a5c5184a7c9f4ac859a5e9e52a0d93c24fc3c3ea7bd936335be5eefa294f8e67

Analysis

user interaction
yes
max time kernel
81s
max time network
81s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
12/08/2026, 01:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LuaTools-win-Setup.exe
Size 11.2MB
Sample260812-bvh9csszes
SHA256 a5c5184a7c9f4ac859a5e9e52a0d93c24fc3c3ea7bd936335be5eefa294f8e67
MD5 71d1fdfdd63bcdde0e227ebee986aec6
SHA1 78747d6c1eb052dc4c0b6214ae266360ad4e65a8
SHA512 30565ad50db48eed8a3457d9c73e66593a8fb33fc3d27426dc95cf53c2f09379e8145c6f92605ff90cb60aa048b8c07dc7f0009c91703e9cbbf4c19c07e5f122
SSDEEP 196608:K4MyYyDTgGUc7I0040yF5NFcjPnN4Sw6qHn3ILn03t+6E4Ub1A:iJyngCI60ojFcjfN4SwVI70bUW
TLSH
T1E6C60162FF02D0FBD48A01B5D43EB739B6369E95872A85D34AA9385CA8F1370584335F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 4 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\Control Panel\International\Geo\Nation	LuaTools.exe
Key value queried	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\Control Panel\International\Geo\Nation	LuaTools.exe
Key value queried	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\Control Panel\International\Geo\Nation	LuaTools.exe
Key value queried	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\Control Panel\International\Geo\Nation	LuaTools.exe

Executes dropped EXE 4 IoCs

pid	Process
568	LuaTools.exe
2884	LuaTools.exe
3816	LuaTools.exe
2332	LuaTools.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
114	discord.com
115	discord.com
117	discord.com
7	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LuaTools-win-Setup.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
1460	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134309717672103329"	msedge.exe

Modifies registry class 17 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\luatools\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\LuaTools\\current\\LuaTools.exe\" \"%1\""	LuaTools.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{26838353-5B6C-4814-8230-46D048DF1E90}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\luatools\shell\open\command	LuaTools.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\luatools\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\LuaTools\\current\\LuaTools.exe\" \"%1\""	LuaTools.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\luatools\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\LuaTools\\current\\LuaTools.exe\" \"%1\""	LuaTools.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\luatools\ = "URL:LuaTools Protocol"	LuaTools.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\luatools	LuaTools.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\luatools\shell	LuaTools.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\luatools\shell\open	LuaTools.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\luatools\ = "URL:LuaTools Protocol"	LuaTools.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\luatools\URL Protocol	LuaTools.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-876885714-46325919-1482798410-1000\{FF8C75F5-517B-4802-BBE3-0763DA7741CE}	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\luatools\ = "URL:LuaTools Protocol"	LuaTools.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\luatools\URL Protocol	LuaTools.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\luatools\URL Protocol	LuaTools.exe

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
4548	LuaTools-win-Setup.exe
4548	LuaTools-win-Setup.exe
2884	LuaTools.exe
2884	LuaTools.exe
2884	LuaTools.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 5 IoCs

pid	Process
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe

Suspicious use of AdjustPrivilegeToken 4 IoCs

description	pid	Process
Token: SeDebugPrivilege	568	LuaTools.exe
Token: SeDebugPrivilege	2884	LuaTools.exe
Token: SeDebugPrivilege	3816	LuaTools.exe
Token: SeDebugPrivilege	2332	LuaTools.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe
5064	msedge.exe

Suspicious use of WriteProcessMemory 47 IoCs

description	pid	Process	procid_target
PID 4548 wrote to memory of 568	4548	LuaTools-win-Setup.exe	88
PID 4548 wrote to memory of 2884	4548	LuaTools-win-Setup.exe	89
PID 2332 wrote to memory of 5064	2332	LuaTools.exe	106
PID 5064 wrote to memory of 4528	5064	msedge.exe	107
PID 5064 wrote to memory of 1460	5064	msedge.exe	108
PID 5064 wrote to memory of 3248	5064	msedge.exe	109
PID 5064 wrote to memory of 3248	5064	msedge.exe	109
PID 5064 wrote to memory of 3248	5064	msedge.exe	109
PID 5064 wrote to memory of 4684	5064	msedge.exe	110
PID 5064 wrote to memory of 4684	5064	msedge.exe	110
PID 5064 wrote to memory of 1112	5064	msedge.exe	111
PID 5064 wrote to memory of 1112	5064	msedge.exe	111
PID 5064 wrote to memory of 1112	5064	msedge.exe	111
PID 5064 wrote to memory of 3240	5064	msedge.exe	112
PID 5064 wrote to memory of 3240	5064	msedge.exe	112
PID 5064 wrote to memory of 3240	5064	msedge.exe	112
PID 5064 wrote to memory of 4872	5064	msedge.exe	114
PID 5064 wrote to memory of 2892	5064	msedge.exe	115
PID 5064 wrote to memory of 4872	5064	msedge.exe	114
PID 5064 wrote to memory of 4872	5064	msedge.exe	114
PID 5064 wrote to memory of 2892	5064	msedge.exe	115
PID 5064 wrote to memory of 2892	5064	msedge.exe	115
PID 5064 wrote to memory of 2596	5064	msedge.exe	119
PID 5064 wrote to memory of 2596	5064	msedge.exe	119
PID 5064 wrote to memory of 2596	5064	msedge.exe	119
PID 5064 wrote to memory of 3296	5064	msedge.exe	120
PID 5064 wrote to memory of 3296	5064	msedge.exe	120
PID 5064 wrote to memory of 3252	5064	msedge.exe	121
PID 5064 wrote to memory of 3252	5064	msedge.exe	121
PID 5064 wrote to memory of 1524	5064	msedge.exe	122
PID 5064 wrote to memory of 4996	5064	msedge.exe	123
PID 5064 wrote to memory of 1524	5064	msedge.exe	122
PID 5064 wrote to memory of 4996	5064	msedge.exe	123
PID 5064 wrote to memory of 5448	5064	msedge.exe	124
PID 5064 wrote to memory of 5456	5064	msedge.exe	125
PID 5064 wrote to memory of 5456	5064	msedge.exe	125
PID 5064 wrote to memory of 6080	5064	msedge.exe	127
PID 5064 wrote to memory of 6108	5064	msedge.exe	128
PID 5064 wrote to memory of 6108	5064	msedge.exe	128
PID 5064 wrote to memory of 5124	5064	msedge.exe	129
PID 5064 wrote to memory of 5124	5064	msedge.exe	129
PID 5064 wrote to memory of 5432	5064	msedge.exe	130
PID 5064 wrote to memory of 5432	5064	msedge.exe	130
PID 5064 wrote to memory of 808	5064	msedge.exe	131
PID 5064 wrote to memory of 808	5064	msedge.exe	131
PID 5064 wrote to memory of 5212	5064	msedge.exe	132
PID 5064 wrote to memory of 5212	5064	msedge.exe	132

C:\Users\Admin\AppData\Local\Temp\LuaTools-win-Setup.exe
"C:\Users\Admin\AppData\Local\Temp\LuaTools-win-Setup.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:4548
- C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
  "C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe" --veloapp-install 1.2.7
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:568
- C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
  "C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:2884

C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
"C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
PID:3816

