2406ba0f9961c560a84dcae86584007703ffcbd9c99959bc889f82b8fcbc67ac

Analysis

max time kernel
150s
max time network
155s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/08/2026, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Notulee-win-x64-Setup.exe
Size 34.9MB
Sample260814-wthlnaycpd
SHA256 2406ba0f9961c560a84dcae86584007703ffcbd9c99959bc889f82b8fcbc67ac
MD5 24886320f11d0111d5004cedd994b527
SHA1 ff66262fbc92d01c05c2eb53ec80d544ba0dcaec
SHA512 03ff0ec412ea3f733bc0ce42b1a831fc51526b9ad193a16c42c13b3129ee0f5a3c11b1b2a1830d284367b04fcff6f3a75bdf5e9937bb47826ec4834e98495970
SSDEEP 393216:hxgcg1ecbD1UmdYsk/HX1RPLCkUye8dyiPuMMow5ryEnEBn2gXoJlLA2fg2SnL8M:wgChHEHXjCkUOyi9eryvoJG2fgp8UT
TLSH
T145872322FF42D0FFD48A02B5D46EF73DB73692958B2A89C356990C486CE23A0591735F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery trojan

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
5556	Notulee.exe
4840	Notulee.exe

Loads dropped DLL 14 IoCs

pid	Process
5556	Notulee.exe
5556	Notulee.exe
5556	Notulee.exe
5556	Notulee.exe
5556	Notulee.exe
5556	Notulee.exe
4840	Notulee.exe
4840	Notulee.exe
4840	Notulee.exe
4840	Notulee.exe
4840	Notulee.exe
4840	Notulee.exe
4840	Notulee.exe
4840	Notulee.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	Notulee.exe

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in Windows directory 13 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3928_1152202789\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3928_1152202789\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3928_1284259260\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3928_1284259260\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3928_436082052\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3928_436082052\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3928_436082052\_platform_specific\win_x64\widevinecdm.dll	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3928_436082052\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3928_1152202789\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3928_1152202789\metadata.pb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3928_1284259260\protocols.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3928_436082052\LICENSE	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping3928_436082052\_platform_specific\win_x64\widevinecdm.dll.sig	msedgewebview2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Notulee-win-x64-Setup.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
3508	Notulee-win-x64-Setup.exe
3508	Notulee-win-x64-Setup.exe
5076	msedgewebview2.exe
5076	msedgewebview2.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 1 IoCs

pid	Process
3928	msedgewebview2.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	5556	Notulee.exe
Token: SeDebugPrivilege	4840	Notulee.exe

Suspicious use of FindShellTrayWindow 1 IoCs

pid	Process
4840	Notulee.exe

Suspicious use of SendNotifyMessage 1 IoCs

pid	Process
4840	Notulee.exe

Suspicious use of WriteProcessMemory 27 IoCs

description	pid	Process	procid_target
PID 3508 wrote to memory of 5556	3508	Notulee-win-x64-Setup.exe	88
PID 3508 wrote to memory of 4840	3508	Notulee-win-x64-Setup.exe	90
PID 4840 wrote to memory of 3928	4840	Notulee.exe	91
PID 3928 wrote to memory of 5692	3928	msedgewebview2.exe	92
PID 3928 wrote to memory of 2416	3928	msedgewebview2.exe	93
PID 3928 wrote to memory of 2416	3928	msedgewebview2.exe	93
PID 3928 wrote to memory of 2416	3928	msedgewebview2.exe	93
PID 3928 wrote to memory of 2416	3928	msedgewebview2.exe	93
PID 3928 wrote to memory of 6028	3928	msedgewebview2.exe	94
PID 3928 wrote to memory of 2848	3928	msedgewebview2.exe	95
PID 3928 wrote to memory of 2848	3928	msedgewebview2.exe	95
PID 3928 wrote to memory of 2848	3928	msedgewebview2.exe	95
PID 3928 wrote to memory of 4736	3928	msedgewebview2.exe	96
PID 3928 wrote to memory of 4736	3928	msedgewebview2.exe	96
PID 3928 wrote to memory of 4736	3928	msedgewebview2.exe	96
PID 3928 wrote to memory of 4736	3928	msedgewebview2.exe	96
PID 3928 wrote to memory of 4736	3928	msedgewebview2.exe	96
PID 3928 wrote to memory of 6100	3928	msedgewebview2.exe	100
PID 3928 wrote to memory of 6100	3928	msedgewebview2.exe	100
PID 3928 wrote to memory of 6100	3928	msedgewebview2.exe	100
PID 3928 wrote to memory of 1416	3928	msedgewebview2.exe	101
PID 3928 wrote to memory of 1416	3928	msedgewebview2.exe	101
PID 3928 wrote to memory of 1416	3928	msedgewebview2.exe	101
PID 3928 wrote to memory of 5076	3928	msedgewebview2.exe	102
PID 3928 wrote to memory of 4376	3928	msedgewebview2.exe	103
PID 3928 wrote to memory of 4376	3928	msedgewebview2.exe	103
PID 3928 wrote to memory of 4376	3928	msedgewebview2.exe	103

C:\Users\Admin\AppData\Local\Temp\Notulee-win-x64-Setup.exe
"C:\Users\Admin\AppData\Local\Temp\Notulee-win-x64-Setup.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:3508
- C:\Users\Admin\AppData\Local\Notulee\current\Notulee.exe
  "C:\Users\Admin\AppData\Local\Notulee\current\Notulee.exe" --veloapp-install 0.33.0
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of AdjustPrivilegeToken
  PID:5556
- C:\Users\Admin\AppData\Local\Notulee\current\Notulee.exe
  "C:\Users\Admin\AppData\Local\Notulee\current\Notulee.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks whether UAC is enabled
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:4840
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Notulee.exe --webview-exe-version=0.33.0+080c80521091bfbd791d17160137b1053d76cfae --user-data-dir="C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4840.6132.5666196620471964955 /pfhostedapp:a47f8b739021fe71c15dabf6665786e0f069497f
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:3928
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView /prefetch:4 /pfhostedapp:a47f8b739021fe71c15dabf6665786e0f069497f --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x188,0x18c,0x190,0x164,0x110,0x7ffbd6db5fd8,0x7ffbd6db5fe4,0x7ffbd6db5ff0
      4⤵
      PID:5692
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView" --webview-exe-name=Notulee.exe --webview-exe-version=0.33.0+080c80521091bfbd791d17160137b1053d76cfae --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1764 --field-trial-handle=1768,i,6714579089553372287,13775286577007274181,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:a47f8b739021fe71c15dabf6665786e0f069497f
      4⤵
      PID:2416
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView" --webview-exe-name=Notulee.exe --webview-exe-version=0.33.0+080c80521091bfbd791d17160137b1053d76cfae --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2232 --field-trial-handle=1768,i,6714579089553372287,13775286577007274181,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:a47f8b739021fe71c15dabf6665786e0f069497f
      4⤵
      PID:6028
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView" --webview-exe-name=Notulee.exe --webview-exe-version=0.33.0+080c80521091bfbd791d17160137b1053d76cfae --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2328 --field-trial-handle=1768,i,6714579089553372287,13775286577007274181,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:a47f8b739021fe71c15dabf6665786e0f069497f
      4⤵
      PID:2848
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView" --webview-exe-name=Notulee.exe --webview-exe-version=0.33.0+080c80521091bfbd791d17160137b1053d76cfae --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3380 --field-trial-handle=1768,i,6714579089553372287,13775286577007274181,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:a47f8b739021fe71c15dabf6665786e0f069497f /prefetch:1
      4⤵
      PID:4736
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView" --webview-exe-name=Notulee.exe --webview-exe-version=0.33.0+080c80521091bfbd791d17160137b1053d76cfae --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4412 --field-trial-handle=1768,i,6714579089553372287,13775286577007274181,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:a47f8b739021fe71c15dabf6665786e0f069497f
      4⤵
      PID:6100
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView" --webview-exe-name=Notulee.exe --webview-exe-version=0.33.0+080c80521091bfbd791d17160137b1053d76cfae --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4404 --field-trial-handle=1768,i,6714579089553372287,13775286577007274181,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:a47f8b739021fe71c15dabf6665786e0f069497f
      4⤵
      PID:1416
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView" --webview-exe-name=Notulee.exe --webview-exe-version=0.33.0+080c80521091bfbd791d17160137b1053d76cfae --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4408 --field-trial-handle=1768,i,6714579089553372287,13775286577007274181,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:a47f8b739021fe71c15dabf6665786e0f069497f
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:5076
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView" --webview-exe-name=Notulee.exe --webview-exe-version=0.33.0+080c80521091bfbd791d17160137b1053d76cfae --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4516 --field-trial-handle=1768,i,6714579089553372287,13775286577007274181,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:a47f8b739021fe71c15dabf6665786e0f069497f
      4⤵
      PID:4376

