Resubmissions

23/03/2024, 20:50

240323-zmtl5aeg7z10

23/03/2024, 01:09

240323-bh4drsbd5610

22/03/2024, 21:56

240322-1tr8baca3v10

22/03/2024, 02:58

240322-dglhnsff4910

Analysis

  • max time kernel
    118s
  • max time network
    125s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    22/03/2024, 02:58

General

  • Target
    8863f887505fb33aa29b652cb3f84999c63da172d917b96ea7958a869d508506.exe
  • Size 81.5MB
  • Sample240322-dglhnsff49
  • SHA256 8863f887505fb33aa29b652cb3f84999c63da172d917b96ea7958a869d508506
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\8863f887505fb33aa29b652cb3f84999c63da172d917b96ea7958a869d508506.exe
    "C:\Users\Admin\AppData\Local\Temp\8863f887505fb33aa29b652cb3f84999c63da172d917b96ea7958a869d508506.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1760
    • C:\Users\Admin\AppData\Local\Temp\2e0fH47283BT61EtIWpUTrPSbFc\azkzkzz.exe
      C:\Users\Admin\AppData\Local\Temp\2e0fH47283BT61EtIWpUTrPSbFc\azkzkzz.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1460

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        azkzkzz.exe

        • Path C:\Users\Admin\AppData\Local\Temp\2e0fH47283BT61EtIWpUTrPSbFc\azkzkzz.exe
        • Size 1.1MB
        • SHA256 2e67953e0445d8d901879b5db021aed7eee8b9020fa7a4f248a100d8a4e70f69
        • MD5 SHA1 SHA512 SSDEEP

        LICENSE.electron.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512

        LICENSES.chromium.html

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\LICENSES.chromium.html
        • Size 1024KB
        • SHA256 1f69b1ca9c3277f60cc0cfa473180c895e56462f231379cdb893ed2042dfddb4
        • MD5 SHA1 SHA512 SSDEEP

        azkzkzz.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\azkzkzz.exe
        • Size 8.7MB
        • SHA256 15bff0d7db4d75eba56d619cd8124f23186c49ccc182094cf0be1fb26eb9550b
        • MD5 SHA1 SHA512 SSDEEP

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\chrome_100_percent.pak
        • Size 150KB
        • SHA256 49aff5690cb9b0f54f831351aa0f64416ba180a0c4891a859fa7294e81e9c8e3
        • MD5 SHA1 SHA512 SSDEEP

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\chrome_200_percent.pak
        • Size 229KB
        • SHA256 4d5b51f720f7d3146e131c54a6f75e4e826c61b2ff15c8955f6d6dd15bedf106
        • MD5 SHA1 SHA512 SSDEEP

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.7MB
        • SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
        • MD5 SHA1 SHA512 SSDEEP

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\ffmpeg.dll
        • Size 2.7MB
        • SHA256 a32800cbf98c84f2da9dcfea2fe8bdcfaaeef07c4eb81469945a992f83bb339c
        • MD5 SHA1 SHA512 SSDEEP

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\icudtl.dat
        • Size 3.8MB
        • SHA256 ed00da041ad41519d3e6c23dff996ecded89f3d543ddaa8a30d6c9e5fcdb09cf
        • MD5 SHA1 SHA512 SSDEEP

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\libEGL.dll
        • Size 468KB
        • SHA256 72126255176dca2000061657efa0a8e91a9658d1724769b9260093116e131c33
        • MD5 SHA1 SHA512 SSDEEP

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\libGLESv2.dll
        • Size 1.4MB
        • SHA256 21c05a6ef6be51db981e0c0a1f189c1290f1831ae8a1f5601fb089819744eec9
        • MD5 SHA1 SHA512 SSDEEP

        af.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\af.pak
        • Size 478KB
        • SHA256 e36a906908a92dad39ad8e5b344b38c538574e35c5386ac2b901640b202d3228
        • MD5 SHA1 SHA512 SSDEEP

        am.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\am.pak
        • Size 776KB
        • SHA256 1847f8517d8f26c856adbf08df3996d5f3b7ab61378199c138346bfe29675f01
        • MD5 SHA1 SHA512 SSDEEP

        ar.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\ar.pak
        • Size 851KB
        • SHA256 25dda3d00be579c42a042254762b242b09e9ab4c4dee1fe1237f4c22f363791b
        • MD5 SHA1 SHA512 SSDEEP

        bg.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\bg.pak
        • Size 64KB
        • SHA256 f42b30b6b15afe200820c06a8d97a37459a7a78a11351825e2dc77c025fc7fad
        • MD5 SHA1 SHA512 SSDEEP

        bn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\bn.pak
        • Size 1.1MB
        • SHA256 bf2fa4c57095e0be63e8cd1ae6d2389d6417a91d8c9e1970eeee5363c46f0d27
        • MD5 SHA1 SHA512 SSDEEP

        ca.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\ca.pak
        • Size 538KB
        • SHA256 f4da114b473c34e0946b12289f6e802fcede2f66013d4f184c729a1f8ae7350e
        • MD5 SHA1 SHA512 SSDEEP

        cs.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\cs.pak
        • Size 19KB
        • SHA256 87f816e3ddfd2ab764822784b1c3fd8b50d9b8e5461eb2517f913d43b3440bb4
        • MD5 SHA1 SHA512 SSDEEP

        da.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\da.pak
        • Size 501KB
        • SHA256 0c75acb008dd5c918d8a1a73c22fa7c503961481bf1708f6bda0da58693c3c08
        • MD5 SHA1 SHA512 SSDEEP

        de.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\de.pak
        • Size 536KB
        • SHA256 21c18e04be929f8b551c4ca5d78fddeffe8c48c503234cf79220c31bdd9e6309
        • MD5 SHA1 SHA512 SSDEEP

        el.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\el.pak
        • Size 971KB
        • SHA256 f1e01eeb90c0842f7af927f65d034fc93fdbcbcb9b9ea7e31c79761c316c8fb8
        • MD5 SHA1 SHA512 SSDEEP

        en-GB.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\en-GB.pak
        • Size 436KB
        • SHA256 ad460425c88be889d6d6a9b69d0b6f64e2e957bf8ac4f230de4d25340c75ba87
        • MD5 SHA1 SHA512 SSDEEP

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\en-US.pak
        • Size 440KB
        • SHA256 20be1732675fedf380010b09936ed65c71bb761d0a05732215ef0795b5aba606
        • MD5 SHA1 SHA512 SSDEEP

        es-419.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\es-419.pak
        • Size 530KB
        • SHA256 400e0a9ca26fd4e269f9b690607598392dfac527f22926d9109d20b85fea9af0
        • MD5 SHA1 SHA512 SSDEEP

        es.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\es.pak
        • Size 530KB
        • SHA256 e09883eb027accf16b738e5a8072c28dfa5eb76b1a94b6e3ffda550fbb74c7ee
        • MD5 SHA1 SHA512 SSDEEP

        et.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\et.pak
        • Size 481KB
        • SHA256 ac1431e61f8c6c56ef96860dc8a8ddf840dbf6965af6b920d811b7e39adab6b1
        • MD5 SHA1 SHA512 SSDEEP

        fa.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\fa.pak
        • Size 789KB
        • SHA256 a9f1868e931879a8cc0a991143515fd5f4803fb16f5588aa61b2117dbcc5f6e1
        • MD5 SHA1 SHA512 SSDEEP

        fi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\fi.pak
        • Size 492KB
        • SHA256 a1f79a3621aa0ad69fb35863ddd456a1e7fc78d9d2ed3c7bf78d3c2eccf20d7a
        • MD5 SHA1 SHA512 SSDEEP

