHA256 7384160e534526d57ad8c778c066871ad70548d86c92e79256898fa334833367
MD5 41a2e77a29628bbb8e45f0c1f25c3b29
SHA1 24d4948dd26c2d8c7e53b112529c4f6e6a9fcd92
SHA512 79ec5caf249b1c3be2357bc2968e62a0a1c709045950c2dd8895dc5c79cbedb0f1184e5da533c6dfb2dbfadd6bffbd32684cf703d424f6e4b8ecf93212d2355f
TLSH
T1A741D07222B1B1D88D173F52297C258463FF4328FA509F5CB568625EEA290175F231F7
MD5 SHA1 SHA512 TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 4b3334abf99411f7413513ab7909ac64c87709672f5e03bcb6b98b8459f06ab3
MD5 065cd844670a13493d0951ad71d51b33
SHA1 0d4cba13cb89ff5b66d98967605f46834076137e
SHA512 f38f335afae2a18779a91b864fca47b678a366cc5196f52457eb028586e66109065fec71e5d4888e3a9548ef8336b4222ff7d402d81e9b4e19569c4cba9389a8
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7C:fwUQC5VwBIiElEd2K57P7C
TLSH
T1A4B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

protocols.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\AutoLaunchProtocolsComponent\1.0.0.10\protocols.json
Size 3KB
SHA256 4fd800e7b1a5fb24b13fac2e31946d205012b7c28d8c61580b0669b2fa3517cc
MD5 1de85fec2dfcc28011a7c2aaab95eb5f
SHA1 80e8c954bfbe8f7ee5a2335c8d969ae033935dc3
SHA512 9c7dd37eb0c094b6aa05201e7c71a8f33b9db81284223bcfa595a44a6ac95d5a6820ab6f07b7aa8d26bf207454e94277bf35332e9c009ee63f083752b6b51750
TLSH
T1D1611DB79A3048090E3412B86B19B35DF63E029F1AD598EB76BE568F1F710F7245C54C
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 1d5424e3203c3272db4f9cd9e0161e78bf7ec337d47156675c54f4d3d506d304
MD5 8212224641bfd663af879f2432d08605
SHA1 0a8c1e47a8f5685459133bd46e371a096422b444
SHA512 eb3d78eec2daf44f68dde59f88f997b77e5f4073744be69b8762cc4ec27f95007c3e9c5241c43b52caf353244173e80c0cce66f49b93fb82ff4ebe6c9753be89
TLSH
T1EED0A736B74A7411E66D81315523C31A1B2A84A469974581E22CC64CEBFC1D857C71D2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 2d812d63b94e52acac0ff3d23d196b3c185f5ddb1e01deeb75aec3c1bafd468e
MD5 6152b0c1f75d5d080bcd3802185a9245
SHA1 4f64d728e6f0df535705d56e0e7a69fc1e71917c
SHA512 28c794bb2d2495521df039966b1a9e94a2843c311371b43db2ea79c54226693c48e9527fea13c5656d1ef3768cdbacfe060b82385bc27c6d4a2715b8b656c7da
TLSH
T1C3D0C00C73722C30C4C9CC300858730F2D19C8F28E42436254371A385DC20C045C71D3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 e8b794ddae1c182cd5bdf3280502fc20e0d1bbb83fa98695dd9554e580b515db
MD5 e2acf35f85cc51742b6dbfd089a22de7
SHA1 d2f831a4d2d2a72bc82294e0db4496d425f3c241
SHA512 dc7c313b6984de31fba866906b65c34a375452af96f5f8d900080a50233e15566612618b446d95b3283af79511b9492a004b9a8f220a70ac98cbe8ba536fdac4
TLSH
T1A8D0C00CB3322C30C0C9CC300859730F2D19C8F28E42036154371A386DC108045C71D3
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 42e9dabf1c85deaf0a31040464b74e33b9693099f0d887f9023fa6122cbf3691
MD5 d7e9063ee17eebb2a829891115d29780
SHA1 7f481d82967d8e26875672bff98a3be43b54920b
SHA512 9134424379a14636cdc60644cf375bab5a6c395b41e2ed9d7dbe9f04fc771b520ceec9e8a19c743d2afbbb7c5edc7a6a1fd6973dac698f89d4c9562509ffad9b
TLSH
T18AE0DFD845D8C62FE244B5C78279670CCA90360E92C8795A1741C884300AA58BBDBAD8
MD5 SHA1 SHA512 TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000081
Size 151KB
SHA256 f89b21b1f1d6df3c5a10ad34278d7170c3c611582fefd0a44f47d8f80cbb1b0b
MD5 06ed9b6a584fbc2c2509e4a417a002a6
SHA1 42a82ef1d5940dfa467ddc0c5d0272149c0676a2
SHA512 e79f3c9222e6bd4db3f21b4d3b60bed16a6b3c3df6420ffe84e923d6e50d6f13011b1a30fcfbfa680dcdd901eda742e97748e1b69056c72f5ffad79dc62d57af
SSDEEP 3072:7Bg8TqsKZLuHK5g6u/uMvkot36vvaphobnYbZlTpuNMUa7URULZOCrX/pMWPqCB:7Bg82TXg6eBZtq674YVDUaXL1McqW
TLSH
T183E3222A04D014D86BD02B3B280BE5556FF89E2AECFBB1B4D7402F25596871847AFF71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008a
Size 128KB
SHA256 f5b811d5f8d602af8049c57bb8775b8c560d94e6088a29fc00ea3ebfbe4916eb
MD5 b8a00344410e973bf62c1ac394521f18
SHA1 29a2ac1eef789a64c3e175afba39ea94789121a6
SHA512 55ad122ad1ab05289213d7ee67364102d2bf40927ca4c93cf631fc7b43a35191b89695d67a16aa188952914ad125b45bb8a460e0ec3294bbb027f0ec1679bd61
SSDEEP 3072:BGI+sheFRrzUvviWcm15+4vEwwydPeRTKCbV4wx2:VRazUvNZmKdGRTKCiwg
TLSH
T127D312C8CE2A12774DDDC1C6DB4BE993441CB54BF90C6014ED62AE2CD6E9601BFBD191
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008b
Size 17KB
SHA256 d783934faa55113e0103fd994c3b46f2359ae4f0508ec132bbccd557306cf41e
MD5 3106804dad98de8e3a11931885ab2e7c
SHA1 cd688672b3282bd76754f32c7b9ab65ce94972f0
SHA512 5d877d0307967491ff561e04306d714f8656538aec4b00e7dfd12efb62742ecf63fe82efe789f425761acad2a12435340c46b94b82826ab1a2134332c313beb9
SSDEEP 384:Imt0ni1SLO0Vu4Bpi734ZCDFj8KLLktSKI2QlpN1D9Ah:F2i8LvbpWCcjvL6D6pN1m
TLSH
T14A82E190EE8F11D04D766EA3BF07D3826B2E261FB6149A52B410FE92187F2C98C750C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008e
Size 18KB
SHA256 97722715f92bfef1cccdf80f1dcee232f79e48a4b5612305ca2b864c352f0274
MD5 407076dbc5bf0c366ba40a25b3c5827e
SHA1 5cfcd188250e174f6aa12dfa636d1ffee0109225
SHA512 de64d6aef8d383f936f2045576c202978fc20a7b6cd72a2c59e766f47fd7b5fe32c22eba27c31eeaa0b4d0ea53f034a22ce2e39deea227e45dbdbe55ea230a94
SSDEEP 384:9txbJGcjnNmvi5cnwn2o/YFkaGE9YHt/1TpWCtqPn0:zxbJG6nNmvhAYkk9O3WCMP0
TLSH
T1BC92D0F989055288DD2980B868EF4D5989442826051ABC54E4FF7638276BF7831F5E3F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00008f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00008f
Size 71KB
SHA256 2c295d99e26dcf357d4d01bcf270fd6924b600c9a13dd8c363ef114f4c6976fa
MD5 4b73e2ff3024784eca66d2120a9bcb22
SHA1 2870bcb8ece10145e089262bb6634d18ac85bec6
SHA512 9ebe0b2cc7ed7298d931fc246732ed90881f0252b957afbf14f390c75c1da3fddf1b3fbb00be8d489cbb7b5a18f9dbda17a24e18594d44ebba4b7ca3f50bb10a
SSDEEP 1536:MO6PxhqwEppt5fUo8w4d+X5JlhLzcua67BYePELa:M3qh7VdDf8GPH
TLSH
T1F0630245820BA35EE09D4A79D27481F61FC2CB5C2BBF5C27538289AB5F57DBF6410134
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 d6917fad0e3361037a80e6d0f01a080a4b3e3c904994fc7bd5ba2613612291f3
MD5 9321610eb9144aa04e6191df90bdc737
SHA1 713810f1f8e24ed8b2a13200100a485b2b1c9002
SHA512 9e1e9213b9e70909972d02c0ea0333cf8de251ae9514882266d435344086a00f4c39e4297171b2734eff633f13597436e821641cbd7a732a39e4692f343f457a
TLSH
T1AF714DD7F7C29F16FBE410B416E514A0777883180A475E2ABEF90B3CCA8FB1103A5A15
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 aea7ee24cd972b3d5847cbc3c0f2f97bf8664ba5273997fd25170152f1daf339
MD5 2231e3a8db5d2873f6be78d85954c9a7
SHA1 ad22a47e82937125dbfdbb965305297ce231ae76
SHA512 d74b5cc770d5ed51e8f0ec97381f1e5274a9bff264609ace41bdfa68f391f281f15e80ade55384b9674f1fe1c675e75ecfa2c782c3b741a9f17e6788d9aab9ae
TLSH
T1A4819197FBC39F16FBE500B406D11860367883180A475E2ABEF90B3CEA9FB1103A4965
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5af648.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5af648.TMP
Size 3KB
SHA256 e3c46e5697491a9a551111f3b69d5bf0893e6ae64e853b74afe5fe19d2754410
MD5 e36a4178e584f02845a6f962a2445566
SHA1 3f7d60452c325bc6783193efd837ed754d151d82
SHA512 2e334e8ce30d227f2a90efec63afac007d40f50434e80c94a68bedefd215c73378dabdc528c2c0e7b5be05ebe0ce5010dcf6f1288effcce058534a8f8bc255de
TLSH
T171613DD7F3C2AF19F7E410B006E410B07B788319090B1E69BEF9473CCA9FB1202A5914
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 10KB
SHA256 2ded1d84c5b6659b9ed2a70d21b848baf5c383d82af7756341caad7900bc6b7f
MD5 b4112f851cd3f87348644e4a3fff4748
SHA1 1c3de1fdec4846731f164f1468a7fff2a12d3ca6
SHA512 f384ae1fe48e3132c00f93c631922ed3906ce5f1942da3111bb0fabbde9921d165945a1aaa956e84c5af0610c1d62da36e7b1b325f76c21ca4a03dfa07b567f9
SSDEEP 192:D7hr2gp9NMWeVRqU1t9sHtQkT9SHIU34TSoLf6XACEoRU+ha0VPQJI4Qkj6UXGJ9:D7hr2gp9NMWeVYU1HsHtQkT9SHIU34TK
TLSH
T17D22ABF7C3E8812DC91295F0EB156E1FCE690914935C396EC9E4BE1B93E2970E201A5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 4KB
SHA256 6b2c25cf8d168c88ccdd588c2de8792600d9bd8bc991700df0cf0f875dd954e7
MD5 7dff7a0aab7b28bb8e8ce371b8b17717
SHA1 6c013101d2d7b4d443910a2afc5db9d3951353ba
SHA512 289ac2a2581e8dd675b38bd8bc6d311769a21dbcb4162916aec9359bcb11d85d640788ba49d7a97a7d6afa074b3233bc5efac23e0d61207710a034465417c7f0
SSDEEP 48:YALlhtnhLgypPh/seqRs8EzBCsZse9foKsztsMB70BCIsH2Ns1csPRNwBj6AsSgn:D7hrnqUzBt9sHt0Bk2a9NwBj6az6jR
TLSH
T1AF917AF7C3E8866DC95195F4AB256F1FCE290914432C3C6AC8E4AF1B93E2871E10169F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 44925c044fba423a272ef844995c32ad0120f82f9f2f5550239f6ef0823bd1c4
MD5 d1d7f66b0951f3f6e4a7fe5f16d7ce07
SHA1 b34bd453725cd046afe2f4aea30eb3d02cf86a76
SHA512 ea2319a528523234754c611065503a4dd49d2bfd21cb1f7b95de3a3b66cbf9c10f28331fa30e054560d453c1d3a47994ddf3fec815cf7d8bc49977e0ae86fd0c
SSDEEP 192:sxZxcMR0iMyM//K1Ml8UQSjEz/fkosNH2Pp81hRIdprIbHW6+WNu8E/Yo8IEL8Fb:sxZLHUqWA/fhsNH5gmHby/Vb
TLSH
T19362E916AA349D77CCD7D219F945BF53D6F51472E2900E58AAFCCA0C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 fa23be79399d7ec04b48018cddd7aeb77c9e048c2a0824df319b5549f545aef5
MD5 6f2035c145099caa444fe4b1788a0fe5
SHA1 d534af402c0cc3519ed76302e8f974602e64dca5
SHA512 522d90063b4d52bc28ca9e4feefc63cd1082e66d0ea51a93b58b15487903417a984abc77358a7bf7e3ceb3508aa8c5fe1d680cb783bd24ae50c31f7fedca6be1
SSDEEP 384:sxZLHUq+A/fhsQWv3HngFHbAqXbFzVWVl:sjj+A/fFY3HcHb9b1gT
TLSH
T14982D657A6344D778DDBD229F941BF27D7F51426E2904E94AAFCCE0C00E6AED620381B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 109c21af23e9c4a35ea5c212c10a48174fc7638f9a45546b5d7f1765e8b74dba
MD5 85cb5189112f261069c4d1f0735a20f1
SHA1 9d41d242cdc5faab86d22e5b503b8993f1823cda
SHA512 07ddb4c301e6f2cc823bb70d6a40589f26742840661fce2c8d7d2b9dbebf03e48a8bf892580100c395ac094a99e4130eca2b2561111b0b9dce86146d6ec98f40
SSDEEP 768:AWsalAy7pLuLnNVWvNT6D8F1+UoAYDCx9Tuqh0VfUC9xbog/OVVkwoLl6QF5/rob:AWsalAKEnNVWvNT6Du1jaUkwoLIs5sfz
TLSH
T10FF2FB7B6C0CCB7E4F804E9CDC2A7E8E6DE801CB96D8899447EA844C03C66EF55165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 522e841f9f809b1ca0285ae0ca54a06b4941525eea6db04f9a9e8f4b1e5b6215
MD5 f4a316ee6574a18f90990244b1bb8e5e
SHA1 d2ac2c4b2b7eba7104d6a9e4d7bfed9bb22306eb
SHA512 67a4e5600870913ed0a0e61fb731f9e94039817d62a8a8c638c2061d97bed540950e25b9f994ed3d5262c6d5ddb922730409fd486a0f4ff7ad449f4dc2a8bac5
TLSH
T1FDA0029587D48693D1184274E46501C8A61848105305231765A4C15C895D24C519A054
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5d427a.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5d427a.TMP
Size 48B
SHA256 b54395d86ef8963df9ab6ff7c3fd99a8fb1d16a85f7c9ace8e0a1e81db075ea9
MD5 4cb7823968749cd095225ebd557bdd7f
SHA1 002ba584cacdf6c1b63ba6af93227a0f78321d97
SHA512 e569d4b1811807d2981a85e4faebf11c97bf8e5edf688bd042bcf054629c95fbe4fbc48ed4a349a5113e042e5d467df6fc755fd1d64fa7ce8fb5b3924e1e009a
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 7KB
SHA256 37d64d08e3d0e41dd87bb70a23f291ca4b2b5453bfba4aebeedf89bcd7a0d295
MD5 4dde22bad35244ab47d64d1bd47de276
SHA1 a102982953196d5db426fb1763b23b8d41fdf813
SHA512 568a5d0d14285d8f964cd10f0fcf32b794fb8d90dcc44d7658083775126531cf847a1bdd1bc0bc011bccb3308b1627b15ca96b5ed4f5b9557f51f5345b81cc58
SSDEEP 96:KoleKm886UKLCSiSIK76oKP626wYKx+mTOKoMqg:Ea3MDb0Fg
TLSH
T15CE15810717B22453ABD2D4D95AAF51F168130A33498B56B3F7800660F6BE20DDFDCE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b4fcd21b-37da-436b-872f-7a143a5c2982.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\b4fcd21b-37da-436b-872f-7a143a5c2982.tmp
Size 13KB
SHA256 249a19c87ccfcf0cf96c030e7e11469db12b480eb49722f0a092846f1a31bddd
MD5 0b1f66da1a1f77891a28c4892fcedfc7
SHA1 ea5e1acf5cea85ef1209dabc65e0af43453ddd7b
SHA512 578c8f298e5c17c94ff67f49f6ff85acb52acfb4c3dcb8c607183762a5c981e0501875843f7f1076f4b735b9df1e7dc5f0b4a079a045943613eac3d5e0b8bd7f
SSDEEP 192:sxZxcMR0iMyM//K1Ml8MjEz/fkosGh2Pp81hRIdpJIbHW6+WNu8E/YopI+p8FIgc:sxZLHU7A/fhsGh5gUHby/4c
TLSH
T17A52FA066A349977CCDBD309F945BF53D6F51572E2901D58AAFCCA0C04E6AED220782F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OperationConfig

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\OperationConfig
Size 18KB
SHA256 d675bad1a758b07f1ed431a7812bf9fd82a0134557a9f1479faf96798a2a9d7c
MD5 f18b79a3435844f3cd10f1b52c52502d
SHA1 686226dff62991217fcaf2118b30364ed5b08220
SHA512 203b436d074f1f469ce6afb478f21e5847cb9adeecc4318aacd5ca131357810be9a8992d7737bd36a754ccc8f35273e30b64a8a51eacd17024779ac32e0ed767
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/uP:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbA4
TLSH
T15482751CC52C7E3247C92F7D6A2F9D727ACA30CA7081459D798CC69DC31B06DA58A2BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

office_endpoints_list.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Data Protection Lists\2.0.0.0\office_endpoints_list.json
Size 3KB
SHA256 8480f3d58faa017896ba8239f3395e3551325d7a6466497a9a69bf182647b25e
MD5 94406cdd51b55c0f006cfea05745effb
SHA1 a15dc50ca0fd54d6f54fbc6e0788f6dcfc876cc9
SHA512 d4e621f57454fea7049cffc9cc3adfb0d8016360912e6a580f6fe16677e7dd7aa2ee0671cb3c5092a9435708a817f497c3b2cc7aba237d32dbdaae82f10591c3
TLSH
T1F681BE27C5B58E2796F060119750E654F53D43AFA600C6AFB5FC825C2F373ECE88A4A8
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 b9b4791eade56ef65420cf2d7e58d3a08f38f9b708be46eed378d1f3223fc83a
MD5 8d43e291aee4d3a39c315a692c9cdf31
SHA1 365500cea0c29bebad7e9de0b64be1f3daccf85a
SHA512 19644bf98fb70c119c76b61ec68b496e1946fc3792fd81956ad391f89ed64683e3f63ddd1f996f369ee5ca8ea147a22243c67ecab067f8a2e8670883f3dbacb1
SSDEEP 384:nBCcmyWCMsNaELxT3l6avE/lO5O6T1e4KV8p0D1z:IcpMmL1Dc9O5lT1I8p0Dl
TLSH
T177825B366C3C1D778DE29208F44B26079EB8907B96C56FA4DAEC5F0D05DB6AC130E927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 92d8b5c52a7cfe6ce7cc01545ec07475a08e88bb93c647995f59f82b5a4060e5
MD5 9b47c22122694e2cd02cad924d8959fc
SHA1 4af70c183d38d34235491a1aa8d4608dc681bf8d
SHA512 8587ad7fde3c32271e5f21e0f6424412ae05599944f4f196ee3580588590785e1f70d018c0fc4f1d83a0c2ca0add8d974b0ca6fd1fe6b4edda97f88e47dc1217
SSDEEP 384:n0CcmyWCMsNaALxT3l6avE/lO5O6T1e4KV8p0D1z:/cpMWL1Dc9O5lT1I8p0Dl
TLSH
T102825B366C3C1D778DE29208F44B26079EB8907B96C56FA4DAEC5F0D05DB6AC130E927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 c3fc49f44553c42b4a584691f20731eeac8cb5363a4343a3f0f864cacefa3440
MD5 c4d8175f204f815d4013d2202d9da196
SHA1 e786ff66fde8ca0ecc0032c39fe1c9ba4a2d4940
SHA512 36bfb685935fae8b403a33f95882012ffaa8636fd8cab57fc6187e8767bccf1cac3dcb7a6e93f78e9526964744f3d02efcdc02c2f156930dfb41fddd7d116d81
SSDEEP 384:nhiF4CcmyWCXsNi8TUNTUlIl1LxT3l6Ev0DfQP/lO5OCf1e4KV8p0D1z:IFbcpXbwgzL1JLP9O53f1I8p0Dl
TLSH
T1F6D2A4F698D78937D9AE4387A73E6D068EBCC16375855994B7C81E0CCC861BFC30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 ebe46de41e3f01c15a8dcc3b25e888ef834fb4c8ff34bb1675ea930079779350
MD5 262ed21ffb66c1ba594503ce25d5fc2c
SHA1 da760c2b6f3196c24e1e069a647c3641a6aa38bf
SHA512 1681b2db27616dc95c1f312f848b9a27a74fbd2fb1c95ee0bee1d453b50cc5c0624d2838ff4736678486b7b557dec1160c9bf503f9330ccb7f1ad1d6b11de988
SSDEEP 384:nbCcmyWCMsNa1LxT3l6avE/lO5O6T1e4KV8p0D1z:OcpM3L1Dc9O5lT1I8p0Dl
TLSH
T10C825A366C3C1D778DE29208F44B26079EB8907B96C56EA4DAEC5F0D05DB6AC130E927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 35KB
SHA256 2c545ed5d181539e1ca9cbd82e31f81e404804466ae61a729eee08a0b0010d98
MD5 f2fb4d18138d61cae68a53f5e104a7a0
SHA1 0ed756c8669027c82dd5650d872c42bd249fbf88
SHA512 62561b6291e7e70eeadb6d565edbb7c72d73e7cbde1dee81804e1e55179600120dd10d9f27c9f6b3bfce1651239b7ab80c3d5cef7485efb5d9ca5554658a43bf
SSDEEP 768:IFscpXPwgfLoQwdP9O5t4JSHS5U4e0xI8p0Dl:SXRLoYGpzxI8p0Dl
TLSH
T19DF26CF194D78DB6C49D87C7536EAD0299BCD033B5884988B7E4692CEC8B5BFC30A811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e827c00fb03febfafd009415a92afca259768b32dfd0f297621c6f5bdb22e249
MD5 660b14ee07de73928d051ca963f80248
SHA1 0c3da20c11ef9dce813be0e152ba70a93558ab94
SHA512 e432e2ae8c157b979b3de0b99cf16d245dd05f8faa1f775123e2ae6d38bdcfbc03f9af663538519012c94fddb697ffc26884d48942a84fb5123a1c471acd69a5
SSDEEP 192:gONw6QaQmiUyxYxPwZ/lOQHm9RxMGBT8U6:gONw6vFwZ/lOboU8U6
TLSH
T1EA02F734697C2C7B8EF2AE49F4472B176FA4116BE9562F84DAD81B1C00D769C2347832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 29KB
SHA256 8e533c4e47e78d4d6a5930f5ce17c49c5db775e59a8765e5e82ced6bf34ba705
MD5 741a4dc03eb2de4c370d27ea2e0aeeac
SHA1 d7fab7a7d32ba4a9349a05d8c0d9e1b648a902da
SHA512 be58cc76a65f9688f4ea55b17e94dcdaa914c0575e31396b248e87601f4545dbfd63e6b64b49dfbac223379c67f24a0899d42d5c7e8e9046fd939c056df184e0
SSDEEP 384:nhiF0CcmyWCXsNF8TUNTUlIl1LxT3lbFw20xfDP/lO5Oo41e4KV8p0D1z:IF/cpXawgzL1jwZP9O5t41I8p0Dl
TLSH
T177D2A2F698D78937D8AE4787A73E6D068DBCC16375885994B7C81D0CCC961BFC30A816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 e54e205dd8297cc726044b738b6e53eb4f167bf44a8c79dfd23ce4d33eb46037
MD5 1de36400aaabd3086056ec9aa1ad6e47
SHA1 40243d47e2270de2bdc1e16c88f0eb9e75f8bc62
SHA512 cc393aa56a258e31a01f87897eb1c99220c26ee94e08129396e621da3c3edefdd6e029943ec466eb3023b0861b41cd5d0e075db44ec36b8a2e9f9a91130e67bc
SSDEEP 192:jSONnL6QPKQmiUyx/xPjRZ/lOQHmTSFFRtnGfqJU6:+ONL6jKtZ/lO5OFX1U6
TLSH
T1B5122B76A87C5C675EF1A544F48736039EA44177EA8A7FD0E5DC2F0C05EBA9C230B826
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nav_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\WorkspacesNavigationComponent\1.0.0.5\nav_config.json
Size 2KB
SHA256 98252dc9f9e81167e893f2c32f08ee60e9a6c43fadb454400ed3bff3a68fbf0d
MD5 499d9e568b96e759959dc69635470211
SHA1 2462a315342e0c09fd6c5fbd7f1e7ff6914c17e6
SHA512 3a5922697b5356fd29ccf8dcc2e5e0e8c1fd955046a5bacf11b8ac5b7c147625d31ade6ff17be86e79c2c613104b2d2aebb11557399084d422e304f287d8b905
TLSH
T16B51DB73D5988C4B9BF4A29CE919A309F11107CF75D48C0B76BE010C1F7757AB5C6588
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 132B
SHA256 f4aa1676b1cc0e8c932821d57f7e6ec93246f48d7b840aca2d58ef9fac0ecd03
MD5 f5a3b29f9a977e23d6ca4eb728238f9f
SHA1 d2c5576fff1189eb66493b5b677d79a8ecead68d
SHA512 6f692909efad02642f6c3a4b7cd10b21760c6fbfd3bae39d3b8a77b22460fcd5f6b0ab6e262b007e533c406a981968b3e0894697ca50be7f10bf557f1c1972f3
TLSH
T128C02BD0883D5142CD620D5AC04301F420005C1C641C0A7804C814C0401142F328042E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 492B
SHA256 30e8b5d48a130d6bf81847b89c208c7a087525e9b7d9a0a97bcf21598332b63b
MD5 bf165c172af1f75083dd4c7e8915ad0e
SHA1 2eb27e18672fd0a1816ab00d00078a570eb62711
SHA512 a58ad7ee2e18750242b9c5d53224218bef54ecd50e067170da12510559c455979fb0523044d4c23d5d5a523562165e471f95d939376df623bfdea9228ca25256
TLSH
T181F09ED29D7E36C0D6E50F6ED44B64FC40D89506F05CB579484CEAD8913950B254287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 252B
SHA256 9ea5bbd4491542e3878ce1dc40d90744197996ad91a29e27be679d4bec62570d
MD5 551baa462724351873ccd655a8b64ea3
SHA1 ce2be3c6d77008467bc61ac14822065cf2376630
SHA512 8de58d8e979531498751d7416c6b10671da1b048181a23081fc15e7aca69a96a93676b3bf01415c3b5f8d1973511e5823b0f11cacddfc3e5d01e82cefedff632
TLSH
T163D095C34D7D12C14FD50F7BD087ACF80480540DE55C2A7A044CD8C04115C1B75C142F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 372B
SHA256 02092b017b3b45a2cf26673a6a2c3fa2b49ab211943cadade98b98777ee73afc
MD5 2a1939fc3b2926cf2b82fae71c5f6bee
SHA1 3f9d6974ce660bbc0c85f3d9741b734cfd466fac
SHA512 cceb75873ca288bfcb71f5d74fec5ad8ca61807ec55369055f4fbd095fd904097c974102d3296db3a1aa949c6edc5abd1a7c320e53daaf947ee61c28f5659707
TLSH
T1A3E068C29D7D26C196E60F7FD04B69F844C4580AF048697A088DE8C8913A94B258287E
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 732B
SHA256 0c1b4dc8f72139abc5b2e25e5d0097c1d3529ae18001b1a64ff535e345378b32
MD5 0ad641099b286eebf58a290b5bde86c0
SHA1 922d3e17ccc238f1bf276051af3ad5cdffb20397
SHA512 8661612608382058967a1f2ef25c7fbee41a3c2c748838346c044a48058ba081e84750e4a0de424903813499876fa7f69beba345d8ebc396340d830f1a7c81e0
TLSH
T1220110D29D7E26C2C1AA0F6ED08B26EC40C8D106F19CB07A0C8CF9D4823880E188283F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 612B
SHA256 ce7879978d6dc1ebc353b93e509ab0dcd980bc78615af00080f3db1cb23e79d4
MD5 a15cd0a1e68c6b9c3945d3192091dc4a
SHA1 5162188f19a245162594501e5febb31a7626aeb4
SHA512 a7ec103cf7c6fa801e1850205c4c06cadf96c21b1fd56db058a2980c472b1ff2f25c69a73f943de8dff815d69217995ad880e85ca7b8ced8cfa1c506315f7368
TLSH
T18DF0ACD29D7E35C2D5AA0F2ED44B25EC54D89606F49CB57A484CEAD4913940F248287E
MD5 SHA1 SHA512 TLSH

Submit Download

540985e2-7750-40c5-b765-dddcad8c4583.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\540985e2-7750-40c5-b765-dddcad8c4583.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 308d4e72d8b93e9a52a5f700c8be893ea193b60af7892127905d2cc0860686fa
MD5 06aa596c4246685281ba1d8045957137
SHA1 24cadf9ed884c5f79b17723ac34a812158394777
SHA512 83f6f38bf070c68e28a28949f04a34f4fdb6429ba7d62269d19da93e019b91be4d211ef00077c7631fa079cf32d3272ba55c3e0bcc3f4f30f4348eb9980d0311
TLSH
T10B412458BAF91148B3B76E5AABF6A5AD487E7C772F06D59D00110E4F0623A00C8B2733
MD5 SHA1 SHA512 TLSH

Submit Download

RELEASES

Path C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
Size 77B
SHA256 2cfa88e081f544d2622d6c0d5fa1a48439e4b7afdd032bf08e03297f0dc238e1
MD5 7c638da57c0c3011934c7c8c3b52848d
SHA1 3f99fc2734a4677b2df88918e241afca6364de07
SHA512 3d91a565a762c557058646f169fb2a5a1f4b232d5ce3f18536463f539b17273292da5ce595fb9109d823eae721d93ccaea4abefefdf1c9ebdf36ec29126c93de
TLSH
T19FA024F4D13D313C04C453441000C7114F411031C354304D014DD04C301C1405350D1D
MD5 SHA1 SHA512 TLSH

Submit Download

Update.exe

Path C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
Size 1.8MB
SHA256 ffde662949507c08d2343db7aa3ea90173e02b736e56f3f0c7e4098103cd43fc
MD5 93e0ea3ee57b7b5747e8dcc61bad8da8
SHA1 e563e68fadfb37d8185b9aa96dba2eaf1d4e00ea
SHA512 eb0678a7bcc9d083c87d65fc904f1007ae2fb88aba59eb60eb46710aba1cf29c950e83f1809fdd8ffe1d6371b34b5153324405d7f00777f0b627f4332bd25d70
SSDEEP 24576:cwRrQEJglh6acFI54CGT0bG6NEB+a/ayU0YJ0mXrNR5C3tQo51A7ehqv2Xe2vYsD:rRZe6acFI54CGT0bG6mB+a/ey5m+qv
TLSH
T11B956B12E7E88F3FE56E27B6F471105907F3E5866362F78B6A0C61B92A833148D11367
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9e93ad0d-040b-4d2b-85cc-110bc12d89ad.tmp

Path C:\Users\Admin\AppData\Local\Temp\9e93ad0d-040b-4d2b-85cc-110bc12d89ad.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ddf15bb6-3e2a-498d-8564-602e27b7a7db.tmp

Path C:\Users\Admin\AppData\Local\Temp\ddf15bb6-3e2a-498d-8564-602e27b7a7db.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

5a47800b-e206-432e-b8d9-40cd8fec24ca.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5384_90480576\5a47800b-e206-432e-b8d9-40cd8fec24ca.tmp
Size 147KB
SHA256 3256621f3c706ccdf5802b36fb5c35251d354aed0d31ac9fc8eb7d7239312e55
MD5 9c670f04d98ab7404f16423f6ee6cdfa
SHA1 8d01079b2d065731df8a7ef52f447cd4b7add353
SHA512 102cee76d9dfcfe91e044f529672fbec042b50c5db55a3cc137197b2013dd7f81e47f50dbb0db96cb621c5732610e1eb553c4146837c11075c7c4dbd67546a3b
SSDEEP 3072:F7R0M+jCozOtDTsjMcT0JnFjkbxnEbm/+OdGmlVVklFHEpCm+:F7WxxzyDTM0JnRkb5bJdGmJkvkpx+
TLSH
T12DE3E16D3DE6DE1FC41B58F53E64708BC80E8F0B820A644FB64988345A60B5D1BD6AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5384_921647946\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Wand.exe

Path C:\Users\Admin\AppData\Local\Wand\Wand.exe
Size 670KB
SHA256 b069efd8a1da5fdaf4377e680648b0266d7422619311b52ca33f9e8443f299c3
MD5 10ef7b6d6976deea6833298d67248388
SHA1 d61827413eed18f8101f13c922dbde89e4ba20d8
SHA512 f2caddec33f683839f51d3ade409c601abad62fb6f1d8c5171a52bf3ab93d62ff3f0b3651c46e8e64a565d7ef094eb78e32c4278467f4e8b791b236a6c775ae2
SSDEEP 6144:YZzvhs2Z4n1E7g34XtVYAOfTdq5Ker1PJVHjMYsmBSfN/yw+Aw1ECD45rjVXU:YJ+2Z4nShVY5w5KgHUizA1CG5XU
TLSH
T179E48CE1FDD210FDC0B758364CB59E306A3BAC1149C1DEA366863ABC467319659332AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

D3DCompiler_47.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\D3DCompiler_47.dll
Size 4.7MB
SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
MD5 a7b7470c347f84365ffe1b2072b4f95c
SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
TLSH
T13C367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\chrome_100_percent.pak
Size 143KB
SHA256 0b84b7680630dd51cb36a2fcdd7cc3b031636fe6b91f81772822be9e514132fe
MD5 001aa2a7d5dcaf2d0987804a37e21db9
SHA1 400b97656f6433112cc9ec5aa13e2057eddeb8d5
SHA512 d8563e9341933135abccf52404cc1dec78ad587acdf2eaad1e11f22c088b42f31669716f1df561a14b0894e73724a275c00bd03c9596d0ad7853210c38f1652d
SSDEEP 3072:Vz8JCGIdTwsWr8o9RHi/T9P1L2o418Gb0+VRLf0ld0GY3cQ3ERVm2I:Vz81IdTOr8EC/T95K18Gb0OV8ld0Gec+
TLSH
T18CE3E0D3B3F4ED3DCB9706B7A2160071ECB346690691424B168AD8716A76B8CCDC83D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\chrome_200_percent.pak
Size 214KB
SHA256 8e2afd2ad5bd4f4edfe739ad503ff6896410d097665d40e99c56c440a8ebc36e
MD5 749e5ff4a826e7ffe8421634520b7e61
SHA1 b9fc33e5edeba42c07ec040f8df846c649839ff5
SHA512 7cb845267e9a4e41c576bee3f31e1b285bd8f0ddc24677f803b01384bcad4fd0e9ebedd5efaa2ec5e1432e2a8bd2b2fa49573c52e577827cfcf45ee2663a2325
SSDEEP 6144:7DQYajN6svyA6nIEb7r8EC/T9ugx5GMRejnbdZnVE6YoppO4:ofjN6svyA6F4B79a6edhVELoXO4
TLSH
T18724F1C7A3F89D3DD9630AB3622601F1ECB211390AB6550F17CBAC747959BC989C9383
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\ffmpeg.dll
Size 2.9MB
SHA256 926e72768858260917cc5196d415835c45851e144d341f422f416942f390487c
MD5 ea6608237050be4b6fe87e2293617c4f
SHA1 f5feffca2eac1a077a26efaa1c62dd5b296a74cb
SHA512 c005f1b19e47eb7e60b9568e7abf4403450678dd807947dcaa4afb48b01588b483fda61435ef1f67b3f4344ed05f466a9a6e775e871d72358fe1f7eb8bbecdbb
SSDEEP 49152:pCDRsXoLyeG81NYxzi93BBJkBOA/7ZGddK6BflLQjbIXPuKM5SDz:p1VeGnx6rJkRbImKUSf
TLSH
T11BD5AE03F6DA50DDD029D470979F9213F671384A8F1166EF26A05A202F67FD86E3E329
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\icudtl.dat
Size 10.0MB
SHA256 9192f5453665fcfde180f1283f2fbccc477f4daa0081e3903ec02d9242721860
MD5 08096770ed3f7020e3214762629daee9
SHA1 744d66d96d317976a83233adec0f50ca452fe82d
SHA512 534ffc6bbc95dc969fdfeec7f28f23aad30b65a98437db6fcba69a58e585e6e48876882e544f370cb6d6cea008e9eba3667cd8afe589038990cc791c2272a581
SSDEEP 196608:gSPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2Y8A:g+wkpHiXUxY/iJ53IWhlVjEeIjA
TLSH
T157B63807A2FB8DC6F9F76F30E8F452679567BD496E32805911042F3B1D332A08661BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\locales\en-US.pak
Size 489KB
SHA256 db534d724d2f9906804a239f8728d0c23dbb3419a51c1f4152c6384b5a0a9dec
MD5 b17cdd720ec87a737e1476bc9cc2418b
SHA1 1d268835c33c2ab971a2fb9920aa9a4c566a4920
SHA512 feb89bb787de05def26c5bafc16eacebf23c588ce1d9ef59a497231a5986b683c69707f4ec1d3e237f6483ad6ca2c2617e98d0d3086ad0595208852ee032b35b
SSDEEP 6144:bBLy2+0m1ZazYweDL8MP9eOQcDNfaY7hDHW5+7xEngnt/SOwB:xb9zY8MZQcDNq5IxXwB
TLSH
T132B43B1FF7441269069352A27F0995A2FF32D06CA36112563CBD812C33B7B6AC3776E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources.pak
Size 5.5MB
SHA256 232bc65eef7ac4dd0b6af8f0d405ce1252e7924708cba498f171e176c23584b3
MD5 5be05110d0a994a77234c71c1749980a
SHA1 e84f1810cc07c7b7c01ec20f8817d768f4e1738b
SHA512 6f8586e4e608b979f878196bd4278b4c404ad6fcc2eb5e746a23ebcd27e7d2111c3918a55448e251697d8147721e7e3577bd1178d61aa79ae85bdc20d909fe24
SSDEEP 98304:oZyJrhPOXD1V8Sug7bNlE8NVwrwrQqgvxJ5NG6fVMLuYHzpO1w1f:+OrhWXD16SxlE8NVwkrQqgvxXNpfVM6e
TLSH
T1C94633E5BB06983FC9489BBA016D8679056CC05E22E2B507844CF03979F957CDFC2A7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar
Size 44.8MB
SHA256 74e9276d6fba1ff41fd4abccd7e91fa8122b1f29f046c19e6dc13180828612c8
MD5 e866f820cac6e7cf947485735349977d
SHA1 1737c826f0e5650329479bdeced286776f13fedc
SHA512 958ce35cdbb8674e5b30984787527d382a41ef3adfa88d3b86e8ee1a2689d9e92f8674ebc54a7c52a4e0d559c67a93f327492a3c6ed94ca74a8c4ee78b204c9b
SSDEEP 393216:36zp81umtzSRe/ga5mSigwUzAbHw1pm+ZcN7lgFsD96H:36iYs8vgwWbZovJs
TLSH
T1B5A7D02DE2B46D76159A10A620463237B13450A7AF613CECB78CC4AC4FCE98E6177B7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GameLauncher.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\auxiliary\GameLauncher.exe
Size 23KB
SHA256 13bde801ad516d072efd52d8687c7717303c70ba1d9f6125073765a0e32c3e1f
MD5 d4e5778543d8a9ccc694a61d92716757
SHA1 1803152f17ba65e7df38626827607cc7981934e1
SHA512 eb24c43bcc6c597ea4b7039be5eef164681e1dff776acfe02ec89170488fafabac14db690f996915ebfc4dd40d189facbed078655607976ffd0064554967d36a
SSDEEP 384:vkH6J297T1asGroK20pWvgloVNyEIYi2mL4zn2vPUy8RvOp:vkH6J29/OhIg+KYiDLrE51
TLSH
T1E4B28D168BD45829CDAF4F3078F142228FB5FA471562E2C76D88D18A8F9778627913F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Management.Infrastructure.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\auxiliary\Microsoft.Management.Infrastructure.dll
Size 45KB
SHA256 95aeb7c24486108c75d6426482e7f93cd6e15e9368fb8d24ac7b98dd37989d0d
MD5 a119814d7b60ea2be356feb581de4651
SHA1 1c274042d3b9c5acb8be638beee6afe42206844d
SHA512 eab6f90791e4c993564b02e1b64a9eec0ef138625fb6abd9545fa2dda55bbd359fa433a2880d2df0b0361a3a66ab95dbfad6ae2ef7ba88d17c90d38ae6e4225e
SSDEEP 768:groEzop6gC66+666M66666+vvvvvvvvvvvvvF66666K66n6666666666ZpkLEyX/:cNLEyXCLV7e
TLSH
T139233BC24340D82ACDAB927AF0C412F12736F38D2653DB4BA318D01E9A4F79E774B599
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Management.Automation.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\auxiliary\System.Management.Automation.dll
Size 361KB
SHA256 2d32ce9cc47022672c5144a785d649408ba319b105be98df33fc7a1f3d221018
MD5 817c531b3d63baed0c23f5446db23e9d
SHA1 925ed83e0575cf05a5682ab9d6fd3edd8d95129f
SHA512 ecc0d87b65355704a6e9649bd6798ac247a0d98865e0b26d0a81d3d5327bc7dcb6ec5cb8b31b809f2adef76c87b3da4cd8a3bc98ea0a41ceb4dcc24108ca2df9
SSDEEP 3072:z/SDqTIE+QQVVBCTmAG17iT+Lt8D/1L2iLZdrs81sDotEKjRmarzRm+5gSBZqoEZ:z/PXS6WK2iLZdgotEKj9rzRmkgSBAot
TLSH
T1D77408253764DBAFC8AFA236F96544304637DB183922C72359182D2C59CF76BBF12386
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WandAuxiliaryService.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\auxiliary\WandAuxiliaryService.exe
Size 1.1MB
SHA256 eb1d159ccaad44d3f1427d8a7db3f6b3b892292af76277f7d0f7c450646abf5e
MD5 c8663a55223c65d6db7ed613cb965173
SHA1 8956abd4def77ac3370352927114be815aab7434
SHA512 1af03f467a11da24f940b7604f948e41b1fc689007f6f6c0b13b817adfd60938d0f52c100110068cfca9b378ede8956ef6e698f60b0b47f0d427afd1d830a09d
SSDEEP 12288:qMyKhirSmC/2YfQcalNQv9snvaGgr0duG5KgHZizm1CRQ:qMyKyhYfHEvaG40TUQYK
TLSH
T1063517C59AE495EFD1BF5B359DB01E344BBBAC01A6D1EF4A0444A6B80C53361A83633F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Qt6Core.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\Qt6Core.dll
Size 5.9MB
SHA256 68454ecc88ecb83fb632be0058071c75c154191bcece3735b99b145524b8dd75
MD5 eba745b5b3470a9455e1c35a19a5d00d
SHA1 558f377d79cabbd8ef1480f52f329c6c4645165b
SHA512 0168ef9c65d2f48d2937f34216ce668c2e720f284cac7b6380d22522cba8d60a7bb53be474651d8018da0759c2eb45d66f6bfafc9176272a0befa55016db0964
SSDEEP 98304:7vCT3K68voa3XmyKFdu9CwJsv6t59/3VV:bsK6XjyKFdu9CwJsv6t59/3V
TLSH
T1FC569E5762F60095D8BBC039CB579513EAB3B81603219BDF01A466196FB3BF51A3F328
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avcodec-61.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\avcodec-61.dll
Size 33.8MB
SHA256 58ead3c86e419e2100ebe6d51c8e3ebdbf5eb5708627a9c3b3146365d214b72b
MD5 d2bb1e18c50bd7c4a156852204b87a22
SHA1 0b1ecc76f1698d3ba7a8833d3048447a6a00787f
SHA512 23a195c5541c5f469344bd56477936da32d97617c66b3b3eb4a054519897d1c353f3bf0a5cca2dc8980140ba0b4b8a75d64f7442652a541a86bc19471cb73e3d
SSDEEP 393216:oDQ/kDmR/iVWS2TiFcuxS/zz4n6F2z/Kr4:o+nwGX4694
TLSH
T17877AF4AF2A311E4C76BC874827A9A13FA24346D43111BFB66D55A652F73BF05B3AF00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avdevice-61.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\avdevice-61.dll
Size 82KB
SHA256 159a1d26ef3d6315c18b277f67848ca9db77136424875997657610f7b5f18d71
MD5 7e20d0a632ba2a0bfe144e6068cdc1b9
SHA1 b0bf8b49cd261c0a7b17bc5ecaef90ad6662a130
SHA512 110ec8b8f7ae44b058cdcf85ba6a2af763f4bfb2b2b3c6b59fa98d714a1f5803377c0496c544784cada09ec8acd675d5bd671f241fa2c782dca9390fcf06ac2c
SSDEEP 1536:2ZxgLsJ2MlwiwN3olqEqNWpW3SpydB6JlLZ7:28r3olDpKBulN
TLSH
T1F4836C07B2F5188DE522C139BAA65927E775F15E2700A3CF2364826D2F233D15E3935D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avfilter-10.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\avfilter-10.dll
Size 6.5MB
SHA256 a54ce93dcd60e9eb54fe8dd2de046942a3ea6e0c7f0f8914828906e78b7a4a3f
MD5 c00f8538787d1b6e6b43f96f07782416
SHA1 7ffbdf70249c6b4a0d46fd417476a84b77a04dcd
SHA512 a6728f6c38fe55294ce3754f54ae671e45520c7212cb13ce6d2c907998b4e9e81ccc22f364b0b2268caf7e163efe18f801eab85323bfae75676d865ad8f36a39
SSDEEP 49152:fCLbUFK7Uczyt77jocG1fv/ge10GcCQtaMUZVPwv+YDETOpshGf5gEOZJe1SJLlL:ARYcz9NDnMU7gnsGhE5J0gF
TLSH
T1AF66F94922760786E018EEF522152543DE2073D233E19FF26FDC8A280F56BE6F971E95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avformat-61.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\avformat-61.dll
Size 2.3MB
SHA256 cd408c53b63d47c789de2a5abddc2112c973847f53ff481cc40cc6515e498eb9
MD5 bf04cff31e409cefc1b1e714eba414b2
SHA1 f9d27ec1cbed41d31cfa530e6d024b82e2ac7830
SHA512 612a33b994ff2c27805ad43314a7dff892ea82d697dae94febac47a2428a4e1ca73c2acb69f2ffc263b933b3088f821157cdb94ed13cf17962437d153ec91f80
SSDEEP 49152:tNC+n7iwr/SI/CUTuKn7+axerGC3HrHahz52LmE1B8aTiAx:tNC+ewO+buKnozLaVE1
TLSH
T18CB59D57B3B511E8C6ABC078864B5617FBF1B4591320ABFB06508B792F23BF5663A310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avutil-59.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\avutil-59.dll
Size 899KB
SHA256 5fd8c90605bc91f9a66f9712a81b4d6b6dd2cf5e7700c79e473dfa831f791525
MD5 58c6b5b1e9db3c5c0741e9547fa21d84
SHA1 1633818fd2ba6005d0a71137881240ed5b3f5179
SHA512 52923516f814356c4ba12dfbf822096708a85a382ec79c3f09e575e990905e228d62482dfd2923668ac596b7b5eefcb8786bad11f5d400a13a1ed1bd0b9fb8f7
SSDEEP 12288:QT12J1UIopX3HuUs2IgkYTZx9oN7gKlfMJJ5Q+a208nPe9J:QTwJ1UHZs2Xfr/KlfMv5i2
TLSH
T1A5156D05D6D00466C8664434D7AB594AF2723453D750BBEF23E249683F27BE22CBBB36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

capture.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\capture.exe
Size 571KB
SHA256 a0ef557bce4c9b861624bb74c8a82586022da4a3c2941f7db841fff40714803c
MD5 2d5b961a3a06b4b7dfdc9cd80e78e5e9
SHA1 3d7564b782b7cc8c3e83aa5a454ab61d36e32fc8
SHA512 054bfebe691d8b9c41d7766a43384195cf64ff8d88ee9f7098b929593a66b7b160a329bbd2e97c582c3353af70b172d361af6b67d4d7ec75a60ceea448c0648e
SSDEEP 6144:rUHlJedqjqb2ajiOHTsPd/w1vt6EEye1xsPsFRES1WGfDIWYBaMOrckrxwc6XJ3w:OJcq6jiOHTsPd/w1QN1xsOVMOrc1d
TLSH
T143C46C2BA29803E9D16BC1BDCA4BC812FAB27805435196DF5790C6662F17AF16F3F701
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

datachannel.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\datachannel.dll
Size 1.9MB
SHA256 cc2e2b61c997b060c0c5bc5369e73f39a06c77bdc073e7e8dcc80ec1f4c56b95
MD5 e014a3fc66de8c9fb9205523a53b237a
SHA1 afd499a0ab0df6772a623f7b70dbc58335e13141
SHA512 7ba4f7c7b33177487e157400bedc497d85302171d1754c0da555350969c1c7de7870373dff9e87fce54a40483eeb9ac964a6fc229cb4ce747fdbdcaff215eda8
SSDEEP 24576:wxQrJ/eChcWznf/ZJ8tuBgiD/FV+A8Ag1xV1tXJnX+lafgyTWExdL+sEqXW:MQrReChcMZF9D9PPk19Jnuee
TLSH
T1CB958E57B6A500F8C0ABC278CE47950BE7B274461322E7CB06D196662F63BE56B7F340
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\ffmpeg.exe
Size 311KB
SHA256 312583d012e2661a671b9392ae04127a9e4b4ec532f7740ed257d354ef75cfa9
MD5 cd272dcbeec88ec3efaed50fcced3441
SHA1 453902642ac092c33fea8d31c19de22d08973a54
SHA512 a9a2ba26b289c03d190d339f6d8af084c7dcf3195ade1cbbb7a28e72e167f4308749166becd2d4ace8267bf0055b89c2945e6f092ba38e13d7852904122f1f66
SSDEEP 6144:PKIg1uVq71J/OIGsjuiiSCAKmjBQjsFcqz6UFbDJ:Jg1uVU1J/OICiiTAKmLLD5
TLSH
T156646B46C2E121E8E9A3C17CC6879607FFB170591321ABDB4B6086653F17EE4F93A724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffprobe.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\ffprobe.exe
Size 182KB
SHA256 72230461127f3d65b5033c5ff7dd14566ddbaddaced8f416dd745a17ec71e1a2
MD5 d52f3e06214c98c368433173831ad52a
SHA1 b620f412c81e97053b434cf22f999dc174dea109
SHA512 325c89ac880398178a2846976550523dfbc05ac412ac2c5f5c962e515f6ed2223e72f0d660ed826d29a3648d37326c19f2949fdb972e8094ed363f57453909bb
SSDEEP 3072:oAq+8cd3rJ/LVKI9MB8GL730aPdX3aa3+UhIX/n2Z7bheFyT:oy8g3rpKBbLz0oaa3+UhIX/n2DeFO
TLSH
T1F304394226E110E9E1F382386953D253FFB074946355A7E72B90873A6F43DE0BD3EA46
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcurl.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\libcurl.dll
Size 576KB
SHA256 bd9a41886350b688b16284e088ea0e9dc8632ef37e53ee3c45bfc3eff46c5a07
MD5 9b2ad28fa5c2fa7f0d6af7e2281ec316
SHA1 76740bbc78e334ee76ec10baf5998fe733179fc3
SHA512 46baec565f1d93c7dc49a05a107eba9f05f5c9ed47dd3ef4d1b265fd7b1c9b740b59560681873bdc145d6517e48c5424b8141c956784c697b82dc3db601cedd9
SSDEEP 12288:0+Fm38AWRVYYqDWdE2CiRl0ebRCyoTTzsjgR33u4IOvuyEJ1Z:xFmM7RVYLX2/R+dTTzsju33u4IO
TLSH
T15DC48E56A3F416A5D167C13CC6538213E7B6B0542360A7DF17A4CABA2F23BE2673B350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libobs-d3d11.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\libobs-d3d11.dll
Size 193KB
SHA256 07d1f8484d05bc70dcf84c674846fc8229b414db99403b482f21e6cb7c6ad8bb
MD5 43d1549f69ad427ed58a3b534aeca98b
SHA1 bde074ad95f2e664e0157a6f309315823e77d41f
SHA512 8c9fc08f1e6cbab9f5409f525da67b0057e60a90f9a94a6e26b595e77e2bde418f1467a7732647ee458182c95d41d31262bc72b4f4d1dabeffd67fd80bec1bbe
SSDEEP 3072:6JV63xrHyqAUP71pe1Vl/KU1fcrwooznSsZW7twmqI1kK5ClIbnvO0qGdsuA:hrS87LM9Plcr9OnHWGO1kK5CubnvOrX
TLSH
T12A144B57B67840A8D4B7C17A89829A07FAB27484435097CF1351877A2F73BE5BD3EB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libobs-opengl.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\libobs-opengl.dll
Size 230KB
SHA256 9c07e31f3d898cd2d9e76be52e0842b0bfda558598629cb5034ca31487a63a81
MD5 e3cb604518f5c2007073712507c18e37
SHA1 b65c14fab4a8daf5f02acfdd4ed40b9afd3c421f
SHA512 231606a065b2cc97f31c738add8c78c7bcbe266b39c88708083379f935731a0a72a33cb6cfa89948c548e29a29145b72eff6539ed1b075e5bedd8e8db071851b
SSDEEP 6144:VdMpt7d1JeGImMNAXdAM6nSCTMH3d2kXiemFYzA1yf5PqB:Vq7d1JeGXj7
TLSH
T1DD34F666A25C5CBBC82F01769DD189565232ACA4636DC3C33D98450A0AFEBC0B5BD7CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libobs-winrt.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\libobs-winrt.dll
Size 83KB
SHA256 600e3bbb7c2d3ea0453bd8c90871b94c96ac313b860afefe0987f909a4ef9caa
MD5 446f6cf0aa662b447f6c16c2085b8489
SHA1 6494117266b5139e3550899fa06791d386d43fbc
SHA512 96d89d8482281c1cef6add380070a86b99df7d138f7f62d50aff1e55d2357e69fd4a28356b2d33f4d017c56890909240953b174af4ce8181f534ed262d69d40e
SSDEEP 1536:lF+XY7HHnSnEhW+XJDA6vD++OTBcVV+Af8ATUf/7:lssHHSEhZA+++qxRf/
TLSH
T17D833C6EDE699067E16AC839CC834D15EE63B886979193CF6B110FCA0E237D0DF39641
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

librist.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\librist.dll
Size 221KB
SHA256 ac39aa8af9c24a46fc0fa476cd198e8b46e721d12100a2e806bd90f7509b1609
MD5 20ec5dfccdc02e9aed849fa794533ade
SHA1 bff58f19567fbc60ffb335e0d65c9b17231b3185
SHA512 1c9d20faea5f45c373130a8f7b57d20114c90c8a5bc271c8c2d4f3705abc4b8eb064679a2c78aff8d08e8bdc36626629bbc85401e8c629c48caea889cbe8e456
SSDEEP 3072:YM7ty9n9DTNUGqyBtlRTJFEOVw7domXGXmJsqQLo2j8rITd:Y8Cn9VUGqA90CU+fU
TLSH
T18D247C5BB2E00CF8DA67C039CB93860BE7B278981324DBDB476086750B536F7697A354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libx264-164.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\libx264-164.dll
Size 2.1MB
SHA256 0ee6120c5ea07c50cb7fb91fa7d0e5502de7a06bde31dd1966b7c7534a9f6bfe
MD5 6d74a93e4d676d94a0c5125b35257cb0
SHA1 634b8f5af7131eab18939065fb8c6c49272a9197
SHA512 6edb2b9e05a3421890d3e3a69d262cd51238a4b8c5bd8014252ae3481da82e8e7acdde573ea806a6d1d778c5311d9a7eafa000aaf226e435b5f27823de05e7af
SSDEEP 49152:dPtYFjDPHYSZdAtCQH7fH84nb3fOv+1uE:tXBf3fi+1uE
TLSH
T1B7A58D5AE67611F9C767807CC92B9617F374301E03E05AF76AC086646F23BD13A3AB16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-amf-test.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\obs-amf-test.exe
Size 28KB
SHA256 b3e8b89e6068a55e0b0c943df0e7492e05588ed296116228b6f09d9efcc02adb
MD5 e8c02e9d58094fc31d2028c7e667ebf6
SHA1 2b8e2d0ddf0a2bcc35c5b7f973492e9e5dd34607
SHA512 b6dd0d50adb1a49e9c3e502b47e46cf626da39bdaea8d9d43715930fec9a908768df8b1cd43d04f76d144a77c7bb70409d84ad5b7a23bba0a49b9f107f65debe
SSDEEP 384:3qP4How+qoiMUyZ52BjP5ycUrtBWTdvZ9HhiqwakNyEIYi2mL4wnMaKoy8R8:3E4Hozy1djPjU6TRH4qwoYiDLz5
TLSH
T192D26D97BEA14CDAD826C239C492C535EAB3F5520B0197CF7318421A0F56BC13EBFA95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-ffmpeg-mux.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\obs-ffmpeg-mux.exe
Size 34KB
SHA256 a292d1000361fb217e80059934d57c4d07624bd3c03217b51f9e196ac0ae8865
MD5 dbf4870ff9b96d765646c6e9d3442369
SHA1 c7a2acfb70c052c107538ec89e1c6adafae07842
SHA512 9a7dfcec9abefdffda160fb2dfee095aa1ae944ed127648e56fec885a8f2e25951c2ee739d5812a1ad64ca2dcad8c9c380715fb5fae4d7ba777b29e693ba2269
SSDEEP 768:UkuM+yrA9iNxuqOU7XR6GT5ibYiDLz5+:UkuMdNjOUFT0b7Y
TLSH
T111F29EE78AA408A8E5179530E6D1A42FD7B7BAA12710D2CF23A582270F133D136B975D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-nvenc-test.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\obs-nvenc-test.exe
Size 87KB
SHA256 072a189f0aceab361788985c48322db42e3d872770357bf693e2d549d56769e5
MD5 5c0b699f344cc97ac5c94b1312449a37
SHA1 a3f214db2fc858d630d1db8422c0d750cde2af79
SHA512 ab8a3433740bdf1088005fc15cbcf5f1a3ca6428330e8d8f0f0eec0dc5b422509fd06887d5afb3113ef757d110f247b093f0675c00f0ef6a58732ef533f41c12
SSDEEP 1536:QwEKURA49iErQ2C0ZdnOlKWX5BcX+hIke7OJ0OD+VQLLi7I:zxnKiErxvKZmgJlZLik
TLSH
T158937CBA6B5808E9E026C27CDE92C917E7B3B41127619BCF1354C70B0FA7AD17D3A601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-qsv-test.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\obs-qsv-test.exe
Size 288KB
SHA256 fbb10ff119575dc82f5a3b3a3c8ff8a9f23599ab1c6441b9c22312b3e5338cca
MD5 3e80db181bed3720b643f5b4eb7a6ed3
SHA1 1db51c5b69455b33fed21bcda9025ff87ef720bd
SHA512 d62c6244a08b0ed576580e33c92f47655b0eba6fc3a9470ca7738e5a84a81030045449fe9dd994cbdcb73f04005d563d4a6c7b3c93190ab79b5580c00752faba
SSDEEP 6144:EaO0B/egnt1/nHtUPVcp5stSqP3SaZ6JeUdoLV:ZO0zGcPchcJdKV
TLSH
T13A545B229B580DF8DCBBE17CC6475407E276BC5703A1D2CF17A289622E576E17E3BA10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\obs.dll
Size 858KB
SHA256 aae6dcba01b37027bb271a3458527ee985bcc135bc42f884216e0566e1c615f6
MD5 d09489796e102ad50e68b2e6e3a7d164
SHA1 6dba9da09fa7251bf89703d457aa5c5cd24165f9
SHA512 fdffedea71d7839ab65fe264420921fad64f94d8fe0a1093e32ab509c48a93e4509fe3ea66441ad0cbee213c179fa5ebbbf74131340c80a1b513d133ad5bdcb0
SSDEEP 12288:ahIiF9CNMERv70FGIscOAF+8D9bTsW9pTFFaIyDNvIrvDQkugfQSzd:SIu9CNMERv7opi8D98W7FFtOIo4fQI
TLSH
T1FF156B9AAB6040A8D47B903DD983A22BD5B37405133097DF46B443793F23AD52B7FB86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qminimal.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\platforms\qminimal.dll
Size 54KB
SHA256 19532b6dd442b2cd51e2c539ec88859966b3c612cccfa014870fc49ec2a3dd07
MD5 23bfbe597eab7a108bef4aa279ad75c3
SHA1 eb7bb76dcb7264e40a6131c731f90c63dec0ef40
SHA512 009fb449905df6821802d44f2fa43c370a2396f75fdb5aa1e5817fe1880153e9a54a4267fa643c13e04b619eecc3f8381b7e2783db34e2bc2fcb73653862b1d4
SSDEEP 768:Aa/GeRwmkpsSqkHNHw5d9n89irS5EACo47cwqGdFFu2YiDLz51:Aa/QmgqktQ5d9NdF427
TLSH
T115430A4129360499D8368B3B84C74E1AA432F1150B53EEDF711B814E6FBA7C2397D6FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qwindows.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\platforms\qwindows.dll
Size 846KB
SHA256 85f8a98fbaadb79de89e310132d187d559f6095050c55a2173d78816a5ea8f0a
MD5 a3fa5b43891b82e771557460f6fd8c33
SHA1 b687857554e372202999a6e4be5ec9ace1d5994c
SHA512 0873d7d5297a3bb20e61c749a5c472a27bb978245ba02399c917bea012a738b8f8b1b6449ddd2dc54f964f29f2ed2392027fd473147f7f8f201c53299a965d3c
SSDEEP 12288:P/T0y26oSgv1GAHZjHPEHC10pJhrXfEA6gnK3:P/gy26FY1GAHZjHPwCqFrsf3
TLSH
T110055B1BA7E80285D47FC13D878BCA22E7B3701103A19BCB4161C9597F377E22AB9B55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

srt.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\srt.dll
Size 666KB
SHA256 3cc600afe5d8c9a7aac120ab4dfea465245a2e1b9302d2cef86fa29a6c402756
MD5 d3e72f8df51a053b8115f10af1188c4b
SHA1 23dc9150ac94b7ea8138759adcf0c78eb947c4be
SHA512 6f5ea2151d7bd1cf2ec35bee9dd55e452de150c65f580890a7266bf575d0657bc672703e16c76eb3bb1585eb4c1a66159ce28889318d209e85b75b8c5d34f55e
SSDEEP 12288:6lWoZEXSDbxkH4Ljqta9IfLSFClcH4t7iGL8DenkF:6ljZECDbxkKqQAL7Rt77o
TLSH
T184E48D6BF66012B8C17BD079CA434A23F7B1B4855370A6DF02E085A59F177E58E3BB60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

swresample-5.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\swresample-5.dll
Size 131KB
SHA256 ea8d62a268b3a3d8f65a3f832086a9641f39cc8b4ed55c3a08f022ed1873f37a
MD5 977d158a12f421dcd75bb62c3addb59f
SHA1 caeb1d0354e85aadc6fa51ed6751cc044c7630fa
SHA512 c9915e9e5db650c66ace0419d8de5bbb6a04e074d825d0baa9194fe5dafa37a55daa2c19ab96987f84c95bef4930746b925824da599debebb57b626ae794441f
SSDEEP 1536:QdsLRoyu3biAKlYxfMlXSbtAHW4ekSDOWBwTbpQamgNGCdunS7b:t/YxfM0OWrkSDAWaBnwnSn
TLSH
T168D36C83B9A615ECCA96D074D17A7103EB6034B407956FFB1AC286361E27BC09E77B13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

swscale-8.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\swscale-8.dll
Size 581KB
SHA256 b2202e4a5fc1afb0bdff42695b72b4e708d3b77183865a67b82cb089a4b1b483
MD5 deb6a74149ba4ba5523ecc925196d513
SHA1 1ed0f76e908a958888ce1c97bba1d27a687e9ee8
SHA512 55f87e379e9744e7d148b259413a6784612dd8f188de802d794fffb4975880993a08d7f2a05bc0033af915b274d68f3b749cf7b2c4cb096dd569e98660e37608
SSDEEP 12288:Qmmmh44L5N5fDCnmOWy0I4MOoQOEyHgbDcD9dvDN:Qmmmh44L5N5mnmOWyx4MOoQOHgQvDN
TLSH
T165C45AD2D25326EDDAAB847482F1D6167A54702203546EFBB784CA3AB623BD0773F305
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

w32-pthreads.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\w32-pthreads.dll
Size 53KB
SHA256 bc031a4a1633ca4f6b83252bb6ca55d561c14d04e8f0a6724a439d5f88197209
MD5 4b715c853f68fefed75abbf17cb2a16a
SHA1 ae0cdab850fe0a803d28a5f0c2bce47d3d8eda8e
SHA512 1e7d6966e6021be9ab39e1f22c66e242e0fd0f1590fbc0b327949a0dd143560d9c1d63340283888a2f2a346cda6a32da4c55fd1d3af9eb99511495528de5d097
SSDEEP 768:7yWq2PVyu1V2hfMXzeQKP4JNUviH/pZma6c66YiDLz5:mWntyuv+fMX+ociH/pZmzc667
TLSH
T136338F4A276840F9E4A6E438C5F1160AC273B0212B556BCFA335C6261F77BD6B63F385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zlib.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\bin\64bit\zlib.dll
Size 93KB
SHA256 98a4e8d2dae551c0e46d49942540e1a6307ce875a791032e34223f0b181d757e
MD5 e7d99e1923bd27a4a73265c7c953609a
SHA1 dad58da5c459bdc1413b43b2425993d28a839efe
SHA512 9bf316db013eb50444c3da9083c16a4129a12f71301340822d70da6fc879bce2cb517430ebd3ea669e83cd89014636f65a141c67ad7efc7ebbe33b9c74c5f4a7
SSDEEP 1536:1j5wKOX8Qdyti/U/pvXppXyByUpPjlKz8IOcIOO1ytlSpYEhIgup7a:pqKOX8QMc4NXpBSLPjDSO1mwpYhpe
TLSH
T1F0938CAA6AB412A6CAF34470E5D24AADD371701007D057DBA18C936A1F13BD42F3A3FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

area.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\area.effect
Size 5KB
SHA256 d4f66fd31a5d32f3e3f60ff6b9410ca0721699aa207fdfe379107e6c3faf1f8f
MD5 32f4be3b7fde2306cd23d6be8b8de223
SHA1 2b2919ee0d67bfadddb9d058ac2351a005ce4482
SHA512 4893c6927ad892e606a6daceff28d37130e61dfd7c687981dc9f8ca5836b8f4c7fe738fffc13c3ae975c4f97dd8ba847297c168aee5e3638ebe7909af226746d
SSDEEP 96:nVvI+HjFHsrBUf3AYdo0iM3FHvFS6Kj5DIGR1IGa1hhjmAGcIGmyGOIGT:Vvv1sSf3AYdo0iMBvU6KjCGoGa1hhj7v
TLSH
T10DC11C49896985AE882190E7DD38CF5A92FDCAD60C550F739E0DC37591F2886B02EBD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bicubic_scale.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\bicubic_scale.effect
Size 5KB
SHA256 bb7dfd2ac8596e6f1375fc0d6f394ac0cfca7cff880972998555650d328415f2
MD5 e25e9bbb02b2a3b9dd692944e1723611
SHA1 f9bc1718304dbb319c5918b2993cf09963e48879
SHA512 d6ab7af032582b14f37dace47042962e2e7c01a2f619a1d68597a694accf248acea563bf73ef3cd46b546e9da3639d3239f5ab68bce33b6e4726f28b862cf360
SSDEEP 96:owFI+CGcKd5azBluakJExdx8+5xZ8a1jxzuMoH7gUm3g+mN:dFKGcK3+Bluakajpxqa1jxzuMoH7gUm8
TLSH
T1A8C164051811E12E0E6DE5E2CC1ECDCED1BA86E51C940F21B54C0269FBDE4E1F229FE6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bilinear_lowres_scale.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\bilinear_lowres_scale.effect
Size 2KB
SHA256 50147fd71619627b9132bbb11164bcbf462c94ba894ad30bd436899f794b8987
MD5 f1d580d0090c816209fa8ec6a10cf04a
SHA1 b06a945149a49a23b35bd481755bb4da72a9638a
SHA512 2465f9ed0b25363ac8088a4f9a38cc7676e3766f9cde9b14b94efa2015a4e2032edc3c1a3287562d597ddfb7a9c98933d50ff2929d588347818aabc327635d17
TLSH
T1A451AECDD4B0BD530E3603B58CB3D856E6B987E94D661F017C0E51A5F6AA1C67238BC8
MD5 SHA1 SHA512 TLSH

Submit Download

color.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\color.effect
Size 5KB
SHA256 ef99b3e53d6931e6677c03b47df3bf5596de330a7f5f99d27d3527b67f12b528
MD5 222c252564cc923f291640d59c7990a4
SHA1 54087ec8ca495879e78b3f634ae6d917783d4ec7
SHA512 91bc50843f41c3bac5612a73ec9a3d9bad50b37275686c822426c1a9e153e423ca438d2cc94ecdba1fb81223e3b236fdfc53018b2297c7665775d9ae0808d764
SSDEEP 96:gZcwO9fJLpjg6HxBWNGlJSpMq7hOCabVj+aXHjISj0dc2ZrnpsS:gZc5lzxBuGlJSGMV4V6SHMSj0pZrnOS
TLSH
T175B1EEC8E1E34C421F3DB5348C108B9DA5AE7AD6CC6B16C2C48C742435A61EAE5EDAC3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\default.effect
Size 5KB
SHA256 8dd46e7b472f80d7b6cabfbb6822650d9bf327e40c2f68e2234e19a13b77145a
MD5 df936214555309455e1b17f697c5d47e
SHA1 74904d3b34beeb52a31d7280bdfb6d1143088c3f
SHA512 dce9c0ee124a0f417d06e88f349fa89ad848e8db5258ab2fb1748447c3b6d0b7ca1b75a77468ee7564e72e2b06fc5c68437c00981a0158764215496f30678f2f
SSDEEP 96:nDi71P0d1H0a1a02w3k2DR2rt2xYtMFSr1d1i1F1a1M1CQ/VvItmOtAL:eJP0fH0sa0Fk2DR2rt2xYtMFSZfE3six
TLSH
T124B1AC04E8BBED6D473980615C25D945E2F987F14CD52E11AC0EA3FA70AA5CBF038B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_rect.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\default_rect.effect
Size 1KB
SHA256 2c85652254b8a0d5bfb666f5e13ae9ae89e23f9702dccc9dbf3473c8aad0f1e6
MD5 96bae6c7bd4028de224a859e42a84c9c
SHA1 68f6144bd2c6c777c20f70e6083ba701d5589cc1
SHA512 172e75d5ac8c43afc937129ec29980ca35a0c37ee8f315baec3d35d9479aa6ef22d6c7ab74a299f42619c0ecd495c73f66abf64190f8f75147d7ea29bec7e59d
TLSH
T13D31BE00E8EBEE1D4A5841911D12C855E3CA53F56CC82E61BC4ED3BD31A99CBF1247CA
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_base.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\deinterlace_base.effect
Size 8KB
SHA256 c5e4669d48453d5f68f3fcb80948900d0a21fd4e940bbd8e8d75c6a6a20bc4bb
MD5 49f5d9d7934b0216c840ad67114290a7
SHA1 2d1f2147045a119f6d81b416edfc5d039bd30cbb
SHA512 405ae12c834ce50ff4328f83d80490df5afa0b51b13ac4e3b9e668e278064d199a2c1809d94a635c4a4781b6ead4947b8f88b1650340c48d6391bf23412fa074
SSDEEP 192:UbT8zi8NoN7PNdCtb1b+Rb1b+eNvgPZNRY186NSNTN8Un1uEW6Fo0e5NmF/wwNNV:UbT8UCtb1b+Rb1b+hPdY1XUn1uEW6FoO
TLSH
T131025208A5E199904A60EA020C3FCC02E6BFFAD69DD8AF12F74D611D779D163A071F5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deinterlace_blend.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\deinterlace_blend.effect
Size 1KB
SHA256 3804439831f9405fff647f73dfb2cda18286c3d2ae64857f2aef5488c32b2c12
MD5 aaf7e0b72ff50dc131b90356c14de775
SHA1 f7087777ec6924a06758d27664705e1646b43678
SHA512 578fff75b3f6b05fc75b5311fa010e10f565126abc961dd0c5df6a6b641c196a218d845f304d03d2a609116a9de63d9995436b45c5c7b951d4a5c583f88d93bc
TLSH
T1DC11354AA1742A9045E1DBBF3C725EC8B1D9B0767952A554386CE2C8CFA744FAC7EC01
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_blend_2x.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\deinterlace_blend_2x.effect
Size 1KB
SHA256 d4d303feb2fb47fde2f0e7417f56a9996d0ef6c113bbbb70e0c9a553dd9c01f5
MD5 0647816deb77b553b2048cfbe633390b
SHA1 ee97e64da80b95e3a288d13831ea8f1b533b50ab
SHA512 3196301972103f7b61b9871bff60114c5ac95f586d9bdce75d59e31bec519c617f223d4a115d67d041e3682ac9fd332ea60bf664a9b99276c9958e115d362de0
TLSH
T18111464BA1713A9045E19BBF3C715E8C6099B03639536540345CE3C8CFA744F9C7EC01
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_discard.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\deinterlace_discard.effect
Size 1KB
SHA256 82105d13b03aa531401aac2de9294ab094a30d659aed5712c960cc06b6d3fb0c
MD5 78cbd48beb2fed3ae3dfd4e0e5c1c604
SHA1 aa9540622cef9ebdf61e2ae5b20680e6a8ee735f
SHA512 64624a9f6800a33bc4c91bbc5938b790f99c571bd110d4b8ab47575a29ee514ff1f9bc37eeeaeec1073ce84c54a4a2ee47f91e597fccb7692bb8f563997889b0
TLSH
T17911754661602F9045E1DBBA3C725DC871DDB0327953A554386DF3898F6784F587FC05
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_discard_2x.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\deinterlace_discard_2x.effect
Size 1KB
SHA256 3e9a79396462d4fb7d1b322e3898a287c90363ed3bceea98475458b1e24e19f8
MD5 6d29617118243675bcafa67f4d10228a
SHA1 62e5ef3f962760f8c58241903039288e9e7a823c
SHA512 c8ca6facda192d36db1d227b359384f5213f8e7ada0f71100de533062ddf0df592238c50df3bd362ad2b801ce47e406a52275da85d6da2d6e9f958c2bc4c249a
TLSH
T1EB11424761613F9085E2DBAA3C729D8C619DB0323953A540386DF3898F6784F5C7FC05
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_linear.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\deinterlace_linear.effect
Size 1KB
SHA256 a1e086be7ff44696fb0691ba0b0f06256867ad87d109ac1b523205e954fef5f6
MD5 4113d656f8b86b97979bb78e876e9033
SHA1 049b2cc342eb2ec75e369f13617f0689810e662f
SHA512 b2ca3ec3e04f3e747a320ed801ef6689d77b3be7343c8b903afd8132b6e9d1ec208d6188827a692516f3a4d9eef8ce758cb522aee52887101f9d7f704ef8566e
TLSH
T1BA1146C7B1602E9046F19B6A3C515DC860D9B033FD43999434AEE1448FA748F547EC01
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_linear_2x.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\deinterlace_linear_2x.effect
Size 1KB
SHA256 77e952a5c914bb25cd88300eee2fabb336e0913b2f3b47598463f5b4fa600d51
MD5 98f8c7c53538d4e7a638a0ac2359aef1
SHA1 e5e23dac6f01d3c1f5b2d343608973ebbe88e56b
SHA512 1a65ce3f4cf7335e5e1cb51b2e0d39da916d3e031cbd2eae2e22f8fb65568edbcd3b5adb913ee6170fb5843684aff51a68e0638f0afbe4c984b090cb81291b89
TLSH
T1181146C7B1613E9046F19BAA3C615D8C6099B033FD439980349EE3448FA748F5C7EC01
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_yadif.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\deinterlace_yadif.effect
Size 1KB
SHA256 4a2521da2e801f04e937b3d045c53d798a24a7dfa233d6b5037e95a2bea18f0b
MD5 36f89cb8b1f674b47a58749913a66d3c
SHA1 4d6cdb726005433ecd185572125a971662b2df13
SHA512 bf84b95367e1deddf45d4b73dfb75693932da8da6d45da6169e99b297eff4244af798c2a9d89ea92826c7762afd4f4ef01dbbfd3cbfdbd85d066e8967c1ee025
TLSH
T18311758A72603AD845E5EBBA3C625CC870D9B03379529555386CE38C8F6B64F7C7EC01
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_yadif_2x.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\deinterlace_yadif_2x.effect
Size 1KB
SHA256 41fa092e66cdcd71cd1cfcb299c90a491ef3f0b2c04f9a5d11ee399b70b681ba
MD5 c911d8876e8215bc93c260a024f08eaa
SHA1 bbe1c07a3effe3d27ba534c2cc4cb9ab8fbd15d7
SHA512 76362ea26b50ac5166b596d9207ef92157f99660190cbc3c9c115c663d1924dc83f0ac9dfc967d2c60051c0365455e4f45f49f564f690d40cec123ab713650dc
TLSH
T12C11468B71613AD885E5ABAA3C615C8C6099B03239535540745CE3488F6B64F6C7EC01
MD5 SHA1 SHA512 TLSH

Submit Download

format_conversion.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\format_conversion.effect
Size 43KB
SHA256 ef669f3ce381b3db2453738b715bafea2f975d4ff13c576526acc285d3dd5e47
MD5 2b64fcd09f1ae0391e06cdf41b2bf5f8
SHA1 a48aaa10a2ab83061493f134e65d8e191692ee42
SHA512 2fd4bf88bb4c633cb578d1bbe375618a0254bb737ece4b1a5ce644734c72e2d09bd111962fe6c82fb839032bbf2393526bd332b9faef9e3a3f83d365480845b6
SSDEEP 192:lt79GxZ2F1PCJwYlb9/PZ2cZdZotaGaoaSBr77hqW43MUOg3dcqOg3dcgMTMrMU1:f76e1PCmsIAZtkFDNmYu3Dp7YrosA
TLSH
T19713760AA962CB5F0B551071FC038B8D92E947E80A998B217C0C99353B6E9DDF3367D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lanczos_scale.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\lanczos_scale.effect
Size 7KB
SHA256 b9bb64eba26ee4af3ffaba3356219260f7b0e19dc427104b371b59fb8f8854cd
MD5 45bb5f485d38559e14bfaee2b4a4af41
SHA1 be6c4c241385af98f6621fe5fcab9f1b7f2f2928
SHA512 317da65f9ac03553bbb20c1bad33eb6dcee4aeb68582efad864adc99f5428150ba6f0e1859fd2791713b2fae74f79f2ce89b3ade43cf34a67d44e60ec7d72288
SSDEEP 192:z4/KzdIO63+sgukucuZrxriSZxj37/dFO29NvNh38NX3N:zSKu3/gukucuZ1m6rrZc
TLSH
T117F16244980150190D48D4F2CC5D9FCE92B6C7E67CA48B72A68D017E2B9A0D6F22CFEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

opaque.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\opaque.effect
Size 2KB
SHA256 864d7f416d558a45f87b9a3c5615fbbc33b5a3b454d7304c044534425bb56755
MD5 fd7f64f337f12ec9deb91440b16d59f2
SHA1 13c6a7867290a5297ad0309a43a18b0447308d33
SHA512 666a1fafe1b4bf832743c2f15b08a14a88f7194a2d140e2d598f9ec992887e5c418c1afc75fe7652a948a3a5b0150b1af477497170c28bb75f3925f553357210
TLSH
T14851CF04E8E6ED6D8B7541905D158A11B2FEC7F11DD52F12AC0EE3BC22AA9CB6130BCD
MD5 SHA1 SHA512 TLSH

Submit Download

premultiplied_alpha.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\premultiplied_alpha.effect
Size 657B
SHA256 c5f3a569a8cf514556684ea27bb44905b959c1c3722aa5e93c45aed825aeec9f
MD5 89d5fa2e290fa6e9c251abc46496880d
SHA1 b3c06bf7d8b98a09694af8744f10df54a75f4434
SHA512 668d07ababceb09a296ee478c845b2edb1c18335da946483d51b1145ce2b5f0d54225913711f57641f7fb410a1b80a12f0ca1a36ce43e696c71b5099f2f9822f
TLSH
T18C01490468EADD6D0E9806911942D562B3C847E15DCD0E727CCDC6BC36A5CCBA0347C6
MD5 SHA1 SHA512 TLSH

Submit Download

repeat.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\repeat.effect
Size 625B
SHA256 2ddd0dd158a19161f619d88d7ac42efddfb6dfacc6fff339115051a13c7a0a61
MD5 0bb03e348ff12c51ac67506dac47f9df
SHA1 d0bc47fd36c5bd1a9e5bec28d04009c70fbd33fc
SHA512 8db61b243acb9ad68aeda92fc36acae6ae8e4220d12280f0d3e143fde8fddc88e1f2a49d2c128ea170fccdf0636de0dbd30151977ac78537a21d7aa6e871fbf0
TLSH
T1FAF0AC14B8E6EE6D0D98058169425822B3CD87E01CDE1D727CCDC1BC39F5CC7A0207CA
MD5 SHA1 SHA512 TLSH

Submit Download

solid.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\libobs\solid.effect
Size 1KB
SHA256 38eea358e6f67955d6b647797cedcde4bdd77e6f668b1ab251552c39dfe0d2b2
MD5 a29f8540a8144eff816dea652c771477
SHA1 de10329bd52293b6755792a0c17d4cb54dd84444
SHA512 30baeff12ec363da3b8fbddb6a83c9ef9c5e05a68f5b9507c853066ba5c9a502a372eb5a8b420ed21ecd7cc9ba9b8532206face3ae6857afecfd0bc1c341d083
TLSH
T16031681EA5E1ED1E0D8755CD1DC6454663CE77E01A8A0E1AFC4DC8292B74DDFB004B8A
MD5 SHA1 SHA512 TLSH

Submit Download

fade_transition.effect

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\obs-plugins\obs-transitions\fade_transition.effect
Size 1KB
SHA256 95cccfee77d107332a0b1c92dc92aa44a7a2e342c6a1f14d09cb307fc001a46b
MD5 4ae152291b7c03b28c64f74794520f1a
SHA1 3347723fc1a52fc137f1da7a269e5c4c218222e6
SHA512 894e167c0053e2d6b0f4d9f520f14d817e82993a3c27ba508f2e57258d052a9972101aefd424f0669d058dd024781c0a2c734bfd23e2516eaacc59c46fe0725c
TLSH
T124319B44B8F3C9460F7512E09C16CF55D2E99BFADC892A52844C906C71E669DF138BC6
MD5 SHA1 SHA512 TLSH

Submit Download

compatibility.json

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\obs-plugins\win-capture\compatibility.json
Size 23KB
SHA256 d66869564525858e4f5f0a0f1debeaceb7b90d158ee1634f662116adbe67ad18
MD5 936b9b26391ce732889d6162a71c7de0
SHA1 87f68e971c119bf9dee984385c99e8ba72a092df
SHA512 78b13ace031d4bfcf66a7d68cff6a305e24bdaa63e1e523d18dfec1bd727f27850a119bda38378ef708e4e11fe8337e9b6ea2b81f75ca35c54d7cba880752de1
SSDEEP 384:pHNteNON2DJPbVp5jT6CD6Mb8CHvpM5qQ/whYRlaS/b+4PnzufQP+:pHNteNON2DJDT5jT6CDLb8CHvpM5qQ/2
TLSH
T124B20329C525AC33417E206A2AA773D2AA95510B0CA43D45BB4CC50C3F4EEAFE3F5DD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

get-graphics-offsets32.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\obs-plugins\win-capture\get-graphics-offsets32.exe
Size 122KB
SHA256 9c13a942d36d6ecb53eb0a46e0c3d6d66e9e3aa6b6e2fd116db2523220c60115
MD5 a1c7f2d7f6ecade47be5515105ed5886
SHA1 2c5fa542320698ef1a65fa6fdcc11c4abdc53628
SHA512 b983a34f2f535d7a0a696be6f23077e6af641d93d433ebb2656577647b2f97cf8fa9542170268de0d15a8e79e6a6d228889232a9826772c577b4ca1275fcd9bf
SSDEEP 3072:Ea8Bx6gPQGTyTBeNfELCmWO44Qslflb3/Rn/u/7iaZaN:sTTyTq2CmhPZuziaZa
TLSH
T1E5C38D01B1C1C472D476293118F0DAB69A7DF9700F509E9BB3D816BA8F706C19A3AD7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

get-graphics-offsets64.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\obs-plugins\win-capture\get-graphics-offsets64.exe
Size 149KB
SHA256 77d85a023eef93645cc152d093c971a6d2b7b8e6600fc628777de7440611802e
MD5 7f95e6421b842134c2588ada1c2f9b58
SHA1 a14806cdc16a3ed7dc02c0c1881edf7618a9f2d8
SHA512 e2a594924e934b9c5de8d2db58e2f53a547787f08362de02815640e09377512cb81e415b2551c298f144f239a12568f2c893ab972b64208991a3fb423272d8ab
SSDEEP 3072:nqttLA23L8VI/xd0mG0B+bjtVesZKlr8SQv:gASL8svG0B+3tWB78
TLSH
T16EE37C17B7A134F5E1778238C8A14A46FBB2B83607609B9F039447761F272D19E3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

inject-helper32.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\obs-plugins\win-capture\inject-helper32.exe
Size 98KB
SHA256 68e51ac35b4c733e317e0ece4963dab94e05634f091a21928e69118421a7461d
MD5 5cdf30cc31faab90a3a5d5fb560846da
SHA1 d2b64bd6ffd155961a85e5dd4198d4a07e91be8d
SHA512 fea189ace66723d3328b9a2c435dcca0d5c50f39813980f955c500b9c4a145ddfe565106837f9aab89bfdbfedd5be4035760144fc441202c1efbc3e61b65c282
SSDEEP 3072:BeegQCy3QRrG57vsvYNnZ2bLakrZfYxlKanaHV:BFWK+Ys0cLa5aH
TLSH
T15EA38D52B5C18471F9B6193524B4C9B19E3EF9201F909EAB7348067E8F313C19E35ABB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

inject-helper64.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\obs-plugins\win-capture\inject-helper64.exe
Size 123KB
SHA256 6877476c339538ace5f618d01f0f70a4f523cbb8511755d262a0458a02217f5c
MD5 de2527eb72a3b1eed6cfddf010de8368
SHA1 6e81940557f6c65162c62396f9623e1bf0a0c770
SHA512 47eb094dd9135e286002ab5fe70be59d274e5efefcb03d7fddc3f8bdb71c48b3fae2908d86a4dd65f8a45c567479c73e249bf64bf6d894f3e1528b037165364b
SSDEEP 1536:21ljYHY6TlnHMgtFmqLYj+SNPWzro/gcSBnYIfrpp0jj5cmsWW8dV9dlekbj0Qm7:SjYHYZKbMjXgzroTAnYwr30f5blzj0d
TLSH
T156C36C5B73E130F8E5B68538C8910A05E776B4760BA09F9F43A8425A5F237D18E3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\obs-plugins\win-capture\package.json
Size 239B
SHA256 28c42b8323fd145cff78264bab7dbb1f8c0c8aff2dfb9e7026c92b35ddfebe7c
MD5 cf33bf42a4eb043cdbe9bd0cb97e66f9
SHA1 087b87eb8020bc3f540c56467a864496ee59e22d
SHA512 19adfdf7f6ee94447a07c41424dfb5296f2debfc203135ee1f02861fe44c7f6b460c50fc119ef7c6eba5439d1876ab75b4e7014ae7894b56ef9c217218e8d538
TLSH
T197D02295C0145D6364C4B2FA0C1C83C0FA005A474CB0BE60F30D881C0F2847A2AA844C
MD5 SHA1 SHA512 TLSH

Submit Download

compatibility-schema-v1.json

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\obs-plugins\win-capture\schema\compatibility-schema-v1.json
Size 3KB
SHA256 0842d4ba15fdd364f675c6324c39100fd24969d0b2ad0956b510ffd69fd6f460
MD5 5ef65302936896a12916c1abb1cdcbf4
SHA1 470509635f3b2afea0be96fcb19b387d9e39e059
SHA512 3c5ffe07c6130251fb18a6fcc6d89339ad93cd808a1d31cda2da0a4f84fd319257ff6128cdd6027a2321eb3d2aa4e9a9b860139f98e5bc7b1069fe89769aa238
TLSH
T16081771DCCA49D63048A213819EE5185EB34428F4D647D29BECC10BC5F4EAAF81BABDD
MD5 SHA1 SHA512 TLSH

Submit Download

package-schema.json

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\obs-plugins\win-capture\schema\package-schema.json
Size 1KB
SHA256 ddb10aafe82fb52a9bfebfbef61e47510dff805d14323117c166da6d99e01f66
MD5 ff4f162eedf22a43a2c0bdfa40135826
SHA1 52ef24d1d1564fb4fb4ad5a0e8afc3a462f11fb4
SHA512 49bc7c61e6d9f7097e3d4bd705ce5ea1af571e66fff02b1c931fbecd198ec9403704ff4cc97861b3c29f02f8032ea6e1442d480b0308ed435c8e4ae203a1d04a
TLSH
T1B5313B58DD959CB304CA32A40CBD4182E730D14F99646C267ADC44ACAF8E87E84BE39D
MD5 SHA1 SHA512 TLSH

Submit Download

we-graphics-hook32.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\obs-plugins\win-capture\we-graphics-hook32.dll
Size 228KB
SHA256 d71d2009c9a6dc134b779e5bca7b2ae9e916376f32b1495201e18ef59bbf1994
MD5 372bdbc528dcb08ce4351770767b828a
SHA1 e3e13ab696d198fccbf32240398b0150d328d2b8
SHA512 ad8c53d4a903f41c48373ddbc512d5caf2d21ceb2c334c8774b6cc53ce9e51963f29e30a153d811443684f52167c88c3db82cd2becb5f9f53fb87cb12c78ee2d
SSDEEP 6144:qoG7yFRaIrsJSrvHqKyEDRrhsNlvkNYrtprwAYAr8kv8n:qoGmRNASrvHqKJhAVkNYrtprwAYAr78n
TLSH
T157349E40B140C035D47F0B3165ABF7718A7DB8242BA4A9DBE7980CBCDF205D16A79E9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

we-graphics-hook64.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\obs-plugins\win-capture\we-graphics-hook64.dll
Size 285KB
SHA256 29118f3879845fe9dc0af2f073c6d02c2635298610d8d4b2830c17fe6878f785
MD5 61dfc929a7676b66d11719af7fc6c0eb
SHA1 9f61f53e38e110390258b1cf10fe99f0fe8a31d0
SHA512 bdd66c25414bc70d7fd07de50ec44f0b19d53075f6befb500571efe55f411c4d5b77c336df22261f0c345dc7a1b56f2e621be7b53cd40285adb2f91e69ec858c
SSDEEP 6144:GxGgrXDkpoF7AsZk+VWkdBdRq8hsjOv6kNYrtprwB9IqJz:cGgrXDiousZNUkdBdwYuOv6kNYrtprwT
TLSH
T173545B9A6BA60CF6D837E2798697A711E7F13C110760C7DB036042999F233E0AD3EB55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

we-obs-vulkan32.json

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\obs-plugins\win-capture\we-obs-vulkan32.json
Size 502B
SHA256 7187b21e74eef99b6f4ada6ed428d167d858d6bb9798ba4d566686fb5759742f
MD5 988837ad3edd95b3b51ae6a36801d80e
SHA1 526ef36c4bf785b6ed718b05618bbaddc6e8830e
SHA512 1e1f61d9346408bfd952e603d023b639e22768f4fdd80e5e6ec6ce2fbb867d39c93609ceceb034719402a7098b94d075de822081aa1203d392e120a2eeb21109
TLSH
T153F0A018DA519F13054B13184CB9051AF671821F2C052C54B60C205C8F4DBBF682A76D
MD5 SHA1 SHA512 TLSH

Submit Download

we-obs-vulkan64.json

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\data\obs-plugins\win-capture\we-obs-vulkan64.json
Size 502B
SHA256 d39541cddcbf07febb772beaa0cfc3ae7cb57a9f4f209192b1a669c819dc607c
MD5 ab7ba6642442a014378d7ccfa568d5c2
SHA1 12227e7ab4ecd17be7ef12a2a9d23c64d0330aaf
SHA512 b801b203fa18b8617cc13164afdae4115bb79e3ce9b54691872556b6f2a6ccf57184dda67eef3c06a858fe1593832709b8d9518626af95f33f496b466a8547cc
TLSH
T1EFF0A018DA519F13054A13184CB9051AE671821F2C052C54B60C205C8F4DBBF682A76D
MD5 SHA1 SHA512 TLSH

Submit Download

coreaudio-encoder.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\obs-plugins\64bit\coreaudio-encoder.dll
Size 66KB
SHA256 3f7280358f6004794fa7fbf629f5ebd6442b8240e507c0ae04d3ea56a95b47df
MD5 27e687c87b3ee63f64e3f15f9ae55d60
SHA1 b08b437cf2fc9963d7edce98fc53ff8aec569d66
SHA512 84aa1cceae34da0c8bed6de71d54df0524a83c303f16726202e15dec7924ed5752b23f70e4b0c55d25e6274dc865de370b819995166dca1fa87bc78352f17098
SSDEEP 768:nbuV6Nqf6sterMSQpgAqXXa8mxSLnweWjFJ4Q7z+IXWiGYiDLz5f:buV6NqCKnbh2ajSLnwjFmQ7CuDG71
TLSH
T186631A66CA15502EE35A8CB4E5425D06EF72BC958BE0A6CF6B800DD70772FE46F39342
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\obs-plugins\64bit\obs-ffmpeg.dll
Size 251KB
SHA256 bb87a497919d4551daf98fa2380a40a08b469be1fb28ab79b7e07d27d1b89b8d
MD5 49914a23b5a65329486988fb52953849
SHA1 bd55cba1f1d67eb0d8654dcd1108826e5bfe017c
SHA512 e26a31123ccf1502d3e7801411087eb094758050e2edf2cc441b70e392f93d7dd6b89b368c2c3cc145b80a3da704d42d2d3cb965291ec23d228e745426be51f9
SSDEEP 3072:BzUtvS6YdrbMQk1kdpLE3tUSaBJDSm7M5SA96zObCTbPA9qd2kkCoNGK:BIv2drgydFE37aBJOTbCeqckNG
TLSH
T147444C1A77A50CA6ED77C079C543C91BDA733C914750E6CF17618AAA0F23EE07A3AB10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-nvenc.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\obs-plugins\64bit\obs-nvenc.dll
Size 75KB
SHA256 deb705868495633b854ff0b162cac479986e7f97f81a187beba0d986cf4d4461
MD5 4f9b0bbfeea8a8f957e5246f1dccd887
SHA1 d9071f2c6c59cf952e80fd17eaeb7ac1b3eb60c2
SHA512 e2459705473b8ecb6501fc95854b20cc93381634285463179407eca90dacc4683805ab0dcfcb68b995a069009087911d519a6b7b30e86252856421631e85e943
SSDEEP 768:vrKrGdT3oTZGE2XXmPC5m9MVWNq/s+2fICTOQYb5GF2fqjZFYiDLz5a:vermT3oTYz2IDVWNy3RQYi2yjZF7Y
TLSH
T1AE734CA6D39410A9CD63A038D5A2492BE2B2F24453A097CF5BB5C35E4F137D2293EF25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-outputs.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\obs-plugins\64bit\obs-outputs.dll
Size 714KB
SHA256 11659034fa0ccdc9291a5ae521cacdef722c5cf052569cdfb8ea60d7588d3ade
MD5 f382330789e21a76936cdcd36ce30174
SHA1 f8541059f73ec0aba2277cd9c6d4b0078eaa871b
SHA512 fa6e469146b88b1ed1debd41ab02207ebe029f7e4ae46afe86ea85430ac5514a147d56e89dfa56885caf1345de4eb727e9911d5e6577bf79cb459414db0d8b91
SSDEEP 12288:5GDHpRufbHDZdC7+fq2HOyKMb0fgn1ox:5GDpMfBdM+fq2uab
TLSH
T179F42A55A7E411A8D4168478CA62422BE7F674CD03B0E2FBE59B41662F53FF2DA7E300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-qsv11.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\obs-plugins\64bit\obs-qsv11.dll
Size 331KB
SHA256 46398893dfac03ee348438448becc3ed34cf8986073db4bc90c654f79d2ab657
MD5 e56b647e9caa1e3437bd8c95cd2bbb32
SHA1 21ad62466f00351f097317d11afda9394d906971
SHA512 d0847e4f765bc925d9954b3fdd2a7c8170cf148b1b97b6f1dab6fbd4a6cc3815013ce70e670a70ee4ad9561325765ee56f78510f40717c867bf0737bf9f84172
SSDEEP 6144:10wDoapLokn3WJ/hIXunvxeeAcRUzGO3CUGDdSo:Ow0ugKvWd
TLSH
T16C748D27A75801B8D9BBE13CC6475807E3B6B85603A192CF17E289563F16BD17E3BB10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-transitions.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\obs-plugins\64bit\obs-transitions.dll
Size 47KB
SHA256 a135f4b0a9664d33b026298e70826185936328b6897dbac624b3dd1017b26f13
MD5 c0caa0bbb0fa2a96b39dff9eab0127ac
SHA1 c833f07545089ca59045a75d5ff286a12f32b591
SHA512 e71ee04cf5a95ec5fa29393383fede8a8495656ede4e37beebb972f2808b29778dcc117e7cff9e1fbb02981aa28828dbb1fb4fb74e14c4fc101758a13f93d907
SSDEEP 384:1t9qP1vGXwrZHPuwS+iUOBF54ydDHI/rmhKT+P28EEIjOURskCRGPRHPrvpJURsV:1twj45DKxswP2sAqu8TlF83gYiDLz5h
TLSH
T1A9235A56A7304481D6F78634E8F26C0BEAB0745047A2D7CF6390C26F5F637C2257AB9A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-vst.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\obs-plugins\64bit\obs-vst.dll
Size 66KB
SHA256 5119db832c0def13c328a0f410ee63b3797a0ec8ce8df0a5f710df5bbadf2d85
MD5 06b010e5928fea9b20144b14d79467c9
SHA1 db0808fc93aad16edcff49d9d33ffec80cdf2135
SHA512 c67c99d18344dd965c577b665e04adb94e168c856565c3d635a7525e95cbf0f68031c6a70a4daced9b1716c34462f13a36e208aa532261421e8c99876fd7ce75
SSDEEP 768:6N3GZbMGLXXzLL5WhtwzzprFwwlMmV5JETAnv/liRrYiDLz5x:6NuLnFQtwzzpNu2ETAnv/liRr7P
TLSH
T193636C5BB6510095E1ABD238D6460E66F2B3F0434B5287EF4316852E9F333C1AEBD74A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-x264.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\obs-plugins\64bit\obs-x264.dll
Size 37KB
SHA256 3f6d90ef03407472c5ba88ab39dd8b3c2bcae98b46e60a0d971fc4102f02fe50
MD5 62b6d8e41ae32d938cc4968a454f28ab
SHA1 b8660fa93743096766d1d10a6c5a5e5e69df53c1
SHA512 1013b02074cb4cb74b1d85c7029e90655eb428de1dc0015b7e4bbca93fea822625d5805c134598748d15d51b6d1100d3b814855cf151e0715d5aee6733204fc2
SSDEEP 384:LQ8qProz3MWR3i8Oc9+zZPDJyjlbQ0FbYL32mr3XUkuLRoNyEIYi2mL4wnMaKoyg:8JoQWp+TykL3HTURtYiDLz5
TLSH
T19F038DAA970408C9F9535434D0E34D2BE775B4B01761D6CFA36AC22E0F223C1BA7DB96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

win-capture.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\obs-plugins\64bit\win-capture.dll
Size 121KB
SHA256 db912947c76e6a8c57ab723a963a6ad9beb4dd8ddefa0105724fd525e7737b64
MD5 0e86a7d388c29b0d4c074415c1934e88
SHA1 712a82e7749c2c1e69414e940e6402307516f794
SHA512 e521be196bad645006b922e2dc0e4732daa2042a2100c9fe4040da3726062cce19eb784bfe23083fcf1895aabb10d2b997e2512c3b36937c461f586f5bfbbb2f
SSDEEP 3072:tLB9WWxOJgMhYvlnKP101/DDW0bnqCgAUv9P/uk14T/:tLB9WWxw4ln0YDiynTUAk14T
TLSH
T131C37B8BB3A000A9D9B7D1BDC663892BD7B27440135493DF5694C2491F23AF2BE3AF51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

win-wasapi.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\capture\release\obs-plugins\64bit\win-wasapi.dll
Size 76KB
SHA256 63d628105c8e8b6bea77feee3d1ffb21013e1eb88bc3af33b9e137ca4363d9c3
MD5 6712a6f0b7aa29d022d3e77f487cdac1
SHA1 266c2d97709afd06bfeba6aa65c90415e2a45d90
SHA512 e5c3c62455ee5552150aa3ff68bf1e52a09478c680eae4a0a296836267e08faac3a18002c79b3b3a8c93716fcfe584b6c71d1805699864ec7cbff4190c3ceafc
SSDEEP 1536:L8i2KEhOQlG4Ap2kJj9sm6VJSDHb4w3H63HfOuSDLOKpI7:IwyYR4kfsmeJSbOKpI
TLSH
T1A4736C6B77280098D0739035C893DE26E7B2B4A95BA14BCF1750832E1F237D59D79F62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lock.ico

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\lock.ico
Size 116KB
SHA256 ab5e433feae115ac9515db22c8f6c0738cb6150ee10bb119e744ec66305200f6
MD5 72c021946d5fe27cffdfbee9f967fb86
SHA1 cc857c464dfba1a768ac3e5a15c7a69f1f43f560
SHA512 61b22f8f42491a735aee28ffea324d73fd75361bcd2f06c06db836df1e0ef3c513484e71f376d1107ec3d50aaf36adc2e325fa10dc54bcd77b29892dcfb212de
SSDEEP 192:GknrtDINynT+v6sBnrtDINynT+vbIVyYnrtDINynT+vOb1KahBqPPookpUUUUUUW:GKpspoIVyuNbXGPPooTEkQg2jttPU
TLSH
T1DDC3CD0C370A9881C83C87709E54AA98AF1CAD0AED3459C776577E7FF6322761C5263C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

node-screenshots.win32-x64-msvc.node

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\native-modules\node-screenshots.win32-x64-msvc.node
Size 666KB
SHA256 c9e84f2189b1f88585f462d1785f3c6e8e47804277070e90b3fae0e4d7a197b1
MD5 8a26efaeae555b6934d686194298e7bc
SHA1 ccb1cecc536fc1f1e5920b8866e1448d2bc03137
SHA512 83bd9413a55b5425b7de121c15c68bcd73fbf569cc6bb54b9c7e657c74f61f90db4bdc04db7afdc5dd099551820b91a81a1ab043f29c9a3d2cfdedf64bd9795e
SSDEEP 12288:d15umO+3xAoGVHfJXriz+c7qBcxC5VBLGxYqQntLX4VnqB:d15umNAoGV/J++DaxpA
TLSH
T105E44A15BA9A987DD05AC4B0934B8B73AB3170CA0B217EFB01D481757F6ABE02B3D751
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

overlay_game.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\overlay\overlay_game.dll
Size 1.2MB
SHA256 9e7333a85d20d136057b1e99136ed7f12429397d8b5e4e6df9696d3eeba45582
MD5 41dee947c9b95192a4c7ce00ff2df9a1
SHA1 ddb6170a9e44333c4e8174b01dd694d94f046ee9
SHA512 9f2fe05343336e73f46a158cb15857f58d1bd05b167ff4db9a52e6c6756eae60157c2537ac53e67a3db5cf6d813de25b1c8e4c214003ff82fa7100dee0db5ed8
SSDEEP 24576:a7/sVFWES4QuzNaDGoGmCFFq4fWv7ZXbWW/9FofPmdKtfv0z3gbjKK0:usWES4QmapGzUv7ZXbWW/9FcPhtfvU3R
TLSH
T1DE55AE217581C075D59E02F09A2DEFEFAA3C69300B3144D7B3E86EA99E705C26B35B47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

overlay_game_x64.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\overlay\overlay_game_x64.dll
Size 1.5MB
SHA256 e1b6f5af200932972abc03e2034955b2808a82bd13f2261b16a1de04ba0e009a
MD5 ff8635993a58cfc0046f5cd7929307a6
SHA1 e3f8ef7261cdefef3a9ba620d4c712a2c72544d8
SHA512 2c28eae44484a8c9cb2f27ce14d04827a93445cf75246536a4b06f3dc4eae2c577d5a894439621a29466fe842576cab13a715bab8c7bc5089f863c15d003ca63
SSDEEP 24576:f9wcGbWgV/zl20yKVQRDekZZLARq8iPUb5h0NHXQk1DnIYncOYX3v:f9wxx2LK6RDemEiPU12tDNnj+v
TLSH
T105658E17B2A802E8D4BBC1BCC947990BEBB17849076097DF27E446566F67BF05A3E301
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ad-view.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\preload\ad-view.js
Size 147B
SHA256 7a965aa21315c7587d40614a8653cfe517e92d8d20b15716b5a17bc1596b2a13
MD5 cf46241e369c4cf1378ee4429b339ed7
SHA1 2b5d86f715602c46379cee1b5f4cff85f7a696dd
SHA512 0a33ba42b6d8bf25f17eeec73e45b4c3a7423909cd06bd9788486fbf9153692a5f217d5b88d4e469eeeaa3895660038a7b28b32f12a2cf1b18d4b82e58d916a0
TLSH
T184C02BF080C29D1D336315BE50011CB41F88C19CD88C9230A700006938C044812AC33D
MD5 SHA1 SHA512 TLSH

Submit Download

analytics-frame.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\preload\analytics-frame.js
Size 1KB
SHA256 c94031bd1997e73e46a37f101818183497f26a1d71d5316fb70088119220ea17
MD5 cad574a5e3b3f93ad3e7f4eaf594e4cc
SHA1 c2e25dd3848a4a1068e24439efe916aaca5e66e1
SHA512 1b632e1621857392dffc4fc23d99d61ca435dcdc7d80d684e321623054dd50f353f9333a1dc8d2ca7dbebe5f00020ab44b6deee2ab265a450c8d65806b1bbfeb
TLSH
T1C931CFE0AC821D9C33A70174B796371634273ED3CA0E91446B284DB76996ED00559FFE
MD5 SHA1 SHA512 TLSH

Submit Download

CELib_x64.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\trainerlib\CELib_x64.dll
Size 2.3MB
SHA256 f457972222720554d7fb6eb928751964c492a6edac739d2b2a106e35e66243c7
MD5 c3022f755ceb32b51fecf5620ddb9f87
SHA1 553806605650004d1c1d0e3008ea44c06053e946
SHA512 b1450e0bb0e67cc04d0484b7c6e14a47b64f38d8130c385ee4e955ed96e5f4f617fedb137c47046a8dfbb2bac5e185df94a5c32589b1d56db933880cb01f4e9b
SSDEEP 49152:Zx9yFVvpOT7AAwcy95C0zRrZSL7cDB2T/hjuh3lfV0O8h+le1DkzDq1Ee:tybBOTJNK5F9ZSfrQPtf8EoDky1j
TLSH
T170B53317C279BDB7D4751AF25E94F8E0923B5082DFA88E617F0783259D8C61EBB71208
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CELib_x86.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\trainerlib\CELib_x86.dll
Size 1.8MB
SHA256 92b4b1461d3c30cbd70227ecac39bed472a98f9532169689eb062bc39045e374
MD5 f793acad87f2c1e0cfaef0026fcb06b8
SHA1 a8a19a53ddc6ebf87c8ba67ae82fd9d7d02f9b11
SHA512 00cd9310185af0fee609ba1663bfa83f37c774913baa9a0b73a44f67a9045d3522d2bd4d74e92f19e846ca237095ecf9938b2c1fddd674ae99b55493a3eb0282
SSDEEP 49152:pA8zhYEY888zTGfL2GsAn96x1OtNMzBeFmb+iWO5embh:9U88gTGFp96xIMIFsdWOkmF
TLSH
T1AA95334140E97E9AE877A7F5334CF165EB5882BB0F0D96CFD11FC6248186CCD6311AAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InputCapturePlugin_x64.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\trainerlib\InputCapturePlugin_x64.dll
Size 2.0MB
SHA256 8c845cb8dc88c8b9dd7daa60870b9fa427632a1f336e0024d5ffc5681b480dd7
MD5 d00e59f22da95e9114ad30f6439c4e1d
SHA1 bde1d38fb6539c453243aa58868790a0f1d2cfd2
SHA512 2d5cbb9715addda770677ca8cd59406012d6b98ade970ffa0970cdf1fdbef4144710d35ee8ee7af11578be8b5999416b5a676b639157750eb3405b00c3a06ee6
SSDEEP 49152:JZV6DfipvkyNp8fmlSxQitCnXOhqVj3u3qO9E1a+:7V4ekyNhudCnX7jS9ur
TLSH
T1E59533AD462B5E11C19992F07DA81FAF3A44416550E9BFE83838EEF32C2A3613C5774D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InputCapturePlugin_x86.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\trainerlib\InputCapturePlugin_x86.dll
Size 1.8MB
SHA256 d773f027822e2620a691efb6ad84c7bb88f97d164e4e6406d560bddda8ad00a1
MD5 9fa6c39348c37c39dc8d662add322eaa
SHA1 4211dc4b407f0ddd4b5ef85e82c232e655d894a0
SHA512 6d2a58048452b885ce58085accc99631fb5f72d96237a270b87acbcf7783f4141418f54b0ec7ddb93f251c2abb5c4e270475ecb14c1900b16c43812f2570cd1d
SSDEEP 49152:vpuivmR3MGc21F0JR16N8RXIppzgeRPC8Y:Buivm5pWpXITz90D
TLSH
T1F38533DAAEB24C4AD6307D327D905A182208E1D5D1F452B66A3CDDDCDEC311FAE3E984
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TrainerHost_x64.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\trainerlib\TrainerHost_x64.exe
Size 13KB
SHA256 47bae20faea33da938e2ec88447624a8b5e33f694493e9dc4d002c9eaf82f320
MD5 8b171bbce44dd81dfd4903ee34707cfa
SHA1 604af572a6eba318739fd13d8e062426e7f86e31
SHA512 14ecf4afa291019760d4cd39edf8efb60017a0a8cb6b1cb50b1f54d826c6eed8b63a961d31625a8870a5463ee710dd42b7af7832ca8c883ef74b2d07a7adf147
SSDEEP 192:Ssv4coNyEIYiYF80dmL4pUQPn2wPn03uKnULc8pq8RqpJW:SsADNyEIYi2mL4zn2vPUy8R4
TLSH
T156525B63CA945C01DD239F70B8E19A23AFB2F6965DC1C2C7314CC2158F523422FE62B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TrainerHost_x86.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\trainerlib\TrainerHost_x86.exe
Size 14KB
SHA256 73873c23a6a0d267fad23d13ce79b22d16049062c79ddeda707edaafcdf0d88b
MD5 f7717582d6bd4ff2d36825cba8913093
SHA1 8d625a157fe0256815fba3dd1b62801b39b7bad8
SHA512 ead26d7f90b5877475f1d592ff0842820f847744c8f5340d0564152a568d29b9a52a3ee7bf250086f38955bc9bca0f7a24bd067b76293f2991a6e92dcb901fb4
SSDEEP 192:fs+gckSNyEIYiYF80dmL4pUQPn2wPn03uKnULc8pq8Rjad:fs7jSNyEIYi2mL4zn2vPUy8Rm
TLSH
T13F626D63CAD44C25ED278F7078E18A22AFB2B7965DD1C2C7314CC21A8F513462FE62B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TrainerLibPlugin_x64.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\trainerlib\TrainerLibPlugin_x64.dll
Size 2.2MB
SHA256 d8e854db1dd67d7b652662e494bc4b860e28f8fb4eb8cf30d478fa312d948941
MD5 3173d9c3de220d2c84ba819d3332af0d
SHA1 a6e57043d04e7743024dc627f247360d7e48e647
SHA512 4ae8fc3ebf39bd6c9f24053399f0a4ae22ca107ba447d408f270a9a4ff4c086bba9ce63977387a8c60278b992c08a135591a09d4fd89a58994eaac82e3a104d6
SSDEEP 49152:ERZpeVNTaMc8/+0pweMH88FkkjeOEgsUacaWvVJhidh:Om5c8G0weMc8HEgsUpdJhidh
TLSH
T17FB533C95AE04E14C82B49B90DA07E2A4C8313B89B056FF5754DC9A74749F8F9CCEB63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TrainerLibPlugin_x86.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\trainerlib\TrainerLibPlugin_x86.dll
Size 1.8MB
SHA256 a780a51b84fddd9dff5ea5b3a1121139eb9b6264833c5fb299b88cc8b61901ad
MD5 fcca267fae3f7bd4f51b97fe9a2c55bf
SHA1 b29a0ebbfcd854fbe7eef3add2b3bc9a7f98c008
SHA512 bd8b4eeaee572a6b9056d3b66f2c4e5cf5f1267457c4881ddf8f67ef1e97f215f189bf6b83feeba5c28af01c9f426d4f4515f3c82a220f684fbcda34964ad720
SSDEEP 49152:Q37SefOvPaspIwoUFebxHuLz1Y3F9XbYfCrjzd1Uxi40w80RQhb:m+vPxFMHk1YVFLrXd1t40N0RQB
TLSH
T1A69533D5A1E5EA06CD84B1B03889F2D108AC277A18F1A54B60FF47B91DE16DC27F9BC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TrainerLib_x64.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\trainerlib\TrainerLib_x64.dll
Size 3.1MB
SHA256 2da6d8b4bada40746dc30d360549a50dff0c5fbfd7aa35c416560930dd643fc6
MD5 594743e685e0a7093d48385ffbce04fe
SHA1 fff9ab2ba69eab9306283c1d30f148bf303b9d00
SHA512 6cacc2ad85b6abb0876fbbb1caecefd3f762d6287f51400f76411b087b40a2a281d428fc5cad2eb7c49573d77596badbc5949754782b9e3286492584af21a56d
SSDEEP 49152:vQ7GBQivbGMtt8PWfuEzwI5Jxru/Edg3whTPflUVVGHU+9OacSYxOX43gv:vz9vFQ0Bxr0Gg3whjiVVG0+Qac50o
TLSH
T18AE533066DECFC54D12C35FD58E8E5B08B6FE1878D98EB4BAA6B264D0D0035BF939244
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TrainerLib_x86.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\trainerlib\TrainerLib_x86.dll
Size 2.9MB
SHA256 4165aa7431fb85bdb33f223b1cbc6f1280df50cb95a748a599ea64c447e89276
MD5 d116c39dd419e1240e2530fc76b2b419
SHA1 f6700699e10233b28bf0f822c122680c826432af
SHA512 e48ab16e1bcaeb465960c94bf5046adde5a682bc8a955ac2109f024a610d1fccc9901709fb30866b165a2da776a641562e2eea064d318cea17428a1783795fcf
SSDEEP 49152:iVZ+Iu8OKyw8J4jBFZjPWr2Whl/Eo4Sqf1EuuE9jEwhzUTDCmBr52BWQe4soUkj:iDcDwS4jdj+C2/YvSuusYwhzkCmBr5e4
TLSH
T15BE53321BE425F17D1E1C57E644F1AFDB190CA3406C9E2B8302E5957269CA2EF3CB91B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TrainerLib_x64.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\trainerlib\stub\TrainerLib_x64.dll
Size 15KB
SHA256 62482b67882023089f371a678b5ed9111d46ccdb8c4b24db26159d5fd7cc49f7
MD5 b5b4b140ef1491db0268643a8ca38801
SHA1 62aa81588955ef587fd904fd5cca307cade22f3c
SHA512 4deab14d722c24da319a2ab2c70f13bbd81257f15f266692ed03ea4e3400bc307671f80938988448267c412bcddd2692f8c8275c82f60897743321f3d79c8f6f
SSDEEP 192:CHzRAg8Q/yAbBPd2QGmI9zl7U7hhp7DWpHeLWwsU7K6CYvo8Q:CHNXdjGtzlw7DGNMK6jw8Q
TLSH
T139723956DAA00C56EDB78AB0F0F48A1DBF71B70266B0C3EB5328C1051F4778331A93A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TrainerLib_x86.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\trainerlib\stub\TrainerLib_x86.dll
Size 15KB
SHA256 12c91f0b09c2e567ad0071d9de94ec264723d914d76965a2c8972c0aed548cce
MD5 e78825b0a9b5560382f87dc11a51479a
SHA1 407def99c1ab4d547994f5320643c50bfba61eed
SHA512 f6d29f689027e536c7c110618303c919f4b57730dff9c35c54cfd0758b2aa6fe31b484238de9f1904e0d6832d2262a20b07268fa9cd906c96df3a60b5fb86295
SSDEEP 192:k+L//6W/+eI9jeLJJdjOKKxMdZnrzl7U7hhp7DWpHeLWwsU7K6CYSZVR7h:k+LH5+eIALJJdjiyvzlw7DGNMK6jSf
TLSH
T103622C66EB900D82EE6A0F3070F596199F34BA501AB4C5F7E35AC1091F467C2FC6927A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tophat_service_x64.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\trainerlib\tophat_service_x64.dll
Size 6.9MB
SHA256 25733dfbcf7365381cde67d65ee0940883557f0e09d334eb92e2c50797c908aa
MD5 c8cd75dccc1dd5546d58f654c3323a7c
SHA1 1487c51300694989b13c20776a13f57be9da073f
SHA512 927b4385acb4aed7af21e24f12c246b94c4adeb8e27835228da7b9ed099d0f9fda217389cbc0e68296f9ca281d6dc640ce87719646552d4dfaedf677c6d6c042
SSDEEP 98304:rikqUr3z+YV243vs12SSW1UoSaTXhAMzSlrNR5vZ8xaKX0FhLC00DRc6yzv6pX:WkqwiR1LSjoSYxJ2oaPecpDIX
TLSH
T18376337504E5BDE6E0B613FC3D15609D9B6272A20F9B4A79F40F1B95422B24ECFB3608
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tophat_service_x86.dll

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\trainerlib\tophat_service_x86.dll
Size 6.0MB
SHA256 ba2f7ae208eb4fa17733efaa1efe2279824cd7ab88cc2cf05a3244130f767ad7
MD5 ca847c98414c17840f33e68e377ded4b
SHA1 b9dc6c2f7399de938cf708539bf0607bc29f2fde
SHA512 6df8f3dd74f324c85c3eecf504f28188fc0136ee8dfe9be383a31e3a2fee3a39311760a1f8867d3285d971d130588dc6db4097fe8fbb57c3b6d5f96e0082d810
SSDEEP 98304:jnA/Z+zbds9c6H039tr51sUV/MA9Zy7mgaVs+NMXGWIp8dnxOIav74mgk9:jnA/gnduH039H1JM0U7mhD6XGSn/av7l
TLSH
T1085633E241D07EC3D66593BF2D1381428819FA798F432278A1BF8A96534768DCBF4F64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tray_dark.ico

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\tray_dark.ico
Size 5KB
SHA256 4f01a6f2106d87f9fd93135caeb2ef9bf82c02d863c3fd336bc68862d8cd665a
MD5 f1734c061b6ee781cd045274831970b3
SHA1 c406c75720741ebcfee4ac1ff4d32b82a1514fff
SHA512 317ab72632b57d72cfa03cf2074dfa9eb1211713ae00a59364d695d6513127f0fcdd052a065f445ad918cb5d5083b74601ac98137a62a8f08b6737f41209996f
SSDEEP 12:NL7PjcM3H3H3H3H3H3H3H3H3H3H3H3b9oooooooooo/oDEfXfXfXfXfXfP5tZ5n:NLHx
TLSH
T1EEB12E6C5A8094DEC37102309CA2C6BA2977BF11155ACD07359DBBDB283992014B166F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tray_light.ico

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked.backup\static\unpacked\tray_light.ico
Size 5KB
SHA256 5f6645557b6717429e109707c355f6daa9a95ba84e282d5796948c3a8448d1b6
MD5 ce288629fb3ba543c38d8ac7a8abc416
SHA1 9dfb7368c4b8116ea6f8127ebaaa689c16bcdece
SHA512 7f83bf57816bb3ec918b5829d8d8712004e769fc12498f698e3afc6695929e5d9f3e55bb429444182866a5afc7ffbb20e1196897dac7a099fa1b4e9070570296
SSDEEP 6:NfhlNTssssssssssssssssssssssssF1assssssssssssssssssssssssssF1TsB:NLfJ5t55n
TLSH
T1AEB1280722009ADFC37002305CFAC6B905FB6D11756ECD0228ED2FCB3821D00943164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

88c3d83a890fbcd9b71e.woff2

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\88c3d83a890fbcd9b71e.woff2
Size 54KB
SHA256 48660c7833caa12666fc0d6d95c56da652aa474761f076a021599e27225f3baf
MD5 8bb32179beb794ce8908b7a10d67a859
SHA1 3497db3b46c58ae15459f6d1120cd7a0baa8b625
SHA512 57634a23e0dce12a47bf1c6ea5e30d6d2ffd2e4d627cf43f2d691ed4e9c506e1394c389cb91159aee56a4d544d2b65a9934dced8d2f37445149578af9aeeae76
SSDEEP 1536:irsa71vPQElqf04Unk1K1DBemYi4JgjQoq9tjc:anhvkf09ko11Dp8tA
TLSH
T1804312DFC6BF240D478680FAB3EEC801DE994601BEF72BB1B7257411ABA5C04796511B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\LICENSE
Size 1KB
SHA256 b9ef82c0d568eaf5a65ae75a51371e7c5927ad203a6bfac12b322c5dba68d911
MD5 6c9c22e9cf51d3fb4b1ae1ae617dfef7
SHA1 e90eef25bb92f565d1c5d074f6d4edd092553110
SHA512 ee6532a33413e149cd37501ef5ed4979fdc830f30b5608171e85e13bd0994095640c72d6bfcb7745b4a838ff61a210764ac5d930f125c37c24e7331abbf5b129
TLSH
T18D31682E325453320C910390966B5CDAF65F714BB79F1280246DE288227B43DD4FF8C4
MD5 SHA1 SHA512 TLSH

Submit Download

app-02099b0a.aee5402e264b3296d35c.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-02099b0a.aee5402e264b3296d35c.bundle.js
Size 6KB
SHA256 2b5d25e7945979da41e1053d1c5e737bda7040f95a05db78ce81b238dabb8c4b
MD5 e1c2a739fccf80cec8a35f11e478e6be
SHA1 1ca1e276dbfbe51ab56ef813e86da627f5d7bc08
SHA512 ffc46b964268c651c1350f0d32adb2fba6d2be32d31b7da6b7eea6b3a83207ad93df139cddc032927e3c772677448bc679d9dea0bfd57ae9a94ec77eb1ecc591
SSDEEP 192:1QJUVA2tuR0dTjKrJ+1vP2HwrHBq25utrtzdyu2:SJm1w0djnrRKdyb
TLSH
T172E1C6AB7120539036B6C9D88E950113C32465AB3006842DB26CFCD75BCBDCEBA756BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-035da886.434c9b9b20571221a627.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-035da886.434c9b9b20571221a627.bundle.js
Size 21KB
SHA256 d6a86f5cf3932d5d67a4fbff686bcbd400e91dcecc7f8104f8fb30686a8b367f
MD5 974f70079445d722c41e80a3ac4143cd
SHA1 35cac6e1b13ec1897fedd0ab361aad16b2a620e5
SHA512 ec79dfc98d7c58b831fc846256b55c257d63f41e1b6483cceec407d65ef9aa43f3616ea2065d8a5df1b435e9ee0e489141a6aab158fc75802bee6a024a07719f
SSDEEP 384:n2SCOfONrPLHHF8c9dnKZnKWn7g3hGf7iyKILIQhSDMrM:n2SCOf4rPLnecHEjn7+hGf7iyKILIQkn
TLSH
T146A2D8164374CFAE064B12ED6B26412F31F06699F670E2C1EEA5C07C15C574E90B78EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-03a32c32.6f38d13324dda85cc0be.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-03a32c32.6f38d13324dda85cc0be.bundle.js
Size 41KB
SHA256 ff5a6b4ef880d3955a95ff32e0dc182e59d530d0726476277e8db1bab4354ff2
MD5 84038acc1c5c37897f6ebe4476a9666f
SHA1 c22333806a6e1384bec609af9df43d56e01cb70a
SHA512 222290036cee048d3ed33d5cfc0ace2e059675dc2bb919169618ca5afbf9f2c857e9962cd6368bc87ef2810f606c75c7cef0d31c915abeff8ca37f43cb092df1
SSDEEP 768:bhkpYgV7ddWy5gsp+XUywiz3VYm5G3BVe9pPcPE9I1BdyWK0X2X5TDtMRZg:1kpYc7TLgi+EYz3VYCGRVejPcPf9Kc23
TLSH
T11813F7701188E53DCA21435CF399B282932E90DADF614D5CEB4D517AE487C8EEA7B3D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-062a0c87.c1e067a1fdb439e2f5ce.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-062a0c87.c1e067a1fdb439e2f5ce.bundle.js
Size 13KB
SHA256 55da3f1a47509f244948d40bcbc3557e55ba5c786128021314e5a7cdd3e408cf
MD5 23545c47b63397a7fefb101cecf5fe8e
SHA1 d86e9619c69139d8d5d6cd3c7853ab4a7e066ca8
SHA512 eb750c33d55acddd8d75ab2897106f18c7dd6b521029aba88dab825844d2339d876d142844e8be11b15eb065d6d2ddff7be801b28cc4c14973d65a952407de1f
SSDEEP 384:GWCbFIumYzHI8X+VG8xZ7kUNg/CmfYaW0/MO51GKVFtkhpdk:G1FmYzHI6+VG8xKqmfYH0/MO51GKVFtR
TLSH
T118528413F6F33A9951A3C1435122B72CB1396532D7E729BEB546A6ED04CFD8813C5B20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-065e2cde.a4736ccfc1029d50e012.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-065e2cde.a4736ccfc1029d50e012.bundle.js
Size 60KB
SHA256 b2683b5eddaefafc2b0df51bb15aed3be62134caa2155b7d4c0a6b23a9db4404
MD5 5dafc514eb8360cfa5fb4ef5e49db499
SHA1 7f53c54711c0943d3454d601e1dccf231816f37c
SHA512 6b942c629725c1d71b8cc0ea9d4609e46ada72d4fa72e8351c6fcc775dde063a16cf6111f670080a0e0197c8323e47ceb218c7b7ba4d6862a384ddc94c73e1c9
SSDEEP 1536:RM1ZZYhSkVSB115J9d55J19BYpz+Cd0xvRzx3xzTIikJwEX1wflCGGlhimk0TTJv:mL0TTNe0oyvgOg89B
TLSH
T14C53FB15B1A1377CE1AF50AB90C616B86231C047D623097CB3ACD3ADCDD6AC553A37AB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-06864939.ad222b90cb75bb2e3cc6.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-06864939.ad222b90cb75bb2e3cc6.bundle.js
Size 17KB
SHA256 d248aa6642a1427fe2bedc83999f86f838e015c8d8ce12c7c4291611574c5367
MD5 38eebcab626e6b34af3f36b5f521ab96
SHA1 5bdedefb450107077eec8f6912b6018e497653b3
SHA512 ed2b7728c7d5189e7c0ce27b0324d2215983479603a6f9cc1d0cdd4ed5131e1097ed992238bb21af1b705e3c5baff274a101c2abe39efc764ed5f62383f2c772
SSDEEP 384:x6EsABK6dsbNFjAvad9P9o1HuUX8W3TZqzDnefC7vf/sWN:xTBKSsbN9Avad9P9o1HpN3TQzDbTf/sg
TLSH
T1B9820977335512A076E358DCDC120901C21898D9781A447EF39CFCDA98EBDCE2ABBA75
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-094a33d8.a2841b2b3453c631408b.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-094a33d8.a2841b2b3453c631408b.bundle.js
Size 22KB
SHA256 d653bc726252ceec1c173e914d218e675517b1c39e8223c8fc27f9cb0c2206ed
MD5 5e519e90ed7bc51c6897f4dd8bd40422
SHA1 f818dd9ae84be5d5f2437d12488e26bc0fa16aef
SHA512 599a6d15ef274032049f1875e47c8868a44674748cfdede1fb342ecfe0d52156bada040f29cbd98e76e65b9381c99671e5ac8da96d81dc4a89f4463b2c881755
SSDEEP 384:tHy9pHS8G5HpZNAWHYSmFydF1gpYECSHY5HESk+HxGJHyTHdjv6jhfhHYDsHpJHj:tHQHN4HpZNpHYSmxHY5HESk+HxGJHyTk
TLSH
T184A2733E642D3A2CD26670E67CDC658861B0E058DE42337C7369CD87C8E6B516A73F94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-0a6cd8ea.1142843656f7d96e118b.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-0a6cd8ea.1142843656f7d96e118b.bundle.js
Size 214KB
SHA256 beeb1018daa762a48d63a9cea6779403fa6611c1570db698aff4e817e5c00cb5
MD5 a6f7df579159fccbb8855791526adb6a
SHA1 2530839f14f4a8ae1176c7e8b16326592e7f9028
SHA512 aa3bddc50d0a9ac0532541d9b8940fb28deaa6f2e71b0f0ca28a0ed8900c0ed7c1eb43fa39cfe8a741507071a0dcfc60a4c959fa59c037cf69f759d7fc944514
SSDEEP 6144:uKvQKElVdvu9kouXtIC29NZUl6z4ZajUpeI8EKZnXmVV8jQbRt6K2lsgkTZW:b
TLSH
T17524684CD7B8F3FE2DAD7ECA31494E3BC8AC25B8B3B142A356D4F3A65448C6420B6551
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-0ceb1539.37d4567ebfa559865a76.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-0ceb1539.37d4567ebfa559865a76.bundle.js
Size 127KB
SHA256 0fef42ee959c7794162f4bbd199cda2414f336243312e87374fabb071e5b7c6e
MD5 b4ecaf3f2da1b7c9a902ae62402405c8
SHA1 6e099c8d394cd4e1d708d080dd815f7bb28359c7
SHA512 ae336f9c6022feeee5ab334d3fab8499f5ef6bdd3fcde0d12fc97eda7b0395c5ec7c5979066a506c9cd28169cc85e4136f59f823b79e0dce2232d2795fd7d2fd
SSDEEP 1536:xRliKj+sIFRkIPjpFCdjvlbNgrXzgwqEVxhRg7ePOfDCrWKI0pywue:J+TFRX/Yb+7COKlLCqKI8
TLSH
T109D321E4AB60E9FD3E7B82C6A0860B3F40AD58CCF56145F7F6DEC538221A9543076E58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-112af3c5.7791edee9ac667d1651b.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-112af3c5.7791edee9ac667d1651b.bundle.js
Size 11KB
SHA256 28dd36d6eae8286e294f51171966eb555c876def535287ecc86f150de805b9a2
MD5 14802f172bdc6b5530ccbf1ff06ed0af
SHA1 a27e52b1002730f33abd8ac446cbda1cf02b4234
SHA512 ae60919f78188b2a4a47d290d50a0a92c9e9223d0eb610a7f0942d7a51adc552ff7eb98df8198756d4a1c64d56c8f5ccf85831a91a4be44eabb8e128413e25e2
SSDEEP 96:aC5EreQxs22ufe1yOHx+6I/2daySB7imriGdml5TiHx5KXQYRHQYkqQxF9PJuzBo:8UBTu/aY5VY/SMph3e
TLSH
T15132BCDC13583F942063C2BE53E0F906EE3A88817F0A5E5E725F15674A93A4DA137BE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-12cabf74.e29f647c442178b72e26.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-12cabf74.e29f647c442178b72e26.bundle.js
Size 43KB
SHA256 3cdead926441e160ba4cc17a38c66aecf48a8d1d0de140ac6ce31ec5185f0d4a
MD5 8862d5ec98629e13dfc25da9e565d79c
SHA1 dbb93b34c52ac45ad53a5df8124f242dd73da574
SHA512 5a100f95d6eb79ecb80a873d0091244162240a1f83cbf4ea8526f28294a422e84b7891d59d4adcd49ebeee67b6d3362493b277d5b53f8eee8e1e302593db6517
SSDEEP 384:sUGNJZYLiyYD/6U4biWX4uP1SdX4XyuYMeMnrpllSa5wLl8FEvjhtS:sUGjZY8D/6U4biWXb1SoYMX+vLS
TLSH
T1C213B514E394232C291B42769FCAF74DB235F0C292320B39F5AEB2F55EC61DE7522258
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-13fa042a.e4d156bec0c099feceec.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-13fa042a.e4d156bec0c099feceec.bundle.js
Size 14KB
SHA256 0c423a65bcf0b9b98a039e5137cd99c1b93609d8188d395b3274c7971a153025
MD5 a17cb221e22135412796b0ffbf0a4ac1
SHA1 a505c4e219fdbce9044f8ac2324a7d0f379c3f77
SHA512 681abec2513292bedda8b6e0545d09b4a3bd1481b400494e8ea3b03cc373449168692b76663ffaffbe260e057e5bda3086bbff7db4b685bab0afbbc8c3a3c135
SSDEEP 384:DIt04YdzWMsc+Eraug3jtec9yeljc9+phPlXgIZYW5Ij1W:DIt04Y+AgTteEXljc9+phPJdZYUIj1W
TLSH
T1136294B032B421A6E2A3A3ADD3D13B3CA0356CC6AC121D65A76DD79545C36CB9302AF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-1487bd54.76d9325ad7243c9c31d6.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-1487bd54.76d9325ad7243c9c31d6.bundle.js
Size 127KB
SHA256 6c11700a36cc2e9cf70c7a3e6fcbd2e83072e4c89c591de51b4fd56e2d355acb
MD5 fe4d66ab35218c5c2fcd2aad785cc951
SHA1 40c17c0dd7038bb2b70202f7063fbbf47ac8ac6b
SHA512 2cddfdff120c3ea43bfa0554efb4fdc90d72cd145a1042bb1f5da8e75e7c9009190e74ffbede678e012a418bda822d45eaddd393ab9488d7cf9a1e57f9a4f19a
SSDEEP 1536:tjBtiNjkGvOomrGakmZp+xPIUHlUbiCnxu7DJa4IKK:KnOou+w2Uhr
TLSH
T10BD361A057A1D2AE6E2753C271562B7F91B968CCF96211F2F6DEC678339CC44703EA04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-14a33a3a.f5030beb39a23f6f953c.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-14a33a3a.f5030beb39a23f6f953c.bundle.js
Size 124KB
SHA256 ad9d2b4104f4704802e8d8d694c0ff152b026b7d0a93500f5eec69888b5844be
MD5 f4683ba8f62b9ae2a857fb290eb9403e
SHA1 87c3fd82d5711ececb1277d7cabef0336195b0c2
SHA512 570e0fb868657b714fd378c3f42094d922e485c710d1eef32d7a5318fbb4a3815604c56c8d944b666b46df45b61957b66371e8667e4ee1b6f45a280313e6903a
SSDEEP 1536:oj+kqiy0M0KltZ66SuMj75qOPX565HGGulOiqAThwyuj+mMNhv16ZbswcOHWMwrb:s+BuZ/565HKq1yuSpAcOKYsR
TLSH
T1F5C3BDB3224EDD9879081E4B352E33856679AEA93FB3F8D044C8155B62F47199432EF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-14a492d5.b837511aa6dd88b60ce3.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-14a492d5.b837511aa6dd88b60ce3.bundle.js
Size 7KB
SHA256 0313d3bdc6c268f2abfaa9986100ea95cc16cef9a33f8d93c2b053ec6b4419fe
MD5 f8e5b6db6fd3fa06680853b1f9fac400
SHA1 bfd6c38276860b7b3548323a4e98d83fdd0dc4e6
SHA512 f6e1460749e20b24289d3decccf5b6d5104c0a50defbf6d5bf7250fbf304d288f54f15ca5fc07855f490076bae6da4797bc6222d8c69ac39f0bf3839561f77b2
SSDEEP 96:udYzGDZnT96gmJlyOFFplWOeaYsAI/daAgSL1lewPZ3szmKszMP6f2vkalWIfzWn:uLAgmJlyO/COhYsP/QaL1lemcFa
TLSH
T173F17532752329C42BBBC16FA85922111311725EB42E947C7CCC69EA144DBCC76AB37F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-1602c1b4.bc029261b6902839b4a0.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-1602c1b4.bc029261b6902839b4a0.bundle.js
Size 64KB
SHA256 5269f33ce325450461318759c12628c8dd4b11d724e509ca0083628ce4f6888b
MD5 9a8bd7a40aa558fc23dfee94db277afd
SHA1 982ad9c8f0843c46b6cfe0d39026680588bb8480
SHA512 de66478772e7c26dca48890d10acf5f6455ae64d014881475ae335f031038a7b20f973e3928d79e3817044d7e4c1090e6b41b70ec80a0ca978f81b939eb6e492
SSDEEP 1536:lysDzTy3NJM8F8LL8F8fBTaEIqa+YwNcB6ASGzvRju7/F9K+mW3TG6J4itJfOTtq:l7Zfa+1N
TLSH
T11053F960D0B626AE67EA85D153950E12B3308157E49316BCB25CC6FDC9FFEC013AAB71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-18439c78.06a3b8aa4a595d55d14e.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-18439c78.06a3b8aa4a595d55d14e.bundle.js
Size 7KB
SHA256 e7478e374cf9edfd4eb97188bedb1051f24475c68ed2e43695b69cb6fc28b70a
MD5 7656485915dcf472d145bb631de85625
SHA1 ab1a78569040ce807805558ff224894d01d459c3
SHA512 3b4f51ebfb467b163ab4605ff1aabe0f72e3b9ea2fbfab3320b3440e1515cf0666b488662a29b582aefd69d9504c34682229f4851d38042a31619d97899a9985
SSDEEP 96:JEKuY3vmdXhRkL2Z2ROLGVLgCicYUHSoID3XyASZwvRbHI449pUV2bKw7PpAk2tS:JSY3eXhM/9cyFZwlc4e7PpAkQIVv89lM
TLSH
T1CFF1B7243591673DB0E2D4D669B41802E331D857B0B380BCBAA8D59DCB9FC46B7B4778
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-18c141cb.d4c2f9a98b7337e007f5.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-18c141cb.d4c2f9a98b7337e007f5.bundle.js
Size 22KB
SHA256 142ecc7ffbc837ae11f76f22ca19256556e22061e7c2647c16ed4fedd37e6370
MD5 daee7267b217bfaf59532c00c9d0e5ca
SHA1 5f7c8f35066bc94b0354b8153a876e60d0169153
SHA512 9bde03dc6b538e520df37dbd67e95a737cb302c8ef4df9915e773a7979ea1c1f7b88efae7f5dea34361075a954c55b76d68db92754dfb71ea4f694e452caffc5
SSDEEP 384:Qh+mbXpmbjKxILl/sudEmjJIYVUH1IzSHigz6L+UC6ZuwcC3MrCQ5cvR70wtu5aq:0P7pOexILyudEmjGYm1IzSHigz6LPZu3
TLSH
T1DDA2C8BC33712664BEB592689D851222D704949C389E40BCB1ED5CE7BD4B8C6F369FB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-193f418b.3cb9a4e7df819eb0e5da.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-193f418b.3cb9a4e7df819eb0e5da.bundle.js
Size 34KB
SHA256 61e1a603db37a69cbcbc02cea53be906d542e96371d51e4a2c7c0940e04a2ef0
MD5 0c79e3e2fe69362c638a11bee8f64f8b
SHA1 c602636ac3b4baa4036e40e9217d0bb38431f713
SHA512 55822c26c4be1c7cd9662b1012852db856522a317e804ada17ac35ebb013c40d73437111b85409899b98eb794e53ba6827f9abfdb0c87edbefbebf9942bcb404
SSDEEP 768:0c5JrvRmbgUAVvTZ6e1cz/8sOJv8md6BYWPY/45mHoH5H5MyETYBYqLVOS:0wbMb/uvTZ63UsWbd6WWPYwkHoHJ5MyZ
TLSH
T16BF2C793A1D13617666781CEA085500AB377F88EE14B5D39F60EB1D6CFD78D8A303B26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-195fa953.f598cb970ae156e74616.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-195fa953.f598cb970ae156e74616.bundle.js
Size 7KB
SHA256 85488ff65f5dad022f60866863ec4e3c10994b86f9cd8b6a69989da299a114dc
MD5 ef983ca1e076408d0a3dbd24d7ebde26
SHA1 b4099e793f7301643747c9d8515a212d649d4213
SHA512 4083b9baf5c25c9b690ba24d26fa7429f4651d50e1753d66fe01d58d3f5bcaf00b6b70a9d20ca5bfc2dc5da723a436b289a11508ba3f92ba3a697da6f6f1b260
SSDEEP 192:mDnBrMFozbMIAeKxxxAgA4yLs1WivQwWS2FkYmwMp2w:mjBgF2VAeKxfJNy41WsQwWS2FkzwMp2w
TLSH
T103F1B70B705571E9BE9601F0E867168A7F70580035524878F9AD88CF8BE3AFCD395E7A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-1c478103.4b43425695751b7be057.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-1c478103.4b43425695751b7be057.bundle.js
Size 149KB
SHA256 ea4b2d54e3f14bd2787055e339f4ca2c5118f8e5a1239f7df8a33a8eec630779
MD5 c015f4604857bd6bbd58c369e0eab1c2
SHA1 49f3db17f66b3a8a5945c96bca18f701b7f92671
SHA512 5a66f0b12796d8a3eafd0e861d62ee58d0d94412f53f3692caf514321db26c0af78d7ab44215af6348364c04be27c73d1902f0fe80eb8e61c9613e663ecda9d9
SSDEEP 1536:FpYH0/MO51GKVFtkhppwuECRqSXz97pmxiy8A:k0/MA1GKVFtkhpxCH
TLSH
T103E3ED0E41B73B2077B2451B91C2A79F2EBCD873C5722CEDD2575ABCC09F9C90626A61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-1d5d11a2.e7333cffaf037a514f72.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-1d5d11a2.e7333cffaf037a514f72.bundle.js
Size 78KB
SHA256 fb707eb343aa03f385d7d6982bbdb91b5e8ef49cd6a4939b03910640fafd26ae
MD5 118f6033ed340800f6d9423233292570
SHA1 231d94675816ff9cca126dd0dc7b08434121d652
SHA512 32ef43be3f7cd57552448ca0aa004d8f233111fc4fcd93312b6ddbcdb8fac753612b0be7c198620fb85ea273e32d0958213d28cda6fe414ad39b5895501e1d63
SSDEEP 1536:B63J/0PJaQunJ+v9OwjrVK5J2YYvMfSG8SZQFbI7aw:83J8PJOnM9OiVKX2YYvCSG8SZQF0p
TLSH
T17E73A53CD3E55CB58E2142F3284D36C561B65C9FEAF23AB3816DD8382A5129EF510AF1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-1e9f0698.a30cc4d2f9af6c6eb075.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-1e9f0698.a30cc4d2f9af6c6eb075.bundle.js
Size 40KB
SHA256 87346a22da020ed16bb4cf4ac880f4615b5723b49af4159a856f69380aad943d
MD5 2e514f6e904b5526b2e66467f1c6ab7e
SHA1 985ea3dcb9d03d560a52454e36ae5e1b41820972
SHA512 5f2424fcadd5fcfa660e4071a7d196d83ab639a0727415d0f147b06a74638f2ebe024e09ceda96184259241c1092181ee4144a82a43125de646edea5e0c16030
SSDEEP 768:o6bFaAcdbQ+pOetDPfK9PZmZA5J4h5ls9Cqh0nlq40KXythRlEcGqzFxK:TaAcXpOsfZ0J40CqoCrs
TLSH
T15D1319A56204184DF66B82FDF8D60B44C12D2A339502BDDAF37CCEAC91516AD2B37B1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-21604579.abeab1a529fe46d2e605.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-21604579.abeab1a529fe46d2e605.bundle.js
Size 63KB
SHA256 d732ef2cf742d3cc577d5471dc5bb45642adab215bdf0be85f9f02f270cae37f
MD5 848f913022736f550fd08c2541f71124
SHA1 fbec4df860167c742479bced922aa027b28a06a5
SHA512 b1792c648c5a49bae494c1a56c1d16de873affb540d8851b01ff94e28e1f160e9cae9d7f8d26caa36768f494ef9a4250862225121e4aacd5e6c82aa7cb5a6e36
SSDEEP 1536:l9z1z3P9OfsYpbEA/YkkParkahZj52PjQnybFp44DhYRwPsYIZbe5fhkP+FWHPeM:DyhxrFgpWn
TLSH
T10153FA11A151237C32B3C0ABA781A90DB315601BD56319BCF968D2EA49E7CDF637AB31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-22fd348e.28519520bf31872e8e07.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-22fd348e.28519520bf31872e8e07.bundle.js
Size 21KB
SHA256 9a247cc7943ab92d2d553b86cb04c72a2fc195077d975360c5773870fe147076
MD5 3ab98cf229ecdcb3d08133106dac070d
SHA1 86c62e2582144f3bedd0a611d7c61a18dbe22a9a
SHA512 bc04600326b10c57496de4a9e25cd7620858db9b9ee35029096e3537e3726def09a03a05f9dd7ae43460aae7946f982f56857908bf9f0c76a537503eb442d0a4
SSDEEP 384:glF1rH9CNo8ugCtYgYOaeu29lAzx9nyYaYkP0l/4YE0k7J3C40YcJy+185htkkCB:glbrHYNo8xCtYgYBrx9nyYaYkP0l/4Y5
TLSH
T1EAA2E860B172233D653780B395816588F365F09FC2722ABDF25DA6DD9AD74CA2313F21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-25029793.3afcba1ad40d5487eec0.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-25029793.3afcba1ad40d5487eec0.bundle.js
Size 36KB
SHA256 0479b8380d410521919db44b7a1eeb95f68ba4ee2d6f07c3748327521a10690d
MD5 1d4ba6ab34c7db4a66e1f32ace01bd01
SHA1 7fb710ecacccb135bf6a438b7caef2d4ef0365c2
SHA512 e3bf9dd1cba0fbee05a4eef5c11da89ac08ee020792d630bb12f27e70f035b35f134926775b03eafe43f591fb45f1c7fbc3eb41e1f17e6afe0569bbb804b0d24
SSDEEP 768:97TPOzP6Kl6y3bVjcRBOYQmxeuMXzs4Y6GEHDEVAYYPVksZY2JelwAYRhXP5RNqH:97TmT6y6YbsOY1xetXzmbAYoSsG2fAYK
TLSH
T1A8F2A645D2632B3F19A381CA13839604B367A8C3F196297D724672F498FE5C6E393763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-2632ebf1.813e20851a63aadbeb58.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-2632ebf1.813e20851a63aadbeb58.bundle.js
Size 47KB
SHA256 38e6a2c5c06bb001507adb2441c4d2bec0685ef1a1a9978d0434156da4b5dc9b
MD5 422bbd2cd18f374edcda573389111432
SHA1 04876e1b839001f011d545372ede61be30f20a72
SHA512 f5913d26e0ce56fd89c0f9757fd1be217dbce590c4db52705edee6a2f267f470202ac0d6fdff524538b4387d8e2d7dad03e0d0b4d318b1b1e92cf188bc9735ab
SSDEEP 768:P55Ay6uZxR9Wjydo3lUoNU0WjPUTWTOAVP+3k:P7zZx/aydo3dN3aPU+VP+3k
TLSH
T10B23E867450E23871E2C2FB795BE764E940CF19698038EC5F85E6E9CC19E31D26CA27C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-27e57184.3bca08fe9bbaa7d2d4ae.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-27e57184.3bca08fe9bbaa7d2d4ae.bundle.js
Size 70KB
SHA256 19106f4040a8aafa1075fd430c76c24de739d678f99dd12be9cd5ccbdaaf4893
MD5 6fce0644c24c76d092310c618f3cd0cb
SHA1 c0d5a518cd8de46dbb6819d8423be46d55b370ab
SHA512 f5d287f907636c726f64fce44ffbde801d7d391820928d685d6d456694c926c17ed21464e25684ab7df96eb33a52aa0a20cd7a4bf18672e566e4915e3c5ae77b
SSDEEP 1536:pKOlC0/RfxnckIxnFJP7FpNVThB+pIoOZCcy:pVP/RfUXppmePy
TLSH
T15663D9294DE94BB7162B03D2769B6F07A2E4518AA045CDD7CADECF1D00CCB84F17BA19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-28aadb7f.c05f191bea57bd5123c3.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-28aadb7f.c05f191bea57bd5123c3.bundle.js
Size 13KB
SHA256 9b6e6aae764c6d4dfd6b4a66c1ccb2f8d5617a2c3d1f78462ea5685a721eaa60
MD5 86f4d3cb858714e962f0d143fc166a10
SHA1 522a3b9ef676f1851ee9916e5bb75d208f11ec9a
SHA512 d05355f4998d6b2d6af2304b08219e6af07f5b3b1f8afb91ee84d8db96f673e88832abe7e3c30d7fdcb0b1db15f4720b1b20aa02ac50260592c47d7b0a441283
SSDEEP 384:uChViTvDu/X3JJd2ylfwPZLzAvSlMAss5Gv59oKsGc:dhViryPJJd2ylfwPZIvSlGs5Gv59oKsR
TLSH
T1E552E557727E3D65729790A4ED050012B6185089744E812CF72CAFFB94AB8CF3B6BB39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-28b38281.7dccf9c4aed5db2cd98a.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-28b38281.7dccf9c4aed5db2cd98a.bundle.js
Size 5KB
SHA256 0cb3cc96708785a2068d7badf41a41ed3d82c5c7ae25d4ae88a3468ea9305546
MD5 a73b5c49353123e63701ca4f613c73a2
SHA1 2e8cceb26ede1783b78902d180dbcd6b5ff6eab7
SHA512 226d67ec30a627b13b2477facfa7d67dd76366f7c864a42513a1c556eae1de7dad1a51e968717b9fa8e02e4e1d54990bc7f40ef148132ebee0b46e6c4aa9b72a
SSDEEP 96:cfhs8GJbiAjDJKs+KJJ0i9J3tgF678wu62JMTULpQ8NOPE34OnutGU7vD1/5CWMv:cfhs8GJPfJKs+KJf9J9gF678wuhuAcvu
TLSH
T1ABC1B5BAB0A2B423F65310F820DD811194FCB500570E9D61B9967DA36D57BFA7542F3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-295a36df.f0c4e8b1fba74d85a61d.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-295a36df.f0c4e8b1fba74d85a61d.bundle.js
Size 8KB
SHA256 66ec6a34861b5c0f017a1a3c1a7c42834b073c7d8b32ffd6817f6409ee111376
MD5 1104493258f295a9d3bce35a6c5c7818
SHA1 01a4c60b64b12300fe61f4c15fa2ec3c6e9d3f4d
SHA512 2d51d0db6c6625be946d67900c89b309f01f9ed1b5198694975de7ff41d23146ddb6820c353b3088d6b5302354c970aba65f61f79abbabcfd0d2ff43233a4e3c
SSDEEP 192:ufRnv1mOJ/fkAJ+O3K5ptqGMMLrRILTSkXGO5tXJ5nnLt9dji:uf1waNJ+IK5ptnRMT3XbNli
TLSH
T12B12308A33F7B6D137216C75ACB62103EA546AF4180E412CF15C28D6BA17EC5963EDBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-2b3cbafc.ce41411b3f210f23c72d.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-2b3cbafc.ce41411b3f210f23c72d.bundle.js
Size 74KB
SHA256 4c289f581545b821d18a9685560b4ba5be2472012cef641e87c8587fe805dc43
MD5 812daa0e1290bdd87ebbf29d2d8e0afd
SHA1 f97fa3a2a79821fc82f8961bc92a6fbafa799e04
SHA512 e8515cbd26561f531b18a0303d8af0ac5e69b4bc83711eb8fa76a79d8611e818e9182c6da852015c7cb388ac75893a347cc5caeefc13d584b719ff1b8d64e669
SSDEEP 1536:vZpPY6LqMrNYemt1fzZdApp61BugcXvhg1ul/gaZYUfysL0Yp7ZrI4M9th58llqK:VFKZdApDH7ZrI4M9th58llqkANn8xLpZ
TLSH
T17473B6C6A5A0323FF133926F62421A552776C847E023B878B3795598CBDA1863313FE7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-2ba0ca6b.1d34d0c5f921deb7871e.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-2ba0ca6b.1d34d0c5f921deb7871e.bundle.js
Size 129KB
SHA256 accdc945cb62a10a0a97c994dcee6bb6f716931089997997ed8c222f8365ede7
MD5 ca999a148b45497feadba05fd95f8a97
SHA1 06ee1b79246a2ac1feb042812b0a8490d3fc919d
SHA512 d0299ae25fc409fe7444c52e9dd5e5780fa483db638b0942811ce34a02504617a9122bba1d411e73799bbd2f3304aa38973e91550f5d826d0152c9f81744f06d
SSDEEP 1536:42Po9AYm7leDxA5ty2GeSDIOdSmcq+HRLGgEyJZNKx8Q3cgixzxOJZ3kw:42w+eaKIOqnGg/JPgmxzdw
TLSH
T1EED388456B98E3F9AE3793D225050B3FB0ACA1DDF5A654F2F1DDC4396398A44E03AE40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-2e66cb77.c2efcb0b0b058e30e3a6.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-2e66cb77.c2efcb0b0b058e30e3a6.bundle.js
Size 127KB
SHA256 b686178dba9e043e9e83bd639c85b9611ee83d836896f80497e46b21918add38
MD5 80757c31cccf4f5a388a21bff18f0c19
SHA1 13d084a67501131968fb40cc18af77a55ba0aa5c
SHA512 a55db4d4db81ecbc9f34d944a3d6df5a34d46effe5104f0a356959d0250ff751c89d65f0cadaa74a9bc440654692bff8f6f60a9ff319c6bf9aea5532c95c042b
SSDEEP 1536:wS4jnUUaBa7m6Ycj1Sf3y2oOAj01F4MxHXzQPq7MZ9Bxw8Jkl:C6bMeyiJXEGX9
TLSH
T1E9D320685BE4D1EAAD63838325465B3F95E854CCF656C0E3F2EFC53823DC944B13AA09
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-31743c5a.3304eed6d496086727f0.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-31743c5a.3304eed6d496086727f0.bundle.js
Size 22KB
SHA256 b38da09f4b50486304c2fa64f5939bdcc6d8b724551130e1ad393450408727dc
MD5 16bb4de93df6eec1c043ef650c249683
SHA1 dfe7b18bc95b266ae86078f973641bc66b6b9ee0
SHA512 56675a574ecf8d942dda42e05bbae13145ad8307fde9aacd1252afeff3b63bb801ed21316575e6d2f22343a713e4831ee98aff3745f74773ca7e48b26f4ff2cf
SSDEEP 384:BS2MlJPiKbjMUsHxH1k9gqmHQPTHLKHA7xD0lPZWVZeXRuHoYDvSU985HI:BSplJPXMUsHxH1k9gqmHQPTHLKHA7xDR
TLSH
T196A2A8286188322D9E7F51EFB9D23B8563719069F02125E4B377D15A8AF9089039FB3D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-320e7be7.9b7e5ba2c61085b54a70.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-320e7be7.9b7e5ba2c61085b54a70.bundle.js
Size 68KB
SHA256 c18a8e8b93b6bc9a16cc279a0be3a13c6caffee02d3c144d291cb094429248fe
MD5 cd11e28baa18ed5ab2e53a00f1527ee1
SHA1 cc01776c95e9e0e4838c9d5b2b91d029339b4b01
SHA512 4e191251934d561d655d33c97532e968e7e5a8c46c8d317cfc202e9fdb32d399564b0735cd1776f9a45fcb634f02795a9cd75209f3984ad4092732044a2a91ca
SSDEEP 1536:0BTtyrMTvzMxh7iQuzBYig7kkWl42wKtaKFxyS50n1WEg2GOSdkWLmdrZKt1kdqQ:STtysY+++hlk31
TLSH
T16C63947161803F3F53A74199D1722B1273948086D26776283BAED7DD8FCBC48925E9B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-327a5366.50bf8193655854969667.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-327a5366.50bf8193655854969667.bundle.js
Size 36KB
SHA256 3c7dac13910f3dbe6fcce1a5496795f82cedcf135443c457e8dc2b2da7a8d3ac
MD5 0dbdc0514a9670fc7532c6cd41545e58
SHA1 4dc5c18c5b14b0ca2faa91f63e8855a663bdc4af
SHA512 5806339d87be0d379182abc284203ebbd477111d524170d839ce10d12f4e52d67d6986e8130a160ccf0d999ccddb390916db7674a5ec962371c48b8a6b204ebf
SSDEEP 768:YqnEQyCYiwgw1lsSYCMXv+MIlRYOzUGUYatWVr:9EQyCYTlsSY5vilRYxGUYTJ
TLSH
T116F2E980A25C271D346784EBB185DD29F2306483E212A3BDF56CB5F9CAD59EFB306325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-33336cba.2f6753f12c4270127b4a.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-33336cba.2f6753f12c4270127b4a.bundle.js
Size 14KB
SHA256 1dc487f62d614664a72ba4f8693dd76f954854bbd47dc411de258136f1ee1846
MD5 0955485e7b04f7bd54d8b2ecbef7a40b
SHA1 de7004c087a18ca62628625e9ff203565b929ff1
SHA512 f5abbc142350efa75a72266710f572d6db78075edc21ee35ba9750c0974d2291d853796f38f33cf34ae3709c2d20c7d7ca04a845995192afbf2b6df94ea7fbe7
SSDEEP 384:WzTRAjVsmF7V3ji6uDC4kyCwx3mie6RYGLvmZ7gNMzdYtJ74:WRAjSKB3jihDC4nVhmie6RYGzg8NMRY4
TLSH
T168626452D011352CA026FA937351B40AE3E975835B1F013DB222B6DD8ACE6D7A3A17DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-35ced2dd.fdbcbc0b881d3192f5e5.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-35ced2dd.fdbcbc0b881d3192f5e5.bundle.js
Size 36KB
SHA256 d1cb9afc62cf54a32a216a7d0f77e050c3d0e615d628790cae631e1e954e2f90
MD5 3a3cf1082c244b42939b0b5ccecf1dd8
SHA1 f14862b43d66b55f0394b20066351578c8fcb53e
SHA512 ea90e940e513273699d6539da865d10db6130ab2eb43f0f1013e7d31e8e133f9d5e1a2f4e15508aed3aec46628cd8b53af7641ad6fbe952f946c2f241ba2130d
SSDEEP 768:7jxBQXoZSCrFNWQdN3FvlbtLZKYpifaI65pQGHCWlzwdanGkuWQMvPM8uqd:7VByoZBDr3FdbtLZKYBI6rQGHCWlzwdS
TLSH
T1A9F29710B110272D268F82B6DFDAB30C613090C69533653DF6F662FA2EDA9CE5D5278D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-360278c1.218f04e36a3380a13eff.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-360278c1.218f04e36a3380a13eff.bundle.js
Size 13KB
SHA256 5b5c679f938ae1304b874c3cf2211c6fb5a40d6eccd3777fb6d40751281e82cd
MD5 90d1bd04a69d04d55d509f6de01e09aa
SHA1 d61110635c39d32e82d69f263a97ab400b767996
SHA512 e43c17544b101be3e598051f9bfe43758eee377b26a074a8a59a9aa648a3067d25337729106eddeed2d4f8ca793696c8c3d10692bb35e245a9718004acaa9656
SSDEEP 192:w0lEbs9mIAWblbyuN9iRPHGOqrsshOur8H3doO5bn7IJIuhHlvjU18mqdetn8Jb/:w0lT9mIAsbyuN9MP/vBoOkpR2uY6g6cY
TLSH
T10C527309BC985834A56B44F79DE136C6F77CC2C7E620C6AAF24ACA9D58C398A5304F71
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-36811d6d.92495b938c90630e8570.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-36811d6d.92495b938c90630e8570.bundle.js
Size 149KB
SHA256 3e6f7db47d5dc18e6f9db3c594cae4139f261cbceebde2a3c7731362d7a56076
MD5 93371c3e6af4f050fb28e10fefc19796
SHA1 dd514a9ce195103af3696c9bf5b7e658fd2494a5
SHA512 77b6d46449e191400031d18cfbedf839a71824bb197d7fafb1e09b3b01bfbb0db5b0edca18f1a45b17ee7306811a34ba171fae0af25b06cf0cfed6f571d97406
SSDEEP 1536:yEiYH0/MO51GKVFtkhppwuECRqSXzy79GrYu4M:350/MA1GKVFtkhpxVX
TLSH
T1EFE3DA5E41F72F6176A2456B90C26B9E2EBCC8738A723CECD35647FCC09B4C94635A21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-36f34fc6.0ec7c8925044f035bd75.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-36f34fc6.0ec7c8925044f035bd75.bundle.js
Size 29KB
SHA256 dd426af0a40b9657115eb15eafa78c95a09ce6e857ca7d09868b37b926267ca7
MD5 6c9346179e2def60db44555ae7eb63d3
SHA1 64a2d489f17a23a2c9e884a919500982abf7fcbd
SHA512 94f5e2adea3c6d04215e55b1d605688f1fa971f040b8e3c0d08e2ab370902647d8eb156d4256c9cc1c1cef910475f698def0479f8d74266efbd51bb18803062b
SSDEEP 768:cSnL4wwyq5F2GehbLU9VT2LTPDj6tZ1D9Tsg750a3NYn80WI8:cKkwGexI9V2/PDj6tZ1D9Tsg750adYk
TLSH
T184D2D955B1901F2C256EA1E2FE407743A1708186932009BFF5AB55E6CFE68CEA387FD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-38f22538.4530cecf026c8012476d.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-38f22538.4530cecf026c8012476d.bundle.js
Size 148KB
SHA256 9f462c857807d743794d51f089ad5b6d347b55c407be599d0421861292cd7203
MD5 3d37f9a411c1b9af2d634477da5588c5
SHA1 7403bb722b8ea741dfa876869611280789432abe
SHA512 abf96ca077f220cbd3592d8b4503e305a50f408765e28011969a2cd27a7e1ad43a40fdd05c441b862ebd2ed897ba2a42c224b3ff17042f34f6298089602cc2a2
SSDEEP 1536:mWYH0/MO51GKVFtkhppwuECRqSXznadEfgCXq:+0/MA1GKVFtkhpxxy
TLSH
T1C7E3ED0D45B32B2076F2551B91C2A79F2EBDC873C5322CED92575ABCC09F9D90637A22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-3cff3d03.ebd7d37518c4216f1cec.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-3cff3d03.ebd7d37518c4216f1cec.bundle.js
Size 152KB
SHA256 cca04599bbfff81e628b34dd56919f84f98339beb2e44dc56827d56a5b795ba6
MD5 06fbd9ef68bf940c3b30f7561e1d2d08
SHA1 72a3a845e3148db934032b3d3ecec68dbfcba16d
SHA512 673b43c40f13cbdf69e93fe892caa711fbea990af603634a2554f993da80b071c5514ea8b79bd805661e8c5827bc48bcbcb7fc47d27957dd99c136be03a93d88
SSDEEP 1536:sYH0/MO51GKVFtkhppwuECRqSXzImV4PQWz6:n0/MA1GKVFtkhpxAa
TLSH
T115E3204D40B73A3073A3456B94C26B9E5EBDCC7385737CECA32746BCC49B5C9066AA21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-432c9469.3effe6cbf1aadd0274a2.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-432c9469.3effe6cbf1aadd0274a2.bundle.js
Size 7KB
SHA256 a81dca9ad37e282b4e8170fb6d3522c1fb4de6b9b573d330ef84243c1738856e
MD5 5a6cf8307dc72b1805d2060e5aceb00c
SHA1 8c7e692adf58e1b4c6bdce7ed01344f1ad2a276b
SHA512 4f91a3b3a51534deef6e9d4fa2d8e49939ab2288793eb03e8803bf6be953a39dd1395a08cbadbff69d71e644e51928e0c2aa1b812962d9bb3c8496badcb9e1fc
SSDEEP 192:glkXGnC01wpjV0H9qkSj8YpiTrC4ECjYjxX45xlB5/QVhDZyAvUt1X1uf98zHfS0:gSXGnfWpjV0H9fm8YpcrRotilT+WNX4Q
TLSH
T15FF183917184A1953BD744EE8C660506B3281419740EC4BCB268ECEAA9B79CC337BFB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-44888eb3.556fba2fa5d5e4016839.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-44888eb3.556fba2fa5d5e4016839.bundle.js
Size 21KB
SHA256 f019c347cadce9c13502ef95ea51619cc92ac8b4f6cea9cef0732d70afce1aed
MD5 0460d828302b8061ac7c1f07827cb7db
SHA1 d67b67c0121de1e252368da9b98a3a1897779cfc
SHA512 d9bd28d87a5d32768c6c76894353f5703cafc3ddaf27614c177eabf7494f12f72e924be6b4dfdaa2c276602cbd073b256824872d318f422703f6fe54108add73
SSDEEP 384:I6e21fVfcCIYi92VGrjONWSEr5oXP6eqhbQO5:I6e6e5Yi9K2jONWvE6eqhbQw
TLSH
T170A2D18665592DBEDA2F1944E04E9D65FE0B2F33116DE3C1234E021A6D31AF1A636F50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-4bd97017.c547b0a697ebb2b6ded4.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-4bd97017.c547b0a697ebb2b6ded4.bundle.js
Size 15KB
SHA256 d30a9303c26bf766ac9f9d570f29cb50224a2ca4d6be385410087bbf1d9c760d
MD5 dabc74df3993710145a7a6879fd25bf8
SHA1 a3a7bd0a8313c0acf718465f3bfcd19e8cac1206
SHA512 d9b0a00b3cd840563cc7380961559f259b4a0e952a5d4a7c174a274325dfca884a275414acda3a4b7d73ff2d06dc7f794635a5d5861a57c283b9406aa5fafc25
SSDEEP 384:YlTBKycSu1s3I8D0EGKEHIL99LzNNnOxGX7QeRv:YlTBeSuK3/D0EGKSILzLzN0xGX7Lv
TLSH
T13C72D7D25538006879AFC1E4E1C1591EF0B5A48AF226A33FE5EDEF7B4CD688D7399210
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-4c544976.5b24c4c93bf68b1581c4.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-4c544976.5b24c4c93bf68b1581c4.bundle.js
Size 8KB
SHA256 0215a88c56f8bbe4ea7bc229af106c78197bfe44dcf52cdb01319a2fedf496ec
MD5 6d543b5e16386ae2a5c83cfede4f0660
SHA1 4ef81c9c60c8bc15586d862470c1142337be9ff7
SHA512 93b484a3f8b268ed0acc93ecf1ef65ec1c34f7141ad9daf08de1e8c5d369f2067737fc208084c4af72cd68ffd26ca529ffcefcc5c50ea7852c265ce061594889
SSDEEP 192:C2lI/UZiI3PdjNzAp1A9IzGgzeUniY4WE5hCkBQWCAGl5Hbn:C2l4giI3Pdjup1sIPCU8WQhdiW1G3
TLSH
T18002B70A72ED7AB173D104E55C340523EA290158B4094079B66CEDFEAD970CFAA7BBB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-4d69bff8.2f6a95a29d49928bc52c.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-4d69bff8.2f6a95a29d49928bc52c.bundle.js
Size 72KB
SHA256 db0d6c721473df54dbeb92f13ca676caec6466e22a37b4fd84491e5073997d39
MD5 123aede448d52718c6f38b1281fb99b1
SHA1 127b1199b43dcd9327d9db0b968d4335a6f49275
SHA512 f0842c07f5296a90a3d13b2752c9ab8ee4b233cd20e87e3cc1a191a4c9cb0923f528d78b3c22d9147662058af853faf6308b668991eb5f9f7ed8c77fd15fa29e
SSDEEP 1536:8a8DYwOCJIY619TjuYteKix3yl6xYLt8NncdeY2B6wlYYJMyLJuHwB:hEz
TLSH
T16073C72681A021F952BF41AF92D42A2E773180E7F7230CBCB144DDED8DD99C163D67A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-4faf18c1.bf9f53040c2233d9f9a3.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-4faf18c1.bf9f53040c2233d9f9a3.bundle.js
Size 12KB
SHA256 4c5d19bde4c23ee710cd32c9cb5a43340400a0d777007143ae34128d2e602fb8
MD5 1a64b25b0fbc67c8ad4ef543b5f2d74b
SHA1 31e0c764e8ce5be9f84521cc78099d26e0d05b08
SHA512 f4fea2e9e7fd5b4679531e69fdccc7a45dff3d953c7426179368add4a2ddc42e20f9e489ef28938dfac0ee976fa6681f992e7d7d24d38c7613b50e6b2d4f3851
SSDEEP 384:jL6TPK0SZz/FVO1vI3WMlNLICPLpcuHTD27XiYFKUKyZ116akn2TYdBM:j2bK3Zz/FVO1vI3WMlNcCPlcuHTD27XL
TLSH
T10B42B74B6472261DA0BB446B9AC723146331400BA07149BCF3589EFAD5DBECB77623B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-6b76e4a8.683586a7230df33abab7.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-6b76e4a8.683586a7230df33abab7.bundle.js
Size 7KB
SHA256 8bf3a0bdeb770720b53b94e5966f4ea8ff6b7a5a37c7ff09669eda8829e80a83
MD5 1ec3df2c87106ebcc38952b119474493
SHA1 70797485394418a944cb1afc61c60a31b678ad83
SHA512 9c773ef18f0ab614cc84a6802eddb8fe69faa64a0e09dba69a277bb899854b51df1ca8d82019bbd51c62162b3b66e25a48e13cd362aacee8e67325cd7f8e6b5d
SSDEEP 96:eTxpBwzpzRpWZKnBPcXwX1p6983dugS2qUzS/F73oDhQVtEGhMUt4g3t42XfAw0K:s+zSKR1DA2nzQJ3oDNG2Ut4g3tTb1
TLSH
T112F1865B331151B4B3F6D0A9CD06122283161059782748FD3B5EACEAD4ABFC9B7C3AB5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-737a73df.bf1ffae4b67b42d03686.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-737a73df.bf1ffae4b67b42d03686.bundle.js
Size 20KB
SHA256 14c810e3b742b80c63d13cfba725316a7f2781f40c5ed239a54fb79d91645b7b
MD5 00b0d0b1f127893cd74308fe00ed7697
SHA1 d1f1298fbd6f665fc4cd9ed4167bec7a7892128e
SHA512 8fe0b6673a523cb9c4d37e54630dfcb30d4729a047aeb0a4cf7662d24a1e878bf68283637d4dd98964d6ad51e849955a4d946264ad3be2f6c1e65d27c69520bd
SSDEEP 384:tUmaJpqJC5k1ow4+3IPlViaGZ+U85U+RAi8bg8xFzd2aa1MUPbOM8MGwMGETYYkG:tUmaJpqJC5kWw4+3IdViagQ5U+RAi8bn
TLSH
T17792C76DF1611C3D38EAC0D3A5D6E24B31A5804AF532117C72ABA5EB96C3CCA7361772
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-770be0ee.2612286bbf967c9be66a.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-770be0ee.2612286bbf967c9be66a.bundle.js
Size 63KB
SHA256 513b2b1de6872cd55ab2674abda1ddc53236eba6c8ee7b413aa08bb2de229f52
MD5 eb20ce2300a24e9202fbfa8da6576bda
SHA1 95760833657ee53a7f5951e6897de245f850b91d
SHA512 39cc71dc1df5827913c879376ffacc06955e34a6875213e7c2b5039737fc80581fcee94c82d91c5ff20fceb540c65c1edfaa34bc3b879fccdf69adf095cd267e
SSDEEP 1536:ATaYilm/vs6tYFbjLOlYKYCX1YGgYGEgiDGlXOIvudcu7YwC:AT+Hb
TLSH
T1BC53C522A080123CB2E3F45A6681575833A8C0A7D43311BCF1BDADFD4EE659B53E6B35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-790ad924.7f72ce334cfbb453255a.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-790ad924.7f72ce334cfbb453255a.bundle.js
Size 98KB
SHA256 c13416bf1e17d1d813a855b32aeb900392580c92fb4be01cdbda40fae40c1623
MD5 347458da9b24e81dfd93a9274104003b
SHA1 25d8db54141bb2bdc0aa9c39d7ad19be31996ac7
SHA512 ebf26c2d230ab406792f36801ce0606f4ce3de4cadb76477a0caf3dad591479535abf5e5518a9ba496cb3a375e965bfa3a6b5119413f20944403e7f209f6cc4c
SSDEEP 768:btUYH0/MO51GKVFtkhpBzwuEON+bCztOwZANpKWw4/rtl3TXLsPFIyqPKXAyfmaT:biYH0/MO51GKVFtkhppwuECRqSXzT
TLSH
T1FAA3ED4E40B33B60B6B3551B90C26B9E1EFDCC7385327CEDD26A46BCC49B9C94635A21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-96f588c9.0a9a7e6c2a1fc1a45ae8.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-96f588c9.0a9a7e6c2a1fc1a45ae8.bundle.js
Size 32KB
SHA256 1bc300406de4c4c08277a8ab94012a1ab0d85c4c875a97b4d8a85a73a0f29cd3
MD5 f9ec312eb0a90b247149f2cace0077fc
SHA1 864fc75555270943d9df4c9e77ed178c52e4c3cd
SHA512 10a2261a48665ae2593ed8c4767a839b421f1e15bafaa82fe70de0f073104a8353fea25ccb895c2bd90a71ab2c30ec7d61317dbe82996109608778c4408550d7
SSDEEP 768:RXol4la5AQtEW7QQb3lgOT5yAlokBBQPYYlNzvlC71l+WcoQBbIma1aDwjF44PDH:RXoCla5Hr1DT5yuokzQPYWNLlC7T+3/A
TLSH
T198E20A70B2901EB9576B814E72862151F222908EDA924D78F34CC3BDD8EFD851357FA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-9b5b7f08.d9058b83fddc6bc96814.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-9b5b7f08.d9058b83fddc6bc96814.bundle.js
Size 23KB
SHA256 8691266a76091330ddfd7b47f5392d99855a6f092c1f262b0d674d80c5d05247
MD5 f07a9c3398744e3efa8d2dc540a440f4
SHA1 db11c98834fd614aa95be9450eaabfa98fcf808a
SHA512 72016d9b13652de178249fde3319f50fefb83df1eb363b18bec73db2922e6871cdbfd0a788faacf3ce525343582748d218b992636620bf7538742a0fe8c1b390
SSDEEP 384:CLeERN2XMgeeGTgkPhZPquWQuYgzpWl/h37kV2BOCY4WQuzpWl/h37kr2TXPvTv7:CnRN2XMgmskPhZiuWQuYgz8l/hg2BOCH
TLSH
T1F7B2B711A240262DB17394999A477B1CB33E8043E523065CF17D5AEFAADF5CB92633B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-bcf919e7.efea882c6cd9c6a764b0.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-bcf919e7.efea882c6cd9c6a764b0.bundle.js
Size 56KB
SHA256 6b45f8fd138d943fcda1eea86a05ae1e045b2905c5c8e95b423d86c52caeca2f
MD5 b9f13d608cb5b27b353b516c0e2d7ae9
SHA1 af1bf0e8aa273fb4e37c3662e214146f1f2c0c91
SHA512 423efaf4c33be501388a47c2fbb00435d3a0742da864da2b6e05ff345a64cc4b55d67fcaead4627617e34601142bc8370d16003664fdaa205f9d912138baa515
SSDEEP 768:5O72CAx4a3I6/C2a4oPYpHG6oDTe9kLVdYpHG6oDTZ4SKYpHG6oDTN3mPYpHG6ou:gvRPYpHc3YpHTYpHTPYpH/
TLSH
T17C4383F7EA40AB5F771387F59247A91973051DE2DC2139BABA0DD1E442EB467028D323
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-dacc4acd.f47e9bdd9e578ddf48ec.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-dacc4acd.f47e9bdd9e578ddf48ec.bundle.js
Size 85KB
SHA256 117c0669ea51fd62d3059fb5a09ba5d3b6427761cbf409f7d1e51e886b2ddbb4
MD5 cefca73d8bd7828ac39547b3c045b331
SHA1 9b553107271104687225a0ca613ce46f692493f6
SHA512 f3cd157d6756cf91faf57498e7e2625a04af6837fec7542347a792d6b3cc43669a7b0510efed273f8b000781567128885e6dc5fdeca2f90414eeebdf692396d5
SSDEEP 1536:ToGAvPr653t5rBZ/e9YHb8UP8YQFYHb8UP8YpJeUqk2:cJr6BeLUPADUPZJeUqk2
TLSH
T1A883BA50A1A5233CA12740BF44D16A0EFB39B581E32A3F6BF99E71EB75C56EB9053310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-f14cce64.034fc4f39de8d09479d2.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-f14cce64.034fc4f39de8d09479d2.bundle.js
Size 5KB
SHA256 99605476d6aa5f03e5c98be68865d025b9c12885df3178f3e103991db4c36005
MD5 a012efc8d6a7347ca49b436462e5f6f4
SHA1 af6f45cc8c8231d4f3be958e3eac36e04b1f9f27
SHA512 35dc6376b108a42e290f63ea546d3b4515fee9e78dc4fe0f286d150f7384937825128dd8ddbf1d6609831d94a18d3343021c5b37af8a4e4ce1a305842ec035fd
SSDEEP 96:GGxINl5y+ufsxNveL17hlvRaXnDETEOmlgdBd7020YCYnmbGVlVwQ:3xo/zbvUVR+tOmCRbrmbalT
TLSH
T1F8C144266071A0D4E76F045C89550921E314512FB4B2A8FD3DA8B8F9D9F9BC827F7B31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-f773c2b7.f5777bf3f9e8fe6aaa63.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-f773c2b7.f5777bf3f9e8fe6aaa63.bundle.js
Size 9KB
SHA256 75dd9f2ff460ef7065ca48db5ad13d43e0ef466f674cf9471e956c65ba2eea6c
MD5 c57ae85a8ba982c21b933f24b7f8a41b
SHA1 e5b27d5794ed51d55da483194dd1212ce235edc3
SHA512 d98becbbda8f5cd8193cce90145164e960c9190b73b7ef1003518fc54bba7104b928a7971a1f57636a6b534a7509a8b984fe6804692e64763218a7750a73a6a4
SSDEEP 192:AqimUlX6EMwDz6ReLIICyiAlSggh7IaYWqGoPJiO973Rple3J:raCwDz6ReLIICyiAsR1Y7Rp43J
TLSH
T141129512A392356AB59340DBA081F7257722D913F13204BFFA35939E4EC398F53D1E69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-f9885922.967339646fa1510db63f.bundle.js

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\app-f9885922.967339646fa1510db63f.bundle.js
Size 48KB
SHA256 552238b9a1e4d8b4763a0658a228a278d465ad45eb5678ac51b545cd18cb547e
MD5 9c3cf5b37c95c66a151fca7079b3d3d2
SHA1 eb5154cab03f68988154bc9c0fb5f19fff15369d
SHA512 b9e5e89e6d98c1f3199f1c53a8dbb9fd8dfb90c93c8f5be89cf421a79a925705e5c2aaa24be076eb786dce4ecf375fdbeb98ed37ac1537653282ef757779c715
SSDEEP 1536:UMxUIRR600YI4DixsVwv+UduPwZm8w0vsMgnbXuwgbbvAwFw+cYHF8thZFjq4+uI:Q03UduPwZm8w0v1w+3F8thZFjq4+uxHi
TLSH
T10E23EB47B2D125ACF76344E6D2973A40532B810AED23057CB29EE69B44D77CBA3633B4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

capture_addon.node

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\static\unpacked\capture\capture_addon.node
Size 353KB
SHA256 2f446e9065a0060d506a1c33d107d7f17d48cfb90edcfde196411ae977ee9c24
MD5 748e52f01911f8e1d2dbd228a34ef697
SHA1 e539bec90b6f881f4b23dcdee61978a38e7aca19
SHA512 2a4bbd413ae072fdb98a2a9fb1c80c406f8ce2f8ccdff23fc48fbc9c351c96050bf1873cf0f22a841d94210d915bbacbd59ceecd925b55e715eae45edf8777a8
SSDEEP 6144:1BwUknKeSUreO0nj4BPxQUx+zKt26wEGnwAp/j+1:1BwUKKeSFOgjkPxYz02XwA81
TLSH
T129747B1AB7A404B8E477D23C89674A05E7B27C4A0760E7CF23A4435A6F33BE1993E751
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon.ico

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\static\unpacked\icon.ico
Size 409KB
SHA256 1a90e62ec52c31681af31d9cb4790c8a3af4b72bd8de3a0e937802965a23a38b
MD5 06aa52a7fa25dfc51e7c846172d985f2
SHA1 10adb45e32e5a4831154e5e17425ba3f911bc325
SHA512 b7f3c9c000a8a4af76cf619908177bd29a98a69825e2f711705cdb810bb8c8f4c29ec8c409855ca1d1354dc52c72f4c72100dea24727980d4b8ecd1e4a4ed3a8
SSDEEP 6144:t5Ker1PJVHjMYimBSfN/yw+Aw1ECD45rO:t5KgHaizA1CG
TLSH
T14E947DD5FEE521ECC0BB9C7A4C325D3169738C4698C1EE92588779BC419316A2D332AF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

overlay_addon.node

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\static\unpacked\overlay\overlay_addon.node
Size 582KB
SHA256 2cf376dab5490ec35db3a6d0aebce7f617b5305c6c1186975dda31ac26315fd7
MD5 0d6945d7b6de55e4ad3ef4d611a34120
SHA1 dd03d9b1b6cdb610b12215158081eccdd211b3f4
SHA512 8e042efd129abb55f5c5203f6fa2b11f06dfcbfb3da471de3fd753f7680f06509805fbd94da57b963662df710eedae595682a8a5dc44f4a6df06cbde7c1d416f
SSDEEP 6144:fj9PTt5UmkURgTbVCyea/tTleN/yH5f2QAHzqKZb3LwXBE3Pkio0pKG42zNKz8gj:f1UmZok+ILcfiPp
TLSH
T185C47F2AB6AC0379E167D178C9534513EBB278561370A6CF03A15A9B2F277E14B3F312
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vendor..pnpm-fd085324.57eec197e14147a31019.bundle.js.LICENSE.txt

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\resources\app.asar.unpacked\vendor..pnpm-fd085324.57eec197e14147a31019.bundle.js.LICENSE.txt
Size 811B
SHA256 fdbc28c10f3d21976b4bc16464ad7c630538c0c3101347b5fd44af9066f7022b
MD5 7ec01595672f75e83fd81b41f132f4c1
SHA1 7f822fe9341af8f82ad1b0c69aba957822a377cf
SHA512 c533d75af83eb9947d44da67980532ec65ecf359980e9b6385e5596c3853645fec8911d3d94c3ee3df2454ca437211853387194c3d6b4715ea583702068dbc07
TLSH
T198019EBD3E155D7327405A663C2EB4CBA0AD6247151DA7991864B1D1523E21857FE0B0
MD5 SHA1 SHA512 TLSH

Submit Download

squirrel.exe

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\squirrel.exe
Size 1.9MB
SHA256 e3e01cab530c4d7eed8b84980bb13c59dd5e21a8c8ca09ce5cb9f57dd941e42b
MD5 328ae2806237903ca41163d9f6451ca2
SHA1 a368a105759a0ca99a6218844ca15f58e27d4daf
SHA512 32bb3bbefae95e1099c1666aa4c84d4057d95693829ae899b703b1b294f856a8b3a39a8ba10e65941bc92c0a5a409e1502fd603d25e9f2dec0c9afe6649eb131
SSDEEP 24576:9wRrQEJglh6acFI54CGT0bG6NEB+a/ayU0YJ0mXrNR5C3tQo51A7ehqv2Xe2vYs2:ORZe6acFI54CGT0bG6mB+a/ey5m+qv
TLSH
T176956B12E7E88F6FE56E27B6F471105907F3E5866362F78B6A0C61B92B833108D11367
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Wand\app-12.23.1\v8_context_snapshot.bin
Size 677KB
SHA256 4e7a4fd38636f6589a78934e2e3ed8a3698d154665cb3d2a9032b809c9ff1711
MD5 2ccf0037aa83899319d86189f1adf085
SHA1 c8ee1dde65817ccfcc70a3b9e883a90de9e3989b
SHA512 02562a99b5c7fcd83f1ad1758ebad5ffce1cfa8a295a371bee1b95f34f69b74973875a76b3885ead49b7d4d1bb10e954606b0d7081437c69b1eb1f3b16f0860f
SSDEEP 6144:zes4hmb1aXFI1QZtXWO0GZkF8zFylLKR24mCGaG9vzhAJBb4bsgvHc47ACl8dUQ4:ze1hmbI19JA9oCLho4YKvUiFjrD
TLSH
T1C1E470A7FB4ADB23C7C85DB59DE6E6553D75B0CEAF4E812B71080B3D74322A40A0918D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

init.json

Path C:\Users\Admin\AppData\Roaming\Wand\App\init.json
Size 53B
SHA256 19b57b0146dd1ba1da80df6544045ec5235dba513b2979f5687f23ee5a3606e6
MD5 80b50a6bb1e516f6e39dae964779184a
SHA1 12fc93e91a9b3206923352ff554fcef1d04daebb
SHA512 48df1663a24a232cfe2b0b97dfe18023be0b9081c6aa06504b52ca8d15c2454278eaea6f9f351de3b870a6b8e30240f7b4b463f90d627fe3a863232bf9093fb4
TLSH
T1A690028809A614265B55325B08C168254A1C7120C1D409605D96105414B2525028B267
MD5 SHA1 SHA512 TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Roaming\Wand\Cache\Cache_Data\f_000002
Size 809KB
SHA256 1b488327428ab7a76bcc9152831a04075bf0a0d30e7d8c57a066204571f86305
MD5 0613e554e773dbedacca6120cfb04899
SHA1 6c0de6e0e5c9df6b85bba0353dd75b38f6179e0c
SHA512 7447e2f5b4baffc7935c4b66aeed9d3b09e082d63bd3a1b923ba6d04a5154ff7338988d6e9d066a5383bcf0ff6df141db5953b0a912fd9d0fa4d88e90e139476
SSDEEP 24576:Wh5jol3VPwg9yeBff3Qu9cSFwAWIVKI3mpX:itovPz9y+f3Qu9rFwYlc
TLSH
T1850523CFC7A5F026CD84D579E9F3FD4F2FE1349052992A054AA14A89C65172FE2C2076
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\Wand\Code Cache\wasm\index-dir\the-real-index
Size 48B
SHA256 e48ae74d36963c324cab06246159844eb01ff718177da697d6bd56200f68dab1
MD5 f800870cab7c35c1cf2158e2f0dd2002
SHA1 57177e15c9791e0352f0b4b178066290895c11de
SHA512 94510c3c2aa081c1b984567f897dfb6c41acf480c88375ae97a084b2ee215316112d7faa607df605372cbd8c4d90da2833b39062f4face0729aa03b9b69c715c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Wand\Network\Network Persistent State
Size 1KB
SHA256 adc0df3203b9223619ce0a15e4fdc0cdaabaf4e02058d361b712ea7b243447b0
MD5 5a8519f1e07c5544017b2757d7e431a1
SHA1 ac6160e14cbfa50a80bf84d45e5227ed09867a22
SHA512 41fc56c7d4390fd8fab2419da3f39f08979f6f78b1234807e1c0c88cf89de9d5d5f62093385664bef0985ed3e0500fddfd724ab4c7f3305030cb9bed06ced2f3
TLSH
T12231A5D3C3E84A7D8A6263F56F283A23C1BE0A18435C3C0789D9DB4F27E18B1461064E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Wand\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Wand\Network\Network Persistent State
Size 2KB
SHA256 5b8316523f3a0f60f1c19a49dda18a5f89a177978507a8f7d637a1b5df2c6fda
MD5 449b69af4489514cb64ea68ef06c5794
SHA1 22a8e210b24a6378f4947f3ca905ada5c7e1a086
SHA512 8460e1e8d138375633633854f837d63d38bf5bfc41a42bfa7c2df763f939cf9ee339974ff7b43fd2980633e9eca75f9751bc1d87b12c0b79ddcf31d19550d39a
TLSH
T1154196C3C7E84A7D896267F16E293A23C2BE0A1C435C3C468DDADF4F17E14724651A4D
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Wand\Network\Network Persistent State
Size 1KB
SHA256 45249a589ae953eed4720bfe1d2408e43d475a2245facbbcabcfe6275f871cce
MD5 80abe5b507e3dd06fed853fd8e7b55ae
SHA1 b9f61d6a0446c3d62985ec6e40f6e4e87cb378be
SHA512 75d2057d47fe10a229a6cbfab31bd9c60fab15df4095c05034080ee392b4d036d7522267355126c493f13f0cd9fae7abeabe1a9069451d3b1d852b686329681a
TLSH
T1FA11A6D7C7E8467D8A6263F56E283A23C1BE0A08035C7C4289D4DF4E0BE5872461064E
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Roaming\Wand\Network\TransportSecurity
Size 187B
SHA256 f5e9adbd846964b71da8ddb8f16f4af50a10b6b82245860e556fb976274a0898
MD5 c67474010f1ae0fa7a6da83c7737390b
SHA1 6e11c3d3d395f28e23b210b7a97acb898267fa2f
SHA512 da0344d8cd89fc6c97d70b187bf300b853463296429b3145b2a6e51c5caeb9ad5c39d0d3957e79c077539506549a4615b21874f612c12a130b248dd37b2fafef
TLSH
T1F5C0C0B7C73DF4B2203C563E77003001EBB3E07400812CE0C562802E71C20E602C6401
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Roaming\Wand\Network\TransportSecurity
Size 189B
SHA256 4affdc26258740a8314617c2e2b7d77d76a97c6aad9f1d2aaad570a9c9d7dd92
MD5 d4dd65aada08e319544459fb4f544ea0
SHA1 b7e6ed092f0e2855737f3d18cced33031cdab921
SHA512 6231de915c3f0899cbbeb33ffd1a7f1ac017cb8f32ab8d50b6306f7b728a2ae41f8dcd96c59ec9b2d634f0651eb3e9279c5e5af766a5841516e9d1cc78204c11
TLSH
T103C02266C629F8B2217C85676D0218427F31E03020822CD0C652802E72D14E91206001
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Roaming\Wand\Network\TransportSecurity
Size 189B
SHA256 95e86612451d07f0017e672bc216079825c78113fc9ad7f3f3ac387a661a8c0d
MD5 f5bba7555608ed1d95e5f7fe62ff0605
SHA1 20d67ae5865c3363246326a458042213c078efe7
SHA512 1806f700436af7b6c2727ef9529d0b96837ad4f8a614e00d6255f949fbc48dbfefd1a5a36245aadbd58d4062a0db025c621c8fa773c3695c9004555fc119bf91
TLSH
T1A8C0226EC739F4F6347C8562590520406B33E030608228D2C552602F71E24EA2247005
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Roaming\Wand\Network\TransportSecurity
Size 189B
SHA256 a5dfee36f73c8daecdb8ec44b860c41fb139868c08b4b6dbc38738ab4c935f51
MD5 7587a41ccdc2167104aa2f688558e4ad
SHA1 0da2222facf4e2ffae400f11be96924a4f62ed5d
SHA512 972b1edc237bb7b762f1e3ac80a97bec910a03f98b592a325f1a079227bc7ce42676448a9311537bc310c319bc016c221e502d857ae36f727ccf04b8f9b48bf1
TLSH
T128C022ABEB29F4F2A0BC85625D0510006B32F430028208E1C692422F61C22F72216111
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Roaming\Wand\Network\TransportSecurity
Size 189B
SHA256 f39d2f424233eff91ccce2730f9f1f69f84157892068d9a251522208083316e6
MD5 ad38d759ea35c3d0b09a2116c864f681
SHA1 a35f3908bdcb507881dabbfa07a36e7e386df7b1
SHA512 52618ac671ae7c334ce67aaec3d42e12b18b7dc66e8fd23949cce18c52238493cd058f7538e5607b3e5f41fea499c93a23f01b3bbc1f59ec78f3f1fa2ab2e4cc
TLSH
T1B0C022A6E279F8B2207C456AA900B0006B31F034908208D0C673603E61E10F51A06001
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5ab373.TMP

Path C:\Users\Admin\AppData\Roaming\Wand\Network\TransportSecurity~RFe5ab373.TMP
Size 187B
SHA256 65a9f2565cc27dbfd83d8207496e5384fc1ae66402b86007bc29d1a267f56e7b
MD5 0b4161adb93503a390dc42ee7e9432b0
SHA1 c747a1e851066bddb10ca27722798d634224059f
SHA512 b92ae4f7377cdffa48c0b4698da21420b83b8deb5a5b8a52399a24b6ef564395311a51cb14100696c4cef10a73e19f19937771ca721fafef4292f24f2a41501b
TLSH
T141C0C077C63DF8B6203C5636550822102F32EC3002C30CD0D6A2402E61D28E40226801
MD5 SHA1 SHA512 TLSH

Submit Download

73d3dcb7-b3e4-4805-97f4-dfb4e7157f3c.tmp

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\73d3dcb7-b3e4-4805-97f4-dfb4e7157f3c.tmp
Size 57B
SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
MD5 58127c59cb9e1da127904c341d15372b
SHA1 62445484661d8036ce9788baeaba31d204e9a5fc
SHA512 8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a
TLSH
T101900297652634755E1F1D65400B889B5CF905704E0B5E0641D032969A2A45D088705F
MD5 SHA1 SHA512 TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\Cache\Cache_Data\f_000002
Size 145KB
SHA256 dafc69e360d1ef5e63a8ecedad26a1c7a19cf783c2dd9c2eea786216c5e6cfca
MD5 a1bd90e99f285aa09d77557fedfa0d6a
SHA1 9fcdc9523bbdcc41fd5209a9739c57f6757f04b7
SHA512 2c2fff38c1bd2f00f59057290dd73db2a8b978dc5222cf77ca9e08585f2a49f488149475f66505331a0fb96051780048b1e49f56123b3d0553d26476f1db0605
SSDEEP 3072:lX3maYWq1kQxG6HdCzCKJ2mDxAyA+/Jzi024UukHLcF+7L9Z0ZfwH9Ls:53mp/ZwzVJ2oAyA+1i0G449yYs
TLSH
T18EE312F9BA78ED8459B65026AA65E2140E23B54BF492361324ED23F4A4DC80FCB13B57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\Cache\Cache_Data\f_000006
Size 86KB
SHA256 ef9140b59cfd94ff9cfdc20af66de01b060c75b3911ea5c1fccabef7f976231d
MD5 f51e24c0d6ed530c4c855bf263e1e6ae
SHA1 20f4f708e0d4b87b00542289287d26471838f593
SHA512 209337e3210233ac01146925d6a2fcd53cbce49371d28d7d8034c244adf3f62e4b75256bb6f178106d1fa0048259d8ed94e7cb7e9d763c75452bdbcd585ef7bd
SSDEEP 1536:HOOT6nQxCrgBSDwEuwKJG3jMQdbEXFWn+z6GtUNMNdarvo6b8XR8zyDxpHK:HOOOQxCrgwDjuJGAOwXp2yqvoBQylZK
TLSH
T1D8930287C1C70D156D491A0D1432EBAA943B0C7D6B0A528B17C17D2B492F6EBEB332F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000007

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\Cache\Cache_Data\f_000007
Size 23KB
SHA256 0bbf61ec3fc45f91046c268eb5f0dffff28c27d625805968e5183d22d3f8a066
MD5 00ff18c4694295a20a29d5d6f75e69df
SHA1 0373f2404d1117c9c5a7955079f907136cdf6eb3
SHA512 fceff6a3aaf2a8f439efe76138bded4d09e694d6fa7fb6e1ae6ee0d73451197a2fd6e77c5743b66cbfe4bf79daabad8a7f256be5ea364fc0edf7db0cad6a427a
SSDEEP 384:Gpm0oqEc6VO/83DtZQlnU7JrpUhbLsthm9HmrXF1UHXZ94IZ6Ngov7ZKDp6xgcun:Yto5cWO/uZQxUNVUJ4jmcV1U3EIDov7o
TLSH
T1BCB2E00C2493A34A6E59B38C5EFF99464E0908A77DB049DC3D0B5C603DEA4086BDCBF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\DawnWebGPUCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\Local Storage\leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\Network\Network Persistent State
Size 3KB
SHA256 0c9453d449642ccbb8e682234f0beace3afb68261280d778c58576dbf7cfb956
MD5 a95319082e17ffbaec0454bb2cf32b9c
SHA1 33a23d4b7f96c913fd12be7c6f427266b36baf75
SHA512 0096b2f856f16693f27f490f6b0e6d6cd78c6c6b836b5dfbccfd09328a2107fbb0d1aa79cb66e291aa7b965789ee59f00f5265968cc08d7859bf7f9a7d21ec51
TLSH
T1A5618BE7C3E8067E8562A3F56B257E37C0BE065C53683C4AC8C9DF4E97E1872524168E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\Network\Network Persistent State
Size 2KB
SHA256 7b572ee82bbe973225250132aad5b7ba351748d63a8fde898bb802891bf125aa
MD5 8bf0b0ade63ef36ef0543a9c83617291
SHA1 73a40e4069580704a9dc7a3119f3aa8a41b73e25
SHA512 cf55d92b50b1dfb07de06415b6d59d5ef0a92bb8dbe4c5af8b381c3ec8cce489b5a02f4816497c5f01737e51389d5d760ca6682fc35dcb3152456252542f4109
TLSH
T1DA51ABE7C3E8467E8562A3F96F203E27C5BE0A5853683C4BC8C89F4E57E1872564158E
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\Network\TransportSecurity
Size 685B
SHA256 28006b437e0d8a2ee32f1d64482591385101d88125d64fda88cdffa47b69df4f
MD5 229aa024d338c44519c107ddb47e4791
SHA1 2bab1c068ad5e3e25d2f72082e8041671e890e71
SHA512 9e2bbcc3aa19539ae0758b21c4d7abb616820a697ffb5d2f042f0c7c9e443a48e082c1f75fbb871aec759240470f00290e8a5550c06a8a4fc5a32e75b30a537b
TLSH
T1CC019E63C37FB89B103C4C7E0E44B5169D7EB431049254F9CABAC0BDA0815B31B16417
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\Network\TransportSecurity
Size 685B
SHA256 9a4800dfd14fd2f07163d559f91d8c7e3952cdf2b43b0242faef8f1cdd2dbe4d
MD5 16127cb8a51ea4c7ca6d158a1ae40b3d
SHA1 669a86f55fbe9374a61d8dcca93d9ed458f43819
SHA512 c955572f52834d66de03ef1f22d5311ef3fbaaccc5fb911d6fd78afff326c4af66d2d431b6a7ca8f527c0cb450188951a50bc87e16d917cbc64e9bacdf2e3749
TLSH
T19D017623D23FA86A103C4C3E1E88B5115CBAB439819354FCCA7AC0BCA0528F31A1A427
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5e70c9.TMP

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\Network\TransportSecurity~RFe5e70c9.TMP
Size 516B
SHA256 76db2ea87eca5e2736eedd724d0399d699694c3e08df8e787dd921e0a807f88f
MD5 7329470087afb3ae922f4706c9d19f8d
SHA1 3e296447d24acdd7e27480d2a1df4ff8e0e3e984
SHA512 b755368aa47d351440ea785adbb6526dbb1bf8df53a3ec9cde8af1b7a03e312023c204677095dba0e104cbad2bc0418cd7bce2e4c2dd12d86197c14182d61f22
TLSH
T161F09E23C23DE8AB103D0D3E1F84F6655DBA743545A214FCCABB80BE61408F71B0652B
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 3f43b06fe95968153b55fb95ee7bd6e1a613699b09ab9d21d491161c512481d4
MD5 42d940ba997b1786acd7af4449b0df32
SHA1 10d1ae7807d1c1fdf24c0972a3f5f6a8e5717ab4
SHA512 2da5072f5486e9ca60137340a41cd3b5f0048f3647677a090a48b5ae9419194265ba3685541018ffb8ee63a36c409d85dbea1fc9b0f3380a86443d49ef16f35f
TLSH
T1FEA0021515418367D80816F0747D058863685D394201934346B082969C75168629A570
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5aa99f.TMP

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\Service Worker\ScriptCache\index-dir\the-real-index~RFe5aa99f.TMP
Size 48B
SHA256 9711c9ad689bae4a9ca85b7a1c177f5d605c133eab3762c15998850a560d1803
MD5 10d9548d74ecc96c50901959d01e76f9
SHA1 90aa3a0929cfbd529f22e0c48905f37ece09cc6c
SHA512 4eed9a056a0c98a98da32847c2a24d6b54955577cd81fb315db2a6eabd55afaf6943402f3c72591e978cfffa88949485a79b46ec4e4d45560da1f3f89c7406c3
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\Wand\Partitions\ads\Session Storage\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\Wand\Shared Dictionary\cache\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

cf1b8520-98eb-44a7-bbea-9c3f52c44a8c.tmp

Path C:\Users\Admin\AppData\Roaming\Wand\cf1b8520-98eb-44a7-bbea-9c3f52c44a8c.tmp
Size 86B
SHA256 8029940de92ae596278912bbbd6387d65f4e849d3c136287a1233f525d189c67
MD5 d11dedf80b85d8d9be3fec6bb292f64b
SHA1 aab8783454819cd66ddf7871e887abdba138aef3
SHA512 6b7ec1ca5189124e0d136f561ca7f12a4653633e2d9452d290e658dfe545acf6600cc9496794757a43f95c91705e9549ef681d4cc9e035738b03a18bdc2e25f0
TLSH
T113A0124350152476150F2A2400474E5618E801301D1BF945C1E035A1756685C084700E
MD5 SHA1 SHA512 TLSH

Submit Download

Unconfirmed 329619.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 329619.crdownload
Size 1.1MB
SHA256 dd0d17892e4f9435adfffe0fdf7cb8e05c82cbc1b6741afd7afa772a2edd982d
MD5 2352d5290d8a6042e97200bf72a25d4e
SHA1 869fec4292d98fd68d14e5c1c8db91598497fa57
SHA512 2e0ad56578e774952711f37cd87184bdc62cdba0182b017fc87027053ddc87c0810b6356c71b1382c71436072edc69b11982173774df47600e8b36ffef4a3faa
SSDEEP 24576:QAtDKHcHmABLUBEolhlr6F8fpWWTB3G2Tb2yz8:QqKqHLUBEolhlrb7B3G
TLSH
T16F4528406FA4DE26F5AF1B75A074403846BBFC41AA6BD74FE608BDAD1877304BC1076A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WeMod-Setup.exe

Path C:\Users\Admin\Downloads\WeMod-Setup.exe
Size 155KB
SHA256 c372bd4f6101832128d2ab92027769fa3a9a83b425549662adbf48531c522694
MD5 69bfc3b28bf79b09d29f9d3dd2e10fd6
SHA1 649c2678bd7f72263b13f8d4f7ae29f235e1e4d1
SHA512 fae5467deb14046d3dbc2b0bc51864ea6ef3bef243aa8827456cce292d936b3930506681709d35afb5ad12f65d888e15c9f5eb2a769211efce7980b8e939e841
SSDEEP 3072:w0x45QyUyhaEtHZeO/deV4ILlCI+40OHHBpF:145rUwaEtHUx4SF
TLSH
T1A8F3AED9E3E815BEE6BB8DBA4C351DB005B7AC421CD5ED5A1D8070A84A33354243BB6F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1108-713-0x00000000007D0000-0x0000000000866000-memory.dmp

Download

memory/1412-25-0x000001505E960000-0x000001505EA8A000-memory.dmp

Download

memory/1972-820-0x0000000003200000-0x000000000320C000-memory.dmp

Download

memory/1972-819-0x000000001BD00000-0x000000001BE2A000-memory.dmp

Download

memory/1972-815-0x000000001CA60000-0x000000001CF88000-memory.dmp

Download

memory/2436-727-0x000000001BC30000-0x000000001BD5A000-memory.dmp

Download

memory/2436-728-0x00000000018D0000-0x00000000018DC000-memory.dmp

Download

memory/2764-893-0x000001FD694C0000-0x000001FD695EA000-memory.dmp

Download

memory/2764-1554-0x000001FD694C0000-0x000001FD695EA000-memory.dmp

Download

memory/2896-709-0x0000000000F30000-0x0000000000F3C000-memory.dmp

Download

memory/2896-708-0x000000001B2C0000-0x000000001B3EA000-memory.dmp

Download

memory/2896-700-0x000000001BBE0000-0x000000001BC00000-memory.dmp

Download

memory/2896-471-0x00000000005B0000-0x0000000000786000-memory.dmp

Download

memory/3076-851-0x00007FFACBF00000-0x00007FFACBF01000-memory.dmp

Download

memory/3076-852-0x00007FFACB340000-0x00007FFACB341000-memory.dmp

Download

memory/3436-714-0x000000001BB80000-0x000000001BCAA000-memory.dmp

Download

memory/3436-715-0x0000000001860000-0x000000000186C000-memory.dmp

Download

memory/3436-669-0x0000000000EE0000-0x00000000010C0000-memory.dmp

Download

memory/3740-901-0x000001BA0B090000-0x000001BA0B1BA000-memory.dmp

Download

memory/3740-1741-0x000001BA0B090000-0x000001BA0B1BA000-memory.dmp

Download

memory/3804-5800-0x000002A2B0870000-0x000002A2B099A000-memory.dmp

Download

memory/3924-695-0x0000016307FE0000-0x000001630810A000-memory.dmp

Download

memory/4204-6-0x0000000023110000-0x0000000023148000-memory.dmp

Download

memory/4204-3-0x000000001C770000-0x000000001C780000-memory.dmp

Download

memory/4204-8-0x0000000024FF0000-0x0000000025012000-memory.dmp

Download

memory/4204-10-0x000000001C300000-0x000000001C42A000-memory.dmp

Download

memory/4204-1-0x000000001C770000-0x000000001C780000-memory.dmp

Download

memory/4204-7-0x00000000230D0000-0x00000000230DE000-memory.dmp

Download

memory/4204-0-0x0000000000730000-0x0000000000852000-memory.dmp

Download

memory/4204-5-0x000000001C750000-0x000000001C758000-memory.dmp

Download

memory/4204-11-0x00000000010F0000-0x00000000010FC000-memory.dmp

Download

memory/4204-4-0x000000001C770000-0x000000001C780000-memory.dmp

Download

memory/4204-2-0x000000001C770000-0x000000001C780000-memory.dmp

Download

memory/4376-914-0x0000023776F40000-0x000002377706A000-memory.dmp

Download

memory/4376-915-0x000002375CEE0000-0x000002375CEEC000-memory.dmp

Download

memory/4376-816-0x000002375CA10000-0x000002375CB24000-memory.dmp

Download

memory/4412-900-0x000002306B6F0000-0x000002306B81A000-memory.dmp

Download

memory/4412-1747-0x000002306D3A0000-0x000002306D3A3000-memory.dmp

Download

memory/4412-1753-0x000002306D3A0000-0x000002306D3A6000-memory.dmp

Download

memory/4412-1745-0x000002306D1D0000-0x000002306D1D2000-memory.dmp

Download

memory/4412-1744-0x000002306D1B0000-0x000002306D1B1000-memory.dmp

Download

memory/4412-1748-0x000002306D1B0000-0x000002306D1B5000-memory.dmp

Download

memory/4412-1742-0x000002306D1B0000-0x000002306D1B1000-memory.dmp

Download

memory/4412-1743-0x000002306D1C0000-0x000002306D1C2000-memory.dmp

Download

memory/4412-1750-0x000002306D3B0000-0x000002306D3B2000-memory.dmp

Download

memory/4412-1752-0x000002306D3C0000-0x000002306D3C3000-memory.dmp

Download

memory/4412-1749-0x000002306D3A0000-0x000002306D3A1000-memory.dmp

Download

memory/4888-5746-0x000000001C940000-0x000000001CA6A000-memory.dmp

Download

memory/4888-5747-0x0000000003870000-0x000000000387C000-memory.dmp

Download

memory/4888-3021-0x0000000025530000-0x0000000025538000-memory.dmp

Download

memory/4888-3013-0x000000001C940000-0x000000001CA6A000-memory.dmp

Download

memory/4888-3014-0x0000000003870000-0x000000000387C000-memory.dmp

Download

memory/5000-412-0x0000022365FD0000-0x0000022365FFA000-memory.dmp

Download

memory/5000-422-0x00000223006C0000-0x00000223006CC000-memory.dmp

Download

memory/5000-421-0x0000022367C50000-0x0000022367D7A000-memory.dmp

Download

memory/5000-438-0x0000022B80790000-0x0000022B80F36000-memory.dmp

Download

memory/5000-723-0x00000223006C0000-0x00000223006CC000-memory.dmp

Download

memory/5000-722-0x0000022367C50000-0x0000022367D7A000-memory.dmp

Download

memory/5128-2353-0x000002811D240000-0x000002811D36A000-memory.dmp

Download

memory/5616-2349-0x000001BBECB00000-0x000001BBECC2A000-memory.dmp

Download

memory/6372-1496-0x00000250EF200000-0x00000250EF32A000-memory.dmp

Download

memory/6412-5825-0x000002D52ABF0000-0x000002D52AD1A000-memory.dmp

Download

memory/6436-1697-0x0000027AC0200000-0x0000027AC0201000-memory.dmp

Download

memory/6436-1702-0x0000027AC0200000-0x0000027AC0201000-memory.dmp

Download

memory/6436-1706-0x0000027AC0200000-0x0000027AC0201000-memory.dmp

Download

memory/6436-1705-0x0000027AC0200000-0x0000027AC0201000-memory.dmp

Download

memory/6436-1704-0x0000027AC0200000-0x0000027AC0201000-memory.dmp

Download

memory/6436-1708-0x0000027ABD820000-0x0000027ABD94A000-memory.dmp

Download

memory/6436-1695-0x0000027AC0200000-0x0000027AC0201000-memory.dmp

Download

memory/6436-1703-0x0000027AC0200000-0x0000027AC0201000-memory.dmp

Download

memory/6436-1701-0x0000027AC0200000-0x0000027AC0201000-memory.dmp

Download

memory/6436-1696-0x0000027AC0200000-0x0000027AC0201000-memory.dmp

Download

memory/6436-1707-0x0000027AC0200000-0x0000027AC0201000-memory.dmp

Download

memory/7568-5802-0x000001D9DA7C0000-0x000001D9DA8EA000-memory.dmp

Download

memory/7816-5801-0x00000187C3DB0000-0x00000187C3EDA000-memory.dmp

Download

memory/7860-5785-0x00000000015B0000-0x00000000015BC000-memory.dmp

Download

memory/7860-5784-0x000000001B8A0000-0x000000001B9CA000-memory.dmp

Download

memory/7984-5813-0x000001697EDD0000-0x000001697EEFA000-memory.dmp

Download

memory/7984-5814-0x0000016964CD0000-0x0000016964CDC000-memory.dmp

Download