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Network Share Discovery

T1135

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 999cb1d64ce14189c37b786a0eb6b122e2adfedebd72f933527956c72acecf19
MD5 606994900cefbbf26529bb9f60660322
SHA1 3416f9fd09531a8bde458cc74cef070619dfa58b
SHA512 592618c6b591617ce869a4998092cf50c5605094d30ab59ab101bb73801d21851809192128e307073148b2b36ac718f42a55be5289464ef5afd16b76bbf64125
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 316e3be2f74fa396fcd07c54a25d42246296e1335469642be927f7f95b8b4770
MD5 057623a8679ecfbc08b908ea5ef83af3
SHA1 8b2acc60b3caa0e1b5646aff5f25c3236976b76a
SHA512 a4c114798db5b3019c422631446492b37dc63a8570ed4e64ae87ceddb2eeee6dc937071dd6c8e0a15dea6c26060d50bfb3c61b4a1ff39cfbdf9debd7bc1ae910
TLSH
T19AD024177FC14535C01035331043F14C0C41C35F404544007C3CC71D5F04D501D034C1
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

173f85d1-0402-417c-9729-f603bdfdd2ec.tmp

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Default\173f85d1-0402-417c-9729-f603bdfdd2ec.tmp
Size 6KB
SHA256 cf0e07fe87cfe693b35c9d55b5339b3091b9ebb4c8dc90186306d1251975957c
MD5 011b5a3b2a6de2e6b1a1c5f3c3260dc9
SHA1 944004c9088634313ae2fe78acafcc44d85800de
SHA512 f792199cdf326d92ba1f50129c3d74b5185261c502e205cafa01fdfb1c05841c0ccc9453448e494bf2da431ad1b2d06271686f0f827a0a130e4567d285347397
SSDEEP 96:st2/dM+l3AXtb9Fk0Yo5h16Z0js7/x+6Mhmuec6RXVp1eje5K+gdm28XM1C7K:stuOY3gZYopjsV+F+RXVpQjzHmG6K
TLSH
T142D1A6125E64B97B4CCAF10DBA29BB03E3F9503264D11E58EBF8462C14DA6DC230790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 360B
SHA256 01091d6652cf980cf7d68cc81271be03ed4e6c80dcd179b8a9922699fc3d87fd
MD5 2f0a846ad66673216494f6af425279d1
SHA1 95c199e56e8b96f3d071913b5ee913abb56be7b0
SHA512 d7a39d63fdca52fe4d6d2ff1515d656f9636592610fff3a090d18bd0d6e704d960ed3ee46d8442c002667efa13a1ee157d7b5052841e9d34cf85d6833e4ae871
TLSH
T111E02EBA50091403CBA208F533E21092FBB8868024E33D8ACBC28C78BB6A3D350307A4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a1260.TMP

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe5a1260.TMP
Size 48B
SHA256 2ba79577a16bd466924693452d2fbb92c1f4550b9ea24c6028203606c53c329c
MD5 25f2047ef04507b3eba243045d06df91
SHA1 c7a7283198bb2bc081c0c202aef86f650ee72f41
SHA512 0d97edd0069805956687b65c33d1fab58f6943540c0f3c920c56e2377728a9411619ce4dfd33566668fec06e3eda6dd55f22d33854b244300821a2ab780c8a7c
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Default\Extension Rules\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Default\Extension Rules\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Default\Network\Network Persistent State
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 5d9dfb87b5a5b20a1c4ee4942db00b7e75589c39065a3e7d1496f174549b0388
MD5 3b71e20afab01d4b8851086e77e91924
SHA1 eda5c0768b4953128ff49f3fd9e261fbe02fd5e0
SHA512 fbbb09a80479bf6c720801122e6386e79bca7c48b3525ca9496f6abdf5214d66358ecb31f710ada688afeba7d5575ae487be5e6c58229bbd15831a8104aee4f3
SSDEEP 96:st2/dM+l3AGGtb9Fk0Yo5h16Z0js7/x+6Mhmuec6RXVp1eje5K+gdb28XM1C7K:stuOY3KZYopjsV+F+RXVpQjzHbG6K
TLSH
T146D1A6125E647C7B4CCAF10DBA29BB13E3F9503265D11E58EBFC462C18DA6DC220790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Local State
Size 15KB
SHA256 49df54f788a1fb8245430e90bb505b5bedb56d37d4a067f4e5d804455dbb56da
MD5 e6a59f4cd852115ca99d5dcd6aca7b7c
SHA1 3aa912b1ecc7220a6915934fd4967e78a488e6a3
SHA512 558fccb87110f0d3826cac1d3acfb1de2948bb869b9f81340412cd772da12abb7e039a7871b48f95daacf67f34624a7461679b1da4a1b579310d68e2846197df
SSDEEP 384:G+aQikB+z/xvxjg/qhEwNBST2yDdmnd5AVdpxqZ9zY:R/UxvxjgC+7wd5UxqZFY
TLSH
T149729E37A8696E3395F7FA057A5D0B8BDFB584B250816EB84EED5F0D06D72E80302816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Local State
Size 2KB
SHA256 d3571311abbd98e80056664c75ac473b9c7526a06a860fdfe27b8ff50d1b920f
MD5 859b8929a8468bca7cbe1a69544a4843
SHA1 6e0bb2bc47f8236887d64962ada6bf43adcc2de3
SHA512 59f3fbf894560d41c994ea53c830b42c0bf491acc4de2b6e0ef4812f2c2c4392688c041285da434efa6dc3549355356b66161703fd0911b6afea5e6fd5b05e6f
TLSH
T12E517433AC64AA3789A76A45BD4A3F13CF36915696521F509ADC0B1C02DA59C1302C73
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Local State
Size 3KB
SHA256 0e6b5ff32cb0cc1143dee9ff918b8e128333581c14206e9f9e0b8789c8b785b1
MD5 3c7f18acf8281812a46568ce7d8ef7fe
SHA1 0812264bffb02453a5a93859a67570fd0cbabc3a
SHA512 6fc16de3c9b214699f10ca250f41ccca1cb540455c2e1e88c469678491831eeb18c3d0728905eb91009018d6dea1402e6b49434fd765d9e4dde7441492e2aafb
TLSH
T18261B833ACB4A93B8DE7AA05BD863B07A7619023D5913F54CAEC0F1C01D72D81342C23
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe59b2db.TMP

Path C:\Users\Admin\AppData\Local\Notulee\WebView2\EBWebView\Local State~RFe59b2db.TMP
Size 1KB
SHA256 c24e2c4a3565586d4c03b34521179dafcc15998722f1571c7099a490105fffd4
MD5 2e5100ee098b498bcb8de8c6e803834e
SHA1 6fb072f10f623d618d6db2a18993a60a17fabf78
SHA512 116a5d90d4c92d4ea40cc513fec4748f20c12bfffc37207bad5cabf82fb9452cfb356a34c3acb01ca8cedc023d6461ad8c1e4148e232e2f3a5dab7e9ddee2df4
TLSH
T17B2135B3E8A45B33DD863686A6177F475F32516782128F046ADD0B2C03EA1DD5516D32
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.Web.WebView2.Core.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\Microsoft.Web.WebView2.Core.dll
Size 579KB
SHA256 87315254d044b9eb9075f1b5f74f9b4b62ea126459f64b7d61a4e0af319af3f9
MD5 88d852481072bdb24b6c6adb64269328
SHA1 0874766275d7f6f02d25128861622f9e1f8a887d
SHA512 4a25afceda9a10674af819b1feb3cf87c61c5fa28e35b30962d223e24a26326967d2af4c2e5b38fb6e2a7aa2a79f09bf0f4f496c0dc97a5dcacc7fd2ab59a4c5
SSDEEP 12288:vOIU59ZG0rpQ322fy+uFKcDmuRFNEMzeu+imQ269pRFZNIEJdIEY0lxEIPrEIgc9:U59R8
TLSH
T1C3C4512223FD861AE6F37B7A993412204BF6BCD6BD39D75D45A8141D0D72F40A9A0B33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Notulee.Abstractions.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\Notulee.Abstractions.dll
Size 21KB
SHA256 2a41195b9bd571c5161f36490ef7a7fc3b12205145869cba19906b05511fb22b
MD5 f0bd937cb854d5f8ae303ac061c3d4df
SHA1 073a9752c8c0bc7c8aae7e2ad5799f204d2c9a3a
SHA512 4bb9a51fd83d5c40f494dd1cf6edcd9bb24f07c52abb7a0bb6ae14d13a2f284fa3559072eb32ff2c83237e4540966871a95e10fb1381ebef0c3ad4fab4d62167
SSDEEP 384:yMpRm9wyUuNDvcPu2nBdZVyqok0BTfgY8DYZwjCWr+X5WrjZ5bG1z7cOZw8l0m/0:yhbNIIqPsciwy0
TLSH
T1B6A2861473FC4735E9FF2B7278F240A00372B9B9B93AD70D1988629A4D7364446B1BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Notulee.Client.Shell.Core.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\Notulee.Client.Shell.Core.dll
Size 39KB
SHA256 f86054489c102957525bb8bc5356951b7f9655e3679cf438100d7b63043d37a2
MD5 2ed5eada4fd6b9cb4e34d1da05367b89
SHA1 d047581dacf8dd856022e6d030ae3b7b92a2687e
SHA512 23e23466563b9b552a8f31bc15f6ee1c7bc66e995a67231fb5cad768144816edf3439cacf4ded07d59c44f9811574951024b41b3ba6b15b96a7bc29837a5b10f
SSDEEP 768:J14LrkIOAh1qGpWBPXqmezY4W0ftTuclPk5icR3:J1CvAoWBqW0ftZlUR3
TLSH
T1A5033918B38CCB33E5CE1BBDE8B1A1511371D663B612EA4E9CCCB2E5486378046553EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Notulee.deps.json

Path C:\Users\Admin\AppData\Local\Notulee\current\Notulee.deps.json
Size 13KB
SHA256 7ab2296cc2e750076cc63530b1114c07261a9062e1a1143bfcb31804cf4b68f2
MD5 637bbbdc340844e0bd03b88b57e24d3d
SHA1 9c758ff8ab65be8c1c492cafd76d5b16f2951f2f
SHA512 6c7feddf14325f5827718761017147ab99e64db16d36d55d8a6483888386c99df00c6664ea2ae1b321ccbe5a6e8a4488c00fe7763bb691167da8b26bb37f4880
SSDEEP 96:XCeIA2lCI/U6WBaPJkuolr9YMq9k8dr3WFLfUlnorW1HKeFSJb2:XCLUTBaPJkuolr9Yn9k8I5uUU
TLSH
T12C529B26C9649EBB083693E6687C4294F662432F3049084EB4FC281EEF77F7B1555B39
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Notulee.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\Notulee.dll
Size 53KB
SHA256 c5644d8d0f2b3e57c5f82dfbb578e78550c13d651f4aaebf65f0487e0e6a551c
MD5 75b179a8d7519b41c15fd921907f3238
SHA1 93bcf2cbe120eedf2947b7d90f2f93c0ad034ef0
SHA512 e7942adb3510f19aae0ab242108ea3d7e5c73924c1c96bd6fc39e8fd51a74b866c67ca22d7e35e843c6a7f6e3c93f43777e2f9b4a070851962190682939fea45
SSDEEP 1536:TJl7NOFHJP3VE0ybivdd5eIk7A4QU3Z89mB5:FlaVE0ybivf5eIk7CQZ8a
TLSH
T14D337C0177F84536D6FE1A3EECB2228956BAF507AD62DB0D089C401A4F333D25A157B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Notulee.exe

Path C:\Users\Admin\AppData\Local\Notulee\current\Notulee.exe
Size 174KB
SHA256 3cfbd4e3f0ae8e6218a8eec22802c056bcd3adc8111f79de5445661d1a556fcc
MD5 ebd331e366ca01c0f92779f12f3121e5
SHA1 6a03441c6b778716a32962d1988414e573f6a2a1
SHA512 0926201077f7260881d8a33e1bf02ac48f13cc5758093c021ca84cec6488f04c2f109acaedd7cf971dc984a458863147ac1eddeede151b26f8cff00198fef068
SSDEEP 3072:5VDxk88wN1xL+x7dL1Z9QnlP97E3swm9uzaAT5VSYu8K:XRax7F1nQnhcUJuXb
TLSH
T18F044C13A6A851BEE1B3D678C9924941FB7278594B71A7CF03504EBA0F77BD09E39302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Notulee.runtimeconfig.json

Path C:\Users\Admin\AppData\Local\Notulee\current\Notulee.runtimeconfig.json
Size 1KB
SHA256 97cc200ee9534b7518a05ce276066cb619a0e73a567cf8ec8deefaa4281923a4
MD5 29f7b50d1318a4ed7fb2542827d02f80
SHA1 db120d4d434f0f9fbe872d9dd782852525e29c93
SHA512 8421b9c2432ef79a772096a67520e7cd7ff29a5a71a81d9a83414f9c4da590c1eaab10472a6f95f8b253a29b20dda8b2b45bb242f9d9d1291a91eacf99f507f2
TLSH
T1E2416634DE5AACF9047951ABD920D482CA7053371044BC52F0FD080CAFBBAA42377FA6
MD5 SHA1 SHA512 TLSH

Submit Download

System.Collections.Concurrent.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\System.Collections.Concurrent.dll
Size 42KB
SHA256 eee2e4d46c22b05bf36235d8e90f58d77faf660f5cff6e906d74f25351f3d70a
MD5 b6ed9607c6cc93a7396a592c6d5c4d9c
SHA1 57f7c90c2c230d49e90f3b2bf3041efc93e83dae
SHA512 cf35ad1914268958ee6bc17d3a670634d85bb0f2f27034adb19e972c680d0df0292fbfc1f311898322be6043ece0d28cea09f3e357d190fbc1f319809c0d1343
SSDEEP 768:xGKbr9f3xh6NaWrb7Igh43iZbDGXNFy0RBOhS9Lal5HZqTwVOOD7nbDSYIbgf5Ia:53X6NaOh43ihG9FRQhSG5HZqTwVdnnb9
TLSH
T18613091177EC5332EABF4777BAF618A00672FB561903D64D10D822695C73B004FAA7A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Collections.NonGeneric.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\System.Collections.NonGeneric.dll
Size 19KB
SHA256 c0f2a7f5f69c0694285963ae0ff519c04e10652cf74196a0f6e5a27360fd44cf
MD5 10512a67782a0e7ae50b769f50708e3f
SHA1 5574dc55b98d7986ed25c03b5529acb262490333
SHA512 66601a33c690eb6d7a4194068182e6b493baedef18afca61ca89deb46123010d6a1a43c2dcceb2d43b0998786201174f75bcbce94a49bc6cef3a1507d10c1308
SSDEEP 384:KqVyy/aucTOHaNmYWyt4KW7phn9MEi5j0qFWez7W0y/yy3T+6tHX2/xyXWpoW:tVdhaNRWf7ITCW
TLSH
T11F92C518B7DC633BF6BF07BA64A7415103B8FE65A803EB6E1514011A9C2B7454AB2B23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.Primitives.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\System.ComponentModel.Primitives.dll
Size 13KB
SHA256 7aeada81cc721536a49b2cb9b9bc47e8e67ccc4c1785fe3a42b7d63b939e5c51
MD5 5c816416959655e4f5adbcdaeffe7750
SHA1 fe429818840ceda2667c05bd908400007837250c
SHA512 332ad653afa00aacf94fe5f21d3fbaa580fb8eb66da1d04fc930154e214e9e1c423de28d2babb10e96e4a4ded00a9cf5477f05fcd44031b63aa5d1a603e534af
SSDEEP 192:34N43Ug+VIxR3iIQjIV3N+IfuHyQWx+MgwmiXMkP6oNqDW2ZW:gphIx1iIM0N+IMyh+YMkP6oNqDW2ZW
TLSH
T1D652C72473E4033AFFB60BB95872CE0022B6FA146D57CE2F45A4554F5A7BB0016A2B67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\System.ComponentModel.dll
Size 5KB
SHA256 8951fd808740facf164d6ca9a6ab0ee3ab07deabf6020e6d5854e400f4c1a45e
MD5 57c1fb8c623b06d8922f857088d70ce8
SHA1 91b1e81c56067b42ef7134b430389f7fab0619cc
SHA512 e65ce2c853c0c34673bd70b97b1305ad62e5077b1b961d3a66b3edf0c0977dee202f0bce7cebfccaaf1da92622f1aabe5a09b7bf6dcfb3a9d9bc7ec773749a8f
SSDEEP 48:6Yc5kj25QerXW8hWC4+O8gfH+IvrTi1Y4zDmDIZLM3yWFZWOTWKHW3aWx5WzBqA:ZlReDW8l4+A/xvgDDmDSLcWB1Wtq
TLSH
T167B1523493F44337EDB64B72EDA3A74523BEBA14CD23CB2E0195560B6C566188E31B63
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.Process.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\System.Diagnostics.Process.dll
Size 93KB
SHA256 6b3dab26013dd7d9c381c47a3da79e4e7329f0d96b044342225420ea071ab0a6
MD5 72a89469feaf09dbd523f12bf5c65864
SHA1 be50483cb0da0f74d4e75d4563ec7d777c156325
SHA512 02da0301aff8336baa258bbe5251fe2f595469340b95bc57df42072b6b4382c383e70151844be79e3ac579236d1f870a311f73b18a5457587f9a2c018208ad72
SSDEEP 1536:u2SWtsPof6FO9Qgy5KlkEbSJlYHlE4nnNTEUTACERjb3nHbYotDA0gV7Lf:UsIzSQl5KlkW9He4nZpERjb3HbYotE0Q
TLSH
T16D935A20A3EC471EF2EE0B79A4B061170FB6A90B1A13EF5E495484DE1E533C24A717B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Drawing.Primitives.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\System.Drawing.Primitives.dll
Size 35KB
SHA256 c10ece8df95e0fdfecfd639d8c32acde2e84b33a9b6285a141b25818cb179332
MD5 67caa19e662011c57b58c16ff5da4eed
SHA1 6cf56643c2c90e9db23d0cee9b0e1a758a945a2a
SHA512 fcef6be137bddf3837684c44e26d18caf53e9234b29aa689ee74b826c2ee865209edca2b1c2e9e9a0aae7002433f4008c9f5d8933bf3c608a5435980b6d526fe
SSDEEP 768:uFAdsyiUEYHXolYCQLdxKEzeOaQYuLF2bcnF7a33W9Aggp:WmxEbaCydnixSF2ygp
TLSH
T195F2F720D7B8D32FEB6D2B3158F214B9C9717746A70FDB6F19D4500D96A7B8C03A11A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.Compression.Native.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\System.IO.Compression.Native.dll
Size 915KB
SHA256 a61a917b3df5d74af1f997a82c0137076fe0fd3c3e0038423e3690924fb10c67
MD5 f4db77e357c6a44eb081d1ed11b369b7
SHA1 401485093901263939aab5f92520be371135bc8f
SHA512 9fa43e4ca1b9c970a36bf86e11b11b3dbdd0f481b06d98ba2219edd394827105b0e41f91fce69f1b35ff8a1ac2c8bb041e49e4abc23f9f9596efa24ae7543932
SSDEEP 12288:L8muXStE+na1wFBtQyyJnpQ8PXTw05nmZfRxAHhlyf:nXnWKpWH0AmZfRxAo
TLSH
T14215AE4BD8B3533ACC2BC079C9A71336E736716853108997A25CE5353B43A541BBB3AE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.Compression.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\System.IO.Compression.dll
Size 129KB
SHA256 de91616ab7cc1809b4715c87d2f34ef38fbd05d70c8ab1339f09a88e9642c100
MD5 fb6811bde8d952e9605998e8890f5cbb
SHA1 f40fe598da2ab63790fbf18a4b6e2409898ec7d8
SHA512 9c85650dc897fc93c6abbb009389051cb1ee266b624c9f32ec92a3423793c504deb9c727c5c923a2f5fc10617d818318832cbc97e4d8bf0c1e734f6808e67858
SSDEEP 3072:Ap/O08H/SjCRSG23XjyXEWi5Y6EbThRtJ60fi/IVEl:0/OdM+riU7606
TLSH
T1CAD34AB823E94B27F28F9A7DD520957A43B5B52A350BEBCE484CB8DC34627D44C103A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.FileSystem.Watcher.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\System.IO.FileSystem.Watcher.dll
