Analysis

  • max time kernel
    151s
  • max time network
    143s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    22/07/2026, 06:02

General

  • Target
    Exploit_Launcher.exe
  • Size 86.1MB
  • Sample260722-grjcvadr5x
  • SHA256 a0427a2cdd11cbbc5a5e79d5fe3c79a5922540bd75350edee8423facea489783
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Modifies Windows Firewall 2 TTPs 4 IoCs
  • Executes dropped EXE 13 IoCs
  • Loads dropped DLL 26 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Run Powershell to get system information.

  • Drops file in System32 directory 4 IoCs
  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 12 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

  • Executes a command shell one-liner 1 TTPs 16 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 24 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 49 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Exploit_Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\Exploit_Launcher.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1196
  • C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe
    "C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Drops file in System32 directory
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2276
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe /out:"C:\Users\Admin\AppData\Local\Temp\a_3371c711.exe" /nologo /optimize+ "C:\Users\Admin\AppData\Local\Temp\a_3371c711.cs""
      2⤵
      • Executes a command shell one-liner
      • Suspicious use of WriteProcessMemory
      PID:4916
      • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
        C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe /out:"C:\Users\Admin\AppData\Local\Temp\a_3371c711.exe" /nologo /optimize+ "C:\Users\Admin\AppData\Local\Temp\a_3371c711.cs"
        3⤵
        • Suspicious use of WriteProcessMemory
        PID:5836
        • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
          C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES92FF.tmp" "c:\Users\Admin\AppData\Local\Temp\CSC709128A794584AE5ACFF2FED9BFE35E.TMP"
          4⤵
            PID:4312
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /d /s /c "C:\Users\Admin\AppData\Local\Temp\a_3371c711.exe"
        2⤵
        • Executes a command shell one-liner
        • Suspicious use of WriteProcessMemory
        PID:4336
        • C:\Users\Admin\AppData\Local\Temp\a_3371c711.exe
          C:\Users\Admin\AppData\Local\Temp\a_3371c711.exe
          3⤵
          • Executes dropped EXE
          PID:5620
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe /out:"C:\Users\Admin\AppData\Local\Temp\e_88a0edca.exe" /nologo /optimize+ "C:\Users\Admin\AppData\Local\Temp\e_88a0edca.cs""
        2⤵
        • Executes a command shell one-liner
        • Suspicious use of WriteProcessMemory
        PID:1392
        • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
          C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe /out:"C:\Users\Admin\AppData\Local\Temp\e_88a0edca.exe" /nologo /optimize+ "C:\Users\Admin\AppData\Local\Temp\e_88a0edca.cs"
          3⤵
          • Suspicious use of WriteProcessMemory
          PID:3476
          • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
            C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RES9447.tmp" "c:\Users\Admin\AppData\Local\Temp\CSCFD30A6C941A54B20A98FF6742569F3E.TMP"
            4⤵
              PID:1508
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "C:\Users\Admin\AppData\Local\Temp\e_88a0edca.exe"
          2⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:2900
          • C:\Users\Admin\AppData\Local\Temp\e_88a0edca.exe
            C:\Users\Admin\AppData\Local\Temp\e_88a0edca.exe
            3⤵
            • Executes dropped EXE
            PID:4928
        • C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe
          "C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\WindowsUpdateAssistant" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1728 --field-trial-handle=1732,i,10883685115108307412,18218304752021783808,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:2
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4440
        • C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe
          "C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\WindowsUpdateAssistant" --mojo-platform-channel-handle=1676 --field-trial-handle=1732,i,10883685115108307412,18218304752021783808,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2492
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "getmac /fo csv /nh"
          2⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:4236
          • C:\Windows\system32\getmac.exe
            getmac /fo csv /nh
            3⤵
              PID:5848
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /d /s /c "tasklist /fo csv /nh"
            2⤵
            • Executes a command shell one-liner
            • Suspicious use of WriteProcessMemory
            PID:3916
            • C:\Windows\system32\tasklist.exe
              tasklist /fo csv /nh
              3⤵
              • Enumerates processes with tasklist
              • Suspicious use of AdjustPrivilegeToken
              PID:3868
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /d /s /c "powershell -Command "Get-CimInstance -ClassName Win32_BIOS | Select-Object -ExpandProperty Manufacturer""
            2⤵
            • Executes a command shell one-liner
            • Suspicious use of WriteProcessMemory
            PID:992
            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
              powershell -Command "Get-CimInstance -ClassName Win32_BIOS | Select-Object -ExpandProperty Manufacturer"
              3⤵
              • Command and Scripting Interpreter: PowerShell
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              PID:3624
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /d /s /c "powershell -Command "Get-CimInstance -ClassName Win32_BaseBoard | Select-Object -ExpandProperty Manufacturer""
            2⤵
            • Executes a command shell one-liner
            • Suspicious use of WriteProcessMemory
            PID:1212
            • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
              powershell -Command "Get-CimInstance -ClassName Win32_BaseBoard | Select-Object -ExpandProperty Manufacturer"
              3⤵
              • Command and Scripting Interpreter: PowerShell
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              PID:6000
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /d /s /c "reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance" /v Enabled /t REG_DWORD /d 0 /f"
            2⤵
            • Executes a command shell one-liner
            • Suspicious use of WriteProcessMemory
            PID:4704
            • C:\Windows\system32\reg.exe
              reg add "HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Notifications\Settings\Windows.SystemToast.SecurityAndMaintenance" /v Enabled /t REG_DWORD /d 0 /f
              3⤵
                PID:3780
            • C:\Windows\system32\cmd.exe
              C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe /target:winexe /out:"C:\Users\Admin\AppData\Local\Temp\gl_66825d54.exe" /nologo /nowarn:0649 /optimize+ "C:\Users\Admin\AppData\Local\Temp\gl_66825d54.cs""
              2⤵
              • Executes a command shell one-liner
              • Suspicious use of WriteProcessMemory
              PID:5892
              • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
                C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe /target:winexe /out:"C:\Users\Admin\AppData\Local\Temp\gl_66825d54.exe" /nologo /nowarn:0649 /optimize+ "C:\Users\Admin\AppData\Local\Temp\gl_66825d54.cs"
                3⤵
                • Suspicious use of WriteProcessMemory
                PID:6008
                • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
                  C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RESA975.tmp" "c:\Users\Admin\AppData\Local\Temp\CSCAC208378B8084D49AB347B5288A7DBB5.TMP"
                  4⤵
                    PID:2016
              • C:\Users\Admin\AppData\Local\Temp\gl_66825d54.exe
                C:\Users\Admin\AppData\Local\Temp\gl_66825d54.exe
                2⤵
                • Executes dropped EXE
                PID:1300
              • C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe
                "C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe" --screenwatch
                2⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Suspicious use of AdjustPrivilegeToken
                • Suspicious use of FindShellTrayWindow
                • Suspicious use of WriteProcessMemory
                PID:2272
                • C:\Windows\system32\cmd.exe
                  C:\Windows\system32\cmd.exe /d /s /c "netsh advfirewall firewall add rule name="ScreenWatch" dir=in action=allow protocol=TCP localport=3000"
                  3⤵
                  • Executes a command shell one-liner
                  • Suspicious use of WriteProcessMemory
                  PID:716
                  • C:\Windows\system32\netsh.exe
                    netsh advfirewall firewall add rule name="ScreenWatch" dir=in action=allow protocol=TCP localport=3000
                    4⤵
                    • Modifies Windows Firewall
                    • Event Triggered Execution: Netsh Helper DLL
                    PID:5512
                • C:\Windows\system32\cmd.exe
                  C:\Windows\system32\cmd.exe /d /s /c "netsh advfirewall firewall add rule name="ScreenWatch" dir=out action=allow protocol=TCP localport=3000"
                  3⤵
                  • Executes a command shell one-liner
                  • Suspicious use of WriteProcessMemory
                  PID:1080
                  • C:\Windows\system32\netsh.exe
                    netsh advfirewall firewall add rule name="ScreenWatch" dir=out action=allow protocol=TCP localport=3000
                    4⤵
                    • Modifies Windows Firewall
                    • Event Triggered Execution: Netsh Helper DLL
                    PID:3320
                • C:\Windows\system32\cmd.exe
                  C:\Windows\system32\cmd.exe /d /s /c "netsh advfirewall firewall add rule name="ScreenWatch-UDP" dir=in action=allow protocol=UDP localport=3000"
                  3⤵
                  • Executes a command shell one-liner
                  • Suspicious use of WriteProcessMemory
                  PID:3372
                  • C:\Windows\system32\netsh.exe
                    netsh advfirewall firewall add rule name="ScreenWatch-UDP" dir=in action=allow protocol=UDP localport=3000
                    4⤵
                    • Modifies Windows Firewall
                    • Event Triggered Execution: Netsh Helper DLL
                    PID:2964
                • C:\Windows\system32\cmd.exe
                  C:\Windows\system32\cmd.exe /d /s /c "netsh advfirewall firewall add rule name="ScreenWatch-UDP" dir=out action=allow protocol=UDP localport=3000"
                  3⤵
                  • Executes a command shell one-liner
                  • Suspicious use of WriteProcessMemory
                  PID:1432
                  • C:\Windows\system32\netsh.exe
                    netsh advfirewall firewall add rule name="ScreenWatch-UDP" dir=out action=allow protocol=UDP localport=3000
                    4⤵
                    • Modifies Windows Firewall
                    • Event Triggered Execution: Netsh Helper DLL
                    PID:2448
                • C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\WindowsUpdateAssistant" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1704 --field-trial-handle=1708,i,17716536020180542370,2188511516047972976,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:2
                  3⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:1256
                • C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\WindowsUpdateAssistant" --mojo-platform-channel-handle=2372 --field-trial-handle=1708,i,17716536020180542370,2188511516047972976,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
                  3⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:2684
                • C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\WindowsUpdateAssistant" --app-path="C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2484 --field-trial-handle=1708,i,17716536020180542370,2188511516047972976,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:1
                  3⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:2752
                • C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe
                  "C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\Windows Update Assistant.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\WindowsUpdateAssistant" --app-path="C:\Users\Admin\AppData\Local\Programs\WindowsUpdateAssistant\resources\app.asar" --no-sandbox --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2508 --field-trial-handle=1708,i,17716536020180542370,2188511516047972976,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:1
                  3⤵
                  • Executes dropped EXE
                  • Loads dropped DLL
                  PID:1396
              • C:\Windows\system32\cmd.exe
                C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe /out:"C:\Users\Admin\AppData\Local\Temp\h_e3f50476.exe" /nologo /optimize+ "C:\Users\Admin\AppData\Local\Temp\h_e3f50476.cs""
                2⤵
                • Executes a command shell one-liner
                • Suspicious use of WriteProcessMemory
                PID:1480
                • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
                  C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe /out:"C:\Users\Admin\AppData\Local\Temp\h_e3f50476.exe" /nologo /optimize+ "C:\Users\Admin\AppData\Local\Temp\h_e3f50476.cs"
                  3⤵
                  • Suspicious use of WriteProcessMemory
                  PID:4508
                  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
                    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RESAB69.tmp" "c:\Users\Admin\AppData\Local\Temp\CSCF1EACF4D2B7644EAB32AB17A34F295F0.TMP"
                    4⤵
                      PID:2040
                • C:\Users\Admin\AppData\Local\Temp\h_e3f50476.exe
                  C:\Users\Admin\AppData\Local\Temp\h_e3f50476.exe
                  2⤵
                  • Executes dropped EXE
                  • Suspicious use of AdjustPrivilegeToken
                  PID:4780
                • C:\Windows\system32\cmd.exe
                  C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe /out:"C:\Users\Admin\AppData\Local\Temp\i_e385ba38.exe" /nologo /optimize+ "C:\Users\Admin\AppData\Local\Temp\i_e385ba38.cs""
                  2⤵
                  • Executes a command shell one-liner
                  • Suspicious use of WriteProcessMemory
                  PID:6044
                  • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe
                    C:\Windows\Microsoft.NET\Framework64\v4.0.30319\csc.exe /out:"C:\Users\Admin\AppData\Local\Temp\i_e385ba38.exe" /nologo /optimize+ "C:\Users\Admin\AppData\Local\Temp\i_e385ba38.cs"
                    3⤵
                    • Suspicious use of WriteProcessMemory
                    PID:4756
                    • C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe
                      C:\Windows\Microsoft.NET\Framework64\v4.0.30319\cvtres.exe /NOLOGO /READONLY /MACHINE:IX86 "/OUT:C:\Users\Admin\AppData\Local\Temp\RESAEE4.tmp" "c:\Users\Admin\AppData\Local\Temp\CSC4FF58ACC97674DAEA399C1AAA373B4F4.TMP"
                      4⤵
                        PID:4824
                  • C:\Users\Admin\AppData\Local\Temp\i_e385ba38.exe
                    C:\Users\Admin\AppData\Local\Temp\i_e385ba38.exe
                    2⤵
                    • Executes dropped EXE
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:2520

                Network

                      MITRE ATT&CK Enterprise v16

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      StartupProfileData-NonInteractive

                      • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                      • Size 1KB
                      • SHA256 2706f7a3cde18304b8eb65dc0fa6d884f09a46a78e320302afda951d20885534
                      • MD5 SHA1 SHA512 TLSH

                      RES92FF.tmp

                      • Path C:\Users\Admin\AppData\Local\Temp\RES92FF.tmp
                      • Size 1KB
                      • SHA256 cf728e8f406f312ae6b9593b51e6f68d9dc7eb025b01aaaf3c358df1930625f2
                      • MD5 SHA1 SHA512 TLSH

                      RES9447.tmp

                      • Path C:\Users\Admin\AppData\Local\Temp\RES9447.tmp
                      • Size 1KB
                      • SHA256 c367b888a045d800b11ef1da01262f923fe3a2d0f1315945d267fc9d77f0eed6
                      • MD5 SHA1 SHA512 TLSH

                      RESA975.tmp

                      • Path C:\Users\Admin\AppData\Local\Temp\RESA975.tmp
                      • Size 1KB
                      • SHA256 b47cc1b21011c03fdc2d4ef6d3595faa18bc7e3462d3624c7b19751f4745bae3
                      • MD5 SHA1 SHA512 TLSH

                      RESAB69.tmp

                      • Path C:\Users\Admin\AppData\Local\Temp\RESAB69.tmp
                      • Size 1KB
                      • SHA256 ee6002f641546ddde862c7bd1b2281bd22259f3f7f4cf181ae0479bbb3e00a71
                      • MD5 SHA1 SHA512 TLSH

                      RESAEE4.tmp

                      • Path C:\Users\Admin\AppData\Local\Temp\RESAEE4.tmp
                      • Size 1KB
                      • SHA256 f33e3366d1c14930c3f23f18a46f675a14e708e2551873c67731c20f4dc8492d
                      • MD5 SHA1 SHA512 TLSH

                      __PSScriptPolicyTest_kv0zmn2m.1gm.ps1

                      • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_kv0zmn2m.1gm.ps1
                      • Size 60B
                      • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                      • MD5 SHA1 SHA512 TLSH

                      a_3371c711.exe

                      • Path C:\Users\Admin\AppData\Local\Temp\a_3371c711.exe
                      • Size 4KB
                      • SHA256 4c8745bce92b73b0ce47accc4cefb6285fce7b96ce91a3f38adb690c3e374197
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      e_88a0edca.exe

                      • Path C:\Users\Admin\AppData\Local\Temp\e_88a0edca.exe
                      • Size 4KB
                      • SHA256 e7db0ab500fb6f3daa791b97c461dd4d8b6f3d56aa82d0342281ae7fb1901e5a
                      • MD5 SHA1 SHA512 TLSH

                      gl_66825d54.exe

                      • Path C:\Users\Admin\AppData\Local\Temp\gl_66825d54.exe
                      • Size 14KB
                      • SHA256 ccad2c5f05220f969d5a6b292dd0a97ee5ffaaae2d20ca15de029715aeb66da1
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      h_e3f50476.exe

                      • Path C:\Users\Admin\AppData\Local\Temp\h_e3f50476.exe
                      • Size 4KB
                      • SHA256 442289638a74309639e0343c4d18b55ca8d201c04d021170f9906850b13c2bcd
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      i_e385ba38.exe

                      • Path C:\Users\Admin\AppData\Local\Temp\i_e385ba38.exe
                      • Size 5KB
                      • SHA256 64ebbcc6d7190822cacb48b99ea707f6e106c276023161c251e1c46ec299c153
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      LICENSE.electron.txt

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\LICENSE.electron.txt
                      • Size 1KB
                      • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                      • MD5 SHA1 SHA512 TLSH

                      LICENSES.chromium.html

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\LICENSES.chromium.html
                      • Size 8.7MB
                      • SHA256 000ae5775ffa701d57afe7ac3831b76799e8250a2d0c328d1785cba935aab38d
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      chrome_100_percent.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\chrome_100_percent.pak
                      • Size 163KB
                      • SHA256 b7805392bfce11118165e3a4e747ac0ca515e4e0ceadab356d685575f6aa45fb
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      chrome_200_percent.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\chrome_200_percent.pak
                      • Size 222KB
                      • SHA256 fac820a98b746a04ce14ec40c7268d6a58819133972b538f9720a5363c862e32
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      d3dcompiler_47.dll

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\d3dcompiler_47.dll
                      • Size 4.7MB
                      • SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ffmpeg.dll

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\ffmpeg.dll
                      • Size 2.7MB
                      • SHA256 c8476ee68088d72b9fab25703093df19237d14387016b77f472e10c99c9415ed
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      icudtl.dat

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\icudtl.dat
                      • Size 10.2MB
                      • SHA256 f5170aa2b388d23bebf98784dd488a9bcb741470384a6a9a8d7a2638d768defb
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      libEGL.dll

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\libEGL.dll
                      • Size 467KB
                      • SHA256 7bee4e33d89e5a4f2b3bc74d632f7c773ae9a399b6b2ba6d29b1192e25695a8b
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      libGLESv2.dll

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\libGLESv2.dll
                      • Size 7.4MB
                      • SHA256 ee039e42a4948e9f26ece8515f3c699014fa7803ae597cd3427fa1548962f9af
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      af.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\af.pak
                      • Size 464KB
                      • SHA256 57670eae6d1871e648ad6148125ee82d08575bec5b323459fc14c3831570774a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      am.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\am.pak
                      • Size 756KB
                      • SHA256 b05dcb8136751aee5eced680a5bad935e386bfce657dd283d3ec00ee722fd740
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ar.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\ar.pak
                      • Size 829KB
                      • SHA256 ea49bc2ceb6b185030eaa0ee0155feca90e632390417299113b02fbe365ff731
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      bg.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\bg.pak
                      • Size 861KB
                      • SHA256 50e4f6b9c387adf4baba3377c61d99326cc3987928d8d60b88d1ac29352820ea
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      bn.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\bn.pak
                      • Size 1.1MB
                      • SHA256 e6adcfb4f3b3bccd4a27edadc168b503c36551cd6b27fb24043efeb21f691ce5
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ca.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\ca.pak
                      • Size 524KB
                      • SHA256 4ecfa3785ab52564e0bd7dda04d59a30163561588a04f3bd1b1b71de051d2c53
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      cs.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\cs.pak
                      • Size 539KB
                      • SHA256 1c9448ea3aefce1a7e1491e73af91af772d8b22d538676a2beab690558e668fa
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      da.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\da.pak
                      • Size 487KB
                      • SHA256 438d2b1fd396c2108ca3902f69eeb372219edd5d95fe70970d8ee9e64556c9a4
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      de.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\de.pak
                      • Size 521KB
                      • SHA256 47253e2fcf0e4691f29b3ebbe8f888a97b28d6aeaf73ab000857a6b8d0907ff3
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      el.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\el.pak
                      • Size 944KB
                      • SHA256 6a06d1d6b566214f7c3b693052beec488f7aae5ceeca26781a5d66fade39388b
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      en-GB.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\en-GB.pak
                      • Size 424KB
                      • SHA256 4e4d71f24f5eea6892b961fcda014fc74914c1340366f9c62f0535e9b94ae846
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      en-US.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\en-US.pak
                      • Size 428KB
                      • SHA256 0db4f65e527553b9e7bee395f774cc9447971bf0b86d1728856b6c15b88207bb
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      es-419.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\es-419.pak
                      • Size 515KB
                      • SHA256 d1019c780e836e0c30fe01928d23ecdd0ca04ed8ee886adb3428e3683e4ed6ea
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      es.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\es.pak
                      • Size 515KB
                      • SHA256 f6a01c26bc18dcf701e1d4b6ff76602f14c4bb9adf9dd176c9107d5aedb4503f
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      et.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\et.pak
                      • Size 468KB
                      • SHA256 292eb18ec61502b0e952b447f73a66143c56dd95f170981945e5aab53a6b32b3
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      fa.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\fa.pak
                      • Size 767KB
                      • SHA256 7a856070430e3cfad15b96b153b1cb483cca9a1b9a43453df3707b09c748a3f2
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      fi.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\fi.pak
                      • Size 478KB
                      • SHA256 e6454458dfbe150112c37f8b02f8c72c593af22e8be16980ebc854ad113fb763
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      fil.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\fil.pak
                      • Size 541KB
                      • SHA256 ab107369d45e105a4cb4f2f6bc8da2a8c1b6c65d5e94a7ab3e703e619c083dae
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      fr.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\fr.pak
                      • Size 559KB
                      • SHA256 976622fb851378f57f81423e5625e40d0753d7a5e34caed2c39e4b130a3427b8
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      gu.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\gu.pak
                      • Size 1.1MB
                      • SHA256 716ea0433e19edb5113dc8a25ae67c2587bc17c7fb63a93ac473bdcef8f72d34
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      he.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\he.pak
                      • Size 672KB
                      • SHA256 c3955c97b6998f1806f8871fd3137f6f504bdd091f8bd1ff5ab8cd089474ae8e
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      hi.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\hi.pak
                      • Size 1.1MB
                      • SHA256 1f49622ec6682c90e03fc42c319074565cf9d3532a2a4e3798e2f6cc159b2e8a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      hr.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\hr.pak
                      • Size 521KB
                      • SHA256 e442d083c32d752d1ef2225d84a4f1a91efab768e86fc63a7ed22c10fbf7e520
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      hu.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\hu.pak
                      • Size 561KB
                      • SHA256 6ca150d0fc35492bafb411bbc520f3b34da6399969fa9685ae74201623882560
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      id.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\id.pak
                      • Size 462KB
                      • SHA256 af63384cf7d1d39e57decd823dff7538ab2b1e7e36e9ac61238477f7889d1d46
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      it.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\it.pak
                      • Size 509KB
                      • SHA256 a7f555e7e797e1de1a66cfca8c7b709b0e542ca62e7de96e034701fcef316d0c
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ja.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\ja.pak
                      • Size 622KB
                      • SHA256 8260f4c9500b64d541386a8515fd0c9ddef82e3f044951b7b51a33ad81c1128f
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      kn.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\kn.pak
                      • Size 1.2MB
                      • SHA256 58d16195170f76e40e18ee0ac2e10e1b73bcfd083821158927a7d67a51bcbc42
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ko.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\ko.pak
                      • Size 526KB
                      • SHA256 cba6b7633cce796407821264e176a6266f80c1799ade16bf16893d68144236c6
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      lt.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\lt.pak
                      • Size 564KB
                      • SHA256 1bd385b780f3d13d41f8cf782a322e37be889aee273ffde3d8959e0ebcaabd0b
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      lv.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\lv.pak
                      • Size 564KB
                      • SHA256 91642c04de64f88a5c49b4eeaf5d627554e60d56fc40e7cd58cd2601b0d3dbf2
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ml.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\ml.pak
                      • Size 1.3MB
                      • SHA256 83d187cd70048f4129fa65ba148c74a04a47ee1f14218e7c85b36fe83e87b5e3
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      mr.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\mr.pak
                      • Size 1.0MB
                      • SHA256 0877f2e75e0b9f5e709f0a0bf7cc793a02ff5bbb28bd6a8b6b6012760c1bbff3
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ms.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\ms.pak
                      • Size 484KB
                      • SHA256 c7b56e9ca2f75b4414c13144ff4deee1459c2a7cde79730d863ab234cd4c2f8b
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      nb.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\nb.pak
                      • Size 471KB
                      • SHA256 96747543d9b2dbfb4482d4c24d7818d366545b2476633ad4fec8cc958ab760d3
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      nl.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\nl.pak
                      • Size 484KB
                      • SHA256 c7a18764ca908ec7f66c48cae2be06fef95213d7a5580b45f9bacee474456167
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      pl.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\pl.pak
                      • Size 543KB
                      • SHA256 69e16e41f5fe7fa18557b938874f20cda6879f3cc616ead9a815c1381fe94158
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      pt-BR.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\pt-BR.pak
                      • Size 510KB
                      • SHA256 6d54f87f6c8b5e01bd0da9a961236344e95e85c3dc55fc92a34542777d6f6275
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      pt-PT.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\pt-PT.pak
                      • Size 512KB
                      • SHA256 a903ca2a8e52f987e23d040de7403b58d925a6c39668d3bc0822fb2aadd34cb1
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ro.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\ro.pak
                      • Size 531KB
                      • SHA256 82e69f505222125ea62f8e90d8030d82a1bd49871192cb4274a8fd9d0e03d577
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ru.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\ru.pak
                      • Size 872KB
                      • SHA256 d0068b9ddf8a9e6a5b1186bd0e00ed9f09224ed56ba7e653e2d54158d938c6f2
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      sk.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\sk.pak
                      • Size 548KB
                      • SHA256 f9cd222838721a618c23c8f6493bc9699c795c0063998f1a8d506b4b7a297cdc
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      sl.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\sl.pak
                      • Size 526KB
                      • SHA256 b174c4c49654f7d65d223568c700bfaace74238447ae63171787236ce2aab00e
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      sr.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\sr.pak
                      • Size 811KB
                      • SHA256 a2bc6b064ff1f7b15707f61bd76ddd9d889bd982c4182e9e74272d39c6235c85
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      sv.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\sv.pak
                      • Size 473KB
                      • SHA256 48a71912e4843b03358fede7176b2e57ced83d3a1344a92b989886374dbded62
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      sw.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\sw.pak
                      • Size 498KB
                      • SHA256 1949953d638f266ce74d84c020174c074780166b880e7c2ec38bc6047bbb8ecc
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ta.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\ta.pak
                      • Size 1.3MB
                      • SHA256 6348cc2d385b9808fdf1b815914dbfb26f552da4d10f85b2613a5e6e9f95b8fa
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      te.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\te.pak
                      • Size 1.2MB
                      • SHA256 09ab1ac2b69f868539d4f2e59dfea8c3c2f418a5455777e4c91d13c5ee55ab4c
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      th.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\th.pak
                      • Size 1003KB
                      • SHA256 f06a45f0395c3e42e42c46de2c19a2a104661b47be6f9ee97f8c68b05706ef1e
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      tr.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\tr.pak
                      • Size 509KB
                      • SHA256 676d46d19d1673eeff4f5e908aec3b53a6273c440e69e7d655ced6c70531cb9a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      uk.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\uk.pak
                      • Size 870KB
                      • SHA256 29d68d90512ee9952635c7e074d5ab210531d93ae24c11a8f91bca20b685e9a2
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ur.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\ur.pak
                      • Size 761KB
                      • SHA256 2520ba8471c840aa075075524c4ad2bde10f43fa7a1b623aa14555180ecd30ef
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      vi.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\vi.pak
                      • Size 602KB
                      • SHA256 25aeee59775ae38b21a091107022312fc228f96dbea906042bf3626b7cf86b98
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      zh-CN.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\zh-CN.pak
                      • Size 435KB
                      • SHA256 6a9a1f5b7674da36f20cb76af7e3e75e9e56873539e8a3b32895ebba439af83a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      zh-TW.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\locales\zh-TW.pak
                      • Size 430KB
                      • SHA256 6a43c8fac5a0ce7c7a21b30ac7bc2167488e17c81c76c00f0b92b49e9e46e469
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      resources.pak

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources.pak
                      • Size 5.1MB
                      • SHA256 1d241f5d4403a6e802e898c61e4753f8508ae4dda8fcb7750558ec1ecade52c6
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      app.asar

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar
                      • Size 16.7MB
                      • SHA256 bc020e277e473ff9ce64d4e1ce7fea7fe30ad3f48c7d5fddb99c9bee95c57811
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      LICENSE

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\LICENSE
                      • Size 1KB
                      • SHA256 455dda47a3fc2f58ab06d8e526f490ec43d0fc23a5ea80dd0942644397316d9b
                      • MD5 SHA1 SHA512 TLSH

                      index.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\dist\index.js
                      • Size 1KB
                      • SHA256 3043aeba077d86d8b2e7fbbd6e1ecc3438c65ab184a2bda9fa0179976c5b0170
                      • MD5 SHA1 SHA512 TLSH

                      package.json

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\package.json
                      • Size 936B
                      • SHA256 be14494278f32ab162d3b3cf8f5d0bdbcf02c4bd8785428119a2e225e1cd482f
                      • MD5 SHA1 SHA512 TLSH

                      @primno+dpapi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\prebuilds\win32-arm64\@primno+dpapi.node
                      • Size 122KB
                      • SHA256 6a5cc9c5b3e390fe08fea0de3a22248d5836cea0b26aa6a80d9447c45ec04b12
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      @primno+dpapi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\prebuilds\win32-x64\@primno+dpapi.node
                      • Size 134KB
                      • SHA256 386e7a520b143aa7b6fa1a28a0237391a938bbedd0b245733a3da3a215026a3f
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      dpapi_addon.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\src\dpapi_addon.h
                      • Size 206B
                      • SHA256 18280b1135123aff82fbf4188a5aadfc9a5d6fffad9309f72f347f380f2da550
                      • MD5 SHA1 SHA512 TLSH

                      dpapi_not_supported.cpp

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\src\dpapi_not_supported.cpp
                      • Size 327B
                      • SHA256 7c03cec11c438b6d2512239477d9f1b45d6e16763122a3a36458ab339f50d3c4
                      • MD5 SHA1 SHA512 TLSH

                      dpapi_win.cpp

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\src\dpapi_win.cpp
                      • Size 2KB
                      • SHA256 da37b02fb0babb651244479ea019d229fff1c41ecde74bc06335b5e603d9b30e
                      • MD5 SHA1 SHA512 TLSH

                      main.cpp

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\src\main.cpp
                      • Size 698B
                      • SHA256 1ada21451bab629832372d519e366bfb08c80facfefe5a40c76a4f10a697c905
                      • MD5 SHA1 SHA512 TLSH

                      LICENSE.txt

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\LICENSE.txt
                      • Size 1KB
                      • SHA256 48bfd53f76185bd32bb91393a7e27ab553b77b4b965245ba73f4714c11030a4a
                      • MD5 SHA1 SHA512 TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\darwin_arm64\koffi.node
                      • Size 1.2MB
                      • SHA256 6c88b2173bdf403046265f859201c13504eba2b258b23da61fff23f7659797b0
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\darwin_x64\koffi.node
                      • Size 1.5MB
                      • SHA256 f7ba306880ab40286c4443577fa95c47615111ce0a958442e4eb0a5e83928b67
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\freebsd_arm64\koffi.node
                      • Size 1.5MB
                      • SHA256 4c730af0d6c84f2b88e22b80fb106b7af416deebe9a1c8e8336d6e4b1fce819f
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\freebsd_ia32\koffi.node
                      • Size 1.4MB
                      • SHA256 7acaf95d9da7dd4e2c5823be5321dd6cda109c07c1079306c3216d1aa6688f8f
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\freebsd_x64\koffi.node
                      • Size 1.5MB
                      • SHA256 ef05047b3ec7fb73e74c96113f67bf878ad74a9e4eaef20ec3f83317460a2bbb
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_arm64\koffi.node
                      • Size 1.5MB
                      • SHA256 da394ea5d8f28cf8e90c6b1bbc3f35485adb24f36dc36265806967213c235a50
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_armhf\koffi.node
                      • Size 1.2MB
                      • SHA256 5ece8a66d2ec7eed61da4d294c834b40c7631868a0e1b9ce45649e9c4df81ce3
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_ia32\koffi.node
                      • Size 1.5MB
                      • SHA256 f5d7732a3a9d890ce184855399907c85fd86f0ea8a2ed2fb846534059de1181f
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_loong64\koffi.node
                      • Size 1.4MB
                      • SHA256 31a7add40a525c65be33ee30a771f447b0b1d60ba83b3e502439ccf69a08b3df
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_riscv64d\koffi.node
                      • Size 1.2MB
                      • SHA256 26c7a6fd6962fef8ca5fdcd5a6956e9758a2d652822bd3ef4c9c04e4725c06d0
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_x64\koffi.node
                      • Size 1.5MB
                      • SHA256 ecc61aa265a56b99182c648e56a91e4c60bf3c7e542efaca93dfdb0452e03330
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\musl_arm64\koffi.node
                      • Size 1.6MB
                      • SHA256 6cbff8fcc93c19874ffe68668ab806b933f1f1f98f2a18d399964c7bd81c939a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\musl_x64\koffi.node
                      • Size 1.5MB
                      • SHA256 53ff9cc831cd1539dc3131e616603df42d6f17ff3a836a5e2d72adc0c99a6606
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\openbsd_ia32\koffi.node
                      • Size 1.4MB
                      • SHA256 bc3b558da1ab1180dc3279b1349aac9ac569e92a8de30e28ca78199560aca8b0
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\openbsd_x64\koffi.node
                      • Size 1.5MB
                      • SHA256 be1f117f36f420608e34be5db430f9066e9f73407c339db31960aeb102e9e7a6
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.exp

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_arm64\koffi.exp
                      • Size 1KB
                      • SHA256 31e13e095cbf175ee9ae5276324397b014146a04f690f872b1f0f34a5e31beaf
                      • MD5 SHA1 SHA512 TLSH

                      koffi.lib

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_arm64\koffi.lib
                      • Size 2KB
                      • SHA256 95e9fcc922bda6a01dd9a163827c1be07fba2ab00bb6818674b349ccbe1ec3fc
                      • MD5 SHA1 SHA512 TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_arm64\koffi.node
                      • Size 1.3MB
                      • SHA256 5a04ca448b37cfcf9a9327be8fae7624053b3d2a46c5dcca4ed3689df33400dd
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.exp

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_ia32\koffi.exp
                      • Size 1KB
                      • SHA256 061cac6635fb6424ccda30c5e1f0d92cfb7b20ceecbfaf110a35d8214737079a
                      • MD5 SHA1 SHA512 TLSH

                      koffi.lib

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_ia32\koffi.lib
                      • Size 2KB
                      • SHA256 2c599c527797d56c69ee161aeac041b98fd850fc6ef6b8bd2b52148897619f99
                      • MD5 SHA1 SHA512 TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_ia32\koffi.node
                      • Size 1002KB
                      • SHA256 af700e05e2578e3062917248fd5cb3a2cfdb209e2aeedf157b072534d0e884c7
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      koffi.exp

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_x64\koffi.exp
                      • Size 1KB
                      • SHA256 ba68b3d4f5ded3101fb3248061e0c229a4d6dfb96e8487354ba877cb16908af2
                      • MD5 SHA1 SHA512 TLSH

                      koffi.lib

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_x64\koffi.lib
                      • Size 2KB
                      • SHA256 5d9d9c318d33edab02db8858d5345141aa2f7863dd7f3e0949217be07847c1a7
                      • MD5 SHA1 SHA512 TLSH

                      koffi.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_x64\koffi.node
                      • Size 1.5MB
                      • SHA256 cd9fb878c2e73711e37cf82e60526509a3df361148396dcb3a95b053b582880c
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      benchmarks.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\benchmarks.md
                      • Size 5KB
                      • SHA256 d10260739b956bd469b2aedd570c92ce9b8db915626510bc3b5fbc302240f581
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      callbacks.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\callbacks.md
                      • Size 8KB
                      • SHA256 29c28636411bede482b63fab512caaa9a813cd42261a5271d71a7ab4f762ace8
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      contribute.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\contribute.md
                      • Size 5KB
                      • SHA256 542335d52d68bc6f4f7b11499d16e238d888e72ecb0e1abe4d8db028adfe5e99
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      functions.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\functions.md
                      • Size 9KB
                      • SHA256 59442e4bdb502bf22e1207afa75e38983b837d7b68f890387f9e30bb53976ba9
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      index.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\index.md
                      • Size 3KB
                      • SHA256 8c6ff4962fd18478d07a474d3fc9e7d9a8c9ec2180e6b78adf434463f4dadcff
                      • MD5 SHA1 SHA512 TLSH

                      input.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\input.md
                      • Size 16KB
                      • SHA256 be0569a396cb33e70d7f95edfe7a0957669566694c75cf87212c0881e3bf4adf
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      migration.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\migration.md
                      • Size 4KB
                      • SHA256 3c5ef411cc137e194e3bff13243f7d7c7c71da12e09ce4e103f79ba79906ca90
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      misc.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\misc.md
                      • Size 6KB
                      • SHA256 09602031dd666662c6024f35dcc5c4a4e74c31b8a18d4aa7e9999c1937d71640
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      output.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\output.md
                      • Size 9KB
                      • SHA256 b92367ccfdca8da935cfb2351240f5599896df152347d0b835e2f348b1175e4d
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      packaging.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\packaging.md
                      • Size 2KB
                      • SHA256 e1bfe8b62b143f5e4ed2ceee11150f9ef802bdf01bd9d84caef419e79efadfe4
                      • MD5 SHA1 SHA512 TLSH

                      platforms.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\platforms.md
                      • Size 2KB
                      • SHA256 02bdc435d62a619fa0b32462b7ed37399471d152c9c9f255ff5b1dcb3d64f923
                      • MD5 SHA1 SHA512 TLSH

                      pointers.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\pointers.md
                      • Size 12KB
                      • SHA256 0952c0bb41f4fdc9f47524d5ec04a094c10939f5b2c7ebf6c775ee519731db82
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      start.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\start.md
                      • Size 3KB
                      • SHA256 2624333facf7f80b21c6d422ecc9289dc069577e5f946f468eeecb4fde62205f
                      • MD5 SHA1 SHA512 TLSH

                      unions.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\unions.md
                      • Size 5KB
                      • SHA256 2adf36a1ce803786036fa7ee9cfd4ceca2f62cd6e0560554ce49315cbc67674d
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      variables.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\variables.md
                      • Size 3KB
                      • SHA256 4248d1c6494ae8d3fa3531178487edd0964ed1c4eaae35da4fc42cd83712f83a
                      • MD5 SHA1 SHA512 TLSH

                      index.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\index.js
                      • Size 20KB
                      • SHA256 39e05b73cec3a65d5841906b97cb8c95055e6fb300271de0c0b5a7f918f2ca80
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      base.hh

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\base.hh
                      • Size 171KB
                      • SHA256 bab8771c26713bad29ec2fe507ff5f16f84c3948dc08fc318a623cef04ec9a26
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      crc.inc

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\crc.inc
                      • Size 200KB
                      • SHA256 aeeea0b506cf505b884b7d8071a0a90ce353e0ce5c7a0454ca129a31c85a29d0
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      crc_gen.py

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\crc_gen.py
                      • Size 2KB
                      • SHA256 605109bcb12c06748b022bb1a7948fe5e4c6376bc87b21d232fca9b1d9a241ec
                      • MD5 SHA1 SHA512 TLSH

                      mimetypes.inc

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\mimetypes.inc
                      • Size 53KB
                      • SHA256 f3a0c670fcb8f8ff9ea29ff1de9d646a1787187f0500118f7d084a80ab0cbc04
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      mimetypes_gen.py

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\mimetypes_gen.py
                      • Size 1KB
                      • SHA256 18e93987189889bed91f06b27ea80e16241ddb59f32409dae160cc54356f6236
                      • MD5 SHA1 SHA512 TLSH

                      tower.hh

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\tower.hh
                      • Size 2KB
                      • SHA256 49c73bfc47750187b556220489a0be158c178545f216ded075853ae1575f882b
                      • MD5 SHA1 SHA512 TLSH

                      unicode.inc

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\unicode.inc
                      • Size 35KB
                      • SHA256 5678c732bf1026059b0363c8e1ead8669e09c57b973321b1931aeb64dc0fa56e
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      unicode_gen.py

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\unicode_gen.py
                      • Size 4KB
                      • SHA256 402e17c0b48c4d79da1234e10e57d7174b9103c376dd43ad9a1e044a9fb39944
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      package.json

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\package.json
                      • Size 668B
                      • SHA256 e65a6209988184f526c41ad03899795b42d0d5ba56796a7748ae1e9e94a335fb
                      • MD5 SHA1 SHA512 TLSH

                      README.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\README.md
                      • Size 3KB
                      • SHA256 5fd2f3bb3c9bbb2f603e757b2a366ad8ce1eba23bd5683a12e5170c9d31a4ae5
                      • MD5 SHA1 SHA512 TLSH

                      FindCNoke.cmake

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\assets\FindCNoke.cmake
                      • Size 5KB
                      • SHA256 e81954cb439202214648894dcf59a838ff31a2d903e7ae26fa3346a21cd9de8a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      toolchains.json

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\assets\toolchains.json
                      • Size 6KB
                      • SHA256 c09f4ccd3eee4da5f834af376376359cb8025f23fedd635a82860dc3594d88cf
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      win_delay_hook.c

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\assets\win_delay_hook.c
                      • Size 879B
                      • SHA256 569e120d81b67fd9d19a40db4ae9d2f7b9c60549ef734c95a16183c5c2427e64
                      • MD5 SHA1 SHA512 TLSH

                      cnoke.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\cnoke.js
                      • Size 6KB
                      • SHA256 dfa8d4d5a1e7e4cdd51ac2b656b93e816718d5912dcaa28002bf3d6cb3068b46
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      package.json

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\package.json
                      • Size 425B
                      • SHA256 a0371e0bd7a973e052647d087e985e594f18b089443a92ab45d90ba275381554
                      • MD5 SHA1 SHA512 TLSH

                      builder.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\src\builder.js
                      • Size 17KB
                      • SHA256 53a48af14d00256f3f60d6265d8bc637fe1fe50e0cbebb3ecc610bd9cc46b199
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      index.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\src\index.js
                      • Size 247B
                      • SHA256 01cdd6266047bdf69d79c0ea48fdcd830471282eddc0b9c8259558baaff62cd7
                      • MD5 SHA1 SHA512 TLSH

                      tools.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\src\tools.js
                      • Size 12KB
                      • SHA256 7b12a3ddc0a7706b7e5cc6155537e9abf3c75c124e5ca38ab58c8dc0b8eea58a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      CMakeLists.txt

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\CMakeLists.txt
                      • Size 7KB
                      • SHA256 a1582f5f227945f80b1841e9af205991e3dfbfccc76490e624eb2f3555f8fa67
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      abi_arm32_asm.S

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_arm32_asm.S
                      • Size 3KB
                      • SHA256 fdf21db17e6e0e9de810e446190eb21873c0115cec5aa91cf17adfcb9f751e56
                      • MD5 SHA1 SHA512 TLSH

                      abi_arm64_asm.S

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_arm64_asm.S
                      • Size 4KB
                      • SHA256 57692d1cad793c54c17075e8086233777c90dd8d8b2eeba1275c117670952f3b
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      abi_arm64_asm.asm

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_arm64_asm.asm
                      • Size 3KB
                      • SHA256 2ec2d897e5246f15383e6a701007a4ce9841cf1ef1d31b892926e6bac2320fb6
                      • MD5 SHA1 SHA512 TLSH

                      abi_loong64_asm.S

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_loong64_asm.S
                      • Size 4KB
                      • SHA256 b495099f97aef59b22ce11f520a08cc622469546455745717c44b780428192f5
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      abi_riscv64_asm.S

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_riscv64_asm.S
                      • Size 4KB
                      • SHA256 45de40bd082fc1d0762df89188e4fdc4d6ab8c9a2a7bca193a3e095aab81f875
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      abi_x64_sysv_asm.S

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_x64_sysv_asm.S
                      • Size 5KB
                      • SHA256 55830267a9687ef43321f268bec922db28f38737b2b7901a9ded131933b32a5d
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      abi_x64_win_asm.S

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_x64_win_asm.S
                      • Size 3KB
                      • SHA256 66d5f472d61ede2e914132036473de756df548b0fd244cb487a722cd78890da7
                      • MD5 SHA1 SHA512 TLSH

                      abi_x64_win_asm.asm

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_x64_win_asm.asm
                      • Size 4KB
                      • SHA256 6d638107d051c2d0d2c0d2feb67efe10a252c71bed119c71280aecb22f5cb30c
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      abi_x86_asm.S

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_x86_asm.S
                      • Size 4KB
                      • SHA256 1d0105e991176b807d39f4ab2b18295a7778c9963060645517873accba09b5a7
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      abi_x86_asm.asm

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_x86_asm.asm
                      • Size 3KB
                      • SHA256 fa8df97b24096427fa8717296e78a100c52606f6f14aa8e8178a77ef6fefee73
                      • MD5 SHA1 SHA512 TLSH

                      call.hh

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\call.hh
                      • Size 4KB
                      • SHA256 343688cf8ab6cf96df2e6090b664f4827d12c79a2f8e2287ef26d00278597661
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      errno.inc

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\errno.inc
                      • Size 8KB
                      • SHA256 e33097d18eb694c136bdb0d0dd912dfd1ea62e9cc66f3f3a7efdd4da8b3e8eca
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ffi.hh

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\ffi.hh
                      • Size 8KB
                      • SHA256 59d1835bb717ac15092c0868bbbe79c04bf6d7600105364ea349ba3dcb35036d
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      init.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\init.js
                      • Size 3KB
                      • SHA256 76c95aba02c0e8b2df4a0580af41c65f5a2fab8dbbc86cc02e6eb177268d0d9b
                      • MD5 SHA1 SHA512 TLSH

                      parser.hh

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\parser.hh
                      • Size 1KB
                      • SHA256 b9234ebdac4bf20dff9197627d97a21c112d94283698b042dcccd9b808872291
                      • MD5 SHA1 SHA512 TLSH

                      util.hh

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\util.hh
                      • Size 6KB
                      • SHA256 bc9776889202e16a30623f1b165079fa3c86efce178442e4a04d6c395f2f594a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      uv.def

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\uv.def
                      • Size 119B
                      • SHA256 fea5f7c4132badf3b726e640470109f5431df110ad897bee4406330db055494c
                      • MD5 SHA1 SHA512 TLSH

                      uv.hh

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\uv.hh
                      • Size 858B
                      • SHA256 a3db799445482d3ca4177149856160fc52e3129fc1214a5a11a3d55db20bbb92
                      • MD5 SHA1 SHA512 TLSH

                      win32.hh

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\win32.hh
                      • Size 2KB
                      • SHA256 486192c4d21f4e65693a6d0ec5596e3dd5b66b5c9dadc16a335906cb5d55347b
                      • MD5 SHA1 SHA512 TLSH

                      write_trampolines.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\tools\write_trampolines.js
                      • Size 1KB
                      • SHA256 3ab8e2ca421a950555b9866396ea9d2632d3a70d5674096a20968fd0458cfd7d
                      • MD5 SHA1 SHA512 TLSH

                      LICENSE.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\LICENSE.md
                      • Size 1KB
                      • SHA256 89024017b88a9f2b763f79b941a4f2db3b4428edfcacdc0b23866b2da633ad0c
                      • MD5 SHA1 SHA512 TLSH

                      README.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\README.md
                      • Size 4KB
                      • SHA256 8a5624af026ea5e9cf311476aa30cf33d9fc2c0c3be40bd7c5d8600a01ff1932
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      napi-inl.deprecated.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\napi-inl.deprecated.h
                      • Size 6KB
                      • SHA256 b66ed1e565e735bbfabcc2f72d466ab7c5414d3ef8851d1af440b81be7f2375c
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      napi-inl.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\napi-inl.h
                      • Size 230KB
                      • SHA256 797668948d7f2df0ee8fcfe734af5b55942768bc7e15e77196a1f1107bba3635
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      napi.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\napi.h
                      • Size 117KB
                      • SHA256 ffb807c34a8b3e346a6d0eacd7c8dbc0bdd92ee06bf42668557568dc54f918e9
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      LICENSE

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\LICENSE
                      • Size 1KB
                      • SHA256 a553508f516031c91f3af1148d44970cb81bbae6c4f091be6835d39cc252238c
                      • MD5 SHA1 SHA512 TLSH

                      README.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\README.md
                      • Size 2KB
                      • SHA256 63a4e81d19f02b164d51c4721ff3e88c81d410640de7e1d3520a2c406f0a7d83
                      • MD5 SHA1 SHA512 TLSH

                      js_native_api.def

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\def\js_native_api.def
                      • Size 2KB
                      • SHA256 77653a554fbb27f6c5666f4ba05f87d26f0de72bc3d0439961ac030030c2be66
                      • MD5 SHA1 SHA512 TLSH

                      node_api.def

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\def\node_api.def
                      • Size 3KB
                      • SHA256 e0d5e3da0520a42e26b563f6321291081bd15bdd20821d46818e5f47900f77d6
                      • MD5 SHA1 SHA512 TLSH

                      js_native_api.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\js_native_api.h
                      • Size 30KB
                      • SHA256 0953395662ea63697cd7a77a9320d94aa2829f9c9569abf3a74272b7a2923ce8
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      js_native_api_types.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\js_native_api_types.h
                      • Size 6KB
                      • SHA256 21eebde05d2ee59d315ac27d4aa82434ca88508a0b2cf5819802a00ca523831d
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      node_api.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\node_api.h
                      • Size 10KB
                      • SHA256 2d4560831e525b47b060ec8a0864ab73993df9e20215ce9f0fe7b24cd31af32a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      node_api_types.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\node_api_types.h
                      • Size 1KB
                      • SHA256 a25356630d3058f0a0c8937d9f297e9471e037fda58c2696d8a505c2bd99cb00
                      • MD5 SHA1 SHA512 TLSH

                      uv.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv.h
                      • Size 71KB
                      • SHA256 fddec8c096616675b4578d85222663c8624dce3ee67f5be1c33ba83eb02a827c
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      aix.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\aix.h
                      • Size 1KB
                      • SHA256 bed77e4cf6c06f1224e681cbe607eff04713ca0c1e1f4a102e6a6565ee3f02aa
                      • MD5 SHA1 SHA512 TLSH

                      bsd.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\bsd.h
                      • Size 1KB
                      • SHA256 963533ff4b16f72a204a8c760896a857c54d0ac50570f1793e3bef1f2ae8b35f
                      • MD5 SHA1 SHA512 TLSH

                      darwin.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\darwin.h
                      • Size 3KB
                      • SHA256 222b6dd3ce67cfbb735b14b1662f065fc23570d6969acf463b39d946b7590d8c
                      • MD5 SHA1 SHA512 TLSH

                      errno.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\errno.h
                      • Size 10KB
                      • SHA256 4242edf790e4569ef349026ab4c6e31093334ee5fc02b16ed7a0d9fbacdffd16
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      linux.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\linux.h
                      • Size 1KB
                      • SHA256 adce0ed0821c8466a87a0a4c9e0df9ea7e4a4b24d099c7d7ed196f72a13f669d
                      • MD5 SHA1 SHA512 TLSH

                      os390.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\os390.h
                      • Size 1KB
                      • SHA256 98388ae32ce2c4390b82c3529539d2a476c44f590e960ed30a79f72b807ecd02
                      • MD5 SHA1 SHA512 TLSH

                      posix.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\posix.h
                      • Size 1KB
                      • SHA256 e9d7218b34e6e89b7b412891b7e2aa8b3a561c5ce9714c1f4def6c8a8593a6a6
                      • MD5 SHA1 SHA512 TLSH

                      sunos.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\sunos.h
                      • Size 1KB
                      • SHA256 29d4b4ef48dc3c3ab32d75e0a85bcb80e084d42b32aae40d67fc1d882b93298a
                      • MD5 SHA1 SHA512 TLSH

                      threadpool.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\threadpool.h
                      • Size 1KB
                      • SHA256 09ae41099af710289155be012df45c2fce04da6a02e813278b4558935e645938
                      • MD5 SHA1 SHA512 TLSH

                      tree.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\tree.h
                      • Size 35KB
                      • SHA256 34393c74082c71ddd5bd9ec4afe30ef03df7fa7bb64be5a50ae070cdfebb5c43
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      unix.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\unix.h
                      • Size 19KB
                      • SHA256 a246095a1476d76631f5ec85be171aee8107eb0423007546ec91c58887c28f02
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      version.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\version.h
                      • Size 1KB
                      • SHA256 aef7fb55ffcece76db9cb7f87d0632e432369747f329679779616cd0721981da
                      • MD5 SHA1 SHA512 TLSH

                      win.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\win.h
                      • Size 33KB
                      • SHA256 51b6bf729c4c3e66cd89e0b0b0d734998776e675fe0a5eda9db77b634eb83ef0
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      LICENSE

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\LICENSE
                      • Size 1KB
                      • SHA256 7686f81e580cd6774f609a2d8a41b2cebdf79bc30e6b46c3efff5a656158981c
                      • MD5 SHA1 SHA512 TLSH

                      common-sqlite.gypi

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\common-sqlite.gypi
                      • Size 1KB
                      • SHA256 7b557c097c162c9ba04985ab822f92a176bf848c34ca38e54f061057ad0d8bd0
                      • MD5 SHA1 SHA512 TLSH

                      extract.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\extract.js
                      • Size 224B
                      • SHA256 5be353d29c0fabea29cfd34448c196da9506009c0b20fde55e01d4191941dd74
                      • MD5 SHA1 SHA512 TLSH

                      sqlite-autoconf-3410100.tar.gz

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\sqlite-autoconf-3410100.tar.gz
                      • Size 3.0MB
                      • SHA256 4dadfbeab9f8e16c695d4fbbc51c16b2f77fb97ff4c1c3d139919dfc038c9e33
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      sqlite3.gyp

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\sqlite3.gyp
                      • Size 2KB
                      • SHA256 8793f62b1133892ba376d18a15f552ef12b1e016f7e5df32ffb7279b760c11bd
                      • MD5 SHA1 SHA512 TLSH

                      node_sqlite3.node

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\lib\binding\napi-v6-win32-unknown-x64\node_sqlite3.node
                      • Size 1.8MB
                      • SHA256 7fb52b781709b065c240b6b81394be6e72e53fe11d7c8e0f7b49dd417eb78a01
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      sqlite3-binding.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\lib\sqlite3-binding.js
                      • Size 241B
                      • SHA256 049b7b1b10417274be6c3e6a9518ac364729354435298d70abf834c35e8f3bf3
                      • MD5 SHA1 SHA512 TLSH

                      sqlite3.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\lib\sqlite3.js
                      • Size 6KB
                      • SHA256 8d6b400ae7f69a80d0cdd37a968d7b9a913661fa53475e5b8de49dda21684973
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      trace.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\lib\trace.js
                      • Size 1KB
                      • SHA256 d06caec6136120c6fb7ee3681b1ca949e8b634e747ea8d3080c90f35aeb7728f
                      • MD5 SHA1 SHA512 TLSH

                      LICENSE.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\LICENSE.md
                      • Size 1KB
                      • SHA256 4fcf69bbecb999ec8fa0ece62bc8934b7cdd45061ac1a8b1939a09be64cd4352
                      • MD5 SHA1 SHA512 TLSH

                      common.gypi

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\common.gypi
                      • Size 762B
                      • SHA256 f15742e3019096b85ef3e8985e2fe66c4dda722908577e113a1b0264893ecca8
                      • MD5 SHA1 SHA512 TLSH

                      except.gypi

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\except.gypi
                      • Size 560B
                      • SHA256 ddbc09f5b66fe24dd898fbe659085a6ff72e9575025004fc3762271dba781e8b
                      • MD5 SHA1 SHA512 TLSH

                      index.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\index.js
                      • Size 296B
                      • SHA256 6528e924b31e091c3243132fe713ea0f1fa6362ffaa3c2dd09d12670db6b60dc
                      • MD5 SHA1 SHA512 TLSH

                      napi-inl.deprecated.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\napi-inl.deprecated.h
                      • Size 7KB
                      • SHA256 96afb169fd8af899ddcadc102ea137e3cd253c13b8862cb11bd58601fe2a5f90
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      napi-inl.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\napi-inl.h
                      • Size 199KB
                      • SHA256 141fee09a5439de973314b4ddb783a09e74a097f7ddfc5e3b994764a182e3795
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      napi.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\napi.h
                      • Size 118KB
                      • SHA256 38ece42f702d0226ecd63c8b9f0a13e71368d55944994bd2954dc142efdde669
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      node_api.gyp

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\node_api.gyp
                      • Size 132B
                      • SHA256 3cd2c44fb0974f016376b676d46bbebbca7c89d4383b09ece30e4cb4122a1499
                      • MD5 SHA1 SHA512 TLSH

                      noexcept.gypi

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\noexcept.gypi
                      • Size 639B
                      • SHA256 494060b87197c489497a038504147c435b1d09306152048add42ba0d7d16e747
                      • MD5 SHA1 SHA512 TLSH

                      package-support.json

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\package-support.json
                      • Size 467B
                      • SHA256 b1cb7da23cca1681c7392a3c889eb0cc4916c53d2d7692d4b654ae751f3442f3
                      • MD5 SHA1 SHA512 TLSH

                      package.json

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\package.json
                      • Size 927B
                      • SHA256 2fa7fd19a60a8618850ad6a63a527e5798e9dc1c02f602360ad24dc0cafe0a37
                      • MD5 SHA1 SHA512 TLSH

                      README.md

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\tools\README.md
                      • Size 3KB
                      • SHA256 65e9ea918538f453166b10a1d609cf44cec3d2d01f23fecb5265fb3a4bf303d5
                      • MD5 SHA1 SHA512 TLSH

                      check-napi.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\tools\check-napi.js
                      • Size 3KB
                      • SHA256 f3264fd3f9dd9bc3e051cdcf72125d34617b2b06b914c49f1e1297e53cfd524b
                      • MD5 SHA1 SHA512 TLSH

                      clang-format.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\tools\clang-format.js
                      • Size 1KB
                      • SHA256 f332f9209e5329776e63b4b48a53efbe95403e47ecea8c32dbcf937f3938d90a
                      • MD5 SHA1 SHA512 TLSH

                      conversion.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\tools\conversion.js
                      • Size 14KB
                      • SHA256 df2f681bdb4a1dac5faf7fa70a60dace4dd12ce0b9964effcee56a43f693fc6c
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      eslint-format.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\node_modules\node-addon-api\tools\eslint-format.js
                      • Size 1KB
                      • SHA256 cb0d2625bbee44502b5c170386d00c7bc07d0e0ae4e995524d2d00b025a369e2
                      • MD5 SHA1 SHA512 TLSH

                      package.json

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\package.json
                      • Size 1KB
                      • SHA256 b145c00c63dde4da0eb3736b0d25fe79fa252a02daa9c3fdbb2d3a5783e98cf6
                      • MD5 SHA1 SHA512 TLSH

                      async.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\async.h
                      • Size 1KB
                      • SHA256 b6e86bf43d74c8ee2c2f57eb1947be6ce5d8c258c4866609571ed6c97b58b53c
                      • MD5 SHA1 SHA512 TLSH

                      backup.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\backup.h
                      • Size 6KB
                      • SHA256 d3956cdbb650e1ecff8c94fe4e8645f80e10088156d409703c19f186a9c41aa8
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      database.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\database.h
                      • Size 5KB
                      • SHA256 8c5bcd084dddab2f2994b6cddc9b69a8f78a1034588b765e7bd859f27868fe43
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      gcc-preinclude.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\gcc-preinclude.h
                      • Size 861B
                      • SHA256 9d4264bb1dcbef8d927bb3a1809a01b0b89d726c217cee99ea9ccfdc7d456b6f
                      • MD5 SHA1 SHA512 TLSH

                      macros.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\macros.h
                      • Size 11KB
                      • SHA256 8d1afb5d27eab8302de08aca87eb6edc1b99ae963a854d3bd652a4fc61cbe3c6
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      statement.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\statement.h
                      • Size 6KB
                      • SHA256 2c99d9cef21876db64b610dd9baba8de1f7c94028d6d1c463eb3db213745b3bf
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      threading.h

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\threading.h
                      • Size 388B
                      • SHA256 e0ab4f798bccb877548b0ab0f3d98c051b36cde240fdf424c70ace7daf0ffd36
                      • MD5 SHA1 SHA512 TLSH

                      LICENSE

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\LICENSE
                      • Size 1KB
                      • SHA256 2b29dcfe0d6471f7e8c92c5fb38c9f93edee10330937055440192f1832b1ecef
                      • MD5 SHA1 SHA512 TLSH

                      browser.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\browser.js
                      • Size 176B
                      • SHA256 010da44addea1d88b2b732540c3f1fd0cbcb28926b96623d4c64222e0ead2d0e
                      • MD5 SHA1 SHA512 TLSH

                      index.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\index.js
                      • Size 796B
                      • SHA256 924564d5be26d59b9682c4263f68320e48dde7240bd2d1ad17ec305537429dd2
                      • MD5 SHA1 SHA512 TLSH

                      buffer-util.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\lib\buffer-util.js
                      • Size 2KB
                      • SHA256 8b0a45739132f82e25ea13163780abf547ccfe989267f3eb7abb475beec92da3
                      • MD5 SHA1 SHA512 TLSH

                      constants.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\lib\constants.js
                      • Size 503B
                      • SHA256 391e823142b8b370e55a2fd32b022deaf03b8415c56000009674ebc86a0b4f86
                      • MD5 SHA1 SHA512 TLSH

                      event-target.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\lib\event-target.js
                      • Size 7KB
                      • SHA256 c45d3c6e12d170c860c0c3f1a050aa0f864d9806632b609a1e607d675aba128c
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      extension.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\lib\extension.js
                      • Size 6KB
                      • SHA256 852564f0f6b460287043803eae732666fb5610f676874354fc89f06aa4e986ed
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      limiter.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\lib\limiter.js
                      • Size 1KB
                      • SHA256 e0469d4b83f6ba764b15f80e1766b75c136fbff68f048f4c050f0b1c7f065f69
                      • MD5 SHA1 SHA512 TLSH

                      permessage-deflate.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\lib\permessage-deflate.js
                      • Size 14KB
                      • SHA256 02c31796f0132a335d4efe7b7adcebadbb69543a1ce65ae04aaccc3530e27ab9
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      receiver.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\lib\receiver.js
                      • Size 17KB
                      • SHA256 4879edbf8e48d04d09783cf9c04b5e25f5a448247bb01279438ded2899747220
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      sender.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\lib\sender.js
                      • Size 16KB
                      • SHA256 d0791d30c3defd44dcabbddb879a901c757993fea2c00a7ffea01d53b23b4b77
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      stream.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\lib\stream.js
                      • Size 4KB
                      • SHA256 a56fcb6e2b152097ee820b6f5410b1f71e59819b45d08d9f8bda588fe39070ec
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      subprotocol.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\lib\subprotocol.js
                      • Size 1KB
                      • SHA256 be3f6323d6f549568577dcba9004c1479d95c65a7abb0fe0c582875b9fac0b7c
                      • MD5 SHA1 SHA512 TLSH

                      validation.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\lib\validation.js
                      • Size 3KB
                      • SHA256 41ce8e83d0d434132e1704895fedb91f6703a701b42d91c80954ab29b2845593
                      • MD5 SHA1 SHA512 TLSH

                      websocket-server.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\lib\websocket-server.js
                      • Size 16KB
                      • SHA256 29029a4d346800c792300df153df2007e9805d9d7b67b0883f9730b64f25b1c8
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      websocket.js

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\lib\websocket.js
                      • Size 36KB
                      • SHA256 48fdb0f54c1f8ce580d3cfa2908fe7d96fe18f06f9d82306950441cb09b5db26
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      package.json

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\package.json
                      • Size 1KB
                      • SHA256 4bd9be7bfa356b9303008d3441515a44bdcd7fd5b95996a801e4aa3354af43fa
                      • MD5 SHA1 SHA512 TLSH

                      wrapper.mjs

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\app.asar.unpacked\node_modules\ws\wrapper.mjs
                      • Size 554B
                      • SHA256 fe154662301fd558f935f9c217fccbe7a7dac02ff39e648a000589403ff27c7f
                      • MD5 SHA1 SHA512 TLSH

                      elevate.exe

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\resources\elevate.exe
                      • Size 105KB
                      • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      snapshot_blob.bin

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\snapshot_blob.bin
                      • Size 270KB
                      • SHA256 b6bea91727efb8c88e7c059856553d3a47abd883e60dd60efc01b04dc6eec621
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      v8_context_snapshot.bin

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\v8_context_snapshot.bin
                      • Size 627KB
                      • SHA256 2db4a98abe705ef9bc18e69d17f91bc3f4c0f5703f9f57b41acb877100718918
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      vk_swiftshader.dll

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\vk_swiftshader.dll
                      • Size 5.0MB
                      • SHA256 680ea3717671c896d516517ff322976ab708f18862135be4216a27ad57353dcc
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      vk_swiftshader_icd.json

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\vk_swiftshader_icd.json
                      • Size 106B
                      • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                      • MD5 SHA1 SHA512 TLSH

                      vulkan-1.dll

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\7z-out\vulkan-1.dll
                      • Size 925KB
                      • SHA256 d5df2f59cc8b32abd6178250e7d1370a7f37270cc727449e21778080b5e29cd2
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      SpiderBanner.dll

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\SpiderBanner.dll
                      • Size 9KB
                      • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      StdUtils.dll

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\StdUtils.dll
                      • Size 100KB
                      • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      System.dll

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\System.dll
                      • Size 12KB
                      • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      WinShell.dll

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\WinShell.dll
                      • Size 3KB
                      • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                      • MD5 SHA1 SHA512 TLSH

                      nsExec.dll

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\nsExec.dll
                      • Size 6KB
                      • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      nsis7z.dll

                      • Path C:\Users\Admin\AppData\Local\Temp\nsu408B.tmp\nsis7z.dll
                      • Size 424KB
                      • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      default.exc

                      • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                      • Size 2B
                      • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                      • MD5 SHA1 SHA512

                      data_0

                      • Path C:\Users\Admin\AppData\Roaming\WindowsUpdateAssistant\DawnCache\data_0
                      • Size 8KB
                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                      • MD5 SHA1 SHA512 SSDEEP

                      data_1

                      • Path C:\Users\Admin\AppData\Roaming\WindowsUpdateAssistant\DawnCache\data_1
                      • Size 264KB
                      • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                      • MD5 SHA1 SHA512 SSDEEP

                      data_2

                      • Path C:\Users\Admin\AppData\Roaming\WindowsUpdateAssistant\DawnCache\data_2
                      • Size 8KB
                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                      • MD5 SHA1 SHA512 SSDEEP

                      data_3

                      • Path C:\Users\Admin\AppData\Roaming\WindowsUpdateAssistant\DawnCache\data_3
                      • Size 8KB
                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                      • MD5 SHA1 SHA512 SSDEEP

                      Local State

                      • Path C:\Users\Admin\AppData\Roaming\WindowsUpdateAssistant\Local State
                      • Size 434B
                      • SHA256 6e21b61bd6ce6fb94d2cf742973fc45a00b711c8cdf2ea57a90d5560471e3192
                      • MD5 SHA1 SHA512 TLSH

                      Network Persistent State

                      • Path C:\Users\Admin\AppData\Roaming\WindowsUpdateAssistant\Network\Network Persistent State
                      • Size 300B
                      • SHA256 9142801541555c41ba74ec15b7e37b3d52cdbdc7aa7dad3717a584b096312abb
                      • MD5 SHA1 SHA512 TLSH

                      Network Persistent State~RFe5af2fc.TMP

                      • Path C:\Users\Admin\AppData\Roaming\WindowsUpdateAssistant\Network\Network Persistent State~RFe5af2fc.TMP
                      • Size 59B
                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                      • MD5 SHA1 SHA512 TLSH

                      CSC4FF58ACC97674DAEA399C1AAA373B4F4.TMP

                      • Path \??\c:\Users\Admin\AppData\Local\Temp\CSC4FF58ACC97674DAEA399C1AAA373B4F4.TMP
                      • Size 1KB
                      • SHA256 71ea1597dc7bd17b4a44e75dad609fd7c078ece5560d4f9c22c902ed76fc9f91
                      • MD5 SHA1 SHA512 TLSH

                      CSC709128A794584AE5ACFF2FED9BFE35E.TMP

                      • Path \??\c:\Users\Admin\AppData\Local\Temp\CSC709128A794584AE5ACFF2FED9BFE35E.TMP
                      • Size 1KB
                      • SHA256 08e9fe975a56c4480bc2ddcff3bcb3326b228705eece7059e2900df3c73e2279
                      • MD5 SHA1 SHA512 TLSH

                      CSCAC208378B8084D49AB347B5288A7DBB5.TMP

                      • Path \??\c:\Users\Admin\AppData\Local\Temp\CSCAC208378B8084D49AB347B5288A7DBB5.TMP
                      • Size 1KB
                      • SHA256 8577f129c08b4e3346a12b9ed5c9b7a318ed6ea43e0fb7c1a66de35105d63129
                      • MD5 SHA1 SHA512 TLSH

                      CSCF1EACF4D2B7644EAB32AB17A34F295F0.TMP

                      • Path \??\c:\Users\Admin\AppData\Local\Temp\CSCF1EACF4D2B7644EAB32AB17A34F295F0.TMP
                      • Size 1KB
                      • SHA256 9df6d9e1ee683333fc65ac437551d6f1465e039bd6ff2c08fcc656767828e7ad
                      • MD5 SHA1 SHA512 TLSH

                      CSCFD30A6C941A54B20A98FF6742569F3E.TMP

                      • Path \??\c:\Users\Admin\AppData\Local\Temp\CSCFD30A6C941A54B20A98FF6742569F3E.TMP
                      • Size 1KB
                      • SHA256 5d5615bd41dc733f3920727fbf72b8ef40bb139a4d9ed4af1a9e2fe203f3670f
                      • MD5 SHA1 SHA512 TLSH

                      a_3371c711.cs

                      • Path \??\c:\Users\Admin\AppData\Local\Temp\a_3371c711.cs
                      • Size 1KB
                      • SHA256 766f55f5f78835f2ca4642a0ab488f44d1e262c44f39a74890ed0b50e7c08e5a
                      • MD5 SHA1 SHA512 TLSH

                      e_88a0edca.cs

                      • Path \??\c:\Users\Admin\AppData\Local\Temp\e_88a0edca.cs
                      • Size 621B
                      • SHA256 4ed760498fc7309777ba7902115992c97e40db653772356452d9421aa3df729e
                      • MD5 SHA1 SHA512 TLSH

                      gl_66825d54.cs

                      • Path \??\c:\Users\Admin\AppData\Local\Temp\gl_66825d54.cs
                      • Size 16KB
                      • SHA256 8d09663f642647de24cde58dad6d0a9c2a7959dadb84a1da3ac7adf1761dc6bb
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      h_e3f50476.cs

                      • Path \??\c:\Users\Admin\AppData\Local\Temp\h_e3f50476.cs
                      • Size 1KB
                      • SHA256 399b918baef2139d6336d48ea1f01d0c1a420a4a90404d925cc4b515e5b011cd
                      • MD5 SHA1 SHA512 TLSH

                      i_e385ba38.cs

                      • Path \??\c:\Users\Admin\AppData\Local\Temp\i_e385ba38.cs
                      • Size 2KB
                      • SHA256 f2416e38a238be537c73ee626e7210e65535941f9e48439a36e5a97421621571
                      • MD5 SHA1 SHA512 TLSH

                      memory/1300-1575-0x00000000001D0000-0x00000000001DA000-memory.dmp

                      memory/2520-1600-0x0000000000590000-0x0000000000598000-memory.dmp

                      memory/3624-1551-0x0000025A2E990000-0x0000025A2E9BA000-memory.dmp

                      memory/3624-1552-0x0000025A2E990000-0x0000025A2E9B4000-memory.dmp

                      memory/3624-1550-0x0000025A2E4A0000-0x0000025A2E4AA000-memory.dmp

                      memory/3624-1549-0x0000025A2E520000-0x0000025A2E5D2000-memory.dmp

                      memory/3624-1548-0x0000025A2E500000-0x0000025A2E51E000-memory.dmp

                      memory/3624-1543-0x0000025A2E450000-0x0000025A2E472000-memory.dmp

                      memory/4780-1588-0x0000000000ED0000-0x0000000000ED8000-memory.dmp

                      memory/4928-1532-0x0000000000C10000-0x0000000000C18000-memory.dmp

                      memory/5620-1520-0x00000000001B0000-0x00000000001B8000-memory.dmp