Analysis

  • max time kernel
    40s
  • max time network
    47s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    20/07/2026, 14:04

General

  • Target
    3368af6e4c3d6003e36ea968a653c5ce7fdadaaf39fd6b9bb0e78b75a666467c.exe
  • Size 79.5MB
  • Sample260720-rdkc4act7n
  • SHA256 3368af6e4c3d6003e36ea968a653c5ce7fdadaaf39fd6b9bb0e78b75a666467c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 9 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious use of AdjustPrivilegeToken 41 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\3368af6e4c3d6003e36ea968a653c5ce7fdadaaf39fd6b9bb0e78b75a666467c.exe
    "C:\Users\Admin\AppData\Local\Temp\3368af6e4c3d6003e36ea968a653c5ce7fdadaaf39fd6b9bb0e78b75a666467c.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3036
    • C:\Users\Admin\AppData\Local\Temp\3GRgYZGA4Xf5gNxycrNEiLDIYqe\xrdsavage.exe
      C:\Users\Admin\AppData\Local\Temp\3GRgYZGA4Xf5gNxycrNEiLDIYqe\xrdsavage.exe
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:2832
      • C:\Users\Admin\AppData\Local\Temp\3GRgYZGA4Xf5gNxycrNEiLDIYqe\xrdsavage.exe
        "C:\Users\Admin\AppData\Local\Temp\3GRgYZGA4Xf5gNxycrNEiLDIYqe\xrdsavage.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Roaming\windows-service-host" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAAAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=angle --use-angle=swiftshader-webgl --field-trial-handle=1760,i,10407022909994837905,15671865055010992692,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1756 /prefetch:2
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5464
      • C:\Users\Admin\AppData\Local\Temp\3GRgYZGA4Xf5gNxycrNEiLDIYqe\xrdsavage.exe
        "C:\Users\Admin\AppData\Local\Temp\3GRgYZGA4Xf5gNxycrNEiLDIYqe\xrdsavage.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Roaming\windows-service-host" --field-trial-handle=1760,i,10407022909994837905,15671865055010992692,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1972 /prefetch:3
        3⤵
        • Executes dropped EXE
        PID:4872

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\3GRgYZGA4Xf5gNxycrNEiLDIYqe\chrome_100_percent.pak
        • Size 144KB
        • SHA256 6ce0ccf6a0cc4ea8be11262d168a344bc3ee78a4a6365d755ffb5570bc48d6d5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.pak

        • Path C:\Users\Admin\AppData\Local\Temp\3GRgYZGA4Xf5gNxycrNEiLDIYqe\locales\th.pak
        • Size 1.1MB
        • SHA256 010ec4d2cf97d45ed2a1934372fa389e49dc32567a97946162271af1c3a6e7e2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\3GRgYZGA4Xf5gNxycrNEiLDIYqe\resources\app.asar.unpacked\node_modules\koffi\build\koffi\darwin_arm64\koffi.node
        • Size 1.2MB
        • SHA256 6c88b2173bdf403046265f859201c13504eba2b258b23da61fff23f7659797b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\3GRgYZGA4Xf5gNxycrNEiLDIYqe\resources\app.asar.unpacked\node_modules\koffi\build\koffi\freebsd_ia32\koffi.node
        • Size 1.4MB
        • SHA256 7acaf95d9da7dd4e2c5823be5321dd6cda109c07c1079306c3216d1aa6688f8f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        builder.js

        • Path C:\Users\Admin\AppData\Local\Temp\3GRgYZGA4Xf5gNxycrNEiLDIYqe\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\src\builder.js
        • Size 17KB
        • SHA256 53a48af14d00256f3f60d6265d8bc637fe1fe50e0cbebb3ecc610bd9cc46b199
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE.electron.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH

        LICENSES.chromium.html

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\LICENSES.chromium.html
        • Size 11.7MB
        • SHA256 5d67aba37acc9e0e0a88546d940ed23f29ea3441aac7dd06dcc08a1b1c93b0a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\chrome_200_percent.pak
        • Size 215KB
        • SHA256 68e92cde2557d68eddcf8df21ce4d1ef7a85581fb28cd5ab93db20812217e073
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.7MB
        • SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\ffmpeg.dll
        • Size 2.9MB
        • SHA256 99fbd8bd11696e24479d22e29b490c7e96c7d9875ab4392ff12307ddfb5a9503
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\icudtl.dat
        • Size 10.0MB
        • SHA256 a9f6072e858ea29cb66501847856d403c862f23d03cac2656d1e0fa2865fdc7b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\libEGL.dll
        • Size 481KB
        • SHA256 e55fb10fb929b28446583ebc5afa89fc647bafc2eebf3b12e6a0adf91a7bb202
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\libGLESv2.dll
        • Size 7.6MB
        • SHA256 2289eb00380b7f143d81df224d5bb412dec9b5eb6002b5213518e295ae8256b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        af.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\af.pak
        • Size 536KB
        • SHA256 842fa605183eb7cb2764af9ef34eade4a6dbf59ffa726b240a799ec4f829cacd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        am.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\am.pak
        • Size 868KB
        • SHA256 ecbadbf260e62099e6140327f0acb40d79ac010676d48f4fd557085f6668f43d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ar.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\ar.pak
        • Size 954KB
        • SHA256 eb80f7d9b8ef4895f4b122616ae97ec63a5123b37ae68d68ecb5f332095ec2ab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\bg.pak
        • Size 991KB
        • SHA256 12b755ee6a50f30b327980e59d086e9f178c6e1bccd0c2bf387696e2c538a5b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\bn.pak
        • Size 1.2MB
        • SHA256 43a0c8bf652288c7a1efaf19926d25275507fa03e9134cfe5e3a580e8e7cd203
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\ca.pak
        • Size 602KB
        • SHA256 5a03f4f7ba62998eabf8ccdbd55a49b06398bf5f7aa3eb3f0ae26cfe8a65c31f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\cs.pak
        • Size 622KB
        • SHA256 0a11d902fcf7f082ea6d602cba67d2befcc639de500c5fef56a7055a0b444a9f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\da.pak
        • Size 562KB
        • SHA256 1145dc560e49c746fd7466f064b1dcd1ec25d22b4b38a13261174aad5505caf8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\de.pak
        • Size 601KB
        • SHA256 3695fb21a7d356c5dbaf7f8393d3e53554e4c19c2979358c0e59411fac67a5e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\el.pak
        • Size 1.1MB
        • SHA256 55a09ed6d1bd58e73161450c828ac59cf86162a9cd18f83b246fb19ffa50e83c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-GB.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\en-GB.pak
        • Size 487KB
        • SHA256 dedf16f15baa50b05832c27d1f9d030c60bcefac7e4a8cdb30df20fda4e39a7d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\en-US.pak
        • Size 492KB
        • SHA256 cc7d18d3a6606b645ede826de9417c961d6ebb815f7250bad3a930da89dcd3a3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es-419.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\es-419.pak
        • Size 593KB
        • SHA256 ab6f9a95d333e5bb14d5420e49c5636703d8fc965212cb748e2522505b6bec91
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\es.pak
        • Size 592KB
        • SHA256 590238a02b3cc14b05aaf21d5285035b45ff55575dd533264461e5170583cead
        • MD5 SHA1 SHA512 SSDEEP TLSH

        et.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\et.pak
        • Size 539KB
        • SHA256 605996ff0c8a43f772dc64274ab309c4313ced4e8c936f82bcd797b54cb5c6e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fa.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\fa.pak
        • Size 885KB
        • SHA256 8dd8cb4a8fdcd5833f73ef7947649ec24ed0538b3d5f079d82cf441cf955d6b7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\fi.pak
        • Size 550KB
        • SHA256 1517fe8463e2bfb502e01667d7f9ed0027369f5b976b1e0a38feefe82caa2c7e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fil.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\fil.pak
        • Size 623KB
        • SHA256 b87306fed8f471279c134d460581ecc13d17b533c184be7c1241d6bcf74d32e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\fr.pak
        • Size 642KB
        • SHA256 2ae85ac2b90ebaabe034b979ffb53c50f3dbe2fa9bd7420d370839da5538cef7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\gu.pak
        • Size 1.2MB
        • SHA256 8da2aef78a775083f19573a14e0861a96a8990866920b3dd4b1aa4d43552159a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        he.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\he.pak
        • Size 777KB
        • SHA256 4948fa44871e8ed5a0ed2d553f4dd698548b60618b55619239045181a8ec519e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\hi.pak
        • Size 1.3MB
        • SHA256 8ddded9b2dea1787367869152f2b27f93556ec515f7da6f361a73ac61fdcb73a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\hr.pak
        • Size 599KB
        • SHA256 9a7a1dea1bd0bf594acbc356ddac9fb64d993fa96f5d3cc1f38f9486abc888bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\hu.pak
        • Size 645KB
        • SHA256 8e00a8562e32713abf7c99fb9543f65505f8f6d0509ad6b6b7607896f689e2e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        id.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\id.pak
        • Size 532KB
        • SHA256 6d46b40dea9ba42a9ca6dda6e7ff81a3dbcd86b61fb2d7a5fe946d06bdce5d30
        • MD5 SHA1 SHA512 SSDEEP TLSH

