Analysis

  • max time kernel
    150s
  • max time network
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    08/06/2026, 16:57

General

  • Target
    OctoLauncher_Installer.exe
  • Size 68.2MB
  • Sample260608-vga6dact81
  • SHA256 1a61aaf91e1880dd1bea7456103275d91c19d555479cc89c5a3bf9e89b14198f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 10 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\OctoLauncher_Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\OctoLauncher_Installer.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2444
    • C:\Windows\SysWOW64\cmd.exe
      cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq OctoLauncher.exe" | %SYSTEMROOT%\System32\find.exe "OctoLauncher.exe"
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5140
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq OctoLauncher.exe"
        3⤵
        • Enumerates processes with tasklist
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:3224
      • C:\Windows\SysWOW64\find.exe
        C:\Windows\System32\find.exe "OctoLauncher.exe"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:3264

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        LICENSE.electron.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH

        LICENSES.chromium.html

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\LICENSES.chromium.html
        • Size 8.8MB
        • SHA256 6a717038f81271f62318212f00b1a2173b9cb0cc435f984710ac8355eb409081
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\chrome_100_percent.pak
        • Size 132KB
        • SHA256 86f6b8ffa8788603a433d425a4bc3c4031e5d394762fd53257b0d4b1cfb2ffa2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\chrome_200_percent.pak
        • Size 190KB
        • SHA256 8c1ae81d19fd6323a02eb460e075e2f25aba322bc7d46f2e6edb1c4600e6537a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.7MB
        • SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\ffmpeg.dll
        • Size 2.8MB
        • SHA256 4218ee7a02556cf4a925f79957e3e157c54ef236a22208464406c88031695f1b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\icudtl.dat
        • Size 10.2MB
        • SHA256 f5170aa2b388d23bebf98784dd488a9bcb741470384a6a9a8d7a2638d768defb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\libEGL.dll
        • Size 477KB
        • SHA256 d421431e5390d9e1a9f3d75c987d8cb73bb47e81208f0320bda1a945dede8939
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\libGLESv2.dll
        • Size 7.3MB
        • SHA256 6572e621800f308de46fc60b5a615e015119410d3f1c260ce1750e4de81e91d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources.pak
        • Size 5.2MB
        • SHA256 947fb87beb5edfe3b33899e6df6961ddd1cba0734f8a1192eed4ca41276e9be8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app-update.yml

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app-update.yml
        • Size 103B
        • SHA256 81eb500d95e7d4a63c36de4fdb4ecac5902d5c567caa0c12c6a208fa4130e637
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\dll-inject\LICENSE
        • Size 1KB
        • SHA256 af3625705b131396ba644a72dd384808adb144b640de30ed9a33e6f977ef621f
        • MD5 SHA1 SHA512 TLSH

        injector.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\dll-inject\build\Release\injector.node
        • Size 116KB
        • SHA256 d68555bc824252c26bc28decc4271a20e99dcc0318c88d73ea5211eacfef6694
        • MD5 SHA1 SHA512 SSDEEP TLSH

        functions.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\dll-inject\functions.h
        • Size 355B
        • SHA256 425c57dceee72979d78998e57ec318ec2b1e53ecc63ea331a8847c5b4946258e
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\dll-inject\index.js
        • Size 117B
        • SHA256 133f4238f4ab150eabfa825ca61edbb71624f7c1cbce734fd6409ed097d8631d
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\dll-inject\package.json
        • Size 485B
        • SHA256 5a99f608e4cdb8ce97b10d93832acdbef2d37f7bb57873f5dbb2f05a4bd43ab4
        • MD5 SHA1 SHA512 TLSH

        testdll.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\dll-inject\testdll.dll
        • Size 56KB
        • SHA256 8679050123315f813cb95262a7d4b5bf37230fe9d29d62131103172c33bcee92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\LICENSE
        • Size 1KB
        • SHA256 52a9fa3ed8ac31d36bc1849d394fa2daf5c6c0492fb12a3344ea8e2e358690e2
        • MD5 SHA1 SHA512 TLSH

        StormLib.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\dist\StormLib.dll
        • Size 511KB
        • SHA256 4a0ee9aa632dedaa8cdc748c1d3b9a0f3751bceeff399c3601f784962ea277b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        enums.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\dist\enums.js
        • Size 9KB
        • SHA256 16cf8030e9b193d7d37952be096b453408730dc85a1b07e5ed54fb646ca8bb21
        • MD5 SHA1 SHA512 SSDEEP TLSH

        stormlib.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\dist\stormlib.node
        • Size 560KB
        • SHA256 e7bb42674cd890699fd68ccf6889c9414c98659b00a590a6b1be6f53824acc71
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StormLib.lib

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\StormLib.lib
        • Size 12KB
        • SHA256 e948326077b0fd8a010fe46a1cf6fd87b4340de61914154c9fb5ddd3f135a4d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StormLibRAS.lib

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\StormLibRAS.lib
        • Size 2.9MB
        • SHA256 9f64715368e7a74cc7e7b2bfe7c93eb348bd82205bc953502e7103e7060b0e2d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        FileStream.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\FileStream.h
        • Size 9KB
        • SHA256 8fc7d1d071cdacd9ca0387e4ae656f64c642dd7ad5bf0758eb1b53f238d1ceae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StormCommon.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\StormCommon.h
        • Size 17KB
        • SHA256 a7abd851c828c4ae3d3837b857fa83b72560450c3dc697e1c808138ee05f6b69
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StormLib.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\StormLib.h
        • Size 65KB
        • SHA256 c1fb144fb1c14958d2b4b6356a5b831fc6335de4195d283c60e55e27fa501948
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StormPort.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\StormPort.h
        • Size 13KB
        • SHA256 4cb2ca60fea296c6de397063b7ae03c053aef8cf8d04fc78204c54774858ad11
        • MD5 SHA1 SHA512 SSDEEP TLSH

        adpcm.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\adpcm\adpcm.h
        • Size 1KB
        • SHA256 eff3d3edbcb9f101314f11d9e4dc6f0ef9000013d235a87157ae81085aa4e5fa
        • MD5 SHA1 SHA512 TLSH

        bzlib.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\bzip2\bzlib.h
        • Size 6KB
        • SHA256 ab1b662f8d394feae46b98fc84c6e295d12a931de78a3dd97eed7f25a739e520
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bzlib_private.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\bzip2\bzlib_private.h
        • Size 12KB
        • SHA256 98dfceba98ab8e00708f428c69f2515db1cce075801c0504b135c12241141733
        • MD5 SHA1 SHA512 SSDEEP TLSH

        huff.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\huffman\huff.h
        • Size 5KB
        • SHA256 ed1e6c7e9b2b321750cc0cc80715452ee41a8d2caefddf6b16ab5c3b5f3f2d17
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lookup.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\jenkins\lookup.h
        • Size 465B
        • SHA256 22d971e6926e0705e346a2bd80f18f63336133e6605e0a09bb47bd77db6e7b75
        • MD5 SHA1 SHA512 TLSH

        tomcrypt.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtomcrypt\src\headers\tomcrypt.h
        • Size 2KB
        • SHA256 4664f8ff0a92cf6eb245686cd05fa53156c69a2c43bbd53b096ae4863426cd49
        • MD5 SHA1 SHA512 TLSH

        tomcrypt_argchk.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtomcrypt\src\headers\tomcrypt_argchk.h
        • Size 977B
        • SHA256 355fa26573603585d1eead440e5ff5b132c095e967fdf918b7c9a953d34544d0
        • MD5 SHA1 SHA512 TLSH

        tomcrypt_cfg.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtomcrypt\src\headers\tomcrypt_cfg.h
        • Size 3KB
        • SHA256 040b302e5382a8f0d3e1adda209c79d4cc132f4db6d0d6da7afa061431229b7d
        • MD5 SHA1 SHA512 TLSH

        tomcrypt_cipher.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtomcrypt\src\headers\tomcrypt_cipher.h
        • Size 30KB
        • SHA256 9527568d1e40e1538e532787bc0f276b47568cf972a9bb71d2ba92b3c573f739
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tomcrypt_custom.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtomcrypt\src\headers\tomcrypt_custom.h
        • Size 8KB
        • SHA256 b058bd362d2ee1b82de4061a27e990d06202d6039cb6fa949bc79c10644036e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tomcrypt_hash.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtomcrypt\src\headers\tomcrypt_hash.h
        • Size 12KB
        • SHA256 b010db3e104914c5211c8d19d6ab015806fd88fa56851b089409c3f6fed0eae2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tomcrypt_mac.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtomcrypt\src\headers\tomcrypt_mac.h
        • Size 14KB
        • SHA256 e96e56d7248c6894a7088bd710bcb873eda3f69b1785571ba1f123b3c2626ec1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tomcrypt_macros.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtomcrypt\src\headers\tomcrypt_macros.h
        • Size 14KB
        • SHA256 4f9f64129e09237ce1e721c6c5ba3fb984dbb081d5579bb59e9a96c8512a8666
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tomcrypt_math.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtomcrypt\src\headers\tomcrypt_math.h
        • Size 16KB
        • SHA256 69d4fa003a3fe35075b8f2fba366dac731ba58d0de6be04b63072a9341a77e97
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tomcrypt_misc.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtomcrypt\src\headers\tomcrypt_misc.h
        • Size 691B
        • SHA256 bc266f1f51208715f6b4b672db0d2ea561678e341ffedf09531aed9526c51f75
        • MD5 SHA1 SHA512 TLSH

