f6bd024595477dfce071bdb5ba244f16f04beaddc610628be675891cf8066732

Analysis

user interaction
yes
max time kernel
150s
max time network
151s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
23/09/2026, 22:42

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LuaTools-win-Setup.exe
Size 11.3MB
Sample260923-2mt9rsfb49
SHA256 f6bd024595477dfce071bdb5ba244f16f04beaddc610628be675891cf8066732
MD5 860ba574cc15cb29375ca010a1b27925
SHA1 14764178320d68ce077d9f3eff326a5bd9f4c24b
SHA512 807e9cdb1653cc7d2991c0a87b1095652afd406e854ec34c8cbf0e29fa1aacfccc8f21af6a80d28d430a0cfca96e204d82e1980e1df88b1fba75cf9dc4c69038
SSDEEP 196608:K4MyYsDTgGu2s+0040yF5NF9jPnN4Sw6qHn3ILn03t+6E4Ud519Y:iJsngan60ojF9jfN4SwVI70bUzHY
TLSH
T154C60162FF02D0FBD48A01B5D43EB73DBA369E95872A85C34A99385CA8F1270585335F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Control Panel\International\Geo\Nation	LuaTools.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000\Control Panel\International\Geo\Nation	LuaTools.exe

Executes dropped EXE 2 IoCs

pid	Process
4584	LuaTools.exe
1028	LuaTools.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
8	raw.githubusercontent.com
10	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LuaTools-win-Setup.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2020	msedge.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134346770531721048"	msedge.exe

Modifies registry class 11 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\luatools\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\LuaTools\\current\\LuaTools.exe\" \"%1\""	LuaTools.exe
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\luatools\shell\open\command	LuaTools.exe
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\luatools\shell	LuaTools.exe
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\luatools\shell\open	LuaTools.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\luatools\ = "URL:LuaTools Protocol"	LuaTools.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\luatools\URL Protocol	LuaTools.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{8C1897F6-6913-45D8-8E03-29518F2790CD}	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2101206053-1414382737-268919432-1000\{96CB4AAE-5FBE-4CA1-BC78-11B0B1125547}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2101206053-1414382737-268919432-1000_Classes\luatools	LuaTools.exe

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
2212	LuaTools-win-Setup.exe
2212	LuaTools-win-Setup.exe
1028	LuaTools.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
396	msedge.exe
396	msedge.exe
396	msedge.exe
396	msedge.exe
396	msedge.exe
396	msedge.exe
396	msedge.exe
396	msedge.exe
396	msedge.exe
396	msedge.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	4584	LuaTools.exe
Token: SeDebugPrivilege	1028	LuaTools.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
396	msedge.exe
396	msedge.exe
396	msedge.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2212 wrote to memory of 4584	2212	LuaTools-win-Setup.exe	84
PID 2212 wrote to memory of 1028	2212	LuaTools-win-Setup.exe	87
PID 3916 wrote to memory of 396	3916	msedge.exe	111
PID 396 wrote to memory of 1920	396	msedge.exe	112
PID 396 wrote to memory of 4280	396	msedge.exe	113
PID 396 wrote to memory of 2020	396	msedge.exe	114
PID 396 wrote to memory of 4280	396	msedge.exe	113
PID 396 wrote to memory of 4280	396	msedge.exe	113
PID 396 wrote to memory of 4632	396	msedge.exe	115
PID 396 wrote to memory of 4632	396	msedge.exe	115
PID 396 wrote to memory of 3216	396	msedge.exe	116
PID 396 wrote to memory of 4168	396	msedge.exe	117
PID 396 wrote to memory of 3216	396	msedge.exe	116
PID 396 wrote to memory of 3216	396	msedge.exe	116
PID 396 wrote to memory of 4168	396	msedge.exe	117
PID 396 wrote to memory of 4168	396	msedge.exe	117
PID 396 wrote to memory of 4612	396	msedge.exe	119
PID 396 wrote to memory of 4612	396	msedge.exe	119
PID 396 wrote to memory of 4612	396	msedge.exe	119
PID 396 wrote to memory of 3940	396	msedge.exe	120
PID 396 wrote to memory of 3940	396	msedge.exe	120
PID 396 wrote to memory of 3940	396	msedge.exe	120
PID 396 wrote to memory of 3868	396	msedge.exe	123
PID 396 wrote to memory of 3868	396	msedge.exe	123
PID 396 wrote to memory of 4584	396	msedge.exe	136
PID 396 wrote to memory of 4584	396	msedge.exe	136
PID 396 wrote to memory of 2488	396	msedge.exe	126
PID 396 wrote to memory of 2488	396	msedge.exe	126
PID 396 wrote to memory of 5032	396	msedge.exe	127
PID 396 wrote to memory of 5032	396	msedge.exe	127
PID 396 wrote to memory of 1680	396	msedge.exe	128
PID 396 wrote to memory of 1680	396	msedge.exe	128
PID 396 wrote to memory of 5128	396	msedge.exe	129
PID 396 wrote to memory of 5128	396	msedge.exe	129
PID 396 wrote to memory of 5128	396	msedge.exe	129
PID 396 wrote to memory of 5824	396	msedge.exe	130
PID 396 wrote to memory of 5824	396	msedge.exe	130
PID 396 wrote to memory of 5824	396	msedge.exe	130
PID 396 wrote to memory of 5904	396	msedge.exe	131
PID 396 wrote to memory of 5904	396	msedge.exe	131
PID 396 wrote to memory of 5904	396	msedge.exe	131
PID 396 wrote to memory of 5844	396	msedge.exe	134
PID 396 wrote to memory of 5732	396	msedge.exe	135
PID 396 wrote to memory of 5732	396	msedge.exe	135
PID 396 wrote to memory of 5732	396	msedge.exe	135
PID 396 wrote to memory of 4584	396	msedge.exe	136
PID 396 wrote to memory of 4584	396	msedge.exe	136
PID 396 wrote to memory of 5504	396	msedge.exe	137
PID 396 wrote to memory of 5504	396	msedge.exe	137
PID 396 wrote to memory of 5788	396	msedge.exe	138
PID 396 wrote to memory of 5788	396	msedge.exe	138
PID 396 wrote to memory of 2456	396	msedge.exe	139
PID 396 wrote to memory of 2456	396	msedge.exe	139
PID 396 wrote to memory of 5272	396	msedge.exe	142
PID 396 wrote to memory of 5272	396	msedge.exe	142
PID 396 wrote to memory of 5272	396	msedge.exe	142
PID 396 wrote to memory of 5444	396	msedge.exe	143
PID 396 wrote to memory of 1728	396	msedge.exe	144
PID 396 wrote to memory of 1728	396	msedge.exe	144
PID 396 wrote to memory of 6100	396	msedge.exe	145
PID 396 wrote to memory of 5996	396	msedge.exe	146
PID 396 wrote to memory of 6088	396	msedge.exe	147
PID 396 wrote to memory of 3804	396	msedge.exe	151
PID 396 wrote to memory of 3804	396	msedge.exe	151

C:\Users\Admin\AppData\Local\Temp\LuaTools-win-Setup.exe
"C:\Users\Admin\AppData\Local\Temp\LuaTools-win-Setup.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:2212
- C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
  "C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe" --veloapp-install 1.3.1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:4584
- C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
  "C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:1028

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
1⤵
- Suspicious use of WriteProcessMemory
PID:3916
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --edge-skip-compat-layer-relaunch
  2⤵
  - Checks processor information in registry
  - Enumerates system info in registry
  - Modifies data under HKEY_USERS
  - Modifies registry class
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:396
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x234,0x238,0x23c,0x230,0x244,0x7ffa1147c188,0x7ffa1147c194,0x7ffa1147c1a0
    3⤵
    PID:1920
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1656,i,14000197051098914809,2776679618262331396,262144 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=2168 /prefetch:2
    3⤵
    PID:4280
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1868,i,8495777555400524482,1964996169341063830,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=2304 /prefetch:3
    3⤵
    - System Time Discovery
    PID:2020
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2608,i,2625530017312346353,1220043190282577127,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:8
    3⤵
    PID:4632
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3476,i,2627586794858170695,7995109461811982528,2097152 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=3524 /prefetch:1
    3⤵
    PID:3216
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3472,i,2504642703762167259,6917069234013646092,2097152 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
    3⤵
    PID:4168
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4140,i,7563302616323678065,9892671104892126440,2097152 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=4244 /prefetch:1
    3⤵
    PID:4612
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4248,i,13724840427441396791,1578271128928293862,2097152 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=4264 /prefetch:2
    3⤵
    PID:3940
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5084,i,8571845931788064573,9923463024729487704,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=5128 /prefetch:8
    3⤵
    PID:3868
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5324,i,17161673267574061838,14511656258339909980,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=5320 /prefetch:8
    3⤵
    PID:4584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5736,i,1197549280719495276,8327851173583491460,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=2932 /prefetch:8
    3⤵
    PID:2488
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5748,i,10562146278849502175,8816220690207791287,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=5764 /prefetch:8
    3⤵
    PID:5032
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,6897406911166253177,1596721427648096194,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=6012 /prefetch:8
    3⤵
    PID:1680
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6212,i,8588219563809551500,12297380593899876904,2097152 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=6216 /prefetch:1
    3⤵
    PID:5128
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=6612,i,4286878600812142921,867915644963574066,2097152 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=5080 /prefetch:1
    3⤵
    PID:5824
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=6820,i,3891791541342956659,7341211441389590007,2097152 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=6836 /prefetch:1
    3⤵
    PID:5904
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6948,i,14417786535194682380,1187837508878281001,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=7036 /prefetch:8
    3⤵
    PID:5620
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6948,i,14417786535194682380,1187837508878281001,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=7036 /prefetch:8
    3⤵
    PID:5844
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=5144,i,12832508506720291940,14235559052895914615,2097152 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=3700 /prefetch:1
    3⤵
    PID:5732
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7272,i,836383641937785563,12101516756714675088,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=6824 /prefetch:8
    3⤵
    PID:4584
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7276,i,7841656970949506696,645244946533108990,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=7284 /prefetch:8
    3⤵
    PID:5504
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7428,i,14385451672213117366,15015339014192979284,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=7552 /prefetch:8
    3⤵
    PID:5788
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7672,i,9442241196764890394,4522139342349973462,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=7656 /prefetch:8
    3⤵
    PID:2456
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=26 --always-read-main-dll --metrics-shmem-handle=4504,i,13942103141843534517,11593643683038628135,2097152 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:1
    3⤵
    PID:5272
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3464,i,13016866540576537742,2690737401851318381,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=3120 /prefetch:8
    3⤵
    - Modifies registry class
    PID:5444
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7648,i,8201236377887921530,11748295865826010545,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=4792 /prefetch:8
    3⤵
    PID:1728
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6968,i,358078749810492675,7333280699032784259,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=6868 /prefetch:8
    3⤵
    PID:6100
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6960,i,5853063205699031564,4619754653865485645,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=7396 /prefetch:8
    3⤵
    PID:5996
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,2446515753555461824,6195850749068285553,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=6784 /prefetch:8
    3⤵
    PID:6088
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5904,i,11860595470112206398,14159043699884598471,524288 --field-trial-handle=2172,i,14335091997554970376,13386336364344481118,262144 --variations-seed-version --mojo-platform-channel-handle=5908 /prefetch:8
    3⤵
    PID:3804

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:1232

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

CommunityToolkit.Mvvm.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\CommunityToolkit.Mvvm.dll
Size 143KB
SHA256 19b2144fed9600d58a742a5a4a5fd7b10d4d0d2c2e79f5d8019307cf5657044f
MD5 c5aba3e739e682a6727f33e7c89f1f3b
SHA1 2c656c3c24e66aea61bda770f146d8ccff5c868f
SHA512 fd7269021e7064742b1bd2b361d90ba5f848ba9f275f1b1b7a1459b231d4f012fa1bfe37cb0c01f524356e6bbc8a91f7eaddc91202b7fd498b6fa016b3a8659c
SSDEEP 3072:TSieaCkJBmT1YhqlgBE6KZogn10iAj+QPuzO/:TRVxmYe6+n10iV2
TLSH
T1AFE39E1273E85A33E6FF1B75B4F0808A8F72D707ED26E34D958D82920963BC059517BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.deps.json

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.deps.json
Size 36KB
SHA256 cc9799367c43bc3c63ac53cab0e712d80c7b5b242481181462547f4fbdef0d4e
MD5 6fec11f25bf8cfc1600822c7d65fea12
SHA1 d027c676108df81ae85dd132c39a24589563ec80
SHA512 a1a85e4ec0c24ec595b157c8881a85aa566631098689a87379124a5698c72d88b2f8a965d97958cb3abacc5be0372eb7f00ebd5729817b733232bffe78be910c
SSDEEP 192:CGrWrHwIIqoZoqsZuNTj6uTVZECYIh23RCzi4oFby98ZWjdIyfnNfekS3:CGcHwIIq/MpRYIh23RCe4oFbyfxIyf3S
TLSH
T123F28A26E8585E234976B7A6FD784991FA35432F3004684A7CFC294CCF76BAA5093F34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.dll
Size 1.3MB
SHA256 a8fe5f11e57f8c40efccc5a021dd678516a526b6072db484f1fbd3122ad8644d
MD5 bb74c5afb50d71f9a205b3f797dd1c69
SHA1 dd6d025f85693dd0da3c51c8549fa3a7e663a2bb
SHA512 cad6bb9bea435cd970efb2c774b44f4532a4540e7dc08ad19e755521c07b2cb1cc3154ae15b34dc4f6104ef4b0fc98c1669e1d6d3b86bb9769107dc9035eb1f6
SSDEEP 12288:yDZtVNift8epo4o58xN9gSlXkkfTIWb1lAn96YanfiQlDXMfn9u6c3zA:6Yvo4tzIWhliL9k3
TLSH
T111556D6033A58739E1DFB6B5546A0158C7B1EF42228BD76E0C4BB8FCECB23558E4125B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.exe

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
Size 254KB
SHA256 1e062607cce909789918b21e4c653c303a594ad5ad366978b4def4fd0a4b0e64
MD5 4b379c6bfcd031d0ed78a78c5df777c5
SHA1 f3213aae8d03550fb6ebf71c0269d8451c981522
SHA512 72c121b41a30a1e44d0a33861c134a81d3dad4ec71d0852415402fcc3c62e802c40309efd672b8b042e868dbeecf6df9afa15b308a487b054381f78bc4834488
SSDEEP 3072:FqeXA/4yIg9vkNPNu6H6xCYOiVUE265RJ6nIyBk:FvgvkNFNaxmNExJ6Ig
TLSH
T1EF442A37928541B9F097F1B4CA610845EBF17F605322A3FB1E0379BFCAF92819A69741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.runtimeconfig.json

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.runtimeconfig.json
Size 496B
SHA256 b7ab6a0ad18cf1280ad75c8e6d0df62d06c84d62dc69351e49c04afd3e218eb2
MD5 eb7751b6da413a72fe18d187b6b88daa
SHA1 0ab1171970e84ab0e4c9b6807a3700744052aab2
SHA512 d7db1f44c4f706c50755c07501f26620f51c9efb707853432b0ea1a15ffc7e3f9fba919cbbfc3540aec68035132f8ccdf3b5abc0882b67529f8ef5c0b509214c
TLSH
T160F05539C9141DB708F43BADD12AC087FA30136B01040D5A75FC180C2F766A26010E88
MD5 SHA1 SHA512 TLSH

Submit Download

Markdig.Wpf.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Markdig.Wpf.dll
Size 36KB
SHA256 b3054e4698878b89fb7e6244edd62b047be82aace0b1e506ff0271ab663a95da
MD5 36516367616a3339e7f9a8440b926d83
SHA1 186c8bb31a6479cbf868cc83d1a67106e8d3b212
SHA512 1cd6d37e7bef1c6a9871472cbe5dc3046c1b4f41bdd91a44398c0a41b2604a5131b80800a6b7a6935aae84a1e65d30edad3b75b17d60ab866fac21658175ff5d
SSDEEP 768:4rwjdE8a+zfLQUowohKV41fnPX9ZmsLAMK5qJTa:Ow5E8a+DLQUowOMYnP9ZmsLda
TLSH
T169F22C50BBDA812CE1FD4635B8B29A50B1B7B98E1206DE5F1D8150BF0CABB424611FF7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Markdig.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Markdig.dll
Size 397KB
SHA256 17b19e9d32487968d5b55ec1d2d83800534985fc67151cbb6b82f42aaf232f30
MD5 9df1a79d00d43baa73de4a11c5e1db6f
SHA1 eb71d0ebb49f105ab733940ef5de364a41d363ec
SHA512 85f01b9cb614f70baffffd0c7426797ce97d71f45806edf2b7429cf70790800e9f16110881b6c47af1f7fd06e4161843133979b703e7d00fc46c336c6cc8f881
SSDEEP 6144:n3iVRvQuyp+zNvN8433eabMz+KECAqJGv3uh4bpQOGuV1PIYryeiJEtyBg:n3iVRvQuN863emMz4CqqvZBg
TLSH
T1218472B413F451E8F2EBFE37E8A21A20D6F2794BAD41ED5E0484244D8CB57419CA736B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.Abstractions.dll
Size 26KB
SHA256 3700bf75d75ceef47ebd6df7df9bafb9f7b7dcf22fc537f227db72ccf74c476d
MD5 6f48fbe8c1d66121fb930d01cee4cc95
SHA1 1cc8d8afaec01f6e967818a484fd7aa509624ecd
SHA512 3fe0dba909f19ea448ccf6e3874db0b6709737b215107f7b86fe35c3b911b200ca37dde2f1377f258fd265caa09f93af49ea5b239b05db5c3442f48c5571942d
SSDEEP 384:o9WZMDYtid3v9TaTG/FwEzRjz6rMwTbFmDWsjINWJlNgoR9zFiXS:0WZMDYk5pdO/09zl
TLSH
T19BC25B1653AC9333DDFB2F71F9A1C4952E3997E6A801DA19689E700809777C09B3372E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Binder.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.Binder.dll
Size 41KB
SHA256 efc13893ebfa02cc7e49ac13cfef68517c4441a33210d67956e7488b8e6b277d
MD5 2290f7d234bcbf93459adb8bb0745275
SHA1 e5f4067e40be7685d35d7cad76ef7768e53b078d
SHA512 7ffbedde32c75599a7c9f5ffda297f5a7f58699b05f7b42248ef28b0bafbf33ec9bd4fa27afbd6dc8f97b7d4ad61fb43cacc19e96fdc536429efd0a494c01baa
SSDEEP 768:DsjeqKLvg51cjLTwE6ry/v1rt4m37oX9z/5Y8:DsqxL451qUE6ry1Wm37+zhY8
TLSH
T1B1134C1793EC872AE9FF0B707471A4224FB6BB917926D6195C89A05C1D377C08A3236F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.CommandLine.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.CommandLine.dll
Size 23KB
SHA256 a1c8c9728b0dc64dcd975f82d013a1b7bc0c0133e46a94f29044f16cad6072b6
MD5 584eda713ab7795fac1645ef6f3352dc
SHA1 231d179d15e5caac7de89cb8ad71b9d0db1f82f5
SHA512 07f7baa9912b3e17239a601e33d40b329788c3cfc47d03626a0ea0c4f1766a3a9184f4c354715136878ea444287d1ffa6ff97e5cdb11020019babfb5dd9e1db2
SSDEEP 384:/fym2RBaP8ckJt+KAW9BmnWElNhtIscmeR9zlQQR:/amEEYRAvtI7N9zh
TLSH
T110B24B6693FC8317FDFB0E71A6F1D5512E39ABD76811E62A145EA0080D737C08B72729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.EnvironmentVariables.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.EnvironmentVariables.dll
Size 21KB
SHA256 bbb26aacd4ba67351d3740106bbcc5544827d98d91b48109362988147ae7963e
MD5 177dcffd43ac45b58a0c42b2c7b99c0c
SHA1 f61334d03d1050174a90c300c19fa29c39517e64
SHA512 3ef3aac0bdd86d7401d363f8d4d4771e79402c1459c9c5e5f1f178b4300cc9fc67b18d8af2c2d1f742f3a22f556efe5f554336db2e6126ab536344d1cbe65581
SSDEEP 384:v/dUEK0NrbQObCWU+JeWDlNBki+R9zd17/:v/UmfNxE9zj7/
TLSH
T181A24B8197FCD106F9F77FB4D9F9C9662C35F7D21862953A006DA00B0867B848B91B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.FileExtensions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.FileExtensions.dll
Size 26KB
SHA256 1830c601c1b155c54fbd3a6844453dae87af14eafe763942939d06905035130f
MD5 ee6d71766d2811851d8dd808384b5d83
SHA1 dc1a15ffbe9e406484572c21a2e94052099b1461
SHA512 bbf23f5c8c1059d48e04b965fba41921fb5346117c46792b218e07ed123be5ff1397781a8ddc68bfac44a0a9333442015dec3e67385a9a65633a6fb93f207dfb
SSDEEP 384:SNHfs86q0/ALi2iTFwLsdYyOiaXAzpkLqWqKl6WYlNorgFbR9zBTV9:Sk92/VyOOpkL3/A9zD9
TLSH
T1E5C25C62C7BC4213C9BB1E71A9F0E5022E35A7975C10E66B59DDE00D1DB73C08E62B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Json.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.Json.dll
Size 25KB
SHA256 e106f8bc13df7168294b95a6cdbceaba47b8eb7e562940eb4ef038db6fb1f2d0
MD5 e0a403e5af381beb4a47945fb5155ca7
SHA1 31b3051b7622207f803333e799461f9182319fb3
SHA512 0828841a0305e043f2df522b8d34c822d13964d870f08e1af0c461dd22a957088b0c44e2a24e877e87aff91a3dcf09f71b225e3e83982fcd0c80473606babaac
SSDEEP 384:5iemM0/vv+cFsbTRo9ge1lgzWkWR2W4lN4eFbR9zBOViT:5iMCzFsjfGG9zCW
TLSH
T117C25B6257FC4213E9BF1F319AF5C9412E39E796A811E71E15ADB00808B77C48E7272A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.UserSecrets.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.UserSecrets.dll
Size 24KB
SHA256 a310bcdd868dafc0efce5b03a68cd7af5d4fa0d06509ed4b5c51ddc1758e9791
MD5 249b5a3d38956616eb522a7c7214d0cc
SHA1 1b39211cf7978386ce9589eb88983deee137c3e4
SHA512 03d7b1eceadca05b35a14a3183ddb406d971fe61c217ffddd9d2ac9c187f9ad2cc6cece04c9332096b1396397e0b2398002ea4d3e8d0ec26e8e6a4d5246b3bf0
SSDEEP 384:o88CyOBc4Rm15FApdE1wEDW9ytCWjlNy2jR9zGGhyL:o8ByURi40uw9zwL
TLSH
T1C4B24C52D7FC4332FABA0E73F9B5E4452E38BBD65C11A61D109DA009187BBC48B32769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.dll
Size 42KB
SHA256 7a883c57d00808ca9b5d11bfaa2c5d21f714ed7560e781d7313d65b09b88b6c9
MD5 3970d9bf37ecb6cff7a394bdd25ee78f
SHA1 054b4622b962ae25446888ddf5ec823e340ff662
SHA512 950d50379cf9fe0fc8216a1f786b4c0322eecdeb390098e8bf855dc40c6901de1da110ddd48650ade001f009a815e8151ba72872381a16c6b2e96167d7fc427e
SSDEEP 768:LnxYrISYXrpu4dAn9RY5Pd9Lgg4vScADpDgOlfe9zb:LnxYrISQpu4v5/cANDKzb
TLSH
T153135B52536C8B17D6BE1B73F8E4992A2F71D2476815F30D9C9EB09908AB7C04B12737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.DependencyInjection.Abstractions.dll
Size 63KB
SHA256 c2a34d5259e6d6c0af43d9b926454105e80e7657dfed901d845100db254de89b
MD5 8db369e1139ba14a6208ea8df983ad0a
SHA1 62e77416f1f25a91c3a5140e3635414af1b8202e
SHA512 ef872d41c7775a81bb2dcbde47637cca29b4b810f2671826de042129e9907aeb2dff02a1ab684425cfaf7b2f48abc6e9a4f2261a4bb4c15bab70eba556f93633
SSDEEP 768:z0dv145TiKK8sfK8wUcrioA085JW14e2KSpYzRTzPdH9zJ:z0P45TiK3sfK81c52W+eHSpYztzldzJ
TLSH
T127533CDD37FCD373FBAE5B722A7390C09A35BA531401E70EA98550EA0892BC88551DB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.DependencyInjection.dll
Size 92KB
SHA256 4d7fb7b6a171047984a8316b1a355c65e33350c343f4e0ea2f1233be457eb7e5
MD5 7835c72d7fd691ebda152797eaf1bcec
SHA1 8816449c02b9424b7058842f161772fc489cbd86
SHA512 aad53dfdc5ee860b2a6d23c961005609f2ebb02fe3913750a08f31c81d9526e2dead96d4f233c12764e8bf51b6449ada833bca9129e6b77b3cdae6c3b6f86fd7
SSDEEP 1536:hrzFViiQfeQJFi5+2H2SOETeFRdRV6ZTzzIYn1Y6zQ:xFUiQfeQe/9eT6Tzzx+6U
TLSH
T159935C3963FC8F21EAFF1A75947141054BB6AB4A3403E31E1E94A0AD1AE3FC547713A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Diagnostics.Abstractions.dll
Size 29KB
SHA256 0a9e51f2d4861367908fa058da82b4a0deb6f85f6ba11d3c90b01c848b1fcdac
MD5 436f31765e8a25707ef3770a4880cd5e
SHA1 a0d63c5d8cc9f1644d85667136c73d7c337872b1
SHA512 9d5c163d8453e5784a79f8708d67f9304f0183a61b7ec2e54e0d4d772aa79c5f7afc726dfadec753e24be4a7743380a4bdfb39f01ad1f2a22edce64386c34243
SSDEEP 384:MLdH4vpxJv3H1yPNdc+bXimUVG+KWOXcRWVlNq1wGjR9zGGW:4dH4v9/yVurn159z2
TLSH
T132D26D41A7BC9325DEBB1E31BAA1C4023B36C3576811E7664EC8910D1977BD49A33B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Diagnostics.dll
Size 34KB
SHA256 0842e20c25240aca53809e005776eb88f53a61128c632c4c6fa8685b9f66c4b7
MD5 f14e4787e1accf6c01d433eaa0e30dfd
SHA1 3cc40e3e4c0645cbc8fec59e9bf59673f458029b
SHA512 f0d6cc32446f4cda8cbec48e8e5413ed3b8ec7bcdb8fb710013993feade52317438c44cb180394a6f71eb6164b9cbe170d6d284ae61a71a1d5da3ab5ec50b373
SSDEEP 768:lY4wbeDJl88xZZcfqnfBTdqdgWO7N9zal:lsClF/e+yOWyvzal
TLSH
T15CF24A56A7EC9322D9BF1E75AEF086061F39C7836411FB692DEC90990D777C08722329
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.FileProviders.Abstractions.dll
Size 21KB
SHA256 02f38beb848fa01fcc55f0cf3982ca01e1a5aeba95933131a197ef602a130763
MD5 3aa27844975c473aa34256bf9bcc8b6d
SHA1 16f9a31d79dd248c034ed092d40dc6c385ebee65
SHA512 95ae823dd74af65dd3c9ba60e676d8110a6293297a0a6cf53aeafc5faeb12431538d83d46adb0abab8833b12458eca29f3dd9a3314d72c3a72f99928bdb9f442
SSDEEP 384:N3tt2JeSlo+MVdUJtFEWsHMhWGalNFGoR9zFiJn/oq:Ne5GQfr09zQ/1
TLSH
T164A27D26D7BC8363CEFA5E3069A4C9476D3DD3DB4C05E51A1589E1081AF3BC48732B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Physical.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.FileProviders.Physical.dll
Size 43KB
SHA256 e6073f96262a3c468c5024564fa02df0f36234242b392c8b658b81bb1b9d968a
MD5 887259a796ae6590749fa3f0d78b0cd9
SHA1 6ab7d026ff5fc8fc0d92b51f29e492d8b33f8c5c
SHA512 41e7ba5f26060b03430f3da154ca8cd691bb287008e78661706cb449bfa3d3310342dd6e408a213df7c1366ecf89e8d0598d4dbfcd8c1d54039957e8a5c2edaa
SSDEEP 768:+kjPlCVm7Ej8zP5usGppdtUqISA3SngVE419z4Qt:+kJCVm7EihusMpdtUxSqSgVE4Hz4+
TLSH
T181137D2193BC4307CDEE4BB16DF0E4460734F3D72502F75A0D98B19A29A77C84B626BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileSystemGlobbing.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.FileSystemGlobbing.dll
Size 45KB
SHA256 965a5347b125d232361dd08027ab263ed1d042b0240ec4a4f29b7a0bfd74bb28
MD5 39743aeab0c21850ec0a8e7830ad4370
SHA1 c897d4dcf3bf039cf766f940f117701a0c5b1eab
SHA512 a79f377a64bea1c532aed4ce33abe17af9e888a4c89434a2310af7e6e3845333fd5116f0b1475db06f9c09d243f09b50ac5245d10dcac0e99a56a48a68f832a5
SSDEEP 768:7rw185npIg65BZLzI1Vp3aPolwgYakfn8OmVSfem0TgvJKMd9zH:7r/pkB58LaP4wgYaOYVSWpgvJKM/zH
TLSH
T108234A8066AC8223CABE17B8B8F4D4524B75C6B7B412FB474ECDA9481CB37C41A61777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Hosting.Abstractions.dll
Size 51KB
SHA256 57c2528e1f2b3872976661686af9bcbd0612de7ee6b4ef4cfe92b746b27aa1b7
MD5 c32f6f4402d1c5a9fcd2fff1e20a859b
SHA1 3732c98212eec17ff92759599fe91cafd1a8d711
SHA512 4bd18b34de2e0135a8e00616384033609fbb25804457cbd6cf3d363d7f2e3c7d4aec0e9f99e4a75b3abc87b8dde5ee0e6903dcf3afab80d962cfef02c7532a32
SSDEEP 768:3dfIvk8cUbjKbhY6Om4e+X9CzJ65Mo7tKoV2nwsyQQZt164yCmi3FbFi/Up2cK5J:5+k7UbjKbhY1TbUcKo+bozqrH
TLSH
T12933B14163F81615FAFB3F34ADF891258A3ABE66B834F62C064945DD09B2B80C971737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Hosting.dll
Size 69KB
SHA256 ca135e4b48abc2effdb6fdf085837966c35f3a8a305744429009dde946d633c8
MD5 14ffa2d36a6d50f71e904f5d0deef146
SHA1 63c60db8fd1a63be05ecafe119d61fe6d86bcb1f
SHA512 09d1ca0be3b43235f97f5739bb5e443adb04c0d34ad6499f7c50dbc64eff351e0b803ab0f8968bbe9589a88eb41765597b9b9b3fa623f6841ab98b6e4d66f9ab
SSDEEP 768:mHcMciLWJeEHq8SMj9db9KKjoDpxdDozzCF95dnbOCify7MYzWUAKCf9zPcx:mHTfEKjkdbMK6PM8nbOKVWUAKozPQ
TLSH
T15A634B8363AC4713DAEF1AB9E8B465691A35DB576414F70E5C8CB0D90CE3BC44E2272B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Abstractions.dll
Size 64KB
SHA256 4ad4a3b2bed7f5f293f83cc2c46169b93a9863b89428f693a4f17863704f47aa
MD5 a5cab35625e1f365a9181f4e059023b5
SHA1 1f8fcaaf8a0c512e3d33aa7caa0b452227459eed
SHA512 1fb963e563d774df6ad87fe5b7a09fcf0eae1413c270d4b01022e94a00057fc917919b3f4f6e03bb45ac47286dafe763d40ecd50d3ecc2ae91ba122c5579531a
SSDEEP 768:vRU98PjrdTukvp6wV1XxMyVYB0wwbru2OkJB7ix+WTqoU8/Aj29zg4Q:JTTxvcwTWBkbru2b7OZTNU8/2Cz9Q
TLSH
T1C4537D05ABEC4377CBBE4EB9F89096410F35C2472547E79B2CCCD125A92BBD44E213A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Configuration.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Configuration.dll
Size 26KB
SHA256 ed0a70f939dc8779ee85802e926f138e284828ac14d44831ca68fdcd14450b5b
MD5 477d8b5d7ab4c9b2bc918ef5daa8b45e
SHA1 7486ff87665335aa215bd589d19b98f546215eb4
SHA512 2ece4726195ea57acef015ee2b10435a50af5eb39d7d2af01d13f74cb9c6b6d1ceef4a232f81914bcb115ef52bb47641e833aabe4d19c8933cc286f2312f0883
SSDEEP 384:SPntTUFG4562BbpdL62S5p2X/ckWxsmzU7RWJlNdki+R9zdq:YtTJQj220gkU7H9zU
TLSH
T13CC25C6697A88326E9FB0F71EDF0D9453E35D7925811FB1D189EB00804BB3C4872273A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Console.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Console.dll
Size 73KB
SHA256 84ca5528a45074f18ae4234956de55d238a65be39f914f88293732dfd3889a35
MD5 cace87a409706f20b3ee8060cb9f0a16
SHA1 e7c60278a72a6ad5cfdd80191c09d91abeaadbbf
SHA512 ed21c6547c2df2cdf61c3070254bd6439a30d5674523823d303a0a96e40cdb64a91c887ab4133ead3d8a48716f7679bb6b2c67b22461d9ffef48249a5e5e0019
SSDEEP 1536:31SU9VTLpoGSWZdHPIcKPmUwzF9U8o/T//+Fv/HENqyvzM:lSU9VfpoX+JFKPmUZT/WFv/kkso
TLSH
T135736B1A5BEC831AD9BF5FB8FC7091015B35EB53B803EBAB5D88A0AC08677C54512763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Debug.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Debug.dll
Size 19KB
SHA256 ec47584ec7344dbe9b3ec5740cf493a8dbf346e467d6855e24be33555db11983
MD5 b1d351bf2b284e0969f1bcf9d6be1b58
SHA1 64fab26c768c8b610df90baad8e03e7759309f6e
SHA512 98df861cf32cf09a00688626d706b36ea9a4c3b5bcf76f3675039e43268a82cb6632c05066b361440c5f88806cfad0955af1bd4f9d0373dd796b369084a6c385
SSDEEP 192:zVfPfwSGE5QJusuqgQJ9j578mDAqWJIxVMW0WF+GBTBWseaAWDiz5j4HsX01k9zM:Rfafu42mDAqWJIxVMWJlNVIR9zeZ
TLSH
T149924D528BB84206DDAA5F30EFA5DA42793DD3979511DA2B05D8D1090C93BC4973262E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.EventLog.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.EventLog.dll
Size 24KB
SHA256 f70b8392447817a4d44acd5785e0bc029a2844d5445e05b98d95b237443339db
MD5 8210308568d5ef15f758ad21fee0517e
SHA1 e0fdd76a63aff7195b38976882e88701bb6fda57
SHA512 5decf964bfe472c2083bf093709da87a4577fffa9a22f9db757a9c3beaa83005a26599cf2297c9619522b3b7682af8a279dd5dcd5168808722b3d78c71814644
SSDEEP 384:0cqdNcIPJ51NsMsOBZgmVfVej+yUvW2rgFW0lN4tR9zj4O:VqPPUEZ9kUEAP9zMO
TLSH
T19EB25E429A6C431BDCAD4A71EFB5CD42397CE7C76812DA260E9CF1490C637D48B21B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.EventSource.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.EventSource.dll
Size 33KB
SHA256 665d5316f601ed6dd9daa6d7534610ca3a7aa40e4d117c079ffb118ea2179b2d
MD5 b251f77d47b8ae95b7e6c48caec4921d
SHA1 e04dfe931564d2b0bd967dcadb4d0f807743775f
SHA512 a1e85b95d9e65f4274a6b6dee8c5fac60a0890f8b521c271458c515d0860e48dc96a91bde318e0c89a080e12a29d690ee7ab99c8a3242dd3ed6b10b7c5b1bd43
SSDEEP 384:YJ3OpOC26rT++tIwa7Pmq8JKUNFUDeHQiXA40zKeGIGJyF7fg12Pahfv0mvoW3gU:YIV2mqJUNFoOXpycpvmQlfe9zq
TLSH
T128F25C71D39C830BDCDD1E34A6B8D982153BC79B7921EB4E5E88E0880973785972376E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.dll
Size 49KB
SHA256 48bd4a0d323e0ae85fa0469779bb13e92c4600b0a49dad6bcb891047c5e17caf
MD5 eaf823ed830e1f448cbe8e1ad95a76e1
SHA1 6539c17f608ad3691e96c23bbc3bb3b55ae34b37
SHA512 67a3d77da957aaa0fe4f4434c054f51886528640603d4e027d5f298e322964ca1061d40f99ac9169df45f9a4f656d050f4d3dd2c0b0c4a7ffb5d20d84bda2735
SSDEEP 1536:uwkwf/Pqv0KvNDmBRZlDl9PQ8izqu0PpKzZ:Dkg/WCXiz0BKF
TLSH
T1D9335C6147EC8763DAAE0E38F5E4D5545B76D76B6012EB536ECCB0A90C7378087202BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.ConfigurationExtensions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Options.ConfigurationExtensions.dll
Size 21KB
SHA256 3057894505e37852ac77ba70007a6b075980be4da9c3afcdb7a37e62750bda1b
MD5 8ed48fb1ee04b8180c8a021b8c9289d8
SHA1 4e4be474d90b13edf1365307809edab6ddfb066d
SHA512 ec0f2d7c3b75698fea8bbfb3c38771a358934a69aa25739ffe52939ecc25309c741aceade75c3b96eca4f778c7edaa33bda4180de993f3dc99b5ebef27548273
SSDEEP 384:ty1JDVIqRW7eGpX7SOxYWV4lEdzWzAr0WClNetR9zjrT:tnBR4lEdv1P9zfT
TLSH
T14CA23A528B5C4223DDFB5E71DEE585923D34E78A5911DE2A02DEE1480CA3BC8DE3172E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Options.dll
Size 62KB
SHA256 4e767f3c0bf37199a83b8697fc9431d907fe39b5f2763f83381865c89ea6545d
MD5 6d0db347c73a12d13b4207aeef1bad55
SHA1 7d8afb9e7aee839f6c03d6a8ef6ef6791523e741
SHA512 e1db3fb8a552c64c2030e3724c39930c1f9ff749817fcb2aa2286217a13b333bd73c55dda764fbbfcb2076b473b7aaa93f6e56b30fa704b400b689e73c76f3c2
SSDEEP 768:WpWO5uXespQkuvhuVyI4vrKilRrtsyQYGiuxseJyvmpqsS7WdP7NszuatX9z/p:WAGghwMII4TpsyVOuvBBSBouczx
TLSH
T169536A2297CC9712CAFF9671B4ADA4520E35C35A3A03B79B52CDF0D81C773A18A65633
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Primitives.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Primitives.dll
Size 42KB
SHA256 b5e8630df19605fec639873b86bdff6f9d424db88d181bb36a0bd641558c18ca
MD5 b252147211deb74a9d91401c4387b6dc
SHA1 e237368996fdb43315f2360d1f374cfe9a0d54f9
SHA512 05ae2266296a182ee4fa267e947f4a7cd1d4d6787c4b4c1fbc3ead253ad6dfbfc2d26409fed457186579fc9540e83f2d1ccc15c78c3cff1af2deb3a88d54e137
SSDEEP 768:6PNon+YcgKF/1WfRzT3YWkLzZuORP6eNbOP7yW5yKyqLuiM+30XuIh7N9zu1X:6Gvcg61WfkFuoPzNbOP7yVKHLuiM+3Jl
TLSH
T1E3135B05B39C8333CFFE9E75B5A1C4152638D3A6B522EB6B60C8A0741D637C4477266B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.DiagnosticSource.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Diagnostics.DiagnosticSource.dll
Size 187KB
SHA256 d28e247dc8b6af02968b65fe6aae25c2ee689d2007268375d63347aeac0bea6b
MD5 f287490a129140fa1bd94a7247f49b37
SHA1 9892801cd4b7fda18461cab464a1b00e18f52217
SHA512 a467c7855af63771138b95a62e9b541f81de9e1d44519dd68a1c894167cdbb5566392d196f75ebc88c4e9b4c0587ab280d4a1ff44309d7522efa6738f60e3d13
SSDEEP 3072:TRQdeGkopxoribSSiKQ7Rt2wS6XkzvYaLKlllWFBx21nRlviQYVPXx:eeGkopx0igKQlty6XlabBxq7vzYV5
TLSH
T184148D2073EC4B26DFEF1B39F470C45607F2DA4BB54BEB886A85A4EC1853BD1460126B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.Pipelines.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.IO.Pipelines.dll
Size 75KB
SHA256 a3c80d0bb52e0f5afc73638cfe5dc25e3470e5fdc0311745aebc8a4d4cfcba35
MD5 726b6639602ff3b58d037f99b3aa7279
SHA1 ac1b1635a3219b436b094ba633743fa32339a974
SHA512 12d4b0930694d5e13edd1c715891b931f2e9e692e48bdfac35675cc3d589fe58704e6f4b66fffef0615a4204b67b009671523f810a81bcf5a6a1c167c5b38134
SSDEEP 1536:LvXUpt0U320mvAnfAWF/G4bgN0xmR9ewEcXYzIkCRwy4PzJ7:90monoWNG4bgN0xmR9ewEcXmIkCCy4Pp
TLSH
T1DC735C6843EC8717EBCE1ABDA17145230FF2DA666A13F74A944CA89924D77C006263F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Cryptography.ProtectedData.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Security.Cryptography.ProtectedData.dll
Size 37KB
SHA256 ce7f4b80de12f227ac637915470c5b6b6a5d716456835caaa0b1600c3cbdcb6c
MD5 1f39c7f724597435feed4c6e8207b235
SHA1 cbe9a23badf76bad2ef913cdfe31d86c954d19d6
SHA512 f9b33dc2d34b5a1f5dbe1840685f85104a3e2be109c270314cbecd6d0c6a4e3f84a5be5ec8ec417f27ec7b571515bc578380bf8de4172790ddc7ddc8117c29ba
SSDEEP 768:y8I8P2QLEx7FiC7YccT3zoCaw2Lw09zaJ:yiP2DF1SjoS2LwczaJ
TLSH
T194036C21A7A8937BDE5B4974B931E00A783C8E498012BB3DD5C9614815F2BC59F32FB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Encodings.Web.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Text.Encodings.Web.dll
Size 64KB
SHA256 8839f3cdeabd22f5952c4673367ea41c921aeb0ea26e18fb23906e2cac08298b
MD5 6c8c3061f7f55a28ff30bcf3ee7da75b
SHA1 90e54da4dd85e168d294d61b1e42480e9280bbb0
SHA512 9b715a5594d298e68bbb5db933bf2719b0b4b7ec2807e256981dec73339fe4d7c2e416b9aa856035f61209b2a83e9b6f0903ec28b15a4837f43866f3ab908d62
SSDEEP 1536:0jLlBxsNNJM4PMZSFdmTa7/hQ98av9Yzm:mBudv3/211Y6
TLSH
T1DB535B11B7C8E51ED75D06306CE080B0A7F4AFDB5126E6C71C957A0E27B3BC86B1929B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Json.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Text.Json.dll
Size 660KB
SHA256 bb53577c13ab01f397585e4bb642a1a89f1af91b70eb385c7c05b82b9b912605
MD5 e1134858b6a45565531cb3c3a1a26df4
SHA1 8c7986c744b9bb668f1bbb37934528ac38dd0bd0
SHA512 dd4c350ab441df58e08bfd208cfad384f47a676300f9b5811bb7be14b81bea9ce18debceefcc4ae68aa488551348f20feb8ae09b4d2220dc84a401e1e4f21e5d
SSDEEP 12288:jC7e+aoa/8Jbxfap97o6WEuy68/aUI5ABlr9ZHqdKC7vZzhYQ:xoa/8Jbxfaf7o6WEupX5ABlnK8Q
TLSH
T134E45C10B3E84B2FDADF433AF0F040058BBAE46AA75AD74B150854E92CC3BD19E556B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Velopack.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Velopack.dll
Size 261KB
SHA256 b35698f5f66978d7bfd0ab12a2a2899f05912d9a1890d5e64c2dce9bacf2662f
MD5 2c29bf1bcfe53f779a9f7d785601dc8a
SHA1 21d134bb5661ebbb4819500aaf829ccfa024a9b4
SHA512 3acfa65169390a7f9af8ac66dfa9684405bcfcc4e61fc04df80ee3bfa25bea4bc8a41defd7fb9290890285172a97f663d95774a59e274fbcd1f8b5f44d533692
SSDEEP 6144:qo0g6Hxg1smn4oGalxcB+KQwCyknZylyZ8Sru:qLgAiWHoq9CykclyZz
TLSH
T17A445B0037F48716E2FF6F79FCB0600686B5FA07B8AAE75D0A8458ED1D633509950BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

VirtualizingWrapPanel.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\VirtualizingWrapPanel.dll
Size 55KB
SHA256 8b59a3fbe3a041264535df8f0fcf0171ea633e57a9084882b9fe6c220181b3fa
MD5 11f5c40f0eb1d77cf27649a87c16756a
SHA1 68df2bee69e5dc45932f72761d84dc9ef33fe4fe
SHA512 408bd9f3b5863a66acdae09d3e46d4652b257d83c1adc2b64b6c6ccd3cb54e1f533fc60671e5fbcae048758e614afb443cd9e0c0ac96038a631dac81b022c397
SSDEEP 768:mr8nle6jhM5Cn8j72Plq2yHeMcBL1XXG1ulCF8RuEF07qEwtIn:mgnlk4Q2lqr+M41XiK4YvOn
TLSH
T19C43190C23AC8A37EB9F13B9A87011140372A567BB71E799899C70EE4B677D101257FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Wpf.Ui.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Wpf.Ui.Abstractions.dll
Size 7KB
SHA256 f504e30e37a74936ac14f14de4ac43c291cb3964eda71cdcdd61f27cf15cb9cf
MD5 eca262214bd112cc4a0a225df5f43210
SHA1 275987463805d018677c1e093d072a05ffda92a3
SHA512 099fc0c607af839d933b0007b37739897b67adb07ce309f5926da845b857b36b640c1d60ac002a405db73fbaaa793ecb0f54fd1e647c838d3188d80f51d0b843
SSDEEP 96:vClxi89zX2ekdeDm4mgWoQdBTHUhMDADUlYpijY39SOkX1hHN:vClFDc05mgWoQH0hMDADcke09KXDH
TLSH
T1F5E19221F3A88332CDF74777E8BA52845730F652EA578A3F199A510E5C2A0591E32B61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Wpf.Ui.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Wpf.Ui.dll
Size 6.3MB
SHA256 3466432f74d1d1224a55f71b8dec7b2913039e01ee32b7304fd9668fb76b797d
MD5 17b530002d305ce72b8c40a1c6ecd70c
SHA1 0be2703f9866699c4e7497f62141abc1b31ff57e
SHA512 3dea4eafa04fd6a9381921eb98526386319906153007e6b159e7437a32d6fb235ddd5d0434d13b58bc41a6f535aa718d29bcd43d101701b810c793b2358e1d4d
SSDEEP 98304:89xe/+FOvSmaRf+UcDN9NppBLxAHDfyLrZl:89xz8N9Npp
TLSH
T131666C5E17ED0D36C3B3837A8DB073222DA9196A1142AB834F4EDF2D446A2C4CDF559B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.EventLog.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\runtimes\win\lib\net8.0\System.Diagnostics.EventLog.dll
Size 171KB
SHA256 59fb8f95e34b4dbc41422e801ca9456da5ab70508d773e42e2ce1c60de38a88f
MD5 6781d2fc53d3682151ccf369d797d673
SHA1 7862a6bc28ee617abeb8d70c00da380ef914072b
SHA512 fc6070ad003a38c69944990b26507821a8c867f5a4683a0464e47a9efb201fcf5b0afb1ec60359b32e412edf521771ca4829b19e7a2b3d75d1d3082a5521bcfc
SSDEEP 3072:RfT/zCfxCsREbOAvoFY8ZHPfu65kt+EIx/LJQYyaQUoj9:p7zXsRIOAwhHPfF5ktyrfy
TLSH
T139045C7573EC4B1EE7FE1B38F4B011258736B996A93BE72D458448ED09637C08A207A7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sq.version

Path C:\Users\Admin\AppData\Local\LuaTools\current\sq.version
Size 534B
SHA256 f76fd224a8b6e7cc3743d8f2e14ffa932c256b546fe69452e6ce47f7471e065f
MD5 90832090904861be43695e22bf31124e
SHA1 5128a8b8777bcacf991c9c415ddfce00706c8858
SHA512 626b89fea1f77445ddee08316bd7e9bb4f999be28c5bdf8ce63003965b34b8dfe319d1ed3953db93d4eeb65a032bf2b787127905df3d209d7fd590ff53656da3
TLSH
T18DF08B85A442D60645931E4964E14104B3EB7E6F34C848D0E8C88CE8238D2EEDC2FD51
MD5 SHA1 SHA512 TLSH

Submit Download

LuaTools-1.3.1-full.nupkg

Path C:\Users\Admin\AppData\Local\LuaTools\packages\LuaTools-1.3.1-full.nupkg
Size 7.0MB
SHA256 50536b4583d0e7cc5d88db95e7b6f6f0c3ef68e8f99f10e99571a2bc18729a2c
MD5 463acf44e69082b452a04cecdd8fd603
SHA1 bc8ba141e74863341176f851fb04e8a1313c34f3
SHA512 837e3d4af9201f8c8ef9ec77b90a6bad772ab960d6f6914de1a276a72f2f1c82b1feb7388843b218b495f3ebe188dbfa9137397aafe959b8dbe37a14d47a006c
SSDEEP 196608:/2s+0040yF5NF9jPnN4Sw6qHn3ILn03t+6E4Ud519Y:On60ojF9jfN4SwVI70bUzHY
TLSH
T18E76331E036C9AE3D66FE670903D05EBCB92796BA3C1339D412873D35ECE6B9C614189
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 87a6b56b3a47cfd9f58f49b21d0040033c8cfd80b50e49b434794cefa7e29583
MD5 74ef2da89fa243ea7d0030317efca192
SHA1 ceb38f6fe8b62f80d617114db8b4617467417ae3
SHA512 285847f78095225db6f446ab877593c3e8e9c642b3beec1b15e7b1eec59d6b2f61ada0e2fb96cf36a3046dbd5102c274473cea5f978ee83b010039a4dc00d05d
TLSH
T10DD024C471D0340CD40C31335015CD011744CD54F00317C7000D4C40C4400C40CF1C4D
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 61a97be736e0441d45644d31b38bd9bef6c1bd260fa1ecbb5d099fa493fee6b4
MD5 99bbd8400adc948f85ebd87cb24b3fcb
SHA1 c8fb9564ede7ecb06cef446bdb527025127a796e
SHA512 75b3ee70eca487cbbfb3d5b4b25bae158ff99188ab36d55f391e9f80c51ce9fa433897d79a0ae37ad64698bc3eb5aa9a10a49116fb8f7f35ed0a6e98aa8321b7
TLSH
T109D022C8F2A0300CE00C3233A02BCE022B88CEA8F0032BCA000E8C80E8800C80CF2C8E
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 9531eecbc258a5a0d98347b14b69c02d1427ca82b5c1176e328b0fa07d486c1a
MD5 9a110e697959195f1b4fe8d47fb28b39
SHA1 59f5e7673f72c72e33ea95cbf933efefb708ed82
SHA512 088a9e181086010a769ec60000f957200a0a1828b943e2f54e63728432d2b2ffb529d4d80c1d23f3eb61a680ff0d45488d8a8b8af051eeb320ad0c595513086f
SSDEEP 192:MDfOt6v4MNixiK6mBBCWE07zXpQgOK3waFk:+v9ihtBBp779OKAa2
TLSH
T136E1C988DDD494BFFF11F37682A0BE617576257D0C422F3AA306D9B9C3DB3812218849
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe5ad572.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5ad572.TMP
Size 3KB
SHA256 68c5971980d6f213eba116c6638ee1997faa7841037b5a0d2ce015a8d9ca227b
MD5 180fb13fe2d4fc24b08a961842a4863f
SHA1 8816033fb83a536ec3076b15e22bc83d064ba6f2
SHA512 fe8c87d3519d63785718ad19195231f806e6afeea305fa0a95e47cb1280580d26d9b85b79042d48d1158b40145e8f5b3bdc9f002f58cc0b9acacd81e48225598
TLSH
T11261728DDE808577F794C4B187D131B77AFB44B958833D32A3ACE4E98B467423350044
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 211B
SHA256 650df6b9e17d16dc4092b7fa39f4cb8f07de66077ab16c6af89d41c1241379b8
MD5 6df82fa0826d53df600f2bdb3f16cc0b
SHA1 ef2f1f087d251ac19e1372128dd2138b4f7d99ee
SHA512 5dbf6242e8e5f29ae372e751ed541b5e1e2fcf44cf279230c529cc61b0665ed18163b4b01ba000866d24c995b97fb7a0e381fe2a11e2f45d8804ffce6a706600
TLSH
T114D02267234AB1BAB9AD3E91406ABC8FC3F700300883DDDD14E1A9D9963546C0957140
MD5 SHA1 SHA512 TLSH

Submit Download

Sdch Dictionaries~RFe5a7a42.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries~RFe5a7a42.TMP
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 d45ff10d9f9af46833627cd6776f8f05540694609babe47d81b09840be604a4c
MD5 789f2685b6a8a42ea7d845afc8ec5510
SHA1 480bb32f70215c378109fbe20f0c350673584f17
SHA512 ceeb93d06ededf265205ab3cc003cb415bb3642fcae37bf2fb04a056066a0909f1f95bf614f05e7d83c699809b2841d5fcf36f9d342a3242b2512f6a3c6e9217
SSDEEP 384:sxZiXmzo/fcs4KLRy6qqBZveHb9o/fh5fwS:sqXmzo/foKXXeHbop5oS
TLSH
T19A72C7969A24D4778CC7C919BE35BF52D7F500629D821E8CAAFCCA1C04DE5FE260781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 15KB
SHA256 0e629114e4610b1d1fa49966e242358e3713acee39e1984c0117e8d58e4dd6b2
MD5 9624052cb715eb196f3182871ab2fb5d
SHA1 7545d2900d76dd229fd256de724d5d0b289a3842
SHA512 3ccba5260382116377ffbdd77f07a1c1aaacc6cae8f2e6a11f25ece8a8e299158a086c9d3449b3c2b6e7b78d466ddcdcc959fbd12b47320230a95d6cbebda045
SSDEEP 192:sxZiR4McBzo/fcsMK8I8CbXI8dpmBcfZHW6+WNejZeHGF/YaeNJIg44PhfwPK:sxZiXmzo/fcsMK8IB/dHb9o/WP5fwS
TLSH
T16472C7925A24D477CCC7C919AE35BF12D7F900629D821E8CAAFCCA1804DE5FE161781B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 17KB
SHA256 2e7917244bb828b96d56ce3d3f1f9e78f5a06cfed7c8eb9f78474f3a5fefccc3
MD5 16a5507ce4844078a175cb9f7805695d
SHA1 f08527f332bdd616e23edf3cda524917aa2309a4
SHA512 f4cd423acf98d5f140cc588986840064a6257eba75b8974e10665dd75228ad3ef5344f1dfe5fc13e2ca9b5dd0aeee2eec8d7cd8d0ae48ca1d1f956affc5e2284
SSDEEP 384:sxZiqmzo/fcs4bLRy6qqBZveHb96Xo/3L5fwS:sqqmzo/fobXXeHbQq75oS
TLSH
T14182B4969924C9778CC7C958BE35BF12E7F500629D821E8CAAFCCA1C04DE5FE2607817
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 27KB
SHA256 c5a0165d8bd84e8d691b122bcec9087377bac6b7a0a3892c4800cfe29c90eb1c
MD5 70c8f8f928f40aaaaec5f1fd59122698
SHA1 fad733d594ffdb35d8cb8fdb39d84d2097ee6084
SHA512 dfbe49485638cc9e9c688c79f3326a051b3b14eac944b29b1d8d0c8795237706d9692c558635f1c9c1c7b32cdaef75a312784f5aaf2810d225162b3aaf496f4d
SSDEEP 768:T4yQRMrWvvlpZ8F1+UoAYDCx9Tuqh0VfUC9xbog/OVhKLlRXH3proHZfR:T4yQRMrWvvlpZu1jaGKLf33CHZfR
TLSH
T122C2E93B640CCB7E4FC01E9DDC6A6F976EA802C766688D4047FA994C02C77EE51264DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1adacc9b-26d6-441f-8c91-36a9b595a034\index-dir\temp-index
Size 3KB
SHA256 cce732851c0bb587d990dd7c7a1d97ed80b4d51fac3e440e2f9c8154b588a656
MD5 dce2fcf35b589729740d7ae00aaee6d0
SHA1 2f26ae99aadecef042b3844070644d93b3e7cd1b
SHA512 7cb57fb1175224dcb9d30484f17b159506ff2d18101aa2bcd2c5c99952d54de314d676626bf7a1c96799210b51fff62cae8ed7b151cfea33f6bb6bef99607551
TLSH
T1C551C78F4D0B6B66DCB823B118B40442333436EC13581A6B98FD5A35BCC32252CACF18
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1adacc9b-26d6-441f-8c91-36a9b595a034\index-dir\the-real-index
Size 960B
SHA256 86eb05d7e44ccec49ae2b0ca74149e4d0b7073ebee93e16a861a5ad84f525c01
MD5 784dae724b63d35e6e5b8d527f65af8b
SHA1 98d8b56712d06e2593a6feb43df761f721b510d4
SHA512 e8f412967bebdc8654393fb4280619768518d5a1d163cd16c8fb94a4b6187aa2f78cc871abe38161f609ccfcbcc7fa5a7333c2457ec2067cdb277297a67050bc
TLSH
T1331144C91D434A5BFDA00239707E9D59677111DC53407A4F21BEE0269CA7B40BE825F4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a3133.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\1adacc9b-26d6-441f-8c91-36a9b595a034\index-dir\the-real-index~RFe5a3133.TMP
Size 960B
SHA256 3b540b67f3938fd72a497b137cb13d624c50f3c2e36a749166804fd38532f9b7
MD5 afbfb6eab3fe02528a4fda315eaffcbf
SHA1 392f41252cc11c7a2bb35b6ba51aaadeee8eb734
SHA512 2e8af084ab6adeaaf9b9c3c8645a0ef15a7fc579ad01e4480a0e5a34f661f1df354a04809ce9cbf63596d68cc2fea112e9b50ae3d11e5669112ddbb0368f5a4f
TLSH
T1171123A501534B57FC4403B19AAD6D4622B6800453487B4FA3A7E21ACC92B84ADC3FF0
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt
Size 371B
SHA256 91baa6dd4070bdbf3b3ea933ca748b2ba76d704e440a0b55d03f9bf76c75792f
MD5 e88b4e1684fa423b6e96fa987d37f630
SHA1 161ac6f699515d5dc2e3dab6f1f7f6910d4174c0
SHA512 8740661a90ed414e2444de36c51d847431a512e8bcedfac7c46ea8e34639ad75d1ef0c250a8e15f79a7d96fd33844f9e3be7e68ecfc2b42dd42d9cd307788ffa
TLSH
T147E0C6BB3EE72800ECFF83E2083140A50005F8048999FC4F502AC7DB10B23823836CB2
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 72B
SHA256 f205c7b08c46d9c2e84999dc05fb09eced2b49d1f1bd327bae11227a984d2f2f
MD5 27c608aaa0f87abff8166139b8b71d70
SHA1 ec76eaf30785e9c4217a62cdec94c06bbcb3a280
SHA512 13abc03174a40c1b1eee3479e88d60c0a884edb0250d6a0815391d3206315ed7acb6026f92f85f8048fe1fe5ef5e57150fbab5c2ec390009460390222e33928c
TLSH
T18BA002A189579056E300CF74E9B1128822759CDC1F05322649EC81ACC891544C1E6005
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe5a9c03.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5a9c03.TMP
Size 48B
SHA256 15096387b123de5be32481d6f1c41a5c36c3f69c91d5336487611f1e276d7a8e
MD5 1ec9c29bb83f73195059e9ebd75aea68
SHA1 205ea5c82c05d5c0b52481172ed2a43f4a7753a0
SHA512 5735442c69b711183c5615dcb98fc1f48367698364246f060237d36eb0f882a7a8316e3cc5d4033df9597a02926d80031ff527dd992b231b8d322acb3a1188be
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 5KB
SHA256 45678de542db3934d47eb6247da348160095562cf9dbe3fbc657b977ecdd60a3
MD5 9d6cb91a7a235a3c92e937179a07edbe
SHA1 07efa05a432ab11868eaec775efa5a317637283d
SHA512 17ce8807e95d5e10081e33c01c5c1c48fa911ee3c92f2285c665cf1f50c08164a1f3873bae22cafa2eb10dec64602b0d963d8f41bcba10ca1fc6a66163c7557a
SSDEEP 96:Ko5aKiwyMnur351JgV9Iz//gK31/RgbP/4xXteKOsy6woKBS8:YRMnur351Js9Ir/z1/REP/4xeNPb
TLSH
T1DAB1960171BB420038BE394D90A5961E5A81B2733465F62B7BBC50A74F2FE4E5DFE8D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt
Size 96B
SHA256 6c6b4ae7a907986b3f573fd9fd8a68d8e2e9142ef33e8ae3c5fc346f7866e01b
MD5 6cd477dfb824434fd6000972f087ca66
SHA1 ff7df2c6d7d99219c38b3b01d5729215759dcf0c
SHA512 dfad3baa02eb1e93679bb59405ad6aadaf262b810f5f9f8a6c77c727efe4c9553d757cdd20cbc4d4ded9f31a92c4e9994bf28d500c8d7cf510696992ddedf949
TLSH
T117B002BF404559955E6965FB001A71D9C86623C9A884DA9894611164221156A1052968
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt~RFe5a7c75.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\WebStorage\2\CacheStorage\index.txt~RFe5a7c75.TMP
Size 183B
SHA256 333f1bbf27b40d5d679768a425ad3498694f26e9fa1c06f653c29d486afd7e1a
MD5 d8da3d94a436ee5ae34a7c0285c382f2
SHA1 5b41e4ec8f1fa3b1d44860765fd0df8ebce7a6ac
SHA512 b89bc93bba958cde2a38324fbe5df62f004a454b263877d47363bbff27fb0c0df7934c56eb201e46c16be656e44975f826c3ef81d6957b2e1a379187adbb4b83
TLSH
T146C0807B154599A57F2975FB402772CDCC757FC45DC4D78C4851702533708561211D7C
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 8be3164b6b84fc69f82d9d44e0929d6534cef3107c89989929b6c4c3fd4e29bb
MD5 4803d9dd58c7bfddba3dabe28b563d48
SHA1 da5eb26affe38ca3db7e58c84c3d0e563ce55eae
SHA512 5bc6fc0009839949814db7222361c607995f881760e98a66f40fccdf1dccef159b737e577a61877c8822571e9fea37f7eaeb0be4a56106bcffdc27651ee1e372
SSDEEP 192:uuktLsNKTsTLQ4DPg0+miU1P5G8Bp5u88P/uhgKpPwojalAF/mdLqy1:nkRsNKTsTk8pLG2p5u8i2ppYotkdX1
TLSH
T14E423875BC78AC37ACA39961F54B36138FB4816B97C86F88C9DC5B1D02DB2D85307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 fa1995af42811e83231773b4e5a5762f3e405b92e9c49fc7fe62687696b451d1
MD5 0cbd3b9e3db85079d00f543f684fea0b
SHA1 62698a07ebad1f13141402920c3f3ce095f58e78
SHA512 fba9cc75c8b9d828524ee9b207f4c8b2e8db89492610e55c1325523f0193c272391c14a7f32fe3efbcbaf5c3df3a269cb5771d77643ee6174bf59ca0587065b5
SSDEEP 384:nVuZcIhsNKTuTk8pZG2p5u8i2ppYoEkda3J2IxYJoX:ChV6Gkk2bM+OJ2IxYJg
TLSH
T148926BB16C786C7BA8E7A561F5873A038FB48027D7C86F88C5DCAB0D06DA6D41317926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 18KB
SHA256 3f3139763a79d9ac735495684f243330af385d2878a4bb83ee9b8a907dba306b
MD5 cdf962b89ada941f0c61387857e58d95
SHA1 8112088047a0b62a773dbba744c543361afe5736
SHA512 496b5a29495042bc4c8552a13ec6d2d788cc7023eac670cd7f8e2fbd1e0182ffcc0ad9ce19b8d0b819d8f422655e8aa603bf0e2c843aeef3198e189ccdc79a02
SSDEEP 384:nkuZcIhsNKTDTk8pZG2p5u8i2ppYoEkda3J2IxYJoX:RhVbGkk2bM+OJ2IxYJg
TLSH
T1AA826BB16C786C7BA8E79561F5873A038FB48027D7C86F88C5DCAB0D06DA6D41317926
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 7ed89709dea171634beafd96314a767ccb8805f749dea6ef02f352b8c6fd68d9
MD5 2c60bddf058afdac79bbdf8cf8952d52
SHA1 b4da2e9ee862cf52f6941ddd33891cab6d93d55a
SHA512 5feeec35a88583dc8049f0328332bf6d5f0797ed5dfde4fe94331b52bf4b135cc192b733c6969fec0c2a02fddde26764db7584cd6dac601b9abefaa56265e1c2
SSDEEP 192:SONmS6iDRQmiUyH7/q5u88P/uhgKpPwojIuZF/mdU6:SONmS6GM/q5u8i2ppYojkdU6
TLSH
T100120A356868AC7BADD36861F58736139FA4423BDB886F84C5DC271C06EF6D85307913
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 6623d9e9178caa618805f57f307a1b2e160d18e31e90902c654c6032b08c5a5d
MD5 b8be4e0cf833c32b8c8a1e60abb3858b
SHA1 cb61df486436b47366f89a1bc086869e4ce36f04
SHA512 490b456e826a279bc4c0b88419ebf1d1a50919c84762758714e0e2eba0dc14420ce8822dadc25c232eef22691236e38416a6e1360e4462683419012dc21ab863
SSDEEP 192:SONtB6iDCQmiUyS7Hq5u88P/uhgVSqBoiU6:SONtB6/PHq5u8i2ARU6
TLSH
T18602D8396C287C7B9DE3AD55B5877B279FA4013FE6941F84DAE81A2C01E769C1303922
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

465b9ef0-fe16-4895-a38a-3d63c39791af.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\465b9ef0-fe16-4895-a38a-3d63c39791af.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 cb9fce53e4e6722374963e0ca50f42a1c34701191133b16bb8ab6cbeac996502
MD5 360a75ce1b1cac27b7ad3e3038fa7e0b
SHA1 e187ad2ca4f7e67964b0705b2b98784e035aa19c
SHA512 d1489d58e925eb05cf60a012ab5a76e7fb99f5c6022863fb15e79ff28dbee6b3d13571c676ca96283405b257c4def714e0c51aa1534880be3e54b3b87b6f7e93
TLSH
T18541295CAAF91148B3B77F5AABF6A46D447BBD772F06D19D00110D4F0A62A00D8B2737
MD5 SHA1 SHA512 TLSH

Submit Download

29752708-5df9-47bb-a5d0-40d7c554cc9a.tmp

Path C:\Users\Admin\AppData\Local\Temp\29752708-5df9-47bb-a5d0-40d7c554cc9a.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

db7bfc0a-1936-4348-8c10-7261a45814b7.tmp

Path C:\Users\Admin\AppData\Local\Temp\db7bfc0a-1936-4348-8c10-7261a45814b7.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir396_437348023\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e670b73c-9f0c-4202-9665-cb8c64322be1.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir396_791071620\e670b73c-9f0c-4202-9665-cb8c64322be1.tmp
Size 157KB
SHA256 e03138d37406c2bedec93e5a7c44a457a6b19cf4fee5dfe5a46450fcea1bf85e
MD5 088d09e1a5cd1db2f55a4f5131b75b3b
SHA1 4e017079555c92f2f9419a53ab89aae7c5425550
SHA512 f8e7a1652d20778af9e0aefef0f24bb477260eefd5c6cecd3b4e17276b7d6c8d79554e850b9a9fdd9c65095ae16dad8868df304ee7a057ec7cea5a35b9e526ad
SSDEEP 3072:sA30KAb7L7nAnBPxnb8b4HpQgHY15vClaH4d6r1tx:sAkKAb7L0Qb4HpQgoq8tx
TLSH
T182F3E1AD2FEE891ACD0B50BD3B04B38BC90A8F07820A655F735F8015997475D17A2DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

velopack_LuaTools.log

Path C:\Users\Admin\AppData\Local\velopack\velopack_LuaTools.log
Size 1KB
SHA256 3c5dd1e87f2192cd53f912ee6276c1686ed9486c87e8790bdad867d2809ac63a
MD5 9bc3412284e527ab94e82e2a4236ddb6
SHA1 6f45a472900ab81e65f287a54f368d887784acc1
SHA512 addb9bfe02894e7b861d670476e50c6d1001f209987fe61496599261cfeca1b1b258ca5fba348ed980541c666a16a90a62957140caa3f14a34b683e13b952050
TLSH
T1E631AC0DE7687297B456270391F2F28006E22F153FC7B1C70E626118A1AE6BD3BCA316
MD5 SHA1 SHA512 TLSH

Submit Download

1020790.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\1020790.jpg
Size 62KB
SHA256 fb4eef03bbfe7d35026e3202c92319a4297289256bd78bac1de9b49d20bb3a98
MD5 be19fad635b1621cb8482e26261e42e1
SHA1 54b056c6c08338cf5359c3a5d7f0a3cee7ef4b04
SHA512 83201eeb65fe1963d7dd20d91ba2bc7c65d3867c8591e8cfd48e701839ac037735db715046493b286bf587a666f218553785583b29b756f7958b077e1fad0482
SSDEEP 1536:EkBFWOpE9riyiqGxc9JCD+8uhoTAjPMBt6gpjQ6lnDRy:EkK+dxc9AqlopVpdDo
TLSH
T106530118B552BDC5B3DD9E33B6D8829B34E64F3C7AB1052366DA8C8D103A58F7A27052
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1174180.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\1174180.jpg
Size 50KB
SHA256 27aa89c336b381083a1b3e8de84ffbcb842219dabca97aabfcf707b1dd8c135c
MD5 071cbd529f826fd7b887c085452ae649
SHA1 87aebc1286f25aa2b275fc92841198a0d59ad3b6
SHA512 f3660134b5c956f59c143eb691552b6381661339baf88d1cf42cc834d47cf997cc19b781aff70988c1af8e39a9358070b2449bbd829b37db9544b15bbf238201
SSDEEP 1536:Gp+zZR1DSsTA5/WI4hf4VEaB8xpZVg8pFRftduhPBvdIDwD:3zgsk5/WIK4ehLZVg8pFRftduBqO
TLSH
T18E330293342E5B7814F8602E9998503A6F8ED5958FF2E3CF4560F7A8E87214D1B630DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1328660.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\1328660.jpg
Size 38KB
SHA256 49db5c733ff18128492f40c932779ffcab0e8eb5d0135f924ba3dbfc2929301a
MD5 8fbbcafcb8ea68a039f88afc1b8b8446
SHA1 d30cd1b8b18ea6ada98d2c5234f9d5a7e950b86e
SHA512 98e448f1e5df4328c53321fabca88e6df8634954b8ce3ed43a8f74af1cbefee5c098975f2d5e074317eeb60ed3723aa2029e732894ce42c5bc4d03ce7d5e2aa8
SSDEEP 768:9/eCXqqNJ8KiZ1rjMXh0b5tmJs+Iaeje4wlenSe/WeTTFsIRNAMRMBYTqnp:9tl3iZ1rwme71Kwin/zlwPYTqnp
TLSH
T15803F140E3B2ACD4FC49B3701396C74BFDBF548B51B90140ADEA954BC616E390A6BD45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1971870.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\1971870.jpg
Size 37KB
SHA256 d207464f7ab42c6b2d97845e7a4419da860144dd9abe70b7ae4a9efd5a0e3eb6
MD5 6e639a6b4137fbd618b3ddafd26898e3
SHA1 bb080d66ee538d994824d9bd6b8cf991f1eabc33
SHA512 3434ef5e7bb46995843fd2d692fc7d480f130693462b0931431e136e3c01626584eb520efff13a5c4b5873d16119a036214988a8ad0c3fe09a58a16ccaaffff4
SSDEEP 768:+eoJWqot1269C7cUlwQV9hdnlXdoe1WLZCh+0+t5rXCw/:T4om64l/9hdl3aCh+bt5d
TLSH
T1FB03F2E7A39E01E8F34D5F520D659D76D2A807EC8D03C89CBBE9DAC19992F5810A33D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2054970.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\2054970.jpg
Size 48KB
SHA256 2c4e654114c6b747dadb9a7a46084629fb9e70daeade42ef63a2fc194fa01b47
MD5 2d2f8b30bde58dac4c9ea2dd9d2cf0c1
SHA1 dd0f8fcdfe590ce02e11cab6d754a1a7eac732ef
SHA512 b973502ef1b01d6263ff3eee34fb509fddc86c4174f78c181214f44e31ebbb25702ccad134429c828168f4f248ce33700ae1b7754c7b29ca1f82518be8be4c30
SSDEEP 768:CKI/B7FZqB4JRGOS4/S4Pcw0NJ9xXrzL9k7tlerKqYekakZYDtahjk3dhB6xqKIW:yNFI2Jl90/x7lk7/erKKkaOera4MNQlK
TLSH
T15523F15F9C7623BEB779AA21E43644568ACD38088B315705BACC5C328214F665E981EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2161700.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\2161700.jpg
Size 60KB
SHA256 3de53e4065607641183888e7c291af90c7be8e90ace694f9215c5e567df5b208
MD5 33ce545dd2cac7a17a59d2aaeea58269
SHA1 8e6af437d61fb346ddbca0c01d248df48519eac2
SHA512 7e628cb1ad699f7d59ebdd7c8dae3239585619f9f3dbb13277c99b53434faef03c3ec67eddc4233bcb29266230314b663f0aa63b524843a9a53aa8efcf2d11a0
SSDEEP 1536:nLVUFhk4QK6jxkT5lLH0F5orR0F1Flg9tDuFagFFa8F/sE4/4F/mzVGH:n6Tk4Qnijld/DD5RAmW
TLSH
T1F05302A7E4B1D1FCB49B19A155E71D0801E4595CB0C1C698EDCBACD622A3DE7903EB32
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2215200.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\2215200.jpg
Size 42KB
SHA256 0de2302ddf6d203a51602a7f45bd4daae5f9208fe6e84a039b6b2b97df3a6616
MD5 2f6a337ca5dbe427dc37ec71ed93be95
SHA1 a8b28a60e8d9e10b9b5021c1257067b03e9e502a
SHA512 f0148e2d59db12a1448e88810e64f044dc80408cd94d1c9ace03a905ca3204250f66280e3bc86d859a60eb2ba839b5e0151072ac29168b6471fcae9d68a1520b
SSDEEP 768:H/VT7JZu8B9U2XKDmSdYmfVhZ2SARYVXO5zp9QnmQesTIhOeTyT2wYuYu77iy8xD:H/RtPBHAYCVbARYBOHenyscGTGuYuXi5
TLSH
T17813F1D939B1BADFF93860A2D8627D0261FEB6D0FD1AAC9483F4638B64C195F2940C45
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2668510.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\2668510.jpg
Size 48KB
SHA256 97a73571e540df7092dbf7bfc9f945e461291f14cc230b6d9010ec922ecb5067
MD5 702a4330ac8e51e3a2d5514109367f56
SHA1 201e43e24e940363874d805c7ab07da5ab6d0dd3
SHA512 a5719b23d3975e1e6cf998ee6a2335e9e7227ec532bb2976386960f77cdf6691ab16a6b39eddef8ec3b65326b6b0a584b7f282fb9e3c4a7a257469e8658612c5
SSDEEP 768:dkTO8Cgz7hj9ZC7IkqYUfR8ITL561JkLMPLwCy1l8+FedIyPgHWRt8GGQj9EPxsj:CVHisFTLcLwd3XQdIamBQjCXi
TLSH
T1CD33F13D954B43E93CA75DE52B7E58B79AD0EDD1A15F7CE218C408214B1D8DA702F920
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

287700.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\287700.jpg
Size 22KB
SHA256 ae0201f4506947de27be2667e054fb6870a29a1bdc5e309c05745f678d8f4a9d
MD5 39ede40c16016110e6ee357b41d69cda
SHA1 8a2773ef27501f0208062728c0ef88a99de704d2
SHA512 23f7d6ffe86046775f43cb7020b26be59718a3770280f80a83d1173c195c263866199b3295d5487baf5a3d3b96044bebdbd000d178b122f505620af5db85d935
SSDEEP 384:t/FMmhc4+tkbvuJbuZMZtrkRceg5oFhDq1XZDXFOMiz/liW3gZ3o7f5DeX8pzLkP:t+a+Fhu8trMjua9qJ5FSYWQEh4kSOmQo
TLSH
T1F1A2E0F353C8E6E1B34415DB851DFC42C0A8F5DC4A038B37C8FAD0AF11273991920626
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3017860.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\3017860.jpg
Size 52KB
SHA256 bb784aa1de3be24867462415fc217a535a85cb0064c366a706bb966e8aa9f271
MD5 0897377fda3e2cef2f1a977c6bdbbd77
SHA1 7a0c53b121472829200abbf8df8a0bbd34beff69
SHA512 4abd4312c53ceed55ad2366cbb692857a0362e713660450f01c2988f73a438f144c1dac10d6a9b69d9fe7c061f7dc5fbe85bb61e0b290362cc8701e818809321
SSDEEP 1536:5/s+1odl34WYhCt0IBGcEjb5Q/rgfbu+HRnSqXZjHbbr7b:5k+1odp47h2TBREf5QjAb3nBZj7f7b
TLSH
T11D33012023CCDCCAEF4559513D77ED0F09C81E2A651C26781B4CA681B0A1B8FB9FF94A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3321460.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\3321460.jpg
Size 47KB
SHA256 06bfb42eaa7ec2859036db35361e29273c2d8f6cf876ed9c19b1cfa26dd978c2
MD5 89292edc9275f3a636e974e61adcfc95
SHA1 65903e97fcdb8bc97e27e2f7fd205b17667b8a53
SHA512 afb9930f3a4465876ece64f4583a6fae36eeff8e5a87f18052efd1006528bfd2a9b6ca18f00b25597036bce43541e7303d9dff9b01828b5a6bb514c202b3fd41
SSDEEP 768:MY7XIsVWOjML2LK1arOSBXxIOhtdutnVz4pmnUCQcIlpxPs1bvQQEEAcXFXZHy:dkgjOYrTVaOhtQ9VcKw3ibg+XFXI
TLSH
T1AA23F10A8D2135C43DA5C074CFAA8E9354F9C5ED9D44887BABB7DEC9BA1221CE0E5C54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3357650.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\3357650.jpg
Size 40KB
SHA256 ee78f609c0f4d30434e573a280cd9a5f364f9281ac02d9ebe9969ec5e8f81a41
MD5 1307a94360ff1b04eb7fe25891da19bd
SHA1 cd7d43a182307bcaed0bc97162b8c20e9566bf4b
SHA512 b7bd71088be3dd4a0760b4931c302744dbb91ce705682585c620c467cf1547ada996601ca386080e7b2e5bad5a46ae5484cbd4015712dbc2f8ffca04717fc6e8
SSDEEP 768:5d5ydPPhuu/SFSUtqUK5S8dDCICopvakJ4w0Uj94lJvjOC:5d0hPhuu/DUK55aBkTjw
TLSH
T16A03E17110AC88D1780B8137405B8C5FB9ABA17F11249D69D2FB7E837B5917BEE0CA1D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3489700.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\3489700.jpg
Size 44KB
SHA256 209db9ea7546d49ff589701ffb5493f92f0c8e07272b65441c07a1e81b2d1d52
MD5 9b9ea3c558acca609f17b16aac2c258a
SHA1 56431ff2554c6d818fe408fc89007b6aaa023a92
SHA512 af7439ebe10426c9e81156de5a08561035486af0b592cf0f6a59f1862d26918bd347b0155592809da23de776cb0f67d3d743d38d200709b74d59a65210447c3a
SSDEEP 768:CrUnBHeDW3eTWPU884ix0i4vKkW3rnRC0qHUGDgwATNc4E6dl7u1UQoXItmlFFK:CrE+UDcKimi/znXq0sJkSf6nqs4mK
TLSH
T1E72302A5C6FB1F841950D21F24CCBDDA31DB6D082E053A34B6E8CBC028B55D93524856
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3764200.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\3764200.jpg
Size 43KB
SHA256 af5f23928ff3537e0e8fe290d34e41a4eb4fb4144f56dd6e4ddf58fe2c40b2bd
MD5 48fe13a37ccd4a8cd557a379d78f0b78
SHA1 4167114c5d1aef5691cfa3fc0e106f624bfed38b
SHA512 3074b00e884e6a3f9e1a4f2eb6c1fd39093951a2d992797d1dadb5a598319ac8bec27c07f01f97d82cd742c33c58eb6231e69e5b6ab966e8aac77b0b3c99d3e5
SSDEEP 768:pWm0FIm12QIF6T+szxTRaKq3ZbXLeEBpSr6tgaCuhYbJ5woDRYkr3zLJ:APIFq+car7jE6tga68oDqy3zN
TLSH
T10813F27B9E174365F9C6C033C9115E50B7C99AE0DCF02A4F39DA6868E6925C13D23AF8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3768760.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\3768760.jpg
Size 25KB
SHA256 83deff7b7cb7797dee86778f7e8d3d90af2546d82dee589d41361c8869fd2fcc
MD5 7fec82f581ee9274c21396d7107b6194
SHA1 f81318822bc0084f2c03f7fbd5b4cc0fea942f94
SHA512 b4ce724da3b74d47925964bffdb715dc551dc50382595577f3a3f1f9db1454c17020111e351c1372465035de2f0b3ea2e0d5ec02f5add034dccb29f79f34f239
SSDEEP 768:IvqFAIKI0tMPw895AaWdqgtImhAgqS+qzNrtzO8d:iIH0qPFAJqgtlhl+ix
TLSH
T1F4C2E09A13057EDAE51118E6E813FC1310C9B367F942B66DE7CD3D8CA4AC79A5E32093
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

668580.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\668580.jpg
Size 41KB
SHA256 3e42bc5679d1bf5c7fe3657b200de638008f9080ae8224435c329e964e844d43
MD5 2f24fcef782909f08899b490b2c0ca71
SHA1 1e97fac31963248bf4a5927889cf88f6e1f8f149
SHA512 1ab45f0498b9edb9ce3151e42a24c9ec7bc0551a70e95249d4862966a4291a636fe41dabff0d7b0108b079f0f9bfe6c4ef2c381ebe855c47c65057369f22bef9
SSDEEP 768:s2Mtpmg58gsB/Ev6+gN5I/1brIqZOeTzQO2kKDqCoKQDmIcuKB7Co:sZtpZSEi+w5Sbrpse/H6rQ6B9
TLSH
T18313F247FF3162C672372960A3C97DF35C986F6817684F4F67CA52A7E819A47422302D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

678950.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\678950.jpg
Size 85KB
SHA256 5c4edabf6f6c9f8a04c432d93cbc082f8b9e61ad36bf14476a4466b911257627
MD5 d98e95464ed2d282d93fab7226187922
SHA1 7e6f7baf52edc6c1f0183b0fbb52bb5dbc01436e
SHA512 6b99471b88be354af96d32684a7c7e2c9010bac453d11dc1393af3751abad686ef85952f2dd012326629988447895c80930cff98b4efeac2146b4b3869947057
SSDEEP 1536:71wxQXZLwCRS/GxcBOsQekcwJdHS45npSPv2Y5zR275p8uwaTIiivx+gg/4iJ4lz:GELw8Bxcxs845pA5tY8uwaTdip+r4Zz
TLSH
T1328312E5BD7AE1A2B414C5D2CF11C14D61F66860CB0E06C46D12C4FB2D6C36DA39AF92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

990080.jpg

Path C:\Users\Admin\AppData\Roaming\LuaToolsGui\covers\990080.jpg
Size 42KB
SHA256 8a7d79fb4a21649963817a4dce9c4c04ef64eb7b7e0c7917e1976804fcb378d8
MD5 305959e15098650c9fa812ad830e4769
SHA1 556d524085543eccc43a97f4d09b83bb03775971
SHA512 5db0398e132b412e102e9abab78b26dd4689df203eee7db7969ba799b3b00e371d94967f3a904279a6e7c0b2bee72d92d73928ff8d18a0e4511e56238e126578
SSDEEP 768:/cQucgjYj5LvR7JNnHa1CHu9zSbvm17IxHtVx8mlc/rA5ICNGG:0xgx5736179zIuUxNYmlMOh
TLSH
T13F13F25088E5A9E3BDD5880B09FADCD2B6EB25E40467F6A4FD4AAFF0346C1249017CC6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

LuaTools.lnk

Path C:\Users\Admin\Desktop\LuaTools.lnk
Size 2KB
SHA256 44f9760c5eb4dc5b0d5344b20c2986868c96834b7743fef68787a10c946209e6
MD5 d3f8edb787382718e2ee5b42c0bbc0f9
SHA1 ab3ee7d02ba708620e5f1383ba19afb328ae4a7e
SHA512 dc8d7e24e3de564015ea9754b894144a5bbe5cbe8f01f0c83c7be33430a1cd8538d57db4121b7a2497076484baa2e3818af6668b91d4b41998132e812b937a86
TLSH
T1E341D405ADF12B60E3BFA8F629FA4219C6F2BD137D834A4D006041451D62F12D958B2F
MD5 SHA1 SHA512 TLSH

Submit Download

memory/1028-139-0x000002059CDD0000-0x000002059CF79000-memory.dmp

Download