Analysis

  • max time kernel
    300s
  • max time network
    295s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    02/06/2026, 16:47

General

  • Target
    Triggers-Client-win-x64.exe
  • Size 102.7MB
  • Sample260602-vamwlab19k
  • SHA256 bd1980fdf4955c41373a4684e5d5a342ac53aa57631fc1075488b93c4337339b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 24 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Using powershell.exe command.

  • Drops file in Windows directory 1 IoCs
  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 24 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 7 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of WriteProcessMemory 13 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Triggers-Client-win-x64.exe
    "C:\Users\Admin\AppData\Local\Temp\Triggers-Client-win-x64.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1264
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
      2⤵
      • Hide Artifacts: Ignore Process Interrupts
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3476
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:5108
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\triggers-client', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2700
  • C:\Users\Admin\AppData\Local\Programs\triggers-client\Triggers-Client.exe
    "C:\Users\Admin\AppData\Local\Programs\triggers-client\Triggers-Client.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Drops file in Windows directory
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3400
    • C:\Users\Admin\AppData\Local\Programs\triggers-client\Triggers-Client.exe
      "C:\Users\Admin\AppData\Local\Programs\triggers-client\Triggers-Client.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Triggers-Client" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1768,i,17078940680326695252,9422757044608785527,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker,VaapiVideoDecoder --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1764 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2968
    • C:\Users\Admin\AppData\Local\Programs\triggers-client\Triggers-Client.exe
      "C:\Users\Admin\AppData\Local\Programs\triggers-client\Triggers-Client.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Triggers-Client" --field-trial-handle=1768,i,17078940680326695252,9422757044608785527,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker,VaapiVideoDecoder --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1824 /prefetch:11
      2⤵
      • Executes dropped EXE
      PID:568
    • C:\Users\Admin\AppData\Local\Programs\triggers-client\Triggers-Client.exe
      "C:\Users\Admin\AppData\Local\Programs\triggers-client\Triggers-Client.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Triggers-Client" --app-user-model-id=electron.app.Triggers-Client --app-path="C:\Users\Admin\AppData\Local\Programs\triggers-client\resources\app.asar" --enable-sandbox --disable-background-timer-throttling --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1768,i,17078940680326695252,9422757044608785527,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker,VaapiVideoDecoder --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2500 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6040
    • C:\Users\Admin\AppData\Local\Programs\triggers-client\Triggers-Client.exe
      "C:\Users\Admin\AppData\Local\Programs\triggers-client\Triggers-Client.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Triggers-Client" --app-user-model-id=electron.app.Triggers-Client --app-path="C:\Users\Admin\AppData\Local\Programs\triggers-client\resources\app.asar" --enable-sandbox --disable-background-timer-throttling --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=1768,i,17078940680326695252,9422757044608785527,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker,VaapiVideoDecoder --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3332 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1624
    • C:\Users\Admin\AppData\Local\Programs\triggers-client\Triggers-Client.exe
      "C:\Users\Admin\AppData\Local\Programs\triggers-client\Triggers-Client.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\Triggers-Client" --field-trial-handle=1768,i,17078940680326695252,9422757044608785527,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker,VaapiVideoDecoder --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3680 /prefetch:12
      2⤵
      • Executes dropped EXE
      PID:1124
    • C:\Users\Admin\AppData\Local\Programs\triggers-client\Triggers-Client.exe
      "C:\Users\Admin\AppData\Local\Programs\triggers-client\Triggers-Client.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\Triggers-Client" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1768,i,17078940680326695252,9422757044608785527,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker,VaapiVideoDecoder --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1332 /prefetch:10
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:5320

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        powershell.exe.log

        • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\powershell.exe.log
        • Size 2KB
        • SHA256 56b3adbf18e46f82c8075f712785ea8e59e3125a90ce26b8b0d20687401340d6
        • MD5 SHA1 SHA512 TLSH

        StartupProfileData-NonInteractive

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 16KB
        • SHA256 ee0031468d58a4af9f24e78c0a9597060f08a83008ec8e9eba6332e40a02b444
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StartupProfileData-NonInteractive

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 16KB
        • SHA256 883a0dcd57cb09037ebb0d8acde5a454d47694ad7603b224441da5b34c225df4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Programs\triggers-client\chrome_100_percent.pak
        • Size 163KB
        • SHA256 4474d496b4eb082073fb439133728eed72da35f4519505c1c246ef2b9552cf49
        • MD5 SHA1 SHA512 SSDEEP TLSH

        2d160a7a-deb7-46dc-bd4d-b6058ed5cc01.tmp.ico

        • Path C:\Users\Admin\AppData\Local\Temp\2d160a7a-deb7-46dc-bd4d-b6058ed5cc01.tmp.ico
        • Size 165KB
        • SHA256 e55d3a4e865c68c874dbf71f3974d0ce51e25f4ff18ab69d3655b6ef3215fb2b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __PSScriptPolicyTest_mdeqf4r5.0vm.ps1

        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_mdeqf4r5.0vm.ps1
        • Size 60B
        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
        • MD5 SHA1 SHA512 TLSH

        LICENSE.electron.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH

        LICENSES.chromium.html

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\LICENSES.chromium.html
        • Size 14.6MB
        • SHA256 6965e1b04dc81a012981508299e28542abff2bc7f418071c264f0b53e0c63f34
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\chrome_200_percent.pak
        • Size 252KB
        • SHA256 3e815b1223026c0bdfffcee62a58885e0ccd99d77f0b950778d109832e38e9cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.7MB
        • SHA256 289767b49dc8525bce262ea06fee4ef9fced2e131a55b25654ce871c1f0498b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxcompiler.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\dxcompiler.dll
        • Size 24.7MB
        • SHA256 6bf9d1e2befc53a95b7b7c374def814af0e1a21ddeb617779397e3e6ccd3b497
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxil.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\dxil.dll
        • Size 1.4MB
        • SHA256 473f5e853120a5b6ca583ac51f453664abae15c0db1d307f29c8bf7a7b89f96c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\ffmpeg.dll
        • Size 2.9MB
        • SHA256 67f37568031d61040ae13022a8ec933f7d4ca7faecbb71a701f0b36489c5a330
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\icudtl.dat
        • Size 10.0MB
        • SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\libEGL.dll
        • Size 493KB
        • SHA256 4e33a8b0632cdab12c0fab456a7d76c3c608fc9940746acd158effc493ba49c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\libGLESv2.dll
        • Size 7.7MB
        • SHA256 1a606ebb09bc8bcb64edefffe3fccecf720b557b9f23ba2aa4331b58106d9991
        • MD5 SHA1 SHA512 SSDEEP TLSH

        af.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\af.pak
        • Size 546KB
        • SHA256 5f3f662f860d0f319027e68d4fb1e68933b2bc3d1beff05bbcfd13f490623bab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        am.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\am.pak
        • Size 886KB
        • SHA256 ca2e31cb035c8f48758c1181078edfce56127ee782198f8765cfd16b5163bf16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ar.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\ar.pak
        • Size 980KB
        • SHA256 a9bc6ec0e5d458468e0659e19641b52ca371f03daa92b84c63bab38e4ce3bdcd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\bg.pak
        • Size 1011KB
        • SHA256 5907a91c11524603f87bf474825d2f30562a89fd9a8e2595f2fb9003106e6201
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\bn.pak
        • Size 1.3MB
        • SHA256 0a88efecf87d216bbb081d3d26f8ac91656642ab52a66ff9d91ee8e61673d7c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\ca.pak
        • Size 615KB
        • SHA256 74c25c05829be034b1ae6469205f07830f9733e28989a3e500322493536f0279
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\cs.pak
        • Size 636KB
        • SHA256 efb45cc491a3df934aee0eef9eeb147643823784d696a53036ff9c9c2eefeb47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\da.pak
        • Size 574KB
        • SHA256 6380dcf390f08fba53019aede4b5b26754eeaaf6968147780d8f085a9f8c2631
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\de.pak
        • Size 615KB
        • SHA256 ae28e9e71aaf424c0323f2949f7426405ccf7509a2568c93bfe29690a7302094
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\el.pak
        • Size 1.1MB
        • SHA256 5e5f96c79a23c8c2a00efc76918594fa3c13d93d75effe5ff7df4cf78d820396
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-GB.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\en-GB.pak
        • Size 498KB
        • SHA256 2565bfd2216dd922c6d099e276c9c098cbbc0bb65d089c191b253ba592e74cec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\en-US.pak
        • Size 503KB
        • SHA256 b9a2cccc13d7dac53210e37248dd70df32dbec43bd33d2c663c6290155fb751e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es-419.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\es-419.pak
        • Size 606KB
        • SHA256 6cee6e9e899e7ee46dfacfc21ef78533e1b98907570d82fd58f1065e1efb645e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\es.pak
        • Size 604KB
        • SHA256 cf47d64bad26d12f6f39f56c4cef093aaec2ee4a1f7b4e88f6b08d34034865bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        et.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\et.pak
        • Size 551KB
        • SHA256 20c0c24314c9e49011220ab545441efdb49780d9966285e48c79a9512665b7d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fa.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\fa.pak
        • Size 907KB
        • SHA256 9f687b6e3ab82e33ac72f866c101558aa49923ac98ca6e49c0daf5d2220b130b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\fi.pak
        • Size 562KB
        • SHA256 e8ee33a17b25b64ba25c55d688eabb90f49d8f3ca29daed0d54ef693bab9bca0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fil.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\fil.pak
        • Size 636KB
        • SHA256 5c2ec565f41cf4b2664054d52dfdf8db1782a13b97b5e227917941e7c5ae8887
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\fr.pak
        • Size 656KB
        • SHA256 a33c1812a95c46fd03317620211bf1f2212b6f089d2520df30ffb1c116de95b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\gu.pak
        • Size 1.3MB
        • SHA256 89ce115c7b2c5c4eba2640fcd5b11355224e1faaf3950d7a16de203db4b8ae08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        he.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\he.pak
        • Size 796KB
        • SHA256 e91cc42a2e369914e6bd3535b5c15bcc95334974b6a059c585b995ee92143df9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\hi.pak
        • Size 1.3MB
        • SHA256 b7b9c280c81b6e3ee3e5a8f7884602814740cf72983faaa57b43f6e369b240b9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\hr.pak
        • Size 613KB
        • SHA256 bb05be3c417bbda1662a5fbb0ad411e5016b5be59e28ce466be6294908c6c961
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\hu.pak
        • Size 658KB
        • SHA256 484a56e14cd1fdc0933f6c1b94a57af6f5fd774c729e100f10ff3406740d5184
        • MD5 SHA1 SHA512 SSDEEP TLSH

        id.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\id.pak
        • Size 543KB
        • SHA256 91cb6812b4e995189b1e2b61ae0565b92dac4ab3c34efd6e0920591dc005d82a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        it.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\it.pak
        • Size 596KB
        • SHA256 a71cbb5cc0336c0732e9781e6965b9080ff2f160be1696724da27d78b470262f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ja.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\ja.pak
        • Size 727KB
        • SHA256 30a10162ef5b90e31fe708e7de992622b659c13e5fc4b7c691142fb3d959cc7d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\kn.pak
        • Size 1.4MB
        • SHA256 dfb1512aff3d9622b8f46be89d05d7927a74b984eb0213e84f27d248f75bcee4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ko.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\ko.pak
        • Size 615KB
        • SHA256 aa78a00d77318d70a356f83ee5e9a0cbd579a560f8b8ffd05f9959ecb965b6a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lt.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\lt.pak
        • Size 666KB
        • SHA256 3e9afca6cb3cf70dce1c3b5a0becd2714aab49c9ceb5bbec39f313a063fb3d05
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\lv.pak
        • Size 664KB
        • SHA256 28115981e00562f3028fb55dc0ebf6d9d2bdf4735bb0d4d2d90aea589d24c822
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ml.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\ml.pak
        • Size 1.5MB
        • SHA256 3415158190b1d8880811a4f54a3998fb1f3f9f71ed913e1d3452f15f1495facf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\mr.pak
        • Size 1.2MB
        • SHA256 c0b1cdf0bba3e2762fc5afc89ac7d443f53f6c1079f40b7683ceedbe2ba58e65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ms.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\ms.pak
        • Size 571KB
        • SHA256 cd9a68fc1b1348b29e6c43adf5c94b9f6238146b8ec7d551e1e1997ae1773e8f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nb.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\nb.pak
        • Size 551KB
        • SHA256 40277ff47002ca9e7a64c692c2e6b39667bae45ea3a411daaba16cb892e8dad0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\nl.pak
        • Size 572KB
        • SHA256 114a11236f70de85330ed374e9658a4dfd21721f7e7cee80e746451bc68a5250
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\pl.pak
        • Size 637KB
        • SHA256 d5179295319698755b51af402731a34b75b32b76b99ad92640319b65c4c52992
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-BR.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\pt-BR.pak
        • Size 597KB
        • SHA256 b111cb265d59d861c8dac2ec37733bbb2df6c923236c79d99452535215fef58b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-PT.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\pt-PT.pak
        • Size 601KB
        • SHA256 252ae86b97ed89e0cac7b9f581dbbae78e7041b28dd6b8be836048ea905dafd5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\ro.pak
        • Size 623KB
        • SHA256 5094807f7e9fa04fb9eeb451c09542587e48ec432dde00c13ed3135b72df2309
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\ru.pak
        • Size 1.0MB
        • SHA256 cc4307b19d0832b86cff809367f23346e9da41e3fc1155aa723b29542aea015b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\sk.pak
        • Size 647KB
        • SHA256 12b0f67bff228cf65c6f9f5a410c0758e4d52f0cdb9abbd4dd9ef828f99e07c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\sl.pak
        • Size 620KB
        • SHA256 bf4846b38adeae6794d2565faeee093e9ea77febe1c2db3ac18193cc1e0e8d2f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\sr.pak
        • Size 956KB
        • SHA256 ae56d881a0f06647dbfe173f3cabedc734a8353d6183099c734570276f38e104
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\sv.pak
        • Size 555KB
        • SHA256 5e44c6ff9d4f432696c747fda111a7ad99df0b818254bbf251e578952ae06d36
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sw.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\sw.pak
        • Size 586KB
        • SHA256 bd6ab24cd929d6809dca3ea0a5105cc567e9c9c2bf65f8814b480def6cf1992e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ta.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\ta.pak
        • Size 1.5MB
        • SHA256 ca560534ff3ca837cbcbbfc240af7dae12a82466bc16e99e7b79376cd102e342
        • MD5 SHA1 SHA512 SSDEEP TLSH

        te.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\te.pak
        • Size 1.4MB
        • SHA256 11a1d2d935b401bc9b24f158774310d73c31b1616bacc61a054c7ef4661618b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\th.pak
        • Size 1.2MB
        • SHA256 d8f5800cb99e227287bdbed8d807380185e20d166901917b6b58dedc5fdafbf6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\tr.pak
        • Size 597KB
        • SHA256 71b1b037ab44e6ed3f954b2c6318063d29e708dd87306c9051f1e48e43714322
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\uk.pak
        • Size 1.0MB
        • SHA256 fff206f5f631d0dda9579cf806cde4de5848a7474bb1ac2b1239ab967a8ca88c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\ur.pak
        • Size 898KB
        • SHA256 0f3cc59fd6c706ae8d84a0cc50301a4929ea1f0204ad5e48250f1a354d6613e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\vi.pak
        • Size 709KB
        • SHA256 f7df08dbb5ca133109ad809bdd89be82cc956a0518e6dee7e02fe4f65118d77d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\zh-CN.pak
        • Size 508KB
        • SHA256 e27395a6c73ac592f05e0de00f4c17efe181a4900c1f649e69d3a21dbb87cde5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-TW.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\locales\zh-TW.pak
        • Size 503KB
        • SHA256 aee4d9c6230c5ae8257fecbccaba6b8668e5a34d6c44ef06e4574e12fed7fd8e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources.pak
        • Size 5.8MB
        • SHA256 13d24097d2c5684f4a893c42beef385927d522ea94f77f470ce11270ffa22231
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app-update.yml

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app-update.yml
        • Size 152B
        • SHA256 387e87cae70ce0f74a8c46ae4420670be34c58e7632e663a40a810fea2c3ab32
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\@tailwindcss\oxide-win32-x64-msvc\LICENSE
        • Size 1KB
        • SHA256 60e0b68c0f35c078eef3a5d29419d0b03ff84ec1df9c3f9d6e39a519a5ae7985
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\@tailwindcss\oxide-win32-x64-msvc\package.json
        • Size 528B
        • SHA256 03a263c6e333e7cc4731c236533be067d092cdfec32f7ebafb77db1e749611bf
        • MD5 SHA1 SHA512 TLSH

        tailwindcss-oxide.win32-x64-msvc.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\@tailwindcss\oxide-win32-x64-msvc\tailwindcss-oxide.win32-x64-msvc.node
        • Size 3.1MB
        • SHA256 d0aa887d95f0b8f2d58ee4cbb1f297d013bc6d11a77cfa50c4fa706c20840055
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\LICENSE
        • Size 1KB
        • SHA256 2b29dcfe0d6471f7e8c92c5fb38c9f93edee10330937055440192f1832b1ecef
        • MD5 SHA1 SHA512 TLSH

        bufferutil.exp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\bufferutil.exp
        • Size 1014B
        • SHA256 ef551daba8ee238e3e5c3674d9f4c7800e305cc96fe30ff4387c5ea8bec8c815
        • MD5 SHA1 SHA512 TLSH

        bufferutil.iobj

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\bufferutil.iobj
        • Size 33KB
        • SHA256 603df6c908aff334385ed38178182d383a323b3f5144f40af9dc15f6d10e4fd8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bufferutil.ipdb

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\bufferutil.ipdb
        • Size 8KB
        • SHA256 3097dbc4d5092e90737ff54de3c67e73903b403e33429d3bfd49c2c2b8c5afaf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bufferutil.lib

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\bufferutil.lib
        • Size 2KB
        • SHA256 4abb675056adf659c0dcdaf7e4b9ea54fbc6de8e7dce5c923a73cfb7640fba12
        • MD5 SHA1 SHA512 TLSH

        bufferutil.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\bufferutil.node
        • Size 151KB
        • SHA256 17f5d7cb3d403f0a3db42744d7959f1420c60dfc59f77354dcbe00d442869b9c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bufferutil.node.recipe

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\obj\bufferutil\bufferutil.node.recipe
        • Size 333B
        • SHA256 9430ba96e7ccc8020c0476478dd9da047d1ca12c639dc2ec5db2ba31511d882d
        • MD5 SHA1 SHA512 TLSH

        CL.command.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\obj\bufferutil\bufferutil.tlog\CL.command.1.tlog
        • Size 5KB
        • SHA256 89f6eb22399b8f08a4e2ecd48ed0c64b5c41a25e3367ba7c560db7c701b4504f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CL.read.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\obj\bufferutil\bufferutil.tlog\CL.read.1.tlog
        • Size 18KB
        • SHA256 0ef7bb4af68d91767bd69e72ed4f34966db54ab40e612cabe79b68adbf6cc8ad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CL.write.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\obj\bufferutil\bufferutil.tlog\CL.write.1.tlog
        • Size 788B
        • SHA256 d989e6ffbbc512bed7405f9cb6337ff058021aee33b838d90cd53f8113c7fe9b
        • MD5 SHA1 SHA512 TLSH

        Cl.items.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\obj\bufferutil\bufferutil.tlog\Cl.items.tlog
        • Size 389B
        • SHA256 d703b0131c2602d96403acfd214c3efff6981522405dcdf94e9909eb5b913819
        • MD5 SHA1 SHA512 TLSH

        bufferutil.lastbuildstate

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\obj\bufferutil\bufferutil.tlog\bufferutil.lastbuildstate
        • Size 198B
        • SHA256 e984cbba5ea9e6be3f312eabfd90c470ac5d62352e93d01acb34d52f2886b2dc
        • MD5 SHA1 SHA512 TLSH

        link.command.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\obj\bufferutil\bufferutil.tlog\link.command.1.tlog
        • Size 1KB
        • SHA256 8d4ca2ad17cd4be82c2bf33f13edffeae4bc0fc62b56688dc5c98048cb7324de
        • MD5 SHA1 SHA512 TLSH

        link.read.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\obj\bufferutil\bufferutil.tlog\link.read.1.tlog
        • Size 4KB
        • SHA256 b6b79bd88147675db8e3f8034f0b341b1459212abe6e801b47d6e1b1aee0e93d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        link.secondary.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\obj\bufferutil\bufferutil.tlog\link.secondary.1.tlog
        • Size 591B
        • SHA256 838009757c8bd5d83b105f2f0daddb112e3688840d9566515ae4e9a51de90e21
        • MD5 SHA1 SHA512 TLSH

        link.write.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\Release\obj\bufferutil\bufferutil.tlog\link.write.1.tlog
        • Size 818B
        • SHA256 240b9b11ddc374dccdf800eb63c8963287f004eddcb947c5a7b4532d7b90c6b2
        • MD5 SHA1 SHA512 TLSH

        bufferutil.vcxproj

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\bufferutil.vcxproj
        • Size 11KB
        • SHA256 e5433e91b89c9e9570667c410a337b9966e5959edf0aff7353f4b4c511226f9b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bufferutil.vcxproj.filters

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\build\bufferutil.vcxproj.filters
        • Size 1KB
        • SHA256 f577bbd70a590c9b3d70e307653d2e242076e031a82f9b0f9d0722ca706bf67d
        • MD5 SHA1 SHA512 TLSH

        fallback.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\fallback.js
        • Size 899B
        • SHA256 f4a65d1a98db49439616119fba09be0d9a4217af57b21282ab7b91c8b5a082b9
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\index.js
        • Size 136B
        • SHA256 70846a43c2bd3b1077461563194e4d2407b18e7d767d6fd8785ea9b7d6ddd044
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\package.json
        • Size 563B
        • SHA256 b1eaa9e0e3726f68b0f5d2d3945b0940f23b9dc125272f3e440b56b0514a5825
        • MD5 SHA1 SHA512 TLSH

        bufferutil.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\prebuilds\darwin-arm64\bufferutil.node
        • Size 33KB
        • SHA256 688f957f5a989f6406e5caa26382e213c8b7316eb600303307dc95be60c287c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bufferutil.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\prebuilds\darwin-x64\bufferutil.node
        • Size 8KB
        • SHA256 f1c90f748d9149cc42f6a00fa846add14c056403d2e67fc8179c1a53a4f22b1b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bufferutil.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\prebuilds\linux-x64\bufferutil.node
        • Size 14KB
        • SHA256 9d0bce137193c8630da76797596742368798f72d1564d43be0d716ac74312bda
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bufferutil.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\prebuilds\win32-ia32\bufferutil.node
        • Size 126KB
        • SHA256 d3cc72764c09f4b2a7f885f5167811fd22dd3728b59bb1a18fa5a6f504317689
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bufferutil.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\prebuilds\win32-x64\bufferutil.node
        • Size 151KB
        • SHA256 9bf6ec4d84b75403a50f22d9bdba2cfb287f12472374c9d5eb736c963a997ee9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bufferutil.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\bufferutil\src\bufferutil.c
        • Size 3KB
        • SHA256 f311fc20ce362c2c7f2e761d2df9b6eff29bfd3fb8ff034293d4379135255707
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\lightningcss-win32-x64-msvc\LICENSE
        • Size 15KB
        • SHA256 5eba353fe5076ac3432177f8ab1cf75e3afcd0584251e37c3bfead5f447d040e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lightningcss.win32-x64-msvc.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\lightningcss-win32-x64-msvc\lightningcss.win32-x64-msvc.node
        • Size 9.1MB
        • SHA256 83e7e838ef1bbf5454c651103574fec31a1cec0b453b999d1173365cbc6c7841
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\lightningcss-win32-x64-msvc\package.json
        • Size 719B
        • SHA256 76456a8ca20848b96b5819f115368bebfbb941c51c860b62073e3e591c836b8b
        • MD5 SHA1 SHA512 TLSH

        nothing.lib

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\nothing.lib
        • Size 112KB
        • SHA256 87908daf307db5f49893caa768877e4744fa45a3980eb4833f66a5b27c19581a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        register-protocol-handler.node.recipe

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register-protocol-handler.node.recipe
        • Size 353B
        • SHA256 13570298d0da873b8ca23b6bf0ef09d1a96fa60bd0adf5b1713ba1ee29e1c5bb
        • MD5 SHA1 SHA512 TLSH

        CL.command.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.415ACE47.tlog\CL.command.1.tlog
        • Size 9KB
        • SHA256 2563df72dcb1c9d3ccc18c0db2cfe468e2473f10f02d653c009041edf36d89d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CL.read.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.415ACE47.tlog\CL.read.1.tlog
        • Size 53KB
        • SHA256 74a16c23debd5607fa11c6b1e2415dd047aed10e470330d58ac020bf232061a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CL.write.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.415ACE47.tlog\CL.write.1.tlog
        • Size 1KB
        • SHA256 cb949aa9bd1f10287ccf9c03d9e929b4fe1b9ec7ecd1cf1b605ce582b259becd
        • MD5 SHA1 SHA512 TLSH

        Cl.items.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.415ACE47.tlog\Cl.items.tlog
        • Size 644B
        • SHA256 02e33d5d00a422f00df1a6c7c377131fab424c8a67f33da944f99f2d682d1a26
        • MD5 SHA1 SHA512 TLSH

        link.command.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.415ACE47.tlog\link.command.1.tlog
        • Size 2KB
        • SHA256 6c3bf36712b3c48122e064ea41786616be146e278f8dbf4fa0ecc7e00a8aff5c
        • MD5 SHA1 SHA512 TLSH

        link.read.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.415ACE47.tlog\link.read.1.tlog
        • Size 6KB
        • SHA256 1f680cfe01a14679e47fedf3d184f7d8ca7db89ffdbc27a7919e8bc2faff793c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        link.secondary.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.415ACE47.tlog\link.secondary.1.tlog
        • Size 929B
        • SHA256 10cee7084b318210c277ede8d27fcfb1b4875985544e7d0ff2440a71c7ef6c51
        • MD5 SHA1 SHA512 TLSH

        link.write.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.415ACE47.tlog\link.write.1.tlog
        • Size 1KB
        • SHA256 a0d33560ac3463e9e0ca1665f17e09923f9299fe53abc4a92a1a50ff72c6ba4a
        • MD5 SHA1 SHA512 TLSH

        register-protocol-handler.lastbuildstate

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.415ACE47.tlog\register-protocol-handler.lastbuildstate
        • Size 203B
        • SHA256 a5e013ccd8d49534504fd0e652391ceb8546d05fe8a22ab158c72b6d1f81cbb1
        • MD5 SHA1 SHA512 TLSH

        register-protocol-handler.exp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\register-protocol-handler.exp
        • Size 1KB
        • SHA256 69798eef354c117f3d7214628a71aaf0aac71aa30ceadc8daf164b8b67b0f88e
        • MD5 SHA1 SHA512 TLSH

        register-protocol-handler.iobj

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\register-protocol-handler.iobj
        • Size 333KB
        • SHA256 f9316c63d9b11020b27ca5f748b89741cad6c4604922900de375f722765a058c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        register-protocol-handler.ipdb

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\register-protocol-handler.ipdb
        • Size 93KB
        • SHA256 719eaef36c9155ee9efa74e9c7c93cc954a7b8d7815800f93f4c8ce0a17962f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        register-protocol-handler.lib

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\register-protocol-handler.lib
        • Size 2KB
        • SHA256 001b99e871fb85323a91d9422b2a7735ea742313b35e673672d0b19dbdc6e03d
        • MD5 SHA1 SHA512 TLSH

        register-protocol-handler.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\register-protocol-handler.node
        • Size 147KB
        • SHA256 f8ddce8e27913c42f6d81381db48ff45a41550b3140f2fb614b965568ba82d21
        • MD5 SHA1 SHA512 SSDEEP TLSH

        register-protocol-handler.vcxproj

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\register-protocol-handler.vcxproj
        • Size 12KB
        • SHA256 cc6b6015c5b169d5e739fd1727e66daa3a4d068ae10309ca03433fcbba80bad3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        register-protocol-handler.vcxproj.filters

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\register-protocol-handler.vcxproj.filters
        • Size 2KB
        • SHA256 6f17d55b15db17186ad7984cddb75ecb87d6079e4895dddae46ef66eb744aeac
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\index.js
        • Size 91B
        • SHA256 9740d6b8f1290751808b9474175259aabd1cce2064ea6496b900b8bd9e1a6cb3
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\package.json
        • Size 434B
        • SHA256 a22c4510e3621818efa0c4626f304af59b27d0e2541b061a8874b1337240a016
        • MD5 SHA1 SHA512 TLSH

        register.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\src\register.h
        • Size 139B
        • SHA256 6f6bace5153fffc785858db0936ec3fae35a1c03179d331be2f74a3f630ae818
        • MD5 SHA1 SHA512 TLSH

        register_linux.cpp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\src\register_linux.cpp
        • Size 2KB
        • SHA256 bac828fb51a0c560f09281d750bb363b4d735c8fbd7add197102b978b88dcb9e
        • MD5 SHA1 SHA512 TLSH

        register_mac.m

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\src\register_mac.m
        • Size 858B
        • SHA256 98c48101cdeeeeb1434d035c4b9198e51f10c64d39cdee18aa3f0f416632d248
        • MD5 SHA1 SHA512 TLSH

        register_win.cpp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\src\register_win.cpp
        • Size 2KB
        • SHA256 ae5cd878e51b30980907180e4e3fd16aab249e8550fd6498bca7cef063d3efb3
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\utf-8-validate\LICENSE
        • Size 1KB
        • SHA256 ebf774f60dd27325cfd62c233917dfcc8551f808f69ca8656be7d1eaf13c44f2
        • MD5 SHA1 SHA512 TLSH

        fallback.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\utf-8-validate\fallback.js
        • Size 1KB
        • SHA256 74ad313e48d1008cf20e4ad691f883319be8baaff4442d86796819fb4d7969cd
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\utf-8-validate\package.json
        • Size 591B
        • SHA256 9dc079142205924338c1ccfa3bbeddfe5745a191f96f3bc6f1df4a423001578a
        • MD5 SHA1 SHA512 TLSH

        node.napi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\utf-8-validate\prebuilds\darwin-x64+arm64\node.napi.node
        • Size 113KB
        • SHA256 0ed3fef7154849143b7b064d33e32b339b86590c0f5719cee8b46b150e83a3e5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        node.napi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\utf-8-validate\prebuilds\linux-x64\node.napi.node
        • Size 6KB
        • SHA256 08c0737834fb5c2ca38efe64e274c1072d7edd18415275f9e0573df5bcdd0e27
        • MD5 SHA1 SHA512 SSDEEP TLSH

        node.napi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\utf-8-validate\prebuilds\win32-ia32\node.napi.node
        • Size 119KB
        • SHA256 0808ab542c43b9df85b668a02f0705529b7bb9ac79e26b0776682657c6005352
        • MD5 SHA1 SHA512 SSDEEP TLSH

        node.napi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\utf-8-validate\prebuilds\win32-x64\node.napi.node
        • Size 147KB
        • SHA256 48b7275f47cd44a05d349eb4fdb6cfc451ccbf609a4a56fa34452bcf231c1208
        • MD5 SHA1 SHA512 SSDEEP TLSH

        validation.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\app.asar.unpacked\node_modules\utf-8-validate\src\validation.c
        • Size 2KB
        • SHA256 d8fa43aea13c622040d1cb2f6d05af0f1013bc9227c133ec81233d1228d77f5c
        • MD5 SHA1 SHA512 TLSH

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        trig-agent.jar

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\resources\trig-agent.jar
        • Size 11KB
        • SHA256 532cf39a2101e2935fda46cc67d86251c4adf30232d141d48df88ea101825b22
        • MD5 SHA1 SHA512 SSDEEP TLSH

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\snapshot_blob.bin
        • Size 314KB
        • SHA256 4bef4ff989a5e7f3f138b315e26e0cfea65487d2845b59508dc12b6f6e574778
        • MD5 SHA1 SHA512 SSDEEP TLSH

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\v8_context_snapshot.bin
        • Size 683KB
        • SHA256 cfa255a0c61f2926ead15f4d049d5e439d3745291058687c231cef3de56dbfc2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\vk_swiftshader.dll
        • Size 5.3MB
        • SHA256 176adce81d9f0f1aac302806be3dbb67abda46e13355bb85c4868057c6e3a223
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader_icd.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\7z-out\vulkan-1.dll
        • Size 900KB
        • SHA256 d5acc73241b46dcfd7ea5f970eab9fdc2ac5a3dc737e23d5947980972ed0a2b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SpiderBanner.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\SpiderBanner.dll
        • Size 9KB
        • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WinShell.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH

        nsExec.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\nsExec.dll
        • Size 6KB
        • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsis7z.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu329.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH

        default.dic

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512

        f_000006

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_000006
        • Size 1024KB
        • SHA256 165ce4955d5440d48375402f8e4b1a4b621af83e12752df6613299a0dbbbb783
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_000007

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_000007
        • Size 1024KB
        • SHA256 9df8db82d45e7ac07337e29531cdf971a4c8abb0ebe9b452992774a89eb5f35a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_000008

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_000008
        • Size 1024KB
        • SHA256 8b67ee818e84ce5227d268df9dfd678fc30c7ebc9585bea247ac95bba282f200
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_000009

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_000009
        • Size 1024KB
        • SHA256 88ca6e4ee40c48bed23268ca3a841614cda3f34d9dde58dd1fb61a44f0167f30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_00000a

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_00000a
        • Size 1024KB
        • SHA256 9a64c25e785efe380143aba5df24a9b3ba4434a9fd00fd7c005b85ed3beb0c83
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_00000b

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_00000b
        • Size 1024KB
        • SHA256 b8dc92990d30cdda5918592b151d74c4a0d084c7f7b9ba77125befb909eb5db5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_00000c

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_00000c
        • Size 1024KB
        • SHA256 6e70987ad6596c925b10f1d07e18dbcda31711a813602830323d0021bc279d16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_00000d

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_00000d
        • Size 1024KB
        • SHA256 e9f25d8a5295cf9ec38ee3e6bc89652636d665a6e10a706aaaae76f686d0948d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_00000e

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_00000e
        • Size 1024KB
        • SHA256 aa8c0239ebce85e92ecc084a0554efcbf7027803304bc36a1c346f5939c43365
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_00000f

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_00000f
        • Size 1024KB
        • SHA256 398b52d3e12c1df75eb663cdea6909b3df20534e1e4f837aa910cc9f15b34154
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_000010

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_000010
        • Size 1024KB
        • SHA256 24872669bd77848b72d4147e05224dcf7596d6e482ef87e9ab6c4a863c55b581
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_000011

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_000011
        • Size 1024KB
        • SHA256 6b14080701842b153abfdd14ce8b3a7b70895b59bead65e6003ca0fa9ea5a3e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_000012

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_000012
        • Size 1024KB
        • SHA256 15e0227421d118a71e2abb6b09926b9dab5a8e3e244098b69efaa84c0f4023ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_000013

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_000013
        • Size 1024KB
        • SHA256 67dfd906e52ef663cc2fbc57e6446038a0a0da435641cbed28bdbbf3a1c8d5a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_000014

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_000014
        • Size 1024KB
        • SHA256 5016caa24224652e786600d8c17068aa9ba9a9d076a9a109d27459b73433c755
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_000015

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_000015
        • Size 1024KB
        • SHA256 eab9a03f0e53be3e3772ce38bffb49424f1460fae264d980ad636551ed4fd249
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_000023

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_000023
        • Size 1024KB
        • SHA256 cdc0be4e70de824642e16a58e4a71f59973c83f8a67ed274513667812b44e272
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_000024

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Cache\Cache_Data\f_000024
        • Size 1024KB
        • SHA256 f95ce205020630871f70d61ef34706d742134d9b1130b692d10b64ee73531f64
        • MD5 SHA1 SHA512 SSDEEP TLSH

        the-real-index

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Code Cache\js\index-dir\the-real-index
        • Size 72B
        • SHA256 1bfa495e076b7776c294f1a184f3c91e8f129910e1f8183ad5d2133d9b943745
        • MD5 SHA1 SHA512 TLSH

        the-real-index~RFe58c743.TMP

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Code Cache\js\index-dir\the-real-index~RFe58c743.TMP
        • Size 48B
        • SHA256 3d7d64e6cfc221e1a181c5011e491ca2cfeedcc36ba528b80c510ca319e6e5b4
        • MD5 SHA1 SHA512

        index

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\DawnGraphiteCache\index
        • Size 256KB
        • SHA256 3d5dd23eb2c8814e240a7482698fed5be6d4f3ce287fbcb17b95f0545e67f3ae
        • MD5 SHA1 SHA512 SSDEEP

        data_0

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\GPUCache\data_0
        • Size 8KB
        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
        • MD5 SHA1 SHA512 SSDEEP

        data_1

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\GPUCache\data_1
        • Size 264KB
        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
        • MD5 SHA1 SHA512 SSDEEP

        data_2

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\GPUCache\data_2
        • Size 8KB
        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
        • MD5 SHA1 SHA512 SSDEEP

        data_3

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\GPUCache\data_3
        • Size 8KB
        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
        • MD5 SHA1 SHA512 SSDEEP

        Network Persistent State

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Network\Network Persistent State
        • Size 1KB
        • SHA256 ab3dd5cb38b746f7cb5e0da722f1209af97b23e116344236f6c82c29b83a6e6e
        • MD5 SHA1 SHA512 TLSH

        Network Persistent State~RFe5987e3.TMP

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Network\Network Persistent State~RFe5987e3.TMP
        • Size 59B
        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
        • MD5 SHA1 SHA512 TLSH

        Preferences

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Preferences
        • Size 57B
        • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
        • MD5 SHA1 SHA512 TLSH

        Preferences~RFe588d37.TMP

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Preferences~RFe588d37.TMP
        • Size 122B
        • SHA256 3489a9fcea842f7bd4152b6ac5a20d493dfba1fdadaec75b503c8e5ffa0d9042
        • MD5 SHA1 SHA512 TLSH

        CURRENT

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\Session Storage\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512

        triggers-client.json

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\triggers-client.json
        • Size 593B
        • SHA256 6a886833b6ca927820826e5d11114ec9890f9ce1a25d3deca6949869cc042121
        • MD5 SHA1 SHA512 TLSH

        triggers-client.json.tmp-041917518087ddc8

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\triggers-client.json.tmp-041917518087ddc8
        • Size 1KB
        • SHA256 6a2173632f11678331606c58982eb6b3db79971df48a68aa71460f9d6579f76c
        • MD5 SHA1 SHA512 TLSH

        triggers-client.json.tmp-0419184811c9340c

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\triggers-client.json.tmp-0419184811c9340c
        • Size 785B
        • SHA256 1e9dcf8ac912cf92b87ab984ad2d9cc1fba481d7ab757746cb6d1e35f98e4f90
        • MD5 SHA1 SHA512 TLSH

        triggers-client.json.tmp-04192121098553cf

        • Path C:\Users\Admin\AppData\Roaming\Triggers-Client\triggers-client.json.tmp-04192121098553cf
        • Size 785B
        • SHA256 71279c797091bda6400a556fbb230c027470620553064b7d960a0c1db9d83313
        • MD5 SHA1 SHA512 TLSH

        memory/2700-89-0x000000006FC90000-0x000000006FCDC000-memory.dmp

        memory/2700-87-0x0000000005DD0000-0x0000000006127000-memory.dmp

        memory/2700-96-0x000000006FE10000-0x0000000070167000-memory.dmp

        memory/2968-3027-0x000002072ADA0000-0x000002072C65E000-memory.dmp

        memory/2968-4047-0x000002072ADA0000-0x000002072C65E000-memory.dmp

        memory/2968-3936-0x000002072ADA0000-0x000002072C65E000-memory.dmp

        memory/3476-32-0x0000000005D80000-0x0000000005DCC000-memory.dmp

        memory/3476-44-0x00000000062D0000-0x00000000062EE000-memory.dmp

        memory/3476-17-0x0000000002840000-0x0000000002850000-memory.dmp

        memory/3476-18-0x0000000002850000-0x0000000002886000-memory.dmp

        memory/3476-51-0x000000006FDF0000-0x0000000070147000-memory.dmp

        memory/3476-49-0x0000000007240000-0x000000000726A000-memory.dmp

        memory/3476-50-0x0000000007270000-0x0000000007294000-memory.dmp

        memory/3476-48-0x00000000070B0000-0x00000000070BA000-memory.dmp

        memory/3476-35-0x000000006FC90000-0x000000006FCDC000-memory.dmp

        memory/3476-19-0x0000000002840000-0x0000000002850000-memory.dmp

        memory/3476-46-0x0000000007670000-0x0000000007CEA000-memory.dmp

        memory/3476-47-0x0000000007030000-0x000000000704A000-memory.dmp

        memory/3476-37-0x0000000002840000-0x0000000002850000-memory.dmp

        memory/3476-43-0x0000000002840000-0x0000000002850000-memory.dmp

        memory/3476-45-0x0000000006EF0000-0x0000000006F94000-memory.dmp

        memory/3476-20-0x0000000004F90000-0x00000000055BA000-memory.dmp

        memory/3476-34-0x0000000006CA0000-0x0000000006CD4000-memory.dmp

        memory/3476-33-0x000000007FA70000-0x000000007FA80000-memory.dmp

        memory/3476-21-0x0000000004F50000-0x0000000004F72000-memory.dmp

        memory/3476-31-0x0000000005CC0000-0x0000000005CDE000-memory.dmp

        memory/3476-30-0x00000000058F0000-0x0000000005C47000-memory.dmp

        memory/3476-22-0x0000000005730000-0x0000000005796000-memory.dmp

        memory/3476-23-0x00000000057A0000-0x0000000005806000-memory.dmp

        memory/5108-75-0x0000000007FC0000-0x0000000008056000-memory.dmp

        memory/5108-76-0x0000000007EF0000-0x0000000007F01000-memory.dmp

        memory/5108-58-0x0000000003400000-0x0000000003410000-memory.dmp

        memory/5108-68-0x000000006FC90000-0x000000006FCDC000-memory.dmp

        memory/5108-66-0x00000000063D0000-0x0000000006727000-memory.dmp

        memory/5108-59-0x0000000003400000-0x0000000003410000-memory.dmp

        memory/5320-4011-0x0000020218010000-0x0000020218011000-memory.dmp

        memory/5320-4014-0x000002021A670000-0x000002021BF2E000-memory.dmp

        memory/5320-4007-0x0000020218010000-0x0000020218011000-memory.dmp

        memory/5320-4008-0x0000020218010000-0x0000020218011000-memory.dmp

        memory/5320-4009-0x0000020218010000-0x0000020218011000-memory.dmp

        memory/5320-4010-0x0000020218010000-0x0000020218011000-memory.dmp

        memory/5320-4012-0x0000020218010000-0x0000020218011000-memory.dmp

        memory/5320-4013-0x0000020218010000-0x0000020218011000-memory.dmp

        memory/5320-4001-0x0000020218010000-0x0000020218011000-memory.dmp

        memory/5320-4002-0x0000020218010000-0x0000020218011000-memory.dmp

        memory/5320-4003-0x0000020218010000-0x0000020218011000-memory.dmp

        memory/6040-2014-0x00007FFA8CD00000-0x00007FFA8CD01000-memory.dmp

        memory/6040-2015-0x00007FFA8D050000-0x00007FFA8D051000-memory.dmp