c66586a7a7cd18f4804a8273cfa7987050344e70c599ce75a4c9c67ce422f92d

Resubmissions

17/07/2026, 02:53

260717-ddsgtahz6j7

17/07/2026, 02:53

260717-ddf4sahz5r

17/07/2026, 02:42

260717-c66dpsdv3x9

Analysis

user interaction
yes
max time kernel
333s
max time network
328s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
17/07/2026, 02:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LuaTools-win-Setup.exe
Size 11.0MB
Sample260717-c66dpsdv3x
SHA256 c66586a7a7cd18f4804a8273cfa7987050344e70c599ce75a4c9c67ce422f92d
MD5 ca0eef542221130c30b5b8e49bd74a0a
SHA1 3d8059e23438a8be36593f76a92fb6841ae0a729
SHA512 a5c0ddbf6e8bb6b609579bf91346fb41907901a7e789877e28ab3cb58a37495a86bd0754f20cb69f70ee345a6a79129863b27f95f18c82712f708a9ff36533c6
SSDEEP 196608:K4MyYNDTgGA2E9p0040yF5NFRjPnN4Sw6qHn3ILn03t+6E4U5Oc:iJNngW060ojFRjfN4SwVI70bUb
TLSH
T13FC60162FF02D0BBD48A01B5D43EB739B6369E95872A85C34AA93C5CA8F1370585335F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

9^/10

defense_evasion discovery persistence ransomware

Malware Config

Signatures

Renames multiple (6114) files with added filename extension
This suggests ransomware activity of encrypting all the files on the system.
ransomware

Downloads MZ/PE file 1 IoCs

flow	pid	Process
94	4948	chrome.exe

Executes dropped EXE 37 IoCs

pid	Process
1868	LuaTools.exe
5712	LuaTools.exe
988	SteamSetup.exe
4336	steamservice.exe
3460	Steam.exe
664	steamservice.exe
3276	steam.exe
5056	LuaTools.exe
15156	Steam.exe
8432	Steam.exe
8396	steamsysinfo.exe
8528	steamwebhelper.exe
8472	steamwebhelper.exe
8264	steamservice.exe
8128	steamwebhelper.exe
7944	steamwebhelper.exe
1972	steamwebhelper.exe
6184	SteamServiceTmp.exe
4872	steamservice.exe
1268	gldriverquery64.exe
4932	steamwebhelper.exe
1072	gldriverquery.exe
2156	vulkandriverquery64.exe
3044	vulkandriverquery.exe
17924	steamwebhelper.exe
17744	hardwareupdater.exe
17832	hardwareupdater.exe
19164	steamwebhelper.exe
7872	steamwebhelper.exe
20296	LuaTools.exe
16448	Steam.exe
4184	steamwebhelper.exe
5528	steamwebhelper.exe
10632	Steam.exe
10628	steamwebhelper.exe
14348	steamwebhelper.exe
12608	LuaTools.exe

Loads dropped DLL 64 IoCs

pid	Process
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
15156	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8396	steamsysinfo.exe
8396	steamsysinfo.exe
8396	steamsysinfo.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8472	steamwebhelper.exe
8472	steamwebhelper.exe
8472	steamwebhelper.exe
8472	steamwebhelper.exe
8128	steamwebhelper.exe
8128	steamwebhelper.exe
8128	steamwebhelper.exe
8128	steamwebhelper.exe
8128	steamwebhelper.exe
8128	steamwebhelper.exe
8128	steamwebhelper.exe
8128	steamwebhelper.exe
8128	steamwebhelper.exe
8128	steamwebhelper.exe
8128	steamwebhelper.exe
7944	steamwebhelper.exe
7944	steamwebhelper.exe
7944	steamwebhelper.exe
7944	steamwebhelper.exe
1972	steamwebhelper.exe
1972	steamwebhelper.exe
1972	steamwebhelper.exe
1972	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
4872	steamservice.exe
8528	steamwebhelper.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000\Software\Microsoft\Windows\CurrentVersion\Run\Steam = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -silent"	SteamSetup.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
2	raw.githubusercontent.com
3	raw.githubusercontent.com

Drops file in System32 directory 10 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData	steamservice.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB	steamservice.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\698460A0B6E60F2F602361424D832905_8BB23D43DE574E82F2BEE0DF0EC47EEB	steamservice.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\8EC9B1D0ABBD7F98B401D425828828CE_74B0F1158CF3BBDE3B65AF739E904359	steamservice.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft	steamservice.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache	steamservice.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content	steamservice.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141	steamservice.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\C8E534EE129F27D55460CE17FD628216_1130D9B25898B0DB0D4F04DC5B93F141	steamservice.exe
File opened for modification	C:\Windows\SysWOW64\config\systemprofile\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\8EC9B1D0ABBD7F98B401D425828828CE_74B0F1158CF3BBDE3B65AF739E904359	steamservice.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sc_touchpad_swipe_md.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_l5.svg_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steam\cached\game_details_header_red.tga_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\localization\xbox_360_finnish.txt_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sc_touchpad_click_lg.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps5_trackpad_l_right.svg_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_110_social_0110.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_010_wpn_0070.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\shared_touch_doubletap_lg.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps5_l2_soft_lg.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\win32_win_close_hover.tga_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sd_r4_lg.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\ps5_button_options_lg.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sc_lt_soft_sm.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\shared_lstick_md.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\switchpro_dpad_sm.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\bin\cef\cef.win7x64\libcef.dll_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\btnStdBottomLeft.tga_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps5_button_options_sm.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\localization\shared_tchinese-json.js_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\public\steam_updating_posix.tga_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\switchpro_button_home_sm.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\joyconpair_right_sl_sm.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_button_plus_lg.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_lstick_click_sm.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_rstick_right_md.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\4421.js_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\localization\steamui_german-json.js_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\btnOvrOnBottom.tga_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps4_trackpad_l_click_lg.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\bin\cef\cef.win7x64\locales\sr.pak_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\btnStdBottom.tga_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\bin\cef\cef.win64\dbgcore.dll_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_040_act_0330.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_settings_mouseover.tga_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\shared_outlined_button_y_md.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sd_r4.svg_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\public\steambootstrapper_brazilian.txt_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\resource\filter_banned_bulgarian.txt.gz_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\movies\oled-suspend-animation-from-throbber.webm_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sd_r4_sm.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_040_act_0010.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\sc_rg.svg_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\templates\controller_ps4_gamepad_fps.vdf_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\localization\steamui_brazilian-json.js_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\shared_button_c.svg_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sd_button_menu_sm.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\sd_rtrackpad_down_lg.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\resource\filter_clean_latam.txt.gz_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steam\cached\Receipt_CC_Success.res_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\fossilize_engine_filters.json_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\tenfoot\resource\images\library\controller\binding_icons\ghost_045_move_0410.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\shared_rstick_click_sm.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_010_wpn_0424.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steamui\images\controller\ghost_040_act_0314.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\ps5_trackpad_down.svg_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\dark\sc_lt_click.svg_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\ps5_trackpad_md.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\icon_left_default.tga_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\light\shared_gyro_pitch_sm.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\steam\cached\SubChangeContactEmailIntro.res_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\resource\overlay_malay.txt_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\controller_base\images\api\knockout\switchpro_sr_md.png_	Steam.exe
File created	C:\Program Files (x86)\Steam\package\tmp\graphics\tabStdTopRight.tga_	Steam.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\SteamSetup.exe:Zone.Identifier	chrome.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 11 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LuaTools-win-Setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SteamSetup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Steam.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	steamservice.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	steamservice.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	steamservice.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	steamservice.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	steam.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Steam.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	gldriverquery.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vulkandriverquery.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4948	chrome.exe
7944	steamwebhelper.exe

Checks SCSI registry key(s) 3 TTPs 4 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	Steam.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\ConfigFlags	Steam.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	Steam.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\ConfigFlags	Steam.exe

Checks processor information in registry 2 TTPs 13 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Steam.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	steamservice.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	steamwebhelper.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	steamservice.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Steam.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	steamservice.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	steamwebhelper.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	steamservice.exe
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	steamservice.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Steam.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Steam.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Steam.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Steam.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	steamwebhelper.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	steamwebhelper.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	steamwebhelper.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe

Modifies data under HKEY_USERS 64 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\WinTrust\Trust Providers\Software Publishing	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CRLs	steamservice.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\ProxyBypass = "1"	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\steamlink\Shell\Open	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\steam\Shell	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\steamlink	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\steamlink\Shell	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CTLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	steamservice.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Classes\steam\DefaultIcon\ = "steam.exe"	steamservice.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Classes\steamlink\DefaultIcon\ = "steam.exe"	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CTLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\TrustedPeople\Certificates	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\Certificates	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\Certificates	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\CRLs	steamservice.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\UNCAsIntranet = "1"	steamservice.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Classes\steam\URL Protocol	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\Disallowed\CRLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CTLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CTLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CRLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\trust\CTLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\trust\CRLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\CTLs	steamservice.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134287297808948086"	chrome.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\CA\CTLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\CRLs	steamservice.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Classes\steam\ = "URL:steam protocol"	steamservice.exe
Set value (str)	\REGISTRY\USER\.DEFAULT\Software\Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\""	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CTLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\SmartCardRoot\Certificates	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Disallowed\CRLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\steam\Shell\Open	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Policies\Microsoft\SystemCertificates\CA\Certificates	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\Root\CRLs	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\SystemCertificates\TrustedPeople\Certificates	steamservice.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Internet Settings\ZoneMap\AutoDetect = "0"	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\steam\Shell\Open\Command	steamservice.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\steamlink\Shell\Open\Command	steamservice.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell	steamservice.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\DefaultIcon\ = "steam.exe"	steamservice.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steam\Shell\Open\Command	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steamlink	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steamlink\Shell	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\Steam.exe\" -- \"%1\""	Steam.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\URL Protocol	steamservice.exe
Key created	\REGISTRY\MACHINE\Software\Classes\steam\DefaultIcon	steamservice.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\URL Protocol	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steamlink\DefaultIcon	Steam.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\luatools\ = "URL:LuaTools Protocol"	LuaTools.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steam	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steamlink\DefaultIcon\ = "steam.exe"	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\luatools\ = "URL:LuaTools Protocol"	LuaTools.exe
Key created	\REGISTRY\MACHINE\Software\Classes\steamlink\Shell\Open\Command	steamservice.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open\Command	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steam\Shell	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	chrome.exe
Key created	\REGISTRY\MACHINE\Software\Classes\steamlink\DefaultIcon	steamservice.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\""	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steam	Steam.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\luatools\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\LuaTools\\current\\LuaTools.exe\" \"%1\""	LuaTools.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open\Command	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steam\DefaultIcon\ = "Steam.exe"	Steam.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steamlink\DefaultIcon\ = "Steam.exe"	Steam.exe
Key created	\REGISTRY\MACHINE\Software\Classes\steamlink	steamservice.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\URL Protocol	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steam\ = "URL:steam protocol"	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\luatools\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\LuaTools\\current\\LuaTools.exe\" \"%1\""	LuaTools.exe
Key created	\REGISTRY\MACHINE\Software\Classes\steam	steamservice.exe
Key created	\REGISTRY\MACHINE\Software\Classes\steam\Shell\Open\Command	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steamlink\ = "URL:steamlink protocol"	Steam.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\luatools	LuaTools.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\luatools\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\LuaTools\\current\\LuaTools.exe\" \"%1\""	LuaTools.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steam\DefaultIcon\ = "steam.exe"	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steam\Shell\Open	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steamlink\Shell\Open\Command	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steam\DefaultIcon	Steam.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\luatools\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\LuaTools\\current\\LuaTools.exe\" \"%1\""	LuaTools.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\luatools\shell	LuaTools.exe
Key created	\REGISTRY\MACHINE\Software\Classes\steam	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\luatools\URL Protocol	LuaTools.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\""	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steam\ = "URL:steam protocol"	Steam.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\Steam.exe\" -- \"%1\""	Steam.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steamlink\URL Protocol	Steam.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\luatools\URL Protocol	LuaTools.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\luatools\shell\open\command	LuaTools.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steamlink\URL Protocol	steamservice.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steamlink\DefaultIcon	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\luatools\ = "URL:LuaTools Protocol"	LuaTools.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\luatools\shell\open	LuaTools.exe
Key created	\REGISTRY\MACHINE\Software\Classes\steam\DefaultIcon	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steam\URL Protocol	Steam.exe
Key created	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steamlink	Steam.exe
Key created	\REGISTRY\MACHINE\Software\Classes\steam\Shell\Open\Command	steamservice.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\""	steamservice.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell	steamservice.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\""	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\steamlink\Shell\Open\Command\ = "\"C:\\Program Files (x86)\\Steam\\steam.exe\" -- \"%1\""	steamservice.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-226940941-599731907-2645636698-1000_Classes\luatools\URL Protocol	LuaTools.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\steam\DefaultIcon\ = "steam.exe"	steamservice.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\SteamSetup.exe:Zone.Identifier	chrome.exe

Suspicious behavior: EnumeratesProcesses 47 IoCs

pid	Process
3296	LuaTools-win-Setup.exe
3296	LuaTools-win-Setup.exe
2980	chrome.exe
2980	chrome.exe
5712	LuaTools.exe
2980	chrome.exe
2980	chrome.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
988	SteamSetup.exe
5056	LuaTools.exe
5056	LuaTools.exe
8432	Steam.exe
8432	Steam.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
4872	steamservice.exe
4872	steamservice.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
8432	Steam.exe
20296	LuaTools.exe
20296	LuaTools.exe
20296	LuaTools.exe
12608	LuaTools.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
8432	Steam.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	1868	LuaTools.exe
Token: SeDebugPrivilege	5712	LuaTools.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe
Token: SeShutdownPrivilege	2980	chrome.exe
Token: SeCreatePagefilePrivilege	2980	chrome.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
2980	chrome.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8432	Steam.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8432	Steam.exe
8432	Steam.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe
8528	steamwebhelper.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
8432	Steam.exe

Suspicious use of WriteProcessMemory 63 IoCs

description	pid	Process	procid_target
PID 3296 wrote to memory of 1868	3296	LuaTools-win-Setup.exe	80
PID 3296 wrote to memory of 5712	3296	LuaTools-win-Setup.exe	82
PID 2980 wrote to memory of 5604	2980	chrome.exe	84
PID 2980 wrote to memory of 1076	2980	chrome.exe	85
PID 2980 wrote to memory of 1076	2980	chrome.exe	85
PID 2980 wrote to memory of 4948	2980	chrome.exe	86
PID 2980 wrote to memory of 3220	2980	chrome.exe	87
PID 2980 wrote to memory of 3220	2980	chrome.exe	87
PID 2980 wrote to memory of 6128	2980	chrome.exe	88
PID 2980 wrote to memory of 5212	2980	chrome.exe	89
PID 2980 wrote to memory of 6128	2980	chrome.exe	88
PID 2980 wrote to memory of 5212	2980	chrome.exe	89
PID 2980 wrote to memory of 4616	2980	chrome.exe	90
PID 2980 wrote to memory of 4616	2980	chrome.exe	90
PID 2980 wrote to memory of 2836	2980	chrome.exe	93
PID 2980 wrote to memory of 2836	2980	chrome.exe	93
PID 2980 wrote to memory of 5012	2980	chrome.exe	94
PID 2980 wrote to memory of 1856	2980	chrome.exe	96
PID 2980 wrote to memory of 1856	2980	chrome.exe	96
PID 2980 wrote to memory of 4420	2980	chrome.exe	100
PID 2980 wrote to memory of 1048	2980	chrome.exe	101
PID 2980 wrote to memory of 2700	2980	chrome.exe	102
PID 2980 wrote to memory of 4652	2980	chrome.exe	103
PID 2980 wrote to memory of 4652	2980	chrome.exe	103
PID 2980 wrote to memory of 5452	2980	chrome.exe	104
PID 2980 wrote to memory of 5452	2980	chrome.exe	104
PID 2980 wrote to memory of 2624	2980	chrome.exe	105
PID 2980 wrote to memory of 2624	2980	chrome.exe	105
PID 2980 wrote to memory of 2436	2980	chrome.exe	106
PID 2980 wrote to memory of 988	2980	chrome.exe	107
PID 988 wrote to memory of 4336	988	SteamSetup.exe	108
PID 3460 wrote to memory of 15156	3460	Steam.exe	117
PID 15156 wrote to memory of 8432	15156	Steam.exe	118
PID 8432 wrote to memory of 8396	8432	Steam.exe	119
PID 8432 wrote to memory of 8528	8432	Steam.exe	121
PID 8528 wrote to memory of 8472	8528	steamwebhelper.exe	122
PID 8528 wrote to memory of 8128	8528	steamwebhelper.exe	124
PID 8528 wrote to memory of 8128	8528	steamwebhelper.exe	124
PID 8528 wrote to memory of 7944	8528	steamwebhelper.exe	125
PID 8528 wrote to memory of 1972	8528	steamwebhelper.exe	126
PID 8528 wrote to memory of 1972	8528	steamwebhelper.exe	126
PID 8264 wrote to memory of 6184	8264	steamservice.exe	127
PID 8432 wrote to memory of 1268	8432	Steam.exe	132
PID 8528 wrote to memory of 4932	8528	steamwebhelper.exe	134
PID 8528 wrote to memory of 4932	8528	steamwebhelper.exe	134
PID 8432 wrote to memory of 1072	8432	Steam.exe	135
PID 8432 wrote to memory of 2156	8432	Steam.exe	136
PID 8432 wrote to memory of 3044	8432	Steam.exe	138
PID 8528 wrote to memory of 17924	8528	steamwebhelper.exe	140
PID 8432 wrote to memory of 17744	8432	Steam.exe	142
PID 17744 wrote to memory of 17832	17744	hardwareupdater.exe	144
PID 8528 wrote to memory of 19164	8528	steamwebhelper.exe	145
PID 8528 wrote to memory of 19164	8528	steamwebhelper.exe	145
PID 8528 wrote to memory of 7872	8528	steamwebhelper.exe	146
PID 8528 wrote to memory of 7872	8528	steamwebhelper.exe	146
PID 8528 wrote to memory of 5528	8528	steamwebhelper.exe	149
PID 8528 wrote to memory of 5528	8528	steamwebhelper.exe	149
PID 8528 wrote to memory of 4184	8528	steamwebhelper.exe	150
PID 8528 wrote to memory of 4184	8528	steamwebhelper.exe	150
PID 8528 wrote to memory of 10628	8528	steamwebhelper.exe	152
PID 8528 wrote to memory of 10628	8528	steamwebhelper.exe	152
PID 8528 wrote to memory of 14348	8528	steamwebhelper.exe	153
PID 8528 wrote to memory of 14348	8528	steamwebhelper.exe	153

C:\Users\Admin\AppData\Local\Temp\LuaTools-win-Setup.exe
"C:\Users\Admin\AppData\Local\Temp\LuaTools-win-Setup.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3296
- C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
  "C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe" --veloapp-install 1.2.5
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:1868
- C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
  "C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe"
  2⤵
  - Executes dropped EXE
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:5712

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe"
1⤵
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2980
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x108,0x10c,0x110,0xe4,0x114,0x7ff9751ec728,0x7ff9751ec734,0x7ff9751ec740
  2⤵
  PID:5604
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1808,i,6458270980902294669,15299104669480760066,262144 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=1988 /prefetch:2
  2⤵
  PID:1076
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=1524,i,5687162892927404846,16980549902055290183,524288 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2308 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4948
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2400,i,7396414383569293315,8611891620294258758,524288 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=2412 /prefetch:13
  2⤵
  PID:3220
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3264,i,13674041223670951709,11670993510604694298,2097152 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3284 /prefetch:1
  2⤵
  PID:6128
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3292,i,14390757831892798222,16629077252399661717,2097152 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3304 /prefetch:1
  2⤵
  PID:5212
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=4308,i,9337833806087057237,3909887634355566433,2097152 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4320 /prefetch:9
  2⤵
  PID:4616
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4684,i,7294286797091613414,12221519226365302617,2097152 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4640 /prefetch:1
  2⤵
  PID:2836
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5300,i,5917623360695865557,17578035107906143945,524288 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5304 /prefetch:14
  2⤵
  PID:5012
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=5308,i,14252783900454117117,9565960583826025411,2097152 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5780 /prefetch:1
  2⤵
  PID:1856
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3280,i,17948008643633313593,11949753865465351888,524288 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3340 /prefetch:14
  2⤵
  PID:4420
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4868,i,16772292056917197435,12256304655197811122,524288 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3940 /prefetch:14
  2⤵
  PID:1048
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=4872,i,5518048596102562034,446649566358781861,524288 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=3384 /prefetch:14
  2⤵
  PID:2700
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=4404,i,17073555039105371304,501543931864204607,2097152 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4332 /prefetch:1
  2⤵
  PID:4652
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=4528,i,7570690649381112126,2930165735550772969,2097152 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4664 /prefetch:1
  2⤵
  PID:5452
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=3464,i,10063516801427019262,5971798715881565361,2097152 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=4636 /prefetch:1
  2⤵
  PID:2624
- C:\Program Files\Google\Chrome\Application\chrome.exe
  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=3344,i,12621646860912774981,13302692456049464468,524288 --field-trial-handle=1992,i,14101925696017039829,282363267788563415,262144 --variations-seed-version=20260513-170108.306000-production --mojo-platform-channel-handle=5996 /prefetch:14
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - NTFS ADS
  PID:2436
- C:\Users\Admin\Downloads\SteamSetup.exe
  "C:\Users\Admin\Downloads\SteamSetup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Adds Run key to start application
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of WriteProcessMemory
  PID:988
- - C:\Program Files (x86)\Steam\bin\steamservice.exe
    "C:\Program Files (x86)\Steam\bin\steamservice.exe" /Install
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    PID:4336

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3136

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:2188

C:\Program Files (x86)\Steam\Steam.exe
"C:\Program Files (x86)\Steam\steam.exe" -silent
1⤵
- Executes dropped EXE
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious use of WriteProcessMemory
PID:3460
- C:\Program Files (x86)\Steam\Steam.exe
  "C:\Program Files (x86)\Steam\Steam.exe" -silent
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Checks processor information in registry
  - Suspicious use of WriteProcessMemory
  PID:15156
- - C:\Program Files (x86)\Steam\Steam.exe
    "C:\Program Files (x86)\Steam\Steam.exe" -silent
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Checks SCSI registry key(s)
    - Checks processor information in registry
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: GetForegroundWindowSpam
    - Suspicious use of SendNotifyMessage
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:8432
  - - C:\Program Files (x86)\Steam\steamsysinfo.exe
      "C:\Program Files (x86)\Steam\steamsysinfo.exe" -steamid 0 -buildid 1782866176 -logdir "C:\Program Files (x86)\Steam\logs" -nocrashdialog -query 1 -out-file C:\Users\Admin\AppData\Local\Temp\7DC.tmp
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:8396
  - - C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
      "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" -nocrashdialog "-lang=pt_PT" "-cachedir=C:\Users\Admin\AppData\Local\Steam\htmlcache" "-steampid=8432" "-buildid=1782866176" "-steamid=0" "-logdir=C:\Program Files (x86)\Steam\logs" "-uimode=7" "-startcount=0" "-steamuniverse=Public" "-realm=Global" "-clientui=C:\Program Files (x86)\Steam\clientui" "-steampath=C:\Program Files (x86)\Steam\Steam.exe" "-launcher=0" --valve-enable-site-isolation --enable-smooth-scrolling "--log-file=C:\Program Files (x86)\Steam\logs\cef_log.txt" --disable-quick-menu --disable-component-update "--gaia-url=http://disabled.invalid" "--enable-features=PlatformHEVCDecoderSupport" "--disable-features=WinRetrieveSuggestionsOnlyOnDemand,SpareRendererForSitePerProcess,DcheckIsFatal,BlockPromptsIfIgnoredOften,WebUsbDeviceDetection,ValveFFmpegAllowLowDelayHEVC"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Checks processor information in registry
      Enumerates system info in registry
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of FindShellTrayWindow
      Suspicious use of SendNotifyMessage
      Suspicious use of WriteProcessMemory
      PID:8528
    - - C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
        
        "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=crashpad-handler /prefetch:4 --max-uploads=5 --max-db-size=20 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Program Files (x86)\Steam\dumps" "--metrics-dir=C:\Users\Admin\AppData\Local\CEF\User Data" --url=https://crash.steampowered.com/submit --annotation=platform=win64 --annotation=product=cefwebhelper --annotation=version=1782866176 --initial-client-data=0x294,0x298,0x29c,0x290,0x2a0,0x7ff976bdaea0,0x7ff976bdaeac,0x7ff976bdaeb8
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:8472
    - - C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
        
        "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=gpu-process --start-stack-profiler --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1782866176 --steamid=0 --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1684,i,9156232675243419423,9083854268241512930,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=1760 --mojo-platform-channel-handle=1756 /prefetch:2
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:8128
    - - C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
        
        "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --start-stack-profiler --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1782866176 --steamid=0 --field-trial-handle=2128,i,9156232675243419423,9083854268241512930,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=2184 --mojo-platform-channel-handle=2180 /prefetch:11
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Time Discovery
        
        PID:7944
    - - C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
        
        "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1782866176 --steamid=0 --field-trial-handle=2268,i,9156232675243419423,9083854268241512930,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=2452 --mojo-platform-channel-handle=2448 /prefetch:13
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        
        PID:1972
    - - C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
        
        "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=renderer --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1782866176 --steamid=0 --gaia-url=http://disabled.invalid --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=3972,i,9156232675243419423,9083854268241512930,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=4060 --mojo-platform-channel-handle=4056 /prefetch:1
        5⤵
        Executes dropped EXE
        
        PID:4932
    - - C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
        
        "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1782866176 --steamid=0 --field-trial-handle=4940,i,9156232675243419423,9083854268241512930,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=4924 --mojo-platform-channel-handle=5000 /prefetch:14
        5⤵
        Executes dropped EXE
        
        PID:17924
    - - C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
        
        "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=renderer --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1782866176 --steamid=0 --gaia-url=http://disabled.invalid --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --field-trial-handle=4472,i,9156232675243419423,9083854268241512930,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=4716 --mojo-platform-channel-handle=4708 /prefetch:1
        5⤵
        Executes dropped EXE
        
        PID:19164
    - - C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
        
        "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=renderer --start-stack-profiler --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1782866176 --steamid=0 --gaia-url=http://disabled.invalid --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --field-trial-handle=4488,i,9156232675243419423,9083854268241512930,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=5664 --mojo-platform-channel-handle=5648 /prefetch:1
        5⤵
        Executes dropped EXE
        
        PID:7872
    - - C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
        
        "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=renderer --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1782866176 --steamid=0 --gaia-url=http://disabled.invalid --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --field-trial-handle=4824,i,9156232675243419423,9083854268241512930,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=1408 --mojo-platform-channel-handle=5256 /prefetch:1
        5⤵
        Executes dropped EXE
        
        PID:5528
    - - C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
        
        "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=renderer --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1782866176 --steamid=0 --gaia-url=http://disabled.invalid --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --field-trial-handle=5800,i,9156232675243419423,9083854268241512930,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=5500 --mojo-platform-channel-handle=5392 /prefetch:1
        5⤵
        Executes dropped EXE
        
        PID:4184
    - - C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
        
        "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=renderer --start-stack-profiler --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1782866176 --steamid=0 --gaia-url=http://disabled.invalid --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --field-trial-handle=5684,i,9156232675243419423,9083854268241512930,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=5752 --mojo-platform-channel-handle=5748 /prefetch:1
        5⤵
        Executes dropped EXE
        
        PID:10628
    - - C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe
        
        "C:\Program Files (x86)\Steam\bin\cef\cef.win64\steamwebhelper.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --enable-chrome-runtime --user-data-dir="C:\Users\Admin\AppData\Local\Steam\htmlcache" --user-agent-product="Valve Steam Client" --buildid=1782866176 --steamid=0 --field-trial-handle=4720,i,9156232675243419423,9083854268241512930,262144 --enable-features=PlatformHEVCDecoderSupport --disable-features=BlockPromptsIfIgnoredOften,DcheckIsFatal,SpareRendererForSitePerProcess,ValveFFmpegAllowLowDelayHEVC,WebUsbDeviceDetection,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --enable-logging=handle --log-file=5324 --mojo-platform-channel-handle=5628 /prefetch:12
        5⤵
        Executes dropped EXE
        
        PID:14348
  - - C:\Program Files (x86)\Steam\bin\gldriverquery64.exe
      .\bin\gldriverquery64.exe
      4⤵
      Executes dropped EXE
      PID:1268
  - - C:\Program Files (x86)\Steam\bin\gldriverquery.exe
      .\bin\gldriverquery.exe
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      PID:1072
  - - C:\Program Files (x86)\Steam\bin\vulkandriverquery64.exe
      .\bin\vulkandriverquery64.exe
      4⤵
      Executes dropped EXE
      PID:2156
  - - C:\Program Files (x86)\Steam\bin\vulkandriverquery.exe
      .\bin\vulkandriverquery.exe
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      PID:3044
  - - C:\Program Files (x86)\Steam\bin\hardwareupdater\hardwareupdater.exe
      "C:\Program Files (x86)\Steam\bin\hardwareupdater\hardwareupdater.exe" --check-for-updates
      4⤵
      Executes dropped EXE
      Suspicious use of WriteProcessMemory
      PID:17744
    - - C:\Program Files (x86)\Steam\bin\hardwareupdater\hardwareupdater.exe
        
        "C:\Program Files (x86)\Steam\bin\hardwareupdater\hardwareupdater.exe" --check-for-updates
        5⤵
        Executes dropped EXE
        
        PID:17832

C:\Program Files (x86)\Common Files\Steam\steamservice.exe
"C:\Program Files (x86)\Common Files\Steam\steamservice.exe" /RunAsService
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:664

C:\Program Files (x86)\Steam\steam.exe
"C:\Program Files (x86)\Steam\steam.exe"
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:3276

C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
"C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe"
1⤵
- Executes dropped EXE
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:5056

C:\Program Files (x86)\Common Files\Steam\steamservice.exe
"C:\Program Files (x86)\Common Files\Steam\steamservice.exe" /RunAsService
1⤵
- Executes dropped EXE
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Modifies data under HKEY_USERS
- Suspicious use of WriteProcessMemory
PID:8264
- C:\Program Files (x86)\Common Files\Steam\SteamServiceTmp.exe
  "C:\Program Files (x86)\Common Files\Steam\SteamServiceTmp.exe" /Update
  2⤵
  - Executes dropped EXE
  PID:6184

C:\Program Files (x86)\Common Files\Steam\steamservice.exe
"C:\Program Files (x86)\Common Files\Steam\steamservice.exe" /RunAsService
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:4872

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004F0 0x000000000000048C
1⤵
PID:1152

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:17136

C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
"C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe"
1⤵
- Executes dropped EXE
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:20296

C:\Program Files (x86)\Steam\Steam.exe
"C:\Program Files (x86)\Steam\Steam.exe"
1⤵
- Executes dropped EXE
PID:16448

C:\Program Files (x86)\Steam\Steam.exe
"C:\Program Files (x86)\Steam\Steam.exe"
1⤵
- Executes dropped EXE
PID:10632

C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
"C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe"
1⤵
- Executes dropped EXE
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
PID:12608

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

SteamService.dll

Path C:\Program Files (x86)\Common Files\Steam\SteamService.dll
Size 3.6MB
SHA256 6e8870c59fc89908fc64e25560d306ce3d6d3e420212a9a29b488d120d18f100
MD5 dca45388a84911af7186689fd225c6dc
SHA1 e57539fcd9f8fc59ad94ee0efb1ab35e914cb063
SHA512 2df1998ef66a5c7559462791950ef6c7ac0cb0a718ed0b9a754dc8d20318115edb093027de6b1597410f71ae77432cdab08f9660080df8a258b5a465c07e8222
SSDEEP 49152:YWpaIr8KjH/rGXfyjTdb+P9j76FGS20I7cSRL0+S096tPx3BVw9eJRTOxDQvpD7:YWpXnjH/sfydb+Vj7eGUIYW0+R6T3Bn
TLSH
T19206BF12FA42C172E49E02B5646F9B7E9D7DAA204739C4C3A7D42D699C301E33B3B356
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SteamServiceTmp.exe

Path C:\Program Files (x86)\Common Files\Steam\SteamServiceTmp.exe
Size 2.8MB
SHA256 26181987d137f76c514616a1ac52e806fc474f6afbeb0c10b2d33c939205bf92
MD5 09574ac126b2550098533af1d685aada
SHA1 3e4822c438bfb7a01d148a9b8fdeefb98c3093da
SHA512 49b8a220497cd26d999d48238313f0a2daddaac2f9756093182f51841003a10ffc0678e29895ed3a21149afb209eb2d0cf92c44b36a33e9fe10ec9e261bae6ad
SSDEEP 49152:e2v9HjNZZIpT1EQkGok4PetYsXqDWtrOtPLGH1GJ5DmWV9SCbJB5AQMW:e2vFBIpT0GX4WtKDW49GHEHmi
TLSH
T16FD5AE12FA4189B9E9D31174E2EF577A4A396F20033588C797D03FA958325D2BB3E385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cpuidsdk.dll

Path C:\Program Files (x86)\Common Files\Steam\cpuidsdk.dll
Size 3.4MB
SHA256 2c74ce7eae980c664760f0b0cf5e9852de9823e8a7b9dcdb4f6c30a5015755e8
MD5 a09978377657626e40cedea136bdb304
SHA1 a6c851a1c6c2a7158c8d9d17391904b56e954ad4
SHA512 593dc39fd2d3aba7bb8ae466a4362194c9df89abe0e3f49434b344aee738584fde4f3e6d21d239fc4bf7b86de167f8d7f2c9cd41c218be34397179910acb0fe6
SSDEEP 49152:hbK+rkFjWRrHH4PKjis2FSnT96gccjvQ/WnGvi4KS/g:l1kFXPKms2QnZ3KviN
TLSH
T131F56B51B3C89CF1D0AA0A3103ABAF194F79B7549B3886EF56D45D8D2D319C0BC3E25A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crashhandler.dll

Path C:\Program Files (x86)\Common Files\Steam\crashhandler.dll
Size 400KB
SHA256 7cdc1d5d3c62f9e9639c82448e654bbb1b82e7d0d249b049c6b3714b28cbd1a0
MD5 8ea6e69b5749efc3284728dc25446d47
SHA1 326965e829acd872717a088b28233aefa6e64ff8
SHA512 0ce1a1454a407bc6a426f4eaa0b9f9838759b46c798aaa1d83ac10e0c579d7a233dab01cb2fcccd1af6a9fd2a9fbf4d48a7437073452ec5d40d52ba0754cf479
SSDEEP 6144:nrDdiG8LpFvEx/aMhnFujdYgD3X7lLM1lMRLyd6wB78mmkJAOfGZW08:rDdiG8LvvSpFujdYgDHcMRLJkJNGZw
TLSH
T106949E11F892C073D57E18306979EF6A5A3DB8601F68A4EBE3C40DEB4E706C1973971A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

drivers.exe

Path C:\Program Files (x86)\Common Files\Steam\drivers.exe
Size 7.1MB
SHA256 06099ff2cd3c07315e1d47d1e6c1bb7caa6166c079af2265674f0dce3a2e8294
MD5 82b8c286771eed8a5fc8ca83028fa8e9
SHA1 84dda52b191f6acd70339d955e1edaab30ae1eab
SHA512 cf4f6dbd6f53fbef4c5e26569117f1dd38c15e947aeaa2cafc9b2bf2b11a2d9afb83caa3a3804d405b9b1b8d3c3da9d5f5d291a18942b0114ff5abebec9ce0fa
SSDEEP 196608:RNmxPFWJgzW11PDQhACcuFWJgzW11Pko+NbhACcX5:RNmKJeM1PDQhApJeM1PubhAp
TLSH
T16C7623657A050EBCEBF1B674EBDD532513A81D9502BB98CF13D03F893937D82B99A081
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

secure_desktop_capture.exe

Path C:\Program Files (x86)\Common Files\Steam\secure_desktop_capture.exe
Size 3.7MB
SHA256 666f294fa46fcd92c5fb4e391011705104082b9da2e011437d501b36e75a5e33
MD5 29bdf5e43b63bfef6440faaef8eedc43
SHA1 b40be088c522b7fd1a9eeb3c7066d880562bbb18
SHA512 361ff2609e5a247d62ff17a840bc95946d7ea18c48d5c4347bbfa27f31a4f2791a127890994f0c2a043b218e30db311b0851f0c7c4fe5b78d5d977ac14231125
SSDEEP 49152:PGtlq1aVwASOz5IU6iyaWkSyrZ12B+fti1oYvJWYWQaIhfCj89zd6Hekt6Tql8Bc:6++DHz1i1oYJvJC8ZGVhkbYmC
TLSH
T1D2067C16665901FCD5B7D138C6CA5627E7B17C0603B18BCB02E4BA661F33AE26E3E741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

service_default_Public_versions.vdf

Path C:\Program Files (x86)\Common Files\Steam\service_default_Public_versions.vdf
Size 808B
SHA256 6f9f3db4f4b8a98d921ffcb7414b2adae32f3803e592c06b9c7ec16b344e009a
MD5 099d293e4332f378d53075437e395662
SHA1 dda8ca4dff68e3d1469115540dd120a094e0f529
SHA512 6f7c076a139df168eb05c9a978ca225ec42f2b7cad5525e51be14997c104be205af1d33cae8eb8307c82ce25e933953e5aaacc8935353cbd8986a0b79e3625ff
TLSH
T1AA01491FD183FCFB45640B6A5B8B98F6472E149BACC76C433D41105D91F9838651561D
MD5 SHA1 SHA512 TLSH

Submit Download

service_minimum_versions.vdf

Path C:\Program Files (x86)\Common Files\Steam\service_minimum_versions.vdf
Size 727B
SHA256 a75ecb06d45017d2289ec27dac9f418c6ef82a9352e012670a0c67161c25c52c
MD5 47ea8d10c7c8e5ab9259a6b164a9e2d3
SHA1 cdaedb2b5d5b937930eef504de997592e95f487d
SHA512 8b85dffebf9e21e436d48292fb3bce54e01b1470bc1fc7dabbee2233743c7025cd7c59523ffa1d0f1ca50d2b1edf7bb18787aa4df61d7dfec155323ae0eb1ccf
TLSH
T1DA01DC1FBCC2A8BA2BB2465B8BF78CCE6F780906549A3CC05D840C4893E8E1C1709045
MD5 SHA1 SHA512 TLSH

Submit Download

steamerrorreporter.exe

Path C:\Program Files (x86)\Common Files\Steam\steamerrorreporter.exe
Size 691KB
SHA256 ae57dd7b7f3c140625533df0bd614dfc4c8408d91db652ac4cba45daf72741a6
MD5 adb12c3aae35e268507946c3ec6f6873
SHA1 73b1b3dc13bd6214025aca508491f5d58eba0108
SHA512 5641f252771fa07ade23a02855af6ba35c8ba23c32536210edff09542b7343d876be18768d88c4efd8cd9e185c5cbd85c74945b096c5e98c4eb0719d822c2664
SSDEEP 12288:fX+v2auF7fLXh1oyx3UG8Nwghm5oprCdo:fX+87Toc3UG7ghmSwdo
TLSH
T1C9E429607901497DEBF07A34EBED937513A92D51073758CF23D03F8A3932AC2AA7A156
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

steamxboxutil64.exe

Path C:\Program Files (x86)\Common Files\Steam\steamxboxutil64.exe
Size 751KB
SHA256 82b1da408da1be33da6893f66ff8156cc6923cb5c7f7aa2cc988f6dae414b882
MD5 eb973e607fc9868b96ee036ba8fe83dd
SHA1 507d2c2267e23a987ff99d2c7bffc1ee268fd189
SHA512 c5fc4901e289b7c23f1c9c998885ed9ead63160c336e5c75c9ed40987f38ba9294643c79ab6b095a3ef04759c5d4201e0481eb7d7753fe0a8627a49201c7ee53
SSDEEP 6144:CLL0z+/CS76mOUvTcU0KQAfngWLPhyJyJYqLu0s4Mq4QJWuLbvER0u+GIIIIIIIx:CLL0zqCS76STcK7dtJk0sN5AAm5j
TLSH
T142F4296466050AFCEAF1B638DBCE5211D3B13D52023795CF13D47F8A3E33A52AE6A251
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Steam.exe

Path C:\Program Files (x86)\Steam\Steam.exe
Size 4.2MB
SHA256 12222b0908eb69581985f7e04aa6240e928fb08aa5a3ec36acae3440633c9eb1
MD5 33bcb1c8975a4063a134a72803e0ca16
SHA1 ed7a4e6e66511bb8b3e32cbfb5557ebcb4082b65
SHA512 13f3a7d6215bb4837ea0a1a9c5ba06a985e0c80979c25cfb526a390d71a15d1737c0290a899f4705c2749982c9f6c9007c1751fef1a97b12db529b2f33c97b49
SSDEEP 98304:7JeV/ztZBe91oiImuUiK9N9EGQKF9lSHbr7aw:1S/hwkmg4EpbrOw
TLSH
T1C516BF62BB41C071F9C201B964BE9F7A497DAE204775C0D397D43E6A88311D32B3A79B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bd2b709a08caf7286f73c51d3b3937667f7aa053.jpg

Path C:\Program Files (x86)\Steam\appcache\librarycache\1113280\bd2b709a08caf7286f73c51d3b3937667f7aa053.jpg
Size 638B
SHA256 7bd8b75aec0a4d4a377f3ca3a023fd8b7c5fc7dc6a2a66d17f8cdfe5b731ab0c
MD5 7ecdaf8a54ec52b20640a88527512903
SHA1 3133a4d748ad3be61fe9db759339cd5de73339b5
SHA512 60ae2031eed0c38264f0d8db22a9b6efeb3f80c791e916e15a1730853162d56e0da014dbd93a5479bae4f3bdd5705ca89be70c90574a524abd1c276ed5c55a2d
TLSH
T1BDF0269F38500645EE33EB710D55023377096616789357DD1077984495D1450DB3F976
MD5 SHA1 SHA512 TLSH

Submit Download

config.vdf

Path C:\Program Files (x86)\Steam\config\config.vdf
Size 13KB
SHA256 557d9c728eb4c3b3427910a1de21c2e5a048d12e325b727d33fb43f4ba957ebd
MD5 2f33895bcbee821c3f3f17a5e96a3784
SHA1 20d82f7a27fe66c9591d7b0575ff65756aba95a7
SHA512 9714dd36b55f74f94e8781f0729c363e7581a706ead7ffbb0d1a851ac598bde0e4f40c177973ac812586a3d1d0e2a69d9bbbde26a5e543c1716b16c3a7cb09d6
SSDEEP 48:Pl9XNMN1U1N2KssK3AcVAy3Daes8N8l8IiZburZ2DNcbuclzYcAoxNzD/wFs6zFB:Pl9SlI+5uTPMUCYPMUC/njVrr
TLSH
T1BD5223476D2C40AF13599E6D12E6A0DE129C427F6A9891F3B7E25B1B7108F19B1FC338
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

config.vdf

Path C:\Program Files (x86)\Steam\config\config.vdf
Size 1KB
SHA256 8f9f970835f133258a7f740126012439385bbaa5a1d6a9d0d967a390977441c3
MD5 a2ec2e91c3ef8c42e22c4887d032b333
SHA1 e2c738a2e9400535b74e2263c7e7d1ecefe575f2
SHA512 b069d241efb19e09ec8b5e60ef6c43e00d5cc0f774b9340127c2180356dd1964ac625c1afdfaee5f99e72b26f56046fc329aadbbc365b403af765a55e9c9aab3
TLSH
T1A121002E2BBB491FCE0E0C7BC18FB9A0543FB15C39C314C4BEA4489E7D20E11506DA14
MD5 SHA1 SHA512 TLSH

Submit Download

config.vdf~RFe5b2288.TMP

Path C:\Program Files (x86)\Steam\config\config.vdf~RFe5b2288.TMP
Size 1KB
SHA256 f3847b5e4a40d9cf76df35398bb555117dfe3626c00a91f2babdedb619d6ad53
MD5 6e6a2b18264504cc084caa3ad0bfc6ae
SHA1 b177d719bd3c1bc547d5c97937a584b8b7d57196
SHA512 74199ff275400b451642cde0a13b56709735676959d65da11ac76dd645ab11dac5de048ff7ede0cb8adb3a3056b3ecbeb3dc7481bac3768d02051e564c74b679
TLSH
T1FA119E5C6BB7490FCF1E0877C28FB955582FB08D79C354D8BFA448997E10E22106ED15
MD5 SHA1 SHA512 TLSH

Submit Download

cef_log.txt

Path C:\Program Files (x86)\Steam\logs\cef_log.txt
Size 742B
SHA256 e32520109a786415b3d213cf84b2372bf1018295afe9ed86baf7a45a56880e61
MD5 b481c1076febe3ece87eff30fb4a8b42
SHA1 ba4bd32272bae933e81e40271fcb629a7b0058b1
SHA512 8320f459f6bd83fdb3b3c78750db8da012f5c11135cb31234da4bec3f7ea29d4754720832f81965d74b022f2909943293dcd90aa26bc2f6e34d6519d8372f716
TLSH
T16001D0CB932DC95B25F45B826115227ED5FC1BE1A3691E3CD19013CF3656087AC1ED06
MD5 SHA1 SHA512 TLSH

Submit Download

cef_log.txt

Path C:\Program Files (x86)\Steam\logs\cef_log.txt
Size 13KB
SHA256 ac112768c6508da4387ee3018193956621e9ef45e740cb3920f26c93e2ee164f
MD5 83e81b3c022024b0b776a1ea77c4435e
SHA1 8d866c39002d21d9371a1c6146c59ffe18a2020c
SHA512 3883043a9346388cdcc20614a337048247741c7db91448fa91c1c33b77f02fa308bd4a5453d0b5f536adc17c66b239478c53ee2047ac99d3b3401b9e2ec8f030
SSDEEP 192:wxL8gQjKwbJ9ByyN+fGS70HxxsqMMMQZ6NAnCmi4rhdN4EEWrP+aNqyQ9FfRRGg3:uBQZl/S
TLSH
T1CB52B056234BC1E85CFE22E6EDA837D796F56030E66869B8D1740D1CBD2CDC6082D92F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

btnOvrOffBottom.tga_

Path C:\Program Files (x86)\Steam\package\tmp\graphics\btnOvrOffBottom.tga_
Size 444B
SHA256 ecd13153d9d438809a38de30f3abbb0f6f92837a7e3cacb442a9a9309bcd78d9
MD5 89cb2bc5ccdab01b0653d4dbb3d6a062
SHA1 afb947fffd5f5f3723e0c8c3b52cb8cbff406ee9
SHA512 e5bef83bfad930e2b68720e00d450aa879619dcabcf8d96f9f8c47636a95a9662bc91b04cfa9160081d8af79a1257b75647d89677123f28b8c609808d5b86653
TLSH
T1CFF004040C400137C744757DDCD7C5CD77D4F4301540014C57D0307504D5041D1F44D0
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]_

Path C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_
Size 6KB
SHA256 5afc5816946e0d7b6d57a99a60be71d9e88670d9a63c18e249c9266d8e95cd2f
MD5 5a5715177822e69c98aab578421ae78f
SHA1 175ea27d6ef6df27fae93a724c94b2c770f78205
SHA512 b11d05dff7f9ce55c2b30de82709f5aa9b410734e1b88a6879e3489394a5b36a27389022de0a741a16f70d0639439d4f75942c3fd604567d63b9ec229d86b331
SSDEEP 48:dfnnnW6kQhYvc072yybS7WWjsHannnffw:Xr
TLSH
T161E12E6C226CC9DA805BB8F0CA19CBF804060EC9E85E11DFA0D73E8CFE38C8AE431500
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cloud_localfiles.tga_

Path C:\Program Files (x86)\Steam\package\tmp\graphics\cloud_localfiles.tga_
Size 14KB
SHA256 c7a1b0021d1f943e497c592d83050ac85a3b93aff732f9b94cd26d9c41b37ca3
MD5 c4e538289a4c12da96cec77e7a3e36d8
SHA1 12d57144c0e79edbabc8033a9bf22b1720299f2f
SHA512 db3eac8c05b7277a6ab9974c682b20350705fcf616040204bab053d98cf193c2d6fc416eb571ca67f7e53bda59ccaddc0351bf60310a64dba2d83fd9aa539ab1
SSDEEP 384:1MMMMMMMMMMMMMMMMMMMMMMMMMMMMMMrMMMMMMMMMMMMMMMMMMMMMMMMMMMMM0MY:ABTA
TLSH
T157626B16A05E37CE310A055AD1256DA3FA2021F58355346F30FBDE1668702B71AEEFAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

[email protected]_

Path C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_
Size 15KB
SHA256 983aa3928f15f5154266be7063a75e1fce87238bbe81a910219dea01d5376824
MD5 577b7286c7b05cecde9bea0a0d39740e
SHA1 144d97afe83738177a2dbe43994f14ec11e44b53
SHA512 8cd55264a6e973bb6683c6f376672b74a263b48b087240df8296735fd7ae6274ee688fdb16d7febad14288a866ea47e78b114c357a9b03471b1e72df053ebcb0
SSDEEP 192:JDApAAAAAAAAAAAAGPAAAAAAAAAAAAK5Oq:JDAfIq
TLSH
T1D5623E04FC24B31BD6B9E07EAA974B0B507F4CD9D84330D40C7A5CA8B98DB02A26643F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

[email protected]_

Path C:\Program Files (x86)\Steam\package\tmp\graphics\[email protected]_
Size 92KB
SHA256 e0ce36b93ae67846424364085ad79ee24fe5c036e5f6a78a4acbe1583f22daab
MD5 323181f4e9013b8b341897abd322e56c
SHA1 85e2e4a5d38c515185415bd4aa8d24f32d428fa2
SHA512 24fc5c82e25f2ee689b0888c6905f13ae74037e8db06a39b247d525071c858e8a284600dc5e33f006a2657d04c0b045c146c2af0951c7ecdceec34082a95d004
SSDEEP 192:JjJzVPBVK2A54RrjK/MQqLVWT5qOuIToER2zrpIEl:Jd5FjKkQqLVWT5qOu+tR2znl
TLSH
T1719359726F6CFC49BC94C88EE14132D065725AE7804B2551F8B4EE30E1E7ED72E9A94C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon_button_news_mousedown.tga_

Path C:\Program Files (x86)\Steam\package\tmp\graphics\icon_button_news_mousedown.tga_
Size 20KB
SHA256 cab3a68b64d8bf22c44080f12d7eab5b281102a8761f804224074ab1f6130fe2
MD5 00bf35778a90f9dfa68ce0d1a032d9b5
SHA1 de6a3d102de9a186e1585be14b49390dcb9605d6
SHA512 342c9732ef4185dee691c9c8657a56f577f9c90fc43a4330bdc173536750cee1c40af4adac4f47ac5aca6b80ab347ebe2d31d38ea540245b38ab72ee8718a041
SSDEEP 48:X77qTxcazfhjZRRRRRRRRRRRRRRRRRRRKFvJJJhmAr:X774zmvJJJhmu
TLSH
T18F9209380E706CCE81CE9A27AB348AD2A9D2DC6F36632E348653350FC1948543EA734D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tabStdBottom.tga_

Path C:\Program Files (x86)\Steam\package\tmp\graphics\tabStdBottom.tga_
Size 48B
SHA256 5caa5fa3e79dcd8ec5ec20256ed7c77efaae77e0ae8d89e4a974c484cb177d84
MD5 bd64c051ae2410eef96839a3cb7297f7
SHA1 95a5b0455d69127fe50e396153c795d9914ce0d4
SHA512 ea2f76c8cf5dc2fd15017ad9b942d020c3ad5ce1cedc2a1604137ea02f8411cfff4166ffe93c101756b404344488b304cf2b4a71c25b2929654dda9a88a88793
MD5 SHA1 SHA512

Submit Download

steam_cloudsync.ico_

Path C:\Program Files (x86)\Steam\package\tmp\public\steam_cloudsync.ico_
Size 47KB
SHA256 5aaca90948de8f7d11264ed608a2f96acba061e6463d337d658b00ed1c552449
MD5 da277b7a17374bde018ffab02015238b
SHA1 ceaafa1a1ed7d2101ad3c2884159364aacbf9dcd
SHA512 5a6e542ae9938f560d40348ceac663feaf889a6c990efdcfbea919531dbc34771fe2f0f366ab7adc15e998e5ed392d80dad78a8392f11b9c8fdf2c67f0431a53
SSDEEP 768:CHjkEJqa7vWVw70BCDiSfUpWy46032U/C0Tz+3TaZeYJqF3D7RTB6F0SBS6:CDlJdvIw72ILUsyi9/CQ+34eY4zBCph
TLSH
T19F237CBEA78A557DC9A0473840CAEA7C433A6EC5E0A7C2C751D07F5B5C35643BE0E1A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

steam_cloudsync_posix.tga_

Path C:\Program Files (x86)\Steam\package\tmp\public\steam_cloudsync_posix.tga_
Size 64KB
SHA256 fd2abb8945c06a6b9c5444baf6ea523b52bf7a03a58b34ebe0a6a110630ed5f8
MD5 be3a210738638c4f33aa7e01cb475e26
SHA1 02276a10cd77cfd57e4c796c45d69d526f8420bd
SHA512 6a11640800df51a8d88ef4224acd39cbb051dcdd6239bee82575ca11772a6a52e40c6614af3ea61320d29b4f75fc9611f6182ad2a55d7284863fd38d89631feb
SSDEEP 1536:fQF+zt5w33333333333333333W3333333333333333333DkqbbbbbbCm/b77vBQT:d5bbbbbbCm/b77MquuamizaWraS2Dz7o
TLSH
T165535F64EB112ABC9EF1BF05A6EA967813165D42113BCCFA168D7F4231F3A319DC6D20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

steam_tray.tga_

Path C:\Program Files (x86)\Steam\package\tmp\public\steam_tray.tga_
Size 1KB
SHA256 f747d5fd27e74412be05bb376c0ff12fcebb7f39c158eaa89ab6a0a9d92ef3b6
MD5 7ecf5b072a3c49209af4710481dff5c9
SHA1 6b49560eb27b2d7cd169c066208d4fd3a4863f3b
SHA512 ec9ed9d824471655a48b48324a023a7231560810f6403f0ded04af35b51dde4dcd244bd4147570ac9c5cf0c841af33caaf8de7d60cf20f6fcbedbd1717d6d262
TLSH
T12D1163C2ACCD1788DB12C53807E6E6021C320C1608B66EC9B4277356097B43CAAF649B
MD5 SHA1 SHA512 TLSH

Submit Download

filter_clean_bulgarian.txt.gz_

Path C:\Program Files (x86)\Steam\package\tmp\resource\filter_clean_bulgarian.txt.gz_
Size 23B
SHA256 6feb83ca306745d634903cf09274b7baf0ac38e43c6b3fab1a608be344c3ef64
MD5 836dd6b25a8902af48cd52738b675e4b
SHA1 449347c06a872bedf311046bca8d316bfba3830b
SHA512 6ab1e4a7fa9da6d33cee104344ba2ccb3e85cd2d013ba3e4c6790fd7fd482c85f5f76e9ae38c5190cdbbe246a48dae775501f7414bec4f6682a05685994e6b80
MD5 SHA1 SHA512

Submit Download

filter_clean_schinese.txt.gz_

Path C:\Program Files (x86)\Steam\package\tmp\resource\filter_clean_schinese.txt.gz_
Size 33B
SHA256 77f0055faba992867817c485930c5f60cf64e65c65b410128426dc35fd8d862b
MD5 dd542d7ca2128ef0e7c3411b5ab9e8d3
SHA1 0a98ce0efdb5fd75d3c697f06f3c084d5882dc49
SHA512 0d0c1801d0bdf69d2010b0e26ce0a156fa50baaa0370330bdcdb879cbd09a6146d7bc89de2d5ea6f3615123a60e1be87def44c07f92de24615974e3cae2cab85
MD5 SHA1 SHA512

Submit Download

game_details_header_green.tga_

Path C:\Program Files (x86)\Steam\package\tmp\steam\cached\game_details_header_green.tga_
Size 2.1MB
SHA256 a24832de8b80e206143170a899ab91e76e85685aed74963fe2f490344bbf6427
MD5 1ed17a7d11da47608f99d98a8d249e6f
SHA1 ea3d9e0de541be2a346e93e63286f0265ac302fc
SHA512 e423be766c3d615dee6f3ed8b0b7bb5735ec13617a93f6f5403a3e7c4c379b9ab87e9fd5f0c9fa9338f656e321488d0aba895ac9f77da413e27473b2218b9ac7
SSDEEP 49152:q3m8TZFdk4Sd9DM8CsBALhExgBrPzkpRkQhbCh6:fDM8o6xgBnkkH6
TLSH
T1EEA54B0FF4A936693DC1EB9E11B1F1F438EA07534182DA93BDD79B4960C2C84A741B9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

filter_banned_portuguese_cached.txt

Path C:\Program Files (x86)\Steam\resource\filter_banned_portuguese_cached.txt
Size 164B
SHA256 d2e9b23afc27d1d341ac86bf4a961f9b496c25445c6cea2221a45591733735d3
MD5 d0e5a78853669c539dc9b77f3f76af89
SHA1 9905f7cfbf570f6f3e77dcaa3b7261393e64b829
SHA512 b2fcbbbe5e6a4276d0a23458d1c09c1c9fe0d2cd6d9e594542f44bd16fb6e5d3229a623f24dcc79b6baa93bc7000612d3747f0e289fea0186a2b5bfa641ac04f
TLSH
T143C08015D6D84284945C8423410D7192F00532F0170F1383B349CF58391D565F7D53A7
MD5 SHA1 SHA512 TLSH

Submit Download

filter_profanity_portuguese_cached.txt

Path C:\Program Files (x86)\Steam\resource\filter_profanity_portuguese_cached.txt
Size 770B
SHA256 c5a4f250d03140ed6cfdd633e36fc9bfdcad4d10d5c7153d088311f3104346b9
MD5 347c1e4c082f3b7872f4c669ee336f6c
SHA1 5f085cebba001fa03bac30f15c0d44b47a8b90da
SHA512 3aa6b41419cb0e9f280f025a488e801b0040fe31103dbcb5b9fa7f5280910cdbacd073443829d694bd2af82ab83f6ef381ce654cd95cb940c85de82882b85acb
TLSH
T1F901AF536350D0E383EA156233CAEA3A42104EF15A8166E8DED573B4B0EC9E44728FF3
MD5 SHA1 SHA512 TLSH

Submit Download

filter_profanity_portuguese_cached_timestamp.txt

Path C:\Program Files (x86)\Steam\resource\filter_profanity_portuguese_cached_timestamp.txt
Size 29B
SHA256 37a7ea1235ca56ac5fa6f883c4518a8418ed3642441e6b566e1debf0e3f0449c
MD5 e5d6405e9d2cd6c597e5dd4a8eb375d0
SHA1 7008c46aff8044d86777a27d92d87546fb83a029
SHA512 0a0562ebf235f2b6df4d4400f52d0d1828277dc3f0e37f711a2491970e177a4c5d6f2238697198254252a6e086b2ac57c7097b13102d3b51841632ba0cae7051
MD5 SHA1 SHA512

Submit Download

sharedconfig.vdf

Path C:\Program Files (x86)\Steam\userdata\716823870\7\remote\sharedconfig.vdf
Size 165B
SHA256 54929cd8d828614bbcab21a0369bcebe1a439302a9df0a9ca8c548fc2d23d2b4
MD5 2a238937fc32e96698c647d503e8c1b6
SHA1 39c65ec3e4790dacaf479a9392de08cfae7eb272
SHA512 61aaf44481c81e2029010b4f33eb7ef5d6e83fcd80bada699c20a3fbaab166c45bc888a66217d2a57f444065a24944bc50451595369da722808f9b69d78a6b6c
TLSH
T1E3C08C27A84EC5AE1495090C423281C44EDE07B34CC809DE3908A70B522A8220A3DF0C
MD5 SHA1 SHA512 TLSH

Submit Download

localconfig.vdf

Path C:\Program Files (x86)\Steam\userdata\716823870\config\localconfig.vdf
Size 32KB
SHA256 c180855358ec2fefb66519172f530d54a29cd0c646eb328f10adc4976d1bb6c2
MD5 857fff19954d8688115b9313b6577da5
SHA1 3114d4018135de99ccc37016185384a0bb2abdb0
SHA512 4676f950bf84f5213e7bc3c94086af395cbdfcdd941bc5f43947507d1ac4d64e0c0c985b77b4dcaad403bdef40487b987883c652e29263c8b8dcd70840347842
SSDEEP 384:vxajArl/QFZoCsSA9fnWfnVeXFJDCDDvBjKF44ScamZ8ISDaqvwxARh:NrlYjohfWfYXFsDDv81ScaA8ISDaF2Rh
TLSH
T1C0E271D7CE2CCDF6DD4A7ECC5F2FED272A4890C2044E0651E59243154AAB9B4F7A12B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

localconfig.vdf

Path C:\Program Files (x86)\Steam\userdata\716823870\config\localconfig.vdf
Size 32KB
SHA256 b65f7e90af8e58e59da7d8ff127dce220c23a8fcf9ca84e698b428f6df061837
MD5 f521e1fecd3f846058feda526c4cd019
SHA1 b2a87c9829f8892256730b163d84027da92446f5
SHA512 47052a7d7463221ba0f2122ac88d5c86167e8b0b1287cb045c2b3c74029c660d44b1308ad350917300c3d9a54436cfacf92151b363ef29826cd85c6db2e61f69
SSDEEP 384:vxajArlHQFZoCsSA9fnWfnVeXFJDCDDvBjKF44ScamZ8ISDaqvwxARh:NrlwjohfWfYXFsDDv81ScaA8ISDaF2Rh
TLSH
T1C4E271D7CE2CCDF6DD4A7ECC5F2FED272A4890C2044E0651E59243154AAB9B4F7A12B8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

localconfig.vdf

Path C:\Program Files (x86)\Steam\userdata\716823870\config\localconfig.vdf
Size 1KB
SHA256 cecbbc6657f8f5955e11ab4f46bab633957e8930a6cd2982ee2df73c5ff666d0
MD5 be4d00c8d6731afa39fb0bf58c5d2a31
SHA1 30b2f1ab5a5c26aa9c75a5395accdea1e37f5a52
SHA512 b0bce56a5309ba0895b68c4dc61894a8d06194457330c1896d53faa7348cc72803af994ab63dc388f09b0797c31c383d9b3e12e99f75b000fed8d6afb369ae01
TLSH
T115319577CC4BC9E3CA950628EC07B28D12B1767BC4E108CBAEB444ACC0C5E75DB92558
MD5 SHA1 SHA512 TLSH

Submit Download

localconfig.vdf

Path C:\Program Files (x86)\Steam\userdata\716823870\config\localconfig.vdf
Size 3KB
SHA256 44613b44be2efac6c3f264d6e7d9604ca3ad6f28e2fed337e36d1d23a6442d6c
MD5 3776d0950b7ace1d69aaab34cebad1af
SHA1 7ddb9fb9dfd2de17f60a59a799f6da053b45a3ff
SHA512 7a9e5f5447dcb2e8f794f68fc42eb5fdaf25e7bf03083198a373d8096fc95399e5dc94b4e0ef5ee1665867d724c59b3b52b51a6e7ac4035cde3ddbb0e3c0cdae
TLSH
T16B81A5E38D0FD5E6C2540624BD07F0CD07ACB1738AE209CB7C992BAD84C6F65DA62909
MD5 SHA1 SHA512 TLSH

Submit Download

localconfig.vdf

Path C:\Program Files (x86)\Steam\userdata\716823870\config\localconfig.vdf
Size 5KB
SHA256 df3b1ba5b58bc653e1d8d563ebf4cf117334e4f03f32dd255689efd29855b5fb
MD5 e9e98c76bfa48682f6d6d62c9db901c0
SHA1 18f5fa2d382854914159cc7c272e6fa1dd053fb4
SHA512 b899ec73e7deb9b474a859b33231f2909c465793de19abe0a0af658d1bfbf85ade5d3a3b4389782acd41a953098f5d267377a100c8d587972366d6443ad09941
SSDEEP 96:DrgyV6UdNaKIg+5ZTsUzZTsUXZTsU4ONz6rMuZq17yNe:vjNvajzs4sqsyz68NyQ
TLSH
T1A0C194EB8D0BE2E7E7C1963D6A43F1C502F630BA5DD30D967AE399294081B61DB53209
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

localconfig.vdf

Path C:\Program Files (x86)\Steam\userdata\716823870\config\localconfig.vdf
Size 3KB
SHA256 8998c9623b88c1f044fd6484119a8b8eecd6e9198c27e0e6ecec1291d3ea4914
MD5 7f4999f5d35182407b9e7761f7932f68
SHA1 588c1e7a96415d12eec6d3e6260487d8db3360ff
SHA512 1f15bc71a5d86fe0cb68927f474fb820234fbfadf6a995a33e2bab11afe53d3cd7faabb3aa1c2a9983c6892f25e54650c7b8cea23a62eb0b637bf8319a9299c9
TLSH
T13461A4F78A4BD9F2D2640220FD43B08D07E4B57386E6094FBC5527A884D6F81DF51849
MD5 SHA1 SHA512 TLSH

Submit Download

localconfig.vdf

Path C:\Program Files (x86)\Steam\userdata\716823870\config\localconfig.vdf
Size 1KB
SHA256 f4f21c36439209584336620b4036037d17aef481ac47c0e7b1b67522c97d7a2a
MD5 7e4878d99db730f8f1b53760f2ded1db
SHA1 3fc1d5c4a45f56e8e78028825a678d8a8fd413dc
SHA512 6e5de444c4be5bc1513a3efa155e71d77efc9e515e67db17fa22c802fe4710636c9a9ad33dd2ed3a1681318b5bde11e5221e305c00ada642aef20294a1b55aa8
TLSH
T11A316277CC4BC9E3CA950628EC47B28D12B1767B84E208C7AE6844ACC0D9AB1DB92558
MD5 SHA1 SHA512 TLSH

Submit Download

localconfig.vdf~RFe5ba2a5.TMP

Path C:\Program Files (x86)\Steam\userdata\716823870\config\localconfig.vdf~RFe5ba2a5.TMP
Size 287B
SHA256 c578b3daf16892aa593b692ad62bacdf7979ca4dca851c91ddcc2b8eb488ab43
MD5 43cd5e30bab860343cd7cdb4eb89e3b1
SHA1 6e7beb04645966f72da9b8ecca7c86afc5755cc4
SHA512 d11ac46dab1eec147a7a0f45a60e0bbad2b4adb5c8653625403e6184dbb7dea06472018d85cec380fbc8cc9325a8a058c70282e2e7a590fd2900d7c53b3fe1f6
TLSH
T117D05B47C94FC6D758844069502381C5766E157B4E172DF7FEE9C47D90DCD640F26714
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BrowsingTopicsState
Size 414B
SHA256 e2b89947ec0c75864926079a49c7dce40bb457d4bc6f45119d34aace933498d0
MD5 ca375ce0b2834d1ce809ed838c4e9bc7
SHA1 c887b2baceedcc28a4e170d76111ec87fd8f8255
SHA512 c86d7f79da0712266a716865977e01fcfd027c8a14a2aaee33a2b7ee41deef991d9979afed00f3e9fa864a302be91993c67f0ba95c04c9de133919a778b5688a
TLSH
T146E02BBACD259C2759FD871860108645E640231B3781891F373C860CCFF86374256C6C
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 a7ab1e5d7f58b0851a148dc65e8d228d37454fbd2e845b132106501811364140
MD5 be7ae87da10c44835e593522a13831ed
SHA1 7086e678e613813de4798f4c845eaa41cc211b41
SHA512 c84b69d5c9775c6ba74de76d8a66f2940c9eac3b8eee6d7f384f868916d2c2e625ca6b7f3e3435144fe6d972ae13652c0f463eaedcfb87ef82a9bc6e8190f3d0
TLSH
T1D841C66412E6D963EF2F0D33AC85FD313BD18420AA68239345A4C914F5AFFE190AB250
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 69bb3047c0553ffb0f068b57a07e1b712c8f4dd9a58867d06202d4071b797be1
MD5 96ea359aa2a322002ad4231376e8004a
SHA1 534dc1ba657f422595b68c834819bcf03d678887
SHA512 941791da72a856aa11a2edb67d55a30143dbb30cda36e4808c47b98a6e1694ba0a4f93b3b39c1aeff9d63c385b483e19e74f00297997ad5376a4a6ecd34a7dbb
SSDEEP 3:MsEllllkEthXllkl2zE/lpXlX:/M/xT02zu1
TLSH
T152440205AB814417C60451305057875023F0D41006125B8334610422DCD97400C52040
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 6KB
SHA256 2a6bec7b7c0c9dc39745f0ecc2fc1b221fd752e10ec62436577b7538a793103f
MD5 6f5c7f363c7867530eed86cc6746e89f
SHA1 f3ddd8dc21cd2992cd88fdeafe80a2506f397027
SHA512 ccb2d3f36d7bde18a94a126dc648f4ae1eb33958004b83a5f947f577a6ebbc2d220146f6f752b00b4534d67a6e7779c897fa93150c448322286c4177e3ab3a17
SSDEEP 192:DCgZZNdqpRaI5wHTa7zlZrBURNP+aP/vpfP6NrP:DCgZZNdqpRaI5wHTa7zlZrBURNmaHRfc
TLSH
T1B1D18DF7C3E8852DC96166F8DB116F1FCE291A18431C3C66C8D8AE5B93E2871D21164F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 859B
SHA256 afe763db4a58ebeccf2080970a7532fbe0ff7cc3eed4c9a6d326ab9c5a3df66f
MD5 974f5ec8ec76dc2e489c653fce671626
SHA1 2345898c3079b091727d28b0edd213ac040c49e1
SHA512 f8bfd26e1ed39d242221d36c878515a43824100a4e7032c74dd796e8018d7e2b6ee04087bb767234bc108ef0518daaad2f1ceb71d6cece6f5eb9b0c6d11a1db7
TLSH
T19711ABD3A2FA741BA0B9C8BB3D84F80A65B2D430124178F5CB96C32DE2D5CE30B02063
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5843e2fbb8cce9063a0a33b60ccafa7101f9a444614223ff6e3809fade661c3c
MD5 2ec1747428b16d68d19e8b75ed363bc5
SHA1 5398b245795019f68960a87231e9c04a5af12261
SHA512 3b647cf9cae278cd409c4f05a650a1c7ac1d348a617fc8157d33ed56c85fdcbc9cffc2bdaa9db701152c7f6afba9ed77bf9610bed2fc47b2eb29610dea68a4a6
SSDEEP 192:FRHUbOg2cYKv7lpupAPRp209fHsb+WNnDY0LJ22ZMpokwMa0VyIsnAUgtaJ:FRHUqPGZgUXzRws0l22Znsaw8
TLSH
T13042C62EFD10653B5CCBD31AF912BB53D7F5102526946E44EBF88A1C28EB6CC222B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 bec3a1190f6e4b1af328182be26e764532b2cffcfa5946275394701c80912d91
MD5 1995bfda0c0d32db27c3708d19f1bb28
SHA1 ace4b6b5c41da19e8bcfdd1654d5526e33de2761
SHA512 7b536fad94c45acf5bf5cfd27f3f73803275ab96cd5cfbe156be126c3c1de9657c5af5fcd5d7c0eef389e8bfc0397b3187cb615d3af890ae2db0704b86d00bf8
SSDEEP 192:FR0UbOg2cYKv7lpupAPRp209fHsb+WNnDY0LJ22ZMpokwMa0VyIsnAUgtaJ:FR0UqPGZgUXzRws0l22Znsaw8
TLSH
T18542C72EFD10653B5CCBD31AF912BB53D3F5102526946E44EBF88A1C28EB6CC222B417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 3e5bab6720dc5e3ce322353d5044a359af24ffc185a22f150a91736ea80f5d88
MD5 e621cba59a788e0bb340af31bc9055c9
SHA1 a87a7c86f96e532766414a38fd36f3e7cc90e83f
SHA512 80b4451623a01750df590161d439311d442aba31dc1737f3281d04f6e3eac4f59e75910f4da72a8cb6962f7fee4119c1333010381d64defc050b95688f735336
SSDEEP 192:FRbcBT9UbOg2cYKv7lpupAPRp2ZHhd9fHsb+WN+FDY4aZ2JJ22ZMpokwMaKVyIsB:FRbmJUqPGZgUXURwtD2j22ZnsaKe
TLSH
T1E252B62FF910693B5DCBD21AF911B753D3F5102526946E80EBFC8A1C29EB6CC2217417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 13KB
SHA256 6751aa0fe4b0243f863402c7c3ae874ce6551f7547acf81b0d85f3a467fffdda
MD5 09ba2267059400c7fa0bfce9cdc59e87
SHA1 a7a098a0c6ae0f26992ebecc282e0018b2aaac72
SHA512 e2c0750a19547ed774dc6070d8a1a573d93ded5c78a3d56a6a3bd819f839f28273e97612c68c11cd3516115096f47360858072cf5c3728a73be82d6b41183e10
SSDEEP 192:FRbcBT9gbOg2cYKv7lpupAPRp2ZHhM9fHsb+WN+FDY4aZ2JJ22ZMpokwMaKVyIsB:FRbmJgqPGZgUX1RwtD2j22ZnsaKe
TLSH
T15D52C62FF910693B5DCBD21AF911B753D3F5102526946E80EBFC8A1C29EB6CC2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 17KB
SHA256 79ea521d9f3df87d24eec0f3607ae01ff8cf6eaeb5c7802f7c4721f58b8ddead
MD5 5d35f09b8c86835fb4877dcd0cc40e4a
SHA1 71d399e3fd153dc456fddb8f9cf7b1d428dcd2c7
SHA512 68050d4d5a4a4f94c2a29dfff1edf5350066ef5a2e47ef11dcbd09970c2009d28d7804e59c25d64e43ef8e1367105d32e929bef6a7a0e31d18837b193891b321
SSDEEP 384:WQjb+7KxkXqKf/pUZNCgVLH2Hfgsl5g7pLuLcSjQRXODaB+ErU39rHGQ3uKHaaK7:WUb+7KxkXqKf/pUZNCgVLH2HfgsLg7pn
TLSH
T1BF72F967BC4C9A370F94C6CDD8267A4FADB5024B65DD886483FA982903D4BCF110A2F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 e328ef93911993e9c28e6cc06023da2bff2918632f9231ceb444126176e60481
MD5 729fc43cc8a7658183ecac20a4f7c4f5
SHA1 b9ca67a94cfe41b893416a9a158130ccea469bad
SHA512 2f97f8c4c1cc92e6f55c50d49cc69cfb1e69a857924d8af5f2723976bedd49b97310c178b883969ecc63bef9194262401ced124b6d71235206d5ecd6a530a607
TLSH
T1E0B01281C0035243C04206F4218314887158BF11960A1B0543E06966CC3E3A0C119050
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe58c05d.TMP

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe58c05d.TMP
Size 96B
SHA256 5db63cff3f05f29190df9db9f69c7803b772159359d2b5b5dcd5b0580af02382
MD5 ffbeb28511665baa07c8bc9750cba755
SHA1 76bf7561ba99f31ab7d0d9a43dba7e724b613847
SHA512 c10c426724f278b0543a4f35c49f16a9958e4cebf9ea3fc92e945033cf4e56409c245bd33608e094278d858c08cfa3b68e00d3adc750cfde907b713b79aa6f5a
TLSH
T1D8B00256D1477222C04203B079D595F871E0DF29C603365792E93E6ADCAA760862A561
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
Size 96B
SHA256 c7ed632c47101aaabaf4f61e4159e169ae66abc7ce1c53147b673fbf94f987a7
MD5 c66e97d9fe7b76fb8c649eea249f3afa
SHA1 8747b39f5a40fda95bb8929d866d90c413ce51c9
SHA512 458f383a0ec77f375c0ea9f9c0ff3e7da3f05fcea1ad75f27b6b86b9c73d42a87c9b0f5efce6796c381499fa247d8f9262ab53a28638020f827b0833ef31dc20
TLSH
T136B0026D206165D7D618137037D1D8D033666E10E387E11245F10056D86E752E37BE40
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 115KB
SHA256 49401bc3e2f9abd67a1127febda87f57a9690543d15f9d99deb5c3f797f3be78
MD5 7cbe8a5dd52c643dce9e33ac982c7f46
SHA1 0068d106fbf950e0042ec01af7be52a72d12a584
SHA512 436ad7b79849e56638d2b07fae5b2d777a02bc9c178718023e5bb7cd53740fff828f6d3c52edee2331994e37c555a809177d45d044d0e13c5de9b242beea118d
SSDEEP 1536:nfueL6TFpmkUjlTArhJ+vgVuFM8r51TRB+BsJYuRZa8pSgeDAkwdqf8Wg+95h6mq:WDFpmzNA9J+zfAsJDREge7oWg+95hy
TLSH
T1D9B30212CEAACE9BE4A45C79A4C413F3BEBE5F9527F1B9424166E4023DCE7042395770
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 232KB
SHA256 968183d36dcc3fe9bd5499d7308d2f3f3d4867ef1660113d1c2994ec64857986
MD5 aaa27619abb4b70538ecee5d0c3c5830
SHA1 9f4c604f4ff372978ba8abe4da3e2d5baf3944b9
SHA512 a9147c019406a0dd5bb463efcee82a80e442d9d0c7efeecf847094ee38b8c6f5ce77bea606fb68397e0962d7c0e1691460913f01142e72a4de5443455e532ace
SSDEEP 3072:W7or8pp6VLZyzCau6ccN3xWIWCmAvAqYsefEJtDFpmzNA9J+zfAsJDREge7oWg+g:s7pQMfvWCoqxeMJjf+zfAk3Wbhe
TLSH
T13D3412128B9F4DAFD8A5993228C15397BBF21F0527B6DD23436EF0522ECE3416345B1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 231KB
SHA256 73cad5c31a047ba076a0ecbcb3b7fc5505cf9cb2af19adbebaacc8ac18462b53
MD5 41b8ae96013ba46ab7694b0b23df4cad
SHA1 c26dcf482d70ff5a2c69a573e93fb8cf6cfdf460
SHA512 0272555c05dd3d0be7c83164005f45539cad767dc0f7131567fbe82c665f8099020a6a1140ce8313b5ed9c2b1dbdac28a4bdc5d7a0f9e0f9197386ff3a8ae99b
SSDEEP 3072:D7or8pp6VLZyzCau6ccN3xWIWCmAvAqYsefEJtDFpmzNA9J+zfAsJDREge7oWg+g:37pQMfvWCoqxeMJjf+zfAk3Wbhe
TLSH
T1243412128B9F4DAFD8A5993228C15397BBF21F0127B6DD13436EF0522ECE3416345B1A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 342KB
SHA256 1a3d1083dfba16218bf1dff738de863b77a1dc25d62b35ccb08e1fbca7541353
MD5 d5ed4fe83d3b8b7822f0148e2eb42756
SHA1 b7dec4a2c3a57a8b7af6c0c879f0d0671a6f01ce
SHA512 c562d8325945afc0d89af6c34f18a035b952c331d6cd262c25936bf1904f8cbe06f3abf910b133bac9c6cd62a50a5a70075e1176766deda0f75bad13cc3da84f
SSDEEP 6144:N5OCns28R1sUhF/yjMgBctXhL42h7pQMfvWCoqxeMJjf+zfAk3Wbhe:NRns2+F3LLtNQuX3wMRgfaFe
TLSH
T1AC7423214B4F5CBFA876882A34C25793AEF20E8B5FF5DC13539DD22615C9B431316E2A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CommunityToolkit.Mvvm.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\CommunityToolkit.Mvvm.dll
Size 143KB
SHA256 19b2144fed9600d58a742a5a4a5fd7b10d4d0d2c2e79f5d8019307cf5657044f
MD5 c5aba3e739e682a6727f33e7c89f1f3b
SHA1 2c656c3c24e66aea61bda770f146d8ccff5c868f
SHA512 fd7269021e7064742b1bd2b361d90ba5f848ba9f275f1b1b7a1459b231d4f012fa1bfe37cb0c01f524356e6bbc8a91f7eaddc91202b7fd498b6fa016b3a8659c
SSDEEP 3072:TSieaCkJBmT1YhqlgBE6KZogn10iAj+QPuzO/:TRVxmYe6+n10iV2
TLSH
T1AFE39E1273E85A33E6FF1B75B4F0808A8F72D707ED26E34D958D82920963BC059517BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.deps.json

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.deps.json
Size 36KB
SHA256 37902fa9097bee14b2db7a5741b110d3c8a34372ba592cb725884af84a516f60
MD5 229fef4f3fc3e27c9998c3f744acaaf0
SHA1 452167ae36f815c4c287b29bb3fa8c8a424bcd24
SHA512 72d377fea2742a9137eeacc1a17e2cd173aa1309a327ee41527b5e4df9422cfc6d575d64899597e97d965b4859e5ed4c2353e27cb5a5bc143c99392f95108860
SSDEEP 192:CBrWrHwIIqoZoqsZuNTj6uTVZECYIh23RCz74oFby98ZWjdIyfnNfekS3:CBcHwIIq/MpRYIh23RC/4oFbyfxIyf3S
TLSH
T14BF28A26E8585E234976B7A6FD784991FA35432F3004684A7CFC294CCF76BAA5093F34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.dll
Size 922KB
SHA256 510cd340bf44c328c8d86a99dfc6e465ad6a43b328fd56e3f85812358d143f73
MD5 2988170bfaaa2a26e1c8c1b1b360a6e9
SHA1 664540373485bfe02bdd1f59d5f8623b8f03bd47
SHA512 ebf26f896cbd78e8324fe958ce78f25dae872c44cfdcd24977d612dd3b35d86558ae8b8135b9c8d8729e3fb99a5709609aa5c180e4935496bf36f577992bde9b
SSDEEP 12288:jxLm3sbn91tMPuYANxhRGsRJIWSKoBQmivZJ:tqo/ZIWXou5Z
TLSH
T13E153A2162A54635E4DF7BB5702644188AB9EF42654AE7FE0E5B78FCDCFA3038841273
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.exe

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
Size 254KB
SHA256 d3d142cddc3775b74d685cc9a00697fb1fe718cdc5316d98b06c7bc43292febd
MD5 7af64f905d69c8d0c73ba385e190850f
SHA1 398acbfc8a7245d08cad166a153ac6321408f753
SHA512 47b03edff2f8f914e50bdb6de63a70e0a63001f2893a56b833a5ddf4ac5659388be63f2ffb698bda50e5c9229a62748110556b85da27c127744dac58b5306257
SSDEEP 3072:FqeXA/4yIg9vkNPNu6H6xCYOiVUE265RJ6nIyBT:FvgvkNFNaxmNExJ6Ig
TLSH
T1D4442A37928541B9F097F1B4CA610845EBF17F605322A3FB1E0379BFCAF92819A69741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.runtimeconfig.json

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.runtimeconfig.json
Size 496B
SHA256 b7ab6a0ad18cf1280ad75c8e6d0df62d06c84d62dc69351e49c04afd3e218eb2
MD5 eb7751b6da413a72fe18d187b6b88daa
SHA1 0ab1171970e84ab0e4c9b6807a3700744052aab2
SHA512 d7db1f44c4f706c50755c07501f26620f51c9efb707853432b0ea1a15ffc7e3f9fba919cbbfc3540aec68035132f8ccdf3b5abc0882b67529f8ef5c0b509214c
TLSH
T160F05539C9141DB708F43BADD12AC087FA30136B01040D5A75FC180C2F766A26010E88
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.Extensions.Configuration.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.Abstractions.dll
Size 26KB
SHA256 3700bf75d75ceef47ebd6df7df9bafb9f7b7dcf22fc537f227db72ccf74c476d
MD5 6f48fbe8c1d66121fb930d01cee4cc95
SHA1 1cc8d8afaec01f6e967818a484fd7aa509624ecd
SHA512 3fe0dba909f19ea448ccf6e3874db0b6709737b215107f7b86fe35c3b911b200ca37dde2f1377f258fd265caa09f93af49ea5b239b05db5c3442f48c5571942d
SSDEEP 384:o9WZMDYtid3v9TaTG/FwEzRjz6rMwTbFmDWsjINWJlNgoR9zFiXS:0WZMDYk5pdO/09zl
TLSH
T19BC25B1653AC9333DDFB2F71F9A1C4952E3997E6A801DA19689E700809777C09B3372E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Binder.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.Binder.dll
Size 41KB
SHA256 efc13893ebfa02cc7e49ac13cfef68517c4441a33210d67956e7488b8e6b277d
MD5 2290f7d234bcbf93459adb8bb0745275
SHA1 e5f4067e40be7685d35d7cad76ef7768e53b078d
SHA512 7ffbedde32c75599a7c9f5ffda297f5a7f58699b05f7b42248ef28b0bafbf33ec9bd4fa27afbd6dc8f97b7d4ad61fb43cacc19e96fdc536429efd0a494c01baa
SSDEEP 768:DsjeqKLvg51cjLTwE6ry/v1rt4m37oX9z/5Y8:DsqxL451qUE6ry1Wm37+zhY8
TLSH
T1B1134C1793EC872AE9FF0B707471A4224FB6BB917926D6195C89A05C1D377C08A3236F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.CommandLine.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.CommandLine.dll
Size 23KB
SHA256 a1c8c9728b0dc64dcd975f82d013a1b7bc0c0133e46a94f29044f16cad6072b6
MD5 584eda713ab7795fac1645ef6f3352dc
SHA1 231d179d15e5caac7de89cb8ad71b9d0db1f82f5
SHA512 07f7baa9912b3e17239a601e33d40b329788c3cfc47d03626a0ea0c4f1766a3a9184f4c354715136878ea444287d1ffa6ff97e5cdb11020019babfb5dd9e1db2
SSDEEP 384:/fym2RBaP8ckJt+KAW9BmnWElNhtIscmeR9zlQQR:/amEEYRAvtI7N9zh
TLSH
T110B24B6693FC8317FDFB0E71A6F1D5512E39ABD76811E62A145EA0080D737C08B72729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.EnvironmentVariables.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.EnvironmentVariables.dll
Size 21KB
SHA256 bbb26aacd4ba67351d3740106bbcc5544827d98d91b48109362988147ae7963e
MD5 177dcffd43ac45b58a0c42b2c7b99c0c
SHA1 f61334d03d1050174a90c300c19fa29c39517e64
SHA512 3ef3aac0bdd86d7401d363f8d4d4771e79402c1459c9c5e5f1f178b4300cc9fc67b18d8af2c2d1f742f3a22f556efe5f554336db2e6126ab536344d1cbe65581
SSDEEP 384:v/dUEK0NrbQObCWU+JeWDlNBki+R9zd17/:v/UmfNxE9zj7/
TLSH
T181A24B8197FCD106F9F77FB4D9F9C9662C35F7D21862953A006DA00B0867B848B91B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.FileExtensions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.FileExtensions.dll
Size 26KB
SHA256 1830c601c1b155c54fbd3a6844453dae87af14eafe763942939d06905035130f
MD5 ee6d71766d2811851d8dd808384b5d83
SHA1 dc1a15ffbe9e406484572c21a2e94052099b1461
SHA512 bbf23f5c8c1059d48e04b965fba41921fb5346117c46792b218e07ed123be5ff1397781a8ddc68bfac44a0a9333442015dec3e67385a9a65633a6fb93f207dfb
SSDEEP 384:SNHfs86q0/ALi2iTFwLsdYyOiaXAzpkLqWqKl6WYlNorgFbR9zBTV9:Sk92/VyOOpkL3/A9zD9
TLSH
T1E5C25C62C7BC4213C9BB1E71A9F0E5022E35A7975C10E66B59DDE00D1DB73C08E62B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Json.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.Json.dll
Size 25KB
SHA256 e106f8bc13df7168294b95a6cdbceaba47b8eb7e562940eb4ef038db6fb1f2d0
MD5 e0a403e5af381beb4a47945fb5155ca7
SHA1 31b3051b7622207f803333e799461f9182319fb3
SHA512 0828841a0305e043f2df522b8d34c822d13964d870f08e1af0c461dd22a957088b0c44e2a24e877e87aff91a3dcf09f71b225e3e83982fcd0c80473606babaac
SSDEEP 384:5iemM0/vv+cFsbTRo9ge1lgzWkWR2W4lN4eFbR9zBOViT:5iMCzFsjfGG9zCW
TLSH
T117C25B6257FC4213E9BF1F319AF5C9412E39E796A811E71E15ADB00808B77C48E7272A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.UserSecrets.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.UserSecrets.dll
Size 24KB
SHA256 a310bcdd868dafc0efce5b03a68cd7af5d4fa0d06509ed4b5c51ddc1758e9791
MD5 249b5a3d38956616eb522a7c7214d0cc
SHA1 1b39211cf7978386ce9589eb88983deee137c3e4
SHA512 03d7b1eceadca05b35a14a3183ddb406d971fe61c217ffddd9d2ac9c187f9ad2cc6cece04c9332096b1396397e0b2398002ea4d3e8d0ec26e8e6a4d5246b3bf0
SSDEEP 384:o88CyOBc4Rm15FApdE1wEDW9ytCWjlNy2jR9zGGhyL:o8ByURi40uw9zwL
TLSH
T1C4B24C52D7FC4332FABA0E73F9B5E4452E38BBD65C11A61D109DA009187BBC48B32769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.dll
Size 42KB
SHA256 7a883c57d00808ca9b5d11bfaa2c5d21f714ed7560e781d7313d65b09b88b6c9
MD5 3970d9bf37ecb6cff7a394bdd25ee78f
SHA1 054b4622b962ae25446888ddf5ec823e340ff662
SHA512 950d50379cf9fe0fc8216a1f786b4c0322eecdeb390098e8bf855dc40c6901de1da110ddd48650ade001f009a815e8151ba72872381a16c6b2e96167d7fc427e
SSDEEP 768:LnxYrISYXrpu4dAn9RY5Pd9Lgg4vScADpDgOlfe9zb:LnxYrISQpu4v5/cANDKzb
TLSH
T153135B52536C8B17D6BE1B73F8E4992A2F71D2476815F30D9C9EB09908AB7C04B12737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.DependencyInjection.Abstractions.dll
Size 63KB
SHA256 c2a34d5259e6d6c0af43d9b926454105e80e7657dfed901d845100db254de89b
MD5 8db369e1139ba14a6208ea8df983ad0a
SHA1 62e77416f1f25a91c3a5140e3635414af1b8202e
SHA512 ef872d41c7775a81bb2dcbde47637cca29b4b810f2671826de042129e9907aeb2dff02a1ab684425cfaf7b2f48abc6e9a4f2261a4bb4c15bab70eba556f93633
SSDEEP 768:z0dv145TiKK8sfK8wUcrioA085JW14e2KSpYzRTzPdH9zJ:z0P45TiK3sfK81c52W+eHSpYztzldzJ
TLSH
T127533CDD37FCD373FBAE5B722A7390C09A35BA531401E70EA98550EA0892BC88551DB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.DependencyInjection.dll
Size 92KB
SHA256 4d7fb7b6a171047984a8316b1a355c65e33350c343f4e0ea2f1233be457eb7e5
MD5 7835c72d7fd691ebda152797eaf1bcec
SHA1 8816449c02b9424b7058842f161772fc489cbd86
SHA512 aad53dfdc5ee860b2a6d23c961005609f2ebb02fe3913750a08f31c81d9526e2dead96d4f233c12764e8bf51b6449ada833bca9129e6b77b3cdae6c3b6f86fd7
SSDEEP 1536:hrzFViiQfeQJFi5+2H2SOETeFRdRV6ZTzzIYn1Y6zQ:xFUiQfeQe/9eT6Tzzx+6U
TLSH
T159935C3963FC8F21EAFF1A75947141054BB6AB4A3403E31E1E94A0AD1AE3FC547713A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Diagnostics.Abstractions.dll
Size 29KB
SHA256 0a9e51f2d4861367908fa058da82b4a0deb6f85f6ba11d3c90b01c848b1fcdac
MD5 436f31765e8a25707ef3770a4880cd5e
SHA1 a0d63c5d8cc9f1644d85667136c73d7c337872b1
SHA512 9d5c163d8453e5784a79f8708d67f9304f0183a61b7ec2e54e0d4d772aa79c5f7afc726dfadec753e24be4a7743380a4bdfb39f01ad1f2a22edce64386c34243
SSDEEP 384:MLdH4vpxJv3H1yPNdc+bXimUVG+KWOXcRWVlNq1wGjR9zGGW:4dH4v9/yVurn159z2
TLSH
T132D26D41A7BC9325DEBB1E31BAA1C4023B36C3576811E7664EC8910D1977BD49A33B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Diagnostics.dll
Size 34KB
SHA256 0842e20c25240aca53809e005776eb88f53a61128c632c4c6fa8685b9f66c4b7
MD5 f14e4787e1accf6c01d433eaa0e30dfd
SHA1 3cc40e3e4c0645cbc8fec59e9bf59673f458029b
SHA512 f0d6cc32446f4cda8cbec48e8e5413ed3b8ec7bcdb8fb710013993feade52317438c44cb180394a6f71eb6164b9cbe170d6d284ae61a71a1d5da3ab5ec50b373
SSDEEP 768:lY4wbeDJl88xZZcfqnfBTdqdgWO7N9zal:lsClF/e+yOWyvzal
TLSH
T15CF24A56A7EC9322D9BF1E75AEF086061F39C7836411FB692DEC90990D777C08722329
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.FileProviders.Abstractions.dll
Size 21KB
SHA256 02f38beb848fa01fcc55f0cf3982ca01e1a5aeba95933131a197ef602a130763
MD5 3aa27844975c473aa34256bf9bcc8b6d
SHA1 16f9a31d79dd248c034ed092d40dc6c385ebee65
SHA512 95ae823dd74af65dd3c9ba60e676d8110a6293297a0a6cf53aeafc5faeb12431538d83d46adb0abab8833b12458eca29f3dd9a3314d72c3a72f99928bdb9f442
SSDEEP 384:N3tt2JeSlo+MVdUJtFEWsHMhWGalNFGoR9zFiJn/oq:Ne5GQfr09zQ/1
TLSH
T164A27D26D7BC8363CEFA5E3069A4C9476D3DD3DB4C05E51A1589E1081AF3BC48732B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Physical.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.FileProviders.Physical.dll
Size 43KB
SHA256 e6073f96262a3c468c5024564fa02df0f36234242b392c8b658b81bb1b9d968a
MD5 887259a796ae6590749fa3f0d78b0cd9
SHA1 6ab7d026ff5fc8fc0d92b51f29e492d8b33f8c5c
SHA512 41e7ba5f26060b03430f3da154ca8cd691bb287008e78661706cb449bfa3d3310342dd6e408a213df7c1366ecf89e8d0598d4dbfcd8c1d54039957e8a5c2edaa
SSDEEP 768:+kjPlCVm7Ej8zP5usGppdtUqISA3SngVE419z4Qt:+kJCVm7EihusMpdtUxSqSgVE4Hz4+
TLSH
T181137D2193BC4307CDEE4BB16DF0E4460734F3D72502F75A0D98B19A29A77C84B626BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileSystemGlobbing.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.FileSystemGlobbing.dll
Size 45KB
SHA256 965a5347b125d232361dd08027ab263ed1d042b0240ec4a4f29b7a0bfd74bb28
MD5 39743aeab0c21850ec0a8e7830ad4370
SHA1 c897d4dcf3bf039cf766f940f117701a0c5b1eab
SHA512 a79f377a64bea1c532aed4ce33abe17af9e888a4c89434a2310af7e6e3845333fd5116f0b1475db06f9c09d243f09b50ac5245d10dcac0e99a56a48a68f832a5
SSDEEP 768:7rw185npIg65BZLzI1Vp3aPolwgYakfn8OmVSfem0TgvJKMd9zH:7r/pkB58LaP4wgYaOYVSWpgvJKM/zH
TLSH
T108234A8066AC8223CABE17B8B8F4D4524B75C6B7B412FB474ECDA9481CB37C41A61777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Hosting.Abstractions.dll
Size 51KB
SHA256 57c2528e1f2b3872976661686af9bcbd0612de7ee6b4ef4cfe92b746b27aa1b7
MD5 c32f6f4402d1c5a9fcd2fff1e20a859b
SHA1 3732c98212eec17ff92759599fe91cafd1a8d711
SHA512 4bd18b34de2e0135a8e00616384033609fbb25804457cbd6cf3d363d7f2e3c7d4aec0e9f99e4a75b3abc87b8dde5ee0e6903dcf3afab80d962cfef02c7532a32
SSDEEP 768:3dfIvk8cUbjKbhY6Om4e+X9CzJ65Mo7tKoV2nwsyQQZt164yCmi3FbFi/Up2cK5J:5+k7UbjKbhY1TbUcKo+bozqrH
TLSH
T12933B14163F81615FAFB3F34ADF891258A3ABE66B834F62C064945DD09B2B80C971737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Hosting.dll
Size 69KB
SHA256 ca135e4b48abc2effdb6fdf085837966c35f3a8a305744429009dde946d633c8
MD5 14ffa2d36a6d50f71e904f5d0deef146
SHA1 63c60db8fd1a63be05ecafe119d61fe6d86bcb1f
SHA512 09d1ca0be3b43235f97f5739bb5e443adb04c0d34ad6499f7c50dbc64eff351e0b803ab0f8968bbe9589a88eb41765597b9b9b3fa623f6841ab98b6e4d66f9ab
SSDEEP 768:mHcMciLWJeEHq8SMj9db9KKjoDpxdDozzCF95dnbOCify7MYzWUAKCf9zPcx:mHTfEKjkdbMK6PM8nbOKVWUAKozPQ
TLSH
T15A634B8363AC4713DAEF1AB9E8B465691A35DB576414F70E5C8CB0D90CE3BC44E2272B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Abstractions.dll
Size 64KB
SHA256 4ad4a3b2bed7f5f293f83cc2c46169b93a9863b89428f693a4f17863704f47aa
MD5 a5cab35625e1f365a9181f4e059023b5
SHA1 1f8fcaaf8a0c512e3d33aa7caa0b452227459eed
SHA512 1fb963e563d774df6ad87fe5b7a09fcf0eae1413c270d4b01022e94a00057fc917919b3f4f6e03bb45ac47286dafe763d40ecd50d3ecc2ae91ba122c5579531a
SSDEEP 768:vRU98PjrdTukvp6wV1XxMyVYB0wwbru2OkJB7ix+WTqoU8/Aj29zg4Q:JTTxvcwTWBkbru2b7OZTNU8/2Cz9Q
TLSH
T1C4537D05ABEC4377CBBE4EB9F89096410F35C2472547E79B2CCCD125A92BBD44E213A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Configuration.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Configuration.dll
Size 26KB
SHA256 ed0a70f939dc8779ee85802e926f138e284828ac14d44831ca68fdcd14450b5b
MD5 477d8b5d7ab4c9b2bc918ef5daa8b45e
SHA1 7486ff87665335aa215bd589d19b98f546215eb4
SHA512 2ece4726195ea57acef015ee2b10435a50af5eb39d7d2af01d13f74cb9c6b6d1ceef4a232f81914bcb115ef52bb47641e833aabe4d19c8933cc286f2312f0883
SSDEEP 384:SPntTUFG4562BbpdL62S5p2X/ckWxsmzU7RWJlNdki+R9zdq:YtTJQj220gkU7H9zU
TLSH
T13CC25C6697A88326E9FB0F71EDF0D9453E35D7925811FB1D189EB00804BB3C4872273A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Console.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Console.dll
Size 73KB
SHA256 84ca5528a45074f18ae4234956de55d238a65be39f914f88293732dfd3889a35
MD5 cace87a409706f20b3ee8060cb9f0a16
SHA1 e7c60278a72a6ad5cfdd80191c09d91abeaadbbf
SHA512 ed21c6547c2df2cdf61c3070254bd6439a30d5674523823d303a0a96e40cdb64a91c887ab4133ead3d8a48716f7679bb6b2c67b22461d9ffef48249a5e5e0019
SSDEEP 1536:31SU9VTLpoGSWZdHPIcKPmUwzF9U8o/T//+Fv/HENqyvzM:lSU9VfpoX+JFKPmUZT/WFv/kkso
TLSH
T135736B1A5BEC831AD9BF5FB8FC7091015B35EB53B803EBAB5D88A0AC08677C54512763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Debug.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Debug.dll
Size 19KB
SHA256 ec47584ec7344dbe9b3ec5740cf493a8dbf346e467d6855e24be33555db11983
MD5 b1d351bf2b284e0969f1bcf9d6be1b58
SHA1 64fab26c768c8b610df90baad8e03e7759309f6e
SHA512 98df861cf32cf09a00688626d706b36ea9a4c3b5bcf76f3675039e43268a82cb6632c05066b361440c5f88806cfad0955af1bd4f9d0373dd796b369084a6c385
SSDEEP 192:zVfPfwSGE5QJusuqgQJ9j578mDAqWJIxVMW0WF+GBTBWseaAWDiz5j4HsX01k9zM:Rfafu42mDAqWJIxVMWJlNVIR9zeZ
TLSH
T149924D528BB84206DDAA5F30EFA5DA42793DD3979511DA2B05D8D1090C93BC4973262E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.EventLog.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.EventLog.dll
Size 24KB
SHA256 f70b8392447817a4d44acd5785e0bc029a2844d5445e05b98d95b237443339db
MD5 8210308568d5ef15f758ad21fee0517e
SHA1 e0fdd76a63aff7195b38976882e88701bb6fda57
SHA512 5decf964bfe472c2083bf093709da87a4577fffa9a22f9db757a9c3beaa83005a26599cf2297c9619522b3b7682af8a279dd5dcd5168808722b3d78c71814644
SSDEEP 384:0cqdNcIPJ51NsMsOBZgmVfVej+yUvW2rgFW0lN4tR9zj4O:VqPPUEZ9kUEAP9zMO
TLSH
T19EB25E429A6C431BDCAD4A71EFB5CD42397CE7C76812DA260E9CF1490C637D48B21B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.EventSource.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.EventSource.dll
Size 33KB
SHA256 665d5316f601ed6dd9daa6d7534610ca3a7aa40e4d117c079ffb118ea2179b2d
MD5 b251f77d47b8ae95b7e6c48caec4921d
SHA1 e04dfe931564d2b0bd967dcadb4d0f807743775f
SHA512 a1e85b95d9e65f4274a6b6dee8c5fac60a0890f8b521c271458c515d0860e48dc96a91bde318e0c89a080e12a29d690ee7ab99c8a3242dd3ed6b10b7c5b1bd43
SSDEEP 384:YJ3OpOC26rT++tIwa7Pmq8JKUNFUDeHQiXA40zKeGIGJyF7fg12Pahfv0mvoW3gU:YIV2mqJUNFoOXpycpvmQlfe9zq
TLSH
T128F25C71D39C830BDCDD1E34A6B8D982153BC79B7921EB4E5E88E0880973785972376E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.dll
Size 49KB
SHA256 48bd4a0d323e0ae85fa0469779bb13e92c4600b0a49dad6bcb891047c5e17caf
MD5 eaf823ed830e1f448cbe8e1ad95a76e1
SHA1 6539c17f608ad3691e96c23bbc3bb3b55ae34b37
SHA512 67a3d77da957aaa0fe4f4434c054f51886528640603d4e027d5f298e322964ca1061d40f99ac9169df45f9a4f656d050f4d3dd2c0b0c4a7ffb5d20d84bda2735
SSDEEP 1536:uwkwf/Pqv0KvNDmBRZlDl9PQ8izqu0PpKzZ:Dkg/WCXiz0BKF
TLSH
T1D9335C6147EC8763DAAE0E38F5E4D5545B76D76B6012EB536ECCB0A90C7378087202BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.ConfigurationExtensions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Options.ConfigurationExtensions.dll
Size 21KB
SHA256 3057894505e37852ac77ba70007a6b075980be4da9c3afcdb7a37e62750bda1b
MD5 8ed48fb1ee04b8180c8a021b8c9289d8
SHA1 4e4be474d90b13edf1365307809edab6ddfb066d
SHA512 ec0f2d7c3b75698fea8bbfb3c38771a358934a69aa25739ffe52939ecc25309c741aceade75c3b96eca4f778c7edaa33bda4180de993f3dc99b5ebef27548273
SSDEEP 384:ty1JDVIqRW7eGpX7SOxYWV4lEdzWzAr0WClNetR9zjrT:tnBR4lEdv1P9zfT
TLSH
T14CA23A528B5C4223DDFB5E71DEE585923D34E78A5911DE2A02DEE1480CA3BC8DE3172E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Options.dll
Size 62KB
SHA256 4e767f3c0bf37199a83b8697fc9431d907fe39b5f2763f83381865c89ea6545d
MD5 6d0db347c73a12d13b4207aeef1bad55
SHA1 7d8afb9e7aee839f6c03d6a8ef6ef6791523e741
SHA512 e1db3fb8a552c64c2030e3724c39930c1f9ff749817fcb2aa2286217a13b333bd73c55dda764fbbfcb2076b473b7aaa93f6e56b30fa704b400b689e73c76f3c2
SSDEEP 768:WpWO5uXespQkuvhuVyI4vrKilRrtsyQYGiuxseJyvmpqsS7WdP7NszuatX9z/p:WAGghwMII4TpsyVOuvBBSBouczx
TLSH
T169536A2297CC9712CAFF9671B4ADA4520E35C35A3A03B79B52CDF0D81C773A18A65633
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Primitives.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Primitives.dll
Size 42KB
SHA256 b5e8630df19605fec639873b86bdff6f9d424db88d181bb36a0bd641558c18ca
MD5 b252147211deb74a9d91401c4387b6dc
SHA1 e237368996fdb43315f2360d1f374cfe9a0d54f9
SHA512 05ae2266296a182ee4fa267e947f4a7cd1d4d6787c4b4c1fbc3ead253ad6dfbfc2d26409fed457186579fc9540e83f2d1ccc15c78c3cff1af2deb3a88d54e137
SSDEEP 768:6PNon+YcgKF/1WfRzT3YWkLzZuORP6eNbOP7yW5yKyqLuiM+30XuIh7N9zu1X:6Gvcg61WfkFuoPzNbOP7yVKHLuiM+3Jl
TLSH
T1E3135B05B39C8333CFFE9E75B5A1C4152638D3A6B522EB6B60C8A0741D637C4477266B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.DiagnosticSource.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Diagnostics.DiagnosticSource.dll
Size 187KB
SHA256 d28e247dc8b6af02968b65fe6aae25c2ee689d2007268375d63347aeac0bea6b
MD5 f287490a129140fa1bd94a7247f49b37
SHA1 9892801cd4b7fda18461cab464a1b00e18f52217
SHA512 a467c7855af63771138b95a62e9b541f81de9e1d44519dd68a1c894167cdbb5566392d196f75ebc88c4e9b4c0587ab280d4a1ff44309d7522efa6738f60e3d13
SSDEEP 3072:TRQdeGkopxoribSSiKQ7Rt2wS6XkzvYaLKlllWFBx21nRlviQYVPXx:eeGkopx0igKQlty6XlabBxq7vzYV5
TLSH
T184148D2073EC4B26DFEF1B39F470C45607F2DA4BB54BEB886A85A4EC1853BD1460126B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.Pipelines.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.IO.Pipelines.dll
Size 75KB
SHA256 a3c80d0bb52e0f5afc73638cfe5dc25e3470e5fdc0311745aebc8a4d4cfcba35
MD5 726b6639602ff3b58d037f99b3aa7279
SHA1 ac1b1635a3219b436b094ba633743fa32339a974
SHA512 12d4b0930694d5e13edd1c715891b931f2e9e692e48bdfac35675cc3d589fe58704e6f4b66fffef0615a4204b67b009671523f810a81bcf5a6a1c167c5b38134
SSDEEP 1536:LvXUpt0U320mvAnfAWF/G4bgN0xmR9ewEcXYzIkCRwy4PzJ7:90monoWNG4bgN0xmR9ewEcXmIkCCy4Pp
TLSH
T1DC735C6843EC8717EBCE1ABDA17145230FF2DA666A13F74A944CA89924D77C006263F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Cryptography.ProtectedData.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Security.Cryptography.ProtectedData.dll
Size 37KB
SHA256 ce7f4b80de12f227ac637915470c5b6b6a5d716456835caaa0b1600c3cbdcb6c
MD5 1f39c7f724597435feed4c6e8207b235
SHA1 cbe9a23badf76bad2ef913cdfe31d86c954d19d6
SHA512 f9b33dc2d34b5a1f5dbe1840685f85104a3e2be109c270314cbecd6d0c6a4e3f84a5be5ec8ec417f27ec7b571515bc578380bf8de4172790ddc7ddc8117c29ba
SSDEEP 768:y8I8P2QLEx7FiC7YccT3zoCaw2Lw09zaJ:yiP2DF1SjoS2LwczaJ
TLSH
T194036C21A7A8937BDE5B4974B931E00A783C8E498012BB3DD5C9614815F2BC59F32FB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Encodings.Web.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Text.Encodings.Web.dll
Size 64KB
SHA256 8839f3cdeabd22f5952c4673367ea41c921aeb0ea26e18fb23906e2cac08298b
MD5 6c8c3061f7f55a28ff30bcf3ee7da75b
SHA1 90e54da4dd85e168d294d61b1e42480e9280bbb0
SHA512 9b715a5594d298e68bbb5db933bf2719b0b4b7ec2807e256981dec73339fe4d7c2e416b9aa856035f61209b2a83e9b6f0903ec28b15a4837f43866f3ab908d62
SSDEEP 1536:0jLlBxsNNJM4PMZSFdmTa7/hQ98av9Yzm:mBudv3/211Y6
TLSH
T1DB535B11B7C8E51ED75D06306CE080B0A7F4AFDB5126E6C71C957A0E27B3BC86B1929B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Json.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Text.Json.dll
Size 660KB
SHA256 bb53577c13ab01f397585e4bb642a1a89f1af91b70eb385c7c05b82b9b912605
MD5 e1134858b6a45565531cb3c3a1a26df4
SHA1 8c7986c744b9bb668f1bbb37934528ac38dd0bd0
SHA512 dd4c350ab441df58e08bfd208cfad384f47a676300f9b5811bb7be14b81bea9ce18debceefcc4ae68aa488551348f20feb8ae09b4d2220dc84a401e1e4f21e5d
SSDEEP 12288:jC7e+aoa/8Jbxfap97o6WEuy68/aUI5ABlr9ZHqdKC7vZzhYQ:xoa/8Jbxfaf7o6WEupX5ABlnK8Q
TLSH
T134E45C10B3E84B2FDADF433AF0F040058BBAE46AA75AD74B150854E92CC3BD19E556B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Velopack.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Velopack.dll
Size 261KB
SHA256 b35698f5f66978d7bfd0ab12a2a2899f05912d9a1890d5e64c2dce9bacf2662f
MD5 2c29bf1bcfe53f779a9f7d785601dc8a
SHA1 21d134bb5661ebbb4819500aaf829ccfa024a9b4
SHA512 3acfa65169390a7f9af8ac66dfa9684405bcfcc4e61fc04df80ee3bfa25bea4bc8a41defd7fb9290890285172a97f663d95774a59e274fbcd1f8b5f44d533692
SSDEEP 6144:qo0g6Hxg1smn4oGalxcB+KQwCyknZylyZ8Sru:qLgAiWHoq9CykclyZz
TLSH
T17A445B0037F48716E2FF6F79FCB0600686B5FA07B8AAE75D0A8458ED1D633509950BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VirtualizingWrapPanel.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\VirtualizingWrapPanel.dll
Size 55KB
SHA256 8b59a3fbe3a041264535df8f0fcf0171ea633e57a9084882b9fe6c220181b3fa
MD5 11f5c40f0eb1d77cf27649a87c16756a
SHA1 68df2bee69e5dc45932f72761d84dc9ef33fe4fe
SHA512 408bd9f3b5863a66acdae09d3e46d4652b257d83c1adc2b64b6c6ccd3cb54e1f533fc60671e5fbcae048758e614afb443cd9e0c0ac96038a631dac81b022c397
SSDEEP 768:mr8nle6jhM5Cn8j72Plq2yHeMcBL1XXG1ulCF8RuEF07qEwtIn:mgnlk4Q2lqr+M41XiK4YvOn
TLSH
T19C43190C23AC8A37EB9F13B9A87011140372A567BB71E799899C70EE4B677D101257FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Wpf.Ui.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Wpf.Ui.Abstractions.dll
Size 7KB
SHA256 f504e30e37a74936ac14f14de4ac43c291cb3964eda71cdcdd61f27cf15cb9cf
MD5 eca262214bd112cc4a0a225df5f43210
SHA1 275987463805d018677c1e093d072a05ffda92a3
SHA512 099fc0c607af839d933b0007b37739897b67adb07ce309f5926da845b857b36b640c1d60ac002a405db73fbaaa793ecb0f54fd1e647c838d3188d80f51d0b843
SSDEEP 96:vClxi89zX2ekdeDm4mgWoQdBTHUhMDADUlYpijY39SOkX1hHN:vClFDc05mgWoQH0hMDADcke09KXDH
TLSH
T1F5E19221F3A88332CDF74777E8BA52845730F652EA578A3F199A510E5C2A0591E32B61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Wpf.Ui.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Wpf.Ui.dll
Size 6.3MB
SHA256 3466432f74d1d1224a55f71b8dec7b2913039e01ee32b7304fd9668fb76b797d
MD5 17b530002d305ce72b8c40a1c6ecd70c
SHA1 0be2703f9866699c4e7497f62141abc1b31ff57e
SHA512 3dea4eafa04fd6a9381921eb98526386319906153007e6b159e7437a32d6fb235ddd5d0434d13b58bc41a6f535aa718d29bcd43d101701b810c793b2358e1d4d
SSDEEP 98304:89xe/+FOvSmaRf+UcDN9NppBLxAHDfyLrZl:89xz8N9Npp
TLSH
T131666C5E17ED0D36C3B3837A8DB073222DA9196A1142AB834F4EDF2D446A2C4CDF559B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.EventLog.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\runtimes\win\lib\net8.0\System.Diagnostics.EventLog.dll
Size 171KB
SHA256 59fb8f95e34b4dbc41422e801ca9456da5ab70508d773e42e2ce1c60de38a88f
MD5 6781d2fc53d3682151ccf369d797d673
SHA1 7862a6bc28ee617abeb8d70c00da380ef914072b
SHA512 fc6070ad003a38c69944990b26507821a8c867f5a4683a0464e47a9efb201fcf5b0afb1ec60359b32e412edf521771ca4829b19e7a2b3d75d1d3082a5521bcfc
SSDEEP 3072:RfT/zCfxCsREbOAvoFY8ZHPfu65kt+EIx/LJQYyaQUoj9:p7zXsRIOAwhHPfF5ktyrfy
TLSH
T139045C7573EC4B1EE7FE1B38F4B011258736B996A93BE72D458448ED09637C08A207A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sq.version

Path C:\Users\Admin\AppData\Local\LuaTools\current\sq.version
Size 534B
SHA256 5b5692647635d67dbb98804245d0ad6b5ffa4ca1e54616250c5b2426694891eb
MD5 9a8c317f4d42b40b49dc3d16c12b60fc
SHA1 d9b644ac1691fff3335665c124ddbd0cf9478aab
SHA512 a3c0fa395f6c1443c15efad55d330c4a66d8cf3b187b342a558e88638865940cd06ceca9d3b9fb62a13da528445f4613f61613189091fdf0a12da649c7752011
TLSH
T104F02B85A542DA4645931E5565E54104B3EB7E6F34C848D0E8C88CE8238D2EEDC2FD55
MD5 SHA1 SHA512 TLSH

Submit Download

LuaTools-1.2.5-full.nupkg

Path C:\Users\Admin\AppData\Local\LuaTools\packages\LuaTools-1.2.5-full.nupkg
Size 6.6MB
SHA256 e584e5620f7a8e806e08199582b33f1e21eebbe96f68a421bf044eb99cd80823
MD5 2ad9f6a4b620a9adae8f5953146b56a2
SHA1 dd3a34ea32f18d05d42cac387d166858c69834f1
SHA512 e3112edde278f3e8860de99ad533b1486385f2fb3a299133d48b606de2963f5fad9af0f94bb79aa065d0e197cf950b09559556c7526124963c2dcfd96bfd0ff3
SSDEEP 196608:T2E9p0040yF5NFRjPnN4Sw6qHn3ILn03t+6E4U5Oc:i060ojFRjfN4SwVI70bUb
TLSH
T14466330B075C17A6C35BE6F5513C09EBC6827B2F53D2339D412833D36ECABB99658286
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_000002
Size 18KB
SHA256 cb8145068edfa6acc7b53bb726a6f02cc2899c9381cf8f803de06dcce20635dc
MD5 1c8053d3824b6718bffdf884d6d39b94
SHA1 ecc551b8aa38f89842b8f2cfbc0fd2568827e883
SHA512 6cef92d166aa34474261c69b46507ab37e76368f68819aa187e92abeea327249bf8bcae5bd05182cdf60806b301194372873769f31fefa61ceb606fa1e98cd3d
SSDEEP 384:P7GnJsCmlvlVnMdnfTCj9LRXrAEYqxqCIlT6pPpF9d0IaRK80h+VdikfbD0my:mJWLVnMdnOdXrhx+Z6pPZ2RK80hArDNy
TLSH
T1A582E1AB44FDA297BC50BF94C4054BAA0A3B66E179CED42722D7470932D24DC8937EB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000003

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_000003
Size 25KB
SHA256 c852f8805cb659f20f74ef3d6d0b756a543a4039d480fead4a6a31513b4a56ea
MD5 803020da0317187b16880251f3e0176b
SHA1 6165922daf89793ca69419f5ef181c08b6840a95
SHA512 6e3e1c2a950d7c1fc6249f29fdd31feb3500573a54c8a84aaad8d4ff85c04ee988c06739f06df605bf4f3484b4c1f34963261a36948e5d9fd23d01ae34ee2e3d
SSDEEP 768:r4Xa+n9azfyN7hNRO9hBlg65RsPRV+AvrMN:sXaQWyyOjPRFz2
TLSH
T19AC2E1E548A66A7F58C9532C78CF7F0A1398C1A0F64BC320CA1E617C2DD7D667C18176
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000005

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_000005
Size 60KB
SHA256 365b05384536ed3bd777f10bceaee9c7cade9025dcce7ad35675e4027bf2b980
MD5 0e74e1e8c40cc3be0ec1639bc7cc4fce
SHA1 964047e080ebfae337e12776e3ef60cf17bd5d04
SHA512 86d3e3f8baf3c6a8dbed399d8a6aee0b430b57493a3ee576840d100a6a24eda13a3f9c146db07465270e96d990e263f5839d87ea19e58c4c11614fbcb771b9e4
SSDEEP 1536:2CRQT82Oy0W/eK8N72zvdbRJv1PzVZy4F5MQzdkpb4bHtX6:vQT82/0WEgVbT9q4F5MWd64Z6
TLSH
T1425302D0ABBDF1094D16C83F5C9AA83190AE4C9E5255FDC57CC6780CBB3109BEAE8C58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000006

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_000006
Size 32KB
SHA256 84d0be622ddeef6d0793df5d274965d6d13a756979b4b484185dc7a051eb4071
MD5 31b05e57c066452d73ab005bb42865f7
SHA1 2a8efd5d7753dd756c539ad66831b01f603fb13c
SHA512 f793863cec23493b58311d37720fe7d48e21c92da5cbc9c5d4562e47a046e33be4584d58a1c031513298c55a9c33f5e591fd5ce831c9c33af9c2594bb071c277
SSDEEP 768:p9Z1DSv4ZFIPCFaEnobvm0Evr6bY8NONf+Hh:rZVSMgCFaEnWvKrS6+Hh
TLSH
T17EE2F12BC653ADD8C621D28BCF226DB1AA210D8142C5E9F63E949D31F718092FFCC946
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000b

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_00000b
Size 165KB
SHA256 0c74fe2179e079591003bde0ad99fdba3a8e39079b5dbf5c8aba3951160dbaf4
MD5 74520ca45cbb08622fb5604159c648c9
SHA1 f88979be3f1769b3f8cce26b1f3b0ec59e9fa747
SHA512 5355b7974812cea8599802ff4024bcd1e0751c5f075629a5892b769c6bcbc6d4189b7a1b1c45ee083fbb0be5f99e9e920698345a776024c3b0e2640839acf93b
SSDEEP 3072:ado2tqCbrmQRPwniLi6nnpdd98P3AnO2yFryy6OmndsRXqZm0UrrIP6m:+o2YHmP0X6nnd98InOFry7biXomRrrIH
TLSH
T1BDF3235AE64C7CA05606A82FFE9A8F56E25FD4041F98BA2F0445FFE83464ADF05CC50E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000c

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_00000c
Size 415KB
SHA256 9bd43f2df00502b68f90d6f15cedab37e108cfbffe2df8e86a100bc57f1b7509
MD5 e011db24274758232cf56c95ea651420
SHA1 d8d64d6e2641ade7f697a24521f04a180629e9c6
SHA512 51301875c50c299df599066744aa6117264ab0fc70764d24462676eba93b8a7695d0857a2fe6750ab28250fb0772c0efc8aaa831a246bc41f436db136f3ef0cf
SSDEEP 6144:JUC3rgxWlEkZ6fdQLzOBWUhISTRj/Rv2b+B+p8++ipRvqDyMOGN+MyRa9RknOR5p:JdrgxWX6fdV17jpv2aBo88f3MneVn+l7
TLSH
T1849423231AF42AC51329833BA1CE906FB51375F520B37671FC68BC90169645BAF5ACA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00000d

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_00000d
Size 17KB
SHA256 2089e1dd7b150203daf66a73e9b48823ec151139267e8c6aaf50085a2f72a65a
MD5 00e8fac6dbf3d980660beec0fdc83a5e
SHA1 8b7d2d53ca9abd7bfc9a9245997cebe56c7084bb
SHA512 6336ad8d9e7205ab703ea8e680b1e67ce9eb1acd4dffd95c5c7344045bdfee2d34cd23b64a0e46bba793ceac6a88b477dbebebb302166b0e75646ed50c75194c
SSDEEP 384:cFmxzr1KVJvGo9yFMCF0Y/j6lMga7aD4gCZlb+AKBi:7ZUJvGo9yFaYu+jP
TLSH
T18A82C16B3DB018D7F78927121C5CF139DEA2FA5460668712C70EA18D4486E5E8B2C96A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000011

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_000011
Size 119KB
SHA256 19b8db163bcc51732457efa40911b4a422f297ff3cd566467d87eab93cef0c14
MD5 57613e143ff3dae10f282e84a066de28
SHA1 88756cc8c6db645b5f20aa17b14feefb4411c25f
SHA512 94f045e71b9276944609ca69fc4b8704e4447f9b0fc2b80789cc012235895c50ef9ecb781a3ed901a0c989bed26caa37d4d4a9baffcce2cb19606dbb16a17176
SSDEEP 3072:lpsQ7l3T64Z1lKcDqttEPBWVNwZ+e222pKKSxfj9:Yg3T64Z19DqtkWbu/222kZfh
TLSH
T182C34B06F316E70AEC614E3C66769399B358F8A53F2FCB0B95857D60BCAD0D51E8128C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000012

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_000012
Size 121KB
SHA256 045b433f94502cfa873a39e72d616c73ec1b4c567b7ee0f847f442651683791f
MD5 2d64caa5ecbf5e42cbb766ca4d85e90e
SHA1 147420abceb4a7fd7e486dddcfe68cda7ebb3a18
SHA512 c96556ec57dac504919e806c7df536c4f86892b8525739289b2f2dbbf475de883a4824069dbdd4bb1770dd484f321563a00892e6c79d48818a4b95406bf1af96
SSDEEP 1536:v4Kkq/szjKJRIDCnR96guXgECINo28BZZDhpkemOXaxq4jKea8GyFLaE0Af0ffL9:vf/fxn7ElXxE0wS0fj9
TLSH
T186C35C06F706D709DD240E3DF9A1A3A9B358F8A57B1FCB0FA6856D65FC8E0852A441CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000013

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_000013
Size 120KB
SHA256 d5692b785e18340807d75f1a969595bc8b1c408fb6fd63947775705e6d6baa66
MD5 6168553bef8c73ba623d6fe16b25e3e9
SHA1 4a31273b6f37f1f39b855edd0b764ec1b7b051e0
SHA512 0246cee85a88068ca348694d38e63d46c753b03afadf8be76eca18d21e3de77b495215ed2384d62658a391104f9e00df8605edb77339366df332c75691928efb
SSDEEP 1536:M+s43BGZsrolB21EJ4q+GIbdSW7VvCtQXjPM3mz1yxvjWRVIoFMe1V13836GKCnY:T1GZXlB2SUbxVv/zM3mZyxLUZGrSDfj9
TLSH
T1A7C35B46B302E745FE754E3D62A69396B318F4A93B1FC30BA5857E75FC8A0A60D841CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000014

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_000014
Size 119KB
SHA256 6b7a3177485c193a2e80be6269b6b12880e695a8b4349f49fccf87f9205badcc
MD5 d45f521dba72b19a4096691a165b1990
SHA1 2a08728fbb9229acccbf907efdf4091f9b9a232f
SHA512 9262847972a50f0cf8fc4225c6e9a72dbf2c55ccbcc2a098b7f1a5bd9ea87502f3c495a0431373a3c20961439d2dae4af1b1da5b9fade670d7fcaed486831d8c
SSDEEP 3072:XnN/O/ceJkGwg/MOAibD2hPfX4HYhDhudcvObkSafj9:9/O/ceJkGwg/MOAib6nX44NhIWOb8fh
TLSH
T170C32A46F712EB4ADC554E3D6162A3D5B348F9F53B2F830BA2856E55FC8F0C90E46288
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00001d

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_00001d
Size 154KB
SHA256 8ce0a4090154eafce64e1e5752114a882b8eafd0cee091794fec7edf377b8bd6
MD5 9a42452b2115f30a037b33f4e202fd7a
SHA1 e8f40af1c3d4495302067aeb59916970cf54387b
SHA512 e164f57975be2369f5d541c1cef13ef2c5f523a695962ae97ce1ff6d0ec093eeb433ef777daa1c10230077a81b854ce2b63e662eedcfce17e3af0171a02bf250
SSDEEP 3072:DmTBHVaq99nqzFhHNq4+qH2w9C6AycdE5UcgSyIpW90dKJckWV1AvQpw:DmdHVaq99qz/84vrk6edESnSfc90d2F1
TLSH
T106F3236CA67453E9E0E6CA560E761AFC1F083F240DAE852DA9609815D3441F173FDBD3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000021

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_000021
Size 116KB
SHA256 7e20f077b685900fc87e24d13b3239410231dd6ab63911a357915e4ee036bfe8
MD5 db2d7ee63bda1d2d6a450ca56253eff8
SHA1 baf3200db7586aa073bade4ce29835f021fc3668
SHA512 8807ed01c447d51290084dca706cf0d64ce2062ea0bbf2ab7c99fd1ea2d00b7107cd06a3511ca5626cee9ab562f055f75b82c2edad130ab550fbd133e0663fe9
SSDEEP 3072:qY+6j7kws0/lh9Ojp/QeZz4NdH6JNd+YqOSQF:h+6ML4lh9OjBQeZz4NS+YqSF
TLSH
T1C8C3124D34C4BC52B4DF2142078B1A5B86E9B28B9F34A49CD3FCAFD3B476E255A19183
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000022

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_000022
Size 99KB
SHA256 d8522934aa898051de14bc04f8f83dcc4a76e40a79dd2e5e1d53c330b0967f85
MD5 ce63d79ab90448df207b9eb238c94ff5
SHA1 af0043c938f09c4b502bf7491a910a0d8f2ea53b
SHA512 ffd48c616bf4cdb996622b45a43b2f001ecc2f10a244c1a6464578deb4348279ceaa47d33fc00a83009f27a9052048c411ea6226f39dab083aa2995d8df133f9
SSDEEP 3072:J0mj4HzT6JoWO2VBKWJkeVhZDCM6hbBWJjXqDny:JbwWDCJeZZgy
TLSH
T1A2A3121F138AA0857335BD53161A36D2FAECB2086745AB860DD01B741FCAC675E602F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000053

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_000053
Size 25KB
SHA256 3b109da446457f21b613f42a0cf5d01345a9637c5c9936111b0aad97f721956a
MD5 62ac364c496ba2ef45adcdbecfb4224e
SHA1 8522c0b475c945680a7937b47db9fb798b448a35
SHA512 f70e3fee6dfbe2953a98cffda070cba253fa06ba0340e5593bcdbfa5a1b4e95d223d6e6013b3944a840aba1ba03687ae9adb4177478547b23879fd0250fbb8ba
SSDEEP 768:r3H0BOpc3xcZqtSvbDQXnvMHJGjECHe+Tln1n:r3UBOp6aqtSvb0XnvMpUET+TlN
TLSH
T1F8C2DF8A4B47D3E17AC9358DEE4AAC68D1E7CEFD14D30CA649DB7023424B7A0E481137
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000056

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_000056
Size 928KB
SHA256 af48c2fd2268ff2e7c2de1b29028994c263ca41e27c6af855e828dd0fb029b71
MD5 af6fb00625e9e6555d22de507e354ea7
SHA1 ee61313c93f811a472ceda1f57367c94602f6f4f
SHA512 92066d37ea704861fe3f44eadc7cfe7235b136863ba3afc81d8a32c583396eca2fb9238344af5405becb1eccfe778f2356a8fac38c3dee93407f3fed51f0c8d3
SSDEEP 24576:kfn27HqZnmqEg0obFRRtseXGqxI1xuaOnsI:w27anmqEg0obHMeXJIbOnx
TLSH
T1DC1523397FF9E2303604AB131FFDBFD5C56986A0E8CE9007569351ACB413B5EAA1C642
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005a

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_00005a
Size 610KB
SHA256 07b5142c58d394b9881bbe5a2fedbaded4fa3cba76fc9fc8ed83b183d62d09c4
MD5 4e31c137228e17b25d49422979da84ea
SHA1 63697f22329cd8cc5d066a968c0e434a7520b8fd
SHA512 448de0015b1f8383f8951015ee7cfbdb34faa50cbf2bac2d2eafdef31347b4ef4dba76aeef43a42454e60d2d2c9f9d441c4227ce6ccee1d1fc7ace34431c8769
SSDEEP 12288:DkzrByoUEC29hgzNbXYQpe1/+dtuxQAIoIDKUdgP7D4shF8i:DI0lEloNrZ2U9sX4cX
TLSH
T1DED42365544377B1EB616F199DF2BC49E89E3B44C9E6C11C03E0E63EEA9921FC8905CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00005c

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_00005c
Size 54KB
SHA256 fb09200d5a0c3890a116f036abb10c91fe4aae0531b40f5a69ed32e001f818f1
MD5 cf0e404bc019938032e6870b772ac331
SHA1 45c37edb1480f6c41c0ef099b416540e28a35330
SHA512 a342755c2edb54be79db1811fa2f4056a064ee6f7540ff4ffc7a0e53fe342cce8598d7d7400854e2962ea86ce3cf109348887d2c62b8b2fba26affae899ee99f
SSDEEP 768:ZLbMMWwjKewoajVonfJJlDIXFXU/KNMTdpSz6RdJsbDqAGHDvolPvV6XEy:1g+jYobfrEFXkyzWvoNGEy
TLSH
T1BF430192DAC94AA4FA7797E850C4FE87F0BFE7E109844806EEC12F550756C3479A43B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000081

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_000081
Size 129KB
SHA256 81c2f685c30c85a0d49639a9e7f65fce590c702283eb489d45c653150de64b9e
MD5 5d9fdda386e9336b96d0294ae2312eb1
SHA1 81193e6ccf383e1d6918d495baa9bea9b6d05ef9
SHA512 a37b6c1be7de0b911fcc2e76a52d9561498b292938e8499fc98e713ab59dbe0d4612d1e5e50390c385f9bd740d87cab28ea0bb5220dc306f902bd8899d20c3f1
SSDEEP 3072:9XqrA2tb8nsfo6aeNRdAlgPCd9wxtQ0c8SI4tFQqkS/w+chM:9XqZCiQx1dgthSLQqkMw+9
TLSH
T1DED323093E3C6241DF599973DBBA6497F88BBBB733AD58F420A53122BC8217564CC427
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000089

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_000089
Size 100KB
SHA256 dad54c45e41369ef7e03858ce675b9e18b2772789d1070886e5aae325507e48a
MD5 8e99890d0423086bc043590827414308
SHA1 ee6a14ca786fbfab27b3425de1b688533b13c74a
SHA512 b0cae1efc6784f48ac14769492e0b2aeff17544f03f9b109d4903f1ba338d2e0772f6369fda0bab886f2153f03bb7b674a2c6b74d523fd9542b5f7a89f2ba116
SSDEEP 1536:mx139wldVHr2ucWkk8BSs+l50bSGmTtHJdGnHQgxB2Gq7dzlL6BrhjtLTLnIeRbb:mxpWeSsawMpdZKB9hHLnIeR8t/j0j
TLSH
T1A5A312A7304F83CF50B1CB8A498A7CEDEB838C5669B1075DD0E9311EF721834EA5994D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000103

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Cache\Cache_Data\f_000103
Size 1.5MB
SHA256 4d1f5f98d7e42ba4338d0388fb386344d5c374a47d45fde1ef5b3606080f5e8f
MD5 220d457252003a47bd6c120b059c2a92
SHA1 35f68a1017339b27c98a64d87540d7adcd241ad1
SHA512 7768d3c36cc77be7088a1ff5529e6cde2ccc1b0715c8f3dfbf7447685414e7982aa0202e85fb913eaae8be4ec70d3a8c5d09953e7f3ce524b97ba8d266f91d5c
SSDEEP 24576:4xCrAtw559JOAsXFnckkJP5AE1AjrKVv9Ls6WcXnFTyvcL8VV73Y5d5gVE:xAtwdJO5VnEJKE7v9LdW6nFe88fsSW
TLSH
T1A275335D110D9F8DEF238CB39E824B3DC63D827D69D193BF849261A4BDE6B9C25C2148
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 bb9ef5f3fffe02af76adb9b7eccc29fe632a8f2499cde54740b2d4e5dd09911b
MD5 6f1a6cbd33dcaaf9dd449a06cb0ccce6
SHA1 714cbf0fd9c5d49c2c044dc39e0eabebc0b069b2
SHA512 07ba951cfcbf3a61fbefa74bde5d3116af7cdf91c12872453251c79b4a2534d537618aac30b63c0ee3fc9b97c6eb2ac487831886d9dee8c9ae394e593065489a
TLSH
T1CF51BC9194D4C023EF6706B5E0C6FF62F2DB12E05AC38F1B5A88E554C80F2D7266750A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 a5218cc39d741d0bad6ff72dad0f834e02f97627b8a079b5ebe01c75a376d1f5
MD5 40fb3257dfc794a1c49388ba62b47480
SHA1 201eef41994717a8d9b7a7714c2a2a714be04079
SHA512 2c330590e752c2d5fb084164ba7746960d6ee7fa6d5b65d5d525f60f87ab23fab30a8f83df38733edae23c7c62b574df8e8d91a274c7c56f85b8a4f54d4dd32d
TLSH
T13731EF1188C8C067FF8191F5F0C2BE99F2EF22E059C35F07A95CA991C40F6C70A6350A
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Code Cache\js\index-dir\the-real-index
Size 552B
SHA256 3c04a31d1e1e0cc6f320ddd008611d9407bcf7941d9e3c74cb493bbdee759ebe
MD5 2d05a73ed0df49dfe6027b83473e4317
SHA1 b72a85c0488b4224ce02d7835737dbc2286bd9a7
SHA512 cc1da677d914dbddb1f58d0f7a1201a777e623db812cc7c715e3dd898be6e98694422d5323aa31293cb6e2af1c6b2b5adea906d9cdbc1e47b08988518dd33041
TLSH
T1DDF06556889CC17BFB42663960C2FF8676F4363029836F07F2900A34D84EBC65B13468
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5b7154.TMP

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Code Cache\js\index-dir\the-real-index~RFe5b7154.TMP
Size 48B
SHA256 1b42aa44a3ad972ae2afed1ef48141e8fcff7e9c9b7cd0559ff495831b6f368f
MD5 2a99f98a11d139d641e3313c0b742ab3
SHA1 263699ae35f71e7baf35cfeac5e71b9ca8de1083
SHA512 3ab14e5cee7dd2f39a49434c960191687a9ccca32e57881bcade48a2432e003e07d0c6827952afd5dbb8c66759903e7f36f6928a229d95d802992af4d8481ec5
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\GPUCache\index
Size 256KB
SHA256 18358eb0c7db6e0acd96c575a4c67c42439f84614983b2497b7c8cc9a2c2ed07
MD5 4d4da814bbf9e78a338ac021a1c29db3
SHA1 5a958b2b063b2e021d104d4c2925e50c8b45e5b5
SHA512 6dc078b7eb17b8f5959b935e66ca371c1035353282521f4b31d016f385461ad02847bd4848e5e8aab5c9fb1521da9e76d9032194f159b5095127ff95fe4af2d4
SSDEEP 3:LstlNllkll/ldf1:LsX3lEtdd
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\Network Persistent State
Size 953B
SHA256 24cf4e8fb12b1f7e373dde1c3819444c5979d5e44df3da4ef395f7ab983be278
MD5 dcb73a498f1e6aa64cc655658b57cbbe
SHA1 71820ef59e61a3b77b445bd270c1833add6aff81
SHA512 50c852fd4d71620d7ef7c09e7ed4fe88f0e3d5608307b882b6cc7a023fa296b26fb71f84bf74a6ced50b29e481533ca7a038ae7f470d5fb41df45ed5266a7d2f
TLSH
T1651126FE12B0B8BE5B8491B4A9151C1F8EAC446207EC6DAEC1C86B1A53F65B0D314B1F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\Network Persistent State
Size 1KB
SHA256 9d37a4cfcc61eb33a6cf3ca2b47e66f2daa0a41a1b912a9417630ffa90965924
MD5 81c4bd6daf0edd083339af9255f288f0
SHA1 b239ff342a9cf6905a737bb3a576b3770faf1dc1
SHA512 f4e80c47b8b9c5ce861ce1833598bb99e797e4e2cc5d067599e6a14ecd490bf818d0d2fee6620b37347c900d2edbc9d001d13292ac0dcb47a8d0591c46e8e22c
TLSH
T1B22137FE02B0B8BE6B84D5A4A9141C1F8EAC442207EC7DAAC1C87B1A53F64B0D31071F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5c3149.TMP

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\Network Persistent State~RFe5c3149.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity
Size 524B
SHA256 2086fdef11c8c416ae9e7fa460c21cf1784da38968b724681d77e92f01fba2e7
MD5 517fb23479f68ba97feaed9afb35bc5b
SHA1 6a171bd110ceb1cf1c2c769794318ffc151dcd77
SHA512 fa9b2128baa5cf3b89c41e59275c62ab75ffeed3e0a90dbd5ac027a52152e612354a427290d61f85abffec4eb24a9c5f2573ddf1d93f37a231734b3fe84e2ec5
TLSH
T100F059DA86FE681B607C467B0D05F5061A3EE0341542F8F4DAC29A7CB2528FB8717521
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity
Size 524B
SHA256 9813a6dfba53b4ceb545ba0e78efea9a16900ba3e2b04fdcf4724a9ad0432b97
MD5 548b95bca3096a71b799c12ce0120a5f
SHA1 c73b97e1f72bba3efd0da013ec12841ad09103a7
SHA512 eb4e714dfbf45150b70e7558200c3e726b44fbf2d190c79f24ab12dd0ee1e5e80fa93d4c7cc7aa858fab1a59a62886d31e6404ab64aac7f91236e602a749e429
TLSH
T154F0E09671FEA8A7606C09770D85754A1B76E4341143E8F5D5B28E6DA0905FB0622521
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity
Size 356B
SHA256 315b83249e1ebc62cff69dcad0babb6147381eef8bca45670aecc55e76d47a7f
MD5 0cf4c4968d4cec1ce26d62ac0dbda5f0
SHA1 9cf797a34b471435c978b63c34a0e29af7a2ec2e
SHA512 5056381a4168396ff26e3d926fed15372fbdaf2e82205a1e03df5d699e2da619cabb7babf0aa994c8a8ddfd9fc4f84339dd9a0c00c8e462856c9c4e0ca283b60
TLSH
T1CEE020D661FFB47B607C09674D457D0D5B3AF0351143A4F5C6958A3CA0A04FF0513521
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity
Size 524B
SHA256 97965b62725ffc7ecb138d955a8d30bea6e9e53856f5b1301474d91319c4bba4
MD5 a81eb8220cba62935162834ea0325ec5
SHA1 250ee9a0059bef15d6a4820006fb1666f8447072
SHA512 52798adfb50331e924e06330aa8e8d01416110b42a58667f7c14fd4aaa71b091233bb326082732d435dec7b8cf41c2afacda79f94ca70292ff015a0ff666b6d3
TLSH
T153F050D660FEA8A7207C466B0D40760A1F35E5341143E8F5D9D28A7DB1905F70622521
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity
Size 524B
SHA256 5615dfbc86159dbf76020ff5ac29c66041ebce2d14e6a4ff46275b1371e6a1f6
MD5 ac9c9f4594a206014a61276735f84f8b
SHA1 77cc1f99f3f0e1668b5d4155acb6de1e9540a744
SHA512 c5993ffb6ba2f711b3c016ad47d623635f6f1dd49183582dd017462bf528e3fe9ba4be32ad7f6d3bdcc2bad7a396b8dcb86364588d2db3c2d9f8425512dd4b17
TLSH
T18CF09ED785FEB85790BC857B0D02B54E1E75F0351A41B8F4D6928A7C70408F74A23531
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity
Size 524B
SHA256 7870d36a872539fed3c90fc4814106ac5f16463371337aa2396054677c609ac0
MD5 73d37d5f3bd3bac1d527bc26a538e9af
SHA1 03ab86561972583ad2796f786d0f4815fc224969
SHA512 bf06d9fbd70bbd8c102cd45df90f264ce47955b5c0ca9eed04235f9da4641ac39fedfc5d00edbeca595afaa1d274d155634c6cc7ffc154790af1c6440763475d
TLSH
T1D5F09EDB46BEB81B607C46BB1D05F4061A3AE0301543FCF8DA82CA7CB2918F78617421
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5bbfa3.TMP

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Network\TransportSecurity~RFe5bbfa3.TMP
Size 188B
SHA256 1f2d57d85bea0aec80da62c3211e893f8826b222898be6e5c7428f8a9818277b
MD5 c5817d4e1ff88815136a8f74c57ab7aa
SHA1 19913617653355d59ff85f6943b90cf19b1efa19
SHA512 5cada740a201c2841c2e4ea87a1f1828271fa2f5973dfa41cf49168d4db58e660a22542929b8381e8338c57a63055ab3241c58894ac225d1d9302f9a9b639e0c
TLSH
T11DC012A241B9F476507816255984FD45AF3AA1350141A5EC95528579D05056B9123452
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Preferences
Size 7KB
SHA256 7d94c383efe68d43e26c08be98f070c35f5b335f11d434475b1e396f7af53848
MD5 113a012ab466c4380e0f44169b042aa2
SHA1 8567444821cf9e4c1bb330214f9eabbd4ced8f1f
SHA512 8b6ae628ae06ceb54def783c0d64a856571402d73c0b593a745fa96be9f3201dfa6e95dc13a95a03752d486694d35e650bd71a454d840e685c8a14830bea38d8
SSDEEP 192:r5uKWCefyXV++wpdpyRk4PM6yIsnDjwgQ:rQKWoX/wHGkVQ
TLSH
T1C4F1830A6C18AA7F4CC6E719FD267B43E6F5143136913D48E7F88A1C28DB6DC2227517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Preferences
Size 8KB
SHA256 d5efcd8c9e73be45bd0b52168448c7c92657c6efefa36036ebee307bad6e0508
MD5 24f7b5ad1bbd8843550c2cee8f6a9da5
SHA1 54247e2121698844b4e2de7a91a9324075f689d0
SHA512 2a0b2df88f557276ac661ba331154b99389b0593f9b33645ec1b83b891825012abe66b2d00ef7ff2bb9f45865b86c9233f0338d2b61771e0e4043b819f5566c3
SSDEEP 192:r5uKWCefyXV++UC9pdpyR6Edyk6PM6yIsnDjwgQ:rQKWoX/UqHG6/kTQ
TLSH
T1F602840A5828AA7F4CDAD719FD267B43E2F5143136D07D48E7F88A1C28DB6DC2227507
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Preferences
Size 8KB
SHA256 0eafd542eb5ba1baaf14946981b7789ceeae21c4a81cb59d887a8342567e2f99
MD5 f8f913b3f22889f5740264c71e0ea89c
SHA1 990d5b5e34083b2793b4150cc4dc1bcd36e88b59
SHA512 645461d4c56c5bcd50d7b9af56773381c08192af4a518130aa91a03ee01b71ca820bb263b9087c1706457eff1c86290ebfb805f92a8e0ef79e83a8f55f20e33c
SSDEEP 192:r5uKWCefyXV++U9TKQpdpyR6EXXEPbM6yIsnDjwgQ:rQKWoX/U57HG6EESQ
TLSH
T17A02840A5868AA7F4CD6D719FE26BB47E2F5143136D07D48E7F88A1C28DB6DC2223507
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5b5dcc.TMP

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Preferences~RFe5b5dcc.TMP
Size 7KB
SHA256 073c3511d14eae89094465a00c81f67502df9e85cba4bc39ad794e47370752a8
MD5 ca9682ec92ee2cc853426df219c7ec9f
SHA1 8a44c0e37a8561ea8f287d59c77decd5b06556d9
SHA512 12f39da776685515844b7fcb09c005ca658284e04d2b415f11bcd050bd499922009c88cf17007360f08077b99b35a4996d50b4b9f1dd1e0247f53c3758f87ab6
SSDEEP 192:r5uKWnefyXV++wpdpyRk4PM6yIsnDjwgQ:rQKWLX/wHGkVQ
TLSH
T10DF1830A6C18AA7F4CC6E719FD267B43E6F5143136913D48E7F88A1C28DB6DC2227517
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Default\shared_proto_db\metadata\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Local State
Size 2KB
SHA256 3ca78443f66239ead4b41626e3150a2111b896afdded977eaba4861a857fc206
MD5 4bd3b84f9006cf7b7228a3e8f0061d53
SHA1 1a37e7e62101d19ce0cac2b0b9fe9be331ccfe16
SHA512 fec0bda1046d0f2b0a69541febd551652cbc0962940936dfb57f51a83066ce9d3b958c7c1f6d24c4f20dec732aaf7edd760957969cf9e80ba05a8036b8d347d9
TLSH
T10B51B833A4A8CD7799B7C851B9033B43CAB52166F750AB94F5EE0B0C02EB8DC2302813
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Local State
Size 2KB
SHA256 7c9d47f3c6ab0c9eb5c8858592eede54934755ee8f14b558f7313cdf26264812
MD5 36d82db62ca502eaf221a0febc4dc814
SHA1 122c760b10194ad0f4c3e662ed22be31780d9e24
SHA512 93050c03eab00c50245ebb876e108e0bb9b164f639a37a683263e714aa3b3525951d3a71ba147307641e20464a4ae3bf2f35da47e5ea2c2d75b1094d5fa2c4fe
TLSH
T1D7519832A4A8CD7399B7D851B9033B43CBB52166F750AB94F5ED4B0C02EB99C2312813
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Local State
Size 2KB
SHA256 2825eef2678b0ced9bbcc5537c07200d04a2bd6f45625e0f685a1d8d351929b9
MD5 d9d724f8c4ffcb704cb6520277ba22f1
SHA1 4c25b337f18f298dbd0245471e3571f524a0daa0
SHA512 ae139c3071a07afac54b4c20b90cf439af47a75d33379fc684c210c5b5639ac4868d9767dd4d1ef8bf3077f5bb22214f62f4cb547c6428c6c8d5031e33c62539
TLSH
T160519832A4A8CD7399B7D851B9033B43CBB52166F7509B94F5ED4B0C02EF99C2312813
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Local State
Size 1KB
SHA256 a14aff70924424028d28b9e85a9d5de1bf5a09404b5f022d65ca8e3539f43628
MD5 4a70e6e5524b1bca94c5153af05cffc1
SHA1 e31ec93a11ca6131d365eb5d0b4b1e4252b39b92
SHA512 ca8e9eb93a4d67a426025b09999d89686c076d4a64979f639c1d0a93a63398dd4a30152851b0aca25dc5c745ada02b6b40284bf4a0abfc27b2f49f4b6566ac42
TLSH
T19F113233E0A4AA25BD964D2577437B430E32117991108F48B9DE574513E788D752BC33
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe5b0a3d.TMP

Path C:\Users\Admin\AppData\Local\Steam\htmlcache\Local State~RFe5b0a3d.TMP
Size 890B
SHA256 4d399046df0abea8d8486dc3052fae6015f9bfbaebbcfa34accaf82388b9522e
MD5 1710eb70db8959ea90626fad89b43aef
SHA1 febed42384a3e70186b1d2f126660dc4b8deb4d2
SHA512 7279bc48fcd9a3184417124c0392566cacd9a9819d870f1098a8faef9a5b76484090aee50b537094d3cadccc1b8165dd8d8bd9d0d37a0b09b1c52a9a17b90f95
TLSH
T15111EF77E4A45E24BEAA49257B037B430D3211BAC2108B58BAEE638513EA85D7526C33
MD5 SHA1 SHA512 TLSH

Submit Download

plugin.zip

Path C:\Users\Admin\AppData\Local\Temp\luatools-plugin-73f290fa069445c2aa65d7168ff8ce2c\plugin.zip
Size 144KB
SHA256 b872baa364562cc57421819f46eaede64c18131cdb0acccee42b460dcba367bb
MD5 de2bd0a0a9c163a02d911cb201b36139
SHA1 488ad1c85f31f5155323bbcd7a1118751099791f
SHA512 0e473bff80e2b9f540aa3414401ecfbd65ead006c0b49933ebcb961fe525147c8993c71bdab600d4267dc2dcb079009dc5f91fe6fef0d8e43d8c5488f69e7010
SSDEEP 3072:TXlRyDe9wBFmY850RZEQvDhVjw4tEglnBn1nICbfVL763Yg5xTBrBY9WfG3:TlRz9eo750RZEQv1P5B1nICbfJ76ZbVk
TLSH
T1F6E3238DA716A5A1CEFD383152E58C12420A76BCE1529097DB68702454F187E1FC3FBF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

winmm.dll

Path C:\Users\Admin\AppData\Local\Temp\luatools-plugin-9f1945ff981448bc8a47a77d7bea8023\winmm.dll
Size 262KB
SHA256 dc1594774d3003f7c82fbcdaac4cc9bbc81d7ee2ab82dd5f47c4f04cc3bd8236
MD5 491f287324bbaff030de837f6f63234c
SHA1 9784fb8c249548002256cfd9362a77139ce06103
SHA512 8874a15bb1157a73a4773af7c560eb182877d2790133f7ed575d63b8bb6d61a491cb3d7f9c52d3912d4b4e1f0d19ff8f4bcc6ce232bfc11c19206ce338f410b8
SSDEEP 3072:ZkaAbBKC2yvKCx03jxPTgM91FGZt1Pz+FE71m9+RmcH+m9A0HmMx4bRlAYC+w:ZkaeBKov309P0eGZXz8EpjkctKMPj+
TLSH
T162446E2176514CBDE85BC03C819746A667F278C60B20DAFF0694037D2E1BBE6AA3D764
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsf4F9F.tmp\modern-wizard.bmp
Size 150KB
SHA256 16e0edc9f47e6e95a9bcad15adbdc46be774fbcd045dd526fc16fc38fdc8d49b
MD5 3614a4be6b610f1daf6c801574f161fe
SHA1 6edee98c0084a94caa1fe0124b4c19f42b4e7de6
SHA512 06e0eff28dfd9a428b31147b242f989ce3e92474a3f391ba62ac8d0d05f1a48f4cf82fd27171658acbd667eaffb94cb4e1baf17040dc3b6e8b27f39b843ca281
SSDEEP 48:ZQEM+jeAwtwVUoYxq+HQiNE/7o+f3cbqBtpozK8lHl/GGKOFHNPf33zFYsvwL:ZkWeftwV1enu/7ozCeu8RGGvP/jFYsv
TLSH
T1F8E3E9AEB933693ECD9911B41164A7FD8B306C5C7A40666E411FF8DC0FF31CA3569852
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsf4F9F.tmp\nsDialogs.dll
Size 20KB
SHA256 91a484dc79be64dd11bf5acb62c893e57505fcd8809483aa92b04f10d81f9de0
MD5 4e5bc4458afa770636f2806ee0a1e999
SHA1 76dcc64af867526f776ab9225e7f4fe076487765
SHA512 b6f529073a943bddbcb30a57d62216c78fcc9a09424b51ac0824ebfb9cac6cae4211bda26522d6923bd228f244ed8c41656c38284c71867f65d425727dd70162
SSDEEP 384:ABSzm+t18pZ0WAg0RhIFgnGNyQH38E9VF6IYinAM+oZfNRoZk:NupZ/Ag0/T8MEpYinAMxZ7oW
TLSH
T11EA26CA385542C33CE874E3635D8653EDBB9731664808CC25326C24197A439B7FB83AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nsf4F9F.tmp\nsExec.dll
Size 17KB
SHA256 3e2399ae5ce16dd69f7e2c71d928cf54a1024afced8155f1fd663a3e123d9226
MD5 2095af18c696968208315d4328a2b7fe
SHA1 b1b0e70c03724b2941e92c5098cc1fc0f2b51568
SHA512 60105dfb1cd60b4048bd7b367969f36ed6bd29f92488ba8cfa862e31942fd529cbc58e8b0c738d91d8bef07c5902ce334e36c66eae1bfe104b44a159b5615ae5
SSDEEP 384:PbGgezxEqoyGgmkNFNyQH38E9VF6IYinAM+oZhc3iMy8:T31yGLkbMEpYinAMxZAy8
TLSH
T1DE826CB749802C66CD4F8D7039D4A83A5BB9BA531BE0C1D2535BC2518B917C2FFE82A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsProcess.dll

Path C:\Users\Admin\AppData\Local\Temp\nsf4F9F.tmp\nsProcess.dll
Size 15KB
SHA256 bb6ce83ddaad4f530a66a1048fac868dfc3b86f5e7b8e240d84d1633e385aee8
MD5 08072dc900ca0626e8c079b2c5bcfcf3
SHA1 35f2bfa0b1b2a65b9475fb91af31f7b02aee4e37
SHA512 8981da7f225eb78c414e9fb3c63af0c4daae4a78b4f3033df11cce43c3a22fdbf3853425fe3024f68c73d57ffb128cba4d0db63eda1402212d1c7e0ac022353c
SSDEEP 192:WUl64IGsjDNyQDbnPvy2sE9jBF6IYiYF8pA5K+oZ7W76OCwy9GUe:5ZsNyQH38E9VF6IYinAM+oZYsBe
TLSH
T1E0726BB38A582C21DE4B4D3171D4853AAEB9AA571AC0C1D3634BC1518BC1BC7BBF82F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

velopack_LuaTools.log

Path C:\Users\Admin\AppData\Local\velopack\velopack_LuaTools.log
Size 871B
SHA256 df8566593ae64fdc967230eb27e14395dcf7f30630913dfd49fa897fe3b1dc93
MD5 f57bd3a36217a9fb08f9afe31c01db21
SHA1 cebbcb999d00846cd0671517350c2a569358b8c5
SHA512 67de9f72592b63e4f9c68307eab02617191bd788e637562e67beffa35c1c5797fba9797d5411b5ca7e6612495a9794d2a178049996ba19004cb67622047a88bf
TLSH
T1F211EC0CA762719B7456260765F2F6A006E92F173F83B1C71F118214E14BA6C2BC6316
MD5 SHA1 SHA512 TLSH

Submit Download

2183900.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\2183900.jpg
Size 51KB
SHA256 a51adee3dc2155f8f3b111c6dd978c08cd781e7aa085ea5772fb96f642a02488
MD5 23e23cb0252f5d81e9e0611fba8f30b9
SHA1 de9fba56bd810ff7cf367a3d677ae7c6df4b3dac
SHA512 78bec7ec6d6b46552fefafdf5c6a82d5760e777344ba80eab92cfeb8f81f83c6e6d3ca39c0d2bbe023b586e714cd78dc57b7be5f3c6a51110d5f34e06e53153f
SSDEEP 768:1sUcXbebOEmIM/sG/nzJcoNumeTVesEmZFFNLE1zdVO9gaGfJro3F0TrH/4KuIgc:1sUcyOECEccosmeTVeslFUjw96h0SLgc
TLSH
T1723301495154208184AD2B3F691BC67483DDFF33CAC190A766EC5FEB81987900DCAFAB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

main.lua

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\backend\main.lua
Size 6KB
SHA256 ccbeaab3738ed1a9f30d6ecff19195443653b2e376d9a085426231f76ffd7cfb
MD5 de3203b3ea41ed3c8077d140b272b437
SHA1 92c5a91f14c79b6d5387014e5043a34f28c688c4
SHA512 c3fc36654d20f8cb102572448e82de7f5df1f5793903a674f54842318c6698833fb481d90d104c97dcee36230844f80a37fa842f16c7ce1d908175c4c2d65550
SSDEEP 192:+mpxyHvPe+gHU1rsCwBGAnMO6m1QmgsTjLnuBWM8G:PpxyqHFXTj6BWRG
TLSH
T13EE13EBBAA6769507703CB9DEE4B17A1F195B953310800B0B46C30C45FEC27C95A7ABD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

paths.lua

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\backend\paths.lua
Size 1KB
SHA256 8dd4434656a7d69c127964ce03b2f60d2d9954afc156abe022c0ce7f8ca7db63
MD5 2e74dc708e066c0ebeb2b55059cf59b8
SHA1 a33c13925294254a857966a9ab900ef15072036a
SHA512 6dd9285b37bdfa6dbbbcb581ee0c12af9ca08bde756d8820dcc5a1a7bcbfb4713323a3d882f51dad505c30205c738be614acca9914de5c2e5d3f1eb3c0a90bf6
TLSH
T17221C09775CB58628727AF047A278998F0ACEBA7134C9124782C45807F2157DC3F67BC
MD5 SHA1 SHA512 TLSH

Submit Download

plugin_logger.lua

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\backend\plugin_logger.lua
Size 326B
SHA256 d5a9899d25a9d4f29204e0cb8d06052d772a1de30508a7eb90db34b6ab6fbc67
MD5 e845e4b48920d2dfb9f399ebf135f5cc
SHA1 f584c7c400581e655ae25734337538b29c1391f3
SHA512 9b5eb00f9f88b75faf869c1e166307ab3891eb3323727a6052bd2173ab795c39a55df4ee678e183e8a72f5bf59b7e4256483151c7d2a866751ccbf9356b6c5b8
TLSH
T1BEE0EC4E2FCF3227054E0C61E4970B09B092E5E90268C2F2F0D5B59D7A514F86BBBC6C
MD5 SHA1 SHA512 TLSH

Submit Download

steam_utils.lua

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\backend\steam_utils.lua
Size 3KB
SHA256 119d6cdc6c4313854e0851db865084202ac02545544ebf4501a9b0d6b3328b50
MD5 ccf431e863f85cbb134a782fa3640e8d
SHA1 88c1563d95b6f477599b05cd19c53542705d9b4b
SHA512 a7bde56d343240cb950cabd42fff5c074081fc07a2e0816de521f3da8ad6eb3e6e9276abd2ec8d221bc7c42eb03689c2e0ea611f63ea953b008fe84e0e07c588
TLSH
T1D471D06A554A66547AF1D798CE0B1C5BF14284E3431A0030BAFD09C53FB12BC95F6BBE
MD5 SHA1 SHA512 TLSH

Submit Download

plugin.json

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\plugin.json
Size 311B
SHA256 74978416f0d44625df2305a7eb3f4d1525ad3d8285e017e012eed2d01d0c6dea
MD5 75b286f30e281afe69758933635d969d
SHA1 f88fbdb6e99c7d51b926cf59048b1687489910d8
SHA512 9802eb0932454d264e85e1212165ed110c4bff7eebccae7a30e55b4750ce149d206d5ec09180f58e2e4645a576364c5a4ae6735f78549a07e1fca59a0e7203a5
TLSH
T137E07DB8C806043304FB86E46C7C91E7D5600D4B6054F6298B13641846DC87324B631C
MD5 SHA1 SHA512 TLSH

Submit Download

luatools-icon.png

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\public\luatools-icon.png
Size 4KB
SHA256 903d6d45790bff0e38b195cbb660e2019d3894de059e3d7431e77a6fc01f2edd
MD5 62d5a684b7ee88822cb61cd90c7f30c3
SHA1 c40b9e218fee194accd275672fd0ee412645d030
SHA512 a6e0012c40ea5cb76be2a45b5d69a4cfc6651f48a71ab29e4143c4654a3fc63a13f8d35485b0b8ba8313fb7fc1aa1ed98aa825e6baee67eea8fa6ad21c0f3346
SSDEEP 96:8llcHitlIxv9vk7C1+I4wWHLihk/xiS72kRCEzeJMy5GIh96764uE:XIIHUCD4wakS7bx3I55E
TLSH
T10E918E88A41044A7000586A9359BCE074A67E3E5C1965F1CEE9F920EDB30C773FA5A96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

luatools.js

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\public\luatools.js
Size 573KB
SHA256 abaa848120a48cd63aa7b5c82c476d6a98080a910f66ad7253c50b8b2e275795
MD5 034ca6d16db34a338b28a91ddade489d
SHA1 ec5389b15b3d2a0575c770504f54379cc171401b
SHA512 037a7ed02bd042edee865190f633d515c689198346feabd4fb899544b635c8d0cea1ea0664d008ee5879e16dda27f0a13c2987e77bcc087186978b256f05cdca
SSDEEP 6144:ua51VixeLzffjObJ4E4aTongC07vnBw2PyHn:ua514bJ4E4gvun
TLSH
T1E1C4E71E6D42C43FD4C20E1B9ABE3F223A9845172311D5BC36FED5092F8B1B895E29E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

steamdb-webkit.css

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\public\steamdb-webkit.css
Size 76B
SHA256 ae4732278d46a11685b800045903a002526694192d9b06b68a1c6f441ce3176d
MD5 7bae87e337e062df695ee3539d9ab79d
SHA1 fdc5ffb774f9be2502d9b672e71402bb9c07ea5a
SHA512 592d3819743b7d657703e39ac140688efe9377c4ed6f20deabd021c1a40a2cd633f5defd46e4d21decad1ef3472e264a932e27f7625f13506e9cb051652e03ac
TLSH
T104A022E8B88020800F000ECB8228330200B0AE3F83330B0020A8C222220C8AC83BF0F0
MD5 SHA1 SHA512 TLSH

Submit Download

catppuccin.css

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\public\themes\catppuccin.css
Size 1KB
SHA256 04c64261fb4960e19a5703837c1773ae712c7b803744fc810b0b2aa88c1ba966
MD5 f95115682128a1fc9623fa94f31afc93
SHA1 d88a0f2b5625543c06ac5f5c938982b79af6259e
SHA512 45a83d7bc815cbdb50b1be4710ac70ab0ddcef4342b44aa03681e7b0f8b6da530a5d971c3b26abb78c0e2b92f377f6d78077604aab30cbd19200f607a8c78880
TLSH
T1AE31467AD1C46876723E90EB37D2D91BDFB6148796087B1837F136C40F3A185D4E8506
MD5 SHA1 SHA512 TLSH

Submit Download

christmas.css

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\public\themes\christmas.css
Size 1KB
SHA256 d195dc3db9c51844aa10a2faa83114f4c122fb19effe618f205a9f2565cbd9ec
MD5 4bbfb7e704d6efa3e0d7e01df91b0cf9
SHA1 0899bf9bb7d63ae01b68aa7b60ec99468c838dac
SHA512 4811d7bb9032901e723677f4a26b2143cadac3dba1de936197ddefc5325f3b52648e225b419b6fc61f8cf956e950428027bcec437e3a536a306f9aa77350aa30
TLSH
T11B3169A6D0828076B33984E737C6CD2FDFB7594795263B5937D222940F7B048C4E6A01
MD5 SHA1 SHA512 TLSH

Submit Download

dark.css

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\public\themes\dark.css
Size 1KB
SHA256 b48524b636823a5ea6346930b42b92b018ffef6c17b8245566a005f9483c6854
MD5 4702210fc69e58cadf9842351c276884
SHA1 a5fa165e0b5f434eeec710bd6a31b7031a884206
SHA512 9b5429a3c6168909f7f29da15741c76c3c06b714abc44a4563d31f2f7f5c4e70fdb4714f8c889d977b7523d4a59c63655953ec919347afdd67bfd850274db0bd
TLSH
T14D314499D18F1877323999E736C1C9A7DFB25457C92DFB683BE122C40F3A048D4E4A01
MD5 SHA1 SHA512 TLSH

Submit Download

dracula.css

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\public\themes\dracula.css
Size 1KB
SHA256 f918857bb2b86083e97515fa037383f4dd2d6d60a5f9bf93c4af298d1b8aa430
MD5 1889f93688a841957c5dc1aae6e041c1
SHA1 1a0f70a70251a57131b0dfdf082a1a6ad10824bd
SHA512 2174dc1381ba3dfde562e0b9fde81ca5e969c2940739ed159b68f9d656fe3fe52e830a38fafe607016dd0ccdd8cfa23c83d119b6803aa05cfbb12618b1f93763
TLSH
T11331432BD08202A5223A88EBB7C6D51FEF766653851DBB2C73D336D41F3A48884F4845
MD5 SHA1 SHA512 TLSH

Submit Download

forest.css

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\public\themes\forest.css
Size 1KB
SHA256 b07f490460388b4732525ec2886d766b8e756fd24aa403fd9f646cdf1be22a73
MD5 d88babca1c7674ee7383167607bca437
SHA1 00cc436f6933c5657901b4b1fbf67379fe018c8c
SHA512 0c1161a5c65a2668399cdbcc2b9891ed18fc1b2ecf1dadb1cd8a144a73b36b97fba93203c6948af380a53834c14e07a5bc9b1738ea6eff7970b6e0484e566f5f
TLSH
T1F03146AAD18544F1633945FB72C2C92BDFBE2453CA1D776977D036D41F7A484C4E0905
MD5 SHA1 SHA512 TLSH

Submit Download

light.css

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\public\themes\light.css
Size 1KB
SHA256 8246034d1c6fa09133b8d2f210b0d0b2876886b8f497a97f7bd1265bd8d2484b
MD5 09a670d816d231058e63f6930ffc57ab
SHA1 191a7e89a1d724bd1dd778a822fbf961006ec0b0
SHA512 65c3324ecb6e92049f3bcd62f747796b2bd8adcc2c270653315a745c7fd84be79902e4aadf2f05400f3ff4632fcc92ac0b7d805fc02fb24074594a9e03862ec8
TLSH
T12A3164A5D4C10571333F50E7ABC6A95BEF752A53CA097B2C37DAB2D00F3A0A9D4E5806
MD5 SHA1 SHA512 TLSH

Submit Download

ocean.css

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\public\themes\ocean.css
Size 1KB
SHA256 d73b8c885c25a2ac9a5d736c86676fcac5a50acc425ac46e49ef131657f517a6
MD5 868df00f2af3afffc64fa985799961bc
SHA1 698f0f3eaf2b4d59286b6aac1fcb75167cdb214c
SHA512 410d3ab1c847c5a0d24e737e095e2ef535940b11da180e5b01c5b24e6b95fb4fccfbbd6942b6c8c602807e16bf02b8d2af6b0682b283fd7b96d5935648be0275
TLSH
T136316665E28854B2323EA4F773C2DA27DF712956C91EBB1877D032940F7A044C8F5986
MD5 SHA1 SHA512 TLSH

Submit Download

original.css

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\public\themes\original.css
Size 1KB
SHA256 85f3be631c6899f22e56bd90072f56b2bfe84bd8564686c4edcd195f2ddd8342
MD5 1264ae0017666b3198c1ebc12028281e
SHA1 80b485f5df15a1fb39ca5e4460d13853c9a92fac
SHA512 cb7e1001db607be9ef5f49f43758e1d1fc3d45e0c5dd91c34201b9c37d14d9f36ff2012d2e521f30191398e60e01af5cfd96d7df7ada9d4c741da4b7f2ecb6b3
TLSH
T1C331682AD4C08471723EB4EB23C29517FFB51947850CF7187BD1B2D42F76198D0E0A45
MD5 SHA1 SHA512 TLSH

Submit Download

purple.css

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\public\themes\purple.css
Size 1KB
SHA256 a321a9ddd39aff566364611201ee833951ac73f87ddf829a42e4acfaf89e7988
MD5 e97ea41881cac11b9cb7cf375ffe60e7
SHA1 39d939be99b5a6a4274918a8e579a61d3305e129
SHA512 91913938fc53c02ad1c7ee6e267c8532c01aff7a208f770a501ef86b4a437e159bf2fa1d08e82a715cff19af19b813ca418929e406c964f752060c88832849db
TLSH
T1CB318B79E0C201B6327941FB77C1C567EF76545BCA297BA877D032E50F3A089C4E5A01
MD5 SHA1 SHA512 TLSH

Submit Download

rosepine.css

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\public\themes\rosepine.css
Size 1KB
SHA256 7849b6cf96d38457973e3d62169322958a7b2c072cb99b9e2db33b35a7ea7127
MD5 ae2d28ca34bd096b1bc50a07686ab3a4
SHA1 f55cc66cd225d9b090ba229944bb12fbe0e02f4a
SHA512 b69f3afb162737ed572b9620c37659be29111dfd6f4a2d5b62d00bd29861f17996cea282309d5d4f59d1f754168c2c06c8aae71774bcf43d0ad3e8a1fd81ef91
TLSH
T11B313495D8865671327E41F7BBC6891FEFA46946C62DB75C37E123C80F3619C88F4405
MD5 SHA1 SHA512 TLSH

Submit Download

space.css

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\public\themes\space.css
Size 1KB
SHA256 bf475824b22475a47998d8c9472375ca14d4838f92c5ec1fc63b91a42659dd2e
MD5 bd5cbdf96e22bba3900ea2419c51b0a6
SHA1 f728f90ae3164a5c49386a5b9da1b49e70e7243b
SHA512 23bebcaef05205bc2783f5fd692dec3fc0b4a5b851e98d2b3af4b29e489519d46dad0499b6a5600de74cfe39ef97140a849aa95adb35e3f752c7e82a6ae8703f
TLSH
T16F313696E0C104717B39A0AB63C6A52BEF755547855C7B5833E136C81FB609CE8E1806
MD5 SHA1 SHA512 TLSH

Submit Download

themes.json

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\plugin\public\themes\themes.json
Size 8KB
SHA256 a488936af42bdf2348bf23f60c31504fd44faa8d38c5b952ad925b83f88c2398
MD5 9c4b8a991fcd0f5290d3f71d068b5f1e
SHA1 b74eed5eecf841754b5f06964380e79446d49e42
SHA512 66edb678bf7ddab604e69b8e6f736a6926a5b09fb925ee80d8e94e866a560957950a4b8ed5505f8d168b45c084525f12512e1fc25d22aa5463aa4079ff9a69e6
SSDEEP 192:v0aUsgJ+hUK2MbxUxqQC+qUL3W5v4yUWHkPDhGU1+M+s/UPAVk1/CRUNLPlWhkLU:rhNbDUqF6m4ynEPcYN+BCRULl3hEke2m
TLSH
T15602287FDDABACA3A33DD786A8588D17F60A9B0F9A0CDA0BB13025CF5F315840199740
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

d356105fac5527ef.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms
Size 6KB
SHA256 ddb8b1e5f150d9bfc740026e67ffcb4e54d28e5a4d55655ca88232330653d078
MD5 f0dcb5c37a621cbbade45274a99b3fec
SHA1 7e5a818cf39f9960eee5dcd1a4c5d20529bfd02e
SHA512 dce979f9f3f7c5c497c8bc76dc8d61c1cfad86e31404294033b086bd277ebb2e449d3470602baa35f5a886c43550b79e9071f6808be7cf6a2f4d717bd9cfd534
SSDEEP 96:PYF3o6FqGoPFqXo8FHoBFqRxoKvFCd1ox+fVFaozFBs:Pio2o+oGoaoKWo2qoPs
TLSH
T195E1C9014BEB5AA3E2B38D79483B47021F3AFE12DB0F590E50905A6D48F66016D2DAB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d356105fac5527ef.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms
Size 11KB
SHA256 5af3b210f736a11f2d6f96bec936d31a12a098ca79feecf501b606fc2e3c2669
MD5 a10ed92b17a3ff57d310e915cc7cb1ea
SHA1 377d541c0e267e675d44108f7b1a898e346b7862
SHA512 fc6dfcf6e7d25cf13cc23f6f7bf9ba112d07035dc972c7e5f7ab4e68dfee3002b8e7b9621956fefdce3e4256d4c67eb85b90f4e856eecc197d97d81842f21a05
SSDEEP 96:Ic2FJctFlqtFLq3FRBgq5FRB4YFn6FqKPFqH8FXBFqRJKvFCd9x+fVFOzFBs:IcycdqTqeqkWaiKOK62+Ps
TLSH
T1D632FF014BDB1B93E2F39A744C7B17021F3ABE128B0F590F54815A6949F6B01AD2DBB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d356105fac5527ef.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms
Size 11KB
SHA256 37800167857d4163262b5c07179a8d76dae43fd4abac9feb53677f0199f5e5ef
MD5 4f960c31a4e42135cdcc0457519d1bf9
SHA1 5d5a385cbea04e7a47693dc5bce7c1ff262dabc5
SHA512 2a6fb6e7dfe2f345e0e163c6ebd2d476eadb8d5736986480d0a90f7e0216ba9de0c7196ae886de2fb0f37dd1d14f3ee1c966b1b49a7db85a758a2f4121594b36
SSDEEP 96:ic2FJctFlqtFLq3FRBgq5FRB4YFn6FqKPFqH8FXBFqRJKvFCd9x+fVFOzFBs:icycdqTqeqkWaiKOK62+Ps
TLSH
T1A432FF014BDB1B93E2F39A744C7B13021F3ABE128B0F590F54815A6949F6B01AD2DBB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d356105fac5527ef.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\d356105fac5527ef.customDestinations-ms
Size 11KB
SHA256 5c4a927bbe0e1c76f404afb3c6f1d6279675487ae400e82813b1ebe84b2aae4f
MD5 e667901aeab7e25494d0626f08a40567
SHA1 590a0ff8f7b97cec64112cd1e09cbfcab2fca5cd
SHA512 b2ad7394bee61484e1a35d0057a230c463f9d90d50ad745b9d92d2f777b7e2ca8713e6d65c869fbf3f723d0f9d597b1be65a015512a678cd1e4ba21b1b579156
SSDEEP 96:qnc2F7ctF/qtF1q3FRB+q5FRBmYFZ6FqAPFq58FpBFqR7KvFCdHx+fVFMzFBs:Sc4cnqNq8q6EwIAMKQ2cPs
TLSH
T1CD32FE014BEB1BD3E2F39A744D7B17021F3ABE028B0E590F5490996949F67026D2DBB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SteamSetup.exe:Zone.Identifier

Path C:\Users\Admin\Downloads\SteamSetup.exe:Zone.Identifier
Size 71B
SHA256 435d3ec89839125cf974c8e1a15fe188acaa1e76239758145cf74a726680421c
MD5 75893359e269074f05562f12c3e0d376
SHA1 e5d7ed64495dada6a0b41742692352087a74a951
SHA512 13e5220d5f8eaf32f30bf78c75665c0548774edf6a5a56086721586fa2ba5513a7eb0c151e6ca18dd61830952c1a38e25ca37c6c71136b29b9dbb190ad1d479d
TLSH
T1ECA022A30808083C0F0023F820AEC08CB08F22088C2C02C0FC0082EBAC8002882B2A0B
MD5 SHA1 SHA512 TLSH

Submit Download

Unconfirmed 834145.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 834145.crdownload
Size 2.3MB
SHA256 7d3654531c32d941b8cae81c4137fc542172bfa9635f169cb392f245a0a12bcb
MD5 1b54b70beef8eb240db31718e8f7eb5d
SHA1 da5995070737ec655824c92622333c489eb6bce4
SHA512 fda935694d0652dab3f1017faaf95781a300b420739e0f9d46b53ce07d592a4cfa536524989e2fc9f83602d315259817638a89c4e27da709aada5d1360b717eb
SSDEEP 49152:UDP/q9MIX/crfcNVBaXp1m0zyVCMwBHgFzoZhRP8:kC9MI8Hm0GCjgFc3Rk
TLSH
T11FB533116FB8D076DAE20F71E0FA86F79536FC15962A4F4B3A807B2F7835110A5047B9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1868-96-0x00000227A1CB0000-0x00000227A218D000-memory.dmp

Download

memory/1972-14024-0x00007FF99ACA0000-0x00007FF99ACA1000-memory.dmp

Download

memory/1972-14025-0x00007FF999CA0000-0x00007FF999CA1000-memory.dmp

Download

memory/3460-7373-0x0000000000D80000-0x0000000001232000-memory.dmp

Download

memory/4184-15413-0x0000022AB52E0000-0x0000022AB574C000-memory.dmp

Download

memory/4932-14411-0x0000029905F90000-0x00000299063FC000-memory.dmp

Download

memory/5712-206-0x000002403A680000-0x000002403AB5D000-memory.dmp

Download

memory/5712-174-0x000002403A680000-0x000002403AB5D000-memory.dmp

Download

memory/5712-223-0x000002403A680000-0x000002403AB5D000-memory.dmp

Download

memory/5712-224-0x000002403A680000-0x000002403AB5D000-memory.dmp

Download

memory/5712-138-0x000002403A680000-0x000002403AB5D000-memory.dmp

Download

memory/5712-139-0x000002403A680000-0x000002403AB5D000-memory.dmp

Download

memory/7872-15170-0x000001DC60190000-0x000001DC605FC000-memory.dmp

Download

memory/8432-15186-0x00000133F8CC0000-0x00000133F9EF3000-memory.dmp

Download

memory/8432-14433-0x00000133F8CC0000-0x00000133F9EF3000-memory.dmp

Download

memory/8432-16546-0x00000133F8CC0000-0x00000133F9EF3000-memory.dmp

Download

memory/8432-16235-0x00000133F8CC0000-0x00000133F9EF3000-memory.dmp

Download

memory/8432-15460-0x00000133F8CC0000-0x00000133F9EF3000-memory.dmp

Download

memory/8432-16716-0x00000133F8CC0000-0x00000133F9EF3000-memory.dmp

Download

memory/8432-14911-0x00000133F8CC0000-0x00000133F9EF3000-memory.dmp

Download

memory/8432-14477-0x00000133F8CC0000-0x00000133F9EF3000-memory.dmp

Download

memory/8432-14346-0x00000133F8CC0000-0x00000133F9EF3000-memory.dmp

Download

memory/8432-14414-0x00000133F8CC0000-0x00000133F9EF3000-memory.dmp

Download

memory/8432-15332-0x00000133F8CC0000-0x00000133F9EF3000-memory.dmp

Download

memory/8528-14347-0x00000234BB690000-0x00000234BBAFC000-memory.dmp

Download

memory/8528-16943-0x00000234BB690000-0x00000234BBAFC000-memory.dmp

Download

memory/10628-16535-0x000001A5D0C90000-0x000001A5D10FC000-memory.dmp

Download

memory/15156-13966-0x00000000005D0000-0x0000000000AD9000-memory.dmp

Download

memory/19164-14856-0x0000026EA1810000-0x0000026EA1C7C000-memory.dmp

Download