Analysis

  • max time kernel
    301s
  • max time network
    281s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    10/08/2026, 20:23

General

  • Target
    DX-Light-3.7.21.exe
  • Size 73.6MB
  • Sample260810-y56tqsswhy
  • SHA256 b73f6a2c757bdd6951cd73578b9baa4f0ae32d2c78cb6b83ec1c2cffd4def191
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 6 IoCs
  • Loads dropped DLL 27 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies Control Panel 4 IoCs
  • Modifies registry class 13 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DX-Light-3.7.21.exe
    "C:\Users\Admin\AppData\Local\Temp\DX-Light-3.7.21.exe"
    1⤵
    • Drops file in Program Files directory
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Modifies Control Panel
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:5812
  • C:\Program Files\DX Light\DX Light.exe
    "C:\Program Files\DX Light\DX Light.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2912
    • C:\Program Files\DX Light\DX Light.exe
      "C:\Program Files\DX Light\DX Light.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\quiklight-desktop /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\quiklight-desktop\Crashpad --url=https://o1422999.ingest.us.sentry.io/api/4508686841675776/minidump/?sentry_key=a1b27d7ea049688e7bce8463e5d7acdc --annotation=_companyName=Robobloq --annotation=_productName=SyncLight --annotation=_version=3.7.21 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=22.3.27 --initial-client-data=0x4c4,0x4c8,0x4cc,0x4c0,0x4d0,0x7ff68b441898,0x7ff68b4418a8,0x7ff68b4418b8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3984
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
      2⤵
      • Executes a command shell one-liner
      • Suspicious use of WriteProcessMemory
      PID:2532
      • C:\Windows\System32\reg.exe
        C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
        3⤵
          PID:908
      • C:\Program Files\DX Light\DX Light.exe
        "C:\Program Files\DX Light\DX Light.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\quiklight-desktop" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1596 --field-trial-handle=1796,i,6256186790255818967,1107312163885563088,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1496
      • C:\Program Files\DX Light\DX Light.exe
        "C:\Program Files\DX Light\DX Light.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\quiklight-desktop" --mojo-platform-channel-handle=1872 --field-trial-handle=1796,i,6256186790255818967,1107312163885563088,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1116
      • C:\Program Files\DX Light\DX Light.exe
        "C:\Program Files\DX Light\DX Light.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\quiklight-desktop" --app-path="C:\Program Files\DX Light\resources\app.asar" --no-sandbox --no-zygote --node-integration-in-worker --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2444 --field-trial-handle=1796,i,6256186790255818967,1107312163885563088,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4332
      • C:\Program Files\DX Light\DX Light.exe
        "C:\Program Files\DX Light\DX Light.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\quiklight-desktop" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2384 --field-trial-handle=1796,i,6256186790255818967,1107312163885563088,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        PID:3432

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          LICENSE

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\LICENSE
          • Size 1KB
          • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
          • MD5 SHA1 SHA512 TLSH

          LICENSES.chromium.html

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\LICENSES.chromium.html
          • Size 6.5MB
          • SHA256 9f3f2b4d9bbd3113486839eca85de119fab766450cdca08a4574b80748885708
          • MD5 SHA1 SHA512 SSDEEP TLSH

          chrome_100_percent.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\chrome_100_percent.pak
          • Size 126KB
          • SHA256 9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          chrome_200_percent.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\chrome_200_percent.pak
          • Size 175KB
          • SHA256 1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          d3dcompiler_47.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\d3dcompiler_47.dll
          • Size 4.7MB
          • SHA256 5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ffmpeg.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\ffmpeg.dll
          • Size 2.6MB
          • SHA256 aad7e7ac9d74ac18892801950c9728e9c4eacd3b676cbb5d6f63382da2ce0559
          • MD5 SHA1 SHA512 SSDEEP TLSH

          icudtl.dat

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\icudtl.dat
          • Size 10.0MB
          • SHA256 97b978a19edd4746e9a44d9a44bb4bc519e127a203c247837ec0922f573449e3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libEGL.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\libEGL.dll
          • Size 473KB
          • SHA256 85f238fb7ace3cbdf7c29c72b01307c440f13491b07a509cbc5b9f257a637164
          • MD5 SHA1 SHA512 SSDEEP TLSH

          libGLESv2.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\libGLESv2.dll
          • Size 7.2MB
          • SHA256 25d49934fc220b169cadeb21fc99dc2a8fb1dd5a4f244265799392f0f5f2f8f8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          af.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\af.pak
          • Size 340KB
          • SHA256 d63222c4a20fa9741f5262634cf9751f22fbb4fcd9d3138d7c8d49e0efb57fba
          • MD5 SHA1 SHA512 SSDEEP TLSH

          am.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\am.pak
          • Size 551KB
          • SHA256 55357baf28716a73f79ac9a6af1ae63972eb79f93c415715518027fc5c528504
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ar.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ar.pak
          • Size 602KB
          • SHA256 e34d5cabaed4634c672591074057c12947bc9e728004228a9e75f87829f4a48a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          bg.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\bg.pak
          • Size 631KB
          • SHA256 fc4a59ea60d04b224765be4916090e97ed8ddda6b136a92a3827ed0fcc64bb0e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          bn.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\bn.pak
          • Size 812KB
          • SHA256 e325d936cd97c3f9ddfca2d87caefb8b6e7465ffa31d0386ae2456b18f7a92da
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ca.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ca.pak
          • Size 384KB
          • SHA256 e1d6b5fd0bc411f2895eaaa1409916f5ffe39a5c6bd1bafe8af7ce33da5be17d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          cs.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\cs.pak
          • Size 393KB
          • SHA256 936466784a55b965d23b016bc49377655bc5d281d012c8369c0809c961e05c74
          • MD5 SHA1 SHA512 SSDEEP TLSH

          da.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\da.pak
          • Size 356KB
          • SHA256 1b0793b1cbeb6a56ff1e64523c37ba753457320aa29f9718022caa07b4981d8f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          de.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\de.pak
          • Size 381KB
          • SHA256 e0f632ce324951002c80e019dd0169be9f6b0640533fa434cd6ca80f28a1d3f7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          el.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\el.pak
          • Size 691KB
          • SHA256 92403b6160e38746597d4dd7f64d64cf19e30b5e7862901263c39679187b2c91
          • MD5 SHA1 SHA512 SSDEEP TLSH

          en-GB.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\en-GB.pak
          • Size 310KB
          • SHA256 463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          en-US.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\en-US.pak
          • Size 313KB
          • SHA256 bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          es-419.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\es-419.pak
          • Size 380KB
          • SHA256 5aff3762747a6e8c6df9f2a3b470bf231b44163006b17ce87e2a03694be27b81
          • MD5 SHA1 SHA512 SSDEEP TLSH

          es.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\es.pak
          • Size 380KB
          • SHA256 267e7b6376e7e5ab806b16fde93bbbcd961bf0c3a7b3a2cabccab37faa9a1d16
          • MD5 SHA1 SHA512 SSDEEP TLSH

          et.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\et.pak
          • Size 342KB
          • SHA256 d984aee4d18ca24a88846b1b6e0294d373733430f30bb4f1b97bc7d50d512c2e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fa.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\fa.pak
          • Size 557KB
          • SHA256 221bbbde078d135f6daca4978a31cc6a82f8f46536467ebc9a0cd322c58a7785
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fi.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\fi.pak
          • Size 351KB
          • SHA256 5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fil.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\fil.pak
          • Size 394KB
          • SHA256 4cd3fa70487e894400ad29e3bfbfba3e1c5edd799aab12c62c3aff3c2580ce5e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          fr.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\fr.pak
          • Size 410KB
          • SHA256 1f6bc09499ee37456968a28b67b81bbf5b9df4f0c6035a388242d2037a3b65a1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          gu.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\gu.pak
          • Size 787KB
          • SHA256 c36a20730d5f2b91cb61b5b2a5912db2ea5a328a9b8abe0fca0af300446d3c20
          • MD5 SHA1 SHA512 SSDEEP TLSH

          he.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\he.pak
          • Size 488KB
          • SHA256 875712bb852c698f677c0c74e088f62d31adb2bce65648fc390607aad8705c45
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hi.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\hi.pak
          • Size 821KB
          • SHA256 1e9623c7407ae8b8a88df3f69a47ae8117f74c4dcb56897bb794a9c38ee5805b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hr.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\hr.pak
          • Size 381KB
          • SHA256 3d7685163c5eb6a11e745ff934312b8681c5f85dfa8d9ea701e9dcaee1e7a285
          • MD5 SHA1 SHA512 SSDEEP TLSH

          hu.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\hu.pak
          • Size 411KB
          • SHA256 3ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          id.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\id.pak
          • Size 336KB
          • SHA256 9210c4c4c33e7ceb5f70005a92a4fd36ca4facdd41701fdc1d2ce638db8adf22
          • MD5 SHA1 SHA512 SSDEEP TLSH

          it.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\it.pak
          • Size 373KB
          • SHA256 c0dc0a4a87f7bb054a30eb1174c3228ea2014bd94668a7d22995b99c4937d817
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ja.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ja.pak
          • Size 456KB
          • SHA256 3accfd9a1833ddeedb2082fb94101beb59b555c60f42e3070e9e04a372eba84a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          kn.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\kn.pak
          • Size 910KB
          • SHA256 90b2df3338468e84e2cf2f2f67597cba5c3ceb5dba9c59ebd072ec15a70ce741
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ko.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ko.pak
          • Size 383KB
          • SHA256 b04c1b91cab31054be70cb851dc6716065545445801045daceb96eeee4d2334a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          lt.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\lt.pak
          • Size 412KB
          • SHA256 9200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350
          • MD5 SHA1 SHA512 SSDEEP TLSH

          lv.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\lv.pak
          • Size 410KB
          • SHA256 b5a31cbfcb40ad8d911de1618c4eb7e8cc67b97eb8878220f15d40eb014d8ac8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ml.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ml.pak
          • Size 948KB
          • SHA256 61a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          mr.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\mr.pak
          • Size 772KB
          • SHA256 481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ms.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ms.pak
          • Size 351KB
          • SHA256 fe58cc4f62fc31e32c1fb9a0893a5483391ab6a91b1c92ed4a5e3103a962da7a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nb.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\nb.pak
          • Size 344KB
          • SHA256 d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nl.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\nl.pak
          • Size 356KB
          • SHA256 55413d5eddb3300e0ae0fa5d79d26fdf1e5a12922d7018c8054b1faa9d660301
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pl.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\pl.pak
          • Size 396KB
          • SHA256 53b59486361b11512fb90f15065104b15ee2322bb7804f859cde2f2ecf9581fb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pt-BR.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\pt-BR.pak
          • Size 374KB
          • SHA256 c9ec3822044365457b8736348cf95a8e39bdfe3ed36267449bf3ed739accef2e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          pt-PT.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\pt-PT.pak
          • Size 376KB
          • SHA256 c89170385b3afb2ec89fbd61b8470ac718713c7296441c8430f173dac218e74b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ro.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ro.pak
          • Size 387KB
          • SHA256 7247470057a936d03bfa2a8776508ab66aa1040c41a4eb8f79c1e93551c74bb8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ru.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ru.pak
          • Size 634KB
          • SHA256 b4223b56ec88235819a427d60bb937eb3984076523f02a018f57819e0429bea9
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sk.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\sk.pak
          • Size 399KB
          • SHA256 75f179897cad221ca6e36b47f53cead7f3fb4159ee196f1d10a5181b84e1b5b7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sl.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\sl.pak
          • Size 385KB
          • SHA256 6002c129a56558832e9bd260c427c0bd2e1566e0aea3ad999f89c8e479534f9b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sr.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\sr.pak
          • Size 595KB
          • SHA256 524acc64e70918a77cda43fd9b27a727645b28ad2d4cce16b327105101c8bbeb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sv.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\sv.pak
          • Size 347KB
          • SHA256 3420a1fbcca5bf8c2d65d6dcb0db78b03f95f7f2fc56479a0de6e3312333ce6f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          sw.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\sw.pak
          • Size 365KB
          • SHA256 690027c4a31c4aea00b7d1b32ec6cd3fa50b1eac412ae273ab15e72eb485dd6e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ta.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ta.pak
          • Size 936KB
          • SHA256 7e818deedd50a533851bbf08e056bf2ad8d45f442a1a61d9b48e66804ea848db
          • MD5 SHA1 SHA512 SSDEEP TLSH

          te.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\te.pak
          • Size 869KB
          • SHA256 d839531c4ff4a2885c993e0d358f78667215b0950c77a06ef01a6acff9221c5b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          th.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\th.pak
          • Size 731KB
          • SHA256 cd80bf232f2f128a3d411f52c8039987559dbc1055f746eed6e0e8478b116dc1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          tr.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\tr.pak
          • Size 371KB
          • SHA256 b22fc7b75c52cc142f201d5cf107d17c1b173a494a6add022127f559fb46bcb0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          uk.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\uk.pak
          • Size 634KB
          • SHA256 28ea88f19b2c34699d535ca0c691449b7e4001c12e8aed8d04b2078916e88a37
          • MD5 SHA1 SHA512 SSDEEP TLSH

          ur.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ur.pak
          • Size 552KB
          • SHA256 4c7affdcc324cd791d10e235da809ce7501e8005be64340b6e8bf5595647a707
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vi.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\vi.pak
          • Size 439KB
          • SHA256 b75694e390bd2e20780b3bc72f6e1473ba45d7537c27642a7d888dfd3bb6c3bb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          zh-CN.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\zh-CN.pak
          • Size 319KB
          • SHA256 a7ac9fda6f4cd189b75fdadc4b70cd0d369a09b66eaeb5d032678cb97ffc98f6
          • MD5 SHA1 SHA512 SSDEEP TLSH

          zh-TW.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\zh-TW.pak
          • Size 316KB
          • SHA256 c5061ec00bd969f76f3c0c6ff15ddacafed7491260bd8ced78118691ba57bdff
          • MD5 SHA1 SHA512 SSDEEP TLSH

          resources.pak

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources.pak
          • Size 5.1MB
          • SHA256 4f29587bcd952de1dbc0b98df0aa506bd9fcf447e6a7258c5eb7e9eb780e6d6c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          app-update.yml

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app-update.yml
          • Size 89B
          • SHA256 d85485b3db97203f85ed8607c500084f71c681654781b18bb11d849dce9d78bf
          • MD5 SHA1 SHA512 TLSH

          app.asar

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar
          • Size 25.6MB
          • SHA256 181202e63c2a27ee8a98f06d5493c64429862bcaa4eea699174bf9d5df363bb3
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@serialport\bindings-cpp\prebuilds\win32-ia32\node.napi.node
          • Size 175KB
          • SHA256 df91e6a6764481b58c95f07a7f81193ae4f99877d1e3da26a05f99664b2f2b23
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@serialport\bindings-cpp\prebuilds\win32-x64\node.napi.node
          • Size 224KB
          • SHA256 2d5d112e2e57054034fa9454e9c33dc306377455d989644f7d4c1b43027eb006
          • MD5 SHA1 SHA512 SSDEEP TLSH

          quiklight.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\quiklight\lib\binding\quiklight.node
          • Size 301KB
          • SHA256 169cef7996649a6481bb93cc41db02b8574b0ce4b3a1f4b74549c9ccc0211e37
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.armv8.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\android-arm64\node.napi.armv8.node
          • Size 291KB
          • SHA256 1f4f296237737fa01cf31790ec1bb0948c7f32015ef3b9ab90e1f3090786c011
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.armv7.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\android-arm\node.napi.armv7.node
          • Size 259KB
          • SHA256 cdc351468846e4c03205694d09c09ba4a8d6cc20ca58e9138d1505db82615270
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\darwin-x64+arm64\node.napi.node
          • Size 557KB
          • SHA256 27754607baee0cf2c907cf6d58a91c9d9a2123f7675a72e9464b6f74aac9a3c1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.armv8.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\linux-arm64\node.napi.armv8.node
          • Size 272KB
          • SHA256 bb6e73a8e8285d680bac99d93fe6ae79557ca9205f52aa1e4fa938fe93193e33
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.armv6.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\linux-arm\node.napi.armv6.node
          • Size 239KB
          • SHA256 c01e7ab46d61132081ab88fed49d4a487a384cf7700ad67bdcc10e1b7814ffef
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.armv7.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\linux-arm\node.napi.armv7.node
          • Size 239KB
          • SHA256 cd9b67c26a6592862c13a310ccf63f83e43bc8e75580b4e6011b7baec809c885
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\linux-ia32\node.napi.node
          • Size 321KB
          • SHA256 3a995b9c4633dd0d995e7e97e7aa321440f1c05f1a71a306f99da821569fe066
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.glibc.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\linux-x64\node.napi.glibc.node
          • Size 284KB
          • SHA256 fbbe12c009f1ad4aba6c8b3c489233ecaf98d25b4b15daeba2e3c9f9c86fc75d
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.musl.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\linux-x64\node.napi.musl.node
          • Size 282KB
          • SHA256 7733a5ad437746de6fe3abc88f904be443fe395fe99b946027100a7e3ae26dcb
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\win32-arm64\node.napi.node
          • Size 691KB
          • SHA256 86f724f89d5166c82d779ecd490b67944098e5026285ba357f37be11327684c7
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\win32-ia32\node.napi.node
          • Size 538KB
          • SHA256 af2bb8f687e9b0aa6cf182bfafd4d82ae13a2902f1333b1d0642d45009f4c78f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\win32-x64\node.napi.node
          • Size 681KB
          • SHA256 a7e4f777ed3d1753d60020578ad92af2e3b7e3cce804699ed10493a3d932b320
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node-napi-v3.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-darwin-arm64\node-napi-v3.node
          • Size 198KB
          • SHA256 0ce780aeeb1e9c7f7850325990fd3c7f8fc11cdf3adf6f6a173aaacc861d798b
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node-napi-v3.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-darwin-x64\node-napi-v3.node
          • Size 182KB
          • SHA256 b31148f180b7ad348b5d34258341205c0c90879297b18e200dba4416950924e0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node-napi-v3.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-linux-arm64\node-napi-v3.node
          • Size 211KB
          • SHA256 f07204583083835f887cdc19b51281bdfefb858736371c5c4c07730bbd266d79
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node-napi-v3.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-linux-arm\node-napi-v3.node
          • Size 140KB
          • SHA256 cacd01b510fa7bb990853d241c28b12618029fc887aa719204bb543734ea524a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node-napi-v3.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-linux-x64-musl\node-napi-v3.node
          • Size 245KB
          • SHA256 e06ea75ed09de9c486b4b8b7c8a0655b1096593955f06c7ac22d8d9b923b06e4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node-napi-v3.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-linux-x64\node-napi-v3.node
          • Size 231KB
          • SHA256 43a558956b7f7bfc94c270faf861fd1b0276c9247a58d8fda0c0ed0ddbc61787
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node-napi-v3.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-win32-ia32\node-napi-v3.node
          • Size 469KB
          • SHA256 5f286bba3b661b278261356b5d476386923b6f97e2b41e4e7e66cc182fda5257
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node-napi-v3.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-win32-x64\node-napi-v3.node
          • Size 613KB
          • SHA256 5eec7398592cb3a009eb3fce46243f64429429fdb7426fa212dc149fcd3d28fa
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node-napi-v3.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID_hidraw-linux-arm64\node-napi-v3.node
          • Size 199KB
          • SHA256 5c036de425ee8ec85ecaf99c7b9fe488d901fd54d88b2f8a8949c54b05fb626c
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node-napi-v3.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID_hidraw-linux-arm\node-napi-v3.node
          • Size 134KB
          • SHA256 a5b4addb9a800fd605d1587da97d10d9f7941638a4f2ac738967a1be7d6eb5bf
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node-napi-v3.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID_hidraw-linux-x64-musl\node-napi-v3.node
          • Size 230KB
          • SHA256 df9df4565fd758a82126f8e408011958f824b26482b288a557071bab7f0db4f4
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node-napi-v3.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID_hidraw-linux-x64\node-napi-v3.node
          • Size 215KB
          • SHA256 69fb5fb4124c0a7d20defca43420873e38bb1b1af3f9a5072285581ede58dda1
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.armv8.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\android-arm64\node.napi.armv8.node
          • Size 267KB
          • SHA256 7979549425402d9fd75fb3ac7c2dd26b6884771e53c488f775aed9f90a9df7a8
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.armv7.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\android-arm\node.napi.armv7.node
          • Size 249KB
          • SHA256 b4d152765fade095183487f08e33f50e2e4dec3b517e01a8f1a311c6ae0d1d6f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\darwin-x64+arm64\node.napi.node
          • Size 567KB
          • SHA256 e7c296a32998cdf5d05f88b4b66627ba16e15e4089c7dd62b7d7bacbe2053980
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.armv8.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-arm64\node.napi.armv8.node
          • Size 252KB
          • SHA256 101ac804446c81997cd43c544a9046b2d21ed18ad3a960b8820b0068976c6b63
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.armv6.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-arm\node.napi.armv6.node
          • Size 227KB
          • SHA256 771d34dd9e582502eee89eea5b59d6b05858d65a2ea12018450a6b4a0108620f
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.armv7.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-arm\node.napi.armv7.node
          • Size 227KB
          • SHA256 cc5df5eb0a977993c32f1f3500222622f7c72abd324bebbd7ed1040b648d3320
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-ia32\node.napi.node
          • Size 301KB
          • SHA256 da64f84eacdf4b791916f1d463a10ff071cb5c142ab8acd3a13a71d2d42dcc6a
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.glibc.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-x64\node.napi.glibc.node
          • Size 264KB
          • SHA256 4d315fe6953802b240754371d21435ad6aa3a3f844408a42453da204264c2257
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.musl.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-x64\node.napi.musl.node
          • Size 266KB
          • SHA256 e04ff70d4dee89356099c52d6b533a958283d07010786a9bd9ed3501570e0101
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\win32-ia32\node.napi.node
          • Size 525KB
          • SHA256 1d2fc38aa3ecadd30e0967ec727c1744afe86e0b5c2ca1a527fc6ef2f3449d96
          • MD5 SHA1 SHA512 SSDEEP TLSH

          node.napi.node

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\win32-x64\node.napi.node
          • Size 698KB
          • SHA256 0c5b0c120d215680f3b9db514cddcb12922ddd228f5c780cec83a31fd8fa40f0
          • MD5 SHA1 SHA512 SSDEEP TLSH

          elevate.exe

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\elevate.exe
          • Size 105KB
          • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
          • MD5 SHA1 SHA512 SSDEEP TLSH

          tray.png

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\static\osx\tray.png
          • Size 1KB
          • SHA256 598f5465fb5fecca46940783daf6a0369146e83618734c5be6d8ce9948bd8598
          • MD5 SHA1 SHA512 TLSH
          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\static\osx\[email protected]
          • Size 2KB
          • SHA256 e107b801176d9565ab120be14477f7c59edbf5058509c70b8d0b6273e58c52f8
          • MD5 SHA1 SHA512 TLSH

          tray.ico

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\static\win\tray.ico
          • Size 1KB
          • SHA256 43f943fe3803c6f2be3ab591816e197e415212cae8c9056112b4bb793bfaa01f
          • MD5 SHA1 SHA512 TLSH

          snapshot_blob.bin

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\snapshot_blob.bin
          • Size 168KB
          • SHA256 8613412ebcf462373d4d50f5729f5b9a61ef2b5c599b267f750276c8e29caf25
          • MD5 SHA1 SHA512 SSDEEP TLSH

          v8_context_snapshot.bin

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\v8_context_snapshot.bin
          • Size 471KB
          • SHA256 add78f3f85f0b173cbe917871821f74c5afe0a6562462762b181180d16df4470
          • MD5 SHA1 SHA512 SSDEEP TLSH

          version

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\version
          • Size 7B
          • SHA256 a0284d55dd0a3caa73f370b843bf9d52fe38adef2250ffc91db485b3b063daa6
          • MD5 SHA1 SHA512

          vk_swiftshader.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\vk_swiftshader.dll
          • Size 4.9MB
          • SHA256 a32c3fbbf74699a10e7642bf4901191f29c88c5aec93ae7ba28c79ab28462a69
          • MD5 SHA1 SHA512 SSDEEP TLSH

          vk_swiftshader_icd.json

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\vk_swiftshader_icd.json
          • Size 106B
          • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
          • MD5 SHA1 SHA512 TLSH

          vulkan-1.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\vulkan-1.dll
          • Size 894KB
          • SHA256 1f8b647f161f20d45d554e349b3e5ef0b7b5da8c7bdbc1ff631d37dc9c819503
          • MD5 SHA1 SHA512 SSDEEP TLSH

          StdUtils.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\StdUtils.dll
          • Size 100KB
          • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
          • MD5 SHA1 SHA512 SSDEEP TLSH

          System.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\System.dll
          • Size 12KB
          • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
          • MD5 SHA1 SHA512 SSDEEP TLSH

          UAC.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\UAC.dll
          • Size 14KB
          • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
          • MD5 SHA1 SHA512 SSDEEP TLSH

          WinShell.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\WinShell.dll
          • Size 3KB
          • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
          • MD5 SHA1 SHA512 TLSH

          nsDialogs.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\nsDialogs.dll
          • Size 9KB
          • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nsProcess.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\nsProcess.dll
          • Size 4KB
          • SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
          • MD5 SHA1 SHA512 SSDEEP TLSH

          nsis7z.dll

          • Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\nsis7z.dll
          • Size 424KB
          • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
          • MD5 SHA1 SHA512 SSDEEP TLSH

          default.exc

          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
          • Size 2B
          • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
          • MD5 SHA1 SHA512

          data_0

          • Path C:\Users\Admin\AppData\Roaming\quiklight-desktop\DawnCache\data_0
          • Size 8KB
          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
          • MD5 SHA1 SHA512 SSDEEP

          data_1

          • Path C:\Users\Admin\AppData\Roaming\quiklight-desktop\DawnCache\data_1
          • Size 264KB
          • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
          • MD5 SHA1 SHA512 SSDEEP

          data_2

          • Path C:\Users\Admin\AppData\Roaming\quiklight-desktop\DawnCache\data_2
          • Size 8KB
          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
          • MD5 SHA1 SHA512 SSDEEP

          data_3

          • Path C:\Users\Admin\AppData\Roaming\quiklight-desktop\DawnCache\data_3
          • Size 8KB
          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
          • MD5 SHA1 SHA512 SSDEEP

          Network Persistent State

          • Path C:\Users\Admin\AppData\Roaming\quiklight-desktop\Network\Network Persistent State
          • Size 300B
          • SHA256 2a62145242a92a3132d486bab358abd484b566fa4d0a3bc5177983177f30be93
          • MD5 SHA1 SHA512 TLSH

          Network Persistent State~RFe5a9c8f.TMP

          • Path C:\Users\Admin\AppData\Roaming\quiklight-desktop\Network\Network Persistent State~RFe5a9c8f.TMP
          • Size 59B
          • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
          • MD5 SHA1 SHA512 TLSH

          memory/1496-771-0x00007FFB171C0000-0x00007FFB171C1000-memory.dmp

          memory/3432-866-0x000001DD52210000-0x000001DD52211000-memory.dmp

          memory/3432-868-0x000001DD52210000-0x000001DD52211000-memory.dmp

          memory/3432-877-0x000001DD52210000-0x000001DD52211000-memory.dmp

          memory/3432-876-0x000001DD52210000-0x000001DD52211000-memory.dmp

          memory/3432-875-0x000001DD52210000-0x000001DD52211000-memory.dmp

          memory/3432-874-0x000001DD52210000-0x000001DD52211000-memory.dmp

          memory/3432-873-0x000001DD52210000-0x000001DD52211000-memory.dmp

          memory/3432-872-0x000001DD52210000-0x000001DD52211000-memory.dmp