c3efdc7f390f08ff0e003abc8aa10b38e1e32de56e4cb9d0cd071a248fd6a8d8

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
07/05/2026, 22:13

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
START.bat
Size 40KB
Sample260507-1472hsbs71
SHA256 c3efdc7f390f08ff0e003abc8aa10b38e1e32de56e4cb9d0cd071a248fd6a8d8
MD5 d07a54469dde763db3208431f545ff35
SHA1 7f417823abd3bf0c68cdd55a0ea5a27f71aa74b6
SHA512 787a4efd4db89b2734a7f5aac6ac9d963394f14e7860332addbfaab4ee95973202a28604ae496c5fe3b1ef0f8b1d63163adef09982775af30d01b331119c0fd2
SSDEEP 768:jXM7wmYPHazjP7arWW4dODteriPJaw2f0uMyEBlNBrIN1ZL+/gg:azjP7arWWCceriww2f0xyEBlNBrC1ZLE
TLSH
T19D1388192D54602A1D74CF637A69501BF72E71DF43009AE8326A827877AE3D32DFC29D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

execution

Malware Config

Signatures

Command and Scripting Interpreter: PowerShell 1 TTPs 3 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
924	powershell.exe
2276	powershell.exe
3088	powershell.exe

Suspicious behavior: EnumeratesProcesses 5 IoCs

pid	Process
3088	powershell.exe
3088	powershell.exe
924	powershell.exe
924	powershell.exe
2276	powershell.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	3088	powershell.exe
Token: SeDebugPrivilege	924	powershell.exe
Token: SeDebugPrivilege	2276	powershell.exe

Suspicious use of WriteProcessMemory 6 IoCs

description	pid	Process	procid_target
PID 4696 wrote to memory of 4964	4696	cmd.exe	81
PID 4696 wrote to memory of 3884	4696	cmd.exe	82
PID 3884 wrote to memory of 3088	3884	cmd.exe	83
PID 4696 wrote to memory of 3068	4696	cmd.exe	84
PID 4696 wrote to memory of 924	4696	cmd.exe	85
PID 4696 wrote to memory of 2276	4696	cmd.exe	86

C:\Windows\system32\cmd.exe
C:\Windows\system32\cmd.exe /c "C:\Users\Admin\AppData\Local\Temp\START.bat"
1⤵
- Suspicious use of WriteProcessMemory
PID:4696
- C:\Windows\system32\chcp.com
  chcp 65001
  2⤵
  PID:4964
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /c powershell -NoProfile -Command "[char]27"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3884
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell -NoProfile -Command "[char]27"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:3088
- C:\Windows\system32\curl.exe
  curl.exe --fail --location --retry 3 --retry-delay 3 --connect-timeout 20 "https://nodejs.org/dist/v22.14.0/node-v22.14.0-win-x64.zip" --output "C:\Users\Admin\AppData\Local\Temp\engine\node.zip"
  2⤵
  PID:3068
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell -NoProfile -Command "Expand-Archive -Path 'C:\Users\Admin\AppData\Local\Temp\engine\node.zip' -DestinationPath 'C:\Users\Admin\AppData\Local\Temp\engine' -Force"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:924
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  powershell -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\tools\install-openclaude-engine.ps1" -EngineDir "C:\Users\Admin\AppData\Local\Temp\engine" -NpmCmd "C:\Users\Admin\AppData\Local\Temp\engine\node-win-x64\npm.cmd" -CacheDir "C:\Users\Admin\AppData\Local\Temp\data\npm-cache" -LogFile "C:\Users\Admin\AppData\Local\Temp\engine\openclaude-engine-install.log"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:2276

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

StartupProfileData-NonInteractive

Path C:\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 64B
SHA256 a7de5177c68a64bd48b36d49e2853799f4ebcfa8e4761f7cc472f333dc5f65cf
MD5 446dd1cf97eaba21cf14d03aebc79f27
SHA1 36e4cc7367e0c7b40f4a8ace272941ea46373799
SHA512 a6d754709f30b122112ae30e5ab22486393c5021d33da4d1304c061863d2e1e79e8aeb029cae61261bb77d0e7becd53a7b0106d6ea4368b4c302464e3d941cf7
MD5 SHA1 SHA512

Submit Download

__PSScriptPolicyTest_yzskn0hf.aqd.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_yzskn0hf.aqd.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

powershell.exe.log

Path C:\Users\Admin\AppData\Local\Temp\data\local_app_data\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log
Size 3KB
SHA256 a7059c8eedc4eb9ffce04c56f454fddc4c8827fa544f266109b29eb09bfe1571
MD5 67cf288a9a05c74ce94002437cbc43e9
SHA1 8937a6610bc73623a69aaefe69021905916615ab
SHA512 7e4ddf5ca0355b5eabcff2e51aa921f834d8642cf87c24bf1c81aac1cc31100dc7a0e7cdaa935cc2c9bc79d5ae4711c1b181884a61164c3a6c1370e0be683839
TLSH
T1B281BC313375A0D489563F07192C19C463BF8356FA68AF4CB65C620EE92B54BDB222F7
MD5 SHA1 SHA512 TLSH

Submit Download

text.js

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\emoji-regex\es2015\text.js
Size 15KB
SHA256 450490d136ad99169d360f0c45a317a0ccb083da34602324734491467715baea
MD5 ed6ed7ab5bd5bcb2a254821e233cdd8c
SHA1 59dc6ff551a34f3d4cceb0c88231a386e82d9922
SHA512 2148714b1ab87965f0a71c03aa0a60789c1d9dada5b4ba005b186081b8d191f196a3043964c21e0a33eb45262cc11071d4b658753a42fe91f1fcbee2507fd1c8
SSDEEP 192:4uyCa20qNgG/kFBEKT4BlvFuTMS8Z4wZQZotVNZl8b2vKO9XuLYRfTAkCwtU1kIj:4ng4LYVNn8b8K+eLWD7GxuzDdVW
TLSH
T15162B3BC008846963D2DE0D4AF64EAD6299D4B4A240CD3365F9BFC3772CA4F4ED994E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

text.js

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\emoji-regex\text.js
Size 14KB
SHA256 07005fd8527ab9ac801d940ee255890039ce8c8960dffbf5ded08c7a8d89bee0
MD5 b25fe69acc9d8eb982b37d758746e913
SHA1 782e46467828dfe227704d09830298ae86e52127
SHA512 99c93da8c70a5ff47a237e0422aba91209680b1413cdecf6339616d12d2d69e1796527596e8859bf505451fc47b6a00302e8a50e1cd0d806da23b5608e82abd4
SSDEEP 96:49tOjllm4Uh4zutkZyhRA4JUraRFsw7ZpqsFRatj9Fnkz+jmS0WVJK4m1io++Qdm:4bzTgMU4GgawCZleT038n
TLSH
T11252BF708521BE6674B2001B9D541B1FF0A8954BE962EF37979CF19EB345231CAC36F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

license

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\strip-ansi\license
Size 1KB
SHA256 fcf1a18be2e25ba82acf2c59821b030d8ee764e4e201db6ef3c51900d385515f
MD5 b862aeb7e1d01452e0f07403591e5a55
SHA1 b8765be74fea9525d978661759be8c11bab5e60e
SHA512 885369fe9b8cb0af1107ee92b52c6a353da7cf75bc86abb622e2b637c81e9c5ffe36b0ac74e11cfb66a7a126b606fe7a27e91f3f4338954c847ed2280af76a5f
TLSH
T1A821961E72551363186613E069A9ACC5B32BB11F7DAF5684286DF248633746CD4FB844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\@npmcli\map-workspaces\LICENSE.md
Size 818B
SHA256 733dcbf5b1c95dc765b76db969b998ce0cbb26f01be2e55e7bccd6c7af29cb04
MD5 2916d8b51a5cc0a350d64389bc07aef6
SHA1 c9d5ac416c1dd7945651bee712dbed4d158d09e1
SHA512 508c5d1842968c478e6b42b94e04e0b53a342dfaf52d55882fdcfe02c98186e9701983ab5e9726259fba8336282e20126c70d04fc57964027586a40e96c56b74
TLSH
T14301128A62E62A9055D19F956DA2B89E61CCF0673903681430B4E24CDA7704AC07E414
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\@npmcli\metavuln-calculator\LICENSE
Size 754B
SHA256 45e433413760dc3ae8169be5ed9c2c77adc31ad4d1bc5a28939576df240f29a0
MD5 d2cf52aa43e18fdc87562d4c1303f46a
SHA1 58fb4a65fffb438630351e7cafd322579817e5e1
SHA512 54e33d7998b5e9ba76b2c852b4d0493ebb1b1ee3db777c97e6606655325ff66124a0c0857ca4d62de96350dbaee8d20604ec22b0edc17b472086da4babbbcb16
TLSH
T1DC01208FB2E52AD454D19BA53DA1EC8961C9F0773D43AA0430B4E34CCBB780F98AB404
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\cacache\node_modules\minizlib\dist\commonjs\package.json
Size 28B
SHA256 58b55392b5778941e1e96892a70edc12e2d7bb8541289b237fbddc9926ed51bd
MD5 56368b3e2b84dac2c9ed38b5c4329ec2
SHA1 f67c4acef5973c256c47998b20b5165ab7629ed4
SHA512 d662bff3885118e607079fcbeedb27368589bc0ee89f90b9281723fa08bda65e5a08d9640da188773193c0076ec0a5c92624673a6a961490be163e2553d6f482
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\cacache\node_modules\minizlib\dist\esm\package.json
Size 26B
SHA256 1bf0e53fc74b05f1aade7451fbac72f1944b067d4229d96bae7a225519a250e4
MD5 2324363c71f28a5b7e946a38dc2d9293
SHA1 7eda542849fb3a4a7b4ba8a7745887adcade1673
SHA512 7437cf8f337d2562a4046246fbfcc5e9949f475a1435e94efbc4b6a55880050077d72692cbc3413e0ccd8f36adf9956a6cc633a2adc85fbff6c4aa2b8edac677
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\chownr\LICENSE
Size 780B
SHA256 3f24d692d165989cd9a00fe35ca15a2bc6859e3361fa42aa20babd435f2e4706
MD5 b020de8f88eacc104c21d6e6cacc636d
SHA1 20b35e641e3a5ea25f012e13d69fab37e3d68d6b
SHA512 4220617e29dd755ad592295bc074d6bc14d44a1feeed5101129669f3ecf0e34eaa4c7c96bbc83da7352631fa262baab45d4a370dad7dabec52b66f1720c28e38
TLSH
T1D501418FB2A12A8414D09B643DA1EC8971C9F03B3C43AA153074E258C7BB80F947A400
MD5 SHA1 SHA512 TLSH

Submit Download

license

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\clean-stack\license
Size 1KB
SHA256 67292c32894c8ac99db06ffa1cb8e9a5171ef988120723ebe673bf76712260ec
MD5 5ad87d95c13094fa67f25442ff521efd
SHA1 01f1438a98e1b796e05a74131e6bb9d66c9e8542
SHA512 7187720ccd335a10c9698f8493d6caa2d404e7b21731009de5f0da51ad5b9604645fbf4bc640aa94513b9eb372aa6a31df2467198989234bc2afbce87f76fbc3
TLSH
T18521961D72551363186613A069A9ACC5B32BB11F7DAF5684286DF248633746CD4FB844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE-MIT.txt

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\emoji-regex\LICENSE-MIT.txt
Size 1KB
SHA256 f996f6e050e6fc18086162b4b44e301bba345c87deca83f57a27e6d54195556e
MD5 e0be9e751faf84fbb7c61c63af745e32
SHA1 48e53e2b46d48cc6ea16f03ab1ecb69a86f5db0b
SHA512 6686277ceafd63dc89b17315c43134098cd131d16c7d42fad82cee5b7c78e4aa1f7cb199db352b9e54adb3f09dc77b1dc6665a5667c4ab8b3639fa254e20ecce
TLSH
T1D211895FB261137B1C66139069A4AC85B36B715BBDFF2384345DF244231A468D9F7C04
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\exponential-backoff\LICENSE
Size 11KB
SHA256 49bbe9114e49214df2ccc324cb3ac8d1d1aa1c3a0947f94c286765e86647b32e
MD5 0ba5044c64ef53cb0189c9546081e228
SHA1 c8bc7df08db9dd3b39c2c2259a163a36cf2f6808
SHA512 a7ce8c7f21c031e4e6d037f4eabe8b200b8f1470731c05ea86028171f2964310dadc5def814d2d65164fbd23d720ecfd4d479ff5e269e519c787b4db96c7724f
SSDEEP 192:qf9qG4QSAVOSbwF1wOFXuFJyQtxmG3ep/7rlzKfHbxc+Xq0rhlkT8SHfHj:kOu9b01DY/rGBt+dc+aclkT8SHr
TLSH
T17632832BBA4903771AF20122AB4764CEF31EA03F37591525315CC1682F7B96583FB69E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\libnpmpack\LICENSE
Size 730B
SHA256 2ef361317adeda98117f14c5110182c28eae233af1f7050c83d4396961d14013
MD5 072ac9ab0c4667f8f876becedfe10ee0
SHA1 0227492dcdc7fb8de1d14f9d3421c333230cf8fe
SHA512 f38fd6506bd9795bb27d31f1ce38b08c9e6f1689c34fca90e9e1d5194fa064d1f34a9c51d15941506ebbbcd6d4193055e9664892521b7e39ebcd61c3b6f25013
TLSH
T1C001D08FA2D12AD454D59F643DA1BD4861C9F17B7D43AB043074E358DB7744F986A404
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\libnpmversion\LICENSE
Size 763B
SHA256 1fccd0ad2e7e0e31ddfadeaf0660d7318947b425324645aa85afd7227cab52d7
MD5 7428aa9f83c500c4a434f8848ee23851
SHA1 166b3e1c1b7d7cb7b070108876492529f546219f
SHA512 c7f01de85f0660560206784cdf159b2bdc5f1bc87131f5a8edf384eba47a113005491520b0a25d3cc425985b5def7b189e18ff76d7d562c434dc5d8c82e90cce
TLSH
T14701F18FB2A16A9454D19B653DA1ED8961CDF0373D43AA143075E258C77780FA46A404
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\LICENSE
Size 802B
SHA256 04400db77d925de5b0264f6db5b44fe6f8b94f9419ad3473caaa8065c525c0be
MD5 d7c8fab641cd22d2cd30d2999cc77040
SHA1 d293601583b1454ad5415260e4378217d569538e
SHA512 278ff929904be0c19ee5fb836f205e3e5b3e7cec3d26dd42bbf1e7e0ca891bf9c42d2b28fce3741ae92e4a924baf7490c7c6c59284127081015a82e2653e0764
TLSH
T15F01128FB295269419D09B943DA1AC8961C9F0773D43AE153074E248C7AB40EA47A404
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\index.js
Size 16KB
SHA256 7a395802fbe01bb3dc8d09586e0864f255874bf897378e546444fbaec29f54c5
MD5 bc0c0eeede037aa152345ab1f9774e92
SHA1 56e0f71900f0ef8294e46757ec14c0c11ed31d4e
SHA512 5f31251825554bf9ed99eda282fa1973fcec4a078796a10757f4fb5592f2783c4ebdd00bdf0d7ed30f82f54a7668446a372039e9d4589db52a75060ca82186b3
SSDEEP 384:PjFrIA8zJ08TEcGpIuqbI0WXsJY+cHK+34x2WkFUasBq7BmDWC:PjFrIKf8JKjV0DJ
TLSH
T196722F552B9E61229373B77ADD47900FE722141B393F5014B8AC46D02FB99B48B38EF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\minipass-sized\node_modules\minipass\package.json
Size 1KB
SHA256 c3052bd85910be313e38ad355528d527b565e70ef15a784db3279649eee2ded5
MD5 d116a360376e31950428ed26eae9ffd4
SHA1 192b8e06fb4e1f97e5c5c7bf62a9bff7704c198b
SHA512 5221c7648f4299234a4637c47d3f1eb5e147014704913bc6fdad91b9b6a6ccc109bced63376b82b046bb5cad708464c76fb452365b76dbf53161914acf8fb11a
TLSH
T1AB217927DD589D7715B52760A8781603F2635B2F20348C0B75F6012E9FB392B0099BAC
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\chownr\LICENSE.md
Size 1KB
SHA256 a638a0768dbec922fd821d0b6cce6275231c4b57cfcddf584defce530fbfbbf5
MD5 d2d8f56ce3ffe22bb7c65a724b157d71
SHA1 afe95116aa199ddaf06f9bc666cb82b1e489497a
SHA512 1bc8e29b05053518b76f473226497804408f14df744c60bc2dd2334e989895f7d3dba84fb8b6466e63e886d4f3a4a749397dc2d5b3456f90b382ced91a886e9d
TLSH
T18F31001E664E975302D041066F43A0AFF60A45BC9B5F02F23496905833B5F2646FF8BC
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minizlib\LICENSE
Size 1KB
SHA256 cf7f1747f25b023e8f304670601ba231456a7218f70548d9196b6015f1eaf84c
MD5 ea4921575fd5727b47e4d01e2460c558
SHA1 d9bef5ffbdbb7a61f045f920794fd053669b58a1
SHA512 85e2ba76887d20b95ca5a655720e917370c8890b67dabb7a3f1bb14c7e5c03b479d6983286717eb092c2b9e05d4a96be0b3bdaf271a1090221c835994f532528
TLSH
T1CB21141D722403672C81135695669885F22AB15D7EAB2DA6346DE258233B824A5FF818
MD5 SHA1 SHA512 TLSH

Submit Download

constants.js

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minizlib\dist\commonjs\constants.js
Size 4KB
SHA256 19d5db4a9dc28cb6606a3a0b2ad62e2e7489fdf9a0a341f689b4f4a8f618951b
MD5 4380d5053e9072c210e9257aad010e39
SHA1 4522ed2fc98de107df93c9d14fbc6634d68c68ba
SHA512 8c0298a7606ba3afa529bc84af9ab7877fdf82c836fd5bea4dacaaf657acb575f1dc25c94e30a1b9d875baf4fb89a86c51d74d27576e86e3c6c98dac8e025b79
SSDEEP 96:6MCQ8aRRhOafLj6eW4iAQriF6kg7UKN4k:6MCjaRR8afqB4iAQLXpN4k
TLSH
T182915940673FA6BE353C0948256070D7D6A8330B696961E7F43FAF9ADF3283316584D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minizlib\dist\commonjs\index.js
Size 12KB
SHA256 72059ea7559b37c908051c46b4d586aa1af8c286bdbb9fd31e7d5b03b0725668
MD5 07edc2baa575d724bbd8741480cde8f9
SHA1 64dcc3e7e3ee609b123ab5fc707ebd12076fdd84
SHA512 6022f3caa02b527968b0221b8d9eb71890137caf23ad2e03a5220c87c3d9bfc77dc7edf0f4055df27a87225dc6f82daa30747b06563c61245c4314e5d7c25588
SSDEEP 192:6MC+hmH1Eqf6/m4KWBRB3RuFqQDnJgH3dnppOV6dZBaVFVl9V:GWrqi/m4BBP30FqqJgHNnpEQXBaV/V
TLSH
T1E8428399177B2229A6B123B38F0BD006EB355037A21E919C7A6C43F92F718D0D650FF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

constants.js

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minizlib\dist\esm\constants.js
Size 4KB
SHA256 ff1af806b07bd74ce3d28138c5951cfc5c700ddee1f584195c2ea02ae4bf7445
MD5 86cd5be080cc8ff6ad01797e546d6445
SHA1 b7329e16a9d6393a8327ca8953e3ca12bc8909c1
SHA512 01c8018f0ce1d699eb3688628fd36f1937222d8cafcf2f6536a07afe0ed1ab711492049fcbf2901838c48442d86d999d56c440b10fca063263aff689a761202a
SSDEEP 48:r4XROfvBYXwdfL4bfp1I3ma6eKMqy/I3AQrijM66kwNNahS1sIcjcEno3wc3mhyd:raROhYafLj6eW4iAQriF6kg7UKN4k
TLSH
T1F9811640573B96BE353C0958246031D7D6A8330B6D69A1E7F43FAF8ADF329331A584D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minizlib\dist\esm\index.js
Size 11KB
SHA256 a533c9e686104c58250c3d4623facf7ababee992a5d60684aa091d85cdebb3cc
MD5 d071b7ec476f624112ef3d283eab285b
SHA1 0a1a6a4449def0717dcdc521ed0139de65e64747
SHA512 be8db4690606d95d7cd7386ee3dec154e372407d67ecf7f09775b620b3a157a5b6d8ad59a07074034d71038d9477df56c2309cc03174f0a315c7902c75e10d3f
SSDEEP 192:0E2Eqn6/r4KWBRr3RuFqAJgFJdnpSDV6dhaVYQAf:NXq6/r4TBl30FqAJgFTnp0QjaVE
TLSH
T1F4323199177B262AA5B123B38F0BD006F7316037921E919C7A6C43F92F71894D260FF6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\minizlib\package.json
Size 1KB
SHA256 3427897060e5af70fac162a4edca7ed48b351077b2f3f22cc7f40f98da7a60df
MD5 81bd65d5fd30a37821793c2dfdb5c506
SHA1 23ae69e23a5c87655d19c6f3e61faac8f152bfa0
SHA512 b51324ffdc9810574d4004b81f9f372e336428e5747158638eeb4b550898e90042bc61fbc807446dbe7381f8489a2ce424fc6672406f895de0fe9f1ec754e3c0
TLSH
T1B9419927C8A45E2315B46339E8744602F3761B2FA1749E0B34FE222D4F77567109EBAD
MD5 SHA1 SHA512 TLSH

Submit Download

find-made.d.ts

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\find-made.d.ts
Size 340B
SHA256 1da483c88debd7970eea2e8d6cd8b3600f14103a0d8bf6347ddd548ebdb0498c
MD5 24b7639474840d25e37a49dcc5daee99
SHA1 a54054fee9adf1fc7a7ae6afc2c0fee527e78183
SHA512 c9c163540d2333ceb66cec9130f3cf1ec759431156defed1c719c7f312355e4c0ca4b57092038fbe11a9dc0b511ad7e202cc0b8fe8a28a42ccffc22b10ac55c8
TLSH
T1A5E02663E8913B14ACB46343E1A514560A2399E23A3130FFCCAD451C2073C28D02359B
MD5 SHA1 SHA512 TLSH

Submit Download

index.d.ts

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\index.d.ts
Size 3KB
SHA256 37e91264c16b6a35ac193a7bc20379da660d134d2381bbffcc2cc5b9b17afdb6
MD5 402b5878d76b260b0e47c575bcaf7756
SHA1 c771c4a94262cc4fe605f51fb7b36f1264056451
SHA512 674bca1a1dd50361191eca6a215f34ea59ca379de796134b8e2142ffa471ee44f53652531d9e42cd5627da0a69383f12dbd774f8081ab65ec8f078969aa6b7fa
TLSH
T158616163993113081CFBB361D1BD0986C171DB73AB6720F6FDC61A4C1952099A2BBAF2
MD5 SHA1 SHA512 TLSH

Submit Download

mkdirp-manual.d.ts

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\mkdirp-manual.d.ts
Size 508B
SHA256 f3b9c57819c4ac73589857e8a0f0066561c9ee1ce61033a6817a8526bfb00507
MD5 3d48c4a2f5bd0e671e3702e668a1deeb
SHA1 3a432bfb1c9261449e9d2454107b2324b8b1266c
SHA512 f46a576ed86a437a68067babad9121481ef35e3cda42e33b74c3350137a57d808bdbd478ce32692170daecf62e4448565f6c52e0917ef528804f6df7e4a12603
TLSH
T10CF08222DD3233086CBA9262A9AC0955853097733FB560F2DCC6054C04824ADE5775B6
MD5 SHA1 SHA512 TLSH

Submit Download

mkdirp-native.d.ts

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\mkdirp-native.d.ts
Size 406B
SHA256 906349978d6f46aa970a2737049469e194a01c2b24ff43d6b50afdedd1a34037
MD5 3caac6ba922634ead5d1525c42710a93
SHA1 aac502fe262612f4b25e4cda28ff6a4c7540c84f
SHA512 8dbddfbd41c5e8788f63110c841e1e72087df03b06b3504e4b8bed3e86d726115095ed0350f50ce4455ceb9987f7839e80b25a827bd6238b93fc0d3d92fe64be
TLSH
T1D7E09263993623081CEBA2A2D0790A8AC1B09A627F6B60F6C6C50648004345AE27B9E3
MD5 SHA1 SHA512 TLSH

Submit Download

opts-arg.d.ts

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\opts-arg.d.ts
Size 1KB
SHA256 3f0cbbcbb68f75e9dbe364c40af79941d2184a665fd244faabae90aa107b1733
MD5 039024a1cd7662304b13f45055afe174
SHA1 c34cca081f7c39b13d37b8ccb92defd24fe18c4a
SHA512 8380542b37c126bc10b32d0f07b3aed33110879cf8842e0660f96026e7efcb8957ca69933a03cb30edf9b03c35f8f94509337e93bb2642f9be9e59ef8619843e
TLSH
T1CA316C42846832061EF3B312D6E9461AC4BE4AD3371820FFF94E26945FB7869D257AD2
MD5 SHA1 SHA512 TLSH

Submit Download

path-arg.d.ts

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\path-arg.d.ts
Size 95B
SHA256 566ce76d91fc552ec77a04a529c6a932338e7362c611c08e9d5c646ce3ddb8b9
MD5 faf0e5cdba640d50ee667a5f3f048fd2
SHA1 19dfd895ab69bb012a2d28d85f6c3a20cd0f9899
SHA512 9c824f714f6891f645d447ead6b847599a7162eb8be96368fde1deac0dc1e9781bd0217892e0595924b50eef7bc64546352803950869af5bc5e2ba9f5a14ba8d
TLSH
T1B0B0129EA4742461BA710B43C0A24167430144C1B69030ECED8414C9007244DA022D84
MD5 SHA1 SHA512 TLSH

Submit Download

use-native.d.ts

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\node-gyp\node_modules\mkdirp\dist\cjs\src\use-native.d.ts
Size 283B
SHA256 8090b19632de54991128a7541545eed84d4694e1e9e2cfd69828152ee59c7580
MD5 2c74b5d37fa89394665fd49fb4bca553
SHA1 34e34c900aac0f03f190ed5854af56f40f2af2d0
SHA512 a5a7a81f2a248bd3a280ec20af2434bd44cc4698266b95f0a8045355d3b87973e1bb359bc3304d56749023067fdf8165bb04a5aa850d7d6e26bb16e18489df0f
TLSH
T13CD05E23E9A6126568E2F2A3153F0ECF453596527B6B40F2B268B6CD30578B2D5038E7
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\npm-audit-report\LICENSE
Size 771B
SHA256 b49c8d25a8b57fa92b2902d09c4b8a809157ee32fc10d17b7dbb43c4a8038f79
MD5 e9dc66f98e5f7ff720bf603fff36ebc5
SHA1 f2b428eead844c4bf39ca0d0cf61f6b10aeeb93b
SHA512 8027d65e1556511c884cb80d3c1b846fc9d321f3f83002664ad3805c4dee8e6b0eaf1db81c459153977bdbde9e760b0184ba6572f68d78c37bff617646bcfc3b
TLSH
T15F01259A62E56DF46DD19F806DF1B98D70CCF076BC47A91530A8E258C7B704F88AE414
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\read-package-json-fast\LICENSE
Size 771B
SHA256 24b8d53712087b867030d18f2bd6d1a72c78f9fb4dee0ce025374da25e4443b9
MD5 1d7c74bcd1904d125f6aff37749dc069
SHA1 21e6dfe0fffc2f3ec97594aa261929a3ea9cf2ab
SHA512 b5ac03addd29ba82fc05eea8d8d09e0f2fa9814d0dd619c2f7b209a67d95b538c3c2ff70408641ef3704f6a14e710e56f4bf57c2bb3f8957ba164f28ee591778
TLSH
T14801F18FB2D52A9454D19B653DA1EC8961C9F0773D43AA0530B4E248C7AB40F95BA404
MD5 SHA1 SHA512 TLSH

Submit Download

fetch.js

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\sigstore\node_modules\@sigstore\sign\dist\types\fetch.js
Size 79B
SHA256 ef1f170ad28f2d870a474d2f96ae353d770fff5f20e642cd8f9b6f1d7742df13
MD5 24563705cc4bb54fccd88e52bc96c711
SHA1 871fa42907b821246de04785a532297500372fc7
SHA512 2ce8d2cf580623358fef5f4f8925d0c9943a657c2503c80048ca789bf16eacdb980bfc8aaaa50101a738e939926fcf2545500484dcad782c700ee206d8c6f9b9
TLSH
T1C4A01201A934C5F1038000C44525E0C1A0C10432006528A55BA84D65440088C5050001
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\socks-proxy-agent\LICENSE
Size 1KB
SHA256 22427a9ca2a0ff9c27dde9e26fe6e940529aee030b342a70b435366af0fcc51b
MD5 0c336e5b6975ed55d323848908249114
SHA1 805e10789f2077ac4b21852f3e7a1f7167bcf3d2
SHA512 6372ca65a81f8e0e268ba108858cdd21ab827b551f8523dfdb38be5a933a8d24a39ed09c4a79fa6895b5341af8887ca4b8d9c4a30af9adef2b3b34155a1043e8
TLSH
T1A4219A5F72550773089613A059B55C85B25EB15B7DEB2684349DF248232A428ECFB804
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\tuf-js\node_modules\@tufjs\models\LICENSE
Size 1KB
SHA256 6ba2fb4cc004819b1d872168a7ba6ac4a5a07400366680750321058fe21dd36b
MD5 dfee32877d06166fae6096f9359e68aa
SHA1 28a83f15648b5088399a0dd3aac207d192bba5f0
SHA512 ed9b0514e9f8a2204d6900f5b5a6065272b91d70b076c91ec8e101a3288c83f19b139210da6de526e269fc85469708478dfec8664e9c3131408af3818ef128cc
TLSH
T1A711631E735903621C9257A055A9ECC5F12BB14A7E6B1985346DF209132A458C6FF8A4
MD5 SHA1 SHA512 TLSH

Submit Download

AUTHORS

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\AUTHORS
Size 207B
SHA256 0ee7b5b132cdd64923287705569f0b55e82729319e3a78571a8ce9bc9a62f98f
MD5 bfe89e5b3b70c5929f1d9c006372f387
SHA1 dcabeee6f2c06f10659ccea4730b3482cfe75acb
SHA512 6cd4ef0b1f5c345bca638267e98ec02ab808913ba6433f3659e9c7a1f9ce61850c95fa20f624cb2ccf42c26f34ecfd1a2dcf41a05bab48dab89287dc8fa1d5e9
TLSH
T1C2D022E620882086106F004130F532446F2A0133CBACC1E0E33807BA51FC432BA18A83
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\LICENSE
Size 1KB
SHA256 9874348297d23c486dfb13b9df158f3fe2f57153ddfd0513507d22f0438ea204
MD5 22f3ccd48ddf44c54ec73ce7eb06d273
SHA1 9d116bb5fb98c0c632a58eebdd973ff41a3f4bdd
SHA512 a230709643067d276776fc8be03edb2cb4be08eafbf95a4a5353947c62c505e23e402b54f9cb2e0b46d2bceb6e44c22b6c5bcc8b288beb2f1c62f26dc1ef2bcb
TLSH
T11A219A5D725607731CE613E06975A885F26F711B7DBF3688345DF248232A428D9FB804
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\index.js
Size 151B
SHA256 2eacd689c758e0aacc3fa3157b6fdc1739598f0fd7ebaca3841849940e290f8c
MD5 68be8899e939beb38a69939bedb34e35
SHA1 b80615bd00d82c8bb940a4649611e73ac629741a
SHA512 fe1debc7171edcc5ef1f67b70037335ff59446407bd1907234beb35a071310aecb0e17b455765f178588278fdccfe2d6cf268fcb7d3cb639d4ff073c8aa184fa
TLSH
T12CC08C8A1AE2F0097712E3D0CA66B421A0899230402C5122D90C839639E08C90E2BCAE
MD5 SHA1 SHA512 TLSH

Submit Download

parse.js

Path C:\Users\Admin\AppData\Local\Temp\engine\node-v22.14.0-win-x64\node_modules\npm\node_modules\validate-npm-package-license\node_modules\spdx-expression-parse\parse.js
Size 2KB
SHA256 4b435dcbc2bf9a1afa4f28f7d3fcfd33406eb08c900ac2f967c32b982f39cb0e
MD5 8be909153b2690e0586043c60dab7e9d
SHA1 4b80480eba7e42c0020ac5ab93a4eec2b9e6336e
SHA512 3dca8378b3ef0ac96baa583662a6826f677c11eb30ad817b378c3e77cc23cb8c120d5d8a5ec1ee734947f139d526bb5721f5e6c6f11b4feddac479ea23a394ba
TLSH
T18451699868821562D177B7B9EC5F980DE73214232168C1607D9C92607FB04A8CBBBFED
MD5 SHA1 SHA512 TLSH

Submit Download

node.zip

Path C:\Users\Admin\AppData\Local\Temp\engine\node.zip
Size 33.3MB
SHA256 55b639295920b219bb2acbcfa00f90393a2789095b7323f79475c9f34795f217
MD5 d7c20f179f1000671f217a550bb6a5d2
SHA1 c5a6bc63842eefd63f87e5ab45cefb85f3b17571
SHA512 2b4b13e64ccfb63a5498eb3ba1f27a58e1ce104755a3b42cf25c24c7ce8be0cf1bf4ef7f18583c844526197850a55758e173cd8d064b3bfba476f79190b4c501
SSDEEP 786432:IAp6FAa3lgfVY4Md2mtSYWTPQtlgJ03bMMZepI:IAoF5lgfC4Md9lWTot6m3wMZiI
TLSH
T1A57723C990F50537CEEFBAFBF1C2E4664CCD96D69C606C2A082C2AEA2C670B147D554D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/924-32-0x000001F7E0840000-0x000001F7E084A000-memory.dmp

Download

memory/924-812-0x000001F7E0460000-0x000001F7E0472000-memory.dmp

Download

memory/924-33-0x000001F7E08B0000-0x000001F7E08C2000-memory.dmp

Download

memory/924-34-0x000001F7E0760000-0x000001F7E076A000-memory.dmp

Download

memory/924-31-0x000001F7E0780000-0x000001F7E0833000-memory.dmp

Download

memory/924-706-0x000001F7C65E0000-0x000001F7C65F0000-memory.dmp

Download

memory/924-707-0x000001F7C65E0000-0x000001F7C65F0000-memory.dmp

Download

memory/924-30-0x000001F7E0760000-0x000001F7E077C000-memory.dmp

Download

memory/924-813-0x000001F7E0850000-0x000001F7E08A6000-memory.dmp

Download

memory/924-4938-0x000001F7E0850000-0x000001F7E08A6000-memory.dmp

Download

memory/924-17-0x000001F7C65E0000-0x000001F7C65F0000-memory.dmp

Download

memory/924-16-0x000001F7C65E0000-0x000001F7C65F0000-memory.dmp

Download

memory/2276-4948-0x0000028047CA0000-0x0000028047CB2000-memory.dmp

Download

memory/3088-0-0x000001962FF80000-0x000001962FF90000-memory.dmp

Download

memory/3088-10-0x00000196177C0000-0x00000196177D2000-memory.dmp

Download

memory/3088-1-0x0000019617D00000-0x0000019617D22000-memory.dmp

Download