Analysis

  • max time kernel
    151s
  • max time network
    134s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/07/2026, 15:07

General

  • Target
    Moon Dev Code App Setup 1.0.0.exe
  • Size 88.3MB
  • Sample260712-shdlsacs2l
  • SHA256 d539c4a7e57d1f90d5d8c117352539fb7e6ced0bec2659210fac459a1c88535c
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 12 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Moon Dev Code App Setup 1.0.0.exe
    "C:\Users\Admin\AppData\Local\Temp\Moon Dev Code App Setup 1.0.0.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1496
    • C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Moon Dev Code App.exe" /FO csv | "C:\Windows\system32\find.exe" "Moon Dev Code App.exe"
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:3336
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Moon Dev Code App.exe" /FO csv
        3⤵
        • Enumerates processes with tasklist
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:4664
      • C:\Windows\SysWOW64\find.exe
        "C:\Windows\system32\find.exe" "Moon Dev Code App.exe"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:3504
  • C:\Users\Admin\AppData\Local\Programs\Moon Dev Code App\Moon Dev Code App.exe
    "C:\Users\Admin\AppData\Local\Programs\Moon Dev Code App\Moon Dev Code App.exe"
    1⤵
    • Executes dropped EXE
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1544
    • C:\Users\Admin\AppData\Local\Programs\Moon Dev Code App\Moon Dev Code App.exe
      "C:\Users\Admin\AppData\Local\Programs\Moon Dev Code App\Moon Dev Code App.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Moon Dev Code App" --gpu-preferences=SAAAAAAAAADgAQAIAAAAAAAAAAAAAGAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=disabled --field-trial-handle=1756,i,14077265139918988276,2744479943616355765,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1752 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2716
    • C:\Users\Admin\AppData\Local\Programs\Moon Dev Code App\Moon Dev Code App.exe
      "C:\Users\Admin\AppData\Local\Programs\Moon Dev Code App\Moon Dev Code App.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Moon Dev Code App" --field-trial-handle=1756,i,14077265139918988276,2744479943616355765,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:11
      2⤵
      • Executes dropped EXE
      PID:5928
    • C:\Users\Admin\AppData\Local\Programs\Moon Dev Code App\Moon Dev Code App.exe
      "C:\Users\Admin\AppData\Local\Programs\Moon Dev Code App\Moon Dev Code App.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Moon Dev Code App" --app-path="C:\Users\Admin\AppData\Local\Programs\Moon Dev Code App\resources\app.asar" --enable-sandbox --js-flags=--max-old-space-size=512 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1783868521805174 --launch-time-ticks=609000366 --field-trial-handle=1756,i,14077265139918988276,2744479943616355765,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2656 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5220

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        LICENSE.electron.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH

        LICENSES.chromium.html

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\LICENSES.chromium.html
        • Size 14.5MB
        • SHA256 a683de33a700d9b4989416e1cd394169154574e83773e009a71daf9dd8e1ab96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\chrome_100_percent.pak
        • Size 163KB
        • SHA256 0d27d5591c72721ce399133e104114aa802caf3070814570ad205987a51a8ff7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\chrome_200_percent.pak
        • Size 252KB
        • SHA256 fa1fce57396b3e21776659e50fb1c12fd4c010c9f56f161be6f4437207d21241
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.7MB
        • SHA256 289767b49dc8525bce262ea06fee4ef9fced2e131a55b25654ce871c1f0498b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\ffmpeg.dll
        • Size 2.9MB
        • SHA256 0d21de0f4497f126b9aad67c57b045225185c70aad2308a25db01d6086e4d5a7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\icudtl.dat
        • Size 10.0MB
        • SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\libEGL.dll
        • Size 492KB
        • SHA256 dfd53ccbfce55510f2afdb52703037452370eb5bdf33143829a8b06253015625
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\libGLESv2.dll
        • Size 7.7MB
        • SHA256 b348ceedd275843cbe344a29dd8550b18e5d433abff695cdf5658470c1e71c67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        af.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\af.pak
        • Size 562KB
        • SHA256 7efae5393f523d0b23dd355e5cb165a14a4a5eb9d102f8fd7e1592fde0d81590
        • MD5 SHA1 SHA512 SSDEEP TLSH

        am.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\am.pak
        • Size 911KB
        • SHA256 108ac040ce13b53af88bc45f3e5b13086c1d435839dfdbabb19d6877d9daad96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ar.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\ar.pak
        • Size 1007KB
        • SHA256 69a43e3592c8cabfe8fdef53c963bca7ee137e093d20f12767df89862c0eccd8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\bg.pak
        • Size 1.0MB
        • SHA256 f4e5ceabc00d8d66a100f78540d81762e67bcd7482df116ee2545507a45de25d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\bn.pak
        • Size 1.3MB
        • SHA256 66e568b1fbb31391786dcd2af632866894fd6a23bef0b408a59587a144bd0353
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\ca.pak
        • Size 633KB
        • SHA256 bdcc6f6404dc686148977e41330461e89d5739afcf123f03557239d93b911e03
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\cs.pak
        • Size 654KB
        • SHA256 56b0e1723259bcf6abdda080ece8877f4b1586b49d3c13ef8908619e2a118972
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\da.pak
        • Size 591KB
        • SHA256 c7a554e9644dda72071d7af1dcf077b783b52af926e99b507d79a664df4acc33
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\de.pak
        • Size 633KB
        • SHA256 de5422f48522a52248ba835d4e7ef860a734b54d2ee41c9a87cd73e7e947c318
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\el.pak
        • Size 1.1MB
        • SHA256 aa9b5d10422054e87bcd6068be5a2b085b8fd3ecb1d998eabe282a72c6520570
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-GB.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\en-GB.pak
        • Size 513KB
        • SHA256 e2eef21ab7b088c122b6990f66dd22ce0c7e1191c64e9ac8424435c3a6749cbe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\en-US.pak
        • Size 518KB
        • SHA256 3cd05f6512ed5d09076253dcdfd4ccc5eedfab44e1703cf3e015597dd31220c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es-419.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\es-419.pak
        • Size 624KB
        • SHA256 3fb38e2a38ef336a407fe91813986522e89696bcf3d6f78c68d60c921f741db4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\es.pak
        • Size 622KB
        • SHA256 e381793151b6bb9e87e954d2ead53fac523dda92912d4d14ecf46885f86ce441
        • MD5 SHA1 SHA512 SSDEEP TLSH

        et.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\et.pak
        • Size 567KB
        • SHA256 19245d259d70ec459d210cc01eb6e6d05298073dead915e164aa7aedf3b873ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fa.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\fa.pak
        • Size 933KB
        • SHA256 bab2b590f945b1d864c38ebcc7167b74ba325b0ac7f3d611cd1728a53a5fb99a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\fi.pak
        • Size 578KB
        • SHA256 41137434ee1d2b1aa3603fc134e8cd52455731dfb3eec44bd7f3e36df57e4f15
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fil.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\fil.pak
        • Size 655KB
        • SHA256 8a9e1a72a7d067654df9e4a761f5c06cfac267680e00c45d9d52a929b318b435
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\fr.pak
        • Size 674KB
        • SHA256 477771211fdff1fc9c8e002476e2440c1c14ce4ce69976a0993c99f2f5b47505
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\gu.pak
        • Size 1.3MB
        • SHA256 51635a11ad7349ae131927156c50f6935c38cb6628cd8d2f8a5fb6715f6140e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        he.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\he.pak
        • Size 818KB
        • SHA256 0ecf199553289880d0fa590fcab56d2165e4e571de0b77970619a244cc0285f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\hi.pak
        • Size 1.4MB
        • SHA256 5197062239f1780dff514326ca5894c39e4e4e2b4bb2c6e73f619122db31630f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\hr.pak
        • Size 631KB
        • SHA256 ea68d33fd264a2a3cb0c78f7b92ac79af7cc1ca27fc50427ca100fc468ae40ec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\hu.pak
        • Size 678KB
        • SHA256 91d754bd252cd411fcc3513e04513d5e4d8165f36eace12f88d84fd7e352e857
        • MD5 SHA1 SHA512 SSDEEP TLSH

        id.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\id.pak
        • Size 559KB
        • SHA256 e78831cb31a4d2ab77cbe47bcc5439be3bc7d66fba7799779d5ab3e1d004115f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        it.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\it.pak
        • Size 614KB
        • SHA256 c5feff891ed9a00cdd7e0349b187cc2d26248ae468f076a09099312e04b23c21
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ja.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\ja.pak
        • Size 747KB
        • SHA256 30ea0122899ef914ee799d92667af4ae54c18cdc6e5bb780719a3f6a5dfc6435
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\kn.pak
        • Size 1.5MB
        • SHA256 b00058366c4e2febd46df14debda4ef777ddfe2c004d08f528dd17eaf8d4c17e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ko.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\ko.pak
        • Size 634KB
        • SHA256 2f26d1e6f3f505d95c26dd0a4d61c2621d8109d871bdb30fdb4718b802f10d20
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lt.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\lt.pak
        • Size 684KB
        • SHA256 473fb2217995c4c4bafc23a9d418b3cd393604248ed19d06588e719519122c2e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\lv.pak
        • Size 683KB
        • SHA256 7b589f1bc446b15d315fcd81b446b47e15ec533043abe56b1d060ab4a727b56c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ml.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\ml.pak
        • Size 1.5MB
        • SHA256 9b874b08ffe56813efce14d03e840f948f6e0ac9fb5fdef1163098d0d7ddf91f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\mr.pak
        • Size 1.3MB
        • SHA256 ab04bcdd9287640b1ce017eec44b6701e44a2e050c51eb1c9859b6367759d848
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ms.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\ms.pak
        • Size 588KB
        • SHA256 7d408f4f45fcdb66efcaf7beae9cb07e0c42a26e237461500cfc4403cdc88690
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nb.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\nb.pak
        • Size 567KB
        • SHA256 b44a1be560c7138a4d2b6b08a93fa529192e54a2256dac2695c901019cc66bce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\nl.pak
        • Size 588KB
        • SHA256 262bf074055e830d0e4d361ca24e74f0170cd55938236163d96c6b48929b6d26
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\pl.pak
        • Size 655KB
        • SHA256 4994a5ad97534bc91b73ad528abc1771628848005c950bbac279d5e2b3e03465
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-BR.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\pt-BR.pak
        • Size 615KB
        • SHA256 e90d7ca40487d8f5299c85f86b5f20f7188d94c3f0e8b5368495f9a73c29cd40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-PT.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\pt-PT.pak
        • Size 619KB
        • SHA256 97b06698596cf084533ac7990ae73cd72b3b851927e0fc5747cd0cab4f681079
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\ro.pak
        • Size 641KB
        • SHA256 757990528d01554f5a1e476929ed3b4fd0bee20cbae07db442923cb477358d9d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\ru.pak
        • Size 1.0MB
        • SHA256 7aaf8f96500bc8eb8883e46a10b84ebdc17ffdf34fe3d972cb3d69b29ed04776
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\sk.pak
        • Size 666KB
        • SHA256 1101256328b7dce3d388abfafa44e27ca416136187f366809ada6fabe1def449
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\sl.pak
        • Size 638KB
        • SHA256 eef2f7c2f3aa5572456274004104d0c79911834f002fa1fdcd5063b60a3225a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\sr.pak
        • Size 982KB
        • SHA256 9184460cb3dc15e5babf7d96c0816d4068e411a376dc7314e84c722761788538
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\sv.pak
        • Size 572KB
        • SHA256 bcc5a1a2405dd2cdb4adcdc0fd9236645de378ea179ea558b44908fdf708f93b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sw.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\sw.pak
        • Size 604KB
        • SHA256 dd7ec69741e67b471df0555096dcf3affe5a40f68753ccebae75d0cf11b07c60
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ta.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\ta.pak
        • Size 1.5MB
        • SHA256 70a31eee3dc00ae51d9ae04945ad3db12de70f44a1fa913d88d599506e27c6b8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        te.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\te.pak
        • Size 1.4MB
        • SHA256 1447c02054e3d9ea084311c86c010834b44d7b0863f515cc4b83ce43201787e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\th.pak
        • Size 1.2MB
        • SHA256 426a8e74828089ffb36b6ed19462eb645e407ae0352906f7f08ee19a3a5eb97a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\tr.pak
        • Size 615KB
        • SHA256 62c8ace3604a27fab3455e5e86a74f4eaca0a80c1d25a6c24a9656d0e8c37ec5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\uk.pak
        • Size 1.0MB
        • SHA256 e8c4c4c982f28789f7e710ff7e941b37179966cdc6b9a480f60b03bef866886b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\ur.pak
        • Size 923KB
        • SHA256 7e8c8a47ab450c0165602160712d0430fc751c5703de655c0d543558e54c63fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\vi.pak
        • Size 729KB
        • SHA256 6f898771f587d9c7742e3f4779eaa23fc0db554803701b698965a672dcdd6e04
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\zh-CN.pak
        • Size 523KB
        • SHA256 622f645c6b0a9cb8df6fc92c7a8e52ab2f5118a3f1b324d1910942ce34d180b8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-TW.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\locales\zh-TW.pak
        • Size 518KB
        • SHA256 da8923f485868aeb83f57a1b5991db7ae6474d2418e389d71512e3e5227367ee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources.pak
        • Size 5.9MB
        • SHA256 ca47fceab76d2220a66dd5c55a444bbdb1f2300b1bd3b180693509327442b292
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app-update.yml

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app-update.yml
        • Size 140B
        • SHA256 983d9d7c18127186b25feec4e161fcbfcb62adec969e10534b004c313d91021a
        • MD5 SHA1 SHA512 TLSH

        app.asar

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar
        • Size 3.0MB
        • SHA256 bf08348e7e4425762fd3bb695ba7ebbcad0a81f0c2576cd69cfaaa8783c3ac85
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\LICENSE
        • Size 3KB
        • SHA256 a3d60eaf32d2fb09c9d82ef39f14bd6e2c0f3ca7de30daa827486c0d6f8b6e9f
        • MD5 SHA1 SHA512 TLSH

        node-pty.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\bin\darwin-arm64-139\node-pty.node
        • Size 83KB
        • SHA256 c9b647187d3726a236f3fc5c7b07137d11925290f6673b94afaac0a5dd82e0f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        spawn-helper

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\build\Release\spawn-helper
        • Size 49KB
        • SHA256 762b944c66bf1f4b2b3a450bbed1f16b5b178cfb07a625267511657eb40d29c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .editorconfig

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\.editorconfig
        • Size 55B
        • SHA256 d12b8c18b94a172ae90b4519bb6f6efdd4e7de9e565a11bee75f2790e0d63941
        • MD5 SHA1 SHA512 TLSH

        .drone.yml

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\.drone.yml
        • Size 439B
        • SHA256 d424ea0c9eeb96a9dfb939cc7a0cbb1ef6af1fc522576880678b2848b1e8ed60
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\LICENSE
        • Size 1KB
        • SHA256 c39e428064b4f3e4fe81a975bf0fd3b845922b431bc4d9a7ffc8bfb091981836
        • MD5 SHA1 SHA512 TLSH

        Makefile

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\Makefile
        • Size 4KB
        • SHA256 143804e61439945b7f4d5167a8da39263f259c0ed5080c51a5486e0d0107545a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        VERSION.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\VERSION.txt
        • Size 10B
        • SHA256 b84d804e4ef21628f5cdc7e88267fafebbeba382cd11fa43806347335f221d08
        • MD5 SHA1 SHA512

        configure

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\configure
        • Size 6KB
        • SHA256 bd3954a56e5cfc66249978db90d949781c9cfa828e3f52ee51772ea47db3c877
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ConinMode.ps1

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\ConinMode.ps1
        • Size 3KB
        • SHA256 9c8123d21cc9f089eede2c81be5d44ab05ce60f83b48966344f6f697330d1034
        • MD5 SHA1 SHA512 TLSH

        EnableExtendedFlags.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\EnableExtendedFlags.txt
        • Size 1KB
        • SHA256 c134b0f64218f57a6d75f9ca0ffc6df57d2689a318b88a803eec4f8cec7f7619
        • MD5 SHA1 SHA512 TLSH

        CP437-Consolas.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\Font-Report-June2016\CP437-Consolas.txt
        • Size 16KB
        • SHA256 2c2bfe69640270f091c6e7845f9057fb08a2ecb3e63e37c5d61492fc34837d79
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CP437-Lucida.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\Font-Report-June2016\CP437-Lucida.txt
        • Size 19KB
        • SHA256 e813ff3667a83906b3ea38dd1bd72ea8688a956da8bc524d028e7fb92e83dac5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CP932.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\Font-Report-June2016\CP932.txt
        • Size 19KB
        • SHA256 1ad540ea7395a30869a5bb9d6fa816515430952ae9bcc1e727c7baf92790bc87
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CP936.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\Font-Report-June2016\CP936.txt
        • Size 19KB
        • SHA256 97b149bd428fd6b0b31621597b1497e5d8be55108f2e7a4ee1bf8d16433a44b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CP949.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\Font-Report-June2016\CP949.txt
        • Size 19KB
        • SHA256 755f7b0a4c5e1a27abed690286c710ef4f928a46740afe142b71455fe06fcf42
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CP950.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\Font-Report-June2016\CP950.txt
        • Size 19KB
        • SHA256 98277fc0f2def5841f457378c18141186965feb6dd1ee25b8a0c8891e2604477
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MinimumWindowWidths.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\Font-Report-June2016\MinimumWindowWidths.txt
        • Size 870B
        • SHA256 dd59283d3ea8d485fa91d54b06c54ac9d5185850b391dd533fbf4b0587f0624f
        • MD5 SHA1 SHA512 TLSH

        Results.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\Font-Report-June2016\Results.txt
        • Size 147B
        • SHA256 26df65746d18d991df837064c332fa14d4a0e605f89eebe8a2512ac07b74c3af
        • MD5 SHA1 SHA512 TLSH

        Windows10SetFontBugginess.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\Font-Report-June2016\Windows10SetFontBugginess.txt
        • Size 7KB
        • SHA256 4403693d0a62f8e1f5f4536a4c223d3f3f61e53fa06f469d7361c04a280b5777
        • MD5 SHA1 SHA512 SSDEEP TLSH

        FormatChar.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\FormatChar.h
        • Size 529B
        • SHA256 975a8402cc758422362ad61e72191ba0d9999bac199f5d5b9f79bd79d1e343a0
        • MD5 SHA1 SHA512 TLSH

        IdentifyConsoleWindow.ps1

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\IdentifyConsoleWindow.ps1
        • Size 1KB
        • SHA256 890232e9863e6c955755c5a331f1e2b637e18c985ff2dc6edb65309493919b60
        • MD5 SHA1 SHA512 TLSH

        MouseInputNotes.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\MouseInputNotes.txt
        • Size 4KB
        • SHA256 36f02e64b00738dc16820a51f7acaf9195b0260442c1c14c28392147677c1240
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Notes.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\Notes.txt
        • Size 9KB
        • SHA256 ff7e5c167193a845c9d40233108741c7982936b82202d8d7c21d0bd4b9738f17
        • MD5 SHA1 SHA512 SSDEEP TLSH

        build32.sh

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\build32.sh
        • Size 213B
        • SHA256 5c8716398c7022a15fc261febf420959c87bf4800927b10a4ced17650fb47c7c
        • MD5 SHA1 SHA512 TLSH

        build64.sh

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\build64.sh
        • Size 217B
        • SHA256 a572a4c32531ecdc6f7f446b4ad3d1ee4d7486336b50f513dd761846e1dd5e04
        • MD5 SHA1 SHA512 TLSH

        color-test.sh

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\color-test.sh
        • Size 5KB
        • SHA256 3901b23dea4ca7ef4a2a9a057905b138378dc93dc5c45c8929a4655d64522fec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        font-notes.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\misc\font-notes.txt
        • Size 14KB
        • SHA256 be8777d645b2e6b6d175b20b5cf1a57c505e40fa9feb323a9ebdd3b60c961219
        • MD5 SHA1 SHA512 SSDEEP TLSH

        build-pty4j-libpty.bat

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\ship\build-pty4j-libpty.bat
        • Size 1KB
        • SHA256 569581fbbad4e458b4c3e4759ed31586c2d252995e6bae06e104d48df22c5133
        • MD5 SHA1 SHA512 TLSH

        Agent.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\Agent.h
        • Size 3KB
        • SHA256 a9522c989c09818ab0751249e6278f83118853619a5d67e4ae7f60204bc746da
        • MD5 SHA1 SHA512 TLSH

        AgentCreateDesktop.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\AgentCreateDesktop.h
        • Size 1KB
        • SHA256 9b3bf8c96f0b21e9c183b96b3ad8690f5aaba8ca40cdc699071122cf4876dc2d
        • MD5 SHA1 SHA512 TLSH

        ConsoleFont.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\ConsoleFont.h
        • Size 1KB
        • SHA256 94567f53a1e1f52bf897b7130d8d41fa2c6f70283b6ed6a665d2c34fbf1e7f8a
        • MD5 SHA1 SHA512 TLSH

        ConsoleInput.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\ConsoleInput.h
        • Size 3KB
        • SHA256 1fc8388174c8e762f7854d1f056f0c17b335ff913e49b0fd8cb3e5967b530b74
        • MD5 SHA1 SHA512 TLSH

        ConsoleInputReencoding.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\ConsoleInputReencoding.h
        • Size 1KB
        • SHA256 209eef3c1e654ebc174a3879bb5ad9a68cdd8f01f7217e377488abe4f415525b
        • MD5 SHA1 SHA512 TLSH

        ConsoleLine.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\ConsoleLine.h
        • Size 1KB
        • SHA256 510592b0988229bb2a41c8482c3e9d0c4031a07ad6ed669c4cff981707796a21
        • MD5 SHA1 SHA512 TLSH

        Coord.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\Coord.h
        • Size 2KB
        • SHA256 e106767ecdfd19aa9d7d4e69806975a79f6edee54982a2284d3e4f2fbbb5268d
        • MD5 SHA1 SHA512 TLSH

        DebugShowInput.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\DebugShowInput.h
        • Size 1KB
        • SHA256 66e042d6da77d8b57208d4ca920a249aeddcf9f970daadc678277c8ae21122da
        • MD5 SHA1 SHA512 TLSH

        DefaultInputMap.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\DefaultInputMap.h
        • Size 1KB
        • SHA256 d958587069689e55e208d891c418c75b03c52d41b134bf4905360f1810f2868c
        • MD5 SHA1 SHA512 TLSH

        DsrSender.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\DsrSender.h
        • Size 1KB
        • SHA256 588ba1972a3f59f2688e19bec5f33bc05bd68b29a28cd3f9b177711997b398a1
        • MD5 SHA1 SHA512 TLSH

        EventLoop.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\EventLoop.h
        • Size 1KB
        • SHA256 60e62ad4be4227ff0c64fc37e94a3bb939fc4dfd03ee422131584a01603b4eb0
        • MD5 SHA1 SHA512 TLSH

        InputMap.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\InputMap.h
        • Size 3KB
        • SHA256 56d3098eeb3f49b274b8c3e399ba82bc873ccfb0bf8fd1a5e6b688baf8d34eb3
        • MD5 SHA1 SHA512 TLSH

        LargeConsoleRead.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\LargeConsoleRead.h
        • Size 2KB
        • SHA256 711699e8fd5e7604f5dda6f5db477679821cf7ecd348a6f288100e307dbe2608
        • MD5 SHA1 SHA512 TLSH

        NamedPipe.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\NamedPipe.h
        • Size 4KB
        • SHA256 9752909e48cebb65a43871145e26898a2d48a49502345df2ac9e1fa454f0ec1b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Scraper.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\Scraper.h
        • Size 3KB
        • SHA256 5c6ec5c43b63c24a53ee508bf1ea052af5eb0f5c52eeaf41160cd3ccaaf22941
        • MD5 SHA1 SHA512 TLSH

        SimplePool.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\SimplePool.h
        • Size 2KB
        • SHA256 c1333bdc43f4e6888a2a7f5b83b78089ae4afb7320bfe19f0db7dc5fa85b6b2e
        • MD5 SHA1 SHA512 TLSH

        SmallRect.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\SmallRect.h
        • Size 4KB
        • SHA256 b54b4289a656dab7815d64d652ab0dbdc62608e829c32754109fe3474ee4ab72
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Terminal.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\Terminal.h
        • Size 2KB
        • SHA256 3ebe76ccc6cf0e21499d7602c05966b1770b6a94e7654e4f61753b09ec4d0b20
        • MD5 SHA1 SHA512 TLSH

        UnicodeEncoding.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\UnicodeEncoding.h
        • Size 5KB
        • SHA256 248cec69a8bfcfbbfc992d5dd3063a0ffd9bc1eb6c1c0de42ea07e21a1fedf62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Win32Console.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\Win32Console.h
        • Size 2KB
        • SHA256 e6711e805f71da688f30266441d57077138ba5df750c0152920007cbaac9df33
        • MD5 SHA1 SHA512 TLSH

        Win32ConsoleBuffer.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\agent\Win32ConsoleBuffer.h
        • Size 3KB
        • SHA256 d36893d72fadbb88bfbbb802c8aab74bc12c511835c656c47151c3791a04417e
        • MD5 SHA1 SHA512 TLSH

        configurations.gypi

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\configurations.gypi
        • Size 2KB
        • SHA256 f39946ce3b57a5518b917f2e7c854c38b37b9fa7e042ce2d447de9182035bbad
        • MD5 SHA1 SHA512 TLSH

        winpty.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\include\winpty.h
        • Size 9KB
        • SHA256 07be0f1cad79c8439c40448381e24a212deeb6bbf22e90713da1a8297b3016f6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        winpty_constants.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\include\winpty_constants.h
        • Size 5KB
        • SHA256 2720b82db1487ed9276b760c322207b7f1e9d1c4b62994f9f8431ee7c3d8424a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        AgentLocation.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\libwinpty\AgentLocation.h
        • Size 1KB
        • SHA256 d435dcf65895b51681d3e75d2bfc0d4b466424868daf3502442de5e17b9ca90d
        • MD5 SHA1 SHA512 TLSH

        LibWinptyException.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\libwinpty\LibWinptyException.h
        • Size 1KB
        • SHA256 846d7ed3cf7110be2bbf80c552135b15e1b1fce33358ce42d3104e09d8f628e5
        • MD5 SHA1 SHA512 TLSH

        WinptyInternal.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\libwinpty\WinptyInternal.h
        • Size 2KB
        • SHA256 7f1f150bdbae2bdb6975fe0d579fb2648f563d5cce2a4946c7ab03a35b4de7d4
        • MD5 SHA1 SHA512 TLSH

        AgentMsg.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\AgentMsg.h
        • Size 1KB
        • SHA256 8ffd9941716b1b056beeff5dd128d0ca3573f4f4a081b3c8155d8afe11b132cc
        • MD5 SHA1 SHA512 TLSH

        BackgroundDesktop.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\BackgroundDesktop.h
        • Size 2KB
        • SHA256 7b270d7a5c8630a547726ae2a13ceb775129787558219436856960cd388c0f00
        • MD5 SHA1 SHA512 TLSH

        Buffer.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\Buffer.h
        • Size 3KB
        • SHA256 5df44ccf63a4aad31d094f781ddd008fab7200fdcb8acea347c2428e35a967b0
        • MD5 SHA1 SHA512 TLSH

        DebugClient.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\DebugClient.h
        • Size 1KB
        • SHA256 92181fb6ab9d1f039bca2079cd3d0fcf7182b4e5a598ae75f5f10750a9cd2580
        • MD5 SHA1 SHA512 TLSH

        GenRandom.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\GenRandom.h
        • Size 1KB
        • SHA256 6682d6b23c4eaaf8b4489f72a20d86be55de88961ba70e8d07040ef487d5eaed
        • MD5 SHA1 SHA512 TLSH

        GetCommitHash.bat

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\GetCommitHash.bat
        • Size 274B
        • SHA256 6f42fbea7d5da412d63d580034fe422ea1b7a59105665f1098f53a42a6551295
        • MD5 SHA1 SHA512 TLSH

        Mutex.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\Mutex.h
        • Size 2KB
        • SHA256 311b7738bc33f52852a0d3f898c024fe97ee47ac0538cb6551a7ebcfe6c45082
        • MD5 SHA1 SHA512 TLSH

        OsModule.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\OsModule.h
        • Size 2KB
        • SHA256 f904a1f3757f181d11dc6700c8b9900a07463c1aa642a516ddb71efb0c0720ed
        • MD5 SHA1 SHA512 TLSH

        OwnedHandle.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\OwnedHandle.h
        • Size 1KB
        • SHA256 9d8ac11f6b2f16121457dd387de396d94afc55b025edac04f560c1bf844fb513
        • MD5 SHA1 SHA512 TLSH

        PrecompiledHeader.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\PrecompiledHeader.h
        • Size 1KB
        • SHA256 dd73afdb551209341438e02a5553d169c8571d4cdb4d25b7bf5d8f5a70a62896
        • MD5 SHA1 SHA512 TLSH

        StringBuilder.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\StringBuilder.h
        • Size 8KB
        • SHA256 01dde8758bdcdde1084f8afa0b59270c59ea40d4ec191eaf7e80710686c4f07a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StringUtil.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\StringUtil.h
        • Size 2KB
        • SHA256 625e7dd8245c2b4bcb4c8ea55a5c0235836ae345f6bfa0943e65ccadfbd8d9ab
        • MD5 SHA1 SHA512 TLSH

        TimeMeasurement.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\TimeMeasurement.h
        • Size 2KB
        • SHA256 86b501be408348f82b58716a8b59fb513daf92885b157480e461189ae8068375
        • MD5 SHA1 SHA512 TLSH

        UnixCtrlChars.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\UnixCtrlChars.h
        • Size 1KB
        • SHA256 811f7c83153c2998d9cb16010ee43172644f8f60e987639230cd2790964a5b20
        • MD5 SHA1 SHA512 TLSH

        UpdateGenVersion.bat

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\UpdateGenVersion.bat
        • Size 578B
        • SHA256 d8538fcfd4cc94f158d155bbde491e82f358a67c117eb721ddc6a96d5521159b
        • MD5 SHA1 SHA512 TLSH

        WindowsSecurity.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\WindowsSecurity.h
        • Size 3KB
        • SHA256 88a47440ee006c24d3de760c6548de8790bf7eec1b0ee187cd485d4773420837
        • MD5 SHA1 SHA512 TLSH

        WindowsVersion.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\WindowsVersion.h
        • Size 1KB
        • SHA256 35c0bb94fcd5bc869b726e255662da265cfb92eff63d8fc822c3923907f814e2
        • MD5 SHA1 SHA512 TLSH

        WinptyAssert.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\WinptyAssert.h
        • Size 2KB
        • SHA256 055f80bc02f799d86810a3f624d9725eabc1229b574d26b68a517c67026c04d2
        • MD5 SHA1 SHA512 TLSH

        WinptyException.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\WinptyException.h
        • Size 1KB
        • SHA256 a9d8665337cb729f6fe16b60fb8007b5d26c1ca129c60335c23176383c91fc9f
        • MD5 SHA1 SHA512 TLSH

        WinptyVersion.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\WinptyVersion.h
        • Size 1KB
        • SHA256 ebf7fa829434cf06f371b589ac56147f0f5cbddfc67c44a1ae00dbdf552e1d6d
        • MD5 SHA1 SHA512 TLSH

        winpty_snprintf.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\shared\winpty_snprintf.h
        • Size 3KB
        • SHA256 a355a9af8e44938563fb791c69d64be406a67f4099014d38ff7235893d13a3fd
        • MD5 SHA1 SHA512 TLSH

        InputHandler.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\unix-adapter\InputHandler.h
        • Size 2KB
        • SHA256 9aa6637d2e2078c8f775381a38af89814471614f79b82fbc1cfe2875c00f9e9d
        • MD5 SHA1 SHA512 TLSH

        OutputHandler.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\unix-adapter\OutputHandler.h
        • Size 1KB
        • SHA256 352d8602330895a1e685aa71c716b7f31ad190af99fe92c13c07c75b85b8fdc2
        • MD5 SHA1 SHA512 TLSH

        Util.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\unix-adapter\Util.h
        • Size 1KB
        • SHA256 10d71b377f5b9e7d780b20fd67e69d8e9a76f158017b3036b5cb97d5bafe4209
        • MD5 SHA1 SHA512 TLSH

        WakeupFd.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\unix-adapter\WakeupFd.h
        • Size 1KB
        • SHA256 26d908bd0d853dca549fc68d78ba4c92cc4769d9a333f9bfe8c85abf1c88e9f7
        • MD5 SHA1 SHA512 TLSH

        winpty.gyp

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\src\winpty.gyp
        • Size 8KB
        • SHA256 c67cd1b1d1e5aad4ac8795dccdb94df3bd43fd5f268cdeb7d4ce183bf6ce6315
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcbuild.bat

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\deps\winpty\vcbuild.bat
        • Size 2KB
        • SHA256 01556c0d8e463bb7cd907b6c2e15bb28ae527dc910146f3bde93c214a1de19f4
        • MD5 SHA1 SHA512 TLSH

        conpty_console_list_agent.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\conpty_console_list_agent.js
        • Size 721B
        • SHA256 0d010879bb6680a0253d44363183d53e631f42972594eb6dcb1fb842c8c85e52
        • MD5 SHA1 SHA512 TLSH

        eventEmitter2.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\eventEmitter2.js
        • Size 1KB
        • SHA256 f1c14613aa90c10def4ca7238329270871997eb26f919f7074dc25533e3e75dd
        • MD5 SHA1 SHA512 TLSH

        eventEmitter2.test.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\eventEmitter2.test.js
        • Size 1KB
        • SHA256 9cd06569c14d4cd180031ed4df914b817e75ceb104ac10ef65cae6815f46c568
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\index.js
        • Size 1KB
        • SHA256 c1b82c92c4c63aaa8e8441fc5a291c4727cd3f3550666d2fec7250e0f6d4b173
        • MD5 SHA1 SHA512 TLSH

        interfaces.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\interfaces.js
        • Size 233B
        • SHA256 56e4173f09aad26173f9d4c79800fda0b808c34424f987ef8d671cc931119a0a
        • MD5 SHA1 SHA512 TLSH

        conout.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\shared\conout.js
        • Size 348B
        • SHA256 6ae3b0532616da11aa2a11b4506bb89b0d40be005a9ea9fb369fb59eefdbda47
        • MD5 SHA1 SHA512 TLSH

        terminal.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\terminal.js
        • Size 7KB
        • SHA256 5ed5cd66a766afba4a04093284e999f8516d41936501839055800b10eca5d304
        • MD5 SHA1 SHA512 SSDEEP TLSH

        terminal.test.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\terminal.test.js
        • Size 6KB
        • SHA256 6f6ae435c9c6e93d8146fa7a79fe155ec3291880aa4de68fbad7ed8891e4f87b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        testUtils.test.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\testUtils.test.js
        • Size 807B
        • SHA256 eb13d8ffc04ef385604b37170bafa9914736d5c5be8bca857c9f32958f6fe7ec
        • MD5 SHA1 SHA512 TLSH

        types.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\types.js
        • Size 228B
        • SHA256 408bf8287717b6322cc380ea66caf1b5e366dcf697707ae2f3cc454e08f3b151
        • MD5 SHA1 SHA512 TLSH

        unixTerminal.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\unixTerminal.js
        • Size 13KB
        • SHA256 a62e3a60c3bc1b0e7261f58284856df748dcee6761a2bc7a5a5ba98b22660473
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unixTerminal.test.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\unixTerminal.test.js
        • Size 18KB
        • SHA256 608d6c9bcfa07873440ed813b499d347e3e79dace1cc58ea3bd61b53356f0937
        • MD5 SHA1 SHA512 SSDEEP TLSH

        utils.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\utils.js
        • Size 1KB
        • SHA256 f75ad341c13fbf1a9a6605d7ee42dff5bbc5d43b7b381e413fb97eb1b8300beb
        • MD5 SHA1 SHA512 TLSH

        windowsConoutConnection.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\windowsConoutConnection.js
        • Size 5KB
        • SHA256 1440f70908fb1f55911ac8e936a1230f68a9c00c03096fcef6788eac6aad9d62
        • MD5 SHA1 SHA512 SSDEEP TLSH

        windowsPtyAgent.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\windowsPtyAgent.js
        • Size 12KB
        • SHA256 8636d16b38266112204061a22b135734177c242837982fd3a4055be726efa64a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        windowsPtyAgent.test.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\windowsPtyAgent.test.js
        • Size 4KB
        • SHA256 4c83dd76ec446031876dc81869e4c204715f72c0ba7ba3389e10b390b6d08da1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        windowsTerminal.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\windowsTerminal.js
        • Size 7KB
        • SHA256 c3a65716f53fed0135a8a633373d5f9c2ab092544d651f27ef0a67096dd3bcd9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        windowsTerminal.test.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\windowsTerminal.test.js
        • Size 10KB
        • SHA256 325567d8d6b461df3d3b7990a51bac09f662733988df653de7ee9113880e67a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        conoutSocketWorker.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\lib\worker\conoutSocketWorker.js
        • Size 848B
        • SHA256 3e4bac095ac3870c3248a7302f5d10217de625f30c32b7000fe48a34788e47ac
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\package.json
        • Size 915B
        • SHA256 700103d92f8832effb035e2edcf028e6caba422fa6442ce9c06869369c79d644
        • MD5 SHA1 SHA512 TLSH

        pty.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\darwin-arm64\pty.node
        • Size 83KB
        • SHA256 e6457d66f45af3facd02920a5b212164e80fe0bb758afe6e6eab1eceeba3fc9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        spawn-helper

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\darwin-arm64\spawn-helper
        • Size 49KB
        • SHA256 21c589109bca43e287df884f3c34ab888033a83927ea7d273949ac5030583f26
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pty.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\darwin-x64\pty.node
        • Size 51KB
        • SHA256 edab585d5c5c7bf35143a7a53b7d72652e90723b5f9635dfd55b2333f7069198
        • MD5 SHA1 SHA512 SSDEEP TLSH

        spawn-helper

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\darwin-x64\spawn-helper
        • Size 9KB
        • SHA256 46a4455777c6122d7e71cd706ea4b37b19bedd297684be8b6dabb833ff2a3965
        • MD5 SHA1 SHA512 SSDEEP TLSH

        conpty.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\win32-arm64\conpty.node
        • Size 295KB
        • SHA256 25a06916c5cb1a3aac7acc401424d8e6a6a9e8eea441a3604cd657a0619555cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OpenConsole.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\win32-arm64\conpty\OpenConsole.exe
        • Size 1.1MB
        • SHA256 b7763ba27e80d5e84f9e60d1368ec2ddb25dfd10283336c0c9f3f252d35cb2f8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        conpty.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\win32-arm64\conpty\conpty.dll
        • Size 104KB
        • SHA256 b6cca5f1081111f59e5255eec043d924ebd11a86d09986c0d121b680540b3380
        • MD5 SHA1 SHA512 SSDEEP TLSH

        conpty_console_list.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\win32-arm64\conpty_console_list.node
        • Size 119KB
        • SHA256 fda76b16afb3bf9a4de085c943b5fb4138ecbeb08e8254c09d5555ea5426bd4e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pty.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\win32-arm64\pty.node
        • Size 286KB
        • SHA256 eae1266e3c34f4c7b67a756a6ff342b699847deaf29c944b7a6bed190ec61982
        • MD5 SHA1 SHA512 SSDEEP TLSH

        winpty-agent.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\win32-arm64\winpty-agent.exe
        • Size 280KB
        • SHA256 9a5f66fbe444728988f51e8099d0d84c515945a1873dbbbec65aec6e07eac50a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        winpty.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\win32-arm64\winpty.dll
        • Size 230KB
        • SHA256 0247b4d007fcb8059cc2221ec41d736fa548246ce1e10256c15c96d1ef6f2e9c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        conpty.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\win32-x64\conpty.node
        • Size 305KB
        • SHA256 ee8f4e6f4dad71939eecfda11de249400e34bfefe4c8b48af13f3b5476f4035b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        OpenConsole.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\win32-x64\conpty\OpenConsole.exe
        • Size 1.1MB
        • SHA256 d1fe7faa62f9e955e2ac2371f95d7e5513df4d496255097158f979c94782c5fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        conpty.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\win32-x64\conpty\conpty.dll
        • Size 107KB
        • SHA256 7c7430632052ff703540b68371ec43821820aa1335d8e11dfbcd9ff00e9daaed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        conpty_console_list.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\win32-x64\conpty_console_list.node
        • Size 131KB
        • SHA256 879dd94cfc79f1e263a00077597ae9448a5394b7d193381aaa50d992a1f91090
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pty.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\win32-x64\pty.node
        • Size 296KB
        • SHA256 ae323edd0835ee7b9e18cc96a7b2bb4b8173ff768317d178af2788406feb71ff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        winpty-agent.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\win32-x64\winpty-agent.exe
        • Size 300KB
        • SHA256 0c4834a0ab2a4f8c855a2f1db9b21fa6e5fc324ae8e3c82addd53d503d999825
        • MD5 SHA1 SHA512 SSDEEP TLSH

        winpty.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\prebuilds\win32-x64\winpty.dll
        • Size 250KB
        • SHA256 e1cb26d868c954ba26817bedf3e4a5744e4ca2030adf51a7156e5ff2fadb881b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gen-compile-commands.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\scripts\gen-compile-commands.js
        • Size 260B
        • SHA256 2c0f489628a5c0d0d182b35b88484a9c43158cdc54e3a48bd237c88b5c54dfcd
        • MD5 SHA1 SHA512 TLSH

        increment-version.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\scripts\increment-version.js
        • Size 2KB
        • SHA256 f3d8b2b3309ac639c89c00aac8316953c9cc3f191ceec3ba50b717dbe2ce5ad2
        • MD5 SHA1 SHA512 TLSH

        post-install.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\scripts\post-install.js
        • Size 2KB
        • SHA256 b15bb24cd3388b05392eeb200aa805e2827356818d111b93847e1b0f6a6ada46
        • MD5 SHA1 SHA512 TLSH

        prebuild.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\scripts\prebuild.js
        • Size 1KB
        • SHA256 7e604b10f7769d7dc95947d3481c00513b9e3bb6c561d5264506350a16a0381a
        • MD5 SHA1 SHA512 TLSH

        tsconfig.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\src\tsconfig.json
        • Size 323B
        • SHA256 3a6e20d30bdd8dadc8e24bddc5b6857d560013bb0c3b07b5a11bd721dc262651
        • MD5 SHA1 SHA512 TLSH

        conpty.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\src\win\conpty.h
        • Size 1KB
        • SHA256 32b74fe493b4435bc2f8362cfa4bcb4f49a290438002cc4a369e9379c7728d3c
        • MD5 SHA1 SHA512 TLSH

        path_util.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-pty\src\win\path_util.h
        • Size 695B
        • SHA256 f877c15389b7794f1c25a0f3b05101a0fde92ccf8b0a351500ebd5b7922c3bff
        • MD5 SHA1 SHA512 TLSH

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\snapshot_blob.bin
        • Size 329KB
        • SHA256 9a10e7b6d4a4a19e9e825217b2eaab2e47df86fe85a70e74e6f660c89ddb0fb6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\v8_context_snapshot.bin
        • Size 695KB
        • SHA256 546db668f31be13f2a70cb2282f8073a88ad51be77eef468e1ad7a9450738da6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\vk_swiftshader.dll
        • Size 5.3MB
        • SHA256 c753107d8827525306b83d3c35da988b0954caebc4ab806d4ca6f27b7a0d8bdf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader_icd.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\7z-out\vulkan-1.dll
        • Size 917KB
        • SHA256 40e39b8cd62c3292f7c5ad6a2d863f6e3bd3d2c0b1b3a2a0e4d41a61d2a8f758
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UAC.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\UAC.dll
        • Size 14KB
        • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WinShell.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH

        nsDialogs.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsExec.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\nsExec.dll
        • Size 6KB
        • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsis7z.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsh211C.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH

        default.exc

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512

        Network Persistent State

        • Path C:\Users\Admin\AppData\Roaming\Moon Dev Code App\Network\Network Persistent State
        • Size 387B
        • SHA256 78aa8b299dda62f73df23c2c6aed2d5917e943fb53fcbe766b6db933163c32b9
        • MD5 SHA1 SHA512 TLSH

        Network Persistent State~RFe5ab72c.TMP

        • Path C:\Users\Admin\AppData\Roaming\Moon Dev Code App\Network\Network Persistent State~RFe5ab72c.TMP
        • Size 59B
        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
        • MD5 SHA1 SHA512 TLSH

        Preferences

        • Path C:\Users\Admin\AppData\Roaming\Moon Dev Code App\Preferences
        • Size 57B
        • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
        • MD5 SHA1 SHA512 TLSH

        Preferences~RFe59db33.TMP

        • Path C:\Users\Admin\AppData\Roaming\Moon Dev Code App\Preferences~RFe59db33.TMP
        • Size 122B
        • SHA256 3489a9fcea842f7bd4152b6ac5a20d493dfba1fdadaec75b503c8e5ffa0d9042
        • MD5 SHA1 SHA512 TLSH

        memory/5220-1131-0x00007FFD3BF50000-0x00007FFD3BF51000-memory.dmp

        memory/5220-1132-0x00007FFD3CBD0000-0x00007FFD3CBD1000-memory.dmp