c9150869839883b7849b37aa801d6f69111a9c5d6cf556c0a296bc961c55aa42

Analysis

user interaction
yes
max time kernel
93s
max time network
136s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
10/07/2026, 16:41

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LuaTools-win-Setup.exe
Size 11.0MB
Sample260710-t657dacz7j
SHA256 c9150869839883b7849b37aa801d6f69111a9c5d6cf556c0a296bc961c55aa42
MD5 0c2a06bd26f63b6e655328518f77095e
SHA1 f6b6d4ead5b9739d77b729ed156f5022a497daff
SHA512 ff1bb530aee1acbbe541b36440b423784eac163a14c3ab9281ed0b876a5bd833f0687dd39d8c89b9a7cf917a8f9008e420c169d576eefa03ce87088adfc7d56f
SSDEEP 196608:K4MyYSDTgGziuS0040yF5NFrjPnN4Sw6qHn3ILn03t+6E4Ufl:iJSngpT60ojFrjfN4SwVI70bUd
TLSH
T1A1C60162FF02D0BBD48A01B5D43EB73DB6369E95872A85C34AA93C5CA8F1270585335F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery persistence

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
604	4144	chrome.exe

Executes dropped EXE 2 IoCs

pid	Process
2128	LuaTools.exe
3452	LuaTools.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Contacts third-party web service commonly abused for C2 1 TTPs 1 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
3	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LuaTools-win-Setup.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4144	chrome.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe

Modifies data under HKEY_USERS 9 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134281753548955107"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe

Modifies registry class 9 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\luatools\URL Protocol	LuaTools.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\luatools	LuaTools.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\luatools\shell\open	LuaTools.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\luatools\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\LuaTools\\current\\LuaTools.exe\" \"%1\""	LuaTools.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	chrome.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\luatools\shell\open\command	LuaTools.exe
Key created	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\luatools\shell	LuaTools.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-3797332335-34111092-3597280141-1000_Classes\luatools\ = "URL:LuaTools Protocol"	LuaTools.exe

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
4864	LuaTools-win-Setup.exe
4864	LuaTools-win-Setup.exe
3452	LuaTools.exe
7968	chrome.exe
7968	chrome.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs

pid	Process
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe

Suspicious use of AdjustPrivilegeToken 46 IoCs

description	pid	Process
Token: SeDebugPrivilege	2128	LuaTools.exe
Token: SeDebugPrivilege	3452	LuaTools.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe
Token: SeShutdownPrivilege	7968	chrome.exe
Token: SeCreatePagefilePrivilege	7968	chrome.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe

Suspicious use of SendNotifyMessage 18 IoCs

pid	Process
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe
7968	chrome.exe

Suspicious use of WriteProcessMemory 56 IoCs

description	pid	Process	procid_target
PID 4864 wrote to memory of 2128	4864	LuaTools-win-Setup.exe	87
PID 4864 wrote to memory of 3452	4864	LuaTools-win-Setup.exe	89
PID 7968 wrote to memory of 7996	7968	chrome.exe	95
PID 7968 wrote to memory of 5756	7968	chrome.exe	97
PID 7968 wrote to memory of 4144	7968	chrome.exe	96
PID 7968 wrote to memory of 5756	7968	chrome.exe	97
PID 7968 wrote to memory of 2456	7968	chrome.exe	99
PID 7968 wrote to memory of 2456	7968	chrome.exe	99
PID 7968 wrote to memory of 6216	7968	chrome.exe	100
PID 7968 wrote to memory of 6236	7968	chrome.exe	101
PID 7968 wrote to memory of 6236	7968	chrome.exe	101
PID 7968 wrote to memory of 6216	7968	chrome.exe	100
PID 7968 wrote to memory of 6288	7968	chrome.exe	102
PID 7968 wrote to memory of 6288	7968	chrome.exe	102
PID 7968 wrote to memory of 6340	7968	chrome.exe	103
PID 7968 wrote to memory of 6340	7968	chrome.exe	103
PID 7968 wrote to memory of 6856	7968	chrome.exe	104
PID 7968 wrote to memory of 6856	7968	chrome.exe	104
PID 7968 wrote to memory of 6444	7968	chrome.exe	105
PID 7968 wrote to memory of 6444	7968	chrome.exe	105
PID 7968 wrote to memory of 6624	7968	chrome.exe	106
PID 7968 wrote to memory of 6764	7968	chrome.exe	107
PID 7968 wrote to memory of 6764	7968	chrome.exe	107
PID 7968 wrote to memory of 6776	7968	chrome.exe	108
PID 7968 wrote to memory of 6776	7968	chrome.exe	108
PID 7968 wrote to memory of 7004	7968	chrome.exe	110
PID 7968 wrote to memory of 7004	7968	chrome.exe	110
PID 7968 wrote to memory of 7140	7968	chrome.exe	111
PID 7968 wrote to memory of 7140	7968	chrome.exe	111
PID 7968 wrote to memory of 4720	7968	chrome.exe	112
PID 7968 wrote to memory of 4720	7968	chrome.exe	112
PID 7968 wrote to memory of 5788	7968	chrome.exe	113
PID 7968 wrote to memory of 5788	7968	chrome.exe	113
PID 7968 wrote to memory of 7228	7968	chrome.exe	114
PID 7968 wrote to memory of 7228	7968	chrome.exe	114
PID 7968 wrote to memory of 7304	7968	chrome.exe	115
PID 7968 wrote to memory of 7304	7968	chrome.exe	115
PID 7968 wrote to memory of 7484	7968	chrome.exe	116
PID 7968 wrote to memory of 7484	7968	chrome.exe	116
PID 7968 wrote to memory of 3540	7968	chrome.exe	119
PID 7968 wrote to memory of 3540	7968	chrome.exe	119
PID 7968 wrote to memory of 5380	7968	chrome.exe	120
PID 7968 wrote to memory of 5380	7968	chrome.exe	120
PID 7968 wrote to memory of 2684	7968	chrome.exe	121
PID 7968 wrote to memory of 2544	7968	chrome.exe	122
PID 7968 wrote to memory of 2684	7968	chrome.exe	121
PID 7968 wrote to memory of 2544	7968	chrome.exe	122
PID 7968 wrote to memory of 5160	7968	chrome.exe	123
PID 7968 wrote to memory of 5160	7968	chrome.exe	123
PID 7968 wrote to memory of 2800	7968	chrome.exe	124
PID 7968 wrote to memory of 2800	7968	chrome.exe	124
PID 7968 wrote to memory of 1828	7968	chrome.exe	125
PID 7968 wrote to memory of 1828	7968	chrome.exe	125
PID 7968 wrote to memory of 4740	7968	chrome.exe	126
PID 7968 wrote to memory of 4740	7968	chrome.exe	126
PID 7968 wrote to memory of 7520	7968	chrome.exe	127

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\LuaTools-win-Setup.exe
"C:\Users\Admin\AppData\Local\Temp\LuaTools-win-Setup.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4864
- C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
  "C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe" --veloapp-install 1.2.0
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:2128
- C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
  "C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe"
  2⤵
  - Executes dropped EXE
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:3452

