Overview

overview

9

Static

static

3

NoPingSetupV3.exe

windows10-2004-x64

7

NoPingSetupV3.exe

windows11-ltsc_2024-x64

9

Analysis

  • user interaction
    yes
  • max time kernel
    81s
  • max time network
    163s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/08/2026, 08:58

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    NoPingSetupV3.exe
  • Size 141.6MB
  • Sample260809-kxmt1athna
  • SHA256 e8233355b8bbd6e8bb5b8719ff41bb38cc65899b19556bdc2c5066c986f5e98d
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
defense_evasiondiscoveryexecutionpersistenceprivilege_escalationransomwarespywaretrojan

Malware Config

Signatures

  • Looks for VirtualBox Guest Additions in registry 2 TTPs 2 IoCs
    defense_evasion
  • Looks for VMWare Tools registry key 2 TTPs 2 IoCs
    defense_evasion
  • Modifies Windows Firewall 2 TTPs 16 IoCs
    defense_evasion
  • Loads dropped DLL 18 IoCs
  • Enumerates connected drives 3 TTPs 64 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Looks up external IP address via web service 1 TTPs 3 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

    discovery
  • Discovers running processes 1 TTPs 1 IoCs

    Running process information can be used to identify security tools or plan follow-on actions.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 18 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 48 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

    persistenceprivilege_escalation
  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • System Location Discovery: System Language Discovery 1 TTPs 23 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 23 IoCs

    Adversaries may check for Internet connectivity on compromised systems.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies registry key 1 TTPs 3 IoCs
  • Modifies system certificate store 2 TTPs 8 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 23 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\NoPingSetupV3.exe
    "C:\Users\Admin\AppData\Local\Temp\NoPingSetupV3.exe"
    1⤵
    • Looks for VirtualBox Guest Additions in registry
    • Looks for VMWare Tools registry key
    • Enumerates connected drives
    • System Location Discovery: System Language Discovery
    • System Network Configuration Discovery: Internet Connection Discovery
    • Modifies system certificate store
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:2380
    • C:\Windows\SysWOW64\msiexec.exe
      "C:\Windows\system32\msiexec.exe" /i "C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\NoPing_Setup.msi" AI_SETUPEXEPATH=C:\Users\Admin\AppData\Local\Temp\NoPingSetupV3.exe SETUPEXEDIR=C:\Users\Admin\AppData\Local\Temp\ EXE_CMD_LINE="/exenoupdates /forcecleanup /wintime 1786025248 "
      2⤵
      • Looks for VirtualBox Guest Additions in registry
      • Looks for VMWare Tools registry key
      • Enumerates connected drives
      • System Location Discovery: System Language Discovery
      • System Network Configuration Discovery: Internet Connection Discovery
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      PID:3848
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:1236
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding ABB0F1CC033684E11813C2DF575A068D C
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:4144
    • C:\Windows\syswow64\MsiExec.exe
      C:\Windows\syswow64\MsiExec.exe -Embedding 3826D2B5BBDE734B522E0BA25A80DB6B C
      2⤵
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of SetWindowsHookEx
      PID:3504
    • C:\Windows\system32\srtasks.exe
      C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
      2⤵
        PID:4784
      • C:\Windows\syswow64\MsiExec.exe
        C:\Windows\syswow64\MsiExec.exe -Embedding 3056DE5BCBE2583379493ECC475F1CC5
        2⤵
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:3208
        • C:\Windows\SysWOW64\cmd.exe
          "C:\Windows\SysWOW64\cmd.exe" /c netsh advfirewall firewall add rule name="NoPing Performance Monitor In" dir=in action=allow program="C:\Program Files\NoPing\noping.performance.monitor.exe" enable=yes profile=any & netsh advfirewall firewall add rule name="NoPing Performance Monitor Out" dir=out action=allow program="C:\Program Files\NoPing\noping.performance.monitor.exe" enable=yes profile=any & netsh advfirewall firewall add rule name="NoPing Replayx In" dir=in action=allow program="C:\Program Files\NoPing\noping.replayx.exe" enable=yes profile=any & netsh advfirewall firewall add rule name="NoPing Replayx Out" dir=out action=allow program="C:\Program Files\NoPing\noping.replayx.exe" enable=yes profile=any & netsh advfirewall firewall add rule name="NoPing Service Guard In" dir=in action=allow program="C:\Program Files\NoPing\noping.service.guard.exe" enable=yes profile=any & netsh advfirewall firewall add rule name="NoPing Service Guard Out" dir=out action=allow program="C:\Program Files\NoPing\noping.service.guard.exe" enable=yes profile=any & netsh advfirewall firewall add rule name="NoPing Game Booster In" dir=in action=allow program="C:\Program Files\NoPing\NopingGameBooster.exe" enable=yes profile=any & netsh advfirewall firewall add rule name="NoPing Game Booster Out" dir=out action=allow program="C:\Program Files\NoPing\NopingGameBooster.exe" enable=yes profile=any & netsh advfirewall firewall add rule name="NoPing Network In" dir=in action=allow program="C:\Program Files\NoPing\NoPingNetwork.exe" enable=yes profile=any & netsh advfirewall firewall add rule name="NoPing Network Out" dir=out action=allow program="C:\Program Files\NoPing\NoPingNetwork.exe" enable=yes profile=any & netsh advfirewall firewall add rule name="NoPing Updater In" dir=in action=allow program="C:\Program Files\NoPing\NoPingUpdater.exe" enable=yes profile=any & netsh advfirewall firewall add rule name="NoPing Updater Out" dir=out action=allow program="C:\Program Files\NoPing\NoPingUpdater.exe" enable=yes profile=any & netsh advfirewall firewall add rule name="NoPing Service Backend In" dir=in action=allow program="C:\Program Files\NoPing\service.backend.exe" enable=yes profile=any & netsh advfirewall firewall add rule name="NoPing Service Backend Out" dir=out action=allow program="C:\Program Files\NoPing\service.backend.exe" enable=yes profile=any & netsh advfirewall firewall add rule name="NoPing Updater App In" dir=in action=allow program="C:\Program Files\NoPing\updater\Updater.exe" enable=yes profile=any & netsh advfirewall firewall add rule name="NoPing Updater App Out" dir=out action=allow program="C:\Program Files\NoPing\updater\Updater.exe" enable=yes profile=any
          3⤵
          • Executes a command shell one-liner
          • System Location Discovery: System Language Discovery
          • System Network Configuration Discovery: Internet Connection Discovery
          • Suspicious use of WriteProcessMemory
          PID:4896
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Performance Monitor In" dir=in action=allow program="C:\Program Files\NoPing\noping.performance.monitor.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:908
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Performance Monitor Out" dir=out action=allow program="C:\Program Files\NoPing\noping.performance.monitor.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:2244
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Replayx In" dir=in action=allow program="C:\Program Files\NoPing\noping.replayx.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:4928
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Replayx Out" dir=out action=allow program="C:\Program Files\NoPing\noping.replayx.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:1792
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Service Guard In" dir=in action=allow program="C:\Program Files\NoPing\noping.service.guard.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:4224
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Service Guard Out" dir=out action=allow program="C:\Program Files\NoPing\noping.service.guard.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:2404
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Game Booster In" dir=in action=allow program="C:\Program Files\NoPing\NopingGameBooster.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:1980
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Game Booster Out" dir=out action=allow program="C:\Program Files\NoPing\NopingGameBooster.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:700
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Network In" dir=in action=allow program="C:\Program Files\NoPing\NoPingNetwork.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:1644
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Network Out" dir=out action=allow program="C:\Program Files\NoPing\NoPingNetwork.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:5076
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Updater In" dir=in action=allow program="C:\Program Files\NoPing\NoPingUpdater.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:3384
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Updater Out" dir=out action=allow program="C:\Program Files\NoPing\NoPingUpdater.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:2836
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Service Backend In" dir=in action=allow program="C:\Program Files\NoPing\service.backend.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:1280
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Service Backend Out" dir=out action=allow program="C:\Program Files\NoPing\service.backend.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:3888
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Updater App In" dir=in action=allow program="C:\Program Files\NoPing\updater\Updater.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:5760
          • C:\Windows\SysWOW64\netsh.exe
            netsh advfirewall firewall add rule name="NoPing Updater App Out" dir=out action=allow program="C:\Program Files\NoPing\updater\Updater.exe" enable=yes profile=any
            4⤵
            • Modifies Windows Firewall
            • Event Triggered Execution: Netsh Helper DLL
            • System Location Discovery: System Language Discovery
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:672
        • C:\Program Files\NoPing\NoPingUpdater.exe
          "C:\Program Files\NoPing\NoPingUpdater.exe"
          3⤵
          • System Network Configuration Discovery: Internet Connection Discovery
          PID:3936
          • C:\Program Files\NoPing\handler.exe
            "C:\Program Files\NoPing\handler.exe" --no-rate-limit "--attachment=C:\Program Files\NoPing\proxy.log" "--database=C:\Program Files\NoPing" "--metrics-dir=C:\Program Files\NoPing" --url=https://submit.backtrace.io/nptunnel/80fd70c9e41c0c1d84c74debb700deb60ca49270210fe7ce0fa502059b72197e/minidump --initial-client-data=0x224,0x228,0x22c,0x200,0x230,0x7ff7b896f150,0x7ff7b896f168,0x7ff7b896f180
            4⤵
            • System Network Configuration Discovery: Internet Connection Discovery
            PID:4968
          • C:\Windows\SYSTEM32\curl.exe
            curl https://updater2.scutumnet.com/
            4⤵
              PID:2592
            • C:\Program Files\NoPing\updater\Updater.exe
              C:\Program Files\NoPing\updater\Updater.exe
              4⤵
              • System Network Configuration Discovery: Internet Connection Discovery
              PID:5148
              • C:\Program Files\NoPing\updater\crashpad_handler.exe
                "C:\Program Files\NoPing\updater\crashpad_handler.exe" --no-rate-limit "--database=C:\Program Files\NoPing\updater\.sentry-native" "--metrics-dir=C:\Program Files\NoPing\updater\.sentry-native" --url=https://o4507686866714624.ingest.us.sentry.io:443/api/4508563324534784/minidump/?sentry_client=sentry.native.flutter/0.12.3&sentry_key=3b2be0a5d5678638cbdd76ddeb2bef79 "--attachment=C:\Program Files\NoPing\updater\.sentry-native\7f37548d-9f48-4cd4-d510-c63a6ec8a8db.run\__sentry-event" "--attachment=C:\Program Files\NoPing\updater\.sentry-native\7f37548d-9f48-4cd4-d510-c63a6ec8a8db.run\__sentry-breadcrumb1" "--attachment=C:\Program Files\NoPing\updater\.sentry-native\7f37548d-9f48-4cd4-d510-c63a6ec8a8db.run\__sentry-breadcrumb2" --initial-client-data=0x530,0x534,0x538,0x4fc,0x53c,0x7ff9bf840b10,0x7ff9bf840b28,0x7ff9bf840b40
                5⤵
                • System Network Configuration Discovery: Internet Connection Discovery
                PID:2444
              • C:\Windows\SYSTEM32\tasklist.exe
                tasklist /fo csv /nh
                5⤵
                • Discovers running processes
                PID:4068
              • C:\Windows\SYSTEM32\reg.exe
                reg query HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall /s /v DisplayName /t REG_SZ
                5⤵
                • Modifies registry key
                PID:4608
              • C:\Windows\SYSTEM32\reg.exe
                reg query HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall /s /v DisplayName /t REG_SZ
                5⤵
                • Modifies registry key
                PID:3236
              • C:\Windows\SYSTEM32\reg.exe
                reg query HKLM\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Uninstall /s /v DisplayName /t REG_SZ
                5⤵
                • Modifies registry key
                PID:3288
              • C:\Windows\SYSTEM32\whoami.exe
                whoami /user /fo csv /nh
                5⤵
                  PID:3424
                • C:\Windows\System32\Wbem\wmic.exe
                  wmic csproduct get UUID /format:value
                  5⤵
                    PID:5380
                  • C:\Windows\System32\Wbem\wmic.exe
                    wmic ComputerSystem get TotalPhysicalMemory /VALUE
                    5⤵
                      PID:5644
              • C:\Windows\syswow64\MsiExec.exe
                C:\Windows\syswow64\MsiExec.exe -Embedding D52411F4A84FBFFE693286A20C1073B2 E Global\MSI0000
                2⤵
                • Loads dropped DLL
                • Drops file in Windows directory
                • System Location Discovery: System Language Discovery
                • Suspicious use of SetWindowsHookEx
                PID:3120
            • C:\Windows\system32\vssvc.exe
              C:\Windows\system32\vssvc.exe
              1⤵
              • Checks SCSI registry key(s)
              PID:6000
            • C:\Windows\system32\svchost.exe
              C:\Windows\system32\svchost.exe -k GPSvcGroup
              1⤵
                PID:2160

              Network

                    MITRE ATT&CK Enterprise v16

                    Reconnaissance

                    Resource Development

                    Initial Access

                    Execution

                    Command and Scripting Interpreter

                    1
                    T1059

                    Windows Command Shell

                    1
                    T1059.003

                    Persistence

                    Create or Modify System Process

                    1
                    T1543

                    Windows Service

                    1
                    T1543.003

                    Event Triggered Execution

                    1
                    T1546

                    Netsh Helper DLL

                    1
                    T1546.007

                    Privilege Escalation

                    Create or Modify System Process

                    1
                    T1543

                    Windows Service

                    1
                    T1543.003

                    Event Triggered Execution

                    1
                    T1546

                    Netsh Helper DLL

                    1
                    T1546.007

                    Defense Evasion

                    Impair Defenses

                    1
                    T1562

                    Disable or Modify System Firewall

                    1
                    T1562.004

                    Modify Registry

                    2
                    T1112

                    Subvert Trust Controls

                    1
                    T1553

                    Install Root Certificate

                    1
                    T1553.004

                    Virtualization/Sandbox Evasion

                    2
                    T1497

                    Credential Access

                    Discovery

                    Peripheral Device Discovery

                    2
                    T1120

                    Process Discovery

                    1
                    T1057

                    Query Registry

                    4
                    T1012

                    System Information Discovery

                    3
                    T1082

                    System Location Discovery

                    1
                    T1614

                    System Language Discovery

                    1
                    T1614.001

                    System Network Configuration Discovery

                    2
                    T1016

                    Internet Connection Discovery

                    2
                    T1016.001

                    Virtualization/Sandbox Evasion

                    2
                    T1497

                    Lateral Movement

                    Collection

                    Command and Control

                    Exfiltration

                    Impact

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    e5a0784.rbs
                    • Path C:\Config.Msi\e5a0784.rbs
                    • Size 3.9MB
                    • SHA256 d9342d9b6097484544c66702089bd8dbb3ebc4320056919e4f6adf36740ddf71
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    NoPingUpdater.exe
                    • Path C:\Program Files\NoPing\NoPingUpdater.exe
                    • Size 11.3MB
                    • SHA256 2972b8d157728963d8043b15dea441f8d1900823e7057546f6bb3ff56f2fec39
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    dexter-meme.mp3
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\audiopads\ar\dexter-meme.mp3
                    • Size 168KB
                    • SHA256 4a716f2a47d4fa230840e14ecc96965ba6be05c62c1cafa9e6f7c540e458a42f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    applepay.mp3
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\audiopads\es\applepay.mp3
                    • Size 22KB
                    • SHA256 44425ec60c9694f7882f3d75ca166463c7ee4619284d32bfc878936878f90bdb
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    sad_violin.mp3
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\audiopads\sad_violin.mp3
                    • Size 72KB
                    • SHA256 6aa0f62297c2154fbf715e1f43b435c0a468b4083bbdc91200531ba96fce5324
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    BaiJamjuree-Bold.ttf
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\fonts\BaiJamjuree-Bold.ttf
                    • Size 77KB
                    • SHA256 e1217344dc1921b1b9fbdf7600f2a30600ebefe515ed651ed9e0f54550aa3867
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    BaiJamjuree-Medium.ttf
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\fonts\BaiJamjuree-Medium.ttf
                    • Size 77KB
                    • SHA256 662431a95e53fae89d075a2a1b62406571d60683f84c20465bbc708697c5c902
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    AirFR.webp
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\games\AirFR.webp
                    • Size 21KB
                    • SHA256 222034cb8d3f1ab0eedb31858fd7cd6d6973b2b47d5f07d14fd8a30eefed39b5
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    Archlight.webp
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\games\Archlight.webp
                    • Size 18KB
                    • SHA256 ec6b4ebd6da76403af9c30918c23b8c19a5682c5f524293003be38f3d8ece00a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    ArenaMu.webp
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\games\ArenaMu.webp
                    • Size 14KB
                    • SHA256 391609a56ecc4c1709eb20c7eac1bc32b5a9cf56f1f7ffc7df99e7d1bfa32852
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    AuraKingdomSerenity.webp
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\games\AuraKingdomSerenity.webp
                    • Size 24KB
                    • SHA256 14bcb730f8a6c09ba77032ba87177dcda3293720bcd2ec73a9c421671a1f5d34
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    Blade&SoulPrivate.webp
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\games\Blade&SoulPrivate.webp
                    • Size 19KB
                    • SHA256 eb4f8b36d6e867356b75c212a28c5959ea3db6fadc36eae82f46ebc859ec8360
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    KnivesOutMobile.webp
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\games\KnivesOutMobile.webp
                    • Size 13KB
                    • SHA256 a1ff3c4b382ef25da718824cfd9bb74c3974c7a4263adf858879851c0921850a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    LoginBD.webp
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\games\LoginBD.webp
                    • Size 13KB
                    • SHA256 10eb1c0e3ff0ec3c3a715166208f957ad9bc2706600804579bfe40fb15191eaf
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    Mabinogi.webp
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\games\Mabinogi.webp
                    • Size 15KB
                    • SHA256 405ae7549150607d43f0fbea20ba31e687e6e03bc425a489680683d577381f7e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    PUBGEsportsServerA.webp
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\games\PUBGEsportsServerA.webp
                    • Size 16KB
                    • SHA256 3248385168f1e10cc88c7ab05fde2502280be8623cc6859a6684b1ab66d65a47
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    PerfectWorld.webp
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\games\PerfectWorld.webp
                    • Size 24KB
                    • SHA256 cad1bb6f192c365920b3cd09b30d06be06067d69aba18fb61cbf32454f5151cf
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    TeraKR.webp
                    • Path C:\Program Files\NoPing\data\flutter_assets\assets\games\TeraKR.webp
                    • Size 25KB
                    • SHA256 ecc291163e0b30c7b5383f3408d0924363ab7f4696d3fed7e76cb6384dab68a8
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    mq.si
                    • Path C:\Program Files\NoPing\data\flutter_assets\packages\country_flags\res\si\mq.si
                    • Size 173B
                    • SHA256 50bdf1f79d20003d6fd36715918d340384e19aea4d79240980dfc21875419eb3
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    sh.si
                    • Path C:\Program Files\NoPing\data\flutter_assets\packages\country_flags\res\si\sh.si
                    • Size 34KB
                    • SHA256 bc0ae11b614339ce70976762c29059fe8b9bbf3ef810f05fe2862ab6d787b3dd
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    Icons.ttf
                    • Path C:\Program Files\NoPing\data\flutter_assets\packages\np_shared\assets\fonts\Icons.ttf
                    • Size 13KB
                    • SHA256 03d105ab3fa5a9d354ac0ebb843e271891e2745a2fd2dfc178da6ff647c77cbd
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    SpaceMono-Bold.ttf
                    • Path C:\Program Files\NoPing\data\flutter_assets\packages\np_shared\assets\fonts\SpaceMono-Bold.ttf
                    • Size 94KB
                    • SHA256 35da133403a96d2972f91744f4e8dd3f3d0155e6b9aedbaf14266efa58c12d2d
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    SpaceMono-Regular.ttf
                    • Path C:\Program Files\NoPing\data\flutter_assets\packages\np_shared\assets\fonts\SpaceMono-Regular.ttf
                    • Size 96KB
                    • SHA256 508a2a382b46a55be24d9edb70ce7d59be695cd5808e641fda24c40864b0d5d2
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    4A3DF5AF9140A7CEAE136A35C979014F
                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\4A3DF5AF9140A7CEAE136A35C979014F
                    • Size 34KB
                    • SHA256 e7d5e23dfea7217fcba1b2fc5f3effc653879bc64a16468bc638f65b45963066
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    646C991C2A28825F3CC56E0A1D1E3FA9
                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\646C991C2A28825F3CC56E0A1D1E3FA9
                    • Size 1KB
                    • SHA256 63b14543360f5e89942ea8d5113526e64fbc71c1207328f0136b3a495d921dd0
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    4A3DF5AF9140A7CEAE136A35C979014F
                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\4A3DF5AF9140A7CEAE136A35C979014F
                    • Size 192B
                    • SHA256 59515fcf8263a4e64f394600e64f7957f14ffb47f8e22e43049ad16d789918e9
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    646C991C2A28825F3CC56E0A1D1E3FA9
                    • Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\646C991C2A28825F3CC56E0A1D1E3FA9
                    • Size 184B
                    • SHA256 2683a9bf318bbf7b9fd884a7dcf174f6be3b15e193afd0efee165f463970837c
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    dialog.jpg
                    • Path C:\Users\Admin\AppData\Local\Temp\AI_EXTUI_BIN_2380\dialog.jpg
                    • Size 54KB
                    • SHA256 002cf98a87af9826b78a1d783c6405975e00f4b49644332749ebced850ac3665
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    MSI7BFE.tmp
                    • Path C:\Users\Admin\AppData\Local\Temp\MSI7BFE.tmp
                    • Size 1019KB
                    • SHA256 15c35c5abf7bab8d1375f5622e31da14fd027ae1046b8a6ddfd74263fa34eda6
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    MSI98c29.LOG
                    • Path C:\Users\Admin\AppData\Local\Temp\MSI98c29.LOG
                    • Size 99KB
                    • SHA256 3f4f55863b4d0b32d24679851d60b95a906cb746f5c28621ae4ea9565c833c7d
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    noping_icon.ico
                    • Path C:\Users\Admin\AppData\Roaming\1NCRIVEL SISTEMAS LTDA\NoPing Game Booster\noping_icon.ico
                    • Size 30KB
                    • SHA256 cc4a4d94d371b1bf43b670087700a71cf55cb76dea1598590bffcd5b118f8b61
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    AMDRyzenMasterDriver.cat
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\AMDRyzenMasterDriver.cat
                    • Size 11KB
                    • SHA256 153a14ff52ef315c11344c49fa532696854c579db9c0c4868c0576d4af759954
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    NoPing_Setup.msi
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\NoPing_Setup.msi
                    • Size 5.6MB
                    • SHA256 f316751a16119c3a6da1b569c382b672ed478e8403c93403ef1c335bdec0635e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    app_links_plugin.dll
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\app_links_plugin.dll
                    • Size 153KB
                    • SHA256 314df89cdd5612c857c0e4c1f4812a237e3d2214c91206daded73de58f396099
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    audioplayers_windows_plugin.dll
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\audioplayers_windows_plugin.dll
                    • Size 216KB
                    • SHA256 169b32d5679c32826df781e7c9d5f5386ceb138365ebb6f9a75cc171ce6825a3
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    boost_filesystem-vc141-mt-x64-1_73.dll
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\boost_filesystem-vc141-mt-x64-1_73.dll
                    • Size 110KB
                    • SHA256 e0c977337a92acbedfa0659333851e30ad3acf5365deb976f3170261fb557091
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    boost_program_options-vc141-mt-x64-1_73.dll
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\boost_program_options-vc141-mt-x64-1_73.dll
                    • Size 376KB
                    • SHA256 dd35d3d7b28e933397ac621b126e6341416a6a5f0ad66222bcb42ecd196aa824
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    boost_thread-vc141-mt-x64-1_73.dll
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\boost_thread-vc141-mt-x64-1_73.dll
                    • Size 76KB
                    • SHA256 7e987555ea84d52f4882538aeb65c9d9ee3476bed992669ffadd71c870bd3c79
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    brotlicommon.dll
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\brotlicommon.dll
                    • Size 134KB
                    • SHA256 e33bc2c4b0ebecd5ae8fa0f125da46d7f8636c8b131237cb90825eed21031eb4
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    brotlidec.dll
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\brotlidec.dll
                    • Size 46KB
                    • SHA256 ab06a02719efe9ab8be95bfde1b5561a46c70a0928cd45bfa35417764c4b2c7c
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    brotlienc.dll
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\brotlienc.dll
                    • Size 2.9MB
                    • SHA256 58d9fcbf36c7b00d16b3f101efeb863e5437f199fb94b76bc87816b5506fff52
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    cares.dll
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\cares.dll
                    • Size 82KB
                    • SHA256 1fa4d6bd1c37eb83d4782c68c12c0c2b15bcbb352e8dd3bd8a07f298b7b007bc
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    civetweb-cpp.dll
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\civetweb-cpp.dll
                    • Size 53KB
                    • SHA256 9740696f99608483b14f6a421d0d7ea2f9c29e7a6ada54f19f0af9eefa376ab0
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    civetweb.dll
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\civetweb.dll
                    • Size 193KB
                    • SHA256 fa560008b458362c5d5730b3ce4ba4dd37b7d39c001a870f484e38bb36f930d2
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    concrt140.dll
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\concrt140.dll
                    • Size 315KB
                    • SHA256 4f500992a53c41a0ba44a11c33c481d8763505a7453be12d85107856ab8fb332
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    crashpad_handler.exe
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\crashpad_handler.exe
                    • Size 1007KB
                    • SHA256 6e748beb70aa06a906e5dc1c9815fac149385c544d4f32bf53b6be3b4a3525e0
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    crashpad_wer.dll
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\crashpad_wer.dll
                    • Size 37KB
                    • SHA256 565f084968c9f3322439f1b1fafef4108c95d70646d68bcd284aae14d55a344a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    app.so
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\app.so
                    • Size 17.0MB
                    • SHA256 65263c9eb4467b26c1601a57992bb2936c071c495a27f4ffd5014d7204f0ca31
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    AssetManifest.bin
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\AssetManifest.bin
                    • Size 205KB
                    • SHA256 84804f79ea4612a8cdb23382ac3e0e5708b598472bc9d37b7d7b44166233fa46
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa-e-lutador.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\am\aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa-e-lutador.mp3
                    • Size 101KB
                    • SHA256 4e03396f625afc7205d732ee4406e0b31529ac72c01b970dfb3c17e54963c5dc
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    boee.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\ar\boee.mp3
                    • Size 44KB
                    • SHA256 d0e8aedc7d5efdaeb968c72ec0807582ca1905a5d381b631a89f3fa3cab93d97
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    oi-oi-oe-oi-a-eye-eye.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\au\oi-oi-oe-oi-a-eye-eye.mp3
                    • Size 152KB
                    • SHA256 9db0438ac8ae7db72ee1233099b19e425b166c1aa47e36690f3df3181d1ae2ca
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    brutal-acabou-pro-beta-globo.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\br\brutal-acabou-pro-beta-globo.mp3
                    • Size 110KB
                    • SHA256 265a3e23246e6adbd81a6c77b97453949e9b5b799f5223fae0b3a568d321d327
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    fahhhhhhhhhhhhhh.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\de\fahhhhhhhhhhhhhh.mp3
                    • Size 77KB
                    • SHA256 f65311d5eea216616cde00edc9e0ee0e2be1f5a03aeeb5aef8b23d55f676826a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    67_SQlv2Xv.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\fr\67_SQlv2Xv.mp3
                    • Size 60KB
                    • SHA256 c54e3df2572af80fe1e2ec39ddd1a607a1bc3afde5a21d3c1efb8e3eb23a0aa6
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    faaah.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\in\faaah.mp3
                    • Size 46KB
                    • SHA256 c8b03ff0adacaf75b504b46e505f70af70a76d234cedaeb80eef9ee7ef6d909a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    fahhh_KcgAXfs.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\in\fahhh_KcgAXfs.mp3
                    • Size 36KB
                    • SHA256 21994c560d583f2c8b166ae16d5eab7fc5b925505e1ba93d7681543ebe443c08
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    are-you-out-of-your-mind-greenscreen-change-quality-and-end-wont-cut-off_2.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\jp\are-you-out-of-your-mind-greenscreen-change-quality-and-end-wont-cut-off_2.mp3
                    • Size 46KB
                    • SHA256 2822c32535be2755aea0241783df54924a850b1aca34b3b3bc7dfa5fef89ac10
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    aplausos_3.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\kr\aplausos_3.mp3
                    • Size 90KB
                    • SHA256 6c452a121db41d5165d48aaf6aacb37bc1840715564e667cff1ab646ff7cf48a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    haang.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\kr\haang.mp3
                    • Size 13KB
                    • SHA256 059c7e7e8812edf5bb938b0c627327f57ee14e115dcbfac4548a4f769c4d715c
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    vine-boom.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\kr\vine-boom.mp3
                    • Size 20KB
                    • SHA256 c4dadbc0b9cd21b1313ec11845a00d9401bc208ae0f59f54a0282b8cb89d56c2
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    among-us-role-reveal-sound.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\ng\among-us-role-reveal-sound.mp3
                    • Size 97KB
                    • SHA256 2a1a36e036c776bc030bf79ef69e312e6bbe0bc96b9ee0f30956ff4aad30ae4b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    dry-fart.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\nz\dry-fart.mp3
                    • Size 1KB
                    • SHA256 11c2bbd0505f013f928c21bff7c202b62ac3da5c67db16f8b7a489f653e304c8
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    chicken-on-tree-screaming.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\pl\chicken-on-tree-screaming.mp3
                    • Size 89KB
                    • SHA256 419e073ebfbd286a614d8e70611a63d8120ed56a3ccad9fcd8430fc03d9289b8
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    rizz-sound-effect.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\us\rizz-sound-effect.mp3
                    • Size 75KB
                    • SHA256 dbbde7a7920b680ab42a6b8cab49dbd59e24841878bb622fb889669f9fae286f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    anime-wow-sound-effect.mp3
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\audiopads\za\anime-wow-sound-effect.mp3
                    • Size 66KB
                    • SHA256 5118c619f0ab62e181f32d9eacd490441b49aaa7bb8e1be1b6b51e7a3c25debc
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    BlackDesertLegends.webp
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\games\BlackDesertLegends.webp
                    • Size 21KB
                    • SHA256 3e05854f536da2073fdfd4d594698b28a5d8975a4aa19fe8e59877e340fb2ff2
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    LostArkStove.webp
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\games\LostArkStove.webp
                    • Size 19KB
                    • SHA256 0e5c0cdc03773dc79d92b34e2764e832cae8bc6b7831397bad2a46f0c1b9c811
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    Metin2Zoira.webp
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\assets\games\Metin2Zoira.webp
                    • Size 15KB
                    • SHA256 35536821d44a259007e8579c63069a82a5afe2cdd3046a54b4a9f15c32d89a95
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    mf.si
                    • Path C:\Users\Admin\AppData\Roaming\NoPing\NoPing 3.9.1.1\install\3B6B6B6\data\flutter_assets\packages\country_flags\res\si\mf.si
                    • Size 173B
                    • SHA256 5448eb004a2d751685a6e2157fad9bc3fdd6fb7a603703201f4dbcd550fb9186
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    _documents_3_0_255_client_info
                    • Path C:\Users\Default\Documents\_documents_3_0_255_client_info
                    • Size 462B
                    • SHA256 73700ec12c45af578daaa82c2344b00fa1ccb9564111c2d89a906cb4ec056706
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    MSI1060.tmp
                    • Path C:\Windows\Installer\MSI1060.tmp
                    • Size 917KB
                    • SHA256 0fa9b28d3bb8e455ad61735f5259d5d9b8f65bcefa44f83f69db8a4ca451e5bd
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    MSI6857.tmp
                    • Path C:\Windows\Installer\MSI6857.tmp
                    • Size 897KB
                    • SHA256 a0c43904d3d080c36a9ad88148edd1f73e6b1f70cc8a0e31fb336f65ca2fd0aa
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    metadata-2
                    • Path \??\GLOBALROOT\Device\HarddiskVolumeShadowCopy2\System Volume Information\SPP\metadata-2
                    • Size 26.1MB
                    • SHA256 8af8549ab45f6a4c203134963843d61d9f6bc6e48dad9e4c5bc1224aca0639ad
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    {ad08825d-023a-4b8e-84d3-34be16d85f88}_OnDiskSnapshotProp
                    • Path \??\Volume{c61f8367-0000-0000-0000-d08302000000}\System Volume Information\SPP\OnlineMetadataCache\{ad08825d-023a-4b8e-84d3-34be16d85f88}_OnDiskSnapshotProp
                    • Size 6KB
                    • SHA256 cf20b35bc73fb97a15f3bceccdc9b9312b5b7a249904731434de45f7cf024d1c
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    memory/1236-244-0x000001F71A570000-0x000001F71AF14000-memory.dmp
                    Download

                    memory/2444-9772-0x00007FF7ADAA0000-0x00007FF7ADB49000-memory.dmp
                    Download

                    memory/5148-9594-0x0000015544130000-0x0000015544131000-memory.dmp
                    Download

                    memory/5148-9770-0x00007FF9BF7F0000-0x00007FF9BF84A000-memory.dmp
                    Download

                    memory/5148-9591-0x0000015546DA0000-0x0000015547685000-memory.dmp
                    Download

                    memory/5148-9593-0x0000015546DA0000-0x0000015547685000-memory.dmp
                    Download

                    memory/5148-9757-0x00007FF69A440000-0x00007FF69A45B000-memory.dmp
                    Download

                    memory/5148-9758-0x00007FF9C60D0000-0x00007FF9C60F4000-memory.dmp
                    Download

                    memory/5148-9767-0x00007FF9C2020000-0x00007FF9C204A000-memory.dmp
                    Download

                    memory/5148-9590-0x0000015544110000-0x0000015544111000-memory.dmp
                    Download

                    memory/5148-9592-0x0000015546DA0000-0x0000015547685000-memory.dmp
                    Download

                    memory/5148-9959-0x00007FF9D43D0000-0x00007FF9D43F3000-memory.dmp
                    Download

                    memory/5148-9970-0x00007FF9BAC50000-0x00007FF9BBE9D000-memory.dmp
                    Download

                    memory/5148-10249-0x00007FF9BAC50000-0x00007FF9BBE9D000-memory.dmp
                    Download

                    memory/5148-10633-0x00007FF9BAC50000-0x00007FF9BBE9D000-memory.dmp
                    Download

                    memory/5148-11269-0x00007FF9BAC50000-0x00007FF9BBE9D000-memory.dmp
                    Download