Resubmissions

28/03/2024, 13:04

240328-qbet6aeg81

28/03/2024, 10:49

240328-mwvjkaaf9110

27/03/2024, 18:39

240327-xa3cdshh2610

Analysis

  • max time kernel
    78s
  • max time network
    169s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/03/2024, 18:39

General

  • Target
    Install Termius.exe
  • Size 174.7MB
  • Sample240327-xa3cdshh26
  • SHA256 e66fd24e29c4cd33772fbda049a4efc7b55a0c22959d0d56d0fa77bd34040864
  • MD5 SHA1 SHA512 SSDEEP
Score
5/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Executes dropped EXE 6 IoCs
  • Loads dropped DLL 15 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Modifies registry class 14 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 57 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Install Termius.exe
    "C:\Users\Admin\AppData\Local\Temp\Install Termius.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2124
    • C:\Windows\SysWOW64\cmd.exe
      cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Termius.exe" | %SYSTEMROOT%\System32\find.exe "Termius.exe"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2908
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Termius.exe"
        3⤵
        • Enumerates processes with tasklist
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:4980
      • C:\Windows\SysWOW64\find.exe
        C:\Windows\System32\find.exe "Termius.exe"
        3⤵
          PID:5068
    • C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
      "C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe"
      1⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies registry class
      • Suspicious use of WriteProcessMemory
      PID:2012
      • C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
        C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\Termius /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\Termius\Crashpad --url=https://o76327.ingest.sentry.io/api/193727/minidump/?sentry_key=55af16af94074b88844cd7e16f535fa5 --annotation=_productName=Termius --annotation=_version=8.10.4 --annotation=plat=Win64 --annotation=prod=Electron "--annotation=sentry___initialScope={\"environment\":\"production\"}" --annotation=ver=21.4.4 --initial-client-data=0x488,0x490,0x494,0x464,0x498,0x7ff70ae806e0,0x7ff70ae806f0,0x7ff70ae80700
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5668
      • C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
        "C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Termius" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1704 --field-trial-handle=1904,i,15586593683218704651,11380577040929260199,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5860
      • C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
        "C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Termius" --mojo-platform-channel-handle=2392 --field-trial-handle=1904,i,15586593683218704651,11380577040929260199,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5920
      • C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
        "C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Termius" --app-user-model-id=electron.app.Termius --app-path="C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2812 --field-trial-handle=1904,i,15586593683218704651,11380577040929260199,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5956
      • C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
        "C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Termius" --app-user-model-id=electron.app.Termius --app-path="C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar" --no-sandbox --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2960 --field-trial-handle=1904,i,15586593683218704651,11380577040929260199,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:6080
      • C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
        "C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Termius" --app-user-model-id=electron.app.Termius --app-path="C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar" --no-sandbox --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2988 --field-trial-handle=1904,i,15586593683218704651,11380577040929260199,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
        2⤵
          PID:1228
      • C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
        "C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe"
        1⤵
          PID:5452
          • C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
            C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\Termius /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\Termius\Crashpad --url=https://o76327.ingest.sentry.io/api/193727/minidump/?sentry_key=55af16af94074b88844cd7e16f535fa5 --annotation=_productName=Termius --annotation=_version=8.10.4 --annotation=plat=Win64 --annotation=prod=Electron "--annotation=sentry___initialScope={\"environment\":\"production\"}" --annotation=ver=21.4.4 --initial-client-data=0x46c,0x474,0x478,0x448,0x47c,0x7ff70ae806e0,0x7ff70ae806f0,0x7ff70ae80700
            2⤵
              PID:1608

          Network

                MITRE ATT&CK Enterprise v15

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                Termius.exe

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
                • Size 6.8MB
                • SHA256 2a7638acdf623bf00913522171463d5463fd151343c2dd2a3ce3465b514c090c
                • MD5 SHA1 SHA512 SSDEEP

                Termius.exe

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
                • Size 7.3MB
                • SHA256 25fbf42d7b588ec8db70fb2f9b9740687b00256f972bc69cd9572fdaa6c44466
                • MD5 SHA1 SHA512 SSDEEP

                Termius.exe

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
                • Size 2.6MB
                • SHA256 2459cd9cddea407586496e5514ba0feaac740f9a26389887182d0faea8f73b69
                • MD5 SHA1 SHA512 SSDEEP

                Termius.exe

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
                • Size 2.1MB
                • SHA256 be8b3ae4b3d5b80d171f6ce91b2ee2feaac65a9b9995fb9d8658f387a88deba6
                • MD5 SHA1 SHA512 SSDEEP

                Termius.exe

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
                • Size 2.1MB
                • SHA256 b28d10bc99e601ec2dc92ade19845cddf94b94db4fb65e0eb4c7aa32678389f1
                • MD5 SHA1 SHA512 SSDEEP

                Termius.exe

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
                • Size 2.0MB
                • SHA256 28d86c044795e6a792a23d760f49e76307957e97729fea500ba863a15d9a371e
                • MD5 SHA1 SHA512 SSDEEP

                Termius.exe

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
                • Size 1.6MB
                • SHA256 8700dd655287146c47e6bc72e756e78fb454735d72361d508e5d1d71e5085d30
                • MD5 SHA1 SHA512 SSDEEP

                Termius.exe

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\Termius.exe
                • Size 320KB
                • SHA256 3d232bc369f3c3bda9ca111f90252491ec566b8ce8b4aa00c3d42f78d469d776
                • MD5 SHA1 SHA512 SSDEEP

                chrome_100_percent.pak

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\chrome_100_percent.pak
                • Size 126KB
                • SHA256 bca4401b578a6ac0fe793e8519fed82b5444972b7d6c176ec0369ed13beaad7b
                • MD5 SHA1 SHA512 SSDEEP

                d3dcompiler_47.dll

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\d3dcompiler_47.dll
                • Size 1.5MB
                • SHA256 e25294e481b8867c684b84581e92ba43f7ac143581ec5f46ad48e3837c5328f7
                • MD5 SHA1 SHA512 SSDEEP

                ffmpeg.dll

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\ffmpeg.dll
                • Size 2.5MB
                • SHA256 6ca98d2e95b7937d80b29acd3ba60f899749fa3282e9ba79d737da2595e6db4e
                • MD5 SHA1 SHA512 SSDEEP

                ffmpeg.dll

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\ffmpeg.dll
                • Size 1.1MB
                • SHA256 3fcf6a6e86b2d4ffc2e829cfbefae5a13dd82adce342ccab8a33ae582167253f
                • MD5 SHA1 SHA512 SSDEEP

                ffmpeg.dll

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\ffmpeg.dll
                • Size 768KB
                • SHA256 9936096ae51f0a05ba948d8753217ab6200358a83fdb534e59272ab319a2583a
                • MD5 SHA1 SHA512 SSDEEP

                ffmpeg.dll

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\ffmpeg.dll
                • Size 1.9MB
                • SHA256 3706c712f7106d519cf5df3332356868c517ec7ba6b22d8f5f8c8528f3fcc440
                • MD5 SHA1 SHA512 SSDEEP

                ffmpeg.dll

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\ffmpeg.dll
                • Size 320KB
                • SHA256 1ea8fa1b601c67ae9076af89704a1a64cc663c610316d331b949d09a5633fdf8
                • MD5 SHA1 SHA512 SSDEEP

                icudtl.dat

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\icudtl.dat
                • Size 6.2MB
                • SHA256 2a0557fe245b6178c2d5da7c4f84491b789256b15cfdf53ebfd9e81205153510
                • MD5 SHA1 SHA512 SSDEEP

                libEGL.dll

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\libEGL.dll
                • Size 320KB
                • SHA256 154ee54e93002059649ff0eb370a0ae183e7ac49f6fe66cf0b8d6ab70dc38455
                • MD5 SHA1 SHA512 SSDEEP

                libGLESv2.dll

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\libGLESv2.dll
                • Size 320KB
                • SHA256 dd98316000c96f697d5f1bc600fae5913d5528407d2351344025a17b1b939102
                • MD5 SHA1 SHA512 SSDEEP

                resources.pak

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\resources.pak
                • Size 1.1MB
                • SHA256 f7b721e4166173ac2047e710885771c0ffc8e83838ae43f277ebdff184e02065
                • MD5 SHA1 SHA512 SSDEEP

                app.asar

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar
                • Size 320KB
                • SHA256 3949c04d9e016b7583a2210ae0fc7cef1105a3cfba37e1bd6939225d6559e0c0
                • MD5 SHA1 SHA512 SSDEEP

                libssh2.dll

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar.unpacked\node_modules\@termius\libtermius\win-x64\libssh2.dll
                • Size 2.5MB
                • SHA256 6ab9ce509dd21657e111eafdd8c06abaf44d8fc886c85dd60a52aed6d37093d7
                • MD5 SHA1 SHA512 SSDEEP

                libssh2.dll

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar.unpacked\node_modules\@termius\libtermius\win-x64\libssh2.dll
                • Size 2.4MB
                • SHA256 a7e8d6a23d44bfd0786946c3bd2db3b4c9979940208bd455f550ae5f9f43ed74
                • MD5 SHA1 SHA512 SSDEEP

                libssh2.dll

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar.unpacked\node_modules\@termius\libtermius\win-x64\libssh2.dll
                • Size 1.7MB
                • SHA256 6d0280ad4a882c4b1dd6584349eadf6f739cc64c52d9252a4dc289451eac433d
                • MD5 SHA1 SHA512 SSDEEP

                libssh2.dll

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar.unpacked\node_modules\@termius\libtermius\win-x64\libssh2.dll
                • Size 1.4MB
                • SHA256 334eb2f7cd3a2d79c3184275965e15e7a70bb014bbcdeb207af6c4f711efbc5c
                • MD5 SHA1 SHA512 SSDEEP

                libssh2.dll

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar.unpacked\node_modules\@termius\libtermius\win-x64\libssh2.dll
                • Size 896KB
                • SHA256 2d98e32c9f7820741efddff474a30273ae206e08ddfe427c9bf16f48754fc2ee
                • MD5 SHA1 SHA512 SSDEEP

                termius.node

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar.unpacked\node_modules\@termius\libtermius\win-x64\termius.node
                • Size 2.8MB
                • SHA256 a3a7f4f4d1868b2ee3c17d0faec1ad2e0b697a5b5ba010b23d317db068923d5e
                • MD5 SHA1 SHA512 SSDEEP

                termius.node

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar.unpacked\node_modules\@termius\libtermius\win-x64\termius.node
                • Size 2.6MB
                • SHA256 58ad4d526eefbe75a4451ee0e54ab5f0e3a0cf1f8ca10a3c56d9a8cda3f5530f
                • MD5 SHA1 SHA512 SSDEEP

                termius.node

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar.unpacked\node_modules\@termius\libtermius\win-x64\termius.node
                • Size 1.7MB
                • SHA256 58204aaa94b7190eabbf79c28fbb1376b894ee60d843f498bf1123a72ade2ffa
                • MD5 SHA1 SHA512 SSDEEP

                termius.node

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar.unpacked\node_modules\@termius\libtermius\win-x64\termius.node
                • Size 1.5MB
                • SHA256 80b96306e857c641ee3ec8ab87eb936c1f13cf4a3f8929063485facd850b3f5e
                • MD5 SHA1 SHA512 SSDEEP

                termius.node

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar.unpacked\node_modules\@termius\libtermius\win-x64\termius.node
                • Size 896KB
                • SHA256 73a22a06615208cd5000638eb35c8569ac2b8155855bced357eb5378ae22d9b3
                • MD5 SHA1 SHA512 SSDEEP

                moshclient.node

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar.unpacked\node_modules\@termius\mosh\win-x64\moshclient.node
                • Size 512KB
                • SHA256 dc5d277c7fd5ab6d0128d6212c2c122b324c8f1a5cf5abdcde6d43dd1909d201
                • MD5 SHA1 SHA512 SSDEEP

                moshclient.node

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar.unpacked\node_modules\@termius\mosh\win-x64\moshclient.node
                • Size 448KB
                • SHA256 30716f4d643ecf15a3949f2ad4b125db5dbd1cc2b5371aff424596f25f02bcc1
                • MD5 SHA1 SHA512 SSDEEP

                poller.js

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\resources\app.asar.unpacked\node_modules\@termius\serialport-bindings\lib\poller.js
                • Size 2KB
                • SHA256 424e965a6ea648b39177e2755c8ea6b50b5d40b41c0c29d26bc227af28f60dfb
                • MD5 SHA1 SHA512

                vk_swiftshader.dll

                • Path C:\Users\Admin\AppData\Local\Programs\Termius\vk_swiftshader.dll
                • Size 256KB
                • SHA256 9f93846ffcb6e7a9c88e5257af83ede4666396b7c9d8ee69ff47189cbc5d1d22
                • MD5 SHA1 SHA512 SSDEEP

                LICENSE.electron.txt

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\LICENSE.electron.txt
                • Size 1KB
                • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                • MD5 SHA1 SHA512

                LICENSES.chromium.html

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\LICENSES.chromium.html
                • Size 2.9MB
                • SHA256 1050806dc353557156baa2e4b06fdfcd6907c31dae891596647f1e189f949307
                • MD5 SHA1 SHA512 SSDEEP

                Termius.exe

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\Termius.exe
                • Size 128KB
                • SHA256 e80569eec1437603fb2f631c53dfe7aecb7166b784baba8dcac1d12e9fcfa3a0
                • MD5 SHA1 SHA512 SSDEEP

                chrome_200_percent.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\chrome_200_percent.pak
                • Size 175KB
                • SHA256 b2c25fb30fee5f04ccdb8bf3c937a667502d266e428425feeb5af964f6167d48
                • MD5 SHA1 SHA512 SSDEEP

                d3dcompiler_47.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\d3dcompiler_47.dll
                • Size 2.9MB
                • SHA256 8644ec2941edc5ecc89624732923f366a443cde4770918f6a39fdf4d5816bc04
                • MD5 SHA1 SHA512 SSDEEP

                ffmpeg.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\ffmpeg.dll
                • Size 2.6MB
                • SHA256 906b781978ee1524039abc6eafea3c66e7fa45748184e87fb4cf2931e774b6f4
                • MD5 SHA1 SHA512 SSDEEP

                icudtl.dat

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\icudtl.dat
                • Size 3.4MB
                • SHA256 dd15fb31bb150974d85843566ff8cdabb71d9d7cccfd56dcaaa418c55ade0683
                • MD5 SHA1 SHA512 SSDEEP

                libEGL.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\libEGL.dll
                • Size 464KB
                • SHA256 71e4896016446bb46984a4cb11741a1fea9f2da40fcc2808847206147530fae4
                • MD5 SHA1 SHA512 SSDEEP

                libGLESv2.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\libGLESv2.dll
                • Size 3.1MB
                • SHA256 b32f329924aa110799d7089efbb6c494fb22a69952a1f65a8ec21d98b1ac83ce
                • MD5 SHA1 SHA512 SSDEEP

                af.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\af.pak
                • Size 327KB
                • SHA256 b1987cdcbb8d76598422aa1739a246ed6690dc1b211f950fcbf2f040491ed7a8
                • MD5 SHA1 SHA512 SSDEEP

                am.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\am.pak
                • Size 531KB
                • SHA256 ee363b88697a26d486c77bbf05f5f7f62d4b40c235e1d85e11448083070576f7
                • MD5 SHA1 SHA512 SSDEEP

                ar.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\ar.pak
                • Size 574KB
                • SHA256 bfa2a3c3ebb3c6afbca42cb70b4da8f997068d511cf40ee8a952a893b8f9d7cd
                • MD5 SHA1 SHA512 SSDEEP

                bg.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\bg.pak
                • Size 608KB
                • SHA256 6c10b64d31e0dc2c4befc6703ac17343ca473b4350cfb3c6e01833f505b69590
                • MD5 SHA1 SHA512 SSDEEP

                bn.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\bn.pak
                • Size 780KB
                • SHA256 297d52b252df0912490ddf26fa58706895e70c2a0f3f09d0dc756706720095ef
                • MD5 SHA1 SHA512 SSDEEP

                ca.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\ca.pak
                • Size 371KB
                • SHA256 78bbee9bf6c95d239418037fd4660d081ebc0f369e727e613b6b652e380e6dd0
                • MD5 SHA1 SHA512 SSDEEP

                cs.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\cs.pak
                • Size 377KB
                • SHA256 08e40f5efc616cdc0588fb4b1a706d997c69d17ddaf97eb91a4aabafaa11cee6
                • MD5 SHA1 SHA512 SSDEEP

                da.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\da.pak
                • Size 342KB
                • SHA256 13c9583127d9d723801c946039e60f72dbbde898dd23fb9f675b9e299d0ce72a
                • MD5 SHA1 SHA512 SSDEEP

                de.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\de.pak
                • Size 367KB
                • SHA256 8bd127d689be65e45bb8d2a2ff66698200da97835809c6b56ec9e2929b70618a
                • MD5 SHA1 SHA512 SSDEEP

                el.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\el.pak
                • Size 664KB
                • SHA256 bc07e403272a4d65305fe24a827404d7b931d01cda547f8c07a840d19e591430
                • MD5 SHA1 SHA512 SSDEEP

                en-GB.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\en-GB.pak
                • Size 299KB
                • SHA256 e1e357c853eed83fb6c4133f8f4df377a8eda4fe6f0e55395f21c5ab6e38faa8
                • MD5 SHA1 SHA512 SSDEEP

                en-US.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\en-US.pak
                • Size 302KB
                • SHA256 a99bd31907bbdc12bdfbff7b9da6ddd850c273f3a6ece64ee8d1d9b6ef0c501c
                • MD5 SHA1 SHA512 SSDEEP

                es-419.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\es-419.pak
                • Size 366KB
                • SHA256 943fa8774ade38d57349a5d27869097a782bc06bd34c40864a85ba829457d127
                • MD5 SHA1 SHA512 SSDEEP

                es.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\es.pak
                • Size 367KB
                • SHA256 11ef2c0229c1fe1c10be08e3d5f36c973bc3c272f37b40e05c534a118757461b
                • MD5 SHA1 SHA512 SSDEEP

                et.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\et.pak
                • Size 330KB
                • SHA256 3599e7138a24a31839da877cc9718b9c0c9522437ea93a6222a119080f108d14
                • MD5 SHA1 SHA512 SSDEEP

                fa.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\fa.pak
                • Size 535KB
                • SHA256 bb28ad47e95aefaa2d8d7b6a7f449f9707cfadbcd4c21bad8bd8a6578108d2cd
                • MD5 SHA1 SHA512 SSDEEP

                fi.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\fi.pak
                • Size 338KB
                • SHA256 df8cefa4831fc2fdf817dd6d49a6373edee4f51f23cf990c690e72ce348f69bb
                • MD5 SHA1 SHA512 SSDEEP

                fil.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\fil.pak
                • Size 379KB
                • SHA256 448bc8eae353c188ffaa4c2466956598ad807f0f0aae7f12e1bc59584e1aac2d
                • MD5 SHA1 SHA512 SSDEEP

                fr.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\fr.pak
                • Size 395KB
                • SHA256 7af39af49846fba6d6b8ee18b2a212f1323ebc1cff1af0053194d01d8d5433f6
                • MD5 SHA1 SHA512 SSDEEP

                gu.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\gu.pak
                • Size 755KB
                • SHA256 047da4dfadcfc6bec8f4dc7d250b1757caf31a23bcfa2ea3e1f3b1cdbe9a3995
                • MD5 SHA1 SHA512 SSDEEP

                he.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\he.pak
                • Size 468KB
                • SHA256 6649a844f222cfcec01e75d3de3cb3658f1347ea3851d31b8124597b87e7b57d
                • MD5 SHA1 SHA512 SSDEEP

                hi.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\hi.pak
                • Size 787KB
                • SHA256 eda355e3785313e3d982c1d3652266dce1b6e08832056fe58854b825e0712ca5
                • MD5 SHA1 SHA512 SSDEEP

                hr.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\hr.pak
                • Size 365KB
                • SHA256 bada5828fc0d80c842d1409b54e8da516ae737ca30d86658b3fad5c8ace4722e
                • MD5 SHA1 SHA512 SSDEEP

                hu.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\hu.pak
                • Size 395KB
                • SHA256 688312f38488c7256370b1517b84963a3ff886b31692cc504fe169db241a43f0
                • MD5 SHA1 SHA512 SSDEEP

                id.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\id.pak
                • Size 324KB
                • SHA256 21368245d99265e760b1b57a3169feb72e6b5099c3f1855155d147b2f788eda4
                • MD5 SHA1 SHA512 SSDEEP

                it.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\it.pak
                • Size 360KB
                • SHA256 13dd077e5e8c8b04ac0854e4466ee074df67c74cd29cc48a0c2c9f96f768fad5
                • MD5 SHA1 SHA512 SSDEEP

                ja.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\ja.pak
                • Size 440KB
                • SHA256 2c5457b0fa6fe41b7b524aa726dae4dd69e7072864f73f211c731810d00b9323
                • MD5 SHA1 SHA512 SSDEEP

                kn.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\kn.pak
                • Size 384KB
                • SHA256 5d44ed83dde60587d5cc4e215e8d6c87f10f0eabd8153359e12a0d6c9b2450c0
                • MD5 SHA1 SHA512 SSDEEP

                ko.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\ko.pak
                • Size 320KB
                • SHA256 cfac73b874e45435c498545f6514c901e7fede09dd5b6a3e125fe27de467db97
                • MD5 SHA1 SHA512 SSDEEP

                lt.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\lt.pak
                • Size 256KB
                • SHA256 d8cd40fe93ac863b0d42f47241fb33e762fb20ea4a360f2f0a594267cb8ec55d
                • MD5 SHA1 SHA512 SSDEEP

                lv.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\lv.pak
                • Size 256KB
                • SHA256 eb60b3dcffb1582d9f7d1005681fe559b0ad89d917f06fa148065004b0a91a6f
                • MD5 SHA1 SHA512 SSDEEP

                ml.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\ml.pak
                • Size 256KB
                • SHA256 3641855ca03e3a39e724df4716e906ad3b3c682779a9ef52afe0acf4fda6dfd4
                • MD5 SHA1 SHA512 SSDEEP

                mr.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\mr.pak
                • Size 256KB
                • SHA256 a0750ccd0176235450d3a491ec7a42c84d3b68f5528fcddc1fe460a776ca6038
                • MD5 SHA1 SHA512 SSDEEP

                ms.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\ms.pak
                • Size 256KB
                • SHA256 6a953dce7d6eed2036a2498f6312f49698cf51fb3a4998315eaa653aaea3f8a7
                • MD5 SHA1 SHA512 SSDEEP

                nb.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\nb.pak
                • Size 217KB
                • SHA256 78c0b98f87eeabe9798f59cfc527995bf73d618f3796e6753707b60393d96cc5
                • MD5 SHA1 SHA512 SSDEEP

                nl.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\nl.pak
                • Size 344KB
                • SHA256 bdb8fb52d8032a8f9cf5336698ca715b4beb4d567bf3657e12a47c36020ae256
                • MD5 SHA1 SHA512 SSDEEP

                pl.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\pl.pak
                • Size 381KB
                • SHA256 65b6dd63aaba1692f36774413d372f6c6c66088d7ec4009a2dbee1648ca133f1
                • MD5 SHA1 SHA512 SSDEEP

                pt-BR.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\pt-BR.pak
                • Size 360KB
                • SHA256 7b171f2a6d46295147a8d10e475048bac4346c6a5162b32a0336334baccad520
                • MD5 SHA1 SHA512 SSDEEP

                pt-PT.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\pt-PT.pak
                • Size 363KB
                • SHA256 f374bd5c54596aacbc35f47bdd4c9ab4045bebdfa479ae386fd2fdd2d0041216
                • MD5 SHA1 SHA512 SSDEEP

                ro.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\ro.pak
                • Size 372KB
                • SHA256 c50f824e63806e5782b693f7d474c48684b9e5174e93463a9bc2876c94990879
                • MD5 SHA1 SHA512 SSDEEP

                ru.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\ru.pak
                • Size 606KB
                • SHA256 44f0cbb2d5414b6dfca6abb40a435200670e2a71607b158fcbaba67fd6b3ba08
                • MD5 SHA1 SHA512 SSDEEP

                sk.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\sk.pak
                • Size 383KB
                • SHA256 dbd82a2a08f8e9ba9581b2672bc49e0fa5c89f073b58f152225f9e2815228ddf
                • MD5 SHA1 SHA512 SSDEEP

                sl.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\sl.pak
                • Size 369KB
                • SHA256 d0415bfa061b36a6eb93fa2c78563448da8b63c91e0523086c7eb2714933ab99
                • MD5 SHA1 SHA512 SSDEEP

                sr.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\sr.pak
                • Size 572KB
                • SHA256 d459c1a781ddc344de76558211983dd07d47e3ca6cacffb518043bd78dc48fbe
                • MD5 SHA1 SHA512 SSDEEP

                sv.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\sv.pak
                • Size 334KB
                • SHA256 3f0acf6f6319636c3e72cdc392b7b80ab0cfd8ae1a5a8e319624e4b46bcd3c42
                • MD5 SHA1 SHA512 SSDEEP

                sw.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\sw.pak
                • Size 351KB
                • SHA256 dea6947693fceb6457801d912ea7c716add3c0cfb4c34782a9cfa4c4e06b9402
                • MD5 SHA1 SHA512 SSDEEP

                ta.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\ta.pak
                • Size 899KB
                • SHA256 e0421b4cf2736bb465ec02cd85c2df09809f86479cb7624195373f25edbcedd3
                • MD5 SHA1 SHA512 SSDEEP

                te.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\te.pak
                • Size 836KB
                • SHA256 f53e06181c9fa0f6028906a7388fd4e8f000ffb7277330634462433d34572395
                • MD5 SHA1 SHA512 SSDEEP

                th.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\th.pak
                • Size 704KB
                • SHA256 4fe2b7b6886e3ce068be0b7a0a71d45756eb797eda1e7d4fad52ab8a370e8336
                • MD5 SHA1 SHA512 SSDEEP

                tr.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\tr.pak
                • Size 357KB
                • SHA256 5df18798a35b502a18fb4f82e9b03b7ca100903ecd5d192ab2a3f0bc7646c366
                • MD5 SHA1 SHA512 SSDEEP

                uk.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\uk.pak
                • Size 605KB
                • SHA256 3fb15957c77f3635aa7cfca796b045a1ee1f1abfc0c12c163cfb537364f3c80a
                • MD5 SHA1 SHA512 SSDEEP

                ur.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\ur.pak
                • Size 532KB
                • SHA256 06a0c18d978b54dd163c7f77b7ee0f2ecf3607c5dc14032326f21b4a1f304d81
                • MD5 SHA1 SHA512 SSDEEP

                vi.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\vi.pak
                • Size 424KB
                • SHA256 f1602637e7f3e0a908d7a9a3f630b8dd38bfd26704cc64ef432d2c88a1ee7017
                • MD5 SHA1 SHA512 SSDEEP

                zh-CN.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\zh-CN.pak
                • Size 308KB
                • SHA256 97fe793b325d0c27669f62235bd157c51a3e1aeaffba30e7fe028c9d64939c5f
                • MD5 SHA1 SHA512 SSDEEP

                zh-TW.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\locales\zh-TW.pak
                • Size 305KB
                • SHA256 280ba35171dfb6a54efb13fc4ddedc13a0283a9a6eebff4c15275767beb4ba77
                • MD5 SHA1 SHA512 SSDEEP

                resources.pak

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources.pak
                • Size 2.8MB
                • SHA256 bec765003ae0834f360f5d6951abf44b2af3480aa8122ef0487cee8610097ec5
                • MD5 SHA1 SHA512 SSDEEP

                app-update.yml

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app-update.yml
                • Size 227B
                • SHA256 b976b333c2315c4abafb99b367d48ad194e25e11d3ccb55f542fd79cd180e03f
                • MD5 SHA1 SHA512

                app.asar

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar
                • Size 1.8MB
                • SHA256 f4c085a4756bcc72d3508ce1b57a94a87d54126c6d2a1bf36c69973d3846f1ba
                • MD5 SHA1 SHA512 SSDEEP

                index.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\keytar\build\Release\keytar.node\index.js
                • Size 432B
                • SHA256 83675a6e76853196f742a0186b7425c6cb6a31ce76306ff7336a16b060dc96a9
                • MD5 SHA1 SHA512

                keytar.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\keytar\lib\keytar.js
                • Size 1KB
                • SHA256 e858194902d632e217b60b913829865749568fd43aee2d65bf7ffcefd7b1d6ae
                • MD5 SHA1 SHA512

                package.json

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\keytar\package.json
                • Size 399B
                • SHA256 fe3a31e65d748b1e5d7fd7b657703e21eeed7da2f352fd1508b4ffd0fe567177
                • MD5 SHA1 SHA512

                keytar.node

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\keytar\win-x64\keytar.node
                • Size 147KB
                • SHA256 ff4a5f97a0d90617c91f0836d5e18737223794bfff7bb836a6e3a813b11b1d1b
                • MD5 SHA1 SHA512 SSDEEP

                index.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\libfido2\index.js
                • Size 486B
                • SHA256 7823e992fe7f6c4e8951b3ef32302fcd1c719bd8301511e36b9781cbac50b05e
                • MD5 SHA1 SHA512

                package.json

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\libfido2\package.json
                • Size 275B
                • SHA256 291b7eb5fb05abc3a22504b74907665108fc989c738ffeae56606ee803c0ffbf
                • MD5 SHA1 SHA512

                cbor.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\libfido2\win-x64\cbor.dll
                • Size 214KB
                • SHA256 ecacd637f02d8e99cfd81b2cd00875945f669651916b4b9480b3a6bb36e22741
                • MD5 SHA1 SHA512 SSDEEP

                crypto-46.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\libfido2\win-x64\crypto-46.dll
                • Size 1.7MB
                • SHA256 98708724b2b7260f58c9d05b5ef858991b180244b58551d14d378c641ac6bd09
                • MD5 SHA1 SHA512 SSDEEP

                fido2.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\libfido2\win-x64\fido2.dll
                • Size 264KB
                • SHA256 a682834133685010790426d5686c21dd6beb457b1147cb3eae72b7fd8d81133b
                • MD5 SHA1 SHA512 SSDEEP

                libfido2-nodejs.node

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\libfido2\win-x64\libfido2-nodejs.node
                • Size 667KB
                • SHA256 32b1d6bd92241af638ea3a58f7de5a8a6d8b3d4b42657077cd92716578bd7cab
                • MD5 SHA1 SHA512 SSDEEP

                ssl-48.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\libfido2\win-x64\ssl-48.dll
                • Size 405KB
                • SHA256 8e220bcebcd79c45361768669527e9311937bb6c631fc608667ddeed460502a5
                • MD5 SHA1 SHA512 SSDEEP

                tls-20.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\libfido2\win-x64\tls-20.dll
                • Size 157KB
                • SHA256 9bd32a86827666469ee3e50511888e7edade2a2121b2c18106d62a09db5fe9a8
                • MD5 SHA1 SHA512 SSDEEP

                zlib1.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\libfido2\win-x64\zlib1.dll
                • Size 208KB
                • SHA256 a40f64b7888ae39e7c6327c7bafec6ba53837553fa7a30a33449f3abc0fce203
                • MD5 SHA1 SHA512 SSDEEP

                index.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\libtermius\index.js
                • Size 480B
                • SHA256 d87f0c77ab587a7714d760f7f5759b229c5fc2b3c0fde3b2f16d3db4c27d4312
                • MD5 SHA1 SHA512

                package.json

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\libtermius\package.json
                • Size 238B
                • SHA256 58c0069f70b3c59c689f1ee25ec3b48a3a4c2c66acd2b9c231f335045a318119
                • MD5 SHA1 SHA512

                libssh2.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\libtermius\win-x64\libssh2.dll
                • Size 4.0MB
                • SHA256 73a99d6ea4d0b41d8f8f8d642c490d224bc5fd4a5ebde1d8c79d29c20962594f
                • MD5 SHA1 SHA512 SSDEEP

                termius.node

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\libtermius\win-x64\termius.node
                • Size 1.7MB
                • SHA256 6fb8fac672b63075468b143f9cf23a736d8df16cc366a88fc4c58346e799dde8
                • MD5 SHA1 SHA512 SSDEEP

                index.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\mosh\index.js
                • Size 477B
                • SHA256 34210db8dc4f1dba249f9268dffdab6ceae44c03ff65845e3cd1e088e3180baf
                • MD5 SHA1 SHA512

                package.json

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\mosh\package.json
                • Size 223B
                • SHA256 9648724a39b7c11271001de03459f71246b26d87e206832138ae62fd9f21ba77
                • MD5 SHA1 SHA512

                moshclient.node

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\mosh\win-x64\moshclient.node
                • Size 1.5MB
                • SHA256 31fad05bdc8eb306d0a366f1341c99b10f070d3f1eeb143a4c8515d622a5e44a
                • MD5 SHA1 SHA512 SSDEEP

                index.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\node-pty\build\Release\pty.node\index.js
                • Size 431B
                • SHA256 d7869728efdef2dfbe1ea824025d986019185a3fafa2d6099e2c8c0ef6ac4a34
                • MD5 SHA1 SHA512

                conpty_console_list_agent.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\node-pty\lib\conpty_console_list_agent.js
                • Size 775B
                • SHA256 0a9c63c2a054f6f0843dbc310fd7fa7de87a1483980ced58fdbea52a4af3f14c
                • MD5 SHA1 SHA512

                eventEmitter2.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\node-pty\lib\eventEmitter2.js
                • Size 1KB
                • SHA256 f1c14613aa90c10def4ca7238329270871997eb26f919f7074dc25533e3e75dd
                • MD5 SHA1 SHA512

                index.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\node-pty\lib\index.js
                • Size 1KB
                • SHA256 a417bef7e10455a2f538a729d722c22e91305ada0f87ada9c168a15cc9f01505
                • MD5 SHA1 SHA512

                interfaces.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\node-pty\lib\interfaces.js
                • Size 233B
                • SHA256 56e4173f09aad26173f9d4c79800fda0b808c34424f987ef8d671cc931119a0a
                • MD5 SHA1 SHA512

                terminal.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\node-pty\lib\terminal.js
                • Size 6KB
                • SHA256 563c438fabfb9179581ec95a876afa62c1ada50ba969efed4f878735237af78b
                • MD5 SHA1 SHA512 SSDEEP

                types.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\node-pty\lib\types.js
                • Size 228B
                • SHA256 408bf8287717b6322cc380ea66caf1b5e366dcf697707ae2f3cc454e08f3b151
                • MD5 SHA1 SHA512

                unixTerminal.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\node-pty\lib\unixTerminal.js
                • Size 9KB
                • SHA256 206a1b35475ebddfabf43a62bf78daf49baba138a93faf4d1dae148d9aaffa1a
                • MD5 SHA1 SHA512 SSDEEP

                utils.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\node-pty\lib\utils.js
                • Size 580B
                • SHA256 0765d919bbdb2651a789512df8d28df7ef74c9f17ff9ed99ac1d4f90dd0494e2
                • MD5 SHA1 SHA512

                windowsPtyAgent.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\node-pty\lib\windowsPtyAgent.js
                • Size 11KB
                • SHA256 1975bf1d16d2d567cbc2aa12fb3c3c2cbfbfdd5ce88f9ac0f1ce386f6b6e8cdd
                • MD5 SHA1 SHA512 SSDEEP

                windowsTerminal.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\node-pty\lib\windowsTerminal.js
                • Size 7KB
                • SHA256 cfaad7a0d8be0f2494e122094b1b71bbeb0309f8741568f7e715810561449279
                • MD5 SHA1 SHA512 SSDEEP

                package.json

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\node-pty\package.json
                • Size 450B
                • SHA256 269dc395dd84cdf20bf96fdfe7cea8e49475bebc62a22a3525ed3617f3be690d
                • MD5 SHA1 SHA512

                pty.node

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\node-pty\win-x64\pty.node
                • Size 1.1MB
                • SHA256 b0dbea20f274f536bea9d32a0d0c2941aaea26977b45ac2cc3db98330e6311d0
                • MD5 SHA1 SHA512 SSDEEP

                winpty-agent.exe

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\node-pty\win-x64\winpty-agent.exe
                • Size 872KB
                • SHA256 ccfb19ef85308289c4c26336068e170e0a23ac7944375669b9fa695decd130d7
                • MD5 SHA1 SHA512 SSDEEP

                winpty.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\node-pty\win-x64\winpty.dll
                • Size 746KB
                • SHA256 001a44b801cfb488bfbcd9c85e499f50ee14d9db0729de5ffde810ea8981f1bf
                • MD5 SHA1 SHA512 SSDEEP

                index.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\registry-js\build\Release\registry.node\index.js
                • Size 439B
                • SHA256 2aab1d3f934d7810e11aea9d7ae885eab8f5e9a7c65af2ca3543208acbe8edeb
                • MD5 SHA1 SHA512

                index.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\registry-js\dist\lib\index.js
                • Size 645B
                • SHA256 57d19d5e336fc60806050342d813199cfa21100348b4c195dbb6be934af33f1b
                • MD5 SHA1 SHA512

                registry.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\registry-js\dist\lib\registry.js
                • Size 5KB
                • SHA256 7e6f33a208a09123a9745207085632364b66411ffbd2faaf6d4b7a7d32a2ce89
                • MD5 SHA1 SHA512 SSDEEP

                package.json

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\registry-js\package.json
                • Size 422B
                • SHA256 9ad07835b66cbc25143d98e3a917c8bb90832bd31154772e61bde99fbc5fa9db
                • MD5 SHA1 SHA512

                registry.node

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\registry-js\win-x64\registry.node
                • Size 680KB
                • SHA256 f9bf360e973246468fedf70dd057620b106f98b15d411889cb24f27a2cd8493a
                • MD5 SHA1 SHA512 SSDEEP

                index.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\restore-mas-purchase\index.js
                • Size 460B
                • SHA256 a8593c2673db5708c0e6aaafd42476de81e6f9ee65bed0953e145efbe82afbed
                • MD5 SHA1 SHA512

                package.json

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\restore-mas-purchase\package.json
                • Size 341B
                • SHA256 71de8f645b205c6d42224fb73d3494b10d4487676d9f2a7717b268f59e98a2eb
                • MD5 SHA1 SHA512

                index.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\serialport-bindings\build\Release\bindings.node\index.js
                • Size 447B
                • SHA256 e3e75309bb751ec37a84e2195339e166311f7a4fbf4880add14c98e8efc0ea39
                • MD5 SHA1 SHA512

                darwin.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\serialport-bindings\lib\darwin.js
                • Size 2KB
                • SHA256 3805d0cb29dd6f7d22873a24faa0dfc0f1799e63ab01d51360755d6def131283
                • MD5 SHA1 SHA512

                index.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\serialport-bindings\lib\index.js
                • Size 375B
                • SHA256 a1712039aa76f42c0bf5da9b0b3cc4080fc3da8b7366ad6f456d2348d1f55769
                • MD5 SHA1 SHA512

                legacy.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\serialport-bindings\lib\legacy.js
                • Size 653B
                • SHA256 5b81d2da89374aca3e891db5f79186e1c7288e73e4be39aadc16377e81d276bd
                • MD5 SHA1 SHA512

                linux-list.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\serialport-bindings\lib\linux-list.js
                • Size 2KB
                • SHA256 b18cbd1238e8e7b228517641670b0d31a8f4110dc96acbe4aa120d82a586b92e
                • MD5 SHA1 SHA512

                linux.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\serialport-bindings\lib\linux.js
                • Size 2KB
                • SHA256 33141436365765d92db7e67261d83016fb5b491f90d73d13ca47e849f141f9b8
                • MD5 SHA1 SHA512

                unix-read.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\serialport-bindings\lib\unix-read.js
                • Size 1KB
                • SHA256 8d3cfaedd7aa7a565f73cd0bcb3e7dac1d5d74b231f7e966f5dcb982d12a1289
                • MD5 SHA1 SHA512

                unix-write.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\serialport-bindings\lib\unix-write.js
                • Size 1KB
                • SHA256 75416bc5bca63b31889fdabe6e29d6f00f696e05c469f868c70829da062fa8f8
                • MD5 SHA1 SHA512

                win32-sn-parser.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\serialport-bindings\lib\win32-sn-parser.js
                • Size 263B
                • SHA256 5e814ca196ff403a42fe5ab90c7555325496841f410ae6a35b1f0aa6415364e7
                • MD5 SHA1 SHA512

                win32.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\serialport-bindings\lib\win32.js
                • Size 2KB
                • SHA256 e51b6213a8da449e23cc99a4858a51269c1a662d95c37b8cc55f85566469e501
                • MD5 SHA1 SHA512

                package.json

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\serialport-bindings\package.json
                • Size 475B
                • SHA256 5aba38b1f259d1e26b17fa5d6f17d400484b7ab2765577451586d9ad06e2c598
                • MD5 SHA1 SHA512

                bindings.node

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\serialport-bindings\win-x64\bindings.node
                • Size 730KB
                • SHA256 50aa3785a77492faec599a30841f165d1427508ae7f22f72d962ab7a9c70ae1f
                • MD5 SHA1 SHA512 SSDEEP

                index.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\windows-iap-bridge\build\Release\binding.node\index.js
                • Size 445B
                • SHA256 344f250e0df725f02292fe3296cebe37f2b5958cf76f690ef22409e0e9b89235
                • MD5 SHA1 SHA512

                main.js

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\windows-iap-bridge\lib\main.js
                • Size 268B
                • SHA256 37b4437a8e833d38aa914efffa033c60363b31eff9005b805e1b54db3e340772
                • MD5 SHA1 SHA512

                package.json

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\windows-iap-bridge\package.json
                • Size 372B
                • SHA256 b8ee281887ec18962edbfe122a76de2a6aa826a6537d887f4167aff12f7515c2
                • MD5 SHA1 SHA512

                binding.node

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\node_modules\@termius\windows-iap-bridge\win-x64\binding.node
                • Size 890KB
                • SHA256 8522fff296b531d9b09ef9ef12c7b5820559808f979697b91c85a04310167ea8
                • MD5 SHA1 SHA512 SSDEEP

                .tcshrc

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\out\shell-integration\.tcshrc
                • Size 256B
                • SHA256 691a6c5c2dd14719903adcb125a7129cbbb8f749d225f164a7c9c8bb58a22658
                • MD5 SHA1 SHA512

                bashrc.sh

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\out\shell-integration\bashrc.sh
                • Size 1KB
                • SHA256 7ebf5ff6a15228778758f14d08c3abbd6098ab6bf6a8cbcfbe5f74eabb054cb7
                • MD5 SHA1 SHA512

                shrc.sh

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\out\shell-integration\shrc.sh
                • Size 473B
                • SHA256 83adce96883210f34f102c13de0406dd6ad06d0cb6fbb93ed511be701b329e45
                • MD5 SHA1 SHA512

                termius.fish

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\out\shell-integration\xdg_data\fish\vendor_conf.d\termius.fish
                • Size 753B
                • SHA256 f9815408560c1c2724bf5e901219c158871f0f4fe2baef29df14a655d172636d
                • MD5 SHA1 SHA512

