hxxps://gofile[.]io/d/nLGoSR

Analysis

user interaction
yes
max time kernel
900s
max time network
743s
platform
windows10-ltsc_2021_x64
resource
win10ltsc2021-20260513-en
resource tags

arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
submitted
02/06/2026, 15:46

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://gofile.io/d/nLGoSR
Sample260602-s7x2qahv21

Score

8^/10

discovery persistence ransomware themida

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
60	4780	msedge.exe

Executes dropped EXE 2 IoCs

pid	Process
2096	Island Spoofer.exe
5956	Island Spoofer.exe

Loads dropped DLL 33 IoCs

pid	Process
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe
5956	Island Spoofer.exe

Themida packer 1 IoCs

Detects Themida, an advanced Windows software protection system.

themida

resource	yara_rule
behavioral2/files/0x000700000002861e-4359.dat	themida

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
27	api.gofile.io
28	api.gofile.io
30	api.gofile.io

Enumerates processes with tasklist 1 TTPs 1 IoCs

discovery

Process Discovery

T1057

pid	Process
3108	tasklist.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-hub\ar\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1710224228\_locales\bg\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1710224228\_locales\pl\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1209051818\hyph-en-gb.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-shared-components\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-tokenized-card\fr\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1710224228\page_embed_script.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1209051818\hyph-nn.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-mobile-hub\pt-PT\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-notification\id\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-tokenized-card\en-GB\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1710224228\_locales\km\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1209051818\hyph-mr.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-ec\id\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-notification-shared\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-shared-components\cs\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-tokenized-card\id\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\runtime.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_749706827\surnames.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_749706827\us_tv_and_film.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1710224228\_locales\et\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-hub\es\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-mobile-hub\id\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\Wallet-Checkout\load-ec-i18n.bundle.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\wallet-webui-925.baa79171a74ad52b0a67.chunk.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-ec\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1710224228\_locales\ta\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1710224228\_locales\az\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_915636070\typosquatting_list.pb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_749706827\passwords.txt	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-shared-components\de\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\wallet-webui-992.268aa821c3090dce03cb.chunk.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-ec\cs\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\bnpl\bnpl.html	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-shared-components\fr-CA\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1710224228\_locales\pt_PT\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1209051818\hyph-mn-cyrl.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_2047829451\shopping_iframe_driver.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\app-setup.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-ec\en-GB\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-hub\pl\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-hub\sv\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-tokenized-card\fr-CA\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1209051818\hyph-da.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1209051818\hyph-hu.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1209051818\hyph-mul-ethi.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-hub\zh-Hant\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-shared-components\ko\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\manifest.webapp.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_782350058\_platform_specific\win_x64\widevinecdm.dll	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_749706827\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1209051818\hyph-nl.hyb	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-ec\zh-Hans\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-ec\zh-Hant\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\wallet-webui-792.b1180305c186d50631a2.chunk.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1710224228\service_worker_bin_prod.js	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1710224228\_locales\pt_BR\messages.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_2137510751\Part-ES	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-shared-components\pt-PT\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_782350058\LICENSE	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\wallet\wallet-checkout\checkoutdata.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_415539765\manifest.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-notification-shared\de\strings.json	msedge.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1209051818\hyph-pt.hyb	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4780	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134248888655723808"	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4045429996-2364296335-1634900306-1000\{BDD2C536-8DC8-43CF-A7B8-317AC91F971A}	msedge.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
5956	Island Spoofer.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
1500	msedge.exe
1500	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 6 IoCs

pid	Process
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	3108	tasklist.exe

Suspicious use of FindShellTrayWindow 56 IoCs

pid	Process
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe
3244	msedge.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
2096	Island Spoofer.exe
5956	Island Spoofer.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3244 wrote to memory of 2864	3244	msedge.exe	83
PID 3244 wrote to memory of 4780	3244	msedge.exe	84
PID 3244 wrote to memory of 4856	3244	msedge.exe	85
PID 3244 wrote to memory of 4856	3244	msedge.exe	85
PID 3244 wrote to memory of 4856	3244	msedge.exe	85
PID 3244 wrote to memory of 4820	3244	msedge.exe	86
PID 3244 wrote to memory of 4820	3244	msedge.exe	86
PID 3244 wrote to memory of 3044	3244	msedge.exe	88
PID 3244 wrote to memory of 3044	3244	msedge.exe	88
PID 3244 wrote to memory of 2768	3244	msedge.exe	89
PID 3244 wrote to memory of 3044	3244	msedge.exe	88
PID 3244 wrote to memory of 2768	3244	msedge.exe	89
PID 3244 wrote to memory of 2768	3244	msedge.exe	89
PID 3244 wrote to memory of 4360	3244	msedge.exe	92
PID 3244 wrote to memory of 4360	3244	msedge.exe	92
PID 3244 wrote to memory of 4360	3244	msedge.exe	92
PID 3244 wrote to memory of 1292	3244	msedge.exe	95
PID 3244 wrote to memory of 2460	3244	msedge.exe	96
PID 3244 wrote to memory of 1292	3244	msedge.exe	95
PID 3244 wrote to memory of 2460	3244	msedge.exe	96
PID 3244 wrote to memory of 4212	3244	msedge.exe	99
PID 3244 wrote to memory of 2840	3244	msedge.exe	103
PID 3244 wrote to memory of 2840	3244	msedge.exe	103
PID 3244 wrote to memory of 2840	3244	msedge.exe	103
PID 3244 wrote to memory of 2888	3244	msedge.exe	104
PID 3244 wrote to memory of 2888	3244	msedge.exe	104
PID 3244 wrote to memory of 884	3244	msedge.exe	105
PID 3244 wrote to memory of 884	3244	msedge.exe	105
PID 3244 wrote to memory of 884	3244	msedge.exe	105
PID 3244 wrote to memory of 4928	3244	msedge.exe	109
PID 3244 wrote to memory of 5800	3244	msedge.exe	110
PID 3244 wrote to memory of 5464	3244	msedge.exe	111
PID 3244 wrote to memory of 4208	3244	msedge.exe	113
PID 3244 wrote to memory of 2616	3244	msedge.exe	114
PID 3244 wrote to memory of 2616	3244	msedge.exe	114
PID 3244 wrote to memory of 5084	3244	msedge.exe	115
PID 3244 wrote to memory of 5084	3244	msedge.exe	115
PID 3244 wrote to memory of 2096	3244	msedge.exe	116
PID 3244 wrote to memory of 5604	3244	msedge.exe	118
PID 3244 wrote to memory of 5604	3244	msedge.exe	118
PID 2096 wrote to memory of 5956	2096	Island Spoofer.exe	120
PID 5956 wrote to memory of 3592	5956	Island Spoofer.exe	121
PID 3592 wrote to memory of 3108	3592	cmd.exe	123
PID 3244 wrote to memory of 5868	3244	msedge.exe	124
PID 3244 wrote to memory of 5868	3244	msedge.exe	124
PID 3244 wrote to memory of 1072	3244	msedge.exe	125
PID 3244 wrote to memory of 1072	3244	msedge.exe	125
PID 3244 wrote to memory of 1500	3244	msedge.exe	126
PID 3244 wrote to memory of 5192	3244	msedge.exe	127
PID 3244 wrote to memory of 5192	3244	msedge.exe	127
PID 3244 wrote to memory of 5108	3244	msedge.exe	128
PID 3244 wrote to memory of 5108	3244	msedge.exe	128
PID 3244 wrote to memory of 1588	3244	msedge.exe	129
PID 3244 wrote to memory of 1588	3244	msedge.exe	129
PID 3244 wrote to memory of 2520	3244	msedge.exe	130
PID 3244 wrote to memory of 2520	3244	msedge.exe	130
PID 3244 wrote to memory of 984	3244	msedge.exe	131
PID 3244 wrote to memory of 984	3244	msedge.exe	131
PID 3244 wrote to memory of 5912	3244	msedge.exe	132
PID 3244 wrote to memory of 5912	3244	msedge.exe	132
PID 3244 wrote to memory of 6120	3244	msedge.exe	133
PID 3244 wrote to memory of 6120	3244	msedge.exe	133
PID 3244 wrote to memory of 5108	3244	msedge.exe	134
PID 3244 wrote to memory of 5108	3244	msedge.exe	134

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://gofile.io/d/nLGoSR
1⤵
- Drops file in Windows directory
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3244
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x274,0x7ffbd92ac188,0x7ffbd92ac194,0x7ffbd92ac1a0
  2⤵
  PID:2864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,10269724602689250416,231949157243526413,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=2032 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4780
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1684,i,16594410203136946618,1967478791421523391,262144 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=2000 /prefetch:2
  2⤵
  PID:4856
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2576,i,4124459852909556450,15823186049065634494,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=2720 /prefetch:8
  2⤵
  PID:4820
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3420,i,18117509224298422721,13591645270870713616,2097152 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=3436 /prefetch:1
  2⤵
  PID:3044
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3396,i,173713161578707158,13322491353603366034,2097152 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=3444 /prefetch:1
  2⤵
  PID:2768
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4808,i,16534167163208945098,7461732501702231164,2097152 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5000 /prefetch:1
  2⤵
  PID:4360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5112,i,9667055845953984991,9437228733949378166,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:8
  2⤵
  PID:1292
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4264,i,16468941576181937375,14776159758430968592,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=3648 /prefetch:8
  2⤵
  PID:2460
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,12851123473326292956,779757665981152903,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:8
  2⤵
  PID:4416
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,12851123473326292956,779757665981152903,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5640 /prefetch:8
  2⤵
  PID:4212
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=6000,i,15680621041541077040,2162399804512978854,2097152 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:1
  2⤵
  PID:2840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,13292056060348323210,1100909316524192357,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=4160 /prefetch:8
  2⤵
  PID:2888
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5056,i,5421236150600850741,18232544888178186496,2097152 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5036 /prefetch:1
  2⤵
  PID:884
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6728,i,13438921151509493819,8694165789531971798,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5696 /prefetch:8
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5624,i,16842195027439923823,15503605001606712566,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:8
  2⤵
  PID:5800
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5700,i,4973623905438651678,13251831643659197538,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=6512 /prefetch:8
  2⤵
  PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6184,i,8853681102895408324,11958902011358305349,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:4208
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5708,i,1770060597374467393,3832541340602456754,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:8
  2⤵
  PID:2616
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,5986622480162575872,4909642605862990122,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5920 /prefetch:8
  2⤵
  PID:5084
- C:\Users\Admin\Downloads\Island Spoofer.exe
  "C:\Users\Admin\Downloads\Island Spoofer.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:2096
- - C:\Users\Admin\Downloads\Island Spoofer.exe
    "C:\Users\Admin\Downloads\Island Spoofer.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: AddClipboardFormatListener
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:5956
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /c "tasklist /FI "IMAGENAME eq AMIDEWINx64.EXE""
      4⤵
      Suspicious use of WriteProcessMemory
      PID:3592
    - - C:\Windows\system32\tasklist.exe
        
        tasklist /FI "IMAGENAME eq AMIDEWINx64.EXE"
        5⤵
        Enumerates processes with tasklist
        Suspicious use of AdjustPrivilegeToken
        
        PID:3108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6492,i,10655623921973182298,693576821011029822,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:8
  2⤵
  PID:5604
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,8866372054633295131,2182818043443396114,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=6920 /prefetch:8
  2⤵
  PID:5868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5644,i,7395953093415887548,18014777422372691011,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5440 /prefetch:8
  2⤵
  PID:1072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.4355 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6876,i,5358636825908308898,3443669974275846115,262144 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5652 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:1500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5504,i,8144419122341201511,2142839980701308452,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=3244 /prefetch:8
  2⤵
  PID:5192
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1092,i,3180271074990522392,4030879700251802134,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5500,i,7152639300336851038,13162583843953943810,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5388 /prefetch:8
  2⤵
  PID:1588
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3964,i,16868937791842573873,16062262659097036240,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:8
  2⤵
  PID:2520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4976,i,848026771366957487,9762671080272263540,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5188 /prefetch:8
  2⤵
  PID:984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5336,i,5512977195561937111,10554349759215687730,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5384 /prefetch:8
  2⤵
  PID:5912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2752,i,3476217914024505342,2798236903491233782,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5040 /prefetch:8
  2⤵
  PID:6120
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_xpay_wallet.mojom.EdgeXPayWalletService --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3548,i,16733941363085882858,14008520444025811430,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5336 /prefetch:8
  2⤵
  PID:5108
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,12749190045125217484,1274915093508414683,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=3320 /prefetch:8
  2⤵
  PID:668
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5944,i,13182187500126650229,3704478179179397557,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=5988 /prefetch:8
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5136,i,5245185024037692594,5370349238947642790,524288 --field-trial-handle=2004,i,7207296509802582652,16566148058640990522,262144 --variations-seed-version --mojo-platform-channel-handle=4860 /prefetch:8
  2⤵
  PID:4308

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:5488

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:5116

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 fc69248227d1b80ff41106426895bcd599abcddfbfe7fdbeabc0fcc2aca903ae
MD5 be6741080fa256162cf6b0264133ca7c
SHA1 4914334b0edd1e4c3a470920450bdee63ee2f5b6
SHA512 8d42ac6412ff316aaa68e317e92c2167dbcac331381aec8d8be8410c5bfab4657127a0601dfc90f771660e393667d62af5e917155d6fcc5c7aa6a8ca1e03f903
TLSH
T149D08037394D7015E35D5175A463C7152B664C611497DF01F166CA7CD9B61C462C71C2
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 44e095af7ccad1927602b4b935aae3524939df30218011b877b59c782e6c6106
MD5 3c1bf221dd0438f719ae47a265c3e436
SHA1 b382689171539f473d331bdcef3739b0fa0b1062
SHA512 b7f8bf66ea12f9b37e5f8d1af222c106c1dfa377331d2153d9380edcc3af7381e9c3490378c0b160e05f5c4fd2e1590d5cb8ed07cdeb7b74fb7b38b0e8e1e57f
TLSH
T18ED080333D4D7015E35D5175A463C7153B7648611497DF01F166CA7CD9F61C466C71C2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 df16f88877ab3ed1d65092430ea7c6b2a5e1bd94f3a6be6ed184b234f66bea91
MD5 0a88abc50cd73a051fda56e15fdf838e
SHA1 55df09145d25315795519ecbfc7e35fe2ac2d50a
SHA512 e197f1f65b463d92801e3dc788be9a68001696d79db25cfa5fd4c0e5d1089e5e90f2f4354de71602fafd2f16500bda71c27404c1018f566c8e7bd8f58b829d8a
TLSH
T1C4E0263C43CBE5E4B2129AC6A49CBF3404C0F01EAACD5D9D3A046F8828811407B598F0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 04ad0894481e2edec5d4f67849fef92c59cd225151e9de5a3e3305e6fe773ff0
MD5 0061aacf940189fb42d269e7b59b7eef
SHA1 f1a532acfa933894cda166adfeb55298b221ee62
SHA512 1ab5d95e75464609f26431ecbfe911df75aee573df57d51269303f886070fb53027f5ddddb00c0207afb3f929285b7f1fc078b8e7543a7db3079335b413fd6b7
TLSH
T1F1E020B804C9D75D73046CC7417C5B0CC1C0364ED7C49DCE370489CC7146444BB865E4
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 334B
SHA256 e18789b092eafd2671105b15351f09195c90b71f210bf50e971324eb6943e433
MD5 8dd0d64dcadfeffc46f38a3c45270587
SHA1 36cd1a00600604b91553e1e57e4449a63c470eaf
SHA512 300f39d2a52fc0be5ea19054eaf0aedf051392e2a4af207fdd4696c283e7b3b8ade967190643229f6cdb3e78b435a567b9a3ccd7f780a2e199d43d9b002d5163
TLSH
T1C3E0207A04CBC65D6300688F41786B0CC2C3360FAAC57D8D1B04C9C434C5154BB97660
MD5 SHA1 SHA512 TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\MANIFEST-000001
Size 268B
SHA256 f7105ee15f6c063e16972ce7f67d6c0ed08f9e0aa54b0970babe4be326e5944b
MD5 9d48afc27b361d0d9b770528a4be339d
SHA1 ed35223c66e1cba5861e28f88734f709f4907d4b
SHA512 42282bd1136aa953a38d50c3b00181f02130090ba32c2320c267d03f5a8af90e1e2122798ff8e0abfccd08be90674b1df9f1b8e8125c8386f915fc7b707d0e64
TLSH
T1D5D02B9AF9EC9E5ED7E44ABD57F6B4000A880292840B9B1300347EC034966F01E25030
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 487c69e172a756b7810d1ecc7bb1fb2b4663fcccc7df48fabb15eb5f01282030
MD5 d5d5091eaed112d2e667717ea467acf0
SHA1 d0b512c025efe441f22e5dd9899fa500cef50392
SHA512 75ef829bf50deaaa9324244ef4dfb1c5011484e84a43d607c8650f98155e8e798f0f2c3ae8723ea1b488a3390f2aea8b60293fd4859c8da8166d363b6985086c
TLSH
T122F028EACD71EC7708FC0B1870E5074AE795236B3B80495B3A3C920C4FB553B858A81C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 7b0d5fc286f16cb6da5c501f29e09dfd211fc7d42d8265aa3260ab68cd8b6eb4
MD5 18efbc445ec56a160e9304d415cd5367
SHA1 61898748d63102d513fe18b640e5eddccaeb1cc8
SHA512 6ccf6c84a30000d20a7794fd5b23a5abd430aebe26ed897a36db1c79c544793deea0602a5b3d2e16916fb8e2ef78fb5460ef34ffee38fe8afecde5d794245d8d
SSDEEP 48:imSVyIjEiT9uTnaFxEUrzzMAgCLJHUJRlQVkKcWbpwKepEXDt:imSnjV0YRrzzMA7UJekK27EJ
TLSH
T1BF814C3AA501CC41E3B41DB49AC622133C75CAA6B9CF4E166FE0A8F4552F7710175A7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5866a4.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5866a4.TMP
Size 3KB
SHA256 b1fde23f8b23bf53782420322434cb2ab537ae74ed1248f84d99aecea1cc9e9a
MD5 99f85a67bfedc9bb4232d49cf53b888f
SHA1 f49730baac03628e3caa2d8a66f63ea9204fca8c
SHA512 a32e6bc861227300d2c9eb5789aec85344d8cfb6246274541d177953f671607fbfde900ad905201bdd6e105f7befde1d08f05ce92e1ab7647b794c2cd1cddae6
TLSH
T16E71A4397601CC40E33505F594D122233D7489E8F9CF4E5BABE0A5F4562DB7241B697C
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 3KB
SHA256 338aaf7ee8e060429ba240dadf0bc74dc7e18b814ca9747e86cac210b6d831fc
MD5 36839631992cb93eec1e0871b0316466
SHA1 768cae3b4f2a97e50a7d988372ac8adbd9f24d75
SHA512 15c70c828e57ac43cb36391fda62ab27f033bbc43ac600646eff9bb544793aa1b9b3267614528406dc3528cb191bf0542a5d725ca24dd5af4607b6f822dbf62d
TLSH
T13861AEF783F8856DCA1195F0EA04AE2FCE1C0515832C3D6A85E4AE1BA3E3471E141B5F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 544a994de1fff8cc6f99e683a629a6749c6b7364fb394d0986a5d04921b82b88
MD5 df3caf14558c9927b458e657e76137cf
SHA1 84292cc9677c883e641e565dc7345b9ae7341fed
SHA512 59dd2dbdffd944ddd8ba9e9f0b2c8910eb1ef919f6d414763754ec20c03add9aa3262f3544407e29b284828a9349132a0d476ecaf75db7799f88748f7d225851
TLSH
T1F451DEF783F8856D8A1196F0AB14AE1FCE1D0511832C3D6AC9E4AF1BA3E3471E141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 e0e6ecf2d97bc2f9a923aa01d131e9962f1df2041bc31b78b0036a703ba20d1e
MD5 d6842e97ae41644bad09ab05d8082a07
SHA1 007dbcc9a81ed7b25f1ffdbecd184674deddabf5
SHA512 dfddfe1d612fdec6c8ed94abd6bd368467ebc9bd0c7aebd67e7f237217b76ed3fffd8141e22e205b8eaadd524bf391e232f9c367451a5c23c4d53d3c09225e9f
SSDEEP 192:sxZTRUyMqZjK1Ml8UQ09C/fTsVoYZZyb5DzodpRlsHW6+WNeJn/YBrn1S+eCIg5U:sxZT9qyC/fTsVomZo5YgHbg/aQZCTtc
TLSH
T19672D71AAA385D7B8CDBD619BA457B53D6FC5563D2804E4499FC8F0C04E7AED220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 c2328eb50d09d64f2c3e3f7b03ded28b43f97cab844ce362efb41f5c7c6c91fe
MD5 410fd613cc5de5fba1bdf9cbb7108932
SHA1 22fb21e932b7e14452fec75b80d6c8af6dc3cd76
SHA512 5a2d55d266fe3b8a95f217fc698c05ee449f8e5d7776a500c4db36773313e70d315964739e17efdce8356fa48717570d125c9e2db8582af2df656f99ce972202
SSDEEP 192:sxZTRUyMqZjK1Ml8M9C/fTs9YYZZyb5DzodpRlsHW6+WNeJn/YB7n1S+eCIgjtFJ:sxZT91C/fTs9YmZo5YgHbg/CQZCjtv
TLSH
T11572D7066A345D77CCDBD609BA457B93D7F95523D2904E449AFC8B0C04E7ADD220382F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 b26cc6fed29f34efe603161f73af6181cb1489817a6e76699046a6cdaca708c4
MD5 b7a23e79e0a647b595be1b3256cd1c10
SHA1 added916036ac3671d0fa6673db6e50c4cc073e4
SHA512 54bb8387ec7c3d07fcc32ac1075ed60d2a50006b9d42e7cf51ed0479c7cb63fd0bd8eee75439b218e5d7477f723767553754fe2debae63d9484fd11782616fc1
SSDEEP 768:P4E/ael7pLuLnC6WvCuFO8F1+UoAYDCx9Tuqh0VfUC9xbog/OVc6yVLlFX6BaroJ:P4E/aezEnC6WvCuFOu1jaN6yVLfqBRVj
TLSH
T112F20B3B6C0CCB7E4F844E9CEC2A7E9A6DE8018B5698899447F9841C03CA7EF51165DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 8128e4dec4b401713bc92e2f24b4f93bcf54d0fdc7230540a021d14425686e1a
MD5 a385729481bf6e1e5489193e02b2d773
SHA1 e5e59e506e8a7617a3acd78f7185b4a816cd3b20
SHA512 b24bf48ec6a4b0b3624e66d6947a27a4d44b6143c515b2c51f04b54d516326ab3c5eb4239a6e7d6cb47c4266e86fdf29d62f991720ff81c113e67600a8f98def
TLSH
T1A0E068B629D30E04EC2FC3D5247240A000117804C504EC4F202AFA8360F03113009D71
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 7cc2e87648908aec7e4a4cbdaf80e8b444fce9e1c13e1a3ae2e2069a5fd1a475
MD5 aebbda3d22f64dfa1f848c39dcafcaab
SHA1 8b9b1bf83ea16d55977e5008b20740b07edc1010
SHA512 887d639e4ac13f5a9092353f2dcd52874fbf87902f9e7b505c64d1400781979b01b3cf9cf6b6f2eb5ab81d63b6385443bee43b5f658f6a2de7ccda706b86e91c
SSDEEP 192:OotE42aG3iLEAs1AOvQA7uItfg1MhlfznKzO5tZBBHaFlufF5XYP7cNBv3dR5LAW:8ptDYDcfvNR1ANAJ5DF
TLSH
T1D0B26D16713B065238BF2508A29399379D4231A33818F4EF7BB914A61F67E225CFD8DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 33KB
SHA256 27d3606bb9b4a01dfe1d50f709dca700a96901004d69edb05d7ab19bda46f055
MD5 26ddc586c6ab2d2a7e9abe1152df6273
SHA1 0481cb0c656185b70ff3320dd239f5c40558c0bb
SHA512 f5e6160ee695aef05e45a5c311bedd200610db7245ab71c84ca1bd695585bfc5a6c6bd52c47f2a940c460941171d105fcd11fde068d55af04cb349e81c1bb47c
SSDEEP 384:yNiFGtNnNnb9D/3sNU8TUNTUlI4AyDcYdt5JBfpG2sIypVUXKITYzKjqKEQYELU8:ZFGjZbF3vwgyR7G2Jyp6sGjqHQYER31n
TLSH
T166E2B4F598D78976E99E4B87A33E2E425ABCC153B5881990FBC84D0DCC821BFD307815
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 4f1cc9b88bb9e901dc0237e80ea769b456df85ba9eae0c3586c00267eda3d907
MD5 ba9181a2808ffc59eaefca33eb737cbb
SHA1 ba36e18c1057dbb16c6b5fabf6eea5311d9435e2
SHA512 2e200f8fe2546dcacf6fbf4ae93949f776cadf29a085d501c93e4ed98381cf1c5847ed42e293b157f9fbf6fd4df738b3b98147921b55abe4f5936b8b444f89ff
SSDEEP 384:nKiF9CcmyWCs3sNl8TUNTUlImkrDcYhr9JBfpG2sIypVLjMhkP+lFYS/n1lYHy/P:BFccps3SwgxvfG2JypdjMhkoFYS/jH
TLSH
T16DB24A35EC98DAABECE64FC9F74A3A47EEE0026786985AD4DAD81D0C00C70DD1347C26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 28KB
SHA256 66902e00696be60b36592dd930cd4de8b2f2e9610805561a6b5288160760198c
MD5 bfca5283be10ee79f53a1b3080910bdd
SHA1 7f135dec4c018a8886992895b3fb98091a707df4
SHA512 e7278dadc8a69a49876016d653b05202d57e6fe0eac69b78cc859c9d51c6689a0ebe799cdd01ae0be1fa2adf1d49c390ba59f16eec79227aba67cde8f380c3ed
SSDEEP 384:yNiF1tNnNnb9Dw3sNU8TUNTUlI4kyDcYdy5JBfpG2sIypVUXKITY1QjqKEQYELU8:ZF1jZba3vwgum7G2Jyp6sOjqHQYER31n
TLSH
T119D24B36E864DEABEDE74F99B34A3B53AFE4026785885ED4DAD85D0D00C718E130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 24KB
SHA256 9d3c87e4b4e6ee3d3646ffe70594650ef6d835184820a264d223e978e412a173
MD5 0753b7854f78eb63f30a3c34d7765310
SHA1 2300cbee9e856038e020b9160a7a25ea6f668f99
SHA512 e58dcb15cfe0ff60891c555e0fa6dbc15757e613a663262f3a38593a605284cad732fa3e35712b6726e4812642b1f326c05b6edfed553a3a84f7bbad0de4673a
SSDEEP 384:ykiF9CcmyWC53sNU8TUNTUlI4k1DcYNy5JBfpG2sIypVUXKITYlOjqk0uXsd7Hyk:2Fccp53vwg967G2Jyp6sUjqk0n3
TLSH
T1B9B22A35EC98DEABEDE74F99F64A3A53DEE40163868859D4DAD95E0C00871DE030BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 826c250c493d1de4432ee51baabab21457617996d5f0841244ed0959a461510a
MD5 75cf94ebf584700ce386f2da151cb7a2
SHA1 c61f302896ee73b895f47af2b4126f0b8e345174
SHA512 16e6ed9e93ee9b6994465a06a9b30eaea0334eb815ae80a6bec638610fffbc43fe03fa6675b9b8004a0404116c6212f66dd2f95fc5d565d05e7822c444c750a7
SSDEEP 384:yMiF1tNnNnb9S3sNU8TUNTUlI4kyDcY/y5JBfpG2sIypVUXKITYlOjqKEQYELU+1:uF1jZbY3vwgu47G2Jyp6sUjqHQYER31n
TLSH
T1EAD25B36E864DEABEDE74F99B34A3B53AFE4026785881AD4DED85D0D00C718E1307C1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 de95584d1a202d579874a15798c912115734329b2ac21ee741039982b2e63ad9
MD5 70fc56a8ce269607665576ea4148a35f
SHA1 724f0f8c0face9f0baad739e3441c1165788359f
SHA512 c810cff159f87e31567581cd0f8cfa2c90652a7d8789e07aaf9484fb9741937b54cddb83c314966dfdca1fb8025089d50e49f787f2d57cf5f04978d8494fb832
SSDEEP 384:ykiF1tNnNnb9S3sNU8TUNTUlI4kyDcY/y5JBfpG2sIypVUXKITYlOjqKEQYELU+1:2F1jZbY3vwgu47G2Jyp6sUjqHQYER31n
TLSH
T197D25B36E864DEABEDE74F99B34A3B53AFE4026785882AD4DED85D0D00C718E1307C19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 0033daa691809d34254e1934f90160cbecead1519ce562e930703aa7fad82ade
MD5 b587ce400b85edcba2dd4cdaba4fc7ca
SHA1 dfae26a2514c79928cec51210007746a0a6b7896
SHA512 e3e6b4c725bdcddd6e56dd71c7590b16ca3cd8fab728f435ba9805975a27399df25977474460e3ca5d2ed2047bc050f84a64301f6e3e416b78931aec79cc812d
TLSH
T12C3142E25D3C1AD1D4BD0ABFA48B38FC94E8D73AF1A430B92854DED50729A0D658143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 1f085e8172469700f1177aa95a72280ef2d1335964e8afa6938089a216f5277f
MD5 bbe2be9c06615615f521d2d86496788e
SHA1 c1bad313390d52e37eaa058457bf11a1e81fce29
SHA512 d1caada50d8c808d9e02e327579833ebbeac3ac9bc6e2363db8c1244e96789ca4b2128da9190eeee2a8764c1156921b39ce4f00a377fdb0874c2f1bea9470d87
TLSH
T1664122E25C381AD1D4BE0A7EA49B78FC94E8D72AF5A470BD2858DA950728A0D644143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 40796bc0d09d6684d27d1bdc3928437e6850b0dc7d3def9d2b6fd28930fe1e3c
MD5 93f6ef23875ac5f74b0ee82356f5ccb9
SHA1 4638a99e5a51ace55bca98531e80faa9d2b4580d
SHA512 7f7ad157832cba2267601604813aefb4c763a50c69a8553dc343fd23569a50d22060669a0cb4af9bc0b41b524240a8014a0c60a89a896059e7de37936cfb71e4
TLSH
T1F24123E21C381AD1D4BD0A7EB48B38FC94DCD726F5A430BD6858DA940629A4D648143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 43f97e6eb7c84bde5c33060a765d8b91dff2220f67332c2bc903b6830468ef28
MD5 75cec7d417767c25127fde29ddfdf0e4
SHA1 bc29c823683e9500beb9ac460fb044562325448b
SHA512 acffb33a51a58872d479b8bff881ceacc10781d1931b7f17fbbed75a53bb42cf02c3b53faa4f2734ba7c7e7e558cbdcadd11338d191fb5aeed85f0d5a9aeae6b
TLSH
T1484122E11C381AD1D4BD0A7EB48B78FC85ECD72AF5A430BE6C58DA940A29A1D748543F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 7a0cfccf2e7cb45ade90b149177e7857099cf278e282eea8235a4cabbfbc60bf
MD5 8eff60160d63667f52f2317b5eb5022c
SHA1 0c1d50da15bf8aff8c55fe6b123a5062683251c4
SHA512 2f7d6fe8da70f7c43983b88f03324f2f742a612ebd0fe3c630fa44044bf9b2c24e59aad6edbb850f00b719b41151c7cd8cddac0bba94d309d13a2a92ff14389e
TLSH
T1A5413EE10C781AC1D4BD0A7EA08B78FC80ECC63AF5A030BE6858DA850A79A1D648543F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 e4379b90a43b6f05153e84186f5be88a9d2d37708f7b33ec0f9b8fd5c1cde6ac
MD5 63b267ef10a92946e9aa61eb409cfed9
SHA1 d940f1d04fa5b4c5462432c7d6a7761d9e743291
SHA512 32f1e344a34a716ddc931f772e7cdc5dcd39bcbe0ff32a841757082a104d392097f12c6b87fa39e8a1e8837d99e3412e2bb3e8c1e2a7fe8852ab6c572a9da813
TLSH
T1095150E14C781AC1D4BE0A7EA08B78FC81ECC626F5A434BD6858EA850A79A1D708143F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 b63fb066bc0aa352b869b14c71daed760f96c2a327820de702c26718a6a67c7e
MD5 7a2baf2b76352ca37b76f84bc957c65c
SHA1 6ddd4dc3794308aa1e3ff3b3a8c77695a5015fe5
SHA512 da2d22eb06168f59f609b10df621711483428a27e39e0394d3cdaf20f4c5a49f8c234189279eb9be9d4ae682fe26dc7d25e9bf824f33b651cc4bee7d5a67bc6f
TLSH
T15E5151E14C781AC0D4BD0A7EA08B78FC84ECC626F5A430BD2854EAC90E69B1D748543F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 2KB
SHA256 45f083602752e9084e35b431a5a93156e1d2f14713d307acb0332b41e3bc1876
MD5 4f833d5727fc083c6734b47fda3d8284
SHA1 8021d6150976d852db114befbb998653e88d017b
SHA512 65398212193081b2ad16e59d0334c0ebf0955838812777f85e437202836c32b6521f9167c8a3bfea525053d730e70d2f3b6c76d7c94b7142f5e4270b2bd84605
TLSH
T157413FE10C781AC1D4BD1A7EA08B78FC81ECC62AF5A034BA6854DAC50A29A1D748543F
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\component_crx_cache\metadata.json
Size 1KB
SHA256 e80f5092f19ec56223953870bca3576a2e2f426c2a70213136cc34d852b76500
MD5 aec06723a7094de2c7a4d93f8824ec33
SHA1 e5742673ad3367cae8c1e2d26f6f46d94f739f53
SHA512 f024cebaa118d5ea5a234a9734a59e11bc6206e49e1587d685ebe087b3b0557ffb08eddebe182d75191361a940f146598f3a406c65969eb26cce93d99cc30567
TLSH
T18D3104E25D3C1AD1C4BD0ABEA48774FC54E8D326F1A470795854DE941729A4D644143F
MD5 SHA1 SHA512 TLSH

Submit Download

d766e75ceffe993aa1dadd5619b24043a0ebe9a9689a6796d19d88bf952683d4

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\d766e75ceffe993aa1dadd5619b24043a0ebe9a9689a6796d19d88bf952683d4
Size 147KB
SHA256 d766e75ceffe993aa1dadd5619b24043a0ebe9a9689a6796d19d88bf952683d4
MD5 a9f7675ff091bb15c88909424bab4a39
SHA1 90f753d8d7e4397de0f49631fcd9222a7f59148c
SHA512 ff1f89fb04ae9c9a4c6cf6b1475f5a77f1c4f90829acda95cb39889b6b15c3b4f0b3b822a668f8ec8520b002cc90dd397cc26d314ac8fd5f3e2c9826bd458df5
SSDEEP 3072:Ph3iICVe1DvTtr/3tOpPu8LdKBTJyU4AshzWnD7UVDvuZE4tkGL:PgTVWvTZPghwln0AD7UV8Eeky
TLSH
T12BE3E01D29E2846EC82B24F4BA4A718FC71ECF07910BE40F25D984A55C7474E17E2EED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 132B
SHA256 d6bb12722d8ec159af735b3270f83013e8b8e2df54df596eac54c458b11d445e
MD5 e6d52bbc2ba6378f83c8e079c3b58d30
SHA1 2768e8f09a3d414aaa25fb104cffb69e02b8198f
SHA512 40af0fc8008a9d3194c4718b4d0a75793b652b2ee28798bc85f27b90ee46c59025f8d0c8abeea9ff371c756962db066f2f00cee485b203e688a9ee8f2e48648d
TLSH
T171C02B8F243E4DCC4E4A02399048032B8FD07518302402388C0BCA00003DB0E5F4405F
MD5 SHA1 SHA512 TLSH

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8670cf9af5758c2e9f7e1e1e7b3ff032ae52786b7f1efe2a6bbbc8994780e92c
MD5 0755a8fad73809f1e51917a1c4b74e94
SHA1 d13fbb2c14618f0c24aee8562ea9cd11bdb7c076
SHA512 e92ab856f8ba958bd953ae3c27213ce3fafdf8d2b34b062bc4c45e61fdf63620c8ef2352122043361025b4ee0c5d97b87ea38fcdcf4e30c7fc853597e91f0055
TLSH
T18741FC58B7F91148B3776F1A9BF6686E48BB7D672E06D09E10110E4F0A62A40DD71733
MD5 SHA1 SHA512 TLSH

Submit Download

AMIDEWINx64.EXE

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\AMIDEWINx64.EXE
Size 455KB
SHA256 13037eedd91f9313ec0d807947db65c639642e5ae6497e87d12fa6d19951f78e
MD5 9adfcdac59db3286690c7eede8da2528
SHA1 0b54d251438a634bd13b49a1f20587cf03d4598d
SHA512 fde1700cdb4212593ec2733944a169c7d02f436ca6831719a33482fbfd0be289697c9aa6ce7ddfb6c245e87952b35416929bbf69753d21a24197ac6c2d1243cc
SSDEEP 6144:PRx1SY2XTh/Fq+1VU1/SznTh8NUc9v4/nOmNAFw+lgBwFejOLlC:PR/2N/I+rUqE9inOmNAFwa/TQ
TLSH
T1B0A4084AEB5224E0D876D1B8C981521AF6B0BC7847349BDB729C41090F76AEC9E3DF58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AppleCleaner.exe

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\AppleCleaner.exe
Size 4.1MB
SHA256 18dd5e7967a46e933cf61f4a46efd5c7230fddd3097647050d7a39828f1fa354
MD5 36f1af84dca2da2c03a7730a0f3c0d51
SHA1 ca8a525d402426e0724504c25d4473171ff57f3c
SHA512 ddbc25aebad0db9db9fdc7fe5d510677c8d5b4fd23b58fa2b039292168e594aa5e564f8529f56c3357e9159afeb328e1b90e193487a7d7c4ce19691a2e918242
SSDEEP 98304:3sfadOQI108N97YsZKVJ/isNtGLhk5l5Ylr5ZGX9XLL8ox3iC:3UDQiY//LNWhk5l5YJC3n/
TLSH
T15616333EB9E35ED7D7989636FC8660863096394681CABB81476F2403D33BD660F0552F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Audio.wav

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\Audio.wav
Size 27.3MB
SHA256 29c59bc34162c7682eb8751b28d27b5cb06eabf46741556038c9c7510f52524f
MD5 b4ab8c3b37330250b01d69399f59359b
SHA1 808fd3a18804dfd403acc242aa01944f25623e41
SHA512 b9425aa8cf58e909ed82ac59bc8d9071fb01544bf76f91f75c92fc5d61141b0c4594cea228ef443c98d385ab5d3c68a56e40019f8f3657ebc370f08bf5ab08bb
SSDEEP 786432:qWtbkPh/xglzm53QbdMJHPMoV8ZtTrMIBK/a:zEhelzmipMBPKtfya
TLSH
T1CE57333CD4E27640E2ADC6714B80DCAC6263A59B4D12CC6E317ECE46B919B13395E39F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

qt6quick3dglslparserprivate_metatypes.json

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\metatypes\qt6quick3dglslparserprivate_metatypes.json
Size 4B
SHA256 3fbbd4c6d76130399b0c79cdf41758669224a91e05b7b216953f0c9728750865
MD5 f17c6890ce3e5d805aad7ee46da00fd7
SHA1 855ca7e4e0c1c862e50b76ecfb4184cc39df46fe
SHA512 eeb77c599dbe5da30338cf5a7b9dc16f5f4493aa68ce5e9953553434541551b5ea8bb9f5289fd0ee15e1ac4513c7d2888797b3d72438defb196270483608fb45
MD5 SHA1 SHA512

Submit Download

dummy.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick3D\designer\images\dummy.png
Size 375B
SHA256 fbc370c541a931e22eeba5157b47f30fc60c7e29580b9b4904703b6e17910bf3
MD5 762ab24b219270dc7ee7183da2f1ef79
SHA1 de4b6ccb4d5b6743903e91915d8ff00e52f1336a
SHA512 c11bae321fe32044d8c7f05590bf30f15585283c0a95ea2a2eac63e3e493bd3386354de050df13b554b197cceebe03069b523286fd3297d16cc0a27072cdc031
TLSH
T19BE0F1C36D4440BC4854D25725A9946BC61305E6967082949603D22D76FA80A11D1017
MD5 SHA1 SHA512 TLSH

Submit Download

dummy16.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick3D\designer\images\dummy16.png
Size 253B
SHA256 20367abdb3621f0bbbe473dc2c16708318303c600356dd3a53c9465c8a694e22
MD5 bbff95cfc3d26e011d4cd5b6a978625b
SHA1 6e2c4e01dcc78e1210ec39a236ccb4388a71cd5f
SHA512 7378c69a5c23a36226c9f82aa2ef7cb693868425989a1baced24b73830917e354949af640b7b5aef82124902275debfba1d8fd46a2767c71189dfc935bcfc738
TLSH
T137D02BCA2351FD7D8BC79B63C964A248C8752B8D92C22631A655A5C7505A205149324B
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick3D\designer\images\[email protected]
Size 499B
SHA256 ac0ced9846290510f32ffb115d29e5329442fec01b6527a863ebf541ca8c8ed5
MD5 73dd25fb185b415c0590f122bf05cf7b
SHA1 0d268a5bfeaacb8744a9b372409caeb6f1039653
SHA512 7c3d69594d8d73414f3ea35443a7417fe75fed45a0ac6d07f29bebccc119375d6c50a7ca78fc0a349304ce21f71847098e7c83ba9a8b624729ca6bc4e986faad
TLSH
T19AF005C3D350BA75CB6D53E1A037850156BBC540913373558908A32F18C1C456259E65
MD5 SHA1 SHA512 TLSH

Submit Download

combobox-indicator-open-pressed.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\combobox-indicator-open-pressed.png
Size 120B
SHA256 dda8d0d5444670f0a82f7b7aabf1f771d94d0c418f15be75b120137758932c7a
MD5 a9d763e92351af2d6d6fb16b17e36490
SHA1 c45d83865e7c09c8ad6f790fdcb9640eca207a5e
SHA512 563f33bafd2fa7263eba83b6285b84d47255d9e23fd3c41ec9684b64bf820723631ac8f162765ba36e6f393c00aaeb73f3c38406693a19d7ae13630c42cd53ad
TLSH
T193B02B92E0912824C7084133120CD550A8115448448900302700D431221E10C0050F33
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
Size 167B
SHA256 6d584df93b6785277a090e3c2d46ebba057d262253dfcebbb81585a9f48658c1
MD5 5829742e78fdd6cb8f893903fc814778
SHA1 e2e3a2ebaea56c3664004e7c5758967a04862d36
SHA512 7e4ccedbf24842f9f00123415c16e4858ef70b76783358601e5024d22faabe128ac78b314f9846af8c79818363c2f64ab77902e6ee67e2ea802ff76bfc1e9b72
TLSH
T151C08CCA62B15C698EC8456B938620A49CC40C5D28218A638286767C5DB232AA983783
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
Size 177B
SHA256 340dfb8f5d90ee5d986eb4b3570a2b3481ca50048a1a5eb38144e13a598d9bc9
MD5 7a6d8bc2b7b89f67d0071fd478f03c56
SHA1 debb609ccbf690c74690b13c424530b5fb6e1293
SHA512 08939949b87639243e0dff61be03fedb314b76429c93248face3d8d159c3ba925b39405bfb88a70edec038312d0773cf8b770f9aab410df7b169be8ed8d52378
TLSH
T176C08CA763A09E32DE45A8F7C34A184584395D10ABA2029F8068B46F1A34192DA8AA63
MD5 SHA1 SHA512 TLSH

Submit Download

slider-handle-disabled.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\slider-handle-disabled.png
Size 442B
SHA256 e04fbcc696a2ea2a326a1b7bc57f25a0e1b33091e588889da5a9d7015c595022
MD5 34b81abeeef2a5fcceb972f1e3cf2997
SHA1 e262ba643aace4b66c93842989135209a7b8df85
SHA512 e575c06e29890e63c6898b31754b419eeb73ff87d7d71d0787a8fcc3d2a30c82cdd83eb94139d9f0f25d9001da9e030d7c06ba1ea2392c191d6cd9e2112fe4f7
TLSH
T1E3F0ABDA6B9F28AA8409581A10A891228C2C1C00BC20FFCB6789B46C1570E9682C410B
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
Size 698B
SHA256 caf54e636473e19db45d86b01fb79142bf28e916030ec3b60272a14643313460
MD5 bac5eff99d83f1b5c73fde4cd05c9db9
SHA1 4824a9748cce1bf329558dc887bac4a509d197b5
SHA512 8c46a4bd86b8f5e8cc4634b6af3d4f81a5dfe7f9462fcaf6aabc818fb085cb3724508d926c84a0243c69af585c1bf9ad95e02c2ed25df38ba2107815467a18d6
TLSH
T1D90123D7505614D907412E6E436C54204DB80E1C7179B2176288F3FC497591C3CEC0AA
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
Size 935B
SHA256 60f757e557455aef99ad54ae55c3e8d18347fdef0bdc5af176055e154e7b8f38
MD5 2f2fb4bb6e72e89435b356a6cf44c81e
SHA1 11f3ee2d3f0cd0dd9002b33399a714d0721abf56
SHA512 ac4bffda40907144446200808994e35c1a8512d95f3c71fc7bf6ccb41853e7dd44f63424ae1fb592a54677fb6bb3e778335541fdc6f0720b0f990cf72af93128
TLSH
T1B91163DB3918BCD685990A2F156A3211917A5E1D2025DB23A15CB8BB0F70F88A08E88A
MD5 SHA1 SHA512 TLSH

Submit Download

slider-handle-hovered.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\slider-handle-hovered.png
Size 493B
SHA256 4d5d16a9ef3db072309d531e11057076bfa7b03f4f47f6bd8a7d89d1fe0bd39b
MD5 9848e43810261e6570a4cf83c3752b4c
SHA1 6c228608e331b9fa2cf9a44e74c7507c19af7d63
SHA512 4fa4df1cb5e08f14d1e990280e834fface6270ed637ce1cdb1799f1e568e78be9aa7f440af1d2002c5f50e2f22a96199e1fea6d957d996d09cd05e0b2911801f
TLSH
T1BFF0A357321FEC47C904D6E888A84196EA2A7D97354A73B72A267CDC093EFD8C5C9143
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
Size 875B
SHA256 6001207502a85ce95a405c9100e575994dab92e04fd28c1c66eefc69c52dc3ad
MD5 775918baa819c1f84b2d51392985de66
SHA1 1dc21dc416d21177ccd58bdbf93596cb5ecc997a
SHA512 98d4cabd4361dc4e2226e0a2911c918a52e51cd8ce67348d0996dac0607922776b0fc72d6a527e6d46f8c12e71c606d6fa4634db9bbd18cfcc3a4a26d317f42f
TLSH
T1B5114652DA5F1477A9B0300895DD01D0DA611E4035693AF7858A7EE94036ED71C9C3A7
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
Size 1KB
SHA256 f38227a12d179e016f9b2696d3dc8ec4c6c96c275cfccbe839dd5ba0c51d9b26
MD5 5eb1ce92eb912af9509c4277272943b5
SHA1 77d4586a33e99ab715a628af2ba6adac2aa7e39d
SHA512 b1865a0eb9fa04138ec132cefc0008f70f5f181c39e4125b694079f23feaee70c92bdc58f9f5d243cba9298785a3bd2eed35638ae4c322b2e1e0303b36b47b7d
TLSH
T1B9210AC634AE983370B15B9EA0CEC196FE862CF3092405A483DD78EA577BF8604681C7
MD5 SHA1 SHA512 TLSH

Submit Download

spinbox-background-up-pressed.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\spinbox-background-up-pressed.png
Size 317B
SHA256 237ff3516492b63b2ed41562ea6e3b983f277a2375f12d427a0a7769cec15043
MD5 d0b3581b97087f79fa2e265737f44eb1
SHA1 34add1ba94fc3b95c7335ebd9a821487bfd6ca00
SHA512 68125745776591cc7c9869f938c42c2b19021027aa0c1c08069e4b9cb9c4425389e88134b39558832051ad64762966642c9c07c8d71ff0979b3b5e34f2e8cf64
TLSH
T104E02BF68AD0192FC6CE8FF706680716D9212CEAB813B0145111F4191C30B0EE0DAA05
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
Size 683B
SHA256 349cb567bded99187024758d0cb9cda60b55227a4d7fe1763f7f41753f692d7c
MD5 d0e50dd9b89b841d6ef1cd78d2e3d1f6
SHA1 9018ef9ff9e0f1946be96597b5f344715efaa773
SHA512 8d09c2d0f369a673c8d9b7092b46b0ad68320a217fd4936133727331e6125ae0129c4986c3503cccca8246058ff7b07e70cb30456f480c6950490fcaa87f4d0d
TLSH
T1B50162FB16C32956B604D0E19850B80C05397F26BE520DAF5538FD2E8472D0FE782A07
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
Size 1KB
SHA256 4c9186092eabc6788e704b074423e009cd3b80a8d5de0bb1ada6f7599f91bb9c
MD5 16464a005372e7a0092f1721f96a3fb0
SHA1 900e4a0b3744bd390f89592e236bc7e2358b16d1
SHA512 1f854ecd6dc27978a54b4ab507c662eea0c2ad4209306b0c568b4ee8a4b2c2d37d5304eb91f180eff43db9d1ba9e1310c72a76c41312fd15de0dd3fede20b67a
TLSH
T1E0218683B5705D2B5971FE17D4284544AED18EAC3F6400EAD1B6312E3679941C35B33D
MD5 SHA1 SHA512 TLSH

Submit Download

spinbox-indicator-down-background-up-pressed.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\spinbox-indicator-down-background-up-pressed.png
Size 83B
SHA256 8285acc7fe450d3a72eed1432566f7aa90af7ee33a154aa7402dc707018979b7
MD5 abd4a5f439d8f789c9f460945c09fefd
SHA1 dad89434297a1fcb7baa221f8c924fe1e0df9cfc
SHA512 d73432e7014978d01ee440de8144ec6d9d62cbc3c8e040de94dc2b7c2aac4c62d5582ac3dea1c1619d7e4bb9582af8a96cdf836aa292149ae3b1bef74f5dfdf0
TLSH
T1D9A012E28F4068A8D09502778526D070C876010100B30008901A8230B540A0010C4302
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
Size 92B
SHA256 4a812392a115a37694707507b84dc3c789fb3880c298cce2a7d31f1d837f601f
MD5 c710613ae2b8f9e620c1663ebb8a8de5
SHA1 fce48edc3b6183fedf5fc3ff29c68c7afcaea290
SHA512 c35dc15a92d3df91ba6b0a2c1458b5841f4df5dcf8706566ebd7e72e609b96e7f09c8141cd099a805234318d127e147c21cb58601781b151f6bbdf61a44ab67a
TLSH
T108B012EB56400E28C0A2013B673A8040C4B072078A310104090584305C125440544352
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
Size 101B
SHA256 02530ad19a6a050f2813c5d801a9fe75c9b0fbf4508491c6abb1bbdb72b28734
MD5 27d3ae547e7e8ff9c88e8ca58a201f25
SHA1 17a828d4ec352b0ae8b6f9aa7623baaa4a920c74
SHA512 3f55067d9369c367a0da811f61369ab11e05026258fd80a546365b7cac776869e0bf222b79b75fcc7b0deb881e340271e084bd675efb51dd1473a510cf288dff
TLSH
T139B012D793754C3CC33481228B1C8113CB56073CE019415306499C650AB1216C3D8786
MD5 SHA1 SHA512 TLSH

Submit Download

spinbox-indicator-down-icon.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\spinbox-indicator-down-icon.png
Size 118B
SHA256 33f189b55282b1a6d904fd2424cdc051fbd3af17b942899942fc6daf46280146
MD5 ed93c06f00fc6df9f9a60e049ee927df
SHA1 35443a7419b91d784a93e7e89b686a4d6577dffd
SHA512 d2b1cd6c0f6f416dd96ee9719357d088355bd9cfdb328ebc1b96d6273cfe4652ccc37e8f66d3b654f3be4b168e881b7b2f6fd8260ca2a115fb15090af2bd8723
TLSH
T16AB09BC5D15159FCCD41317B94491220D9356D2539594FD9551A553714D5045F14130D
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
Size 164B
SHA256 e2ee0ed4ccf6d0e468b02b83598f0487cc3167d508c6e08e6490b925d8305474
MD5 84b1c5af5460f1468c4cd17bfb7d7ffc
SHA1 a9c6259103be4cde24e9a85e5ebd7f663ba3db97
SHA512 a7394e01336bee9993ee2603bd7abcd56d86e815e502fab58d52311e998ffa512d3dba9a99bfb9dc7cf935d67b779059ab1b1baf53a6c9ec63c4b05cbdd5ac82
TLSH
T16AC080E01EB7597BF3040177655AD130ADB6471459195614C1DD9D3D984910EC055513
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
Size 211B
SHA256 d712f165711bf5e0f265607705a4e83452c8fcbc59e106238663664f791f28e5
MD5 26568e7446e134efd965b6b5aa29c8d9
SHA1 12eb2e9d03ea621dec674ba3c6bfbfc80656dbeb
SHA512 29d11aa4bdf62dd609b7753a91503d50d589ca6c12761ad4d033f55d746a0f27b582a0737c319f0f5cfc1e2a213084195f81776ca4e1c91546f1b73dfe1741e5
TLSH
T1B3D012F293403C1E89D906B5529C4545C86A4E1D9E3252626418B42C7A3698481F8762
MD5 SHA1 SHA512 TLSH

Submit Download

spinbox-indicator-up-icon.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\spinbox-indicator-up-icon.png
Size 118B
SHA256 7109a067ad00c3cdd31365c76ea8e24264910fe9b1350a292fc00dd7d2b97e5b
MD5 199bb6520ab013968e74e85504c8544c
SHA1 b1ebd8627cd955e44261b6f457f0229e17ab4579
SHA512 543501c68c73ffb92379cf0eaf29e3c9cc9c950bf158a23afd49546df25ba55aa0a85abc4b6b822923bf69558badeb2ac822541530c40829faf7064f29e4eb3d
TLSH
T1F0B09BC16165793DCB16517E9605201485755B6821851768510BF4751417055D094745
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
Size 150B
SHA256 50e45c5bc1f41a265ccdb7106571d751b4a875577d19c5409009fcdd0e82cfc1
MD5 48ca0e19d6ae84a966cf0a8dd4c1ff47
SHA1 97cfdbdd03481d1b6ae8283a7bdbbdd70d2347f6
SHA512 b60068add983d8a3e259feb0734a0d3060bace984d5693da01d3340c64949b7662956605cee90841cb0438e22bbadb9ee9aa5539d76314946e036fff22eb95c0
TLSH
T1A7C08CE26A8BB4A4A88A022660F64320D066842482D18089A954F1F841877495847A03
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\dark\images\[email protected]
Size 210B
SHA256 f85b2a74823a54b1d904d44b638204ae78301a91eabacfc1dc7f07508c384057
MD5 a53be3f2aac6ceb758f6d7669f5d3c1f
SHA1 86f8e6e4553dbebcc5048f5ec922da300ecb76a8
SHA512 4b58e4c8465df0dec6e022a1f91ea481ec50ae97e9ab88deaef59fd1e42e6e0030bf80b597b2c86f2a6d53b7b7b27547a778fb9e53cc225dc3f54f5c97c0fd12
TLSH
T198D012B5B209ADBF869B0753426C8209CC014D280A461156A406722D963140E9096A86
MD5 SHA1 SHA512 TLSH

Submit Download

combobox-indicator-focused.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\combobox-indicator-focused.png
Size 125B
SHA256 0941ec5da06f1cafe91004c1b035997609ab1eef1f39a9ac5f0bb558dd8f93eb
MD5 a189060065cfef46d1bc5a7150b390e5
SHA1 73f7375aa440ceec13bb16ee7416f1033e6e4400
SHA512 393cf37bbb82c5b3b5e91f989ef84bab4ca65c907d5bf4b242f0e75a056677fb5cdd55695881f70730d950adac90712e9b6074ba3824f9a42d0aca0a00840c0e
TLSH
T1F4B02BD22230287DCF4D0333490B80008D73323D454101018D05886F251DB0500DCD32
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
Size 171B
SHA256 840b43337d232f04aed0b3209a43a0b25bb5f4bb53920620c7e0bcc155743daa
MD5 c5bf70b32da28a72b9907db3192fdc55
SHA1 6fd954665a546c517567fc708645c02a33fd3f46
SHA512 5d7c0924eee3f2b0be4f1cb71a118905131362f5871c2973bde24ba305739db51f541f491421f88beae78f586a3a1b4fee9fbd25c5e2527f6c159fc1b7c5ee35
TLSH
T176C08CE2A220AEE5C1CE003E4289210289EA8D1C3E274102F645D435AAE110E46C679F
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
Size 184B
SHA256 b74cf0894a7b42aae0630586e321e3cea282724a16e1ed40322cb39014c0041f
MD5 908266ce67b93472e143907653199c82
SHA1 bba4cf1937a44620899437018fd8b5d6409efd05
SHA512 7e33945d29a4f6e717e22c5eb32ab8ff9ad7900842bb08112f5ae2212fe8f01be38964cf60e1d5fa643bf998c46d478038f88e1c62c62b64c1f8bfdbd994bd34
TLSH
T170C080C7F7208DF4D598D53DA51C710949161914D936026F15E5D81D4513270855D545
MD5 SHA1 SHA512 TLSH

Submit Download

slider-handle-disabled.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\slider-handle-disabled.png
Size 343B
SHA256 d0f2f23ce73f6559fa3a61f4e7c068875e321dc6aca3a0eb6a423ae94054b92a
MD5 c193c11c9827a76d682c215d8fc81a2e
SHA1 9f0b8a87122e7ff62cc3f62a713df9de12778cc5
SHA512 ec4562cef1a338ed11a6cb9a214698515ff4c02d3ff7b0d7381c7480c63e52ddb50b21059b81fcf982134e210f4ce156306180506594648c5a7dc96726cd90fd
TLSH
T16CE07DB392463C1AC660AD7680185A60D329035A4CA5240F0231A99639F226B90D4D67
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
Size 590B
SHA256 5d2c7b18155db2f3583896fde0addccc481a816a9b36531b201bc5e31bbb35ab
MD5 698ffb59b04034eb202468c06c4f0f2b
SHA1 c4869724b5182e9df7da9712731d0cf83d2655fc
SHA512 056e014b701556c9af02e53fb268b53a5a2867bbb27d02072ebdfc1424d3bda4df28432d35e9137245d79037788fbfd63eca76ccfa5723adf41fe2a07b12bfb7
TLSH
T144F0C0368B61EA28CE0904B15F148DA18E10945DDA09C23D0DA6EBC99906EBEC58217A
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
Size 780B
SHA256 7afea33b4b6109fccad617fc05ba2ffc422bc60b02e805303e129ca9954953a1
MD5 f0522340c01a7fe94c2774d6664674ad
SHA1 95fc0e863573a37749d5c8c32461386d2f0e2b6b
SHA512 d9bd3fe11d905090ea0088517b80f84cb78c608aff7366606dac0a7820d2a0945de1a219d2e94c1b959ea6131539e26096883e5f41579027dd033cd07cca7631
TLSH
T16E01E911C165A4B9CC7C007A5BD43C9075B33048D83BC129931A037431D32D28F411B6
MD5 SHA1 SHA512 TLSH

Submit Download

slider-handle-hovered.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\slider-handle-hovered.png
Size 513B
SHA256 3bd1cba7b0517257de59ea097e188ebaa706b7bbfca338a29ddbec2d944c5567
MD5 320ec974cd5352b0e0ece1548d6f658e
SHA1 b19afe19067e1f976c34848ed9d760f68e16afbb
SHA512 40dece1f2ec1640307a315eb6b761f2b01cd2b208c0c1a87c096778bf8d142e826d51f2cbe4351a0048603c875e364332254ef100cbe5b7b106db5a643f0b6ad
TLSH
T102F0758442C4ECB4CF87C5DD508C6924D83E5BDC8D8021A4CE504C126BC72F153E8CB3
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
Size 1KB
SHA256 caf1dc9e14b96d649fbc00a5210fbd0e209fee56c724ba746ea7a22edf73d5ac
MD5 c47a860f4d6d50af02b754ecb49956ba
SHA1 091ff88d16d313ccdec4546372153ce9e4533cae
SHA512 a69618d04414314b026d81b6d957991df794a1e1257ab54e5fae5ab872933df77163ae148e70baf15abc847d8dd91fe3803d1242b8ba7391d93d9fd13ea616d4
TLSH
T18711252F853B3DB5C1E2057B598E56449C3746ACFA610E51054FE96A9D353A110C3A94
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
Size 1KB
SHA256 34a47dc79f253f27a7757d747f3402559294fe080d1409890ffaeaad1a3d7b1e
MD5 e9d1a856239067967890d74edd779f93
SHA1 de390dcf922397ffdb8c1a0afb7ee915266fd404
SHA512 f2ba5e6558516c3dcde9ae20c954b2ef46cc118934ddb07153924b9f0bf2fbb71aa2508ef300653806d35eb2a6a4a9179de8ca52808558466238f8fe1ca35a6d
TLSH
T1AE31C99982C89C62CC7D4DF30AE814EA1F73154ABD742D65499218D2093B2B95B94A44
MD5 SHA1 SHA512 TLSH

Submit Download

spinbox-background-up-pressed.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\spinbox-background-up-pressed.png
Size 438B
SHA256 b690ff71125077a35907ee9df97bb986fbebb2ee82b1f443d86e25fd15738204
MD5 59b236bbfcf80799730a41eb5db6e0d9
SHA1 db0c6bac65a9cc0f8717447e06e16c92ca0408c6
SHA512 14b8f4d94c53a23850d5f8414617e9cc6cab23a03f82d0d3f1f17c6e99c5f3a826cc3a4a4f3e448d7cc92a148dbde4eb659efe63d8121049f7d2f16b01938068
TLSH
T115F0FADCC450ACBCF15C743148D444782D760A9FC97941196107AC3C5C3530E0EDBD42
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
Size 992B
SHA256 9b1916e06dd0605a1cb61052de50cda49723e08f280dfce484b8b06d54cb1a17
MD5 1d1c5a016cfd3ea6e3a2057599da0380
SHA1 80023655baecfc69242efd3dc53c680b681f14a9
SHA512 7d7165b0ab589e51fac7828300a9731688d0b50e69fe9aa366f364a5e98c14d89e62418cb8a4e9be63271f95debcb09ff4b7e2781c7c8dc5bc7d90eb54f13957
TLSH
T11D1165BF74F974AFDDA49771109818711B66D609255E4C0B930908BCC0F10885554C6B
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
Size 1KB
SHA256 ac3911723fbc5dbd7831c4049036f4f9d5b290a52164143d9e4846fc3fa5ceb0
MD5 9b74f84a472f3c247473daa320dc7e1a
SHA1 e9a327d1850b175610700f50bcdba9eaf59d13e8
SHA512 81b33dadb7213e8a3fb75e69b20e44b36432567aa6915cc4066b12b2ef4e9b094b50f994c48131534b1d416e1a04c9d040c23fac9f4aaab2a5692d98da920484
TLSH
T16731F6EA40215EEAE05F35F960DD08F8A851C03C93517012871FB8786D9A26C299315C
MD5 SHA1 SHA512 TLSH

Submit Download

spinbox-indicator-down-icon.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\spinbox-indicator-down-icon.png
Size 138B
SHA256 6291f9c78c77f1fb89dd0b43c51daa98c2ab6c98ca737c2ef1f61f1f201b4514
MD5 432942b96cec036996b48617c5b38d4a
SHA1 c783d444d450193cbba5de874ae323fc7395a29f
SHA512 76d935f697e31f4521c0bfd281931bd9da0b7b1aae75806a3a5fb7c8f920bb80381fdfc988aebe2564c6cfbf07fb25a055ba69975003f79a0e72fe2999cfb9ff
TLSH
T118C02BC033D85DB48E02C37B535FB6815C2C71CC10AC204492087F726D71410E4C43C5
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
Size 180B
SHA256 6fd283b8c8f1c96a7b0084a475dc0915cc7db16c938858b6c2fc42a2c286107a
MD5 4cb9524e2fd47071b240da4bd839dbf0
SHA1 6a2e10e02b4d5544159ad40a714c6b66508b7ffc
SHA512 c093ed39741b06489928c7a3b60c812325403d6d5daf6aeba5dbb739e52d02607679293b41c8911bebb56c8949572373fb5862c8ce36a01b933af23d5d93467c
TLSH
T1D8C0C0F893C3F8F8C9C84531754B900CFF2E1150E300301560C4903C3ED1709214D382
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
Size 215B
SHA256 bfdd4f412de35ced17a26b6090b41befbf11e97578a244798a475c35f1b81685
MD5 f5c20c701ba0afaef155867a3259978f
SHA1 bd78c42b1fbf4f7ca6ec8415e20358b09b5913d1
SHA512 a7f553839456af8dcb8dd17ee63011548c0c015756c186c6feba293588ebe7523b8a60a043ae08feb17547b84dd69e5d014c67b79de2b9afcd1a2336eb9fb183
TLSH
T150D080DBFFD47D28D50301F7C15841EDCCE2473D29076A52D1106C395D15A0E8BC2781
MD5 SHA1 SHA512 TLSH

Submit Download

spinbox-indicator-up-icon.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\spinbox-indicator-up-icon.png
Size 131B
SHA256 95bc4afbc55494f30ec3553ae051c73b535e9aad45426eb373cb788f25f88caa
MD5 3340595b829e7ceebc4997ce038e90e9
SHA1 921e0225ba2ed03be7257fa2b0ae0f958a4a1d5e
SHA512 ef0b38ebe3b48a3e2808477c5947d44aceed6bfd238dc3cd72814c9ad664113e0b78bce8163bfa517eaaab631696b3c2844abadbb075af4aa1dad259a9e83d21
TLSH
T18DC02B83002CAC38CF4850B74342024CE6701AF011A8412F0013D0310B115ED8048709
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
Size 164B
SHA256 d5a68925a3626dabc5a773663cd0134ae03c908c0c8adb4381578078c3fc056e
MD5 42fd9607554573669c87044ee3472156
SHA1 ef6a403c0581dbc7ce08eda9f1f69152242433cc
SHA512 4f974de0e694ed5761e318fe52f2b3112cc33b86562dd374c607047e47f31b9cccd1ed1cc743492c3042289cdb948ea0865c027cd8c77056f6232942931288df
TLSH
T176C02BEE329C7C34C314153311C59110C531A6DC6082C70B044980321DE204FC1C23D2
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\FluentWinUI3\light\images\[email protected]
Size 206B
SHA256 9bef876bbd6193e05e5e0ad50706ee454d1ea71da782a6f9e9bf8e5e71bb920d
MD5 10dafc29a0983b6524f168083824daf8
SHA1 2f5197f1e9f10ba3c9a1b4c7a1c0aec5e905bb96
SHA512 5142031c3627f6fb4e99ec899f66e918e55b714dbeb0e4ba46be4926b0161541ce1b29153b26e98cc170875b34cb238d461b82158d50586b14e8d4eac2ca5097
TLSH
T1CED0C0C21314EF91D151443BB07E010A82203C18D44BCE0424A0A40F48F9D80EDC4692
MD5 SHA1 SHA512 TLSH

Submit Download

QuickControls2ImagineStyleImpl.qmltypes

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\qml\QtQuick\Controls\Imagine\impl\QuickControls2ImagineStyleImpl.qmltypes
Size 215B
SHA256 a96c7bf5832767bdc9d91e2290a3920aec3abfbf2e3814bce38b49483f16f84a
MD5 2006d4b7d0da455aa4c7414653c0018a
SHA1 6685b8360b97799aa4d6b18789bf84a343e9e891
SHA512 703804e6fab0cf44317b7292c547a1348e2e7395e4b71367c32c3b097bcfb3344d3296179bf4ba33a4c752ae58a3873af57d8cdef35a34564205356bb4e6fd84
TLSH
T18ED02352CEECF6A313451C16C44C47E72E53D1544731AD10F05401ED714771C36ABBC5
MD5 SHA1 SHA512 TLSH

Submit Download

qt_help_en.qm

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\PySide6\translations\qt_help_en.qm
Size 33B
SHA256 494ac9a2b2cb2fdeced353f4a9f898ed8dcf616e9bc667438c62681e3f7f79cf
MD5 aaea7ba475c961f941d0a23488457beb
SHA1 2bf0054002c8f7d85dd080df332553bf9b3a8e26
SHA512 5b408c36c8f93f71e73e3d3b1c0c2ad699e92a6088604b8adf8e588e8a75fc3fc92828199b7f00f5b05b224ae819220d07e56d610a76a267594870bec77172be
MD5 SHA1 SHA512

Submit Download

VCRUNTIME140.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\VCRUNTIME140.dll
Size 116KB
SHA256 4d292623516f65c80482081e62d5dadb759dc16e851de5db24c3cbb57b87db83
MD5 be8dbe2dc77ebe7f88f910c61aec691a
SHA1 a19f08bb2b1c1de5bb61daf9f2304531321e0e40
SHA512 0da644472b374f1da449a06623983d0477405b5229e386accadb154b43b8b083ee89f07c3f04d2c0c7501ead99ad95aecaa5873ff34c5eeb833285b598d5a655
SSDEEP 1536:+qvQ1Dj2DkX7OcujarvmdlYNABCmgrP4ddbkZIecbWcFML/UXzlghzdMFw84hzk:+qvQ1D2CreiABCmgYecbWVLUD6h+b4ho
TLSH
T1C4C37C4673A402B7D52EC274C1E25A06EB71B5448770ABCF03B589AA0F53BE1AF3D359
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VCRUNTIME140_1.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\VCRUNTIME140_1.dll
Size 48KB
SHA256 a113f192195f245f17389e6ecbed8005990bcb2476ddad33f7c4c6c86327afe5
MD5 f8dfa78045620cf8a732e67d1b1eb53d
SHA1 ff9a604d8c99405bfdbbf4295825d3fcbc792704
SHA512 ba7f8b7ab0deb7a7113124c28092b543e216ca08d1cf158d9f40a326fb69f4a2511a41a59ea8482a10c9ec4ec8ac69b70dfe9ca65e525097d93b819d498da371
SSDEEP 768:wPIyGVrxmKqOnA4j3z6Su77A+i0QLxi9z9Rtii9zn+:fBr87uW1nA8QLx+zrti+zn+
TLSH
T194235B9097784446D96B99B0C0D6DE57BD3CFAA20B50928F0BA1D14C1E63BD0FB3D22E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VC_redist.x64.exe

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\VC_redist.x64.exe
Size 24.4MB
SHA256 cc0ff0eb1dc3f5188ae6300faef32bf5beeba4bdd6e8e445a9184072096b713b
MD5 486f81facf798678c3244c7cf35a557f
SHA1 21ce0ee54bff57f69fafa741025bf2f15b356405
SHA512 e131b93acde5ffc76c19eb0784183a1e94dfa9fe06111a7830eae3ad8583895575dd4dca66aa70efddb243c95735a0105efcd3042b4b5ca445d3d8e8c39d957e
SSDEEP 786432:mjjpx5hYBug51eEdO41UnAyijgtUHFt9q4YYOQdV:kpx56Bu61eGv1pjg6pb
TLSH
T10A473332E0448026EBE61037A168F5206F7CF624A3649ABBD6CCED0D37B649717FB615
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_asyncio.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\_asyncio.pyd
Size 69KB
SHA256 f8305023f6ad81ddc7124b311e500a58914b05a9b072bf9a6d079ea0f6257793
MD5 70fb0b118ac9fd3292dde530e1d789b8
SHA1 4adc8d81e74fc04bce64baf4f6147078eefbab33
SHA512 1ab72ea9f96c6153b9b5d82b01354381b04b93b7d58c0b54a441b6a748c81cccd2fc27bb3b10350ab376ff5ada9d83af67cce17e21ccbf25722baf1f2aef3c98
SSDEEP 1536:FRaPPkvNV036Fi9PQ1TUT8TIL11Miu0FIpOn27SyTxq:janCNV064YRUT8TIL11MV0FIpOn2S
TLSH
T1DD638E83A294059ADD57E2B4D4632F57EBB1F5520901478F62A8C18F3F6379242FFB22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_bz2.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\_bz2.pyd
Size 82KB
SHA256 bd8621fcc901fa1de3961d93184f61ea71068c436794af2a4449738ccf949946
MD5 90f58f625a6655f80c35532a087a0319
SHA1 d4a7834201bd796dc786b0eb923f8ec5d60f719b
SHA512 b5bb1ecc195700ad7bea5b025503edd3770b1f845f9beee4b067235c4e63496d6e0b19bdd2a42a1b6591d1131a2dc9f627b2ae8036e294300bb6983ecd644dc8
SSDEEP 1536:ES7z7Sj2u5ia5ifC83zYLzbCK8CkotIpCVF7SyTUxIS:/7z+jw3MzCNCkotIpCVF+
TLSH
T11E839D93E76665B5F46B82BA99C10323E730FD150350939FB384831B2F22F927D6536A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ctypes.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\_ctypes.pyd
Size 122KB
SHA256 543ce9d6dc3693362271a2c6e7d7fc07ad75327e0b0322301dd29886467b0b0e
MD5 452305c8c5fda12f082834c3120db10a
SHA1 9bab7b3fd85b3c0f2bedc3c5adb68b2579daa6e7
SHA512 3d52afdbc8da74262475abc8f81415a0c368be70dbf5b2bd87c9c29ca3d14c44770a5b8b2e7c082f3ece0fd2ba1f98348a04b106a48d479fa6bd062712be8f7c
SSDEEP 3072:PGTMA4TPG40srrYLGNyf/ECZGKgyWLRECBIpLPIuE:Otgp0swLvf/EKCkE
TLSH
T14AC36C17339410AAEBA34179C4732E07D7B1B45B1B2097CF02A4C6AA2F637936D6F752
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_decimal.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\_decimal.pyd
Size 247KB
SHA256 d4ae192bbd4627fc9487a2c1cd9869d1b461c20cfd338194e87f5cf882bbed12
MD5 f78f9855d2a7ca940b6be51d68b80bf2
SHA1 fd8af3dbd7b0ea3de2274517c74186cb7cd81a05
SHA512 6b68c434a6f8c436d890d3c1229d332bd878e5777c421799f84d79679e998b95d2d4a013b09f50c5de4c6a85fcceb796f3c486e36a10cbac509a0da8d8102b18
SSDEEP 6144:kgd/2mZLgPFIY9qWM53pLW1AepppzoeteKU:JZLgPykeKU
TLSH
T1D1347C27B2490CA4DE73807599579F57E7B278850320D38F43A48AA77F9779323AD388
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_elementtree.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\_elementtree.pyd
Size 129KB
SHA256 d010cc7519332a8eb4e5125ad57227192de7737db63ec72ffebe0c0737b87d69
MD5 90d8d8f055b4f05396dfe5322d883234
SHA1 a163b856ca01b9da7d60996fa8f5d142d07933c1
SHA512 3642603332d79584efbd52f2f917ce975c8350b6c1728626a4277c6045d4229f5d3d1716617c864b57a26fb87d2068eaa609359ad37fd974d4b832e8abdb8881
SSDEEP 3072:QKJ9dcQPppFgV3Ht6b0KEAYkaQwsstmk52m3xKZhdIp6fdKB:3JDcQPjF0Ab0KNGQ1g0m3xKZhGB
TLSH
T13FD35B5B7661D0AFE462403C96674F56D7B2F8620E0187CF6288F6AC9F333463E69319
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_hashlib.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\_hashlib.pyd
Size 64KB
SHA256 6c50c9801a5caf0bb52b384f9a0d5a4aa182ca835f293a39e8999cf6edf2f087
MD5 8baeb2bd6e52ba38f445ef71ef43a6b8
SHA1 4132f9cd06343ef8b5b60dc8a62be049aa3270c2
SHA512 804a4e19ea622646cea9e0f8c1e284b7f2d02f3620199fa6930dbdadc654fa137c1e12757f87c3a1a71ceff9244aa2f598ee70d345469ca32a0400563fe3aa65
SSDEEP 1536:uElYij3wzR1lBafLEmIRhFIpOIi7SyHqxn:zYdBaTEmghFIpOIiu
TLSH
T108537C05A69540A8D96781B9C8A35F57F9F2F1011B109BEF0368C18D2F237C3A6FB766
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_lzma.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\_lzma.pyd
Size 155KB
SHA256 22d10e2d6ad3e3ed3c49eb79ab69a81aaa9d16aeca7f948da2fe80877f106c16
MD5 cf8de1137f36141afd9ff7c52a3264ee
SHA1 afde95a1d7a545d913387624ef48c60f23cf4a3f
SHA512 821985ff5bc421bd16b2fa5f77f1f4bf8472d0d1564bc5768e4dbe866ec52865a98356bb3ef23a380058acd0a25cd5a40a1e0dae479f15863e48c4482c89a03f
SSDEEP 3072:kEVLLSVeexIDteznfV9mNoNMuX4mZp7zuNtIpZ1uV:kEVHbeye9YON1buNN
TLSH
T142F33A92A394F4D5F7628C78D6624F17E7F678090310929A02CCC36D2B1FB759A2E727
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_multiprocessing.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\_multiprocessing.pyd
Size 34KB
SHA256 5673b594e70d1fdaad3895fc8c3676252b7b675656fb88ef3410bc93bb0e7687
MD5 c0a06aebbd57d2420037162fa5a3142b
SHA1 1d82ba750128eb51070cdeb0c69ac75117e53b43
SHA512 ddf2c4d22b2371a8602601a05418ef712e03def66e2d8e8814853cdd989ed457efbd6032f4a4a3e9ecca9915d99c249dfd672670046461a9fe510a94da085fbf
SSDEEP 768:sgYvrenSE0PcxxQ0zi+m1IpWtz5YiSyvyAMxkEs1:JYTQSCxQ0zlm1IpWt97Sy4xu
TLSH
T1CCF29F53EA941856D833C97A98D39E29E671F7470B10C2DF2355C24D1F327836BEA38A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_overlapped.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\_overlapped.pyd
Size 54KB
SHA256 2e53cc1bfa6e10a4de7e1f4081c5b952746e2d4fa7f8b9929ad818ce20b2cc9f
MD5 54c021e10f9901bf782c24d648a82b96
SHA1 cf173cc0a17308d7d87b62c1169b7b99655458bc
SHA512 e451226ece8c34c73e5b31e06fdc1d99e073e6e0651a0c5e04b0cf011e79d0747da7a5b6c5e94aca44cfceb9e85ce3d85afff081a574d1f53f115e39e9d4ff6c
SSDEEP 1536:3XRnts3McbN6w/xzWSsXZdR1r35IpXtW7Sy56xk3:HRvisXZdR1r5IpXtWz3
TLSH
T141437B1AA79004E9ED77C17EE9A30F16DAB0B1C65601835F62ACC24A1F7374377AE385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_queue.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\_queue.pyd
Size 31KB
SHA256 d43dca0e00c3c11329b68177e967cf5240495c4786f5afa76ac4f267c3a5cdb9
MD5 5aa4b057ba2331eed6b4b30f4b3e0d52
SHA1 6b9db113c2882743984c3d8b70ec49fc4a136c23
SHA512 aa5aa3285ea5c177eca055949c5f550dbd2d2699202a29efe2077213cbc95fff2a36d99eecce249ac04d95baf149b3d8c557a67fc39ead3229f0b329e83447b7
SSDEEP 768:0k+Eq6rf65MoJ/MBIpQUh5YiSyv/AMxkEG:55fhoJEBIpQUP7SynxC
TLSH
T13DE28E83AA946C9AC423C47194D66E35F971B7525700C7EF3318C25E1F323837ABA76A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_socket.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\_socket.pyd
Size 81KB
SHA256 24017d664af20ee3b89514539345caac83eca34825fcf066a23e8a4c99f73e6d
MD5 439b3ad279befa65bb40ecebddd6228b
SHA1 d3ea91ae7cad9e1ebec11c5d0517132bbc14491e
SHA512 a335e1963bb21b34b21aef6b0b14ba8908a5343b88f65294618e029e3d4d0143ea978a5fd76d2df13a918ffab1e2d7143f5a1a91a35e0cc1145809b15af273bd
SSDEEP 1536:MUuhDLiJvz76Hl+ZWly+uC69/s+S+pzcHst8/n1IsJHO7sBIpLwfB7SysaZx7:MU6DL4vHAy+uC69/sT+pzus81IwHO7sl
TLSH
T1F1834911A69050FAEBB3C0B6C1675E23FBB4B4C01390938F1156C66A5F33782BE7DA91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_ssl.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\_ssl.pyd
Size 173KB
SHA256 2b6f1b1ac47cb7878b62e8d6bb587052f86ca8145b05a261e855305b9ca3d36c
MD5 6774d6fb8b9e7025254148dc32c49f47
SHA1 212e232da95ec8473eb0304cf89a5baf29020137
SHA512 5d9247dce96599160045962af86fc9e5439f66a7e8d15d1d00726ec1b3b49d9dd172d667380d644d05cb18e45a5419c2594b4bcf5a16ea01542ae4d7d9a05c6e
SSDEEP 3072:ECRW4ljuyKK8vZktW5NP6Xf9N54eNWXvM4VRJNI7IM/cbP7RHs3FJZtIpC7f6:EmfEyKKaZP6Xf92MSV+JZM
TLSH
T116047C47B6942DB7D813E4FAC1230913DBB1F015331257DE49D5D64A0F07B0AADAABA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_uuid.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\_uuid.pyd
Size 24KB
SHA256 d462f34aca50d1f37b9ea03036c881ee4452e1fd37e1b303cd6daaecc53e260e
MD5 b9e2ab3d934221a25f2ad0a8c2247f94
SHA1 af792b19b81c1d90d570bdfedbd5789bdf8b9e0c
SHA512 9a278bfe339f3cfbd02a1bb177c3bc7a7ce36eb5b4fadaaee590834ad4d29cbe91c8c4c843263d91296500c5536df6ac98c96f59f31676cecdccf93237942a72
SSDEEP 384:ifo/nEW0bkiAQtIpZw8NHQIYiSy1pCQhPaGAM+o/8E9VF0Nysk5:iwnEqHQtIpZwO5YiSyvQGAMxkEH
TLSH
T15EB27C46DA601C54DD278AB1A4E54E2AE971FB824B50C3DB330CC1590F613C37AFA3B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_wmi.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\_wmi.pyd
Size 35KB
SHA256 0342916a60a7b39bbd5753d85e1c12a4d6f990499753d467018b21cefa49cf32
MD5 cb0564bc74258cb1320c606917ce5a71
SHA1 5b2bfc0d997cc5b7d985bfadddbfc180cb01f7cf
SHA512 43f3afa9801fcf5574a30f4d3e7ae6aff65c7716462f9aba5bc8055887a44bf38fba121639d8b31427e738752fe3b085d1d924de2633f4c042433e1960023f38
SSDEEP 768:6RxnHG7MYGQd0fmdzA77yeutIpCiq5YiSyvtGAMxkENy:6Rxnm7M6dKmdzA77yeutIpCio7SyCxZy
TLSH
T109F27E56E7641844ED37C6B998D64E1FE672B6468710C3CF3358C25A0F223C2BEBA364
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amifldrv64.sys

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\amifldrv64.sys
Size 29KB
SHA256 65c26276cadda7a36f8977d1d01120edb5c3418be2317d501761092d5f9916c9
MD5 f22740ba54a400fd2be7690bb204aa08
SHA1 5812387783d61c6ab5702213bb968590a18065e3
SHA512 ac1f89736cf348f634b526569b5783118a1a35324f9ce2f2804001e5a04751f8cc21d09bfa1c4803cd14a64152beba868f5ecf119f10fa3ccbe680d2fb481500
SSDEEP 384:qvOTI5HIPy54ygZOq0HMMKf69JG8QnuOfZFnJtQSZsHLPK6jjMYiWPFRUI5xl9Wn:qvsUoK54ZCMMb9U82uO7Jt6PKg4YHUc+
TLSH
T1EFD23B92C6B45C87EEA3993162F4D263BD35B69237608ADF4026C0950F93BD1A73C369
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

amigendrv64.sys

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\amigendrv64.sys
Size 35KB
SHA256 b9e8de155fb9aabb4760034a65855130eb85aadc88963e40e2be87b049c025bf
MD5 8d533ae1500f743a177b27c88a241163
SHA1 52c25cf4c903714fa52870a16d143fb6aeb0fa99
SHA512 546c9309b9b078ce4c49a3b56ec8d77b0fd4c0bd583f4bce53705f854fe2addba5c8029ed8b8da9e944b2c212d2ee0508095bf20c12632b760a5c271d19940de
SSDEEP 384:mrzqfCQlZluZfnktrQsHGh1jEiI4IHith5kCN88ZGmGovy8ZpHcS8FRJvIsWAR9k:+dCluVG0zuiv1yiR89PL9zIf
TLSH
T17BF28ED267786081F99B993083E9D633BDB4B2852B1093DB12B1D0552EE3BD5773422F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

base_library.zip

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\base_library.zip
Size 1.3MB
SHA256 0346ef59ad729407e3cf8df23574f675c818a06ff22fe465f14e3077ff976f86
MD5 c2888a341d9676760436aa17a3a66e01
SHA1 0a269913b4df74273bf1a9be895c1e10034c5458
SHA512 c20724aa59daa80cacb2a3033e9077a9b32c218c92d7014e90010225879a237a1e4b335f7a6cb811190dd981c5f577f243a942c3f32fc05a1ec5180d6d45bc96
SSDEEP 12288:0OmgR4qYnyttcY+baHKPbdmEHtzJYTq+zYgEkA1qJuAEgXgC01dNaYcbjLdxVkg:0HCNXttcY+EKPbdmEtJ8X0NaYcbhkg
TLSH
T1E355D6817A92A5B3FC84F3BA04260A0EA3658571BF45C747389FC5E46F8F2E49E914DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blur_edges.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\blur_edges.png
Size 477KB
SHA256 5cffab0f72784e5f119c6d6cacb321ee2cef38fd9e884448482d95f2d89bd4cb
MD5 711aa1229ab19f4cc05cdb78e6b0cee2
SHA1 55f5eb9614d3f9eb91273375afa8d6e2e51a9b4c
SHA512 b4c7fc0dc3ad4f8cd2038c9f3b82683b07927aa80670096d967381acb94d50f589444212cfaa94f30adc8bfa1b7e683fb2ca16834b215b31c1ca35d2369aa5a1
SSDEEP 12288:Cauctgd4XEwYFJgTGWoRzOGtKjW1KGQUP+51FNXVNLoArKSU:7uFYWJldS+3P+vboArZU
TLSH
T142A423FADA0A988609F98112AAFFD0ABF80AD2731DA4DD1D774EB5400B6CFD17117948
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

echo.ico

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\echo.ico
Size 152KB
SHA256 631fcc16f2acdceeb40867b8c620a8adbf92b3aa2b8e304ee7e0ffba051d1f1c
MD5 b4c198445286f344c719c6dc4bced877
SHA1 727f92168eba82ef09a0e78b7484b053d2f9075a
SHA512 263a2d44841505988e56b62a3e539642dfc4b5585b04f9ba7d923889dbbd6f30b6f3917e4371ae0890193cea6a4efd12700830214a11c17ef1250f4a38679bad
SSDEEP 3072:qsw8B+Az441B7j6adrmmtYDAJ31LzZe2UWOYri1yEUbNz2MvX/:gzKtYQfE25VwfUJ2Mvv
TLSH
T191E323A8219345FC8D43C14A048E1F87532A7C761D71B99F77F6AD0DE226BACC8B252D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcrypto-3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\libcrypto-3.dll
Size 4.9MB
SHA256 2a234b5aa20c3faecf725bbb54fb33f3d94543f78fa7045408e905593e49960a
MD5 51e8a5281c2092e45d8c97fbdbf39560
SHA1 c499c810ed83aaadce3b267807e593ec6b121211
SHA512 98b91719b0975cb38d3b3c7b6f820d184ef1b64d38ad8515be0b8b07730e2272376b9e51631fe9efd9b8a1709fea214cf3f77b34eeb9fd282eb09e395120e7cb
SSDEEP 98304:S3+FRtLtlVriXpshX179Cahd4tC9P1+1CPwDvt3uFlDCi:ASRtLtvd99Cahd4tC9w1CPwDvt3uFlDz
TLSH
T1DE367A6AA7A81189E4BAC13CC9534617E6F1F81A177097CF14A1567D0F33BDA2B3EB40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libffi-8.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\libffi-8.dll
Size 38KB
SHA256 eff52743773eb550fcc6ce3efc37c85724502233b6b002a35496d828bd7b280a
MD5 0f8e4992ca92baaf54cc0b43aaccce21
SHA1 c7300975df267b1d6adcbac0ac93fd7b1ab49bd2
SHA512 6e1b223462dc124279bfca74fd2c66fe18b368ffbca540c84e82e0f5bcbea0e10cc243975574fa95ace437b9d8b03a446ed5ee0c9b1b094147cefaf704dfe978
SSDEEP 768:NiQfxQemQJNrPN+moyijAc5YiSyvkIPxWEqG:dfxIQvPkmoyijP7SytPxF
TLSH
T10B037C0B458418A4E657D53D97A64A2AC335B9240B60F2CB03D4C2BA3F6B7D6FB7C358
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libssl-3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\libssl-3.dll
Size 771KB
SHA256 41ad1a04ca27a7959579e87fbbda87c93099616a64a0e66260c983381c5570d1
MD5 bfc834bb2310ddf01be9ad9cff7c2a41
SHA1 fb1d601b4fcb29ff1b13b0d2ed7119bd0472205c
SHA512 6af473c7c0997f2847ebe7cee8ef67cd682dee41720d4f268964330b449ba71398fda8954524f9a97cc4cdf9893b8bdc7a1cf40e9e45a73f4f35a37f31c6a9c3
SSDEEP 6144:7aO1lo7USZGjweMMHO4+xuVg7gCl2VdhMd1DdwMVn4TERUr3zgKpJJ/wknofFe9A:FkeMKOr97gCAE35gEGzLpwknofFe9XbE
TLSH
T188F43B9DB3B8059DE9F6D13D86534623E3B6F4152370EBDB065186390F23BD52A3A388
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo_small.png

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\logo_small.png
Size 1.6MB
SHA256 b9e89b20e058486d7968f82f40f351fdc28f19a5d0d82396beb61317d27bdc35
MD5 84d2acc92397b69a9f06945f5cdee453
SHA1 ef5aa87fc377d1e0579450e4f272f03b9edf846d
SHA512 83fbf9fca32c10231885a3468e2c2edfa19226db0bc28ef1c489c489547d84b9331ce95961f53d6d04ec500768ab18dcbbb62dcf0d6f4ad57811d1c3264d5298
SSDEEP 49152:WWjrA0P2+1A+5zGI9icnks2P6eeGECHsi:DrPP2+i6GI772P64
TLSH
T1477533E72E88A997D47D6A3DA3E030706FB61FC970B043F597A29E70C1496D2785360B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pyexpat.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\pyexpat.pyd
Size 194KB
SHA256 cdc09fbae2f103196215facd50d108be3eff60c8ee5795dcc80bf57a0f120cdf
MD5 e2d1c738d6d24a6dd86247d105318576
SHA1 384198f20724e4ede9e7b68e2d50883c664eee49
SHA512 3f9cb64b4456438dea82a0638e977f233faf0a08433f01ca87ba65c7e80b0680b0ec3009fa146f02ae1fdcc56271a66d99855d222e77b59a1713caf952a807da
SSDEEP 3072:jJB/b2LOWs5LS04q1uqtF+ai7dYbmdRLjDxKyw6XUWdRBIpLhCujk:dB6yx5LT1gqtF+XGeL/xiBoR4g
TLSH
T110145B57B1A6C0EBE8938038D6974A07CBB2F865078197CF12D4EB7D5F277423A69305
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python3.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\python3.dll
Size 66KB
SHA256 a5bb3eb6fdfd23e0d8b2e4bccd6016290c013389e06daae6cb83964fa69e2a4f
MD5 4038af0427bce296ca8f3e98591e0723
SHA1 b2975225721959d87996454d049e6d878994cbf2
SHA512 db762442c6355512625b36f112eca6923875d10aaf6476d79dc6f6ffc9114e8c7757ac91dbcd1fb00014122bc7f656115160cf5d62fa7fa1ba70bc71346c1ad3
SSDEEP 768:/BV1EbYGVXq6KC/prVHBN0cW18itCQDFPnOMFn+gikF/nFX14uewjBcCCC0yamM8:pDmF61JFn+/OJBIpL0j7Sy5xH
TLSH
T10E637152BB54F8A3DBFA65FC39D199CD142B12CC872584ECA57893D30E1A310A6E734D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python312.dll

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\python312.dll
Size 6.7MB
SHA256 0cc4e557972488eb99ea4aeb3d29f3ade974ef3bcd47c211911489a189a0b6f2
MD5 48ebfefa21b480a9b0dbfc3364e1d066
SHA1 b44a3a9b8c585b30897ddc2e4249dfcfd07b700a
SHA512 4e6194f1c55b82ee41743b35d749f5d92a955b219decacf9f1396d983e0f92ae02089c7f84a2b8296a3062afa3f9c220da9b7cd9ed01b3315ea4a953b4ecc6ce
SSDEEP 98304:2OUmnjqB6bHMYM3RNgqKutvDHDMiEtYkzuv:2OUmn+MnM3R+qYi3kzuv
TLSH
T1C5665B127258C0AAD967A0B4CC23C6CEE7B1BC51BF50530B30AAB35E2F73796465E785
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

select.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\select.pyd
Size 29KB
SHA256 74cca85600e7c17ea6532b54842e26d3cae9181287cdf5a4a3c50af4dab785e5
MD5 e1604afe8244e1ce4c316c64ea3aa173
SHA1 99704d2c0fa2687997381b65ff3b1b7194220a73
SHA512 7bf35b1a9da9f1660f238c2959b3693b7d9d2da40cf42c6f9eba2164b73047340d0adff8995049a2fe14e149eba05a5974eee153badd9e8450f961207f0b3d42
SSDEEP 384:OyLTFInPLnIloHqP3DT90IBIpQG28HQIYiSy1pCQ5mrUAM+o/8E9VF0NyOYl:hinzfHqv1rBIpQG/5YiSyvkrUAMxkErl
TLSH
T154D28E576B642C49D823C9B2A4D28E26E931B6565710C2CF3368C15D1F327C37BBB369
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unicodedata.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\unicodedata.pyd
Size 1.1MB
SHA256 2a50d629895a05b10a262acf333e7a4a31db5cb035b70d14d1a4be1c3e27d309
MD5 fc47b9e23ddf2c128e3569a622868dbe
SHA1 2814643b70847b496cbda990f6442d8ff4f0cb09
SHA512 7c08683820498fdff5f1703db4ad94ad15f2aa877d044eddc4b54d90e7dc162f48b22828cd577c9bb1b56f7c11f777f9785a9da1867bf8c0f2b6e75dc57c3f53
SSDEEP 12288:PrEHdcM6hb1CjJ43w9hIpCQvb0QN8MdIEQ+U2BNNmD+99FfciA0:PrEXQCjfk7bPNfv42BN6yzUiA0
TLSH
T1E6354AC5BB828E66E87B31B944D1212F1360C273476B573BB25513294C8B3B74EE69EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winsound.pyd

Path C:\Users\Admin\AppData\Local\Temp\_MEI20962\winsound.pyd
Size 29KB
SHA256 3a9e2556aa431563a64582549fa273b4b10c4f83ec0f0afdfa6973f2eebbd988
MD5 05b02894c873498edaae87c8b410aa39
SHA1 9ae3f219d1ce5fa173ede1b2ff23314a8f3eb776
SHA512 d9f6c6a22ab0666419357d71b62b9725a058a21caac0ffa1cff922bd17c01ea356e418fa2dbdfafcda34fa9248a9ecc7ba3f0e8d3f2342a9d1b2b45077fd685c
SSDEEP 768:AV3483MX2AFXPq4FIpO7sU5YiSyvhAMxkEQ:QoiAXPq4FIpO7z7SyRxM
TLSH
T1B2D29D969B605C9CCA17C97174C14E26F971B695476082DF331CC1280F72383BFBABA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-bn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1209051818\hyph-bn.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-mr.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1209051818\hyph-mr.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_1209051818\hyph-nn.hyb
Size 141KB
SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
MD5 f2d8fe158d5361fc1d4b794a7255835a
SHA1 6c8744fa70651f629ed887cb76b6bc1bed304af9
SHA512 946f4e41be624458b5e842a6241d43cd40369b2e0abc2cacf67d892b5f3d8a863a0e37e8120e11375b0bacb4651eedb8d324271d9a0c37527d4d54dd4905afab
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgY:p73HEUP8dsiinTThjy90VKY
TLSH
T1C1E319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

edge_checkout_page_validator.js

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_2047829451\edge_checkout_page_validator.js
Size 1009KB
SHA256 9960614ae3d67b2a2b2b1bb1fdd6a427f4d103835e50e45f2e2cf3b1c540fa44
MD5 f4cf71ceaf44655238e8f6e445479361
SHA1 4d184496decd453261423d11a681bb925d1c466f
SHA512 c6af515da4c1eaa6689c829be6a99602f148090989c7f8b5aa5cd0620ca73d8b217ba266b188aa72bd219f863c86fb00d6e48758278346f5959f2c5169c1e382
SSDEEP 24576:cs4ymRAbsvvG3kJ6ARjiQixwaErn9VUfWEo0EQ1Xp8C9T0dK/vzHEiJsfaG81E9/:cs4ymRAgvvG3kJ6ARjiQixwaErn9VUfq
TLSH
T15F252B84E1E2253466D74CB960B7D2C4B5DC04583399F1E8FA6C68CADA0FD4723F663A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

miniwallet.bundle.js.LICENSE.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\Mini-Wallet\miniwallet.bundle.js.LICENSE.txt
Size 551B
SHA256 38ed54eb53300fdb6e997c39c9fc83a224a1fd9fa06a0b6d200aa12ea278c179
MD5 7bf61e84e614585030a26b0b148f4d79
SHA1 c4ffbc5c6aa599e578d3f5524a59a99228eea400
SHA512 ca5f2d3a4f200371927c265b9fb91b8bcd0fbad711559f796f77b695b9038638f763a040024ed185e67be3a7b58fab22a6f8114e73fdbd1cccdda6ef94ff88f3
TLSH
T108F08B5A31E12673416285A1270B52DE7F0C10BDB0AF39779444C3386C348EE82D0EE1
MD5 SHA1 SHA512 TLSH

Submit Download

notification.bundle.js.LICENSE.txt

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\Notification\notification.bundle.js.LICENSE.txt
Size 1KB
SHA256 363f376ab7893c808866a830fafbcd96ae6be93ec7a85fabf52246273cf56831
MD5 8595bdd96ab7d24cc60eb749ce1b8b82
SHA1 3b612cc3d05e372c5ac91124f3756bbf099b378d
SHA512 555c0c384b6fcfc2311b47c0b07f8e34243de528cf1891e74546b6f4cda338d75c2e2392827372dc39e668ed4c2fd1a02112d8136d2364f9cab9ee4fa1bd87f5
TLSH
T1A2313A5B32F53673416245A1670B52DEBF0C24AEB56F38B79495C3387C388ED82D1DA1
MD5 SHA1 SHA512 TLSH

Submit Download

strings.json

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3244_457735758\json\i18n-tokenized-card\fr\strings.json
Size 2KB
SHA256 c67b555372582b07df86a6ce3329a854e349ba9525d7be0672517bab0ac14db5
MD5 cd247582beb274ca64f720aa588ffbc0
SHA1 4aaeef0905e67b490d4a9508ed5d4a406263ed9c
SHA512 bf8fa4bd7c84038fae9eddb483ae4a31d847d5d47b408b3ea84d46d564f15dfc2bae6256eac4a852dd1c4ad8e58bc542e3df30396be05f30ed07e489ebe52895
TLSH
T17251EE3D88F4489B60C7921B6B1142D7C9704E36D704F3848A63828A035BDEFB0BF69D
MD5 SHA1 SHA512 TLSH

Submit Download

memory/4212-264-0x000002C05C7B0000-0x000002C05D7B0000-memory.dmp

Download

memory/5956-4388-0x00007FFBB56B0000-0x00007FFBB5B69000-memory.dmp

Download

memory/5956-4389-0x00007FFBB4730000-0x00007FFBB4D7A000-memory.dmp

Download

memory/5956-4387-0x00007FFBB6AF0000-0x00007FFBB6E22000-memory.dmp

Download