        tomcrypt_pk.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtomcrypt\src\headers\tomcrypt_pk.h
        • Size 20KB
        • SHA256 f6e8cc29bcb2b8eb52ea2df7cd105efb33fec96f800bced6d93be650b7ab5b98
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tomcrypt_pkcs.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtomcrypt\src\headers\tomcrypt_pkcs.h
        • Size 3KB
        • SHA256 51493eb0447f97e06b9253ee224a4c6fb0e185cf71137bd3698200c6566c4213
        • MD5 SHA1 SHA512 TLSH

        tomcrypt_prng.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtomcrypt\src\headers\tomcrypt_prng.h
        • Size 7KB
        • SHA256 91406a5d20cd557127bb8dc970d2e4765585bedd3bb123f585127a0371aced66
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tommath.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtommath\tommath.h
        • Size 16KB
        • SHA256 6471346574ed30cf616847718378c983919fd23b1f5d7764e374677fd6242033
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tommath_class.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtommath\tommath_class.h
        • Size 20KB
        • SHA256 2e3868bbb119d2591dadbb238d0f3ef7c03c6548f96ff121d0320c9bec286d46
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tommath_superclass.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\libtommath\tommath_superclass.h
        • Size 2KB
        • SHA256 2b3e03917215de708e5cb65df737cb8c8b5022db47663ddece5d18db11790e97
        • MD5 SHA1 SHA512 TLSH

        LzFind.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\lzma\C\LzFind.h
        • Size 3KB
        • SHA256 f327076bf6f12d403bf88248a639fd88d57fec662b449b87891cb933f28bfc95
        • MD5 SHA1 SHA512 TLSH

        LzFindMt.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\lzma\C\LzFindMt.h
        • Size 2KB
        • SHA256 d7f07e1204a962e312f34c8d8f8bd04978dceec485d6fcdd331017997988d30c
        • MD5 SHA1 SHA512 TLSH

        LzHash.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\lzma\C\LzHash.h
        • Size 1KB
        • SHA256 8564e1179271e32d111b7a7dcbf61419db9fdbeb79a738abbcbca09e909f589e
        • MD5 SHA1 SHA512 TLSH

        LzmaDec.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\lzma\C\LzmaDec.h
        • Size 6KB
        • SHA256 1a7586f7cf4e226d03384d06c14a37f8e7666556f968102679c06cf877217de7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LzmaEnc.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\lzma\C\LzmaEnc.h
        • Size 2KB
        • SHA256 f862a31bd386335f9e22415a96cd264e04b5f4c616bc0d2de01e528a9d48304b
        • MD5 SHA1 SHA512 TLSH

        Threads.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\lzma\C\Threads.h
        • Size 1KB
        • SHA256 7bf59afea71a1801a09cac6298ddb793b8448e74bc3fb7ff35c874c8c85b2d23
        • MD5 SHA1 SHA512 TLSH

        Types.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\lzma\C\Types.h
        • Size 4KB
        • SHA256 8d0afbc8056a174daea32ae48d19f3840ce3dd3bcb651386f5b51df51fcfc7a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pklib.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\pklib\pklib.h
        • Size 7KB
        • SHA256 472487daacca55f61fb802b27f2018dfa528e75b936f16a1f20fc59b5b25cf1c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resource.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\resource.h
        • Size 389B
        • SHA256 c42bea12ee800b1a9775c676ea59521f107f3250d11108aba2147ec971848ef3
        • MD5 SHA1 SHA512 TLSH

        sparse.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\sparse\sparse.h
        • Size 982B
        • SHA256 3dbcc253041d34e4467a714d220a7526fa309567a758e2b525ba915b9e1f73bb
        • MD5 SHA1 SHA512 TLSH

