hxxps://rzr[.]to/axon-download

Analysis

user interaction
yes
max time kernel
75s
max time network
68s
platform
windows11-21h2_x64
resource
win11-20260911-en
resource tags

arch:x64arch:x86image:win11-20260911-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
25/09/2026, 23:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://rzr.to/axon-download
Sample260925-3bf4fazv4m

Score

8^/10

defense_evasion discovery persistence privilege_escalation

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
23	2572	msedge.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 3 IoCs

pid	Process
2436	RazerAxonInstaller.exe
2140	RazerInstaller.exe
1768	RazerInstaller.exe

Loads dropped DLL 64 IoCs

pid	Process
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe
1768	RazerInstaller.exe

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\E:	RazerInstaller.exe
File opened (read-only)	\??\G:	RazerInstaller.exe
File opened (read-only)	\??\S:	RazerInstaller.exe
File opened (read-only)	\??\T:	RazerInstaller.exe
File opened (read-only)	\??\V:	RazerInstaller.exe
File opened (read-only)	\??\Z:	RazerInstaller.exe
File opened (read-only)	\??\I:	RazerInstaller.exe
File opened (read-only)	\??\K:	RazerInstaller.exe
File opened (read-only)	\??\X:	RazerInstaller.exe
File opened (read-only)	\??\Y:	RazerInstaller.exe
File opened (read-only)	\??\B:	RazerInstaller.exe
File opened (read-only)	\??\H:	RazerInstaller.exe
File opened (read-only)	\??\L:	RazerInstaller.exe
File opened (read-only)	\??\M:	RazerInstaller.exe
File opened (read-only)	\??\N:	RazerInstaller.exe
File opened (read-only)	\??\U:	RazerInstaller.exe
File opened (read-only)	\??\W:	RazerInstaller.exe
File opened (read-only)	\??\J:	RazerInstaller.exe
File opened (read-only)	\??\O:	RazerInstaller.exe
File opened (read-only)	\??\Q:	RazerInstaller.exe
File opened (read-only)	\??\R:	RazerInstaller.exe
File opened (read-only)	\??\P:	RazerInstaller.exe
File opened (read-only)	\??\A:	RazerInstaller.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\installer\Razer\installer2\AppUspCache\Alisha_usp_4.png	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-1zvzcsbm.tmp	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Configuration.dll	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\PInvoke.AdvApi32.dll	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\System.CodeDom.dll	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\vcruntime140.dll	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\MediaCache\Anne_media_2.png	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\AppIconCache\Sophie_toast_default.png	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-pr3bso2e.tmp	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\System.ValueTuple.dll	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-afu1qdyw.tmp	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-3bdtcz0g.tmp	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\System.Composition.TypedParts.dll	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\System.Text.Encoding.CodePages.dll	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\AppIconCache\GameBooster2.png	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\MediaCache\Sequoia_media_1.mp4	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\AppUspCache\Natalie_usp_2.png	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\AppUspCache\SophieLite_usp_3.png	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\AllSystems.json	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\MediaCache\Anne_media_1.png	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\MediaCache\Sequoia_media_2.mp4	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\AppUspCache\Anne_usp_1.png	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\BLEConnectWrapper.dll	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-inipvcah.tmp	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-4rt1vqtg.tmp	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\MediaCache\GameBooster2_media_2.png	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\AppUspCache\GameBooster2_Game_Clips_icon_80_80.png	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Primitives.dll	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\AppUspCache\Sequoia_usp_4.png	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\RazerInstaller.exe	RazerAxonInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\dockEID.json	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\Microsoft.Bcl.AsyncInterfaces.dll	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\System.Composition.AttributedModel.dll	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\System.Composition.Convention.dll	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\AppUspCache\Chroma_usp_1.png	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\AppIconCache\SophieLite.png	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-zgxtxrxn.tmp	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-lvcr3jbo.tmp	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-sdovwr1j.tmp	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-2guht2fb.tmp	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\System.Numerics.Vectors.dll	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\System.Threading.Channels.dll	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-wqbd23d4.tmp	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-emjvy2mf.tmp	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\System.Buffers.dll	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-0fitiz2x.tmp	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-wr32wlfm.tmp	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.DependencyInjection.dll	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-anhvxhvj.tmp	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-xlt3gpgm.tmp	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-hpjupr4o.tmp	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\AppUspCache\Sequoia_usp_3.png	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\MediaCache\SophieLite_media_1.png	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-rrco4v1f.tmp	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-ale1aqau.tmp	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Logging.dll	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\PInvoke.Windows.Core.dll	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\System.Memory.dll	RazerInstaller.exe
File created	C:\Windows\Installer\Razer\Installer2\App\DotNetZip-stktdvgk.tmp	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\AppIconCache\Anne_toast_default.png	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\AppIconCache\Sequoia.png	RazerInstaller.exe
File opened for modification	C:\Windows\Installer\Razer\Installer2\App\System.Diagnostics.DiagnosticSource.dll	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\MediaCache\GameBooster2_Cortex_Game_Clips_LWI_Marvel_Rivals_880_500.jpg	RazerInstaller.exe
File created	C:\Windows\installer\Razer\installer2\AppIconCache\GameBooster2_toast_default.png	RazerInstaller.exe

Subvert Trust Controls: Mark-of-the-Web Bypass 1 TTPs 1 IoCs

When files are downloaded from the Internet, they are tagged with a hidden NTFS Alternate Data Stream (ADS) named Zone.Identifier with a specific value known as the MOTW.

defense_evasion

SIP and Trust Provider Hijacking

T1553.003

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\RazerAxonInstaller.exe:Zone.Identifier	msedge.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	RazerInstaller.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	RazerInstaller.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RazerAxonInstaller.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RazerInstaller.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
2572	msedge.exe
2008	msedge.exe

Enumerates system info in registry 2 TTPs 10 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	RazerInstaller.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	RazerInstaller.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	RazerInstaller.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	RazerInstaller.exe

Modifies registry class 21 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}	RazerInstaller.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\AppUserModelId\{F38BF404-1D43-42F2-9305-67DE0B28FC23}/Installer/Razer/Installer2/App/RazerInstaller.exe\DisplayName = "Razer Installer"	RazerInstaller.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\AppUserModelId\{F38BF404-1D43-42F2-9305-67DE0B28FC23}/Installer/Razer/Installer2/App/RazerInstaller.exe\IconBackgroundColor = "FFDDDDDD"	RazerInstaller.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2293636880-3790684622-1477845016-1000\{06E4FEA0-96F3-4A6E-AB67-BD7B0269C0EE}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\WOW6432Node\CLSID	RazerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}\LocalServer32	RazerInstaller.exe
Key created	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\AppUserModelId\{F38BF404-1D43-42F2-9305-67DE0B28FC23}/Installer/Razer/Installer2/App/RazerInstaller.exe	RazerInstaller.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\AppUserModelId\{F38BF404-1D43-42F2-9305-67DE0B28FC23}/Installer/Razer/Installer2/App/RazerInstaller.exe\IconUri = "C:\\Users\\Admin\\AppData\\Local\\ToastNotificationManagerCompat\\Apps\\90B626F9-3E0D-EFCA-4B8D-16DDF2B1F1F4\\Icon.png"	RazerInstaller.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2293636880-3790684622-1477845016-1000\{FE963FAC-A005-458C-9E9A-22328845D5A3}	RazerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\AppID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}\RunAs = "Interactive User"	RazerInstaller.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\AppUserModelId\{F38BF404-1D43-42F2-9305-67DE0B28FC23}/Installer/Razer/Installer2/App/RazerInstaller.exe\Has7.0.1Fix = "1"	RazerInstaller.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\AppUserModelId\{F38BF404-1D43-42F2-9305-67DE0B28FC23}/Installer/Razer/Installer2/App/RazerInstaller.exe\CustomActivator = "{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}"	RazerInstaller.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-2293636880-3790684622-1477845016-1000\{20320CFE-6C60-48B9-B6B8-6AA09FF4A5D4}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\WOW6432Node	RazerInstaller.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}	RazerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}\LocalServer32\ = "\"C:\\Windows\\Installer\\Razer\\Installer2\\App\\RazerInstaller.exe\" -ToastActivated"	RazerInstaller.exe
Key created	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\AppUserModelId	RazerInstaller.exe
Key created	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\WOW6432Node\CLSID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}\LocalServer32	RazerInstaller.exe
Key created	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\WOW6432Node\CLSID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}	RazerInstaller.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-2293636880-3790684622-1477845016-1000_Classes\WOW6432Node\CLSID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}\LocalServer32\ = "\"C:\\Windows\\Installer\\Razer\\Installer2\\App\\RazerInstaller.exe\" -ToastActivated"	RazerInstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}\AppId = "{90b626f9-3e0d-efca-4b8d-16ddf2b1f1f4}"	RazerInstaller.exe

NTFS ADS 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\RazerAxonInstaller.exe:Zone.Identifier	msedge.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
2140	RazerInstaller.exe
1768	RazerInstaller.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 3 IoCs

pid	Process
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe

Suspicious use of AdjustPrivilegeToken 18 IoCs

description	pid	Process
Token: SeDebugPrivilege	2140	RazerInstaller.exe
Token: SeDebugPrivilege	1768	RazerInstaller.exe
Token: SeShutdownPrivilege	1768	RazerInstaller.exe
Token: SeCreatePagefilePrivilege	1768	RazerInstaller.exe
Token: SeShutdownPrivilege	1768	RazerInstaller.exe
Token: SeCreatePagefilePrivilege	1768	RazerInstaller.exe
Token: SeShutdownPrivilege	1768	RazerInstaller.exe
Token: SeCreatePagefilePrivilege	1768	RazerInstaller.exe
Token: SeShutdownPrivilege	1768	RazerInstaller.exe
Token: SeCreatePagefilePrivilege	1768	RazerInstaller.exe
Token: SeShutdownPrivilege	1768	RazerInstaller.exe
Token: SeCreatePagefilePrivilege	1768	RazerInstaller.exe
Token: SeShutdownPrivilege	1768	RazerInstaller.exe
Token: SeCreatePagefilePrivilege	1768	RazerInstaller.exe
Token: SeShutdownPrivilege	1768	RazerInstaller.exe
Token: SeCreatePagefilePrivilege	1768	RazerInstaller.exe
Token: SeShutdownPrivilege	1768	RazerInstaller.exe
Token: SeCreatePagefilePrivilege	1768	RazerInstaller.exe

Suspicious use of FindShellTrayWindow 43 IoCs

pid	Process
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe
4500	msedge.exe

Suspicious use of WriteProcessMemory 54 IoCs

description	pid	Process	procid_target
PID 4500 wrote to memory of 5680	4500	msedge.exe	80
PID 4500 wrote to memory of 2572	4500	msedge.exe	81
PID 4500 wrote to memory of 2480	4500	msedge.exe	82
PID 4500 wrote to memory of 2480	4500	msedge.exe	82
PID 4500 wrote to memory of 2480	4500	msedge.exe	82
PID 4500 wrote to memory of 4468	4500	msedge.exe	83
PID 4500 wrote to memory of 4468	4500	msedge.exe	83
PID 4500 wrote to memory of 5312	4500	msedge.exe	84
PID 4500 wrote to memory of 5312	4500	msedge.exe	84
PID 4500 wrote to memory of 4364	4500	msedge.exe	85
PID 4500 wrote to memory of 5312	4500	msedge.exe	84
PID 4500 wrote to memory of 4364	4500	msedge.exe	85
PID 4500 wrote to memory of 4364	4500	msedge.exe	85
PID 4500 wrote to memory of 4160	4500	msedge.exe	88
PID 4500 wrote to memory of 4940	4500	msedge.exe	89
PID 4500 wrote to memory of 4160	4500	msedge.exe	88
PID 4500 wrote to memory of 4940	4500	msedge.exe	89
PID 4500 wrote to memory of 4296	4500	msedge.exe	90
PID 4500 wrote to memory of 5624	4500	msedge.exe	91
PID 4500 wrote to memory of 4296	4500	msedge.exe	90
PID 4500 wrote to memory of 5624	4500	msedge.exe	91
PID 4500 wrote to memory of 5624	4500	msedge.exe	91
PID 4500 wrote to memory of 968	4500	msedge.exe	92
PID 4500 wrote to memory of 1592	4500	msedge.exe	93
PID 968 wrote to memory of 6072	968	msedge.exe	94
PID 4500 wrote to memory of 5644	4500	msedge.exe	96
PID 4500 wrote to memory of 2116	4500	msedge.exe	100
PID 2116 wrote to memory of 5288	2116	msedge.exe	101
PID 2116 wrote to memory of 2008	2116	msedge.exe	102
PID 2116 wrote to memory of 2316	2116	msedge.exe	103
PID 2116 wrote to memory of 2316	2116	msedge.exe	103
PID 2116 wrote to memory of 2316	2116	msedge.exe	103
PID 2116 wrote to memory of 6052	2116	msedge.exe	104
PID 2116 wrote to memory of 6052	2116	msedge.exe	104
PID 2116 wrote to memory of 4048	2116	msedge.exe	107
PID 2116 wrote to memory of 2192	2116	msedge.exe	108
PID 2116 wrote to memory of 2192	2116	msedge.exe	108
PID 2116 wrote to memory of 3400	2116	msedge.exe	109
PID 2116 wrote to memory of 3400	2116	msedge.exe	109
PID 2116 wrote to memory of 5004	2116	msedge.exe	110
PID 2116 wrote to memory of 5004	2116	msedge.exe	110
PID 2116 wrote to memory of 4720	2116	msedge.exe	111
PID 2116 wrote to memory of 4720	2116	msedge.exe	111
PID 2116 wrote to memory of 5104	2116	msedge.exe	112
PID 2116 wrote to memory of 5104	2116	msedge.exe	112
PID 2116 wrote to memory of 4700	2116	msedge.exe	113
PID 2116 wrote to memory of 908	2116	msedge.exe	114
PID 2116 wrote to memory of 4700	2116	msedge.exe	113
PID 2116 wrote to memory of 908	2116	msedge.exe	114
PID 2436 wrote to memory of 2140	2436	RazerAxonInstaller.exe	117
PID 2436 wrote to memory of 1768	2436	RazerAxonInstaller.exe	118
PID 2116 wrote to memory of 4820	2116	msedge.exe	119
PID 2116 wrote to memory of 2380	2116	msedge.exe	120
PID 2116 wrote to memory of 4508	2116	msedge.exe	121

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://rzr.to/axon-download
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4500
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x2f0,0x7ff99434c188,0x7ff99434c194,0x7ff99434c1a0
  2⤵
  PID:5680
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1684,i,5330788246271227940,1414827109662685279,524288 --field-trial-handle=2192,i,4988944492459027051,12500655513947469697,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:2572
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1528,i,11815281841609478008,5984807407259589430,262144 --field-trial-handle=2192,i,4988944492459027051,12500655513947469697,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:2
  2⤵
  PID:2480
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2236,i,4560386583682160949,668706016806934619,524288 --field-trial-handle=2192,i,4988944492459027051,12500655513947469697,262144 --variations-seed-version --mojo-platform-channel-handle=2252 /prefetch:13
  2⤵
  PID:4468
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3464,i,10566459478060983442,12160855627241590947,2097152 --field-trial-handle=2192,i,4988944492459027051,12500655513947469697,262144 --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:1
  2⤵
  PID:5312
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3468,i,11808821938918030872,2098653268854130995,2097152 --field-trial-handle=2192,i,4988944492459027051,12500655513947469697,262144 --variations-seed-version --mojo-platform-channel-handle=3540 /prefetch:1
  2⤵
  PID:4364
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4956,i,15313075460400811310,5234726599990365162,524288 --field-trial-handle=2192,i,4988944492459027051,12500655513947469697,262144 --variations-seed-version --mojo-platform-channel-handle=5004 /prefetch:14
  2⤵
  PID:4160
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4948,i,7097463607667020447,6397364259156918577,524288 --field-trial-handle=2192,i,4988944492459027051,12500655513947469697,262144 --variations-seed-version --mojo-platform-channel-handle=5016 /prefetch:14
  2⤵
  PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5444,i,9243711115360798846,12381195517248944951,524288 --field-trial-handle=2192,i,4988944492459027051,12500655513947469697,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:14
  2⤵
  PID:4296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --always-read-main-dll --metrics-shmem-handle=5468,i,17970471708866696362,10668765211358961996,2097152 --field-trial-handle=2192,i,4988944492459027051,12500655513947469697,262144 --variations-seed-version --mojo-platform-channel-handle=5508 /prefetch:1
  2⤵
  PID:5624
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.ProfileImport --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6460,i,2130549207988487490,7958569123022934867,524288 --field-trial-handle=2192,i,4988944492459027051,12500655513947469697,262144 --variations-seed-version --mojo-platform-channel-handle=4972 /prefetch:14
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:968
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\cookie_exporter.exe
    cookie_exporter.exe --cookie-json=1132
    3⤵
    PID:6072
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6452,i,13368111612459775915,13304169502396957360,524288 --field-trial-handle=2192,i,4988944492459027051,12500655513947469697,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:14
  2⤵
  - Subvert Trust Controls: Mark-of-the-Web Bypass
  - NTFS ADS
  PID:1592
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6472,i,5589705347770814216,10892208829363950766,524288 --field-trial-handle=2192,i,4988944492459027051,12500655513947469697,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:14
  2⤵
  PID:1476
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6472,i,5589705347770814216,10892208829363950766,524288 --field-trial-handle=2192,i,4988944492459027051,12500655513947469697,262144 --variations-seed-version --mojo-platform-channel-handle=6304 /prefetch:14
  2⤵
  PID:5644
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window
  2⤵
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:2116
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x23c,0x240,0x244,0x238,0x250,0x7ff99434c188,0x7ff99434c194,0x7ff99434c1a0
    3⤵
    PID:5288
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1804,i,5992730168714744849,9969651693048939328,524288 --field-trial-handle=2184,i,6849647162496315597,10197517769743897932,262144 --variations-seed-version --mojo-platform-channel-handle=2220 /prefetch:11
    3⤵
    - System Time Discovery
    PID:2008
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1624,i,13412036102901725224,10003191596731872001,262144 --field-trial-handle=2184,i,6849647162496315597,10197517769743897932,262144 --variations-seed-version --mojo-platform-channel-handle=2180 /prefetch:2
    3⤵
    PID:2316
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2472,i,13182178676655020306,10799471344744201563,524288 --field-trial-handle=2184,i,6849647162496315597,10197517769743897932,262144 --variations-seed-version --mojo-platform-channel-handle=2340 /prefetch:13
    3⤵
    PID:6052
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,14187904930318817381,8739905718746284743,524288 --field-trial-handle=2184,i,6849647162496315597,10197517769743897932,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:14
    3⤵
    PID:572
- - C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4364,i,14187904930318817381,8739905718746284743,524288 --field-trial-handle=2184,i,6849647162496315597,10197517769743897932,262144 --variations-seed-version --mojo-platform-channel-handle=4380 /prefetch:14
    3⤵
    PID:4048
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4488,i,16697211674787104674,13634577206557612334,524288 --field-trial-handle=2184,i,6849647162496315597,10197517769743897932,262144 --variations-seed-version --mojo-platform-channel-handle=4480 /prefetch:14
    3⤵
    PID:2192
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4504,i,14147333645173066664,6141792867661962074,524288 --field-trial-handle=2184,i,6849647162496315597,10197517769743897932,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:14
    3⤵
    PID:3400
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,13755890408654307025,10474072013346697552,524288 --field-trial-handle=2184,i,6849647162496315597,10197517769743897932,262144 --variations-seed-version --mojo-platform-channel-handle=4812 /prefetch:14
    3⤵
    PID:5004
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4820,i,15149675418410610289,16166378463674981809,524288 --field-trial-handle=2184,i,6849647162496315597,10197517769743897932,262144 --variations-seed-version --mojo-platform-channel-handle=4844 /prefetch:14
    3⤵
    PID:4720
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4928,i,5606871128212562793,15826248090430094606,524288 --field-trial-handle=2184,i,6849647162496315597,10197517769743897932,262144 --variations-seed-version --mojo-platform-channel-handle=4492 /prefetch:14
    3⤵
    PID:5104
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5000,i,5437332184915016734,11488674615189764275,524288 --field-trial-handle=2184,i,6849647162496315597,10197517769743897932,262144 --variations-seed-version --mojo-platform-channel-handle=4484 /prefetch:14
    3⤵
    PID:4700
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5028,i,13408450699531477180,401351261120191821,524288 --field-trial-handle=2184,i,6849647162496315597,10197517769743897932,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
    3⤵
    PID:908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4596,i,18446607439786784188,11875511162313051730,524288 --field-trial-handle=2184,i,6849647162496315597,10197517769743897932,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:14
    3⤵
    PID:4820
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,6648941700550311427,12488671589553110134,524288 --field-trial-handle=2184,i,6849647162496315597,10197517769743897932,262144 --variations-seed-version --mojo-platform-channel-handle=5192 /prefetch:14
    3⤵
    PID:2380
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5256,i,16600183852420827471,12948028928755099937,524288 --field-trial-handle=2184,i,6849647162496315597,10197517769743897932,262144 --variations-seed-version --mojo-platform-channel-handle=5020 /prefetch:14
    3⤵
    PID:4508

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:856

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:1880

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:4636

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2772

C:\Users\Admin\Downloads\RazerAxonInstaller.exe
"C:\Users\Admin\Downloads\RazerAxonInstaller.exe"
1⤵
- Executes dropped EXE
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2436
- C:\Windows\Installer\Razer\Installer2\RazerInstaller.exe
  C:\Windows\Installer\Razer\Installer2\RazerInstaller.exe
  2⤵
  - Executes dropped EXE
  - Drops file in Windows directory
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:2140
- C:\Windows\Installer\Razer\Installer2\App\RazerInstaller.exe
  C:\Windows\Installer\Razer\Installer2\App\RazerInstaller.exe C:\Users\Admin\Downloads\RazerAxonInstaller.exe /name RazerAxonInstaller
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Enumerates connected drives
  - Drops file in Windows directory
  - Reads the TCP/IP host and domain name from the registry
  - System Location Discovery: System Language Discovery
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:1768

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Subvert Trust Controls

T1553

SIP and Trust Provider Hijacking

T1553.003

Credential Access

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 0526a2a51e51d4fabd0b1d17ef03f5340c42a3dfcb2119ece19ca3fb7900a64d
MD5 844a3eca2c89c5806ce623a8aaa667a4
SHA1 92425b0bd5ebe6baf101dd06c4c2d65b1cabbe97
SHA512 19fb4fa602526e6121d2bbb2984c8130d972906c815cef03a10d6c046e88bc013fabfd2daed35ac6fc10b90eb453c529c4fb4c4b465fb957c45a55ec67aa247f
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7u:fwUQC5VwBIiElEd2K57P7u
TLSH
T1D2B3B931457E36BF26E93EE828CF1511B84F3912664895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CrashpadMetrics-active.pma

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\CrashpadMetrics-active.pma
Size 1024KB
SHA256 624eaf606d0845d9ef3f81652f29a5b8489b6543deb1e4fd4903c415238ee9d9
MD5 38623c06e100113cf825efa6a44b2386
SHA1 479d8e0c6d7d10c05203a37707a6249d2537a9ed
SHA512 452d7012b949688cabc6afbf4badfe9d02c090f30c06557f7f87b606cd716cda97771136964935eaa4d1668303889011f75ff599a79a6837c285ef84ebc2c8e7
SSDEEP 12:sUXhV0xosfxCe+JKlkQuMRxCb8ZXfgYJ0IJpP0KLsyW1L7Fx6:fRqxosfxWMk8xVZ4YWI30otWn
TLSH
T1CD257885B34494FFC8C35A7189BE27902774F6DE5F02836B6A377A0E2E271D44B48220
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 23c0c8725265dc38d2585d79464cd2555edaf25d784e2ab6029faf34bdea2dea
MD5 113ce15722a691d6f3892a26aa5a3c3b
SHA1 8d04ac93654e4ce7e89abe2dcbcdf9f598574f17
SHA512 5f9956e906191837370644e431878c6ea7d621d81fa8aed8db6c53cfcda126665a3c6bbf6905a967717159798ffde26df324c7de763b82b79a14f118e03c4ea0
TLSH
T1A3D0C0005CF976E4D032103F013010003FCC544307026106E080003E0D941C306918F3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 c084fbabf72899545329073040c876d95ead5c60f69da86dc34fbe069a305c30
MD5 1bd93bfb1b310573ad9dc64d3d792647
SHA1 2aca12698ecd85372ab06faf32f31722d896e24d
SHA512 44f0ada5a0c728cfeaffd34425d0b8625226cb0fae383eb78071d6cd8f82472108cc6499053e636e7c40d20cc0a15495dcb3a741a5eb883138343b0f1e358fbf
TLSH
T1E5D080D4B4F57958D013147F101171107FC8E5546D17F055F081117D365A6E253550F3
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 5e54f29e74edef354e7f0f9a803e125ef251327895dcba59e5b360ca529931a9
MD5 fbd99f5568b4b62013f59582a577665a
SHA1 893428898bc867a96f764ee90b640d503eb9cc33
SHA512 65da064306ec05a49ce13e0dde9ec73120c9ee55ac8c475f5584458a10caec5316df03e65796242ef8333ea8127b9367058aa939fa0dd7be78999cd2cbc9da69
TLSH
T1C1D02B90749A2109C20000330012B120AF1084C51114D0139085056F2D844D00642246
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 9ac54970d1a9b29b05b678f53f770d29a247073c30c0fa5e8cfc9a0961777ce9
MD5 7b58c49376c4d2d357dbcac523b04780
SHA1 c14dc5187e65e0bfb8ef2df5dfe41d10599b8afe
SHA512 f8265be89a7c901b01a18a290c7e369d9a9cb995d64399d6d1796c39b2382c0a89439320f307018fe3e35aaacae6a1d947fefbbcc3f7cc187f7cb67203cd2fd8
TLSH
T170D02B9078961109C20000330052B120BF2080C51114D01390C5057F2DC44D00A42246
MD5 SHA1 SHA512 TLSH

Submit Download

10318525-204b-4b40-b2b4-373d846da226.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\10318525-204b-4b40-b2b4-373d846da226.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

BrowsingTopicsState

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
Size 649B
SHA256 92cf5c865ec2c89d44e25e018769460d3b6dada7d703c5ad2d90ec2d845357c8
MD5 9936fa41bd23d8037169ce8f613b6ef7
SHA1 b69a3701ceb9136995a6956d0fd2071be42b1e64
SHA512 3585c897c2f305a1357621cefbc58341c20304fdc99d47e59049b8d36bfd7c04dad8dcbdc9d96e97f3df1dedf5e6bfbcd27b4e53817d1a5b1a72efbddf6f627c
TLSH
T1B2F0F4E9C931AC2718FD1B1A20A55B4BF75413273780955F3A3D521D8FB463B5286C2C
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_0
Size 44KB
SHA256 221844b3968a1304e4870754421653737439ed4d770b1b96af9d581dca017046
MD5 549470634833a6611ba4d1fa417122b3
SHA1 3b5856d0cefb98ee7effe8c2900d08ba86c02597
SHA512 3154e3a1f49d55f88ed4388e1a9863a35315419bcb7d367ea332a9fc3a46b66b9cfbac884012bf1346bf9c5e7e91de601aa56af18c23254764c36b0195439efd
SSDEEP 192:O1eFGx9T3OOpAuzpTPbF9XzKftF1dAOxKO7Of101:sIg93pAuzdPDOftfaOxKe1
TLSH
T1DF133FFC46428C13D9EB10BD44875FB82B3E790AF0C845A39675F8691C68F2A4CDEB59
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_1
Size 264KB
SHA256 83800295edf321c80aa4a076c6945627f874367953474805a8def1f0b1bd0ee8
MD5 b4174b4081851cc5d2061db4cd1e4eb0
SHA1 c1a545d140bca640409fc22216fb626f01923ba7
SHA512 71afc031d3829ba934f5d83c4e5cd38a3f47c030c864d1fd143d2a2c919c9b99098e4e8909824ba51ad635fda4adfb24ce8427f50c2689262cea673bb6efade0
SSDEEP 768:JXvAIAUN6feP93L/j5SL/S194OmSwbLOWbcdqNSW+cB6B2H7Njie6qEZD/:NAO3L/jEL/SFm3b0qNXhcSE
TLSH
T1334430F70A51A01BCBA952F5D7033A3EC27B415E7CD1E8A9D2389C812825F75B2BDB44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\data_3
Size 4.0MB
SHA256 c9be229dcce2942cd2600a678beb2e4692f3d6a9fa30292331f558eae75037e7
MD5 90566b52f09edd4780740831a895eff9
SHA1 609645556e1f7f079ec1eeb89bb3c9bb9ef54981
SHA512 583f292ca1f021716d562fa9528959973a78512c22086857297f9cfb80227d8d5462736914c192134533d14dfbaa02270215be772f8e2996efc5c2f5f33c75b2
SSDEEP 12288:uH59B+6Dj76fXH8Rxc5Z7kjkOOfQEiF50k1wDeibgrrON95rIXtbfZzqYQs2Pk+J:xUS8S1weIhK0QXWdjdJsGN++qB
TLSH
T1AF167CEDCA6858C3CD639A30B5F0E9477C7413C3F995D1D68C98C184026BBC5BBAA729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 2KB
SHA256 64c13a74ca434c43e2cd57cc63514d5443d6b7983bbdb4f1aeb7bb111c99fa52
MD5 beb0e6888a86ea42a57a7866895f4e9e
SHA1 d85726a578070d0c84eccb182eb55bd883b72fa7
SHA512 a526913639b16798b0254220dfd97522b7c6b5240b73279bbdbec47acfc1e03bbf3e75663613ebde5bc58fb6b8140ce2b0e7c798746537b0f189a1f4bce83da5
TLSH
T1ED51B6C56870406AC7A8E0F2DD9A1D873A38D5A271B33F1E09A4CBB5791BFA115F724C
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DawnGraphiteCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\EdgeCoupons\coupons_data.db\LOG
Size 343B
SHA256 fea6bddc05b1618ca9a42d04db494b66e273eb84009a2b05f365e339ff3e0223
MD5 117e5c06256ea881e4888118d845a734
SHA1 7e978dfabc2af036be54b7c13b56ae79aa15cabd
SHA512 607a084b5494e9dbda3165f20a205f2401ef7a071ddbc7fd24f2f5bf8a7045429ddfeded6d2ac5248c69305180e867cdc35c271df3336f66019af530026a3e95
TLSH
T10CE0D8AC95EBC15D791035C782285F8CE2807587D69DBF43270498C4BB86101B245967
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\000003.log
Size 684B
SHA256 ebf65d839a9c2a53ab503763d44c3a0363d3387faf4f947b5959463833c3b75a
MD5 f93b6a29284b7e38dfd05af480d25ab7
SHA1 cde3c88c5dd5d4e617e8f8157c03d66d730953f1
SHA512 e2148554c1b5c2b97175e5ade1fe82b5a08311ce9d736907ac299f99c3580a99458d7fefc894f4badba5921dfda84f61117e1ae3e57b0063f127aaca6563e099
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\LOG
Size 319B
SHA256 9e1c480fd926618f3b697b415651999f6193a59b910e57d35b41a6d25c5a19f3
MD5 4b860bbda50ad8e90fc1bdd1067928a3
SHA1 08ada044c20bf276779f406e0d646b3a117e6f86
SHA512 3abdcda5f2bd24dca58fc40abd5a0e21c77914d78fbf50e4bde7cca273f045db528b7d7a6625b1a8481286dbd903921d3ae195a6f3f2d2b86db304de65b623fa
TLSH
T125E0262804EEC22995147AA3C76C4B8CD2E0B503B28C3E46270AA848F242241E28A6A1
MD5 SHA1 SHA512 TLSH

Submit Download

ExtensionActivityEdge

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ExtensionActivityEdge
Size 32KB
SHA256 d86b7b7f10bbecfa155b2aa53e2a61a8b726d075be1073b16322b4446e5f564a
MD5 959fd7a9dd064b5f7fead31a31b71b10
SHA1 fd0d829d81034864d3c8c3f212815cdadc8bed62
SHA512 84099eb90e068a3100530d376ebd68db1a68880d543e8c94c0cd92c292ec0655afe96d491ebb837604bb491b987bfbf18cdf13e6be24aac9ba0c205bd8744d00
SSDEEP 24:TL8JhK3iOvwxwwweePKmJIOAdQBVA/BNj2VTJZwJ9vpV3WOT/uReQQ:Tgm+BE9ZW9v/3WOT/
TLSH
T1A3E23A2A5E7C7521CD667136BC21A4665CB910DA977336F23EE0007D6F8228BC475CEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

History

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\History
Size 204KB
SHA256 3f2d30bce8edf112bf65a7bf68426a979d251076a082547bfa826f0e6377a51d
MD5 bd707abc8aefeb124c2e337ace35d5c0
SHA1 d860fff7a2ac2c625a26579d56f977a20154ffb1
SHA512 f8845100ed92aa15b6c2016f983369a1acf5ee64fcae618506e698e579a2771fb0dcfe734760cebe3ccf262e00ae5f29a52c0650430d1f99c8220ac8cbeef9a0
SSDEEP 192:xji3ulAqKZ0+G83uxXBBK31GkSJg/EJH7DNspUU:xTlr0a83uFBBQ1GkSN7DNspUU
TLSH
T1AF14744F6F353712CE6C403669E644A75DBDF03F8B526A89B8600471CFE3A52606C8BE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Local Storage\leveldb\LOG
Size 331B
SHA256 30fb94ab12423d20f69b1ae454056efaff503e59c0843ed814bba67ad3670936
MD5 f3b7dbe60ab81c63d57f216419d8550b
SHA1 185eb150ed70cb89b9eac8ab4cbb487e7b6c3083
SHA512 8e0920d7c07ee2716b1a0f9ac35d2f2d3f64788e80014a2d354ddd5c92b5208d7b2603f36cd30d7ee2e08539140b2eb1d8aa2104e59b9623272a6f120dd9f2cf
TLSH
T119E0D87444DDC19E9104708B83246B4ED3B07517D68D2F417B05A845F185048E6965E2
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Cookies
Size 20KB
SHA256 fc903bdefcaf6f3e9702c91d79a30c8797458043cce2ae35b622d455cd7ed3b0
MD5 46c5bb5e970ff72b0a45911d3d8a88b4
SHA1 45b0c82a5568a591c1792dff67fac6d7c4b1d62b
SHA512 211d004ec6d0c5fff41c67b438c067c0671a7150243c302127149a259638bdd2bf9d1e4f44122176cc9a9d1cdeca823dad6ef1d60e5fc70c215f470acc5e2fe8
SSDEEP 48:TNLopFMatSaw/auUOt8BMoh2wGkUiWAIRAwH:deMatUaAKSHcWtRAA
TLSH
T1E6923D4E1F306122C0F44BB6EED085662E7C221DC3636698DD4450F38EA75ABB4161AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 1KB
SHA256 6537bdcd11959c3191b5d277d35d889e1d90295abe97d1a474a4fc30f55fbfcf
MD5 6d95144929e9b6005ffe44f200be5b0c
SHA1 3463a4476717a0e470d00f2197992e416f8e72c3
SHA512 b94ee182544204216b12f30d09e1fc34de09403fd2761f947c6cc781845e97a3aae71e028143b6a05aff7e8a7439092a26494311f87ef14903810b7f8b7c8af4
TLSH
T1A741C0F7C3F4866E890196F0AB18AE2BCE6D0615432C3D5AC5E4AF1B93E3471D141A5F
MD5 SHA1 SHA512 TLSH

Submit Download

Reporting and NEL

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Reporting and NEL
Size 36KB
SHA256 6d87c700f3dc0d47c1b5a013b63d801a7e4bbc3a466bf55b592f88d4125b0cb2
MD5 afa6b1152a68e39e4795c7142fcd41e0
SHA1 b68867587cc311042f4fdfb27fbb43e904695481
SHA512 a497f751f6e727688ba36784123e547e29b137e6ce236012dbb15d5f5f385e7e75fe3a6506446a99f8f0a2c637b84fa38727abb7d19a910469d7afd1c4dc1d0d
SSDEEP 96:uIEumQv8m1ccnvS6acMQJC1+iRfxnFd0vK3fEE4g:uIEumQv8m1ccnvS6acVJX60vuf/
TLSH
T1DEF2CBFB07336205C98444B0E4019B8FAF16404B47B6B6EC66D447E3F7A21E2B5B9756
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Sdch Dictionaries

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\TransportSecurity
Size 188B
SHA256 66dcdb7a4a4edbf137ea9fec5f21946b74a31dd03799e221e56da22f12c8916b
MD5 21f1038b0b062cf971aaba0fb4ab1875
SHA1 3f2a17b623e72a5fdbabd0da5dec4eacc0336edb
SHA512 fd038753fd90dd6a05675009ef0ee81d1c36980aaa26e8f641f28ccf94ddfae2c006ec0d9006a21daa33fff6e08566a709bebb8db2c54568c734954aee2662bd
TLSH
T1A3C02213C4F8F0322034153A49A478806A79C238000348B4C895833EA0D20F76B0502B
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 1fb621f7043b8763247c982a0991cb8ab2af9e421ce99798d989e0ba7da57f02
MD5 2aa79bbf4b72da9e85c7142f0b227bfe
SHA1 b6f49df8daae913eb3e36a0657c3944b4ee256e9
SHA512 3f19b2f752a5cc04572d0593df43a476ad1c79cef2d2b0130a94cfe2f8df93c7187a308f694e7df186847b2f299d48792c55c752ab12055b0eff181ee6977712
SSDEEP 192:sxZVQRToC/fXsWvWpVuQ705zsf0zodpW/W6+WNGY0RcdjraIgbsWJ:sxZVQ2C/fXsWvWvu35mW/bG5UjOIi
TLSH
T16542C819AD34A97F9CCBE21DEB597F53D6F9103290911E58A6FC8A1C01EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 11KB
SHA256 683f762f8fab26bfaff9ed66af53fc5a5f552316aae7815b8d5e788d6af5431b
MD5 d2075adab1c309e57fe8de09247c9423
SHA1 3f6527c585439e598237cfdf6cbc784657da8114
SHA512 c2b3cab0c10115080571e8db66c410d8a9110fd45916f51de38bbd16bb945a80029389a649a30a503a5a420c11484c0da52bf26da02f24db66a803201255cc97
SSDEEP 192:sxZVQRgoC/fXswJQ705zsf0zodpW/W6+WNGY0RmdBAIgjWJ:sxZVQZC/fXswJ35mW/bG5umji
TLSH
T1AC32D8596E34A97B9CC7E21DEB15BF53D6F9503290D01E58A6FC8A1C04EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 1c117094253d53f13315aea5233f5e2d7e7faca077e56e81464f6fbe16bfaf55
MD5 fd7defb3667489f587233f3a8ea9803d
SHA1 f7cf10b2d5565b8fce8ab8c14389e26198572bd4
SHA512 09239b69ce6abf61c746c729563de7ebfe93e258067bac0d897fd49156b62ec7049c4a6f366117a1daa203041e87be56eb037592b0bc51374ac3e9077e7f84c2
SSDEEP 192:sxZVQRToC/fXs2WpViJZ3d20sf0zodpW/W6+WNGY0Rcdj2+AIgbsWJ:sxZVQ2C/fXs2WviHOW/bG5Uj2lIi
TLSH
T19342C6196D38A97B9CC7E21DEB597F53D6F9103290915E48AAFC8A1C04EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 12KB
SHA256 0f559d7c41ab52bdfca572830e7c9594d3cde87604384283c5705329b752fc83
MD5 27d700826b272b948261bdd2b5dbbed9
SHA1 6aafff616855e7c1b9c0c1dac27e752e52b460e0
SHA512 2f646fda4f7d0215e5afd0d0dac6e7980762c1a025fc611da04dc1535f05642b88dbaad994507f367851701c5c0deba33da6e02d731ae9f05720fa5b3411f825
SSDEEP 192:sxZVQRToC/fXs2WpVVJZ3d20sf0zodpW/W6+WNGY0Rgdj2+AIgbsWJ:sxZVQ2C/fXs2WvVHOW/bG5gj2lIi
TLSH
T10B42C7196D38A97B9CCBE21DEB557F53D6F9103290915E48A6FC8A1C04EB6DD220780F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 28KB
SHA256 f8c6613100e2e03836efce332c8c5b99b84085e0b6f868f5c5c9c1389626922f
MD5 95a52ada67c41eceec136ae85247798c
SHA1 7c9c88f0c0d48deba1e6e3a9fb378893d7886aa6
SHA512 2d9a23ba1dee928150d2ba9496c043c54d8589f336a29864b3e21bdb589a6ef429d58c758da0b943356dab48499438267c2ec14074ecad740916c178072435b1
SSDEEP 768:WJ6E28xO215WRmp3QX/8F1+UoAYDCx9Tuqh0VfUC9xbog/OV3fsLl/LN0Y3Zroyw:WJ6E28xO215WRmp3QX/u1jaKfsLpLKYG
TLSH
T114D20B2B740CCB7E4FC05AADDC666F976E9802C7A6688D4047FE894C02C77EA511A4DF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\Database\LOG
Size 338B
SHA256 e231eba96519500d02c286d1a9317ff8b05e831a3afd95f7578dbbe132c038af
MD5 431b857ee299561468a00c7cdf014693
SHA1 e80e1189538eab3c028b79c048eb603c61a5a2ed
SHA512 cd6aae20c91b237d0a33d2400402735b65505ecf5f60865733399365f85ee9c90e658686d6cabdf5982e47368b4a6e8072a7730626cb3708d619c2894a73c521
TLSH
T17CE026B405CCC1BE6116344347A88B4DE3E5F607DACE3E427F00E844A6C2904B19ABA2
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Site Characteristics Database\LOG
Size 350B
SHA256 35c7aa19c23f05a76f42bd6dd4826bbee3fc1ee34196279d2c29db06d2a5247c
MD5 10eae6dfebb0b2d7fa0c04f5e5367967
SHA1 a27327d5e4d1f633fbc162d4e05bf1f7c1773d05
SHA512 7d461dcf47664d6393498c5aa998500114518992560d1c3cdbd5747242ae822e55796a85eed113578e72fa05f1ee6fd46a7cc325236dfcb71f39a3ad216056d1
TLSH
T106E0D87415CDC26F614634878368DB4DD2A3F603DACE2E517B08B444A3C6540724BB61
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\LevelDB\LOG
Size 326B
SHA256 88beb726d9f9a192d935266d9cb65253f24c5f80b8b6076da89887755ee9c5b8
MD5 1c433a6197a12bab3233e86ccdf1b457
SHA1 c609dc9c395bece3b7f5a2af4ef7040c54afa95b
SHA512 47b6ed832353016ae3cb1f8415ce23eda5f7c5828e8fcce06caada05a3886d1aadb8db140f375cdbdea84e187f4891be5e4a6412ef4dad87f9536ab441d4f235
TLSH
T1C8E086B449DDC27A5104B08387649B4ED3F1FD1B97CD7FC767085884F281145B3EA9A2
MD5 SHA1 SHA512 TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 27KB
SHA256 5928edfbca621fb2b4a53e6e341dfbae05ebfb0be63c1ae0666e2168979f4fc1
MD5 a00fdf8fe27ed658cac597541d203902
SHA1 0bd98a4f67087278d66b191c13388ddd6869878f
SHA512 6477e0cd1b33d230511acfd582e4bf2eeba37f93cadc8d0f2c3376a86ba516338605d759835578e3fb2a588c63037ce241fcd4b4830b104fec6e449bf3f19c9c
SSDEEP 192:80Z/jH0TnaJxzh/Mrzcp3wHbmXn2RdMxg:88/T0DaLz5M3cZw7m32HMy
TLSH
T1A5C2311531BA12053CBE291985F49B2F564232B33019EA3F7FBC40A68E6BE445DFD9C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 23KB
SHA256 a4ca6eac340ddf6f2a2cdca13ed9d39bc81a0cbc23520d6128cce0fe032c6d66
MD5 a88f41cca6f4ff8a88aa4fd58268e3f0
SHA1 79043305b49c2ea2b952022aea7b75d9076dea28
SHA512 688fdd1b56ffad5c25e94ec4209f6f51ea086676c7b6edddfb86cb5fb52614784c64abbac9e3ae19544bc7c0d77bf6df97009a48204717259a4499aab3c5801b
SSDEEP 96:KYlWKmcrGr2KosTUwK5e6SmIKT64ygKHK2qOcKjKIrSK4oiOHCKIUzj+fzptB0BE:80Z/jH0TnaJxzh/Mrzcp3wHbmXnj
TLSH
T1FEB2255131BA12093CFE290D85B4972F564232B37119EA3B7FBD00A68E6BE445DFD8C9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Web Data

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Web Data
Size 224KB
SHA256 1a083b8b36be5792f96763143eb4ce7ddb622e2b7e9a7c94f216ee985143312d
MD5 37b881c6a0c67264e0ea03321456445e
SHA1 23715b0195b1eb4995ceb34830828203d3234fc3
SHA512 b6bb997c105e80535a033a8634ed61f740cf1ee5c9054a85fd0c2ba0ae13abdb3db34ad7e432f388faffeaa74a641e3b26bdbd0325c5070fee8e986102d43d03
SSDEEP 192:FvoWN8/AAK9fT8wRJQnGL11HLfzNSivuvTNN+u/egddCeyv/hVRdbsCEV:a88YAK9fQ0JQn6lLfzAivuvBN+wtP2s
TLSH
T14D24540A7B747001DDE7E9725CB080771A3CB16ECF22A6916DA254694DB3853A23D8FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_cloud_config.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\default_cloud_config.json
Size 13KB
SHA256 f9e4da319fe1f5a7d497c452421f4648a24ec7588f309ebea0f0cd61a6251eef
MD5 256c40bace492c4e28451ce149d2f9ac
SHA1 b48b0eaf986b9efc91d5c8dd394dccb6d82e2adc
SHA512 33b38d1ced015798722180fc8c8ce6daedb18cd5d0e4b3db27d6176c13cf3ccb1bd79f2e68ca390d6eb43ac508c29067e8f1a3ee9f0167cabe37ebbddf6b0ec0
SSDEEP 384:l7BJeojewj9mg1IZyvASoIL5QJwTcoEnE0YU/VwTcoEnE0GU58:l7BJeojewjcg1IZyvASos5FEnE0YREnA
TLSH
T12452007AD2211C7719B8636858BC4692F524137F8281C81F78BC656C8F7FA79A089FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favorites_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\favorites_diagnostic.log
Size 2KB
SHA256 1c8c68541898ce4bd174eee77790df9d42e362ef0233f967884977d2c0bc9319
MD5 c52856512b044da09589572952d83893
SHA1 5f9bad7896299c77e829eee50ca91e0a6cd32fdf
SHA512 f7f2539aa6ca94179d5b47085cb9d773ec1c3a68b9424c58ecf7f08640fee54e2bcfb0fe4773ce211740735c4201199dbfdab2b092cbe93df84d97fea5969565
TLSH
T1785144C5B3F960487FC9A941C2196607E8A13F66260E9E71372D94F49F4481C0E6FE31
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\000003.log
Size 16KB
SHA256 2267549fa6b7fe7a8e712915dba3cc9453298fee4bc29f117552b43dbd9ffe8c
MD5 baabd9b12caa51ac212a950ee16f1dca
SHA1 a3b37694c4a1ead4776af3da591b5957ab172e73
SHA512 dc073dad042fdabf67e0e609b36c97cfbbf05039b32784de4bcc696a1606c45ca73aaf2caa8fd33e348e5ef0b2c7b516b30bfabd83cb9584bdf63ecd88aca64b
SSDEEP 384:J95QkIIIbbLMIM2BfFGse8sPMMMMxPXZyg:ZQlneZPMMMMx3
TLSH
T19972D76A3F541F73C1AE2B7A03BA879207D2E8524972511D3462184F8DF2A67C6D83F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\LOG
Size 319B
SHA256 c25dfd053477a4dff5b5c2451755536d1872fbdbfb1a43d154d0eccc62d1578a
MD5 990d0e80c9bdd7205b8e78be366a035d
SHA1 c8a21788605e6fd1b8c023d246296ceb2b996dec
SHA512 a6177ffce45e49e2c6c782b831419258ae00ef39a8518d2ace63276af837253953b6696848d06367ef4b628a43c6a4e7c95a5c920b25e0d3f8f5cc9ebb36ccd0
TLSH
T177E0202894DCC16E61157187422C474CF2907503FA8C6E452F08D44CF642104F24A562
MD5 SHA1 SHA512 TLSH

Submit Download

000003.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\000003.log
Size 1KB
SHA256 516411aaa0ad12cee43be21e1401aef401b8384dba1262e027d3026b997bbc4d
MD5 4dcaf71aff902c5975d9f2c841c3e41e
SHA1 c4807db0486ee013eb4490ef0ec5f94f04fea4d7
SHA512 6f5d5aab9b50791173cd3b6129c44216fdad4717e45eade9c9c6548fabd5cd406b1bbc4ea266626d34d4a73db866e9667a2ad5c1670cf12c5edd86109c986df4
TLSH
T1DA21BF56F320C109D18A867DA42F97351738D8028FBCED0F94B924362E76B051E9B6E5
MD5 SHA1 SHA512 TLSH

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\metadata\LOG
Size 337B
SHA256 c4bf6135f4136f422894a49cb97f12802689c0cc0a7d2427518e03bb6724b49f
MD5 0aae2d76a315b377dd9fcc92ae53088a
SHA1 6a0435810055efa3bf643cfaefea644bd5794cab
SHA512 9121a679d147c7dc161bc0c56fa6e14e95200f2810a7a3a924248104447a174fdd0f777d8435ce9b8d739cd5e115beec06f93839128fcaed730fd45cfb037abd
TLSH
T144E02028A4DCC15F51157183426C978CE2A17D03FB8C7F412F04DC4CF642145F24E563
MD5 SHA1 SHA512 TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GrShaderCache\data_1
Size 264KB
SHA256 5581a56e6e487532554be1a9050586712bd2eeddc753f2a189a1d29e3cc023e3
MD5 c4f2244e9cfc2facf18e133794f8aef0
SHA1 5e25a38269390eacd9fb4fd824dbc1daaaa1c941
SHA512 6c35403f444841fee2e661e4e3faa61db6a82e8176f025b732fd85a91b7087ea5781ec7462f66bb2290c4c31ed5bed1fec2308a4a92f247df9465c4743929cc3
SSDEEP 3:MsEllllkEthXllkl2zEfliQd:/M/xT02zT0
TLSH
T17A4404047FC01405D5015030D751C3501370D410751357C334D544335CC75515C00001
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\GraphiteDawnCache\data_1
Size 264KB
SHA256 7d069d0b4ffdddd852e692aca06525cca2883f3184358b5e719d153ed9fef4d7
MD5 a8089e784c5d3da00f8d5d54f0d0aa6b
SHA1 1678a862eb219564a64c79786c2df75ea0464e27
SHA512 97ddeb86ed0eee81c587f67046aa9f335539817f68bd86ca9f8fb07753af4fb824ad0fd49758737e5be28ed34394432a4420f153dcdb378dd2151da4d253a0d9
SSDEEP 3:MsEllllkEthXllkl2zEfluar:/M/xT02zg
TLSH
T1C94404057FC0D455C50010304071C35013F0D4141515D74334D1CC73DCCF5700C00011
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Last Browser

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Browser
Size 120B
SHA256 9c70f766d3b84fc2bb298efa37cc9191f28bec336329cc11468cfadbc3b137f4
MD5 a397e5983d4a1619e36143b4d804b870
SHA1 aa135a8cc2469cfd1ef2d7955f027d95be5dfbd4
SHA512 4159ea654152d2810c95648694dd71957c84ea825fcca87b36f7e3282a72b30ef741805c610c5fa847ca186e34bde9c289aaa7b6931c5b257f1d11255cd2a816
TLSH
T1E0B012203BF9062CF3F74D00AA73AA3428BFF4080A14811D505102080C33E19C478FA3
MD5 SHA1 SHA512 TLSH

Submit Download

Last Version

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Last Version
Size 14B
SHA256 ee1367d356a136a11664001cd90e05ba08dbaa85f496584158f5e42be8e836fd
MD5 8297da058a737611abcc3a0ede9ffc24
SHA1 e532552672ecffbe3509fb4c334833a67f16d05b
SHA512 fefc70ebe486693310a00beb5ae125abb1569c4455538124d897566f2e44f2b3854ad4451196607137301a811ac7f96f1d488a36eb6d6cd566f2f7cdc7c7568f
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 31KB
SHA256 509808fbc8054b5e90c341f19effd256362204420d9ef7aa370d5f13f3cc98bb
MD5 94a868bf8e3c24f124947b19ea2d191e
SHA1 4ac2db2939d54db277a6150f85330febe2385f17
SHA512 5931dbdeb803e5bf2d735631237a209a1a9cf591186a0a0813ddabe633e339785830b21c7e9acc5d0cec4ce2d5e2a1f2545f9272d1d61372998dce1210bffb13
SSDEEP 384:nziF7ZcIP8ND8TUNTUlIR+QnhxV9autzTfoBFPprX5PJA4oaZxZ9lRVmAJNN5Tgo:eFjPEwgnhZRUBphX5Hpb9lRYENZJ
TLSH
T183E2277DDC60C97F98EEBB89664D3A129EE80233D4B89998DBC40F1D807659DF307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 7bd930753ae4c069287206e99b95fefdb0425ec3579397403dc455dd019ca92e
MD5 18b654ac6935f4f69f51319c4f3fdb4f
SHA1 e34c56a2bd6a2b667b3f17a3e5794f5c9ba66a73
SHA512 c503737608232c24d59a9bae60c20844372b859a35fc6fb963218f9148f0e9e1e3b460591a3c3f11cf0dede4673d5c214470778d11dc1c087fc43415b20a535b
SSDEEP 384:nziFiZcIM38ND8TUNTUlIRSQnhxesautzTfoBFPprX5PJAYIVmAJNN5TgL/7Iz1J:eFQM3EwgnhBRUBphX5DIYENZJ
TLSH
T15AC25B76DC65CDB7ECFA8A96A7893A43DDF40123D88C9AD4E9C85D2D009719E130BC17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 31KB
SHA256 e11dcafea3f65c2b73af7f2261fde8687e20e28f1229e86fe41b3da1c3cc482a
MD5 1016a14d282e35c7b26c07bbb8c3531d
SHA1 64e0a43e2da7061daf8b0e84f733a502f3592ed1
SHA512 c7c21c141e4d3c5e2b55cb21b77deb6a7fea6ea0ad87249c9402626be8d284baf6a9919170bea6b8538b1e2f6d7ce6115276de035688794e601728e270c5e8de
SSDEEP 384:nziF7ZcIP8ND8TUNTUlIR+QnhxVyautzTfoBFPprX5PJA4oaZxZ9lRVmAJNN5Tgo:eFjPEwgnhuRUBphX5Hpb9lRYENZJ
TLSH
T164E2267DDC60C97F98EEBB89664D3A129EE80233D4B89998DBC40F1D807659DF307816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 70f8cd735c99438ce12a71f257ca5bb7414b9416ec7b4d75c45626c941e5885d
MD5 bce81dd2f9522c867784c7992536a52a
SHA1 7a76fcc12c72c63845cd08a3ca9f68a7ecf7957d
SHA512 e1cbda93ae55eeb2ee603c33fc33a86ed31b98008f2950d55edd4d6c1697066c8251aa20eaffb2f7e4c535b0f8ed9bbec640e2d18d6670c554b87e9977af1b14
SSDEEP 384:nAiF7ZcIP8Ny8TUNTUlIR+QnhxVJautzTfoBFPprX5PJAoNVmAJNN5TgU/7Iz1ok:bFjPhwgnh1RUBphX5XNYEN0z
TLSH
T149C26A76DC64CEBBECFA8F96A64D7A03DEF40123959C9AD4E9C85D2D008719D130BC26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 25KB
SHA256 246a6d19da4bd59d6245679cbcc97fe1ac75be18da3572182cc758a076b7092e
MD5 25dec1aaa0e759b44cf717457f6b671e
SHA1 fc6ad07b963fd0f6691a1fa4df42c52cd69d8636
SHA512 b203387fbeaedd35555a33e94a9c5352f5542e94495786ec541e2e58523ce412d70a9963a8dab73f76e706c45e7eb9d1c179b268210a66eccf768089d69d9545
SSDEEP 384:zIiFZ3yFaeO8j38Nk8TUNTUlIxBQnhxqeAitzTfoBFPprXw1MyP6UcgL/7Iz5E:XFZ3Izhj3rwg2hpA8UBphXw1MyCa
TLSH
T11DB24A36ECA4C9BBECEA4ED6A74E7A53EEE00153D99C6AD4D6DD1C1D008B09D130BC16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ShaderCache\data_1
Size 264KB
SHA256 f7547e8e63403081617e676f26fc09eace766d5ca3018bc099cf9f58c7ea6dca
MD5 2f408e1d08b542472405ce64269bfcfd
SHA1 e9bdce6ca71e7a946a5a9ce354d25cee2797e3c1
SHA512 7fabe1d7cdf8531cb174ee860eecce6258996e124e257d1c1fd2dd000537d2b178f7aaae5f201518dc9395318b86b6e72f8e6ddc5bb26a84e43b05e33f9297aa
SSDEEP 3:MsEllllkEthXllkl2zEflBxacKll/:/M/xT02z0ut
TLSH
T147440415FFC00405CD4030314051D7501370D430151157C374D14D335CC7D540C00007
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Variations

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Variations
Size 86B
SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
MD5 961e3604f228b0d10541ebf921500c86
SHA1 6e00570d9f78d9cfebe67d4da5efe546543949a7
SHA512 535f930afd2ef50282715c7e48859cc2d7b354ff4e6c156b94d5a2815f589b33189ffedfcaf4456525283e993087f9f560d84cfcf497d189ab8101510a09c472
TLSH
T196A02407C473C00FF4144051C45C034114FCC447011DD0015074D31314D40CF03F5435
MD5 SHA1 SHA512 TLSH

Submit Download

first_party_sets.db

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db
Size 68KB
SHA256 7017570471a78ad48e769e847d3ecc53b29ab635f3813881c7dbc889aac6b8d6
MD5 0519629174acc947c2c07561e82a36ff
SHA1 86d2b025330d88ffa0296c800e75685ad1ea562d
SHA512 b689f780891fd3fa4c0ca883d7ada210791a744d5d04db2a898eca6b4b1fc0d921acd89aad71f740718255550a378f3bc20c2611d7be825a1f0a63d1f5d517b2
SSDEEP 768:lQIOTpdNuwT4shrJWRIdaqrLI1WcxKT0dTTTjTVHAM:qxhaqLI1WcxKgdfHJHH
TLSH
T1C163D9FB495B02D0FB9D40F4924B76CCC35B299C8CF8E792F96188176AB04B4E255A3C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

first_party_sets.db-journal

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\first_party_sets.db-journal
Size 12KB
SHA256 21086d235ff909c17ed5506704e69b8f6433f6a0a0cab8ca7bea70d124fbcfd6
MD5 6542e0f6d17fcb88f294f6475bdd9536
SHA1 1379fedbf2c2262275ab5264d00c519c197c9357
SHA512 d90b29a688fcd35c895b026a4a2984a56492a260b7a2b4c86e6bdb0f0e76c0946b1bfdba6f8f48e40a2cb08ed55d43d448103faee50eff70afba3331f13ccc74
SSDEEP 48:7JefVqZ/IHRH34kWqB1kQnjhHmr6ITmUn:9y6IHRHIbKkQndHmL5
TLSH
T12842886EDA2CB9A2FEE40B3ED7D1D0127B39AA0EC2E4D9F1095B50574AC540405DB63E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CurrentDatabase_400.wmdb

Path C:\Users\Admin\AppData\Local\Microsoft\Media Player\CurrentDatabase_400.wmdb
Size 576KB
SHA256 0d0a42101404a83eb3213d54cbeac4850cdc4d22af988ca81d1a86241001f4f5
MD5 174df55ca92bb3ae84f73f5ace90207d
SHA1 ce62d41c09c1b786438ab30b561b8bbbd3f2ae33
SHA512 c56f0860671d03fc57932a55e175a05a61a03dfe3b68ece20aac6df66994b17c254d2453ee09d02428c551ac94a1e15f86a12d3e7a583504d3d09799d1aae3c1
SSDEEP 768:pf0aleDxcg7KGVp3zT13VuI61HOdrrA9abhr1vfEwPRzitFrzcooJImdba5aSt3r:p69tQeoVYocxYCutFCJGAKt
TLSH
T1F6C40E37A470A098DF3C35B1E2AC6B8CBD72641A12E006421F74B57F7A337D99A0B5E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WMSDKNS.XML

Path C:\Users\Admin\AppData\Local\Microsoft\Windows Media\12.0\WMSDKNS.XML
Size 9KB
SHA256 cb87767c4a384c24e4a0f88455f59101b1ae7b4fb8de8a5adb4136c5f7ee545b
MD5 7050d5ae8acfbe560fa11073fef8185d
SHA1 5bc38e77ff06785fe0aec5a345c4ccd15752560e
SHA512 a7a295ac8921bb3dde58d4bcde9372ed59def61d4b7699057274960fa8c1d1a1daff834a93f7a0698e9e5c16db43af05e9fd2d6d7c9232f7d26ffcff5fc5900b
SSDEEP 96:/YkZRAF6zyHUhm77yB1pZYCEnfHrHH7B6xTGH+YCLV3zwULJEYCJWyHBt3zwFRh+:/2FV0bBPCfUdY
TLSH
T10022A2A194818DD206290E275DB95C0DDA8CE9D3832C24997C9EEB7FDFB1C00355FB6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

a55d30ff-5afe-4ad2-bda7-bb0e5cbc9ccc.tmp

Path C:\Users\Admin\AppData\Local\Temp\a55d30ff-5afe-4ad2-bda7-bb0e5cbc9ccc.tmp
Size 1B
SHA256 cdb4ee2aea69cc6a83331bbe96dc2caa9a299d21329efb0336fc02a82e1839a8
MD5 5058f1af8388633f609cadb75a75dc9d
SHA1 3a52ce780950d4d969792a2559cd519d7ee8c727
SHA512 0b61241d7c17bcbb1baee7094d14b7c451efecc7ffcbd92598a0f13d313cc9ebc2a07e61f007baf58fbf94ff9a8695bdd5cae7ce03bbf1e94e93613a00f25f21
MD5 SHA1 SHA512

Submit Download

cv_debug.log

Path C:\Users\Admin\AppData\Local\Temp\cv_debug.log
Size 2KB
SHA256 a35d5c527f698ae23775a5ffc94dc9f5530727b689b3e7eb886ae0cb44f9be16
MD5 1b6947e5c8bb4f98150de63f7b4cc676
SHA1 57385cad0ff48fd5c10bdcd3bde5d39054298bac
SHA512 2c7affbf99e3699ce77917603e328d0335748345ce632ae030e63d0abed2e5925d577d5e70b72cf29df608ba4371bd18b694f64be558632dbbbce90687c6cf8b
TLSH
T1D2415BE13925663F4BC74BC860650C843560F181132EAB5CEE165474BD9CEE3AB6E7C6
MD5 SHA1 SHA512 TLSH

Submit Download

dc633814-4796-4379-b199-a40ac677f9cf.tmp

Path C:\Users\Admin\AppData\Local\Temp\dc633814-4796-4379-b199-a40ac677f9cf.tmp
Size 10KB
SHA256 67d161098be68cd24febc0c7b48f515f199dda72f20ae3bbb97fcf2542bb0550
MD5 78e47dda17341bed7be45dccfd89ac87
SHA1 1afde30e46997452d11e4a2adbbf35cce7a1404f
SHA512 9574a66d3756540479dc955c4057144283e09cae11ce11ebce801053bb48e536e67dc823b91895a9e3ee8d3cb27c065d5e9030c39a26cbf3f201348385b418a5
SSDEEP 192:YEKh1jNlwQbamjq6Bcykrs3kAVg55GzVQM5F+XwsxNv7/lsoltBq0WG4ZeJTmrRb:fKT/BAzA05Gn5F+XV7NNltrWG4kJTm1b
TLSH
T19D32CFB695286380C58EE63D86423BE3130AFBF8CC05F156815069D768A13591B4B8BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

0fc8ffdb-2bc5-47be-8cf1-bbb0d6bf82f1.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2116_2101181599\0fc8ffdb-2bc5-47be-8cf1-bbb0d6bf82f1.tmp
Size 157KB
SHA256 e03138d37406c2bedec93e5a7c44a457a6b19cf4fee5dfe5a46450fcea1bf85e
MD5 088d09e1a5cd1db2f55a4f5131b75b3b
SHA1 4e017079555c92f2f9419a53ab89aae7c5425550
SHA512 f8e7a1652d20778af9e0aefef0f24bb477260eefd5c6cecd3b4e17276b7d6c8d79554e850b9a9fdd9c65095ae16dad8868df304ee7a057ec7cea5a35b9e526ad
SSDEEP 3072:sA30KAb7L7nAnBPxnb8b4HpQgHY15vClaH4d6r1tx:sAkKAb7L0Qb4HpQgoq8tx
TLSH
T182F3E1AD2FEE891ACD0B50BD3B04B38BC90A8F07820A655F735F8015997475D17A2DFA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

content_new.js

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2116_300163441\CRX_INSTALL\content_new.js
Size 10KB
SHA256 d4aa4602a1590a4b8a1bce8b8d670264c9fb532adc97a72bc10c43343650385a
MD5 3de1e7d989c232fc1b58f4e32de15d64
SHA1 42b152ea7e7f31a964914f344543b8bf14b5f558
SHA512 177e5bdf3a1149b0229b6297baf7b122602f7bd753f96aa41ccf2d15b2bcf6af368a39bb20336ccce121645ec097f6bedb94666c74acb6174eb728fbfc43bc2a
SSDEEP 192:+ThBV4L3npstQp6VRtROQGZ0UyVg4jq4HWeGBnUi65Ep4HdlyKyjFN3EbmE1F4fn:+ThBVq3npozftROQIyVfjRZGB365Ey9+
TLSH
T1DB22B68DA5A8ED7C1AC0C952E50EA62E5D342531E6E7A30320874ED8015CFB9D519FFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RazerAxonInstaller.exe:Zone.Identifier

Path C:\Users\Admin\Downloads\RazerAxonInstaller.exe:Zone.Identifier
Size 96B
SHA256 cdfcc23b54fdb26d51a7a9bc47a2c438a87b57e0bbad797a8e65419272e02ae6
MD5 64172f2aebf02636944d6149836eed54
SHA1 352a8427709eb747098f279bf2a1442b0e6b3072
SHA512 ba4a7def218c7268245736490ebb827f70252c3453629353434ffe709387f5a3d8d15002cd7ad04d5f33ee497df9cb03e9822182cd9bb517fcbfcd5737eaa6aa
TLSH
T117B012274D189C141B1926CA87FEE4ACB04E74240CD58241A8C104CBE64419C0164547
MD5 SHA1 SHA512 TLSH

Submit Download

AWSSDK.Core.dll

Path C:\Windows\Installer\Razer\Installer2\App\AWSSDK.Core.dll
Size 2.2MB
SHA256 6d82f01bb7b25c665d78d6dcf50110081f9876bc0a6c017e0c82708f0019e988
MD5 c97181dfbbbbfc49cdb06a7f596544db
SHA1 5da03e12b5078ebadecdbe1dc1b788cbd8c71856
SHA512 dc17e453f9595fa5b8026a120947fae64aad11430e34560daf838b1d1b9bfbce41ca0d77f7dbe06a1463b5dbaab4c579b52fee43d34d41604dafbc41f5152b75
SSDEEP 12288:IxcBcK4pYvMMuQ3GkJTeL+BBkpiCPiBgNT8o/oxstzDVqY+JRkfXlTg3OhcCtM/Z:L34pYvHxGKT6xplNQo/oxstzDVkkQ
TLSH
T162B5A418C5F04EB2E1EA313D9C3A0183B574A19BAFB86E5C7F0C950D4F0AB595CA97E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AWSSDK.Kinesis.dll

Path C:\Windows\Installer\Razer\Installer2\App\AWSSDK.Kinesis.dll
Size 171KB
SHA256 7ae926656958db6134be7d39e87700c85fa42d5a7431f4d40fc0dbb20a7c63ab
MD5 690217979697a71eb09f9e4bd825d7da
SHA1 5fdcc5b0d9b7278e556b265a0d905cb372ad2b87
SHA512 c31b0153a5b9b5ecae5144be1af9c72e71fea8d809c96b86526ed642fa7f6edec987b35c7070f678cb61fa748e5cd446584856c4dc55d4d77ecb2dbc6e238080
SSDEEP 3072:UrmIDzXDiqzIIQgoQErSw+UG8tsyuA9C9FZROXS/B5/p+t:UrpPDiqzIIQgoQErSwhXtsPA9C9FQSnQ
TLSH
T1EB042C116A6E471AC6FD933DB8B4891442B4FD2E2D51D2AE1F84F0DA18E7F508B207B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

AllSystems.json

Path C:\Windows\Installer\Razer\Installer2\App\AllSystems.json
Size 707B
SHA256 ae1fdc5f37e9a8382dc4e114f633612dbee04ecbb46ab86c0d1a39bdd8c3e527
MD5 60174d20c177137f40f105103494955d
SHA1 9f416a3648838b6b22a51f6b77ebb4a40af282cf
SHA512 477378dd6533b32a5ae3b069b3eba9c097d53f5c5aa827ba2111f52f38eada730000df6e14f0d4c1950798d4bbd66946cfcff76468e4edab3ecc553e29aab161
TLSH
T1DC019BF8B5D208DD1AA806843ED01B8DD8876F8C10B00F1E70BD1B4CBA80EA9696136D
MD5 SHA1 SHA512 TLSH

Submit Download

BLEConnect.dll

Path C:\Windows\Installer\Razer\Installer2\App\BLEConnect.dll
Size 45KB
SHA256 bd882b04e425ff50f6b95ae0a7c3c621063cb31c202af38da8b13ac4e17c19f2
MD5 ba549837eca0ce18e7c0b3bbe0cb2292
SHA1 d48a8fd14467fb211f52735e5e92ad4f12f07cee
SHA512 21f6f6b01a00c592ffbf1c4e5a05609abdf9a0a91ae1a55d648f76c206a6d35f18d4acd66e4d00bc186de825402a102b630505091341bfbfb17e4273ba7e693e
SSDEEP 768:vBYtgSk8JJUmLIPLriCfdz3BB2CEpYinAMxsMu5ktX:vutH1JczriaJRBW7HxsCtX
TLSH
T1A6234B0163DD8913EAEF2DFE2CA452564B32AB072524F7CA0CCDE0E56A567C01D593EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BLEConnectWrapper.dll

Path C:\Windows\Installer\Razer\Installer2\App\BLEConnectWrapper.dll
Size 183KB
SHA256 315014358c49304953e4d50009b3295dd1350fa995477b3f17163282cfb7d807
MD5 65611ed7ce210777ba8ae786a5d1a886
SHA1 cb685859d0c4b616fbfda578d3af8369ca2e3ef4
SHA512 f36256071f9a47ceb15dc57004f2a74bdc377582fe20317175181060ccc2d49f58ef71627eaacdd775946e40e531ed8941a2fec56a5c45323002fd216f7ddcd5
SSDEEP 3072:Gp4bHP7pBO2xKIr6/uSGSar8RNUhtDhEfiHvm24zowbqc8QIt5i9RoelLwm2AM2:Gp4bHP7W2emSbC8RNUhBhEfiHvm24zoI
TLSH
T1FF043A2716E93EE6C4BA2271737387C4D32DEC602792E78E56D64192C4BC35BB152BC2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CommunityToolkit.Common.dll

Path C:\Windows\Installer\Razer\Installer2\App\CommunityToolkit.Common.dll
Size 47KB
SHA256 48fecfaad623632f183b51242666e26f1463f47750cd6982657afede4acf9edb
MD5 a25f9eedde4d67e17848cef908fd9798
SHA1 39c990230284b8a9ae66aff478c3df9d35a86504
SHA512 d2db75acd2f6d816c8e12570f50cded07d58eaad6b70656311dd7bb7197a937b6e4f76e231fc931e81a26281002d7d42be649451abc419bdf4d8e9a8e2c34fa3
SSDEEP 768:A64AdaMttgYFp8RANCPY8Ft2EK5Yi45ALV:A6bdaMEgCPJu7h
TLSH
T107235C254BD43A13CF6B4E35B8E05613AD71F6426C62CF97218D82584F633452BA8F7E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CommunityToolkit.Diagnostics.dll

Path C:\Windows\Installer\Razer\Installer2\App\CommunityToolkit.Diagnostics.dll
Size 109KB
SHA256 6c005db95c9d8726b62ec4a407a88360d40d403f5800e286c22913576ed236a9
MD5 e67a5376ec74dcc444f8856b723cb669
SHA1 b97f96b83d1bf33583c2354e322166980e2c5ecb
SHA512 821d59cd8de2366445f3b36cc32412fc8c722d71bb876ba2712d2087f47a13ffe73e25929d145d07b3ab7c08670daa03a416091ec3491cc1dd66f5cbb5682a3e
SSDEEP 1536:m9qdD0FlBRvd9X0c1tKSNwOr4/s7KctFZhPmA976:/DEF9EctKSNwOrbKAbhP1G
TLSH
T1B2B3E75657BCA521C3FB593048F17400EA726883F4EFA35E358CE4E42A12768B6E73D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CommunityToolkit.Mvvm.dll

Path C:\Windows\Installer\Razer\Installer2\App\CommunityToolkit.Mvvm.dll
Size 124KB
SHA256 9448c8066dd90a0048b17fe896473c97080eb3ca64541516f5ede08cd658673a
MD5 4dae40d38feab65d99bd85e58c082522
SHA1 921e8f2f3ee55c785b9ca5bb163b7c5e7fcefd1d
SHA512 8a7df150dfc72cbf0360d5b5c555f42d4b76b4d2a2f789723ff34cfa24fe92270393e55f888a2cfcb7364f5c564cf898c8f618702e421af670e338b9735617fe
SSDEEP 3072:p+c+yfwDziGuqRGia5iKYR2l+EaXcw+CPAQ:p+8wHiGuri8iI+cE
TLSH
T110C37D0263E85E13EAFF0F7574A8504A8F72FA07B931E39A698C93F105827915D533B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Humanizer.dll

Path C:\Windows\Installer\Razer\Installer2\App\Humanizer.dll
Size 313KB
SHA256 6b84e952e215cb315c44d05c95422360bb7d2b1645815a3d84e8926fc632e079
MD5 b2bfa27df5221e5c329fa5f836950816
SHA1 720a3c0fa41b1bd5ccfe14882ccc553583d43b71
SHA512 1db5ca03f12a1ae19f5805eb25fe2574a716d54c534ff897d130b57f59270f4af73df249e2bb8bf415f1efceed757cfda7c2ea15160bbd2274a3843402ed7eaf
SSDEEP 6144:QXULlyavR3au9F97QjF9f/QnsdcDePXgmT0jH5S:DXwWDef2S
TLSH
T14B644CD817EC5811FBFE53B0E8B412108076B88E2953E74E54EDB0F80A37B699D857B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallerConfiguration.xml

Path C:\Windows\Installer\Razer\Installer2\App\InstallerConfiguration.xml
Size 379B
SHA256 ded4476e9983cd65a237ed6259fd6dd9d4b7ab0d9117af527d16b201cbe06486
MD5 441363454ec3beaf9806db321d967e7f
SHA1 d89687744eb1e07ab8497b625b2d7a8d1a37cb05
SHA512 467610de667009c74da3b4ec3dd346063715194b0b3f7b60cc77bcd9ee57507b1a6a3cf689216e022a6b072ca053104601793d0ac326bf5c3c30a34c064267c4
TLSH
T118E09249EB07CE0D59C88316A32DC55D3719620584F064D4BCBF086B3FC26A82A1A035
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.Bcl.AsyncInterfaces.dll

Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Bcl.AsyncInterfaces.dll
Size 37KB
SHA256 58216317953934c942ba0ce67fbfaf817d5222dbc9631db162c81113d1be971c
MD5 692a981d7147de4eab6bc10382642826
SHA1 714247554910c98a32c410338b6b509bf331f510
SHA512 78f0edbe4063e0dca0de37c61442db90169b33f4763eb4855e093da57a46501e922f1233f1e13ffde7b9aa9290e2196e697833b8b289e8936d1937d07478b82d
SSDEEP 768:qulwGBhMQVv2wK5TdcBXFClIxEpw9z/M5Yif+B5AL2:3wiPtKpdcBViCEp4ze7f+X
TLSH
T115039D27875C2207CE6F6E70F4A4D6572E32E78A2C52D6EB2148E1951F57382BB35238
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Abstractions.dll

Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Configuration.Abstractions.dll
Size 42KB
SHA256 d934298901d07f656c0af021c5a0f2856601ddb75fab3ac26c63658ea68daef2
MD5 1462e72a07131663c6f2f7b87b6d238c
SHA1 131f905612024cdcdfd59f4dac011a8149f21730
SHA512 2425b24d5d8839b461f40eafcd812d73570a7f93fe5bd51d2c53d79965078cd51abc3ea84a8bab4bf67e38db5893492b87fb1697c1afea091ebc2ce422104869
SSDEEP 768:BEOEDAzHh/SolpZgGWFe9zrnyKRqT5YiF5ALI:BbzYofZgGWFazeMC7p
TLSH
T143137C2243AC432ACE7F0F70F8E4D8112E79D39A6812DAEA658EE0450F673C4576137E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.CommandLine.dll

Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Configuration.CommandLine.dll
Size 39KB
SHA256 0188b70455a4e25a85769a3e403409d7b389c0fcbcefedb73995901acf86841c
MD5 7632b242df51adbf8f096b87a5f99c1f
SHA1 f87fea5f88aa019dc8cde90207d6981e9f7cdd88
SHA512 69b17f31442e838c43a5d14663daea051487b56caf44bad905b6a3408ff4c7c25a1bf49f3d948829b63891fa8286749c9590958a944a28498bf833e8a9e9be4b
SSDEEP 384:ifcTDILvj1Q2swwkurUjd5oIW9jnWDX6HRN7WWpR9zx1MaHQIYi/qGNny8RbmL4/:mCijC2swwlLXEWWWD9zz5YiVd5ALlPC
TLSH
T128037C7247BC8716DD7B1D30B6F0E5222E79A7D22821D9E6664DE0090F67381AEB133D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.dll

Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Configuration.dll
Size 58KB
SHA256 e482ab5fa74cd5a012bd23c98c62f4f31b858bdb4b076593d37ced83921f7c0d
MD5 9aaa2d28365473b274e0f668349a335d
SHA1 53d0576aa386a25a8e939503505d6a5a8497162b
SHA512 72d442fa9ed5a83087e82e79d47874592736a4471b30aaf61191b2f4e4c4bd8efd6f7bda672d81b7c19eda3c5de641474e233ea3b347ca9ec4a3dd6e557c68d4
SSDEEP 768:6JuSggyqMPGswGi1n8COkEW1ajM2B1nAwZ+Rh/pvMWiK9zI5Yi75ALJO7Q:6JurgyqMPedJQjuwOhhvMWnz67aOc
TLSH
T1F0436C6243BC4B17CEBF1EB1F5E4A9161F39D2877941E76E589DF09909B73801A0223B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.Abstractions.dll

Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.DependencyInjection.Abstractions.dll
Size 74KB
SHA256 55f945cd69cf854d43f3ec29191183080e8013ffd69c8db023813de366ac803c
MD5 37117716a73656ce22eb757561e711b5
SHA1 342ad7ff3e8fc0aed4299d5b36bd795a37f7bdbc
SHA512 2f883028316be1b203d3dc2a6e3783f5d8d7c285ea2b86cd5b2ce5262c018489ce05c562fed563774199d1f02bf5aebb4f2f2aad983456c01bb2f3b8d263cb67
SSDEEP 1536:l6DVJaJ3loULUr8nKvhPhwBzgj1sWvFC4dezJD7XWP:l6DHawULUoKv/wRgxsiIJ7WP
TLSH
T1F5734B6523FC8B16CBEE0A70B8B395109F35FE476103DB0E264DD0A516B3FC856A17A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.dll

Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.DependencyInjection.dll
Size 106KB
SHA256 6294dc0787720dd94c4a8ebf556f1477b8d9252313943a4b3dfab4c5feb9481f
MD5 ff990b100d9bff74b049ea641b3199ff
SHA1 e4bc55ec5ffe355ffc34075270589212ffc84708
SHA512 e6c0b489381c75c8047f180c52dbf59884019803122a087f6dd9bea62cfd5ac625fab9a1d6d7467b63618776cd73f9541298f1d247e4fb2c8ed5b6e35ddcf2ee
SSDEEP 3072:S6Mn89dsOdS+mm7WY7u1hIatvbpwGqvlYznnb:S6MEdsOA+J7JoOatvNJUYn
TLSH
T1CBB38C3963FC8B26D7DB1D74A87451160F75E6CA7002E36D1E88A45E1A93FC30A633B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Http.dll

Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Http.dll
Size 93KB
SHA256 4f87ea4a45bffe95c5164e1ca1798d7ff22b1962356bad4a1c17201147996a93
MD5 0c19d0d628ff485ec6ffd7e7d3016164
SHA1 ba114b2471aeb140c2b4fe0dd4bd8d1381c33fb8
SHA512 6ece2d97888950db1a3fc2b8729708d2846c935cd38ea8d2f7dbb84e446be84aecf71c9d8022394227066a9ca8987e593d7c907a4780320d5de3c0b179b5f254
SSDEEP 1536:0kb05kjwdUhHhmIQD8ECTkrkwYd9iLwYkc5w3izzB3oKxxkWRGnzEcY7o8u:0zqY3mQrkwYd9iLwRWlxkJn4Xu
TLSH
T139936C1263EC0217CFBB5A74F8B4E1168F36FAC22A12F79E694D70DD09627D18B50326
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Abstractions.dll

Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Logging.Abstractions.dll
Size 79KB
SHA256 c444149ed5605d4cd89e5eca52badcf3d6c9ddf31d527375a811152ff9e97dea
MD5 ce1918f70aae6cc25b17c58512ccb005
SHA1 862a550011f30d27f7cb6a5a8863ea89519d6cf8
SHA512 51453e002038dc1e55bdb59e9c8bd73e5d12f6ea289a459c2ad54ab600b59eb81bca945cc567adac14aa60b2a655a2a30190756ebf15893652fc7747bccf22e4
SSDEEP 1536:fALG9rlWRGGoCjoX1+0EM+Vr2iQ6ezP7V:fAirYRGGo4pM22AeDx
TLSH
T16F837C2227EC0723CE7E5D71F0A4AA526B39C3A23146D3976ACCF52538AB7C45E41376
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.dll

Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Logging.dll
Size 65KB
SHA256 ebc3a5520fc7a459036cb07bdbc1589ae389fe3185c84c3d199f417357edb8fe
MD5 a4b82a59a8b788c6a41f06ca586f0ac3
SHA1 31e862fdfef32df9fe137e9dbc65ef2fcc200589
SHA512 761da39efdbff205fe6763b8acf41919b70fb25cc94d53a4317716e60184c36a8a7e3c26ec7ecf23e49260c7e8afb2ebbb0f7d22e9135b7bb3ef77d9824bf550
SSDEEP 768:bN35uJQoGEJSqIV2py9vS+c2tDjZ7tBITsiJW72l9zxEM5Yi0P5ALggm:bNcKoDJSXsE9zZQTsiJWa3zxE27aJ
TLSH
T19F537C1247AC4367DE6F1E34F8E499458F36D79A3012E7A76ECCF4E006A37805A6127B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.dll

Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Options.dll
Size 79KB
SHA256 c657d6c098071cfad6a0b4c1b54ccedfa833be36f8ec44beda63a1615632b798
MD5 df7513938daf05526b35605a2ceee362
SHA1 ba29717f078cbaafb000ca362646ba7ba6463b1a
SHA512 3dca0e3d60c2ceb8c9aee6f578a1e788e88ba3670473c488b4660e7de77539794393f95adea7b23c3967817d5d9f3a4ca114bd9d30560664a69657219811fd64
SSDEEP 1536:ZTOFzhcAI4rmPTM8BoeoGkhM9irkdyZ6ljs6ALWh2zc7j:ZTGzhnlsTPBoeoGkVkdEoPALn4/
TLSH
T118836E1386949717CEAF8D71B8E8A1371F35D3077902E7BF428CF98029573496AA5738
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Primitives.dll

Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Extensions.Primitives.dll
Size 61KB
SHA256 0b7aa56a92d052b9e7ab8ce7572b44af0ea789a5dfd5760a642fb1a2fe2e1462
MD5 d0c8ce884e6453bbf1ea7cfe4228e530
SHA1 6db2d74fb675d14792bc7633e4469dd7e46e8761
SHA512 2b1a7498e41662577d2321ad4a7a5029d0c74082495c2d6abee065070b9329390690ea4e42fc6b94ab5729737f0536748ee4e6d2e1409c4e7aa671a88a5ad33f
SSDEEP 1536:Sqi7hPAgcf7EH/Y8OPigcjZJuivk0YWrzj73k:vGfcjYDOPigcjWi80YMHLk
TLSH
T1A7539E2183AC4737CFBF0970B4D5D5911B35D3E9B912D7E72188D09A5A933C24AB13BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Toolkit.Uwp.Notifications.dll

Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Toolkit.Uwp.Notifications.dll
Size 170KB
SHA256 22fee6b9191f507626c348674747be197dcdaf9bab939f228c5c7fc023ba7356
MD5 6a32e95b81053d0c580657ef077ad57a
SHA1 a35c276e7400866549937a0c132bdc69c17769f3
SHA512 7aab64b58a3b9f0fa40c26c706a4677f1ba3dad6b453c39ad125acf6c6bf7f99338aec02f06fff405e18c58cdccf975bd42a945a631a8d7d47f153326dfa3789
SSDEEP 3072:84burBkDijpS3+n1Sr5ePVM761+fAwbUx6K:8iikDiw3+1af761+r
TLSH
T11A046C2D33A8876AFAEF17B8F8F424254F77FA4B7425D2998708D1AD581378085523B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Win32.Registry.dll

Path C:\Windows\Installer\Razer\Installer2\App\Microsoft.Win32.Registry.dll
Size 37KB
SHA256 657ec838391e40287cbdbc889454d535c1def1a9c538d8ba3c63acd584a10438
MD5 8750598dd2cd1a19d9760a4836ac888f
SHA1 f63ed2b98c84018be6b4653cc83b3addaa1959f5
SHA512 279d27373c2bb36fa40778f6bd28c64dd3466cb529dcac57bf9ffa9f768011e0eaeea08ff1668b140c696adfbeaff4fd29bd2d136d722adf515aa8578272ed2d
SSDEEP 384:i4nLpSumfSQrlHViaCZYvLPQmlJLfjnWn6GWAdHRN7isfVlGsa9DHQIYi/qTq9yA:i4QVrxViR9mlxdGizR5YiJ95ALXu
TLSH
T11B035C129FE4052BFFBB0E3179B4D5225DB6F6C62D01C59E2148D28A1FB27C9A671338
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NLog.dll

Path C:\Windows\Installer\Razer\Installer2\App\NLog.dll
Size 841KB
SHA256 b911867ef2213e93d6ddaedf37ceeb8022a6aadf2bd0da31dbc75040f3802b15
MD5 6b99cc30bb8a163094cabd9454e3fb61
SHA1 afbb727b1d827803bb326ab8c89e70602f85e1b0
SHA512 75a9419e447e1b7b71391ae53052b3c58582b52636b4aee70c8dc0a6e837d74245533f380dcc270db1c25b8af406a5fc9a20026c56bb3506654229ae95536621
SSDEEP 24576:eMfWnunGn2PG3ssAjzGHkRnnPiUQPnkbEXtNtFxdtv:lfWnunGn2PG3ssX3ntFxnv
TLSH
T10A054B2133E99A1FE59F97B5E47016298775F80A67E7E79F8A01E6A53E523008C013F3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PInvoke.AdvApi32.dll

Path C:\Windows\Installer\Razer\Installer2\App\PInvoke.AdvApi32.dll
Size 61KB
SHA256 764f3e59c279c3d41c1a3cb96ff24c0823b20acd416207cee101be69860d2225
MD5 291ec1f959cd83f583adf61320c80591
SHA1 d7421e638e208c1657cf4bdb7cc0052c436b2e7f
SHA512 aac0d335d35c2a20c369924a29951f45630eb967043f8d0a25c2e9fc0acd83e280b065ee4ff7bb852a752be033e8d5d0f9ecd5be85d95fb1baf5bcea34a5e793
SSDEEP 1536:OkxOYabYAHYTvY62yn2BjStrmUsid0wZv7h:O2OYabYAHYTv99n2BYmJqV1
TLSH
T1D2539E5987821B96DDAE0A39B4D214028AB0F1456D43EF5332CCF1A05AFB7DA07571FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PInvoke.Kernel32.dll

Path C:\Windows\Installer\Razer\Installer2\App\PInvoke.Kernel32.dll
Size 121KB
SHA256 c05adaacf9914c0dcde0af0a12209dc2ad4f19e16d272514378e506acdf71c7e
MD5 808ea5cc05b76f023ff36946e186ccd4
SHA1 abd4836a0c481056df9f57abd233475a8ae5bcde
SHA512 d974ad105428e9ae41016ab433994aac3fc374c65429dd24b56757093ea00e9c3b6cddc3db7c786a0eb6eb3d2048ce67e8ab55d8047294887dda48355bbc28f0
SSDEEP 3072:YXYdNNLdaD72aJ6R/Y19tK66YXF/1VE65Z:T0D72Lg19tK66YXN11Z
TLSH
T192C37C704FB04AA2C87D7979A0F21545CFF0B5895E62CB5B27E4E0750ED37840EAA3E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PInvoke.User32.dll

Path C:\Windows\Installer\Razer\Installer2\App\PInvoke.User32.dll
Size 120KB
SHA256 138275b7a23e4dc560fcd20a3166cef070443bc8f03512cc3b62ae7783328281
MD5 07175105a136f7afddda6754c4bf41b7
SHA1 b70237245af172edb498ec8d8c98040d4ec6d508
SHA512 128771c594a37e401ec3c328e440f90c29d833c25098e53a8f43394663082fee9e10cac009cda705f86e3a7fe06e2ccbe283a273c45ef0ed5566ab03002367b0
SSDEEP 1536:E8KmJFNuLzdYnUOWf1Xg3kzibegbWGDbY6nS9CzQbraKzEZJKiUydt09VEC6az2s:PFNuFjOWW3pS4WGDIMspzEZJzIzkNS
TLSH
T1C2C38C109B6C6D98CA9E16BB34B70B06E6B0E4C9D82BC363529FC075A9737F5065C2F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PInvoke.Windows.Core.dll

Path C:\Windows\Installer\Razer\Installer2\App\PInvoke.Windows.Core.dll
Size 278KB
SHA256 e82a879597732761d120c9dc333dd67682b7717673b090c0f6be5c891dfb7a2b
MD5 9d8abd5baf87b844561bbbad73cdf84c
SHA1 ea49ac345071d6c2c64c6a3f44990aa51dce5f18
SHA512 93463e5389bf1f18dd3fbae390ff7b105bd6744fc917f64bfc87c52a33574f951789589d155146e93dc4a5c88358238430355b2adfffb802f60d02ff8485a52f
SSDEEP 6144:fkuJg7d5CkdNHmq2xOs11M/BCF0z3NTbAmM:fDg7XcN1W/Bc0jNo
TLSH
T16554A165AD123B6B8904847E3AFB1D8718D8D308130879789AFDF7CD31E887259746EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PInvoke.Windows.ShellScalingApi.dll

Path C:\Windows\Installer\Razer\Installer2\App\PInvoke.Windows.ShellScalingApi.dll
Size 29KB
SHA256 cbdbd2da7f564f01547761ebcc7270f29c900ea9ea637e54d524afb6df7873cb
MD5 3b64bcc36bd804ab991be53f01adabaa
SHA1 4ccfe5a4b587501c2828ddd385ea260bf1bfeb37
SHA512 c74ecdbd570919a58d58bb84f2cc34fd45982c7993e5669836bc5d87b8d592f8bdeea3a467cafa1d0064afdb324b37eb8590ad349b476c23f78b71a94b976a8c
SSDEEP 384:RM9Jxp50tyrag+mZSZmZPdT/Y/p4i/8E9VFL2UtQkHQIYi/qTDdy8RbmL4nNya6M:R+n0tymg+ed0/peEdH5Yi45ALVM
TLSH
T111D26D77CA906C06DD37DEB174E49A13BD79B7816D90C9E72109C2508F813826FEA27D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PInvoke.WtsApi32.dll

Path C:\Windows\Installer\Razer\Installer2\App\PInvoke.WtsApi32.dll
Size 30KB
SHA256 6700179e05df91626387f6ef037a8afd40a22ce393ba3464e5b59965233494b5
MD5 f5e6dcf22ea4167a831d8e91a4425fdc
SHA1 063b2ce02639a102f9c7e9e147b4e792d92f7b4d
SHA512 fb0dc170d4e5c3f5cce4bd936389a69d53ab68233432259bce514b21f8a2e4a028cf6d14a62df16d76c93ad39eaf7bcf29bfed38df57bf4a3929d2248af1a067
SSDEEP 384:iLviC9e0ty5yTQZSZmZPdT/Y9qA4i/8E9VFL2Utpz26HQIYi/qONy8RbmL4nNyrP:iDy0tysTcd09qAeEdEw5Yib5ALh
TLSH
T1F8E27D768A906C16DC3B8F71B4D19A17AE71B7826D90C9D3224DC2508F817436FEA3BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

PatchExceptionalEID.json

Path C:\Windows\Installer\Razer\Installer2\App\PatchExceptionalEID.json
Size 131B
SHA256 0f667d54883d3ba72a8a0cfa864431f79d74905e92976be0611706b1191c3c45
MD5 1a102291d5eb3146ffd0be2969ee0eae
SHA1 f35b9158d851d1ffe1a5dfde74cfecd2ec2bad94
SHA512 56a987b077f88f0806b7daf1eda464fc393279a48859abed0b6ed942056e0d8f3bacdac7fbdcc40362fd1add47d6d81c7b9559083a567d37365c1b275c44e017
TLSH
T1C7C01231C4442C0D40B8C730549C4304D48433A744500A43307D2D1C3F3130C4BCFC5A
MD5 SHA1 SHA512 TLSH

Submit Download

Razer.Analytics.dll

Path C:\Windows\Installer\Razer\Installer2\App\Razer.Analytics.dll
Size 43KB
SHA256 02097b1a1d09af9022baad0d0e25c46170fa68d2fb4c586c8f84ba09f6f49668
MD5 25acef62becdce0c6b4c1c822147f554
SHA1 73fa43f2b0b54bb387c46ad404c6c5b8d4363fb4
SHA512 d8e70aa02334ca45ad3a3f2f5d90bef81823c3df61914d2e1736b57c48ddddc3e7fdbaeedef00508994c28280bdb82d158268f9d411eb894e127b5dbadd90aec
SSDEEP 768:58mWQrXs3VyJQdx+Q1FISUWLIlKbd8XJ5Yu6kP1cJczyUS5Yi65ALR:/r8UWdxz1dU9oWZxRPecQ7D
TLSH
T1AE138F01679CAA16CA5F8F78F8F085114A72B7467812EBAF5DCCA4CF0A633425E1536F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Razer.Installer.CompatibleV1.dll

Path C:\Windows\Installer\Razer\Installer2\App\Razer.Installer.CompatibleV1.dll
Size 109KB
SHA256 ffac92062cb94520b1f29ee8031bf5511d4f647eaf0839947d25ceb135d09f3d
MD5 16f4e12e14997fff0171e0047f636f01
SHA1 72c26c7fa7e6bff051b5fbb2ad84195863e5802b
SHA512 560699063479e606eecbd6ca62edd05ecb94e6bb5afa13ab0fd617f3858746d875d00d2fc5c2fd8f718fe7e93bee9371d21d9ca2f68838bf902b8fc33d391938
SSDEEP 1536:Wtccin1zvwUpx13vtIjLv3nR2CkvhgfEIVbhmPdL1q0advHISTT3hz7vt:WtmRvrILRNWgdbiadvHISTTxzh
TLSH
T168B36C5883D88D72FADF5B7AF9310762C7B0A2053D5AEB9E4A4CE4EC3643781D9405B2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Razer.Installer.Core.dll

Path C:\Windows\Installer\Razer\Installer2\App\Razer.Installer.Core.dll
Size 259KB
SHA256 bdcb81a0545abdf60de7cf385bb3192b3972c9831d2de7ec50ec3655a3d29b12
MD5 3419e6351f86085943c7b9be9f73bbc0
SHA1 c40948e7ad512cb8e618f3f86f52e722893eeb55
SHA512 695debcbf366cd1dd4cc0984ce0e8a18310aad9df53497d77109d8b353d71840116aa8ff44d866dae3c9b978ef12e8f64ae6da7c73f346d64b900988ca867823
SSDEEP 6144:oFWs5wAp5Bp0My7KyUyjd2E+pQSbWc8bB:25XBCMy7Kybk5pwcgB
TLSH
T1FB446C1123B48335E6AF5B34F475092587B2B643A866E78F0ECAA4FF3667342A411377
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Razer.Installer.DetectManagerWrapper.dll

Path C:\Windows\Installer\Razer\Installer2\App\Razer.Installer.DetectManagerWrapper.dll
Size 111KB
SHA256 945859370928470bedceba929e7d608071aae6e1bf0c3f13f17ef7da6d5e2a7a
MD5 3e54348c213348aab48e508f1c2c76d1
SHA1 f62c6b698faf36bb950e48cbec2cbfd8658b6849
SHA512 00de515677ace6c3a4b366b66d9fcfc3c846e304720c18f7a9f399c5dd5e46836e05a5b74583754d38c6a50fd0114b0aab29a3510af39ac2e4488569f1667c76
SSDEEP 1536:nwjV2AQ2qOS36V+Ql4o6JLCheQ4hE1oLbXOwH1eQ7j:nPGV+to65DQ4hE1K+wHYQf
TLSH
T1B9B3F68316D6786BD4BD81753772C38082ABEC4469629F2F11C953A298BD2DF388D3F5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Razer.Installer.Hub.dll

Path C:\Windows\Installer\Razer\Installer2\App\Razer.Installer.Hub.dll
Size 63KB
SHA256 76bbd4128bcef62c5725280ec23c463660f1fa77640c3da137265ca72b801d2b
MD5 88c5d2b8e0cf920fe7db87b2f7ddfd55
SHA1 012a50fbfc2c06c3f86ce647b617a9d7683c5915
SHA512 3579f3d643749a3083531eba58048f16037e9ab060aa59a9bf2e504a0dd08eec57aa26512dd973de390a3f6c02448b2002e990be3a07d3549f6fcf3dfbddd52f
SSDEEP 1536:VqU+/EH0u4y9r6wqrZM4+UPoxzMGhjLMRo7m:x+/Na2wq8UPolMGhjgmy
TLSH
T153534B0167684E33DAAF5BBD7876012F0B72F3469452E39A1ECDA0DD2A7334266143B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Razer.Installer.Hub.dll.config

Path C:\Windows\Installer\Razer\Installer2\App\Razer.Installer.Hub.dll.config
Size 1KB
SHA256 6a98d3e7e998fc6001d391713517b97c1970fc898e9f51bd025788c472991c69
MD5 26ff98b1784033a626e7932ba2335848
SHA1 fd373d15937efa0906ea035915cdd66dd2db1102
SHA512 c351d6bebabee9ba9c01ea3dbc6bc76ece086f98565f11e6a3963ccdb8ad348070f6904eb6978363cca8fbe47bde34b6edb0c0db65ad6e9f17b8278ff95f0565
TLSH
T1AA310C11A1C86FE40B7259F23E6F6818CB7D03B72C8D058DB0EE6F878F259594207076
MD5 SHA1 SHA512 TLSH

Submit Download

Razer.Installer.UI.dll

Path C:\Windows\Installer\Razer\Installer2\App\Razer.Installer.UI.dll
Size 9.4MB
SHA256 e7576dbcdbe08c6aa6104841d41d92a543fc723d40d9386082f798ae60ae5154
MD5 3aa2d4648b00b318a8fefbfad4049ba0
SHA1 c46cfe88e06a720d5f6305dd87f8447077ce6f37
SHA512 b2be58814106d3e566c3a1a60a2b279d8fdfd198d6327ae5b3532b9db18008866809eafa9f30b64316987658ccbee46d761e57ae0b0fc89f4a77ae399ffa4177
SSDEEP 196608:wjQ7ch+qTRv8CUfy7bvv/h3ShltqVQm8iSxFTF:kQU8Wv/hCd1DiSxJF
TLSH
T1AAA6D0FBD34149C3E08717741073C75566A76F2A2AE583071EBAFE397D662828DE2207
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RazerInstaller.exe

Path C:\Windows\Installer\Razer\Installer2\App\RazerInstaller.exe
Size 496KB
SHA256 ccb0eda8702b74857193b0e781d3bb893e9c771ad616e660b373287a76e9b4dd
MD5 a281982b3bff60d66b357368064e27b2
SHA1 4c5b213e032feaf8697b096aa1d629ad12be9d33
SHA512 f145963008af0f5b0d809fb4b0b969f389490c1a3157c3761a4b87be90accbb72c78d193fd74e804449d0d915d8bda5a4f6f0ea6a14bd19dd79f2f483653a08f
SSDEEP 3072:2kfujKHbOmxrKKHbBTQXUPdywGyTZbOmxrKKHbBfQX4PTyw7y3Lv6:zxrl7BBTFxrl7Bo3W
TLSH
T1AEB429CB2FB4BC4BC82CCA706D2285D1C4F66DE7D41CC615E3806A4E76AB38C7525A6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RazerInstaller.exe.config

Path C:\Windows\Installer\Razer\Installer2\App\RazerInstaller.exe.config
Size 3KB
SHA256 d2521026d7133b275fe8b0a4b1f1aac347918b29b168ccbf25842fed090ac118
MD5 271f3f2eec18eba4ba185494e4dfec37
SHA1 ada656988758271205e20d14c3fc4447914dde95
SHA512 1feb3dd09ac5b618ceacfa6bdd91cbccea2d021e97762bdb5c2c28ce4b9bb93a3b43920f9b9aad054851d39192d83c2dbf155dd427bad8959c239fbb84e1a967
TLSH
T167812B20D1C8ABD98F7255E23E6B6428CB6D03B7288C459DB0EE6E4B8F35D965207077
MD5 SHA1 SHA512 TLSH

Submit Download

Serilog.Enrichers.Thread.dll

Path C:\Windows\Installer\Razer\Installer2\App\Serilog.Enrichers.Thread.dll
Size 18KB
SHA256 80ca35499691513ce0c2458c8feb11a542f8ff94c82d882814bbf902185a35aa
MD5 9988b591973dc2553bded4da71501d30
SHA1 7a3cbd4e87f176298880149b16e5d5d40afa329b
SHA512 95a8a74a639666dda46aa440328306234701c4682d4f3e28935dbf59f84ebc935af09c4f929f2367c2c04ae63c45f20d3b866287649249b996b7cc792a04b7b3
SSDEEP 384:p2YX3Jc4s0sw+F7HQIYi/qTmy8RbmL4nNyexns:DWI8r5YiZ5AL+s
TLSH
T1F1826CE387DC2C16EC2B5F30F8E491276EB6B646AD92C6EB700CC1165F553412BD9239
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Serilog.Extensions.Logging.dll

Path C:\Windows\Installer\Razer\Installer2\App\Serilog.Extensions.Logging.dll
Size 39KB
SHA256 076d5e06e3d4e7871d375d2b0429b693bbb3cab97c74707e21b4955d260b4137
MD5 267642edcebe4c05caec06f77d9c9da6
SHA1 9bf1ac4566451190d24f2b5e60b9ca6904d4bdd6
SHA512 93d5828d6747bb6abc452bef765757e1c237b26028143cfe52322e86b7e26e4dbd913a6cee9951fb4757fe0e5f851198f900761e1b0856e98647f0543e049917
SSDEEP 768:JAySqi6DHvlhTvQkcfMf+nyr5nbQQ5Yix25ALB:JWqi4lZvc4jrVQC7xn
TLSH
T19F035C11A7AC1B36CC9F0E34F4F595A02B74D2A1B421D68E768CE2A5CD7374217B226F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Serilog.Sinks.Console.dll

Path C:\Windows\Installer\Razer\Installer2\App\Serilog.Sinks.Console.dll
Size 51KB
SHA256 b1ac78bc0e366fbaed6e6fa4bc5385c67df15a989f0e2aa889456087023b692e
MD5 f8bc096415c57a51dd240af638779330
SHA1 582cc9cc6c0e0948766ae098079af1ebac3f512c
SHA512 4770bf151d999b25ba26b32af1940a9daa1083c280b58a61be19705e32e2ac01715ed022e121de4afd678ffb8b18095cddfd87809b8fae1e2e1f6280b4122f86
SSDEEP 768:fs/dJ7356ZseUE/k0SpjJL3dQF6xXOFIRoer6kFJHNsAWvwW5Yi1+l5ALF:fMeseUy+dL3dQWeEDr6kjNsBYs7t
TLSH
T188337B8E23DC971BCA268B78F4D114158671A92D2A13EB4CBE9DE5263B17B49334073F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Serilog.Sinks.File.dll

Path C:\Windows\Installer\Razer\Installer2\App\Serilog.Sinks.File.dll
Size 43KB
SHA256 697732361b680ad3044af43d2fb39230b09f9d5ecf8e0eb71f0a66358ee57b17
MD5 02d9bf092166992c7b243755fbfe0f3c
SHA1 3b355e2c88e29a9e054b49ef5e9491463a6a439c
SHA512 0886da838245e724e049cfca6df70b8444b198093b7b19e2d6a0d582d899fe19ea4df1a9c6120ff424a8716ba768f1dcd8e2f3d71411d091de71ef42db197769
SSDEEP 768:05dLLyBMV/2zgqE2Rujcj/erZCCpz0PBHdDFJR/DW0FfrnNu2xl5YiM5ALq:05puBMVOlBRuALerZCLPdJRasrjZ7y
TLSH
T15C136C566BDC521BD9AF5F38FBF011130B76F6A2F822C69E558C809E1E12B411E143BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Serilog.dll

Path C:\Windows\Installer\Razer\Installer2\App\Serilog.dll
Size 171KB
SHA256 ba20bffdc304ad117f2f4eaaea63afe9480fa502463b5082bf87d7efaeb66ae3
MD5 743c58566adf7bd34cdb925d8883d1da
SHA1 28ed1437782d2712d6f27e1776f7d86e6cea384e
SHA512 7aad86f62b5fc7baa543ad98b713828273aac2a1119691ea88cad221c972c34a18948b802fbcff19e84c186e90ed3872a7dc4e207758471ec3ee1083b704f7a5
SSDEEP 3072:y0Q1QkRXfOBKnSvdEE+oy4E08Pz4OqLL/+jDsSkNVM97wRxyDKC:y0Q1QkRXfOBKga3b4886Uzu
TLSH
T19D046B5563FC8F25EBDF1AB4F8B050140B71E58BA026E79F3A0C65FB0D6370A5A443A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Buffers.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Buffers.dll
Size 35KB
SHA256 20f4593faae04b0d96e28b9e99fddb362ebcc6f6fc33ba968e5d45f24004e559
MD5 65691f5660de0816c5d379a191e0f2a6
SHA1 47c52e8471c048473597cff28878e47fbbf0ede0
SHA512 5a9bafb10c2cb8d250b3780dc89f482b7379d4e6d5ed538f6a954db91c98ff274a58797a6d804dec6a726d17094706ab61ba359fa3d0bce3d780340fd93d13c7
SSDEEP 384:kRJyzxhqFAB5n55560IxEFuAUTcxR+sDWY82WXX6HRN70MJDtdQ5R9z1QUMtGHQe:CJyYkx60IxeuSMvWJds9zp5YiO25AL6
TLSH
T119F2AE22CBD8140ACE2F9D7075E4DA563D3AA3C66942D5EB114CD5081FD3386AB722BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.CodeDom.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.CodeDom.dll
Size 41KB
SHA256 7d011f6067ac61d8c46e6a143136f04795f26bff09537da24ff5bd4b9853fc11
MD5 c36b8ef790dd28b74b385eae12733a36
SHA1 e9edbe97ddf288c9dca65aed5aaf1c70b473d2eb
SHA512 90d563d481e9a164a47f304b0bfe27268dba25ab218ca0b119b6118c4962d9175c0c9b711e3eedf29b25a3fbdaf2178f5d64ba2322f5d2be6bbe8001772c847c
SSDEEP 768:mK2hTjaveEtYehzZ57FClo2l9zxE++5YiuI5ALp/Q:JAsYeh155i73zxD07aQ
TLSH
T1E1137E6282E85D7EEEBB4F3074B7C1A61FF5B2D32821C29E1144E4091BD1BD05A7277A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ComponentModel.Annotations.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.ComponentModel.Annotations.dll
Size 53KB
SHA256 4468eae289895c161ef18017516595e9e4550a4a607e712893cc435810708999
MD5 12790d0daf30ffbbad71379e7ae3d281
SHA1 25d795d5eed5aed0c65a6d1e561b5701f18d66ff
SHA512 fee7c3c3aef3b4e19a29f9e6dd20017082436537ffaf0d2705239fc53948b3589aae2aadc03e896a72b50fa83f80fd2c5e59acc7593cd0197caaf0349d4a7f69
SSDEEP 768:TXDQsPurQcR3y6JOnSHDYFDTViKLQJ05Yiq5AL7:TzPtcE6JhHEFnVFQJe7
TLSH
T149431952A7F81439FDF34B706A74ED9A5D7BBED62D22C15D2098D0CD09B13808BA173A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Composition.AttributedModel.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Composition.AttributedModel.dll
Size 32KB
SHA256 b3f9de1f75e9c04210ec1c4c94d1497f24bc45b3f852429c97ec373517365d3e
MD5 9f816435e6772af9e1ca6a6645874a32
SHA1 1ea3b0d924378728a607d05e50d9b83b40ba6143
SHA512 0572e6ab9478a033c4330d764ca60827263c91f3f1652041025dcf9f7aa839a65d1aec268afa07de90d552e96b065c03b4c9454dc29bcda2b8444d8c538743ab
SSDEEP 384:cLSfXtK0uLBHSlSi/wRBQFcqWIMvVxyWb5kHRN7ZgNNPR9zbKeEHQIYi/qz8y8Ry:WScLuWBQFccMNxaZE9zG5YiR5AL1
TLSH
T1F0E29E7287985216CD574E30B1E0D9222E79B7852C21D9EB228DE50D0F973876B3877E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Composition.Convention.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Composition.Convention.dll
Size 64KB
SHA256 d56bc34acb8c7925465316d845ed70371eeccf4493143a228582795b6b0abf42
MD5 ae9993b106464b46a975cfd4110e312a
SHA1 417b39676c11d84d459ec61a1405d6801523c9e7
SHA512 02d569932955000cb8f2e7d8f7a81d45f1d190fd63653c5216c56f8504e4efb078fd6c020a8ef47cf8a5e4baac9c346a1b805b1606d423dd4d9c92cd464dc5ca
SSDEEP 768:/XOx6HCj7D7Aqg++wfNZZSS3lTYUBn7i6ll5GR2SuHVjPsxy/i/9zqZ5YiL05ALr:/RCj7D7Hl+w3J7iUlMRl0iFzQ7X
TLSH
T10D536C1363EC825AFEEF4F74B274E5064B3AB9D41602D2EE294DA0B807267805B71777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Composition.Hosting.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Composition.Hosting.dll
Size 66KB
SHA256 2f9a7c36f9f743829d7d87f96ab52eda7d4e3772327c818d07898c2c2c187e45
MD5 f87d7791e6a0e994f697dcaf75e352ee
SHA1 7e1aebd5ca4c06d0cf90072a5f4b4c9589f1a934
SHA512 9aa47d6b1b19ba5206f01e44f31b890bc82ae8b0014db43e7a5a9540e6cbc13aa3ec051c774eb8a7bf0bc38cc6c32a78564a489dcc6934deadefb9acdc871d8f
SSDEEP 1536:fI3LySqegjHauiS+yhjbjRfjdlVxuP9i3Bz27U:fI3ed3DnhjbNjTVxuP0BKg
TLSH
T142635B136BEC0616EABF9E7435A4D4151D75BA822802EACE1DCCE1990BB37C41F6077B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Composition.Runtime.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Composition.Runtime.dll
Size 38KB
SHA256 1a667e628de1181406513e62a61ff67fe6ae9bf3c5d938553f79a6396b7bafa7
MD5 8481f8aa38573245900e446a92a0635b
SHA1 446ca00fa5f7d80f62fdb91dbb46232f57e658a1
SHA512 010d83e3c99fc9294cb2c85904c5d645a2f8cfc72debe8496ce91a136c3f3e8e076c0d485bad3717565f17e59fa9f25c970d1d858a9c36cd30b56ad53a3d0d1f
SSDEEP 768:LUdak6oDMsZT2YsSy9kr+ALH4nv7pWX0xGvn9zT8wz5YiM5AL3o:LUAk6oYsZ5sBmLWVYv9zTJ97vo
TLSH
T13403AD6787BC6546DE6F5E30B4F0D4262D3BA7CA1C21E1DA258CE1180BF33806B6537A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Composition.TypedParts.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Composition.TypedParts.dll
Size 76KB
SHA256 8bc62b3f3816bb7a6a78f1d729def33a13252bbcbf2fceca6d1fb692b6678964
MD5 2b6ea9c7023d0e19865f8712d4641943
SHA1 02625aaa80d6eafee71fd0b8d9d80e40b56c87a0
SHA512 39d4f2c508b3d8f42d2f57ab08f9c3cb93030d096e83ccbfa21b0b065d95672bad3b7e6e8c6aebdcc1d649e6f70e18ac99f77b5b18044b74c35962a36aa3df55
SSDEEP 1536:LslcbVKa7SF3i+Toe6jd6vI1tXHvbQUTKBz+7Hqg:AZF3i+Ee6jMStXHTQUq6Dqg
TLSH
T1E1736C1673AD9727CEDF1EB475A4E1550B75E3712802FB853C8CA1A90B633819B603BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.DiagnosticSource.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Diagnostics.DiagnosticSource.dll
Size 206KB
SHA256 2e89c8c35eadfa2d4d592f5c7a08ebdbc22fc3994744fdef52726c6d3604f403
MD5 43d07d694ce1adde4e08972a0f258adc
SHA1 016d7f1905a52b26ce063f4a335060192d2b99ac
SHA512 a059bf727e004afb8fce0aff7aae0a6c6453dcfdeac14ea60395275e9ef5bd72380028f3bdd4909c03671a66dfd1a9212ef6d714e3f18afc777af0f5483b5892
SSDEEP 3072:rbHMbFi807XeuAfVOAgY28IQykl0z45fgO7n+E5G1JOGRER:HHMbkV7XeuAfVIY284kzDv5GqNR
TLSH
T17F246D50A3DC06AEDEEF2B71F0609C034BB2E95BB106D3AD7A48B5FD1813F41961166B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.FileSystem.AccessControl.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.IO.FileSystem.AccessControl.dll
Size 39KB
SHA256 80b2434e300311a6f894f4e4bf7635e3ca18ea815d9c43d4588796ce185fe7f4
MD5 72c352e7586e04a3f0d43545ca6da2be
SHA1 bd3885b8969c22fca97cc6b3c921074c682ffe45
SHA512 2ed2e6a7bb8bd4337b0ff016e2b6e9848f5b29b5dcb15e4cb83c53a52c02d9c2963693d23d586dbc3d2b1f69d512091a4fbf3df1ca1e76c5a5365b31a4f10d10
SSDEEP 768:iCN9VYp/OiRcnZIfk8PEkT+5Yi3WC5ALgW:iQ9ycnn0Ek47mD
TLSH
T168036B1297F8461AEE3B4F307AB5D9227F35F2D53912C05E2504E18E0B93B84AB62779
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.IO.Pipelines.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.IO.Pipelines.dll
Size 94KB
SHA256 74e9bc86f8f250b3e83b875c8f4481a1db665fb371f5df2bb44e6ac56b500b8c
MD5 1c979c3b2727d40965bd16a16ba9707e
SHA1 c8173fb991c4f36487b16a55879ed268d0fbf0d9
SHA512 1756a874fa780b42fde56ba797d0983418550bfd412afd7a82bd4b8676aacfaebe90e5c3b667a4d7577185308767e1628d5217c252acdfcb066d8e22feb97683
SSDEEP 1536:4OBEtNwWq02pH6ZafBzoGrriJNNjrgFX94bsAbYo4bgN0xeR5evOjvjDXT4Oe5Jb:fBSNTAl6ZcBzoGQ8XkJYo4bgN0xeR5eL
TLSH
T157936B6853BC4B1BEF9F1EBDB1A095120FB7D7166903E38A684CF9ED188738146142B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Memory.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Memory.dll
Size 153KB
SHA256 ece11f19a2696a2640361590b3180c4ef82e211777b463ac1a747ebf70f05cb3
MD5 504328d9f37d6d06812cdb8bad7ffa1a
SHA1 507d4f5ddf794a5be4b3005387a8e2ab971a0945
SHA512 3590e801fa7b8b98b8d7c45f0418d16c48968fcbaa18423be9fcceacf63eff3843a5564c79d082b3d9bcbdcdc260fdc40a57336e952f2b66af5e26fdb0b47ead
SSDEEP 3072:2PgSRYPuMbrhcabqwwwUtiPmu3XxNtv9DC9:0uPaaWwww7OuR5S
TLSH
T10CE36DBC67C5DD02CB5F9C70A068621A5B31C73FAE42F7E215C8E4F426A27A536193D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Net.Http.Json.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Net.Http.Json.dll
Size 83KB
SHA256 581f91afa0f48d652f007c0b034c6fd4370bb15ffb267ddbc6f203e7db82aa57
MD5 16876a5e290fce6045d9811eb61bc28a
SHA1 b5233df16b8b76184b2bfc67a8f1e10f7c954443
SHA512 8c1dae2fb3f7d2c61d1d464f20da6ea7b36260c3e2836f098b09f920e62a3fa4c80e0d5022609180e6650ba72bdd0a2caff429bc96968915a94bc487d464bf98
SSDEEP 1536:94HOOOUuynS+v5lWHvXwjn5nQxWYCbq9Mk1s5vimzYq7P+:9/Sv5Mqn5nQ4YCbq9MkCvN/b+
TLSH
T1A7839E0957AC9B13E99F6BFCF93893274B35EAD69902FB8B608CD0ED148334406647E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Net.Http.WinHttpHandler.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Net.Http.WinHttpHandler.dll
Size 164KB
SHA256 8875d261d2bcc77e63279c3ba5700db162c69019c5f6562440b2aed21afdd531
MD5 d5c91d218da3e4fdd5775fda192fa0df
SHA1 06cdb9dfed9ee121c7b6b832c9c61ef5ec337d5e
SHA512 f876eeb6b737b212c5e4c7370ea7e50f2e3abfa943c293dab235870f9dcd74b4839425b88d48c44056480c24c48d48a3a1362ea560686455654b9dc67d375951
SSDEEP 3072:+eglmOqrmSfc3+Lkn3U4aMizytFktFBo9NHJzWTFU:+e5OXSfpLkOoLF9zWu
TLSH
T1BEF34B2073F80A19FAFB7F70F9B596518A7ABD826A31DB6E154050DF09A1B80C970377
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Numerics.Vectors.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Numerics.Vectors.dll
Size 119KB
SHA256 18f8fe0c03d6f8996730f501a4b9a3289356b809c646b14f1cbd5cf97ed5dc9f
MD5 4d643d606f559eb77a0b7f7c77355f78
SHA1 8b4703861d8c9bced2a56de904a486be7cd17245
SHA512 ae80e1133a262a66033906725cd1f4d0368a113a6d35689b9c4ca3d0c51c1ad61f040935280bcd78b5ee8c55767c077a4f5dcebe87b47a972285a6178fca58dc
SSDEEP 1536:+uIaashZlF/cLecJE3+DWG/E2NstmOz+aAKWGd/iknzX7o:+zaashZzWeca3+DWG/E2it5GK/Fn7s
TLSH
T1D1C300E22F6C655AD7CF9F7B20E65E120B331963C403D2E160DC67A227A736729421E7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Reflection.Metadata.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Reflection.Metadata.dll
Size 487KB
SHA256 90545c45a6446acce2c2f6d5c0f9570e7c719778d8a0ced5a0301c4fe044d0bd
MD5 e962f2b85d4a926b89d5fcac6bdb3bb3
SHA1 3d3a3cc4bb552b6660747d5b564cfe7ca2ad9758
SHA512 1feb163be627e20360767600d813f162aaba0533acf1bcc8355e117a36454dd19ef3a1bf490d82e729538932766ba9baadf610fe86a42c1c0904adaccb627e41
SSDEEP 6144:8baFj9DUmlrAb/atzuBNOvQMDHvGKKPTZ2ml0tERWsbZJG0pky180bx:8bCKGtzoNcpHejZ2ml0W9G0F80bx
TLSH
T1B1B46C2273FC762BDAEE8BB8F07144254B71E4072716E75F09DCA6A90D937899C20763
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Runtime.CompilerServices.Unsafe.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Runtime.CompilerServices.Unsafe.dll
Size 30KB
SHA256 6eeefbe2b45b339bbad26c84750b51d65016e35eef37cb931f82d45b1f723930
MD5 6be4f5ab7465261f1ecdec7e3e4244df
SHA1 e6c6d622c952d8d8cac89e843278df077a9c1b29
SHA512 8be40fabfa9ae7f7d1e9b6df1018f44f44d1841cec1be05969236a80348e880d7c25b7fd654a859b5e71e2dcbf48983f6322551579091a4f88342a7849ab5fda
SSDEEP 384:RkGbUzdrbbxHKWgr2WrgX6HRN76O/7R9zXL/L3HQIYi/qoyRy8RbmL4nNyQWJhj:mGAdlQTwWpF9z7z35YiaR5AL5Jhj
TLSH
T12FE28C628B941803FE576E30B4D8E563BD38A3C6184293E73149D5761F963C57F6923C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.AccessControl.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Security.AccessControl.dll
Size 44KB
SHA256 a418700d31cec879b7b9c3cef6c0a6e7eccaf506cebf63fc57cd5d4891decf6e
MD5 64c9b3bd39d6a6027a208cd00cea57b3
SHA1 82e176774920ab3d22f32a984b1486b2cc4e149b
SHA512 5681c8b942dc782684b55403707b090505463065077a5515382e5b7c5304e198a2c6ba4d4b57e68c684f72fd1b0707cf2a3bb962545c65bec25842958e704976
SSDEEP 768:cAa3FuQwetxWBkyNE0ZTsVPy5YiJX5ALLN:a3FuQw4AlhZTsVPw7i
TLSH
T1772329129BF81129FFBB0B70BEB49D121DBBFAD53D12C60D1104D19E5AA1FC09A6173A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Security.Principal.Windows.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Security.Principal.Windows.dll
Size 29KB
SHA256 c64a390129ce5ad3ed6c037827aa91682b7ef2b918fb9a8319eb4f4707ebd2a0
MD5 d68cc9e2bd646a5d3e820134d45b8ea9
SHA1 83301711dde1818080a6c3627252f4d6a69781b4
SHA512 b215a89fde84168bee22a1195bf2a3b81803c389d53d2a179e6536336a2ab5299602c744899259580039f7dbefa43f6a0e6bc9f937defe415852e9b00fbe9a17
SSDEEP 384:DEwo6eTs14YY4cWpOWXdHRN7hYpJAlGspU3HQIYi/qmm45vOy8RbmL4nNy4iytJ:YwDdT9q3X5Yie5ALS/
TLSH
T186D27DA38BAC4913CD275E30B8B5E0237E39E3C66852C5EB614DD1055F923C6ABA537C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ServiceProcess.ServiceController.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.ServiceProcess.ServiceController.dll
Size 32KB
SHA256 7e89990f4563f761cc2013a37957f1d7af74b2cf057e64e2a8ad02e30cf02e13
MD5 6f29aa6014ec2eb9b8e965a1a3023b4d
SHA1 119ca419ec424f1f4c7bdcbb1a9a826be6b4d6da
SHA512 0e8377e376e162d6e6ac1d9c1195e614894337f9da852059caacabe48d10ceb389e853c1a021aa373d5c5398fac2c341d788ec2b44b4d48de2cb1df9c53499b3
SSDEEP 768:SRvP2uIb8ROFClKuRxw9zlsoH5YiJSmmNf5ALP:SRQb8RKiKuIzlso7JSPu
TLSH
T1F5E28D6287AC0A6BDE671D30F4B5E5272E75A3C12852C6EB52D4D4061FE23CD6AB433C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Encoding.CodePages.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Text.Encoding.CodePages.dll
Size 758KB
SHA256 1528be481a520d5c40ade9b7b2a2f78108e47f73e59a145e3aacf84fca22661f
MD5 1e3d9f116c2e9f17ed0e93d9c048dda9
SHA1 9638e340f18097eea8f4829716fba140a10f03d0
SHA512 68df8179cedf035a3082c9a995fc6dd92975c05d9c4ae292adf5d781e9c9c38eda220ff83906c18b9943ee7da14645912326bc8f2eddc902013f53d6a9d55c6b
SSDEEP 12288:L7i7xn7kZQ6kliVreJIHHr0tRYbKr2KtG9VKABC6rPDrr:f89km6k/IwRYbiBeKGCmH
TLSH
T163F49DA056A55B17F9BBCE309BF13012CAF6BC567E02483BB952534684D3BF01DD4A2B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Encodings.Web.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Text.Encodings.Web.dll
Size 89KB
SHA256 f5786117560ee4d2ce762fe1494b796817f1e7d56477f455d72cc7819f80ab7f
MD5 993e649700d8d0a21db8ac1589029b37
SHA1 816d50f0bdeb683cf499742932307a15c7449e77
SHA512 e42fd362b42ec46f9cae8d43a802e733acb0445997486d6bf92bdf2cf289163ec31a8e9e494df7fd8321334de72995ac089f21b8e7f47f78a44295b19158d7de
SSDEEP 1536:ROOUnOOOc++v9mBkdQ3IWIxL1HFkzoA4Vnrpwp77ojJjn7NhWuzInp7/:d+FmCQ3I077oljRh9Enpr
TLSH
T104937E2657888B2ECB3E563054A08571DBB0BF9F1252E3C25854B40F0B767CA671D2EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Json.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Text.Json.dll
Size 721KB
SHA256 798c02974c3783b1c6fec16b26eea5e84e0aba328bad056dce2c4e3d92e130f9
MD5 b50504b562c001e9d687d78b36dbc035
SHA1 74f1e59c5a01836ce9523da078e0729a1474fdd5
SHA512 24c7c80e0bc69b760d38cb450dfe93e5a6be545d10b8c93740f60fc236e5b9803249bcf0cd4234005c42675efce778517954546b90b37c1912c6f042181aff14
SSDEEP 12288:6t5CIBYtZN3lYQX/Qr/5ALzdT4qMZTZmYZfCDjI:wCGYtZNVkQoRCDjI
TLSH
T18CF45A01BBEC5B27DAEFB774B07440048BB5E916A7EAD34B260485ED2C53BA09D503B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.Channels.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Threading.Channels.dll
Size 83KB
SHA256 8cfa8548c16be684fc3a302491a43e7574e7b7bc10b1b67491f4458e0aa22cfa
MD5 32b2077070f99a47eacb62729d964d23
SHA1 d9908cc8d3173128c308b8473bbce9a2dc1e221d
SHA512 abb7f9ab4557e67ffa17b802a4473011cc3f071f4f845a7767cb27c12ef7d0d91c7b698782325bb652a540a3817aff2b855cd79c69de6727791ffee7b560d3b5
SSDEEP 1536:CQtHBHSlEq5KNB9wGicFvTblcE0oiR1zvQY75:qlEgKz91NcE0rjTt
TLSH
T1B5833A0163E82209FEFB2F76B5F455224E36BE51B935E26D158C96EC09B3B018A70377
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Threading.Tasks.Extensions.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.Threading.Tasks.Extensions.dll
Size 39KB
SHA256 bc42c3fae37714bf5cd9a94ddf30caf921946845f028521d0ba28f25d66b7787
MD5 17f9136ac4eda4e1d50abb85fbc1d68f
SHA1 82433c7ef8afba65663597827ea871ef13688516
SHA512 4aedb4d1b7a063dbf98c2706b7cf5340f7a40ea93979c4a833e8854718af73ead04f1d15393b24f9565e7dd4f40f29e6ea0dbde3e138b41145214adbb1ea93e9
SSDEEP 768:APV0iug18Y+b5gU6lWFClqS9znQKW5Yisv5ALE9L:AeRk8Y+b5EYiquzQF7sdp
TLSH
T16503BF6287A46407CF1F8D71F1D4D937AF70B3866901E2A626DCF2E40E533876A6923D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.ValueTuple.dll

Path C:\Windows\Installer\Razer\Installer2\App\System.ValueTuple.dll
Size 36KB
SHA256 8666c1fc29e61e18ebc233de7a0fb58fc40c18b4da92edd99f73dae4c8fc7501
MD5 a261c967f5156335f31f390e0086719b
SHA1 ef2ef5405877ad9f1c08ce68b26c0cd00c5d681f
SHA512 28ffaf84f9f3cae14ca6a56b260bfafcfa4db921d40d1ede0c8cff385c96acf77b395e45a12aa2f45e73efa3996e134959cc9a668afbb899f5ce870616597f64
SSDEEP 384:JoyPa16oAL4D+wW9IWmDIW4IWYDmFm0GftpBjc+XaQHRN7VlmTpFoHQIYi/qaQy8:JoWs6oqDjADKeDyViWgL95YiS5ALY5
TLSH
T190F27C528BFC6802EEA75E3075E4DA577C3EB3C35D21C59A205AE1491A933C16B2473D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cpprest140_2_10.dll

Path C:\Windows\Installer\Razer\Installer2\App\cpprest140_2_10.dll
Size 4.4MB
SHA256 22e4131cbb59bc3c912bfacc1b6b0fe58d9bda1ddf9024e811453c95bcc50f4c
MD5 f95d420184a76405bd6deb6463bc9247
SHA1 497d4b9bf0bd22181ef898b26de41cc8c5469950
SHA512 1c8f73a35a26e8a88a7ec2a7e40763e92ae853361affdecdaef5b0448b4a4ef4d3b9d2131d4604e75fe9669f6c10c570c4510414f761b7ed6c20e2554b0ad2d6
SSDEEP 49152:uKo8EP4vJkrIVK4sIU3HAeLvM5U0QxnoCfTkaPKHUjoRL5C2RElmCs2260a6:u9P4vJkrIVKDIU3HAeLE53WnuvUMfCI
TLSH
T125263A707F56CBBAEA8D02B79C7CEB6F541986850B7C42D7C6BC1A5A2D601D20F314A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dockEID.json

Path C:\Windows\Installer\Razer\Installer2\App\dockEID.json
Size 108B
SHA256 9c27c8e8af9db9c93bdec5981e8348758b8de6d21f7da7fd196f88e440c89561
MD5 0ba7699b22971832fb281493db7c4545
SHA1 84e905aa566baa398cd42b62670e438986559f84
SHA512 7dbb7c75aec1fac2c83f9084368291508cffa5b6a8217c258c90b01b2908881b5f226ab4229f2c87a30529208fed2a344397f7843de010bb2553b38a477e7a3d
TLSH
T138B0023C50C30410037403602ECC3C44C6871A4FD0334F04786C570C7FB04240C0420C
MD5 SHA1 SHA512 TLSH

Submit Download

dongle.json

Path C:\Windows\Installer\Razer\Installer2\App\dongle.json
Size 109B
SHA256 b692f6b0ef46cacfaa10f4069d4bc88ccd054e6149b55e15c5e245cc69d25ded
MD5 5bfad26ad566016f436c5c87cb57bff4
SHA1 a50b385d7e4d6fb20911119f3cde9abe8f3ebbad
SHA512 806525138fb39c8a4c3c83f48151edc5775ec0d8453f0d8bd051f4f1a50504a6d4631a2579b5e39a2f17bddc9da380f5e471cdd2bd6f2906e8b12d54d49309d3
TLSH
T112B0012C70C310C5077807B03DC81E54C9822A5ED1320F04346C43583E70848284829C
MD5 SHA1 SHA512 TLSH

Submit Download

dongleV2.json

Path C:\Windows\Installer\Razer\Installer2\App\dongleV2.json
Size 419B
SHA256 1bac016dd5f18f4ee377f2cc92a09c4822f7157238d0650bb615a7df322b20f8
MD5 ee7e776ae760484aff8874cb41f6f425
SHA1 e77bd9e533039e48c4af3e96ca907ff5d0f733de
SHA512 1dcf317502c9688e877e5a6194b923777054e0bf98615d9cd22bd7a2ff73ff77de7db44158675dfca83e07fba636ac95d05d3b712f252ab8385136dc5c8718f6
TLSH
T119E0D12CACCE08921A203A902A9C296FE922BF3E83321BC0306C831835243A0244828E
MD5 SHA1 SHA512 TLSH

Submit Download

dummyProt.json

Path C:\Windows\Installer\Razer\Installer2\App\dummyProt.json
Size 77B
SHA256 731b66b46ae9477920e21e26f4e30fbb9e2e24bc135a0811568254d23598ce9b
MD5 32a494aa96aeb6a5de217b3dce460c3a
SHA1 6f25af72b649c174cf8357fc24b727d11edcf875
SHA512 eb0c39951b79a8684153881881089af50d7fbb7a423e8cbefda226d895420adef80a9166d11111f74f4ff520416a2a1e918d842456ae4d6c160bb49aa6f56491
MD5 SHA1 SHA512

Submit Download

msvcp140.dll

Path C:\Windows\Installer\Razer\Installer2\App\msvcp140.dll
Size 433KB
SHA256 f656f0f98cf2510f4e0fe5d5666643028a6b8bac50bf553c0a464456c0e82934
MD5 a84a8a708751e2cb1f2bb117e9b7f390
SHA1 a9378bae50093465e2ea1567958a1bb656d42149
SHA512 609850f700a3147bbd1947c26ece31aeb0ca70249ec4dcd22f1bdc922fb24b0a20f569de827d4818f32983b65456bc9a9a0e9c23ba1e8eebe8520581a814bc49
SSDEEP 12288:tH0R7WeZbuswwxRek5Y9OehUgiW6QR7t5s03Ooc8dHkC2esgK35d:tH0R6ehx9Hd03Ooc8dHkC2eZK35d
TLSH
T1DB944922BB424DF2E59E13B571C9432257F9FC254760E3C3A3CAF0692F696C26633A51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rzS3detgmr_CWrapper.dll

Path C:\Windows\Installer\Razer\Installer2\App\rzS3detgmr_CWrapper.dll
Size 96KB
SHA256 0cf450455c3d25878dbed97bc04c458ca8481a7e0b5aabce445567cc6091b38d
MD5 b0e00b0987406798143c8afbf4550814
SHA1 7dd6ce5e045acece76b377d5384e57c1ef46337a
SHA512 589963e581b9cb596f8f7230bdf2a3b151496782057059a30913e6dadc5bfb4495ffa918fe4ce331d175c52ffdf4126f7a6617fea6a94b8d28c65055773401ac
SSDEEP 1536:Dk1k4S2dX0vwVRTxZRc1JRPJgT0RG9NP/90NQEXbZp8rgwWsWScdw1JuHh8QnYf7:mdE+1A4T0ciNQEXMr4wuHhXnYfFwM
TLSH
T18EA37B11B6C1C035D9BE19351868D6759B3EB920DFE0DDDB3789066E0F302C1EE35A6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rzS3detmgr.dll

Path C:\Windows\Installer\Razer\Installer2\App\rzS3detmgr.dll
Size 861KB
SHA256 4ca752372003046759b38778425efeb1bb3508c7d7bc756ed8f97100c2a15ccf
MD5 6f83fcac3705512088f3f95a4bb9de25
SHA1 f9d206e919303e6345ef7d0f4af54f960abcfd7e
SHA512 0666d5b110c8a0c37bb5197727bb0c53dc9d622a04317f8a234366191818fbe82c2852c4df4aead93a8f256dcbe9e4ce255ffef93fb266d1df76b77488677b40
SSDEEP 12288:YA7y0ISvpOA2V/oXtgMIS9omJr93GwN0Y/UI9tVDw5IIOAFTVLrD81+iNy/Sw:bISvpLI/W5R93GwN0mPvIXFTV/tR/Sw
TLSH
T106157B306909C036EBAE01B09A3DDBAB617D69720F7194C7B3C4AE6A79714C25736F07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

systems.json

Path C:\Windows\Installer\Razer\Installer2\App\systems.json
Size 495B
SHA256 2f2541706f13fd6d3eaad2628f7b4fa35f0648822edacb8b92d04cea42fc5537
MD5 775c312110d971862864b91a2379794a
SHA1 b5a7a80ebd352fd45493f3968ebb2c7735fecb11
SHA512 3c3428222feef08d3be3896ccfa72a1ae6ee0cb06e9c11f005439041e3f8ab9263a07f04a6c054e0d82edabd48aef9a68ecc45e3fad8803dde365e668f9b58ff
TLSH
T1FDF001FC72C708D11BA816983EC02D42D8478F4DE4B24F4D78BC170CB9A0A6D2E2130E
MD5 SHA1 SHA512 TLSH

Submit Download

vcruntime140.dll

Path C:\Windows\Installer\Razer\Installer2\App\vcruntime140.dll
Size 83KB
SHA256 5695560a50ed9746696c0d647e55d77459f5981907c177d086df36656a978b19
MD5 b7ebc19a5b23d0d32ff014e30be26061
SHA1 efb3b58b31a27407402a2be0d41aee120519c282
SHA512 922d94e80cdffeb51a1818c52b5c568597307225eed33c7c07e193322c2e9b0c7a5f17f3f4b57f2e22b8ad7f9509cb893bfc6d07d19af83360da6c0d807aa93a
SSDEEP 1536:4jer1DQwLp57xeH8zIJBj3hGzHcL3CTsQ+Vbc8su0sRXdjjecb+4AXmUkEBd:4jeNQwFFxExBozHcL3CTsQ+Vbc/uecbU
TLSH
T153837D11B4C84071D16A4D3452AAEA73763DAA608FD44FDF6FAC4C9C19B93C1773622B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sequoia_media_1.mp4

Path C:\Windows\Installer\Razer\Installer2\MediaCache\Sequoia_media_1.mp4
Size 687KB
SHA256 236454e0246363f33f6d4a3adedb11a91ff14b5fb00aa66a6d91680f72b98015
MD5 293bca1c20f9ff1cea98eec71fc79c84
SHA1 2d338b2c4dea63b357beb431a04f64ecc62491f2
SHA512 f54712a85aadf7af0e86202652ebd670f6bd8316f88583c43771a5d885760019ceb8db54b28c01931facb8bd9474f806be5faca942c61b912cd6e0c78d8f6ae6
SSDEEP 12288:mwETylr8040X/EkmpQtjoj7yHyOMlsOqKwfCuUCbDSiB+DaYRI9cf:mw3lr8gPGpoMlLqKAC8bDS9Wm
TLSH
T1BCE433055D8FE5E9EA0159306C66C122EF66CD5C8167400FC8DFD0E8E51FACE9EA613B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Sequoia_media_2.mp4

Path C:\Windows\Installer\Razer\Installer2\MediaCache\Sequoia_media_2.mp4
Size 781KB
SHA256 c47aa662e3d3aefc1737d2bff36d8db79b71e7a530c5b71ab3383bfb26cd997e
MD5 e3e0658100a77c00284491e462347cd8
SHA1 8bda35eb44bb1250340e57c28089372619cffa88
SHA512 5ae1d7b2619ef07b45e48f114d7ec27a4ea92764cad086718537949f3954655f79d1c859cf2b5b2a88c1ebc9e22b96c94b20b6a7b794a3e3d43e7f1d1ec03644
SSDEEP 24576:QHHMN73epLNYe/aOm/FQ4phj9jaMft2yiGesc:QEmY5P7hjBV2yi/sc
TLSH
T16705235B3BE5C850CD85F6389447683D2852CE8DDE847FC3A2C58BC1A9F989876C67C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1768-1272-0x00000000058D0000-0x00000000058DA000-memory.dmp

Download

memory/1768-1290-0x0000000007390000-0x000000000739A000-memory.dmp

Download

memory/1768-1253-0x0000000004C40000-0x0000000004C48000-memory.dmp

Download

memory/1768-1254-0x0000000004FA0000-0x0000000004FAE000-memory.dmp

Download

memory/1768-1255-0x0000000005050000-0x0000000005094000-memory.dmp

Download

memory/1768-1256-0x0000000005000000-0x000000000501A000-memory.dmp

Download

memory/1768-1258-0x0000000005020000-0x000000000502E000-memory.dmp

Download

memory/1768-1257-0x00000000050A0000-0x00000000050B2000-memory.dmp

Download

memory/1768-1259-0x0000000005030000-0x000000000503C000-memory.dmp

Download

memory/1768-1260-0x00000000050C0000-0x00000000050CC000-memory.dmp

Download

memory/1768-1261-0x00000000050D0000-0x00000000050D8000-memory.dmp

Download

memory/1768-1262-0x0000000005100000-0x0000000005114000-memory.dmp

Download

memory/1768-1263-0x00000000050F0000-0x00000000050F8000-memory.dmp

Download

memory/1768-1264-0x0000000006040000-0x00000000069A8000-memory.dmp

Download

memory/1768-1266-0x0000000005800000-0x000000000580C000-memory.dmp

Download

memory/1768-1265-0x00000000057F0000-0x0000000005800000-memory.dmp

Download

memory/1768-1267-0x0000000005830000-0x0000000005844000-memory.dmp

Download

memory/1768-1268-0x0000000005810000-0x000000000581A000-memory.dmp

Download

memory/1768-1269-0x0000000005890000-0x00000000058C4000-memory.dmp

Download

memory/1768-1270-0x0000000005900000-0x0000000005928000-memory.dmp

Download

memory/1768-1271-0x00000000058E0000-0x00000000058E8000-memory.dmp

Download

memory/1768-1249-0x0000000000140000-0x00000000001BE000-memory.dmp

Download

memory/1768-1273-0x00000000058F0000-0x0000000005900000-memory.dmp

Download

memory/1768-1274-0x0000000005950000-0x0000000005964000-memory.dmp

Download

memory/1768-1275-0x0000000005970000-0x0000000005990000-memory.dmp

Download

memory/1768-1276-0x00000000059B0000-0x00000000059CC000-memory.dmp

Download

memory/1768-1277-0x00000000059A0000-0x00000000059AA000-memory.dmp

Download

memory/1768-1278-0x00000000059D0000-0x00000000059DA000-memory.dmp

Download

memory/1768-1279-0x0000000005A10000-0x0000000005A2E000-memory.dmp

Download

memory/1768-1280-0x0000000005A60000-0x0000000005A82000-memory.dmp

Download

memory/1768-1281-0x0000000005CD0000-0x0000000005F0C000-memory.dmp

Download

memory/1768-1282-0x0000000005B50000-0x0000000005C04000-memory.dmp

Download

memory/1768-1283-0x0000000005AB0000-0x0000000005AC8000-memory.dmp

Download

memory/1768-1284-0x0000000005AD0000-0x0000000005AE8000-memory.dmp

Download

memory/1768-1285-0x0000000006010000-0x0000000006028000-memory.dmp

Download

memory/1768-1288-0x0000000007350000-0x0000000007358000-memory.dmp

Download

memory/1768-1289-0x00000000073A0000-0x00000000073CC000-memory.dmp

Download

memory/1768-1252-0x0000000004FD0000-0x0000000004FFE000-memory.dmp

Download

memory/1768-1291-0x0000000007440000-0x0000000007466000-memory.dmp

Download

memory/1768-1292-0x0000000007610000-0x00000000076A2000-memory.dmp

Download

memory/1768-1294-0x00000000079C0000-0x00000000079C8000-memory.dmp

Download

memory/1768-1295-0x0000000007AC0000-0x0000000007AC8000-memory.dmp

Download

memory/1768-1296-0x000000000B1A0000-0x000000000B1D8000-memory.dmp

Download

memory/1768-1297-0x000000000B160000-0x000000000B16E000-memory.dmp

Download

memory/1768-1298-0x000000000A0D0000-0x000000000A0E6000-memory.dmp

Download

memory/1768-1299-0x000000000A120000-0x000000000A14A000-memory.dmp

Download

memory/1768-1300-0x000000000B3C0000-0x000000000B3DE000-memory.dmp

Download

memory/1768-1309-0x000000000B360000-0x000000000B36A000-memory.dmp

Download

memory/1768-1310-0x000000000B480000-0x000000000B4E6000-memory.dmp

Download

memory/1768-1388-0x000000000D160000-0x000000000D18C000-memory.dmp

Download

memory/1768-1250-0x0000000004B90000-0x0000000004BA4000-memory.dmp

Download

memory/1768-1251-0x0000000002550000-0x000000000255E000-memory.dmp

Download

memory/1768-1405-0x000000000DB10000-0x000000000DB18000-memory.dmp

Download

memory/1768-1449-0x000000000D540000-0x000000000D550000-memory.dmp

Download

memory/1768-1433-0x000000000D480000-0x000000000D490000-memory.dmp

Download

memory/1768-1432-0x000000000D480000-0x000000000D490000-memory.dmp

Download

memory/1768-1436-0x000000000D480000-0x000000000D490000-memory.dmp

Download

memory/1768-1439-0x000000000D480000-0x000000000D490000-memory.dmp

Download

memory/1768-1438-0x000000000D480000-0x000000000D490000-memory.dmp

Download

memory/1768-1437-0x000000000D480000-0x000000000D490000-memory.dmp

Download

memory/1768-1435-0x000000000D480000-0x000000000D490000-memory.dmp

Download

memory/1768-1434-0x000000000D480000-0x000000000D490000-memory.dmp

Download

memory/1768-1440-0x000000000D540000-0x000000000D550000-memory.dmp

Download

memory/1768-1441-0x000000000D540000-0x000000000D550000-memory.dmp

Download

memory/1768-1442-0x000000000D480000-0x000000000D490000-memory.dmp

Download

memory/1768-1443-0x000000000D480000-0x000000000D490000-memory.dmp

Download

memory/1768-1446-0x000000000D480000-0x000000000D490000-memory.dmp

Download

memory/1768-1448-0x000000000D540000-0x000000000D550000-memory.dmp

Download

memory/1768-1447-0x000000000D480000-0x000000000D490000-memory.dmp

Download

memory/1768-1444-0x000000000D540000-0x000000000D550000-memory.dmp

Download

memory/1768-1445-0x000000000D540000-0x000000000D550000-memory.dmp

Download

memory/2140-760-0x0000000002F10000-0x0000000002F8A000-memory.dmp

Download

memory/2140-759-0x0000000000A90000-0x0000000000B48000-memory.dmp

Download

memory/4048-756-0x0000024880000000-0x0000024881000000-memory.dmp

Download

memory/5644-201-0x0000021EE8A00000-0x0000021EE9A00000-memory.dmp

Download