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:7968
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x12c,0x130,0x134,0x128,0x138,0x7ff90431c728,0x7ff90431c734,0x7ff90431c740
  2⤵
  PID:7996
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1480,i,5134483418580508015,13094543048914870514,524288 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4144
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1620,i,9086585404786907484,9671507283615316152,262144 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=1872 /prefetch:2
  2⤵
  PID:5756
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2308,i,13892106207067194897,3637475230568813060,524288 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=2332 /prefetch:13
  2⤵
  PID:2456
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,15422141492712242433,11698037153546062051,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=3464 /prefetch:1
  2⤵
  PID:6216
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3328,i,17457118187671169538,10929152576670113822,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=3484 /prefetch:1
  2⤵
  PID:6236
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4732,i,12472935083162273934,5624491031886024220,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=4748 /prefetch:1
  2⤵
  PID:6288
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4880,i,16107646789655149961,12933417096235959654,524288 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=4884 /prefetch:14
  2⤵
  PID:6340
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5056,i,1271030962638010519,1251252631777654801,524288 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=5044 /prefetch:14
  2⤵
  PID:6856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5196,i,14261568309360918012,8019668019297116559,524288 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:14
  2⤵
  PID:6444
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5404,i,723451478881407890,12806483410319256264,524288 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=5408 /prefetch:14
  2⤵
  PID:6624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --metrics-shmem-handle=5524,i,15955539935821652758,16806886344237866539,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=5536 /prefetch:1
  2⤵
  PID:6764
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=5564,i,5399550847939609134,14369660931528008862,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:1
  2⤵
  PID:6776
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=5720,i,3338229729271904961,15694270474530441745,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=5548 /prefetch:1
  2⤵
  PID:7004
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=5828,i,15826628207872356399,10448287691382632856,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=6000 /prefetch:1
  2⤵
  PID:7140
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6120,i,5116620259134251749,2968387866548543982,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=5720 /prefetch:1
  2⤵
  PID:4720
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6076,i,4279354370965865119,8915042359698049894,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=5828 /prefetch:1
  2⤵
  PID:5788
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6396,i,14649769794605780581,18059951067022559680,524288 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=6384 /prefetch:14
  2⤵
  PID:7228
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=5564,i,10303936174413555009,10649237094124462480,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:1
  2⤵
  PID:7304
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=6676,i,10935351179057929466,9364703748858141912,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=6076 /prefetch:1
  2⤵
  PID:7484
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6784,i,15506591687956541674,9188822908804567137,524288 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:14
  2⤵
  PID:3540
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5960,i,3519362293356878670,7515689132094631502,524288 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:14
  2⤵
  PID:5380
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --metrics-shmem-handle=5868,i,11817578961854730309,15550193475499087019,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=6108 /prefetch:9
  2⤵
  PID:2684
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --metrics-shmem-handle=5508,i,14025816423031301301,11454678114478842391,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=6140 /prefetch:1
  2⤵
  PID:2544
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=25 --metrics-shmem-handle=5468,i,10802800104903029667,15964995022198122618,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=5916 /prefetch:1
  2⤵
  PID:5160
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --metrics-shmem-handle=3736,i,15832103338413098400,4326826741317324739,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:1
  2⤵
  PID:2800
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --metrics-shmem-handle=6260,i,10118885063783909840,6886841366352511810,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=6356 /prefetch:1
  2⤵
  PID:1828
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=28 --metrics-shmem-handle=6612,i,6951812036816375048,13325891265439409714,2097152 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=6116 /prefetch:1
  2⤵
  PID:4740
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6680,i,4186668366145636714,9999274235607973055,524288 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=6232 /prefetch:14
  2⤵
  PID:7520
- C:\Users\Admin\Downloads\SteamSetup.exe
  "C:\Users\Admin\Downloads\SteamSetup.exe"
  2⤵
  PID:6524
- - C:\Program Files (x86)\Steam\bin\steamservice.exe
    "C:\Program Files (x86)\Steam\bin\steamservice.exe" /Install
    3⤵
    PID:5300
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5636,i,3101804612398306428,94639108108889683,524288 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:14
  2⤵
  PID:3404
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4756,i,13108055914495375911,10708146959172506041,524288 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=6468 /prefetch:14
  2⤵
  PID:4152
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=6000,i,6890590567133985334,16248322293345413619,524288 --field-trial-handle=1876,i,5326510834540265913,11722203750424404452,262144 --variations-seed-version --mojo-platform-channel-handle=4848 /prefetch:14
  2⤵
  PID:4860

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3280

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:7704

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:1472

C:\Program Files (x86)\Steam\Steam.exe
"C:\Program Files (x86)\Steam\steam.exe" -silent
1⤵
PID:6648

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:3108

C:\Program Files (x86)\Common Files\Steam\steamservice.exe
"C:\Program Files (x86)\Common Files\Steam\steamservice.exe" /RunAsService
1⤵
PID:1244

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Steam.exe

Path C:\Program Files (x86)\Steam\Steam.exe
Size 4.2MB
SHA256 12222b0908eb69581985f7e04aa6240e928fb08aa5a3ec36acae3440633c9eb1
MD5 33bcb1c8975a4063a134a72803e0ca16
SHA1 ed7a4e6e66511bb8b3e32cbfb5557ebcb4082b65
SHA512 13f3a7d6215bb4837ea0a1a9c5ba06a985e0c80979c25cfb526a390d71a15d1737c0290a899f4705c2749982c9f6c9007c1751fef1a97b12db529b2f33c97b49
SSDEEP 98304:7JeV/ztZBe91oiImuUiK9N9EGQKF9lSHbr7aw:1S/hwkmg4EpbrOw
TLSH
T1C516BF62BB41C071F9C201B964BE9F7A497DAE204775C0D397D43E6A88311D32B3A79B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

[email protected]_

Path C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_
Size 15KB
SHA256 983aa3928f15f5154266be7063a75e1fce87238bbe81a910219dea01d5376824
MD5 577b7286c7b05cecde9bea0a0d39740e
SHA1 144d97afe83738177a2dbe43994f14ec11e44b53
SHA512 8cd55264a6e973bb6683c6f376672b74a263b48b087240df8296735fd7ae6274ee688fdb16d7febad14288a866ea47e78b114c357a9b03471b1e72df053ebcb0
SSDEEP 192:JDApAAAAAAAAAAAAGPAAAAAAAAAAAAK5Oq:JDAfIq
TLSH
T1D5623E04FC24B31BD6B9E07EAA974B0B507F4CD9D84330D40C7A5CA8B98DB02A26643F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon_button_news_mousedown.tga_

Path C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_news_mousedown.tga_
Size 20KB
SHA256 cab3a68b64d8bf22c44080f12d7eab5b281102a8761f804224074ab1f6130fe2
MD5 00bf35778a90f9dfa68ce0d1a032d9b5
SHA1 de6a3d102de9a186e1585be14b49390dcb9605d6
SHA512 342c9732ef4185dee691c9c8657a56f577f9c90fc43a4330bdc173536750cee1c40af4adac4f47ac5aca6b80ab347ebe2d31d38ea540245b38ab72ee8718a041
SSDEEP 48:X77qTxcazfhjZRRRRRRRRRRRRRRRRRRRKFvJJJhmAr:X774zmvJJJhmu
TLSH
T18F9209380E706CCE81CE9A27AB348AD2A9D2DC6F36632E348653350FC1948543EA734D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

filter_clean_bulgarian.txt.gz_

Path C:\Program Files (x86)\Steam\package\tmp\resource\filter_clean_bulgarian.txt.gz_
Size 23B
SHA256 6feb83ca306745d634903cf09274b7baf0ac38e43c6b3fab1a608be344c3ef64
MD5 836dd6b25a8902af48cd52738b675e4b
SHA1 449347c06a872bedf311046bca8d316bfba3830b
SHA512 6ab1e4a7fa9da6d33cee104344ba2ccb3e85cd2d013ba3e4c6790fd7fd482c85f5f76e9ae38c5190cdbbe246a48dae775501f7414bec4f6682a05685994e6b80
MD5 SHA1 SHA512

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 faac18c115b3505a026f1b6587ca4119422368772644092d552816fa2725b6d2
MD5 96227e09be108b84882dea2c49b93439
SHA1 73f1a61212769e299966f2b17e51f4aed01c4680
SHA512 5b2085faf3c6c968f745faeb3141f78a3e6d1e1f4ad6631cda8612447633ec7d9dd754ad58bceb58e8ede888b3d87d9cc1b297047e1b5c61dcf36ba7be85ffd2
TLSH
T1F62162A5A1F26FCCCFC44EB280C40D8071A2D85DE60E536FA1CDE51D6DDF3E12086402
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
TLSH
T109F09C8CD050E86F02B2411AB1647314FB51037A0751A59F393CDC0D9FB6DA751C6F4D
MD5 SHA1 SHA512 TLSH

Submit Download

craw_background.js

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\craw_background.js
Size 531KB
SHA256 04cd9494b0ed83924dad12202630b20d053d9e2819c8e826a386c814cc0a1697
MD5 6eebed29e6a6301e92a9b8b347807f5f
SHA1 65dfb69b650560551110b33dcba50b25e5b876de
SHA512 fede6db31f2ad242e7bc7b52a8859ba7f466a0b920a8dadcb32dcfb5b2a2742e98b767ff22e0c5bc5c11fec021240aa9e458486c9039eb4ebe5cf6af7be97bf2
SSDEEP 6144:abyfBNC2FRdjiRXqbe5Dq31IVlMqX+wd5/CcMMJcRULt0NjyTOEzZQ+h72W3GB0n:Ft/g
TLSH
T1B5C4F74C34C2E8CD6A623DA5247B9085A2319266F4479ED9F0EDECF21AF44641937F3E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 09675c3c1cda736e60859866af9c42064f0665718be4b35cfe5a859667ae0456
MD5 6f41847d996720d138c421f56366e089
SHA1 144ad80342e59845f5c22aa61945e9e7eaf8e405
SHA512 8ff50634b4976a0cf08fa57ae3953cf006adfdcffca7796aa2b760f6c37cd6a9895c1d9bb63ee19a593a280ff5dd9e9cec7d5df5fa245e398fda8bc84e151b3c
SSDEEP 192:DDR4VaVS07gpJ2TYIbKELLvNPyaPDvAfP8NYfK:DDR4VaVS07gpJ2TYIbKELLvNqarIfkN3
TLSH
T19ED1BFF7C3D8C92DC81156F89B256F2FCE291A18432C3C26C8D8BE5B93E2871D25564E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 e5f4312f78e23b623dab65ce594608677c6b99e84768e74a1df7f4596ea38d21
MD5 7567c4336f95d2b2ced935d5ea5a04b7
SHA1 20c7b648cce8bc7c98debe7a4ca52a003da89323
SHA512 c783f42a1ff8699ddc9c7166be2d4c98d75157d50cc3e3b7bac124674d841d22c61441efbbfbff6a4ce4133bb15d13022c8ce97d3b92c94859a0e48a3fa68e68
TLSH
T15711CBA7923E7457207819BF2D18BC097AB9B43206405CF8CF5AC27CB0C24FB0B12457
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 77015866686574b66aa35f6adebf0e7bd425e3bcc3455270e19bbc8905b56a7b
MD5 9fa381b2de3acf6a71608a5ed74a8311
SHA1 7d2801b5bbdb5687d416ce63793e625305020f9d
SHA512 cf8790a169edb2f3d2a3d41930c3c5bbd9651b371397f02116b36bff097297263fb144d97ce4f43c6b9ba7f4164d153d3d290d4efdd34daacf5ca2e9eb9c5edd
SSDEEP 192:4R8cBzzb4ceSv7sAPRp2EtO964Hsb+WNnTL7+W278e0DVyIsnAUge:4R8mzng+BX6bw/f2ule
TLSH
T10932963EA964697B6CCBC229F9217F97E7F5102225952E84EBFC492C10E76CC321B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 e8b4042a77ad503b810162c1a5ce154816974a182f685da21b1efe97ee56b935
MD5 9976b7d23731d223a51d684d193af6cc
SHA1 c8f1df6b41ee005b9efd4d001106f3c68d0d1001
SHA512 5e0bb3b8281143cbd3f6e8bb54781ac6e659abcf2bf9bc927a6a29aa1043cfbd37a47bcbcc4f06b90d19be48bf03fe3246a0d1fecdff25f91618996f11f56b17
SSDEEP 192:4R8cBz3b4ceSv7sAPRp2Etzz964Hsb+WNRbTL7+W278e0DVyIsnAUge:4R8mzLg+BXzbwNf2ule
TLSH
T1DB42863EA964597B6CCBC229F9217F97E3F6102265952E84EBFC492C10E76CC321B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 2a49f5d3ca52306cc4e0002e0f333e30f022990eb6d405e7a4e2ebf5be245368
MD5 de3c2f308aa93501d7569c5d6a868a95
SHA1 43282e7f5418256e1cf4e4ad48ee35c1b4a99630
SHA512 7bcbc62b2065f13c05d069f25e58d258b63197bb57b421f684c79da8749ff9c8e9bdc0554654162f394e1f6f07669fb2bff402d8aa40a92d34458fa35dabcbd4
SSDEEP 192:4R8cBz3b4ceSv7sJPRpBEtzz964Hsb+WN5+BbTLpEFxA/+W248eywPyIsnAUgE:4R8mzLg+CXIbw5Gpwg2V6E
TLSH
T10C52862EA8645977ACCAD229F9117F97E3F6201265D12F84FBFC8A2C10E76CD2217413
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 13KB
SHA256 512970b6100040d107d16920e5042cee64ea97fd6b970b6abea4160fdc17c568
MD5 30e086d95ff964f0362d28301cc33b9e
SHA1 52b7dec45d384316559f89abe774ae71100fd187
SHA512 d66bcc6fb4c79a838b5c8defbd69ccdbc4476bfdf40a4be4fa0c7ebd545e2d09701a260ca810a510f8a11e47e431574831702156ef23f177f4f96934fb8bd3b4
SSDEEP 384:lzjxQ7KxkXqKf/pUZNCgVLH2HfgslzSXODxQ+ErU3vpHGj7RqlA:l/xQ7KxkXqKf/pUZNCgVLH2HfgsNAON0
TLSH
T11B52F967648D9A3F0FC8DA8CD8277F4FADF501576568092497FA9C0803E5BCA124A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 72B
SHA256 aee7d3767d6297cbc34316efb19d050f4f4d41d950215fd65b63d353f6327b33
MD5 4963d0c205b23aa73f192c6313003867
SHA1 e480b0d897bd59e024469b22bde6817860a4e7fc
SHA512 2d66e09d2c7f82990a6a7aed9cd8625cec2c6fffb66747d8e2c5c9a9f3d9798aa02108649ea8a0677c2aaa31ad0e9785b3559c4c917577711c4f31ba558feb36
TLSH
T147A0021252A040A3E00846B451C1064062205C7497F217E688D044E89C981894631844
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 506661da5827cccec36f9e0009508fccec7740cbb8a5f4270547e20eef437cdb
MD5 c90346913f0b451d9ceb659c2520a653
SHA1 3f204b3995f5fc5e6c939e1b9c55aed551019dba
SHA512 2c06768e1ab147609f2bd594430c34e8267493d96e801cad5e35cff33d9b334ec8ecf9bdbab9ea9328a648058e3b84d038fbd59aa8c65c492192f68f6cd9210d
TLSH
T126A0025162D019D5DE108FF160B54681235B4D98A961875354E6484C995F5C08151250
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a9c70.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Code Cache\js\index-dir\the-real-index~RFe5a9c70.TMP
Size 48B
SHA256 afba417da2973b13aad31b6f91b18bbc924637b58b35602f755334b129e3ec8b
MD5 76f2fbf051b17f493afff64100e4a024
SHA1 ce810f79dd13931a3318fe7e56f2a1bc1c353280
SHA512 1b7bb5a7a9fac483a14aa9e5d985e0dfc2b8ce8cd087fb302a14cabce1b32785dfe225fc24e9cd848c15ed0774a2ee0a8e92573c4e8dfa1aae3e0ccd2d301358
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5b215f.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Network\Network Persistent State~RFe5b215f.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 121KB
SHA256 dfd003c7d78d80ea4a34599373b78492f1c69341220703b12902869b1ef3a6d6
MD5 0ad135488fb6fd6972e9fa29695671b6
SHA1 52f04891f01a3f6fc90d038e353549472411ad05
SHA512 c71bc28f8b7ef14c7556cd56a4916d9a37d9d240deee1ad6cc6b6fb61fe111e034fdd3cb70412204589130119ed33803ae6c241bddb76450878da8d0a36e36d3
SSDEEP 3072:JERmdX7c9Y9dW1lwPAFzEbHwvgVbGvByaVGo8+zWXKNcNKNWzSqV:eRmdX7ch1UDDV4IaVq+zTWNVXV
TLSH
T14FC312321D5407EA923E9111FCDEA71B3DCAB6C76E531EC9C6910DFA0D8B94103129F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 121KB
SHA256 ea6979aac8d8497ace9ad2447d354a5d0b1a5b533cfb3c2fa1396670bd6b39d5
MD5 45b7eef0533bbf0ca3d1f81688d6e316
SHA1 57964887c0fbd489eac76d5c509c591a0e909d94
SHA512 82392396aeaa622b5ffe92b3b9cd008ff70aac63e7bd792e4e3f6a5df0e802f4adda762f4e23fb6e71a21c14a4515c124bf505eb18978da5e6ba5c751cdf137c
SSDEEP 3072:SERmdX7c9Y9dW1lwPAFzEbHwvgVbGvByaVGo8+zWXKNcNKNWzSqV:tRmdX7ch1UDDV4IaVq+zTWNVXV
TLSH
T196C312321D5407EA923E9111FCDEA71B3DCAB6C76E531EC9C6910DEA0D8B94103129B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 ecd96ba4b74c9a22ac0eb32e8d086901da33f9adf5b6d96b39cf5dc5be93f4c9
MD5 a5bc07009c0b9df0475b31d72bab980d
SHA1 786a236a4de7ee1b83b87e9125b427386f44170a
SHA512 8a54485bae8e2558a3b1e6a11285bc076582220b09bc74216fc1b400c171a3c5099aa865a220eba7e440fb0622e1e3144854851598bc124bfd8c1d2d7c11460f
SSDEEP 96:gC6yd+cAOIt5aDVmufj7jcbRDotok5SCD2B6/dGyv95SHJhbb2Jv4a:gCrLA/TE57cDUDFmUweSHJhbKl
TLSH
T1EDA1E771B4695EB35DB9C588F4827E83DF68A113A9226E88D9DC5F0C10E71EC1386927
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 121KB
SHA256 0f6054f2fd3dfaffc9d2a3b352a36bdc946ab125036032958e4f0c6a368fbc76
MD5 77607ca7b0784aeaff1cb6b979535eea
SHA1 642a59952875540578b5062efffcb504b940ef96
SHA512 a737daa23e303d9fcd3a764c2fec04260d7f32d1c7a0cfdb4d1dba32ec64a83467260bbe15a39d57837f1da65b8278fa1edc71dc8d1743b95847d1f596223f48
SSDEEP 3072:oERmdX7c9Y9dW1lwPAFzEbHwvgVbGvByaVGo8+zWXKNcNKNWzSqV:7RmdX7ch1UDDV4IaVq+zTWNVXV
TLSH
T1E1C312321D5407EA927E9112FCDEA61B3DCAB6C76E531EC9C6910DEA0D8B94103129B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CommunityToolkit.Mvvm.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\CommunityToolkit.Mvvm.dll
Size 143KB
SHA256 19b2144fed9600d58a742a5a4a5fd7b10d4d0d2c2e79f5d8019307cf5657044f
MD5 c5aba3e739e682a6727f33e7c89f1f3b
SHA1 2c656c3c24e66aea61bda770f146d8ccff5c868f
SHA512 fd7269021e7064742b1bd2b361d90ba5f848ba9f275f1b1b7a1459b231d4f012fa1bfe37cb0c01f524356e6bbc8a91f7eaddc91202b7fd498b6fa016b3a8659c
SSDEEP 3072:TSieaCkJBmT1YhqlgBE6KZogn10iAj+QPuzO/:TRVxmYe6+n10iV2
TLSH
T1AFE39E1273E85A33E6FF1B75B4F0808A8F72D707ED26E34D958D82920963BC059517BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.deps.json

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.deps.json
Size 36KB
SHA256 c1041d43fcf0883f298219db738c3b7f9326207ae533577bb50741a64afc2e7c
MD5 9f8e680a6ab0f3f3e2c7548b7f118fc9
SHA1 734a0540557b80cbb9b3ad1d0384215648663dab
SHA512 dd0f82e114968e6b6239cdd2d3a0a11358f1e20063dedf88fdfb03d56d561e00b7d250c9631b3fdc0e73a152a3ff1edfeed7ebb1152e8c85ed6c60b20aa71162
SSDEEP 192:CyrWrHwIIqoZoqsZuNTj6uTVZECYIh23RCzu4oFby98ZWjdIyfnNfekS3:CycHwIIq/MpRYIh23RC64oFbyfxIyf3S
TLSH
T135F28A26E8585E234976B7A6FD784991FA35432F3004684A7CFC294CCF76BAA5093F34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.dll
Size 911KB
SHA256 433370e7d29cd70d06f903de642368d377b977e15298c8b686d902bfce93bbd9
MD5 ccd09efea166201923232f65198f7378
SHA1 6f0cbab45825d05705de0721c72e94cff741736d
SHA512 01e8721e8f04023de174b3ac557ac5d33a8e0a857620d59d8d5d6abe0517b6fc563fa2213293950584b2bc2888131662220debf04250efd9efed3ed9e0f5436a
SSDEEP 12288:g9MI8waI5P19QptzKsHru7HbIW4K6QaPfZd:2MIsS19IhKsHuIWt61p
TLSH
T1A915292262B64635E0EFB7B5A0240518C6B5FF12A5C6F77E1D9B78BCE8F53039940263
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.exe

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
Size 254KB
SHA256 12318bbb72d71a44e264c927a3129ee29d81debd7dd4ebf612585bd26f15d725
MD5 49c1513df347fcea505bc745604fde46
SHA1 33f0d78cbccb22035c41d3015e9afb6f4ae8fa77
SHA512 e862148f41c16ce65ea9dc61727a0b4de7f4ee8c5868636bdca052e016cb11bdcb2203cc4576c4c85e7c760418f92d7e592089f974381de74f9f1afa015b94c7
SSDEEP 3072:FqeXA/4yIg9vkNPNu6H6xCYOiVUE265RJ6nIyBk:FvgvkNFNaxmNExJ6Ig
TLSH
T198442A37928541B9F097F1B4CA610845EBF17F605322A3FB1E0379BFCAF92819A69741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.runtimeconfig.json

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.runtimeconfig.json
Size 496B
SHA256 b7ab6a0ad18cf1280ad75c8e6d0df62d06c84d62dc69351e49c04afd3e218eb2
MD5 eb7751b6da413a72fe18d187b6b88daa
SHA1 0ab1171970e84ab0e4c9b6807a3700744052aab2
SHA512 d7db1f44c4f706c50755c07501f26620f51c9efb707853432b0ea1a15ffc7e3f9fba919cbbfc3540aec68035132f8ccdf3b5abc0882b67529f8ef5c0b509214c
TLSH
T160F05539C9141DB708F43BADD12AC087FA30136B01040D5A75FC180C2F766A26010E88
MD5 SHA1 SHA512 TLSH