        crc32.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\zlib\crc32.h
        • Size 29KB
        • SHA256 b8252ca25db989e06910c09b031a328a18ab9c32fb3ab6e6f5c98c0e2b0089cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        deflate.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\zlib\deflate.h
        • Size 12KB
        • SHA256 96399c109707e12ced9f25d088c1bf6edb0435453e32ae962de5808e1b948270
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gzguts.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\zlib\gzguts.h
        • Size 6KB
        • SHA256 1ef4741cf10441feeca5c8dde2b6c754f0cbd96fcae697d54a604757289a5e9b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        inffast.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\zlib\inffast.h
        • Size 427B
        • SHA256 7d8c1c873ce9bc346ad6005bb9d75cce5c6352aaf7395385be216a9452a34908
        • MD5 SHA1 SHA512 TLSH

        inffixed.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\zlib\inffixed.h
        • Size 6KB
        • SHA256 88a340c8e628d56682a99c3a9a38e44fafeb8b4c609e0df85ea17c66011e0f42
        • MD5 SHA1 SHA512 SSDEEP TLSH

        inflate.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\zlib\inflate.h
        • Size 6KB
        • SHA256 978bf9a992af3c88ca2a5c6fd2a178279ca2d62cbfe1736bc260f7e2a6692ba9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        inftrees.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\zlib\inftrees.h
        • Size 2KB
        • SHA256 98c72fc56f2d6a0bee8a75a9b8d1d883a7b95f70e1e613ed297041a9e0922fb7
        • MD5 SHA1 SHA512 TLSH

        trees.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\zlib\trees.h
        • Size 8KB
        • SHA256 bb0a9d3ca88ee00c81adb7c636e73b97085f6ef1b52d6d58edbe2b6dc3adeb4d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zconf.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\zlib\zconf.h
        • Size 13KB
        • SHA256 78eede3c265117bc8a1b0cb042e2ba8333fdbba6b78eb25094eb52b1fdc04bed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zlib.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\zlib\zlib.h
        • Size 77KB
        • SHA256 8d9049f1317cbb45e7da3a19752dd01e8c03561637b70afc0b2da9aabc5f12d5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zutil.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\lib\src\zlib\zutil.h
        • Size 6KB
        • SHA256 65c868c99d5fcf336b9bf2110bbfc21d51ea972fbec613befc91e0b62d62e8f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\package.json
        • Size 551B
        • SHA256 9566e747934c80758a3781fe4ca56631c9e8d7975e72f543d169ade0c0030402
        • MD5 SHA1 SHA512 TLSH

        compile.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\scripts\compile.js
        • Size 2KB
        • SHA256 583c2aca80cc5d767fa181616d927f2846a2840491f131ec9e6bae99d6dbad1d
        • MD5 SHA1 SHA512 TLSH

        post-build.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\scripts\post-build.js
        • Size 326B
        • SHA256 47b4b607094f4d5112d34c958ca8db713b7bc9ca64eaafe7d6cec984afc2c2ee
        • MD5 SHA1 SHA512 TLSH

        pre-configure.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\scripts\pre-configure.js
        • Size 57B
        • SHA256 e08730e8fad3fa8c09fcf44dfc955add866d5578080ec4f0e9fc0803e2284731
        • MD5 SHA1 SHA512 TLSH

        enums.ts

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\src\enums.ts
        • Size 6KB
        • SHA256 6f57ee7145b34ee0cf8d1aedaf25296d44cd206e5093a9ebe166016dad69ca2c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tsconfig.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\app.asar.unpacked\node_modules\stormlib-node\tsconfig.json
        • Size 155B
        • SHA256 464d121069c733f9432e22a8c2b4c3624b78c09d90f85067dfcafc2db4b7d4dd
        • MD5 SHA1 SHA512 TLSH

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\snapshot_blob.bin
        • Size 261KB
        • SHA256 721b2fe7c122bca5b8b7819cc7869c33a35384eb79da03a263dc792ce3862e86
        • MD5 SHA1 SHA512 SSDEEP TLSH

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\v8_context_snapshot.bin
        • Size 611KB
        • SHA256 6e35a8d61b211828e1d3669702d6e96770d60a07085c983a5939921ca6341319
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\vk_swiftshader.dll
        • Size 4.9MB
        • SHA256 67b03090fabdf153b25d1ccbbdcc8bc3d961e024803f43118da738fe672efdae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader_icd.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\7z-out\vulkan-1.dll
        • Size 931KB
        • SHA256 0920e97ea45d46eaa02477d671384d07da5fcc9d98a9044db91a81a4fa5d5868
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UAC.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\UAC.dll
        • Size 14KB
        • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WinShell.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH

        nsDialogs.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsExec.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\nsExec.dll
        • Size 6KB
        • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsis7z.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsc174D.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH