Analysis

  • user interaction
    yes
  • max time kernel
    151s
  • max time network
    138s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260710-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    09/08/2026, 18:34

General

  • Target
    WatchixSetup.exe
  • Size 110.1MB
  • Sample260809-w7twvawzbx
  • SHA256 2cc36aaabdcb72a0678a5017a45edd8676733e1ac99af9f16d023f06307d6c77
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped DLL 11 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Using powershell.exe command.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\WatchixSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\WatchixSetup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:268
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
      2⤵
      • Hide Artifacts: Ignore Process Interrupts
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:1528
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2652

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        StartupProfileData-NonInteractive

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 17KB
        • SHA256 c6beae759e53782ff9ac2e28196bad95ca08a398190660feaba1c22ce465f4fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __PSScriptPolicyTest_yk0vjrfd.ucq.ps1

        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_yk0vjrfd.ucq.ps1
        • Size 60B
        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
        • MD5 SHA1 SHA512 TLSH

        LICENSE.electron.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH

        LICENSES.chromium.html

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\LICENSES.chromium.html
        • Size 18.6MB
        • SHA256 c1bc6cfdd6c5844720e5e6332698a6131f5402e77abf1fdb9646740d38065a65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\chrome_100_percent.pak
        • Size 113KB
        • SHA256 34433fa04ddf5eb78b3b4e9c64a3af626e28641907ad7a6086614eb6a8f00a07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\chrome_200_percent.pak
        • Size 183KB
        • SHA256 581c8d53199c10512d31a340699f9ad269f8eea5fe6bc49e05c1bde98ee612aa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.5MB
        • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxcompiler.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\dxcompiler.dll
        • Size 24.5MB
        • SHA256 db72abfc0de76ff1504e240da07c1dfd8646ce46aa30df9bf4fb2258161f97d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxil.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\dxil.dll
        • Size 1.4MB
        • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\ffmpeg.dll
        • Size 3.0MB
        • SHA256 ced08d56da30dc9671c088870f8cd0820fb5b43d568be5588d9934b883cce43a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\icudtl.dat
        • Size 10.3MB
        • SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\libEGL.dll
        • Size 508KB
        • SHA256 f158a8da0e8b6c56bcdac67ed95446df6f984ed192d895a5c8040a43e8343bef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\libGLESv2.dll
        • Size 7.6MB
        • SHA256 c3e413e81f52f64415481daf16232e18ae19caa6b0cf2768a02a0a51d3436b60
        • MD5 SHA1 SHA512 SSDEEP TLSH

        af.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\af.pak
        • Size 595KB
        • SHA256 e91886ab2efa80ba17fb92ee8a6caacd4ed34ae8f16be9f7a43900f24c6af514
        • MD5 SHA1 SHA512 SSDEEP TLSH

        am.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\am.pak
        • Size 966KB
        • SHA256 0995da0a36c5bf89c56931acee91bf2c8cc4134fbee2bb662046e2f784397c3d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ar.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\ar.pak
        • Size 1.0MB
        • SHA256 01d9513381e17dae8697f6a04c2840956b814b104cbe3b8307e1a438e8967603
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\bg.pak
        • Size 1.1MB
        • SHA256 b2c5a13642446c60f580e2a526f63e46c0a14ea55d004b0cc0c0a31f2a2ece6a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\bn.pak
        • Size 1.4MB
        • SHA256 e2b805f0b26d0dcb42eb8de7f726bcee4897342e035b128c03232b94232778f6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\ca.pak
        • Size 670KB
        • SHA256 5c4adc1a394d6e985f089857c9c6f92d1832b2fdc4471140e543e277f07dec17
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\cs.pak
        • Size 696KB
        • SHA256 bf41c0e9ee98bceaf8d4cdd5982f42cd482f862cec5385ecc2afd911356ddb6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\da.pak
        • Size 626KB
        • SHA256 d53590736444cdd4bb4a31bad9236205451ce70fc9b5865c38264d77ac9bf0a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\de.pak
        • Size 671KB
        • SHA256 8554c585028234ddd70ef345c3a47b579c309b6e453d3e9ca673ba32b15f3841
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\el.pak
        • Size 1.2MB
        • SHA256 471570839cceb34a1db8f5b25fca6898194ba4784e82c8d72169885bb64a6216
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-GB.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\en-GB.pak
        • Size 542KB
        • SHA256 9637257dd7a936906b5e2c71d345f49a00225addedc1afddc1a06d906571ff49
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\en-US.pak
        • Size 548KB
        • SHA256 a15a41f74f809ae908b95645565c34b151483a5c04a94265b44aee12fd413b55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es-419.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\es-419.pak
        • Size 661KB
        • SHA256 5ce9c791402daf80babb909649863480e9500537b1a12a752bf669df1915dd8a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\es.pak
        • Size 658KB
        • SHA256 68f0f80d95ff86941b60f82a72b9b994dca0603abc767a3036b0beedb50b29a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        et.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\et.pak
        • Size 601KB
        • SHA256 0b73460e50b8bbf3737160441571eba058ffd4ce358c268ed51be5555bf45ff0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fa.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\fa.pak
        • Size 995KB
        • SHA256 0efecdc9b5f248db99e104611d06308f7580e75b5d74c710a86eadd92204b7a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\fi.pak
        • Size 612KB
        • SHA256 db3640df151dd53cd8b48290eef15d2c1278918a16ef9551fa9d29986674c4ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fil.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\fil.pak
        • Size 694KB
        • SHA256 e6cd03f12ac45e96ae6fb55fbc3396a4f3367239d73e134056cc376b728652f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\fr.pak
        • Size 715KB
        • SHA256 519d2c2c4edc344a74943db5849622dcc7d19efef9e2430d27426ed9ccca96e5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\gu.pak
        • Size 1.4MB
        • SHA256 d2a0b34fdf156de47bccd69f5d942e934b15faf90468eb8a5836eeee6a827efe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        he.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\he.pak
        • Size 871KB
        • SHA256 d945e14fefc77034090da57844f5b7d731183c81595da4ba666b36dfc6f07adb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\hi.pak
        • Size 1.5MB
        • SHA256 51c5bb6ab0a12b6c1b7a7e5792ab3a60bd2a07180cf9534fe38f2c1c5bceebb6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\hr.pak
        • Size 670KB
        • SHA256 e67b335f840e54947890f177d7ef1f3073bf070823ac85f36e0380dc5ee72869
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\hu.pak
        • Size 716KB
        • SHA256 5facf6dc1970a5f743191d2f1e031b42c06c66477612473017690b40484a6dd5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        id.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\id.pak
        • Size 592KB
        • SHA256 b27bc5757f7df301d106c56f98965f52bcbb35185e328561c3b717485a966ada
        • MD5 SHA1 SHA512 SSDEEP TLSH

        it.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\it.pak
        • Size 649KB
        • SHA256 192e40f475a710c4d99bb44bc081a1031c18aa5db673b0e119a4a24539e3ea07
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ja.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\ja.pak
        • Size 791KB
        • SHA256 e633be299fbdd0af03690a9ddbe3190075623b9e6a8e69179334107f1291c69d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\kn.pak
        • Size 1.6MB
        • SHA256 e66d9e990ff0132d5c523c9109d4bb5f9e91795e986cbc3c6f6210e278593e1e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ko.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\ko.pak
        • Size 670KB
        • SHA256 3d9ce2997479783fb05f36757376d89a9650c4a175d5176c01380744e8e3034e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lt.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\lt.pak
        • Size 729KB
        • SHA256 8d6476da7e1cf535cc188c87516ba59f8ab59947ce483c71559841adc194fb16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\lv.pak
        • Size 726KB
        • SHA256 8605b0a2d4764ea046f5f59f240ed035efbe8635d3ce9e97ea9fa9e9a23c1450
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ml.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\ml.pak
        • Size 1.6MB
        • SHA256 0361761ec842b8d53cd088d906e32a65bc05d574945b5751397527efd6ba43c3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\mr.pak
        • Size 1.3MB
        • SHA256 1f0ca08f7ab7603d49209317412a874157352858a8baa648ed1859ddb28c81ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ms.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\ms.pak
        • Size 624KB
        • SHA256 e7c902b27b903de61592e82b2a27688afb82553063cb28b6ec63e39257790c5c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nb.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\nb.pak
        • Size 598KB
        • SHA256 e7fe21421e211fb1f84a810846cfe8c33e94e88764247f9f2023ffde812d21bc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\nl.pak
        • Size 623KB
        • SHA256 8e2b2b32861dd2efc143b0a0d075e6e38bc0d62ded2a2771d42deb6675e09305
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\pl.pak
        • Size 696KB
        • SHA256 20c71e146768f607c0a61335b80b26bb9f4acb5c1cc7060bdfa5b9c144b4827a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-BR.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\pt-BR.pak
        • Size 652KB
        • SHA256 21ed64cbdf74e46bf51e292f62208471c6fe20e1db45735a9c0c3b188f3b7576
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-PT.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\pt-PT.pak
        • Size 655KB
        • SHA256 78068ad5447b9994873519e9a2e221f37d87a92528bf591229753679367562a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\ro.pak
        • Size 680KB
        • SHA256 39ba021557ddd98a693340cbbeac77f69641635b72ac6f427d4183c466e280f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\ru.pak
        • Size 1.1MB
        • SHA256 1ed59f0b501d213ef40073a60a0ce27ddc6fdc01a65d6873fd2f7c51e80d02e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\sk.pak
        • Size 708KB
        • SHA256 1065e8d31a48d8e36c7dc2f4c70b1692a4618894e637092bf9aade7af82de033
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\sl.pak
        • Size 678KB
        • SHA256 254f626f3daf5d6f8278b87d59a6bc259dc5bc9c192a2875ea25607f915a03ca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\sr.pak
        • Size 1.0MB
        • SHA256 383dca885a8e40efe87f713464207199f30dc933ddacf21f61a2b1e89ca944d5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\sv.pak
        • Size 605KB
        • SHA256 8844d78e1f2932fc230a59f2b8698a432ba26060b251281e10f8e98020b125d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sw.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\sw.pak
        • Size 640KB
        • SHA256 bf86b4b75b827223632badfecdc8689497873c14b209c07fde825968d9f9d1c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ta.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\ta.pak
        • Size 1.6MB
        • SHA256 0d630b4c27f0b8eb971381275ed9f64508420140b22070bb31581976a2ebfd11
        • MD5 SHA1 SHA512 SSDEEP TLSH

        te.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\te.pak
        • Size 1.5MB
        • SHA256 64a9888abb8bbecefe23a2195b555e1f8d9fd8435351b63c595a926dd123142c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\th.pak
        • Size 1.3MB
        • SHA256 12e6592199914b67c29cca512ea826e8eb478cca62bc67d336a94c72fb78e4b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\tr.pak
        • Size 651KB
        • SHA256 1093a6f7c31f94641830902bfe1027145a42a3847ed8af0869f12cfa2db48587
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\uk.pak
        • Size 1.1MB
        • SHA256 d7a3dcd2b95dbf0809d47b61005ce5fdfb4417514ecfad543f4cd9b746bfc962
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\ur.pak
        • Size 980KB
        • SHA256 ba94f43cf5fa31982d1a559262dfc13d34ad028e2d23dc5a11813f1645842ae2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\vi.pak
        • Size 774KB
        • SHA256 90ac2cd4502f502edf5b9cce089763df623a608849bc381efb3a3c20801341f4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\zh-CN.pak
        • Size 554KB
        • SHA256 da523b8e933ca98f571fe3ac398a53d362445410b3469288d43553d65d1bce3e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-TW.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\locales\zh-TW.pak
        • Size 547KB
        • SHA256 2ac36905c94b7d4fba0b3cc3841f14dbf5ba08766eecdd787b45ea736d1e0dcb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources.pak
        • Size 6.4MB
        • SHA256 302671ba7bf6d6352773d34de852793027d389c4afde1db0977e1b76e39d5938
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app.asar

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar
        • Size 32.5MB
        • SHA256 4e401536f79e5964ffa1b9b97ff4c3aa077194b94fb11eb71ae403b366d828f9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        esbuild.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\@esbuild\win32-x64\esbuild.exe
        • Size 10.9MB
        • SHA256 44ce6728d54c891b1c5a6d7dbfb1a0f13419884cca0b090f1fbcf0dcd8bee0e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\@esbuild\win32-x64\package.json
        • Size 374B
        • SHA256 095bf1c95a8a9179990600dd94b2ee1857f63fb747674d7dd8a06460a09d4fc8
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\datavault-win\dist\index.js
        • Size 412B
        • SHA256 a7ff0225cb5ebcbef8499c6c8ac2be924f584eb375dacb1d8bd3dc6540b510f2
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\datavault-win\package.json
        • Size 670B
        • SHA256 2ed7eaa6e13c297ba30900cedb7a10b58215fa4fd64f32788e31ee3f0bf303b2
        • MD5 SHA1 SHA512 TLSH

        node.napi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\datavault-win\prebuilds\win32-x64\node.napi.node
        • Size 137KB
        • SHA256 da2172ce055fa47d6a0ea1c90654f530abed33f69a74d52fab06c4c7653b48fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dpapi_addon.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\datavault-win\src\dpapi_addon.h
        • Size 99B
        • SHA256 bf9639dd953de6f4ab47d68943f11f99907ff31ea4d05549150e89a21a6efb51
        • MD5 SHA1 SHA512 TLSH

        dpapi_not_supported.cpp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\datavault-win\src\dpapi_not_supported.cpp
        • Size 218B
        • SHA256 0c1d1737d698c15cacdfe963b8a84cffad1422fc0be1fd6995f0572b70492a1c
        • MD5 SHA1 SHA512 TLSH

        dpapi_win.cpp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\datavault-win\src\dpapi_win.cpp
        • Size 2KB
        • SHA256 0773f2d8790fc5bef82815942188f5c9a58d88581e0f2423944f629add5a8cb9
        • MD5 SHA1 SHA512 TLSH

        main.cpp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\datavault-win\src\main.cpp
        • Size 589B
        • SHA256 b2b9ddbd143fe87f82e2f8cf6a8436ae20e5ebcd50a42773e1b2d49263dddd95
        • MD5 SHA1 SHA512 TLSH

        LICENSE.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\LICENSE.txt
        • Size 1KB
        • SHA256 48bfd53f76185bd32bb91393a7e27ab553b77b4b965245ba73f4714c11030a4a
        • MD5 SHA1 SHA512 TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\darwin_arm64\koffi.node
        • Size 1.2MB
        • SHA256 6c88b2173bdf403046265f859201c13504eba2b258b23da61fff23f7659797b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\darwin_x64\koffi.node
        • Size 1.5MB
        • SHA256 f7ba306880ab40286c4443577fa95c47615111ce0a958442e4eb0a5e83928b67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\freebsd_arm64\koffi.node
        • Size 1.5MB
        • SHA256 4c730af0d6c84f2b88e22b80fb106b7af416deebe9a1c8e8336d6e4b1fce819f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\freebsd_ia32\koffi.node
        • Size 1.4MB
        • SHA256 7acaf95d9da7dd4e2c5823be5321dd6cda109c07c1079306c3216d1aa6688f8f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\freebsd_x64\koffi.node
        • Size 1.5MB
        • SHA256 ef05047b3ec7fb73e74c96113f67bf878ad74a9e4eaef20ec3f83317460a2bbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_arm64\koffi.node
        • Size 1.5MB
        • SHA256 da394ea5d8f28cf8e90c6b1bbc3f35485adb24f36dc36265806967213c235a50
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_armhf\koffi.node
        • Size 1.2MB
        • SHA256 5ece8a66d2ec7eed61da4d294c834b40c7631868a0e1b9ce45649e9c4df81ce3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_ia32\koffi.node
        • Size 1.5MB
        • SHA256 f5d7732a3a9d890ce184855399907c85fd86f0ea8a2ed2fb846534059de1181f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_loong64\koffi.node
        • Size 1.4MB
        • SHA256 31a7add40a525c65be33ee30a771f447b0b1d60ba83b3e502439ccf69a08b3df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_riscv64d\koffi.node
        • Size 1.2MB
        • SHA256 26c7a6fd6962fef8ca5fdcd5a6956e9758a2d652822bd3ef4c9c04e4725c06d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\linux_x64\koffi.node
        • Size 1.5MB
        • SHA256 ecc61aa265a56b99182c648e56a91e4c60bf3c7e542efaca93dfdb0452e03330
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\musl_arm64\koffi.node
        • Size 1.6MB
        • SHA256 6cbff8fcc93c19874ffe68668ab806b933f1f1f98f2a18d399964c7bd81c939a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\musl_x64\koffi.node
        • Size 1.5MB
        • SHA256 53ff9cc831cd1539dc3131e616603df42d6f17ff3a836a5e2d72adc0c99a6606
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\openbsd_ia32\koffi.node
        • Size 1.4MB
        • SHA256 bc3b558da1ab1180dc3279b1349aac9ac569e92a8de30e28ca78199560aca8b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\openbsd_x64\koffi.node
        • Size 1.5MB
        • SHA256 be1f117f36f420608e34be5db430f9066e9f73407c339db31960aeb102e9e7a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.exp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_arm64\koffi.exp
        • Size 1KB
        • SHA256 31e13e095cbf175ee9ae5276324397b014146a04f690f872b1f0f34a5e31beaf
        • MD5 SHA1 SHA512 TLSH

        koffi.lib

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_arm64\koffi.lib
        • Size 2KB
        • SHA256 95e9fcc922bda6a01dd9a163827c1be07fba2ab00bb6818674b349ccbe1ec3fc
        • MD5 SHA1 SHA512 TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_arm64\koffi.node
        • Size 1.3MB
        • SHA256 5a04ca448b37cfcf9a9327be8fae7624053b3d2a46c5dcca4ed3689df33400dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.exp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_ia32\koffi.exp
        • Size 1KB
        • SHA256 061cac6635fb6424ccda30c5e1f0d92cfb7b20ceecbfaf110a35d8214737079a
        • MD5 SHA1 SHA512 TLSH

        koffi.lib

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_ia32\koffi.lib
        • Size 2KB
        • SHA256 2c599c527797d56c69ee161aeac041b98fd850fc6ef6b8bd2b52148897619f99
        • MD5 SHA1 SHA512 TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_ia32\koffi.node
        • Size 1002KB
        • SHA256 af700e05e2578e3062917248fd5cb3a2cfdb209e2aeedf157b072534d0e884c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        koffi.exp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_x64\koffi.exp
        • Size 1KB
        • SHA256 ba68b3d4f5ded3101fb3248061e0c229a4d6dfb96e8487354ba877cb16908af2
        • MD5 SHA1 SHA512 TLSH

        koffi.lib

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_x64\koffi.lib
        • Size 2KB
        • SHA256 5d9d9c318d33edab02db8858d5345141aa2f7863dd7f3e0949217be07847c1a7
        • MD5 SHA1 SHA512 TLSH

        koffi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_x64\koffi.node
        • Size 1.5MB
        • SHA256 cd9fb878c2e73711e37cf82e60526509a3df361148396dcb3a95b053b582880c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        benchmarks.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\benchmarks.md
        • Size 5KB
        • SHA256 d10260739b956bd469b2aedd570c92ce9b8db915626510bc3b5fbc302240f581
        • MD5 SHA1 SHA512 SSDEEP TLSH

        callbacks.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\callbacks.md
        • Size 8KB
        • SHA256 29c28636411bede482b63fab512caaa9a813cd42261a5271d71a7ab4f762ace8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        contribute.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\contribute.md
        • Size 5KB
        • SHA256 542335d52d68bc6f4f7b11499d16e238d888e72ecb0e1abe4d8db028adfe5e99
        • MD5 SHA1 SHA512 SSDEEP TLSH

        functions.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\functions.md
        • Size 9KB
        • SHA256 59442e4bdb502bf22e1207afa75e38983b837d7b68f890387f9e30bb53976ba9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\index.md
        • Size 3KB
        • SHA256 8c6ff4962fd18478d07a474d3fc9e7d9a8c9ec2180e6b78adf434463f4dadcff
        • MD5 SHA1 SHA512 TLSH

        input.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\input.md
        • Size 16KB
        • SHA256 be0569a396cb33e70d7f95edfe7a0957669566694c75cf87212c0881e3bf4adf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        migration.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\migration.md
        • Size 4KB
        • SHA256 3c5ef411cc137e194e3bff13243f7d7c7c71da12e09ce4e103f79ba79906ca90
        • MD5 SHA1 SHA512 SSDEEP TLSH

        misc.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\misc.md
        • Size 6KB
        • SHA256 09602031dd666662c6024f35dcc5c4a4e74c31b8a18d4aa7e9999c1937d71640
        • MD5 SHA1 SHA512 SSDEEP TLSH

        output.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\output.md
        • Size 9KB
        • SHA256 b92367ccfdca8da935cfb2351240f5599896df152347d0b835e2f348b1175e4d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        packaging.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\packaging.md
        • Size 2KB
        • SHA256 e1bfe8b62b143f5e4ed2ceee11150f9ef802bdf01bd9d84caef419e79efadfe4
        • MD5 SHA1 SHA512 TLSH

        platforms.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\platforms.md
        • Size 2KB
        • SHA256 02bdc435d62a619fa0b32462b7ed37399471d152c9c9f255ff5b1dcb3d64f923
        • MD5 SHA1 SHA512 TLSH

        pointers.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\pointers.md
        • Size 12KB
        • SHA256 0952c0bb41f4fdc9f47524d5ec04a094c10939f5b2c7ebf6c775ee519731db82
        • MD5 SHA1 SHA512 SSDEEP TLSH

        start.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\start.md
        • Size 3KB
        • SHA256 2624333facf7f80b21c6d422ecc9289dc069577e5f946f468eeecb4fde62205f
        • MD5 SHA1 SHA512 TLSH

        unions.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\unions.md
        • Size 5KB
        • SHA256 2adf36a1ce803786036fa7ee9cfd4ceca2f62cd6e0560554ce49315cbc67674d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        variables.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\variables.md
        • Size 3KB
        • SHA256 4248d1c6494ae8d3fa3531178487edd0964ed1c4eaae35da4fc42cd83712f83a
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\index.js
        • Size 20KB
        • SHA256 39e05b73cec3a65d5841906b97cb8c95055e6fb300271de0c0b5a7f918f2ca80
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\base.hh
        • Size 171KB
        • SHA256 bab8771c26713bad29ec2fe507ff5f16f84c3948dc08fc318a623cef04ec9a26
        • MD5 SHA1 SHA512 SSDEEP TLSH

        crc.inc

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\crc.inc
        • Size 200KB
        • SHA256 aeeea0b506cf505b884b7d8071a0a90ce353e0ce5c7a0454ca129a31c85a29d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        crc_gen.py

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\crc_gen.py
        • Size 2KB
        • SHA256 605109bcb12c06748b022bb1a7948fe5e4c6376bc87b21d232fca9b1d9a241ec
        • MD5 SHA1 SHA512 TLSH

        mimetypes.inc

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\mimetypes.inc
        • Size 53KB
        • SHA256 f3a0c670fcb8f8ff9ea29ff1de9d646a1787187f0500118f7d084a80ab0cbc04
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mimetypes_gen.py

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\mimetypes_gen.py
        • Size 1KB
        • SHA256 18e93987189889bed91f06b27ea80e16241ddb59f32409dae160cc54356f6236
        • MD5 SHA1 SHA512 TLSH

        tower.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\tower.hh
        • Size 2KB
        • SHA256 49c73bfc47750187b556220489a0be158c178545f216ded075853ae1575f882b
        • MD5 SHA1 SHA512 TLSH

        unicode.inc

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\unicode.inc
        • Size 35KB
        • SHA256 5678c732bf1026059b0363c8e1ead8669e09c57b973321b1931aeb64dc0fa56e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unicode_gen.py

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\unicode_gen.py
        • Size 4KB
        • SHA256 402e17c0b48c4d79da1234e10e57d7174b9103c376dd43ad9a1e044a9fb39944
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\package.json
        • Size 668B
        • SHA256 e65a6209988184f526c41ad03899795b42d0d5ba56796a7748ae1e9e94a335fb
        • MD5 SHA1 SHA512 TLSH

        README.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\README.md
        • Size 3KB
        • SHA256 5fd2f3bb3c9bbb2f603e757b2a366ad8ce1eba23bd5683a12e5170c9d31a4ae5
        • MD5 SHA1 SHA512 TLSH

        FindCNoke.cmake

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\assets\FindCNoke.cmake
        • Size 5KB
        • SHA256 e81954cb439202214648894dcf59a838ff31a2d903e7ae26fa3346a21cd9de8a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        toolchains.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\assets\toolchains.json
        • Size 6KB
        • SHA256 c09f4ccd3eee4da5f834af376376359cb8025f23fedd635a82860dc3594d88cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        win_delay_hook.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\assets\win_delay_hook.c
        • Size 879B
        • SHA256 569e120d81b67fd9d19a40db4ae9d2f7b9c60549ef734c95a16183c5c2427e64
        • MD5 SHA1 SHA512 TLSH

        cnoke.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\cnoke.js
        • Size 6KB
        • SHA256 dfa8d4d5a1e7e4cdd51ac2b656b93e816718d5912dcaa28002bf3d6cb3068b46
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\package.json
        • Size 425B
        • SHA256 a0371e0bd7a973e052647d087e985e594f18b089443a92ab45d90ba275381554
        • MD5 SHA1 SHA512 TLSH

        builder.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\src\builder.js
        • Size 17KB
        • SHA256 53a48af14d00256f3f60d6265d8bc637fe1fe50e0cbebb3ecc610bd9cc46b199
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\src\index.js
        • Size 247B
        • SHA256 01cdd6266047bdf69d79c0ea48fdcd830471282eddc0b9c8259558baaff62cd7
        • MD5 SHA1 SHA512 TLSH

        tools.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\cnoke\src\tools.js
        • Size 12KB
        • SHA256 7b12a3ddc0a7706b7e5cc6155537e9abf3c75c124e5ca38ab58c8dc0b8eea58a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CMakeLists.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\CMakeLists.txt
        • Size 7KB
        • SHA256 a1582f5f227945f80b1841e9af205991e3dfbfccc76490e624eb2f3555f8fa67
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abi_arm32_asm.S

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_arm32_asm.S
        • Size 3KB
        • SHA256 fdf21db17e6e0e9de810e446190eb21873c0115cec5aa91cf17adfcb9f751e56
        • MD5 SHA1 SHA512 TLSH

        abi_arm64_asm.S

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_arm64_asm.S
        • Size 4KB
        • SHA256 57692d1cad793c54c17075e8086233777c90dd8d8b2eeba1275c117670952f3b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abi_arm64_asm.asm

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_arm64_asm.asm
        • Size 3KB
        • SHA256 2ec2d897e5246f15383e6a701007a4ce9841cf1ef1d31b892926e6bac2320fb6
        • MD5 SHA1 SHA512 TLSH

        abi_loong64_asm.S

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_loong64_asm.S
        • Size 4KB
        • SHA256 b495099f97aef59b22ce11f520a08cc622469546455745717c44b780428192f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abi_riscv64_asm.S

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_riscv64_asm.S
        • Size 4KB
        • SHA256 45de40bd082fc1d0762df89188e4fdc4d6ab8c9a2a7bca193a3e095aab81f875
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abi_x64_sysv_asm.S

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_x64_sysv_asm.S
        • Size 5KB
        • SHA256 55830267a9687ef43321f268bec922db28f38737b2b7901a9ded131933b32a5d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abi_x64_win_asm.S

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_x64_win_asm.S
        • Size 3KB
        • SHA256 66d5f472d61ede2e914132036473de756df548b0fd244cb487a722cd78890da7
        • MD5 SHA1 SHA512 TLSH

        abi_x64_win_asm.asm

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_x64_win_asm.asm
        • Size 4KB
        • SHA256 6d638107d051c2d0d2c0d2feb67efe10a252c71bed119c71280aecb22f5cb30c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abi_x86_asm.S

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_x86_asm.S
        • Size 4KB
        • SHA256 1d0105e991176b807d39f4ab2b18295a7778c9963060645517873accba09b5a7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abi_x86_asm.asm

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi_x86_asm.asm
        • Size 3KB
        • SHA256 fa8df97b24096427fa8717296e78a100c52606f6f14aa8e8178a77ef6fefee73
        • MD5 SHA1 SHA512 TLSH

        call.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\call.hh
        • Size 4KB
        • SHA256 343688cf8ab6cf96df2e6090b664f4827d12c79a2f8e2287ef26d00278597661
        • MD5 SHA1 SHA512 SSDEEP TLSH

        errno.inc

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\errno.inc
        • Size 8KB
        • SHA256 e33097d18eb694c136bdb0d0dd912dfd1ea62e9cc66f3f3a7efdd4da8b3e8eca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffi.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\ffi.hh
        • Size 8KB
        • SHA256 59d1835bb717ac15092c0868bbbe79c04bf6d7600105364ea349ba3dcb35036d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        init.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\init.js
        • Size 3KB
        • SHA256 76c95aba02c0e8b2df4a0580af41c65f5a2fab8dbbc86cc02e6eb177268d0d9b
        • MD5 SHA1 SHA512 TLSH

        parser.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\parser.hh
        • Size 1KB
        • SHA256 b9234ebdac4bf20dff9197627d97a21c112d94283698b042dcccd9b808872291
        • MD5 SHA1 SHA512 TLSH

        util.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\util.hh
        • Size 6KB
        • SHA256 bc9776889202e16a30623f1b165079fa3c86efce178442e4a04d6c395f2f594a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uv.def

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\uv.def
        • Size 119B
        • SHA256 fea5f7c4132badf3b726e640470109f5431df110ad897bee4406330db055494c
        • MD5 SHA1 SHA512 TLSH

        uv.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\uv.hh
        • Size 858B
        • SHA256 a3db799445482d3ca4177149856160fc52e3129fc1214a5a11a3d55db20bbb92
        • MD5 SHA1 SHA512 TLSH

        win32.hh

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\win32.hh
        • Size 2KB
        • SHA256 486192c4d21f4e65693a6d0ec5596e3dd5b66b5c9dadc16a335906cb5d55347b
        • MD5 SHA1 SHA512 TLSH

        write_trampolines.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\tools\write_trampolines.js
        • Size 1KB
        • SHA256 3ab8e2ca421a950555b9866396ea9d2632d3a70d5674096a20968fd0458cfd7d
        • MD5 SHA1 SHA512 TLSH

        LICENSE.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\LICENSE.md
        • Size 1KB
        • SHA256 89024017b88a9f2b763f79b941a4f2db3b4428edfcacdc0b23866b2da633ad0c
        • MD5 SHA1 SHA512 TLSH

        README.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\README.md
        • Size 4KB
        • SHA256 8a5624af026ea5e9cf311476aa30cf33d9fc2c0c3be40bd7c5d8600a01ff1932
        • MD5 SHA1 SHA512 SSDEEP TLSH

        napi-inl.deprecated.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\napi-inl.deprecated.h
        • Size 6KB
        • SHA256 b66ed1e565e735bbfabcc2f72d466ab7c5414d3ef8851d1af440b81be7f2375c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        napi-inl.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\napi-inl.h
        • Size 230KB
        • SHA256 797668948d7f2df0ee8fcfe734af5b55942768bc7e15e77196a1f1107bba3635
        • MD5 SHA1 SHA512 SSDEEP TLSH

        napi.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\napi.h
        • Size 117KB
        • SHA256 ffb807c34a8b3e346a6d0eacd7c8dbc0bdd92ee06bf42668557568dc54f918e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\LICENSE
        • Size 1KB
        • SHA256 a553508f516031c91f3af1148d44970cb81bbae6c4f091be6835d39cc252238c
        • MD5 SHA1 SHA512 TLSH

        README.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\README.md
        • Size 2KB
        • SHA256 63a4e81d19f02b164d51c4721ff3e88c81d410640de7e1d3520a2c406f0a7d83
        • MD5 SHA1 SHA512 TLSH

        js_native_api.def

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\def\js_native_api.def
        • Size 2KB
        • SHA256 77653a554fbb27f6c5666f4ba05f87d26f0de72bc3d0439961ac030030c2be66
        • MD5 SHA1 SHA512 TLSH

        node_api.def

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\def\node_api.def
        • Size 3KB
        • SHA256 e0d5e3da0520a42e26b563f6321291081bd15bdd20821d46818e5f47900f77d6
        • MD5 SHA1 SHA512 TLSH

        js_native_api.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\js_native_api.h
        • Size 30KB
        • SHA256 0953395662ea63697cd7a77a9320d94aa2829f9c9569abf3a74272b7a2923ce8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        js_native_api_types.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\js_native_api_types.h
        • Size 6KB
        • SHA256 21eebde05d2ee59d315ac27d4aa82434ca88508a0b2cf5819802a00ca523831d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        node_api.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\node_api.h
        • Size 10KB
        • SHA256 2d4560831e525b47b060ec8a0864ab73993df9e20215ce9f0fe7b24cd31af32a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        node_api_types.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\node_api_types.h
        • Size 1KB
        • SHA256 a25356630d3058f0a0c8937d9f297e9471e037fda58c2696d8a505c2bd99cb00
        • MD5 SHA1 SHA512 TLSH

        uv.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv.h
        • Size 71KB
        • SHA256 fddec8c096616675b4578d85222663c8624dce3ee67f5be1c33ba83eb02a827c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        aix.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\aix.h
        • Size 1KB
        • SHA256 bed77e4cf6c06f1224e681cbe607eff04713ca0c1e1f4a102e6a6565ee3f02aa
        • MD5 SHA1 SHA512 TLSH

        bsd.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\bsd.h
        • Size 1KB
        • SHA256 963533ff4b16f72a204a8c760896a857c54d0ac50570f1793e3bef1f2ae8b35f
        • MD5 SHA1 SHA512 TLSH

        darwin.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\darwin.h
        • Size 3KB
        • SHA256 222b6dd3ce67cfbb735b14b1662f065fc23570d6969acf463b39d946b7590d8c
        • MD5 SHA1 SHA512 TLSH

        errno.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\errno.h
        • Size 10KB
        • SHA256 4242edf790e4569ef349026ab4c6e31093334ee5fc02b16ed7a0d9fbacdffd16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        linux.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\linux.h
        • Size 1KB
        • SHA256 adce0ed0821c8466a87a0a4c9e0df9ea7e4a4b24d099c7d7ed196f72a13f669d
        • MD5 SHA1 SHA512 TLSH

        os390.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\os390.h
        • Size 1KB
        • SHA256 98388ae32ce2c4390b82c3529539d2a476c44f590e960ed30a79f72b807ecd02
        • MD5 SHA1 SHA512 TLSH

        posix.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\posix.h
        • Size 1KB
        • SHA256 e9d7218b34e6e89b7b412891b7e2aa8b3a561c5ce9714c1f4def6c8a8593a6a6
        • MD5 SHA1 SHA512 TLSH

        sunos.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\sunos.h
        • Size 1KB
        • SHA256 29d4b4ef48dc3c3ab32d75e0a85bcb80e084d42b32aae40d67fc1d882b93298a
        • MD5 SHA1 SHA512 TLSH

        threadpool.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\threadpool.h
        • Size 1KB
        • SHA256 09ae41099af710289155be012df45c2fce04da6a02e813278b4558935e645938
        • MD5 SHA1 SHA512 TLSH

        tree.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\tree.h
        • Size 35KB
        • SHA256 34393c74082c71ddd5bd9ec4afe30ef03df7fa7bb64be5a50ae070cdfebb5c43
        • MD5 SHA1 SHA512 SSDEEP TLSH

        unix.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\unix.h
        • Size 19KB
        • SHA256 a246095a1476d76631f5ec85be171aee8107eb0423007546ec91c58887c28f02
        • MD5 SHA1 SHA512 SSDEEP TLSH

        version.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\version.h
        • Size 1KB
        • SHA256 aef7fb55ffcece76db9cb7f87d0632e432369747f329679779616cd0721981da
        • MD5 SHA1 SHA512 TLSH

        win.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\uv\win.h
        • Size 33KB
        • SHA256 51b6bf729c4c3e66cd89e0b0b0d734998776e675fe0a5eda9db77b634eb83ef0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\LICENSE
        • Size 1KB
        • SHA256 7686f81e580cd6774f609a2d8a41b2cebdf79bc30e6b46c3efff5a656158981c
        • MD5 SHA1 SHA512 TLSH

        node_sqlite3.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\build\Release\node_sqlite3.node
        • Size 1.8MB
        • SHA256 f806f89dc41dde00ca7124dc1e649bdc9b08ff2eff5c891b764f3e5aefa9548c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        common-sqlite.gypi

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\common-sqlite.gypi
        • Size 1KB
        • SHA256 4d65f2899fb54955218f28ec358a2cad2c2074a7b43f862933c6a35e69ae0632
        • MD5 SHA1 SHA512 TLSH

        extract.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\extract.js
        • Size 224B
        • SHA256 5be353d29c0fabea29cfd34448c196da9506009c0b20fde55e01d4191941dd74
        • MD5 SHA1 SHA512 TLSH

        sqlite-autoconf-3440200.tar.gz

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\sqlite-autoconf-3440200.tar.gz
        • Size 3.1MB
        • SHA256 1c6719a148bc41cf0f2bbbe3926d7ce3f5ca09d878f1246fcc20767b175bb407
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlite3.gyp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\sqlite3.gyp
        • Size 2KB
        • SHA256 8793f62b1133892ba376d18a15f552ef12b1e016f7e5df32ffb7279b760c11bd
        • MD5 SHA1 SHA512 TLSH

        sqlite3-binding.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\lib\sqlite3-binding.js
        • Size 59B
        • SHA256 762c7a74d7f92860a3873487b68e89f654a21d2aaeae9524eab5de9c65e66a9c
        • MD5 SHA1 SHA512 TLSH

        sqlite3.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\lib\sqlite3.js
        • Size 6KB
        • SHA256 8d6b400ae7f69a80d0cdd37a968d7b9a913661fa53475e5b8de49dda21684973
        • MD5 SHA1 SHA512 SSDEEP TLSH

        trace.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\lib\trace.js
        • Size 1KB
        • SHA256 d06caec6136120c6fb7ee3681b1ca949e8b634e747ea8d3080c90f35aeb7728f
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\package.json
        • Size 1KB
        • SHA256 91008a93e604674024bd65569670af5b01f1e4caf86cde50835ee58f59a5dc61
        • MD5 SHA1 SHA512 TLSH

        async.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\async.h
        • Size 1KB
        • SHA256 cce55c56b41cb493ebd43b232ff8ffc9f5a180f5bab2d10372eca6780eb105f6
        • MD5 SHA1 SHA512 TLSH

        backup.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\backup.h
        • Size 6KB
        • SHA256 556ba9af78010f41bc6b5b806743dc728bc181934bf8a7c6e5d606f9b8c7a2e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        database.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\database.h
        • Size 5KB
        • SHA256 8521f458b206ed8f9bf79e2bd869da0a35054b4be44d6ea8c371db207eccb283
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gcc-preinclude.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\gcc-preinclude.h
        • Size 861B
        • SHA256 9d4264bb1dcbef8d927bb3a1809a01b0b89d726c217cee99ea9ccfdc7d456b6f
        • MD5 SHA1 SHA512 TLSH

        macros.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\macros.h
        • Size 10KB
        • SHA256 c25be1861bd8e8457300b218f5fa0bba734f9d1f92b47d3b6ab8ee7c1862ccbe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        statement.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\statement.h
        • Size 6KB
        • SHA256 605633ba0fb1922c16aa5fbfffed52a097f29bf31cee7190d810c24c02de515b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        threading.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\threading.h
        • Size 388B
        • SHA256 e0ab4f798bccb877548b0ab0f3d98c051b36cde240fdf424c70ace7daf0ffd36
        • MD5 SHA1 SHA512 TLSH

        app.protected.jsc

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\app.asar.unpacked\protected\app.protected.jsc
        • Size 3.1MB
        • SHA256 1e1d767104c9d7fdae726d6c5c1cd2b93d562cf719c20d1851b7665097374e6d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\snapshot_blob.bin
        • Size 333KB
        • SHA256 c6ea347fb4987014688f3b07ccf051ff21a81e30fa595aeb3e105cfb4ad27288
        • MD5 SHA1 SHA512 SSDEEP TLSH

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\v8_context_snapshot.bin
        • Size 698KB
        • SHA256 ef9f068c5a1494a02acff29f7c7cdde1a2d10d4ac46ca15b735124e8b48ddace
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\vk_swiftshader.dll
        • Size 5.4MB
        • SHA256 b200865044493fb316dc3d49bc23d559fbedae74c99f7b0cdc1ab8daeb31e4c5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader_icd.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\7z-out\vulkan-1.dll
        • Size 930KB
        • SHA256 1bdcb5d3a2bad797dd3d35ffdf789be9fbcde24622853f9a112c7147f3d51a3e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UAC.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\UAC.dll
        • Size 14KB
        • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WinShell.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH

        nsDialogs.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsExec.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\nsExec.dll
        • Size 6KB
        • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsis7z.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu8ED9.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/1528-28-0x0000000006470000-0x00000000064D6000-memory.dmp

        memory/1528-35-0x0000000007A10000-0x0000000007A46000-memory.dmp

        memory/1528-51-0x00000000739C0000-0x000000007417C000-memory.dmp

        memory/1528-49-0x00000000704E0000-0x000000007083B000-memory.dmp

        memory/1528-48-0x0000000007FE0000-0x0000000008004000-memory.dmp

        memory/1528-47-0x0000000007FB0000-0x0000000007FDA000-memory.dmp

        memory/1528-46-0x0000000007E10000-0x0000000007E1A000-memory.dmp

        memory/1528-45-0x00000000739C0000-0x000000007417C000-memory.dmp

        memory/1528-44-0x0000000007DA0000-0x0000000007DBA000-memory.dmp

        memory/1528-42-0x00000000739C0000-0x000000007417C000-memory.dmp

        memory/1528-43-0x0000000008420000-0x0000000008A9C000-memory.dmp

        memory/1528-41-0x00000000739C0000-0x000000007417C000-memory.dmp

        memory/1528-40-0x0000000007CF0000-0x0000000007D93000-memory.dmp

        memory/1528-39-0x00000000079F0000-0x0000000007A10000-memory.dmp

        memory/1528-36-0x0000000070380000-0x00000000703CC000-memory.dmp

        memory/1528-22-0x00000000739D2000-0x00000000739D3000-memory.dmp

        memory/1528-34-0x0000000006AD0000-0x0000000006B1C000-memory.dmp

        memory/1528-33-0x00000000058C0000-0x00000000058DE000-memory.dmp

        memory/1528-32-0x00000000065C0000-0x000000000691B000-memory.dmp

        memory/1528-29-0x0000000006550000-0x00000000065B6000-memory.dmp

        memory/1528-27-0x00000000063D0000-0x00000000063F2000-memory.dmp

        memory/1528-23-0x00000000031F0000-0x0000000003226000-memory.dmp

        memory/1528-26-0x00000000739C0000-0x000000007417C000-memory.dmp

        memory/1528-25-0x0000000005D50000-0x000000000639A000-memory.dmp

        memory/1528-24-0x00000000739C0000-0x000000007417C000-memory.dmp

        memory/2652-56-0x00000000739C0000-0x000000007417C000-memory.dmp

        memory/2652-55-0x00000000739C0000-0x000000007417C000-memory.dmp

        memory/2652-60-0x0000000070380000-0x00000000703CC000-memory.dmp

        memory/2652-63-0x0000000007AA0000-0x0000000007B36000-memory.dmp

        memory/2652-64-0x0000000007A00000-0x0000000007A11000-memory.dmp

        memory/2652-66-0x00000000739C0000-0x000000007417C000-memory.dmp