Submit Download

Markdig.Wpf.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Markdig.Wpf.dll
Size 36KB
SHA256 b3054e4698878b89fb7e6244edd62b047be82aace0b1e506ff0271ab663a95da
MD5 36516367616a3339e7f9a8440b926d83
SHA1 186c8bb31a6479cbf868cc83d1a67106e8d3b212
SHA512 1cd6d37e7bef1c6a9871472cbe5dc3046c1b4f41bdd91a44398c0a41b2604a5131b80800a6b7a6935aae84a1e65d30edad3b75b17d60ab866fac21658175ff5d
SSDEEP 768:4rwjdE8a+zfLQUowohKV41fnPX9ZmsLAMK5qJTa:Ow5E8a+DLQUowOMYnP9ZmsLda
TLSH
T169F22C50BBDA812CE1FD4635B8B29A50B1B7B98E1206DE5F1D8150BF0CABB424611FF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Markdig.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Markdig.dll
Size 397KB
SHA256 17b19e9d32487968d5b55ec1d2d83800534985fc67151cbb6b82f42aaf232f30
MD5 9df1a79d00d43baa73de4a11c5e1db6f
SHA1 eb71d0ebb49f105ab733940ef5de364a41d363ec
SHA512 85f01b9cb614f70baffffd0c7426797ce97d71f45806edf2b7429cf70790800e9f16110881b6c47af1f7fd06e4161843133979b703e7d00fc46c336c6cc8f881
SSDEEP 6144:n3iVRvQuyp+zNvN8433eabMz+KECAqJGv3uh4bpQOGuV1PIYryeiJEtyBg:n3iVRvQuN863emMz4CqqvZBg
TLSH
T1218472B413F451E8F2EBFE37E8A21A20D6F2794BAD41ED5E0484244D8CB57419CA736B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.Abstractions.dll
Size 26KB
SHA256 3700bf75d75ceef47ebd6df7df9bafb9f7b7dcf22fc537f227db72ccf74c476d
MD5 6f48fbe8c1d66121fb930d01cee4cc95
SHA1 1cc8d8afaec01f6e967818a484fd7aa509624ecd
SHA512 3fe0dba909f19ea448ccf6e3874db0b6709737b215107f7b86fe35c3b911b200ca37dde2f1377f258fd265caa09f93af49ea5b239b05db5c3442f48c5571942d
SSDEEP 384:o9WZMDYtid3v9TaTG/FwEzRjz6rMwTbFmDWsjINWJlNgoR9zFiXS:0WZMDYk5pdO/09zl
TLSH
T19BC25B1653AC9333DDFB2F71F9A1C4952E3997E6A801DA19689E700809777C09B3372E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Binder.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.Binder.dll
Size 41KB
SHA256 efc13893ebfa02cc7e49ac13cfef68517c4441a33210d67956e7488b8e6b277d
MD5 2290f7d234bcbf93459adb8bb0745275
SHA1 e5f4067e40be7685d35d7cad76ef7768e53b078d
SHA512 7ffbedde32c75599a7c9f5ffda297f5a7f58699b05f7b42248ef28b0bafbf33ec9bd4fa27afbd6dc8f97b7d4ad61fb43cacc19e96fdc536429efd0a494c01baa
SSDEEP 768:DsjeqKLvg51cjLTwE6ry/v1rt4m37oX9z/5Y8:DsqxL451qUE6ry1Wm37+zhY8
TLSH
T1B1134C1793EC872AE9FF0B707471A4224FB6BB917926D6195C89A05C1D377C08A3236F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.CommandLine.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.CommandLine.dll
Size 23KB
SHA256 a1c8c9728b0dc64dcd975f82d013a1b7bc0c0133e46a94f29044f16cad6072b6
MD5 584eda713ab7795fac1645ef6f3352dc
SHA1 231d179d15e5caac7de89cb8ad71b9d0db1f82f5
SHA512 07f7baa9912b3e17239a601e33d40b329788c3cfc47d03626a0ea0c4f1766a3a9184f4c354715136878ea444287d1ffa6ff97e5cdb11020019babfb5dd9e1db2
SSDEEP 384:/fym2RBaP8ckJt+KAW9BmnWElNhtIscmeR9zlQQR:/amEEYRAvtI7N9zh
TLSH
T110B24B6693FC8317FDFB0E71A6F1D5512E39ABD76811E62A145EA0080D737C08B72729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.EnvironmentVariables.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.EnvironmentVariables.dll
Size 21KB
SHA256 bbb26aacd4ba67351d3740106bbcc5544827d98d91b48109362988147ae7963e
MD5 177dcffd43ac45b58a0c42b2c7b99c0c
SHA1 f61334d03d1050174a90c300c19fa29c39517e64
SHA512 3ef3aac0bdd86d7401d363f8d4d4771e79402c1459c9c5e5f1f178b4300cc9fc67b18d8af2c2d1f742f3a22f556efe5f554336db2e6126ab536344d1cbe65581
SSDEEP 384:v/dUEK0NrbQObCWU+JeWDlNBki+R9zd17/:v/UmfNxE9zj7/
TLSH
T181A24B8197FCD106F9F77FB4D9F9C9662C35F7D21862953A006DA00B0867B848B91B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.FileExtensions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.FileExtensions.dll
Size 26KB
SHA256 1830c601c1b155c54fbd3a6844453dae87af14eafe763942939d06905035130f
MD5 ee6d71766d2811851d8dd808384b5d83
SHA1 dc1a15ffbe9e406484572c21a2e94052099b1461
SHA512 bbf23f5c8c1059d48e04b965fba41921fb5346117c46792b218e07ed123be5ff1397781a8ddc68bfac44a0a9333442015dec3e67385a9a65633a6fb93f207dfb
SSDEEP 384:SNHfs86q0/ALi2iTFwLsdYyOiaXAzpkLqWqKl6WYlNorgFbR9zBTV9:Sk92/VyOOpkL3/A9zD9
TLSH
T1E5C25C62C7BC4213C9BB1E71A9F0E5022E35A7975C10E66B59DDE00D1DB73C08E62B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Json.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.Json.dll
Size 25KB
SHA256 e106f8bc13df7168294b95a6cdbceaba47b8eb7e562940eb4ef038db6fb1f2d0
MD5 e0a403e5af381beb4a47945fb5155ca7
SHA1 31b3051b7622207f803333e799461f9182319fb3
SHA512 0828841a0305e043f2df522b8d34c822d13964d870f08e1af0c461dd22a957088b0c44e2a24e877e87aff91a3dcf09f71b225e3e83982fcd0c80473606babaac
SSDEEP 384:5iemM0/vv+cFsbTRo9ge1lgzWkWR2W4lN4eFbR9zBOViT:5iMCzFsjfGG9zCW
TLSH
T117C25B6257FC4213E9BF1F319AF5C9412E39E796A811E71E15ADB00808B77C48E7272A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.UserSecrets.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.UserSecrets.dll
Size 24KB
SHA256 a310bcdd868dafc0efce5b03a68cd7af5d4fa0d06509ed4b5c51ddc1758e9791
MD5 249b5a3d38956616eb522a7c7214d0cc
SHA1 1b39211cf7978386ce9589eb88983deee137c3e4
SHA512 03d7b1eceadca05b35a14a3183ddb406d971fe61c217ffddd9d2ac9c187f9ad2cc6cece04c9332096b1396397e0b2398002ea4d3e8d0ec26e8e6a4d5246b3bf0
SSDEEP 384:o88CyOBc4Rm15FApdE1wEDW9ytCWjlNy2jR9zGGhyL:o8ByURi40uw9zwL
TLSH
T1C4B24C52D7FC4332FABA0E73F9B5E4452E38BBD65C11A61D109DA009187BBC48B32769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.dll
Size 42KB
SHA256 7a883c57d00808ca9b5d11bfaa2c5d21f714ed7560e781d7313d65b09b88b6c9
MD5 3970d9bf37ecb6cff7a394bdd25ee78f
SHA1 054b4622b962ae25446888ddf5ec823e340ff662
SHA512 950d50379cf9fe0fc8216a1f786b4c0322eecdeb390098e8bf855dc40c6901de1da110ddd48650ade001f009a815e8151ba72872381a16c6b2e96167d7fc427e
SSDEEP 768:LnxYrISYXrpu4dAn9RY5Pd9Lgg4vScADpDgOlfe9zb:LnxYrISQpu4v5/cANDKzb
TLSH
T153135B52536C8B17D6BE1B73F8E4992A2F71D2476815F30D9C9EB09908AB7C04B12737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.DependencyInjection.Abstractions.dll
Size 63KB
SHA256 c2a34d5259e6d6c0af43d9b926454105e80e7657dfed901d845100db254de89b
MD5 8db369e1139ba14a6208ea8df983ad0a
SHA1 62e77416f1f25a91c3a5140e3635414af1b8202e
SHA512 ef872d41c7775a81bb2dcbde47637cca29b4b810f2671826de042129e9907aeb2dff02a1ab684425cfaf7b2f48abc6e9a4f2261a4bb4c15bab70eba556f93633
SSDEEP 768:z0dv145TiKK8sfK8wUcrioA085JW14e2KSpYzRTzPdH9zJ:z0P45TiK3sfK81c52W+eHSpYztzldzJ
TLSH
T127533CDD37FCD373FBAE5B722A7390C09A35BA531401E70EA98550EA0892BC88551DB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.DependencyInjection.dll
Size 92KB
SHA256 4d7fb7b6a171047984a8316b1a355c65e33350c343f4e0ea2f1233be457eb7e5
MD5 7835c72d7fd691ebda152797eaf1bcec
SHA1 8816449c02b9424b7058842f161772fc489cbd86
SHA512 aad53dfdc5ee860b2a6d23c961005609f2ebb02fe3913750a08f31c81d9526e2dead96d4f233c12764e8bf51b6449ada833bca9129e6b77b3cdae6c3b6f86fd7
SSDEEP 1536:hrzFViiQfeQJFi5+2H2SOETeFRdRV6ZTzzIYn1Y6zQ:xFUiQfeQe/9eT6Tzzx+6U
TLSH
T159935C3963FC8F21EAFF1A75947141054BB6AB4A3403E31E1E94A0AD1AE3FC547713A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Diagnostics.Abstractions.dll
Size 29KB
SHA256 0a9e51f2d4861367908fa058da82b4a0deb6f85f6ba11d3c90b01c848b1fcdac
MD5 436f31765e8a25707ef3770a4880cd5e
SHA1 a0d63c5d8cc9f1644d85667136c73d7c337872b1
SHA512 9d5c163d8453e5784a79f8708d67f9304f0183a61b7ec2e54e0d4d772aa79c5f7afc726dfadec753e24be4a7743380a4bdfb39f01ad1f2a22edce64386c34243
SSDEEP 384:MLdH4vpxJv3H1yPNdc+bXimUVG+KWOXcRWVlNq1wGjR9zGGW:4dH4v9/yVurn159z2
TLSH
T132D26D41A7BC9325DEBB1E31BAA1C4023B36C3576811E7664EC8910D1977BD49A33B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Diagnostics.dll
Size 34KB
SHA256 0842e20c25240aca53809e005776eb88f53a61128c632c4c6fa8685b9f66c4b7
MD5 f14e4787e1accf6c01d433eaa0e30dfd
SHA1 3cc40e3e4c0645cbc8fec59e9bf59673f458029b
SHA512 f0d6cc32446f4cda8cbec48e8e5413ed3b8ec7bcdb8fb710013993feade52317438c44cb180394a6f71eb6164b9cbe170d6d284ae61a71a1d5da3ab5ec50b373
SSDEEP 768:lY4wbeDJl88xZZcfqnfBTdqdgWO7N9zal:lsClF/e+yOWyvzal
TLSH
T15CF24A56A7EC9322D9BF1E75AEF086061F39C7836411FB692DEC90990D777C08722329
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.FileProviders.Abstractions.dll
Size 21KB
SHA256 02f38beb848fa01fcc55f0cf3982ca01e1a5aeba95933131a197ef602a130763
MD5 3aa27844975c473aa34256bf9bcc8b6d
SHA1 16f9a31d79dd248c034ed092d40dc6c385ebee65
SHA512 95ae823dd74af65dd3c9ba60e676d8110a6293297a0a6cf53aeafc5faeb12431538d83d46adb0abab8833b12458eca29f3dd9a3314d72c3a72f99928bdb9f442
SSDEEP 384:N3tt2JeSlo+MVdUJtFEWsHMhWGalNFGoR9zFiJn/oq:Ne5GQfr09zQ/1
TLSH
T164A27D26D7BC8363CEFA5E3069A4C9476D3DD3DB4C05E51A1589E1081AF3BC48732B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Physical.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.FileProviders.Physical.dll
Size 43KB
SHA256 e6073f96262a3c468c5024564fa02df0f36234242b392c8b658b81bb1b9d968a
MD5 887259a796ae6590749fa3f0d78b0cd9
SHA1 6ab7d026ff5fc8fc0d92b51f29e492d8b33f8c5c
SHA512 41e7ba5f26060b03430f3da154ca8cd691bb287008e78661706cb449bfa3d3310342dd6e408a213df7c1366ecf89e8d0598d4dbfcd8c1d54039957e8a5c2edaa
SSDEEP 768:+kjPlCVm7Ej8zP5usGppdtUqISA3SngVE419z4Qt:+kJCVm7EihusMpdtUxSqSgVE4Hz4+
TLSH
T181137D2193BC4307CDEE4BB16DF0E4460734F3D72502F75A0D98B19A29A77C84B626BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileSystemGlobbing.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.FileSystemGlobbing.dll
Size 45KB
SHA256 965a5347b125d232361dd08027ab263ed1d042b0240ec4a4f29b7a0bfd74bb28
MD5 39743aeab0c21850ec0a8e7830ad4370
SHA1 c897d4dcf3bf039cf766f940f117701a0c5b1eab
SHA512 a79f377a64bea1c532aed4ce33abe17af9e888a4c89434a2310af7e6e3845333fd5116f0b1475db06f9c09d243f09b50ac5245d10dcac0e99a56a48a68f832a5
SSDEEP 768:7rw185npIg65BZLzI1Vp3aPolwgYakfn8OmVSfem0TgvJKMd9zH:7r/pkB58LaP4wgYaOYVSWpgvJKM/zH
TLSH
T108234A8066AC8223CABE17B8B8F4D4524B75C6B7B412FB474ECDA9481CB37C41A61777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Hosting.Abstractions.dll
Size 51KB
SHA256 57c2528e1f2b3872976661686af9bcbd0612de7ee6b4ef4cfe92b746b27aa1b7
MD5 c32f6f4402d1c5a9fcd2fff1e20a859b
SHA1 3732c98212eec17ff92759599fe91cafd1a8d711
SHA512 4bd18b34de2e0135a8e00616384033609fbb25804457cbd6cf3d363d7f2e3c7d4aec0e9f99e4a75b3abc87b8dde5ee0e6903dcf3afab80d962cfef02c7532a32
SSDEEP 768:3dfIvk8cUbjKbhY6Om4e+X9CzJ65Mo7tKoV2nwsyQQZt164yCmi3FbFi/Up2cK5J:5+k7UbjKbhY1TbUcKo+bozqrH
TLSH
T12933B14163F81615FAFB3F34ADF891258A3ABE66B834F62C064945DD09B2B80C971737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Hosting.dll
Size 69KB
SHA256 ca135e4b48abc2effdb6fdf085837966c35f3a8a305744429009dde946d633c8
MD5 14ffa2d36a6d50f71e904f5d0deef146
SHA1 63c60db8fd1a63be05ecafe119d61fe6d86bcb1f
SHA512 09d1ca0be3b43235f97f5739bb5e443adb04c0d34ad6499f7c50dbc64eff351e0b803ab0f8968bbe9589a88eb41765597b9b9b3fa623f6841ab98b6e4d66f9ab
SSDEEP 768:mHcMciLWJeEHq8SMj9db9KKjoDpxdDozzCF95dnbOCify7MYzWUAKCf9zPcx:mHTfEKjkdbMK6PM8nbOKVWUAKozPQ
TLSH
T15A634B8363AC4713DAEF1AB9E8B465691A35DB576414F70E5C8CB0D90CE3BC44E2272B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Abstractions.dll
Size 64KB
SHA256 4ad4a3b2bed7f5f293f83cc2c46169b93a9863b89428f693a4f17863704f47aa
MD5 a5cab35625e1f365a9181f4e059023b5
SHA1 1f8fcaaf8a0c512e3d33aa7caa0b452227459eed
SHA512 1fb963e563d774df6ad87fe5b7a09fcf0eae1413c270d4b01022e94a00057fc917919b3f4f6e03bb45ac47286dafe763d40ecd50d3ecc2ae91ba122c5579531a
SSDEEP 768:vRU98PjrdTukvp6wV1XxMyVYB0wwbru2OkJB7ix+WTqoU8/Aj29zg4Q:JTTxvcwTWBkbru2b7OZTNU8/2Cz9Q
TLSH
T1C4537D05ABEC4377CBBE4EB9F89096410F35C2472547E79B2CCCD125A92BBD44E213A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Configuration.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Configuration.dll
Size 26KB
SHA256 ed0a70f939dc8779ee85802e926f138e284828ac14d44831ca68fdcd14450b5b
MD5 477d8b5d7ab4c9b2bc918ef5daa8b45e
SHA1 7486ff87665335aa215bd589d19b98f546215eb4
SHA512 2ece4726195ea57acef015ee2b10435a50af5eb39d7d2af01d13f74cb9c6b6d1ceef4a232f81914bcb115ef52bb47641e833aabe4d19c8933cc286f2312f0883
SSDEEP 384:SPntTUFG4562BbpdL62S5p2X/ckWxsmzU7RWJlNdki+R9zdq:YtTJQj220gkU7H9zU
TLSH
T13CC25C6697A88326E9FB0F71EDF0D9453E35D7925811FB1D189EB00804BB3C4872273A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Console.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Console.dll
Size 73KB
SHA256 84ca5528a45074f18ae4234956de55d238a65be39f914f88293732dfd3889a35
MD5 cace87a409706f20b3ee8060cb9f0a16
SHA1 e7c60278a72a6ad5cfdd80191c09d91abeaadbbf
SHA512 ed21c6547c2df2cdf61c3070254bd6439a30d5674523823d303a0a96e40cdb64a91c887ab4133ead3d8a48716f7679bb6b2c67b22461d9ffef48249a5e5e0019
SSDEEP 1536:31SU9VTLpoGSWZdHPIcKPmUwzF9U8o/T//+Fv/HENqyvzM:lSU9VfpoX+JFKPmUZT/WFv/kkso
TLSH
T135736B1A5BEC831AD9BF5FB8FC7091015B35EB53B803EBAB5D88A0AC08677C54512763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Debug.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Debug.dll
Size 19KB
SHA256 ec47584ec7344dbe9b3ec5740cf493a8dbf346e467d6855e24be33555db11983
MD5 b1d351bf2b284e0969f1bcf9d6be1b58
SHA1 64fab26c768c8b610df90baad8e03e7759309f6e
SHA512 98df861cf32cf09a00688626d706b36ea9a4c3b5bcf76f3675039e43268a82cb6632c05066b361440c5f88806cfad0955af1bd4f9d0373dd796b369084a6c385
SSDEEP 192:zVfPfwSGE5QJusuqgQJ9j578mDAqWJIxVMW0WF+GBTBWseaAWDiz5j4HsX01k9zM:Rfafu42mDAqWJIxVMWJlNVIR9zeZ
TLSH
T149924D528BB84206DDAA5F30EFA5DA42793DD3979511DA2B05D8D1090C93BC4973262E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.EventLog.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.EventLog.dll
Size 24KB
SHA256 f70b8392447817a4d44acd5785e0bc029a2844d5445e05b98d95b237443339db
MD5 8210308568d5ef15f758ad21fee0517e
SHA1 e0fdd76a63aff7195b38976882e88701bb6fda57
SHA512 5decf964bfe472c2083bf093709da87a4577fffa9a22f9db757a9c3beaa83005a26599cf2297c9619522b3b7682af8a279dd5dcd5168808722b3d78c71814644
SSDEEP 384:0cqdNcIPJ51NsMsOBZgmVfVej+yUvW2rgFW0lN4tR9zj4O:VqPPUEZ9kUEAP9zMO
TLSH
T19EB25E429A6C431BDCAD4A71EFB5CD42397CE7C76812DA260E9CF1490C637D48B21B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.EventSource.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.EventSource.dll
Size 33KB
SHA256 665d5316f601ed6dd9daa6d7534610ca3a7aa40e4d117c079ffb118ea2179b2d
MD5 b251f77d47b8ae95b7e6c48caec4921d
SHA1 e04dfe931564d2b0bd967dcadb4d0f807743775f
SHA512 a1e85b95d9e65f4274a6b6dee8c5fac60a0890f8b521c271458c515d0860e48dc96a91bde318e0c89a080e12a29d690ee7ab99c8a3242dd3ed6b10b7c5b1bd43
SSDEEP 384:YJ3OpOC26rT++tIwa7Pmq8JKUNFUDeHQiXA40zKeGIGJyF7fg12Pahfv0mvoW3gU:YIV2mqJUNFoOXpycpvmQlfe9zq
TLSH
T128F25C71D39C830BDCDD1E34A6B8D982153BC79B7921EB4E5E88E0880973785972376E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.dll
Size 49KB
SHA256 48bd4a0d323e0ae85fa0469779bb13e92c4600b0a49dad6bcb891047c5e17caf
MD5 eaf823ed830e1f448cbe8e1ad95a76e1
SHA1 6539c17f608ad3691e96c23bbc3bb3b55ae34b37
SHA512 67a3d77da957aaa0fe4f4434c054f51886528640603d4e027d5f298e322964ca1061d40f99ac9169df45f9a4f656d050f4d3dd2c0b0c4a7ffb5d20d84bda2735
SSDEEP 1536:uwkwf/Pqv0KvNDmBRZlDl9PQ8izqu0PpKzZ:Dkg/WCXiz0BKF
TLSH
T1D9335C6147EC8763DAAE0E38F5E4D5545B76D76B6012EB536ECCB0A90C7378087202BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.ConfigurationExtensions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Options.ConfigurationExtensions.dll
Size 21KB
SHA256 3057894505e37852ac77ba70007a6b075980be4da9c3afcdb7a37e62750bda1b
MD5 8ed48fb1ee04b8180c8a021b8c9289d8
SHA1 4e4be474d90b13edf1365307809edab6ddfb066d
SHA512 ec0f2d7c3b75698fea8bbfb3c38771a358934a69aa25739ffe52939ecc25309c741aceade75c3b96eca4f778c7edaa33bda4180de993f3dc99b5ebef27548273
SSDEEP 384:ty1JDVIqRW7eGpX7SOxYWV4lEdzWzAr0WClNetR9zjrT:tnBR4lEdv1P9zfT
TLSH
T14CA23A528B5C4223DDFB5E71DEE585923D34E78A5911DE2A02DEE1480CA3BC8DE3172E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Options.dll
Size 62KB
SHA256 4e767f3c0bf37199a83b8697fc9431d907fe39b5f2763f83381865c89ea6545d
MD5 6d0db347c73a12d13b4207aeef1bad55
SHA1 7d8afb9e7aee839f6c03d6a8ef6ef6791523e741
SHA512 e1db3fb8a552c64c2030e3724c39930c1f9ff749817fcb2aa2286217a13b333bd73c55dda764fbbfcb2076b473b7aaa93f6e56b30fa704b400b689e73c76f3c2
SSDEEP 768:WpWO5uXespQkuvhuVyI4vrKilRrtsyQYGiuxseJyvmpqsS7WdP7NszuatX9z/p:WAGghwMII4TpsyVOuvBBSBouczx
TLSH
T169536A2297CC9712CAFF9671B4ADA4520E35C35A3A03B79B52CDF0D81C773A18A65633
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Primitives.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Primitives.dll
Size 42KB
SHA256 b5e8630df19605fec639873b86bdff6f9d424db88d181bb36a0bd641558c18ca
MD5 b252147211deb74a9d91401c4387b6dc
SHA1 e237368996fdb43315f2360d1f374cfe9a0d54f9
SHA512 05ae2266296a182ee4fa267e947f4a7cd1d4d6787c4b4c1fbc3ead253ad6dfbfc2d26409fed457186579fc9540e83f2d1ccc15c78c3cff1af2deb3a88d54e137
SSDEEP 768:6PNon+YcgKF/1WfRzT3YWkLzZuORP6eNbOP7yW5yKyqLuiM+30XuIh7N9zu1X:6Gvcg61WfkFuoPzNbOP7yVKHLuiM+3Jl
TLSH
T1E3135B05B39C8333CFFE9E75B5A1C4152638D3A6B522EB6B60C8A0741D637C4477266B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.DiagnosticSource.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Diagnostics.DiagnosticSource.dll
Size 187KB
SHA256 d28e247dc8b6af02968b65fe6aae25c2ee689d2007268375d63347aeac0bea6b
MD5 f287490a129140fa1bd94a7247f49b37
SHA1 9892801cd4b7fda18461cab464a1b00e18f52217
SHA512 a467c7855af63771138b95a62e9b541f81de9e1d44519dd68a1c894167cdbb5566392d196f75ebc88c4e9b4c0587ab280d4a1ff44309d7522efa6738f60e3d13
SSDEEP 3072:TRQdeGkopxoribSSiKQ7Rt2wS6XkzvYaLKlllWFBx21nRlviQYVPXx:eeGkopx0igKQlty6XlabBxq7vzYV5
TLSH
T184148D2073EC4B26DFEF1B39F470C45607F2DA4BB54BEB886A85A4EC1853BD1460126B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.Pipelines.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.IO.Pipelines.dll
Size 75KB
SHA256 a3c80d0bb52e0f5afc73638cfe5dc25e3470e5fdc0311745aebc8a4d4cfcba35
MD5 726b6639602ff3b58d037f99b3aa7279
SHA1 ac1b1635a3219b436b094ba633743fa32339a974
SHA512 12d4b0930694d5e13edd1c715891b931f2e9e692e48bdfac35675cc3d589fe58704e6f4b66fffef0615a4204b67b009671523f810a81bcf5a6a1c167c5b38134
SSDEEP 1536:LvXUpt0U320mvAnfAWF/G4bgN0xmR9ewEcXYzIkCRwy4PzJ7:90monoWNG4bgN0xmR9ewEcXmIkCCy4Pp
TLSH
T1DC735C6843EC8717EBCE1ABDA17145230FF2DA666A13F74A944CA89924D77C006263F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Cryptography.ProtectedData.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Security.Cryptography.ProtectedData.dll
Size 37KB
SHA256 ce7f4b80de12f227ac637915470c5b6b6a5d716456835caaa0b1600c3cbdcb6c
MD5 1f39c7f724597435feed4c6e8207b235
SHA1 cbe9a23badf76bad2ef913cdfe31d86c954d19d6
SHA512 f9b33dc2d34b5a1f5dbe1840685f85104a3e2be109c270314cbecd6d0c6a4e3f84a5be5ec8ec417f27ec7b571515bc578380bf8de4172790ddc7ddc8117c29ba
SSDEEP 768:y8I8P2QLEx7FiC7YccT3zoCaw2Lw09zaJ:yiP2DF1SjoS2LwczaJ
TLSH
T194036C21A7A8937BDE5B4974B931E00A783C8E498012BB3DD5C9614815F2BC59F32FB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Encodings.Web.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Text.Encodings.Web.dll
Size 64KB
SHA256 8839f3cdeabd22f5952c4673367ea41c921aeb0ea26e18fb23906e2cac08298b
MD5 6c8c3061f7f55a28ff30bcf3ee7da75b
SHA1 90e54da4dd85e168d294d61b1e42480e9280bbb0
SHA512 9b715a5594d298e68bbb5db933bf2719b0b4b7ec2807e256981dec73339fe4d7c2e416b9aa856035f61209b2a83e9b6f0903ec28b15a4837f43866f3ab908d62
SSDEEP 1536:0jLlBxsNNJM4PMZSFdmTa7/hQ98av9Yzm:mBudv3/211Y6
TLSH
T1DB535B11B7C8E51ED75D06306CE080B0A7F4AFDB5126E6C71C957A0E27B3BC86B1929B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Json.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Text.Json.dll
Size 660KB
SHA256 bb53577c13ab01f397585e4bb642a1a89f1af91b70eb385c7c05b82b9b912605
MD5 e1134858b6a45565531cb3c3a1a26df4
SHA1 8c7986c744b9bb668f1bbb37934528ac38dd0bd0
SHA512 dd4c350ab441df58e08bfd208cfad384f47a676300f9b5811bb7be14b81bea9ce18debceefcc4ae68aa488551348f20feb8ae09b4d2220dc84a401e1e4f21e5d
SSDEEP 12288:jC7e+aoa/8Jbxfap97o6WEuy68/aUI5ABlr9ZHqdKC7vZzhYQ:xoa/8Jbxfaf7o6WEupX5ABlnK8Q
TLSH
T134E45C10B3E84B2FDADF433AF0F040058BBAE46AA75AD74B150854E92CC3BD19E556B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Velopack.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Velopack.dll
Size 261KB
SHA256 b35698f5f66978d7bfd0ab12a2a2899f05912d9a1890d5e64c2dce9bacf2662f
MD5 2c29bf1bcfe53f779a9f7d785601dc8a
SHA1 21d134bb5661ebbb4819500aaf829ccfa024a9b4
SHA512 3acfa65169390a7f9af8ac66dfa9684405bcfcc4e61fc04df80ee3bfa25bea4bc8a41defd7fb9290890285172a97f663d95774a59e274fbcd1f8b5f44d533692
SSDEEP 6144:qo0g6Hxg1smn4oGalxcB+KQwCyknZylyZ8Sru:qLgAiWHoq9CykclyZz
TLSH
T17A445B0037F48716E2FF6F79FCB0600686B5FA07B8AAE75D0A8458ED1D633509950BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VirtualizingWrapPanel.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\VirtualizingWrapPanel.dll
Size 55KB
SHA256 8b59a3fbe3a041264535df8f0fcf0171ea633e57a9084882b9fe6c220181b3fa
MD5 11f5c40f0eb1d77cf27649a87c16756a
SHA1 68df2bee69e5dc45932f72761d84dc9ef33fe4fe
SHA512 408bd9f3b5863a66acdae09d3e46d4652b257d83c1adc2b64b6c6ccd3cb54e1f533fc60671e5fbcae048758e614afb443cd9e0c0ac96038a631dac81b022c397
SSDEEP 768:mr8nle6jhM5Cn8j72Plq2yHeMcBL1XXG1ulCF8RuEF07qEwtIn:mgnlk4Q2lqr+M41XiK4YvOn
TLSH
T19C43190C23AC8A37EB9F13B9A87011140372A567BB71E799899C70EE4B677D101257FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Wpf.Ui.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Wpf.Ui.Abstractions.dll
Size 7KB
SHA256 f504e30e37a74936ac14f14de4ac43c291cb3964eda71cdcdd61f27cf15cb9cf
MD5 eca262214bd112cc4a0a225df5f43210
SHA1 275987463805d018677c1e093d072a05ffda92a3
SHA512 099fc0c607af839d933b0007b37739897b67adb07ce309f5926da845b857b36b640c1d60ac002a405db73fbaaa793ecb0f54fd1e647c838d3188d80f51d0b843
SSDEEP 96:vClxi89zX2ekdeDm4mgWoQdBTHUhMDADUlYpijY39SOkX1hHN:vClFDc05mgWoQH0hMDADcke09KXDH
TLSH
T1F5E19221F3A88332CDF74777E8BA52845730F652EA578A3F199A510E5C2A0591E32B61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Wpf.Ui.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Wpf.Ui.dll
Size 6.3MB
SHA256 3466432f74d1d1224a55f71b8dec7b2913039e01ee32b7304fd9668fb76b797d
MD5 17b530002d305ce72b8c40a1c6ecd70c
SHA1 0be2703f9866699c4e7497f62141abc1b31ff57e
SHA512 3dea4eafa04fd6a9381921eb98526386319906153007e6b159e7437a32d6fb235ddd5d0434d13b58bc41a6f535aa718d29bcd43d101701b810c793b2358e1d4d
SSDEEP 98304:89xe/+FOvSmaRf+UcDN9NppBLxAHDfyLrZl:89xz8N9Npp
TLSH
T131666C5E17ED0D36C3B3837A8DB073222DA9196A1142AB834F4EDF2D446A2C4CDF559B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.EventLog.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\runtimes\win\lib\net8.0\System.Diagnostics.EventLog.dll
Size 171KB
SHA256 59fb8f95e34b4dbc41422e801ca9456da5ab70508d773e42e2ce1c60de38a88f
MD5 6781d2fc53d3682151ccf369d797d673
SHA1 7862a6bc28ee617abeb8d70c00da380ef914072b
SHA512 fc6070ad003a38c69944990b26507821a8c867f5a4683a0464e47a9efb201fcf5b0afb1ec60359b32e412edf521771ca4829b19e7a2b3d75d1d3082a5521bcfc
SSDEEP 3072:RfT/zCfxCsREbOAvoFY8ZHPfu65kt+EIx/LJQYyaQUoj9:p7zXsRIOAwhHPfF5ktyrfy
TLSH
T139045C7573EC4B1EE7FE1B38F4B011258736B996A93BE72D458448ED09637C08A207A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sq.version

Path C:\Users\Admin\AppData\Local\LuaTools\current\sq.version
Size 534B
SHA256 1f7d6d6c916cb28b13bba5441f91ac0bb9eedabf64974fefcbafdd799ca0833e
MD5 6b440998710c2f11154249ba9ed4ad27
SHA1 4e49743d3ccb5546e2ffe03a1492f588374cdc40
SHA512 2e4cf21e90e794fde7a340e099581d98a0a26fe11a632637fcb1c7326835b6c452e3512b7201e1daf7ab8c4fee1346d610381d2d1f192d906de0529e3d9415e1
TLSH
T1DEF02B85A542DA4645931E5565E54104B3EB7E6F34C948D0E8C88CE8238D2EEDC2FD55
MD5 SHA1 SHA512 TLSH

Submit Download

LuaTools-1.2.0-full.nupkg

Path C:\Users\Admin\AppData\Local\LuaTools\packages\LuaTools-1.2.0-full.nupkg
Size 6.6MB
SHA256 6687fa7eae16e69465aa5c9255dd9a034d85d667a826aaaa5ec42e4e2944834d
MD5 e80f888b55b5248241a2b02fc7455630
SHA1 bcd4d2f2e8b459df8be1c89688dd64b4678d37ed
SHA512 67acdff45d03bef09327d8a381f39fa2d7cc326f9dc32a68ed62b50aa0ff1ea2c0dfbbbc0f57fe4bad67bbd3b2f3d3f935e7555669052f7bb4e6b82784140cfa
SSDEEP 196608:miuS0040yF5NFrjPnN4Sw6qHn3ILn03t+6E4Ufl:VT60ojFrjfN4SwVI70bUd
TLSH
T1FE66330E471C9777C22BE5B4913D05ABC7827A6A63D1369A007833D37FCE6B9D61818B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsq9B2A.tmp\modern-wizard.bmp
Size 150KB
SHA256 16e0edc9f47e6e95a9bcad15adbdc46be774fbcd045dd526fc16fc38fdc8d49b
MD5 3614a4be6b610f1daf6c801574f161fe
SHA1 6edee98c0084a94caa1fe0124b4c19f42b4e7de6
SHA512 06e0eff28dfd9a428b31147b242f989ce3e92474a3f391ba62ac8d0d05f1a48f4cf82fd27171658acbd667eaffb94cb4e1baf17040dc3b6e8b27f39b843ca281
SSDEEP 48:ZQEM+jeAwtwVUoYxq+HQiNE/7o+f3cbqBtpozK8lHl/GGKOFHNPf33zFYsvwL:ZkWeftwV1enu/7ozCeu8RGGvP/jFYsv
TLSH
T1F8E3E9AEB933693ECD9911B41164A7FD8B306C5C7A40666E411FF8DC0FF31CA3569852
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsProcess.dll

Path C:\Users\Admin\AppData\Local\Temp\nsq9B2A.tmp\nsProcess.dll
Size 15KB
SHA256 bb6ce83ddaad4f530a66a1048fac868dfc3b86f5e7b8e240d84d1633e385aee8
MD5 08072dc900ca0626e8c079b2c5bcfcf3
SHA1 35f2bfa0b1b2a65b9475fb91af31f7b02aee4e37
SHA512 8981da7f225eb78c414e9fb3c63af0c4daae4a78b4f3033df11cce43c3a22fdbf3853425fe3024f68c73d57ffb128cba4d0db63eda1402212d1c7e0ac022353c
SSDEEP 192:WUl64IGsjDNyQDbnPvy2sE9jBF6IYiYF8pA5K+oZ7W76OCwy9GUe:5ZsNyQH38E9VF6IYinAM+oZYsBe
TLSH
T1E0726BB38A582C21DE4B4D3171D4853AAEB9AA571AC0C1D3634BC1518BC1BC7BBF82F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir7968_2014007848\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
TLSH
T1D3F055CB9000FC5E538BC00EB10072282BA603E01AD1726724EC1C0E67DFDAEB143F9A
MD5 SHA1 SHA512 TLSH

Submit Download

velopack_LuaTools.log

Path C:\Users\Admin\AppData\Local\velopack\velopack_LuaTools.log
Size 871B
SHA256 c90ef5043d68b4c323ab18dcc9b60e63a77e5fb13f080cd160626cfb2be785fe
MD5 bd23f8b5ff837aa39cbe3658fadefa30
SHA1 77e4a5598712fb0a42e2759cf90bff72ec8a3723
SHA512 63a74b290c99a1fb39dbe6dc05f02725317e3b3e4f855eb0c93f433bfad5a4cee69085a3fb2555230e53951ee7a88f5357f5a9d9c3283b629d06df5925c991a5
TLSH
T1CD11594AB7682197F457238793F3F1950AE21F283BC77DD70962E544A10A7AC23CA322
MD5 SHA1 SHA512 TLSH

Submit Download

Unconfirmed 228263.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 228263.crdownload
Size 2.3MB
SHA256 7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb
MD5 1b54b70beef8eb240db31718e8f7eb5d
SHA1 da5995070737ec655824c92622333c489eb6bce4
SHA512 fda935694d0652dab3f1017faaf95781a300b420739e0f9d46b53ce07d592a4cfa536524989e2fc9f83602d315259817638a89c4e27da709aada5d1360b717eb
SSDEEP 49152:UDP/q9MIX/crfcNVBaXp1m0zyVCMwBHgFzoZhRP8:kC9MI8Hm0GCjgFc3Rk
TLSH
T11FB533116FB8D076DAE20F71E0FA86F79536FC15962A4F4B3A807B2F7835110A5047B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download