86ea5473fb5d7b1e1c5f7f5a967b0a8e55d4c960bc392325ee9a128fea9fb836

Resubmissions

04/08/2026, 18:06

260804-wpv17aeg698

04/08/2026, 17:43

260804-wa339aee377

04/08/2026, 17:32

260804-v4c89aed427

04/08/2026, 17:07

260804-vngxhas1fx7

Analysis

user interaction
yes
max time kernel
899s
max time network
791s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
04/08/2026, 18:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Algonaut - Atlas v2.6.2.zip
Size 41.2MB
Sample260804-wpv17aeg69
SHA256 86ea5473fb5d7b1e1c5f7f5a967b0a8e55d4c960bc392325ee9a128fea9fb836
MD5 2760208038bef18d5f7fbc7b05ac0d10
SHA1 0da01210eab7888b1aad58c8d4896b9cbceead87
SHA512 f7b8ac8129cddd5ef1fd3db41c6cc071a9832e10a981b1476ec4409ebaaaaa204bbe85d8c0756ab9f3fb4d64dd30c381a47ab5456263ae15f5dee638af9e25b8
SSDEEP 786432:vd2CzzbeEPA6kZmbS5G4KHsFeWSJM0uz0tweS8Dg7pCLb9iB0Gu0M/:A43eEP7WZKHsFeW+M0uz0tweS8DcpCnh
TLSH
T10797339121A78D7C50B4E117E6599D6F9BDE54F6D43BCAE0AE4383100DACA34AF3243E
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery installer persistence

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
64	4164	firefox.exe

Executes dropped EXE 14 IoCs

pid	Process
5016	reaper778_x64-install.exe
1652	reaper778_x64-install.exe
1508	reaper778_x64-install.exe
1744	reaper778_x64-install.exe
1728	REAPER.exe
5604	Setup Atlas v2.6.2.tmp
5256	reaper.exe
5208	reaper.exe
1204	keygen.exe
2500	reaper.exe
6720	keygen.exe
5428	Setup Atlas v2.6.2.tmp
6076	Atlas.exe
4108	Atlas.exe

Identifies Wine through registry keys 2 TTPs 6 IoCs

Wine is a compatibility layer capable of running Windows applications, which can be used as sandboxing environment.

defense_evasion

Query Registry

T1012

Virtualization/Sandbox Evasion

T1497

description	ioc	Process
Key opened	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Wine	reaper.exe
Key opened	\REGISTRY\MACHINE\Software\Wine	reaper.exe
Key opened	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Wine	reaper.exe
Key opened	\REGISTRY\MACHINE\Software\Wine	REAPER.exe
Key opened	\REGISTRY\USER\S-1-5-21-1636999435-3883760687-346127294-1000\Software\Wine	REAPER.exe
Key opened	\REGISTRY\MACHINE\Software\Wine	reaper.exe

Loads dropped DLL 64 IoCs

pid	Process
5016	reaper778_x64-install.exe
5016	reaper778_x64-install.exe
5016	reaper778_x64-install.exe
5016	reaper778_x64-install.exe
5016	reaper778_x64-install.exe
1652	reaper778_x64-install.exe
1508	reaper778_x64-install.exe
1744	reaper778_x64-install.exe
1652	reaper778_x64-install.exe
1652	reaper778_x64-install.exe
1652	reaper778_x64-install.exe
1652	reaper778_x64-install.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe
1728	REAPER.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops desktop.ini file(s) 3 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Documents\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\desktop.ini	firefox.exe
File opened for modification	C:\Users\Public\Documents\desktop.ini	firefox.exe

Drops file in Program Files directory 18 IoCs

description	ioc	Process
File opened for modification	C:\Program Files\Steinberg\VSTPlugins\Algonaut\Atlas.dll	Setup Atlas v2.6.2.tmp
File created	C:\Program Files\Algonaut\Atlas\is-9JH88.tmp	Setup Atlas v2.6.2.tmp
File opened for modification	C:\Program Files\Algonaut\Atlas\unins000.dat	Setup Atlas v2.6.2.tmp
File opened for modification	C:\Program Files\Algonaut\Atlas\unins000.dat	Setup Atlas v2.6.2.tmp
File created	C:\Program Files\Common Files\Avid\Audio\Plug-Ins\Algonaut\Atlas.aaxplugin\Contents\x64\is-R6UV9.tmp	Setup Atlas v2.6.2.tmp
File created	C:\Program Files\Steinberg\VSTPlugins\Algonaut\is-TAFL1.tmp	Setup Atlas v2.6.2.tmp
File created	C:\Program Files\Common Files\VST3\Algonaut\Atlas.vst3\Contents\Resources\is-NBID1.tmp	Setup Atlas v2.6.2.tmp
File created	C:\Program Files\Algonaut\Atlas\unins000.dat	Setup Atlas v2.6.2.tmp
File created	C:\Program Files\Algonaut\Atlas\is-LSAEO.tmp	Setup Atlas v2.6.2.tmp
File created	C:\Program Files\Common Files\VST3\Algonaut\Atlas.vst3\Contents\Resources\is-4A065.tmp	Setup Atlas v2.6.2.tmp
File created	C:\Program Files\Common Files\VST3\Algonaut\Atlas.vst3\Contents\x86_64-win\is-PCGLH.tmp	Setup Atlas v2.6.2.tmp
File created	C:\Program Files\Algonaut\Atlas\is-2KH6D.tmp	Setup Atlas v2.6.2.tmp
File created	C:\Program Files\Algonaut\Atlas\is-5HU5L.tmp	Setup Atlas v2.6.2.tmp
File opened for modification	C:\Program Files\Algonaut\Atlas\Atlas.exe	Setup Atlas v2.6.2.tmp
File created	C:\Program Files\Algonaut\Atlas\is-059T8.tmp	Setup Atlas v2.6.2.tmp
File created	C:\Program Files\Algonaut\Atlas\is-0FDRC.tmp	Setup Atlas v2.6.2.tmp
File created	C:\Program Files\Common Files\VST3\Algonaut\Atlas.vst3\Contents\x86_64-win\is-LHKTC.tmp	Setup Atlas v2.6.2.tmp
File created	C:\Program Files\Algonaut\Atlas\is-SFLT0.tmp	Setup Atlas v2.6.2.tmp

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File created	C:\Users\Admin\Downloads\reaper778_x64-install.exe:Zone.Identifier	firefox.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup Atlas v2.6.2.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	reaper778_x64-install.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	reaper778_x64-install.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	reaper778_x64-install.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup Atlas v2.6.2.tmp
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Algonaut_KeyGen.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	keygen.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	reaper778_x64-install.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup Atlas v2.6.2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Algonaut_KeyGen.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	keygen.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Setup Atlas v2.6.2.exe

Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

Inno Setup installer

installer

resource	yara_rule
behavioral1/memory/7156-4613-0x00000000000D0000-0x00000000001B7000-memory.dmp	innosetup
behavioral1/memory/7156-4621-0x00000000000D0000-0x00000000001B7000-memory.dmp	innosetup
behavioral1/memory/7156-4638-0x00000000000D0000-0x00000000001B7000-memory.dmp	innosetup

NSIS installer 2 IoCs

installer

resource	yara_rule
behavioral1/files/0x000500000002a98e-509.dat	nsis_installer_1
behavioral1/files/0x000500000002a98e-509.dat	nsis_installer_2

Checks processor information in registry 2 TTPs 34 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor	reaper.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor	reaper.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Revision	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor	reaper.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor	REAPER.exe
Key enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor	REAPER.exe
Key enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor	reaper.exe
Key enumerated	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor	reaper.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Update Signature	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	firefox.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~Mhz	firefox.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	firefox.exe
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor	reaper.exe

NTFS ADS 1 IoCs

description	ioc	Process
File created	C:\Users\Admin\Downloads\reaper778_x64-install.exe:Zone.Identifier	firefox.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
5428	Setup Atlas v2.6.2.tmp
5428	Setup Atlas v2.6.2.tmp

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
5256	reaper.exe
2500	reaper.exe

Suspicious use of AdjustPrivilegeToken 11 IoCs

description	pid	Process
Token: SeDebugPrivilege	4164	firefox.exe
Token: SeDebugPrivilege	4164	firefox.exe
Token: SeDebugPrivilege	1508	reaper778_x64-install.exe
Token: SeDebugPrivilege	1744	reaper778_x64-install.exe
Token: SeDebugPrivilege	4164	firefox.exe
Token: SeDebugPrivilege	4164	firefox.exe
Token: SeDebugPrivilege	4164	firefox.exe
Token: 33	4916	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	4916	AUDIODG.EXE
Token: SeDebugPrivilege	4164	firefox.exe
Token: SeDebugPrivilege	4164	firefox.exe

Suspicious use of FindShellTrayWindow 10 IoCs

pid	Process
4164	firefox.exe
4164	firefox.exe
4164	firefox.exe
4164	firefox.exe
4164	firefox.exe
4164	firefox.exe
4164	firefox.exe
5604	Setup Atlas v2.6.2.tmp
4164	firefox.exe
5428	Setup Atlas v2.6.2.tmp

Suspicious use of SetWindowsHookEx 18 IoCs

pid	Process
4164	firefox.exe
4164	firefox.exe
4164	firefox.exe
4164	firefox.exe
1728	REAPER.exe
5256	reaper.exe
5256	reaper.exe
4164	firefox.exe
4164	firefox.exe
4164	firefox.exe
4164	firefox.exe
4164	firefox.exe
4164	firefox.exe
4164	firefox.exe
4164	firefox.exe
4164	firefox.exe
2500	reaper.exe
5676	OpenWith.exe

Suspicious use of WriteProcessMemory 54 IoCs

description	pid	Process	procid_target
PID 3240 wrote to memory of 4164	3240	firefox.exe	82
PID 3240 wrote to memory of 4164	3240	firefox.exe	82
PID 4164 wrote to memory of 3344	4164	firefox.exe	83
PID 4164 wrote to memory of 3344	4164	firefox.exe	83
PID 4164 wrote to memory of 3344	4164	firefox.exe	83
PID 4164 wrote to memory of 4892	4164	firefox.exe	84
PID 4164 wrote to memory of 4892	4164	firefox.exe	84
PID 4164 wrote to memory of 4892	4164	firefox.exe	84
PID 4164 wrote to memory of 4892	4164	firefox.exe	84
PID 4164 wrote to memory of 2028	4164	firefox.exe	85
PID 4164 wrote to memory of 2028	4164	firefox.exe	85
PID 4164 wrote to memory of 2028	4164	firefox.exe	85
PID 4164 wrote to memory of 2028	4164	firefox.exe	85
PID 4164 wrote to memory of 4268	4164	firefox.exe	86
PID 4164 wrote to memory of 4268	4164	firefox.exe	86
PID 4164 wrote to memory of 4268	4164	firefox.exe	86
PID 4164 wrote to memory of 1800	4164	firefox.exe	87
PID 4164 wrote to memory of 1800	4164	firefox.exe	87
PID 4164 wrote to memory of 1800	4164	firefox.exe	87
PID 4164 wrote to memory of 1800	4164	firefox.exe	87
PID 4164 wrote to memory of 2096	4164	firefox.exe	88
PID 4164 wrote to memory of 2096	4164	firefox.exe	88
PID 4164 wrote to memory of 2096	4164	firefox.exe	88
PID 4164 wrote to memory of 2096	4164	firefox.exe	88
PID 4164 wrote to memory of 1204	4164	firefox.exe	89
PID 4164 wrote to memory of 1204	4164	firefox.exe	89
PID 4164 wrote to memory of 1204	4164	firefox.exe	89
PID 4164 wrote to memory of 1204	4164	firefox.exe	89
PID 4164 wrote to memory of 964	4164	firefox.exe	90
PID 4164 wrote to memory of 964	4164	firefox.exe	90
PID 4164 wrote to memory of 964	4164	firefox.exe	90
PID 4164 wrote to memory of 964	4164	firefox.exe	90
PID 4164 wrote to memory of 2492	4164	firefox.exe	91
PID 4164 wrote to memory of 2492	4164	firefox.exe	91
PID 4164 wrote to memory of 2492	4164	firefox.exe	91
PID 4164 wrote to memory of 2492	4164	firefox.exe	91
PID 4164 wrote to memory of 2340	4164	firefox.exe	92
PID 4164 wrote to memory of 2340	4164	firefox.exe	92
PID 4164 wrote to memory of 2340	4164	firefox.exe	92
PID 4164 wrote to memory of 2340	4164	firefox.exe	92
PID 4164 wrote to memory of 4088	4164	firefox.exe	93
PID 4164 wrote to memory of 4088	4164	firefox.exe	93
PID 4164 wrote to memory of 4088	4164	firefox.exe	93
PID 4164 wrote to memory of 4088	4164	firefox.exe	93
PID 4164 wrote to memory of 5016	4164	firefox.exe	94
PID 5016 wrote to memory of 1652	5016	reaper778_x64-install.exe	95
PID 1652 wrote to memory of 1508	1652	reaper778_x64-install.exe	96
PID 1652 wrote to memory of 1744	1652	reaper778_x64-install.exe	98
PID 1652 wrote to memory of 1728	1652	reaper778_x64-install.exe	101
PID 7156 wrote to memory of 5604	7156	Setup Atlas v2.6.2.exe	104
PID 5256 wrote to memory of 5208	5256	reaper.exe	116
PID 4536 wrote to memory of 1204	4536	Algonaut_KeyGen.exe	119
PID 6792 wrote to memory of 6720	6792	Algonaut_KeyGen.exe	122
PID 5840 wrote to memory of 5428	5840	Setup Atlas v2.6.2.exe	124

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\Explorer.exe
C:\Windows\Explorer.exe /idlist,,"C:\Users\Admin\AppData\Local\Temp\Algonaut - Atlas v2.6.2.zip"
1⤵
PID:4664

C:\Program Files\Mozilla Firefox\firefox.exe
"C:\Program Files\Mozilla Firefox\firefox.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3240
- C:\Program Files\Mozilla Firefox\firefox.exe
  "C:\Program Files\Mozilla Firefox\firefox.exe"
  2⤵
  - Downloads MZ/PE file
  - Drops desktop.ini file(s)
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - Checks processor information in registry
  - NTFS ADS
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:4164
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 1988 -prefsLen 27097 -prefMapHandle 1992 -prefMapSize 270279 -ipcHandle 2060 -initialChannelId {c237763c-1dee-4550-8ab4-285608a09506} -parentPid 4164 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4164" -appDir "C:\Program Files\Mozilla Firefox\browser" - 1 gpu
    3⤵
    PID:3344
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 2432 -prefsLen 27133 -prefMapHandle 2436 -prefMapSize 270279 -ipcHandle 2444 -initialChannelId {513ad3c5-86ad-478d-8386-72688d7883c4} -parentPid 4164 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4164" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 2 socket
    3⤵
    - Checks processor information in registry
    PID:4892
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 3756 -prefsLen 27274 -prefMapHandle 3760 -prefMapSize 270279 -jsInitHandle 3764 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 3772 -initialChannelId {b9b0a340-8573-4dfa-ba8a-fb1230857a2e} -parentPid 4164 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4164" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 3 tab
    3⤵
    - Checks processor information in registry
    PID:2028
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -prefsHandle 3976 -prefsLen 27274 -prefMapHandle 3980 -prefMapSize 270279 -ipcHandle 4056 -initialChannelId {f70933a7-4edf-4c1a-98f3-301b445e6a33} -parentPid 4164 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4164" -appDir "C:\Program Files\Mozilla Firefox\browser" - 4 rdd
    3⤵
    PID:4268
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4404 -prefsLen 34773 -prefMapHandle 4408 -prefMapSize 270279 -jsInitHandle 4412 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 4420 -initialChannelId {f6f95000-daed-4a0d-bbd8-5e67b6074fe2} -parentPid 4164 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4164" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 5 tab
    3⤵
    - Checks processor information in registry
    PID:1800
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -parentBuildID 20250130195129 -sandboxingKind 0 -prefsHandle 4856 -prefsLen 34822 -prefMapHandle 4864 -prefMapSize 270279 -ipcHandle 4876 -initialChannelId {55afc1ca-9794-4ac8-b686-a4b7b789ce8d} -parentPid 4164 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4164" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 6 utility
    3⤵
    - Checks processor information in registry
    PID:2096
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 4432 -prefsLen 32952 -prefMapHandle 5172 -prefMapSize 270279 -jsInitHandle 5212 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5220 -initialChannelId {e8fddb9f-a7ff-4603-b04d-cffa3609d106} -parentPid 4164 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4164" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 7 tab
    3⤵
    - Checks processor information in registry
    PID:1204
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5532 -prefsLen 32952 -prefMapHandle 5536 -prefMapSize 270279 -jsInitHandle 5540 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5548 -initialChannelId {17f1e911-cf4b-4a75-8a36-02124220a932} -parentPid 4164 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4164" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 8 tab
    3⤵
    - Checks processor information in registry
    PID:964
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 5728 -prefsLen 32952 -prefMapHandle 5732 -prefMapSize 270279 -jsInitHandle 5736 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5744 -initialChannelId {6438570b-37d2-4e34-b425-27362d36d67a} -parentPid 4164 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4164" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 9 tab
    3⤵
    - Checks processor information in registry
    PID:2492
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 2888 -prefsLen 33071 -prefMapHandle 3068 -prefMapSize 270279 -jsInitHandle 3216 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 6308 -initialChannelId {3a5eab08-45d7-4a0f-97a8-cafc1ad8e158} -parentPid 4164 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4164" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 10 tab
    3⤵
    - Checks processor information in registry
    PID:2340
- - C:\Program Files\Mozilla Firefox\firefox.exe
    "C:\Program Files\Mozilla Firefox\firefox.exe" -contentproc -isForBrowser -prefsHandle 6568 -prefsLen 33071 -prefMapHandle 6572 -prefMapSize 270279 -jsInitHandle 6192 -jsInitLen 253512 -parentBuildID 20250130195129 -ipcHandle 5440 -initialChannelId {f08fcf7b-fdbf-4cd9-b3b8-194941e5b8f1} -parentPid 4164 -crashReporter "\\.\pipe\gecko-crash-server-pipe.4164" -win32kLockedDown -appDir "C:\Program Files\Mozilla Firefox\browser" - 11 tab
    3⤵
    - Checks processor information in registry
    PID:4088
- - C:\Users\Admin\Downloads\reaper778_x64-install.exe
    "C:\Users\Admin\Downloads\reaper778_x64-install.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:5016
  - - C:\Users\Admin\Downloads\reaper778_x64-install.exe
      "C:\Users\Admin\Downloads\reaper778_x64-install.exe" /SKIP2 /ADMIN /D=C:\Program Files\REAPER (x64)
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Suspicious use of WriteProcessMemory
      PID:1652
    - - C:\Users\Admin\Downloads\reaper778_x64-install.exe
        
        C:\Users\Admin\Downloads\reaper778_x64-install.exe /UAC:80026 /NCRC /SKIP2 /ADMIN /D=C:\Program Files\REAPER (x64)
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Suspicious use of AdjustPrivilegeToken
        
        PID:1508
    - - C:\Users\Admin\Downloads\reaper778_x64-install.exe
        
        C:\Users\Admin\Downloads\reaper778_x64-install.exe /UAC:80026 /NCRC /SKIP2 /ADMIN /D=C:\Program Files\REAPER (x64)
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Suspicious use of AdjustPrivilegeToken
        
        PID:1744
    - - C:\REAPER\REAPER.exe
        
        "C:\REAPER\REAPER.exe"
        5⤵
        Executes dropped EXE
        Identifies Wine through registry keys
        Loads dropped DLL
        Checks processor information in registry
        Suspicious use of SetWindowsHookEx
        
        PID:1728

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:480

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x00000000000004D4 0x00000000000004DC
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:4916

C:\Users\Admin\Desktop\Algonaut - Atlas v2.6.2\Algonaut - Atlas v2.6.2\Setup Atlas v2.6.2.exe
"C:\Users\Admin\Desktop\Algonaut - Atlas v2.6.2\Algonaut - Atlas v2.6.2\Setup Atlas v2.6.2.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:7156
- C:\Users\Admin\AppData\Local\Temp\is-ROFSJ.tmp\Setup Atlas v2.6.2.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-ROFSJ.tmp\Setup Atlas v2.6.2.tmp" /SL5="$4033C,88709886,882176,C:\Users\Admin\Desktop\Algonaut - Atlas v2.6.2\Algonaut - Atlas v2.6.2\Setup Atlas v2.6.2.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Suspicious use of FindShellTrayWindow
  PID:5604

C:\REAPER\reaper.exe
"C:\REAPER\reaper.exe"
1⤵
- Executes dropped EXE
- Identifies Wine through registry keys
- Checks processor information in registry
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:5256
- C:\REAPER\reaper.exe
  "C:\REAPER\reaper.exe" "-cfgfile" "C:\REAPER\REAPER.ini" "-__vst_scan__" "C:\Program Files\Common Files\VST3\Algonaut\Atlas.vst3\Contents\x86_64-win\Atlas.vst3" "AMD8V6pT3AGInS7lPCTdAQAAAAA="
  2⤵
  - Executes dropped EXE
  - Checks processor information in registry
  PID:5208

C:\Users\Admin\Desktop\Algonaut - Atlas v2.6.2\Algonaut - Atlas v2.6.2\R2R\Algonaut_KeyGen.exe
"C:\Users\Admin\Desktop\Algonaut - Atlas v2.6.2\Algonaut - Atlas v2.6.2\R2R\Algonaut_KeyGen.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4536
- C:\Users\Admin\AppData\Local\Temp\keygen.exe
  C:\Users\Admin\AppData\Local\Temp\keygen.exe
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:1204

C:\REAPER\reaper.exe
"C:\REAPER\reaper.exe"
1⤵
- Executes dropped EXE
- Identifies Wine through registry keys
- Checks processor information in registry
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
PID:2500

C:\Users\Admin\Desktop\Algonaut - Atlas v2.6.2\Algonaut - Atlas v2.6.2\R2R\Algonaut_KeyGen.exe
"C:\Users\Admin\Desktop\Algonaut - Atlas v2.6.2\Algonaut - Atlas v2.6.2\R2R\Algonaut_KeyGen.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:6792
- C:\Users\Admin\AppData\Local\Temp\keygen.exe
  C:\Users\Admin\AppData\Local\Temp\keygen.exe
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:6720

C:\Users\Admin\Desktop\Algonaut - Atlas v2.6.2\Algonaut - Atlas v2.6.2\Setup Atlas v2.6.2.exe
"C:\Users\Admin\Desktop\Algonaut - Atlas v2.6.2\Algonaut - Atlas v2.6.2\Setup Atlas v2.6.2.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:5840
- C:\Users\Admin\AppData\Local\Temp\is-SVNE8.tmp\Setup Atlas v2.6.2.tmp
  "C:\Users\Admin\AppData\Local\Temp\is-SVNE8.tmp\Setup Atlas v2.6.2.tmp" /SL5="$130448,88709886,882176,C:\Users\Admin\Desktop\Algonaut - Atlas v2.6.2\Algonaut - Atlas v2.6.2\Setup Atlas v2.6.2.exe"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of FindShellTrayWindow
  PID:5428

C:\Program Files\Algonaut\Atlas\Atlas.exe
"C:\Program Files\Algonaut\Atlas\Atlas.exe"
1⤵
- Executes dropped EXE
PID:6076

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:2408

C:\Windows\system32\OpenWith.exe
C:\Windows\system32\OpenWith.exe -Embedding
1⤵
- Suspicious use of SetWindowsHookEx
PID:5676

C:\Program Files\Algonaut\Atlas\Atlas.exe
"C:\Program Files\Algonaut\Atlas\Atlas.exe"
1⤵
- Executes dropped EXE
PID:4108

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Virtualization/Sandbox Evasion

T1497

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Virtualization/Sandbox Evasion

T1497

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Atlas.exe

Path C:\Program Files\Algonaut\Atlas\Atlas.exe
Size 20.8MB
SHA256 f38d31630a611cb4445f913b83a73b0284148f8fdba74514265e694ff9841286
MD5 cd24263347cb87fbaaa42be5b8c882c6
SHA1 e0aef3e89d39df968fd66cf7cfd048f1eeba09af
SHA512 1ae9dba2eaf68d11d632199ee1a52dead9841f3a33664a0f6747d340856b7dd2d5d776e954cc7620116515b494fea08684c3e403ff88fec22005ae88c794fcb1
SSDEEP 196608:1rBeDtAIYuLFOX6Ku/3F4gifOIrD5AHqZq5KrQak64k4DofBUB2U5UBBBBBBBBBk:1r4DtzrLFOX6p5iyKZqnaktk4Do
TLSH
T1CF27CF47B36904DAD1A5C13CD6969E16F771F8251B20CBCB398C972E3F2BAD04E79260
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is-059T8.tmp

Path C:\Program Files\Algonaut\Atlas\is-059T8.tmp
Size 3.6MB
SHA256 9768f9edbe5c7ea005ac05566f82003b01404de0fba8dbcffd1990a2a29f762e
MD5 cfd6ef8044b542e4cc1428da18140c45
SHA1 8430c7b5b8013cfd5581e034cd0ba6e02346cf9e
SHA512 2b3e11abb78e48afc6b3b92f4f30e7ee0aca1324849637e9417e96b89f3459252761e54775aafcb857aead38deba902b1be3b5579ac8d212c75fb33cd7345efa
SSDEEP 49152:Q44B+lNsHPWeelGdwSxQRw9CuL0wijepA8oGd9Tg70azpkf+333THh:fIPp70wijepoGzgbA+333TB
TLSH
T102066D13F388613ED06B2A3B693F9254583F7A7039178C579AEC3A4C4E795402E3A767
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Default_7.0.ReaperThemeZip

Path C:\REAPER\ColorThemes\Default_7.0.ReaperThemeZip
Size 24.0MB
SHA256 db426e9829ce8f6e19430d0f87a516164ff79a825e00bfd09f01c7034061e132
MD5 195641f400754063e2a8ac64d75d665e
SHA1 2b1fc2b728f66e6cd6e491567301c66cdb50b221
SHA512 49ad84cb82929c686a99016a4192c82d94ee0acc8ff8402325b5cc9fbc8442a60093d3feea89575be4fce54e9976767d0d1c867f7cfaa435552a242ab4c67117
SSDEEP 49152:Gwdd50UzlHfdHQfL05o6/p/eUOv4rAcfIG00+4Hb:Gwdd50Uzl/dHQfL05oLv4rAcfIG005Hb
TLSH
T1D14737366F84C149CA476CB9E46982FCCA2A9D19E403CA9325F5FE7F39759C7612B003
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

toolbar_color_note_pitch.png

Path C:\REAPER\Data\toolbar_icons\150\toolbar_color_note_pitch.png
Size 23KB
SHA256 56cb9e0a78670b0081ace9a35d18c81b64d1feee12a067d9bde975f6c8457ca2
MD5 468abb28636485af7bbff18fde3b21fa
SHA1 f596b1e46a5acc1c0640d9a2cfc559caf2925a38
SHA512 a200f2aee1b47f2f232bcac09990b397820e72ace10c6eb571e094533bc33642fe7de5dd8d7740245dd4b3205003102a609a0c77bd1fb98f256ab1836f2ab1fb
SSDEEP 96:Dffffff/rHeyseysZ5qPvDOuwMQ9fTvpaGmJFmcg9OuzV6q:jF
TLSH
T152B290837224C99BDB550939CAA643F21B2C6D78CDD788BF38EA7E5A3533A951D4301C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

toolbar_color_take_lane.png

Path C:\REAPER\Data\toolbar_icons\150\toolbar_color_take_lane.png
Size 23KB
SHA256 0919bcc1f20063d0a9781a1d6a7dca2cd14b0ddeba5316478043c38942b404f9
MD5 23c319a29bb452fd5c6cfcb3b5f2c101
SHA1 5f47bcc38fe59c88d4c16a3339767495a407e4c8
SHA512 73d86260f15a3db55f9297541f2527f4c3ea05ebf310d9225f805e184c095c28787b275441eeb5bfff67048de29a7b91108f265387d081b7c6988f07ab7c813e
SSDEEP 48:PS3mHik4tyIY9CY4NSGl7UiPvyN39wINGANBs+C9FdALP2f31gIZYrM7QoEy6Ose:qv0IoG1idKFCLeP1seae
TLSH
T1A9B2FB13A520D14FD310853FC9D688F49B691C3DDE92E87325FEBE6A3E726C2588098C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

toolbar_time_selection_item_delete_remove.png

Path C:\REAPER\Data\toolbar_icons\150\toolbar_time_selection_item_delete_remove.png
Size 23KB
SHA256 1a4a708eb9d2f77b3b10d01248ce2f4cbbd0b7092c2a4d2f5ace360bb19519aa
MD5 ad406ecef8afdd03af46267ffe7c466e
SHA1 a8459398eafe41325b38c03521d9f6f0f394fb06
SHA512 906a6e8c81203ca4994ce2f66e565c1d80a1e30a62a380d8ad9bc8076e45f15b43d9ae2c67922b88f46c8f809447d1385589c9977c7d8ecb974b60d8cc5726c2
SSDEEP 96:edNvlIW/WSUWWWfWWWFqWWWW6WWWW8WWWWWWWWWoWWWWWWWEWWWWWwWWWWWQWWWK:edNvlhgY9
TLSH
T195B26A236360D01ED6F2073FC942E4F45B859CABDB618523ACFD7E46B53A683D4C2A48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

toolbar_window_tab_mixer_mcp.png

Path C:\REAPER\Data\toolbar_icons\150\toolbar_window_tab_mixer_mcp.png
Size 23KB
SHA256 dbf46c6c988400a1f25e4a575c07047c33773e97796e3cff714b5754298e260e
MD5 d2789c9b6dd96f4e6e7a6d8402727029
SHA1 ad96e565aa5038904d2b3c37d3426113ea8cd4ed
SHA512 15408e5359089e7bb6b803238afaa6588c50e1b5b02529dafe926bb7ff44a08d2b76d3349f935d197d1a80f12c208a28a22ccea02c0519d3f5f269210e531426
SSDEEP 48:pBgV0SdWW2VhPl0hER/l8eXadzR/WjSWGkXWnVFCVFC2CUR/ZWoPBypjgK8m:BYk13E57
TLSH
T1B0B2DF2296E2E00FD319553FDBC648F5AA291C3DED92E87314AFBD5A3F396C2186054C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

toolbar_audio_waveform_digital_sample_rate.png

Path C:\REAPER\Data\toolbar_icons\200\toolbar_audio_waveform_digital_sample_rate.png
Size 42KB
SHA256 e81eaed990348bc135a0018bc11e5e95004bf6e78c820aa0ed565dfdfe948ac3
MD5 f561dea0c7e66134a6032b5ca9a272b2
SHA1 488d5f69b63883d3744863eda2c94e700fb366b3
SHA512 f7a3a4fb50868375596fa38092c08d0cbfdc53d4a7a08cb99cbf2d319b6bcc4f5bb352c8f05a2b2869f72d73abc4b743f9273316823faa3ca00270588540b31d
SSDEEP 48:79FnVndnVndnn9nnFnnnnn1nnnnn9nnnnnnnnnn9nnnnnnnnnnFnnnndnnnnlnn0:g
TLSH
T1E2132253F230D41AE3415676CE45C8F88AA53D39DC92946738E9BF6B3A319438444648
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

room_large.png

Path C:\REAPER\Data\track_icons\room_large.png
Size 16KB
SHA256 6f6368a80ae186918208234298296e4551cc2a7d0468930c49ea3a45c19a9449
MD5 bd8ba042fe7e03622c11dc9b3ff8218d
SHA1 1f12594db2bd76219c3e1cdce6aaa771516ed199
SHA512 24bd3fb737acab5e8becc2f95af83dbea0163da702a2d10b343236f4679a4bc4c4ea55d1c3512faf77b128e3091e8d99f963a9192f29d4c97581c73ce29a44fb
SSDEEP 12:6v/7OGq333333333333333/puPL19ybVvlbjLa0lffffffffffvvvvevvvv0lqgg:CBD0L6gLmvJg4
TLSH
T16F726E5D6150E980C9A431F1FE4292F84A95EC22CF9870A7B3F3FE1B71F7AA42700061
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reacast.dll

Path C:\REAPER\Plugins\FX\reacast.dll
Size 427KB
SHA256 39a22205bd4e80e3dcb428f07558527a601e6c989dac25f8132291686db0f0d7
MD5 b32accdfeb4018a0f627c3c408db38e6
SHA1 304534563471aa799bf6dd392900b9a9443bcd02
SHA512 49323439a62e478711b251460d58d81eff856888723026674f1c64814a200845ee4a8824bf7b8d3a2eaacee6a8b0ae53717084547351d38f5dbb2f8f14569766
SSDEEP 12288:jXfl1JS4ofXjPgikGW6diTkP1kdaJTRuj:jPlzS4ofXjPgikG1diTkP1kdaGj
TLSH
T18C94AF45E29648F9C8A7807C85BB5713EA3138490334A7EB27F0CA295D7AFD0163E779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reacomp.dll

Path C:\REAPER\Plugins\FX\reacomp.dll
Size 347KB
SHA256 c3528c05bf72e5bc7b28efed0791ebd9f907bee6cf7060e3dac7ded6d47243d1
MD5 1ba9253b61ca3a12a94c78222d6a258c
SHA1 fe9c4a336e58840d861f8c1bf4e05b0a99450c38
SHA512 9381792e4a74df51c2642f14aa2ca12936241c8c43346b732bfd99cae1326d15033be5adce800a5f054e122277a3d20008bb760bebd13b3edc206026b91d42e3
SSDEEP 6144:izpE4Zhtd4Ne9KaTqhBurO5LeLrAcaukI0xZO0KRwIJ5cwX5rYYwj8ix:izpE4ff4e9KaTqhBuK0wu90xPyJEhx
TLSH
T17C747C47A2A240FBD4F7953C95BB6753EBB1340D0334D7EB1BE046182E777802E2A669
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reacontrolmidi.dll

Path C:\REAPER\Plugins\FX\reacontrolmidi.dll
Size 387KB
SHA256 1cf18b21b5701c47037ec5efdaf4cb5a5532009c7c863af6ed6104b51b2e39cf
MD5 aacc5c1b176b4642b6c93ec31dc53a36
SHA1 b518b856df88e51897f3a1769e98e457ddf93198
SHA512 d9eb13abf41fd77c3807d2513f90fe67510f9db7738dedf079f0267740f3ce6cbfa89921c500e3a80612ed88da9194ade2f3d7298e5a5713966a5ae19c954d19
SSDEEP 6144:NG9A6CTK3VRIaDRGD2FswpWupPkhHrJ2LthqC3R3LpTnrEqb2GdeTaG9sZOkJ8Fq:+TCunigsOfjlB79r94XsjJYyJ43TU
TLSH
T147846B42F28588F6D0529138CAB38797E371B8494B34A6EF36E4876D6E76FD0163C312
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

readelay.dll

Path C:\REAPER\Plugins\FX\readelay.dll
Size 305KB
SHA256 b7a8a91767884ffa4bd0b4566da3dc3341fc4ed633e71a11550ed6a893a2a4f3
MD5 ace92cbef7ee8fcd6fa40f59c4dafb67
SHA1 477d4cf07e5c98b9d8117bcb1ded891009663c56
SHA512 813b2408227e5b2f3e8081ce5a2e03904bf6bc84aa65836f3f6ea4e6ed5623e7973660e838c831994c3e438b404d1cd89daa4da2110efdfb1bb095351171768e
SSDEEP 6144:LFkMwrAIQPr+HWzpR2qyC8Xk37/aFZOVnAEJ4kw/5rYoxsv:tYxQPr+HWFk+3LaFwnxJLB
TLSH
T16E647D46E3A240FBD8B7903C94AB5657EB71740A433453EB4BF04B18AE677802E3F665
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reaeq.dll

Path C:\REAPER\Plugins\FX\reaeq.dll
Size 500KB
SHA256 9695a97098f064e436e3a8c04685da21ff081c2d5d66740f11442f3c918b94c5
MD5 2de3671e491cb9ca4faae62123e06f43
SHA1 e3c78f102e9aa9788dc7803221e2c9e8cd9d971b
SHA512 63bdf87ca92625fa888e769dba363738792bbbeb8b25e26463e1b1f664ff19e88411b7ad68b83c2b2ade2f127bd7257399f76f524af1f268620fe0bb5c73e969
SSDEEP 12288:AP2UEnAm0XuwPpwDKtClMU4A3vIQLGJ414tP:AP2UEBUF6DKtClMS3vIQLG+q
TLSH
T1BBB48D45B59209FDC0A2A47C56BB6653EBB030080334D5B71BF29E1C1FBB7412E6B7A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reafir.dll

Path C:\REAPER\Plugins\FX\reafir.dll
Size 402KB
SHA256 4c2ecb4926109ed2d16f19e195651f4fd9f82a72ba3046dcc24a832381bd0c34
MD5 25ebcba4306110be279593d96052e633
SHA1 d28c33dfe3ceeb393067622b57ee4db2cfbb874b
SHA512 3531c0ed9d99e803a9575f6256bb65c5963cb1c674215d78093488a77abaf3fad8d8329a280f19a6897e73f4eb472daddefe53a2001480ca4cdc022315f19222
SSDEEP 12288:4HdNaHdnjVvBuJtNGykXJL/4gCDxFrdj0Jw6K:+dNaHdnxBuJtvkXJL/4gCDxFrdj0yF
TLSH
T1C4948D45F59288F9D8A2997C50BB5713EB70344D0334A6EB1BA44E0C5E7BB801A3F76E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reagate.dll

Path C:\REAPER\Plugins\FX\reagate.dll
Size 306KB
SHA256 bb36079d1f00e1536a94dda559ccf3dfcb0d438c58b03c7461b5d37c9c4d4f58
MD5 877d1e986c22dea4d3c1cb91eae010c5
SHA1 97052b2dc8cf0c4ebe7b420cc0fc082afea3cb08
SHA512 d5633746817bff98d69735a7d13cf9f92dea285e3c28c1babf185431ce873e1fa8be62c527f5be604a72d4af9dea33ce8769a1ee160eae581e3a2c9d70c5509a
SSDEEP 6144:Ay5s0ZrE8eOI/R+BW9FLwzNnTNTZO+6AJdXwP5rYDNotzsH:A+s0RE8eOI/R+CANTNTtvJLWM
TLSH
T141648E46E2A250F7DCF6907C94A75353EB323409433463F70BE14A196E7B7902F3A6A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reainsert.dll

Path C:\REAPER\Plugins\FX\reainsert.dll
Size 302KB
SHA256 6c1f5440902f60ffa76d4e60043474a5cf962c82aa12ab9d805ffa748ca068cb
MD5 2f5eb5ba29ad01805b0181fb99273460
SHA1 be7ed90d1e05ebfa0e6762fa6d3ba21376c001c7
SHA512 d768624375a9d53a2b1689b0006897e484937e989b3e07be645b5b6c47c050163242771f44498c54a46740ba9aad6b0817c15f81e1ff19e6cd6b32ab8711be40
SSDEEP 6144:DqSOOO0xS/o09cCv+ZgcTCJqhFpv51bcZOLJQ/0ewwP5rYfzPH:GSO2kL9cCv+ZgcT3npbbc4JZBr
TLSH
T134648C5A93A240F7CCA3813C999B8756EB723019433467EF1BB086296D6B7D01F3E761
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

realimit.dll

Path C:\REAPER\Plugins\FX\realimit.dll
Size 367KB
SHA256 ea5ab18cc7f9fa043b49533a0dd49cc162f587d01050888cb84cb8a071cc03f7
MD5 36d694454e6641a16f82b5def118c675
SHA1 d8c1c1bb75c2e2498860aa958c2ea0f967965fc3
SHA512 2e1c838153fe3756547e64ef237868d29d3c413bd819ab69919592a458b4b964ec9cc1cacabf603d06f034bba664a4e4cdc88256e5639a08b3e780b05c492397
SSDEEP 6144:Vg7N7wmZTqORrS4F4/YUlAgWh2oKwrKla3b70sLGZORJbVbUJwn5rY0K5/h4Tsh:Vg7N7wZORr/CYUlAgWh2oUl+7VLG6JBm
TLSH
T147848C06EA9244FBD4A3807C95BB5753EBB2340D433497FB17E086191EB7B802E3B665
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reaninjam.dll

Path C:\REAPER\Plugins\FX\reaninjam.dll
Size 591KB
SHA256 08d22cdcd7aedee16af231c8356e7931ece1763d59135fc07ee838094d1d951f
MD5 10137799eb703a9b607de2091dfae4ab
SHA1 c399dad268911a766e7af9a1f81b865bc62d15f6
SHA512 1d61b4fd072494f07e858edcc76825114a0c181dbfef37b8b8bd776ee050b68a515a68e69b1b82a1449eb56cdec7ff98f4d520aeaef4c6f43c5a0e6aef47dd99
SSDEEP 12288:Lv4+bSAcsTboYlKo3MkdnyZMz9uQnELgd/a6yIPThJQ9StL:tc6boYlJ3M6x9uQnELgta6yIPThS9mL
TLSH
T1CBD48D15E1D640FAD462857C86AB4323E632384843347AEB27D08B6D2E7BFD1273E765
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reapitch.dll

Path C:\REAPER\Plugins\FX\reapitch.dll
Size 305KB
SHA256 e03bfcc06d953e5ae1af52bc477f73adc8295570f5eab5e7df79f8aa94392fbe
MD5 6984b80d194b1cac7b28d95fcbee2727
SHA1 b0525c3ad06d115a038f0add951167f7c54d3c4e
SHA512 ddb2e2e36365a5ffbb4075c78256723153a159c0fde32e6219fb9e5460907755f24cb7a9aa3302676dd3246607d5e230941fc4fe42e40fc158d86a17e2aa6701
SSDEEP 6144:l/DV6QbRrzZ7CjaemigySO4pVGZg7Ej2Y6u1+tIdMiZOh+FJmC5rYNw2Y/SGH9:RIyO4pVGZg7vYctEMi6CJ0Y
TLSH
T10D646C07D2A240E7C8B3917C95AF9753EBB1340A433492EB1BE04B186E677806E3F765
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reasamplomatic.dll

Path C:\REAPER\Plugins\FX\reasamplomatic.dll
Size 431KB
SHA256 0ce75401f38d2c9870011c4c461a57648e0673f07af732c75563b2f071a5555d
MD5 61d7a79492df41918bbc455d1d913c61
SHA1 fa2ee830135d410ae4d0148cef866f3133bb5cc5
SHA512 8a17609c05ad8204658be8109b7775cf607fc4e395f5fc8caae8f6561876938c7fb62c76843c4d59593511e9c22403b4683a0e55daca66336df88170ad22ed06
SSDEEP 6144:aaC3SQv+0MAm6m6jVS2OQL2bPIVP6T2XoGBOOIQPUBOK0Gnk9CTEIt2ZODaeJLA1:aa4N+I8OIQPUBOKt5Jt2VeJc8f8
TLSH
T160948E02E2D244F5D8A6E57895B78753E2B178080334A7EB3BF0962C6E77F901A3E751
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reastream.dll

Path C:\REAPER\Plugins\FX\reastream.dll
Size 295KB
SHA256 5e14d9e44694a6e1a4ed3ba1a48bafbda507fa523f0c396756da55dbf19047e5
MD5 5adfd56c8ea897f7dbc26fa6f13a6346
SHA1 29f7d4ba9956c38627ad82808e025d28d2014574
SHA512 db1fe2897eec090975991a45d3028a82b65c74f4d411ff63066ec6d24c03e7aab7a0489091f5413e7bfd54ffd62dbdde9833ae8664fba37be3ca86ec7151d658
SSDEEP 6144:jCQlCRtUb7TP7unWFGHtyFZwTebIIPjHZOEP1WgJ8Fw/5rY2aSrK:L+U7P7unWFGNYzUSjHvpJK7v
TLSH
T11B546B27929244F7CCB6807C95DB8753F7B134094334A6EB1BF04A19AE6B7806E3E794
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reasurround.dll

Path C:\REAPER\Plugins\FX\reasurround.dll
Size 412KB
SHA256 cb5de0df7ff41ef57dcfd41f74f809d65f4282af621200dcef38ccb4ffc429cb
MD5 a3042ff61546c85d78f461f28ef18014
SHA1 8b58ae1a375a1738aded08902101e47b8cf47b5d
SHA512 6ff44f4c0871130da51b328d3cc3f74198bb8fd86abcf1e5ca626a75f52f1a64c1b5417a8e98539ca44fe8de7ceb98d5056275552065de3ffaf5986139fb5612
SSDEEP 12288:+1ac3m4Zm9OP3LFFOzFVjesgZNyxslVeUAu1Hh7Hful+FEJ8V+D:+1acrIEPp8h9jgqslVeUAu1Hh7ful+FG
TLSH
T1B6949E06E69248F9D8B280BC45B76716EB70344E0334D6EB17B44B1DAEB77C01A2F769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reasurround2.dll

Path C:\REAPER\Plugins\FX\reasurround2.dll
Size 681KB
SHA256 6ee25cb4ba6075e31f0ee746b1f1be1c1616b44e041525b5dce822036a5392de
MD5 d95db652ebd11a0a6c8c02db60bf111a
SHA1 36eb4bcc22b9b2ec835cb4bea12c16daebd22a0e
SHA512 d4ee6a58edca73ff6a89b615f31166b9c5b99af629ce74db1937f2eeb2ecd92ff53206982049ac11c60427c975711eeb6e788437af432982685a4e3273c03da1
SSDEEP 12288:2kq9C6A732vmGV5nt2WkopCb1Cvx1aJn16PfZRJ5KM:x3Gh1kopCbsvx1aJn16PfZRL5
TLSH
T1B6E48F01F5D141EDC062947446BB6623E771381A0338A6B75FE15A2E2E7BF402B6F72E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reasyndr.dll

Path C:\REAPER\Plugins\FX\reasyndr.dll
Size 215KB
SHA256 656e4e136fd41588a8d5e4433eaf57ed88e8354fd69b82cfb53e5f1841f17630
MD5 305b642af5c93cac13a610c67f66175f
SHA1 5a06b86a80b9bb356f23aace4e8bb106ff648422
SHA512 cdfb9568877ff0c8d89a4a87fb096e7aad53d1f4d41492ea1d725df359d186a0ce048c6c3b6b3d4485d722022067ab7215f96ffa3bda8c73e3755f85e6db81e8
SSDEEP 6144:+hs8dWfpIyoOfI0kTfZOlFvJtowrE67F:+hsV1twhTfeVJn7F
TLSH
T1C5245B95A29540F8CCAAC03C959B8F22FE22F449433167DB47A0872CDE6B3D4673EB55
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reasynth.dll

Path C:\REAPER\Plugins\FX\reasynth.dll
Size 270KB
SHA256 245c59dca78da58d4903aa984742461c1fd6e0d65279211df8c33587ef2a53fb
MD5 9f936b7ace7b831f0d4315b07792ab85
SHA1 b489ca4a3bdd4909f328f2c2ef48cf4a52517f41
SHA512 4313136ae74d7edba21a81247114c387781963367fff467682ad134c3d87a76bf4bed18c5c0224f9505736d95d5c3bdcda5a05cda4b58a59cb093b336d4f2b57
SSDEEP 6144:fS04XCfupcWWX05b03cU4ISSvZOoYpJ3kwP5rYV1uNCESQG:fSofupcW4a0MtrSv38JmCfy
TLSH
T133448D89A2A348F9CCF2943C9497AF12EB71B8054334D3EB1BF0461D9D6B7805B3E665
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reatune.dll

Path C:\REAPER\Plugins\FX\reatune.dll
Size 356KB
SHA256 01acd3ce78714d6a4f8cd0bde29f7923b30f4164aa1931ff9ef7881c33321d13
MD5 8a49bfb518a63c8793c2bf35e9de0168
SHA1 7579f3c8485096daedbfa36ca53522e1b61af06d
SHA512 9c4b64f01dd736868205a1740274d4f9225b2ed9d907188d6d95173381111e2dae304c6e354f1c5968355e72bd95f593f0a5a3595581c69f44467f236bc9b2d0
SSDEEP 6144:TfB60ztveMKFcNWS2h17N3SUHpKVQtotYYD0mzevMZOCDyJlrflDywP5rYXTdSBk:7B6sIXFc4h17N3SUHpKVU4navM5DyJrq
TLSH
T1D5747E06E29300F6C8A2857C95AB4757FBB134094330A7EB1BA0465C7EB7B906F3E759
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reaverb.dll

Path C:\REAPER\Plugins\FX\reaverb.dll
Size 579KB
SHA256 2fea8f81054a7328ebeef5795367c811224f7171cb8d9f0dba4efacaddfa930a
MD5 ea78b06b67e47b12427d84fd203b15ec
SHA1 2372df495c67b820283a95f8ba68191f8458e11a
SHA512 bb2fbb23fc6a8a20cb0a35e4231d54fb6a55326582821c8f7e98aaa1c2ad6f380bfface81ff2309ffa11a37d1a045c520c6e730d8b903e628d299e7d655bffcc
SSDEEP 12288:vqHHVSw8usS96uH0KbvkaLKOSr7kk+nvc98TsW07ZLY1hqUJg/8TizH:vqHFvkCc7kk598TsW07ZLY1hqUKTL
TLSH
T118C49E42E1D255F9C0A28578827B5763E77138480334AAFF27E197182E77FD01B6E36A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reaverbate.dll

Path C:\REAPER\Plugins\FX\reaverbate.dll
Size 278KB
SHA256 ac310bbdf4b7929dc465f07a20ce2aae4e62e715a5f2e0f9376022b88634950b
MD5 386a7792cca7eefa4f452f44062d29a1
SHA1 0c1a6ce913db13e17359faefbdfefc82d6ab5395
SHA512 6910c9fbacbf8451f162bf0a4fcdf3c8ecfea38c51d54c164807b839210b0e6ef5410842f52f2375488478b491bf31b7bdce3880b805e1f247c5bdd059146cf4
SSDEEP 6144:xD1Z/XVVYuXaWUu3OyobyoymqN4XlA6zz6sHgvqXAqCS0ZOsCuES2uJZLw/5rYie:NjfVSmUuey0yoymqNl6zrHhQtS0uuF/F
TLSH
T11C547D46A3A248F5DCA6843C55974B42EBB1B8494331D3EF0BF0871D9EA73901A3F7A5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Inter-Medium.ttf

Path C:\REAPER\Plugins\Inter-Medium.ttf
Size 407KB
SHA256 97ad806f526e41546d46365bb3a393145f75b7b1568913db74549ad8b8dba872
MD5 a6f54808ec0aeaf49a25a2d94b6adda6
SHA1 c1d25d8c10adb45a970e71c387bbd6380f10992d
SHA512 77d1fb0d6cfffa44c1489e9e6145bb6884a580146ba7c6e9aa995bd41d58bfe12d87724539a5aef12e1ae98a498b8bfd2463cd04cc41369affdc4e18aaf6e545
SSDEEP 12288:9cDZzfSvdVgy54Pw7ke4ajvQsnpyiX3kf:8ZK5kLsnnkf
TLSH
T173946B17F716CB4EC9162D308BE1CBE033A9BC506E1AD24B705A7A19DE8B0F40AD75E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Inter-Regular.ttf

Path C:\REAPER\Plugins\Inter-Regular.ttf
Size 401KB
SHA256 40d692fce188e4471e2b3cba937be967878f631ad3ebbbdcd587687c7ebe0c82
MD5 4145168e52304666dee7c976559aa0e4
SHA1 6e3430f906a4b42b4b63fd8f33e498a43d9f8d84
SHA512 48c33d5eb6c53efdb092a16819695db3c9aeb43ed625f1c201fe8b947fc88574f33be4fde644ec2474e7808563aba2d09109e7f5a83c496867a4aa45038d1b6c
SSDEEP 6144:dJNh0EYb+eMcB+OdLLgy54PX76MkaIMEeNM0FSvi3xApQR3LysYBG2M1fWB3q4xh:dJRNMB+OBgy54PX7AahEeG0FjMVcnmf
TLSH
T1A2945B17FB06D70DDD562D308AE187D23379FCA06E5AD24BB0993A68D98B1F809C74E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libmp3lame.dll

Path C:\REAPER\Plugins\libmp3lame.dll
Size 888KB
SHA256 7f84c9d16ea406b940392180d0e6f7426f3461a71029bb82ea6719aeee613670
MD5 8a97f72006cfa350e01aaac3b593ae4b
SHA1 02a77355dce753a8766bab37656cfaf536ffd485
SHA512 1a63145bf15e34b6ac3e6c892280b2fd459736d4923f88ae7c0b2b74ef1502f7468010ea8d782e0e271d45aca38224a82b7aa92eca4568853cd6d3dde751696f
SSDEEP 24576:KE1VwsJkzBynPdRJem2aH/w7Bo08b+/RemaDOY:yzBudREi08b+/RetDO
TLSH
T1A5157C81B1F3C9A9C0361470C1AF7B67DB393925423696BB1BE05E593EE73401F8B266
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

REAPER.ini

Path C:\REAPER\REAPER.ini
Size 23B
SHA256 74fa69e7b0329ae4af0f9893df5388030208a8c360073608641fbcd8bd4de28a
MD5 534ed690a365f671259a9ce7d2a8a910
SHA1 14ebb3a3b065f4c7f574726480e036e0c2f8beb1
SHA512 e5273745086967ce23d94b8ccbdf96703c3abce11a83b2674db52d11607c49bb91637911d71fc74ab60409dcb4d131271c54a266f2aeb96f7ec0fbaf4b409be7
MD5 SHA1 SHA512

Submit Download

[email protected]

Path C:\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
Size 65KB
SHA256 91a64bc8730949624af0b6916d380c4a3be0901ad6dbe10797cb9bd16516541a
MD5 a55fdeed83f64e4b3a4af73b52d2f3d6
SHA1 ea3be498a1a87616f7b0e4dfefa6fe45706970e9
SHA512 f1f036a4ed1b6aff65e7182d3c341a7f6e2af038094399cbc27a43949920866cdb24180a8a61728f93353f0983c37bad2881ee52dc0b6c73691927f3345e5c67
SSDEEP 768:oHHHHHHHHHHHHJAts9NH7yfOEGsy0uyFtzA0jhHHHHHHHHHg:gHmf3O
TLSH
T14563B4BF5650C41ADF80F633C90086B7671E5A0CAC95F89225BE697EE5239FBB1C8443
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

[email protected]

Path C:\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
Size 95KB
SHA256 8ec8a207170d8b57697bc718e96df66ba570d5d105c1e74c0dae4aa8a991a9a6
MD5 1dea3c1552cfa296632626316f81cfe1
SHA1 451bc22d77c120f98a15bb1b7f0c979c6f661a36
SHA512 6f1c3dc429c914d85c06b903f2987c9d685947a8da58e0e2310e448b792ac591bf9728b425ef30f3b02a13eb38b013f2fe645a08dd7a556b03073e8ac7f1d1b4
SSDEEP 24:n4OdQEXVmowWeoxpn+dwR2xeweIi34sUou8JU4G/it:n4Od1XXVnQxewemZ8aa
TLSH
T18C93FA19B806C942CFA0A93EFD65C6F01CFCAC0BFA955EA735803F5E327068854DA4C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

[email protected]

Path C:\REAPER\Scripts\Cockos\Default_6.0_theme_adjuster_images\[email protected]
Size 42KB
SHA256 9e895169189004dd4bc522fc06e0520c3be84e2d83fcee07be3820e81f9596be
MD5 b41d9eab199b13e33786992d256fc5cf
SHA1 865770a7f2ea23e2d413afb478e56bdc8397af4f
SHA512 16363d5a4b13ee8c1a6d06ca3564aab057156a3771b062fce558bfb6d670b885a8a7d41c737d8035f54319ba27b50b2b4d6f0aa59f882caad54d0a5a2d3e08fb
SSDEEP 48:JCNaZOmMdFv4CKJeGyUG+54wT+IuqGr3Ke3Ke3Ke3KO3Ke3Ke3Ke3KYqGcT+IgAn:xYaHujUrvwuz
TLSH
T1A513A5B727E2C601DB594276C932D9F00A24FE4FE956248725B97D2F343ACC342BD889
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reaper-fxtags.ini

Path C:\REAPER\reaper-fxtags.ini
Size 1KB
SHA256 785a51885eb43a279bcb5f4747400721fd6ca05b8871c89dcfb90cb6dc30bedc
MD5 0f682498d42a80f9b8e9f4c690a089ea
SHA1 5cfe406b996150fe00cbf1de5e821739b6dc5902
SHA512 9cf6a6128007510f86623a4ad7ecce04dc4520ca1b0b58640f52b146e1ad6ad7dad544897e0bcc47ad770281e3243d4249a91b66f962a0cbaaa01370728784dd
TLSH
T1F41157EA1176C5E9AB0101A037C8608DBEECE3A66DF103A4ED17C5DA6DA470D3B48B75
MD5 SHA1 SHA512 TLSH

Submit Download

reaper-mouse.ini

Path C:\REAPER\reaper-mouse.ini
Size 544B
SHA256 486c6d9144d2f9ac2bc5948a24b89394d28fc826cc63f9d2406926723f162249
MD5 baccefe3cffebe31c6955eb57141a9fc
SHA1 98f9127c8ffc09630a95749f46ae57abbfa4e871
SHA512 df34152715a92a38528d59e5df532771811b299590afbd52e972232af38d526c9d26a1f8a7ad073981965e328f1fad499a870bbb7dcf2b04cecf016de452cd0e
TLSH
T1E3F0B2B68B0FA66E750C67AE4F2FDD0BD9A4462F885838F13977CD020EE04204964321
MD5 SHA1 SHA512 TLSH

Submit Download

reaper-vstplugins64.ini

Path C:\REAPER\reaper-vstplugins64.ini
Size 1KB
SHA256 cd3c369f37829c741fe165163533fd6f03018598c1469b592cccdc415f17ee97
MD5 abd9e6ff9d0dfdb865db8f9e78d115c7
SHA1 b9ecfa961bfb1ecc10666dab889549f9e5328091
SHA512 fddbde99e4e690780ea753ad62d8fd696ad98c7526a5f49aad843f3ce6ea6c7ca57872157e678cb019adfb26fc5da8c197e3804def15cdd119e2f9731be2ef4c
TLSH
T16E319C511C3D05905A2D39FA09F4AC8D79D8BA548C3B22D5F67EACF5D7C487C690C60B
MD5 SHA1 SHA512 TLSH

Submit Download

reaper.exe

Path C:\REAPER\reaper.exe
Size 17.6MB
SHA256 13f34a0839ccf84fc80b99c5c08ad25e59b721dff009e9b55659da1e7d888379
MD5 cf933ca87d73a892b49d7ce068f8c4c2
SHA1 f71125937ea73164f59d207bf6557280eff554bd
SHA512 42e60ee2788e1564d1a51e72d3805d2235620ebd0de010d36b5ce9ab174b227650552f1b307b4375258c35f3afe36bd3d39ef92f48e9168509cd84aa5e409c2b
SSDEEP 196608:+cmz8Cvcuc++FChLt98OZgyt6Sewu1lly:+ca8yggLti71vy
TLSH
T159075C1BF1C840FDC0129AB4D75F5353C6317C0A163166BB3FD4BA6D6E72A612E2A362
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reaper.ini

Path C:\REAPER\reaper.ini
Size 46B
SHA256 3eb8b23a45983f6919d91bd57c5529f0f607a6d9866aeb98dec44a1236118f90
MD5 74492e56819b821fc830b3958d007b6d
SHA1 f7cc111c29e6edec590767eca84a536ab71c3f6b
SHA512 0fea0c4f031bb517a67f895e9c90640f0d7cc648af7c522838994b6b3a86f49f871668f7fef2afa8cd45a9a39a0d9d6db2f3eb9ba7852e79b499fee1d6aff896
MD5 SHA1 SHA512

Submit Download

reaper.ini

Path C:\REAPER\reaper.ini
Size 60B
SHA256 33c2a5733c8e212a4db488df4286d8c81f903847876f3784e5c6040ce0f4028f
MD5 a262f20bb21b1ce112d7d0addcbafe9f
SHA1 8afc49f216d648830537908bb965de9fc34809d9
SHA512 65c688b6848334dd9a9ee082102bd60d62cd5ae6b9019f2529f5cdbc4b973d5bab6827ebde99ed6e23bb31772caff3a4ad7e0349eeb0db153b5b1e88de2bccc7
TLSH
T1B0A002979145770D99549990D46904E362914138554C65D0195119EADDFC260418E6A9
MD5 SHA1 SHA512 TLSH

Submit Download

reaper.ini

Path C:\REAPER\reaper.ini
Size 151B
SHA256 99f7dcaf16b953bb3f0819d12379a4c377a2340901da00f234c28e67b3f5bf83
MD5 6047ba984c529c140f80689721ff3139
SHA1 1532e5b5d13c50e9be0213617d7dc3a05c1e23ff
SHA512 2fed41acaf37196ed10b5934634790095232b15e78a31e698677659e9bde49ceeba14bb0ece707cae751fd6afa7d686393b922fcc6310d88c6882681d2a89e3d
TLSH
T11CC08CA18440AB8AA922D8E0D058C0DB13118338802C68E034411E5644AA36D808FAD8
MD5 SHA1 SHA512 TLSH

Submit Download

reaper.ini

Path C:\REAPER\reaper.ini
Size 384B
SHA256 49351012eda79f42e47952f1453d02b98c471660fc38012c75cb6bb3883664bb
MD5 00582c32c81ff03657029ba7b7b5372e
SHA1 fbc81d1dab95781b480607d8cd5337ce18f1fbca
SHA512 93c4d8d0d07daa3201e60c5445cedea4509f584d2cf0fb9188e9985d50aca31e4422cdcf0454cf0c9827ceea97889caf1ed95ea4e366dfe2df929f372467caaf
TLSH
T177E09284C4C0954AEA52F4E2C19488C77793C2B047AC78F03B711A9F098E75D924FAD6
MD5 SHA1 SHA512 TLSH

Submit Download

reaper.ini

Path C:\REAPER\reaper.ini
Size 403B
SHA256 85e9f2bd06e0d39e6a6f5eff63dbea6cfbc496951d63f4b6ace6047ee20edbb5
MD5 cad740db8461816c22fc8eeead40b788
SHA1 2e5fa896a0bb478f5db5b9c938e9a123f136f44a
SHA512 817826a6753bad58bf5fa5af7ad58a1e5919da8edc47e4cb1613c6c7ae3e94ad1515fb9aa0bb44926852017ff555c6d269778fdffaff3c6fed7c0ca0a43f6cc6
TLSH
T12EE02B80C4D09545DA52F4E2C19448C777C3C2B047AC38F03B311A8F09CE75C428FAD6
MD5 SHA1 SHA512 TLSH

Submit Download

reaper.ini

Path C:\REAPER\reaper.ini
Size 416B
SHA256 727fc97fc30e74585d8b22e0e447a894e26310df9c989d1b4e22d12748da2f02
MD5 e50c59bade33d033e5bb96ec6d81f245
SHA1 fc75cb3f15d927672a9204ec870ddf8ba52d7e34
SHA512 d560bf8845574248e49c3829719404ab8a371f56248385b45628681dc42f2b7fe0641ceb20481d4963eeaa3330bb0377e4d93be341c744a2bf2f4523a207d7e4
TLSH
T1EBE0E580C4D09549DA52F4E2C59448C7B783C2B087AC78F03B311A8F098E75C928BAD6
MD5 SHA1 SHA512 TLSH

Submit Download

reaper.ini

Path C:\REAPER\reaper.ini
Size 448B
SHA256 a3bd0bb8d690243ffc4460d9c9af597c46eff84d95dbeac309295eee291a4806
MD5 20c49121fafc1323b2a3971b0a009091
SHA1 c6e06ab34784173861003a62f3f57fbaafb97b08
SHA512 71c2c790085c1c140dfa39f2d91a7b6c46c140930a9ffed1f507894557e6c1283bff9bf6d84ea6675b87ae4114c5c48dd64b62163607fd1593adb1590fe168c8
TLSH
T11BF02780C4D09409DA51F0E2D19448C777C3C27087AC38F17A311A8F0ACE348428B9D6
MD5 SHA1 SHA512 TLSH

Submit Download

reaper.ini

Path C:\REAPER\reaper.ini
Size 551B
SHA256 3daf2c6b42fb9842808a88b626d1e0645a657d71c5601b6b689ee608eea59001
MD5 f4858d189cda32d6d7358f4325fe5875
SHA1 eea37686fbcaa2a16ccad02f23a5bd355af04578
SHA512 c708190ed08ad1c8efd4ae99a8080349927608ce7d48d755538dfb3f041d853d7ec4a4b71a07ab8365160349cb15509876ac1be644e6665893c39c56dee89ef1
TLSH
T1BEF0FC818DD0D80DD581F4D296948CC777C2C270979C35F27A351D8F0E8E75852DA599
MD5 SHA1 SHA512 TLSH

Submit Download

reaper.ini

Path C:\REAPER\reaper.ini
Size 553B
SHA256 885ba6e9d993cf1d4f6816c22f60f79e90d7738cb93fa9bbd4729d84cad8788c
MD5 4d5a6922de665d03cfae6654c9bba68f
SHA1 7b918f37eddbee6fa8f6814f90bc589271f3e677
SHA512 2fedac04bcd9c8c718ee3b4a91ed63bf8a9eaa7e0371875697239da33c84ccde721b7bf558dd1b9234260d6b6a0f488a7c2c8be218fb5070d818a1e1fbb57060
TLSH
T132F08182CDD0D80DD581F4D296948CC7B781C270935C39F27A341D8F0ECE25812DE5D9
MD5 SHA1 SHA512 TLSH

Submit Download

reaper.ini

Path C:\REAPER\reaper.ini
Size 553B
SHA256 22e43de27e009ae4c5213a4450deab0592889e4c162363f538eaf215496f23a8
MD5 1dedf9319b74fafe28b044a7ee106242
SHA1 4988fffb065c09572f119811100549ffbce6a500
SHA512 1fda1e1966cbbc0c177874ea90b66315c3654f5d370ea901fa9a45b76279eb6d0a47cffe009f872b3d571ec95f8e9321aa7894749ca36e3367e3abb9174bf728
TLSH
T14EF08182CDD0D80DD581F4D296548CC3B781C270939C79F27A341D8F0ECD25811DE5D9
MD5 SHA1 SHA512 TLSH

Submit Download

activity-stream.contile.json

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\activity-stream.contile.json
Size 4KB
SHA256 3c6ff5e91bec88ac55c88fd67d3a45feef6a499f0d5514b672890f30d31d079c
MD5 857c7343782f592e9f702432eb03d991
SHA1 aa8895aca61236bcac04b991a427ad49511ced56
SHA512 43a99ed5be7d57687f6808da4ea231d6e260742252de1c16b7a4f29e11349bf6ef0cad159fc286979e3c3243d66340cdba388fe78ce84ba3bd466b3963d13378
SSDEEP 96:WdCH8E5t/5EwlKYp4H/9WNc6DDE+G6H217jaJNE1ob:WG8ut/5EwiVW2wDE+H217G/E1ob
TLSH
T101A1095F85A084C36B735ED81E8F335DF293B186D8DCCEACE392AD12524D31946AD8C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF

Path C:\Users\Admin\AppData\Local\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\cache2\entries\4E3D8FAAF804AAC616BC48BD4AFA8BE284516FCF
Size 16KB
SHA256 75b631dea8e5682f368c72241f7ef324fe74754384b4b4d1d63d625629b9a2b5
MD5 9ff58fb4fb0224e8e58403312df92025
SHA1 836078c498b64ccac94da95fd3154e41bd1dcb74
SHA512 e51221a7d79a620299590c84838dfb93a61b2d6cc8f50dc6a6c1e026319b883366f9dc221653aeb7152bc40a3032b93c62ccb1004af78976a0670b908e7e9682
SSDEEP 384:HwCe7iO024Yr1DL84KKDL849B7SOEAd9KVRaAcP+AWRMAJ9R:QqZY5DL8lKDL8CB7S/AmVAf+hRM69R
TLSH
T1B0729E3E9F013CAC1997D0E8C5B992D94C19B7A3CFE6806D21683D0DCB98969B1F548F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

R2RINNO6.dll

Path C:\Users\Admin\AppData\Local\Temp\is-7ILG2.tmp\R2RINNO6.dll
Size 7KB
SHA256 af8514bf17e21d72f4b5fc2ff4f2b5d49b2dcbdfc6fd1c0e0c3da73cc4a2efa8
MD5 0a3df585b39237e3110cef2d7ef81b68
SHA1 c83876d120b41dfb214bfc2064355db157e783a4
SHA512 a6c84ab191b399972a7df80d921306102b061716734d7b2640b76eaeed13a508b3473c07df06ff8da3b473563bbe984732af5cbac3d62571d99c75aa109f20cd
SSDEEP 96:suUAjK3L0RaXv0hHR4tG/zcdjqsag5nTxK75:s+2aItqsaiK
TLSH
T1C8E1B611BAA8012AF2F783F6BCABB01C092DF8515F6545DF164C55DE35006D9B83E772
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nss71C2.tmp\System.dll
Size 10KB
SHA256 bb6df93369b498eaa638b0bcdc4bb89f45e9b02ca12d28bcedf4629ea7f5e0f1
MD5 56a321bd011112ec5d8a32b2f6fd3231
SHA1 df20e3a35a1636de64df5290ae5e4e7572447f78
SHA512 5354890cbc53ce51081a78c64ba9c4c8c4dc9e01141798c1e916e19c5776dac7c82989fad0f08c73e81aaba332dad81205f90d0663119af45550b97b338b9cc3
SSDEEP 192:uv+cJZE61KRWJQO6tFiUdK7ckK4k7l1XRBm0w+NiHi1GSJ:uf6rtFRduQ1W+fG8
TLSH
T127225C5893E0C1F3D6A0853C18A73A772729712445A18FE3CFA35841AE196D7BC7E336
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UAC.dll

Path C:\Users\Admin\AppData\Local\Temp\nss71C2.tmp\UAC.dll
Size 14KB
SHA256 32dd7269abf5a0e5db888e307d9df313e87cef4f1b597965a9d8e00934658822
MD5 4814167aa1c7ec892e84907094646faa
SHA1 a57a5ecbdfa9a8777a3c587f1acb02b783afc5ee
SHA512 fb1f35e393997ecd2301f371892b59574ee6b666095c3a435336160481f6ef7ed5635c90ce5d2cf88e5ef4a5affb46cb841b7d17e7981bd6e998531193f5d067
SSDEEP 384:3A7q72y8XYDSDJe7H+KXKKK2KRKuKZrjVo787foI7:3sygyraXjQ7Zl99
TLSH
T13B626D6652988BFFD321113AB6A333235BE591103770715F4AA36F947C34A93A63D326
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

portable.dll

Path C:\Users\Admin\AppData\Local\Temp\nss71C2.tmp\portable.dll
Size 24KB
SHA256 25e5a428e663c6b6c352e7eb313d9fd265e944e0f8f88c7406c3fc15d1ad82b6
MD5 c9397d267d0d10169c4535f6d5e06a6c
SHA1 2fc5d2e909d56042d32b3fe0a5ae39fc58d110ef
SHA512 143943d8e02392ef41c2c43641db9d1737a108defb9cd62a3ed3dce800ccbc8f5997f1d0ea4846ae675e3f2b0efbbd9cebd5c5c0022822d10a89a356983440e6
SSDEEP 48:q9aX7AL2vnYLtSFs4p3Wj4vLj4GWTQfQx2m28gF244m4y+bAghX:YaLArMpGjsjdTUt2t25m+
TLSH
T1FCB2752753F438B2D57A07733197A2ABA796533013D0410D7E7E111A2F3401BCD26F96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rea5FC.tmp

Path C:\Users\Admin\AppData\Local\Temp\rea5FC.tmp
Size 11KB
SHA256 eb2fce832f8207c464d0f6cfd30f0db239f400036c0938e213a6edae7dc6d4e7
MD5 870aaf52aa16d5178709516a7774919e
SHA1 d423d74d45569af38f4b72273d991d0c1172a0a3
SHA512 5b0698254f54bf7f2ccfcaaed07ed2f3ebf20fff7ea84591777b75df9d7c17bedb04d7608825a3f462775673df59f55ee96d8d27818f38a6e121d3bcc38117d3
SSDEEP 192:q5spjpL5sh0T1THDCfpPoD+McrJkEWsQkzWk7L/ups8GldIufm5cM:q5SLN1+Q/crJHWspzW8L/ups8GldIf
TLSH
T1A532A41258E9A849E0D66B962EBC754C01F27693FCCB6C56F2EE0E8316DD1032B27D49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 11KB
SHA256 ddf3ba4e25a622276755133e0cce5605b83719c7cab3546e09acbfed00d6a986
MD5 25e8156b7f7ca8dad999ee2b93a32b71
SHA1 db587e9e9559b433cee57435cb97a83963659430
SHA512 1211b2fa997ba13ff926aec58b6b35a81d7fe108b0caa8f4d6369d0a37f8481373b78a4b201651243adde9e2b2699ce929482a46226ff6299b0a0e40fe2ddc56
SSDEEP 192:96jbMOTaRNUB3K7L7KqRUGcW9KK+DOO4L5h3tCw0RZvjUFV3bXFwo10+H99uhNA:kjbMegNp7L7KCopFDUtCZvjU73zqFiu0
TLSH
T12A32AFAB081F8454EFA710F628B670CFA1BA95B4067C2B1E9B1819855809BD0C5D2EDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tmpaddon

Path C:\Users\Admin\AppData\Local\Temp\tmpaddon
Size 502KB
SHA256 87862f4bc8559fbe578389a9501dc01c4c585edb4bb03b238493327296d60171
MD5 e690f995973164fe425f76589b1be2d9
SHA1 e947c4dad203aab37a003194dddc7980c74fa712
SHA512 77991110c1d195616e936d27151d02e4d957be6c20a4f3b3511567868b5ddffc6abbfdc668d17672f5d681f12b20237c7905f9b0daaa6d71dcdac4b38f2448b2
SSDEEP 12288:OACaeJXLVL+PLlSuxcewdMCx1uSremBgBohJmiixAzph3yZeErb:OltBL+PLQFZBgBo2xAzpsrb
TLSH
T199B423CCB77B7628D37A9C7BC257D4F853E9CA2B56423CE80C4E018D6540AB136963E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 13KB
SHA256 9cccb9ca742ca6dc838a0321043ba925e6e46104a84daabc956f66aab5de9d6e
MD5 2872650d75549cc8f94b82904d302762
SHA1 74eada203632996fcd0f616c353e0fbe5e5bf20d
SHA512 54f65e314f7d2110ddba945db80805c30062cb4b3900435a694921933d5217d707a353ed0191a13da495fc426ace87f65286d3a144d0a7557388a5241bf9d04e
SSDEEP 96:31/0/rCBFmuBvL3O+iCOKmDdWON5O+sNj:31M/rCvt3vOZWON5aNj
TLSH
T129520E010BF70985F6F74A32BA72A7426BB3FD015717826FC582A2460D33760C569FA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6824f4a902c78fbd.customDestinations-ms

Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations\6824f4a902c78fbd.customDestinations-ms
Size 13KB
SHA256 5a9621576db61c7609bbbcaf750f1f8a29aa480e395a84142eedbea004d7b040
MD5 317ff080dbfe7f6c69cfedf077623c38
SHA1 16249e456e05ccfae8a654e0ccdfa0948bdb0a03
SHA512 e6c4de30a224f2be3a4c035ad2b37275b8d9e7ad1f3ce9205faeaff93f0a06399d253d72abb42090b5a458aa7fd3e0c279f17db561f659d9f4b18935b770aa49
SSDEEP 192:3BWUBTzBF/QBZCv2BZ3vOZWOfBM5afBMj:3BWUBTzBFYBZbBZ2ZpfBMsfBMj
TLSH
T165520C010BF70981F6F78A32BA727746ABB3FD015717925EC28262460D33721C969FA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\AlternateServices.bin
Size 10KB
SHA256 21ffff74ec2b05fc6ff26498123821dc5e9b3aca058d44d39bedd7172d4dbe8e
MD5 c63df7f283847618d4963de9b4aa5acf
SHA1 427ce0af04e69defa996206393a77cf46e5c0552
SHA512 f250f13e83b8b4d9209804089bce81f70d3bafb8000cf4efdbfb59337f403ee036f16efd825cdf0d78c8c0055bd02b3f1825cc6ef51d16784064509313cadb2a
SSDEEP 24:quhMZiZU91BFwB9xdQC9VvDQwv9BZQm9F3QN5q9F55A5uQb9lL3:kRgEwB84YcCDI56v5N
TLSH
T1F82293F36B76A072F0A2CFB4405972CCDC330326156C9694D694C4E702D5AA9D17EBE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AlternateServices.bin

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\AlternateServices.bin
Size 16KB
SHA256 9d5f26fb1c47f4fe200165dc829b22f07bf6b13e54ea5f439e4f0023c8806ff9
MD5 90947526599b204ef5f67c4c848b0dd1
SHA1 81aabba014a1c960f6fe62f7f5a501279a0246a4
SHA512 59fcccdaec9de824e7e94cd224ccd138614a5c3924acd169ea5062c2f1091ef6c48eb83c2ec41177d211dbec4dc0ba7a5d4351c6b9ad9df879de72b308587b14
SSDEEP 48:p2HTNB7bH11QI56Y5NGM/pTO9UMRz2a4:p2HTNB7bH11QI56Y5NGM/pTOSMRzR4
TLSH
T18C7283F72B726462F062CFB0406972CC9C33072615689694DA94C4E702E1AE5D0BEFE8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\datareporting\glean\db\data.safe.tmp
Size 6KB
SHA256 b72336d0b78873986f87b12d4a600c2c4e58065d8c12d41bf959995ffa5b9783
MD5 2de8144b1dfef6ea3f8744c57941ba55
SHA1 e9fb56df88ebcd6a3a69657f80f8440c1d3d43e4
SHA512 8ef7f2fe0b84c03298233b6acbb5458cc8e1611d000b5271626a46107731d4381d620e3d522efd02ced882ba35416b40f852e7c6e985167a5f72f9fada79d3bc
SSDEEP 192:NI07IaOv5zbotZhIKSyjoIAxP1d66Joz0dzgCl6mc0d:NzkbotZhVSyjotd66JozQzgC1j
TLSH
T1C6D1DD58F628863BC415023FCDA51B400F36389A9C4E7F1A329C245D3D972DD7A8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\datareporting\glean\db\data.safe.tmp
Size 91KB
SHA256 fb46c01e0a3917469a5d8f4a39666cd50ff365cdef6bc2065b624b2ee3ef2402
MD5 ba74f5a25a315adcf2637c380f85a337
SHA1 bad3f7b4f88172503657cfc296e5b63e3f0ed912
SHA512 683e24cb5cbdf5b9e6a51199a53963ff511d770eb0099f08f7ff1b0c0228575acf754bddf219d2d2580aab6c7f33bc77c735360ca89bf9f27fee0ab607a98fd3
SSDEEP 1536:i3aX0DTLWE0yoLcNOqsa9NKaCvct9606ftt:i3a2LWl16OE9NKaCvct9606ftt
TLSH
T12F936CD0DB1B407BFD1085BFB4956B3C1625F42149989B0B3AEC04661DCF7BF2D0AA6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\datareporting\glean\db\data.safe.tmp
Size 49KB
SHA256 99ef558c0956493d0066546f55ece747151ccffb8c93f70b70166120c64059db
MD5 288c82e52646d0016a108a5901a3bd25
SHA1 289b3e2cf688051f10582ed6c73d85619ed09f8a
SHA512 33f86a81d708c32cf45921e150a8c5a5ad968607551241838f23b074d734afaeb3ef73d63026f3fcd57b235fe37670098f3a7d25e660d18fb5c3de443cc6b4b6
SSDEEP 768:O6m6b4P/aX0DTLWEEVyoLcNfPlGcmhuca5Kd9T1IKpNbybfbDbebdyb:O53aX0DTLWE0yoLcNOqsq
TLSH
T147330144EB1E513FD42802BA9DE11B002F79F889591A2FAB3B4C55686C872DC3D9E17F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.safe.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\datareporting\glean\db\data.safe.tmp
Size 7KB
SHA256 918d5a70bac34b23852daaae1c8b32af1700206d154bf6e82f8bf70063a11b23
MD5 4496e7f3ba8d9bbf034b7c849c6d7019
SHA1 c6d6e2973689db25c92ff0ef91222d474dcea0d7
SHA512 f009eb502a2f1fc09c00b868c07edd41aba22e762a37b029d7cc0596a8017b82215fc739f8b729ba6769877df16cceb129288f552bf8a95df555a8b63232e3a8
SSDEEP 192:QI07IaOv5zboHoZhIKSyjoI0po1d66Joz0dzgCl6mc0dz:QzkboIZhVSyjoGd66JozQzgC1jd
TLSH
T19AE11EA4E628863BC404027FDDA11B400F35389A9C4E7F1A369D645C2D972DE7B8E17E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\datareporting\glean\events\events
Size 1KB
SHA256 76f02af145a4f4118c3be3a470c05e35141bb6f792329684a523e61bd173c288
MD5 c95b6e51e4df1df740ac8084d7d220fb
SHA1 ce41236de3b89a635c075ce92c0f18974fbbfe67
SHA512 0ff41331b848ab050a5c9d0474e69b0f9cfc6a5181e0539d7e2c8dda55d72ea9eb3099387d9df604153c5b7578e236100d716ab290fac5c5f255e8845d25b09c
TLSH
T1D621ACAD3EB84D6AA9CBF39C788502CE57154A0304871D531D13EF8CCED1ADA32A947E
MD5 SHA1 SHA512 TLSH

Submit Download

events

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\datareporting\glean\events\events
Size 5KB
SHA256 48f66bc2ab2f214cc79be6b2ec064ad10653bb26fa888c103dde60980253e16c
MD5 9f328ccc064b5106f4372538f60575db
SHA1 008ddf9773164d8c53d3d900d9e4a56a51e1e43a
SHA512 3bcdb7ee562dbd653d2885f1b7911419f419fed26b49845ae7f522b929a6c7a464a5adece4997605986a85189f383c132aac42e79c85e5deb0a22d2958d09caa
SSDEEP 48:Ya6Hg1pu72/RpwjZi/s8NsezRSiJXithGacmAvtiV47MdObXdsAmiwWYcJEBOZAp:RW8NPtycF24wdWXdmACXTHRLU+
TLSH
T140B1205D7ABE0CBE29C7D39DF88502CD4A89470384871D934C8BEE49CD42A9A324E07E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

147dd2e2-5966-4620-8f0d-a64c1a56193f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\datareporting\glean\pending_pings\147dd2e2-5966-4620-8f0d-a64c1a56193f
Size 886B
SHA256 92c33abfb2f7d457abb795703100e30c12e9432e2007ab376380472d571d3e34
MD5 99cd86f17e0f5eb4052ef287bd459baa
SHA1 bcaf186afd04198d92a12e1c970a069e800ddd94
SHA512 9720fb65e9d562b3268bb3f2822c02232e737db6efe2dfe03aba57b330efa4dc4632d2b8cb350cb5a4152a602708b788efbde80ff137d3762348a220ff496775
TLSH
T18B1100C19638B9B2DD38D28F96E177464BA07033C4C64D087EA45A284CAA56E636A30B
MD5 SHA1 SHA512 TLSH

Submit Download

1f926197-1771-4bfc-aa6e-98da439fc082

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\datareporting\glean\pending_pings\1f926197-1771-4bfc-aa6e-98da439fc082
Size 235B
SHA256 b73a7438fa3d22195611828dc1f809b4c52dfacc0d8d94718cdcf923a7e2b0ed
MD5 a0b96e180e923d0d5f36032237e75152
SHA1 78e179a20e39bac3cdebcd6aaa45b8acc1453ba4
SHA512 5b74e77c1cc9dd34c16c19f9643d6b1a66781f545b0ad0ff4816c269aedded2ce9eabad41cdf834619ea2bb8e5f61fcdc8c20b4ce5fce8d5fbd68daea3e9434d
TLSH
T11AD097C058A8671C09144F0BF0E028C6315DCC33A4A06810C9A041788AFB9C401A196A
MD5 SHA1 SHA512 TLSH

Submit Download

7f0289b2-3348-4cd0-bc06-188e0df967d7

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\datareporting\glean\pending_pings\7f0289b2-3348-4cd0-bc06-188e0df967d7
Size 883B
SHA256 20cd296fa19de3d1828a1653f06e2dbbee03541450a8122b0b6be958bc0bc04d
MD5 67a936f717a0da34fce72647895afdeb
SHA1 5263e708e9f6de61fc02bb6f543406984ebb351e
SHA512 532f93d37180a5b61daff8c0569a3e059da01fafbecef97f7605a0695536de4f51fcf393a83cc6dc99acad4d90a52b5a0963231564f878e255559ddb2db5f569
TLSH
T1241123C19638B9B2DC28D24F8AA17B034FA4792784C684043FA55D180DAE56EB77F30B
MD5 SHA1 SHA512 TLSH

Submit Download

901e71ba-92cf-40b4-a7e2-37908143767f

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\datareporting\glean\pending_pings\901e71ba-92cf-40b4-a7e2-37908143767f
Size 16KB
SHA256 35be59560e9007bc304d1b739935f8fb503b60a17a5a8b56b52a93c418b32e21
MD5 99f442895e2a69409983013f2cdb2645
SHA1 b4e54982438984d2cce96b9bac67b9c919a310d8
SHA512 ffa28cda7df31a67cef29b1f6825e8cfaac40d63e49c41895664b9c146520d762eb52033122b5359519eafbd7065f04a34d1d6d0402155aa178b9013483414a5
SSDEEP 192:csp5ZOqGi3WpM9ow0l0EnP48XUuXuui3jbBiYh3914Ok73htiPzxSK6YwKkTI7nA:cslH8ku+uinoimHiPlSK6TKAe1yAuh
TLSH
T1E972BA56646045BA8291E36C94FCBFC3E5F52CCB4C418FCD9BE4BE0469DE0AE112784B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

b810d92b-b596-40c1-973e-8e5964ee9ea6

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\datareporting\glean\pending_pings\b810d92b-b596-40c1-973e-8e5964ee9ea6
Size 2KB
SHA256 a2404792164b5ff99a82113112a8c277b5358530321fa329f1117d9704c164d5
MD5 90c904f702420fead29dcba3291afca0
SHA1 942c97b6e9de66d24f7970bfffe2e164cfb3d3ce
SHA512 9297f45b9eb0f35b990a5aba4248f77f14feede88434f67c82619952eafe7defd389f364550d05821071fafec3baaf7026b006ab9ca9836a65353aeaba66e9b3
TLSH
T1B441239C35789CB79D97E18CD582334E57608A1700C21C832E61EF4C8CD96AA336E43B
MD5 SHA1 SHA512 TLSH

Submit Download

c635b78b-ecba-4711-b404-9acb6d7526dc

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\datareporting\glean\pending_pings\c635b78b-ecba-4711-b404-9acb6d7526dc
Size 235B
SHA256 b09f6e6510fc1c2820a3f0bd166426f87703fbb7df33ee456d689e6203742883
MD5 911bd11b94a3fa6c71f446bebb0cc81c
SHA1 0fddcf84d77a9cf100244e7a1ba4a268a94c17f3
SHA512 133e6a63ff0e02300f0bde1dc87964abf9b8c8ed6b425eadb7d51e356f72e730a49ad9cc541cdecc873c74ea306e8c2d11a43a81b69454cade4477eabb9342dc
TLSH
T126D097806898672C08150F06B0A02ACA30884C3320B0AC108AB085B8CAFCAC591E1D06
MD5 SHA1 SHA512 TLSH

Submit Download

extensions.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\extensions.json
Size 16KB
SHA256 bf6c4d26d6df272c7625695954d42fd2ab0924d97ce6d0b52bae7526ded856e5
MD5 89b9d01f599df6b92414da44f57fe6e7
SHA1 0bd4d04bf5b76a212c6b14cdf9c7a0c1fd32e3aa
SHA512 b9bb98e4d85851e025330b2c70d5f41af519acefe31c9a1f9c226e596cec5859afea5151b4c2778c5975c53c7317b9bedb9d7cabadd319940329632b8a3849dc
SSDEEP 384:YkI4vIUmldv68dhWR94zX896oKL4HUL4Pw5L4H3L4HRL4HS+4hB:PI4ARf/Xo4M6f4u4ox4b4p4d4H
TLSH
T1EA72631545049EB8298FA79AAA367E01C37D433B60845C78F4DD8FC802FB5B902FB65B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.dll
Size 1.1MB
SHA256 37c005a7789747b412d6c0a6a4c30d15732da3d857b4f94b744be1a67231b651
MD5 626073e8dcf656ac4130e3283c51cbba
SHA1 7e3197e5792e34a67bfef9727ce1dd7dc151284c
SHA512 eebdeef5e47aeadfeebdbab8625f4ec91e15c4c4e4db4be91ea41be4a3da1e1afeed305f6470e5d6b2a31c41cbfb5548b35a15fccd7896d3fde7cdf402d7a339
SSDEEP 24576:qSPda8zU7qNBLR+R1Uq6S/gCfTuP4PIKth58yS0fDrx1:xfeqNBR+cq6S+4QKtkyS0fv
TLSH
T159458D0AF2A641F8D41ED470966EA722FA79344C173568EF169587202F77BC0AB3EF14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gmpopenh264.info

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\gmp-gmpopenh264\2.6.0\gmpopenh264.info
Size 116B
SHA256 fe7686a6281f0ab519c32c788ce0da0d01640425018dcffcfcb81105757f6fe6
MD5 ae29912407dfadf0d683982d4fb57293
SHA1 0542053f5a6ce07dc206f69230109be4a5e25775
SHA512 6f9083152c02f93a900cb69b1ce879e0c0d69453f1046280ca549a0301ae7925facdda6329f7ccb61726addee78ba2fffc5ba3491a185f139f3155716caf0a8d
TLSH
T101B092446843B0B1187682471D795AA55A79B782E022486D6E6F27E10784727476D4E4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\gmp-widevinecdm\4.10.3050.0\manifest.json
Size 1002B
SHA256 2894996540fabbd346ed4ced8386ca77d6badf60372e307ee15c906c30340d0d
MD5 dcffff15fa618a53834ee4ae8673bd23
SHA1 87316c1f583f438b55e3b0a94783ff9dc8f177f7
SHA512 250c869c49c886306aa0362567cb1ccacae676f886a5b9206ce77fb92acf3af16bd574e80d01e0f97f031d6f00710af8f82c176df51994dcfb51153bed3cee46
TLSH
T139115B00DD388DD326D4BAA21CD6580A97661DAF5CC23E94379E161D8F1C8AB937376C
MD5 SHA1 SHA512 TLSH

Submit Download

widevinecdm.dll

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\gmp-widevinecdm\4.10.3050.0\widevinecdm.dll
Size 21.6MB
SHA256 f1216e26ee8c27f938d7722427d29f190e569ed83d0ba16ea872cae684b97602
MD5 d14dd3f0107ff91c3e21f301d83f82b0
SHA1 f61d7d687c9d4b3b6a6c9c0f5610025b5d3f4e45
SHA512 de745c2ff8440d72c5616a88fc56918f4aa7de202c8c4cd7fd026d5eebebde6ee97a3a8a76f331da4c03042b7d87ba8dc2eda40bb475fb47e56df5c2795cf97d
SSDEEP 393216:bYXajn9L4mghF5QDwW0LmruPCB78HYUUZBKvq9PW1gL2hoHH:emghF5QDwWCm/2YU8Ivq9u5K
TLSH
T14E37F18AF36350A8D84E9DF0426EAA72D0743C4E03359AEF17D47B315A727C06A79F16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

places.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\places.sqlite
Size 5.0MB
SHA256 be3d38c67d4266f8c335658a7451651cc2dfc5049cdfd17aea784108ec7089c0
MD5 a156309d352f943020adca9b95aca547
SHA1 c290279d6288e9bf82c15ac8670eb14ece776140
SHA512 32180f3fb913c9d8bdf4bfc520297be20e14f79fdf680b561ccd960f8341e628ad86e570750b32946a25f28f090e18f74fec18fbb99730ce312c88678fd817b4
SSDEEP 192:M8rJQaXoMXp0VW9FxWa29hvH6LnB2waI8FWT1T+alm:M8r54w0VW3xWa29hvH6LnB2mB
TLSH
T1FF36655F7A609151C4EAA132EDE32F1A183F7006853276833AD4556E4DF1A63B91CCBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\prefs-1.js
Size 6KB
SHA256 47b24350361b2df6a01d4b6ea74e0f2f9012c5bd53257c62e1f0c8606299e8ef
MD5 e84e0c048fffe558d3215cd256f80804
SHA1 049a5067f8d7117620c3ca14752b44a3063d72d1
SHA512 a4fb971e98138c72ec9264a7e59209aac7d26332f73e66d88404f7942d5a9807aaa8829e0644a247c9713926af75dc83bb2e92f4eaca913710388a28399ae7d3
SSDEEP 96:xH/UTULXqGqSfwF/1zS8SSl+dv9jJnRERHPKLy4Bw88H8L4cnEiIyfGS:hb6RSfwF/FSSR9PuBw888Iy
TLSH
T1C5E130789408CF7F74B677ACAC6888316AB2413B76BF68C710B94485055CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\prefs-1.js
Size 12KB
SHA256 9cd4a66a77cf239e7c2f113e130b611eaa1edf34db10db725541906f45babf59
MD5 682509a1c60ea3361ff9444338eaf1ad
SHA1 fdf7de4c2b1df20a9792113b61beadda8a1d6f5b
SHA512 973b465eb2088aea9483547adafbf291938beab2fb753902d0d2c76f6fdc9464cc0b31dccd049c58d940e79977d5958f36b0aeeac7b57e71b1456cb95761c8f2
SSDEEP 192:hy6CRSf/F/SSSRXLRPrOBw8OzN8FKHZIy:40SR4w355n
TLSH
T15342ACB85504CF3F35B3357DAC2949A01DA1422776BFBCE616F988C1445CF2481EAAEB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs-1.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\prefs-1.js
Size 8KB
SHA256 408262de253a7620763263f119ad88fc6b1783576eaf78bc4b348c60765b0179
MD5 f3bd0f940f29fd4a544da1e2989c0a94
SHA1 fc4e6498be3bef056689d37292c93f84721e7133
SHA512 80ee24939e2cc4943d15ba039136af629ad196c150a4dad1b35413c350e748109765b346d0231b8a1b517a9e4989a11c755663ff5a73552ceba9be1c586a47fe
SSDEEP 96:xH/pTUL6PqGqSf/F/NbzS8SSl+dv9jJnRERWRjjKLyT8Bw88gHr8L4cnEiIyfGS:hy6CRSf/F/hSSR8RP+Bw88TIy
TLSH
T133021F785504CF7F74B676ACAC6849715AB2023B76BF68D710B948C5050CF3842FA6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\prefs.js
Size 6KB
SHA256 f687f1beeb15d59a10fa535069a0db3c3bfd942031627e020f0d242ccbd24016
MD5 684fbfea4fa97c0ba0f10c2e7e1b9556
SHA1 d2b389001cdccf2e1a41a41b4ce821b8600379ac
SHA512 ab51e86f675624b489491c3c044c8f9e022d8efd7740d6e478ad8da9fc74efe6368cde3aa62728d18ab1380e4efd6c306b4bf0d1f052cbda175878034450317f
SSDEEP 96:xH/UTULXqGqSfwpmk1zSuaSSl+dv9jLnRERHPKLy4Bw88H8L4cnEiIym:hb6RSfwpmk3aSSz9PuBw888I5
TLSH
T103E12E7894088F7F74B677ACAC6888316AB2413B76BF68C710B95485055CF3442F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\prefs.js
Size 6KB
SHA256 0e18836b380c25aea9b06c5f13cd3d9269d02ce603eb7efc40b4861200a228d1
MD5 44a96599a82b9f2e467609b7d8b41b3d
SHA1 d68c67fd241e99c582635fcc6709dd16787845d8
SHA512 3a106f7301eda98995e4965b700d266c3d9edd24462150f4b3dceda387dcbad0d7c01828276ccf95feb092bda13aa77a5c2011340314494ac44d4df4580c552f
SSDEEP 96:xH/UTULXqGqSfwpmk1zS8SSl+dv9jLnRERHPKLy4Bw88H8L4cnEiIym:hb6RSfwpmkFSSz9PuBw888I5
TLSH
T142E12F7894088F7F74B677ACAC6888316AB2413B77BF68C710B94485055CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\prefs.js
Size 6KB
SHA256 0213a29b3b16f9199b04f5a8868ae2df86c135526eb2f373d8ac4679f4c686c6
MD5 b94a2240af8d77a436407724806a9ad6
SHA1 cc27c779d995eb58fc866b4a87c85e5ce6ed00fb
SHA512 ca909d5815ac72be087dae43f6609d449de0cd675139a976bf14ac9cd715c94998b9a7d087f0124216473d7ef01055338d262f1c42df1b70d0515917695e1649
SSDEEP 96:xH/UTULXqGqSfwF/kzS8SSl+dv9jJnRERHPKLy4Bw88H8L4cnEiIyfGS:hb6RSfwF/2SSR9PuBw888Iy
TLSH
T1A7E1407894088F7F74B677ACAC6888316AB2013B76BF68C710B94484055CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

prefs.js

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\prefs.js
Size 7KB
SHA256 e7315b62adf594388e990a2cf7587a23c5f5062c3b22868f77850dc4f89b19ec
MD5 5db643ff1fcf833ee8fb67f6709871df
SHA1 f107a0a9570979254d6fd13f1dab1e5e7c534655
SHA512 1804734cd8e05d0d869c7059af407d41ea9079e9d66336e12d15ae81e40e5f42fac9fbf52ac72789633da1020390e032e955519ede58bb33bbf9d0100001629a
SSDEEP 96:xH/UTUL6PqGqSfwF/kzS8SSl+dv9jJnRERHPKLy4Bw88H8L4cnEiIyfGS:hb6CRSfwF/2SSR9PuBw888Iy
TLSH
T178E1317895088F7F74B677ACAC688C715AB2013B76BF58C750B94484055CF3842F96EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sessionCheckpoints.json.tmp

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\sessionCheckpoints.json.tmp
Size 288B
SHA256 2fca1f29b73dd5b4159fa1eb16e69276482f5224ba7d2219a547039129a51f0e
MD5 948a7403e323297c6bb8a5c791b42866
SHA1 88a555717e8a4a33eccfb7d47a2a4aa31038f9c0
SHA512 17e2f65c33f47c8bb4beca31db2aff3d4bbb6c2d36924057f9f847e207bdcb85ffcbb32c80dd06862ffc9b7f0bd3f5e2e65b48bb1bc3363732751101d5596b1a
TLSH
T1A5D08C83C10950BACE826A58B398BB509E3E00F271140142B6AC888C183F023418B803
MD5 SHA1 SHA512 TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\sessionstore-backups\recovery.baklz4
Size 5KB
SHA256 e06ea41175fbe7608deb263492c65543b4a827b6671b9e3ba64eb49bcbae7852
MD5 ad332202b4b2ccbeae2b5c0744f14db1
SHA1 ee6e63f8868067bc725bbbd81235cb5fe101d061
SHA512 2fd147e2c37aab89a2b65235290b5644c0b64e418d6fca0c65e90a182a1987e23dacffb52dc34f1860059bfd8a4dda58f04175a6e464fc9f8bd5c20d4f70acd3
SSDEEP 96:12Jn9lC/vvkHr2yHeAMUvLQUOK//y15bEZb1hat38cAeRwV5ZiYPQsS:1W9lC/0CyYgXOY6ruatscA+wMGS
TLSH
T180B19E06BCFA6E63DA87946F41885F51EF903051D560DCF4EC021A098699983BEAF515
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.baklz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\sessionstore-backups\recovery.baklz4
Size 7KB
SHA256 cf9f0de50de8756c1280762c8601ec1552eb5045a0599a55ec7b17309dbb8be6
MD5 2ff1676297f515f0a3941751f7b52b32
SHA1 cb12efc56793dad1e16ab0753d72cbfd3c987de3
SHA512 ab6d91e14adb5852235038fa69050ac72b50692265f9d70b600dd97376ada24b6a312bc1f658c307800113eb54821156d345048dc34fff44054cf248e9bd3265
SSDEEP 192:+89Y9eyoYq3/fdSBTi29kYg0catsshCwM0FB:Pqzq3/1+2fyHCwM0FB
TLSH
T165F19F17FDABBD03DB8E8C9504CE6F779D603211CF605CD4FC012A9E866AB46796E242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

recovery.jsonlz4

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\sessionstore-backups\recovery.jsonlz4
Size 7KB
SHA256 209afb2ff934f9444c3bc00801fdbfa9fcf02752d7ee22d66dd64b0d305bfa2f
MD5 fdf06078efecfa0b254025a6e93e7374
SHA1 10d9ac0d455cc2a1d1dc9394e3697d7f0d6c3274
SHA512 4daf4644350c96caf14ddb6a0b0033c88e0bb27c2585dafe31ae3b3af326114b1ed39eb4f10921a942cac475dcdfa31d768a9f3c966a02e859420291c7886367
SSDEEP 192:+89Y9eyoYqn/fdSBTi29kYg0catsshCwM0FZ:Pqzqn/1+2fyHCwM0FZ
TLSH
T1B5F1AF17FDABBD039B8E8C9504CD6F779D603211CF605CD4FC012A9E826AB457D6E242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3870112724rsegmnoittet-es.sqlite

Path C:\Users\Admin\AppData\Roaming\Mozilla\Firefox\Profiles\nmpjn8cr.default-release\storage\permanent\chrome\idb\3870112724rsegmnoittet-es.sqlite
Size 6.4MB
SHA256 ac1e1df93b57965a1c3cfb0b353b25799f1295db6a52b7219bd22b3ce3cd074f
MD5 e1ecff71811382f9ae508f17a8c93038
SHA1 74eed20e03a95bb3adb96535eceb306061064a33
SHA512 0f180d4484bd756b4f8f7fbb3cf6983082c6ec77b92206ffb08b28c902774cfc6aec7b647d811bfe52edf373a292f3adf0e84dab0f93614165443ec6630db442
SSDEEP 49152:ELRLyZaeUT6QC5zYYH3cJ5JQ5+zWwvm75dUwKCkQdaPR+/8Y9z7Y5mqwC8hX5ILI:SgqwC6XQ5bmMXDZ
TLSH
T19A665CE420E29252F34140B3719A53EB11EFC01C6077CE445B9896FAA5B8CEB4E977BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reaper778_x64-install.exe

Path C:\Users\Admin\Downloads\reaper778_x64-install.exe
Size 16.3MB
SHA256 e7ad77bdd572c35d205034f871181c7b4d9a4110798131b60acd54cd44453947
MD5 0a38c1bf75d23a1b1c0285dd31774774
SHA1 dfaf76ca4931b42c7e5b89c934fbce2ff5722b0a
SHA512 05f42c8e9a815375adad90b5b39960a2e499715cd48629b913099ac102a634f2c0c549540e4e856935dab8cdec2450fb362d02b78b948f009e275cf43e2c2c77
SSDEEP 393216:HIBfywbkEDqHEz7A5KKws1gpGIMEWw2mMn6DMluSXT30:7sqHEvOKEgEEanNgSXTE
TLSH
T1C707337D86329D9CDC908DF6CC113E818F04FD6BD4AA192E5D95707E88BE4780B978CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

reaper778_x64-install.exe:Zone.Identifier

Path C:\Users\Admin\Downloads\reaper778_x64-install.exe:Zone.Identifier
Size 124B
SHA256 b2b3eb82a92f70a98e2e03716b31c29daf334abef4163f17bd674701b7554917
MD5 bed738a48ab26abe9124cc182301ee06
SHA1 8606688a86635a3ef79e887b4929732a1b1dad6c
SHA512 96a1400f890a4146a2abed98cc99400ca41454bb2bf1fb8b95df0021344f63638a052859b1da90d19a999ef2668e0e6492d53df6eaa8a788ff4afd3e48d76727
TLSH
T13DB092D3880488A10A547AC0A2AAA64EB4CF71464AA60286DC82D1EF5881865C196E52
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1204-5623-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/1204-5627-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/1728-4389-0x00007FF9EE290000-0x00007FF9EE2A8000-memory.dmp

Download

memory/1728-4387-0x00007FF9EE9B0000-0x00007FF9EE9E4000-memory.dmp

Download

memory/1728-4207-0x000000000A740000-0x000000000A7F3000-memory.dmp

Download

memory/1728-4209-0x000000000A8C0000-0x000000000AB5F000-memory.dmp

Download

memory/1728-4223-0x000000000AB60000-0x000000000AC47000-memory.dmp

Download

memory/1728-4381-0x00007FF9F2A70000-0x00007FF9F2A8C000-memory.dmp

Download

memory/1728-4382-0x00007FF9F2A50000-0x00007FF9F2A61000-memory.dmp

Download

memory/1728-4383-0x00007FF9F2A30000-0x00007FF9F2A41000-memory.dmp

Download

memory/1728-4384-0x00007FF9F1F30000-0x00007FF9F1F43000-memory.dmp

Download

memory/1728-4068-0x0000000009AF0000-0x0000000009B2F000-memory.dmp

Download

memory/1728-4611-0x00007FF9EE290000-0x00007FF9EE2A8000-memory.dmp

Download

memory/1728-4610-0x00007FF9EE990000-0x00007FF9EE9A3000-memory.dmp

Download

memory/1728-4609-0x00007FF9EE9B0000-0x00007FF9EE9E4000-memory.dmp

Download

memory/1728-4612-0x0000000140000000-0x000000014127E000-memory.dmp

Download

memory/1728-4601-0x000000000B580000-0x000000000CDEF000-memory.dmp

Download

memory/1728-4608-0x00007FF9EE9F0000-0x00007FF9EEA01000-memory.dmp

Download

memory/1728-4607-0x00007FF9F1C00000-0x00007FF9F1C16000-memory.dmp

Download

memory/1728-4606-0x00007FF9F1F30000-0x00007FF9F1F43000-memory.dmp

Download

memory/1728-4605-0x00007FF9F2A30000-0x00007FF9F2A41000-memory.dmp

Download

memory/1728-4604-0x00007FF9F2A50000-0x00007FF9F2A61000-memory.dmp

Download

memory/1728-4603-0x00007FF9F2A70000-0x00007FF9F2A8C000-memory.dmp

Download

memory/1728-4602-0x00007FF9F2A90000-0x00007FF9F2AC4000-memory.dmp

Download

memory/1728-4600-0x00007FF9DB5A0000-0x00007FF9DB856000-memory.dmp

Download

memory/1728-4599-0x000000006CA00000-0x000000006CEBC000-memory.dmp

Download

memory/1728-4070-0x0000000009EB0000-0x0000000009FC2000-memory.dmp

Download

memory/1728-3386-0x0000000140000000-0x000000014127E000-memory.dmp

Download

memory/1728-4072-0x000000000A090000-0x000000000A1AB000-memory.dmp

Download

memory/1728-4245-0x000000000CEF0000-0x000000000CF90000-memory.dmp

Download

memory/1728-4243-0x000000000B230000-0x000000000B2C1000-memory.dmp

Download

memory/1728-4388-0x00007FF9EE990000-0x00007FF9EE9A3000-memory.dmp

Download

memory/1728-4380-0x00007FF9F2A90000-0x00007FF9F2AC4000-memory.dmp

Download

memory/1728-4385-0x00007FF9F1C00000-0x00007FF9F1C16000-memory.dmp

Download

memory/1728-4377-0x000000006CA00000-0x000000006CEBC000-memory.dmp

Download

memory/1728-4386-0x00007FF9EE9F0000-0x00007FF9EEA01000-memory.dmp

Download

memory/1728-4233-0x000000000B300000-0x000000000B57F000-memory.dmp

Download

memory/1728-4198-0x000000000A020000-0x000000000A067000-memory.dmp

Download

memory/1728-4204-0x000000000A610000-0x000000000A73A000-memory.dmp

Download

memory/1728-4200-0x000000000A390000-0x000000000A46A000-memory.dmp

Download

memory/1728-4202-0x000000000A4C0000-0x000000000A501000-memory.dmp

Download

memory/1728-4230-0x000000000AD90000-0x000000000ADCF000-memory.dmp

Download

memory/1728-4378-0x00007FF9DB5A0000-0x00007FF9DB856000-memory.dmp

Download

memory/1728-4228-0x000000000AF30000-0x000000000B01E000-memory.dmp

Download

memory/1728-4226-0x000000000AC50000-0x000000000AD87000-memory.dmp

Download

memory/1728-4064-0x0000000009D30000-0x0000000009E9D000-memory.dmp

Download

memory/1728-4379-0x000000000B580000-0x000000000CDEF000-memory.dmp

Download

memory/2500-6767-0x0000000140000000-0x000000014127E000-memory.dmp

Download

memory/2500-5730-0x0000000140000000-0x000000014127E000-memory.dmp

Download

memory/5208-5630-0x0000000140000000-0x000000014127E000-memory.dmp

Download

memory/5208-5356-0x0000000140000000-0x000000014127E000-memory.dmp

Download

memory/5256-5202-0x0000000009FD0000-0x000000000A0B7000-memory.dmp

Download

memory/5256-5155-0x0000000009610000-0x0000000009722000-memory.dmp

Download

memory/5256-5189-0x000000000A1D0000-0x000000000A46F000-memory.dmp

Download

memory/5256-5157-0x0000000009900000-0x0000000009A1B000-memory.dmp

Download

memory/5256-5205-0x000000000A6D0000-0x000000000A807000-memory.dmp

Download

memory/5256-5208-0x000000000A470000-0x000000000A55E000-memory.dmp

Download

memory/5256-5595-0x0000000140000000-0x000000014127E000-memory.dmp

Download

memory/5256-5209-0x000000000A140000-0x000000000A17F000-memory.dmp

Download

memory/5256-5222-0x000000000A5E0000-0x000000000A671000-memory.dmp

Download

memory/5256-5186-0x0000000009C90000-0x0000000009D43000-memory.dmp

Download

memory/5256-4670-0x0000000140000000-0x000000014127E000-memory.dmp

Download

memory/5256-5153-0x00000000093D0000-0x000000000940F000-memory.dmp

Download

memory/5256-5177-0x00000000097F0000-0x0000000009837000-memory.dmp

Download

memory/5256-5149-0x00000000094A0000-0x000000000960D000-memory.dmp

Download

memory/5256-5211-0x000000000AB00000-0x000000000AD7F000-memory.dmp

Download

memory/5256-5183-0x0000000009D90000-0x0000000009EBA000-memory.dmp

Download

memory/5256-5181-0x0000000009A20000-0x0000000009A61000-memory.dmp

Download

memory/5256-5180-0x0000000009BB0000-0x0000000009C8A000-memory.dmp

Download

memory/5604-4622-0x0000000000040000-0x00000000003EE000-memory.dmp

Download

memory/5604-4637-0x0000000000040000-0x00000000003EE000-memory.dmp

Download

memory/6720-6770-0x0000000010000000-0x0000000010013000-memory.dmp

Download

memory/7156-4621-0x00000000000D0000-0x00000000001B7000-memory.dmp

Download

memory/7156-4613-0x00000000000D0000-0x00000000001B7000-memory.dmp

Download

memory/7156-4638-0x00000000000D0000-0x00000000001B7000-memory.dmp

Download