Size 26KB
SHA256 43b3f9928842c7018d13ca48ff5645bef4ef7f15344a27ceb36fb00b4ddb6519
MD5 94881e5b5c77b2ef474f225fd2654eb5
SHA1 000581dce5b9d7dc0d8a06894dde687f33d56512
SHA512 c9db9ca44b6445408b0aa5cc8be433aafa6bb7c99c5a1acd08e18434247627348f3e1369c6a79107e6c948947b2f872c9c1393df3d7837434786e4637a32a1e7
SSDEEP 384:EU598qcCUaTSQl2Yd5ziNofB8oHUGcd+/oTv6Eld+HtfT8MiQ1nTZy07vpWSuW:dz8qyCSIflBuM/oTSwsZnTT7D
TLSH
T1C8C2391563DC833BEFEF0B3D997512850772B096A813D74D6989914E290BBE04AB1BE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Linq.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\System.Linq.dll
Size 61KB
SHA256 67a1126b37bc79e96bd6ee0e69608e5b19c6c915d57b283b0cabd02b9f36e18f
MD5 156a17b96ce9b0b548fc3770cfd2c071
SHA1 b0f2102439d8af94289b863e520565cc0335c45b
SHA512 463d7ba7af6b7bbb8a861108011c9341ccc5421d8dd8a7a16578d57df7ec00b885a3f6b52985c7b6db25e92aec21828970549445f4e9b76f3b78fbd8fa924208
SSDEEP 768:wYdsPMF8MDYxt+NU+acdQNw1NCfg6iaFg/bm0iBn4HCx28AyRZDV8NA2I1eQ:wEl2E1NI+/bzit4Ocy7DKNpIh
TLSH
T1A353390A72C51B33C6BF46BBB176519383B1C255AA0FFB85CDECAEF968933600A55131
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.CoreLib.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\System.Private.CoreLib.dll
Size 2.8MB
SHA256 2feded1bb923de3973c28f3e274666b30c35de08e1ae162c726a89a1ee706b09
MD5 0d0b87c233e7bc1e4cbbf789f4dbf1b4
SHA1 cb3c48a1fc0cd3951979c5f02465eed156005439
SHA512 f0e57544ca541c6c0c9f2834de029bdbb753044508d7315cc922837479ad232b2ac5167f5cbad1d00abe7f2f28f15adbcfbef2904dd2a8b86286d8b9845d2a66
SSDEEP 49152:cGRzExTeufAx4VBHNkY9BlCooq50ZRD3a7w5RbE:cuufAx4VBh
TLSH
T100D57B11B3E88F2BE5DF1731E070961807F2ECDA2753E76E364159EA281B7412E51BA3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.Uri.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\System.Private.Uri.dll
Size 78KB
SHA256 4b06cbc5ab3ff0b05e7b11f279630544190d6ed00d5fb3945ec18cd02e67c668
MD5 b05b27ed76e264cdbf9cae627a34b7b0
SHA1 8320b5d6fb58c91dc098fc1933280c0525568694
SHA512 6ec2288a6785e8c95ed9b4d6c6be1ab4d74878031f5c6fec531a55a2b71c3b54f9d7e2a4a27f250427a6ca754f18258d93977bb6868508bdbdfd63e060edd3a8
SSDEEP 1536:ZlZSq8V4kHARXUipx6D4M0zBluJFS08Rjopx02K35tGIU3X:XZSq8V/HARXUgxpBluJF4opx02G5tGII
TLSH
T1D6733B04A3BD432AFBEE07B954B6225707B49B5BF442E3585C9824893C3B7C7550AAF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.Xml.Linq.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\System.Private.Xml.Linq.dll
Size 38KB
SHA256 5d8c2c4d15d38a0f0996c1ea88904211dbeb62654d7ded0e37d4de5b9d161eaf
MD5 6e562e4f0c58fe96c6859decce195254
SHA1 812d142c537d1c64b066fc195d7653160a62e953
SHA512 78cf49cf85cef15cb24237d6edc7e9c9aa74a2f10b920fa2343b75143c7ed32cf23955a4d23702b5752a2c62514463e43bf5d20ae11ac23f58a50ee588ced690
SSDEEP 768:ryqZvsgLtbMlp4k61Eexkxz+4pWy670vS2C4N1b3PouLIgNx:Wq1sgLtrk6iP+4pWy6Wa4N1b3gIIgr
TLSH
T1AB033B1033DC832BFBEF077AA8B4756402F5FAAA7903DB9D6D59609A1417BC04562B33
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Private.Xml.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\System.Private.Xml.dll
Size 720KB
SHA256 b5a811aa630f94574834018393d9b4c7793064bd7c811ddd74d1ef0f19a3ef3d
MD5 b32e221bbeea11b83cde959f79044f98
SHA1 3ff7bebd4d452944300740eddbdd0de4ec6560ea
SHA512 ee91ba40264d9e3f40d2d8de9dbf5dd4a66a671157cd6882652caa751bd3a9c9f996bcf5623fd878bdd9ad11f6c39a0817af950052586aceaf46fd43b8eb468e
SSDEEP 12288:y6gg1nPjcIFO7dJz9EEPHsLIiOkp6sh1tXc7:xPEmIep6GPc7
TLSH
T135F44A6D77C90636F7BF87786822A959C6FDB1226206F36D344C81ED2323B4058A2777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Cryptography.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\System.Security.Cryptography.dll
Size 294KB
SHA256 88df0e36ed6ffb05707f2233e1089534212da93db8eb93e1ca2f9d9d5ad37151
MD5 da38f081fc6e5adca0e07273c1f52fc4
SHA1 0cb853641d26186070ba3be03c687420e490605b
SHA512 dfd2ea4beca2acfe0922d42e2d6fa3ad8e789014989c68bd747fb6fce5009f5ba73f195a12f1b091a6a3a1a63a42c20392ba83239f02f6972a3d024eedecc3e9
SSDEEP 6144:Wv3lqgSQtLTCcUcY+wEHDEN7TM+G6mJZt4egEEbEE3jXmloeLufwfxydb9jKlVpO:a3ADQtCcUcY+wEHDk2vBgEEbEE3jXm6D
TLSH
T166546B2877E84F6DF2EF4734E0309405867EE496FA17EF0D098655BD1863B818660BBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Velopack.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\Velopack.dll
Size 270KB
SHA256 8f3322d81f1a09ad20a63a4cbdaad5c1d371139f3100835f5d45bca2cfbddb95
MD5 fb814591bca5db048371fb10ba5a9876
SHA1 07b10f7808c48fb32f7b6d0a33f3a6e65555b99a
SHA512 6492d245dbbba7ed39457dc8dc273cbf02668ca50e96ebef90bcc1a38c8df2dfa593dccb9bfaa8e4162ef2117f243d722f8f5f5ae7e3f870105eea7717d9d58b
SSDEEP 3072:cpoPfiQCcZ+UvbfyGw0U0TfJmvukA0ilkG7acn0zUAmfrc2QqBn4tsWILgD59NwY:cpo3iQCQfstilkG77Amjc2wDPwh
TLSH
T134447D4433F88322E1FF7B7DE8B134054EB6B507E5A6DB5E858498EE0E623149811B7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\WebView2Loader.dll
Size 162KB
SHA256 462b36fd1be6ca9f7563466a89e57c41ef4a4def3e0a84fa885d203aea4a3aaf
MD5 c9a5d0f278d57d83a03404b8baeeac64
SHA1 39d44b999c1d89c36136804a373d4d427bc7d679
SHA512 97dfb08eae34624b7679a4bb07dee242b2a38324dc13b8aaec6de7f6fed477e9f9bc7474d4df9fbe907d1a460723db7177b7128a26edf5bd73d38d4d45722db6
SSDEEP 3072:fXAne8TlTRTSpL1ThTNTRyMDjRb/hy75HGRtVBviiZsZ5AalCPTxiEtJx9eg8Xjm:/yTlTRTUL1ThTNTRyeLq1GRtVBvPZsrw
TLSH
T184F36C5772E8007BE16A8274C5A34A11E777B4510B60ABEF03A447791F23BD4EE3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