                .zlogin

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\out\shell-integration\zdotdir\.zlogin
                • Size 733B
                • SHA256 70a6a21f4cda70c2085948c2f97bcf1e29b85b66b092c2b9e5c5b2ed8b9c927c
                • MD5 SHA1 SHA512

                .zprofile

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\out\shell-integration\zdotdir\.zprofile
                • Size 842B
                • SHA256 ff8b48ec936885dcea4c32f7a8d8e39c8cd90708723b521f069d0ac2390a58da
                • MD5 SHA1 SHA512

                .zshenv

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\out\shell-integration\zdotdir\.zshenv
                • Size 730B
                • SHA256 f024f51835431216592fb7a3092a0926c2aa04658cc26b27efd3269ae2bf6ae0
                • MD5 SHA1 SHA512

                .zshrc

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\app.asar.unpacked\out\shell-integration\zdotdir\.zshrc
                • Size 1KB
                • SHA256 6a109949a6dd0135eb6c7c8d952839c9d769b96c14d75fdee0aa3b1bc77a124e
                • MD5 SHA1 SHA512

                elevate.exe

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\resources\elevate.exe
                • Size 125KB
                • SHA256 df07b16e70a01ece44a5889aabe6de72b4bb16cc7af11ed9fb322783abeef64f
                • MD5 SHA1 SHA512 SSDEEP

                snapshot_blob.bin

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\snapshot_blob.bin
                • Size 410KB
                • SHA256 ece191beef3b53272a925c1f5e8c02a0dc78b00559799d27a0665fc480380b3c
                • MD5 SHA1 SHA512 SSDEEP

                v8_context_snapshot.bin

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\v8_context_snapshot.bin
                • Size 710KB
                • SHA256 ea2ea0f97ac908fd127a423f505241ebf4acea0ba5d02635cae40f7cd9c2f464
                • MD5 SHA1 SHA512 SSDEEP

                vk_swiftshader.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\vk_swiftshader.dll
                • Size 4.8MB
                • SHA256 56809fc84c83b7b651014df670631399546e6c335fbb69ece77681cbf0163866
                • MD5 SHA1 SHA512 SSDEEP

                vk_swiftshader_icd.json

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\vk_swiftshader_icd.json
                • Size 106B
                • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                • MD5 SHA1 SHA512

                vulkan-1.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\7z-out\vulkan-1.dll
                • Size 858KB
                • SHA256 7adaaeb870b6c3220527cfd971e75c22567d8f921a0737dc2574419b36cf8b4f
                • MD5 SHA1 SHA512 SSDEEP

                SpiderBanner.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\SpiderBanner.dll
                • Size 9KB
                • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
                • MD5 SHA1 SHA512 SSDEEP

                StdUtils.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\StdUtils.dll
                • Size 100KB
                • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                • MD5 SHA1 SHA512 SSDEEP

                System.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\System.dll
                • Size 12KB
                • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                • MD5 SHA1 SHA512 SSDEEP

                WinShell.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\WinShell.dll
                • Size 3KB
                • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                • MD5 SHA1 SHA512

                nsExec.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\nsExec.dll
                • Size 6KB
                • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
                • MD5 SHA1 SHA512 SSDEEP

                nsis7z.dll

                • Path C:\Users\Admin\AppData\Local\Temp\nsd8F9E.tmp\nsis7z.dll
                • Size 424KB
                • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                • MD5 SHA1 SHA512 SSDEEP

                default.dic

                • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                • Size 2B
                • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                • MD5 SHA1 SHA512

                CURRENT

                • Path C:\Users\Admin\AppData\Roaming\Termius\IndexedDB\file__0.indexeddb.leveldb\CURRENT
                • Size 16B
                • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                • MD5 SHA1 SHA512

                Network Persistent State

                • Path C:\Users\Admin\AppData\Roaming\Termius\Network\Network Persistent State
                • Size 704B
                • SHA256 b33936823b14a72e7ed15b00fa97880f8862001b80efd65f317e304fa0d06622
                • MD5 SHA1 SHA512

                Network Persistent State~RFe59fca6.TMP

                • Path C:\Users\Admin\AppData\Roaming\Termius\Network\Network Persistent State~RFe59fca6.TMP
                • Size 59B
                • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                • MD5 SHA1 SHA512

                TransportSecurity

                • Path C:\Users\Admin\AppData\Roaming\Termius\Network\TransportSecurity
                • Size 705B
                • SHA256 539fa7db54191168e705fa8965759a86d10ccf6a9f5c0ebd32a00f1e5080a8ff
                • MD5 SHA1 SHA512

                TransportSecurity

                • Path C:\Users\Admin\AppData\Roaming\Termius\Network\TransportSecurity
                • Size 538B
                • SHA256 807a8ddeb985414f5d75c892f2cb0950e9e75414e92943ed226bd34456181b65
                • MD5 SHA1 SHA512

                TransportSecurity~RFe597f96.TMP

                • Path C:\Users\Admin\AppData\Roaming\Termius\Network\TransportSecurity~RFe597f96.TMP
                • Size 371B
                • SHA256 3b041e18f1651c50bb236e994da0cbfa9395265773f642aaf89f83843d857164
                • MD5 SHA1 SHA512

                Preferences

                • Path C:\Users\Admin\AppData\Roaming\Termius\Preferences
                • Size 86B
                • SHA256 8029940de92ae596278912bbbd6387d65f4e849d3c136287a1233f525d189c67
                • MD5 SHA1 SHA512

                Preferences~RFe58ea4b.TMP

                • Path C:\Users\Admin\AppData\Roaming\Termius\Preferences~RFe58ea4b.TMP
                • Size 57B
                • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
                • MD5 SHA1 SHA512

                scope_v2.json

                • Path C:\Users\Admin\AppData\Roaming\Termius\sentry\scope_v2.json
                • Size 7KB
                • SHA256 79204dbfe37c9e3b5717259ab26d463c97b181cf4bd54278fa9d9c8fb82ff3ce
                • MD5 SHA1 SHA512 SSDEEP

                memory/5860-1356-0x00007FFCD7660000-0x00007FFCD7661000-memory.dmp