Analysis

  • max time kernel
    151s
  • max time network
    121s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260617-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260617-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    20/06/2026, 02:32

General

  • Target
    DeepCodeGUI.exe
  • Size 90.4MB
  • Sample260620-c1f7mad15x
  • SHA256 fdb1befcdd8b3535f525ced75a27135a67f2085860c9d2a26a789cc3963570e1
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 42 IoCs
  • Drops file in Windows directory 1 IoCs
  • Detects Pyinstaller 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DeepCodeGUI.exe
    "C:\Users\Admin\AppData\Local\Temp\DeepCodeGUI.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4576
    • C:\Users\Admin\AppData\Local\Temp\3FMTmAT3HIOYz5GsUsKVHVCOa1O\DeepCode.exe
      C:\Users\Admin\AppData\Local\Temp\3FMTmAT3HIOYz5GsUsKVHVCOa1O\DeepCode.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in Windows directory
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2924
      • C:\Users\Admin\AppData\Local\Temp\3FMTmAT3HIOYz5GsUsKVHVCOa1O\DeepCode.exe
        "C:\Users\Admin\AppData\Local\Temp\3FMTmAT3HIOYz5GsUsKVHVCOa1O\DeepCode.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\deepcode-gui" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1724,i,3294653143361628776,9791210864107936387,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1716 /prefetch:2
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1416
      • C:\Users\Admin\AppData\Local\Temp\3FMTmAT3HIOYz5GsUsKVHVCOa1O\resources\bridge\bridge.exe
        C:\Users\Admin\AppData\Local\Temp\3FMTmAT3HIOYz5GsUsKVHVCOa1O\resources\bridge\bridge.exe
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:1344
        • C:\Users\Admin\AppData\Local\Temp\3FMTmAT3HIOYz5GsUsKVHVCOa1O\resources\bridge\bridge.exe
          C:\Users\Admin\AppData\Local\Temp\3FMTmAT3HIOYz5GsUsKVHVCOa1O\resources\bridge\bridge.exe
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1400
      • C:\Users\Admin\AppData\Local\Temp\3FMTmAT3HIOYz5GsUsKVHVCOa1O\DeepCode.exe
        "C:\Users\Admin\AppData\Local\Temp\3FMTmAT3HIOYz5GsUsKVHVCOa1O\DeepCode.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\deepcode-gui" --field-trial-handle=2120,i,3294653143361628776,9791210864107936387,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2084 /prefetch:11
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:6056
      • C:\Users\Admin\AppData\Local\Temp\3FMTmAT3HIOYz5GsUsKVHVCOa1O\DeepCode.exe
        "C:\Users\Admin\AppData\Local\Temp\3FMTmAT3HIOYz5GsUsKVHVCOa1O\DeepCode.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\deepcode-gui" --app-path="C:\Users\Admin\AppData\Local\Temp\3FMTmAT3HIOYz5GsUsKVHVCOa1O\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2380,i,3294653143361628776,9791210864107936387,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2376 /prefetch:1
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:6076
      • C:\Users\Admin\AppData\Local\Temp\3FMTmAT3HIOYz5GsUsKVHVCOa1O\DeepCode.exe
        "C:\Users\Admin\AppData\Local\Temp\3FMTmAT3HIOYz5GsUsKVHVCOa1O\DeepCode.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\deepcode-gui" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3224,i,3294653143361628776,9791210864107936387,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3232 /prefetch:10
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        PID:4444

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\VCRUNTIME140.dll
        • Size 91KB
        • SHA256 8ee6b49830436ff3bec9ba89213395427b5535813930489f118721fd3d2d942c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _bz2.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\_bz2.pyd
        • Size 84KB
        • SHA256 00d2f34aee55b473bcc11838469b94a62d01fdf4465e19f7d7388c79132f019e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _ctypes.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\_ctypes.pyd
        • Size 124KB
        • SHA256 a79cf8259890d5843cf8eaf29db8dbd4bfabed50f4d859756f93ac2b30617023
        • MD5 SHA1 SHA512 SSDEEP TLSH

        _lzma.pyd

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\_lzma.pyd
        • Size 159KB
        • SHA256 185d407bcca7399c458133f2ce1efa938352b8093b2de040c91c3c3088ab173f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-console-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-console-l1-1-0.dll
        • Size 21KB
        • SHA256 88ace577a9c51061cb7d1a36babbbefa48212fadc838ffde98fdfff60de18386
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-datetime-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-datetime-l1-1-0.dll
        • Size 21KB
        • SHA256 1bd81dfd19204b44662510d9054852fb77c9f25c1088d647881c9b976cc16818
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-debug-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-debug-l1-1-0.dll
        • Size 21KB
        • SHA256 591358eb4d1531e9563ee0813e4301c552ce364c912ce684d16576eabf195dc3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-errorhandling-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 21KB
        • SHA256 d56ce7b1cd76108ad6c137326ec694a14c99d48c3d7b0ace8c3ff4d9bcee3ce8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-fibers-l1-1-0.dll
        • Size 21KB
        • SHA256 91d249d7bc0e38ef6bcb17158b1fdc6dd8888dc086615c9b8b750b87e52a5fb3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-fibers-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-fibers-l1-1-1.dll
        • Size 21KB
        • SHA256 fc9d86cec621383eab636ebc87ddd3f5c19a3cb2a33d97be112c051d0b275429
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-file-l1-1-0.dll
        • Size 25KB
        • SHA256 1ca895aba4e7435563a6b43e85eba67a0f8c74aa6a6a94d0fc48fa35535e2585
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-file-l1-2-0.dll
        • Size 21KB
        • SHA256 4cadbc0c39da7c6722206fdcebd670abe5b8d261e7b041dd94f9397a89d1990d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-file-l2-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-file-l2-1-0.dll
        • Size 21KB
        • SHA256 93c624b366ba16c643fc8933070a26f03b073ad0cf7f80173266d67536c61989
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-handle-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-handle-l1-1-0.dll
        • Size 21KB
        • SHA256 39095f59c41d76ec81bb2723d646fde4c148e7cc3402f4980d2ade95cb9c84f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-heap-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-heap-l1-1-0.dll
        • Size 21KB
        • SHA256 8f105771b236dbcb859de271f0a6822ce1cb79c36988dd42c9e3f6f55c5f7eb9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-interlocked-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 21KB
        • SHA256 53b25e753ca785bf8b695d89dde5818a318890211dc992a89146f16658f0b606
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-kernel32-legacy-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-kernel32-legacy-l1-1-1.dll
        • Size 21KB
        • SHA256 a9b13a1cd1b8c19b0c6b4afcd5bb0dd29c0e2288231ac9e6db8510094ce68ba6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-libraryloader-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 21KB
        • SHA256 7f39ba298b41e4963047341288cab36b6a241835ee11ba4ad70f44dacd40906c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-localization-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-localization-l1-2-0.dll
        • Size 21KB
        • SHA256 6ee44dd0d8510dc024c9f7c79b1b9fa88c987b26b6beb6653ddd11751c34e5dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-memory-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-memory-l1-1-0.dll
        • Size 21KB
        • SHA256 0512a35316ec9180437f86696a84c5c06a7e4e82e050055a656e5bf9fca206f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-namedpipe-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 21KB
        • SHA256 c05f1fffe3b5a2738ea54ce9485cca026fb9635f982626fba1e1dcc531897273
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processenvironment-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 21KB
        • SHA256 c4eca98c3c67b6395d5b005b00ac1eb0318b86b23aa71035a44c2b1602befba9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 21KB
        • SHA256 5ccb89e93d67bc3288d4e84649c5346e66e15e3d7cd65d989daf3f4cb584be9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-processthreads-l1-1-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 21KB
        • SHA256 4ad565a8ba3ef0ea8ab87221ad11f83ee0bc844ce236607958406663b407333e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-profile-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-profile-l1-1-0.dll
        • Size 21KB
        • SHA256 7809160932f44e59b021699f5bc68799eb7293ee1fa926d6fcca3c3445302e61
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-rtlsupport-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 21KB
        • SHA256 9dc1e91e71c7c054854bd1487cb4e6946d82c9f463430f1c4e8d1471005172b1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-string-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-string-l1-1-0.dll
        • Size 21KB
        • SHA256 60fc31d2a0c634412f529dba76af3b9bf991352877c6dae528186d3935704cfd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-synch-l1-1-0.dll
        • Size 21KB
        • SHA256 3a72b4f29f39a265d32ad12f0ce15dbf60129c840e10d84d427829ede45e78ad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-synch-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-synch-l1-2-0.dll
        • Size 21KB
        • SHA256 efc1e4460984a73cf47a3def033af1c8f3b1dbc1a56cd27781d3aacf3e3330cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 21KB
        • SHA256 b203d862ddef1dd62bf623fc866c7f7a9c317c1c2ae30d1f52cb41f955b5698e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-sysinfo-l1-2-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-sysinfo-l1-2-0.dll
        • Size 21KB
        • SHA256 2703635d835396afd0f138d7c73751afe7e33a24f4225d08c1690b0a371932c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-timezone-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-timezone-l1-1-0.dll
        • Size 21KB
        • SHA256 33f4fddc181066fce06b2227bded813f95e94ed1f3d785e982c6b6b56c510c57
        • MD5 SHA1 SHA512 SSDEEP TLSH