        fil.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\fil.pak
        • Size 8KB
        • SHA256 584e64b76a33490cea135be35d7a4e2387c0c681f87d44149b8cc418c56999d0
        • MD5 SHA1 SHA512 SSDEEP

        fr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\fr.pak
        • Size 574KB
        • SHA256 d7cc14961dbf13cc35b80b5582bc8f442dad7c6e1495d0bf68d229bd75a4fd45
        • MD5 SHA1 SHA512 SSDEEP

        gu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\gu.pak
        • Size 1.1MB
        • SHA256 7b06f3b7040901e7dbd2884ba534d43e73013ce0677bc725d53bccd54759ad5e
        • MD5 SHA1 SHA512 SSDEEP

        he.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\he.pak
        • Size 691KB
        • SHA256 d71c98ed9ef2aaf13033332dcd40f41785656c156d41614916353daa3ea5f2a7
        • MD5 SHA1 SHA512 SSDEEP

        hi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\hi.pak
        • Size 1.2MB
        • SHA256 352f833b4f936369216eeaa1f8c5e652b34a36cc143ff9a872b0608e4e88957c
        • MD5 SHA1 SHA512 SSDEEP

        hr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\hr.pak
        • Size 535KB
        • SHA256 f882072827c75a5c046e29cc4e2468a41cb786199045b58550e978272d338fe8
        • MD5 SHA1 SHA512 SSDEEP

        hu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\hu.pak
        • Size 576KB
        • SHA256 e806294a2d609a514dfa416a07625fb2f173018bb2e278323f752efc459c39f8
        • MD5 SHA1 SHA512 SSDEEP

        id.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\id.pak
        • Size 475KB
        • SHA256 a368573c71a4590d5eb8a809b49a94ba484a83bc0bdd46731189bdffef5171f5
        • MD5 SHA1 SHA512 SSDEEP

        it.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\it.pak
        • Size 2KB
        • SHA256 9d8755011bb3d7b20a4b82a93340957e5beb754ff6bf1949e5449a94b1c32af6
        • MD5 SHA1 SHA512

        ja.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\ja.pak
        • Size 639KB
        • SHA256 796069bd22828f22cd2ab32d00eb025c4302c2b3f0d7254825e527dc9056f831
        • MD5 SHA1 SHA512 SSDEEP

        kn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\kn.pak
        • Size 1.3MB
        • SHA256 4e7740fc6793f03be61a23f688396c7babe380a7e27ddd705bf2c1ed3bbf1ef0
        • MD5 SHA1 SHA512 SSDEEP

        ko.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\ko.pak
        • Size 540KB
        • SHA256 ce125b6517268ff5f9dab14535876caae0a46d43c1e7048e1eb7dbf2ade89a00
        • MD5 SHA1 SHA512 SSDEEP

        lt.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\lt.pak
        • Size 580KB
        • SHA256 95253deae9554317c60490a982a4d310c87238096e3bad0329e8bf4c944cbaed
        • MD5 SHA1 SHA512 SSDEEP

        lv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\lv.pak
        • Size 579KB
        • SHA256 7cd453d14e2929319b373a9c8069f62eb4a91ebb484bd4b689dd06918c787dd7
        • MD5 SHA1 SHA512 SSDEEP

        mr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\mr.pak
        • Size 1.1MB
        • SHA256 bf42c87554153b83e53ed8b839a74a50e893abda190d7ddd73521cc6d121dfa7
        • MD5 SHA1 SHA512 SSDEEP

        ms.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\ms.pak
        • Size 498KB
        • SHA256 a4ad4345064fe64756fe2b244839a3a0db7df1a3996bc6ee4504b1cabc3aebf3
        • MD5 SHA1 SHA512 SSDEEP

        nb.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\nb.pak
        • Size 483KB
        • SHA256 f6768c45305a24679a915e6d42c38fe6ea12a9e36ec016592ea52a8701e876c1
        • MD5 SHA1 SHA512 SSDEEP

        nl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\nl.pak
        • Size 499KB
        • SHA256 9b46eec8a0b0b568ddc35387ca02c2116baa7520efb04d92325fec17d5091353
        • MD5 SHA1 SHA512 SSDEEP

        pl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\pl.pak
        • Size 557KB
        • SHA256 cf9a58b99709df28ae4acaae0e3279365a7388df074dfece041202680caa0037
        • MD5 SHA1 SHA512 SSDEEP

        pt-BR.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\pt-BR.pak
        • Size 524KB
        • SHA256 69185b6ab367271e83ccfecaec7d40265dfcd414355d85187adb5284e1b00a6e
        • MD5 SHA1 SHA512 SSDEEP

        pt-PT.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\pt-PT.pak
        • Size 527KB
        • SHA256 b9439000c1c75565c2f223612079a51971ac54a3786d5b631f20436447929465
        • MD5 SHA1 SHA512 SSDEEP

        ro.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\ro.pak
        • Size 546KB
        • SHA256 dd17c680dd2b8d435b64882a54d928354a83201fe4a5923dc9ba878131be93a7
        • MD5 SHA1 SHA512 SSDEEP

        ru.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\ru.pak
        • Size 897KB
        • SHA256 2e53cab562c4708bcc760728f346e62a2b9d3b912ee456bf81639e341417f99b
        • MD5 SHA1 SHA512 SSDEEP

        sk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\sk.pak
        • Size 563KB
        • SHA256 74f33cf691b30c2220d800407ca87dd9b01873d11e3fb15d9db9d7564ea1cb80
        • MD5 SHA1 SHA512 SSDEEP

        sl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\sl.pak
        • Size 541KB
        • SHA256 93cbaf02a305c1b042449caa5f741f212ee9e2ff989e92029cec4ce5e880dca5
        • MD5 SHA1 SHA512 SSDEEP

        sr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\sr.pak
        • Size 192KB
        • SHA256 fb977efab85b0e52d8be49458fb610e2271299c426cb92dc32e5450bf0ec91db
        • MD5 SHA1 SHA512 SSDEEP

        sv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\sv.pak
        • Size 486KB
        • SHA256 ad5be91183fc0b8489d0ce80d5529a5e85911d17fa36d3dc0c6a8a036aa0af0f
        • MD5 SHA1 SHA512 SSDEEP

        sw.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\sw.pak
        • Size 512KB
        • SHA256 ecc84d9a40448772697c14f27b1297fcdce12df30d008a7d4149a6aa587d85a8
        • MD5 SHA1 SHA512 SSDEEP

        ta.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\ta.pak
        • Size 128KB
        • SHA256 8c6944a02899e8bb0738be83cc7b9541823a4601075dcd7dfc14835549fc35b0
        • MD5 SHA1 SHA512 SSDEEP

        te.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\te.pak
        • Size 1.2MB
        • SHA256 e2cb4856b605a3a2bda9c09052717f3581e1eb3847357803294af5d02dd3b301
        • MD5 SHA1 SHA512 SSDEEP

        th.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\th.pak
        • Size 1.0MB
        • SHA256 6c2aa6d1297ca001c09dbd684dda7b1a4a2e76ff685bf9124bab4af911cafbbb
        • MD5 SHA1 SHA512 SSDEEP

        tr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\tr.pak
        • Size 523KB
        • SHA256 224aa5fd6cbbdaae3e72a8e398d9e22a613c8dd5551d27cc1cbc5a892ef5a129
        • MD5 SHA1 SHA512 SSDEEP

        uk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\uk.pak
        • Size 896KB
        • SHA256 ef7ffd8792b482829f31924241e6bd12dccdfdf404a0781bb28747c308649c0a
        • MD5 SHA1 SHA512 SSDEEP

        ur.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\ur.pak
        • Size 782KB
        • SHA256 2e0b43afa9c69288586ed404564ee2f420a87ff7936bdb48efbf21ce8f58f468
        • MD5 SHA1 SHA512 SSDEEP

        vi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\vi.pak
        • Size 619KB
        • SHA256 882a6068baeac090b841d47a28e078597d23deef8b9d76af2e341f3e9593afec
        • MD5 SHA1 SHA512 SSDEEP

        zh-CN.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\zh-CN.pak
        • Size 447KB
        • SHA256 9296256b5fa35ffb68375607bf32bb0af57b28c8786d71deaaa97757122652ed
        • MD5 SHA1 SHA512 SSDEEP

        zh-TW.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\locales\zh-TW.pak
        • Size 64KB
        • SHA256 1cb2490419407abf3d8bb15a192bf3e57a99d5e3b417793d5b0942ba9e4dcc4e
        • MD5 SHA1 SHA512 SSDEEP

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\resources.pak
        • Size 1024KB
        • SHA256 2c67acc6b4ea68661bc189b369b4556119ab608df7b3f2e1d3fe532ac790a5de
        • MD5 SHA1 SHA512 SSDEEP

        app.asar

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\resources\app.asar
        • Size 1.2MB
        • SHA256 d676e7fc373d5f9c54b0595a13f71cba1b2f13758443c3e87989bee7256afe9a
        • MD5 SHA1 SHA512 SSDEEP

        app.manifest

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\app.manifest
        • Size 350B
        • SHA256 8814db9e125d0c2b7489f8c7c3e95adf41f992d4397ed718bda8573cb8fb0e83
        • MD5 SHA1 SHA512

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\index.js
        • Size 3KB
        • SHA256 77a3965315946a325ddcf0709d927ba72aa47f889976cbccf567c76cc545159f
        • MD5 SHA1 SHA512

        screenCapture_1.3.2.bat

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\screenCapture_1.3.2.bat
        • Size 13KB
        • SHA256 818350a4fb4146072a25f0467c5c99571c854d58bec30330e7db343bceca008b
        • MD5 SHA1 SHA512 SSDEEP

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\snapshot_blob.bin
        • Size 299KB
        • SHA256 b082fbcf0c790cce78c6e5a7208cdab264ab3037bc1f82919ff2cfa524694a36
        • MD5 SHA1 SHA512 SSDEEP

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\v8_context_snapshot.bin
        • Size 663KB
        • SHA256 68effe7d9398b4e81b829fe65c4c68c4cbb9b42a4bb146df826fbf808926f675
        • MD5 SHA1 SHA512 SSDEEP

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\vk_swiftshader.dll
        • Size 832KB
        • SHA256 003c7ee440102c683fa42c63201a86346864bb3d0558a28954e38cea1f9c0db6
        • MD5 SHA1 SHA512 SSDEEP

        vk_swiftshader_icd.json

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\7z-out\vulkan-1.dll
        • Size 704KB
        • SHA256 fd8d8d42c00a854b370ffd51982a99a3ab863c5b4d15796f32740d92fea7ecb0
        • MD5 SHA1 SHA512 SSDEEP

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nso57A3.tmp\StdUtils.dll
        • Size 42KB
        • SHA256 151b024b0fedae7a3e242da9805d31430957c80765f2ae171e147f496eccc9eb
        • MD5 SHA1 SHA512 SSDEEP

        ffmpeg.dll

        • Path \Users\Admin\AppData\Local\Temp\2e0fH47283BT61EtIWpUTrPSbFc\ffmpeg.dll
        • Size 8KB
        • SHA256 437982d1d3f6514157a5e45785a15bf2f3c683c268d6d75a296e72b69c32c2d2
        • MD5 SHA1 SHA512 SSDEEP

        StdUtils.dll

        • Path \Users\Admin\AppData\Local\Temp\nso57A3.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP

        System.dll

        • Path \Users\Admin\AppData\Local\Temp\nso57A3.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP

        nsis7z.dll

        • Path \Users\Admin\AppData\Local\Temp\nso57A3.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP