Analysis

  • max time kernel
    902s
  • max time network
    339s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260706-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260706-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    06/07/2026, 23:26

General

  • Target
    Medya Formatlayıcı Setup 1.0.0.exe
  • Size 106.0MB
  • Sample260706-3fca2sav4n
  • SHA256 75d7959b34a36947819c3f331839476bf064159dc55f8f0f4ca14f082ca418f6
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 25 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Medya Formatlayıcı Setup 1.0.0.exe
    "C:\Users\Admin\AppData\Local\Temp\Medya Formatlayıcı Setup 1.0.0.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:5712
    • C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Medya Formatlayıcı.exe" /FO csv | "C:\Windows\system32\find.exe" "Medya Formatlayıcı.exe"
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:2724
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Medya Formatlayıcı.exe" /FO csv
        3⤵
        • Enumerates processes with tasklist
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:5488
      • C:\Windows\SysWOW64\find.exe
        "C:\Windows\system32\find.exe" "Medya Formatlayıcı.exe"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:952
  • C:\Users\Admin\AppData\Local\Programs\medya-formatlayici\Medya Formatlayıcı.exe
    "C:\Users\Admin\AppData\Local\Programs\medya-formatlayici\Medya Formatlayıcı.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Drops file in Windows directory
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:6024
    • C:\Users\Admin\AppData\Local\Programs\medya-formatlayici\Medya Formatlayıcı.exe
      "C:\Users\Admin\AppData\Local\Programs\medya-formatlayici\Medya Formatlayıcı.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\medya-formatlayici" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=2396,i,12480471819400841902,7822863324178932920,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2388 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1632
    • C:\Users\Admin\AppData\Local\Programs\medya-formatlayici\Medya Formatlayıcı.exe
      "C:\Users\Admin\AppData\Local\Programs\medya-formatlayici\Medya Formatlayıcı.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\medya-formatlayici" --field-trial-handle=2572,i,12480471819400841902,7822863324178932920,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2640 /prefetch:11
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4372
    • C:\Users\Admin\AppData\Local\Programs\medya-formatlayici\Medya Formatlayıcı.exe
      "C:\Users\Admin\AppData\Local\Programs\medya-formatlayici\Medya Formatlayıcı.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\medya-formatlayici" --app-path="C:\Users\Admin\AppData\Local\Programs\medya-formatlayici\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=3012,i,12480471819400841902,7822863324178932920,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3000 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2036
    • C:\Users\Admin\AppData\Local\Programs\medya-formatlayici\Medya Formatlayıcı.exe
      "C:\Users\Admin\AppData\Local\Programs\medya-formatlayici\Medya Formatlayıcı.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\medya-formatlayici" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=3272,i,12480471819400841902,7822863324178932920,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1352 /prefetch:10
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:5656
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:5856
    • C:\Windows\System32\SecurityHealthHost.exe
      \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
      1⤵
        PID:2924

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            LICENSE.electron.txt

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\LICENSE.electron.txt
            • Size 1KB
            • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
            • MD5 SHA1 SHA512 TLSH

            LICENSES.chromium.html

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\LICENSES.chromium.html
            • Size 8.7MB
            • SHA256 c6080d60736384a4a8fdd23404d59ae2d939e5124d80df89f8fd4e450bb9bd6f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            chrome_100_percent.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\chrome_100_percent.pak
            • Size 148KB
            • SHA256 a659ee9eb38636f85f5336587c578fb29740d3effaff9b92852c8a210e92978c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            chrome_200_percent.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\chrome_200_percent.pak
            • Size 223KB
            • SHA256 2c1b3e4b8a0cf837ae0a390fca54f45d7d22418e040f1dfea979622383acced6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            d3dcompiler_47.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\d3dcompiler_47.dll
            • Size 4.7MB
            • SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ffmpeg.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\ffmpeg.dll
            • Size 2.8MB
            • SHA256 4fcdedbc68eae4b4cfe0eed275316fdf66c9d4a57a98d29a77d0e8f4149cfcbc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icudtl.dat

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\icudtl.dat
            • Size 10.0MB
            • SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libEGL.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\libEGL.dll
            • Size 481KB
            • SHA256 d9d2f5b5fae60a63523f92c07539dd93893ff7d9ffa41f0bb57caca4be9f2220
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libGLESv2.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\libGLESv2.dll
            • Size 8.0MB
            • SHA256 4b4dcbc7bb19449ec89d2bf06e7b05af9352a4e6f97f4444183dc3080e6c0f1d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            af.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\af.pak
            • Size 520KB
            • SHA256 c56cb2841ee2e40fbdd6b7e293a1ce74bd10fd500465fcf99d1e07f8d69f8ce7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            am.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\am.pak
            • Size 840KB
            • SHA256 49a2095ad9ffac0b7ffaadba64d2c2b51a05e0695e21d1c428735485757bd11c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ar.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\ar.pak
            • Size 921KB
            • SHA256 817829ad75dbc7d59b5042d7f056fa2485f82d1ae2af50ed83fd89f86f3d58fc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            bg.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\bg.pak
            • Size 959KB
            • SHA256 f08de6909faf88465c28388aa03fdf08e165866a5a23c738ed33382275c4ec83
            • MD5 SHA1 SHA512 SSDEEP TLSH

            bn.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\bn.pak
            • Size 1.2MB
            • SHA256 5a57265ebac6df683f0279684909755ad71ea70fea71c6ecc1810eac61d1cb3d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ca.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\ca.pak
            • Size 584KB
            • SHA256 bc2b7d6a769c69b27a81cc09a1babd4ccaf003fae32f8294a38e498f2c529c89
            • MD5 SHA1 SHA512 SSDEEP TLSH

            cs.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\cs.pak
            • Size 602KB
            • SHA256 db040e9f17d2792801c07a7bb3ac96c21d8189c98e9ab34210c5888b2ee53aa1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            da.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\da.pak
            • Size 545KB
            • SHA256 e32681cdd03db28eb360b1b4203c2988190b7b6f77679ca807cd95a1967ded04
            • MD5 SHA1 SHA512 SSDEEP TLSH

            de.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\de.pak
            • Size 582KB
            • SHA256 4f123245b062d71d56819ac1198d13a3d7953decd4491fca0fbd22c5e129c3bd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            el.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\el.pak
            • Size 1.0MB
            • SHA256 b8707f2511c4ec5533077009771f3aa92b0fb5b395b13907f5860a9151b2431d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            en-GB.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\en-GB.pak
            • Size 474KB
            • SHA256 3bf7e7e02c40dac55ce9bd5b4789eaa99e57271b2d907a5ce2ca90b979a58c39
            • MD5 SHA1 SHA512 SSDEEP TLSH

            en-US.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\en-US.pak
            • Size 478KB
            • SHA256 75db989561e145d0d990c4918502316c77ce66b344d3dce4739e3a6db43fde82
            • MD5 SHA1 SHA512 SSDEEP TLSH

            es-419.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\es-419.pak
            • Size 575KB
            • SHA256 4dedec1ac933c73773b1e54caab1c4d606d12f3788cbeef4d6a2a382138cc907
            • MD5 SHA1 SHA512 SSDEEP TLSH

            es.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\es.pak
            • Size 575KB
            • SHA256 a32221be9b65aead3fa779dc54e5ca483a7d73c4815e5c7c3b53711f560bd301
            • MD5 SHA1 SHA512 SSDEEP TLSH

            et.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\et.pak
            • Size 523KB
            • SHA256 a4d1fe9903641540b11e0d00e574a6665a1602ad81f6aae9a083ebd04bc768c7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fa.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\fa.pak
            • Size 855KB
            • SHA256 ef9e5b71063c26b1a5d512f5e14c3f7fe5a1925ff25ca799c51f8073c33bb90a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fi.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\fi.pak
            • Size 534KB
            • SHA256 93c49ec40accea8e1f4f9b7db68b9b818f8db0b7591cea67ae9bf663c1c57728
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fil.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\fil.pak
            • Size 604KB
            • SHA256 9b69d82f50c159d1ec5603ef45dc139143b4f05761f38f263a66fffedd28ff5e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\fr.pak
            • Size 622KB
            • SHA256 8bf019aed30d972883d5c29d3f44c8b0d8fc6425ab48ae3354d71e4762a0cf01
            • MD5 SHA1 SHA512 SSDEEP TLSH

            gu.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\gu.pak
            • Size 1.2MB
            • SHA256 1adaaacf2f9ab872fb35932fd1ed3b005f370f0ec22b95b42039b4c58660675c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            he.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\he.pak
            • Size 751KB
            • SHA256 df1b83384ad42d4ca9f47aebc909baa8a6dde79fa1b0706023a279698e302e89
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hi.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\hi.pak
            • Size 1.3MB
            • SHA256 f73ccac3debba20fb225209805ff2383609853111f931e6b82095c1eb56a6ce4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\hr.pak
            • Size 581KB
            • SHA256 630277358f658c9c39a775dee247f38ac0a0a618a5645260f445ac89d7ac7a46
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hu.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\hu.pak
            • Size 625KB
            • SHA256 ec81ac981af0e962654ad4f65030064a6369dc2316cb1b10bb24b473808ad1e9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            id.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\id.pak
            • Size 516KB
            • SHA256 aeb815a3dc6ce3cd1edf2c158a3b16e9c8039af25752367bf13826516a295cb9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            it.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\it.pak
            • Size 567KB
            • SHA256 1b16b0af558629dd53e35d1b4bb7b18dc1d8cb5353a4261112d2cd3b0a4c55ea
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ja.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\ja.pak
            • Size 691KB
            • SHA256 b2afe7e5f6ebba31248ea00a157c9f5752cd6855194a0d122b3a6c90a1d9be83
            • MD5 SHA1 SHA512 SSDEEP TLSH

            kn.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\kn.pak
            • Size 1.4MB
            • SHA256 4e323def774ac53daf99d2075878456d8885c3380c7895ecf3ab10a2953d532a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ko.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\ko.pak
            • Size 585KB
            • SHA256 dc1d4b203674269f00aeb303f74e2948bc74e5956b1770acd2fbb517ad4274a2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            lt.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\lt.pak
            • Size 629KB
            • SHA256 9fe73d75dd155d0bda60a638b8f8d48048d17fadfd2d746bac597e5ac3b7f6dd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            lv.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\lv.pak
            • Size 628KB
            • SHA256 5c74465b83cef9aae45a6b61499e79b745a91a6038fdd61a3321425056f77b5b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ml.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\ml.pak
            • Size 1.4MB
            • SHA256 67d9ae2dbfecdfddc4c23a206828010c6d42b8094477a03ce04b60a8d110eea2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\mr.pak
            • Size 1.2MB
            • SHA256 7181c3bc7a369d2d0b8ae6c1cf8f160603ec56996d20b266833edc3acce4c78e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ms.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\ms.pak
            • Size 541KB
            • SHA256 6a3ced7828f0608297da29c99832a389ec9d0d03060ddb20304cd081be494adb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nb.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\nb.pak
            • Size 525KB
            • SHA256 697882ac2da78894e449cb1f75da43e7115c2481bbd2fee3bdaa425e82fc232c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nl.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\nl.pak
            • Size 543KB
            • SHA256 ac22005c476adbb7f3bcf0b17597a7a1595b83c4e6a8760d5553b630f0833305
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pl.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\pl.pak
            • Size 604KB
            • SHA256 e8a107b3568a289a6e60118e4b8e2f27338116dafcef078311bc16f0857b1f35
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pt-BR.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\pt-BR.pak
            • Size 567KB
            • SHA256 1c0d67a4259df36655aa97761e71e02bb0407e7bb1fe1319394e0916c7d76f7f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pt-PT.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\pt-PT.pak
            • Size 571KB
            • SHA256 9ebafb943bf20c66f8d9ca533633fdc63519e8ad38d78a3dd28b4457c38ba79d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ro.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\ro.pak
            • Size 592KB
            • SHA256 cf59cd7c26cfe3d87ed2b3a2ef254c3a3667824bbf06cd591bfc9dbf2a83ab91
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ru.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\ru.pak
            • Size 972KB
            • SHA256 2d682d4a3ee1157085086c839cf55e500ec1d1674f66be7088eb25768a30c7a1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sk.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\sk.pak
            • Size 611KB
            • SHA256 347196c447db2926f9e410905ff47fc0900ca97645e43236ba3b49f0550cfa24
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sl.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\sl.pak
            • Size 587KB
            • SHA256 e8b877b4830b3a1163618107342e55756efe494adcdc82d10d963ad900b9f572
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\sr.pak
            • Size 903KB
            • SHA256 6f3d0c4ea29880624f07f0f794a6ea1ef735255dc218a241be1557331ebc3c28
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sv.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\sv.pak
            • Size 528KB
            • SHA256 d6ad9726da354174df5eb7ea3ceba202df17936c5075a4b8e096de35f1abbe42
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sw.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\sw.pak
            • Size 557KB
            • SHA256 434879a83079fba562af9dac928ad2fcc1033e0a6a5a1f4822d36e710decdd2b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ta.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\ta.pak
            • Size 1.4MB
            • SHA256 0e1d7c0fa1eab312b42ff5e8978b7146d6cac313603fcaf101bef2eedc70313b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            te.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\te.pak
            • Size 1.3MB
            • SHA256 1faa8cb780908552f3ca0d2b0e20eb6aaa902cb5bd759c18ed1238beb0bb34dd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            th.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\th.pak
            • Size 1.1MB
            • SHA256 9210c77f0024c705018f5292b3021d3eca58bb290604b116e2d4e355b8ebfc59
            • MD5 SHA1 SHA512 SSDEEP TLSH

            tr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\tr.pak
            • Size 567KB
            • SHA256 25d1667b691b5a950b8b42652f7763338cfd238b22d6bd35a5c38da8cb73a67a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            uk.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\uk.pak
            • Size 972KB
            • SHA256 017e34397fd52f4e42bb99ab1d7c4624055312a16d58da03aafffdcae770aecd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ur.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\ur.pak
            • Size 850KB
            • SHA256 ace832351fb9392fc308730ff74e5063caefe9903c5a01d9083a3ddf2ba93755
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vi.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\vi.pak
            • Size 673KB
            • SHA256 536538d1704c7b23d3b21beddcd4669151de276d259a9ea7192132696e54e146
            • MD5 SHA1 SHA512 SSDEEP TLSH

            zh-CN.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\zh-CN.pak
            • Size 484KB
            • SHA256 6446826e1e9f38f06ab85bf2abe05af88fa7fd5c636c2c74aa2b989c458b879b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            zh-TW.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\locales\zh-TW.pak
            • Size 479KB
            • SHA256 514d6a95fc7094ff00cb7700bca2b10191df866c18c551e1d2c07050ddee80bf
            • MD5 SHA1 SHA512 SSDEEP TLSH

            resources.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources.pak
            • Size 5.5MB
            • SHA256 ffaeea94c6594d4e66fc523c218c161c58aee1f59b9cb006bbb45d9a49e3a6a1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            app.asar

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar
            • Size 12.6MB
            • SHA256 fd1d9ac904edc208d08ceb4ee7451d2db64677d81d4c68960fe9be7e8073c8d7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LICENSE.md

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\colour\LICENSE.md
            • Size 4KB
            • SHA256 e2eaa4603c14cb26f301e88648c12a853fa3f0f5da6d4b0972958c666e7f2ab8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            color.cjs

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\colour\color.cjs
            • Size 44KB
            • SHA256 f7c3efcf482624007f2019fffee3e1dec56b8cb893faa9a420b2832805888dce
            • MD5 SHA1 SHA512 SSDEEP TLSH

            index.cjs

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\colour\index.cjs
            • Size 49B
            • SHA256 e6e93e7fb209420a20fdf2ec676e9c67413be8d5ace99eec64f9468480f0368d
            • MD5 SHA1 SHA512

            package.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\colour\package.json
            • Size 1KB
            • SHA256 d8de837c60986566ef156246162f79d5ebc90d9dfe515f3207406759962b4b14
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\sharp-win32-x64\LICENSE
            • Size 10KB
            • SHA256 dc1f5d2d43c5531dfe0acaf4e950ea5dbe3e61e1850cf0e983bda7efc10d6693
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libvips-42.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\sharp-win32-x64\lib\libvips-42.dll
            • Size 18.2MB
            • SHA256 f8d356def73941668252347b825055310e99023ff77c7d3036e592d0771e1529
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libvips-cpp-8.17.3.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\sharp-win32-x64\lib\libvips-cpp-8.17.3.dll
            • Size 319KB
            • SHA256 f1b3c3eeea1b6a8292a69d78dd2cd1debacb9951cabdd9217a57e34137570cd1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sharp-win32-x64.node

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\sharp-win32-x64\lib\sharp-win32-x64.node
            • Size 423KB
            • SHA256 afc813593f255968ddae8f1d66557e0f96484bb374606e4eb2267a7dbc7cb25a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\sharp-win32-x64\package.json
            • Size 908B
            • SHA256 3421485756b0a25573ee62e147a62908608e3014a2bfed64381473a22e9351d2
            • MD5 SHA1 SHA512 TLSH

            versions.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\sharp-win32-x64\versions.json
            • Size 594B
            • SHA256 e823074bfa33ed7b1861b797dd3c60d7ef8c34cd2faa9a7d22ec32dd6d6ad8ad
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\LICENSE
            • Size 34KB
            • SHA256 3972dc9744f6499f0f9b2dbf76696f2ae7ad8af9b23dde66d6af86c9dfb36986
            • MD5 SHA1 SHA512 SSDEEP TLSH

            example.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\example.js
            • Size 1KB
            • SHA256 05efb45cbf30cbcb3279c90db71163568ed2102656857ed2c08eb46a89fd9053
            • MD5 SHA1 SHA512 TLSH

            ffmpeg.exe.LICENSE

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\ffmpeg.exe.LICENSE
            • Size 34KB
            • SHA256 8ceb4b9ee5adedde47b31e975c1d90c73ad27b6b165a1dcd80c7c545eb65b903
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ffmpeg.exe.README

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\ffmpeg.exe.README
            • Size 38KB
            • SHA256 a636a7183c58006351acbaf35303c0ed85c6e1320fd4e80de453ba6157de6311
            • MD5 SHA1 SHA512 SSDEEP TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\index.js
            • Size 1KB
            • SHA256 ca4ca945d60557d20f99c11fdcd338f85a55ff38b19868b1e8755b7a5c350a9d
            • MD5 SHA1 SHA512 TLSH

            install.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\install.js
            • Size 6KB
            • SHA256 9801ce3aa35e45f72f7d13339ff04c916011b529040d1a1301c74102ed335fb9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\node_modules\agent-base\dist\src\index.js
            • Size 7KB
            • SHA256 13b6d658b492796461358e19fe1de30665ab2efb04c726b82530352cd364d4ac
            • MD5 SHA1 SHA512 SSDEEP TLSH

            index.js.map

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\node_modules\agent-base\dist\src\index.js.map
            • Size 5KB
            • SHA256 9e206a009216ba513d06c1e3e7e34a2a9cfb96b576c40e26645b4732e4420c85
            • MD5 SHA1 SHA512 SSDEEP TLSH

            promisify.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\node_modules\agent-base\dist\src\promisify.js
            • Size 495B
            • SHA256 7db1e28ac19b38be8cf3edecac66c7084bb00b65f6755a83309bcf10564b5771
            • MD5 SHA1 SHA512 TLSH

            promisify.js.map

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\node_modules\agent-base\dist\src\promisify.js.map
            • Size 499B
            • SHA256 7954e5478a28182dfa3d4a21f33ff687c6d725b0a2b8eed04633ea57eefba6d9
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\node_modules\agent-base\package.json
            • Size 1KB
            • SHA256 1c22afa50ae7fedb6d51d34394cccb31fc4ed27163271d3060355b044a5b5777
            • MD5 SHA1 SHA512 TLSH

            index.ts

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\node_modules\agent-base\src\index.ts
            • Size 8KB
            • SHA256 63b9c52366354393361bbbd40158a3051d39a6e2db4ce564418e01e4ecd1bc64
            • MD5 SHA1 SHA512 SSDEEP TLSH

            promisify.ts

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\node_modules\agent-base\src\promisify.ts
            • Size 649B
            • SHA256 b199581471074102ec7b2c89dbbff48249b3c9c9f9261d9fe32a110d76f7a526
            • MD5 SHA1 SHA512 TLSH

            agent.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\node_modules\https-proxy-agent\dist\agent.js
            • Size 7KB
            • SHA256 cdf5601776256dee031a1275186c409578ddba5aa441e66c0bea785f81e185e6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            agent.js.map

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\node_modules\https-proxy-agent\dist\agent.js.map
            • Size 4KB
            • SHA256 d9334573c441d153128eb3401147fdb3ba34ab48fd9fc85e88c2d389b3ce5cd3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\node_modules\https-proxy-agent\dist\index.js
            • Size 579B
            • SHA256 7f18e187a92bf3691b1728523ad5863f08ace4d25599535e1471f1f81e90f2cd
            • MD5 SHA1 SHA512 TLSH

            index.js.map

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\node_modules\https-proxy-agent\dist\index.js.map
            • Size 362B
            • SHA256 87ee8e0ed31bf580ee85f91cd0a0a05528a8b3a34336bd7b150d082b412ce82d
            • MD5 SHA1 SHA512 TLSH

            parse-proxy-response.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\node_modules\https-proxy-agent\dist\parse-proxy-response.js
            • Size 2KB
            • SHA256 24c1737b73db4c109a4cb184ca768b4e85f6cc6cfcc74ed3836388a995b3e557
            • MD5 SHA1 SHA512 TLSH

            parse-proxy-response.js.map

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\node_modules\https-proxy-agent\dist\parse-proxy-response.js.map
            • Size 1KB
            • SHA256 57a386a0393252db29cd35ca216a1da4e7a0896871cdc8c9caddec99572bb88b
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\node_modules\https-proxy-agent\package.json
            • Size 1KB
            • SHA256 5cb594f8198cff9c055f9fd0be3564d1230b4df27a40fe5279772dfdc4da874f
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\ffmpeg-static\package.json
            • Size 982B
            • SHA256 2b3d5187b927250e607677f672d784bbd282a3a7d3f9b64480744e2e7fb05ec2
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\LICENSE
            • Size 10KB
            • SHA256 73ba74dfaa520b49a401b5d21459a8523a146f3b7518a833eea5efa85130bf68
            • MD5 SHA1 SHA512 SSDEEP TLSH

            build.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\install\build.js
            • Size 882B
            • SHA256 37f7c9591d75dbc5fe734c5a196a46c355b3d7de5134260ba011efed8433a718
            • MD5 SHA1 SHA512 TLSH

            check.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\install\check.js
            • Size 383B
            • SHA256 31fd360ede9ff3e80d643faff6c4570d0b2b5c621dc421b6c4086dfe86ce981f
            • MD5 SHA1 SHA512 TLSH

            channel.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\channel.js
            • Size 5KB
            • SHA256 4a699621c111427f9f6b3b767764a292f6a358616de2866e0078475830420f42
            • MD5 SHA1 SHA512 SSDEEP TLSH

            colour.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\colour.js
            • Size 5KB
            • SHA256 024d2e9c04d50b492e91ae781da539c837fcaf40a585508c043356fdd9e69297
            • MD5 SHA1 SHA512 SSDEEP TLSH

            composite.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\composite.js
            • Size 8KB
            • SHA256 73f04ab765a11bfc72771dbd0a6324e8e34ea354d16108cc1277bba4e80dd523
            • MD5 SHA1 SHA512 SSDEEP TLSH

            constructor.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\constructor.js
            • Size 19KB
            • SHA256 b38f3e7ceecc305a8f81f278bf9219cba966993b8c2d7cebafdb8e8d5005760c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\index.js
            • Size 385B
            • SHA256 5e30578a16290fa0855c32fe3d544ce4f26c147de6bad69cffaf7bc416a2919a
            • MD5 SHA1 SHA512 TLSH

            input.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\input.js
            • Size 32KB
            • SHA256 d88bdf5d807ef57ce8aa5d9be29bc7b9199974eac385bf559f19d5fc06bd632a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\is.js
            • Size 2KB
            • SHA256 7ecb71679b5b58e7ddf7e14fa697ff6a31bbe9ef107745170095031519e93463
            • MD5 SHA1 SHA512 TLSH

            libvips.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\libvips.js
            • Size 5KB
            • SHA256 ae8cbc8008bf88f5100ca56729ed43d45cd88316e030dc2eed62e142f657cd79
            • MD5 SHA1 SHA512 SSDEEP TLSH

            operation.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\operation.js
            • Size 32KB
            • SHA256 01019d62cfb83c5f6192a65a4a97635214e5dc61da07c51be59b8216ba907a7a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            output.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\output.js
            • Size 59KB
            • SHA256 71cec9ac95f3db764ee4d2e26eec1deb16da63c47fdd352f6a41af4dbb0f1831
            • MD5 SHA1 SHA512 SSDEEP TLSH

            resize.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\resize.js
            • Size 20KB
            • SHA256 d85081a35bb1195ff6f057d2db4343adfe3241abccc7e277d13673a116fea1ad
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sharp.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\sharp.js
            • Size 3KB
            • SHA256 59e9436f1c62a58b8781acb3803e55114bada9984cc7c39b9291769155811cd3
            • MD5 SHA1 SHA512 TLSH

            utility.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\utility.js
            • Size 9KB
            • SHA256 ada1854f397f54ee09286094a4f4cd9a4d4af9f4ddbaae3b4f477edbd8c1fd14
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\LICENSE
            • Size 765B
            • SHA256 4ec3d4c66cd87f5c8d8ad911b10f99bf27cb00cdfcff82621956e379186b016b
            • MD5 SHA1 SHA512 TLSH

            semver.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\bin\semver.js
            • Size 4KB
            • SHA256 bd6c871026985937dc945011fc54b74b47f5998154216d7b8d40d5ed782e4402
            • MD5 SHA1 SHA512 SSDEEP TLSH

            comparator.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\classes\comparator.js
            • Size 3KB
            • SHA256 054202956430d63d5ff4599fae09760ce465b489e4f0b5ef5ce7cc7ac21157ac
            • MD5 SHA1 SHA512 TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\classes\index.js
            • Size 143B
            • SHA256 3bb69280c2a788d0eb16f915bb9df4dbe812075182024c753dca2283bcea1b17
            • MD5 SHA1 SHA512 TLSH

            range.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\classes\range.js
            • Size 15KB
            • SHA256 a6544485aa8575aa9854c67e2caa67726815de18a482d0ceb8a1003244de3bc1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            semver.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\classes\semver.js
            • Size 9KB
            • SHA256 813b2c185512d30c9b931c2fed8140889d9d7490ceeeedc370da30337dc8ca57
            • MD5 SHA1 SHA512 SSDEEP TLSH

            clean.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\clean.js
            • Size 205B
            • SHA256 4eadb0892844cf3ae295121a86163a66c73f89acd1b7f0b114ec115b4539512f
            • MD5 SHA1 SHA512 TLSH

            cmp.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\cmp.js
            • Size 961B
            • SHA256 a63d74e87b73788e78e9ce0a4892b5333d6b809c0de88b31e4ed76cbf17f94b3
            • MD5 SHA1 SHA512 TLSH

            coerce.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\coerce.js
            • Size 1KB
            • SHA256 28a251c5ab210ddf9e97551b9f37a53329fcce91f0c3943dcbc02de1a1de915a
            • MD5 SHA1 SHA512 TLSH

            compare-build.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\compare-build.js
            • Size 281B
            • SHA256 5ab651d5b40af289bd85c645a92b6d8cfe1a986dc413c797cfcc8d623d7c844c
            • MD5 SHA1 SHA512 TLSH

            compare-loose.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\compare-loose.js
            • Size 132B
            • SHA256 07b6a3a1db0a5210ceb784c1708bd4679f3a94fc73a9c9eb349349e7070a6f78
            • MD5 SHA1 SHA512 TLSH

            compare.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\compare.js
            • Size 170B
            • SHA256 d404b5aa48aaddc8a654c5da8fb7d4443404b7948589b21ac4b045d1cee4e34c
            • MD5 SHA1 SHA512 TLSH

            diff.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\diff.js
            • Size 1KB
            • SHA256 7a11fd39b987cdf06c65e928cb1aca49bec583feb86fb5c8fe47a6fd61d7de31
            • MD5 SHA1 SHA512 TLSH

            eq.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\eq.js
            • Size 126B
            • SHA256 b6e30a7168e52723216fc163d300e2bbabf92ec0251f9ac5438bb6ccf57c8936
            • MD5 SHA1 SHA512 TLSH

            gt.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\gt.js
            • Size 124B
            • SHA256 135523704aa48cd98834dd170ee9f74f0e68043b379f32d021db11e6304c5c93
            • MD5 SHA1 SHA512 TLSH

            gte.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\gte.js
            • Size 127B
            • SHA256 991c5bbe48ecb210a562646872f05862ad9fc0d42186d85aa60bdc6fa323eb9d
            • MD5 SHA1 SHA512 TLSH

            inc.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\inc.js
            • Size 478B
            • SHA256 952069fc8690b7d3af0fe9d55f7c54fe2ac067b48c5e74f6a54f9ce19a334493
            • MD5 SHA1 SHA512 TLSH

            lt.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\lt.js
            • Size 124B
            • SHA256 1c897a9bc849320e2e9dc0f6c09555c01ee3ddf30734515d717b88ad7740ea25
            • MD5 SHA1 SHA512 TLSH

            lte.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\lte.js
            • Size 127B
            • SHA256 3a8d0b1d00423f60cc7cb810b36ab77b61330831ad237dbe73eb5cecfa412800
            • MD5 SHA1 SHA512 TLSH

            major.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\major.js
            • Size 136B
            • SHA256 5c678480d882f511200fed2c16ec3847dfedb08a1d70328dc2f031d35d825276
            • MD5 SHA1 SHA512 TLSH

            minor.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\minor.js
            • Size 136B
            • SHA256 1b051794f1713adec2a236517196691687c35f82e0b596ff3316a78b3cc10ae6
            • MD5 SHA1 SHA512 TLSH

            neq.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\neq.js
            • Size 128B
            • SHA256 a662883751918822c162183b46b9e20d09489132f82686c92ab78bee67f3a127
            • MD5 SHA1 SHA512 TLSH

            parse.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\parse.js
            • Size 331B
            • SHA256 29a69e15b6d02fe381d573f861881a89590e9d0f0f0ca740c5f85eaf0234c4ad
            • MD5 SHA1 SHA512 TLSH

            patch.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\patch.js
            • Size 136B
            • SHA256 f02d3c1b059fe3d96ce124886f7eef321d381a95638fd3c4a8d5ccd8e76ffadd
            • MD5 SHA1 SHA512 TLSH

            prerelease.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\prerelease.js
            • Size 234B
            • SHA256 baedbf503d5610ad041bfb56071efa48feb331ca278295c399537d35d3ffb593
            • MD5 SHA1 SHA512 TLSH

            rcompare.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\rcompare.js
            • Size 132B
            • SHA256 84fa5e88adf08d15c993cac8cdec6d1a65045b7e95a9c55184230a7f807f4dc0
            • MD5 SHA1 SHA512 TLSH

            rsort.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\rsort.js
            • Size 163B
            • SHA256 6ec659ce3b6c2b173c719286caab04409adba046c0917874ec3b5e36ddfbc7e3
            • MD5 SHA1 SHA512 TLSH

            satisfies.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\satisfies.js
            • Size 247B
            • SHA256 8cf5e122b757251671ed6c9d9680904b71cd375845853f05312e608cf2cc2946
            • MD5 SHA1 SHA512 TLSH

            sort.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\sort.js
            • Size 161B
            • SHA256 c2fe2d3ed0be8a4e9de8f02abdfd5d9c0d3bcc510d88e87af84185592882c4b8
            • MD5 SHA1 SHA512 TLSH

            truncate.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\truncate.js
            • Size 1021B
            • SHA256 e145833a250311927c92f424f56498c52f1b7bb1271ce6afbf006db87773ff43
            • MD5 SHA1 SHA512 TLSH

            valid.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\functions\valid.js
            • Size 176B
            • SHA256 0de7ea736cb7807179d46dfac09c830a9338e02b6a07db12d7040cde2def6025
            • MD5 SHA1 SHA512 TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\index.js
            • Size 2KB
            • SHA256 4b3e57d3d40e29e0706002eba113d09f35aea593578376bbeec83b777b9912ab
            • MD5 SHA1 SHA512 TLSH

            constants.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\internal\constants.js
            • Size 873B
            • SHA256 38a112baf27ceca0260082ff26ac2fd7a9861cab1af12dd65e720277f68e6ce9
            • MD5 SHA1 SHA512 TLSH

            debug.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\internal\debug.js
            • Size 240B
            • SHA256 8a9f420572260f3cf944463b5090d62a60f0730589dc23a7ec4ca25e2ee41bb3
            • MD5 SHA1 SHA512 TLSH

            identifiers.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\internal\identifiers.js
            • Size 525B
            • SHA256 b4916b09dc7869ae0eb05e71c855c942a3a7365f7e6e89185d59a9e45a2451d7
            • MD5 SHA1 SHA512 TLSH

            lrucache.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\internal\lrucache.js
            • Size 802B
            • SHA256 14d087c87da87b6f5c36fc4cdd7d2d14077874b14a68e20fce5b6138fa2ca34f
            • MD5 SHA1 SHA512 TLSH

            parse-options.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\internal\parse-options.js
            • Size 338B
            • SHA256 fdf51d0de8d5442c35a997ef58cd530d239ce206f961d14c5121354451b01d01
            • MD5 SHA1 SHA512 TLSH

            re.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\internal\re.js
            • Size 7KB
            • SHA256 5833262888e2b5d843a69193f83c05e374818dbe55379b497819b5bf58e48cd8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\package.json
            • Size 1KB
            • SHA256 58ad67ac517e1610524a9327efa766de640856fb2ea62244f9fb45aa7f9f3694
            • MD5 SHA1 SHA512 TLSH

            preload.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\preload.js
            • Size 83B
            • SHA256 edb6808911bebcb324b2df57e5c9935149e56984ff083b74c6cfe215f5b710ba
            • MD5 SHA1 SHA512 TLSH

            range.bnf

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\range.bnf
            • Size 702B
            • SHA256 15d0baf9b7b98e6d862c0cb9e822d2533d2bc23e136bb75314d802ca1fcb0392
            • MD5 SHA1 SHA512 TLSH

            gtr.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\ranges\gtr.js
            • Size 231B
            • SHA256 8fadad28e36d28e93d498ac7ac20badba2a407312845eabc18e82e90a0732b19
            • MD5 SHA1 SHA512 TLSH

            intersects.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\ranges\intersects.js
            • Size 224B
            • SHA256 fe87ac5d3020010ad3ec00636dadbf0c669ff07d0f57e0a8165a8264f79a676f
            • MD5 SHA1 SHA512 TLSH

            ltr.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\ranges\ltr.js
            • Size 227B
            • SHA256 e5186fcc03018acf9be6d968755d4c49727aeb0d981d179eb568ae5fbe983038
            • MD5 SHA1 SHA512 TLSH

            max-satisfying.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\ranges\max-satisfying.js
            • Size 593B
            • SHA256 e1a2c0d6144cc772cd20bbc8ecb9e8a3a4074e9172a3d8e794838b591cdeb416
            • MD5 SHA1 SHA512 TLSH

            min-satisfying.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\ranges\min-satisfying.js
            • Size 591B
            • SHA256 2681abf54098aa670f12826b76a6ec77a2441186ae4243afde3be8ae4908f7ca
            • MD5 SHA1 SHA512 TLSH

            min-version.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\ranges\min-version.js
            • Size 1KB
            • SHA256 fefba0a88c2bf74d5cede504b5ae50a8dc3edfd69cf0174a491e2cf3e442614b
            • MD5 SHA1 SHA512 TLSH

            outside.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\ranges\outside.js
            • Size 2KB
            • SHA256 3a2b0b23593d2f49419c06af2af75450cab103b0c25d665d48fe5bca495a21ca
            • MD5 SHA1 SHA512 TLSH

            simplify.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\ranges\simplify.js
            • Size 1KB
            • SHA256 7b78581c13322bc68ece2088685386b2a9b51c15b94d0a2063bdf2546bd41934
            • MD5 SHA1 SHA512 TLSH

            subset.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\ranges\subset.js
            • Size 7KB
            • SHA256 ceb9eb6ed5bfc6c7ac7af7f47e5c3535444a4e66a0e2b58cdad4bd02a35d454d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            to-comparators.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\ranges\to-comparators.js
            • Size 282B
            • SHA256 6c5e966210cff270fa2850668aaf8460fac7759f8d99f282521ef7a78f4564e9
            • MD5 SHA1 SHA512 TLSH

            valid.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\node_modules\semver\ranges\valid.js
            • Size 326B
            • SHA256 5ef6f995af801868925940cf8df5735d565ebabb090b068695cae65218bcd3ac
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\package.json
            • Size 2KB
            • SHA256 3748ed1d76c3086f1bb6522895de5e2fb408ec7793ef1cf173ef916bb0bab335
            • MD5 SHA1 SHA512 TLSH

            common.h

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\src\common.h
            • Size 10KB
            • SHA256 44940aefc7ec601e316dad5c3882041c56d6070f84cc2b2871f6236b75df5cb4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            metadata.h

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\src\metadata.h
            • Size 1KB
            • SHA256 bd50ae9c3e55d9ed5f8b3c4e09d9a79f496ef665b6c993ff1b2c7edecc32d03a
            • MD5 SHA1 SHA512 TLSH

            operations.h

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\src\operations.h
            • Size 3KB
            • SHA256 80a4f350793f657c10769e2b4e82d3b103f5d4984dc27d10e592e14b8cc1b34b
            • MD5 SHA1 SHA512 TLSH

            pipeline.h

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\src\pipeline.h
            • Size 9KB
            • SHA256 89f81e2d0308ed696a0f39099d42b7867b8ffb5fcd4969c7dbfb3e6778c0de23
            • MD5 SHA1 SHA512 SSDEEP TLSH

            stats.h

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\src\stats.h
            • Size 1KB
            • SHA256 db854f0c3c4a0db1751021ed676413c6d5ca00becc08bdc13258b29047450b8c
            • MD5 SHA1 SHA512 TLSH

            utilities.h

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\src\utilities.h
            • Size 741B
            • SHA256 0b126ab63cf1aedf8e71e6cb8179899d3ef02c46419100e847b2ca4284b8901b
            • MD5 SHA1 SHA512 TLSH

            elevate.exe

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\resources\elevate.exe
            • Size 105KB
            • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
            • MD5 SHA1 SHA512 SSDEEP TLSH

            snapshot_blob.bin

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\snapshot_blob.bin
            • Size 309KB
            • SHA256 397bfb1c55eb98bc8c1e1ba1155e24efc105c155def665c678ac3a135f4bbcc7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            v8_context_snapshot.bin

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\v8_context_snapshot.bin
            • Size 671KB
            • SHA256 e8fac5817d9b33ae78b0bd2863750047cbbda211bc28342d0cbea97a07656757
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vk_swiftshader.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\vk_swiftshader.dll
            • Size 5.3MB
            • SHA256 409a0fa76f055a87ae70434414586d144502beb25fa3004866ee70abd9a8547e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vk_swiftshader_icd.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\vk_swiftshader_icd.json
            • Size 106B
            • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
            • MD5 SHA1 SHA512 TLSH

            vulkan-1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\7z-out\vulkan-1.dll
            • Size 874KB
            • SHA256 f6c99137c3d6af45bc2262815867d6d37f5dcb0552caffc90cd77fb6561b7491
            • MD5 SHA1 SHA512 SSDEEP TLSH

            StdUtils.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\StdUtils.dll
            • Size 100KB
            • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\System.dll
            • Size 12KB
            • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UAC.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\UAC.dll
            • Size 14KB
            • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
            • MD5 SHA1 SHA512 SSDEEP TLSH

            WinShell.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\WinShell.dll
            • Size 3KB
            • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
            • MD5 SHA1 SHA512 TLSH

            nsDialogs.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\nsDialogs.dll
            • Size 9KB
            • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nsExec.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\nsExec.dll
            • Size 6KB
            • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nsis7z.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsy30EB.tmp\nsis7z.dll
            • Size 424KB
            • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
            • MD5 SHA1 SHA512 SSDEEP TLSH

            default.exc

            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
            • Size 2B
            • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
            • MD5 SHA1 SHA512

            data_0

            • Path C:\Users\Admin\AppData\Roaming\medya-formatlayici\GPUCache\data_0
            • Size 8KB
            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
            • MD5 SHA1 SHA512 SSDEEP

            data_1

            • Path C:\Users\Admin\AppData\Roaming\medya-formatlayici\GPUCache\data_1
            • Size 264KB
            • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
            • MD5 SHA1 SHA512 SSDEEP

            data_2

            • Path C:\Users\Admin\AppData\Roaming\medya-formatlayici\GPUCache\data_2
            • Size 8KB
            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
            • MD5 SHA1 SHA512 SSDEEP

            data_3

            • Path C:\Users\Admin\AppData\Roaming\medya-formatlayici\GPUCache\data_3
            • Size 8KB
            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
            • MD5 SHA1 SHA512 SSDEEP

            memory/2036-1193-0x00007FFB256A0000-0x00007FFB256A1000-memory.dmp

            memory/2036-1194-0x00007FFB26510000-0x00007FFB26511000-memory.dmp

            memory/5656-1251-0x0000013A8BD40000-0x0000013A8BD41000-memory.dmp

            memory/5656-1253-0x0000013A8BD40000-0x0000013A8BD41000-memory.dmp

            memory/5656-1262-0x0000013A8BD40000-0x0000013A8BD41000-memory.dmp

            memory/5656-1261-0x0000013A8BD40000-0x0000013A8BD41000-memory.dmp

            memory/5656-1260-0x0000013A8BD40000-0x0000013A8BD41000-memory.dmp

            memory/5656-1259-0x0000013A8BD40000-0x0000013A8BD41000-memory.dmp

            memory/5656-1258-0x0000013A8BD40000-0x0000013A8BD41000-memory.dmp

            memory/5656-1257-0x0000013A8BD40000-0x0000013A8BD41000-memory.dmp