Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    139s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    03/08/2026, 04:27

General

  • Target
    CosmosInstaller.exe
  • Size 1.2MB
  • Sample260803-e3b2ssca42
  • SHA256 933fb70dd5def61193478b165f49d26dff49a22d142232621b81dd72531decff
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 8 IoCs
  • Indicator Removal: File Deletion 1 TTPs

    Adversaries may delete files left behind by the actions of their intrusion activity.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Using powershell.exe command.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 5 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CosmosInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\CosmosInstaller.exe"
    1⤵
    • Checks computer location settings
    • Suspicious use of WriteProcessMemory
    PID:3668
    • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -NonInteractive -Command "Expand-Archive -LiteralPath 'C:\Users\Admin\AppData\Local\Temp\CosmosInstall\cosmos.zip' -DestinationPath 'C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\' -Force"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:5056
    • C:\Windows\SYSTEM32\robocopy.exe
      robocopy "C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted" "C:\Users\Admin\AppData\Local\CosmosDumper" /E /IS /IT /NFL /NDL /NJH /NJS
      2⤵
      • Suspicious use of AdjustPrivilegeToken
      PID:3760
    • C:\Windows\SYSTEM32\cmd.exe
      cmd /c rmdir /s /q "C:\Users\Admin\AppData\Local\Temp\CosmosInstall\"
      2⤵
        PID:2788
      • C:\Users\Admin\AppData\Local\CosmosDumper\CosmosDumper.exe
        "C:\Users\Admin\AppData\Local\CosmosDumper\CosmosDumper.exe"
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4464

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          CoreRT.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\CoreRT.dll
          • Size 1.5MB
          • SHA256 6a1473dc7b2730da2ff937285221c86c7c84633cc69731e73d392c47b3220311
          • MD5 SHA1 SHA512 SSDEEP TLSH

          asi-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\asi-five.dll
          • Size 191KB
          • SHA256 1ac96de390b752fbc253d7c44b62d0b9b822dd2a58ba2c50fbc157e9945e53ae
          • MD5 SHA1 SHA512 SSDEEP TLSH

          EasyHook64.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\EasyHook64.dll
          • Size 292KB
          • SHA256 18bb066a3e55c63f124bbb9cf55015a8ea7eacb4577625d704b47f5da80eea29
          • MD5 SHA1 SHA512 SSDEEP TLSH

          GFSDK_ShadowLib.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\GFSDK_ShadowLib.dll
          • Size 3.8MB
          • SHA256 322e8a8072f07ebc0e4efb15edbae7196472c2ad24c7559f1c91fc190499f6fc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          OptickCore.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\OptickCore.dll
          • Size 126KB
          • SHA256 2ee765668e7853ed13b82e8e18a0bc5b62c3136a3a0137018e427d4539d583e9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ProfilerCore64.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\ProfilerCore64.dll
          • Size 107KB
          • SHA256 9833cad899251c0fdd21f85cad9d762d18b3196aac085dbd73f0615eb6ff68af
          • MD5 SHA1 SHA512 SSDEEP TLSH

          SwiftShaderD3D9_64.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\SwiftShaderD3D9_64.dll
          • Size 6.0MB
          • SHA256 8b0cbeeda35f704899596287b176a79e329d6edd8dd0724c057c128d46bc0c33
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-console-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-console-l1-1-0.dll
          • Size 21KB
          • SHA256 cb3f7b194d220004ffa6eef1305849bcef38033c49cb1b16c5ab3c3d60bd9d20
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-console-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-console-l1-2-0.dll
          • Size 21KB
          • SHA256 10fcfff7576ee04217b535a62c36b7f844e7af1684ab6adfc33112fffc6495b8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-datetime-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-datetime-l1-1-0.dll
          • Size 21KB
          • SHA256 2161c0add0ee0a312e12d0346a1b24b6e5e1356a5a7e264911650a8e1d017e1c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-debug-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-debug-l1-1-0.dll
          • Size 21KB
          • SHA256 cf7dc6f5abe58e31b41912b4a84cabd106eecf7cad7f5a1942c4befaca703536
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-errorhandling-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-errorhandling-l1-1-0.dll
          • Size 21KB
          • SHA256 41dd8451c6b25a7a924a7a42a3d466350bcd2820fca4177ef5f6305e6eadb97a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-fibers-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-fibers-l1-1-0.dll
          • Size 21KB
          • SHA256 70ea8113b1825f3529b307ce2edb1048ebc60c83c016892b6177f3c8cb56b9bc
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-file-l1-1-0.dll
          • Size 25KB
          • SHA256 a198091842029a252e0112120b93bf7323b04ed647a3d2bd27fde72637385a7b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-file-l1-2-0.dll
          • Size 21KB
          • SHA256 68e28b5944193ab45be2cc14e49424ba0c5d8713bb6b027e96ff1c16147f19a3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-file-l2-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-file-l2-1-0.dll
          • Size 21KB
          • SHA256 57cb180884f33b064957d9c1dd509bb5e8fd541e9458b84d88e025790c1dc986
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-handle-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-handle-l1-1-0.dll
          • Size 21KB
          • SHA256 39dbe64591ef5d0aa48bd61ab9262bb6ca37a896dd71169aafbf90bba82dea53
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-heap-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-heap-l1-1-0.dll
          • Size 21KB
          • SHA256 9669ee54d953bba692fc6b5e806f7f7645258c5f0618d253f8043e832fe75e2d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-interlocked-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-interlocked-l1-1-0.dll
          • Size 21KB
          • SHA256 39883213a6434f6f3a3f6d174630a1286c28ef7f47b7e3e1de4623cd9f3ce270
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-libraryloader-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-libraryloader-l1-1-0.dll
          • Size 21KB
          • SHA256 b942e2a62d69ce41534ca7c9822f672edeb8ff37b8e650001c9432c28b765cd7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-localization-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-localization-l1-2-0.dll
          • Size 21KB
          • SHA256 361ebbef6e0d77624560b87d888464b331403e09845836a04f5800682aa4ed48
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-memory-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-memory-l1-1-0.dll
          • Size 21KB
          • SHA256 52785bb917c6e38fb69ed5bc1d2bcf01a1c84ec6fb0b94319dde3835cf64fb7c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-namedpipe-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-namedpipe-l1-1-0.dll
          • Size 21KB
          • SHA256 8019b8c033e5e556c006fefd540a754d85fb4bc68ab851ae78bb4c6fa42f3413
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processenvironment-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-processenvironment-l1-1-0.dll
          • Size 21KB
          • SHA256 f4d5be821780a3db520258a451b50fa8cde1486b607477a958f6f529dcb74f43
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-processthreads-l1-1-0.dll
          • Size 21KB
          • SHA256 ae507dcdd0e6c6bded417a64918ef0cc76e41ffe475f67478b841ba05cc73bbb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-processthreads-l1-1-1.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-processthreads-l1-1-1.dll
          • Size 21KB
          • SHA256 92bb2dd3172befd83dc039deb83577efc0f4e42390aa3d428d6f296bd3f462fa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-profile-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-profile-l1-1-0.dll
          • Size 21KB
          • SHA256 f30d1aba7bb55874ab6b91b0d81378face8570420aefcc89f18e420459ca9b7a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-rtlsupport-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
          • Size 21KB
          • SHA256 b3237f2efe5e22eb802caded8cc85aeb104192dfdea31cfe7381b58c1b37affe
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-string-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-string-l1-1-0.dll
          • Size 21KB
          • SHA256 4451084c3993c3a1bd3ec0613005c59ca23c722bbc73da47d64893ee46f22103
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-synch-l1-1-0.dll
          • Size 21KB
          • SHA256 347a1267a70015b30d6d5752b7d1b60dd51f2b89b7cdf97c7128444d6af1ffb2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-synch-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-synch-l1-2-0.dll
          • Size 21KB
          • SHA256 24dd4de212b4b43c2e3d565d0c253509f44edd06e59ed9600db3fcbbf04aedb8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-sysinfo-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-sysinfo-l1-1-0.dll
          • Size 21KB
          • SHA256 eccae6c70ef79c70dd3eaa6d7ec4e14f8b341169aa772bb0100de550f0a44cb4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-sysinfo-l1-2-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-sysinfo-l1-2-0.dll
          • Size 12KB
          • SHA256 e13d51cb146dacc3f19eb9ad33b95adfb5af44aaae6cb54cd0d30e201b2ae490
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-timezone-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-timezone-l1-1-0.dll
          • Size 21KB
          • SHA256 bc0a3295b1e552f47f7034d47dcaa9123caa9423d202df5737b9301d68cb6667
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-core-util-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-core-util-l1-1-0.dll
          • Size 21KB
          • SHA256 222f7e8b5774968ffd899a9ee2139f9934eb5a50b9a9da2cf0592134d3ad54b5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-conio-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-crt-conio-l1-1-0.dll
          • Size 21KB
          • SHA256 b33d0e78ff6e9a9bf3bf369942412eb9c85f02b65230e77cb11a99730f6c4030
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-convert-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-crt-convert-l1-1-0.dll
          • Size 25KB
          • SHA256 43f20e591ae0afece324a2a9636ba557690f0bca29935967a0f33098725c94fb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-environment-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-crt-environment-l1-1-0.dll
          • Size 21KB
          • SHA256 41d678da2ed4089e9abd91ce70309d6bfadeeded25b7a96cc9a1071f1efdac12
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-filesystem-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-crt-filesystem-l1-1-0.dll
          • Size 21KB
          • SHA256 03f4bffe5e2c273be4ad87cbb84363e80f3d1a63f9e2965045a0922c76cadc69
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-heap-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-crt-heap-l1-1-0.dll
          • Size 21KB
          • SHA256 8c7d51aa0042969b8f1c99ee7d692a214e5b220b6c59a2016ddf60b030466b2f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-locale-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-crt-locale-l1-1-0.dll
          • Size 21KB
          • SHA256 c0225ee09d6779288c86db3bfcbdfbab58e39eb9355844653b5761ca09faf0ed
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-math-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-crt-math-l1-1-0.dll
          • Size 29KB
          • SHA256 d4247022622bcecfa9e25c212e8833de1602aab55756eb3d1a54515704984e41
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-multibyte-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-crt-multibyte-l1-1-0.dll
          • Size 29KB
          • SHA256 2a563f80714375bf636785848333a54c350d37136773d024722543f93412ae01
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-private-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-crt-private-l1-1-0.dll
          • Size 73KB
          • SHA256 285281fcdc0ff9a51b7b503ebb8d6e464cbd6b0ce43553a31ba8d0a9a2ec2216
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-process-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-crt-process-l1-1-0.dll
          • Size 21KB
          • SHA256 5e0543b480befd83f440f2a1a30c5b7a9a9f49abd305fe02ed8ca4f156076a09
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-runtime-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-crt-runtime-l1-1-0.dll
          • Size 25KB
          • SHA256 707073941e2b24bd94e7ef11e1fa7aca92fd63fcc6babf42865615ea6bb1f388
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-stdio-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-crt-stdio-l1-1-0.dll
          • Size 25KB
          • SHA256 56f1507c3bcdb39d4db5af07908542486200488bc47927b9724a532e99134b8e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-string-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-crt-string-l1-1-0.dll
          • Size 25KB
          • SHA256 bc0d452a9638c86705d93ef6b8a4dd8912cc6cfda8403dc6c6e9061599d6875e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-time-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-crt-time-l1-1-0.dll
          • Size 21KB
          • SHA256 e748d40325659477feda7e7b4d2d770fb69cbc94c3c28289fa45b60617c413d0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-crt-utility-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-crt-utility-l1-1-0.dll
          • Size 21KB
          • SHA256 2c9404ea15c37fd0fb6fff964917512c2191c73241cbaa40e056244b265b1171
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-downlevel-kernel32-l2-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-downlevel-kernel32-l2-1-0.dll
          • Size 16KB
          • SHA256 05c04d5690234be045f5e529a827a916229f754bf1f806329c37e9849d69ae82
          • MD5 SHA1 SHA512 SSDEEP TLSH

          api-ms-win-eventing-provider-l1-1-0.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\api-ms-win-eventing-provider-l1-1-0.dll
          • Size 20KB
          • SHA256 1d09219d2b26b43fd445073fa4baaf46223f0334a228a1c0111db0768ddf12e5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          avutil-56.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\avutil-56.dll
          • Size 638KB
          • SHA256 ba9baad5da97a8a4c61df7ac4bbd2269866d1eb2545518aaa07c17370cdb94a3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          chrome_elf.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\chrome_elf.dll
          • Size 1.2MB
          • SHA256 1d5f69e16c8a5e7391c1a310e32f6fde97e8786ed7fd680bade3fbfd0aab4e76
          • MD5 SHA1 SHA512 SSDEEP TLSH

          comctl32.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\comctl32.dll
          • Size 687KB
          • SHA256 17d08c8a1da056cba101a90e6a9ddac7164cac568fe1d11895e54323d4ce43d0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          concrt140.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\concrt140.dll
          • Size 319KB
          • SHA256 2556b827690e4598b5eb655982d996a4fd85b81bd182a56aa2145769b3fd4da6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          d3d_rendering.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\d3d_rendering.dll
          • Size 693KB
          • SHA256 ac1cc18bcde5ea3af7843f6f5b01e5d27af91ebd2b3b5d355f73072dac1c60ed
          • MD5 SHA1 SHA512 SSDEEP TLSH

          d3dcompiler_47.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\d3dcompiler_47.dll
          • Size 4.7MB
          • SHA256 e4bc3420a28069bd13dc3be725d46676a7c0e99de221026e8c43cd6f7ed45c0b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          dbghelp.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\dbghelp.dll
          • Size 2.0MB
          • SHA256 009681092f6a13c5c28bb3b08ea14bb03ba959f9ce1a53730d069550da376c48
          • MD5 SHA1 SHA512 SSDEEP TLSH

          icudtl.dat

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\icudtl.dat
          • Size 10.0MB
          • SHA256 cb73d42d36839708013393ad0e4e932fdda9a1acda9275ecdbe74fe89eea8366
          • MD5 SHA1 SHA512 SSDEEP TLSH

          icui18n.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\icui18n.dll
          • Size 1.9MB
          • SHA256 cf7069230c74354ba5662a3129b84dd9bc5a593cddebcda9bf2ed6ba8a03d0bb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          icuuc.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\icuuc.dll
          • Size 1.2MB
          • SHA256 9c68a5963688f236abe7c31bf3f2ffea0b929de8f29eaf5c3a64cca77b8ea71b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libEGL.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\libEGL.dll
          • Size 431KB
          • SHA256 8983b1e5c157c52bfda1e1d6845e9f8dbe1123b28b9dc1fde23f8d7b7b9a2e27
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libGLESv2.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\libGLESv2.dll
          • Size 6.1MB
          • SHA256 a473f8bc4a24901c7e401337d66be8177457d2e7b5b921b6e8ac2fda8e5f523c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mono-2.0-sgen.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\mono-2.0-sgen.dll
          • Size 6.1MB
          • SHA256 9ad15bdef81c053e40ae91fa6429da5a29db51650d80d0c7e12e1af758010406
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp140.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\msvcp140.dll
          • Size 566KB
          • SHA256 003da4807acdc912e67edba49be574daa5238bb7acff871d8666d16f8072ff89
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp140.dll.i64

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\msvcp140.dll.i64
          • Size 9.9MB
          • SHA256 1705d3aa93a342f53f79da45c7a5ad3eedeebba926cd56bd2d3f257d2f3177fd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp140_1.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\msvcp140_1.dll
          • Size 34KB
          • SHA256 a61901a4d719a3e1cc4fa8f629218571330331e8dde2ef1f05c34845b180928e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp140_2.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\msvcp140_2.dll
          • Size 192KB
          • SHA256 3d15cfe238ac1863bbe65501f05d561162f28032b80f2c8d9a1fc7b22f8445a2
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp140_atomic_wait.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\msvcp140_atomic_wait.dll
          • Size 48KB
          • SHA256 0fcf613254644c2ea451a693d7737741b8041f11decb8feffd3b34e00220620a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msvcp140_codecvt_ids.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\msvcp140_codecvt_ids.dll
          • Size 30KB
          • SHA256 a714b498ab7b4b0508e69f66ca15196df605844d4d6d5e43969a5f1fd7d7e9e4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sdk_rendering.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\sdk_rendering.dll
          • Size 716KB
          • SHA256 9213db2aad0e638abb1595c7f7494dfc8f990022a2ca9286351a8218c7513482
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sdk_tools.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\sdk_tools.dll
          • Size 3.9MB
          • SHA256 a429142e1a234b71645ee5a6ec7a2ccdd3cf39941ae23bbc0e264eb82382e987
          • MD5 SHA1 SHA512 SSDEEP TLSH

          snapshot_blob.bin

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\snapshot_blob.bin
          • Size 399KB
          • SHA256 03af12a8f43c3f942f74f6f06deb49760e1fed231cac206ec2c822d948240005
          • MD5 SHA1 SHA512 SSDEEP TLSH

          swresample-3.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\swresample-3.dll
          • Size 368KB
          • SHA256 67344809247254c21b3d6e913cbb33283e4918d59d637c78ecacbda8365af489
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ucrtbase.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\ucrtbase.dll
          • Size 1.1MB
          • SHA256 903806c8888e3c9ac0212ed50be6889c21cf4fd12f49931da8b548b5326a0bf8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ucrtbase.dll.i64

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\ucrtbase.dll.i64
          • Size 18.1MB
          • SHA256 fc5ec5f4b593b2ad86fef544a675f23961a7e11b73c030b4fb97cbec2b7bfcd3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          v8_context_snapshot.bin

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\v8_context_snapshot.bin
          • Size 714KB
          • SHA256 d700b73ec970c4804909fb81abf5dbd824bcd4e593c20c63f457d9eb743d6724
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vccorlib140.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\vccorlib140.dll
          • Size 337KB
          • SHA256 85d54f7374f6e77e83c4fa79de61e2f0aa5f8ae4184bb20cf96d1ad378d1a057
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vcruntime140.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\vcruntime140.dll
          • Size 106KB
          • SHA256 a8f950b4357ec12cfccddc9094cca56a3d5244b95e09ea6e9a746489f2d58736
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vcruntime140.dll.i64