C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
"C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://db.lua.tools/auth/v1/authorize?provider=discord&redirect_to=http%3A%2F%2Flocalhost%3A53789%2Fcallback&code_challenge=G9ahRffF1wDRz9Cr3nOwhJJJuGId2POOy9zKiu7R7oM&code_challenge_method=s256
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:5064
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x2c4,0x2c8,0x2cc,0x2c0,0x2f0,0x7ffef1b8c188,0x7ffef1b8c194,0x7ffef1b8c1a0
    3⤵
    PID:4528
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1952,i,10805679900926121997,7448553146199881552,524288 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=2336 /prefetch:3
    3⤵
    - System Time Discovery
    PID:1460
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1744,i,13405318860806251070,6808436873324671698,262144 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
    3⤵
    PID:3248
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2592,i,4863795244625400870,8292850565783855141,524288 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=2600 /prefetch:8
    3⤵
    PID:4684
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3436,i,9423977145368096451,4800339895520258151,2097152 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=3480 /prefetch:1
    3⤵
    PID:1112
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3444,i,10303578511165774178,18082634899638307051,2097152 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=3468 /prefetch:1
    3⤵
    PID:3240
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4176,i,14922457529738047553,1502151689908926752,2097152 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=4204 /prefetch:1
    3⤵
    PID:4872
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4196,i,14851339704493739001,17127780908228202001,2097152 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=4208 /prefetch:2
    3⤵
    PID:2892
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5084,i,14848660328517528693,6236443914047296811,2097152 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=4904 /prefetch:1
    3⤵
    PID:2596
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5320,i,11549348855156373681,9316324909802293251,524288 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=3400 /prefetch:8
    3⤵
    PID:3296
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5424,i,10111511834611848378,14613034412111280294,524288 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=5308 /prefetch:8
    3⤵
    PID:3252
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5604,i,12551567312814280570,2869303996445261647,524288 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=5844 /prefetch:8
    3⤵
    PID:1524
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5608,i,14414525657678831440,1375919707727408363,524288 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=5864 /prefetch:8
    3⤵
    PID:4996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6168,i,244807630871283035,3885092845056802393,524288 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=6176 /prefetch:8
    3⤵
    - Modifies registry class
    PID:5448
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6228,i,2153490128121030106,8381116306663817685,524288 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8
    3⤵
    PID:5456
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,8169743583758217004,4044702216088987825,524288 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
    3⤵
    PID:6060
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4520,i,8169743583758217004,4044702216088987825,524288 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=5352 /prefetch:8
    3⤵
    PID:6080
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5380,i,1114857080133793524,6963499620496185815,524288 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:8
    3⤵
    PID:6108
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6624,i,5816461692643630208,9794263767774879879,524288 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=6612 /prefetch:8
    3⤵
    PID:5124
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7140,i,18129404706755224204,6142949596234675619,524288 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=7092 /prefetch:8
    3⤵
    PID:5432
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6632,i,14056395028420705850,14729811846568282134,524288 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=5380 /prefetch:8
    3⤵
    PID:808
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6628,i,17521091533990944759,2883225830611781707,524288 --field-trial-handle=2300,i,14929836399894954680,16702575524536981670,262144 --variations-seed-version --mojo-platform-channel-handle=7068 /prefetch:8
    3⤵
    PID:5212

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1816

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CommunityToolkit.Mvvm.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\CommunityToolkit.Mvvm.dll
Size 143KB
SHA256 19b2144fed9600d58a742a5a4a5fd7b10d4d0d2c2e79f5d8019307cf5657044f
MD5 c5aba3e739e682a6727f33e7c89f1f3b
SHA1 2c656c3c24e66aea61bda770f146d8ccff5c868f
SHA512 fd7269021e7064742b1bd2b361d90ba5f848ba9f275f1b1b7a1459b231d4f012fa1bfe37cb0c01f524356e6bbc8a91f7eaddc91202b7fd498b6fa016b3a8659c
SSDEEP 3072:TSieaCkJBmT1YhqlgBE6KZogn10iAj+QPuzO/:TRVxmYe6+n10iV2
TLSH
T1AFE39E1273E85A33E6FF1B75B4F0808A8F72D707ED26E34D958D82920963BC059517BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.deps.json

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.deps.json
Size 36KB
SHA256 aae717913b1ddcdb0f601e951fd2cf0688847fc70fa64766da9ea2f3144cc89d
MD5 aa7b89e5955d44ffdc81b5a01b059e2e
SHA1 5e7c7fc5557b8f28f678695cab2732227186e138
SHA512 1d1a97154b4c9ecc0c9bb32a10eea3e3e32c230a55c0437d55f11020ea55e0960b9661f507acb98b71bfd09c870b47a6fef1a2337b5d1ef05e98c0e90167e8b5
SSDEEP 384:CgAcHwIIq/MpRYIh23RC7d4oFbyfxIyf3S:CISq/MpRYIh23RCRV8xIMS
TLSH
T184F28A26E8585E234976B7A6FD784991FA35432F3004684A7CFC294CCF76BAA5093F34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.dll
Size 1.1MB
SHA256 7324b1af306081ee51a37c792725f81b596abb4643c2f3d73840e4aaa75caa1e
MD5 24523626986d9800a65b1b91f565ad95
SHA1 abfbede1804770a213fdf1747a0e32374baeadf0
SHA512 fac7d15e5329d77befa51b4f4e2e2777d76765cb8b60d8f530fd28ec1349ed23afba929c078a4b45aa399150622663ffc8d029f2511257f9ea194b90a412a7a6
SSDEEP 12288:6Ud5dzLtxYYbS0vJ/QgcPGSLHIW3xfITigh1r0z8s:RtftxYCSek7IWBf6/hZ0z
TLSH
T15A355C2522B45239D4EF7AB4A025001C8AB5EF827506E37F1E5B76BDECF53168D812E3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.exe

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
Size 254KB
SHA256 f5aa66fda67af6b35e573eb4d506b0e911f32ae7226a66b41060c24a9fadfe4a
MD5 be799934d0fe6a78a16675947359777d
SHA1 c47fd42372bcfbe1af3bd1e7100759d7272c8ae4
SHA512 4977fcecb8d8f6a8e53b32fc14bf464b8a4ac8885f3d6f94296daea19668b6e06ddbf20ab041b147f019c8bca6e94ab9c53fbdd25aa89f86176c51062d69e410
SSDEEP 3072:FqeXA/4yIg9vkNPNu6H6xCYOiVUE265RJ6nIyBp:FvgvkNFNaxmNExJ6Ig
TLSH
T164442A37928541B9F097F1B4CA610845EBF17F605322A3FB1E0379BFCAF92819A69741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.runtimeconfig.json

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.runtimeconfig.json
Size 496B
SHA256 b7ab6a0ad18cf1280ad75c8e6d0df62d06c84d62dc69351e49c04afd3e218eb2
MD5 eb7751b6da413a72fe18d187b6b88daa
SHA1 0ab1171970e84ab0e4c9b6807a3700744052aab2
SHA512 d7db1f44c4f706c50755c07501f26620f51c9efb707853432b0ea1a15ffc7e3f9fba919cbbfc3540aec68035132f8ccdf3b5abc0882b67529f8ef5c0b509214c
TLSH
T160F05539C9141DB708F43BADD12AC087FA30136B01040D5A75FC180C2F766A26010E88
MD5 SHA1 SHA512 TLSH

Submit Download

Markdig.Wpf.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Markdig.Wpf.dll
Size 36KB
SHA256 b3054e4698878b89fb7e6244edd62b047be82aace0b1e506ff0271ab663a95da
MD5 36516367616a3339e7f9a8440b926d83
SHA1 186c8bb31a6479cbf868cc83d1a67106e8d3b212
SHA512 1cd6d37e7bef1c6a9871472cbe5dc3046c1b4f41bdd91a44398c0a41b2604a5131b80800a6b7a6935aae84a1e65d30edad3b75b17d60ab866fac21658175ff5d
SSDEEP 768:4rwjdE8a+zfLQUowohKV41fnPX9ZmsLAMK5qJTa:Ow5E8a+DLQUowOMYnP9ZmsLda
TLSH
T169F22C50BBDA812CE1FD4635B8B29A50B1B7B98E1206DE5F1D8150BF0CABB424611FF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Markdig.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Markdig.dll
Size 397KB
SHA256 17b19e9d32487968d5b55ec1d2d83800534985fc67151cbb6b82f42aaf232f30
MD5 9df1a79d00d43baa73de4a11c5e1db6f
SHA1 eb71d0ebb49f105ab733940ef5de364a41d363ec
SHA512 85f01b9cb614f70baffffd0c7426797ce97d71f45806edf2b7429cf70790800e9f16110881b6c47af1f7fd06e4161843133979b703e7d00fc46c336c6cc8f881
SSDEEP 6144:n3iVRvQuyp+zNvN8433eabMz+KECAqJGv3uh4bpQOGuV1PIYryeiJEtyBg:n3iVRvQuN863emMz4CqqvZBg
TLSH
T1218472B413F451E8F2EBFE37E8A21A20D6F2794BAD41ED5E0484244D8CB57419CA736B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.Abstractions.dll
Size 26KB
SHA256 3700bf75d75ceef47ebd6df7df9bafb9f7b7dcf22fc537f227db72ccf74c476d
MD5 6f48fbe8c1d66121fb930d01cee4cc95
SHA1 1cc8d8afaec01f6e967818a484fd7aa509624ecd
SHA512 3fe0dba909f19ea448ccf6e3874db0b6709737b215107f7b86fe35c3b911b200ca37dde2f1377f258fd265caa09f93af49ea5b239b05db5c3442f48c5571942d
SSDEEP 384:o9WZMDYtid3v9TaTG/FwEzRjz6rMwTbFmDWsjINWJlNgoR9zFiXS:0WZMDYk5pdO/09zl
TLSH
T19BC25B1653AC9333DDFB2F71F9A1C4952E3997E6A801DA19689E700809777C09B3372E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Binder.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.Binder.dll
Size 41KB
SHA256 efc13893ebfa02cc7e49ac13cfef68517c4441a33210d67956e7488b8e6b277d
MD5 2290f7d234bcbf93459adb8bb0745275
SHA1 e5f4067e40be7685d35d7cad76ef7768e53b078d
SHA512 7ffbedde32c75599a7c9f5ffda297f5a7f58699b05f7b42248ef28b0bafbf33ec9bd4fa27afbd6dc8f97b7d4ad61fb43cacc19e96fdc536429efd0a494c01baa
SSDEEP 768:DsjeqKLvg51cjLTwE6ry/v1rt4m37oX9z/5Y8:DsqxL451qUE6ry1Wm37+zhY8
TLSH
T1B1134C1793EC872AE9FF0B707471A4224FB6BB917926D6195C89A05C1D377C08A3236F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.CommandLine.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.CommandLine.dll
Size 23KB
SHA256 a1c8c9728b0dc64dcd975f82d013a1b7bc0c0133e46a94f29044f16cad6072b6
MD5 584eda713ab7795fac1645ef6f3352dc
SHA1 231d179d15e5caac7de89cb8ad71b9d0db1f82f5
SHA512 07f7baa9912b3e17239a601e33d40b329788c3cfc47d03626a0ea0c4f1766a3a9184f4c354715136878ea444287d1ffa6ff97e5cdb11020019babfb5dd9e1db2
SSDEEP 384:/fym2RBaP8ckJt+KAW9BmnWElNhtIscmeR9zlQQR:/amEEYRAvtI7N9zh
TLSH
T110B24B6693FC8317FDFB0E71A6F1D5512E39ABD76811E62A145EA0080D737C08B72729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.EnvironmentVariables.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.EnvironmentVariables.dll
Size 21KB
SHA256 bbb26aacd4ba67351d3740106bbcc5544827d98d91b48109362988147ae7963e
MD5 177dcffd43ac45b58a0c42b2c7b99c0c
SHA1 f61334d03d1050174a90c300c19fa29c39517e64
SHA512 3ef3aac0bdd86d7401d363f8d4d4771e79402c1459c9c5e5f1f178b4300cc9fc67b18d8af2c2d1f742f3a22f556efe5f554336db2e6126ab536344d1cbe65581
SSDEEP 384:v/dUEK0NrbQObCWU+JeWDlNBki+R9zd17/:v/UmfNxE9zj7/
TLSH
T181A24B8197FCD106F9F77FB4D9F9C9662C35F7D21862953A006DA00B0867B848B91B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.FileExtensions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.FileExtensions.dll
Size 26KB
SHA256 1830c601c1b155c54fbd3a6844453dae87af14eafe763942939d06905035130f
MD5 ee6d71766d2811851d8dd808384b5d83
SHA1 dc1a15ffbe9e406484572c21a2e94052099b1461
SHA512 bbf23f5c8c1059d48e04b965fba41921fb5346117c46792b218e07ed123be5ff1397781a8ddc68bfac44a0a9333442015dec3e67385a9a65633a6fb93f207dfb
SSDEEP 384:SNHfs86q0/ALi2iTFwLsdYyOiaXAzpkLqWqKl6WYlNorgFbR9zBTV9:Sk92/VyOOpkL3/A9zD9
TLSH
T1E5C25C62C7BC4213C9BB1E71A9F0E5022E35A7975C10E66B59DDE00D1DB73C08E62B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Json.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.Json.dll
Size 25KB
SHA256 e106f8bc13df7168294b95a6cdbceaba47b8eb7e562940eb4ef038db6fb1f2d0
MD5 e0a403e5af381beb4a47945fb5155ca7
SHA1 31b3051b7622207f803333e799461f9182319fb3
SHA512 0828841a0305e043f2df522b8d34c822d13964d870f08e1af0c461dd22a957088b0c44e2a24e877e87aff91a3dcf09f71b225e3e83982fcd0c80473606babaac
SSDEEP 384:5iemM0/vv+cFsbTRo9ge1lgzWkWR2W4lN4eFbR9zBOViT:5iMCzFsjfGG9zCW
TLSH
T117C25B6257FC4213E9BF1F319AF5C9412E39E796A811E71E15ADB00808B77C48E7272A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.UserSecrets.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.UserSecrets.dll
Size 24KB
SHA256 a310bcdd868dafc0efce5b03a68cd7af5d4fa0d06509ed4b5c51ddc1758e9791
MD5 249b5a3d38956616eb522a7c7214d0cc
SHA1 1b39211cf7978386ce9589eb88983deee137c3e4
SHA512 03d7b1eceadca05b35a14a3183ddb406d971fe61c217ffddd9d2ac9c187f9ad2cc6cece04c9332096b1396397e0b2398002ea4d3e8d0ec26e8e6a4d5246b3bf0
SSDEEP 384:o88CyOBc4Rm15FApdE1wEDW9ytCWjlNy2jR9zGGhyL:o8ByURi40uw9zwL
TLSH
T1C4B24C52D7FC4332FABA0E73F9B5E4452E38BBD65C11A61D109DA009187BBC48B32769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.dll
Size 42KB
SHA256 7a883c57d00808ca9b5d11bfaa2c5d21f714ed7560e781d7313d65b09b88b6c9
MD5 3970d9bf37ecb6cff7a394bdd25ee78f
SHA1 054b4622b962ae25446888ddf5ec823e340ff662
SHA512 950d50379cf9fe0fc8216a1f786b4c0322eecdeb390098e8bf855dc40c6901de1da110ddd48650ade001f009a815e8151ba72872381a16c6b2e96167d7fc427e
SSDEEP 768:LnxYrISYXrpu4dAn9RY5Pd9Lgg4vScADpDgOlfe9zb:LnxYrISQpu4v5/cANDKzb
TLSH
T153135B52536C8B17D6BE1B73F8E4992A2F71D2476815F30D9C9EB09908AB7C04B12737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.DependencyInjection.Abstractions.dll
Size 63KB
SHA256 c2a34d5259e6d6c0af43d9b926454105e80e7657dfed901d845100db254de89b
MD5 8db369e1139ba14a6208ea8df983ad0a
SHA1 62e77416f1f25a91c3a5140e3635414af1b8202e
SHA512 ef872d41c7775a81bb2dcbde47637cca29b4b810f2671826de042129e9907aeb2dff02a1ab684425cfaf7b2f48abc6e9a4f2261a4bb4c15bab70eba556f93633
SSDEEP 768:z0dv145TiKK8sfK8wUcrioA085JW14e2KSpYzRTzPdH9zJ:z0P45TiK3sfK81c52W+eHSpYztzldzJ
TLSH
T127533CDD37FCD373FBAE5B722A7390C09A35BA531401E70EA98550EA0892BC88551DB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.DependencyInjection.dll
Size 92KB
SHA256 4d7fb7b6a171047984a8316b1a355c65e33350c343f4e0ea2f1233be457eb7e5
MD5 7835c72d7fd691ebda152797eaf1bcec
SHA1 8816449c02b9424b7058842f161772fc489cbd86
SHA512 aad53dfdc5ee860b2a6d23c961005609f2ebb02fe3913750a08f31c81d9526e2dead96d4f233c12764e8bf51b6449ada833bca9129e6b77b3cdae6c3b6f86fd7
SSDEEP 1536:hrzFViiQfeQJFi5+2H2SOETeFRdRV6ZTzzIYn1Y6zQ:xFUiQfeQe/9eT6Tzzx+6U
TLSH
T159935C3963FC8F21EAFF1A75947141054BB6AB4A3403E31E1E94A0AD1AE3FC547713A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Diagnostics.Abstractions.dll
Size 29KB
SHA256 0a9e51f2d4861367908fa058da82b4a0deb6f85f6ba11d3c90b01c848b1fcdac
MD5 436f31765e8a25707ef3770a4880cd5e
SHA1 a0d63c5d8cc9f1644d85667136c73d7c337872b1
SHA512 9d5c163d8453e5784a79f8708d67f9304f0183a61b7ec2e54e0d4d772aa79c5f7afc726dfadec753e24be4a7743380a4bdfb39f01ad1f2a22edce64386c34243
SSDEEP 384:MLdH4vpxJv3H1yPNdc+bXimUVG+KWOXcRWVlNq1wGjR9zGGW:4dH4v9/yVurn159z2
TLSH
T132D26D41A7BC9325DEBB1E31BAA1C4023B36C3576811E7664EC8910D1977BD49A33B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Diagnostics.dll
Size 34KB
SHA256 0842e20c25240aca53809e005776eb88f53a61128c632c4c6fa8685b9f66c4b7
MD5 f14e4787e1accf6c01d433eaa0e30dfd
SHA1 3cc40e3e4c0645cbc8fec59e9bf59673f458029b
SHA512 f0d6cc32446f4cda8cbec48e8e5413ed3b8ec7bcdb8fb710013993feade52317438c44cb180394a6f71eb6164b9cbe170d6d284ae61a71a1d5da3ab5ec50b373
SSDEEP 768:lY4wbeDJl88xZZcfqnfBTdqdgWO7N9zal:lsClF/e+yOWyvzal
TLSH
T15CF24A56A7EC9322D9BF1E75AEF086061F39C7836411FB692DEC90990D777C08722329
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.FileProviders.Abstractions.dll
Size 21KB
SHA256 02f38beb848fa01fcc55f0cf3982ca01e1a5aeba95933131a197ef602a130763
MD5 3aa27844975c473aa34256bf9bcc8b6d
SHA1 16f9a31d79dd248c034ed092d40dc6c385ebee65
SHA512 95ae823dd74af65dd3c9ba60e676d8110a6293297a0a6cf53aeafc5faeb12431538d83d46adb0abab8833b12458eca29f3dd9a3314d72c3a72f99928bdb9f442
SSDEEP 384:N3tt2JeSlo+MVdUJtFEWsHMhWGalNFGoR9zFiJn/oq:Ne5GQfr09zQ/1
TLSH
T164A27D26D7BC8363CEFA5E3069A4C9476D3DD3DB4C05E51A1589E1081AF3BC48732B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Physical.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.FileProviders.Physical.dll
Size 43KB
SHA256 e6073f96262a3c468c5024564fa02df0f36234242b392c8b658b81bb1b9d968a
MD5 887259a796ae6590749fa3f0d78b0cd9
SHA1 6ab7d026ff5fc8fc0d92b51f29e492d8b33f8c5c
SHA512 41e7ba5f26060b03430f3da154ca8cd691bb287008e78661706cb449bfa3d3310342dd6e408a213df7c1366ecf89e8d0598d4dbfcd8c1d54039957e8a5c2edaa
SSDEEP 768:+kjPlCVm7Ej8zP5usGppdtUqISA3SngVE419z4Qt:+kJCVm7EihusMpdtUxSqSgVE4Hz4+
TLSH
T181137D2193BC4307CDEE4BB16DF0E4460734F3D72502F75A0D98B19A29A77C84B626BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileSystemGlobbing.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.FileSystemGlobbing.dll
Size 45KB
SHA256 965a5347b125d232361dd08027ab263ed1d042b0240ec4a4f29b7a0bfd74bb28
MD5 39743aeab0c21850ec0a8e7830ad4370
SHA1 c897d4dcf3bf039cf766f940f117701a0c5b1eab
SHA512 a79f377a64bea1c532aed4ce33abe17af9e888a4c89434a2310af7e6e3845333fd5116f0b1475db06f9c09d243f09b50ac5245d10dcac0e99a56a48a68f832a5
SSDEEP 768:7rw185npIg65BZLzI1Vp3aPolwgYakfn8OmVSfem0TgvJKMd9zH:7r/pkB58LaP4wgYaOYVSWpgvJKM/zH
TLSH
T108234A8066AC8223CABE17B8B8F4D4524B75C6B7B412FB474ECDA9481CB37C41A61777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Hosting.Abstractions.dll
Size 51KB
SHA256 57c2528e1f2b3872976661686af9bcbd0612de7ee6b4ef4cfe92b746b27aa1b7
MD5 c32f6f4402d1c5a9fcd2fff1e20a859b
SHA1 3732c98212eec17ff92759599fe91cafd1a8d711
SHA512 4bd18b34de2e0135a8e00616384033609fbb25804457cbd6cf3d363d7f2e3c7d4aec0e9f99e4a75b3abc87b8dde5ee0e6903dcf3afab80d962cfef02c7532a32
SSDEEP 768:3dfIvk8cUbjKbhY6Om4e+X9CzJ65Mo7tKoV2nwsyQQZt164yCmi3FbFi/Up2cK5J:5+k7UbjKbhY1TbUcKo+bozqrH
TLSH
T12933B14163F81615FAFB3F34ADF891258A3ABE66B834F62C064945DD09B2B80C971737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Hosting.dll
Size 69KB
SHA256 ca135e4b48abc2effdb6fdf085837966c35f3a8a305744429009dde946d633c8
MD5 14ffa2d36a6d50f71e904f5d0deef146
SHA1 63c60db8fd1a63be05ecafe119d61fe6d86bcb1f
SHA512 09d1ca0be3b43235f97f5739bb5e443adb04c0d34ad6499f7c50dbc64eff351e0b803ab0f8968bbe9589a88eb41765597b9b9b3fa623f6841ab98b6e4d66f9ab
SSDEEP 768:mHcMciLWJeEHq8SMj9db9KKjoDpxdDozzCF95dnbOCify7MYzWUAKCf9zPcx:mHTfEKjkdbMK6PM8nbOKVWUAKozPQ
TLSH
T15A634B8363AC4713DAEF1AB9E8B465691A35DB576414F70E5C8CB0D90CE3BC44E2272B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Abstractions.dll
Size 64KB
SHA256 4ad4a3b2bed7f5f293f83cc2c46169b93a9863b89428f693a4f17863704f47aa
MD5 a5cab35625e1f365a9181f4e059023b5
SHA1 1f8fcaaf8a0c512e3d33aa7caa0b452227459eed
SHA512 1fb963e563d774df6ad87fe5b7a09fcf0eae1413c270d4b01022e94a00057fc917919b3f4f6e03bb45ac47286dafe763d40ecd50d3ecc2ae91ba122c5579531a
SSDEEP 768:vRU98PjrdTukvp6wV1XxMyVYB0wwbru2OkJB7ix+WTqoU8/Aj29zg4Q:JTTxvcwTWBkbru2b7OZTNU8/2Cz9Q
TLSH
T1C4537D05ABEC4377CBBE4EB9F89096410F35C2472547E79B2CCCD125A92BBD44E213A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Configuration.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Configuration.dll
Size 26KB
SHA256 ed0a70f939dc8779ee85802e926f138e284828ac14d44831ca68fdcd14450b5b
MD5 477d8b5d7ab4c9b2bc918ef5daa8b45e
SHA1 7486ff87665335aa215bd589d19b98f546215eb4
SHA512 2ece4726195ea57acef015ee2b10435a50af5eb39d7d2af01d13f74cb9c6b6d1ceef4a232f81914bcb115ef52bb47641e833aabe4d19c8933cc286f2312f0883
SSDEEP 384:SPntTUFG4562BbpdL62S5p2X/ckWxsmzU7RWJlNdki+R9zdq:YtTJQj220gkU7H9zU
TLSH
T13CC25C6697A88326E9FB0F71EDF0D9453E35D7925811FB1D189EB00804BB3C4872273A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Console.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Console.dll
Size 73KB
SHA256 84ca5528a45074f18ae4234956de55d238a65be39f914f88293732dfd3889a35
MD5 cace87a409706f20b3ee8060cb9f0a16
SHA1 e7c60278a72a6ad5cfdd80191c09d91abeaadbbf
SHA512 ed21c6547c2df2cdf61c3070254bd6439a30d5674523823d303a0a96e40cdb64a91c887ab4133ead3d8a48716f7679bb6b2c67b22461d9ffef48249a5e5e0019
SSDEEP 1536:31SU9VTLpoGSWZdHPIcKPmUwzF9U8o/T//+Fv/HENqyvzM:lSU9VfpoX+JFKPmUZT/WFv/kkso
TLSH
T135736B1A5BEC831AD9BF5FB8FC7091015B35EB53B803EBAB5D88A0AC08677C54512763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Debug.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Debug.dll
Size 19KB
SHA256 ec47584ec7344dbe9b3ec5740cf493a8dbf346e467d6855e24be33555db11983
MD5 b1d351bf2b284e0969f1bcf9d6be1b58
SHA1 64fab26c768c8b610df90baad8e03e7759309f6e
SHA512 98df861cf32cf09a00688626d706b36ea9a4c3b5bcf76f3675039e43268a82cb6632c05066b361440c5f88806cfad0955af1bd4f9d0373dd796b369084a6c385
SSDEEP 192:zVfPfwSGE5QJusuqgQJ9j578mDAqWJIxVMW0WF+GBTBWseaAWDiz5j4HsX01k9zM:Rfafu42mDAqWJIxVMWJlNVIR9zeZ
TLSH
T149924D528BB84206DDAA5F30EFA5DA42793DD3979511DA2B05D8D1090C93BC4973262E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.EventLog.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.EventLog.dll
Size 24KB
SHA256 f70b8392447817a4d44acd5785e0bc029a2844d5445e05b98d95b237443339db
MD5 8210308568d5ef15f758ad21fee0517e
SHA1 e0fdd76a63aff7195b38976882e88701bb6fda57
SHA512 5decf964bfe472c2083bf093709da87a4577fffa9a22f9db757a9c3beaa83005a26599cf2297c9619522b3b7682af8a279dd5dcd5168808722b3d78c71814644
SSDEEP 384:0cqdNcIPJ51NsMsOBZgmVfVej+yUvW2rgFW0lN4tR9zj4O:VqPPUEZ9kUEAP9zMO
TLSH
T19EB25E429A6C431BDCAD4A71EFB5CD42397CE7C76812DA260E9CF1490C637D48B21B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.EventSource.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.EventSource.dll
Size 33KB
SHA256 665d5316f601ed6dd9daa6d7534610ca3a7aa40e4d117c079ffb118ea2179b2d
MD5 b251f77d47b8ae95b7e6c48caec4921d
SHA1 e04dfe931564d2b0bd967dcadb4d0f807743775f
SHA512 a1e85b95d9e65f4274a6b6dee8c5fac60a0890f8b521c271458c515d0860e48dc96a91bde318e0c89a080e12a29d690ee7ab99c8a3242dd3ed6b10b7c5b1bd43
SSDEEP 384:YJ3OpOC26rT++tIwa7Pmq8JKUNFUDeHQiXA40zKeGIGJyF7fg12Pahfv0mvoW3gU:YIV2mqJUNFoOXpycpvmQlfe9zq
TLSH
T128F25C71D39C830BDCDD1E34A6B8D982153BC79B7921EB4E5E88E0880973785972376E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.dll
Size 49KB
SHA256 48bd4a0d323e0ae85fa0469779bb13e92c4600b0a49dad6bcb891047c5e17caf
MD5 eaf823ed830e1f448cbe8e1ad95a76e1
SHA1 6539c17f608ad3691e96c23bbc3bb3b55ae34b37
SHA512 67a3d77da957aaa0fe4f4434c054f51886528640603d4e027d5f298e322964ca1061d40f99ac9169df45f9a4f656d050f4d3dd2c0b0c4a7ffb5d20d84bda2735
SSDEEP 1536:uwkwf/Pqv0KvNDmBRZlDl9PQ8izqu0PpKzZ:Dkg/WCXiz0BKF
TLSH
T1D9335C6147EC8763DAAE0E38F5E4D5545B76D76B6012EB536ECCB0A90C7378087202BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.ConfigurationExtensions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Options.ConfigurationExtensions.dll
Size 21KB
SHA256 3057894505e37852ac77ba70007a6b075980be4da9c3afcdb7a37e62750bda1b
MD5 8ed48fb1ee04b8180c8a021b8c9289d8
SHA1 4e4be474d90b13edf1365307809edab6ddfb066d
SHA512 ec0f2d7c3b75698fea8bbfb3c38771a358934a69aa25739ffe52939ecc25309c741aceade75c3b96eca4f778c7edaa33bda4180de993f3dc99b5ebef27548273
SSDEEP 384:ty1JDVIqRW7eGpX7SOxYWV4lEdzWzAr0WClNetR9zjrT:tnBR4lEdv1P9zfT
TLSH
T14CA23A528B5C4223DDFB5E71DEE585923D34E78A5911DE2A02DEE1480CA3BC8DE3172E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Options.dll
Size 62KB
SHA256 4e767f3c0bf37199a83b8697fc9431d907fe39b5f2763f83381865c89ea6545d
MD5 6d0db347c73a12d13b4207aeef1bad55
SHA1 7d8afb9e7aee839f6c03d6a8ef6ef6791523e741
SHA512 e1db3fb8a552c64c2030e3724c39930c1f9ff749817fcb2aa2286217a13b333bd73c55dda764fbbfcb2076b473b7aaa93f6e56b30fa704b400b689e73c76f3c2
SSDEEP 768:WpWO5uXespQkuvhuVyI4vrKilRrtsyQYGiuxseJyvmpqsS7WdP7NszuatX9z/p:WAGghwMII4TpsyVOuvBBSBouczx
TLSH
T169536A2297CC9712CAFF9671B4ADA4520E35C35A3A03B79B52CDF0D81C773A18A65633
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Primitives.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Primitives.dll
Size 42KB
SHA256 b5e8630df19605fec639873b86bdff6f9d424db88d181bb36a0bd641558c18ca
MD5 b252147211deb74a9d91401c4387b6dc
SHA1 e237368996fdb43315f2360d1f374cfe9a0d54f9
SHA512 05ae2266296a182ee4fa267e947f4a7cd1d4d6787c4b4c1fbc3ead253ad6dfbfc2d26409fed457186579fc9540e83f2d1ccc15c78c3cff1af2deb3a88d54e137
SSDEEP 768:6PNon+YcgKF/1WfRzT3YWkLzZuORP6eNbOP7yW5yKyqLuiM+30XuIh7N9zu1X:6Gvcg61WfkFuoPzNbOP7yVKHLuiM+3Jl
TLSH
T1E3135B05B39C8333CFFE9E75B5A1C4152638D3A6B522EB6B60C8A0741D637C4477266B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.DiagnosticSource.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Diagnostics.DiagnosticSource.dll
Size 187KB
SHA256 d28e247dc8b6af02968b65fe6aae25c2ee689d2007268375d63347aeac0bea6b
MD5 f287490a129140fa1bd94a7247f49b37
SHA1 9892801cd4b7fda18461cab464a1b00e18f52217
SHA512 a467c7855af63771138b95a62e9b541f81de9e1d44519dd68a1c894167cdbb5566392d196f75ebc88c4e9b4c0587ab280d4a1ff44309d7522efa6738f60e3d13
SSDEEP 3072:TRQdeGkopxoribSSiKQ7Rt2wS6XkzvYaLKlllWFBx21nRlviQYVPXx:eeGkopx0igKQlty6XlabBxq7vzYV5
TLSH
T184148D2073EC4B26DFEF1B39F470C45607F2DA4BB54BEB886A85A4EC1853BD1460126B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.Pipelines.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.IO.Pipelines.dll
Size 75KB
SHA256 a3c80d0bb52e0f5afc73638cfe5dc25e3470e5fdc0311745aebc8a4d4cfcba35
MD5 726b6639602ff3b58d037f99b3aa7279
SHA1 ac1b1635a3219b436b094ba633743fa32339a974
SHA512 12d4b0930694d5e13edd1c715891b931f2e9e692e48bdfac35675cc3d589fe58704e6f4b66fffef0615a4204b67b009671523f810a81bcf5a6a1c167c5b38134
SSDEEP 1536:LvXUpt0U320mvAnfAWF/G4bgN0xmR9ewEcXYzIkCRwy4PzJ7:90monoWNG4bgN0xmR9ewEcXmIkCCy4Pp
TLSH
T1DC735C6843EC8717EBCE1ABDA17145230FF2DA666A13F74A944CA89924D77C006263F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Cryptography.ProtectedData.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Security.Cryptography.ProtectedData.dll
Size 37KB
SHA256 ce7f4b80de12f227ac637915470c5b6b6a5d716456835caaa0b1600c3cbdcb6c
MD5 1f39c7f724597435feed4c6e8207b235
SHA1 cbe9a23badf76bad2ef913cdfe31d86c954d19d6
SHA512 f9b33dc2d34b5a1f5dbe1840685f85104a3e2be109c270314cbecd6d0c6a4e3f84a5be5ec8ec417f27ec7b571515bc578380bf8de4172790ddc7ddc8117c29ba
SSDEEP 768:y8I8P2QLEx7FiC7YccT3zoCaw2Lw09zaJ:yiP2DF1SjoS2LwczaJ
TLSH
T194036C21A7A8937BDE5B4974B931E00A783C8E498012BB3DD5C9614815F2BC59F32FB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Encodings.Web.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Text.Encodings.Web.dll
Size 64KB
SHA256 8839f3cdeabd22f5952c4673367ea41c921aeb0ea26e18fb23906e2cac08298b
MD5 6c8c3061f7f55a28ff30bcf3ee7da75b
SHA1 90e54da4dd85e168d294d61b1e42480e9280bbb0
SHA512 9b715a5594d298e68bbb5db933bf2719b0b4b7ec2807e256981dec73339fe4d7c2e416b9aa856035f61209b2a83e9b6f0903ec28b15a4837f43866f3ab908d62
SSDEEP 1536:0jLlBxsNNJM4PMZSFdmTa7/hQ98av9Yzm:mBudv3/211Y6
TLSH
T1DB535B11B7C8E51ED75D06306CE080B0A7F4AFDB5126E6C71C957A0E27B3BC86B1929B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Json.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Text.Json.dll
Size 660KB
SHA256 bb53577c13ab01f397585e4bb642a1a89f1af91b70eb385c7c05b82b9b912605
MD5 e1134858b6a45565531cb3c3a1a26df4
SHA1 8c7986c744b9bb668f1bbb37934528ac38dd0bd0
SHA512 dd4c350ab441df58e08bfd208cfad384f47a676300f9b5811bb7be14b81bea9ce18debceefcc4ae68aa488551348f20feb8ae09b4d2220dc84a401e1e4f21e5d
SSDEEP 12288:jC7e+aoa/8Jbxfap97o6WEuy68/aUI5ABlr9ZHqdKC7vZzhYQ:xoa/8Jbxfaf7o6WEupX5ABlnK8Q
TLSH
T134E45C10B3E84B2FDADF433AF0F040058BBAE46AA75AD74B150854E92CC3BD19E556B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Velopack.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Velopack.dll
Size 261KB
SHA256 b35698f5f66978d7bfd0ab12a2a2899f05912d9a1890d5e64c2dce9bacf2662f
MD5 2c29bf1bcfe53f779a9f7d785601dc8a
SHA1 21d134bb5661ebbb4819500aaf829ccfa024a9b4
SHA512 3acfa65169390a7f9af8ac66dfa9684405bcfcc4e61fc04df80ee3bfa25bea4bc8a41defd7fb9290890285172a97f663d95774a59e274fbcd1f8b5f44d533692
SSDEEP 6144:qo0g6Hxg1smn4oGalxcB+KQwCyknZylyZ8Sru:qLgAiWHoq9CykclyZz
TLSH
T17A445B0037F48716E2FF6F79FCB0600686B5FA07B8AAE75D0A8458ED1D633509950BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VirtualizingWrapPanel.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\VirtualizingWrapPanel.dll
Size 55KB
SHA256 8b59a3fbe3a041264535df8f0fcf0171ea633e57a9084882b9fe6c220181b3fa
MD5 11f5c40f0eb1d77cf27649a87c16756a
SHA1 68df2bee69e5dc45932f72761d84dc9ef33fe4fe
SHA512 408bd9f3b5863a66acdae09d3e46d4652b257d83c1adc2b64b6c6ccd3cb54e1f533fc60671e5fbcae048758e614afb443cd9e0c0ac96038a631dac81b022c397
SSDEEP 768:mr8nle6jhM5Cn8j72Plq2yHeMcBL1XXG1ulCF8RuEF07qEwtIn:mgnlk4Q2lqr+M41XiK4YvOn
TLSH
T19C43190C23AC8A37EB9F13B9A87011140372A567BB71E799899C70EE4B677D101257FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Wpf.Ui.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Wpf.Ui.Abstractions.dll
Size 7KB
SHA256 f504e30e37a74936ac14f14de4ac43c291cb3964eda71cdcdd61f27cf15cb9cf
MD5 eca262214bd112cc4a0a225df5f43210
SHA1 275987463805d018677c1e093d072a05ffda92a3
SHA512 099fc0c607af839d933b0007b37739897b67adb07ce309f5926da845b857b36b640c1d60ac002a405db73fbaaa793ecb0f54fd1e647c838d3188d80f51d0b843
SSDEEP 96:vClxi89zX2ekdeDm4mgWoQdBTHUhMDADUlYpijY39SOkX1hHN:vClFDc05mgWoQH0hMDADcke09KXDH
TLSH
T1F5E19221F3A88332CDF74777E8BA52845730F652EA578A3F199A510E5C2A0591E32B61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Wpf.Ui.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Wpf.Ui.dll
Size 6.3MB
SHA256 3466432f74d1d1224a55f71b8dec7b2913039e01ee32b7304fd9668fb76b797d
MD5 17b530002d305ce72b8c40a1c6ecd70c
SHA1 0be2703f9866699c4e7497f62141abc1b31ff57e
SHA512 3dea4eafa04fd6a9381921eb98526386319906153007e6b159e7437a32d6fb235ddd5d0434d13b58bc41a6f535aa718d29bcd43d101701b810c793b2358e1d4d
SSDEEP 98304:89xe/+FOvSmaRf+UcDN9NppBLxAHDfyLrZl:89xz8N9Npp
TLSH
T131666C5E17ED0D36C3B3837A8DB073222DA9196A1142AB834F4EDF2D446A2C4CDF559B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.EventLog.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\runtimes\win\lib\net8.0\System.Diagnostics.EventLog.dll
Size 171KB
SHA256 59fb8f95e34b4dbc41422e801ca9456da5ab70508d773e42e2ce1c60de38a88f
MD5 6781d2fc53d3682151ccf369d797d673
SHA1 7862a6bc28ee617abeb8d70c00da380ef914072b
SHA512 fc6070ad003a38c69944990b26507821a8c867f5a4683a0464e47a9efb201fcf5b0afb1ec60359b32e412edf521771ca4829b19e7a2b3d75d1d3082a5521bcfc
SSDEEP 3072:RfT/zCfxCsREbOAvoFY8ZHPfu65kt+EIx/LJQYyaQUoj9:p7zXsRIOAwhHPfF5ktyrfy
TLSH
T139045C7573EC4B1EE7FE1B38F4B011258736B996A93BE72D458448ED09637C08A207A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sq.version

Path C:\Users\Admin\AppData\Local\LuaTools\current\sq.version
Size 534B
SHA256 3d484b7b008da7099c03c99cfb25ae393eb26320321b76a7cdab9305a91d1054
MD5 0cf0feb2a7c9aecd1cea0c8c0ecdc47e
SHA1 4d9d95307b352eb27612e01f8d4962f4d18c67f2
SHA512 73b3bc31a0c9c3c2de1a2fcee0f7514fabd98e389f4a081ea86b12174165ee35fa665b64df209825e9d8d6ca6b7d4591c46c8abb7c3caf5f7340641eeb070a25
TLSH
T1B3F02B85A542DA4645931E5565E54104B3EB7E6F34C848D0E8C88CE8238D2EEDC2FD55
MD5 SHA1 SHA512 TLSH

Submit Download

LuaTools-1.2.7-full.nupkg

Path C:\Users\Admin\AppData\Local\LuaTools\packages\LuaTools-1.2.7-full.nupkg
Size 6.8MB
SHA256 ce58c0fd83a27db31780f03808e1e75766df0936211810a95e12c6687455d018
MD5 0d52b397e23b21fee1f33cdfd894f68a
SHA1 a13992bbbd5390f07d49156f12c3331eab06b660
SHA512 725a2f72b222534e56a1677f1d8bc2b7f86c7ace5de6d81acd0489472c5724cec911e0bf1544f1e16388e9f822498cc732a1c18ab80002a55b8a239b80df9460
SSDEEP 196608:zc7I0040yF5NFcjPnN4Sw6qHn3ILn03t+6E4Ub1A:OI60ojFcjfN4SwVI70bUW
TLSH
T14876331B472C56A6C15FE6B8913C096BC2827A3F93D236AD412C73C79FCA7F9C644285
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 5a5728830bcb5f0ddc9a8f63a931f29b09d2b0c67ae2c31c64440414c5732912
MD5 3bef4f4eb376f8c59941855a1419fd15
SHA1 2e6536f74311d94072279d6a4f6576bfd4df51f8
SHA512 a52e96b05f06743a45c461ad2d10890d76bc1e32e54197e42787be9950d154fad06b39cad52a0d50d67e1adb5d822f69020d9b3880bea2bd0a8948cc43824f5d
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7k:fwUQC5VwBIiElEd2K57P7k
TLSH
T163B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 f5dece638cd89af82b06bd2fcb3d1738eef64d2275be237184ea8bff7af3fdfa
MD5 f19ec2293392af872f10929c41627e26
SHA1 0576f5277c470f5bb8c3f4d3786ca8d967d0a33e
SHA512 4cc85dc71d34bb516f8fe45b565a6a9b4cda255a931f33289247ed84150baf0e2df40fc87109df41771553b92545ed858197cdd3d673694c83458cf9812aa9dd
TLSH
T16CD02272268C6C00EA090170D01383021EA6855824839B03A100C01C44A52D9728A093
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 6de34b260036ecaa4ce5839bc4a7ff7495e50b7b94349b12d9f840ca0e76da3b
MD5 56d82099872fb501c566d072ae897035
SHA1 2c96501551fc13c09496780960d8e7ccb4957b77
SHA512 c4b4017256caf25e88f146e6104134cddfd15089203e8e74c5196627fc92897f9fe7e3fc5c8305032be88e9409cdbc5dfe1e81017fcd5e38b3579b3d823b4a41
TLSH
T160D0C073378C7C00EA090170D013C3031FA7855824C39F03B100C01C54B43D9738B093
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 8KB
SHA256 845e274f0bed3174f11e6039558c3ad165b5d981b2cc7416c452d4113aa937d1
MD5 d9bee49ec710f755fd72d1a7ac0f59aa
SHA1 2883eac6671af63abc831c69153ab6dcf35eb863
SHA512 616091a93c9cbfc791bd319e9f82101ddbab42c02d0c397737c3b72af19d65c7f79dea6c4b6f788b3fa21e4670711023c6a7943831d2ef8ae6f648357a01896a
SSDEEP 96:5eSgqj7xYpPJLyzsQ75SX+5eXmBqBFAkG50LXtlqoEu4DyaOOc7PyC7gcSp0dwnx:MSKp87x6BBF7AmdVEmamzyCJIFF
TLSH
T1BF02D56054B08A42EBB65AF0EBD257EFFFBA2C4685131D3283D00E7D97323B06491E48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe59ebbe.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe59ebbe.TMP
Size 3KB
SHA256 ae3675a62a53080a284c6887a33e9aa4ce055ef11709a1468def6d38e16a0c43
MD5 caea4b8b9060ac75583662542d2cddf9
SHA1 3f95146739d33b48ffdbff43d0da9bb3f4acba2f
SHA512 0118f7a5047afca751f3a9aa0bdf7c9465bcbcd05df8ea0af99dcdd24574fb73975ea59a8c288bbf867be76c6bb29f222f8c0b2debd86fcbae0359a62f1d6cdd
TLSH
T1AF713C1805F10F91E3B26FF2CFE21ADA3D734D888AA35D3202C49BBE593772084E5545
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir5064_524835151\CRX_INSTALL\_metadata\verified_contents.json
Size 1KB
SHA256 d23b2ba94ba22bbb681e6362ae5870acd8a3280fa9e7241b86a9e12982968947
MD5 738e757b92939b24cdbbd0efc2601315
SHA1 77058cbafa625aafbea867052136c11ad3332143
SHA512 dca3e12dd5a9f1802db6d11b009fce2b787e79b9f730094367c9f26d1d87af1ea072ff5b10888648fb1231dd83475cf45594bb0c9915b655ee363a3127a5ffc2
TLSH
T12B317466C8683D56267A63348E2D0602EB57C2BB0050640EB5AC558D4F7115FE242FAF
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\Temp\scoped_dir5064_524835151\CRX_INSTALL\manifest.json
Size 962B
SHA256 5694c91f7d165c6f25daf0825c18b373b0a81ea122c89da60438cd487455fd6a
MD5 e805e9e69fd6ecdca65136957b1fb3be
SHA1 2356f60884130c86a45d4b232a26062c7830e622
SHA512 049662ef470d2b9e030a06006894041ae6f787449e4ab1fbf4959adcb88c6bb87a957490212697815bb3627763c01b7b243cf4e3c4620173a95795884d998a75
TLSH
T1661121366E2FC4260AE00698DC51308AF92453ADD380850E35BCE42E5B744FA430631E
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 2KB
SHA256 f85e9f81787512085867d17f2158dc3a24ffb267f785897521e193ff211bcb0f
MD5 382c874a6530bfbc76e063050af59664
SHA1 9920b240fe0af7df4e50b6ed254cab2ba38b0433
SHA512 20ad9368c61efe804801f4add621fe8d5861efb42d58277db960ce7c71db161b361b506d1960bafd92042a5c9567d74260340eff405cccd02e2aff2cce4c730d
TLSH
T1D6519EF7C3E4866D890156F4AB246E1BCE6D0914832C3D2AC9D4AF5BA3F2471E141A9F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 cdd7c283c74efbd6e935de5164f78410cfe07ed79d5d6690a864e69cd7d6bb0b
MD5 99d6ebbbcbfa2b5f39097d238eceb43c
SHA1 4fc7fb5b887b359dc4d984ebde7a887a1e340f33
SHA512 47eadc7ad113c77cbce27a03671710da1e247290fa1f5ac1c113cddeb64d369147f315888746bcd4eec18f09f23061b3ef6b36f545bec0764f006abb131c84f4
SSDEEP 192:sxZnRryM/jK1Ml8MiL/fNs6WXZJR6IIdpETHW6+WNzp2/YwqU8h1Ig4J:sxZn5qL/fNs6WpnYSHbg/ABc
TLSH
T130520A166A34A97BCCCBD20DFA54BF53D6F5457291940D48AAFCDA0C04E6AED2203C2F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 3878e2226239deec92d925c1d3144dd9d952dad670bd8a06144486da9c4ccab1
MD5 78313f051b3ca962b405c39721e0baa6
SHA1 ce8c57b21894bb5b59ef3dd6fddba750c29fa45b
SHA512 5a0925a519d09975ec7262c1f72efbdb2f4884f3acbef894a1332585d76f06238b46e4c3aeee0f79d1823944fe69446183d5db061f29dc8396bb486eb4ff3bc2
SSDEEP 192:sxZnRryM/jK1Ml8VOL/fNsWWpVJWXZJR6IIdpETHW6+WNxYp2/YIeUbQDIgyJ:sxZn5/L/fNsWWvJWpnYSHbN/A5O
TLSH
T1CB62FA06AA34697BCCDBD20DFA557F53D6F9046291D40D44AAFCDA1C05E6AED2203C1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 35KB
SHA256 1cb0b63b5db0a8c4ac8b5d0b220cf89fbe5e428a0f9aac885f25afac74aef1f2
MD5 26f870c04cade7a0d098d766c4c24479
SHA1 ea4a762e2126821ca802cc7db5e41edd947047f8
SHA512 b6b4aca3130653c33d14da4140d4d2121a5e45feec6963860b2637ed0007c32d65d9e3ff693a7eb910cd55e6a45bb83d1f3d5ccf7a644177369c071e5a24c541
SSDEEP 768:qb4jeqL7pLuLfmmWvmKxE8F1+UoAYDCx9Tuqh0VfUC9xbog/OVRPcPLlrZ+deroz:qb4jeqdEfmmWvmKxEu1jaMPcPLZQd1z
TLSH
T1A8F20C3B680CCF7E4F844E9CED2ABE8B6DE802CB5A98895447F9444C03C66EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 226B
SHA256 8264eee21f2385661d3472c3d6410f215512bdf2a080f616d2dfbded6d6c4a28
MD5 ab1ccb00a26c459e0a89f76b943735f3
SHA1 9aa51eee18fd42f38d1eea2b680c8567d21ed95d
SHA512 4ca18ddb51850ad0b9b2225160ff6dc15295a8a91c6b917db186ae51f8c0438c5abd08bb4a05ea4132696c807b6efbf6703077c200af63d01a5f40412b8dce53
TLSH
T12FD0975FF01404C2EB7F8B900A2250AECB3938C400A9A00C903280384480A5BF242EEA
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt
Size 233B
SHA256 2f89a4223af5678add82fb4d15424cdd822ececa59706e5580bcfba9dce06c62
MD5 f2f4019f91d5bd7187f889ce0456aaf3
SHA1 cef3461ccc09155aa5967c160d3982f8d6f3497b
SHA512 4a76b83d73141d3f64b0db6be2e77f403b8234f2fdf6a17008bdbc828ac84d67606582a9a93b5bfa50a173574bb8dbc4799c0eb1595da19ec3d7e637f519a6ec
TLSH
T1B7D0975BF02004C2EB3F4A920A3252DE8B793CC40099A00CC032603C00B0A4BE311EEA
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe59cf4c.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\7d571773fef4871f82ca0457379cf2a39317562f\index.txt~RFe59cf4c.TMP
Size 138B
SHA256 e630cc3007137a262824edf4152a541512ab4393946974692c2054a7074727ad
MD5 e3142e82a4983a70a483fcb57aa395e8
SHA1 7b8640e38fb63ecc7dbf217c7870510477f95b46
SHA512 71dc2f2c6eac275a40dd7f268730362d7ddfffb93885c0919efafab41feb822cc7e76ea5f1cf961011235a1d3d65ab0fa309ad0189282253d01796533da4d09f
TLSH
T17EC02BABE0540095CB2902E1033261DCC71A3CCC09A6D04CA01334241070E37F201FD1
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 c5563360cfb015dc23e9d146458f930523fede4172e288213383fe76e0d27723
MD5 75b73e864812805ded7a6fb89982cc6e
SHA1 6b92a6cdbb3b3cf7a736fb3670496f21a732e078
SHA512 4a56cd1303e403e37fd496f6c6f0fa1a164ed910aeffdddc183f82a986b6de149246e8dd189a5965ef0d73a9ae5c8f63e5da86b8c0cd19f89cc1f8404a2bdf5c
SSDEEP 24:Kd2fZKLaYdM404sY+/IjO0Ki3ha401EWkSmqM782yyXYQf3kVaadCC+4SO+lIjYN:KA7IVKMMAQyFpIxKCkUCsITKZSsLyT
TLSH
T10691961275B723123C7E6518925ABB6A4F42B4633458B46B3FAD00724D67E640CFE8EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 2edff720355b54ece2e13e688e1b845b6b7bfb9ccf13a80cabbc1a9133deabc8
MD5 b8e37b862c852e0ee59ba9d62a701696
SHA1 6a976b31c921f71bb7bb80e3b993ae6f764e19fd
SHA512 789ecaa764ef8c35b4e6d2c92241d3ef1293530e0df668872efbb887dd506dc14fa3c10badaa7ac2f4a9a2c482562f859707137d481412ea4517ca1c63ac1390
SSDEEP 192:EONT6hZ0QmiUygPpc/+jVSjzorh8F45wOZ+jU6:EONT6ovpu+o8hyH2EU6
TLSH
T1A002D93568787CA7CEE2AE49F48727135FE5112BA9D56F84DAE81F1D00C769C2306832
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 17KB
SHA256 d204ba714bbdd81ab93c82ff25fcb0b9bca2be1381273cd51a013e14640065de
MD5 daba2ec8f85b75cf4f4f71a925a0b715
SHA1 a5d34791c136acd7fe6a4250ee63c669cec112e7
SHA512 88c48fd96b52ffc0443b11192d0582b1845f5f812b4e439fad273d068b0a198dbb528d8e1ea54ff56a51c82fc08826e616ac9512691f69830cdd7982ccbd81b4
SSDEEP 384:nXsN1rtGPab0Bf+o8hy9XP2FqJr7StNIpOjQrxKe+bMXU8:XFp3PoqRSZjQdKe+wXU8
TLSH
T18282F771D8A96CE748E1E5C8A502F5232DB8023BCA896A4CD3FD7A3D309F5FD6315816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 380d365b07f5f1ba019f700ede6329bce8a8c2b7142f2522f804b8cb9f57449a
MD5 3818ac789782bf826106fbfce6a21db0
SHA1 da1562aed87751ea8215a837b0837e1bec2ff028
SHA512 fc2e94066b935656735949e86fdef1fbcfd620752919ed32add813243050506f14cebb8b4352a9b86f4b18a847fb045e24bbe8bb75cc66a6114eea112dbfde95
SSDEEP 192:uunLsN1rQeHwCqLuZEUxdQmiU1gBe4H/+jVSjzorh8F9XMEr5cFTiq7HU8:nLsN1rtGPabyBf+o8hy9XP2FjU8
TLSH
T112421A316878AC6749E6A548F04B36A39FE4107B9DC52F88E6FC8F1C00C63DC231AC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 36fb71146477e71d9832aabb3c9758b34ff885ffb6970b792aa5097dbfc13935
MD5 2a02c6606fce96cb2bf74d705db6875d
SHA1 7a33027660115a2d64c3716d4de3ca4375101d30
SHA512 988dd9c78daa191050a7e0a9bd75ec015dbdc1d8b695493c9ad16d0c7e475c7ef89f23717af9863700f9278274855f2debb2049be2e9f57f90eb57dfd265642c
SSDEEP 192:fON46hZ6QmiUyJPzc/+jVSjzorh8F9XMEG5cOqiq7HU6:fON46Cuzu+o8hy9XPp9jU6
TLSH
T17412F935686CFC674DD2A549F08732A35EE4117BADC66F85E6F85F1C00C669C2B0AC22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

metadata.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\metadata.json
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 7b6988666f059fa6acfbbed2a181695926ae19280247263646eda54c952c7bed
MD5 85718d0d50331d93d974db7663467661
SHA1 6d999476b6bd14f90d74e66acb2c5e19acd67c01
SHA512 9d2d96a8a7c2c67941bcb3519a42e747ab79cb23f60439f7a343ff33fdd7afc1ab67d693e4ee716830eb053bf879fd90d44b23b6176136685c186c61076b51f5
TLSH
T1BE412658A6FA1158B3777F5AAFF6A46D483ABD772E1BD49D10110E4E0A22F00C871737
MD5 SHA1 SHA512 TLSH

Submit Download

ae3ccbbb-0f11-423a-89a1-65a9e3f7984d.tmp

Path C:\Users\Admin\AppData\Local\Temp\ae3ccbbb-0f11-423a-89a1-65a9e3f7984d.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

c871f783-eba5-40fd-a266-8730f8b6ca5e.tmp

Path C:\Users\Admin\AppData\Local\Temp\c871f783-eba5-40fd-a266-8730f8b6ca5e.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_1550503665\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

851708de-fb0c-4146-9ddd-cd9b5a6f8d45.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir5064_1726939494\851708de-fb0c-4146-9ddd-cd9b5a6f8d45.tmp
Size 153KB
SHA256 299ff2b88f972402bfeaa0a772d457de7c8a5aa8498cacd924345cb79aac18ce
MD5 c4a20d073fe58488935da829aae6fa17
SHA1 dbd31aa3dcd1abd3d554d29a9bca83bab02709d5
SHA512 61f74480d3471180f14e2171be6f5e33ab0a03a7a4837334695556a9484da1a862cc059969834d4950a038ec97f192805e5e718cd2a280aba675bdc9cee5d976
SSDEEP 3072:C0qfZ9r+hy+exmKhRts8o7SYbyqNDri8EBalnQt9RaBoAkaX2Ns:C0qfZ9r5msvoOGi8QQQbRwxmNs
TLSH
T126F3E02D6EDEC956CC0F61F96F29724BC50A4F0B818B648B624E881958F434E17E29FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

velopack_LuaTools.log

Path C:\Users\Admin\AppData\Local\velopack\velopack_LuaTools.log
Size 2KB
SHA256 9b78de02da6f6b5cad4c4d35b3f97fa03fdd7e7b9d94b6a03665eae2f9f1dac2
MD5 272c1c38309e3bd94697ba413e9b249c
SHA1 d26fc285e2f26ff7dc5c7f6d160c02252bfb1a3d
SHA512 a32ba228fc171eceb0f7b9ee653c99e191f013f0ec785c174731aac006333f06ee41a4ac614c6cc537a56c569140fe5041e1cb35a0461dd2fdcb6575f23286cd
TLSH
T1DA415C49FA61616BB45A1A0B91F6F1950AED5B893FC7B5C70C068304F609B7C37CA722
MD5 SHA1 SHA512 TLSH

Submit Download

velopack_LuaTools.log

Path C:\Users\Admin\AppData\Local\velopack\velopack_LuaTools.log
Size 1KB
SHA256 302dba7c334c68c64996f5931b9127d620d3e82efae46b898f333af075e58831
MD5 1e123b3e3901c504175dcc6e8194144f
SHA1 002538ccaa5ddc39d3b233d08f7edaca2155df00
SHA512 113ddf6def80aa5133ed9d5f9007533ad4b679679b62bd0e50a7f41f01cd772a2b2d3e7ffc8b9018c9eb201a88d2a1b7964eccb051d0b4c6dcf777c323deb640
TLSH
T138314C4AFA61617BB45A1A1B91F7F1960AED5B493FC7B5D70C068314B209A7C33CA332
MD5 SHA1 SHA512 TLSH

Submit Download

cache.json

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\cache.json
Size 260B
SHA256 233ce1681f4fecf55eb12dfb1e8aa3b037b1b84558cc17355270f116b73425ab
MD5 4e44d9af624b5e610d2f1a1654caa18f
SHA1 7d4d0dc5305dda91cab69d6ee153f846e61aa534
SHA512 f7089e197b919b9477c617c8b6a5d18e64590d215ca1d80e2643037a22cd629c08cdb556e13fa0dbe306f85319b4f2fb4279f81b5073e4a4d0f3d6b42a5f79ea
TLSH
T11CD017611E3B0BBA45FA721C4B94132285906FC721701D7B35FB4B0813032320166335
MD5 SHA1 SHA512 TLSH

Submit Download

LuaTools.lnk

Path C:\Users\Admin\Desktop\LuaTools.lnk
Size 2KB
SHA256 62e64bbbbe269c73992c3f6848a6c8b05d2e5296532720f9791063e3214a3f6e
MD5 3a4129c9164e9d81c3f638f8554f0f96
SHA1 1662895bb61feaa5fedcb7afaea10638c05816d7
SHA512 7276d1468cf3b3bb73c9c4eae5e6e173b2d0275970c4c18b458f837a8b2960c8a8264dc7f34c8f24af05398dec1f84ee5d64ba8ce6fdb384150e4d9b5d0740ec
TLSH
T1DE41D2429EF717A1D3BFA87529FA111889B7B853AE024B5D005085451962F11DD98F2B
MD5 SHA1 SHA512 TLSH

Submit Download