clrjit.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\clrjit.dll
Size 2.0MB
SHA256 9a74076395f6e7bcbb932c8b6eb412d1fbbff43b954c49f9d5015e467d8402e9
MD5 6c1b2264a965f37909cd62dae3b45cdb
SHA1 0dcf105432bfe3b95d7db7e0eb544a8dff5d258d
SHA512 d136e0da95bc88387e0321568e076721b2df9db809e8cd54115ff906345adbe70ffd4ad574343b1932e60b7c2725d73ddf7c9ab3a75b7ae8f332f0c3e8c25340
SSDEEP 49152:gPxb5fpHgVJDswOMI6OJmQAWBZP7T1s/EhVVY05jSoBHdUA5OZ3QEPEHIV:gfePDsj1FJmQAWBZP7T1NhVVYujSoJd0
TLSH
T18DA5AE47A2B900FCD46F9234C6174A17EBB2B80513719FDF13F04A56AF23BA2266E715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

coreclr.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\coreclr.dll
Size 4.4MB
SHA256 58859f85a30cc71313b281898e7cfbdbb9eccb95ae2a3f865329efd47ebf31bb
MD5 c79970b0499dc402a777ad53140d057a
SHA1 074f3f696ddab51c9a318284df9ff42cce34cc57
SHA512 a357a749d1a64eefcfb3e99bec15f0d221dc438b64d2ab1eefad5b24dbc3d00701de06d560f01ed21271c29812ee3e226f1cc4ec006a1cad147c2a396b9a4431
SSDEEP 49152:dRToHtP4YoUdFnjqTFmRZZt+b7b7b7b7bw7b7b7b7b7csXctvx9c38WsV7Tb5LaW:45B1jzHZ0lKyoH4wgNPSZQVF
TLSH
T142268E16F6AD10DCC0B6D1B8C6D74917FAB238595338EBEB026486651F23BE16A3F311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hostfxr.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\hostfxr.dll
Size 370KB
SHA256 d1012d5b8ff1329d5baa6d58aa02c4277acbe58cfd1dc5f10d7e6bb8e9a0d94a
MD5 96ddc761748dfc69b27d9c17684978ec
SHA1 a24542b6d3345a04c300c064f1d2251fa15d3c62
SHA512 a3e88ca9199fa48c6526aad35a371e7a7aa26d95e62902ea4ec38846c6186f127471ff730581e34a7a19d1e654bf5284339dbae2bf706ae30ec37fee53bb2605
SSDEEP 6144:zal9vjNggqbRRdaUzIS64W+/zvZ0UCVvfpdAl0FsGxilKmkRAwBAO/UXj2CUHFho:zFRAOOnpa2vD359Bqf
TLSH
T155840816D3E8057CF0B79678DAB29942EB727C494BB0E5DF139088651E73BD08A39723
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hostpolicy.dll

Path C:\Users\Admin\AppData\Local\Notulee\current\hostpolicy.dll
Size 369KB
SHA256 e9c723bf674ef7f6e6c1cc5d4ee694715b864f480c56baaf354b8cf7c9b40b87
MD5 e64afc79f5ec6c9e36b63eb67bda7d95
SHA1 0a4bf92a8bd3d895f7b41fbade2d23602cce6525
SHA512 3f5a612aacd044e6e96808111a0280e2bd52c9620d5f61135ee40b60b0c726fe979d6222179baf240a59384994013cbbbbf3f9a005cf237a4b77ed38c2102764
SSDEEP 6144:ts0pbUUvKO9vssrJDpMBqyiNluCZO7ptsPB7dGd2b1LcZzKr9H/VLuxJb/FDtkw/:trFvK+HlKcyiB9HB+2wKWBFTrx
TLSH
T153843916D6EC007CF0B7E679CAB28901EB727C4947B196DF139099A61E73BD09E39312
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sq.version

Path C:\Users\Admin\AppData\Local\Notulee\current\sq.version
Size 472B
SHA256 03317fa3eeaf8af7371fe3b3935bded442925dfbb84f18d7ca021d61a528a1a0
MD5 9ecb36e5085401b6cceeae771867b392
SHA1 c28d620ffa54d394f5eb13062f0d0040ba644d10
SHA512 51ade2c54c1edb9d5bbb4b154d0b7aaea38eebb23706f07d0a9ee134c377948d160098129ae745efc262905a1924af7eb3308fd3a6036454d8b820e6931eece1
TLSH
T114F027959504F20B9696121AA980410893FEBA6F20C08850EC8CAC9822A92CFCC1B9A3
MD5 SHA1 SHA512 TLSH

Submit Download

Notulee.Client.Web.Wasm.styles.css

Path C:\Users\Admin\AppData\Local\Notulee\current\wwwroot\Notulee.Client.Web.Wasm.styles.css
Size 85B
SHA256 60f2e6c8652ee0eb0f769d584ae8361badf462858b3577edfcaf1a80a40488b0
MD5 ecf0a96fc7c00d1e5ee693174f686428
SHA1 3a26b5930c71649de77cfd493f63171753992bfc
SHA512 0047317d051516d6e65cadaf0faa20a4b79bba1fa3362f185298048930f6fc6a31acbe59a709af609327bfb5626cd8e478561f3ae6dba83f896f7bf6fa76373a
TLSH
T10CA01221710E2D7EDC008107D00394402230C4315611E120700825A830E49056185607
MD5 SHA1 SHA512 TLSH

Submit Download

Notulee.Client.UI.qx78nj5zz8.bundle.scp.css

Path C:\Users\Admin\AppData\Local\Notulee\current\wwwroot\_content\Notulee.Client.UI\Notulee.Client.UI.qx78nj5zz8.bundle.scp.css
Size 120KB
SHA256 d27231dcc045079fe07f084391fcb712a4eb36703f8743eb3ce9133fdae977af
MD5 4cf185e921b0149f8914f86fa0a6d762
SHA1 b73ad81837917f0ee0ccfdbe84ef09f1dc9f9c30
SHA512 ff7690425b25209a4f00201c350a1da0025272c3517d017313ff254a536e329a383afd31334c011b3d2a49abbb2eb4d5b2abec924c731b14b4af438dbbfa98e0
SSDEEP 768:pExzJsGj61qfHQKkrP8/d/j6c+JGH9eGjmqRpAOeZYUHh74AQubEBIMOX0P+l56F:jrPCt+U9VjJ2VEU0NwWuzBC3
TLSH
T147C3C696E711537A35339A59EB9F8287F79DA063550101BCBFCD21081FBA0FC861A6EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

notulee-icons.css

Path C:\Users\Admin\AppData\Local\Notulee\current\wwwroot\_content\Notulee.Client.UI\notulee-icons.css
Size 2KB
SHA256 2bf64d598a4137534b343b8e480a338bf33ca035f132e303d0dc2017718cb1ee
MD5 23b088fe083a03f10308d718de47c7be
SHA1 91adc97f3f86258389bfbab9e4115328aad0859e
SHA512 83c6b0ca42a4a5fd3f919c6397d68822e6ec5ea9bf06e0494a10fe00187d23d468ad3c407f59fa335ae5fe1570aadc060f43b62f165cd46dffa96b33f7afaeb4
TLSH
T184519B40F721E337263359AE27DD819AB72672A629525B5CFFDD10201F7E4F88D884D1
MD5 SHA1 SHA512 TLSH

Submit Download

blazor.webassembly.js

Path C:\Users\Admin\AppData\Local\Notulee\current\wwwroot\_framework\blazor.webassembly.js
Size 59KB
SHA256 d71947baed6234e26230ccf6042abde6e7a4c077faa5da5372054d29505ba0fb
MD5 1b8c747d8bf16a5f398734ba2c71dc57
SHA1 a065dca062140db6e50b096b966e38523f8a8e9c
SHA512 aa7c80235163567b8d0b43355c937298e23ef127a602f9e19c9e3417d46f4968b3cc9e284811d171c99c080917360b5e3022ec8578f6ea934f5d4afe86f8a3dc
SSDEEP 768:TfNJLEm2RX7fYM2ZXlEQDMLIED4Kl7t4qWzOnyphvJuRejJWI09LL17HsaKtCfPD:7261rbY7GVzZJo1zfPDquMOEOL
TLSH
T16D430AA933A5B53207EB75EB91372206B37610557C4E8890B12CCCDB6E768CA5237F6C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dotnet.js

Path C:\Users\Admin\AppData\Local\Notulee\current\wwwroot\_framework\dotnet.js
Size 56KB
SHA256 55569384c37312c75239a03ed21eae4740090487220b64bbbe97d5cbae190ed7
MD5 1196d4aa27cf5229507d6f3501a6bd55
SHA1 e613eeeb590541952f22ab48b9b423314e03a580
SHA512 3c829e16e1e529942e468f84a402f1b1635cde1071f60b36ca2ddb12aefd69bf1be419a0ddd25015b9b5ace224d2a11595ac6a422e9e833fe4bb9a4046270304
SSDEEP 768:juXW1crUZcKCl33NzB4jNAoBK84Sxa+OrrjHKmxMW3zvQNIH5mblceUAwZ6VJ7Z9:QKCl33TrPgYOIH5mbAgtjxdh8I6K
TLSH
T1F44308BBCABCAE7740F99AA1D1354313FB20836F020CCC9175BC294E6FB6555502AF5A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dotnet.native.rljv12tx7j.wasm

Path C:\Users\Admin\AppData\Local\Notulee\current\wwwroot\_framework\dotnet.native.rljv12tx7j.wasm
Size 2.8MB
SHA256 01921c7ebcd906e6dce25e0f1fd7350e2a329c363ca17dd0f3f1ddcac34ebfc3
MD5 1dce2bc09e18f422cf647ce33d8c154b
SHA1 33f5fb0c56427936224d96bc1a4b4198434de0ec
SHA512 9887bcf88f751a7624147f1f395e5862f14d1d20f2c5247294aea8b454510c2d0ab83f5b9b1fb818599504ebd943f981d9bb4ec69de3cc1949c80f0b0fbb3775
SSDEEP 24576:1BNpO5cq5BkEaM1KvahKepyGyf1tJl/1FuUrFcsF6VA3blCSPc2wxTcnTwkYvoVj:25cqvm0DgtD8Jlj1Ue8z
TLSH
T1DFD53903F91F98AAF40095370A1E87366B679C40766071B6DB9C25A73CFFE15684BBB0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dotnet.native.uj9nvia3r9.js

Path C:\Users\Admin\AppData\Local\Notulee\current\wwwroot\_framework\dotnet.native.uj9nvia3r9.js
Size 220KB
SHA256 e608f590d5f0696292ad289873883eab3b7e7bb4073f682b8616f109df4b2c73
MD5 259d2054cc4b799f3280c160394a5333
SHA1 d15c79f3c826032280c8f5a6f8dc719c8885540f
SHA512 67eee7c39ae258dedf941305b4dceae4b224cd382694a69f2d0f3182c3f73bc5ceb01efeb542c7b7035955feb8bcf977902568bba95cb9a20fdbce6f0282a98e
SSDEEP 3072:71PgBXaLfVmQLZx16GJG/CEG5ZyJpgneMZzPPF/F3NZq:71Pg2mQLZj6tGZCpGhF/F3NZq
TLSH
T1DD24D7190DA520A75AB3773CEB1DA309FBF6502767088204BCADD7542FB1928C5B9FD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dotnet.runtime.a6jcqbs390.js

Path C:\Users\Admin\AppData\Local\Notulee\current\wwwroot\_framework\dotnet.runtime.a6jcqbs390.js
Size 193KB
SHA256 ee2deeb1f4eb9f30bff6a58ee2c8b9070e30ec3f5f5129d205d850e3b6e55f63
MD5 01221cb37e76be5ae783cce46a21f828
SHA1 6a3093a4835f741c4e6ec813e1b10acb99112bc0
SHA512 ef125051e70f47b6c19f92a2bb3aa3b7fa1d8b4f149784e423ba1d558dd2a73f9ff5c71ecc2a468085c8a17cf343308f620c176613ef29c5c09f06636d5c764d
SSDEEP 3072:SghhcMCPZHzNEt0JTVwmaQwHSca201D5Sqro1efEDMj:SdZHzNxJTVwmaLSca20Kiqy
TLSH
T14C14081476F3302753A391EA007B6265E5355A20740C8AD4B9ACEDDF7A23A4B60F7F78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.css

Path C:\Users\Admin\AppData\Local\Notulee\current\wwwroot\app.css
Size 6KB
SHA256 71be8834789a13f3f9fc7a82172901df2112937ebfa0f86262ab0c6a7f0bb0da
MD5 630dccdc7128e61f8b073898a3caea1b
SHA1 274a4c7326ee7096600b09283d0326b5891ce6b8
SHA512 6711b6fa4426ddd6951765ae3350b55a9823fb05800379c994c7c9eb6ce640f62286726b722054571c2f55ace9d002a7dfd723d34cc66b53f9fd3b6eb235b1ab
SSDEEP 96:F7a+A/rWplg/UaBDc1dGPjTdNBjysHldUCfGeKisVwFjN:F7a+A/6lg/UaFcEbx/jrldUKpTsVC
TLSH
T136E18564B70113363233C66FA7DE42A5E729706EB8222268FADC71042FFD4A54652EF0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\Notulee\current\wwwroot\index.html
Size 1KB
SHA256 5f51d8a48c0f4064d9c5726893341fb82e0ef00bf424e00e2a4eaff8a76aabc6
MD5 1ef626ae0225322d03448f63d4025d88
SHA1 6b3b06fe7ee4cf2f4bbd14a0943ea10a86841456
SHA512 ccbfb87739fd98d6dee3316ba7e7d5259171ee4a5979b0528c87cc996d94c57369afd31621bdc8a05e3deb501aeaea0afb24c4d205a1076f8fd4e1bc7147bdc8
TLSH
T1B831E20754C55C1E33B1A592DD93B02CCE909497C34D6A5470EC21AB1FF3AA888E3677
MD5 SHA1 SHA512 TLSH

Submit Download

notulee-pwa.js

Path C:\Users\Admin\AppData\Local\Notulee\current\wwwroot\notulee-pwa.js
Size 3KB
SHA256 e30d1914239a7234a0d669d1a78477043c38348e590ca6e11865942c80332f71
MD5 8cacaaa70f8986aa903ffef15b414420
SHA1 72d3006ad6d1defcdb2dca3c229acde1462f8a6a
SHA512 f759c3317496b77d48c96994948899179c1de7c91df4869e901575654d30cc0d073329ef6c956b6a76563a0230d5f4cc0c75674910b06a34d281ce69ee717d44
TLSH
T10071431E52A591352DB0B27DEF1B1358EB19901702A25081BFEF56402FF2819D4AFEDB
MD5 SHA1 SHA512 TLSH

Submit Download

webview2-bridge.js

Path C:\Users\Admin\AppData\Local\Notulee\current\wwwroot\webview2-bridge.js
Size 2KB
SHA256 67c68bf6703c8de39ea8fe7cc949376773a1484321d43b1db71988a4fc9bd169
MD5 93a818ccd4262661b650bd412f62b9b5
SHA1 989391c2b0d839daf72977a17bf701906cd2c37b
SHA512 1fcbbf1101390653519a247fc317bedc2826ad5eca8c796d2c2d90bbe1ec1bc45ad61c4bffadcd672cfd6b85ba68e3e107f25ab9dfedcf4c7c70f9646948b420
TLSH
T1A451631FE284607B4BF178E7F65F1299E62940A34214A823351D91C06F319A6035EEFB
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Local\Notulee\data\kv\settings.json
Size 1KB
SHA256 55d39c3986729ec7748df1973779bec52db382e5b36a922cd75ebbece4fdbee6
MD5 a52534d94ab79149d05647d0260a2a10
SHA1 509f3c5ebceeed21d3b895ef132590d33cf3e0e4
SHA512 bd1556095bd4fe56ba4ec956693cdeee4dda9e3dab8565ee08f88cf6a45dc87f82d66dd0f4be8ae6dec66130dd61393070439a96df8eef7b57acedb94a441a32
TLSH
T1ED31470603536CBFDC2AD8C89D303CBC5A9CBDA531F93858894A451CA9634F19F760F5
MD5 SHA1 SHA512 TLSH

Submit Download

Notulee-0.33.0-full.nupkg

Path C:\Users\Admin\AppData\Local\Notulee\packages\Notulee-0.33.0-full.nupkg
Size 30.6MB
SHA256 c59e857c7f3a1deb23bb09719391e1230f9d15f1c410377f6f9c3359f675c460
MD5 021b125dae58a31a1faa4dc3dc3de5a1
SHA1 9f27624296806daa5cca40ea32116deca0281485
SHA512 958f30f68a99b3a9a037f47e7cdfb85a47d99bd2062882e28bdd03b786b6a34556f1fd86536167a6215f0bc54af9b85a15866900d4f23fe7cf854c2215f16d72
SSDEEP 393216:EecbD1UmdYsk/HX1RPLCkUye8dyiPuMMow5ryEnEBn2gXoJlLA2fg2SnL8pqDwC:pChHEHXjCkUOyi9eryvoJG2fgp8UT
TLSH
T16267330B7BA41FFBEAAF7679D6C1B589839701B8332B6F08A00575904AD71C7135BC86
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

velopack_Notulee.log

Path C:\Users\Admin\AppData\Local\velopack\velopack_Notulee.log
Size 868B
SHA256 4a12488b747fdf4d1de8be5e86b8faa7521c60d3060c25585f8622507120e6ee
MD5 7e7bda6e089804bb0540c517f17cf4c9
SHA1 0218674c236b988617ebd161576e44c1c6899561
SHA512 8771537a90117f2b72b10afd2cb0180eadd753054ea066b58604127df7c7d8d402622760715379df0ec70dfe9890ebbb0f13be73304fe0f6d6bc938f80addc83
TLSH
T13111C68CE748E12BF44A5B2791F7F19007AD07753F83A34F2D269105A125A6C37C63A7
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2416-506-0x00007FFBF8110000-0x00007FFBF8111000-memory.dmp

Download

memory/4736-581-0x00007FFBF8110000-0x00007FFBF8111000-memory.dmp

Download

memory/5076-932-0x0000021FD6CF0000-0x0000021FD6CF1000-memory.dmp

Download

memory/5076-924-0x0000021FD6CF0000-0x0000021FD6CF1000-memory.dmp

Download

memory/5076-922-0x0000021FD6CF0000-0x0000021FD6CF1000-memory.dmp

Download

memory/5076-929-0x0000021FD6CF0000-0x0000021FD6CF1000-memory.dmp

Download

memory/5076-931-0x0000021FD6CF0000-0x0000021FD6CF1000-memory.dmp

Download

memory/5076-933-0x0000021FD6CF0000-0x0000021FD6CF1000-memory.dmp

Download

memory/5076-930-0x0000021FD6CF0000-0x0000021FD6CF1000-memory.dmp

Download

memory/5076-928-0x0000021FD6CF0000-0x0000021FD6CF1000-memory.dmp

Download

memory/6100-849-0x00007FFBF8840000-0x00007FFBF8841000-memory.dmp

Download

memory/6100-850-0x00007FFBF97C0000-0x00007FFBF97C1000-memory.dmp

Download