Analysis

  • user interaction
    yes
  • max time kernel
    298s
  • max time network
    206s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    23/06/2026, 11:45

General

  • Target
    Modmixer-0.9.2.Setup.exe
  • Size 176.5MB
  • Sample260623-nwt4gact3q
  • SHA256 0f9b5f2b44e0f89ae12bd3e046a42f996ccaf9112e4e6c8daab19d0ed7127465
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

  • Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 9 IoCs
  • Loads dropped DLL 7 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 24 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Modmixer-0.9.2.Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Modmixer-0.9.2.Setup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4384
    • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
      "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1628
      • C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\Squirrel.exe
        "C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
        3⤵
        • Executes dropped EXE
        PID:1932
      • C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\modmixer.exe
        "C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\modmixer.exe" --squirrel-install 0.9.2
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Checks processor information in registry
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:2828
        • C:\Users\Admin\AppData\Local\modmixer\Update.exe
          C:\Users\Admin\AppData\Local\modmixer\Update.exe --createShortcut=modmixer.exe
          4⤵
          • Executes dropped EXE
          PID:2276
        • C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\modmixer.exe
          C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\modmixer.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\Modmixer /prefetch:4 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\Modmixer\Crashpad --url=https://f.a.k/e --annotation=_productName=Modmixer --annotation=_version=0.9.2 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=41.3.0 --initial-client-data=0x490,0x498,0x49c,0x46c,0x4a0,0x7ff730e5ac54,0x7ff730e5ac60,0x7ff730e5ac70
          4⤵
          • Executes dropped EXE
          PID:2264
        • C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\modmixer.exe
          "C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\modmixer.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Modmixer" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2264,i,5746471579904295195,2558859136940515231,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2268,i,10112566629071415997,7821041071914465777,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2260 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3660
        • C:\Users\Admin\AppData\Local\modmixer\Update.exe
          C:\Users\Admin\AppData\Local\modmixer\Update.exe --checkForUpdate https://update.electronjs.org/lebek/modmixer/win32-x64/0.9.2
          4⤵
          • Executes dropped EXE
          PID:4772
        • C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\modmixer.exe
          "C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\modmixer.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Modmixer" --standard-schemes=modmixer-asset --secure-schemes=modmixer-asset,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --field-trial-handle=2264,i,5746471579904295195,2558859136940515231,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2268,i,10112566629071415997,7821041071914465777,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2636 /prefetch:3
          4⤵
          • Executes dropped EXE
          PID:4724
        • C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\modmixer.exe
          "C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\modmixer.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Modmixer" --standard-schemes=modmixer-asset --secure-schemes=modmixer-asset,sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --app-user-model-id=com.squirrel.modmixer.modmixer --app-path="C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2264,i,5746471579904295195,2558859136940515231,262144 --enable-features=DocumentPolicyIncludeJSCallStacksInCrashReports,EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2268,i,10112566629071415997,7821041071914465777,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3052 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4188

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Update.exe.log

        • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\Update.exe.log
        • Size 1KB
        • SHA256 1f5a1b10b49c35bff02f63ebaf8cd3faf74b51bd131d3dcfb952590c8bcd5eea
        • MD5 SHA1 SHA512 TLSH

        RELEASES

        • Path C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
        • Size 79B
        • SHA256 1dc32578e9025ec023f98ff01657fddbcb8da6b68fea3e970674fa17631bafbf
        • MD5 SHA1 SHA512 TLSH

        Update.exe

        • Path C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
        • Size 1.8MB
        • SHA256 ada9d28c0bfb7c3b8f1b4cd075447afc999d6cc58c81e5f664018624fd420c75
        • MD5 SHA1 SHA512 SSDEEP TLSH

        background.gif

        • Path C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif
        • Size 97KB
        • SHA256 fd5d6d67d938c24db7b17ad09ab29fdb9b7393463f4790ed4de2ae84da47f2b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        setupIcon.ico

        • Path C:\Users\Admin\AppData\Local\SquirrelTemp\setupIcon.ico
        • Size 74KB
        • SHA256 adf5ccf60bd710de8261d70cdec80b93c1126d7d2ea1b2604ffdc6299cec454d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\chrome_100_percent.pak
        • Size 113KB
        • SHA256 34433fa04ddf5eb78b3b4e9c64a3af626e28641907ad7a6086614eb6a8f00a07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\chrome_200_percent.pak
        • Size 183KB
        • SHA256 581c8d53199c10512d31a340699f9ad269f8eea5fe6bc49e05c1bde98ee612aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\d3dcompiler_47.dll
        • Size 4.5MB
        • SHA256 4b1d69cfa080cd20c2f7c8316462087f509c129757d650c87526943209ee7d73
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxcompiler.dll

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\dxcompiler.dll
        • Size 24.5MB
        • SHA256 21215662382e0eabc65082e09ba017c8fece1cf9107ec8deb0939a1408b42eba
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxil.dll

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\dxil.dll
        • Size 1.4MB
        • SHA256 da52acb03fdced7453bdbf759cbdee46e9260a7ee9b9b7fd6e0d110cc9254ccd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\icudtl.dat
        • Size 10.3MB
        • SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\libEGL.dll
        • Size 525KB
        • SHA256 e4cf57dcd7bcc4f815cfc76227ac41f2037a07bfd3ad85da255f2de9e87c5dd9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\libGLESv2.dll
        • Size 7.6MB
        • SHA256 a2d9e117b0d28b3b9893427f54a589eeafc2aaa6593b06a4cc46e9d370feb2f0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\locales\en-US.pak
        • Size 548KB
        • SHA256 a02518efe75c630a1b5419af5ffdb1b16636b939139bccd7710e37f36ad9d55c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pak

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources.pak
        • Size 6.4MB
        • SHA256 741b7aebbec65ed7af754530e77b45ea4274e8f7c012c4396de789563a1183a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app.asar

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\app.asar
        • Size 8.1MB
        • SHA256 f239a54ab420dd95fa13b06971d183fd1fe5a7cfedb91408f602e7b0a27ccdc7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        animation.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\animation.md
        • Size 6KB
        • SHA256 e8d56156571028c884a9e5cc832a0f8cbb5a7c2254edd8193ccba3f89362f862
        • MD5 SHA1 SHA512 SSDEEP TLSH

        assets.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\assets.md
        • Size 11KB
        • SHA256 e25ac061f67a0a804cabaf9e33978bed921aece35cf380ce33d5591926db9f0d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        build.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\build.md
        • Size 15KB
        • SHA256 2de928988c454b5c91d61f2e3e67e2ae6039c27175c7df4ef8dc3f47c9355e21
        • MD5 SHA1 SHA512 SSDEEP TLSH

        compat.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\compat.md
        • Size 3KB
        • SHA256 21b400b286f17b0f937f589fdbfafbdc5c61d123d2d28ead33c8ba2010e6415f
        • MD5 SHA1 SHA512 TLSH

        debugging.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\debugging.md
        • Size 1KB
        • SHA256 7faeca7e5118e5f5ecf261384405b41106cc09b99709baa6870cf9a172e3ac17
        • MD5 SHA1 SHA512 TLSH

        defs.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\defs.md
        • Size 17KB
        • SHA256 84c1dd6b9df5a45d524ba48c11f5737f69bf4bbb11c58bde88eb3f9cafc98279
        • MD5 SHA1 SHA512 SSDEEP TLSH

        factions.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\factions.md
        • Size 3KB
        • SHA256 c64f30aedfe4b4a7b38b78d9e28ac6b6b10e5540671444036eb7bd99e0a6e257
        • MD5 SHA1 SHA512 TLSH

        harmony.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\harmony.md
        • Size 41KB
        • SHA256 92dc9456e81a2f240253c44a279b24d008f4ca1311e6e1c30a6cd1e0d352387a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ideology.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\ideology.md
        • Size 2KB
        • SHA256 5aff44a7bdebec8af9e8ed807f0e7eed1925c447bdc4345a68add25a58585f2c
        • MD5 SHA1 SHA512 TLSH

        localization.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\localization.md
        • Size 1KB
        • SHA256 e69ccfcceecbd691a156dfb987d0ca17128fbf397212489459075ee3240e2aad
        • MD5 SHA1 SHA512 TLSH

        misc.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\misc.md
        • Size 16KB
        • SHA256 3ff7157f1bf7adafcca20ae89b1b4cfee6cbc3860660e74c4d70fc2153324552
        • MD5 SHA1 SHA512 SSDEEP TLSH

        patches.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\patches.md
        • Size 1KB
        • SHA256 fae0b43ebed8b43fd8d67bd4e735475958d1c85565fef66e99c825b315150f3d
        • MD5 SHA1 SHA512 TLSH

        pawns.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\pawns.md
        • Size 8KB
        • SHA256 32d799d4eae0a02c46e71a8d215d6299f2560538dade83e58aee6ebde4a94f80
        • MD5 SHA1 SHA512 SSDEEP TLSH

        performance.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\performance.md
        • Size 9KB
        • SHA256 5b502f52d2fe453c02a439532b03428bd4e933559763bbc1b3c5236a5f4fd5a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        scribe-saving.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\scribe-saving.md
        • Size 2KB
        • SHA256 5e13620c4a089cd35f69ecc3fba458b26174d690f7b1107955e653f2f0c5fa2f
        • MD5 SHA1 SHA512 TLSH

        sounds.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\sounds.md
        • Size 7KB
        • SHA256 b5466ba5aa9343d14bce93449504848ebb9a8ddf7e8527eeefc1ab7ece307630
        • MD5 SHA1 SHA512 SSDEEP TLSH

        test-loop.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\test-loop.md
        • Size 8KB
        • SHA256 7cd022329a706c7e6ba8a14506d9bca1f381bcde7e3c100ac15cd5fdf9b80814
        • MD5 SHA1 SHA512 SSDEEP TLSH

        textures.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\textures.md
        • Size 4KB
        • SHA256 94e8e8fb840c5a55a3a133a17a9968d95d2b6878bb792c503e8afeadf0aaad16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        things.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\things.md
        • Size 24KB
        • SHA256 e0b0edd02063f3d17e8ca5607b297e8bbb89cf57cbe30a4b1ba99e5f09bf384c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ui.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\ui.md
        • Size 53KB
        • SHA256 470036858149af87c5442b79e7f3a8aa75ab391650bfac2ae435daaebea41197
        • MD5 SHA1 SHA512 SSDEEP TLSH

        weather.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\weather.md
        • Size 1KB
        • SHA256 e442e5d8d0c61d2ab2029dad27363415ae70b58983de0bd6c5255c4bb546438d
        • MD5 SHA1 SHA512 TLSH

        world-incidents.md

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\resources\lore\world-incidents.md
        • Size 3KB
        • SHA256 cb12f509760c7274894fb4d7d167ca71381eb9c7fd95b8aeb119824c5a4db0b7
        • MD5 SHA1 SHA512 TLSH

        squirrel.exe

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\squirrel.exe
        • Size 1.9MB
        • SHA256 7ee765b5fdb180cad431b2f4dc74e20989cf9b4e153be506879f1fe4fe9e8ed5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\v8_context_snapshot.bin
        • Size 698KB
        • SHA256 c321440b5b893fabf4cb983c46c325e6b1959536b7c98a3f1f0200df8ad61a33
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\modmixer\app-0.9.2\vk_swiftshader.dll
        • Size 5.4MB
        • SHA256 b0f7ed33c87e3618c736765fbeea8f02ecb35cd1c8515fb87a79ef7055e9dc3c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        modmixer.exe

        • Path C:\Users\Admin\AppData\Local\modmixer\modmixer.exe
        • Size 339KB
        • SHA256 53cbe497baad9a071cf55fc6e8e4efba3e473d50c8bfaed36528ff26e649ac91
        • MD5 SHA1 SHA512 SSDEEP TLSH

        default.dic

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512

        data_0

        • Path C:\Users\Admin\AppData\Roaming\Modmixer\GPUCache\data_0
        • Size 8KB
        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
        • MD5 SHA1 SHA512 SSDEEP

        data_1

        • Path C:\Users\Admin\AppData\Roaming\Modmixer\GPUCache\data_1
        • Size 264KB
        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
        • MD5 SHA1 SHA512 SSDEEP

        data_2

        • Path C:\Users\Admin\AppData\Roaming\Modmixer\GPUCache\data_2
        • Size 8KB
        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
        • MD5 SHA1 SHA512 SSDEEP

        data_3

        • Path C:\Users\Admin\AppData\Roaming\Modmixer\GPUCache\data_3
        • Size 8KB
        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
        • MD5 SHA1 SHA512 SSDEEP

        CURRENT

        • Path C:\Users\Admin\AppData\Roaming\Modmixer\Session Storage\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512

        MANIFEST-000001

        • Path C:\Users\Admin\AppData\Roaming\Modmixer\Session Storage\MANIFEST-000001
        • Size 41B
        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
        • MD5 SHA1 SHA512

        models.json

        • Path C:\Users\Admin\AppData\Roaming\Modmixer\pi-agent\models.json
        • Size 883B
        • SHA256 0b7b42ee219c167cb7ba526220101ea10d5bc40810797a22754a67e8101542e3
        • MD5 SHA1 SHA512 TLSH

        memory/1628-8-0x0000000000A50000-0x0000000000C26000-memory.dmp

        memory/1628-248-0x0000000021D90000-0x0000000021D9E000-memory.dmp

        memory/1628-247-0x0000000021DC0000-0x0000000021DF8000-memory.dmp

        memory/1932-286-0x00000000003D0000-0x00000000005B8000-memory.dmp

        memory/2276-299-0x0000000002A40000-0x0000000002A60000-memory.dmp

        memory/4188-438-0x00007FF821500000-0x00007FF821501000-memory.dmp

        memory/4188-437-0x00007FF821BC0000-0x00007FF821BC1000-memory.dmp