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\vcruntime140.dll.i64
          • Size 1.5MB
          • SHA256 07531fe4f63729efdf0e37021d1a65fe353296832f7324eda8bf3fc8ffc8ad58
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vcruntime140_1.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\vcruntime140_1.dll
          • Size 48KB
          • SHA256 e4b533a94e02c574780e4b333fcf0889f65ed00d39e32c0fbbda2116f185873f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vk_swiftshader.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\vk_swiftshader.dll
          • Size 3.9MB
          • SHA256 a85355576a03de29b3ce985459ba24862ccc6d9c10910e23219e670647186f81
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vulkan-1.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\vulkan-1.dll
          • Size 816KB
          • SHA256 343145c11aa783735b1491d64ac69cdf1a4884a29e606057bb5bab808b7dd492
          • MD5 SHA1 SHA512 SSDEEP TLSH

          xinput1_3.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\bin\xinput1_3.dll
          • Size 104KB
          • SHA256 756cad002e1553cfa1a91ebe8c1b9380ffabe0b4b1916c4a4db802396ddfbef8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cfx_curl_x86_64.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\cfx_curl_x86_64.dll
          • Size 2.3MB
          • SHA256 c730fda55fa513fe7f41d200330da0e4996909afe2f6b349db24158752c0b8ee
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-devtools.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-devtools.dll
          • Size 399KB
          • SHA256 bb47a86c10ab5de24af5bbf8107eb2feb79a13430a700214fa72925753120a56
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-game-main.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-game-main.dll
          • Size 1.2MB
          • SHA256 52d51b564746bb398be52587def53d74529cfa59a1f7888227034abfda7b4477
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-legacy-net-resources.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-legacy-net-resources.dll
          • Size 564KB
          • SHA256 f7c74a4929c31ac1e67868e41ae3653f7a4c4db51848867caa415a4ba61a6108
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-level-loader-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-level-loader-five.dll
          • Size 493KB
          • SHA256 9e72fc951bd4b843008446247dfd99f06cf2b3da7e6923358a587192ec720ed6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-mod-loader-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-mod-loader-five.dll
          • Size 268KB
          • SHA256 76129a336b7e1531d5cfec100a83075c7987dbbbcdcdc846ac3f04e181faf2f9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-playernames-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-playernames-five.dll
          • Size 208KB
          • SHA256 8780aeb3ac218794fab1498812f98239b1c8f8a41462e27caeef33071d942deb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-resources-client.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-resources-client.dll
          • Size 1006KB
          • SHA256 7337bda10963e214d4068a892b982393dd8bdb63a96ab277293742a30648e1e4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-resources-core.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-resources-core.dll
          • Size 679KB
          • SHA256 3786944eefef3cfcf0d6092f0e4ce0c8b76726aa1df2a99d7cb72b1c6abc163b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-resources-gta.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-resources-gta.dll
          • Size 303KB
          • SHA256 95cba5f51e43a4a9e8ada53d09886328f7c0c859e15ceaa9b37377d63289a2f1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-resources-metadata-lua.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-resources-metadata-lua.dll
          • Size 636KB
          • SHA256 b81fcf105d54e67728fc1b0d9b9d678f2da6620fb114d97665fc7612255eaaed
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-scripting-core.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-scripting-core.dll
          • Size 1.1MB
          • SHA256 d82b0d325ea0481770dd7e74878ce3d866ee26b99cf24b30960131fa8cc9f3f0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-scripting-lua.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-scripting-lua.dll
          • Size 8.1MB
          • SHA256 3bcb23bfc9abb969e6a3ccc88fb75a8955866de2fa2789aa4835c005ed088d61
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-scripting-lua54.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-scripting-lua54.dll
          • Size 8.1MB
          • SHA256 6172454aeb76243002e11ab5f2080cadc59bfb6eefefb5e94c975978b08faf46
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-scripting-mono-v2.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-scripting-mono-v2.dll
          • Size 212KB
          • SHA256 4fd3119ef49ad38c80bd75e8a4eafda1d762ff807bcafe5f6448fc90e6caeb01
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-scripting-mono.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-scripting-mono.dll
          • Size 221KB
          • SHA256 d3d2a17806ed94eca7ef842d73a72dd58e0caef4773d485fe6e75d1e4c32550a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-scripting-v8client.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\citizen-scripting-v8client.dll
          • Size 396KB
          • SHA256 5baa2fe7f795692846b566d3b52c7c20138d46cabf253d45c5939fae3b56da85
          • MD5 SHA1 SHA512 SSDEEP TLSH

          conhost-v2.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\conhost-v2.dll
          • Size 489KB
          • SHA256 670aaee5c2b2037f16487d3bc943cf949a9c4548be2bffc57d77ebf0788f1963
          • MD5 SHA1 SHA512 SSDEEP TLSH

          debug-net.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\debug-net.dll
          • Size 225KB
          • SHA256 0059e931b76739c817159add0985cdad19e29ff9bb98b675fb9f9f86e2fa5f16
          • MD5 SHA1 SHA512 SSDEEP TLSH

          debug-script.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\debug-script.dll
          • Size 65KB
          • SHA256 dcb166c13288f4dbf13da81ee3c7a7cd9430d6759a26c1c5cf5675f34a878915
          • MD5 SHA1 SHA512 SSDEEP TLSH

          devcon.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\devcon.dll
          • Size 260KB
          • SHA256 97802da6aeb486d5b53833dbf516a82722e751a26eac05e6e18072184a754398
          • MD5 SHA1 SHA512 SSDEEP TLSH

          devtools-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\devtools-five.dll
          • Size 413KB
          • SHA256 183ea578c4ad4db751636eb3b25dd5f6554e4f121b20ae90e1ad2c44865cbf9c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          discord.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\discord.dll
          • Size 419KB
          • SHA256 149d056da20e77841533bcef901d2d4288ca499501b2bf2f63273ecf37694574
          • MD5 SHA1 SHA512 SSDEEP TLSH

          extra-natives-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\extra-natives-five.dll
          • Size 1.6MB
          • SHA256 d1c7da920414fa6a1d65116f7c7b465ef868862a42ac7511a651b3a60561f7f7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          font-renderer.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\font-renderer.dll
          • Size 279KB
          • SHA256 a938b7e3bc9e5fa846bc95e6f8842c49ed492cb51bd4588787da515e10f1950f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fxdk-main.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\fxdk-main.dll
          • Size 2.3MB
          • SHA256 a107b54b87243c931a5dfa8049b536f407e677851275a759fbd72b2c218f85ac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          glue.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\glue.dll
          • Size 2.1MB
          • SHA256 2610e3acad88487fa47d7e30be5eedc74a5d3c24fb4c2ca1924f96aca194510d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          gta-core-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\gta-core-five.dll
          • Size 1.3MB
          • SHA256 a4dafbd4a7b7112ee684fafb6309e2e49af0a53cbb385d26d164499a17b06e46
          • MD5 SHA1 SHA512 SSDEEP TLSH

          gta-game-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\gta-game-five.dll
          • Size 213KB
          • SHA256 e0393ad7ebcd6eec9afd27e79d8d7a94e8e8922fc0cbeeee083c09cb1239fc59
          • MD5 SHA1 SHA512 SSDEEP TLSH

          gta-mission-cleanup-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\gta-mission-cleanup-five.dll
          • Size 65KB
          • SHA256 667d0f67a71cdd16e416ab0e0524379fe44d91903f2924b534d2565a32a34af3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          gta-net-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\gta-net-five.dll
          • Size 1.1MB
          • SHA256 e56a00e9325ccde8b72440e1caab2e641a1ab6c0fd0912a2a0f884ac15a839bb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          gta-streaming-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\gta-streaming-five.dll
          • Size 930KB
          • SHA256 bc343be89d3ea89a7ed8aa5345cdd89be6583a421d1a7560f59200fa7baf20dd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          handling-loader-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\handling-loader-five.dll
          • Size 306KB
          • SHA256 90e5d5806a13aee90ea4a9a22bd03583e6eaab98ca395e65c208b39cfd3ae795
          • MD5 SHA1 SHA512 SSDEEP TLSH

          http-client.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\http-client.dll
          • Size 259KB
          • SHA256 8060d0aaf68b8059b764d7dfb823809b727b32ab3bae01d6a6e98da9b672539f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          imgui.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\imgui.dll
          • Size 1.4MB
          • SHA256 35c551e8d7089bc27bd125d50e362378a2ae5bfe63ba6e13c9e41255328ed4fb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          legitimacy.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\legitimacy.dll
          • Size 11.7MB
          • SHA256 265c5f5c8b6832be380a8cb3a721f2327c78a2e1dd9f6d8408c01c3eb1d06ee9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libuv.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\libuv.dll
          • Size 244KB
          • SHA256 cb7fec1da65d81d171b233ca8dc373ab5db1a9286339bd71da000f7e63aa4168
          • MD5 SHA1 SHA512 SSDEEP TLSH

          loading-screens-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\loading-screens-five.dll
          • Size 508KB
          • SHA256 8b534839ce23a463477b3690349b358df9ebe3bf63a048d436235fee2318a112
          • MD5 SHA1 SHA512 SSDEEP TLSH

          lovely-script.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\lovely-script.dll
          • Size 169KB
          • SHA256 a0c9623bb8743cdde47dc0b6fd3eba7a17d40007ee51a3860c597f5c73214abe
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mojo.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\mojo.dll
          • Size 4.3MB
          • SHA256 b033d4d3f617596a7966c8da4a2f9401b0562e6ca10e678099dcfd61616055c9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          msobj140.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\msobj140.dll
          • Size 137KB
          • SHA256 f7226ff2fb0e90494dde5a3c95cba99ba7addc838a6e383435c683a1f867e780
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mspdbcore.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\mspdbcore.dll
          • Size 624KB
          • SHA256 2a98eee3a76689d0a5e4a3fb6c011ef55ad3cdc44a8acb88339ab147f6cb4993
          • MD5 SHA1 SHA512 SSDEEP TLSH

          net-base.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\net-base.dll
          • Size 180KB
          • SHA256 aa1d9d15f84394242676644b574d9eead2a8027eb132d8fe5b8a196b4139957f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          net-http-server.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\net-http-server.dll
          • Size 393KB
          • SHA256 c693e17810cf16ccfe7f28b2220eeeccf73cc950d927187e1c162693f6f7596c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          net-packet.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\net-packet.dll
          • Size 64KB
          • SHA256 410414da1fc64a253a43ac105d02d7a5ebfff3f2537309a3d64405206350c88c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          net-tcp-server.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\net-tcp-server.dll
          • Size 586KB
          • SHA256 af9d69f6fcbfb18aa6f61f488b56039983db346dfd1de715f4ed9a8fc5ae56af
          • MD5 SHA1 SHA512 SSDEEP TLSH

          net.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\net.dll
          • Size 884KB
          • SHA256 3432c3d5be7598494985307dd6f50f4e5e4835f92fcca80cf59902b0a53231ee
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nng.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\nng.dll
          • Size 193KB
          • SHA256 8bced24114af1c81e343dc67fa8a6b27ec7f2874696aaf099d4b76ead50efeaf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\node.dll
          • Size 38.8MB
          • SHA256 ab6415899905c7824d8c7fe582f96ba2e904cbab36fba5d1926eccfb1fcc1c74
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nui-core.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\nui-core.dll
          • Size 1.7MB
          • SHA256 1242338ab91a139163a05f98a20cb3af50eb7cec1e1ffea11c705d46149a1482
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nui-gsclient.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\nui-gsclient.dll
          • Size 348KB
          • SHA256 32f20788fd3318d383f3834495752bd3eec5785d6b70fabff3a73e6b9116bde5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nui-profiles.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\nui-profiles.dll
          • Size 206KB
          • SHA256 bacf04a69f1b144a98966bdba817158474f5b175546b1afe88309c21c61cd907
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nui-resources.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\nui-resources.dll
          • Size 376KB
          • SHA256 5c1dfed01407c9fb2c584f83de1f351982b9ccf780d9718a18353d2ee9a37ec7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pool-sizes-state.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\pool-sizes-state.dll
          • Size 273KB
          • SHA256 0654ec4a673cef12f238e5e9057d8b94882b815583bdb0035835303cba2baa01
          • MD5 SHA1 SHA512 SSDEEP TLSH

          profiles.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\profiles.dll
          • Size 371KB
          • SHA256 44c384565d42ca7a6c32d9bd15e4d2a62b95c8fb681dae1ccb34b31d4e4d2282
          • MD5 SHA1 SHA512 SSDEEP TLSH

          rage-allocator-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\rage-allocator-five.dll
          • Size 168KB
          • SHA256 e248d9709f8f9bb3d108041777dd4ac35ea89000834d923ec3a159f7e81b27e1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          rage-device-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\rage-device-five.dll
          • Size 383KB
          • SHA256 e18ab98c3e5b90d13ccd4b5ce884383615a2490e18b1544e22aceabd13855909
          • MD5 SHA1 SHA512 SSDEEP TLSH

          rage-formats-x.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\rage-formats-x.dll
          • Size 394KB
          • SHA256 e5bd291a40ec88c9d80a57584418c239dc2529af38d8498504028d841d4aa869
          • MD5 SHA1 SHA512 SSDEEP TLSH

          rage-graphics-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\rage-graphics-five.dll
          • Size 732KB
          • SHA256 137fe8263ec0b71468b5347f761cf6758d8d3ec67f03dc30ab90d0d83cd77375
          • MD5 SHA1 SHA512 SSDEEP TLSH

          rage-input-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\rage-input-five.dll
          • Size 347KB
          • SHA256 23763e4c0c7a419699793916e1d092626bb79a139fee587647d2185e876131ab
          • MD5 SHA1 SHA512 SSDEEP TLSH

          rage-nutsnbolts-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\rage-nutsnbolts-five.dll
          • Size 185KB
          • SHA256 cbfa3736c77d9aba7eb76d92dce11729220ca3de6ff927fc77f5ad53bf121c9d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          rage-scripting-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\rage-scripting-five.dll
          • Size 1.6MB
          • SHA256 4ae04b8df5be4bbdc306dee6a29e92211cbe795b8bc0d1321a3dc70c26b92b28
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ros-patches-five.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\ros-patches-five.dll
          • Size 2.5MB
          • SHA256 bb000e9873a25ba4be4178309d9ce53ff049b4112476144773d64a81b842792b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          scrbind-base.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\scrbind-base.dll
          • Size 159KB
          • SHA256 45f0d9c466378e3ee3bfaafd1c5b9607672c5d17cdb4eb9a2c95c3a528ace4ac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          scrbind-formats.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\scrbind-formats.dll
          • Size 65KB
          • SHA256 f5eba272471fa18946abda2328f4473dc852409b01405f0781c03f579a6d0c7a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          scripthookv.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\scripthookv.dll
          • Size 252KB
          • SHA256 7faf7ce5acfc945b45d03cd690927c358fac770a6d364707796352d035040701
          • MD5 SHA1 SHA512 SSDEEP TLSH

          scripting-gta.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\scripting-gta.dll
          • Size 267KB
          • SHA256 321c54f178eba14231d39ae95650c9b53244ec87a9b970a6912a7737b13bc9e8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          steam.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\steam.dll
          • Size 433KB
          • SHA256 3bc15817794b8d327327e50ab0202c5fe3cd0f1a0d2a0b2a76393b652305d3a6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          steam_api64.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\steam_api64.dll
          • Size 312KB
          • SHA256 e082bf5c9f881c822b1540a76b74f9d15e18019a73ebd206a559595badcb7f65
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sticky.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\sticky.dll
          • Size 203KB
          • SHA256 56c567df7178c9346e80e481e47441eb944d96736e18bd25578f970b70fbd2ea
          • MD5 SHA1 SHA512 SSDEEP TLSH

          tool-formats.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\tool-formats.dll
          • Size 1.3MB
          • SHA256 ea7d1c27183ace6438834429bbf23a435cf2e171fffdc496b852ba5dac2544d9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          tool-vehrec.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\tool-vehrec.dll
          • Size 259KB
          • SHA256 c4604ec41ca48364073c78d48dc80fe3ec1175709899d29cc8a718d3c1e1aa66
          • MD5 SHA1 SHA512 SSDEEP TLSH

          v8-9.3.345.16.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\v8-9.3.345.16.dll
          • Size 14.5MB
          • SHA256 ae1ebbfc9d6e351803ed0b5b43cbdbc30ab7e78f7a9f93615958514563b5b0d5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vfs-core.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\vfs-core.dll
          • Size 279KB
          • SHA256 5adecd6c98595e57f383cd80df4db2c894f10290382a519a975236a8ecb71163
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vfs-impl-rage.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\vfs-impl-rage.dll
          • Size 210KB
          • SHA256 7a58f0d41292d03b1b62ce99d653440c777d57d2f1545a8f3ed328b989af136b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          voip-mumble.dll

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\FiveM\voip-mumble.dll
          • Size 3.0MB
          • SHA256 6140d69e20c79b687acf5480dbf4342c35854bb32145c2485bfbd3598bf97a24
          • MD5 SHA1 SHA512 SSDEEP TLSH

          unluac54.jar

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\DecryptBin\unluac54.jar
          • Size 669KB
          • SHA256 be4342467b99102cb591e0d2b319138b203a6e2a02e0ac671cc435b60e953218
          • MD5 SHA1 SHA512 SSDEEP TLSH

          License

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\node_modules\combined-stream\License
          • Size 1KB
          • SHA256 47eb8ca82c798246774946d1be0f9aa08f025fa8325ced0947aeeb4c05fe5547
          • MD5 SHA1 SHA512 TLSH

          LICENSE

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\node_modules\dunder-proto\LICENSE
          • Size 1KB
          • SHA256 2b770a704c15de238c3f622b01b0044ddd60b49ee30608ea6991ebf19db7a7a1
          • MD5 SHA1 SHA512 TLSH

          .eslintrc

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\node_modules\es-object-atoms\.eslintrc
          • Size 229B
          • SHA256 945b2b35c8d6dc3bb008e7a6391fb98f8d4103ca0dc64652b13dcbea0dd090e1
          • MD5 SHA1 SHA512 TLSH

          tsconfig.json

          • Path C:\Users\Admin\AppData\Local\CosmosDumper\Engine\node_modules\es-set-tostringtag\tsconfig.json
          • Size 116B
          • SHA256 6346ee4c020f341387588479dd83740a65ab902a462b8c6b3b8bf51f032c6795
          • MD5 SHA1 SHA512 TLSH

          CosmosDumper.exe

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\CosmosDumper.exe
          • Size 5.7MB
          • SHA256 97a3d8db2dd5fe9038f0d6dacbaa7edc8c4209289872c52f9b8f12d933228049
          • MD5 SHA1 SHA512 SSDEEP TLSH

          D3Dcompiler_47.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\D3Dcompiler_47.dll
          • Size 4.0MB
          • SHA256 e994847e01a6f1e4cbdc5a864616ac262f67ee4f14db194984661a8d927ab7f4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Calculator.exe

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\DecryptBin\Calculator.exe
          • Size 1012KB
          • SHA256 4eb7d64fade63938b3125d7d273ba935b5086eecc34d1b954d762d7b88535213
          • MD5 SHA1 SHA512 SSDEEP TLSH

          CitiLaunch_TLSDummy.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\DecryptBin\FiveM\CitiLaunch_TLSDummy.dll
          • Size 142KB
          • SHA256 e096d668cc207b8ac920f73286216e2440e4283bfad81da64fc641aa51e86516
          • MD5 SHA1 SHA512 SSDEEP TLSH

          CitizenGame.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\DecryptBin\FiveM\CitizenGame.dll
          • Size 238KB
          • SHA256 0caad9c5725569ef29ee0ab4cfba1194f6b840bd17bd43975db2fc5292abfa5b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          advapi32.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\DecryptBin\FiveM\advapi32.dll
          • Size 689KB
          • SHA256 27fcdd0f3c4f69a536bf8f8f1c6a74928fc58033002694a3a6cec4bd58fbc7b9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          botan.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\DecryptBin\FiveM\botan.dll
          • Size 4.6MB
          • SHA256 ba64eab41ca92be2b5cc721b4281c628d14c4d4ad830cbe2797800adaa9b1180
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-game-ipc.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\DecryptBin\FiveM\citizen-game-ipc.dll
          • Size 176KB
          • SHA256 ef34de8717c6957c52991df898d34c12d5e5de589758137414f5fbb7ade5a3e0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-scripting-v8-v12.4.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\DecryptBin\FiveM\citizen-scripting-v8-v12.4.dll
          • Size 32.2MB
          • SHA256 734e8ce5462297eee470c0719560e4304e4548c8714553bc698f0aef90797e38
          • MD5 SHA1 SHA512 SSDEEP TLSH

          citizen-scripting-v8node.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\DecryptBin\FiveM\citizen-scripting-v8node.dll
          • Size 447KB
          • SHA256 22c87f35130c09cdec85eb1db7c23012cbb9ed0aeb95a1b34f1ebefaf03b15f5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          binding.gyp

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\DecryptBin\binding.gyp
          • Size 517B
          • SHA256 46fc2ebcbae5c786540d44384497325c028a46888599a9a1930b53b25f75c2bf
          • MD5 SHA1 SHA512 TLSH

          msvcp140d.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\DecryptBin\msvcp140d.dll
          • Size 901KB
          • SHA256 342e5c13fd61f6130f61d85c00a7dfb10289ea7e89740f43efdabe4db16333a5
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ucrtbased.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\DecryptBin\ucrtbased.dll
          • Size 2.0MB
          • SHA256 5066317e01a20824840a5d6752dd43c1d8f9895e283ee1a52c04680566bb6ed0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vcruntime140_1d.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\DecryptBin\vcruntime140_1d.dll
          • Size 63KB
          • SHA256 c734d0a16d683592286de2e05c1ebcc3e819f6edfd501d026ce25aee0a733eba
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vcruntime140d.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\DecryptBin\vcruntime140d.dll
          • Size 191KB
          • SHA256 098a800e8d227b2c683274789b93671a668d76fe0bb7817e4921ee473db4c17e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vertexfixer.cpp

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\DecryptBin\vertexfixer.cpp
          • Size 11KB
          • SHA256 011e00eddc7d3efac844d518054baca27fd14c605bcc5ba38e134153c3a328dd
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vertexfixer.node.bak_20260423_193028

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\DecryptBin\vertexfixer.node.bak_20260423_193028
          • Size 124KB
          • SHA256 169975091e4f60bec46ca9dfba93eb2677e79a115fc7d80049654c011a56304d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          RageLib.jsc

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\RageLib.jsc
          • Size 70KB
          • SHA256 1be7d851281b4d7293205e7350d4047764648df891843a1fa6e115d51772e900
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ShaderParamNames.json

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\ShaderParamNames.json
          • Size 58KB
          • SHA256 78e7288e7f1fcad727c1f46cb09b540232f9b214c4b0a8d693e972cd3e5a9a06
          • MD5 SHA1 SHA512 SSDEEP TLSH

          decrypt-runner-legacy.js

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\decrypt-runner-legacy.js
          • Size 39KB
          • SHA256 c13f2d58ed6fb36c0bb1026d80be926ad046c548591d9ba0e882795f60b6647d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          decrypt-runner.js

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\decrypt-runner.js
          • Size 5KB
          • SHA256 e6c8bbd7ecf75b0277cdad828aca1c73862034e45a518651b344b66e5ee8896a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          decrypt-worker-loader.js

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\decrypt-worker-loader.js
          • Size 95B
          • SHA256 669eb8a06b9e125f5b35ca0fa20e21c0798385a7d4acc00ee3f7a510c70df65a
          • MD5 SHA1 SHA512 TLSH

          decrypt-worker-node.jsc

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\decrypt-worker-node.jsc
          • Size 52KB
          • SHA256 7a25fae9566de84381cb8057045f7215a533a017b06b20b7ec89845b3d03e524
          • MD5 SHA1 SHA512 SSDEEP TLSH

          decryptor.jsc

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\decryptor.jsc
          • Size 42KB
          • SHA256 67ead2568afd89d9164883a466edb5c21de72e85b18803844235c15611c1d64b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fix-runner.js

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\fix-runner.js
          • Size 6KB
          • SHA256 20111dea16f30143e253552fac6c01250a02395df4df97c0f2646069cf69854a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fix-worker-loader.js

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\fix-worker-loader.js
          • Size 91B
          • SHA256 6f902d3599d2b3531f112a0a7a97d26a8208a1fbc2a21a4855fcb7998aaf5c1a
          • MD5 SHA1 SHA512 TLSH

          fix-worker-node.jsc

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\fix-worker-node.jsc
          • Size 62KB
          • SHA256 de557e57e999079ea0f163c9f017623fabf02e14be66505d8be07c3ccec0a6eb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          LICENSE

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\node_modules\es-errors\LICENSE
          • Size 1KB
          • SHA256 5e325595b4ea8cfec3802f545b1def5d7b73e4a5b8e9ba63e32a320f67732292
          • MD5 SHA1 SHA512 TLSH

          .nycrc

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\node_modules\es-set-tostringtag\.nycrc
          • Size 139B
          • SHA256 997785c50b0773e5e18bf15550fbf57823c634fefe623cd37b3c83696402ad0a
          • MD5 SHA1 SHA512 TLSH

          .eslintrc

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\node_modules\has-tostringtag\.eslintrc
          • Size 43B
          • SHA256 0694050195fc694c5846b0a2a66b437ac775da988f0a779c55fb892597f7f641
          • MD5 SHA1 SHA512

          .nycrc

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\node_modules\has-tostringtag\.nycrc
          • Size 216B
          • SHA256 948366fea3b423a46366326d0bb2e54b08abd1cf0b243678ba6625740c40da5a
          • MD5 SHA1 SHA512 TLSH

          package-lock.json

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\package-lock.json
          • Size 13KB
          • SHA256 4d42c46bb6f0ccf08058847d2245e892e28c81428629169903c2509afed69e9d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          package.json

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Engine\package.json
          • Size 282B
          • SHA256 aca4ec9c9ff4316b1eae681411ecedf831999c79519254d62e69533d7fa6770f
          • MD5 SHA1 SHA512 TLSH

          Qt6Core.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Qt6Core.dll
          • Size 10.8MB
          • SHA256 10758b858b9985bfbfe70b7459bf5dbbdaf9874120e41c080c067d99e1cbd8e6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt6Gui.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Qt6Gui.dll
          • Size 11.0MB
          • SHA256 94e1a542e7c10d4c3b816ef43ccedd5b799fbdbec1a96cbc7a25dd8dcd1e6f9e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt6Network.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Qt6Network.dll
          • Size 1.9MB
          • SHA256 2914e75fd9f187c0606a07f45c842330bf32a8ad259f57d76908d84ef58bceac
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt6Svg.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Qt6Svg.dll
          • Size 620KB
          • SHA256 89a32215a10c1c25fe7f0022ea77d6ab6128c8bfac0e30ab144f2e4312b860f6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          Qt6Widgets.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\Qt6Widgets.dll
          • Size 6.9MB
          • SHA256 d345e3d7d693fa0150cb03a12112b6a3f27213bb59929bae2f5179b6fabf6d0b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cosmosdumper.log

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\cosmosdumper.log
          • Size 37B
          • SHA256 227b334869393915740079ba89043cce5c3a4da45fb23f660aa5aab407bb9b78
          • MD5 SHA1 SHA512

          libgcc_s_seh-1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\libgcc_s_seh-1.dll
          • Size 106KB
          • SHA256 5e27589147caa6d7a30f4cc058a14c455dc62233901ffff9a1797ede425e9f86
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libstdc++-6.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\libstdc++-6.dll
          • Size 2.1MB
          • SHA256 8013488c5528bad7966ca07f3ea2e7a9b743cacb258fe76b46a326f821cc83b0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libwinpthread-1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\libwinpthread-1.dll
          • Size 52KB
          • SHA256 c7c7dced65fff71c7bb61f80c771c562f533d26d72722d9d6091129a3b03d5ce
          • MD5 SHA1 SHA512 SSDEEP TLSH

          opengl32sw.dll

          • Path C:\Users\Admin\AppData\Local\Temp\CosmosInstall\extracted\opengl32sw.dll
          • Size 19.7MB
          • SHA256 b04de4541863bc7d8879040a78889c4849c1b1da2784c4630f734c146c2998ce
          • MD5 SHA1 SHA512 SSDEEP TLSH

          __PSScriptPolicyTest_lpwbbpzx.yv2.ps1

          • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_lpwbbpzx.yv2.ps1
          • Size 60B
          • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
          • MD5 SHA1 SHA512 TLSH

          memory/3668-3517-0x00007FF66C130000-0x00007FF66C1D2000-memory.dmp

          memory/3668-239-0x00007FF66C130000-0x00007FF66C1D2000-memory.dmp

          memory/3668-0-0x00007FF66C130000-0x00007FF66C1D2000-memory.dmp

          memory/3668-1760-0x00007FF66C130000-0x00007FF66C1D2000-memory.dmp

          memory/3668-3-0x00007FF66C130000-0x00007FF66C1D2000-memory.dmp

          memory/3668-2-0x00007FF66C130000-0x00007FF66C1D2000-memory.dmp

          memory/3668-1-0x00007FF66C130000-0x00007FF66C1D2000-memory.dmp

          memory/3668-3516-0x00007FF66C130000-0x00007FF66C1D2000-memory.dmp

          memory/4464-3519-0x00007FFF97C50000-0x00007FFF9876E000-memory.dmp

          memory/4464-3518-0x00007FFF98770000-0x00007FFF99244000-memory.dmp

          memory/4464-3524-0x00007FFF97140000-0x00007FFF9736A000-memory.dmp

          memory/4464-3525-0x00007FFF97A60000-0x00007FFF97C4F000-memory.dmp

          memory/4464-3521-0x00007FFF97370000-0x00007FFF97A54000-memory.dmp

          memory/4464-3522-0x00007FFFAEBB0000-0x00007FFFAEBC6000-memory.dmp

          memory/4464-3523-0x00007FFFAE440000-0x00007FFFAE462000-memory.dmp

          memory/4464-3520-0x00007FFF9A3D0000-0x00007FFF9A473000-memory.dmp

          memory/5056-16-0x0000022072B20000-0x0000022072B32000-memory.dmp

          memory/5056-305-0x0000022070450000-0x0000022070460000-memory.dmp

          memory/5056-17-0x0000022072B00000-0x0000022072B0A000-memory.dmp

          memory/5056-6-0x0000022070450000-0x0000022070460000-memory.dmp

          memory/5056-15-0x0000022070450000-0x0000022070460000-memory.dmp

          memory/5056-5-0x0000022070450000-0x0000022070460000-memory.dmp

          memory/5056-14-0x0000022070420000-0x0000022070442000-memory.dmp

          memory/5056-388-0x0000022070450000-0x0000022070460000-memory.dmp

          memory/5056-304-0x0000022070450000-0x0000022070460000-memory.dmp