        it.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\it.pak
        • Size 585KB
        • SHA256 e5fb1e10e15d55c42cdd937e133a9725739259157b1b3f134333cad7110e5978
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ja.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\ja.pak
        • Size 712KB
        • SHA256 91461c3b4a426688b16926d3279a44590cab75d65d797b6fd2567e0ec5cde60e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\kn.pak
        • Size 1.4MB
        • SHA256 81a6a8d7f817bb6fbccfdf8d73f1229cd3bf74aeec0a64373a853e8bff744e8e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ko.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\ko.pak
        • Size 602KB
        • SHA256 67f8b13860dfc28eb3ee150750fab39c0b41e8638f06920f240f434ce08ec753
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lt.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\lt.pak
        • Size 650KB
        • SHA256 bae83903640041b5f949398d7af1975d67070467c4925950c7a838edd73ed956
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\lv.pak
        • Size 648KB
        • SHA256 229b518ee95bc1960be7e72c8af33633fc8b9a32ee09900ae6d64b771c40d359
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ml.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\ml.pak
        • Size 1.5MB
        • SHA256 a973e6ce2c5cbba8f41e54d9aecef31bdabb070bf06e470afce1c4ed263be671
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\mr.pak
        • Size 1.2MB
        • SHA256 0eae188c9a81bd3257a21dc28448b5e9e5c3f4f4de4dc8e178e7f13cab06d6f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ms.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\ms.pak
        • Size 558KB
        • SHA256 185a275d0fb6263471ca1844c8df7fe91d2e98b209379b4a7ec18981ae642c53
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nb.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\nb.pak
        • Size 539KB
        • SHA256 bc11695694983516a9806eaef25e380a5d705c2c8e91324192a0983a50d1291e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\nl.pak
        • Size 560KB
        • SHA256 124b702f9f31eb34f307cae79074812873307f36c9a72f53696567a26ea13ba8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\pl.pak
        • Size 622KB
        • SHA256 55d1f22dcb6fdea4f641984a386b3497cf6d29fdb4c069d1e906efa4404d9550
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-BR.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\pt-BR.pak
        • Size 584KB
        • SHA256 8ab2fce26c0612520d152147637929c23a979ef059ef37757ac6988a9fdd26e1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-PT.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\pt-PT.pak
        • Size 589KB
        • SHA256 56974d3f5c4c614fed58eae2b3889898a79b4cd6a13b3468c4f370e2c09470a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\ro.pak
        • Size 610KB
        • SHA256 309118023eacfe9aeb3405f2606a323982e75b1e33887e85be9235fc2ceeae5b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\ru.pak
        • Size 1006KB
        • SHA256 e042ce451d72fc1e2fa10a66fbc0490a4d9fdbc34caad64d06307d787ff5ced0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\sk.pak
        • Size 633KB
        • SHA256 aed563cc711b2b65d4734eb6c21aca2fe5fe4411b47681b31af8996245adadf0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\sl.pak
        • Size 606KB
        • SHA256 495125af6d3cdc85bb24ea4a211ea808208d19ce7af8dbea44e1e9317e91bd5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\sr.pak
        • Size 935KB
        • SHA256 9d98eefbf8d84ad054f58a286b4891d51ae8da99f82047a09886e4b661db13d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\sv.pak
        • Size 543KB
        • SHA256 e663b723c4dec60526182c70c943c9caa4976de09831ded69d59c9fe4114283e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sw.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\sw.pak
        • Size 574KB
        • SHA256 c83bb0238ca67b1137dd73e2ccdbfdbc3c2312d8c95aa2636940cc7dfac13cf0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ta.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\ta.pak
        • Size 1.5MB
        • SHA256 b76188eff81ffd0a0d9ea7e547eff7bc05069baecd650e1c1e11aa707b40e99c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        te.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\te.pak
        • Size 1.3MB
        • SHA256 471e766e6647e4315c45b15f702dfb2a8253ce91044e141034ce37ca9e0ede68
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\tr.pak
        • Size 584KB
        • SHA256 801df6a4a8d52b1ebb99da0ea788d933804643cca2bf8bbc46064eb6016e17b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\uk.pak
        • Size 1009KB
        • SHA256 aa204656b9efbad5069943054f70fc0a6fc1e9f660b4bc59bcfa90cde3c3b0fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\ur.pak
        • Size 879KB
        • SHA256 b26fa64bc9d26991d7c2f1d20934e3dbd467d64096053887cde9ce99d7d0456c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\vi.pak
        • Size 693KB
        • SHA256 06b752bff885c13260adf91b51d56d3ef5048ea0058f69bb24a1db3b45bfa969
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\zh-CN.pak
        • Size 498KB
        • SHA256 82717aa331b1ab869046cd691ddc9589882a34715a2522577313f0864acd083b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-TW.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\locales\zh-TW.pak
        • Size 492KB
        • SHA256 61709875e1ede0ecc2582a282896ef6398b0c2f4fec07cfabc68c696ba6dd35a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources.pak
        • Size 5.7MB
        • SHA256 4d22a8976b3e6d5bca66d59cc24f1d2db6df2163f12f9624bc07c5846adfbab6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app.asar

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar
        • Size 8.6MB
        • SHA256 8d347de3aa50c514c09ac0358b3e14651d529739633b9781df28c2acba40ded0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        better_sqlite3.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\build\Release\better_sqlite3.node
        • Size 1.6MB
        • SHA256 7729639f31ccecdc88f6b0d42cd1014cdc44c087433269514633cafe48762fd3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        common.gypi

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\deps\common.gypi
        • Size 1KB
        • SHA256 e71a565cd7733e05efc3a2792b54e260126f03f490325aa2a201202acbbdb315
        • MD5 SHA1 SHA512 TLSH

        copy.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\deps\copy.js
        • Size 897B
        • SHA256 05a2bd41dbd96e33e2fc6cf4bcbc722b4bc8c529813b882f92113d7dbbbece67
        • MD5 SHA1 SHA512 TLSH

        defines.gypi

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\deps\defines.gypi
        • Size 1KB
        • SHA256 1ffa84b8af99780a293dcb7a9031c2dccc8b0d013aef434a35c283cc6c984f2e
        • MD5 SHA1 SHA512 TLSH

        download.sh

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\deps\download.sh
        • Size 3KB
        • SHA256 5de8af6e9f41fc1b5f6d280cdc55d62c2a210faf722c7e529b6b3427be7c80a8
        • MD5 SHA1 SHA512 TLSH

        1208.patch

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\deps\patches\1208.patch
        • Size 597B
        • SHA256 5d1f22d69fee3551b70a7b7b9b14be43fcfd04dbc8683233667abfa75905011a
        • MD5 SHA1 SHA512 TLSH

        sqlite3.gyp

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\deps\sqlite3.gyp
        • Size 2KB
        • SHA256 a009b8f80cf0a944eacaf71a84e590504f353fbd8f8b341138d0c3094e372d18
        • MD5 SHA1 SHA512 TLSH

        sqlite3.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\deps\sqlite3\sqlite3.c
        • Size 8.8MB
        • SHA256 e80215754ac6cfaefe272342efd581b6dbefdbdc21f96bd83fcb698bee9d36a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlite3.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\deps\sqlite3\sqlite3.h
        • Size 643KB
        • SHA256 2198c66d4c59ae86421590c27fd53309ec14a595ae31c0c7143247444018a0bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlite3ext.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\deps\sqlite3\sqlite3ext.h
        • Size 37KB
        • SHA256 b184dd1586d935133d37ad76fa353faf0a1021ff2fdedeedcc3498fff74bbb94
        • MD5 SHA1 SHA512 SSDEEP TLSH

        test_extension.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\deps\test_extension.c
        • Size 587B
        • SHA256 948af88dbf356835f5496c1a3d047fdbcc58f3717aa9bc94d0943d7de2b7cf5b
        • MD5 SHA1 SHA512 TLSH

        database.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\lib\database.js
        • Size 4KB
        • SHA256 50fe0b490f29174d961c4d1ae54f22973447ff1255fd710e785d201c0ebfb4d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\lib\index.js
        • Size 110B
        • SHA256 82db11c4ee43a41d859988c5db42c3771dff565371f94bacbd1e4d8d6ceb47cd
        • MD5 SHA1 SHA512 TLSH

        aggregate.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\lib\methods\aggregate.js
        • Size 1KB
        • SHA256 e9f74eb919ec93fe089c95ddf25a98f1f631c80418fa34fb2346ca1bc29f1b82
        • MD5 SHA1 SHA512 TLSH

        backup.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\lib\methods\backup.js
        • Size 2KB
        • SHA256 ea29d34992bb02e006d0fdeda9675ac5d2bb227aaf57468decd997e9fc9c7dbf
        • MD5 SHA1 SHA512 TLSH

        function.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\lib\methods\function.js
        • Size 1KB
        • SHA256 f431d49303b8bbdc044b1f1b455bdad21fc9b74b007de0acb22f08f25b4febd3
        • MD5 SHA1 SHA512 TLSH

        inspect.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\lib\methods\inspect.js
        • Size 174B
        • SHA256 4975a78daee850adee62ba98719d0f223819a0ec135a07c0e302994bd8dbff61
        • MD5 SHA1 SHA512 TLSH

        pragma.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\lib\methods\pragma.js
        • Size 536B
        • SHA256 8b1c54475bd4340b15e25c50d53d06308be65f8f919ecbe4aa9d285ca859ad5a
        • MD5 SHA1 SHA512 TLSH

        serialize.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\lib\methods\serialize.js
        • Size 625B
        • SHA256 7a10ee5c2735384b7f0c361811bc6d017db29f62b203fd3c68a35f667e2c2605
        • MD5 SHA1 SHA512 TLSH

        table.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\lib\methods\table.js
        • Size 6KB
        • SHA256 97c42d9ded1aa96c7d916b5b92f96b4e59581d50eaf629cd2c7afb78ff26a9ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        transaction.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\lib\methods\transaction.js
        • Size 2KB
        • SHA256 bc8624a3ef689d8f78e5669020ad121e17acbc93b1d5ee5afe26860b1084c66c
        • MD5 SHA1 SHA512 TLSH

        wrappers.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\lib\methods\wrappers.js
        • Size 1KB
        • SHA256 a150a6271d23f4e5f8953b129f370ff096c7cdc4b812afbf080a6cf4ab741bcf
        • MD5 SHA1 SHA512 TLSH

        sqlite-error.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\lib\sqlite-error.js
        • Size 717B
        • SHA256 2582d61c27680dead168543f392eb102be621dfbef282a4ca4c7c21aa5e7c75d
        • MD5 SHA1 SHA512 TLSH

        util.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\lib\util.js
        • Size 331B
        • SHA256 92b2e39e2151b43a2252e10b6d6de876ecaf0008336a4fa1dfe1317b20f1916f
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\package.json
        • Size 789B
        • SHA256 7de814561f018b0a493fbdaf7026cd4053937de66736be0175d1d0f7727ab4b4
        • MD5 SHA1 SHA512 TLSH

        better_sqlite3.cpp

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\src\better_sqlite3.cpp
        • Size 129KB
        • SHA256 551abc7d9feea0ad2acb97f33125c5e8800d6d84a1da4390512d08743f924b1e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        better_sqlite3.hpp

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\db-lib\src\better_sqlite3.hpp
        • Size 42KB
        • SHA256 689831cdf547d53b2156fa66088f04b89ed71173f4a832300230ff765879f6bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\darwin_x64\koffi.node
        • Size 1.5MB
        • SHA256 f7ba306880ab40286c4443577fa95c47615111ce0a958442e4eb0a5e83928b67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\freebsd_arm64\koffi.node
        • Size 1.5MB
        • SHA256 4c730af0d6c84f2b88e22b80fb106b7af416deebe9a1c8e8336d6e4b1fce819f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\freebsd_x64\koffi.node
        • Size 1.5MB
        • SHA256 ef05047b3ec7fb73e74c96113f67bf878ad74a9e4eaef20ec3f83317460a2bbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_arm64\koffi.node
        • Size 1.5MB
        • SHA256 da394ea5d8f28cf8e90c6b1bbc3f35485adb24f36dc36265806967213c235a50
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_armhf\koffi.node
        • Size 1.2MB
        • SHA256 5ece8a66d2ec7eed61da4d294c834b40c7631868a0e1b9ce45649e9c4df81ce3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_ia32\koffi.node
        • Size 1.5MB
        • SHA256 f5d7732a3a9d890ce184855399907c85fd86f0ea8a2ed2fb846534059de1181f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_loong64\koffi.node
        • Size 1.4MB
        • SHA256 31a7add40a525c65be33ee30a771f447b0b1d60ba83b3e502439ccf69a08b3df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_riscv64d\koffi.node
        • Size 1.2MB
        • SHA256 26c7a6fd6962fef8ca5fdcd5a6956e9758a2d652822bd3ef4c9c04e4725c06d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_x64\koffi.node
        • Size 1.5MB
        • SHA256 ecc61aa265a56b99182c648e56a91e4c60bf3c7e542efaca93dfdb0452e03330
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\musl_arm64\koffi.node
        • Size 1.6MB
        • SHA256 6cbff8fcc93c19874ffe68668ab806b933f1f1f98f2a18d399964c7bd81c939a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\musl_x64\koffi.node
        • Size 1.5MB
        • SHA256 53ff9cc831cd1539dc3131e616603df42d6f17ff3a836a5e2d72adc0c99a6606
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\openbsd_ia32\koffi.node
        • Size 1.4MB
        • SHA256 bc3b558da1ab1180dc3279b1349aac9ac569e92a8de30e28ca78199560aca8b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\openbsd_x64\koffi.node
        • Size 1.5MB
        • SHA256 be1f117f36f420608e34be5db430f9066e9f73407c339db31960aeb102e9e7a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.exp

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_arm64\koffi.exp
        • Size 1KB
        • SHA256 31e13e095cbf175ee9ae5276324397b014146a04f690f872b1f0f34a5e31beaf
        • MD5 SHA1 SHA512 TLSH

        koffi.lib

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_arm64\koffi.lib
        • Size 2KB
        • SHA256 95e9fcc922bda6a01dd9a163827c1be07fba2ab00bb6818674b349ccbe1ec3fc
        • MD5 SHA1 SHA512 TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_arm64\koffi.node
        • Size 1.3MB
        • SHA256 5a04ca448b37cfcf9a9327be8fae7624053b3d2a46c5dcca4ed3689df33400dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.exp

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_ia32\koffi.exp
        • Size 1KB
        • SHA256 061cac6635fb6424ccda30c5e1f0d92cfb7b20ceecbfaf110a35d8214737079a
        • MD5 SHA1 SHA512 TLSH

        koffi.lib

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_ia32\koffi.lib
        • Size 2KB
        • SHA256 2c599c527797d56c69ee161aeac041b98fd850fc6ef6b8bd2b52148897619f99
        • MD5 SHA1 SHA512 TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_ia32\koffi.node
        • Size 1002KB
        • SHA256 af700e05e2578e3062917248fd5cb3a2cfdb209e2aeedf157b072534d0e884c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.exp

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_x64\koffi.exp
        • Size 1KB
        • SHA256 ba68b3d4f5ded3101fb3248061e0c229a4d6dfb96e8487354ba877cb16908af2
        • MD5 SHA1 SHA512 TLSH

        koffi.lib

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_x64\koffi.lib
        • Size 2KB
        • SHA256 5d9d9c318d33edab02db8858d5345141aa2f7863dd7f3e0949217be07847c1a7
        • MD5 SHA1 SHA512 TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_x64\koffi.node
        • Size 1.5MB
        • SHA256 cd9fb878c2e73711e37cf82e60526509a3df361148396dcb3a95b053b582880c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\index.js
        • Size 20KB
        • SHA256 39e05b73cec3a65d5841906b97cb8c95055e6fb300271de0c0b5a7f918f2ca80
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\base.hh
        • Size 171KB
        • SHA256 bab8771c26713bad29ec2fe507ff5f16f84c3948dc08fc318a623cef04ec9a26
        • MD5 SHA1 SHA512 SSDEEP TLSH

        crc.inc

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\crc.inc
        • Size 200KB
        • SHA256 aeeea0b506cf505b884b7d8071a0a90ce353e0ce5c7a0454ca129a31c85a29d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        crc_gen.py

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\crc_gen.py
        • Size 2KB
        • SHA256 605109bcb12c06748b022bb1a7948fe5e4c6376bc87b21d232fca9b1d9a241ec
        • MD5 SHA1 SHA512 TLSH

        mimetypes.inc

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\mimetypes.inc
        • Size 53KB
        • SHA256 f3a0c670fcb8f8ff9ea29ff1de9d646a1787187f0500118f7d084a80ab0cbc04
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mimetypes_gen.py

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\mimetypes_gen.py
        • Size 1KB
        • SHA256 18e93987189889bed91f06b27ea80e16241ddb59f32409dae160cc54356f6236
        • MD5 SHA1 SHA512 TLSH

        tower.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\tower.hh
        • Size 2KB
        • SHA256 49c73bfc47750187b556220489a0be158c178545f216ded075853ae1575f882b
        • MD5 SHA1 SHA512 TLSH

        unicode.inc

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\unicode.inc
        • Size 35KB
        • SHA256 5678c732bf1026059b0363c8e1ead8669e09c57b973321b1931aeb64dc0fa56e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicode_gen.py

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\unicode_gen.py
        • Size 4KB
        • SHA256 402e17c0b48c4d79da1234e10e57d7174b9103c376dd43ad9a1e044a9fb39944
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\package.json
        • Size 668B
        • SHA256 e65a6209988184f526c41ad03899795b42d0d5ba56796a7748ae1e9e94a335fb
        • MD5 SHA1 SHA512 TLSH

        FindCNoke.cmake

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\assets\FindCNoke.cmake
        • Size 5KB
        • SHA256 e81954cb439202214648894dcf59a838ff31a2d903e7ae26fa3346a21cd9de8a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        toolchains.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\assets\toolchains.json
        • Size 6KB
        • SHA256 c09f4ccd3eee4da5f834af376376359cb8025f23fedd635a82860dc3594d88cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        win_delay_hook.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\assets\win_delay_hook.c
        • Size 879B
        • SHA256 569e120d81b67fd9d19a40db4ae9d2f7b9c60549ef734c95a16183c5c2427e64
        • MD5 SHA1 SHA512 TLSH

        cnoke.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\cnoke.js
        • Size 6KB
        • SHA256 dfa8d4d5a1e7e4cdd51ac2b656b93e816718d5912dcaa28002bf3d6cb3068b46
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\package.json
        • Size 425B
        • SHA256 a0371e0bd7a973e052647d087e985e594f18b089443a92ab45d90ba275381554
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\src\index.js
        • Size 247B
        • SHA256 01cdd6266047bdf69d79c0ea48fdcd830471282eddc0b9c8259558baaff62cd7
        • MD5 SHA1 SHA512 TLSH

        tools.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\src\tools.js
        • Size 12KB
        • SHA256 7b12a3ddc0a7706b7e5cc6155537e9abf3c75c124e5ca38ab58c8dc0b8eea58a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CMakeLists.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\CMakeLists.txt
        • Size 7KB
        • SHA256 a1582f5f227945f80b1841e9af205991e3dfbfccc76490e624eb2f3555f8fa67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abi_arm32_asm.S

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_arm32_asm.S
        • Size 3KB
        • SHA256 fdf21db17e6e0e9de810e446190eb21873c0115cec5aa91cf17adfcb9f751e56
        • MD5 SHA1 SHA512 TLSH

        abi_arm64_asm.S

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_arm64_asm.S
        • Size 4KB
        • SHA256 57692d1cad793c54c17075e8086233777c90dd8d8b2eeba1275c117670952f3b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abi_arm64_asm.asm

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_arm64_asm.asm
        • Size 3KB
        • SHA256 2ec2d897e5246f15383e6a701007a4ce9841cf1ef1d31b892926e6bac2320fb6
        • MD5 SHA1 SHA512 TLSH

        abi_loong64_asm.S

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_loong64_asm.S
        • Size 4KB
        • SHA256 b495099f97aef59b22ce11f520a08cc622469546455745717c44b780428192f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abi_riscv64_asm.S

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_riscv64_asm.S
        • Size 4KB
        • SHA256 45de40bd082fc1d0762df89188e4fdc4d6ab8c9a2a7bca193a3e095aab81f875
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abi_x64_sysv_asm.S

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_x64_sysv_asm.S
        • Size 5KB
        • SHA256 55830267a9687ef43321f268bec922db28f38737b2b7901a9ded131933b32a5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abi_x64_win_asm.S

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_x64_win_asm.S
        • Size 3KB
        • SHA256 66d5f472d61ede2e914132036473de756df548b0fd244cb487a722cd78890da7
        • MD5 SHA1 SHA512 TLSH

        abi_x64_win_asm.asm

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_x64_win_asm.asm
        • Size 4KB
        • SHA256 6d638107d051c2d0d2c0d2feb67efe10a252c71bed119c71280aecb22f5cb30c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abi_x86_asm.S

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_x86_asm.S
        • Size 4KB
        • SHA256 1d0105e991176b807d39f4ab2b18295a7778c9963060645517873accba09b5a7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abi_x86_asm.asm

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_x86_asm.asm
        • Size 3KB
        • SHA256 fa8df97b24096427fa8717296e78a100c52606f6f14aa8e8178a77ef6fefee73
        • MD5 SHA1 SHA512 TLSH

        call.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\call.hh
        • Size 4KB
        • SHA256 343688cf8ab6cf96df2e6090b664f4827d12c79a2f8e2287ef26d00278597661
        • MD5 SHA1 SHA512 SSDEEP TLSH

        errno.inc

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\errno.inc
        • Size 8KB
        • SHA256 e33097d18eb694c136bdb0d0dd912dfd1ea62e9cc66f3f3a7efdd4da8b3e8eca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffi.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\ffi.hh
        • Size 8KB
        • SHA256 59d1835bb717ac15092c0868bbbe79c04bf6d7600105364ea349ba3dcb35036d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        init.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\init.js
        • Size 3KB
        • SHA256 76c95aba02c0e8b2df4a0580af41c65f5a2fab8dbbc86cc02e6eb177268d0d9b
        • MD5 SHA1 SHA512 TLSH

        parser.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\parser.hh
        • Size 1KB
        • SHA256 b9234ebdac4bf20dff9197627d97a21c112d94283698b042dcccd9b808872291
        • MD5 SHA1 SHA512 TLSH

        util.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\util.hh
        • Size 6KB
        • SHA256 bc9776889202e16a30623f1b165079fa3c86efce178442e4a04d6c395f2f594a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uv.def

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\uv.def
        • Size 119B
        • SHA256 fea5f7c4132badf3b726e640470109f5431df110ad897bee4406330db055494c
        • MD5 SHA1 SHA512 TLSH

        uv.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\uv.hh
        • Size 858B
        • SHA256 a3db799445482d3ca4177149856160fc52e3129fc1214a5a11a3d55db20bbb92
        • MD5 SHA1 SHA512 TLSH

        win32.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\win32.hh
        • Size 2KB
        • SHA256 486192c4d21f4e65693a6d0ec5596e3dd5b66b5c9dadc16a335906cb5d55347b
        • MD5 SHA1 SHA512 TLSH

        write_trampolines.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\tools\write_trampolines.js
        • Size 1KB
        • SHA256 3ab8e2ca421a950555b9866396ea9d2632d3a70d5674096a20968fd0458cfd7d
        • MD5 SHA1 SHA512 TLSH

        napi-inl.deprecated.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\napi-inl.deprecated.h
        • Size 6KB
        • SHA256 b66ed1e565e735bbfabcc2f72d466ab7c5414d3ef8851d1af440b81be7f2375c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        napi-inl.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\napi-inl.h
        • Size 230KB
        • SHA256 797668948d7f2df0ee8fcfe734af5b55942768bc7e15e77196a1f1107bba3635
        • MD5 SHA1 SHA512 SSDEEP TLSH

        napi.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\napi.h
        • Size 117KB
        • SHA256 ffb807c34a8b3e346a6d0eacd7c8dbc0bdd92ee06bf42668557568dc54f918e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        js_native_api.def

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\def\js_native_api.def
        • Size 2KB
        • SHA256 77653a554fbb27f6c5666f4ba05f87d26f0de72bc3d0439961ac030030c2be66
        • MD5 SHA1 SHA512 TLSH

        node_api.def

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\def\node_api.def
        • Size 3KB
        • SHA256 e0d5e3da0520a42e26b563f6321291081bd15bdd20821d46818e5f47900f77d6
        • MD5 SHA1 SHA512 TLSH

        js_native_api.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\js_native_api.h
        • Size 30KB
        • SHA256 0953395662ea63697cd7a77a9320d94aa2829f9c9569abf3a74272b7a2923ce8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        js_native_api_types.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\js_native_api_types.h
        • Size 6KB
        • SHA256 21eebde05d2ee59d315ac27d4aa82434ca88508a0b2cf5819802a00ca523831d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        node_api.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\node_api.h
        • Size 10KB
        • SHA256 2d4560831e525b47b060ec8a0864ab73993df9e20215ce9f0fe7b24cd31af32a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        node_api_types.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\node_api_types.h
        • Size 1KB
        • SHA256 a25356630d3058f0a0c8937d9f297e9471e037fda58c2696d8a505c2bd99cb00
        • MD5 SHA1 SHA512 TLSH

        uv.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv.h
        • Size 71KB
        • SHA256 fddec8c096616675b4578d85222663c8624dce3ee67f5be1c33ba83eb02a827c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aix.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\aix.h
        • Size 1KB
        • SHA256 bed77e4cf6c06f1224e681cbe607eff04713ca0c1e1f4a102e6a6565ee3f02aa
        • MD5 SHA1 SHA512 TLSH

        bsd.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\bsd.h
        • Size 1KB
        • SHA256 963533ff4b16f72a204a8c760896a857c54d0ac50570f1793e3bef1f2ae8b35f
        • MD5 SHA1 SHA512 TLSH

        darwin.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\darwin.h
        • Size 3KB
        • SHA256 222b6dd3ce67cfbb735b14b1662f065fc23570d6969acf463b39d946b7590d8c
        • MD5 SHA1 SHA512 TLSH

        errno.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\errno.h
        • Size 10KB
        • SHA256 4242edf790e4569ef349026ab4c6e31093334ee5fc02b16ed7a0d9fbacdffd16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        linux.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\linux.h
        • Size 1KB
        • SHA256 adce0ed0821c8466a87a0a4c9e0df9ea7e4a4b24d099c7d7ed196f72a13f669d
        • MD5 SHA1 SHA512 TLSH

        os390.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\os390.h
        • Size 1KB
        • SHA256 98388ae32ce2c4390b82c3529539d2a476c44f590e960ed30a79f72b807ecd02
        • MD5 SHA1 SHA512 TLSH

        posix.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\posix.h
        • Size 1KB
        • SHA256 e9d7218b34e6e89b7b412891b7e2aa8b3a561c5ce9714c1f4def6c8a8593a6a6
        • MD5 SHA1 SHA512 TLSH

        sunos.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\sunos.h
        • Size 1KB
        • SHA256 29d4b4ef48dc3c3ab32d75e0a85bcb80e084d42b32aae40d67fc1d882b93298a
        • MD5 SHA1 SHA512 TLSH

        threadpool.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\threadpool.h
        • Size 1KB
        • SHA256 09ae41099af710289155be012df45c2fce04da6a02e813278b4558935e645938
        • MD5 SHA1 SHA512 TLSH

        tree.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\tree.h
        • Size 35KB
        • SHA256 34393c74082c71ddd5bd9ec4afe30ef03df7fa7bb64be5a50ae070cdfebb5c43
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unix.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\unix.h
        • Size 19KB
        • SHA256 a246095a1476d76631f5ec85be171aee8107eb0423007546ec91c58887c28f02
        • MD5 SHA1 SHA512 SSDEEP TLSH

        version.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\version.h
        • Size 1KB
        • SHA256 aef7fb55ffcece76db9cb7f87d0632e432369747f329679779616cd0721981da
        • MD5 SHA1 SHA512 TLSH

        win.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\win.h
        • Size 33KB
        • SHA256 51b6bf729c4c3e66cd89e0b0b0d734998776e675fe0a5eda9db77b634eb83ef0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\snapshot_blob.bin
        • Size 324KB
        • SHA256 69d9b2ecbc649fed6c41ca18e94f3a36b6770ff7038e9a0d07ae1ab824d9f7fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\v8_context_snapshot.bin
        • Size 685KB
        • SHA256 462919f1b49c9e913042f9e9a738e9510884d5920a426a8a5f1b188e28c4da91
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\vk_swiftshader.dll
        • Size 5.3MB
        • SHA256 bdf28efb95d1618e211aafafd2060df77ad53b98af8db685379f88aa852c0e00
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader_icd.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\7z-out\vulkan-1.dll
        • Size 882KB
        • SHA256 2f0ae7c191a962a49abe65c8c5c056262de5e2108e1f341b105844034153915f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsis7z.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsq14EB.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH