89c7ca6d26068493f1aaffcdbf2fbc6d5470b61bab5192be253c566a5a26159c

Analysis

user interaction
yes
max time kernel
40s
max time network
87s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 21:49

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
sample.html
Size 33KB
Sample261027-1pre8avx2q
SHA256 89c7ca6d26068493f1aaffcdbf2fbc6d5470b61bab5192be253c566a5a26159c
MD5 1d8fd2a61b5876849cb4da553497455c
SHA1 5718ce4b180478701f465ffda89a8e0f77bd69d1
SHA512 0ca1783fe6c35b6bd4ec472d9c4c1b493e7bfc67f70c3d3ab8c7baee28d01b665d0a45e93608f33bdf2083a32217c0827c2d7d1c2e545cefdc604074b1811922
SSDEEP 768:eBO0OUhk3rG78GSCskRU8sYmTKpoxYJZYnYx/0:Ihk3rGgGSCsoUcBx/0
TLSH
T116E29839F008D909DC23DD48217A7E3E109E816983DA8D6C97EECD2645C74BA6B63DC8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery persistence ransomware

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
135	3316	msedge.exe

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
137	raw.githubusercontent.com
139	raw.githubusercontent.com

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
3316	msedge.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-4280978039-528710165-233981602-1000\{D0AC4DA6-CF21-4F7C-AB58-293EEFC4704C}	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	msedge.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 13 IoCs

pid	Process
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe

Suspicious use of FindShellTrayWindow 41 IoCs

pid	Process
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe
360	msedge.exe

Suspicious use of WriteProcessMemory 63 IoCs

description	pid	Process	procid_target
PID 360 wrote to memory of 2656	360	msedge.exe	89
PID 360 wrote to memory of 1864	360	msedge.exe	90
PID 360 wrote to memory of 3316	360	msedge.exe	91
PID 360 wrote to memory of 1864	360	msedge.exe	90
PID 360 wrote to memory of 1864	360	msedge.exe	90
PID 360 wrote to memory of 4272	360	msedge.exe	92
PID 360 wrote to memory of 4272	360	msedge.exe	92
PID 360 wrote to memory of 4968	360	msedge.exe	94
PID 360 wrote to memory of 4968	360	msedge.exe	94
PID 360 wrote to memory of 3704	360	msedge.exe	95
PID 360 wrote to memory of 4968	360	msedge.exe	94
PID 360 wrote to memory of 3704	360	msedge.exe	95
PID 360 wrote to memory of 3704	360	msedge.exe	95
PID 360 wrote to memory of 3136	360	msedge.exe	97
PID 360 wrote to memory of 3136	360	msedge.exe	97
PID 360 wrote to memory of 3136	360	msedge.exe	97
PID 360 wrote to memory of 3332	360	msedge.exe	96
PID 360 wrote to memory of 3332	360	msedge.exe	96
PID 360 wrote to memory of 3332	360	msedge.exe	96
PID 360 wrote to memory of 5272	360	msedge.exe	99
PID 360 wrote to memory of 5272	360	msedge.exe	99
PID 360 wrote to memory of 1568	360	msedge.exe	100
PID 360 wrote to memory of 1568	360	msedge.exe	100
PID 360 wrote to memory of 5464	360	msedge.exe	102
PID 360 wrote to memory of 2868	360	msedge.exe	105
PID 360 wrote to memory of 2868	360	msedge.exe	105
PID 360 wrote to memory of 2868	360	msedge.exe	105
PID 360 wrote to memory of 3892	360	msedge.exe	106
PID 360 wrote to memory of 3892	360	msedge.exe	106
PID 360 wrote to memory of 3892	360	msedge.exe	106
PID 360 wrote to memory of 4456	360	msedge.exe	107
PID 360 wrote to memory of 4456	360	msedge.exe	107
PID 360 wrote to memory of 4456	360	msedge.exe	107
PID 360 wrote to memory of 4928	360	msedge.exe	108
PID 360 wrote to memory of 4928	360	msedge.exe	108
PID 360 wrote to memory of 3520	360	msedge.exe	110
PID 360 wrote to memory of 3520	360	msedge.exe	110
PID 360 wrote to memory of 3520	360	msedge.exe	110
PID 360 wrote to memory of 1544	360	msedge.exe	111
PID 360 wrote to memory of 1664	360	msedge.exe	112
PID 360 wrote to memory of 3928	360	msedge.exe	113
PID 360 wrote to memory of 3168	360	msedge.exe	114
PID 360 wrote to memory of 3168	360	msedge.exe	114
PID 360 wrote to memory of 3168	360	msedge.exe	114
PID 360 wrote to memory of 6136	360	msedge.exe	115
PID 360 wrote to memory of 6136	360	msedge.exe	115
PID 360 wrote to memory of 6136	360	msedge.exe	115
PID 360 wrote to memory of 3704	360	msedge.exe	116
PID 360 wrote to memory of 3704	360	msedge.exe	116
PID 360 wrote to memory of 3704	360	msedge.exe	116
PID 360 wrote to memory of 5660	360	msedge.exe	117
PID 360 wrote to memory of 5660	360	msedge.exe	117
PID 360 wrote to memory of 5660	360	msedge.exe	117
PID 360 wrote to memory of 2536	360	msedge.exe	118
PID 360 wrote to memory of 2536	360	msedge.exe	118
PID 360 wrote to memory of 1188	360	msedge.exe	119
PID 360 wrote to memory of 1188	360	msedge.exe	119
PID 360 wrote to memory of 4268	360	msedge.exe	120
PID 360 wrote to memory of 4268	360	msedge.exe	120
PID 360 wrote to memory of 4268	360	msedge.exe	120
PID 360 wrote to memory of 1460	360	msedge.exe	121
PID 360 wrote to memory of 4472	360	msedge.exe	122
PID 360 wrote to memory of 4472	360	msedge.exe	122

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument C:\Users\Admin\AppData\Local\Temp\sample.html
1⤵
- Enumerates system info in registry
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:360
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x264,0x268,0x234,0x270,0x7ffa19f3c188,0x7ffa19f3c194,0x7ffa19f3c1a0
  2⤵
  PID:2656
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1524,i,2940741124294310797,14062238625180464594,262144 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=2192 /prefetch:2
  2⤵
  PID:1864
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1820,i,11766347291873602406,13276222388070047086,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=2936 /prefetch:11
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:3316
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2488,i,2115247806047912072,9973425537980994369,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=3208 /prefetch:13
  2⤵
  PID:4272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3568,i,3970838330756551021,17929132589425885385,2097152 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=3624 /prefetch:1
  2⤵
  PID:4968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3572,i,6173534324532594050,11864663269796209274,2097152 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=3652 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4292,i,11389079120843460818,12789392542804040094,2097152 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=4800 /prefetch:1
  2⤵
  PID:3332
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4344,i,14958912735717166591,2348995015150240247,2097152 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=4804 /prefetch:9
  2⤵
  PID:3136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5368,i,13785429868977859905,5453955817042394847,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=5416 /prefetch:14
  2⤵
  PID:5272
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5364,i,492592997077540026,5054990895661697428,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=5460 /prefetch:14
  2⤵
  PID:1568
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,5716167886277463195,8683326394893142809,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
  2⤵
  PID:4164
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6024,i,5716167886277463195,8683326394893142809,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=5752 /prefetch:14
  2⤵
  PID:5464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=3624,i,7072303401421614610,8181863280698917126,2097152 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:1
  2⤵
  PID:2868
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6584,i,16108373024872396327,2845984113782211686,2097152 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:1
  2⤵
  PID:3892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --instant-process --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=3820,i,12395736389173231373,9180653033315178701,2097152 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=4284 /prefetch:1
  2⤵
  PID:4456
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=PooledProcess2 --lang=en-US --service-sandbox-type=utility --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3860,i,4144284059500505601,17029506604155350655,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=6548 /prefetch:14
  2⤵
  PID:4928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=6796,i,12173213271491860857,7287888637110290506,2097152 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=6628 /prefetch:1
  2⤵
  PID:3520
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6512,i,12406791209295900512,935161673318287775,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=6776 /prefetch:14
  2⤵
  PID:1544
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5072,i,9377915038840909211,18305998967458358944,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=6576 /prefetch:14
  2⤵
  PID:1664
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6564,i,656091522171970024,12380536890501008678,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=6916 /prefetch:14
  2⤵
  PID:3928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=2184,i,2900595587181812978,1032325159160261104,2097152 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=3832 /prefetch:1
  2⤵
  PID:3168
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=6988,i,5802025181397084719,167276159809526113,2097152 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=7044 /prefetch:1
  2⤵
  PID:6136
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=23 --always-read-main-dll --metrics-shmem-handle=6724,i,4760473210062402902,15539633689894799009,2097152 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=7244 /prefetch:1
  2⤵
  PID:3704
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --always-read-main-dll --metrics-shmem-handle=7060,i,11060684736331389402,12222452911950079945,2097152 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=6528 /prefetch:1
  2⤵
  PID:5660
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7112,i,3397919272326417170,15019608826004433476,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=7080 /prefetch:14
  2⤵
  PID:2536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5548,i,10568265437173612643,16216448140193953942,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=7552 /prefetch:14
  2⤵
  PID:1188
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=7528,i,1334641420338916005,16219385524041436445,2097152 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=7608 /prefetch:1
  2⤵
  PID:4268
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2836,i,11655892364105635348,14982841199254871561,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=2280 /prefetch:14
  2⤵
  PID:1460
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8040,i,9793837636533888932,11603217125795749444,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=8028 /prefetch:14
  2⤵
  PID:4472
- C:\Users\Admin\Downloads\LuaTools-win-Setup.exe
  "C:\Users\Admin\Downloads\LuaTools-win-Setup.exe"
  2⤵
  PID:2740
- - C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
    "C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe" --veloapp-install 1.3.2
    3⤵
    PID:5844
- - C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
    "C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe"
    3⤵
    PID:3404
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7236,i,3339138622749339118,14431135235814509875,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=5452 /prefetch:14
  2⤵
  PID:3000
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8364,i,17445943120808984490,11348730328461423235,524288 --field-trial-handle=2196,i,13049256095293266760,6921884188880778324,262144 --variations-seed-version --mojo-platform-channel-handle=8360 /prefetch:14
  2⤵
  PID:4684

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3924

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
1⤵
PID:2956

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

LuaTools.deps.json

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.deps.json
Size 36KB
SHA256 7a9e4388ad47c60b3e9c05854b79fdc23d293156e404c13c1242062547555a7e
MD5 b04e03b4823c56b34d8e7f869b015767
SHA1 2f4b7e23e910ce20886f72f4060e3986df91c97b
SHA512 2f5e1ebde6a291e599650beb70255fae6594255221bd5054f004c7c47d20a48c79ac2d2657a60613777fd3744fb396e3a8d7816ff215a38de65cfc07a522e006
SSDEEP 192:CjrWrHwIIqoZoqsZuNTj6uTVZECYIh23RCzl4oFby98ZWjdIyfnNfekS3:CjcHwIIq/MpRYIh23RCx4oFbyfxIyf3S
TLSH
T1C4F28A26E8585E234976B7A6FD784991FA35432F3004684A7CFC294CCF76BAA5093F34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.dll
Size 1.3MB
SHA256 30b076c6d55594bbd153541c8635aa61ef940edf1613f4d38fbf50c73a6a6248
MD5 aad6636d52339745c1d7468632cfd671
SHA1 abb2e2ac2fee0ed00231ac59e2836007530f4c9b
SHA512 964351212b91f0c486c38cbda8e552883f70a0e009acca62b342445eca72dfe3055668a7c30e387d713554df202f1e18774ce6ddbb684ecf6f3a4d92d32dac23
SSDEEP 24576:cAaAb6cbYE2ws1XiMHRFCrg38CYPIWWT04SlP3:uAbnLHPIWWT0
TLSH
T19B556C1232B5867AD0AF76BD5036102887B5EF41B146E36E1D57B4FCDCB13028E8A79B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.exe

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.exe
Size 254KB
SHA256 3d2b859e5f0fb806723a826c79c60f778ad1d28a142fe66a78c6f9f8bf2af44d
MD5 ef3644bcef3ebf24e2fcd1aebd0c2bd4
SHA1 de754951e7964ec1a4966dc62aca522c93342a3d
SHA512 0ef64c6a78ac8e2502521b4bcc05af56a3dcd0515502674fe657f3030a2357d18f9732f3f32960ea7d5926d319c029349458f0b7378e4fa86fe7e1e9e241c4cd
SSDEEP 3072:FqeXA/4yIg9vkNPNu6H6xCYOiVUE265RJ6nIyBl:FvgvkNFNaxmNExJ6Ig
TLSH
T1F3442A37928541B9F097F1B4CA610845EBF17F605322A3FB1E0379BFCAF92819A69741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LuaTools.runtimeconfig.json

Path C:\Users\Admin\AppData\Local\LuaTools\current\LuaTools.runtimeconfig.json
Size 496B
SHA256 b7ab6a0ad18cf1280ad75c8e6d0df62d06c84d62dc69351e49c04afd3e218eb2
MD5 eb7751b6da413a72fe18d187b6b88daa
SHA1 0ab1171970e84ab0e4c9b6807a3700744052aab2
SHA512 d7db1f44c4f706c50755c07501f26620f51c9efb707853432b0ea1a15ffc7e3f9fba919cbbfc3540aec68035132f8ccdf3b5abc0882b67529f8ef5c0b509214c
TLSH
T160F05539C9141DB708F43BADD12AC087FA30136B01040D5A75FC180C2F766A26010E88
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft.Extensions.Configuration.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.Abstractions.dll
Size 26KB
SHA256 3700bf75d75ceef47ebd6df7df9bafb9f7b7dcf22fc537f227db72ccf74c476d
MD5 6f48fbe8c1d66121fb930d01cee4cc95
SHA1 1cc8d8afaec01f6e967818a484fd7aa509624ecd
SHA512 3fe0dba909f19ea448ccf6e3874db0b6709737b215107f7b86fe35c3b911b200ca37dde2f1377f258fd265caa09f93af49ea5b239b05db5c3442f48c5571942d
SSDEEP 384:o9WZMDYtid3v9TaTG/FwEzRjz6rMwTbFmDWsjINWJlNgoR9zFiXS:0WZMDYk5pdO/09zl
TLSH
T19BC25B1653AC9333DDFB2F71F9A1C4952E3997E6A801DA19689E700809777C09B3372E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Binder.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.Binder.dll
Size 41KB
SHA256 efc13893ebfa02cc7e49ac13cfef68517c4441a33210d67956e7488b8e6b277d
MD5 2290f7d234bcbf93459adb8bb0745275
SHA1 e5f4067e40be7685d35d7cad76ef7768e53b078d
SHA512 7ffbedde32c75599a7c9f5ffda297f5a7f58699b05f7b42248ef28b0bafbf33ec9bd4fa27afbd6dc8f97b7d4ad61fb43cacc19e96fdc536429efd0a494c01baa
SSDEEP 768:DsjeqKLvg51cjLTwE6ry/v1rt4m37oX9z/5Y8:DsqxL451qUE6ry1Wm37+zhY8
TLSH
T1B1134C1793EC872AE9FF0B707471A4224FB6BB917926D6195C89A05C1D377C08A3236F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.CommandLine.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.CommandLine.dll
Size 23KB
SHA256 a1c8c9728b0dc64dcd975f82d013a1b7bc0c0133e46a94f29044f16cad6072b6
MD5 584eda713ab7795fac1645ef6f3352dc
SHA1 231d179d15e5caac7de89cb8ad71b9d0db1f82f5
SHA512 07f7baa9912b3e17239a601e33d40b329788c3cfc47d03626a0ea0c4f1766a3a9184f4c354715136878ea444287d1ffa6ff97e5cdb11020019babfb5dd9e1db2
SSDEEP 384:/fym2RBaP8ckJt+KAW9BmnWElNhtIscmeR9zlQQR:/amEEYRAvtI7N9zh
TLSH
T110B24B6693FC8317FDFB0E71A6F1D5512E39ABD76811E62A145EA0080D737C08B72729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.EnvironmentVariables.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.EnvironmentVariables.dll
Size 21KB
SHA256 bbb26aacd4ba67351d3740106bbcc5544827d98d91b48109362988147ae7963e
MD5 177dcffd43ac45b58a0c42b2c7b99c0c
SHA1 f61334d03d1050174a90c300c19fa29c39517e64
SHA512 3ef3aac0bdd86d7401d363f8d4d4771e79402c1459c9c5e5f1f178b4300cc9fc67b18d8af2c2d1f742f3a22f556efe5f554336db2e6126ab536344d1cbe65581
SSDEEP 384:v/dUEK0NrbQObCWU+JeWDlNBki+R9zd17/:v/UmfNxE9zj7/
TLSH
T181A24B8197FCD106F9F77FB4D9F9C9662C35F7D21862953A006DA00B0867B848B91B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.FileExtensions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.FileExtensions.dll
Size 26KB
SHA256 1830c601c1b155c54fbd3a6844453dae87af14eafe763942939d06905035130f
MD5 ee6d71766d2811851d8dd808384b5d83
SHA1 dc1a15ffbe9e406484572c21a2e94052099b1461
SHA512 bbf23f5c8c1059d48e04b965fba41921fb5346117c46792b218e07ed123be5ff1397781a8ddc68bfac44a0a9333442015dec3e67385a9a65633a6fb93f207dfb
SSDEEP 384:SNHfs86q0/ALi2iTFwLsdYyOiaXAzpkLqWqKl6WYlNorgFbR9zBTV9:Sk92/VyOOpkL3/A9zD9
TLSH
T1E5C25C62C7BC4213C9BB1E71A9F0E5022E35A7975C10E66B59DDE00D1DB73C08E62B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.Json.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.Json.dll
Size 25KB
SHA256 e106f8bc13df7168294b95a6cdbceaba47b8eb7e562940eb4ef038db6fb1f2d0
MD5 e0a403e5af381beb4a47945fb5155ca7
SHA1 31b3051b7622207f803333e799461f9182319fb3
SHA512 0828841a0305e043f2df522b8d34c822d13964d870f08e1af0c461dd22a957088b0c44e2a24e877e87aff91a3dcf09f71b225e3e83982fcd0c80473606babaac
SSDEEP 384:5iemM0/vv+cFsbTRo9ge1lgzWkWR2W4lN4eFbR9zBOViT:5iMCzFsjfGG9zCW
TLSH
T117C25B6257FC4213E9BF1F319AF5C9412E39E796A811E71E15ADB00808B77C48E7272A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.UserSecrets.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.UserSecrets.dll
Size 24KB
SHA256 a310bcdd868dafc0efce5b03a68cd7af5d4fa0d06509ed4b5c51ddc1758e9791
MD5 249b5a3d38956616eb522a7c7214d0cc
SHA1 1b39211cf7978386ce9589eb88983deee137c3e4
SHA512 03d7b1eceadca05b35a14a3183ddb406d971fe61c217ffddd9d2ac9c187f9ad2cc6cece04c9332096b1396397e0b2398002ea4d3e8d0ec26e8e6a4d5246b3bf0
SSDEEP 384:o88CyOBc4Rm15FApdE1wEDW9ytCWjlNy2jR9zGGhyL:o8ByURi40uw9zwL
TLSH
T1C4B24C52D7FC4332FABA0E73F9B5E4452E38BBD65C11A61D109DA009187BBC48B32769
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Configuration.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Configuration.dll
Size 42KB
SHA256 7a883c57d00808ca9b5d11bfaa2c5d21f714ed7560e781d7313d65b09b88b6c9
MD5 3970d9bf37ecb6cff7a394bdd25ee78f
SHA1 054b4622b962ae25446888ddf5ec823e340ff662
SHA512 950d50379cf9fe0fc8216a1f786b4c0322eecdeb390098e8bf855dc40c6901de1da110ddd48650ade001f009a815e8151ba72872381a16c6b2e96167d7fc427e
SSDEEP 768:LnxYrISYXrpu4dAn9RY5Pd9Lgg4vScADpDgOlfe9zb:LnxYrISQpu4v5/cANDKzb
TLSH
T153135B52536C8B17D6BE1B73F8E4992A2F71D2476815F30D9C9EB09908AB7C04B12737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.DependencyInjection.Abstractions.dll
Size 63KB
SHA256 c2a34d5259e6d6c0af43d9b926454105e80e7657dfed901d845100db254de89b
MD5 8db369e1139ba14a6208ea8df983ad0a
SHA1 62e77416f1f25a91c3a5140e3635414af1b8202e
SHA512 ef872d41c7775a81bb2dcbde47637cca29b4b810f2671826de042129e9907aeb2dff02a1ab684425cfaf7b2f48abc6e9a4f2261a4bb4c15bab70eba556f93633
SSDEEP 768:z0dv145TiKK8sfK8wUcrioA085JW14e2KSpYzRTzPdH9zJ:z0P45TiK3sfK81c52W+eHSpYztzldzJ
TLSH
T127533CDD37FCD373FBAE5B722A7390C09A35BA531401E70EA98550EA0892BC88551DB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.DependencyInjection.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.DependencyInjection.dll
Size 92KB
SHA256 4d7fb7b6a171047984a8316b1a355c65e33350c343f4e0ea2f1233be457eb7e5
MD5 7835c72d7fd691ebda152797eaf1bcec
SHA1 8816449c02b9424b7058842f161772fc489cbd86
SHA512 aad53dfdc5ee860b2a6d23c961005609f2ebb02fe3913750a08f31c81d9526e2dead96d4f233c12764e8bf51b6449ada833bca9129e6b77b3cdae6c3b6f86fd7
SSDEEP 1536:hrzFViiQfeQJFi5+2H2SOETeFRdRV6ZTzzIYn1Y6zQ:xFUiQfeQe/9eT6Tzzx+6U
TLSH
T159935C3963FC8F21EAFF1A75947141054BB6AB4A3403E31E1E94A0AD1AE3FC547713A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Diagnostics.Abstractions.dll
Size 29KB
SHA256 0a9e51f2d4861367908fa058da82b4a0deb6f85f6ba11d3c90b01c848b1fcdac
MD5 436f31765e8a25707ef3770a4880cd5e
SHA1 a0d63c5d8cc9f1644d85667136c73d7c337872b1
SHA512 9d5c163d8453e5784a79f8708d67f9304f0183a61b7ec2e54e0d4d772aa79c5f7afc726dfadec753e24be4a7743380a4bdfb39f01ad1f2a22edce64386c34243
SSDEEP 384:MLdH4vpxJv3H1yPNdc+bXimUVG+KWOXcRWVlNq1wGjR9zGGW:4dH4v9/yVurn159z2
TLSH
T132D26D41A7BC9325DEBB1E31BAA1C4023B36C3576811E7664EC8910D1977BD49A33B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Diagnostics.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Diagnostics.dll
Size 34KB
SHA256 0842e20c25240aca53809e005776eb88f53a61128c632c4c6fa8685b9f66c4b7
MD5 f14e4787e1accf6c01d433eaa0e30dfd
SHA1 3cc40e3e4c0645cbc8fec59e9bf59673f458029b
SHA512 f0d6cc32446f4cda8cbec48e8e5413ed3b8ec7bcdb8fb710013993feade52317438c44cb180394a6f71eb6164b9cbe170d6d284ae61a71a1d5da3ab5ec50b373
SSDEEP 768:lY4wbeDJl88xZZcfqnfBTdqdgWO7N9zal:lsClF/e+yOWyvzal
TLSH
T15CF24A56A7EC9322D9BF1E75AEF086061F39C7836411FB692DEC90990D777C08722329
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.FileProviders.Abstractions.dll
Size 21KB
SHA256 02f38beb848fa01fcc55f0cf3982ca01e1a5aeba95933131a197ef602a130763
MD5 3aa27844975c473aa34256bf9bcc8b6d
SHA1 16f9a31d79dd248c034ed092d40dc6c385ebee65
SHA512 95ae823dd74af65dd3c9ba60e676d8110a6293297a0a6cf53aeafc5faeb12431538d83d46adb0abab8833b12458eca29f3dd9a3314d72c3a72f99928bdb9f442
SSDEEP 384:N3tt2JeSlo+MVdUJtFEWsHMhWGalNFGoR9zFiJn/oq:Ne5GQfr09zQ/1
TLSH
T164A27D26D7BC8363CEFA5E3069A4C9476D3DD3DB4C05E51A1589E1081AF3BC48732B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileProviders.Physical.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.FileProviders.Physical.dll
Size 43KB
SHA256 e6073f96262a3c468c5024564fa02df0f36234242b392c8b658b81bb1b9d968a
MD5 887259a796ae6590749fa3f0d78b0cd9
SHA1 6ab7d026ff5fc8fc0d92b51f29e492d8b33f8c5c
SHA512 41e7ba5f26060b03430f3da154ca8cd691bb287008e78661706cb449bfa3d3310342dd6e408a213df7c1366ecf89e8d0598d4dbfcd8c1d54039957e8a5c2edaa
SSDEEP 768:+kjPlCVm7Ej8zP5usGppdtUqISA3SngVE419z4Qt:+kJCVm7EihusMpdtUxSqSgVE4Hz4+
TLSH
T181137D2193BC4307CDEE4BB16DF0E4460734F3D72502F75A0D98B19A29A77C84B626BA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.FileSystemGlobbing.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.FileSystemGlobbing.dll
Size 45KB
SHA256 965a5347b125d232361dd08027ab263ed1d042b0240ec4a4f29b7a0bfd74bb28
MD5 39743aeab0c21850ec0a8e7830ad4370
SHA1 c897d4dcf3bf039cf766f940f117701a0c5b1eab
SHA512 a79f377a64bea1c532aed4ce33abe17af9e888a4c89434a2310af7e6e3845333fd5116f0b1475db06f9c09d243f09b50ac5245d10dcac0e99a56a48a68f832a5
SSDEEP 768:7rw185npIg65BZLzI1Vp3aPolwgYakfn8OmVSfem0TgvJKMd9zH:7r/pkB58LaP4wgYaOYVSWpgvJKM/zH
TLSH
T108234A8066AC8223CABE17B8B8F4D4524B75C6B7B412FB474ECDA9481CB37C41A61777
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Hosting.Abstractions.dll
Size 51KB
SHA256 57c2528e1f2b3872976661686af9bcbd0612de7ee6b4ef4cfe92b746b27aa1b7
MD5 c32f6f4402d1c5a9fcd2fff1e20a859b
SHA1 3732c98212eec17ff92759599fe91cafd1a8d711
SHA512 4bd18b34de2e0135a8e00616384033609fbb25804457cbd6cf3d363d7f2e3c7d4aec0e9f99e4a75b3abc87b8dde5ee0e6903dcf3afab80d962cfef02c7532a32
SSDEEP 768:3dfIvk8cUbjKbhY6Om4e+X9CzJ65Mo7tKoV2nwsyQQZt164yCmi3FbFi/Up2cK5J:5+k7UbjKbhY1TbUcKo+bozqrH
TLSH
T12933B14163F81615FAFB3F34ADF891258A3ABE66B834F62C064945DD09B2B80C971737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Hosting.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Hosting.dll
Size 69KB
SHA256 ca135e4b48abc2effdb6fdf085837966c35f3a8a305744429009dde946d633c8
MD5 14ffa2d36a6d50f71e904f5d0deef146
SHA1 63c60db8fd1a63be05ecafe119d61fe6d86bcb1f
SHA512 09d1ca0be3b43235f97f5739bb5e443adb04c0d34ad6499f7c50dbc64eff351e0b803ab0f8968bbe9589a88eb41765597b9b9b3fa623f6841ab98b6e4d66f9ab
SSDEEP 768:mHcMciLWJeEHq8SMj9db9KKjoDpxdDozzCF95dnbOCify7MYzWUAKCf9zPcx:mHTfEKjkdbMK6PM8nbOKVWUAKozPQ
TLSH
T15A634B8363AC4713DAEF1AB9E8B465691A35DB576414F70E5C8CB0D90CE3BC44E2272B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Abstractions.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Abstractions.dll
Size 64KB
SHA256 4ad4a3b2bed7f5f293f83cc2c46169b93a9863b89428f693a4f17863704f47aa
MD5 a5cab35625e1f365a9181f4e059023b5
SHA1 1f8fcaaf8a0c512e3d33aa7caa0b452227459eed
SHA512 1fb963e563d774df6ad87fe5b7a09fcf0eae1413c270d4b01022e94a00057fc917919b3f4f6e03bb45ac47286dafe763d40ecd50d3ecc2ae91ba122c5579531a
SSDEEP 768:vRU98PjrdTukvp6wV1XxMyVYB0wwbru2OkJB7ix+WTqoU8/Aj29zg4Q:JTTxvcwTWBkbru2b7OZTNU8/2Cz9Q
TLSH
T1C4537D05ABEC4377CBBE4EB9F89096410F35C2472547E79B2CCCD125A92BBD44E213A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Configuration.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Configuration.dll
Size 26KB
SHA256 ed0a70f939dc8779ee85802e926f138e284828ac14d44831ca68fdcd14450b5b
MD5 477d8b5d7ab4c9b2bc918ef5daa8b45e
SHA1 7486ff87665335aa215bd589d19b98f546215eb4
SHA512 2ece4726195ea57acef015ee2b10435a50af5eb39d7d2af01d13f74cb9c6b6d1ceef4a232f81914bcb115ef52bb47641e833aabe4d19c8933cc286f2312f0883
SSDEEP 384:SPntTUFG4562BbpdL62S5p2X/ckWxsmzU7RWJlNdki+R9zdq:YtTJQj220gkU7H9zU
TLSH
T13CC25C6697A88326E9FB0F71EDF0D9453E35D7925811FB1D189EB00804BB3C4872273A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.Debug.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.Debug.dll
Size 19KB
SHA256 ec47584ec7344dbe9b3ec5740cf493a8dbf346e467d6855e24be33555db11983
MD5 b1d351bf2b284e0969f1bcf9d6be1b58
SHA1 64fab26c768c8b610df90baad8e03e7759309f6e
SHA512 98df861cf32cf09a00688626d706b36ea9a4c3b5bcf76f3675039e43268a82cb6632c05066b361440c5f88806cfad0955af1bd4f9d0373dd796b369084a6c385
SSDEEP 192:zVfPfwSGE5QJusuqgQJ9j578mDAqWJIxVMW0WF+GBTBWseaAWDiz5j4HsX01k9zM:Rfafu42mDAqWJIxVMWJlNVIR9zeZ
TLSH
T149924D528BB84206DDAA5F30EFA5DA42793DD3979511DA2B05D8D1090C93BC4973262E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.EventLog.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.EventLog.dll
Size 24KB
SHA256 f70b8392447817a4d44acd5785e0bc029a2844d5445e05b98d95b237443339db
MD5 8210308568d5ef15f758ad21fee0517e
SHA1 e0fdd76a63aff7195b38976882e88701bb6fda57
SHA512 5decf964bfe472c2083bf093709da87a4577fffa9a22f9db757a9c3beaa83005a26599cf2297c9619522b3b7682af8a279dd5dcd5168808722b3d78c71814644
SSDEEP 384:0cqdNcIPJ51NsMsOBZgmVfVej+yUvW2rgFW0lN4tR9zj4O:VqPPUEZ9kUEAP9zMO
TLSH
T19EB25E429A6C431BDCAD4A71EFB5CD42397CE7C76812DA260E9CF1490C637D48B21B6E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.EventSource.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.EventSource.dll
Size 33KB
SHA256 665d5316f601ed6dd9daa6d7534610ca3a7aa40e4d117c079ffb118ea2179b2d
MD5 b251f77d47b8ae95b7e6c48caec4921d
SHA1 e04dfe931564d2b0bd967dcadb4d0f807743775f
SHA512 a1e85b95d9e65f4274a6b6dee8c5fac60a0890f8b521c271458c515d0860e48dc96a91bde318e0c89a080e12a29d690ee7ab99c8a3242dd3ed6b10b7c5b1bd43
SSDEEP 384:YJ3OpOC26rT++tIwa7Pmq8JKUNFUDeHQiXA40zKeGIGJyF7fg12Pahfv0mvoW3gU:YIV2mqJUNFoOXpycpvmQlfe9zq
TLSH
T128F25C71D39C830BDCDD1E34A6B8D982153BC79B7921EB4E5E88E0880973785972376E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Logging.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Logging.dll
Size 49KB
SHA256 48bd4a0d323e0ae85fa0469779bb13e92c4600b0a49dad6bcb891047c5e17caf
MD5 eaf823ed830e1f448cbe8e1ad95a76e1
SHA1 6539c17f608ad3691e96c23bbc3bb3b55ae34b37
SHA512 67a3d77da957aaa0fe4f4434c054f51886528640603d4e027d5f298e322964ca1061d40f99ac9169df45f9a4f656d050f4d3dd2c0b0c4a7ffb5d20d84bda2735
SSDEEP 1536:uwkwf/Pqv0KvNDmBRZlDl9PQ8izqu0PpKzZ:Dkg/WCXiz0BKF
TLSH
T1D9335C6147EC8763DAAE0E38F5E4D5545B76D76B6012EB536ECCB0A90C7378087202BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Options.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Options.dll
Size 62KB
SHA256 4e767f3c0bf37199a83b8697fc9431d907fe39b5f2763f83381865c89ea6545d
MD5 6d0db347c73a12d13b4207aeef1bad55
SHA1 7d8afb9e7aee839f6c03d6a8ef6ef6791523e741
SHA512 e1db3fb8a552c64c2030e3724c39930c1f9ff749817fcb2aa2286217a13b333bd73c55dda764fbbfcb2076b473b7aaa93f6e56b30fa704b400b689e73c76f3c2
SSDEEP 768:WpWO5uXespQkuvhuVyI4vrKilRrtsyQYGiuxseJyvmpqsS7WdP7NszuatX9z/p:WAGghwMII4TpsyVOuvBBSBouczx
TLSH
T169536A2297CC9712CAFF9671B4ADA4520E35C35A3A03B79B52CDF0D81C773A18A65633
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Extensions.Primitives.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Microsoft.Extensions.Primitives.dll
Size 42KB
SHA256 b5e8630df19605fec639873b86bdff6f9d424db88d181bb36a0bd641558c18ca
MD5 b252147211deb74a9d91401c4387b6dc
SHA1 e237368996fdb43315f2360d1f374cfe9a0d54f9
SHA512 05ae2266296a182ee4fa267e947f4a7cd1d4d6787c4b4c1fbc3ead253ad6dfbfc2d26409fed457186579fc9540e83f2d1ccc15c78c3cff1af2deb3a88d54e137
SSDEEP 768:6PNon+YcgKF/1WfRzT3YWkLzZuORP6eNbOP7yW5yKyqLuiM+30XuIh7N9zu1X:6Gvcg61WfkFuoPzNbOP7yVKHLuiM+3Jl
TLSH
T1E3135B05B39C8333CFFE9E75B5A1C4152638D3A6B522EB6B60C8A0741D637C4477266B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Diagnostics.DiagnosticSource.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Diagnostics.DiagnosticSource.dll
Size 187KB
SHA256 d28e247dc8b6af02968b65fe6aae25c2ee689d2007268375d63347aeac0bea6b
MD5 f287490a129140fa1bd94a7247f49b37
SHA1 9892801cd4b7fda18461cab464a1b00e18f52217
SHA512 a467c7855af63771138b95a62e9b541f81de9e1d44519dd68a1c894167cdbb5566392d196f75ebc88c4e9b4c0587ab280d4a1ff44309d7522efa6738f60e3d13
SSDEEP 3072:TRQdeGkopxoribSSiKQ7Rt2wS6XkzvYaLKlllWFBx21nRlviQYVPXx:eeGkopx0igKQlty6XlabBxq7vzYV5
TLSH
T184148D2073EC4B26DFEF1B39F470C45607F2DA4BB54BEB886A85A4EC1853BD1460126B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.Text.Json.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\System.Text.Json.dll
Size 660KB
SHA256 bb53577c13ab01f397585e4bb642a1a89f1af91b70eb385c7c05b82b9b912605
MD5 e1134858b6a45565531cb3c3a1a26df4
SHA1 8c7986c744b9bb668f1bbb37934528ac38dd0bd0
SHA512 dd4c350ab441df58e08bfd208cfad384f47a676300f9b5811bb7be14b81bea9ce18debceefcc4ae68aa488551348f20feb8ae09b4d2220dc84a401e1e4f21e5d
SSDEEP 12288:jC7e+aoa/8Jbxfap97o6WEuy68/aUI5ABlr9ZHqdKC7vZzhYQ:xoa/8Jbxfaf7o6WEupX5ABlnK8Q
TLSH
T134E45C10B3E84B2FDADF433AF0F040058BBAE46AA75AD74B150854E92CC3BD19E556B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Velopack.dll

Path C:\Users\Admin\AppData\Local\LuaTools\current\Velopack.dll
Size 261KB
SHA256 b35698f5f66978d7bfd0ab12a2a2899f05912d9a1890d5e64c2dce9bacf2662f
MD5 2c29bf1bcfe53f779a9f7d785601dc8a
SHA1 21d134bb5661ebbb4819500aaf829ccfa024a9b4
SHA512 3acfa65169390a7f9af8ac66dfa9684405bcfcc4e61fc04df80ee3bfa25bea4bc8a41defd7fb9290890285172a97f663d95774a59e274fbcd1f8b5f44d533692
SSDEEP 6144:qo0g6Hxg1smn4oGalxcB+KQwCyknZylyZ8Sru:qLgAiWHoq9CykclyZz
TLSH
T17A445B0037F48716E2FF6F79FCB0600686B5FA07B8AAE75D0A8458ED1D633509950BA7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sq.version

Path C:\Users\Admin\AppData\Local\LuaTools\current\sq.version
Size 534B
SHA256 5eadf49e6b64616772acca001046c4b592e7f00434580202063fc12e4f88c75a
MD5 0da18b89c0a4308a406280e9a4ec4ed6
SHA1 874845be1608b38001e016155ecd11ece89123fb
SHA512 9ee127c0f9d24003d508e6f6bfe4c682774cb2ef6dbe6f569f44f49d9df22f180a21dd297c94f4e22e30e06be5aaa3ae9baec0424a24cfebefee1812ed623c35
TLSH
T146F02B86A942D74645931E5965E54104B3EB7E6F34C848D0E8C88CE8238D2EEDC2FD55
MD5 SHA1 SHA512 TLSH

Submit Download

LuaTools-1.3.2-full.nupkg

Path C:\Users\Admin\AppData\Local\LuaTools\packages\LuaTools-1.3.2-full.nupkg
Size 7.0MB
SHA256 57bd151d81fa51f5a2787a791814bc1ca31b3d7b0593b08f154447eb4edc1ff8
MD5 e007bb5d22dc175f18a09726bd0457db
SHA1 18478275a89919a943a2e4a7b62b808b3f98524a
SHA512 f325b2cbc7f12d39fa4096405c1e40b1043690e4f6b7fd9faad79cf40a4e610cabed11d9585abeb72a5f818b0726c626a8a94d33801f8743c6729a0e68b05971
SSDEEP 196608:RnPE0040yF5NF2jPnN4Sw6qHn3ILn03t+6E4UWx7:p860ojF2jfN4SwVI70bUG7
TLSH
T18076330F872C9BB7C25BE578613D0967C5C2272FD39273A9022C33D35FCA669D61914A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

5f52e43f-0690-4521-ace3-b82acd112fdd.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\5f52e43f-0690-4521-ace3-b82acd112fdd.tmp
Size 34KB
SHA256 cb8e8f5dbdef84404db0084a5f7930902a302cdede68df90b2d259d4e0c93c6a
MD5 ebe74067a79ee08cb7cb1466313dfd80
SHA1 db8f85e91380c3a567c0a23e6aafe55c64ded688
SHA512 27124f8f953fffad9b4b4ffc7aad90478bcb187c8c36110d9c3d05990ce1a6c142de6f54172017e66d03f3ee0777fb9bc39492824d4acf2ddf5b05614a175c37
SSDEEP 768:RF3Xvj3wORJqDLIG5fgGM1TnXMqOaEoaTZcv3L8:RF3T+IUfgt1TnxOr9C34
TLSH
T1D8F2BF32ACA59C735CF2C381B21A7692AEF0816BD5881E98D9DD7D1D01DB29E134FC23
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

66deda5c-8a55-4db6-a242-7a156c8f5349.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\66deda5c-8a55-4db6-a242-7a156c8f5349.tmp
Size 34KB
SHA256 3ce3c050038cde605461ba009d18ff01fb25dd244d580fc73cf774786f240564
MD5 61db85b80094359ca012fccd0726973e
SHA1 f9d2a7bc28bfbc05b61628b3157ace65fc6bff94
SHA512 06cd668784909d3b1431a3dfa0ffeff4d0b2d8334692f3e99bfc788955369e8552f82dfb05658b4bb470a8b82b8b67a813ff5915938510f06c44d0ad18a2a29c
SSDEEP 768:bC3heDwORJqDLIY5fgGM1TnXMqOaEoaTZcv3L8:bC30+I2fgt1TnxOr9C34
TLSH
T10AF2AE32ACA59C735CF2C381B21A7692AEF182ABD5841E98D8DD7D1D01DB29E134FC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 08b551008bdcc4de6c80e8d8ffe37c1b7477ababb9604ca97c52b81aed70fdae
MD5 4cd8e5e902146ba19eacbbf4f2e5586c
SHA1 94f807b68c16fd008173350beb37c8686810bcbd
SHA512 6381a86b9ddf9099cf403e36e8c774a996a2a9e547c95e0b2070ef6e2e5e94028cf8284c9fb284f5f80b523066ed68d34895e768192628c20598a4e881c034ca
TLSH
T1D5D02BF4B7DCD543C084507400F11574113571306918C2F02311E18805042810512329
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 ec6a4f25194d7df920f023b94035789770d82b866f099f5b5c173cc54b917115
MD5 3f1c1794ec8ced524804973bbce2d4ac
SHA1 6590c89953e8a722e5a484b9a6cf54a706728368
SHA512 4d64e702748a9bdaaf0d9e615e1a53c00d60b36678bc7c8cbf081669c63c3b8c23886cf0b3633e50e54853f273a2e585b73bb1a35f53ef1493bf40ac357ee359
TLSH
T1F1D02BF0B7ECD443C084507800F21574112571301518C2F02311E18805042810511315
MD5 SHA1 SHA512 TLSH

Submit Download

02721fff-f648-4c52-a99c-165ab3cc384f.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\02721fff-f648-4c52-a99c-165ab3cc384f.tmp
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

2d01fec5-9aee-4623-84a9-697561912f61.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\2d01fec5-9aee-4623-84a9-697561912f61.tmp
Size 11KB
SHA256 e194ec4e8df1c84007ab4bced089cb1541d52aebb01e8e9044cadf2013c15fb3
MD5 2015c71e4d3ff1af443ac462ee5c6f8c
SHA1 2cee8b1071355569b8b864b1b50218028ada4704
SHA512 57fc007e40907f82c6e37399deab9e81899301b4055e713325ed9de733e19730a86cc35e272956156e8355e440c723fb8f6e00afa6d429abf6aaadb0678385c3
SSDEEP 192:sxRERRb5/f4sOqqzoA8p4O/g6+WNIYRLFz3jk+GUIgDeJ:sxREL5/f4sO8r/5I+ka+
TLSH
T11232C715AD28A97B8CCBD21DFB667F53D6F91032A1D11E48E6FC8A1C14E76DE220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

63e6d3c4-eeb6-4ce8-aa8a-396e7cc7719b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\63e6d3c4-eeb6-4ce8-aa8a-396e7cc7719b.tmp
Size 13KB
SHA256 ecc4dfa42da9bf3af795d0d57ba0db4cf764d80cbe112209a8c6767469ac127f
MD5 117ca4bc6525331cafb7f22a5e2b6d0f
SHA1 7d226138e773e83a247367102ef148c62283c253
SHA512 200ee0f9fdfe69a35fcd9deee7abf3686ecdb9f24a4af2ca39bfccaa035c37c3baedfbcc7f732cf23bd0fec78eb31e582ea938f361e6aa6fa418ed374c87a2f0
SSDEEP 192:sxRERRHcBz5/f4s9qbozY/+VoA8pJqWec/g6+WNdoQGHq5/YV0WJ3jk+GUIgDeJ:sxRE3mz5/f4s9ADX/5Qg/yka+
TLSH
T1FB52D805AD28697B8CDFD219BA25BF13E6F91036A4D15E48E7FC8A1C14F76DD220780B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

929fe89e-16b9-4f1d-bb92-5d40b000c092.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\929fe89e-16b9-4f1d-bb92-5d40b000c092.tmp
Size 23KB
SHA256 847eda554501cfa62653170a08aee82214117cff4d9f4ed4ee8a88472149fcc2
MD5 732a09afb7f28ac42e65532a073ce4da
SHA1 c387c4d14cdb078372b2be393fda8f158cc9b4d3
SHA512 36e5086da12a64c3b6f92300a588dee8ef6aad57c5465cbf263986fba7263d8244071f0c0c8e7c27c089b122c41884f18c5b9f2e3b9bf08b02518ffdbd39cf7e
SSDEEP 384:Ua5g+TcfCtgflFfXHKhOObJ+UoAYDCx9TuqZz0VfUCh7xbog/OVwE9tTRkRroqYZ:UEg+TuWgf/fXH8F1+UoAYDCx9Tuqh0VW
TLSH
T1ECB2DA2F644CCB7E5FC10AAD9C1A6FD76D9802C79B548E4047FE994C02C77FA921A4CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9e5954fb-3ff9-49d5-8b80-acd3e316ef72.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\9e5954fb-3ff9-49d5-8b80-acd3e316ef72.tmp
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 4b7507465afb2bc37fbda11c4699e697e2a95cbcc34f56f27d3e2ae2a372a246
MD5 7fa0038b7d07bb040072010dcd945957
SHA1 a0e553cfb63966e4d25d02ba4863c3150ba0b243
SHA512 23c667663221acf44353e20a0201341d8da164a53d189c5c607d0ce69a568cfaf883f0611ec9b02493c9acdea86acd115f1ef9d14d895dc72ad564d1e8291d47
TLSH
T1EBE0269C46EBC33FA20864870178634D8392261E93C06D1E370CC9C5B00B550E6866F0
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 331B
SHA256 054fcf45b7677379e1b67b24fd8d73e02d2d867cb0c28fc6f5570dea022032c5
MD5 06e577d794559a452124cf1394d3669c
SHA1 618a0233749ff5841ed936689dec1cd885a4f689
SHA512 db80b86118fe24a5469004ce36cfa04f9ba35ca786a0a3bf8d9a109f493162cf4f44095ae0aec1092f473487806f4f0e8da9b14626cb9d0c9dc1dcd21de042df
TLSH
T100E0268904CBCB3FA20AB44F0268974CC393261E96C46D9E5B08C5C4B00AB48E3D67B0
MD5 SHA1 SHA512 TLSH

Submit Download

f_00006b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006b
Size 120KB
SHA256 ad58ca73f2b8f132ed15ee724e1731cbd7510af65eea7ef3c93e5ac2a5ca3541
MD5 7e2cf6f35e336618dcedac5730c99c6c
SHA1 3233e5cb89aaccf454652e61ab18672211f9c828
SHA512 ef54e061a31a472968702739f08552eb9eeed7b712affabdb8f4fc66c3a285d6f92bc9701c984d23738e1877332b06c58c690c3c4666d7ef19ddd538a6c57420
SSDEEP 3072:sQboBWR4jxw4c570csihKUJs+iOYmoIDT4LPd2ZeYNscm:9oBWi2570csjUK+iOYmr3yY3m
TLSH
T13CC312FB58A89632F2AA0AB4355A73515DA3762F034C4BC597B130D16AD2E80D2B6F0D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006c
Size 121KB
SHA256 738a1ef721ebfa83774e70ceb986ebc492984202011bd6985c9daa92c929050b
MD5 4f69ed8db6737131016e6e18eb64b0b3
SHA1 212810712e6ff00ef3c143fb4543adfcbb8d0caf
SHA512 40edafac3228baee13193cc3eaa22e7d10c657edbf1ffb0df97d4569b81d2fd0bebe7448ee32d5ab2225a80cfa963cd6460e255dff0115e9495be43eebff89cf
SSDEEP 3072:aOBI95kX54cBfi9/soaAAZiML/xnF7qHMoezRm1U4:aj95kX5XWsoan/tF7qHFez815
TLSH
T1B3C312DCF3FB1D91E527523F26C06BBD70CD888F3843F25A3741B62056D6AA05EA50A6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006d
Size 31KB
SHA256 a258dcaa34219a6253250fd12bd905eb92d8faf13288b909af829d53945a8e86
MD5 c229b974a1531c851b4bb7c133930dc0
SHA1 7fb9eed0376d3812c03174d5fe740dea3e1f5249
SHA512 ea267a9005fedbbf2ef9d4137f580451ea13449ef6bd84f5685194d2cc054d7c256758d3cf3ba868ba0ec77197509ca32931af4fbd82bbd38b2249c54ee22cf6
SSDEEP 768:yMpfRDTUuuCnzekb80O5Q1ul718L1fBzrPFCW4l0sXtDkk:yMpfR+Cnzek80O5T7I1fBn9Cbl04Ck
TLSH
T163E2F26A379BF03082C70CA379D7A5C2B11174B8DCFDD176581C599D24E86B3971AE0E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006e

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006e
Size 101KB
SHA256 ce8b5b974c2a6468f5130e3c3d7ca9e0d7097a14e52d0858cbcb918ef5754088
MD5 9357569c4b378556d6eb9e7ebeea7f90
SHA1 a6563977179b1738a8943b807e9f0b1bbf5066c2
SHA512 7a4e9fd6eada3628d8520847cf7d4161f70bfdcbc1b648f74cf126eb38ca5ff144b0051ad318d196bd6d765011d44d81a82b762c20a2f4f5a040016ddfd888e6
SSDEEP 3072:8pl8y51AZoKKcpF07XRUTGt438o5KbUGzV:8D/xKv4OKdjZ
TLSH
T198A3123507B825FA188D64FAD1D570EC63F2FA8548B120BA6128F7DA7D47F26601ACCD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00006f

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00006f
Size 45KB
SHA256 983792d4dfd6b6b12fec6bbce8a84899791bc1313bd013bb04f676263b679170
MD5 c8e4c6f36ea06324798a818de3ebe51f
SHA1 edc9345d3b88ece244fb417dcf6b66baf76f6e77
SHA512 9860e84790129898b87c78d7a53793989060b2e3686f6af878643a7299b2cb91697dd9cf860dacf92b935fa25b0a84b339b9e453e5a6b01d5c92eea3b1a018da
SSDEEP 768:LA0PVKH1+lSnPlgJsaOl+X/zuR8HFzO/Se7PUaDCuLuT8Y+nPn1qcdu6clyez5k:dKH1+o1U/zxzO/tAuLur+nPn15hcse1k
TLSH
T182230156ED8383F9AC42435FCE2146B224EA4AF3F047849A3040B7529F3413B7E2BB18
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000070

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000070
Size 240KB
SHA256 8649501bbb4c56331d227519c54e9206a3aa439d78a1af45c9780ba117b3ea1d
MD5 19eafda434f55caaf65b216f0cf4d781
SHA1 f13f8764f6622467b8273852025c59fcf82cd04d
SHA512 a2eea8261470c41244a9333a6259767fc714787111ff0c95b20eb3ff7bf6d9d99a8e7df360f15db76abc7fe4ea887d2ac063928f76201217d99a154d97c16d7b
SSDEEP 6144:ir5U36J8oGUFPJVfttDey7YDRDE9oAuC4zbEfckCjcGNSZ:iUW8hUFjLYDRnAozAyjcGUZ
TLSH
T1D33423A35564527392C8E257138EC74B84C2D79E78D949B45333D8F2FEB00986D33B6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000073

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000073
Size 20KB
SHA256 3aacbcd81ad6ae1761ea657e53aa6ac03e279cb47cfc2fbd6524bde7cce68b17
MD5 2af2be0651a488d15f87aadbee775f4b
SHA1 6da37d1d9fd929a8c79ce771dc565d2f554e9d9d
SHA512 d532f7200f9655de22309bff4d2676a1c72c7d04ef5e50e66c4c9de71f4ff835bb8ff82066014fcdb21d88ce04a43f96e7e4260fd651f47736cb7e365ad25651
SSDEEP 384:R+ouqO6S2dxUPYYchyHCYfJFLI4+i+Qzrao5atCv5+JQ9TU2M:RtuedxXDfIFLI4xlz2catCvMJQy2M
TLSH
T14A92D06ECFAED5241F5B1ADD5ECC2AD9066AE5DD6CBE53C7AB723270D9C0D408809230
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000074

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000074
Size 16KB
SHA256 e6f8deeeb0e0a44e1325dd17247f28ec491018b57e301ad28e8c736c1ec8561e
MD5 fef434088fe7570529b771a4479903cc
SHA1 ddee0bf726ca69a1a7e62e0f9966b09260bde209
SHA512 abf196c2ba5f1ede7bdc6858225cb826e08ab98c8120162d6ec59e79d60a085e65fa02d1e2f0da8d38d3b1801667570f766de2a4c4c087bd87536bc21404c0dd
SSDEEP 384:yi2Y0hiz2XYMavYqbmNORgRMe9S/JtJIeCAm6Nojla69:y2vJbNgRMOS/JtJIoNo5aG
TLSH
T13172E047FE524A195918AE2692F03F2C2520B4C7B229EE92D55FF1249CF17AC18D076B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000075

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000075
Size 36KB
SHA256 1e42cbbf4a86037acb0fa0d7ccf125044fe601702deb8a16bb8559f73d7aaab3
MD5 7889adc4f9b1c53564343fca9feb7829
SHA1 4705851099e44deedb71c29acdfc4759f61bef13
SHA512 8a4c08ea6e9b26222d7283dc9831d37e6b0e812f2ab1375117957b544e7fc25d9f0cd351d5d5c6dc74bf3018b92f6a77dd689c1a998f2f426ae50609f31038f1
SSDEEP 768:5wC3LLklTEgThARwXCfNkpRmRMWnjgt7u5USPKVnX57OTXiig:6C3LLkhvuRwXxRt5uKSPoX57OeL
TLSH
T1CFF2F128655C25D8180E23CF9FD76960785A03E12B4AF03348EE165833B376F9DEE782
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000094

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000094
Size 39KB
SHA256 a3a6b80605e30311dcb005105df72e46ccfafc0e376efcfa142e602017868fad
MD5 0d60cbeb04ca1a5b23cbb170dad13270
SHA1 be761f6dca8764b42c197ba4ae8098ac32ef6819
SHA512 1a67bbfb8ba0112559b44c20c1ed5e2e5274e4330b64a85c782809784eeae092294022ef1a329e53b4f817bc31d43d95ab3b90827f8bcf5018c9c6015202765a
SSDEEP 768:BpFnjXMUSpo7dvwN3oTAtfRbJ5o4isLz4Z7vb6w2rmhR6UlxT+sMWh:ljXf0nJm4isLz4Z7V2rmdlbL
TLSH
T191030290A4BD1AC038C17785257D387DF11DCFEEC2201EA9E71A87EC0EF9232995A476
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000099

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_000099
Size 60KB
SHA256 a221cbf72963df1c02c8bc202b159379f26e3d0d06225a5933209e745040e35b
MD5 b90c0e06b88c09158b13db21c7fc9ef7
SHA1 a4b968f5abcd2addd2d8f2d3e6fc01f4127c95a3
SHA512 430aadb5315738f414c2d4ca0d9e2be42f5242a3b28765993602aed4b34e334d854a88a051e6519877b7ffd8a5bf4ee7276885d6daec541826dba878f8c07f2e
SSDEEP 1536:iw916VqIkIFHzR32SF2Sjm+KW3IS7uchJEsZP8:nngaGzR32ceS7uchJ1ZP8
TLSH
T18C530227CA3085D2572D05004B9EF35A1A6079FDEA09CD7E920157F772ACAACFE20E21
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009a

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009a
Size 68KB
SHA256 9a184f33ae7f406bc55bb497748336469980585b53ccc41f863c96306dbf238a
MD5 0e776a9829f2513dc6b150e6e74178aa
SHA1 60fcee40a3ce00c80e125cad5c0a55fa02d15f2e
SHA512 39f0ccd6a44b69d59611679d725ad12187393d9628d977f9848796d5855fb145f3bfe2a3998bd2bbf8b5240c33cd6ecd9d49ed09f4d0270d5ae40558cf7acb54
SSDEEP 1536:H51miTVgrQ7JaUf76Z+AGYguWv0KxwhGPkMxOIdzz/SIWT27zQMPvp+elQDQ:ZYMR78X9GjuW8KxwhGPkKB5JWTMzz5+e
TLSH
T1026302329668F371BDE5B98DFECAD32F58485C204207CA11167E3DF3852549954D8C7B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009b

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009b
Size 63KB
SHA256 caecff4179910ce0ff470f9fa9eb4349e8fb717fa1432cf19987450a4e1ef4a5
MD5 226541550a51911c375216f718493f65
SHA1 f6e608468401f9384cabdef45ca19e2afacc84bd
SHA512 2947b309f15e0e321beb9506861883fde8391c6f6140178c7e6ee7750d6418266360c335477cae0b067a6a6d86935ec5f7acdfdacc9edffa8b04ec71be210516
SSDEEP 1536:tLQFdWY1+jAIuhc5s3JBP2ffX195jJqu1H5g60:qFdv+jA/cizOfTdRJ260
TLSH
T10E5302D829DC2DF4466490C19420E379C6FACED8E4485B6F5B2A2E0DF78DD7527C7242
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009c

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009c
Size 19KB
SHA256 c1334e604dbbffdf38e9e2f359938569afe25f7150d1c39c293469c1ee4f7b6f
MD5 2e86a72f4e82614cd4842950d2e0a716
SHA1 d7b4ee0c9af735d098bff474632fc2c0113e0b9c
SHA512 7a5fd3e3e89c5f8afca33b2d02e5440934e5186b9fa6367436e8d20ad42b211579225e73e3a685e5e763fa3f907fc4632b9425e8bd6d6f07c5c986b6556d47b1
SSDEEP 384:eV4Eqc1qgk/XDVGi8m7JEM9TUKPqivdjfommfP974oNF38:eV9qlxhVEM9UKPpMV74kFM
TLSH
T1D692D043765579E9AF1280C82397E6A4EAAD9A88D6C0FD0950F56CBECF708D32261825
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_00009d

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_00009d
Size 45KB
SHA256 cbab9b5750b82482da3832f65c9e24f37de8f98a48a0adf935333a4502ca6c1c
MD5 1d613e75c40f30df5d8bacfe27bc94e5
SHA1 98038ab3ec8b0d5053a2a5c0390d5b9c9d90ce06
SHA512 32ccec989e030acd29fc20a91be58d62b3008d18428b4d5d5b990826dca9809e0b2dcf8215c8c9856663bd9befe23f9f5227c734d4ee8e988cb9ac92b2f8fd6a
SSDEEP 768:ripUtZIQyqFvYjdBD0z9Imfm4foWzqcKdGW3Vsbna4CwKZLNYFlSXhoDcxOuccuc:5zFQivv6wedoKBm+xOpgey
TLSH
T17123F218F25B85988852A23015104C303953E0B026E27EB73614E3C6F679FB9FB9B7F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 6KB
SHA256 7098ab75c968aa4d7734c51669014950a6ef7920af6183f990f8bb74a297df2a
MD5 a8cbfff9512dd73d403cf896fcba3507
SHA1 640e0e7f51218d47fba0164a78681e2cbb0d3feb
SHA512 923e917abb6482cd46db592a902709ba008a4ea6f147807ecf7b7dcb0702e3778602d25f56104e76cc973a93a7b65b3341a7492790560148d1118779065f0f9f
SSDEEP 192:fJbXnIScqv9SSHZyfCxuy57sHMBMmFNVwvwECCUl2fLwmayT7OE2p:DcOmbMIOD
TLSH
T1CBE10C8549FC5096FF5430319FEB8D9376B14A45369F9F131B79EA3628A33EA708C480
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\temp-index
Size 3KB
SHA256 10813c685d3d19b4104a42ad9867eb95b9c1e036dfe58fb0961b928bf1c5cd6c
MD5 97ff0362b88be831d859f038b2888f54
SHA1 fdf56e365846886844c845abff9ff52ccc700b94
SHA512 775bb5568c1757df65e1a9f9a24462d10c9abff29866e8fdb47ba852d27d078899729cb22787f8a6c16f3f0dd5f8f7fc06137c7f751c9f2e7771f2503298ef68
TLSH
T11861D79411AEA160F758107587E38CD336309A8276AF9F220FBEF977787279F7080480
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 3KB
SHA256 769c8b1404b2fd0d01e6de781f1d0c158dbe5becbe1096d78a51c1b97ca71255
MD5 e0d499408c44ca7c61d75b121faff318
SHA1 1e2c105f4dd7db5d03fce9e2aa48339b49be032a
SHA512 0b5c49a7e0098f82d512d0d3a801783c0815f07dd316bab9ce5e1aa471080919dd576a8ac974be372e77213163edbae32efdee64710e5b27f6b83f8da18731b1
TLSH
T1F461D894116EA160F758107187E38CD736309A8276AF9F220FBEF977787279F3080480
MD5 SHA1 SHA512 TLSH

Submit Download

0bf833a9-8b11-4b28-a88f-81222e520b58.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\0bf833a9-8b11-4b28-a88f-81222e520b58.tmp
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

LOG

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\IndexedDB\https_ntp.msn.com_0.indexeddb.leveldb\LOG
Size 386B
SHA256 353b3523b9d7f6632cb5260865220b30c5a12f36e85eb9742d7f9a0252e47460
MD5 6e1faa0ee31e9969a8b91b7b175e7de9
SHA1 2fe999ee4d867a875b3e5ee890987532472a0afe
SHA512 2610421d16034842347ca8dc354393992bd0fedad99a8ecc813a8f29ce8cc4679dcce280caac3d18c4b508023c2568bd55c237e484fc13f264a614a5307294bf
TLSH
T104E06DB985CEC32FA12A20970168BF0997A3261F96C8AE892B0CD995B48A140F57E560
MD5 SHA1 SHA512 TLSH

Submit Download

7db73cd2-966d-40dc-9191-8497c520c953.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\7db73cd2-966d-40dc-9191-8497c520c953.tmp
Size 40B
SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
MD5 20d4b8fa017a12a108c87f540836e250
SHA1 1ac617fac131262b6d3ce1f52f5907e31d5f6f00
SHA512 507b2b8a8a168ff8f2bdafa5d9d341c44501a5f17d9f63f3d43bd586bc9e8ae33221887869fa86f845b7d067cb7d2a7009efd71dda36e03a40a74fee04b86856
MD5 SHA1 SHA512

Submit Download

8912882a-fff7-497d-ac8e-fde5aaf1b7fa.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\8912882a-fff7-497d-ac8e-fde5aaf1b7fa.tmp
Size 6KB
SHA256 8bc15de2bf9c6c141010304bbcbdfa784ce898f02a031eae90dde26e3db2a3da
MD5 acb427b6956cd0cde9fc8e9940db8709
SHA1 9de52873e953a8ff5cae680a39f57ccba854dbcd
SHA512 201647a9486fff9b7cb303e91f0e5d1bc6d27bf0b0d517541c04528963dfc7293d100a403c9666fad58c98f8e0f5a0e109bda998a929946ef989806c8d7db236
SSDEEP 192:DrOHU8DOIqsVZaaLuraNxriztgmtk04fv750XHIe/k:DrOHU8DOIqsVZaaLuraNxrixgmtk0EvF
TLSH
T179D1ADF7C7E5422DC91196F09A14AE1BCE5C0515836C3D5A88E4AE0BA3F24B1E182B9F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

9571c833-79f5-4119-a985-07912b26e238.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\9571c833-79f5-4119-a985-07912b26e238.tmp
Size 210B
SHA256 0adb50b78c4677e4f3eb7137e20b42b6accaf2c6dd7c95dbc9335ec5eb7e2a81
MD5 d0ad30c3bf2f912389413ded44ad6464
SHA1 4c4c6cd3181f725af09900472320c14f6fa58ede
SHA512 fe713627c88e09c8108bb4bdba6ec34cae89faa04694c6952afb16108e46c9abca266fbb1516a6501e3f9a4088c0d7a81a21eb6a89b26ba2fb8407424abdbce8
TLSH
T101D0235322457172515C39685025AD5EE77510550442D5DC50A1D74C7579CED450B1C4
MD5 SHA1 SHA512 TLSH

Submit Download

dbd897ea-2747-4359-a7d1-0e2044deebcb.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\dbd897ea-2747-4359-a7d1-0e2044deebcb.tmp
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\660bd5c5-f016-4a69-a6eb-2905138bb6a2\index-dir\the-real-index
Size 792B
SHA256 aa1ed7ce9a9f7ed1ba7a29d1b7fc4622f9fd0094449f5819c8ac4cace8723ce8
MD5 432f5091900118a4a7beffb19813e4c6
SHA1 113c63c344dab43b5b47fb0f92a1d68fb7e159cd
SHA512 7fb5f0dbae85399793826c84fd2a1e99b65679d3cc5cf5fa73e17befbabd56260d9419398a6a14457d4d29c8c871cfd4bb33519b37e1ab8a6d9fb6a24549b290
TLSH
T13401269601225E47FC0402B1A93CB645613651049344A75FE3E6609FDC90794BD43EE4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\660bd5c5-f016-4a69-a6eb-2905138bb6a2\index-dir\the-real-index
Size 792B
SHA256 5f53a4e72c3efcf1c9b9b865eb5a7b600f66ef358d06fb0067dc61e812ba2028
MD5 674ad9de05f060750bb58adce42f1827
SHA1 0ddb2ce08de30cb359ad30a8dbf6534c04404834
SHA512 69e6e89a9a4022dd58c255ea9bd0361b3f651d1b34785fab9729b3b3adca954678d7b68f3c97a5d6b630bc0c477c51f51b1067ff3a0da710d3f2b57bacf3ba22
TLSH
T15501418A0E625E0BED240271387EBAC9623912CC1340A71FA1EDD23E8CA2B44FC41AD4
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\be9284c7-e21c-4308-ac7e-88e71252308e\index-dir\the-real-index
Size 48B
SHA256 fc94a750e2c450ea74208b9f99ef7bbd35fbbb8c84dd2f814b88c9e154e3ce2e
MD5 bf4911db2564ab502577c036f7bdbe5c
SHA1 1b6a07818e8a3f552e0885c2aa3251c7557910ee
SHA512 32e76b94ccf88e5e773693db1da184f9e1899dcd3d92533bccb620e33dda65f9faba463aee29c59192881fe0f8744d6dd6591d5dce21ce72e61c8ac9b1987556
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\be9284c7-e21c-4308-ac7e-88e71252308e\index-dir\the-real-index
Size 2KB
SHA256 ed067e6f5853e17c2ddc45c1c95ebc2e830a68e2825e54b65b22df205beb714f
MD5 4c9f73bf52555ba8cdbd37a14782f2c5
SHA1 21e8b40cc8c7f4bee76a5534eb81211e8f9de544
SHA512 379ddb4852cc3398ce995aed5d8ad4bedf6ea13ba3e1d26bfb88082790f539515be49a0253d5c291622c7a859bcbd224523a18204dcf69be7fd00507ae4d47d8
TLSH
T11D51968D0C035B29D87812B218F304543B7D2CDC6A984A5768DC5535B8C76BD29597BC
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 488B
SHA256 4ec5bc9efc6462b5da138748f9bd217eacada926df175db642bfe8cecf8ef656
MD5 0aff428c14750cf900734e63c7eb1259
SHA1 7fe15485be2f3514b1305bd002ee3d867df9739f
SHA512 636d6b64980b8be22f8881368e30248c440c98adeffd42373ddd7db11d2c0dde3a94f7b6f81f2b0247c87167eb0e8b6d579110bc55bcb4990f1065b24f6b2dfe
TLSH
T184F027B72EF724A0EE9F93D7293104EA0059BC98DE00ED4F502B76DB55B2258A54AC61
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 161B
SHA256 32fca3c7e096677a4d583e6358b0035d04f8316705c73976bd1c1283ff3f07eb
MD5 f55ad3d48f671bbc32ec6d704d3e9112
SHA1 7956a341fbeb17526bc96ee6fc245afae1bc769b
SHA512 328a8b93f9b9f1f98d4d94274e3646c4498c0204400b9d50acdf8f260509c377143b207ec73b6c699bfd01cbfb9058fb67cf4e98480265f1d6d4b44f8110ffdf
TLSH
T164C08CFB5C953440EACA93C9993148EA824679DC8A98AE8D601E088312611206A22D34
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 259B
SHA256 432f2f885540e18b78949682a5868ad5bb09ec42dfcfc92c4f2b23affc0bf46d
MD5 a1d53e90d5f6c68a5a1f1b71d52f633f
SHA1 d26f0ea35acb51fdb1b4fe86ba147ccfe04825ce
SHA512 8fd3540856505575141fa3ade1f99d7c19b6e057e9ce5564c7bfb66b43f7e2134df0c3de136da07a8df70084061ae64192a2d462e606e356d0f8ecb56807ce3f
TLSH
T1F8D02BB329D33850EECA93CE1D3018AA414638CCC940BD4F901E18C355761645456C20
MD5 SHA1 SHA512 TLSH

Submit Download

index.txt.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\3cedfb74d44f2e84198d23075aef16c34a668ceb\index.txt.tmp
Size 386B
SHA256 e1a953baa3d96fa137f83c310a76c95eec62a51c6d1c7c7689a1b3ce6b9ef0eb
MD5 a9b0359fb4c112288571102c448fa214
SHA1 829dd63446385e8e2f7d94aa1c4e0d93ef731750
SHA512 26f14a238fd68e1fbaf7e2e0befe7cfb73da4905eec8e7a9cf10c7415e5b299228b91eb22e0c652afc3f6e062f1e56bc3259c34e8e4bdcedc47a24af45e25dc4
TLSH
T1F3E068B72EE738A0EEDF93CF2D3104AA008178DCD904BE4F502E16C741B2658248AC24
MD5 SHA1 SHA512 TLSH

Submit Download

temp-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\temp-index
Size 72B
SHA256 96358f3b1069c4e0b930c920a30e4741a0449a9649cdeb01dab145e56c4614d8
MD5 7c9a995fb8e7cc52fd81a073d88cdb51
SHA1 af5eea20983e986c9f1698752f475a04dfaea22d
SHA512 8e33c771d0b0199f0adf3a13391d954389cf60eff56c0149793456353323dd1f81a3416dd1d615acc6e882ef6578c9b6e766ce1286876b33eead61ba7f80efbd
TLSH
T1AEA0022102591249C51406F5F55683A4A214C811464D7A9184F8916888917418376214
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 48B
SHA256 e345a240af018085ba1d35cccc24c99056314a4ad8757df34ab606c0a58aa135
MD5 af4a82676c7bc004fb24814b8929e7a3
SHA1 8e7732e030f2abf2db8a40815b7f6ecbbda6fd4e
SHA512 7227217d3b2322a8ee9154a3bc6e88cf2a92d5d3371a56e614a9edba6bafac0063b7298d5c2e2f23be8ac0f00750dd26039a6b00e56500016facdfb02fdba21f
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync App Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 24af47040f544ddba5e33eb84146bc21bddc62579d97490437d9c13911d715db
MD5 27aea936de270a2fd8158b86dffe38ae
SHA1 686cde3ab1d5714046e5dd7c5b7466cd16b2517a
SHA512 d1472d0b5c3ed7b5e4f8aeeb7828f5904362c5b22b7fff64d7ddd8376a455edb83c764025d494256b3b2fefe567f05c2b597c37766ff1b7b7ddc77b7ec6012a4
SSDEEP 96:K4/aKcQyudyKWwbXQz3pJpaDxCpNnaKFvNda53PKVHTB:Uh91HB
TLSH
T11E9111B1323B4310387E691951E4E73B498235A23178AD3B37ED51A28E6BE044DFE5D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

ccee010b-ca07-4ed9-9d50-5b9c37637d74.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\ccee010b-ca07-4ed9-9d50-5b9c37637d74.tmp
Size 11KB
SHA256 41ee33e90c893060afaf0e59f5e1d590c125bedab2306613ef8aeb15cd7c0208
MD5 40e02437102bbdaf24d3701609ff8c38
SHA1 d7b4d5c0b186daddb4f3e929b482de1a48a1e6be
SHA512 1823d02c11e098e7d5df81079488d7a13e633348f92cd00b87e2fb5f8fdb572a1882772d00230bb6fdee0dda0d91a0c18db5f85d1aab6a4a1e04a6290e74eefd
SSDEEP 192:sxRzRRb5/f4sOqqzoA8p4y/g6+WNIYRLFz3jk+GUIgIJ:sxRzL5/f4sO8//5I+kas
TLSH
T14C32C715AD28A97B8CCBE21DBB667F53D6F91032A1D11E48E6FC8A1C04E76DD220740B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fda97284-6310-4312-9779-cde8cd72fd59.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\fda97284-6310-4312-9779-cde8cd72fd59.tmp
Size 16KB
SHA256 79f79486870bba2ca8ef57957aa8cc7ecf6b7bbd52f5eb75380f0fc6aa7115bd
MD5 d39401d17cee4bcb761563fbe7eb18d3
SHA1 2098bd426f27f64d13fc80fc4e13515e5d66a2f4
SHA512 188a87a0d19e8b4982eb9d61e8f2baf86af848ceb15ad3fcdeca23c689edf5654f08f2dded5f7fed626373e5ceadf2e7bd2929dfc87d6d3d89de7327c055ac72
SSDEEP 192:sxRERRHcBW5/f4s9qbSlY/+VoA8pJ2Ve8e/g6+WNdoQGHq5/YVnWJ3jk+GUIgDky:sxRE3mW5/f4s90D//5Qg/fkaKe3
TLSH
T15F72D7565D24E97BCCCBD519BA36BF12D6F91022AC925E4CA7FCC91C00EA2FD220741B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

acd7080e-4905-4bdc-af4c-2fcd2affe432.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\acd7080e-4905-4bdc-af4c-2fcd2affe432.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 37KB
SHA256 8b640fc395fa9362173b3344810886ab43c5c44b01bbf561eea8468a52911c1a
MD5 e4b0f34aab6a1f0aa16045306ecdb0ec
SHA1 b5e1dc32d1d0c2bc554f23d6c8ff7bc228d05533
SHA512 fcbd0f4f778be9b5bea300efe5535a184946daf5f73ae1b248b252a6638b76aac4c79d266ae4f0712ac156e330f40a8cb57588bfbb22aa98d49ce1f4ebebaa00
SSDEEP 768:5/UxvxjgC+931BwORJqru5fgGM1TnXMqOeuIAaP8:sZj3+93rmcfgt1TnxOmAG8
TLSH
T1AF03BF36AC556C739CF2D384B30AA297AEF144B3D5C51AA889EC2D0E029B35D530BC57
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 bf9a1bae4d047a510ded5ef27128cf5130e3fdcd46ee335a32fe7c938c570c5a
MD5 07557295464a0436ce13e5e13ff14aa7
SHA1 47ceaae301cd4f2c257667af95ee1a93474681ff
SHA512 384068f887150d7006d720c840d2422d544281092c89d55f8423690a8fda8c225c18b797b132b7e4d737b8d01b3e89f32bac1154fc831d4fd560728ea9ebc9f7
MD5 SHA1 SHA512

Submit Download

a93e5e58-1ce2-4480-85f2-33b9849eebd4.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\a93e5e58-1ce2-4480-85f2-33b9849eebd4.tmp
Size 392B
SHA256 8b39bae25e57234f12e37ea701ca79aa691e28379e5a7fd5341de77ffc6c870c
MD5 4ec97e6c99b1f171931b3141b811f454
SHA1 615553cf66b4cbf637a8fbadd60865a57f125fd2
SHA512 9b10be98205c7389e61892eea19f3e2a2b92a20aabd483f40013fce60c1b37005653f4db5ec6c693a6b22cc54c33fed1616670531fec7551a69b59b60358504e
TLSH
T1CBE00205A100517FD07C037041DB2D343AF6841403F30609452023696D233116B30FD0
MD5 SHA1 SHA512 TLSH

Submit Download

b4499367-48c7-464c-876c-1019d19efc53.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\b4499367-48c7-464c-876c-1019d19efc53.tmp
Size 36KB
SHA256 d732d8fe2afbb35933dbc1a65cb508ab015ca9d8f4e9d2b54f515930517b4d58
MD5 2d82fce7db58815294c49ca4305c7f05
SHA1 67bc84fbaa0ef1a145efb800d2ececdcd350ca7a
SHA512 3692d023be6f09cea3f62a77bc032658331d2d4fe73ecf754d0bf003dec3024c75d4a5c2eb4992ef9e4e4b801c6ac002a7b5a6095d2cf6122dfa19dfa4929dc2
SSDEEP 768:ZFE43Pwgnvj3wORJqDLg5fgGM1TnXMqOaEoaTZcv3L8:c43x+efgt1TnxOr9C34
TLSH
T1CD03AE33AC95C9779CF2C781F21E7292AEF141A7C9851E98EADD6C1D019B19E134FC12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ee91195a-9909-451c-a414-c2833c8a9f1b.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\ee91195a-9909-451c-a414-c2833c8a9f1b.tmp
Size 38KB
SHA256 1cc65cac86ef7c5ddbb3794ca3a8652ea93a2955d24fde776f24776ab21f5778
MD5 0438f1a7545fe2962edb9f67fb25d7c8
SHA1 d9ce7cbe412c2f04032abe4fa377d391de1abfb2
SHA512 d1e3c04dee807dbef261c6fcb8dffdd23b03b7258bc1fa6c431530164edb02a118da58811cff86ce214827b15c6620815999720d435a6c2107c4442805c9af38
SSDEEP 768:Z/UxvxjgC+93IBwORJqDLIu5fgGM1TnXMqO/EAaP8:MZj3+93i+Icfgt1TnxO8AG8
TLSH
T11503CF36AD5468739CF2C381B30EA297AEF145B7D18529A888ED3D0E06DB25E430FC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f6ffa85b-4b87-4244-881f-6d1436b19f12.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\f6ffa85b-4b87-4244-881f-6d1436b19f12.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

f5d6ad0f-6519-4337-bd8b-afa9361673e5.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\f5d6ad0f-6519-4337-bd8b-afa9361673e5.tmp
Size 38KB
SHA256 7ab560988f3d26a3c567d627ac8a886474794ef256dc4a417747c3c6ac730294
MD5 e17cd11db4952b77bace17767ef368b9
SHA1 df075b96ea4fbb2e4ab8bff581489981465fe1a1
SHA512 666dc331238bf576bc01859fc8b190c3900531c7fdf733f906c648ea6ace4652325152f1bfd5a2cee9c9593010c1addef70ec54d83e9aab12a8e347f580ef4b7
SSDEEP 768:m/UxvxjgC+m3hsDwORJqDLIa5fgGM1TnXMqOaEsvc:bZj3+m3q+Iwfgt1TnxOrsvc
TLSH
T19903BF326C659C735CF3D385B20AA297AEF545A7D1852DAC89ED3E0E05DB25E430BC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fbb2e11b-2c1c-4113-9a25-45f01891c394.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\fbb2e11b-2c1c-4113-9a25-45f01891c394.tmp
Size 34KB
SHA256 5c7316f710a0f6485845eebe9b9b5fe12932532e2049b9eb161db6cfa67c4518
MD5 fd73c9951bfedc276bc97be176cbbe40
SHA1 ff46912174de2ad0d7c390f934daa548671500c0
SHA512 2e609f0ff9eef67ec6fe164cde97b169ae3093499db54d6b23e112b5b619360144dbf99b7403a1b8835e9e55ed638a8ad1f623fa299da8cad4d03a1cbd8bd01f
SSDEEP 768:AC3Hbj3wORJqDLIY5fgGM1TnXMqOaEoaTZcv3L8:AC3/+I2fgt1TnxOr9C34
TLSH
T151F2AF32ACA59C735CF2C381B21A7692AEF1826BD5841E98D8DD7D1D01DB29E134FC13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

velopack_LuaTools.log

Path C:\Users\Admin\AppData\Local\velopack\velopack_LuaTools.log
Size 871B
SHA256 22daf5a7286a945c71c8cf4b9b2e499ad709708a7cc3e8083131f31b8e2bbe63
MD5 4472c022ef9b4505c484611c88bd64e9
SHA1 1da4b137c70769cc19d542e0b43f3f0ddb906adc
SHA512 82a5a79353abc305770e9616651bbde9178e073939153455ac6df76ccdc5b32cff70cd87f7012f867125245bcb202621afe87b236e3c957985b28355f4ed46d5
TLSH
T16C112C08AA4266AF658A1F1BE1F3F19442A61B163FC3924B0849510DF12DE6C33D7326
MD5 SHA1 SHA512 TLSH

Submit Download

LuaTools-win-Setup.exe.crdownload

Path C:\Users\Admin\Downloads\LuaTools-win-Setup.exe.crdownload
Size 11.3MB
SHA256 bae35a2c7fb871adf5aec2a4f8bade951533a1fb8672b273986d57cddf58ee8f
MD5 b1bace7f2f343dee4d756ff1f8e3deaf
SHA1 9d4241e38b688b44c6a14f98b7cc1ce6479eca60
SHA512 d3ec99e5612fcad4c0b0b86915bfb84d9325686b68f66f77375858eb4ebdb23dca11c6a785187ae225afa043fe6b70a63732d4a69f0d0a3ff2a7726d55fa1468
SSDEEP 196608:K4MyYhDTgGAnPE0040yF5NF2jPnN4Sw6qHn3ILn03t+6E4UWx7:iJhngV860ojF2jfN4SwVI70bUG7
TLSH
T158C60162FF02D0FBD48A01B5D43EB739BA369E95872A85D34A993C5CA8F1360581335F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f4e80e2b-367f-47c1-8aa1-05961ec14cf7.tmp

Path C:\Users\Admin\Downloads\f4e80e2b-367f-47c1-8aa1-05961ec14cf7.tmp
Size 15KB
SHA256 8b13218d548bb7e4a24deb6280cdcb929c342681b47203d5c92e554f85b39e7f
MD5 0fe0dd284a5ef1afc782f6784ed67985
SHA1 8a4300df7ff562b29ada0544928dc54d779695fe
SHA512 fa5c7f89b12263dcf7e4ae5ade3e32b854268963aefca67752e48524149dea4c98e502bc6b38828fccaeaeeff4ca2ff906b4832213611e75736230f5350a4624
SSDEEP 384:zUHe0Wc/4VX1uSUe+PYFdYD+6j5JhKWtR0D8ohpc:zUHe/X13N5q5WTD8spc
TLSH
T16C72D7937E01A5F7D6C78172D43CE7FD8A43474FEBAC1A869A28ED64EA59300250357C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads