81f30c1bb33c7881cd4e6a0dd835b7f186d928407dc56e50d1959324e2396772

Analysis

geolocation tags

eueuropefrfrance
user interaction
yes
max time kernel
1079s
max time network
1081s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
01/08/2026, 06:37

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
amm.exe
Size 136.6MB
Sample260801-hdt3vsfb73
SHA256 81f30c1bb33c7881cd4e6a0dd835b7f186d928407dc56e50d1959324e2396772
MD5 f939bf76e4a913ac43e7ad15139a8e04
SHA1 7729d085b560ff0931826c39cf8dbc22f42f23a4
SHA512 0a383d266e690ceb2abd575427522790f7e17f624ed16ff448d19750a9aba55f6e44d1982d2bb3026e4bdb02c5d5894da84cb474b5c58f643457096e51f0f6d7
SSDEEP 3145728:rydOwC2/IEZt/FRYgLptukO2daOWd5v4mCuRasT:mA2/rh/ojOuR5
TLSH
T116683350D66AF69CE58D80B2DE72BA73B806D62C91520D0E6A2F7510F071A2734EFD4F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery ransomware

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
3412	metashape.exe

Loads dropped DLL 64 IoCs

pid	Process
4424	amm.exe
4424	amm.exe
4424	amm.exe
4424	amm.exe
4424	amm.exe
4424	amm.exe
4424	amm.exe
4424	amm.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe

Enumerates connected drives 3 TTPs 24 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\F:	metashape.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\E:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe

Drops file in System32 directory 20 IoCs

description	ioc	Process
File created	C:\Windows\system32\msvcp140_2.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_atomic_wait.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_codecvt_ids.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_2.dll	msiexec.exe
File opened for modification	C:\Windows\system32\concrt140.dll	msiexec.exe
File created	C:\Windows\system32\vcruntime140.dll	msiexec.exe
File created	C:\Windows\system32\vcruntime140_1.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_codecvt_ids.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcomp140.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_1.dll	msiexec.exe
File created	C:\Windows\system32\vccorlib140.dll	msiexec.exe
File created	C:\Windows\system32\vcomp140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcruntime140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcruntime140_1.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_1.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_atomic_wait.dll	msiexec.exe
File created	C:\Windows\system32\concrt140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vccorlib140.dll	msiexec.exe

Suspicious use of NtSetInformationThreadHideFromDebugger 2 IoCs

pid	Process
3412	metashape.exe
3412	metashape.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\third_party\2and3\google\protobuf\timestamp_pb2.pyi	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Doc\library\binascii.rst	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\parso\python\errors.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\stdlib\2\gc.pyi	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Doc\library\gzip.rst	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\stdlib\3\concurrent\__init__.pyi	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\idlelib\idle_test\test_macosx.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\stdlib\3\xxlimited.pyi	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\IPython\utils\capture.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\win32com\demos\__init__.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\third_party\2and3\jinja2\utils.pyi	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\win32com\test\policySemantics.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\metashape-server.exe	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\pip\_vendor\msgpack\fallback.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\pygments\formatters\img.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\django-stubs\django-stubs\db\models\functions\__init__.pyi	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\third_party\2and3\dateutil\parser.pyi	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\tests\test_distutils_adoption.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\pure_eval-0.2.3.dist-info\RECORD	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\tests\test_build_clib.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\tcl\tcl8.6\tzdata\America\Montreal	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\__pycache__\random.cpython-312.pyc.3157998332208	metashape.exe
File created	C:\Program Files\Agisoft\Metashape Pro\modules\console.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Doc\c-api\structures.rst	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\DLLs\_wmi.pyd	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\qtpy\QtHelp.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\stdlib\3\shlex.pyi	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\zmq\backend\cython\libzmq.pxd	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\signal.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\pythonwin\pywin\Demos\ocx\demoutils.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\include\cpython\objimpl.h	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Doc\faq\gui.rst	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\_distutils\tests\test_build_scripts.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\pip\_internal\req\constructors.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\pip\_vendor\dependency_groups\_pip_wrapper.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Doc\tutorial\appendix.rst	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\stdlib\3\importlib\machinery.pyi	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\stdlib\2and3\ftplib.pyi	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\tcl\tk8.6\spinbox.tcl	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\pythonwin\pywin\scintilla\scintillacon.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\stdlib\2\CGIHTTPServer.pyi	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\__pycache__\pydoc.cpython-312.pyc.3158010321712	metashape.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\win32\test\test_odbc.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\encodings\mac_greek.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\django-stubs\django-stubs\contrib\admin\templatetags\admin_list.pyi	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Doc\library\curses.rst	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\stack_data\py.typed	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\pip\_internal\index\package_finder.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Doc\library\ssl.rst	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\win32com\server\register.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\win32com\test\testStreams.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\turtledemo\rosette.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\django-stubs\django-stubs\contrib\postgres\fields\array.pyi	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\prompt_toolkit\output\conemu.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\django-stubs\django-stubs\contrib\redirects\middleware.pyi	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\email\mime\base.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\pip-25.2.dist-info\licenses\src\pip\_vendor\cachecontrol\LICENSE.txt	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\_distutils\version.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\tcl\tk8.6\msgs\da.msg	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\IPython\core\crashhandler.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\PySide2\QtSql.pyd	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\stack_data\core.py	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\third_party\2\six\moves\collections_abc.pyi	msiexec.exe
File created	C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\prompt_toolkit\contrib\telnet\log.py	msiexec.exe

Drops file in Windows directory 20 IoCs

description	ioc	Process
File created	C:\Windows\Installer\{3AB1338F-DB13-4C54-BC6D-23FEAB1F08C1}\viewer.ico	msiexec.exe
File created	C:\Windows\Installer\{3AB1338F-DB13-4C54-BC6D-23FEAB1F08C1}\monitor.ico	msiexec.exe
File opened for modification	C:\Windows\Installer\e59cfd9.msi	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\F8331BA331BD45C4CBD632EFBAF1801C\2.3.2	msiexec.exe
File opened for modification	C:\Windows\Installer\{3AB1338F-DB13-4C54-BC6D-23FEAB1F08C1}\metashape.ico	msiexec.exe
File opened for modification	C:\Windows\Installer\{3AB1338F-DB13-4C54-BC6D-23FEAB1F08C1}\viewer.ico	msiexec.exe
File created	C:\Windows\Installer\e59cfe7.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File created	C:\Windows\Installer\SourceHash{3AB1338F-DB13-4C54-BC6D-23FEAB1F08C1}	msiexec.exe
File opened for modification	C:\Windows\Installer\$PatchCache$\Managed\F8331BA331BD45C4CBD632EFBAF1801C	msiexec.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\Installer\{3AB1338F-DB13-4C54-BC6D-23FEAB1F08C1}\metashapepsx.ico	msiexec.exe
File opened for modification	C:\Windows\Installer\{3AB1338F-DB13-4C54-BC6D-23FEAB1F08C1}\metashapepsx.ico	msiexec.exe
File created	C:\Windows\Installer\{3AB1338F-DB13-4C54-BC6D-23FEAB1F08C1}\metashapepsz.ico	msiexec.exe
File opened for modification	C:\Windows\Installer\{3AB1338F-DB13-4C54-BC6D-23FEAB1F08C1}\metashapepsz.ico	msiexec.exe
File opened for modification	C:\Windows\Installer\{3AB1338F-DB13-4C54-BC6D-23FEAB1F08C1}\monitor.ico	msiexec.exe
File created	C:\Windows\Installer\e59cfd9.msi	msiexec.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File opened for modification	C:\Windows\Installer\MSI8EA.tmp	msiexec.exe
File created	C:\Windows\Installer\{3AB1338F-DB13-4C54-BC6D-23FEAB1F08C1}\metashape.ico	msiexec.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	amm.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	msiexec.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4692	msedge.exe

Checks SCSI registry key(s) 3 TTPs 5 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 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	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 5 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134300416474847857"	msedge.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe

Modifies registry class 57 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\AdvertiseFlags = "388"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\SourceList\Net\1 = "C:\\Users\\Admin\\AppData\\Local\\Temp\\TEMP\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.psz	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.psz\Metashape.psz	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\D2399D4A622365E41A4E9FC7273D49CB\F8331BA331BD45C4CBD632EFBAF1801C	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\SourceList\LastUsedSource = "n;1;C:\\Users\\Admin\\AppData\\Local\\Temp\\TEMP\\"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-1074038928-2032447174-945360078-1000\{646F99DF-DBEB-4F94-BF0C-8AAB4EBC04DB}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psx\DefaultIcon	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psz\shell\open\ = "&Open"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.psz\ = "Metashape.psz"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psx\shell	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\ProductName = "Agisoft Metashape Professional"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\DeploymentFlags = "3"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\Assignment = "1"	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\Clients = 3a0000000000	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psx\DefaultIcon\ = "C:\\Windows\\Installer\\{3AB1338F-DB13-4C54-BC6D-23FEAB1F08C1}\\metashapepsx.ico,0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\F8331BA331BD45C4CBD632EFBAF1801C\ViewerFeature	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\F8331BA331BD45C4CBD632EFBAF1801C\MonitorFeature	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psx	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psz\shell\open\command	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\F8331BA331BD45C4CBD632EFBAF1801C	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psz\shell\open\command\ = "\"C:\\Program Files\\Agisoft\\Metashape Pro\\metashape.exe\" \"%1\""	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psx\shell\open	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\AuthorizedLUAApp = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psz\DefaultIcon\ = "C:\\Windows\\Installer\\{3AB1338F-DB13-4C54-BC6D-23FEAB1F08C1}\\metashapepsz.ico,0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\PackageCode = "010613092135498499033EAC440715F4"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\ProductIcon = "C:\\Windows\\Installer\\{3AB1338F-DB13-4C54-BC6D-23FEAB1F08C1}\\metashape.ico"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\SourceList\PackageName = "packeg.msi"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psz	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\SourceList	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\SourceList\Media	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psz\shell	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psx\shell\open\command\ = "\"C:\\Program Files\\Agisoft\\Metashape Pro\\metashape.exe\" \"%1\""	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psx\shell\open\ = "&Open"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.psx\ = "Metashape.psx"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\F8331BA331BD45C4CBD632EFBAF1801C\VCRedist	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-21-1074038928-2032447174-945360078-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psz\shell\open\command\command = 270052004a007200360063006900400055004000750040006b0062007a00680030004b00260067004d006500740061007300680061007000650046006500610074007500720065003e004700300070007d005f0038004800390045004600310062004f0079002d00760030006800600071002000220025003100220000000000	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psx\shell\open\command	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psx\ = "Metashape Project"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\Version = "33751042"	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\InstanceType = "0"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\UpgradeCodes\D2399D4A622365E41A4E9FC7273D49CB	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.psx\Metashape.psx\ShellNew	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Features\F8331BA331BD45C4CBD632EFBAF1801C\MetashapeFeature	msiexec.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\Language = "1033"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psz\DefaultIcon	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.psz\Metashape.psz\ShellNew	msiexec.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psx\shell\open\command\command = 270052004a007200360063006900400055004000750040006b0062007a00680030004b00260067004d006500740061007300680061007000650046006500610074007500720065003e004700300070007d005f0038004800390045004600310062004f0079002d00760030006800600071002000220025003100220000000000	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.psx\Metashape.psx	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\SourceList\Net	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psz\shell\open	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\.psx	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Metashape.psz\ = "Metashape Archive"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\F8331BA331BD45C4CBD632EFBAF1801C\SourceList\Media\1 = ";"	msiexec.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
3412	metashape.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
4324	msiexec.exe
4324	msiexec.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe
3412	metashape.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3412	metashape.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs

pid	Process
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2964	msiexec.exe
Token: SeIncreaseQuotaPrivilege	2964	msiexec.exe
Token: SeSecurityPrivilege	4324	msiexec.exe
Token: SeCreateTokenPrivilege	2964	msiexec.exe
Token: SeAssignPrimaryTokenPrivilege	2964	msiexec.exe
Token: SeLockMemoryPrivilege	2964	msiexec.exe
Token: SeIncreaseQuotaPrivilege	2964	msiexec.exe
Token: SeMachineAccountPrivilege	2964	msiexec.exe
Token: SeTcbPrivilege	2964	msiexec.exe
Token: SeSecurityPrivilege	2964	msiexec.exe
Token: SeTakeOwnershipPrivilege	2964	msiexec.exe
Token: SeLoadDriverPrivilege	2964	msiexec.exe
Token: SeSystemProfilePrivilege	2964	msiexec.exe
Token: SeSystemtimePrivilege	2964	msiexec.exe
Token: SeProfSingleProcessPrivilege	2964	msiexec.exe
Token: SeIncBasePriorityPrivilege	2964	msiexec.exe
Token: SeCreatePagefilePrivilege	2964	msiexec.exe
Token: SeCreatePermanentPrivilege	2964	msiexec.exe
Token: SeBackupPrivilege	2964	msiexec.exe
Token: SeRestorePrivilege	2964	msiexec.exe
Token: SeShutdownPrivilege	2964	msiexec.exe
Token: SeDebugPrivilege	2964	msiexec.exe
Token: SeAuditPrivilege	2964	msiexec.exe
Token: SeSystemEnvironmentPrivilege	2964	msiexec.exe
Token: SeChangeNotifyPrivilege	2964	msiexec.exe
Token: SeRemoteShutdownPrivilege	2964	msiexec.exe
Token: SeUndockPrivilege	2964	msiexec.exe
Token: SeSyncAgentPrivilege	2964	msiexec.exe
Token: SeEnableDelegationPrivilege	2964	msiexec.exe
Token: SeManageVolumePrivilege	2964	msiexec.exe
Token: SeImpersonatePrivilege	2964	msiexec.exe
Token: SeCreateGlobalPrivilege	2964	msiexec.exe
Token: SeBackupPrivilege	5004	vssvc.exe
Token: SeRestorePrivilege	5004	vssvc.exe
Token: SeAuditPrivilege	5004	vssvc.exe
Token: SeBackupPrivilege	4324	msiexec.exe
Token: SeRestorePrivilege	4324	msiexec.exe
Token: SeRestorePrivilege	4324	msiexec.exe
Token: SeTakeOwnershipPrivilege	4324	msiexec.exe
Token: SeBackupPrivilege	1724	srtasks.exe
Token: SeRestorePrivilege	1724	srtasks.exe
Token: SeSecurityPrivilege	1724	srtasks.exe
Token: SeTakeOwnershipPrivilege	1724	srtasks.exe
Token: SeBackupPrivilege	1724	srtasks.exe
Token: SeRestorePrivilege	1724	srtasks.exe
Token: SeSecurityPrivilege	1724	srtasks.exe
Token: SeTakeOwnershipPrivilege	1724	srtasks.exe
Token: SeRestorePrivilege	4324	msiexec.exe
Token: SeTakeOwnershipPrivilege	4324	msiexec.exe
Token: SeRestorePrivilege	4324	msiexec.exe
Token: SeTakeOwnershipPrivilege	4324	msiexec.exe
Token: SeRestorePrivilege	4324	msiexec.exe
Token: SeTakeOwnershipPrivilege	4324	msiexec.exe
Token: SeRestorePrivilege	4324	msiexec.exe
Token: SeTakeOwnershipPrivilege	4324	msiexec.exe
Token: SeRestorePrivilege	4324	msiexec.exe
Token: SeTakeOwnershipPrivilege	4324	msiexec.exe
Token: SeRestorePrivilege	4324	msiexec.exe
Token: SeTakeOwnershipPrivilege	4324	msiexec.exe
Token: SeRestorePrivilege	4324	msiexec.exe
Token: SeTakeOwnershipPrivilege	4324	msiexec.exe
Token: SeRestorePrivilege	4324	msiexec.exe
Token: SeTakeOwnershipPrivilege	4324	msiexec.exe
Token: SeRestorePrivilege	4324	msiexec.exe

Suspicious use of FindShellTrayWindow 6 IoCs

pid	Process
2964	msiexec.exe
2964	msiexec.exe
4864	msedge.exe
4864	msedge.exe
4864	msedge.exe
3412	metashape.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
3412	metashape.exe
3412	metashape.exe

Suspicious use of WriteProcessMemory 53 IoCs

description	pid	Process	procid_target
PID 4424 wrote to memory of 2964	4424	amm.exe	104
PID 4324 wrote to memory of 1724	4324	msiexec.exe	109
PID 4424 wrote to memory of 4864	4424	amm.exe	117
PID 4864 wrote to memory of 2356	4864	msedge.exe	118
PID 4864 wrote to memory of 4692	4864	msedge.exe	119
PID 4864 wrote to memory of 4500	4864	msedge.exe	120
PID 4864 wrote to memory of 4500	4864	msedge.exe	120
PID 4864 wrote to memory of 4500	4864	msedge.exe	120
PID 4864 wrote to memory of 784	4864	msedge.exe	121
PID 4864 wrote to memory of 784	4864	msedge.exe	121
PID 4864 wrote to memory of 2888	4864	msedge.exe	123
PID 4864 wrote to memory of 4560	4864	msedge.exe	124
PID 4864 wrote to memory of 2888	4864	msedge.exe	123
PID 4864 wrote to memory of 2888	4864	msedge.exe	123
PID 4864 wrote to memory of 4560	4864	msedge.exe	124
PID 4864 wrote to memory of 4560	4864	msedge.exe	124
PID 4864 wrote to memory of 440	4864	msedge.exe	125
PID 4864 wrote to memory of 1392	4864	msedge.exe	126
PID 4864 wrote to memory of 440	4864	msedge.exe	125
PID 4864 wrote to memory of 440	4864	msedge.exe	125
PID 4864 wrote to memory of 1392	4864	msedge.exe	126
PID 4864 wrote to memory of 1392	4864	msedge.exe	126
PID 4864 wrote to memory of 4640	4864	msedge.exe	128
PID 4864 wrote to memory of 4640	4864	msedge.exe	128
PID 4864 wrote to memory of 3104	4864	msedge.exe	129
PID 4864 wrote to memory of 3104	4864	msedge.exe	129
PID 4864 wrote to memory of 5024	4864	msedge.exe	130
PID 4864 wrote to memory of 5024	4864	msedge.exe	130
PID 4864 wrote to memory of 5024	4864	msedge.exe	130
PID 4864 wrote to memory of 2748	4864	msedge.exe	132
PID 4864 wrote to memory of 2748	4864	msedge.exe	132
PID 4864 wrote to memory of 2748	4864	msedge.exe	132
PID 4864 wrote to memory of 4260	4864	msedge.exe	133
PID 4864 wrote to memory of 4260	4864	msedge.exe	133
PID 4864 wrote to memory of 4260	4864	msedge.exe	133
PID 4864 wrote to memory of 1928	4864	msedge.exe	134
PID 4864 wrote to memory of 4248	4864	msedge.exe	135
PID 4864 wrote to memory of 1928	4864	msedge.exe	134
PID 4864 wrote to memory of 4248	4864	msedge.exe	135
PID 4864 wrote to memory of 4048	4864	msedge.exe	137
PID 4864 wrote to memory of 1620	4864	msedge.exe	138
PID 4864 wrote to memory of 4704	4864	msedge.exe	139
PID 4864 wrote to memory of 1620	4864	msedge.exe	138
PID 4864 wrote to memory of 4704	4864	msedge.exe	139
PID 4864 wrote to memory of 1028	4864	msedge.exe	140
PID 4864 wrote to memory of 1028	4864	msedge.exe	140
PID 4864 wrote to memory of 1028	4864	msedge.exe	140
PID 4864 wrote to memory of 1672	4864	msedge.exe	141
PID 4864 wrote to memory of 3584	4864	msedge.exe	142
PID 4864 wrote to memory of 1672	4864	msedge.exe	141
PID 4864 wrote to memory of 3584	4864	msedge.exe	142
PID 4864 wrote to memory of 5440	4864	msedge.exe	143
PID 4864 wrote to memory of 5440	4864	msedge.exe	143

Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\amm.exe
"C:\Users\Admin\AppData\Local\Temp\amm.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4424
- C:\Windows\SysWOW64\msiexec.exe
  "msiexec" /i "C:\Users\Admin\AppData\Local\Temp\TEMP\packeg.msi" /qb INSTALLLOCATION="C:\Program Files\Agisoft\Metashape Pro"
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  PID:2964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument http://diakov.net/
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:4864
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2ec,0x7ff91c57c188,0x7ff91c57c194,0x7ff91c57c1a0
    3⤵
    PID:2356
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1936,i,2724958338453166562,8336620656545963163,524288 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=2364 /prefetch:3
    3⤵
    - System Time Discovery
    PID:4692
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1708,i,11668155078224180252,10614835936074926184,262144 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=2272 /prefetch:2
    3⤵
    PID:4500
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2584,i,4743268557442661586,11679862310586262834,524288 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=2748 /prefetch:8
    3⤵
    PID:784
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3480,i,14161457275958394511,18336505846164929324,2097152 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
    3⤵
    PID:2888
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3484,i,5231610409782730705,5080699826562247410,2097152 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=3544 /prefetch:1
    3⤵
    PID:4560
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4276,i,13759918641547444088,13894107334992737757,2097152 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=4408 /prefetch:1
    3⤵
    PID:440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4288,i,15204269786738960970,288696802303113819,2097152 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=4412 /prefetch:2
    3⤵
    PID:1392
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5092,i,14493802386519253132,17746998634833693765,524288 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=5096 /prefetch:8
    3⤵
    PID:4640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3520,i,2021386762029253743,12257505452825806049,524288 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=5104 /prefetch:8
    3⤵
    PID:3104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5416,i,16845825321069252691,12629477434641357599,2097152 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=5432 /prefetch:1
    3⤵
    PID:5024
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=5364,i,14722302854335966733,4936305358407888859,2097152 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=3656 /prefetch:1
    3⤵
    PID:2748
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=5092,i,9976150877096403123,16830598263446362983,2097152 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=3704 /prefetch:1
    3⤵
    PID:4260
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5164,i,15502150372182587561,7722753057982605067,524288 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=5612 /prefetch:8
    3⤵
    PID:1928
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5512,i,863387584225075307,1640394030323905755,524288 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=5632 /prefetch:8
    3⤵
    PID:4248
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,6855486637893142856,1704247305517156199,524288 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:8
    3⤵
    PID:4964
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,6855486637893142856,1704247305517156199,524288 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=6392 /prefetch:8
    3⤵
    PID:4048
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6620,i,7145231691164934222,4719808809741232163,524288 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=6624 /prefetch:8
    3⤵
    PID:1620
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6632,i,3734144857293694742,16280849211008895574,524288 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=6708 /prefetch:8
    3⤵
    PID:4704
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6720,i,15175714392442390336,2880424314669775131,2097152 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=6640 /prefetch:1
    3⤵
    PID:1028
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6700,i,12141295274980421432,17348216170889865057,524288 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=6988 /prefetch:8
    3⤵
    PID:1672
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6500,i,10417345976848657807,11668972042288463513,524288 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:8
    3⤵
    PID:3584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6524,i,395813611999535036,1384127905687847607,524288 --field-trial-handle=2276,i,16932521620129361176,7634345611149131299,262144 --variations-seed-version --mojo-platform-channel-handle=6772 /prefetch:8
    3⤵
    PID:5440

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Program Files directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4324
- C:\Windows\system32\srtasks.exe
  C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1724

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:5004

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:928

C:\Program Files\Agisoft\Metashape Pro\metashape.exe
"C:\Program Files\Agisoft\Metashape Pro\metashape.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Enumerates connected drives
- Suspicious use of NtSetInformationThreadHideFromDebugger
- Drops file in Program Files directory
- Suspicious behavior: AddClipboardFormatListener
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of FindShellTrayWindow
- Suspicious use of SetWindowsHookEx
PID:3412

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e59cfdc.rbs

Path C:\Config.Msi\e59cfdc.rbs
Size 1.7MB
SHA256 2abfbb6ec7e8fa94ef7cf6388655b1106ac684e092f31dfde5563bfd386d8358
MD5 ab3eda43f3e88747fd56bc214ee91c43
SHA1 651fa1399145ec8fe775b78c9ba6a569e4acadc5
SHA512 e03cf5c583fd89ead64ba803fd3b4fc1ddc837463e21f235c291558c8c1e2d4e6fa60cea5a533f005902396473c676d96fc92a643b07bd9b43f5622e8d531a22
SSDEEP 6144:SoQu9bw1kjvicBmBFoTGi2RJ/kELdFpDjmViwYHjtK0yPdFztVjslPMR1ZA/1cHz:PGcEJFpfmM9GtVvRTXpfL8fdlQ
TLSH
T1FF854A06FE00D3E7721FB86593663A354A057CAAB7F514A32BBD633B5950A0B133F660
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

license.txt

Path C:\Program Files\Agisoft\Metashape Pro\licenses\spirvreflect\license.txt
Size 11KB
SHA256 c71d239df91726fc519c6eb72d318ec65820627232b2f796219e87dcf35d0ab4
MD5 86d3f3a95c324c9479bd8986968f4327
SHA1 7df059597099bb7dcf25d2a9aedfaf4465f72d8d
SHA512 dc6b68d13b8cf959644b935f1192b02c71aa7a5cf653bd43b4480fa89eec8d4d3f16a2278ec8c3b40ab1fdb233b3173a78fd83590d6f739e0c9e8ff56c282557
SSDEEP 192:fU6G5KXSD9VYUKhu1JVF9hFGvV/QiGkS594drFjuHYx5dvTrLh3kTSEn7HbHR:M9vlKM1zJlFvmNz5VrlkTS07Ht
TLSH
T12432623FBA48037706C20162BB9764CBF21E903F3B552568354CC1681F6BA6543FB6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_git_pyside_version.py

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\PySide2\_git_pyside_version.py
Size 2KB
SHA256 844eb41e369e1e2ade3cc7698c909228c71cd1b6d80d10af4545fb3d4fcb62ee
MD5 f150418954f64c01c3760af385fce0ae
SHA1 df74cf5871280ad37961ac6bd7a8c0bca35ed29f
SHA512 1105c80126ad707a81ea71c4a1b521f7ffe84ab7bf4eb37f6b0ebc76bfd0481d1c9db7b16c6013bf7e30799e863a384e267647ac63c552bdd02f46b15f7c325b
TLSH
T19551126BA741C737478109876A4BA2CBF31F923C3FBB8455341E869E6720A7803D22DC
MD5 SHA1 SHA512 TLSH

Submit Download

__init__.py

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\debugpy\_vendored\pydevd\pydevd_plugins\__init__.py
Size 70B
SHA256 63d7753d1fd95c6e949bf7db76baeb63151dd7a34a1fb762958ac928ce138ec9
MD5 f2043008942917ac9351c930386cedd0
SHA1 056fe8581f10814d00bb861e32605a77e14c3d16
SHA512 e20ede0cc5cb08740ff870f28e5ae20b8fd6fdd1c17341a7a1f6c62efd06cbeedd833d3f976fc14bf083e009194f561c94f7c136da10b2a0d0e62333e712dbf6
TLSH
T1B8A002950801C4E82721F352A0C61D4756DE0FE63E50A850128515DC6C41BF6E140E2E
MD5 SHA1 SHA512 TLSH

Submit Download

urls.pyi

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\django-stubs\django-stubs\contrib\admindocs\urls.pyi
Size 59B
SHA256 a0869d2c9451a944b87f059edc5d93c1d415888b98b9247b8aeb5489d9dcba7d
MD5 72baef07657af40bbb9421362b0c67cd
SHA1 e0e802c0e54240712b8bd8418627b2ffa123bc94
SHA512 32e4cddc4df9759ad46f617cd69b2adc130a918cac4f588cf563d8e3c298ece3a5bb0a9dc9a082cbdc015f2789336a6e67d545603ea69477fc5de28256fd6d06
TLSH
T156A002864456BD866BEB4C0C50294030492D50C26F55493582A9936053914E48439119
MD5 SHA1 SHA512 TLSH

Submit Download

ping_google.pyi

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\django-stubs\django-stubs\contrib\sitemaps\management\commands\ping_google.pyi
Size 85B
SHA256 1a4fa10dd76be871ebe4f02bc9ccf70eaa1e178efa5291aa6aff471a9fcdb272
MD5 6b8cad3305cef8186496283d80f5ea37
SHA1 418009700ba673f4aebf49db46d1f44384d4f8f8
SHA512 e06ba45ea1bd65681f3be4a85118d4bc75c961e82dc6d319c6a2b1a7a39533732fe7c5d152ea978e0dd62c1ea520eb62c9322eaed82ca5588495fa1465f71555
TLSH
T1C3A01208F0BD01E301CA80C6080422B134F1320245580C0315347D380C208C71C43101
MD5 SHA1 SHA512 TLSH

Submit Download

dummy.pyi

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\django-stubs\django-stubs\core\mail\backends\dummy.pyi
Size 103B
SHA256 ae9de027f591acfedc0ba387099c4398c0841a9c126535d313ffbdb18184eea0
MD5 7f6526c1bbcb2aa7ba6a8cde268765bc
SHA1 cfc87c1fd110239d47886e0c5ebcad54bd453bbe
SHA512 3c6f26b5f0ab2bc22e72e116ffe28624e5d971a86b9d85e5f733844827e784b8349c46fa46ca5390bc972607b7fb5b37a6fb47b410e105f02b147dfe77a737c7
TLSH
T193B0924460A342810FF69AE230F431905998340B8D38980A4F0031140B30C463E0A11E
MD5 SHA1 SHA512 TLSH

Submit Download

ntpath.pyi

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\stdlib\2\ntpath.pyi
Size 2KB
SHA256 ba96ee35c718a0964e11e6ae5d5b9e800b9350cafd2ec0d9e84d1cf4f0ac2702
MD5 85d6a21f1a4f58f9e3ffbeb89cf82345
SHA1 db8ae818a67210b61b2a538d49b608825de04a31
SHA512 995047f50de368444bad3fedb2c5b7f8efa807cdd35bb3647b1223897e4d27a94f93a48b0b12fc9121281f4f447632edf878dc54268716b67ecfb28a388c744f
TLSH
T10951A95DBD64A7F08BFE9375550A13A6AE18B3F12B69F414E09A1454084F36CA0BDBCC
MD5 SHA1 SHA512 TLSH

Submit Download

xmlbuilder.pyi

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\stdlib\2and3\xml\dom\xmlbuilder.pyi
Size 77B
SHA256 c08fdebb51bcc9a6aab911e667d9984608f2e3334d8490b7f394e348ca1a9918
MD5 0244548e1dba18ff5c58d98bcc50b931
SHA1 37494fb84b8b2a811e2cfa2be49477ce29138af7
SHA512 a88c7f3fad1047e18794184f33787b68e9c3260d47d68e6f519d99143b928aa97fcd1ebcc3b730f0c23eabb303352ba3cf9263b16e7c9f276f9108ed616a567c
TLSH
T147A0220B0038B8EC8B3C0C3C8E3F00B02A283280830A0820A0C0220823CF208CC383EC
MD5 SHA1 SHA512 TLSH

Submit Download

path.pyi

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\stdlib\3\os\path.pyi
Size 4KB
SHA256 3191b9b9c4fb744bc025816c24737b48733616bb383727f778b9ba56a854017d
MD5 d6525de34375179d12889a176a91255d
SHA1 8e01efdd8a61008d775058bfdc084066d7f27047
SHA512 53feeee1aeacc39818e80d521a0004acd943f1b0870d7ad85d9a1919b62377dab5cb22a456f92eed101b55975636315bb6d3ac68e0dc1d3ec675acdda622ce4e
SSDEEP 96:ZvC4wZW4xZf4zp4e/4MQ46R4j34uz4kZOy6hR40SevfvNiHANm9M4X4W4El:Zr5ZmHnZP4
TLSH
T14DA1421DBA5654A08BFD8B7841074E23AB9473E7727CE100B58E02980FDE31C90FABC8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BaseHTTPServer.pyi

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\third_party\3\six\moves\BaseHTTPServer.pyi
Size 26B
SHA256 bed05425469b4eb2152bdec29f43212d48474a56e61c1f10810956c1a747fbac
MD5 59c113ba8da07ed8b8cf1d9fa0cb0a08
SHA1 b29c918fa7f8eb1f29f0a940f7bc3473d1f5d5e1
SHA512 98a1b860fb715c34568ec9247df52f480fd5fa72eac8c3b34954bfc2b35fb4b0bf73ea421950a9c027a20fc364207bf930edff3033490acf4011098afbe098e1
MD5 SHA1 SHA512

Submit Download

_musllinux.py

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\packaging\_musllinux.py
Size 2KB
SHA256 a7d66a35888e22d19e7bc29c64578717f61c76157018774aeabfbc9608b1bc64
MD5 d0d487bb6b89df7d122f768d8f1f2f2d
SHA1 7d4819fd7cc78fa2acec97cdbd23939ff45f12b8
SHA512 2b15e6de236c0e1c30faf916a7d2ea79d85690b14ef9c61d7a7da0b410fb2f73059601f91be2f74f5d9e65533c4f2a6199ebc2e1cf229621ea6a45c5c54a04a4
TLSH
T1CA514416C984FBB1D340472DD8C9C4957B7A29677A521E38F89D01145F5982C83B5FF8
MD5 SHA1 SHA512 TLSH

Submit Download

metadata.py

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\pip\_vendor\packaging\metadata.py
Size 33KB
SHA256 f08644aea4109cd9b9ddd659b98ab8146538fdda728a731e1f540504858891f1
MD5 7cfeeeeb4a2be7848c92ae82b5c9f6a1
SHA1 9a47c487e34488ff5264ff730cc5b8ec6fc3e69f
SHA512 d289484d7a28ade64444e112b9cfb653f1b695eaca0c17bb9d532b8fd2f2cf3a41c7a45d6f3745b392bbda722f864cef22e71f9c43ad725b8416ebdad1335cba
SSDEEP 384:WLVtHxzLCF+CJone+f4LMKkje8Lz3nQPvMoKYOGN9FlPTJp/9CaA79DkTtQVIxEG:ciFPMe+xLqvFKWJbpFCaNtyIxErpUAXS
TLSH
T1C7F29616F6021D379EC750AC1CD6E28257E8E0136A40547CBDECC56C2F9BDE9A2B279C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

requirements.py

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\pip\_vendor\packaging\requirements.py
Size 2KB
SHA256 818c9148075bac8c8a0d8ebaba02035108d132fc641f600b8a84e65f7b672faa
MD5 2fc711cf5b4a1a8ac92aab0bd4e13284
SHA1 1c36b3e629a0f04f56cfcd9854e23639f2c6a639
SHA512 a83e245ff1a002986fe3b9088b276c764d4492b7609d459ff005153007b30aa54ee81f6ecca8cd40694a23b64beb7f5b25ab146dcc37b888848072f2f9238622
TLSH
T11D510247A3C66155B31F84BE8CBABDA71356990B29081435BCFD11903FE74348AF6EE4
MD5 SHA1 SHA512 TLSH

Submit Download

tags.py

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\pip\_vendor\packaging\tags.py
Size 22KB
SHA256 e35b3ded6f596adaead8477b45cdea7810da1def2928abd8ab69868f06a17d79
MD5 343d067796e4b905805026a1740edf57
SHA1 d97189349cae7faf594d7fdea6520aa3ebb7f675
SHA512 53a8cb064d5b618898e5510bc055f611a5ce73d6c184204b25b0d7594822b4ca33c9a73272fe9fce65df08aebfb847edb2ccbe16ce49bfc8c6ebb7655770e4d3
SSDEEP 384:F1dFPutD3En9OI6eTl7hA+hZAohjolV3P8oQYKMKEpXlpRaGzeYzePSzuPxtsG3o:zdVB9OI68thjsohjolV3P8oQ3D6XlpR9
TLSH
T114A27256CA92DD77C7624E2E4CDB8102673868972A51622C7D9DC1282F53CAD83F4BEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

top_level.txt

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\_vendor\jaraco.functools-4.0.1.dist-info\top_level.txt
Size 7B
SHA256 d099cddcb7d71f82c845f5cbf9014e18227341664edc42f1e11d5dfe5a2ea103
MD5 0ba8d736b7b4ab182687318b0497e61e
SHA1 311ba5ffd098689179f299ef20768ee1a29f586d
SHA512 7cccbb4afa2fade40d529482301beae152e0c71ee3cc41736eb19e35cfc5ee3b91ef958cf5ca6b7330333b8494feb6682fd833d5aa16bf4a8f1f721fd859832c
MD5 SHA1 SHA512

Submit Download

_manylinux.py

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\_vendor\packaging\_manylinux.py
Size 9KB
SHA256 be5e4e0a8cf8931f341f9af05ca7975a397d58d2121a6af86604e94cff6553d7
MD5 8bbc71a89d4fcf1749153876b45e18bf
SHA1 b1eff66f27c5033317c724bd4b9ac57a0727f271
SHA512 f64d41fc98d6886e334510ecb4cbee2e3fe03c990f4c2303179cb0f7fd3b6ff952e154b607220c6836f139464d3ddddf1f1c3163fa7034a31bbbfa64c0c80b4b
SSDEEP 192:McOLIz7n0QlNh/F0PQTgwA1QQdEQjv5xRxmPpzSAJ3Rx1JFrh2XJFGiaOpj8:MNkn9Xt0POeQIEinapz7N2XJk
TLSH
T1D212A621A440F73BF7724B5E09CBD094A774589F5A9801B8FADE82AD4F0546C83F5BD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_parser.py

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\_vendor\packaging\_parser.py
Size 9KB
SHA256 b3f4ef4ef0cd2b436b336401dd529385d58533835cd0fe899e439b925dcc8e93
MD5 3fc3c108c9b1b8c25d23a29aa4952f21
SHA1 bba6fb5dd1e66f6622a7c9ffeafa127b510d8e30
SHA512 866345b794c2d1fa7e172a9f793a94dc055d3e22fe92eed9c0ef2181184c23e8f0d66e0bca82383e9ea867e82809c215aa9ab056562e5d030a5d8f5eff574832
SSDEEP 192:jVR7xspRv3G7cLylW1cgrB/YYoLDyZ/LPPMs2jczKVRiMtrs9xgBz3TZpcb:jb9sfvWALyl9wSm3Ms2N7iWnA
TLSH
T1A02212CDED4C1820929BEC2D6CB1EAE3F25C6707090522217A8C52F4BF5962E48BF5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_spdx.py

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\_vendor\packaging\licenses\_spdx.py
Size 47KB
SHA256 a009b5ced3c5c25b2608a7bb94002cbff38839f4b57160eef5b34191ebbeda7b
MD5 313a72cf4425cf31a445d4745d659eb3
SHA1 ebf0b2cfba0cef0c64c1094323f97f7c40f0fc73
SHA512 777a3bab40d0a9400e09565734f704660d43916422cfde7cabedddb935bda90a366afc4d6163c5157f9799890c5c1935ab1998bcd88eed585ddfa35572ca7a6a
SSDEEP 384:CnkxIs+Kj/WPbpoHPzETHFWgjm6oVa4ytgGLtCt1S7i6/C2rvjpmSQO8:F0KDWM7ta1ta47i6/o
TLSH
T1F1233EBD991A6CF74C6141EE5F742F250EE61A93C718280DF28263433FAD9F94139A36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

utils.py

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\_vendor\packaging\utils.py
Size 4KB
SHA256 d05dc787d385b9182b8538066549792b6d85bf560fdad665d73ff680eea42620
MD5 f6d73a168977560761887d65c7e9ed18
SHA1 a5dd9d67bec31aae3ad6701553031b0f19292cc8
SHA512 3055fffa4919e6c388409f2788d1ca43c10234968225e007976c90c9146324f7fb8dadd155e5256f134207d74b275f95db9470167d92531379b5dba43f608953
SSDEEP 96:FEUX44agWh6e6RGRIzTk1fm7HUxAprYipShrPAeb90CHiVexcWs38MY:FES7RAgafm7JjYhmC02rgfY
TLSH
T187A1312FCD4908B287E297BC0CB6918A27F1291729011D2C78DD56107FD6AEE32F56DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\_vendor\platformdirs-4.2.2.dist-info\licenses\LICENSE
Size 1KB
SHA256 29e0fd62e929850e86eb28c3fdccf0cefdf4fa94879011cffb3d0d4bed6d4db6
MD5 ea4f5a41454746a9ed111e3d8723d17a
SHA1 f511a8a63af8c6e36004b593478436bbc560ee0c
SHA512 caca68a5589ca2eab7c0d74ba5d2b25e3367b9902dfc7578bba911ac8f8bf1c3a13f25e663c5b6b19ba71bf611943e23f4d0a99be92a8f7d7ff60732dc3dd409
TLSH
T11C11862E72500772189B176055B8ACD5F13B715B7A6F2A84246DF341233A06CC5FF840
MD5 SHA1 SHA512 TLSH

Submit Download

windows.py

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\_vendor\platformdirs\windows.py
Size 9KB
SHA256 205a62a21501c313ed0b39722b036dc725b8264f2169ae96f28e7d99fac35d5a
MD5 128f39361500fcc1dcaefd721a400356
SHA1 920d92beeaa289b22c86911d1bbb942ca79cc167
SHA512 445f1c0b68a1c671682e1edf0bb9d6c3046eb9d793a33ed6f633f766e68ec9878537eecf929b2a3e6e9cb4b79cf23c1cd0487fc9f2fbbb38b4343f54c559d450
SSDEEP 192:Dg5Af0mNQSrvSYAnxqP7dp9csNHxDPG8y3r8k0fjc:M5Af3Ffv3VCloc
TLSH
T14722658BF8ABED10E256D32D55C7A8D2E704ABB31A9C14353F6C11285F2517AD2F09CE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\_vendor\tomli-2.0.1.dist-info\LICENSE
Size 1KB
SHA256 b80816b0d530b8accb4c2211783790984a6e3b61922c2b5ee92f3372ab2742fe
MD5 aaaaf0879d17df0110d1aa8c8c9f46f5
SHA1 9da6ca26337a886fb3e8d30efd4aeda623dc9ade
SHA512 eecd0c29febf51adefb02f970e66efe7e24d573686dfdb3beea63cefea012a79ce3c49a899b4f26e9b67dc27176b397f6041909227281f9866beedc97389095c
TLSH
T11411755E725147B618AB13605978ACD9F23BB25F7A6F2A84246DF345233A06CC6FF840
MD5 SHA1 SHA512 TLSH

Submit Download

py.typed

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\_vendor\tomli\py.typed
Size 26B
SHA256 f0f8f2675695a10a5156fb7bd66bafbaae6a13e8d315990af862c792175e6e67
MD5 bd2fa011a5e69d2b68df68fbc59f8be6
SHA1 c6eb45191eafd8deac33dad1803b14305f841347
SHA512 bf00cc5b6ab5b5819d2deb374f3aa6a25c5ed4d9372b4fb90c5605dd0e90528c914bfbaafc499940eb301aebfa8e05503d9282fa3da7ced86c14017040ba8019
MD5 SHA1 SHA512

Submit Download

not-zip-safe

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\shiboken2-5.15.12-py3.12.egg-info\not-zip-safe
Size 2B
SHA256 7eb70257593da06f682a3ddda54a9d260d4fc514f645237f5ca74b08f8da61a6
MD5 81051bcc2cf1bedf378224b0a93e2877
SHA1 ba8ab5a0280b953aa97435ff8946cbcbb2755a27
SHA512 1b302a2f1e624a5fb5ad94ddc4e5f8bfd74d26fa37512d0e5face303d8c40eee0d0ffa3649f5da43f439914d128166cb6c4774a7caa3b174d7535451eb697b5d
MD5 SHA1 SHA512

Submit Download

LICENSE.txt

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\stack_data-0.6.3.dist-info\LICENSE.txt
Size 1KB
SHA256 a476a2cb0ef4c41450340a577a28b91ac4c7f669136b2ee148047fabd5fc4181
MD5 a3d6c15f7859ae235a78f2758e5a48cf
SHA1 44c582803d7005baacb1ad03bcc5ad393cbdd95f
SHA512 af97be2a0bd4a80cd546700c5c4619b7b407de76f18070eda8ec9120d0bdddf1449901b232f9d8f44b392e05057e85e9cea50a5e31cfe8d2a779443cb2d00048
TLSH
T10511755EB2510B73189B13A05678ACD5F23BB25F7A6F2A84146DF345233A06CD5FF840
MD5 SHA1 SHA512 TLSH

Submit Download

WHEEL

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\wheel-0.45.1.dist-info\WHEEL
Size 82B
SHA256 0a950253178741b44de54191407611268acee407fe432fdf1cc72d710f034862
MD5 bef8b3a8022a44402ce1e4466e43ab6f
SHA1 7da0861c6561cf0068f7e55d55ff014b355ab122
SHA512 a71d07a3ce845cba7fa4853391b0885da9bc29c4060f0fad01aae87ba74d6018333851c5e44c982f38b1ddf45d6409861b2a12a72c694b125b9ddbc312d0a2ef
TLSH
T121A01228015404F44090EE034138E16416608109546500B6D0C101445545E4902C8DB6
MD5 SHA1 SHA512 TLSH

Submit Download

__init__.py

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\site-packages\win32comext\bits\__init__.py
Size 198B
SHA256 0486114a785d3c74a9940bd828bf4d04bb90599eba7be427269895580fc00f7f
MD5 7bda7db5725ca5fe9f0cb1b0dd307087
SHA1 43b1ee1279525aeaca2949984f072a89414d6612
SHA512 a5b2bcf2fac0a3072937438f24ed7942954cad68a00d345f8bcadd5cf1f4ff3efb0e4eb7970f78c9b702b35a7e34d3a0cc684c43d0c6795875e9f88b3f64a469
TLSH
T12ED0225C4C91E7E0A073BD8A223003A2831DFCBC3071D1C6213C8E2C0F32024D43B810
MD5 SHA1 SHA512 TLSH

Submit Download

_types.py

Path C:\Program Files\Agisoft\Metashape Pro\python\Lib\tomllib\_types.py
Size 254B
SHA256 f864c6d9552a929c7032ace654ee05ef26ca75d21b027b801d77e65907138b74
MD5 19a32b713392e66bac544e73f025b2cb
SHA1 6dc6337d888edea5138a094e517be6c0e4bd09f4
SHA512 c3d610738dc0e26f5645c200c6d1bd121642c5c2e71a2a235a702c2f5902e5cbe641016b6b79b1947e327b92216dedb40947d4247bb8913b138be0a440c0c28a
TLSH
T158D095D934F0734A0FEC514BDD795FBE4C18E4070707081014CC051F505504445FCE81
MD5 SHA1 SHA512 TLSH

Submit Download

README

Path C:\Users\Admin\.ipython\profile_default\startup\README
Size 371B
SHA256 638ec6b584245b2ea977392aca550d2fa7814993142111b04f15cf505fc10417
MD5 54b204e6c7c2472a17d482e4bfae7689
SHA1 375b32a1fcddcc54ad42c5181f0d339c425aa0ec
SHA512 0990f0262f24731d3933fbca7291219d69d212e21749836a0031e22aac4ccb1dde6110e419c00af54817ebffcad3935da3e5e2038ee2ce6ec36ef44befca91ab
TLSH
T1B9E0680366CC027911043398B7EA95A42B2F26AB21305168A1A829582BD6BBA12D36B2
MD5 SHA1 SHA512 TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 222e25d725f16e6ab34736213b94f49af55e226d8f60dc4d0226a5d8a363d667
MD5 23d88cd1e24b3861ca3ae124958c9325
SHA1 df98e31fe0377f3c5dc7657b47ed2ae394358c3f
SHA512 35f3980b241049f754be56de74bfcd027f78a880f38ff89fb23dd50f2b6e79af64df8d6d4ffba7d8b03b2b2c0da71e1db63c9e27d25bdc1730b8a02b12180e7a
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7k:fwUQC5VwBIiElEd2K57P7k
TLSH
T13DB3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 98eae6fcc56d922689f3a45ab65635857e6510c437555d4eae3a6cd68dff3acb
MD5 338a3c92e96cad1510815c958fc76de7
SHA1 e1234ace09aad728f9bde0798e2fb22ee82583de
SHA512 e29c9087bb4c9c94c8525a95c307117f14827336de29aa01f837bd02b05b3aecd1c1771970519a60972a1495e05b4f68ab34cf5e4ec9d7060f6383ac019c2ed7
TLSH
T17DD0803337C9A500F6567375F412C7412F2705741586C713A168C45CDC794C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85da5d101c008762046da9670ca95944217bbb1829e60a748f367ee4f9926b13
MD5 ef105d8d3e87a813544857290c28833d
SHA1 bfe7010cf80fb8cbcb9eeb5e0d0b551ece0b3134
SHA512 ae71c302652e2de890fca25723381f403f4f9ee51e2da6583977318de3e7ff00defb73b202e17a287def3ff618de86c0af96c0fca7729ef3efe0a4ba3cfdfc63
TLSH
T16FD0803377C9A100F6567375F413C7412F27057415868613A168C45CDC784C557C92C7
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c107d5cf33a714a068be0aded9bac4225385ecd3f59f1705fa681e4010125f6c
MD5 aa4214cdd355dd491d7e78f2dc15f214
SHA1 60b5b7a0e0c833918c018f11fa7354bbb8735685
SHA512 aaaa9dc5718e77344760f3ebe4d3dbfe1578d67071ac4752c2addfa29e2e562b6da4ab466d0cef8231f31f45568e99edbac8c445454402bcf9b5c4cbebeb232e
TLSH
T10BD02372BE91D3D0D019303D502002403B26023123CF832310A8480CDC7404082DEECB
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 4KB
SHA256 0e9aab1a948a69ec79edf2aad90364fb526809cff60bb5f9bdf88ab907b31d1f
MD5 686c0b565aa1a989fb709610a6df334b
SHA1 6d67d35d4525aefac5c56645f875548149bfecfd
SHA512 ce75df724d14f7c844adbc2e6f6da8186cbd1170ab8ce8f9e09101a7c42bee6f7bc054ac6360ee66e645811ad08f87f019d82777752438b3d33bf59128591ff5
SSDEEP 48:cz3WoGixPgKVpIG/Yom0MMlK/t72c962AfJ9UgvM/eDsn+EbqR8ChYg/uyEOhY3a:otgKQaKOXDP8MYg2jkIGvxa8Tx
TLSH
T1C9816D0615A17CB7EFDA0AF0F4DD060876F1CEA64E032FEA195CB8BD8813B234096607
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5b8d87.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5b8d87.TMP
Size 3KB
SHA256 c9fe8ac89b5c811e3be615b34e8d1f56db057d94ed1dc3c42a2b52e4e229739c
MD5 3c5ebc2837cc1ea9ab1a09c75bb3fb15
SHA1 464697e980551826bc817525ed3945948cb430fe
SHA512 d11790421e3f1c0dab40f9af0372533e47eb40c8d17dee0b8bbb642b08fe77ed142e5e6b40d339a3724edb278d7eaf0edf49d58e4ddf102346d39c801360e92d
TLSH
T114715C4211567C77EBDA0AF1F4CD4209B8F1CEA50E431FD6159CB8BD9827B23809AA0B
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\File System\Origins\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 8KB
SHA256 a44610bf49dbdf3761d395ad91e81a2effa6d8243c6a9c75638c0a977dc05d0d
MD5 7237e8445e1e2f1d3c18884fa9701a3b
SHA1 68f85031fa22676809128e7caead08527dbeb780
SHA512 46e1e1c6b1053b7a835ddf0fd4d03e2fb7303a8265759666f7c8da2a90760018f8d520759469a38ea2f5a3469ad85a25d13f68044c4e22f797cd665257f73ccc
SSDEEP 192:DLwJVm+JPIJcQMiaahEOhqVqKhggMpIUqLhR78hVR4zPBpkGtPdAqMSPtX6PsGBR:DL8VmmPIJcQMiaahEOgVqKhggMpIUqL0
TLSH
T1B90237F78BF4852DCE2152F0AB14AE1FCE1909254B1C3936C9E49F5AA3F2471E14265F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 16KB
SHA256 41e58808e5c8eae3a8ebf5ddcbb4f30f7de1b1a02b11f8b50fb9123e06cc22bd
MD5 3cd6f49fb376ff80f7079b87956c2408
SHA1 c0fd8880c1586acbb0b73735ff9a56113330ccdc
SHA512 7b246a69eba2348bce33b16b24d181a1fb10800816eb72eef2e825fa80afb6414f208229ab8dbb2d2fab569349b76831958144f7935e846b417e663fa269d858
SSDEEP 384:sxZ+8ke/f5sFWv6n0wHbp/EqlD+iq38ooVpYQRO:smbe/fcY6n7HbNvBFw
TLSH
T1E872E752B5341ABB8DDAD22EF444BF27D7F4042695901E91AAFCD92C01E7AFC2102C5F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 168c0f53520fe6a37a400cd58caabd79ef62e864bade8952ed88abfed0e3a35b
MD5 b42aa645c9e091d6c3d793ed968c7cec
SHA1 02320d8d8821e12c24b2b34dda7ccb43f1a9d3e9
SHA512 bcc3f230524edd1edf28be5ae9c7ec818f76f8e92275a8eb9287206ed3c87680ba2e6d52dbfcbb8a32ff72c4892758d31ba50904873f362a4a22ae6820d17404
SSDEEP 768:OY8iJIo7pLuLfxNWvx78r8F1+UoAYDCx9Tuqh0VfUC9xbog/OV/FSALl6opdAroa:OY8iJIUEfxNWvx78ru1jaqFSALocdLLu
TLSH
T12FF2EB3B6C0CCB7E4F804E9CEC2A6E9A6DE801CF5698895447FA881C03C66EF55175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 decad9789743b8ab827cd7e9a819305c0a6228f834aea1bfdb4a4e959c84398f
MD5 5207b33b3e058b744c462ffc94a0c8d2
SHA1 ddedaff96ba1e5737143776be43269b0375fd2ab
SHA512 a823cf424eba609c87b3b8bdecff3d0c0ff3921c9ccf529a9fbfedc6032545da5f763a9f5790f5058b94c8f40bd24878cc980f0946f229b3f215cab43655c07e
SSDEEP 96:KgvmbPVdd+PtklFv+K9LFR+p3v8B/fs4AKdGVDe1ZzJ93iFgugh3K4Wg33M7j41E:DvmbPVddItkfvvLFRU3v8B/fpqDe1Zz0
TLSH
T1AEB1204172BF42413C7F250CD361972B569270A33018A83B7BAD02B68EA6E274DFDDD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 11f91443f888fb7732ba9d1e4f092c564d72cc20c4a202a1cc4b8970368b758d
MD5 77fad59b040bdabfdd41f2ef1f628d73
SHA1 bcd3a9599d2e6b003c30c400be521f4fee5c3c5e
SHA512 42186eb6ea4ec2dbead5aaa180690f999405766864ee6c9b9d24153ae60aabcc86c6db5997a90bbceff682ce18d32ab891683635da1d0b45b6ef7fdb578e5a9f
SSDEEP 96:ZqONkWQsjpfmUTmDK5ih/cIPURHl8h4otop5O5D2BhPwivh50xy0SFYK+AxADqQ3:gONS6kDfQmiUy4mZ903SQiWFjU6
TLSH
T1FC02E8356C782CABDEA3AE49F48737275FE5212BEAC53F94D9E81A1C40D724C1306836
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 26KB
SHA256 e1294fc297d1adc5266974acd879d4459b3265393d1c40c316deef9792852212
MD5 945f9d243ebeb59d56961ebbf04609c8
SHA1 258bf308305e9925d806e30bbddaf0873802c715
SHA512 75dd43f65ab2736b10ea6d3e176b944fea17e02536ac0d6ed02de804a32f6964bd3c6dbc0628f6a0335e25edf151d99c0c55ee4c529138100cf73f41c4ecf79d
SSDEEP 384:n6ZcIhsNhUJUkUQxaXkBgkCh7rStdYps0/xKeQNrtDWNv+xQAKu:4hFUND9SvMKeQBtDa2xQAt
TLSH
T1D0C27CB1D8F85DEA04A2D5C9E942F5232DB44237C6CCAE5CD2FD723A30AF5B91316426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8ea79fa4c6b7cd59c7526d506ef3a3b5e72f0deca45ceeaac98b9dfb81b98de2
MD5 e42f0c623f58ff4fa4f92dafbe17455e
SHA1 2f8da566cf8ac0d6f9100bcc7c6893eca46ea46b
SHA512 7815a29bdfade8f6425f7b1b7cd600ba9de1959f2ae027f1d559872561c246c64e4ca9bada946e48fb6b1f7c9f765dbcd6529e685b5587d2f2a4657588c36ecc
SSDEEP 96:SqONkTQsjpfmUTAK5ih/cIPURHl8h4otop5OvD2BFPwivh50xy0SFYK+AxADERxN:pONz6ktQmiUyIml903M6NktcRXqbhU6
TLSH
T150122B3168BC6C2B5EE3A905F08737275EA5217BEEC57F95E5E81A0C04D734C2B0B426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

f4705c1c-b942-4aa1-9572-4ae5d7940c24.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f4705c1c-b942-4aa1-9572-4ae5d7940c24.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 8ffc5117aefcba7ac894fec830cc606832e31590bd76332b063678714a5b80fe
MD5 db9af89355bf2c845777a9f6bf8b1623
SHA1 072cfc4e7b9da6a5d00ed3cf21c72926be11c7a1
SHA512 b1c87728878ad30584be56162d782617cc79e6e25981fcae639367192f9f0309637a7ea45aca6b5a3382277ba2acc0dc7744ab01709f889f7a2a52b178c81e03
TLSH
T19441295CA6FD1148B3B76E5AAFF6A86D487EBC772E06D49D00110E4E0A63A44C861737
MD5 SHA1 SHA512 TLSH

Submit Download

2376bef4-f05e-4431-84f8-b189f7bba878.tmp

Path C:\Users\Admin\AppData\Local\Temp\2376bef4-f05e-4431-84f8-b189f7bba878.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2b051d00-d37e-4697-8de3-27d682d7d0ff.tmp

Path C:\Users\Admin\AppData\Local\Temp\2b051d00-d37e-4697-8de3-27d682d7d0ff.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

crashreporter.exe

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\crashreporter.exe
Size 259KB
SHA256 81b7284f212675aaeaf0161a25f26d2c40bcff8af717ded376030e84233b680c
MD5 9c424d3bc802cc52b2a1d4b4a5cf80a3
SHA1 35c439641d5f51709ba1a084433e53e370794b17
SHA512 ac71e6a6b7fb2d5b352cea4b4faeb1736d455397b594d5c18f9d7d24e995bf6a9ebbfe08477d7d467de7d03236ef4175449de9b5691ee4eda5156bbe2ad1d23b
SSDEEP 6144:+tALOhYp3Ze+pRgcQRNZMs9xe56HQLlu9Tp:+tACYp3Ze+fgcQC2xOiV
TLSH
T1A4443B0B215908A9E97B90BC87979952D5B238060325CBDF07E1876F1F23ED86D7EF60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

crashreporter.ini

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\crashreporter.ini
Size 3KB
SHA256 76e3b384d62d63cb2267e20703ffd64e3887aff5f46338d17b5f7269f524ca84
MD5 c67b56b396fbb27fc2cf47fc24dc5b93
SHA1 8a6ee8609708ffaa6a57223d946737d416bd9c0c
SHA512 864f049705a7483d0a398d16916fb71a994b03d68a59f73d60829ba8490d88d42840676f67af1420dbd408d37aa48c9f9833db1963cec5b66c7d6d90dc7c130d
TLSH
T187811DF0BA9F22F7669A11E3668986C5772031DC0A578A083D06430F35ADDAC5F774F2
MD5 SHA1 SHA512 TLSH

Submit Download

eula.rtf

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\eula.rtf
Size 25KB
SHA256 106026f3033b445a8cb82eb1cd328fea6ef33ed51febc6e92d9b4fba4a9a85aa
MD5 539de26745b631a6ae4994eaef805ea3
SHA1 b21632775917e2b62aeffd542eba4f31254515a2
SHA512 4a1b384d052e8f48d9bc02dad96f099c9b3f45e83be256984183b61fbb4e28f47b359529841b27bd090f76c420ef6592d2c4e3ffbc0c737118867aff15c5a57e
SSDEEP 384:r/r1GBqilnSIVxdHVXafKcYTVA54VXaulYyDMSVnDMm3XMuHJ0Fun/JRb:PiBpZaXuDZaOIZg8kSFC
TLSH
T178C2BBB3F2640DAE7E8201C5DD5457C669D8402FF6FDA97294794C0C0D10A78E6F2AFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ftd2xx.dll

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\ftd2xx.dll
Size 307KB
SHA256 9c282c4580aac9388adadf8c2d9794cca2f953af36331aedf814e936cfed97ad
MD5 7832f9df38bf967e60ee067a780d0201
SHA1 ed7a81137f109d504899c8e4a6b1e9e3ba108fe2
SHA512 a278ff53ca44cbe471bffa38fe00e86c01b776cdb199a3cbf809162716f6f5bd3db143fd92bedcaa48c0c99e56eddcdde93be2ab40e08713ce32f021a5e20ad3
SSDEEP 6144:cKiPPkDbvwp+Oc9WrH5iGPLjzTYJrCkx1qCHuQoIzeJ:f9UUDECHbzU
TLSH
T108647C4672A419F5E467D23CCA934606DBF6BC560370D7CF03A452962F23BE0A63E726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

egm96-15.tif

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\geoids\egm96-15.tif
Size 3.3MB
SHA256 67ba9175a290ba4a7d82498bab182818876e3802c1415907998813ffa51132ab
MD5 f0670b44e87649f77816ec5861e7ad3d
SHA1 28cc7b67f75fdf1dde2453c8a375addb3ef39fc1
SHA512 98c6a199641a89bac8ed34b5c2774ea03dfa6844207bd73babf5dc22d58061b5dece07f2164cc994aaf5de2e65511bac5d4e37d38710cd36c1a2d9bfdbb095a0
SSDEEP 49152:hO0dfb8Nrc4P6UiLjRComtHh4nZa8Bwnr5IkN3Ajh4ZC9oQIdH:k4h4itjRCz9hM7mVM4x5V
TLSH
T10CF53391717FA42EDD6D12E8EB581E7F5BBE0B8CC199418A006CF6E86CC611E7C9D0D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mola_areoid.tif

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\geoids\mola_areoid.tif
Size 321KB
SHA256 6c1e3789f02b88182080297a33ccb4e3b62c815fe94a8caef4553d39771d4394
MD5 3c3dae5d261010cd4e1ec3ef7559f7d6
SHA1 7a2ff30d3cdaeb0a0d1c84015e326ac0a9dcdbbe
SHA512 da34d7eaa4dccc47f3880903fb10f2c22a85de58ed82dccc99a3bf30b6be1c96587e562594f93ca7464a83bd88ec07afd7e42521fc744d969daba25df210ac3a
SSDEEP 6144:x+EnSEooELh2aHqjooEnIxCWMLlfNeC2mCkDTvhUbUQuYAdOvj8GEM:x+Ejjmh2EShEnooDVHCkDThUbUQeOAM
TLSH
T17D64221DA632BD12F9ED1FE31BFE2837D17744E0067328652655F1B98205868CF2CAAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metashape.chm

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\help\metashape.chm
Size 7.8MB
SHA256 17102c3e2715a1dc74c70e66415ccac79d3b29efed04b9da91e48ef6bc6abd1a
MD5 7ae812f637ab9bf50a46fdfe72b308df
SHA1 5837591163c809241587658c6b7fb7a6cf534fac
SHA512 5075c192192eb9f85bda86684e8017e47c71b72c34c3722bb792c2a579d8cad63d2c1ed00117dbfb64c1b3d2fc0cb2abe61fd94b99280a7c104db1fd2a34b044
SSDEEP 196608:/ibBybKrDAoYWbV67k+J9/9goaTnq+3bE9DMd04n:/inrDGq6YE9+HLqqXn
TLSH
T10D86335D809BF8D3C785FD79AB6B572A34318F82B4A681F38139157013A97C3CA37A49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metashape_de.qm

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\lang\metashape_de.qm
Size 669KB
SHA256 422038e9903a7feeb86ac487a04c524be5e67ae9f5e40d11f998c7eb1e8392fb
MD5 517fd556b9b00566398807541ca0b202
SHA1 4c38e000678bb48812aa582eb6446f4f0916fbaf
SHA512 0f0427a4bd06cf48399230e4c7698f76923d458f959828bd46f61e5608ba946f217602f3bad0a13ff43bb7594651fd10310619886f565091380ea4fcc8bdf2b5
SSDEEP 6144:Q3xvlOx8m5ZOqiuJ1GC+Nj4ARsipHOUz8UL/G:uxvlOxzPf+85
TLSH
T1C7E4CC8123F95A1DFAF31F7E29B653849B327DA2AA71D21F0344A07C0531685EA27773
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metashape_en.qm

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\lang\metashape_en.qm
Size 1KB
SHA256 aa99928ce877618e03697a6e13661d2333bb70ce3c226f2c6e1440d967adf824
MD5 355d64360530ac7108ca9e56a5bf745d
SHA1 55dd0555bb282d93fc2fd6a520e43239ace094ca
SHA512 df920efd508e7b9fe7d0cf5055160aa8f5af5fdec684907d14fca3f6e52ad17ebe432151ea14fec295812385f729d101082f24794ae1f56e2ff5d396c69fb490
TLSH
T129110A921FF82D0AFBAB1B39454F461D9B3234426654A20B13266B751151C9E9B1F363
MD5 SHA1 SHA512 TLSH

Submit Download

metashape_es.qm

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\lang\metashape_es.qm
Size 688KB
SHA256 165cd44be9e6d7b41002babc7e7e02846c199dfff375d728a11f40c5880c82af
MD5 73c0b1bfc130fc621cd49f2b5c519852
SHA1 c6a6ef8e9493fbd43c8c9708b52d427f058e99f9
SHA512 3b959bdb97a7624649dd60945e23e7e5c0e54f488fe21169f7c177745ff7698f05861948b8077115ddfe3bca871e9d5654881642bf6e0e31985e46ba7a8026d0
SSDEEP 6144:PfO8XJHZKG94ll6p1cz2tF+CesJCilOxC0DQnxSljNANSTkP:XO85HZV9nw2pC3xC02So
TLSH
T1A3E4AA8123FC6609F9F36F7E6A7A56448F767C92A934C21E0364A1790C31E44DE3A763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metashape_fr.qm

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\lang\metashape_fr.qm
Size 699KB
SHA256 466dc0632325c834621c0227aa99bfbb9a292f7145fa85e11d4aa7f6c6119633
MD5 0e02adb688b75fdbc745bd9e7c7e049b
SHA1 13c4010540aa6f497ebdf126c40227d69ce80865
SHA512 c1e5dd555bdbf29d71fccde4f83df18b9ce1823fc0804e8c5230406861184188acc198d4b98672a9a39f821c02758646ffbc953ef120fa3605ab1e9302d0bf5e
SSDEEP 6144:Uvu9ULuLSMClo95W1VVT18cYApwiF2lUzzQeSEs:Uvu9AP7PVh85OY
TLSH
T160E49A8123F85609FAF73F7A69BB42058F767C569D34C21E0694A0B90C71E58DE3A363
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metashape_it.qm

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\lang\metashape_it.qm
Size 690KB
SHA256 822c4e3b86825bd45ac599df61ee8ff8b56399651216390dd3f6fda4d9f11b82
MD5 f1639e7ecb9890f9f9698b41bd40d65d
SHA1 5ff5e644817e90e98471bed9edaeac6119b34ee0
SHA512 09cee94649b584e7a26ea6c9913df71677244468e73c061dd1c31bd8e6a30a378e79fd86f44ff191bed074c8ec1cf393ecdfc655119203054ca34180be318184
SSDEEP 6144:oKhif5Vgsy5SrY0+gwl8kqOGQD3peXvH5vkZAtijbnEwK7/JwaWntcsqNwTvcGia:q0g65eyia
TLSH
T1C0E4DC9123FC6A1CFAF36F7A697B53448F36BE526A34C21F0395607D0831918DA66363
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metashape_ja.qm

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\lang\metashape_ja.qm
Size 521KB
SHA256 7464ad379964b635b3d2844729c0dc314d86fa71e959742af8d3203c5bcecae1
MD5 cda38a9289ae7009ffb5dfb24b1a9476
SHA1 d4d1541e6552a0a7777f4a871df4d86b32ef8895
SHA512 1835a6d66153d68548547f331b3e71d1fa2e3bf45ebee8d21b28a852d1d82ff367034ce0091242f62018b68ddc971875ec113d0bc74b34383cd3f1f9619f03a1
SSDEEP 6144:+pw+BniOWVgAFQGzbbTv6uyEOGl2vs2faDk8O6fLruJx2QA+:+pvi37RWyat
TLSH
T166B493C931F86F15FDD64DBF0243A348AB36A911AA918B5B5795F476041A00CFB2F38B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metashape_ko.qm

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\lang\metashape_ko.qm
Size 511KB
SHA256 c4ac5a3d9bcf41089f13051d7e384c234075eecc99381d66938970511242bf46
MD5 6bddb8e57f03f02ba6db480644cfc0a6
SHA1 57d98303b853f4383e4dd5e18fbba0e25b06ead7
SHA512 6f238ba19991c6ce7ff08e7af8abcbf82232d7bec9b483d959e59f1280d747ba2a9016295dba49b44d6626a58840c8ce6f4200d3eda53d03e02b50b9208deee2
SSDEEP 6144:FekH04XIZwY8VNaUgQlbOElpMtMvbSiLyj6oyi:UkHxOkpo
TLSH
T14BB4A2C662F8AF10FED25A7F01839305EB3646522B60970B4399F979185641CFB3B78B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metashape_pt.qm

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\lang\metashape_pt.qm
Size 313KB
SHA256 686542d3e09740fd11b69fcbdf87466d533a62087770ceb46348e84aae1e6812
MD5 d1bbb8a15b04054c8cb7107b4994a860
SHA1 f916aba67d2a6df9672f995ff568a8888be3c5a8
SHA512 ff4f6a820de60c7797fd8defcab5de24eef68f73044b96805033f62ebc9fd27b5e09a6ca3d26b44646ff0846739fb59a93515bca4fd907fb07d3b2e22b77a304
SSDEEP 3072:5yze7TMqBxH7LHlajDdiJgaNmlyeGInZu0oQRZABFgORWNn3x7NvclR:ce7TxxH7LHydJGcZ3oW7NvclR
TLSH
T1A664C99123FC6A18FDF36F7E567B93588B7638526974821F0365B0790835A08DA3B363
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metashape_ru.qm

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\lang\metashape_ru.qm
Size 673KB
SHA256 007e907f8f420ef0462cc754f3a1abab33b408f10e6edccf9c6aed18df488c68
MD5 77f9956a6999c026e9338b55248c6759
SHA1 b236b16d4849ce7c5f49acd5f5bce44ba2371976
SHA512 2c78ccecf19d8943219937771875694f2f31e3700965997f0d1ad5d4797a8392830df9763ceb6ac1d924c9b04c6524f8004a11762b09317d922313269bdacc4a
SSDEEP 6144:aU3rYkyP4qZsUkaaQcsXd3JKqHah4y/Hj:hbYP4mk
TLSH
T172E4308936FE9B01FCA1D63A0B83C2DA562AB450162145DBB78DBC78045C539BB377CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metashape_zh_CN.qm

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\lang\metashape_zh_CN.qm
Size 440KB
SHA256 1f2872d71fa48569f0fba70f279755391048c58c326b7efe5365d2fba4e35dce
MD5 919d4f39179d52e288a04ae01d59a6fb
SHA1 aa59ed0f7bd2216153092cc0c0e33c41ffe90749
SHA512 18e088e57acad938f0b48b46d37bf91e3f2f86afb65490b98786085cc13a27cabe1c41dfe65855b73046fe9ec3a9ab8b8e4a34c8f9a0948e3a9e897679d68635
SSDEEP 6144:kg4igKBSqci6G+F/5WveNlmpFUXKz9j4sBGwtqMUOIQAl0Zs1Fh:AEB3qEQ44szst
TLSH
T1EFA492C221F8AB61FED35A7F02879344AB3652522B50875B5796F879081641CFB3F38B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libgmp-10.dll

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\libgmp-10.dll
Size 540KB
SHA256 ffc64b767314fb99d03b50998e759c18a94c9ea09d65bdf31c218ee8f6095ef9
MD5 ddd26c3e4609c2624f28b6a09d13ff4b
SHA1 fda790f3a21749608a074b7e1e76e90bed3b311d
SHA512 0c1e5a9e43c400d0d86ed34615762926d796d8ed3212872ea91f4024542ded09fb5324d20e12ebdf0c6ae5e07902795bf0d3cb3d258fc5bc5a10d0b405028f58
SSDEEP 6144:iS5KjgGnpG7wZAF86y2iLmKiXc2HsvOB/2FV2/vF98G5hSkZqBG1N64vd+nXZ:NAgMVwPy25G2j/2FVuvUY0yN64vd+nJ
TLSH
T1CCC44AB3A1599CD9D42A82B447EA4B336734FBD44782BB1316D0EE321E63FD06E98315
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libopenblas.dll

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\libopenblas.dll
Size 28.4MB
SHA256 e25bf16af13c9335911d5fb4ea25dbecf2cba7e2d139abfe7d289af2c1683f34
MD5 34898c10245c092b707bae0fcff25066
SHA1 d23fbe17b8a174caafaaf88901cf9428866e50c5
SHA512 2ca792f8195c05dc49393347374af02a89b77f6a2d92f8a08375b44d2219ad8af3527a7ffe11595260f7842942aa4f6652caef7da8b8c8fe3602ec51e0c5df39
SSDEEP 196608:fYchwfjkLKE/XoIM9l9BygI+C9FhTptOS9ug/L:ZLFp/L
TLSH
T186572887F4A650DCD97BE1B0436AB933F8213C1DC43879765B91CB242B74B40EA6BB19
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\breakpad\license.txt
Size 1KB
SHA256 f529f4753be0c88c692940e720c590c3058c6bc532a6634e55d541ae2a58a47a
MD5 4a265c601cdcea7e04247fa5754bdca9
SHA1 959cc8c0bab0b9c7138be4f57f6748819b5bee45
SHA512 eac79f7e92b00f02df2a2c8914c9889e8355d2b845d9d451ee255a802b254d9fc1f34a0d8977393de6b5d86bf9b160321c136e26f3bfb8364c8bfc3a585f3e6a
TLSH
T1EA31625752840FA31AE256547165BAC0F08DD02D3F276A052C6EF348577B13E99B3480
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\cholmod\license.txt
Size 384B
SHA256 9ff18bb1a56a2eac87b9a721ec1b455a28a24754eba878babf70a3c1cd4499e8
MD5 65e53d3f6136ee377b38f46ecc1a5a81
SHA1 6f7a9eac58b7c81f4e69e30124d221da459ed91a
SHA512 107fd6db2e53d482b6fbf7a21b1e31a2a636c13413c41213d2ea65f58a1a23b429defed7fdcf9ec9d3b75da34feb93cd23ee5bac690c8705878708dc3be2555e
TLSH
T1FBE0F18553109678657043A241804784F3ADAFC06D3508406E00C89C7122C78B27B64F
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\draco\license.txt
Size 11KB
SHA256 58d1e17ffe5109a7ae296caafcadfdbe6a7d176f0bc4ab01e12a689b0499d8bd
MD5 175792518e4ac015ab6696d16c4f607e
SHA1 1128f8f91104ba9ef98d37eea6523a888dcfa5de
SHA512 31cc38066678c030e8f6378dcae59add64566a977f92983c3a4c929c9b76424291915ea4283e1367ece50b9537f8d51970aa8fd5ce063037aa3a7c45f0677d25
SSDEEP 192:nU6G5KXSD9VYUKhu1JVF9hFGvV/QiGkS594drFjuHYx5dvTrLh3kTSEn7HbHZ:U9vlKM1zJlFvmNz5VrlkTS07Hd
TLSH
T1C132623FBA48037706C20162BB9764CBF21E903F3B552568354CC1681F6BA6543FB6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\geographiclib\license.txt
Size 1KB
SHA256 24d7fff4521dc689be44f41e034d15dda17755f279ff9051524f375a6528c2ec
MD5 ff9309ebe9fd0ea2a5cd52375ad19959
SHA1 0659e669e5e3c0e928731d43ed2bf0e472c7925e
SHA512 652710663097447101deae6fd712f68022824716f69ac800fac72a9afe759fdec57651d6e263d36e48ee51c656affbdc31492f96167ae6fe0d5064b18e1293b9
TLSH
T10221331E72650772285A13615979AC85F36BE24B7A9F1684245DF3443327069D5FB840
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\glew\license.txt
Size 3KB
SHA256 38a38de1748714672193f12c6412489a00ff65a61e1bd2da9f360db990d156cf
MD5 dae3c1b8e894ed6a87dd12c8e33cfd07
SHA1 6c8baba2a27040b4536936c1b80b93b9edbe4c3b
SHA512 181858c3090ee1fe7c57d6662cbf3beac02b5b6923de12b3d01d0c2168d39fdbdf11985b880ed2ae8be9a02a5da3b03a8f0beee43b62dcb15d4a6a4b29aa2b12
TLSH
T12D81B85E224507A61DE2279166A9ACC5F15DA01F3E7F2E0834AEE248633B42CD6FF458
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\gpmf-parser\license.txt
Size 1KB
SHA256 84bf05fe29386061583342658186fc797be93bd80f8b8e6ff4e3b7af8a3b22df
MD5 0c8028abe7ccc6d7bc1e590a411a6c30
SHA1 27f18eadd61b2fe002115ca504087ce254b166a3
SHA512 afa507723e654fbbe34543a6eb2fb403b8c3d319d3b9e6a34c28e9d1085998a09c02d3d7a18bfc69827fbd993fa1828f163f93fc28e17edb464f712b2ef52c0e
TLSH
T16E11421E725007A2289613A099796C84B26BB25E7E6F2784046EF345233B4ACD1FB854
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\guided-filter\license.txt
Size 1KB
SHA256 622366a1da12dd0702b0651c89f456ee6ee92688d0bfa03bd65206b54be7d9b0
MD5 510ebe5b2c1efada588f5ed68d12df0c
SHA1 fb4a2770d689b497c9baa4c3b3edbf67e0d7c4da
SHA512 6d70472eb1010a1751ef13ed0633de527a5c0386a723cbee0d1cae194807207f6f4c5bbc99a9001148488a99c8abec392c9e8a7fb6c1ba25fe4f992330742e37
TLSH
T13611B51EB35107722C9A13605978ACD9F23BB25F7A6F2A84146DF341233A06CC1FF844
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\laszip\license.txt
Size 27KB
SHA256 815d93f9df434f103ad55edba27a7aeff42a99de3490ddd48a2606cfa7ee0cc5
MD5 c24549252d83038c8530a676c3b8892a
SHA1 b9a515c61537fee5ab6a2b5b69b132fb8203ce97
SHA512 a660110a854e87bfa1ebd09270e383fcc025a37c10a60601ebd0f6ce09316cee49e1727481d47e1be99b34ec4d0c4bf334645e0c836226e95948a8584ed79547
SSDEEP 384:jz6ajWBIk+x/vIqk0TkX6sT6AATeINgKP+nHQ41fgcmmItyOQeM9YfWEeHBfuoA:jViBJsFkOTeDnLqFXTfleHBfuoA
TLSH
T1A1D2963AAF0203B216E282405A0FA4DEE31BD0793267596474D9C19D236BC3553FF7EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\lepcc\license.txt
Size 8KB
SHA256 77a8b761727c75e2167b15bfdf61b2c0bcf8792271228bebe80779106ad00671
MD5 06209abe95b90904e809b2e6f3ba4ea7
SHA1 3035b519169390d1aaa3a43267deaae5cdff8a9b
SHA512 dc8165e762e54765ab114960434011af138f84ca594f9df1e5f8c0b435965c76f330dd21b7047994403152cfeb45dd3cf149bdbacf0f2773ae1790fa89f06a6b
SSDEEP 192:DW/CAVKCUJo1miHFfnFm6guiPG70yHb60mcCZ2ESHERjzjSY:bu3UK1DNH8s+XplJ
TLSH
T13412647F7748037B0AC30172B78BA8CBF32E903D37A515645059D06823ABD6583BB69E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\libsquish\license.txt
Size 1KB
SHA256 a6b8c383bf3ab28460d6507484d605dd722e03971606f0cd3032a3af682b63a5
MD5 6665e479f71feb92d590ea9ae9b9f6d5
SHA1 4f0bc63cc3f7fda5975edb7adfb47b68d00e6e0b
SHA512 39a6cceab50f5d09f8510d5c90899381004c325d6e3f4852159b4db8f3202d385c3fc293b764984b00c59257f3c83aec5cb64c056bc4ff88e1beb1a05a8c4e7f
TLSH
T16321861E73641772185713B059697884B27BB15B7EBF1B88346EF288233A46CA5FFC40
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\libtiff\license.txt
Size 1KB
SHA256 8f859efd8916b7df374bd39dc9eeea9d53dbcf35e62fcf670d2b3b4c4d8f251a
MD5 9f84fd60b78968c0a84c0fd9ac7379cb
SHA1 f1a98d8f62af0ecf27736e2117608360013aea61
SHA512 b926c9c8ef27bd7b3b0777cb6f11c924b73af9f357ba9ba6ab3c40eff4740225947181200ede9a876fa117cdeb023bee764bc40c7eca4cfc9118daaece083ba6
TLSH
T16A21A3AAF2200BBC1E625B612EA0B880A04DF13E3CA39D4E344CE488432744E6C7B590
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\libwebp\license.txt
Size 1KB
SHA256 5aec868f669e384a22372a4e8a1a6cd7d44c64cd451f960ca69cc170d1e13acf
MD5 6e8dee932c26f2dab503abf70c96d8bb
SHA1 59cd938fcbd6735b1ef91781280d6eb6c4b7c5d9
SHA512 04702240d3d891cacea23641652fa8e001733538e5671360b411ca5af94813968f992268142e054b34478c3b1bccb22e76c32f09b88130c2f5bad32c50f7e065
TLSH
T1CC31429712401BA34AD256A135AAAAC4F09DD03D3F337A052C6EB384577B52ED8B7091
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\libxml2\license.txt
Size 1KB
SHA256 516695dbe41cad78159d552257d8fcabc9ee68a60f7096358b78f6a44044e01a
MD5 e3460f3583ee61d119247814d41aba82
SHA1 0dade9cee80bb5fa7d53d49c4fb8f357ac3443d3
SHA512 b88639bd0f62dd3922b4e38439e8502717db869632cea5dc14b29cae26484929bd0ecc43c305fe4502e4a6914a762626d44206c9cd1703033aef85358bcfc1f4
TLSH
T19111861EB2A543A31866136215B9A8C4F13BB15F7F9F1644747FF244132B058D9FF898
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\meshoptimizer\license.txt
Size 1KB
SHA256 af0399f6fe106205872fd58c25f5a33fdefd34754b6d96d3f6b4307eb17d05ed
MD5 8800c783f06905263681ea3f667dc266
SHA1 1dfba699d745fd08739493cc942e0717ab97bfef
SHA512 b2e80db48de0c452e285bbc40f8643147da3b7869d26826ec1f71fb151648952d5929e363546949dc0ed32d3f30abbc9f2e87a5c213d86132f8fc5823833f0fd
TLSH
T16F11821EB2500772189A13605578ACC5B23BB25FBA6F2A84246EF345232A06CC6FF840
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\mikktspace\license.txt
Size 879B
SHA256 cd696918789773ea172c60640e64e1ff204cbd068fa266172e009f72ffe71a84
MD5 fc11942672cabe173ebc096898fc3320
SHA1 8b30ce6fd6ce0f42c103d93f3335ae80980c4732
SHA512 f04e43701f0444f14d7eec5fed39f20f76c82d997e9d1d1f9e525ce8c9c5a3b45948870cc64667e768674321d0fd110e40c386da10e7d99b3084fee68fab8686
TLSH
T119119C5B3399837214F202AD3A558D81F7275E64B74E46E570BD809C37B62115631468
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\onnxruntime\license.txt
Size 1KB
SHA256 2f07c72751aed99790b8a4869cf2311df85a860b22ded05fa22803587a48922c
MD5 0f7e3b1308cb5c00b372a6e78835732d
SHA1 7311f2036f240ca974f7ca4adc6247f7d3b59606
SHA512 2803e85846b04fb0b873c7f324df43113ad7a682bf58824d6f74d431db2242f375e986c6fe13c96a61964bb3724d0d87441a452e300af99c65f8951a8df10e11
TLSH
T1EE11821EB2540B63289B13A05578ACC5B23BB29B7A5F2A84146DF345232A06CC6FB840
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\openblas\license.txt
Size 1KB
SHA256 28fd4aab754cf4d60015bbb48892e703e8f7bef866882d5f9f26e08ec83ff530
MD5 63e6aa424f8f4d2473bf714819667679
SHA1 2e4e744c6ba1152cef23c5e7097d2d42e86f766d
SHA512 a7f318ea19ae71dea7eb523318e05edd083460f8323f9d825a94cbaa3c71c4770064247437b6d5d8bf6ccb42977848dc84f79ab6e1839a29e6d3959098751ea5
TLSH
T1AF3173A703404BE74AE2179566A6AAC4B05DC03E3E336D053C6EB3486B7B52EE4B7056
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\opencv\license.txt
Size 2KB
SHA256 01f52fc04b48e604244300eae027371d77929f6a22daf135bc7f8d9c82ed18f4
MD5 85e9b10b50bd8dcdc4b3a5a9f8923453
SHA1 0e77c2c70aabee9c37a5f9ce8e84c10f18756d17
SHA512 6b172c3dfbc0120466cdc633a087da946d091d6f7467b955eaa36cf2f550d04907c254ace103faeb20e9aee24d3a412c43157fe591a2c2f4bb2359ad6ac7cd66
TLSH
T11341FF29625C13765DF106D3A61BD088F21DA46C765F28423DBDC2AC236BC34C3B30AB
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\openexr\license.txt
Size 1KB
SHA256 14eba5f05238f57c77e94f0ebd29a0b3736ba0456ff990cda16e21b6903ac453
MD5 459493cec2d4a115e731c482fffc4b8a
SHA1 72f59fbac43fa1a7f0607d7fdba747832e626656
SHA512 3819c12557fb5deec9250c51399d7b598a927fff26e46c52fecaf653efc284df58d8c44f36d86d953742c4bc265bc107dd9e4c2b7f0cdccc0fa501c6bac41788
TLSH
T1CA31865723840BF656F21BA166AABAC0F18DD03F36132A05386DF3941F6B52FD47B050
MD5 SHA1 SHA512 TLSH

Submit Download

license.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\licenses\smallfbx\license.txt
Size 1KB
SHA256 88a95b9b07f601447f48cadae075aa21c46486a02cf01705aaa19e47f279b611
MD5 065fae1b5122548d1fb20cf1feb2d36b
SHA1 a09f62c43c90d750dacbe805eb50b0adf4b22715
SHA512 4edb99b55ceef539ca6cca9ddfcc6a1f44782f4b2b3c540efaf100c7ec375987dac8bf7376d50e64c41c15c761e0bbb61ab6f4cec7a8b6308f1c59308d6fb385
TLSH
T14911461E72510762189A1760597468D5B12B725A7A5F2A84146DF245632A06CD5FB840
MD5 SHA1 SHA512 TLSH

Submit Download

lvp_icd.x86_64.json

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\lvp_icd.x86_64.json
Size 156B
SHA256 ed64ac02ed6d36ac58d4c38e21a78d25f07a7d4b7e4e3810b078c1a32161c693
MD5 1da52867ddf3f614b1c0328b0df1c28b
SHA1 4f9dfa8741cba68e7667c916892d5b56d8e192dc
SHA512 955d21cbe463edef28e16b11528e50ffeb1424ecfaa2ffce5d5a53c7fc9b8ac4f817e0da6d7781cb39c8e3c1c7a6827ebe9fa0a352054a915d7dc92036d3fb74
TLSH
T117C04C15D3508C5751F08F2406A40B49EB95076F24215D4631B1561E5B22EA6A511B39
MD5 SHA1 SHA512 TLSH

Submit Download

metashape-server.exe

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\metashape-server.exe
Size 3.1MB
SHA256 88c7e8261450c548df69d8c92d1d13aa1199150017bb86202d6b3dad373d4778
MD5 8615f3a2592d315f3e3826480862f538
SHA1 113d4b7b17767ed67df43eaac90acd7cd22b1705
SHA512 768e354dffdccb4b973bd3977ec12dd462dc177700548461ddff7411a4a4000956f193aa592dd26a1d83463a9328fe8630b13e001781fdcb3d7d015a18f39712
SSDEEP 49152:oL4AXRQC4IbTU5tJpIRQx0JS3HRo/prS+t23FfkWhRmRa+W2vevWscbpBKDxEvyd:Fzp9Re43FfkWhRp+WqFpBK++
TLSH
T166E55B9B616800E8E477807D8AA79E07D7B2344643319FDB17E68A9E1F53ED50A7F320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__init__.py

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\modules\__init__.py
Size 38B
SHA256 5886c1d6eca6cf38e0d890c46da1ff6b8129db6a00e542c425e775e22bd757eb
MD5 80dc1db90cc5dde2f08aef53139aa04b
SHA1 9f9c72795b3109e6908781926ec405e2330aaea5
SHA512 8cb953c71ca3c04f011c889afd2a600b31bf64f2df19e44610a656e3ea136b19f298eb5feb52032f1a3db8fcf3bd6d92bd680310a78c3df5d81b34a647f29b7f
MD5 SHA1 SHA512

Submit Download

console.py

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\modules\console.py
Size 2KB
SHA256 7f9456d6af779a2e8eea7b9f65dae6a15a487edb8b26f5e5f13afd01679d99f0
MD5 0dfa575ddbe0ebc56677f0fc7001c690
SHA1 1a7b5859700064fa6abead9bffeff6e64c997fc5
SHA512 b7aa52ffd2450126fa2d1312aeab8e1aaf2bc99081a4df2ff84389222d4f9a4c4f1a385d0c5850222279852ca0999ba86ccb36151cdfc0f4b9f8c08d7f241be0
TLSH
T14551CF3224695853E35D50AE9AD7E229B79AF9234114C0F2FDDC826C5FC132896E07B9
MD5 SHA1 SHA512 TLSH

Submit Download

pip_auto_install.py

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\modules\pip_auto_install.py
Size 13KB
SHA256 bc2c4bb34f2927a2aae8f8cc997aceb0f9a26850b0100f4497bebb39ddd885ed
MD5 1fdf39bfaf9964a2d08dfff8cd02e846
SHA1 efe75fa3957386a587cae29b1c80a997f928c544
SHA512 5726aa312edcb468c90d42736935199607c7efc187825e4e173cae31ceeb8051adcf6659826a564d89d744f825fd4562b224dcbf41852f3944fde9bffaf24c65
SSDEEP 384:QAYGknlyjjhkkJ5faPJHoFjuraO+O7WuGec:QSpfaPJIFCraOjc
TLSH
T1DC527544566D806077DFA567508361136FE7D42B730CA034B8EF8584EFA15B4A2A2FFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

monitor.exe

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\monitor.exe
Size 6.4MB
SHA256 e229f949c7f2646b013d4f98ee08fb37c159b0ec98a7dd8dae6dd2530f043ac1
MD5 5e044d70eb99f5e45a31492cfb07d01d
SHA1 e41a26bdeb68ccefc64aa68a3ef4890c9f0e8d92
SHA512 fb1905d7ec82c9b084d4c3a45be22f65d49f01cd60d5c4a540a5fe82c6a6581710af6d4ef555b81e7e59da804b88ed69af4024857cf725f63a3fc76cc0259bfe
SSDEEP 98304:h3+1trvu7mkF5njIBGIWng8vICHwZhOk1CGp0c:h3+zvymkF5njIBGIWguIcMhOrGmc
TLSH
T12E668CDA235805E4D17BC03896A76903EAB3389143254AEB73AE9D1D2B7BEC41D7F710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

onnxruntime.dll

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\onnxruntime.dll
Size 12.6MB
SHA256 4d1bd0d04f69a6ee0648c93808934c2640d0730e53554458430ad1b24486f9eb
MD5 c574352cdb750ec88632d3e308606e77
SHA1 3d6deecf3d1399de7cc171ea3273b22a6c5d6f39
SHA512 577833bf3349c2689e9a030c3ba4ddb65327e0a169f0760752e3137f8cd37144418c49d68f184e8a6613c5d3b437215f9e83946af7250a2cf72aec8cc4d2e1e2
SSDEEP 98304:ba/RjNbV8+b6J+I1Ht5/huEtEwNEzcbDgHfBT2kD204pK2:bc7h8+bypjHtEwCz0gHfBTU7K2
TLSH
T1B6D66C27759901DCC1BFD27C9B5BAA03FBB1344943345AEB02A005662F67BF0AE7E611
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python3.dll

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python3.dll
Size 64KB
SHA256 813bc06bd54f6b3f5730621a9285ab825342d39700e6946dfc2096c1974da849
MD5 aa54f39cc9ad3036b9835eb326946706
SHA1 a5b333d178e5d41a26ed93935a4b8ea3e764eab0
SHA512 072869c013337b54e3318f2425936968f22f051d0dafd140891a7efb807ba2b4334edd65712a21469684decaec397cbeef201cd4b8bfc9abf33f5d72cbfa53cb
SSDEEP 768:8V1EbYGVXq6KC/prVHBN0cW18itCQDFPnOMFn+gikF/nFX14uewjBcCCC0yamM/T:8DmF61JFn+/OWN0IWIgL0FnX3qK7
TLSH
T175535F42BB54F8A3DBFA66FC39D199CE146B12CC872994ECA47493D30D1A310A6E734D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

python312.dll

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python312.dll
Size 7.2MB
SHA256 c08813585f95bda27262faefe14315d6737ff362fe8146311b539323e13efb58
MD5 fbc83a2f8ccf2e02aa193f7fc3a08e2b
SHA1 5d8cedda63da8ccb1a5f67189e7dca1ffcae5642
SHA512 2328447d8bbc8359f0bee7b02620f7adb493cfc7ff43cd39a5d2c21f340c54ed0ba319e53c14cc620a5fe2c76e59e25593d2a367cc3e0884e3c8c2bbffe56c6b
SSDEEP 98304:SP0qWYGX7EHvFx74OzZ8yn/nqmiYVWHaMaKgB8cnCx/df:fqWNX7c74OzZ8yn/7ixalo1df
TLSH
T19B766C1573A580A9D9A7A0708C23C28AEB717C50BF1053CB31AAB75D2FB3BD156BD349
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

INSTALLER

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python\Lib\site-packages\debugpy-1.8.16.dist-info\INSTALLER
Size 4B
SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
MD5 365c9bfeb7d89244f2ce01c1de44cb85
SHA1 d7a03141d5d6b1e88b6b59ef08b6681df212c599
SHA512 d220d322a4053d84130567d626a9f7bb2fb8f0b854da1621f001826dc61b0ed6d3f91793627e6f0ac2ac27aea2b986b6a7a63427f05fe004d8a2adfbdadc13c1
MD5 SHA1 SHA512

Submit Download

__init__.pyi

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python\Lib\site-packages\jedi\third_party\typeshed\third_party\3\docutils\parsers\__init__.pyi
Size 63B
SHA256 ddf071712a6926be84384714a23bdf946dc47a083b96fd90a7474d41020bacfe
MD5 84a27291937d76e46b277653002601f2
SHA1 fe60efb40aeeee2998bb07245d4f9571ad08825f
SHA512 e489e83fd33fdc8ba88954725f79c2132bc4162ba713c72b190b790b4a368e3ceb024d7b8bceec4544123a5435fdfd987876f1b2542da06cba899f5ac72945be
TLSH
T168A00247543970EC8B7D5D795D3F05B12925158457165921A4C4621563CB158C83536D
MD5 SHA1 SHA512 TLSH

Submit Download

grammar314.txt

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python\Lib\site-packages\parso\python\grammar314.txt
Size 7KB
SHA256 4305da1ea25c27fce08bd14001b76fd54fe42a0724bbd5168c76680a56eda5be
MD5 663bd8e6c3008a6849caeb04b084aed8
SHA1 bf5f44f35aa2e1649c780e87a779da4a97adae0b
SHA512 7a61aa2176d1fe366eddf6e6c1ba87185790ec375a9a430038b618e382030b369fb67862c735191e3622f522f6760337e97e700ff40629b76d8c505beb174826
SSDEEP 96:d8cvbzNX3X1pR3SylUHu5riFl69BFmlETSX6MckQlb99c83OiEhNhfO5ZCBv2OGf:d8cFX3X1pR3SylUrgM4B9hUF+
TLSH
T1C4F1911CA6D70B450BD150B7554CF3BA49C9D18E203B8176FBCD92FD8FCB0982622B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WHEEL

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python\Lib\site-packages\pygments-2.19.2.dist-info\WHEEL
Size 87B
SHA256 aad0b0a12256807936d52d4a6f88a1773236ae527564a688bab4e3fe780e8724
MD5 e2fcb0ad9ea59332c808928b4b439e7a
SHA1 07311208d4849f821e8af25a89a9985c4503fbd8
SHA512 d4cb3ca64d69678959c4f59b4d1cb992e8e2e046a6acb92341fd30b8ce862bd81a48cbfa09ec9ae2e735ffec5c12d246d1593a859615adee10984635a9ba8af9
TLSH
T19CB01224014004F41810FF13402C60241620C205A4A52039D44A01407506E1502EDC6B
MD5 SHA1 SHA512 TLSH

Submit Download

zip-safe

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python\Lib\site-packages\python_dateutil-2.9.0.post0.dist-info\zip-safe
Size 1B
SHA256 01ba4719c80b6fe911b091a7c05124b64eeece964e09c058ef8f9805daca546b
MD5 68b329da9893e34099c7d8ad5cb9c940
SHA1 adc83b19e793491b1c6ea0fd8b46cd9f32e592fc
SHA512 be688838ca8686e5c90689bf2ab585cef1137c999b48c70b92f67a5c34dc15697b5d11c982ed6d71be1e1e7f7b4e0733884aa97c3f7a339a8ed03577cf74be09
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\_vendor\importlib_metadata-8.0.0.dist-info\LICENSE
Size 11KB
SHA256 cfc7749b96f63bd31c3c42b5c471bf756814053e847c10f3eb003417bc523d30
MD5 3b83ef96387f14655fc854ddc3c6bd57
SHA1 2b8b815229aa8a61e483fb4ba0588b8b6c491890
SHA512 98f6b79b778f7b0a15415bd750c3a8a097d650511cb4ec8115188e115c47053fe700f578895c097051c9bc3dfb6197c2b13a15de203273e1a3218884f86e90e8
SSDEEP 192:nU6G5KXSD9VYUKhu1JVF9hFGvV/QiGkS594drFjuHYx5dvTrLh3kTSEn7HbHR:U9vlKM1zJlFvmNz5VrlkTS07Ht
TLSH
T11632623FBA48037706C20162BB9764CBF21E903F3B552568354CC1681F6BA6543FB6EA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\_vendor\jaraco.context-5.3.0.dist-info\LICENSE
Size 1023B
SHA256 86da0f01aeae46348a3c3d465195dc1ceccde79f79e87769a64b8da04b2a4741
MD5 141643e11c48898150daa83802dbc65f
SHA1 0445ed0f69910eeaee036f09a39a13c6e1f37e12
SHA512 ef62311602b466397baf0b23caca66114f8838f9e78e1b067787ceb709d09e0530e85a47bbcd4c5a0905b74fdb30df0cc640910c6cc2e67886e5b18794a3583f
TLSH
T12B11A82E735107721C5713B0557568D8B17B715F7B6B2784146EF240232A06CC1FBC40
MD5 SHA1 SHA512 TLSH

Submit Download

WHEEL

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python\Lib\site-packages\setuptools\_vendor\jaraco.text-3.12.1.dist-info\WHEEL
Size 92B
SHA256 189eedfe4581172c1b6a02b97a8f48a14c0b5baa3239e4ca990fbd8871553714
MD5 43136dde7dd276932f6197bb6d676ef4
SHA1 6b13c105452c519ea0b65ac1a975bd5e19c50122
SHA512 e7712ba7d36deb083ebcc3b641ad3e7d19fb071ee64ae3a35ad6a50ee882b20cd2e60ca1319199df12584fe311a6266ec74f96a3fb67e59f90c7b5909668aee1
TLSH
T1BDB01214054049FA2154EE079024A5711360850E64591035B4871240550AD4406C9C5A
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python\Lib\site-packages\wheel\vendored\packaging\LICENSE
Size 197B
SHA256 cad1ef5bd340d73e074ba614d26f7deaca5c7940c3d8c34852e65c4909686c48
MD5 faadaedca9251a90b205c9167578ce91
SHA1 ed1fcaba1dbbf55113abb419a484f3df63e7ecfc
SHA512 1e69c89558ffe39e5c1ebb6728c4f0eb6023563c7a7f31b5417a8efcc906378d2e2af7b0e06a66980fbaab7996aeb2ae1ea3918fdbe5ffcc3f77ea888a68efbc
TLSH
T153D0233A7297632241A105A9270704CFBF077D9458465305B41414E1309390B4A3C9E0
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.BSD

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python\Lib\site-packages\wheel\vendored\packaging\LICENSE.BSD
Size 1KB
SHA256 b70e7e9b742f1cc6f948b34c16aa39ffece94196364bc88ff0d2180f0028fac5
MD5 7bef9bf4a8e4263634d0597e7ba100b8
SHA1 fdc0e4eabc45522b079deff7d03d70528d775dc0
SHA512 96c3273d51b83b6ae1ab85fefb814dcd6c1e60d311d412242405aa429cc860412477cbd6ece171408dbb85f0c4fd742e3af20c758015bc48406aa65a1ab6f60a
TLSH
T11421569B01444FE75AD6169139A5AA84A4CDD03F3E136D05387EF385577F12ED8B7050
MD5 SHA1 SHA512 TLSH

Submit Download

_structures.py

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python\Lib\site-packages\wheel\vendored\packaging\_structures.py
Size 1KB
SHA256 ab77953666d62461bf4b40e2b7f4b7028f2a42acffe4f6135c500a0597b9cabe
MD5 de664fedc083927d3d084f416190d876
SHA1 fe0c3747cf14e696276cb6806c6775503de002b8
SHA512 cff19a724fac387599d98c0a365849078dbcbea65efca1ee445f158268b9241e552212a99e7e0b34394d246e3a06c999a7f1a967f64b2724ca9b623d62996c6f
TLSH
T1A721A7B4675BF4A7D365D1364852F883E30D3D93452E306074ACF8A4BF67A14DAD00EA
MD5 SHA1 SHA512 TLSH

Submit Download

__init__.py

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python\Lib\site-packages\win32comext\internet\__init__.py
Size 139B
SHA256 dd388bf3740ba9de76807a928b7552844018947d3a8555eeaa2cefce7d623d13
MD5 da92f5ad66e2a4e86379790c619c8732
SHA1 ae0b9ff8629a24c30b9a9444edb9d2c5105ae701
SHA512 03a60f8d8c8b02c508feb8836d2fd37517d75fc3afe02833c3a7279c06ab0401d575a2a234b0da01737d166e16c728c3f3ca8fdd4a76cd0d9c5a7da0075749d2
TLSH
T12BC02B104450224060336D5202320BE30B5EFCEF1067E0D1E31CC7142F1219844D7014
MD5 SHA1 SHA512 TLSH

Submit Download

ipython3.exe

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python\Scripts\ipython3.exe
Size 105KB
SHA256 360e0949f6e17356444d002eafcc14f175a9cfae7ca3da8ad9e2e14843e8d06b
MD5 2f2ee365cd47e76e43e071d14036b285
SHA1 7ce66cf7f4769d4f54c3259b779c091d3471b0a4
SHA512 25f04d690ce121631692b395b2f3309b2d7923406a0328ebcb60533f951f7fc5a0196df506c4cc0965ceaa266c10972e7fd0cecc19b3ce034fed7f45a1577023
SSDEEP 1536:1966Spw1RSGXwStXQR1mTqZh52bAGXHnDtCdGgYluexaNSxFfHYTo+G5L1:j8wDSRUT0kbAYn2GgYlBYN2fHYTo+w1
TLSH
T153B36A0A33D420FDD0675274CDB68A15D3B2BC2A4274934F27A47B6A1F733926D2E722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pyside2-uic.exe

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\python\Scripts\pyside2-uic.exe
Size 14KB
SHA256 bbb3de5707629e6a60a0c238cd477b28f07f0066982fda953fa6fcec39073a4a
MD5 91538df53511be83ee84a43e97430041
SHA1 32f4a73f1f15e2cc04da20dffd60e5aa40d32466
SHA512 ae56d867eaa5c884899591954ebf632f8c7dff2f18539b28277e6e523310a21986203b626e27fb1a968cf03c350ec04360308940bee761769cefd4b5b2917813
SSDEEP 192:a4Kpyocs8v22MgJb926etBG0bqIzHYAlgdQS5tObcP:aNRcJrMgb9RuBGiqIrYdQn
TLSH
T1BD522A4BBB8F09E5D63942B5D1331D2BE1B5B9211331679F0FB092290D753E26CA268E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

viewer.exe

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\viewer.exe
Size 44.1MB
SHA256 e582c21cdd8729af87b7c47543afcf6c84cb387e05ac5e8b74f8f3c4ee27ee36
MD5 4eab60051287294a645e708e1dadc11c
SHA1 76ca33f757905033f875141cbbebc35c15478fdc
SHA512 ae3753efbf5445e9c98613bb03107553f2138d8b95276288aa99ec6b2000f2ff8e1f5a32a73246592b42b3ed1e2b226b9f7cf8ecde9ad7251cb43f1cc8a58302
SSDEEP 393216:oveDKhs3qyn9bqtpMl9dkCf3hIL/7pnrV4iUMlSGTubT1G7hGBS6BuXqdsgtUSB5:D3B1l84BMlSGTubT1G7hGBS6btUsi0
TLSH
T153A78E4B716505E8E07BC07CCBD7AD07E6B2381503208ADB269896AA1F37ED45DBF721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\vulkan-1.dll
Size 669KB
SHA256 65465dd739f2f38164df0d4ad6c4f102a4b51e22ca6363e2c0a6088d1ba5dfb7
MD5 04c13ace9820cd676e58481aac7f236d
SHA1 c61a5db9a9b8f5ac4e853c57c42f20cd431e610b
SHA512 994ca0237f6911c89879f4d352e72274765867d1df35a41b4f9ca206d689bf6d948500c53d27c0a3ebe9a8e0b111838e2d016222820222a83d353358f2a7b699
SSDEEP 12288:A6QKQNMp18bRhGBPllWKNlC5Dkw7A6g3v0TAE7mFJoGvsMirNnx:A6QKkMp18bLWPllWKNlC5Dkw7A6g3v01
TLSH
T1F9E43B53DB940975DB778238CC938A07E6F1B95123554B8B017C4F28EF92BD86EB9B20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vulkan_lvp.dll

Path C:\Users\Admin\AppData\Local\Temp\TEMP\Agisoft\Metashape Pro\vulkan_lvp.dll
Size 32.7MB
SHA256 2d1038511d19ca674fa84f81e79e4df2bf75b55b65b8471b4794298cba4e9e84
MD5 4b25b0f46a53e9eb4c3b8d1be2e3d858
SHA1 46de9ada20d83deb6c5c172d7d2694a7e6e8ac7a
SHA512 9e2e5b53082c92b27c0c5e05befc38ba27135f515866b787cf917d180f4734e7914025d41aa3b9f0dbb666d8167aba5fa5d71eb187a886bb55de04612bbada2d
SSDEEP 393216:YHIOlPRW386VvqblGZov9vzhPQSmqPrl6q3eunvUEw0uYmI:yMiBBl3pT
TLSH
T18D774A17A2BA20E4D4BBE13491D25627F77374498335A7D7D2A12A5A1FA33F0663F380
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

packeg.msi

Path C:\Users\Admin\AppData\Local\Temp\TEMP\packeg.msi
Size 2.1MB
SHA256 bd6fbb37e3a237764f39498009c1bc4b5b096cecf8725e188e14c04697a1d770
MD5 53e4683a46d3cc92a59c6699244600d0
SHA1 b40dba8921d5f910f4553a29adccd2ae1be7a68c
SHA512 53232c0fce6b1bf723d9b8e04e570f676431c2feb3de991ca80d3fc3a725416a81af855af53227a5ffad89473aaa27a209ed243ceadd02b6c7496412cf1d7ac9
SSDEEP 24576:g0W9UxuQ76Ck1PFovX1lJQk2ro53t9CCL2:9J9Pa
TLSH
T1BFA5C750DE48EDA5E07546729731F3028F27EDA5A7E604196878F10C5C3FB8A2DAAD0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Aero.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdCB7B.tmp\Aero.dll
Size 17KB
SHA256 9bbbdd180dac3cf4ce36cbc12bd862cdd00880d87027395f92ede5476d1f0dd0
MD5 5155e506b908b41e113bbd7c10d4082f
SHA1 0e0d2d3a6c76c08d434ac7359eb9927f82ac6065
SHA512 a43f04fffb05458a307054caaa45ba81c383b0265d7af798996806ecb07b72bb5350df7bf4d6d7b21a30c82f4308343845bb32cc8e0ad0cd36e352499ca7ccb1
SSDEEP 384:z01Th+YSzSPHnK/QDG8hic1OyxOPnkfXeI74n:8T59dOyxOPnIXdo
TLSH
T107823B0A0F648173D7E2067AB4ADBB576A3E9D219B641CC343FB45846C2C7D23E7861B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BrandingURL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdCB7B.tmp\BrandingURL.dll
Size 4KB
SHA256 bb2b9c272b8b66bc1b414675c2acba7afad03fff66a63babee3ee57ed163d19e
MD5 71c46b663baa92ad941388d082af97e7
SHA1 5a9fcce065366a526d75cc5ded9aade7cadd6421
SHA512 5965bd3f5369b9a1ed641c479f7b8a14af27700d0c27d482aa8eb62acc42f7b702b5947d82f9791b29bcba4d46e1409244f0a8ddce4ec75022b5e27f6d671bce
TLSH
T13B81203B37F219F3C2314BBB18836ADB7A6E80200365405B547B1A6BB442CA7CD29743
MD5 SHA1 SHA512 TLSH

Submit Download

LangDLL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdCB7B.tmp\LangDLL.dll
Size 9KB
SHA256 ccb76172c2565356a838d7867a51e021478fed4d83eb41fe1dbb703f8efa28f9
MD5 d6d8addfea0ee1bba9b841e3bec0b5cd
SHA1 a36ba78140600a7b1a502bea25c50c76666f5d3f
SHA512 3f85eb0baca0794adbc7460af8b3b21d5b0b9d250eeba842f8524ea9736877aaabd5f51035bee8836ad46bf1d01e416119ca7f296bae32bacdad44622c1715ec
SSDEEP 192:J1V5tvxNSmwVEIvR4gqVwtVku+pdhhvEFjO4RR:zV5f0mwVEgAVeI7xeye
TLSH
T12F123A2357590A73EB404F7B5099F2835972DED07BD9440B533B02C92D14BF32EAEA56
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdCB7B.tmp\System.dll
Size 15KB
SHA256 e457505b7648838185fd971e19daf6fd626824d7935a2701342df7099315e62c
MD5 f4e3fa5c852d2bdc41756e58124b21d3
SHA1 a49ec55e50d25efa45ce93366fb64c4fbb1d8261
SHA512 3ccbd9bf27d7927fdf34aecf672d78cb85d00b2b53da631f60683e46d85eda73021d2ae2c7c3d533424b1f8d174093d2186e1bd821fe02312fc142048b75d243
SSDEEP 192:TDKnJZCv6VmbJQC+tFiUdK7ckD4gRXKQx+LQ2CSF7bVwtVku+pdhhuZHpgiU6/:TViJrtFRdbmXK8+PCwfVeI70HpI+
TLSH
T1F4627E8987A481F3E7808E7D05DDB9331B78A6506AE54E539F3314816E087D33DBD22B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

modern-wizard.bmp

Path C:\Users\Admin\AppData\Local\Temp\nsdCB7B.tmp\modern-wizard.bmp
Size 150KB
SHA256 f9a9b20145656d29e6567d67cc0e415cec449c6f76002478723f6ef44e449c53
MD5 af9efb9b6f28fa282978009a0c954ddd
SHA1 8ea8b9b41e9e7980be3ec521582537763e2b5a5e
SHA512 9f6755065430539cf5b50a15a8eff3dcd671a1a245d836b7bee553552b690bb999721d8c18762bccaa8f3f9281f281c5988bf3f7d79a01d770881aeb884520ff
SSDEEP 384:QSqhQvoi9xjobXUmRZE8+6+y+2+a+z+o+7+dZWlE5TEh4JOFWWS/7uaFFWhCbPUc:xRPjobXUm3o3Ns+9tDvMjViNK9Vwmk
TLSH
T1BBE360769BC01604F96FFFBD9135E8AAC1AABFDF6BA4F25C482130171B334D41625622
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsdCB7B.tmp\nsDialogs.dll
Size 9KB
SHA256 e31ad6c6e82e603378cb6b80e67d0e0dcd9cf384e1199ac5a65cb4935680021a
MD5 c10e04dd4ad4277d5adc951bb331c777
SHA1 b1e30808198a3ae6d6d1cca62df8893dc2a7ad43
SHA512 853a5564bf751d40484ea482444c6958457cb4a17fb973cf870f03f201b8b2643be41bccde00f6b2026dc0c3d113e6481b0dc4c7b0f3ae7966d38c92c6b5862e
SSDEEP 96:hBABCcnl5TKhkfLxSslykcxM2DjDf3GE+Xv8Xav+Yx4VndY7ndS27gA:h6n+0SAfRE+/8ZYxMdqn420
TLSH
T17F12F8675A4041B3E9A3223D306A3E3F8B7C9325D0927C03C677AE566AB031A7D3A354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4864_1557248433\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3bf0cd55-0fa4-41d6-a533-4815247e9b0c.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir4864_9407279\3bf0cd55-0fa4-41d6-a533-4815247e9b0c.tmp
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata-2

Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
Size 24.1MB
SHA256 fd54981a3564a78f80ba6fe1032b354eb7afda391a00d3ad9c219f5521a00576
MD5 6e8b833d64108838cf2fdd8070d57b1d
SHA1 e5d10ad0c6adb7a6a0c4817c757af64b261d2a3b
SHA512 6f299fa4f41336957c576f6c37c364a8de4ff489d3c2f952a47429e7b9f8b1cc168a92049ee3b1346f84a28adf8925a15e122510318443b8e6a92220b78bf654
SSDEEP 24576:uu8m+1zgdoO/vvTLrWceJG64dl0zEVMiwKmNeTtlU06tuLlBovVFk6XRp:N
TLSH
T14D47E42436F92110E7F79E3CA8F16A234D3A7D5B8C159E8D05411B4E0962FB1E872F6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

{54ef7577-e9cf-4504-a196-ed57c2226fba}_OnDiskSnapshotProp

Path \??\Volume{20c84cf9-0000-0000-0000-d01200000000}\System Volume Information\SPP\OnlineMetadataCache\{54ef7577-e9cf-4504-a196-ed57c2226fba}_OnDiskSnapshotProp
Size 6KB
SHA256 412230eb57fee93e8803b9e0943e704ed9118518e65585cd901f1d91da1976c9
MD5 48b8bb342e685c42f15f929a17ac85bb
SHA1 de1193a66761f0551573e65d8eebbbfd8e42694c
SHA512 454915ad3fa48d9ca0ed06ef4db1df1ca5ea303c013fcb67c537f161286341cadca73aa28fd336b604b1e6fb08f3b4c577bbe8a60fb7098a30c37655008eaf23
SSDEEP 96:FrA3rjecAevc8DD84LTHzbOHXOHBlBRQ88Sc9XE56tOSVQpu:ZA3Hjb++ZVm
TLSH
T1ADD1990C5AF54711E2B3AB3129F18557A877B911EF33CB8E0298238E6670910F935F5B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/3412-17546-0x00007FF916500000-0x00007FF9168D0000-memory.dmp

Download

memory/3412-19147-0x000002DF4A440000-0x000002DF4A53A000-memory.dmp

Download

memory/3412-17288-0x00007FF918360000-0x00007FF918DE2000-memory.dmp

Download

memory/3412-17287-0x00007FF939460000-0x00007FF939462000-memory.dmp

Download

memory/3412-17291-0x000002DF08830000-0x000002DF08831000-memory.dmp

Download

memory/3412-17284-0x00007FF629AD0000-0x00007FF62AAD0000-memory.dmp

Download

memory/3412-17572-0x00007FF912990000-0x00007FF912FCD000-memory.dmp

Download

memory/3412-17547-0x00007FF912FD0000-0x00007FF913349000-memory.dmp

Download

memory/3412-17283-0x00007FF91B130000-0x00007FF91B67D000-memory.dmp

Download

memory/3412-19143-0x000000006ACC0000-0x000000006AD33000-memory.dmp

Download

memory/3412-19145-0x000002DF07AD0000-0x000002DF08771000-memory.dmp

Download

memory/3412-17286-0x00007FF939450000-0x00007FF939452000-memory.dmp

Download

memory/3412-19146-0x000002DF0A160000-0x000002DF0A1C0000-memory.dmp

Download

memory/3412-19144-0x000000006D7C0000-0x000000006F42A000-memory.dmp

Download

memory/3412-19152-0x000002DF4A440000-0x000002DF4A53A000-memory.dmp

Download

memory/3412-19167-0x000002DF4A440000-0x000002DF4A53A000-memory.dmp

Download

memory/3412-19217-0x000002DF4A440000-0x000002DF4A53A000-memory.dmp

Download

memory/3412-19247-0x000002DF4A440000-0x000002DF4A53A000-memory.dmp

Download

memory/3412-19327-0x000002DF4A440000-0x000002DF4A53A000-memory.dmp

Download

memory/3412-19332-0x000002DF4A440000-0x000002DF4A53A000-memory.dmp

Download

memory/3412-19412-0x000002DF4A440000-0x000002DF4A53A000-memory.dmp

Download