Analysis

  • user interaction
    yes
  • max time kernel
    270s
  • max time network
    271s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260618-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260618-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    21/06/2026, 22:13

General

  • Target
    https://www.mediafire.com/file/4606n536cezpl07/Frega+Token+Generator+v2.zip/file
  • Sample260621-148caagw21

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Loads dropped DLL 26 IoCs
  • Drops file in Windows directory 2 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 5 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 16 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 46 IoCs
  • Suspicious use of SendNotifyMessage 16 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://www.mediafire.com/file/4606n536cezpl07/Frega+Token+Generator+v2.zip/file
    1⤵
    • Drops file in Windows directory
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:4832
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x260,0x264,0x268,0x25c,0x288,0x7ffb1a82c188,0x7ffb1a82c194,0x7ffb1a82c1a0
      2⤵
        PID:6040
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1696,i,6233339394631450154,7637066770323809415,262144 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=2288 /prefetch:2
        2⤵
          PID:2696
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1896,i,11837174961523214570,968898078584920722,524288 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=2360 /prefetch:11
          2⤵
          • System Time Discovery
          PID:3096
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2460,i,3720351055032994989,10945140000737585957,524288 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:13
          2⤵
            PID:3512
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3576,i,13307673287153193886,8353691467044006624,2097152 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=3668 /prefetch:1
            2⤵
              PID:4448
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3556,i,16144273729169154820,2830213015127285745,2097152 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=3600 /prefetch:1
              2⤵
                PID:2504
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=5164,i,1230185085341701702,10447068447162028396,2097152 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=5148 /prefetch:1
                2⤵
                  PID:3864
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=5300,i,11765059334629061166,1332455742994875808,2097152 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:1
                  2⤵
                    PID:2364
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5584,i,7166174288551617847,12722304264809844883,2097152 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=5580 /prefetch:1
                    2⤵
                      PID:2224
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5348,i,11784089148385417448,11287828643433868080,524288 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:14
                      2⤵
                        PID:6624
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5116,i,13546459209344897717,8261156807420215349,524288 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=5240 /prefetch:14
                        2⤵
                          PID:3832
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,15968575714879743247,11522790199454956011,524288 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:14
                          2⤵
                            PID:5248
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5804,i,15968575714879743247,11522790199454956011,524288 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=6228 /prefetch:14
                            2⤵
                              PID:2448
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=6156,i,7833531894512962873,14984958213762333071,2097152 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=6508 /prefetch:1
                              2⤵
                                PID:6636
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6356,i,2775368049792476709,7216337381900471656,2097152 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=6668 /prefetch:1
                                2⤵
                                  PID:6272
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --always-read-main-dll --metrics-shmem-handle=6916,i,14035848051136074952,18327584138948010830,2097152 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=6820 /prefetch:1
                                  2⤵
                                    PID:2460
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=7116,i,5028682880399436791,12969746697680076233,2097152 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=7108 /prefetch:1
                                    2⤵
                                      PID:4872
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7136,i,6313611512940854312,1879507363728443522,2097152 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=7188 /prefetch:1
                                      2⤵
                                        PID:1472
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7460,i,15397693684785599650,8825132995674105959,2097152 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=7436 /prefetch:1
                                        2⤵
                                          PID:6408
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=7588,i,2530043585536836450,14487690090800368432,2097152 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=7628 /prefetch:1
                                          2⤵
                                            PID:6816
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --always-read-main-dll --metrics-shmem-handle=7976,i,1633679503872846308,17801017150769369930,2097152 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=7956 /prefetch:1
                                            2⤵
                                              PID:1568
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7892,i,12863482117179303388,7330472108370407945,524288 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=8208 /prefetch:14
                                              2⤵
                                                PID:6652
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=22 --always-read-main-dll --metrics-shmem-handle=8148,i,2025576513624020144,12220148778121619084,2097152 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=8228 /prefetch:1
                                                2⤵
                                                  PID:7044
                                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,2965015892725862180,9366996376427429114,524288 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=7724 /prefetch:14
                                                  2⤵
                                                    PID:7136
                                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7572,i,8144242542641378123,14821924930475581404,524288 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=7640 /prefetch:14
                                                    2⤵
                                                      PID:4996
                                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7736,i,7826666902105458480,111773907480752057,524288 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=7660 /prefetch:14
                                                      2⤵
                                                        PID:4936
                                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6164,i,15154970575652276759,4295492047943060110,524288 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=7636 /prefetch:14
                                                        2⤵
                                                          PID:4116
                                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=27 --always-read-main-dll --metrics-shmem-handle=5256,i,8424847321879890713,6997881192726123020,2097152 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:1
                                                          2⤵
                                                            PID:4240
                                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=8400,i,14135592732889972007,4159361361985885411,524288 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=8220 /prefetch:14
                                                            2⤵
                                                              PID:1912
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=832,i,14027860251475054305,16058695647035381916,262144 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=6752 /prefetch:10
                                                              2⤵
                                                              • Suspicious behavior: EnumeratesProcesses
                                                              PID:7004
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6044,i,2294291758132312100,11622551110263644448,524288 --field-trial-handle=2292,i,15731751546940086172,1459864194372288462,262144 --variations-seed-version --mojo-platform-channel-handle=6060 /prefetch:14
                                                              2⤵
                                                                PID:6080
                                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                                              1⤵
                                                                PID:3904
                                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --no-startup-window --win-session-start
                                                                1⤵
                                                                  PID:5968
                                                                • C:\Windows\System32\rundll32.exe
                                                                  C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                                  1⤵
                                                                    PID:6632
                                                                  • C:\Users\Admin\Desktop\Frega Token Generator v2\api\TokenGenerator.exe
                                                                    "C:\Users\Admin\Desktop\Frega Token Generator v2\api\TokenGenerator.exe"
                                                                    1⤵
                                                                    • Loads dropped DLL
                                                                    • System Location Discovery: System Language Discovery
                                                                    • Modifies registry class
                                                                    • Suspicious behavior: EnumeratesProcesses
                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                    PID:1132
                                                                  • C:\Users\Admin\AppData\Local\Programs\tokengenerator\TokenGenerator.exe
                                                                    "C:\Users\Admin\AppData\Local\Programs\tokengenerator\TokenGenerator.exe"
                                                                    1⤵
                                                                    • Executes dropped EXE
                                                                    • Loads dropped DLL
                                                                    • Drops file in Windows directory
                                                                    • Suspicious use of AdjustPrivilegeToken
                                                                    PID:5572
                                                                    • C:\Users\Admin\AppData\Local\Programs\tokengenerator\TokenGenerator.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\tokengenerator\TokenGenerator.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\TokenGenerator" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1872,i,10233259290116460285,17027490130554295629,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1860 /prefetch:2
                                                                      2⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:3608
                                                                    • C:\Users\Admin\AppData\Local\Programs\tokengenerator\TokenGenerator.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\tokengenerator\TokenGenerator.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\TokenGenerator" --field-trial-handle=2424,i,10233259290116460285,17027490130554295629,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2156 /prefetch:11
                                                                      2⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:3520
                                                                    • C:\Users\Admin\AppData\Local\Programs\tokengenerator\TokenGenerator.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\tokengenerator\TokenGenerator.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\TokenGenerator" --app-path="C:\Users\Admin\AppData\Local\Programs\tokengenerator\resources\app.asar" --no-sandbox --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2468,i,10233259290116460285,17027490130554295629,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2460 /prefetch:1
                                                                      2⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      PID:5264
                                                                    • C:\Users\Admin\AppData\Local\Programs\tokengenerator\resources\Discord.exe
                                                                      C:\Users\Admin\AppData\Local\Programs\tokengenerator\resources\Discord.exe
                                                                      2⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • Checks processor information in registry
                                                                      PID:3212
                                                                    • C:\Users\Admin\AppData\Local\Programs\tokengenerator\TokenGenerator.exe
                                                                      "C:\Users\Admin\AppData\Local\Programs\tokengenerator\TokenGenerator.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\TokenGenerator" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3244,i,10233259290116460285,17027490130554295629,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3240 /prefetch:10
                                                                      2⤵
                                                                      • Executes dropped EXE
                                                                      • Loads dropped DLL
                                                                      • Suspicious behavior: EnumeratesProcesses
                                                                      PID:124

                                                                  Network

                                                                        MITRE ATT&CK Enterprise v16

                                                                        Replay Monitor

                                                                        Loading Replay Monitor...

                                                                        Downloads

                                                                        settings.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                        • Size 280B
                                                                        • SHA256 afab44831d15737b93a51b5da32d6f7ffdeb215ed2ae065fce98d07ea4026ae9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        settings.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                        • Size 280B
                                                                        • SHA256 83b455d96ea0ab072abf9447d6909527a43b10762ad405018afe82f8e21f6440
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        settings.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                                        • Size 280B
                                                                        • SHA256 a61df6b1b5973a8f8515610c489bd12e6e001f8527beb5b138216e21393998d2
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        BookmarkMergedSurfaceOrdering

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                                        • Size 6B
                                                                        • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                                        • MD5 SHA1 SHA512

                                                                        BrowsingTopicsState

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BrowsingTopicsState
                                                                        • Size 414B
                                                                        • SHA256 569801e84bed0d412834b33b12eb8b338d8e59f2c92d4b6b87fcb4b17ef4de9e
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                                        • Size 5KB
                                                                        • SHA256 25dab8edc68311a241e158b29155c508fccb5a1e035f22be5acbe67c481a1a7c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index~RFe5990cc.TMP

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe5990cc.TMP
                                                                        • Size 3KB
                                                                        • SHA256 2f5ba621ab681f911b2948ef9f6538529cc2006ab0d6978edce62239c5631a76
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        SiteList-Enterprise.json

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                                        • Size 2B
                                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                                        • MD5 SHA1 SHA512

                                                                        HubApps

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
                                                                        • Size 106KB
                                                                        • SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                                        • Size 27KB
                                                                        • SHA256 bd527f508bb755e1172d66a1de7880861bf58b071b035e1937c6c96f38001e4c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        SCT Auditing Pending Reports

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                                        • Size 2B
                                                                        • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                                        • MD5 SHA1 SHA512

                                                                        Sdch Dictionaries

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Sdch Dictionaries
                                                                        • Size 40B
                                                                        • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                                                                        • MD5 SHA1 SHA512

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 16KB
                                                                        • SHA256 0fbe6d27f70d0ec1ff0f6a99be2b67ed0a6d6d27124c3db19fb8ee525acf08f8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 16KB
                                                                        • SHA256 00ab2ce2aa9815ce6a92cea43af3c7d27a445471150fe1ac1f53423fc1e086e2
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 15KB
                                                                        • SHA256 106827c4f5d7fee9326e4d7bb7958d95238ffef352443454393b2d4da53a9550
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                                        • Size 16KB
                                                                        • SHA256 4b53f143df1b6678ab93bf9ed58f04b152694244caf46b1b3338e7e26d6ae09c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Secure Preferences

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                                        • Size 27KB
                                                                        • SHA256 14ecc0dadc3ae4b88880140ed173155e8e20fc1e3ca7b06e85f6a97e59fddb3e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ab8645dbd4a25011_0

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\ab8645dbd4a25011_0
                                                                        • Size 63KB
                                                                        • SHA256 1afffb306bc9101533353c79b044965ffd96f5c742e3b983412d26eddc2027a0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        the-real-index

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Shared Dictionary\cache\index-dir\the-real-index
                                                                        • Size 72B
                                                                        • SHA256 210ddb458d7f1e439ce3b9947eeb01ff63bfa2b2fd7c38bb061537feb5ab5154
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        sync_diagnostic.log

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                                        • Size 23KB
                                                                        • SHA256 a8b072f3d5255312ea202d46823ef340be5740614d86532745ab198c8bcb28cb
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        CURRENT

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\CURRENT
                                                                        • Size 16B
                                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                                        • MD5 SHA1 SHA512

                                                                        MANIFEST-000001

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Extension Settings\ghbmnnjooekpmoecnnnilnnbdlolhkhi\MANIFEST-000001
                                                                        • Size 41B
                                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                                        • MD5 SHA1 SHA512

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 27KB
                                                                        • SHA256 bd87f137ce6aa806f7d6a36f6475733d0735233cfecc3c81a429ac401f17ac60
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 27KB
                                                                        • SHA256 ec0c606939cd3eaac392fb37ba28a0dc537211bab491b026c484243b3cb96fc3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 32KB
                                                                        • SHA256 022b4eab9ba8d9ec4a45bf862a4c52d4586150e497872da47a9cc8d8638e4ff8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 26KB
                                                                        • SHA256 8e3790e349542500e6e8a0904426a8ad79860611d87f215395d4a873a714a89f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Local State

                                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                                        • Size 27KB
                                                                        • SHA256 605475a77ee1a7cad8e3ea6e99a3f58977e5793c6bb5c4639f5f0a95c93d61c3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        cf8d4bb1-04c7-4c21-8e82-8fdd9f347d25.tmp.ico

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\cf8d4bb1-04c7-4c21-8e82-8fdd9f347d25.tmp.ico
                                                                        • Size 9KB
                                                                        • SHA256 31df1cb48f05f58e969949feeb4b6cccff1f8dd2d2c2e9f04f8e3408bf2fe53d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        LICENSE.electron.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\LICENSE.electron.txt
                                                                        • Size 1KB
                                                                        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        LICENSES.chromium.html

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\LICENSES.chromium.html
                                                                        • Size 9.0MB
                                                                        • SHA256 96837a4a521a61bd3d34f2f660e29902d228aaec501eeb2a84403f1926c3df9d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        chrome_100_percent.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\chrome_100_percent.pak
                                                                        • Size 148KB
                                                                        • SHA256 7dd5485def22a53c0635efdf8ae900f147ec8c8a22b9ed71c24668075dd605d3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        chrome_200_percent.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\chrome_200_percent.pak
                                                                        • Size 223KB
                                                                        • SHA256 2408969599d3953aae2fb36008e4d0711e30d0bc86fb4d03f8b0577d43c649fa
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        d3dcompiler_47.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\d3dcompiler_47.dll
                                                                        • Size 4.7MB
                                                                        • SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ffmpeg.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\ffmpeg.dll
                                                                        • Size 2.6MB
                                                                        • SHA256 604de5c5b2d25c731e01d0c08b8cb21c872a886ac1f6d3e3c13e8b29f84a0f93
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        icudtl.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\icudtl.dat
                                                                        • Size 10.0MB
                                                                        • SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        libEGL.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\libEGL.dll
                                                                        • Size 470KB
                                                                        • SHA256 0152aca7a9865b7cae2c437d85d6c771a16afc9da2929ddb49eff9cc70b42f62
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        libGLESv2.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\libGLESv2.dll
                                                                        • Size 7.7MB
                                                                        • SHA256 c5f86befae432c8d0b8942e7cf24a4b5c307e7fd421eae248946e81381cd62f3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        af.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\af.pak
                                                                        • Size 494KB
                                                                        • SHA256 e2470090a09ca500679e68bb5e3b1acc35a5873fea4f93af25a23c82122f2c13
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        am.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\am.pak
                                                                        • Size 799KB
                                                                        • SHA256 f7d24b9cd21562665ba250caee9c280a1c95efea4b5f37d1afdd36c369a61b87
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ar.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\ar.pak
                                                                        • Size 874KB
                                                                        • SHA256 f25c74e780aafe043e275c891a5f009327d0e3ab92a3d53b393ca84651acde61
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        bg.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\bg.pak
                                                                        • Size 913KB
                                                                        • SHA256 97ef7984074775282b68dca5d5a469efdb2b22474ee6669fdfb5197d3f1b3768
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        bn.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\bn.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 e3f2a4b955b9a701829cd71d22bdcc562a67bc7926a3a349d99dfa2c5863bdf5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ca.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\ca.pak
                                                                        • Size 556KB
                                                                        • SHA256 c178611c586deefdaa2f202981b84e75b8400908bc5fffc65226a06af0790536
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        cs.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\cs.pak
                                                                        • Size 572KB
                                                                        • SHA256 85699626522c2a8eb1efa3354c570057c3f665217d9d02a5d366a7c9048db59c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        da.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\da.pak
                                                                        • Size 518KB
                                                                        • SHA256 2cdc82681d523c3f6a1e432281079019a5aa7597f6bd9800aa37566fea9354a3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        de.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\de.pak
                                                                        • Size 553KB
                                                                        • SHA256 1966aab0f4386010e86fd8aef913a55680052b4351a8f405e842fc2848197403
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        el.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\el.pak
                                                                        • Size 1002KB
                                                                        • SHA256 6a2db5d60532c50501f247773aa225cc463772925fedd6959af4f64d69bcfe33
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        en-GB.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\en-GB.pak
                                                                        • Size 450KB
                                                                        • SHA256 e5a70b7c1a2cf6838dfe033b9107e663878656f9315b704eec1c6e6b6f3858a7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        en-US.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\en-US.pak
                                                                        • Size 454KB
                                                                        • SHA256 0013a8efed8a17a93b0e718fb41652b8a2a6ed38128575cee89a258134167e41
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        es-419.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\es-419.pak
                                                                        • Size 547KB
                                                                        • SHA256 a27f6f9f6e80ebf322ce8b11c73545096268c382c54867e3e66057f4339b282b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        es.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\es.pak
                                                                        • Size 547KB
                                                                        • SHA256 6b0259c95d5308a785d54098d2ce24fe74fd7aed59a16ee0604de92c47e1d524
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        et.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\et.pak
                                                                        • Size 497KB
                                                                        • SHA256 77822b71398a329c43b57d9d8c0b27fff7f30c3a35fbd7850161549a23b0b9b2
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        fa.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\fa.pak
                                                                        • Size 813KB
                                                                        • SHA256 fee6bd019b4fdf35b3012317595df9babff11215dd5adba9841aa3dd92f47f5d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        fi.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\fi.pak
                                                                        • Size 508KB
                                                                        • SHA256 0d426d5510b38dfbf2e54a3b139b1728724bb8982ae31a96ed7affe9b2329e40
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        fil.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\fil.pak
                                                                        • Size 573KB
                                                                        • SHA256 d7fdc7fd08dcc421bc8aaae3fdc72599c60a3b96f05989a3e46736f0de06e745
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        fr.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\fr.pak
                                                                        • Size 591KB
                                                                        • SHA256 a04d58a97122a946a2ecb6a3ca06bd50564ae186d1fdb58fda6a02140f46bacf
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        gu.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\gu.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 a45dad53748632e8ae1632aeed12b45d259155a1211921a4a8804791ac68aff4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        he.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\he.pak
                                                                        • Size 713KB
                                                                        • SHA256 f1add8ea5410dbf2d16443683c5868c1bb194821e4e527bc64135f19f2e72034
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        hi.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\hi.pak
                                                                        • Size 1.2MB
                                                                        • SHA256 18d6db4ee11de42d038e718ea1c565ae48b50747be29894de2e191d63d9c9a04
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        hr.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\hr.pak
                                                                        • Size 551KB
                                                                        • SHA256 723c65592d15311d33fe35b2865849cccffbbf58a280859af972c77df96e14d0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        hu.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\hu.pak
                                                                        • Size 595KB
                                                                        • SHA256 b4e6a1135de8bdc42c04f4db4eb1ce48256f18eb46a5146a21010b6165a90e7a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        id.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\id.pak
                                                                        • Size 490KB
                                                                        • SHA256 e95ac873b16983ef8a9019fc7141bd56315e082f531d37c5b8377645226fe5ee
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        it.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\it.pak
                                                                        • Size 539KB
                                                                        • SHA256 dc97bf831f3ed10a92f7131ba6079628747974bbf9b6719d0044a3e689e6506c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ja.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\ja.pak
                                                                        • Size 659KB
                                                                        • SHA256 c1fb05d866c06db03b724ef009c04657b2c7ef007535a62dba48ced5194c68a7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        kn.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\kn.pak
                                                                        • Size 1.3MB
                                                                        • SHA256 aafe9a01be0450564f9498b5e4e20300d71ce2ee1fbf1cfcdb2045123576f84a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ko.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\ko.pak
                                                                        • Size 557KB
                                                                        • SHA256 7234a1390377451087a764bd31c817a5ce6695fa517119e7dccba642fac65e43
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        lt.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\lt.pak
                                                                        • Size 597KB
                                                                        • SHA256 a1257d10e673311747363e6929832e70f36668b1fc0d6a5ddd550fe88007aa58
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        lv.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\lv.pak
                                                                        • Size 596KB
                                                                        • SHA256 3e3c9953e679f391167a5d5536a4ace4d56558909ac8ad5b9f08650254d99f40
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ml.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\ml.pak
                                                                        • Size 1.3MB
                                                                        • SHA256 520d60e6f297e8273113e8c73aa90aa026a75098f38175b22bd4b8fa761eb2e4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        mr.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\mr.pak
                                                                        • Size 1.1MB
                                                                        • SHA256 039f4e0176c38867fef57482825d043fa63bf1356c85eab0fc665f118db125e4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ms.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\ms.pak
                                                                        • Size 514KB
                                                                        • SHA256 354d7a3fc5c9f6e965f54da155d66eafc8e5b5eab08cd782e9fdc379a5829e48
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        nb.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\nb.pak
                                                                        • Size 499KB
                                                                        • SHA256 c365bde65c8933c6b0691da32428815ffe7254415d8f859d1bd8a13f04bdd1f8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        nl.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\nl.pak
                                                                        • Size 516KB
                                                                        • SHA256 619c61701b3a142733d23ad8c7117bc013867a842d3d1d572faa56895ad8257e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        pl.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\pl.pak
                                                                        • Size 574KB
                                                                        • SHA256 e82bd1dcc3da3a8502a866b362435149d27ace82e4ad96deac3a71e5b64329ca
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        pt-BR.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\pt-BR.pak
                                                                        • Size 540KB
                                                                        • SHA256 d274344839fe26c722b59f5edd24e1fade04aba97a05e4ec0fdd1a669536e779
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        pt-PT.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\pt-PT.pak
                                                                        • Size 543KB
                                                                        • SHA256 0eea90a5b2b7b5d5f8b426ce77562fed82a709e38d2e47f6dc3a96d65b674d81
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ro.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\ro.pak
                                                                        • Size 562KB
                                                                        • SHA256 f360247be07a19a0a5a2f4a46195ab2411ea3f634e86cd884ef59fa60e9b6b7b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ru.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\ru.pak
                                                                        • Size 924KB
                                                                        • SHA256 f0ae92ad7c985d8c5955a8503d7473f36b3f7e54363cd4eeaeecef282f1a0abf
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        sk.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\sk.pak
                                                                        • Size 580KB
                                                                        • SHA256 bfd5b52a544428c5aaa4f418903610f1373c808c20110c145d95b34c51c7cf80
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        sl.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\sl.pak
                                                                        • Size 556KB
                                                                        • SHA256 f7539df33ea860bc42a76047fa4fa0dc75044df6d602f8735c9acfa5d7995198
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        sr.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\sr.pak
                                                                        • Size 859KB
                                                                        • SHA256 3aed83391c97ce05aab07239d0cbfe5a2b596d7a3bec39dbebced4e43704b8b7
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        sv.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\sv.pak
                                                                        • Size 501KB
                                                                        • SHA256 35c295c0a633ec0591058412c3b398940bcd92f6e12be20d51c01dcf7d9560ab
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        sw.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\sw.pak
                                                                        • Size 529KB
                                                                        • SHA256 462809f4337c1d6511d53e496937828ed07d64e7144954da794c36584c94b543
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ta.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\ta.pak
                                                                        • Size 1.3MB
                                                                        • SHA256 5ca80548ecba32360e8d0b0ae1b40da47b708d6924ba77936e0ce24a6ffef4a5
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        te.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\te.pak
                                                                        • Size 1.2MB
                                                                        • SHA256 8264244c6de861817f5b19cef282844a18ed8cb7d4e059451489652749fe931e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        th.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\th.pak
                                                                        • Size 1.0MB
                                                                        • SHA256 286ff381b36963a165fc4a7acbdeb0d08dc00702f62e2739b49436f4c9448892
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        tr.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\tr.pak
                                                                        • Size 539KB
                                                                        • SHA256 dbaeb803ebabd1b92f1892b075e044e42fd2a372c87cd7bed988fe2c427d6160
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        uk.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\uk.pak
                                                                        • Size 923KB
                                                                        • SHA256 fe35828cba11f536859e7693821d1e43ab1d89c385cfc49616859684d663d470
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ur.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\ur.pak
                                                                        • Size 808KB
                                                                        • SHA256 60310f9a3457fae0395b447a30646211ef4160ba84bd7c36d291af4c8ec2b79a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        vi.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\vi.pak
                                                                        • Size 639KB
                                                                        • SHA256 738b87b76aedd9cd85dab2c461e0260e0214a2baaa6a53c24abffb6ecb8c4fce
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        zh-CN.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\zh-CN.pak
                                                                        • Size 460KB
                                                                        • SHA256 ea08c31a5d4e6aafbc5b657c5960135e64506593729fdb759874e55876580666
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        zh-TW.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\locales\zh-TW.pak
                                                                        • Size 455KB
                                                                        • SHA256 9b1e3ce2e425eb945cf74458bae6cfabecd170a4535ee97202c92a8227b314e4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        resources.pak

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources.pak
                                                                        • Size 5.3MB
                                                                        • SHA256 a6b12ba6867faea8b81f2260993fc6616fc3da7491220c1003569eae65d0b09a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        Discord.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\Discord.exe
                                                                        • Size 428KB
                                                                        • SHA256 33a5bf8a082e7c93c41bef709dce0f1231710e91449aa4011db55ad92974581f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        app.asar

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\app.asar
                                                                        • Size 47KB
                                                                        • SHA256 9a25d11ce0a8d78cbbef58e7c97b027537b0117fe6cd8c8355549a8b396ff5ba
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        elevate.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\elevate.exe
                                                                        • Size 105KB
                                                                        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-console-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-console-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 88ace577a9c51061cb7d1a36babbbefa48212fadc838ffde98fdfff60de18386
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-console-l1-2-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-console-l1-2-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 c062477ad3bfdc57b0cc402179637a214dab5045c8d644592c7decca7d18aa50
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-datetime-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-datetime-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 1bd81dfd19204b44662510d9054852fb77c9f25c1088d647881c9b976cc16818
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-debug-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-debug-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 591358eb4d1531e9563ee0813e4301c552ce364c912ce684d16576eabf195dc3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-errorhandling-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-errorhandling-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 d56ce7b1cd76108ad6c137326ec694a14c99d48c3d7b0ace8c3ff4d9bcee3ce8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-fibers-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-fibers-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 91d249d7bc0e38ef6bcb17158b1fdc6dd8888dc086615c9b8b750b87e52a5fb3
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-fibers-l1-1-1.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-fibers-l1-1-1.dll
                                                                        • Size 21KB
                                                                        • SHA256 fc9d86cec621383eab636ebc87ddd3f5c19a3cb2a33d97be112c051d0b275429
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-file-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-file-l1-1-0.dll
                                                                        • Size 25KB
                                                                        • SHA256 1ca895aba4e7435563a6b43e85eba67a0f8c74aa6a6a94d0fc48fa35535e2585
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-file-l1-2-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-file-l1-2-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 4cadbc0c39da7c6722206fdcebd670abe5b8d261e7b041dd94f9397a89d1990d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-file-l2-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-file-l2-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 93c624b366ba16c643fc8933070a26f03b073ad0cf7f80173266d67536c61989
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-handle-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-handle-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 39095f59c41d76ec81bb2723d646fde4c148e7cc3402f4980d2ade95cb9c84f9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-heap-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-heap-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 8f105771b236dbcb859de271f0a6822ce1cb79c36988dd42c9e3f6f55c5f7eb9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-interlocked-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-interlocked-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 53b25e753ca785bf8b695d89dde5818a318890211dc992a89146f16658f0b606
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-kernel32-legacy-l1-1-1.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-kernel32-legacy-l1-1-1.dll
                                                                        • Size 21KB
                                                                        • SHA256 a9b13a1cd1b8c19b0c6b4afcd5bb0dd29c0e2288231ac9e6db8510094ce68ba6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-libraryloader-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-libraryloader-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 7f39ba298b41e4963047341288cab36b6a241835ee11ba4ad70f44dacd40906c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-localization-l1-2-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-localization-l1-2-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 6ee44dd0d8510dc024c9f7c79b1b9fa88c987b26b6beb6653ddd11751c34e5dc
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-memory-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-memory-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 0512a35316ec9180437f86696a84c5c06a7e4e82e050055a656e5bf9fca206f9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-namedpipe-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-namedpipe-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 c05f1fffe3b5a2738ea54ce9485cca026fb9635f982626fba1e1dcc531897273
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-processenvironment-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-processenvironment-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 c4eca98c3c67b6395d5b005b00ac1eb0318b86b23aa71035a44c2b1602befba9
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-processthreads-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-processthreads-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 5ccb89e93d67bc3288d4e84649c5346e66e15e3d7cd65d989daf3f4cb584be9a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-processthreads-l1-1-1.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-processthreads-l1-1-1.dll
                                                                        • Size 21KB
                                                                        • SHA256 4ad565a8ba3ef0ea8ab87221ad11f83ee0bc844ce236607958406663b407333e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-profile-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-profile-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 7809160932f44e59b021699f5bc68799eb7293ee1fa926d6fcca3c3445302e61
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-rtlsupport-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 9dc1e91e71c7c054854bd1487cb4e6946d82c9f463430f1c4e8d1471005172b1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-string-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-string-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 60fc31d2a0c634412f529dba76af3b9bf991352877c6dae528186d3935704cfd
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-synch-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-synch-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 3a72b4f29f39a265d32ad12f0ce15dbf60129c840e10d84d427829ede45e78ad
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-synch-l1-2-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-synch-l1-2-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 efc1e4460984a73cf47a3def033af1c8f3b1dbc1a56cd27781d3aacf3e3330cb
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-sysinfo-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-sysinfo-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 b203d862ddef1dd62bf623fc866c7f7a9c317c1c2ae30d1f52cb41f955b5698e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-sysinfo-l1-2-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-sysinfo-l1-2-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 2703635d835396afd0f138d7c73751afe7e33a24f4225d08c1690b0a371932c0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-timezone-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-timezone-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 33f4fddc181066fce06b2227bded813f95e94ed1f3d785e982c6b6b56c510c57
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-core-util-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-core-util-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 6eda016742a6171205a387a14b3c0b331841567740376f56768f8c151724207d
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-crt-conio-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-crt-conio-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 b762061b688aae679afe788904d2c9970f74a7dac98f3b42463d08f25e483d3f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-crt-convert-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-crt-convert-l1-1-0.dll
                                                                        • Size 25KB
                                                                        • SHA256 ebb2ae5535a64f65daeab8235585114fc9dd2cf1a49f5852d446250b998b6ae4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-crt-environment-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-crt-environment-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 17d63275d00bdd8670422b95bd264c532998e0a1b041079e54fce4b6b7a55819
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-crt-filesystem-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-crt-filesystem-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 9a9e2a65a281644e368d0f272b95ba5f6b445d1c35910d06056c5ebeb77402db
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-crt-heap-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-crt-heap-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 bab9ac3ec83e380ae51e4295ef3bf2c738627812d3a49d1e713661abbc8dc57a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-crt-locale-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-crt-locale-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 bd14c67ea28e21d6257ad780a37122c9b5773f69e693f5db6bffaee4d839526e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-crt-math-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-crt-math-l1-1-0.dll
                                                                        • Size 29KB
                                                                        • SHA256 606d66d82db562ea7979179d06486a0f94d079941d26b80a1e2c49d29959df6f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-crt-multibyte-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-crt-multibyte-l1-1-0.dll
                                                                        • Size 29KB
                                                                        • SHA256 95f49efbe8107786733fa7c474025cf3fee0ac632f240367b296c736d06572aa
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-crt-private-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-crt-private-l1-1-0.dll
                                                                        • Size 73KB
                                                                        • SHA256 1bc82bed6143d2bf1b6b08a7809f4a5e29317d6fddd338a7da3c0223522e4bbf
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-crt-process-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-crt-process-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 f6156b1020380ec4f0e48577ebedaaef5fb1ab1f337d8b4e72e6a33a7567a9cc
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-crt-runtime-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-crt-runtime-l1-1-0.dll
                                                                        • Size 25KB
                                                                        • SHA256 c5902934d026d7e15fbe9917d474f3322846a41a25e66f4b2b1f758801879f4b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-crt-stdio-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-crt-stdio-l1-1-0.dll
                                                                        • Size 25KB
                                                                        • SHA256 a9c5a153d8c0286f9b41a2b1c65854ad9e6471b8755b7de87bae4470e60bcab6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-crt-string-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-crt-string-l1-1-0.dll
                                                                        • Size 25KB
                                                                        • SHA256 25b8f83a7767211b11132775a0e27a45aa4ec8ab4e6572599f9c172ae3606b40
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-crt-time-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-crt-time-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 7c7f6393f06de11750adb09cc5698ae55cd9fb27b2e51e207286feb1b5b2b156
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        api-ms-win-crt-utility-l1-1-0.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\api-ms-win-crt-utility-l1-1-0.dll
                                                                        • Size 21KB
                                                                        • SHA256 d8ba5f17b9ffcbf3aeaf3fa1da226832d2fa90f81acce0cd669464e76ce434ac
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        awt.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\awt.dll
                                                                        • Size 1.4MB
                                                                        • SHA256 c1846731293cd9b501b0116adce8b9d4d44bad4ccbb95680bcb088da4fdbc947
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        fontmanager.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\fontmanager.dll
                                                                        • Size 951KB
                                                                        • SHA256 b71fbef5e8b9f8b5c66fcae405287e7dd2cffbd37d2b50f53fae17cdf47452e0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        freetype.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\freetype.dll
                                                                        • Size 534KB
                                                                        • SHA256 cca1c5c1f424a01d0d1e8636d3c981f397b461a07efa0000a18a5a1762a4a1cf
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        java.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\java.dll
                                                                        • Size 119KB
                                                                        • SHA256 97a44d1648fad516c28304ea249b9bf4cf49c3be3b46b9df37b7f734feeac352
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        java.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\java.exe
                                                                        • Size 49KB
                                                                        • SHA256 bd3d87dfb44651a1c61c995e08ca4fcadb458437a373d46941381f9aeff9d6a0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        javajpeg.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\javajpeg.dll
                                                                        • Size 178KB
                                                                        • SHA256 d66f4897581a12613b87831111908d22702daf8c3fa1911c18b664f527cbf108
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        javaw.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\javaw.exe
                                                                        • Size 49KB
                                                                        • SHA256 b2a51f8b8d2204fca946108c14481d09d4b2d0335ad282be7296ae2f4e4c2ef6
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        jawt.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\jawt.dll
                                                                        • Size 21KB
                                                                        • SHA256 31b47631025a6acb9f2ade1e0a4632c77109cf0ef243f35d82ddc0b7f20f25e1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        jimage.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\jimage.dll
                                                                        • Size 33KB
                                                                        • SHA256 f50044af136d67c5127f6dccb5028e8a2bab33286167eb037e05282549b1e8c1
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        jli.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\jli.dll
                                                                        • Size 87KB
                                                                        • SHA256 63ba9b4579a6fa411ab1ef8579867a5de0ba9c8cd40e6923373d49c87cba260b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        jsound.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\jsound.dll
                                                                        • Size 59KB
                                                                        • SHA256 f2548131822b5057b1a146206622b0f48ef07fe3301a91d935d40a1b19ddddc4
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        keytool.exe

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\keytool.exe
                                                                        • Size 24KB
                                                                        • SHA256 c67ab5d2ca8e2c19ae28a7dae06da992e1247e6128d2f28c93bc6106939fa8b8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        lcms.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\lcms.dll
                                                                        • Size 253KB
                                                                        • SHA256 bf29b2cb1c2c1589b9f5a9ddb203595cbdfe56c1471712a96b0124d5fd93e6cd
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        management.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\management.dll
                                                                        • Size 29KB
                                                                        • SHA256 03d51451386a6c286a76a4dca238f2e7a47c533472ca0a791265bfcafed8331a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        mlib_image.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\mlib_image.dll
                                                                        • Size 509KB
                                                                        • SHA256 f5ea88cfff3ebc5436a515fe90f72ed1c0f010f5aad80830ecf94e6d9cd0e61c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        msvcp140.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\msvcp140.dll
                                                                        • Size 561KB
                                                                        • SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        net.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\net.dll
                                                                        • Size 58KB
                                                                        • SHA256 5024678aeec581fe91498da4613495b3abcc006359ea135d2e42a4106d3bceea
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        nio.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\nio.dll
                                                                        • Size 78KB
                                                                        • SHA256 addafe684203d39c4436aa80fe72d7ceae4d9c197e3579c3b4afd66e2b14bc09
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        prefs.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\prefs.dll
                                                                        • Size 25KB
                                                                        • SHA256 9c9eb1c256795bd5195f9e6562a1d8bc8b70ec2f9254d1be6c99308946656ab2
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        jvm.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\server\jvm.dll
                                                                        • Size 13.3MB
                                                                        • SHA256 8dc3b8569cef73567252b37fd49627f86e12deaab9a605fa3701c32c237d3d18
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        splashscreen.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\splashscreen.dll
                                                                        • Size 213KB
                                                                        • SHA256 48c38d25dcfbc4d7a58273d94df7f92cd516b8697bbe5d492f6203c6e2d235eb
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        syslookup.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\syslookup.dll
                                                                        • Size 28KB
                                                                        • SHA256 9c6ce8c66daa3d4987dec55a05ec2331df0990e5664cc97ead3d9f5011294364
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ucrtbase.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\ucrtbase.dll
                                                                        • Size 1.3MB
                                                                        • SHA256 2e5fb14b7bf8540278f3614a12f0226e56a7cc9e64b81cbd976c6fcf2f71cbfb
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        vcruntime140.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\vcruntime140.dll
                                                                        • Size 117KB
                                                                        • SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        vcruntime140_1.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\vcruntime140_1.dll
                                                                        • Size 48KB
                                                                        • SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        verify.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\verify.dll
                                                                        • Size 53KB
                                                                        • SHA256 a68ff08c4366f7357c3f88805e12d741d07afe4ad6974c10e811adbe875795aa
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        zip.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\bin\zip.dll
                                                                        • Size 87KB
                                                                        • SHA256 684484a561eb95244b51b33c64cd3da8c8b631e62c16c19f4ad65fa859860181
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        jaxp.properties

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\conf\jaxp.properties
                                                                        • Size 7KB
                                                                        • SHA256 7d95c49465d0c836d608d02856d3b097934dfb5dc4bd2279affaf337d045b708
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        logging.properties

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\conf\logging.properties
                                                                        • Size 2KB
                                                                        • SHA256 b62d2733ab99556b108a1951d894c5a8d76b1ac7a00c02c388f9eb9be046c56f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        net.properties

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\conf\net.properties
                                                                        • Size 7KB
                                                                        • SHA256 56dd1f6095c189c1052f6baa32e457efc09de4832e19cdb82bb236dc8abfee9f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        java.policy

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\conf\security\java.policy
                                                                        • Size 2KB
                                                                        • SHA256 d51bcab7ed301caeff3779a5e777e6019864cecee5e2abc102ef991b0de77af2
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        java.security

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\conf\security\java.security
                                                                        • Size 68KB
                                                                        • SHA256 c60112fdfcd0ad928c40bf7dd2b76b1e8e802185e261c7019393634aa33cd064
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        README.txt

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\conf\security\policy\README.txt
                                                                        • Size 2KB
                                                                        • SHA256 6da0747334b0fea7592fd92614b2bbc8b126535e129b1fee483774d914e98eb5
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        default_US_export.policy

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\conf\security\policy\limited\default_US_export.policy
                                                                        • Size 146B
                                                                        • SHA256 758b930a526fc670ab7537f8c26321527050a31f5f42149a2dda623c56a0a1a9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        default_local.policy

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\conf\security\policy\limited\default_local.policy
                                                                        • Size 647B
                                                                        • SHA256 2b2627548e61316150d47ffc3e6cad465ca05b3cccd4785eb7d21aa7baa0f441
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        exempt_local.policy

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\conf\security\policy\limited\exempt_local.policy
                                                                        • Size 566B
                                                                        • SHA256 8c3d7648abcd95a272ce12db870082937f4d7f6878d730d83cb7fbb31eb8b2c9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        default_local.policy

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\conf\security\policy\unlimited\default_local.policy
                                                                        • Size 193B
                                                                        • SHA256 8d8a318e6d90dfd7e26612d2b6385aa704f686ca6134c551f8928418d92b851a
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        sound.properties

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\conf\sound.properties
                                                                        • Size 1KB
                                                                        • SHA256 299c2360b6155eb28990ec49cd21753f97e43442fe8fab03e04f3e213df43a66
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ADDITIONAL_LICENSE_INFO

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.base\ADDITIONAL_LICENSE_INFO
                                                                        • Size 2KB
                                                                        • SHA256 a69bce275ba7a3570af6579cb0f55682cd75fedfcd49e0e8e9022270c447c916
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        ASSEMBLY_EXCEPTION

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.base\ASSEMBLY_EXCEPTION
                                                                        • Size 1KB
                                                                        • SHA256 75292f03bf23d3db7c985aecc191029b93883200721ed23ed34a2e601463df33
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        LICENSE

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.base\LICENSE
                                                                        • Size 18KB
                                                                        • SHA256 4b9abebc4338048a7c2dc184e9f800deb349366bdf28eb23c2677a77b4c87726
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        aes.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.base\aes.md
                                                                        • Size 1KB
                                                                        • SHA256 45c6d4da48325edfbff3dcf71c704e504c057904435ed23c6d57046d551eb69d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        asm.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.base\asm.md
                                                                        • Size 1KB
                                                                        • SHA256 683be15695bd248272d60f5b7fbe5e126a935ea6bf231a624a9aa164733e1d1d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        c-libutl.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.base\c-libutl.md
                                                                        • Size 1KB
                                                                        • SHA256 bef40679922d6fdfb7e4ddb223ad6722300f6054ba737bbf6188d60fcec517f9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        cldr.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.base\cldr.md
                                                                        • Size 9KB
                                                                        • SHA256 19515e14a240e022640e95b61b5095127fa9690755950b4a2b0a02e783e08163
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        icu.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.base\icu.md
                                                                        • Size 29KB
                                                                        • SHA256 1bf28459c6e0af9f3429f4f8becd1668d6544055f8df240277456bc4b3d8a752
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        public_suffix.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.base\public_suffix.md
                                                                        • Size 17KB
                                                                        • SHA256 d7818e02ebfc4e5cd82613e003e7ba6be2e9d5949ea4aa0ba88d4d2f7ca69999
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        siphash.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.base\siphash.md
                                                                        • Size 8KB
                                                                        • SHA256 5a792b5a74ad2a5f3d6a7ad8b7a841116e58a772c18bc6e392320a365b222c76
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        unicode.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.base\unicode.md
                                                                        • Size 8KB
                                                                        • SHA256 6f72f10d166b2c2e8a395e03e734c5afc852b59aeca73ced124f6b9c96268d53
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        wepoll.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.base\wepoll.md
                                                                        • Size 1KB
                                                                        • SHA256 3ac2992770080453b98c42afa807ba4b2c1738ef756b92a55c645f55e7df48f0
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        zlib.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.base\zlib.md
                                                                        • Size 1010B
                                                                        • SHA256 809b62ba648e02302f7d9ea6b6886c10d5253ac86ad528038a50c73eada5fce2
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        colorimaging.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.desktop\colorimaging.md
                                                                        • Size 167B
                                                                        • SHA256 04d61e3e8e71dd452ebe52008af5378d9f6640d14578aeb515dc5375973b0189
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        freetype.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.desktop\freetype.md
                                                                        • Size 29KB
                                                                        • SHA256 f49d5fb98475239073dc657e689b85d3125a2b30bf3ee137db17541878f1cbe8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        giflib.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.desktop\giflib.md
                                                                        • Size 1KB
                                                                        • SHA256 6cd971730d3047ea57f6865b7bdca2509a9876ae24d5c0ed0c4e32def5f9107e
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        harfbuzz.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.desktop\harfbuzz.md
                                                                        • Size 3KB
                                                                        • SHA256 b3f327a8b36d56beb152b3fd1bb5a7f245362cbea123ebbc68f8907f741b552a
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        jpeg.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.desktop\jpeg.md
                                                                        • Size 3KB
                                                                        • SHA256 c1dfb9719a71ad9f861f8728550542d681e25c8ef40e6393606e6e2a0c1d653a
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        lcms.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.desktop\lcms.md
                                                                        • Size 2KB
                                                                        • SHA256 fc1d7f60c7cdc96b5cadafd4f3610c6a74f2d0afa08852036929c7a1474ebab6
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        libpng.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.desktop\libpng.md
                                                                        • Size 7KB
                                                                        • SHA256 a593474fea8c8503febf77ae12c11f0a04f3d0194888eb50475a75f88ff4ec50
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        mesa3d.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.desktop\mesa3d.md
                                                                        • Size 5KB
                                                                        • SHA256 63f4e6f75caebbccb95d903fb43e46ac7111b3624d0a34f146b276d7d9e7b152
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        ADDITIONAL_LICENSE_INFO

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.logging\ADDITIONAL_LICENSE_INFO
                                                                        • Size 49B
                                                                        • SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
                                                                        • MD5 SHA1 SHA512

                                                                        ASSEMBLY_EXCEPTION

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.logging\ASSEMBLY_EXCEPTION
                                                                        • Size 44B
                                                                        • SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
                                                                        • MD5 SHA1 SHA512

                                                                        LICENSE

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.logging\LICENSE
                                                                        • Size 33B
                                                                        • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
                                                                        • MD5 SHA1 SHA512

                                                                        bcel.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.xml\bcel.md
                                                                        • Size 10KB
                                                                        • SHA256 853a1e7ce397bb10de0e2b3bde0844bcc651f17d983decd07d2d003c0304c311
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        dom.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.xml\dom.md
                                                                        • Size 3KB
                                                                        • SHA256 6686e8877667584a3a7c07344baadca1a03e29f677162d87c3c0811e990d1148
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        jcup.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.xml\jcup.md
                                                                        • Size 1KB
                                                                        • SHA256 8d5dcfdf50455a3c34c753a98f21e953248af200415a9084e3f102cb6c43b8bf
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        xalan.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.xml\xalan.md
                                                                        • Size 13KB
                                                                        • SHA256 c27eb875da4be683d4d7422be986e5e30f636ede31958ff1d39f9cd6109e7a00
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        xerces.md

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\legal\java.xml\xerces.md
                                                                        • Size 11KB
                                                                        • SHA256 4a6bf6b367193ee68681cb2d9fed30ffc5d62dd2d477bd62e0271707d71b3244
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        classlist

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\classlist
                                                                        • Size 77KB
                                                                        • SHA256 13687ed77ddd22fb505acef50ca4ba7d80d772deea65d6e5d62929771838bb32
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        fontconfig.bfc

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\fontconfig.bfc
                                                                        • Size 4KB
                                                                        • SHA256 c7e2e76b908cb6330823e698889943c162e9861a4575501cbb59c9b830158ab0
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        fontconfig.properties.src

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\fontconfig.properties.src
                                                                        • Size 12KB
                                                                        • SHA256 74e6c464ae1e63983ada241869fdc66ef8c28cef403ee2301e0a90db9555b00c
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        jawt.lib

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\jawt.lib
                                                                        • Size 1KB
                                                                        • SHA256 af64af138d14b9fd0849d7f66ad6b529a4e5ec9c25476557bf6b3d65a8ac6884
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        jrt-fs.jar

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\jrt-fs.jar
                                                                        • Size 107KB
                                                                        • SHA256 c182853a89adbb6dbeb78c3b19a189883a9b05ea142dd716bf97677322c71696
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        jvm.cfg

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\jvm.cfg
                                                                        • Size 29B
                                                                        • SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
                                                                        • MD5 SHA1 SHA512

                                                                        jvm.lib

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\jvm.lib
                                                                        • Size 1.1MB
                                                                        • SHA256 58fbee0f29d91056c2b251a11627d1c090f19a877ec254eb02ecb02d1477d50a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        modules

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\modules
                                                                        • Size 25.0MB
                                                                        • SHA256 5687b4bd4ed2ab953742b9081fb2878c0b735d14c4689770b0b0924a46588e9a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        psfont.properties.ja

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\psfont.properties.ja
                                                                        • Size 3KB
                                                                        • SHA256 5a4bd51b969bf187ff86d94f4a71fdfbfa602762975fa3c73d264b4575f7c78f
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        psfontj2d.properties

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\psfontj2d.properties
                                                                        • Size 11KB
                                                                        • SHA256 780c565d5af3ee6f68b887b75c041cdf46a0592f67012f12eeb691283e92630a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        blocked.certs

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\security\blocked.certs
                                                                        • Size 2KB
                                                                        • SHA256 583500b76965eb54b03493372989ab4d3426f85462d1db232c5ae6706a4d6c58
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        cacerts

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\security\cacerts
                                                                        • Size 183KB
                                                                        • SHA256 c3ca801bfc5d9f9e50c69f55537e78dc83e4e50c1ddea30db81e4b672b5a8aee
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        default.policy

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\security\default.policy
                                                                        • Size 11KB
                                                                        • SHA256 69790a79bb9d4bef6b544c1878410bfa0c6a92171834c188772a0ba1ca8c0d95
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        public_suffix_list.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\security\public_suffix_list.dat
                                                                        • Size 224KB
                                                                        • SHA256 3a2e10e573625dab5489812711b874c05a115ac2471bf90776e45561e8f52e8a
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        tzdb.dat

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\tzdb.dat
                                                                        • Size 100KB
                                                                        • SHA256 7be2a3adf10ff841579629f7725b15f0db41e8856527ec72847b5477073a3d29
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        tzmappings

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\lib\tzmappings
                                                                        • Size 21KB
                                                                        • SHA256 b41575b332809b37ad423bdca30c7c48cdef3d82f82fa9d534781a6f15d6a2ab
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        release

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\jre\release
                                                                        • Size 197B
                                                                        • SHA256 49f365342adc20908fb27f42bc7ae896aad7679c6560e9f61c02793cc765b84d
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        modules.lib

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\resources\modules.lib
                                                                        • Size 20.7MB
                                                                        • SHA256 9d9804d6f476baca5756aba8743e3cd4b55a1494450ea12bea51ea6be1f9752f
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        snapshot_blob.bin

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\snapshot_blob.bin
                                                                        • Size 302KB
                                                                        • SHA256 7a0c73bd91f93f73b3da2e568412bcec64aad64c91c5b7795d67209fd3d4a221
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        v8_context_snapshot.bin

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\v8_context_snapshot.bin
                                                                        • Size 646KB
                                                                        • SHA256 4aa1bf0ca492470a966bb52165cdd0a7a3d6bba7f20e932a86bd9b2be41ae3fb
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        vk_swiftshader.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\vk_swiftshader.dll
                                                                        • Size 5.2MB
                                                                        • SHA256 7d2774eab7cf7daea6e112092a45862a651689e863fa8c22dbf55c777718d70b
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        vk_swiftshader_icd.json

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\vk_swiftshader_icd.json
                                                                        • Size 106B
                                                                        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        vulkan-1.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\7z-out\vulkan-1.dll
                                                                        • Size 938KB
                                                                        • SHA256 9772ec778911124af85619663f6a78eb0596860a6c27e3e03e9eb0a31cea1cf8
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        SpiderBanner.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\SpiderBanner.dll
                                                                        • Size 9KB
                                                                        • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        StdUtils.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\StdUtils.dll
                                                                        • Size 100KB
                                                                        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        System.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\System.dll
                                                                        • Size 12KB
                                                                        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        WinShell.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\WinShell.dll
                                                                        • Size 3KB
                                                                        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        nsis7z.dll

                                                                        • Path C:\Users\Admin\AppData\Local\Temp\nssBB87.tmp\nsis7z.dll
                                                                        • Size 424KB
                                                                        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                                                                        • MD5 SHA1 SHA512 SSDEEP TLSH

                                                                        default.exc

                                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                                                                        • Size 2B
                                                                        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                                        • MD5 SHA1 SHA512

                                                                        data_0

                                                                        • Path C:\Users\Admin\AppData\Roaming\TokenGenerator\GPUCache\data_0
                                                                        • Size 8KB
                                                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        data_1

                                                                        • Path C:\Users\Admin\AppData\Roaming\TokenGenerator\GPUCache\data_1
                                                                        • Size 264KB
                                                                        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        data_2

                                                                        • Path C:\Users\Admin\AppData\Roaming\TokenGenerator\GPUCache\data_2
                                                                        • Size 8KB
                                                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        data_3

                                                                        • Path C:\Users\Admin\AppData\Roaming\TokenGenerator\GPUCache\data_3
                                                                        • Size 8KB
                                                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                                        • MD5 SHA1 SHA512 SSDEEP

                                                                        Network Persistent State

                                                                        • Path C:\Users\Admin\AppData\Roaming\TokenGenerator\Network\Network Persistent State
                                                                        • Size 855B
                                                                        • SHA256 67a731a55afd07b85d698c80fbbe3e5e6088953a3903029ce00223b9bc4a65d9
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        Network Persistent State~RFe5b172e.TMP

                                                                        • Path C:\Users\Admin\AppData\Roaming\TokenGenerator\Network\Network Persistent State~RFe5b172e.TMP
                                                                        • Size 59B
                                                                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                                        • MD5 SHA1 SHA512 TLSH

                                                                        memory/124-2183-0x000001A784280000-0x000001A784281000-memory.dmp

                                                                        memory/124-2181-0x000001A784280000-0x000001A784281000-memory.dmp

                                                                        memory/124-2188-0x000001A784280000-0x000001A784281000-memory.dmp

                                                                        memory/124-2192-0x000001A784280000-0x000001A784281000-memory.dmp

                                                                        memory/124-2191-0x000001A784280000-0x000001A784281000-memory.dmp

                                                                        memory/124-2190-0x000001A784280000-0x000001A784281000-memory.dmp

                                                                        memory/124-2189-0x000001A784280000-0x000001A784281000-memory.dmp

                                                                        memory/124-2187-0x000001A784280000-0x000001A784281000-memory.dmp