        api-ms-win-core-util-l1-1-0.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\api-ms-win-core-util-l1-1-0.dll
        • Size 21KB
        • SHA256 6eda016742a6171205a387a14b3c0b331841567740376f56768f8c151724207d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base_library.zip

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\base_library.zip
        • Size 826KB
        • SHA256 f957fba7801142e7d6917c04f56824843fdfda9ce69fc3bdecfd386bf5d4947c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libffi-7.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP TLSH

        INSTALLER

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\pyreadline3-3.5.4.dist-info\INSTALLER
        • Size 4B
        • SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
        • MD5 SHA1 SHA512

        python3.DLL

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\python3.DLL
        • Size 58KB
        • SHA256 962dcad9911d6959d7320b2214ade633b53e5555e66d7e82f3bbcc78e2148e0e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python39.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\python39.dll
        • Size 4.3MB
        • SHA256 3761c232e151e9ceaf6c7d37b68da3df1962e3106e425cc3937d1f60170f3718
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Conakry

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\Africa\Conakry
        • Size 130B
        • SHA256 f3e7fcaa0e9840ff4169d3567d8fb5926644848f4963d7acf92320843c5d486e
        • MD5 SHA1 SHA512 TLSH

        Djibouti

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\Africa\Djibouti
        • Size 191B
        • SHA256 0783854f52c33ada6b6d2a5d867662f0ae8e15238d2fce7b9ada4f4d319eb466
        • MD5 SHA1 SHA512 TLSH

        Kigali

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\Africa\Kigali
        • Size 131B
        • SHA256 910c97c091cd34ae7427c83226234ce7b4f2f425c5822d6669c24be62010a792
        • MD5 SHA1 SHA512 TLSH

        Lagos

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\Africa\Lagos
        • Size 180B
        • SHA256 e5ef1288571cc56c5276ca966e1c8a675c6747726d758ecafe7effce6eca7be4
        • MD5 SHA1 SHA512 TLSH

        Curacao

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\America\Curacao
        • Size 177B
        • SHA256 abbe8628dd5487c889db816ce3a5077bbb47f6bafafeb9411d92d6ef2f70ce8d
        • MD5 SHA1 SHA512 TLSH

        Toronto

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\America\Toronto
        • Size 1KB
        • SHA256 815ab4db7a1b1292867d2f924b718e1bba32455ce9f92205db2feb65029c6761
        • MD5 SHA1 SHA512 TLSH

        EST

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\EST
        • Size 149B
        • SHA256 a78d73067ba3cbd94f8a23dfdd6aa8b68cb33b18484bc17b4e20ea1aec2f0a81
        • MD5 SHA1 SHA512 TLSH

        Greenwich

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\Etc\Greenwich
        • Size 111B
        • SHA256 dc4a07571b10884e4f4f3450c9d1a1cbf4c03ef53d06ed2e4ea152d9eba5d5d7
        • MD5 SHA1 SHA512

        London

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\Europe\London
        • Size 1KB
        • SHA256 676541f0b8ad457c744c093f807589adcad909e3fd03f901787d08786eedbd33
        • MD5 SHA1 SHA512 TLSH

        Oslo

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\Europe\Oslo
        • Size 705B
        • SHA256 a7fd9932d785d4d690900b834c3563c1810c1cf2e01711bcc0926af6c0767cb7
        • MD5 SHA1 SHA512 TLSH

        Skopje

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\Europe\Skopje
        • Size 478B
        • SHA256 a8c964f3eaa7a209d9a650fb16c68c003e9a5fc62ffbbb10fa849d54fb3662d6
        • MD5 SHA1 SHA512 TLSH

        MET

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\MET
        • Size 1KB
        • SHA256 b10f9542a8509f0a63ebca78e3d80432dd86b8ea296400280febd9cfa76e8288
        • MD5 SHA1 SHA512 TLSH

        PRC

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\PRC
        • Size 393B
        • SHA256 bf8b7ed82fe6e63e6d98f8cea934eeac901cd16aba85eb5755ce3f8b4289ea8a
        • MD5 SHA1 SHA512 TLSH

        Wallis

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\Pacific\Wallis
        • Size 134B
        • SHA256 09035620bd831697a3e9072f82de34cfca5e912d50c8da547739aa2f28fb6d8e
        • MD5 SHA1 SHA512 TLSH

        Yap

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\Pacific\Yap
        • Size 154B
        • SHA256 683001055b6ef9dc9d88734e0eddd1782f1c3643b7c13a75e9cf8e9052006e19
        • MD5 SHA1 SHA512 TLSH

        UCT

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\UCT
        • Size 111B
        • SHA256 fddce1e648a1732ac29afd9a16151b2973cdf082e7ec0c690f7e42be6b598b93
        • MD5 SHA1 SHA512

        Mountain

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\tzdata\zoneinfo\US\Mountain
        • Size 1KB
        • SHA256 9bb703920eca4b6119e81a105583a4f6ca220651f13b418479ab7cd56c413f3e
        • MD5 SHA1 SHA512 TLSH

        ucrtbase.dll

        • Path C:\Users\Admin\AppData\Local\Temp\_MEI13442\ucrtbase.dll
        • Size 1.3MB
        • SHA256 2e5fb14b7bf8540278f3614a12f0226e56a7cc9e64b81cbd976c6fcf2f71cbfb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE.electron.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH

        LICENSES.chromium.html

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\LICENSES.chromium.html
        • Size 9.0MB
        • SHA256 dc2878d9bf6ef5fca45737536272a7a1877e0c6f89cb9578cb0f956781102986
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\chrome_100_percent.pak
        • Size 148KB
        • SHA256 7dd5485def22a53c0635efdf8ae900f147ec8c8a22b9ed71c24668075dd605d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\chrome_200_percent.pak
        • Size 223KB
        • SHA256 2408969599d3953aae2fb36008e4d0711e30d0bc86fb4d03f8b0577d43c649fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.7MB
        • SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\ffmpeg.dll
        • Size 2.6MB
        • SHA256 113ccc8e701157d0d59283baa5dc1fd3b0eae2571fd825084d7a4d58697a5ec2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\icudtl.dat
        • Size 10.0MB
        • SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\libEGL.dll
        • Size 470KB
        • SHA256 01b8a8c2875ecb9979de339500ce0e0b7ecc3c5387053ce27bea51e6a09e2d72
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\libGLESv2.dll
        • Size 7.7MB
        • SHA256 fb6ea924fbb9417e4695ce414cdcbc299f13451dbedd2d9adb55479bf1cbf57f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        af.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\af.pak
        • Size 494KB
        • SHA256 e2470090a09ca500679e68bb5e3b1acc35a5873fea4f93af25a23c82122f2c13
        • MD5 SHA1 SHA512 SSDEEP TLSH

        am.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\am.pak
        • Size 800KB
        • SHA256 4e15946e86a578eeff41feda808bb291d81e240fbdfc96cbe2efe692ad35eef5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ar.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\ar.pak
        • Size 874KB
        • SHA256 5cc02570e5f61cbca791309985df3a29584e41583b3344f1d9fb6b04ce423e6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\bg.pak
        • Size 913KB
        • SHA256 97ef7984074775282b68dca5d5a469efdb2b22474ee6669fdfb5197d3f1b3768
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\bn.pak
        • Size 1.1MB
        • SHA256 1aba82aee8c985e5e370e7cf2b35c9ec20cbe5174db5fcb54ec7d19ec5d79587
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\ca.pak
        • Size 556KB
        • SHA256 b3d5dfae25427596b1f14a8e13d6bcb58532c82554229c2367779ff5c42b28bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\cs.pak
        • Size 572KB
        • SHA256 7d7b701ce510b2e4a18e957e500086db590aad8bf5acd37f82263a676f0b556c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\da.pak
        • Size 518KB
        • SHA256 3430c0f1946901dfa24190ca3989f72171ec564bc7c523853e6a1f531b61b5ee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\de.pak
        • Size 553KB
        • SHA256 662496eff49febbe49f0a03cf2c51acaa743cb2237de3c41014556e16f3d8e2b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\el.pak
        • Size 1001KB
        • SHA256 162e51bc7d682e223e498f4ff8c81f019d136d857bd25a1c982d4a1084a8c840
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-GB.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\en-GB.pak
        • Size 450KB
        • SHA256 7df934906a61c0ae7a952f9ed058f4a06cd3989663a7d9f50afc3c9f830135bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\en-US.pak
        • Size 454KB
        • SHA256 41123d72bd8e289e85bd35227aabb4cc61fe1de02b5cd7a7834e5ec200bc2078
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es-419.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\es-419.pak
        • Size 547KB
        • SHA256 ec922f8ca16b7e7642fc73369ba7b75ec950cafb1dcadc6c88426c034382d483
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\es.pak
        • Size 547KB
        • SHA256 0385e6776de5a0d8a3b30b7bad44308ac4cb04e2bcebd573d3c7938b68036573
        • MD5 SHA1 SHA512 SSDEEP TLSH

        et.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\et.pak
        • Size 497KB
        • SHA256 ba4ec85d2306a1f1f178a017fef4d340b77b33e10bbee07bd359a8e0ff8ea461
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fa.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\fa.pak
        • Size 813KB
        • SHA256 f1a7351bf0d8cad475d2761b9edf970c3098836e38aa98106a5e04a41002b7c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\fi.pak
        • Size 508KB
        • SHA256 11b0b9b0f74d01f16db7aa49be9dceeb55fde9da56f17419c4bca159cdcae274
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fil.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\fil.pak
        • Size 573KB
        • SHA256 d7fdc7fd08dcc421bc8aaae3fdc72599c60a3b96f05989a3e46736f0de06e745
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\fr.pak
        • Size 591KB
        • SHA256 1f6cc56e04bcbd6b6ecbe500bcb0a5702551ec80d79e624642d0c7d9758d4424
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\gu.pak
        • Size 1.1MB
        • SHA256 087e99953eef9b5fd736e3dbd98d702fdb01dc614593a4c575cb619159688118
        • MD5 SHA1 SHA512 SSDEEP TLSH

        he.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\he.pak
        • Size 713KB
        • SHA256 20b1c80f8b2bd5130a1fb372814fb9c9ceac15305da3da0cb29923960a94a934
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\hi.pak
        • Size 1.2MB
        • SHA256 9c6d8d93278a6e375405142df9829adefbcc8ae9797a4f589591b9784b2b71c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\hr.pak
        • Size 551KB
        • SHA256 afed35643df24709c8c5cc9b8158b3d9a2266fbfeed132e98ff254ced4086c5f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\hu.pak
        • Size 595KB
        • SHA256 b4e6a1135de8bdc42c04f4db4eb1ce48256f18eb46a5146a21010b6165a90e7a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        id.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\id.pak
        • Size 490KB
        • SHA256 a21f9474a19fe2d7f26c59f5ba8d6e72801a8a057b7dbcb8b3f96471043d9059
        • MD5 SHA1 SHA512 SSDEEP TLSH

        it.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\it.pak
        • Size 539KB
        • SHA256 33652aae78a486dc3ce4e5affd1b7f72e1248f6f9f3e62188afe3b5d73bd148e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ja.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\ja.pak
        • Size 659KB
        • SHA256 c5692ca739c31569ae2431fd58f1028e6c8c01af278b76656ee0bb65b79e9985
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\kn.pak
        • Size 1.3MB
        • SHA256 a6ecf1dfe4d99f6ba0926c696b5b23b77d234fa8fd03da9825b074ecc640d508
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ko.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\ko.pak
        • Size 557KB
        • SHA256 3fa72d61a997c36f9c093f769f4bba60b290d1fbcb71d5544f85e8e1efe51d07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lt.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\lt.pak
        • Size 597KB
        • SHA256 a1257d10e673311747363e6929832e70f36668b1fc0d6a5ddd550fe88007aa58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\lv.pak
        • Size 596KB
        • SHA256 33fdf706f6d3f06b485c5115a7c73a571296dac41c582fc9d0dbb371d86e8653
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ml.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\ml.pak
        • Size 1.3MB
        • SHA256 87384db1ddcac012b0b40ec89daf47ebbbcf1497705f023a6983fb2470e4abd6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\mr.pak
        • Size 1.1MB
        • SHA256 039f4e0176c38867fef57482825d043fa63bf1356c85eab0fc665f118db125e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ms.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\ms.pak
        • Size 514KB
        • SHA256 2f0c83b5b3bff8f624d78e0670a31c509e7f1d5330f72aaede471b2e97c956e2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nb.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\nb.pak
        • Size 499KB
        • SHA256 887a0278971d6ba61e2f24c62029a3087a46c4962c4357412c28ede12ed6da15
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\nl.pak
        • Size 516KB
        • SHA256 619c61701b3a142733d23ad8c7117bc013867a842d3d1d572faa56895ad8257e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\pl.pak
        • Size 574KB
        • SHA256 f2a7dcb69a433c2a898866c555b82c26e3515c089f500e7748b9b11ec3047786
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-BR.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\pt-BR.pak
        • Size 540KB
        • SHA256 5ff219be32f9178fee40e8966ac5deff2be1f2ff259a66cb9cdce81c2e90a7e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-PT.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\pt-PT.pak
        • Size 543KB
        • SHA256 02ea290fac25b414a1d4ed78cdc159cf6c73fe5350824c2f36f032e426a23364
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\ro.pak
        • Size 562KB
        • SHA256 655c175903a791d0ff56264a487c53f7bd09ed037cf04cfa6e79eb8be5b677e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\ru.pak
        • Size 924KB
        • SHA256 4babe5f20caafca33867ee263aa9dd55ed271704a062e4372fdd133eb359a558
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\sk.pak
        • Size 580KB
        • SHA256 89f984a67cea3997c704005fbfbacd3f6f5652248626945c2ab1c3bcf24e6623
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\sl.pak
        • Size 556KB
        • SHA256 458b15bf249c1e6fe9843725c42443274ef6e09dcb15f5288c916c0561aefc47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\sr.pak
        • Size 859KB
        • SHA256 4cea4c83b5e887463dadbf470a9953b8175149f31fd07b83406a6fc59acfde41
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\sv.pak
        • Size 501KB
        • SHA256 105460cb717104d82f99cf8c5e2c51ff252211a605bd1c98bf75981f100d619e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sw.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\sw.pak
        • Size 529KB
        • SHA256 f0fccf2e3ad332846736d816e254028569f5f84918573872442987a8bc9bba58
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ta.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\ta.pak
        • Size 1.3MB
        • SHA256 1cebac8d758298ed2763e62b9bdfb17351831e691ff3e1ba85252c9a66d66242
        • MD5 SHA1 SHA512 SSDEEP TLSH

        te.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\te.pak
        • Size 1.2MB
        • SHA256 8264244c6de861817f5b19cef282844a18ed8cb7d4e059451489652749fe931e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\th.pak
        • Size 1.0MB
        • SHA256 647ad394e92e7610bd0f6c4e08d28748408fcd5a816a35e4622ea7f71cfa7a9d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\tr.pak
        • Size 539KB
        • SHA256 f58ed19be62706fb4fd797a6bfd3af5c6ad4b39aef994a577cd28968fcac0291
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\uk.pak
        • Size 923KB
        • SHA256 13e40208e2c9f4f4b83dcf422610dc82314a8f99ba50acdbd286c508f92eb232
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\ur.pak
        • Size 808KB
        • SHA256 60310f9a3457fae0395b447a30646211ef4160ba84bd7c36d291af4c8ec2b79a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\vi.pak
        • Size 639KB
        • SHA256 fb9463d5655e73fa69cace9800d95f8cd077ee9284fef3bfe162d2bfe220c257
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\zh-CN.pak
        • Size 460KB
        • SHA256 f0c0ba53c954325b3bbefb333ba23f7fb40a7a4e506043e9f7886089f611943b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-TW.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\locales\zh-TW.pak
        • Size 455KB
        • SHA256 d4033cb3264c7c4cd2636ea2a202421650c449e5bfb10f29949e4c44e91ca93b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\resources.pak
        • Size 5.3MB
        • SHA256 a5908171bfbb738ac015e7c9903c838d93359ed12c3b7d86545514dc1f0e9d62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app.asar

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\resources\app.asar
        • Size 4.9MB
        • SHA256 6e231470528c23b9b5da7462a26108257ccf59e9ca6c6bab43cbfa951f38c5bb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bridge.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\resources\bridge\bridge.exe
        • Size 22.7MB
        • SHA256 9e94e1973dc7451f4eb03ad7306490b25b537fc74467662b071202de1f323c29
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\snapshot_blob.bin
        • Size 302KB
        • SHA256 22a46de643045805a3e588f9a18ebaa377f9fba3dee46b2d60f3ae300a09cc4e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\v8_context_snapshot.bin
        • Size 646KB
        • SHA256 a8bd22478c4f85afa836c89d3a7f52c606b17872fbbefce268b499bedede10ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\vk_swiftshader.dll
        • Size 5.2MB
        • SHA256 7005598f9bb8559101458ddaac77e3a23f9876c0a1aaf7136a11f2d1d5173448
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader_icd.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\7z-out\vulkan-1.dll
        • Size 938KB
        • SHA256 45adc3dac19684ed3af159ae3914fbbf2426a879e5a4c1e678e3c9b451fab01a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsis7z.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsnD780.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH

        default.acl

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.acl
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512

        data_1

        • Path C:\Users\Admin\AppData\Roaming\deepcode-gui\DawnWebGPUCache\data_1
        • Size 264KB
        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
        • MD5 SHA1 SHA512 SSDEEP

        data_0

        • Path C:\Users\Admin\AppData\Roaming\deepcode-gui\GPUCache\data_0
        • Size 8KB
        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
        • MD5 SHA1 SHA512 SSDEEP

        data_2

        • Path C:\Users\Admin\AppData\Roaming\deepcode-gui\GPUCache\data_2
        • Size 8KB
        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
        • MD5 SHA1 SHA512 SSDEEP

        data_3

        • Path C:\Users\Admin\AppData\Roaming\deepcode-gui\GPUCache\data_3
        • Size 8KB
        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
        • MD5 SHA1 SHA512 SSDEEP

        Network Persistent State

        • Path C:\Users\Admin\AppData\Roaming\deepcode-gui\Network\Network Persistent State
        • Size 300B
        • SHA256 f43a1b59975e3a71234ecc03cb178bf95e9764d6c27899f36122dad607455194
        • MD5 SHA1 SHA512 TLSH

        Network Persistent State~RFe5a3625.TMP

        • Path C:\Users\Admin\AppData\Roaming\deepcode-gui\Network\Network Persistent State~RFe5a3625.TMP
        • Size 59B
        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
        • MD5 SHA1 SHA512 TLSH

        memory/4444-1319-0x00000208255B0000-0x00000208255B1000-memory.dmp

        memory/4444-1317-0x00000208255B0000-0x00000208255B1000-memory.dmp

        memory/4444-1328-0x00000208255B0000-0x00000208255B1000-memory.dmp

        memory/4444-1324-0x00000208255B0000-0x00000208255B1000-memory.dmp

        memory/4444-1326-0x00000208255B0000-0x00000208255B1000-memory.dmp

        memory/4444-1325-0x00000208255B0000-0x00000208255B1000-memory.dmp

        memory/4444-1323-0x00000208255B0000-0x00000208255B1000-memory.dmp

        memory/4444-1327-0x00000208255B0000-0x00000208255B1000-memory.dmp

        memory/6076-455-0x00007FF9B96C0000-0x00007FF9B96C1000-memory.dmp

        memory/6076-454-0x00007FF9BADA0000-0x00007FF9BADA1000-memory.dmp