Overview
overview
7Static
static
3DX-Light-3.7.21.exe
windows10-2004-x64
5DX-Light-3.7.21.exe
windows11-ltsc_2024-x64
4$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/app-64.7z
windows10-2004-x64
1$PLUGINSDIR/app-64.7z
windows11-ltsc_2024-x64
1DX Light.exe
windows10-2004-x64
7DX Light.exe
windows11-ltsc_2024-x64
3LICENSES.c...m.html
windows10-2004-x64
3LICENSES.c...m.html
windows11-ltsc_2024-x64
3d3dcompiler_47.dll
windows10-2004-x64
1ffmpeg.dll
windows10-2004-x64
1ffmpeg.dll
windows11-ltsc_2024-x64
1libEGL.dll
windows10-2004-x64
1libEGL.dll
windows11-ltsc_2024-x64
1libGLESv2.dll
windows10-2004-x64
1libGLESv2.dll
windows11-ltsc_2024-x64
1resources/...pi.dll
windows10-2004-x64
3resources/...pi.dll
windows11-ltsc_2024-x64
3resources/...pi.dll
windows10-2004-x64
1resources/...pi.dll
windows11-ltsc_2024-x64
1resources/...ht.dll
windows10-2004-x64
1resources/...ht.dll
windows11-ltsc_2024-x64
1resources/...7.node
debian-12-armhf
1resources/...8.node
ubuntu-18.04-amd64
resources/...8.node
debian-9-armhf
Analysis
- max time kernel
301s - max time network
281s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260709-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
10/08/2026, 20:23
Static task
static1
Behavioral task
behavioral1
Sample
DX-Light-3.7.21.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
DX-Light-3.7.21.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/UAC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/app-64.7z
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/app-64.7z
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral13
Sample
DX Light.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
DX Light.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
LICENSES.chromium.html
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
LICENSES.chromium.html
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral17
Sample
d3dcompiler_47.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
ffmpeg.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral19
Sample
ffmpeg.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral20
Sample
libEGL.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral21
Sample
libEGL.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral22
Sample
libGLESv2.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral23
Sample
libGLESv2.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral24
Sample
resources/app.asar.unpacked/node_modules/@serialport/bindings-cpp/prebuilds/win32-ia32/node.napi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral25
Sample
resources/app.asar.unpacked/node_modules/@serialport/bindings-cpp/prebuilds/win32-ia32/node.napi.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral26
Sample
resources/app.asar.unpacked/node_modules/@serialport/bindings-cpp/prebuilds/win32-x64/node.napi.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral27
Sample
resources/app.asar.unpacked/node_modules/@serialport/bindings-cpp/prebuilds/win32-x64/node.napi.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral28
Sample
resources/app.asar.unpacked/node_modules/@warren-robobloq/quiklight/lib/binding/quiklight.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral29
Sample
resources/app.asar.unpacked/node_modules/@warren-robobloq/quiklight/lib/binding/quiklight.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral30
Sample
resources/app.asar.unpacked/node_modules/@warren-robobloq/usb/prebuilds/android-arm/node.napi.armv7.node
Resource
debian12-armhf-20260513-en
Behavioral task
behavioral31
Sample
resources/app.asar.unpacked/node_modules/@warren-robobloq/usb/prebuilds/android-arm64/node.napi.armv8.node
Resource
ubuntu1804-amd64-20260513-en
Behavioral task
behavioral32
Sample
resources/app.asar.unpacked/node_modules/@warren-robobloq/usb/prebuilds/android-arm64/node.napi.armv8.node
Resource
debian9-armhf-20260513-en
General
- Target DX-Light-3.7.21.exe
- Size 73.6MB
- Sample260810-y56tqsswhy
- SHA256 b73f6a2c757bdd6951cd73578b9baa4f0ae32d2c78cb6b83ec1c2cffd4def191
- MD5 d02ee4700ed14aa42804ad6dda8c63b7
- SHA1 410450e084d514736aad3659b56d99a20218ae66
- SHA512 03b8be51231aa168a62d590880382559163ea12fca2d5e67637b9b6023592c6c3697800d018d8fb5d0531c3b181bc0b34f508e9bebc82ea54eda1e5a941c0db8
- SSDEEP 1572864:UG5kJoE4EcPO/QcTe/FEd67As/ph6/MTuo3yfYHldq4h:UOE4JO/QcTeOd60shqMaoQYHes
- TLSH T1120833922D782859F9D5CE783385DA1219EE0D00A49E2F4FF90C76C33A3AC59167B67C
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
- Drops file in Program Files directory 64 IoCs
description ioc Process File created C:\Program Files\DX Light\d3dcompiler_47.dll DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\ar.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\mr.pak DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\linux-arm DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\win32-ia32 DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-ia32\node.napi.node DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\static\osx\[email protected] DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\pl.pak DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\usb\prebuilds\win32-x64 DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\sl.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\sr.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\ta.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\@warren-robobloq\quiklight\lib\binding\quiklight.node DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\darwin-x64+arm64\node.napi.node DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-linux-x64-musl DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\es-419.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\fa.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\gu.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\hr.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-darwin-x64\node-napi-v3.node DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-arm\node.napi.armv6.node DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-arm64 DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\usb\prebuilds\win32-ia32\node.napi.node DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\en-US.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\es.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\nb.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\te.pak DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\@warren-robobloq DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\@warren-robobloq\quiklight DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-linux-arm64 DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-arm DX-Light-3.7.21.exe File created C:\Program Files\DX Light\LICENSE DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\fil.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\app.asar DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\@serialport\bindings-cpp\prebuilds\win32-ia32\node.napi.node DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\linux-arm\node.napi.armv6.node DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\usb DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-x64\node.napi.glibc.node DX-Light-3.7.21.exe File created C:\Program Files\DX Light\chrome_100_percent.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\LICENSES.chromium.html DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\en-GB.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\pt-BR.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\nl.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\vi.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\android-arm\node.napi.armv7.node DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID_hidraw-linux-x64-musl\node-napi-v3.node DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\ca.pak DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\darwin-x64+arm64 DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID_hidraw-linux-arm DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID_hidraw-linux-x64-musl DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\static\osx DX-Light-3.7.21.exe File created C:\Program Files\DX Light\vk_swiftshader_icd.json DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\ko.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\locales\zh-TW.pak DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\elevate.exe DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\usb\prebuilds\android-arm DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\usb\prebuilds\darwin-x64+arm64 DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\static DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked DX-Light-3.7.21.exe File opened for modification C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\win32-arm64 DX-Light-3.7.21.exe File created C:\Program Files\DX Light\snapshot_blob.bin DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\linux-x64\node.napi.musl.node DX-Light-3.7.21.exe File created C:\Program Files\DX Light\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-arm\node.napi.armv7.node DX-Light-3.7.21.exe - Executes dropped EXE 6 IoCs
pid Process 2912 DX Light.exe 3984 DX Light.exe 1496 DX Light.exe 1116 DX Light.exe 4332 DX Light.exe 3432 DX Light.exe - Loads dropped DLL 27 IoCs
pid Process 5812 DX-Light-3.7.21.exe 5812 DX-Light-3.7.21.exe 5812 DX-Light-3.7.21.exe 5812 DX-Light-3.7.21.exe 5812 DX-Light-3.7.21.exe 5812 DX-Light-3.7.21.exe 5812 DX-Light-3.7.21.exe 5812 DX-Light-3.7.21.exe 5812 DX-Light-3.7.21.exe 5812 DX-Light-3.7.21.exe 5812 DX-Light-3.7.21.exe 2912 DX Light.exe 2912 DX Light.exe 2912 DX Light.exe 2912 DX Light.exe 3984 DX Light.exe 1496 DX Light.exe 1116 DX Light.exe 1496 DX Light.exe 4332 DX Light.exe 1496 DX Light.exe 1496 DX Light.exe 1496 DX Light.exe 1496 DX Light.exe 2912 DX Light.exe 3432 DX Light.exe 3432 DX Light.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- Executes a command shell one-liner 1 TTPs 1 IoCs
Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.
pid Process 2532 cmd.exe - System Location Discovery: System Language Discovery 1 TTPs 1 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language DX-Light-3.7.21.exe - Modifies Control Panel 4 IoCs
description ioc Process Key created \REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000\Control Panel\Desktop DX-Light-3.7.21.exe Set value (str) \REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000\Control Panel\Desktop\AutoEndTasks = "1" DX-Light-3.7.21.exe Set value (str) \REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000\Control Panel\Desktop\HungAppTimeout = "5000" DX-Light-3.7.21.exe Set value (str) \REGISTRY\USER\S-1-5-21-1079202589-886135813-2527035092-1000\Control Panel\Desktop\WaitToKillAppTimeout = "30000" DX-Light-3.7.21.exe - Modifies registry class 13 IoCs
description ioc Process Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Robobloq\shell\open\command\ = "C:\\Program Files\\DX Light\\DX Light.exe \"%1\"" DX-Light-3.7.21.exe Key created \REGISTRY\MACHINE\Software\Classes\.qlt DX-Light-3.7.21.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.qlt\Robobloq_backup DX-Light-3.7.21.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\.qlt\ = "Robobloq" DX-Light-3.7.21.exe Key created \REGISTRY\MACHINE\Software\Classes\Robobloq DX-Light-3.7.21.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Robobloq\ DX-Light-3.7.21.exe Key created \REGISTRY\MACHINE\Software\Classes\Robobloq\DefaultIcon DX-Light-3.7.21.exe Key created \REGISTRY\MACHINE\Software\Classes\Robobloq\shell DX-Light-3.7.21.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Robobloq\shell\ = "open" DX-Light-3.7.21.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Robobloq\DefaultIcon\ = "C:\\Program Files\\DX Light\\DX Light.exe,0" DX-Light-3.7.21.exe Key created \REGISTRY\MACHINE\Software\Classes\Robobloq\shell\open DX-Light-3.7.21.exe Set value (str) \REGISTRY\MACHINE\SOFTWARE\Classes\Robobloq\shell\open\ = "Open with DX Light" DX-Light-3.7.21.exe Key created \REGISTRY\MACHINE\Software\Classes\Robobloq\shell\open\command DX-Light-3.7.21.exe - Suspicious behavior: EnumeratesProcesses 12 IoCs
pid Process 5812 DX-Light-3.7.21.exe 5812 DX-Light-3.7.21.exe 5812 DX-Light-3.7.21.exe 5812 DX-Light-3.7.21.exe 5812 DX-Light-3.7.21.exe 5812 DX-Light-3.7.21.exe 2912 DX Light.exe 2912 DX Light.exe 2912 DX Light.exe 2912 DX Light.exe 3432 DX Light.exe 3432 DX Light.exe - Suspicious use of AdjustPrivilegeToken 64 IoCs
description pid Process Token: SeSecurityPrivilege 5812 DX-Light-3.7.21.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe Token: SeCreatePagefilePrivilege 2912 DX Light.exe Token: SeShutdownPrivilege 2912 DX Light.exe - Suspicious use of FindShellTrayWindow 2 IoCs
pid Process 2912 DX Light.exe 2912 DX Light.exe - Suspicious use of SendNotifyMessage 2 IoCs
pid Process 2912 DX Light.exe 2912 DX Light.exe - Suspicious use of WriteProcessMemory 8 IoCs
description pid Process procid_target PID 2912 wrote to memory of 3984 2912 DX Light.exe 91 PID 2912 wrote to memory of 2532 2912 DX Light.exe 92 PID 2532 wrote to memory of 908 2532 cmd.exe 94 PID 2912 wrote to memory of 1496 2912 DX Light.exe 95 PID 2912 wrote to memory of 1496 2912 DX Light.exe 95 PID 2912 wrote to memory of 1116 2912 DX Light.exe 96 PID 2912 wrote to memory of 4332 2912 DX Light.exe 97 PID 2912 wrote to memory of 3432 2912 DX Light.exe 99
Processes
-
C:\Users\Admin\AppData\Local\Temp\DX-Light-3.7.21.exe"C:\Users\Admin\AppData\Local\Temp\DX-Light-3.7.21.exe"1⤵
- Drops file in Program Files directory
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies Control Panel
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:5812
-
C:\Program Files\DX Light\DX Light.exe"C:\Program Files\DX Light\DX Light.exe"1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2912 -
C:\Program Files\DX Light\DX Light.exe"C:\Program Files\DX Light\DX Light.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\quiklight-desktop /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\quiklight-desktop\Crashpad --url=https://o1422999.ingest.us.sentry.io/api/4508686841675776/minidump/?sentry_key=a1b27d7ea049688e7bce8463e5d7acdc --annotation=_companyName=Robobloq --annotation=_productName=SyncLight --annotation=_version=3.7.21 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=22.3.27 --initial-client-data=0x4c4,0x4c8,0x4cc,0x4c0,0x4d0,0x7ff68b441898,0x7ff68b4418a8,0x7ff68b4418b82⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3984
-
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"2⤵
- Executes a command shell one-liner
- Suspicious use of WriteProcessMemory
PID:2532 -
C:\Windows\System32\reg.exeC:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid3⤵PID:908
-
-
-
C:\Program Files\DX Light\DX Light.exe"C:\Program Files\DX Light\DX Light.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\quiklight-desktop" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1596 --field-trial-handle=1796,i,6256186790255818967,1107312163885563088,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:22⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1496
-
-
C:\Program Files\DX Light\DX Light.exe"C:\Program Files\DX Light\DX Light.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\quiklight-desktop" --mojo-platform-channel-handle=1872 --field-trial-handle=1796,i,6256186790255818967,1107312163885563088,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:82⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1116
-
-
C:\Program Files\DX Light\DX Light.exe"C:\Program Files\DX Light\DX Light.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\quiklight-desktop" --app-path="C:\Program Files\DX Light\resources\app.asar" --no-sandbox --no-zygote --node-integration-in-worker --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2444 --field-trial-handle=1796,i,6256186790255818967,1107312163885563088,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:12⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4332
-
-
C:\Program Files\DX Light\DX Light.exe"C:\Program Files\DX Light\DX Light.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\quiklight-desktop" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2384 --field-trial-handle=1796,i,6256186790255818967,1107312163885563088,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:22⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
PID:3432
-
Network
MITRE ATT&CK Enterprise v16
Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\LICENSE
- Size 1KB
- SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
- MD5 4d42118d35941e0f664dddbd83f633c5
- SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
- SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
- TLSH T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\LICENSES.chromium.html
- Size 6.5MB
- SHA256 9f3f2b4d9bbd3113486839eca85de119fab766450cdca08a4574b80748885708
- MD5 796505037e030807d9ddd01c93eb353b
- SHA1 79a1eac3b505e6d94a6206d4a5198d3cc11ab038
- SHA512 9435273a4541a579a427a295be47af8b81133896f50c97bab1d8ab391089f90186a7fd057b53e8b74829e4747e98428d8b4d242eb6854b1304a94a2891c2fd11
- SSDEEP 24576:8Pjy5WjWSpgDrAV8gmfwN6i6w6C6g6T+gH3BMbp0W:oJDN
- TLSH T19866942F7B48037306C602A2AB8BA5CBF21B903F3B565654345CD1681F6BE2543FB6D9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\chrome_100_percent.pak
- Size 126KB
- SHA256 9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e
- MD5 d31f3439e2a3f7bee4ddd26f46a2b83f
- SHA1 c5a26f86eb119ae364c5bf707bebed7e871fc214
- SHA512 aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5
- SSDEEP 3072:5KzwqCT4waJL2myFhPNL2o418Gb0+VRLf0ld0GY3cQ39Vm2I:5Kzwt4LwmU3K18Gb0OV8ld0GecQ3f2
- TLSH T1B6C3E0D3B3F4EE7DDE9756B7A2160072ECB346640AD1424A178ED8362A36748D9C8783
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\chrome_200_percent.pak
- Size 175KB
- SHA256 1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c
- MD5 5604b67e3f03ab2741f910a250c91137
- SHA1 a4bb15ac7914c22575f1051a29c448f215fe027f
- SHA512 5e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d
- SSDEEP 3072:+DQYaEQN6AJPRJL2myFhPNafR54x5GMR+F44ffbdZnYw9p4AbIVGYoDd+HxNK/r4:+DQYaNN68RwmU0gx5GMRejnbdZnVE6YR
- TLSH T15304E1D773F89E7CC9630AB7622601F1ECF2113559B6525B17CF9C353A96B8889C8283
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\d3dcompiler_47.dll
- Size 4.7MB
- SHA256 5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
- MD5 cb9807f6cf55ad799e920b7e0f97df99
- SHA1 bb76012ded5acd103adad49436612d073d159b29
- SHA512 f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62
- SSDEEP 49152:IuhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8cc:oy904wYbZCoOI85oyI
- TLSH T19E367D5673E940A9C1BBD138CE478213EBB1781403345BEB5191C669EF73BE26A3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\ffmpeg.dll
- Size 2.6MB
- SHA256 aad7e7ac9d74ac18892801950c9728e9c4eacd3b676cbb5d6f63382da2ce0559
- MD5 00ffabbb9438a0da15a021451a9c2d0d
- SHA1 4bb79fe2b09962c6c46b70d7dfb1f9d9604a22dc
- SHA512 989d8d0afd3ce64c65a90d1046f28b19e5b125f8b5a565b76b8c950d152d3b9a57d68126888321c7cd8a4985249c1ec649c453e7501aaa4ff60d9662afd85f34
- SSDEEP 49152:cqMAAYNDEmcTfAZMHkwfPYX6Edxhi1uGaVrFY7Q9b5hpN3lzl3hHLNoJX:cGDfRMHR8rFYU5hNA
- TLSH T1C2D5AE07F6D600E9D01DC574879F9233F631384A4B24A5EB1A91AA242F7BFD46E3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\icudtl.dat
- Size 10.0MB
- SHA256 97b978a19edd4746e9a44d9a44bb4bc519e127a203c247837ec0922f573449e3
- MD5 76bef9b8bb32e1e54fe1054c97b84a10
- SHA1 05dfea2a3afeda799ab01bb7fbce628cacd596f4
- SHA512 7330df8129e7a0b7b3655498b2593321595ec29445ea193c8f473c593590f5701eb7125ff6e5cde970c54765f9565fa51c2c54af6e2127f582ab45efa7a3a0f6
- SSDEEP 196608:p5zwSv9AAyse6liXUxCGZHa93Whlw6ZCXU0:pyKlysTliXUxCGZHa93Whlw6ZCX1
- TLSH T101B62807A2FB8DC2F9F76F30D9F452679567BD496E32805A11042F3B1C337A08661BA6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\libEGL.dll
- Size 473KB
- SHA256 85f238fb7ace3cbdf7c29c72b01307c440f13491b07a509cbc5b9f257a637164
- MD5 ef4291ace01485ee773183ee3c1ed5c4
- SHA1 9c9d32813a733ebceb25c0dbb9f85ef27f6e0a0f
- SHA512 a98bfe1845a712943687f0b20d1904bae1b6836ea37f8a2053872f938dceb2f391fadd3db034c0b8563c0b1ab3d4506d13b613ed51780ef10e813c085c830f82
- SSDEEP 6144:VTv0fq4dz9B4x4w/jvtGW9ZST3BypG48yOnb4pgsHVlAYnReZRO8:VTN4dNw/jvtGW9c3BypaagYnKRO
- TLSH T10FA47C11779954A8D03AC434CA134612EA76B8960F35FADF02A4D27D2F77BF85B3A720
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\libGLESv2.dll
- Size 7.2MB
- SHA256 25d49934fc220b169cadeb21fc99dc2a8fb1dd5a4f244265799392f0f5f2f8f8
- MD5 60e42e83b260582fc96aaf43293d99e1
- SHA1 c548a10873f9a57e18c7fbb1fe89685f4cf1ba84
- SHA512 6a905e2b9427fb6e4a53080afdc2ae9dc32c54aab5460f88f7d3fd16e7e9a841d332057f58942d54defe91361a54d3cbedba295399cead754f353f80f92f238b
- SSDEEP 49152:Rs95E5fqF3q/xEpLJgw7yQj1+lSWsucneTA4fwEmN428bbvbgNqay6q/iyGtxJe5:2lq3ZieHhogDbBztUecv7r7frgsOMG
- TLSH T179766B07E6A581E9C05ED2B88B5B9222FD30BC4A4734B2DF266437112F77BE06B79750
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\af.pak
- Size 340KB
- SHA256 d63222c4a20fa9741f5262634cf9751f22fbb4fcd9d3138d7c8d49e0efb57fba
- MD5 198092a7a82efced4d59715bd3e41703
- SHA1 ac3cdfba133330fce825816b2f9579ac240dc176
- SHA512 590dcc02bc3411fa585321a09f2033ca1839dd67b083622be412d60683c2c086aac81a27bc56029101f6158515cc6ae4def39d3f246b7499b30d02690904af0d
- SSDEEP 6144:ptbDrUln/WiOvz9P5D4uEmv0XPjC6nAcbaK6pgwwexhsVxS42K6tA3pU5tpwDw44:ptfOOiOvzg/mCPjC6nAcbipgwwePSS4C
- TLSH T1AF741B0AD781277D09E07596FA0445F7BB9CA26CC770B2BADD9D823209A2EFC017D5D8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\am.pak
- Size 551KB
- SHA256 55357baf28716a73f79ac9a6af1ae63972eb79f93c415715518027fc5c528504
- MD5 952933d2d388683c91ee7eaa7539e625
- SHA1 7a0f5a10d7d61c32577c0d027db8c66c27e56c7d
- SHA512 5aa5ef0ed1da98b36840389e694dc5dcef496524314b61603d0c5ee03a663bb4c753623fb400792754b51331df20ac6d9cf97c183922f19fc0072822688f988d
- SSDEEP 12288:WcWln6HuPPL8xJTgWHsEaYM5g9yaAVmHukPQyx30jH8+I:WR6YL8xOWHbaYM5g9yaAVmvPQ+
- TLSH T1ACC4CB547DF9F7170F8E8A19A4310E4EA594AD4692813C38C35AE3FC2B2DF1B4DDA219
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ar.pak
- Size 602KB
- SHA256 e34d5cabaed4634c672591074057c12947bc9e728004228a9e75f87829f4a48a
- MD5 98f8a48892b41e64bef135b86f3d4a6c
- SHA1 32f8d57ec505332f711b9203aed969704bd97bc9
- SHA512 6ed3fe415b2f6de24136917da870b47c653d15c7a561baae55a285946a6f75e5141aba3bc064982f99baef0a893266693864c2d603c5c22c2b95627b2035f7a4
- SSDEEP 12288:R2adfMtqtWP8QvYUjBLM6kXBz5ANbT+NTgTbMMgSEN7o:R2YBS2H15o+u
- TLSH T1A0D49BE21B2984720B96DF0FD1E23668E872BD23DB4BFC3124934A2156D7513E78E635
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\bg.pak
- Size 631KB
- SHA256 fc4a59ea60d04b224765be4916090e97ed8ddda6b136a92a3827ed0fcc64bb0e
- MD5 9dc95c3b9b47cc9fe5a34b2aab2d4d01
- SHA1 bc19494d160e4af6abd0a10c5adbc8114d50a714
- SHA512 a05a506a13ac4566ecbfe7961ace091295967ea4e72a2865e647b5fa9adac9f7cf5e80b53fae0e3917dfb0b9a3f469189cd595cc4ae9239d3a849f5cedd60e46
- SSDEEP 12288:mEJqOwccalYrdAs1alUx42aVVwslyLKmF/RY3YKN3R5ObDGIV+Jfu64KyzEfSZpR:vqAZlYrdAs1alUmys8lY3YKT6q2Qu6pu
- TLSH T124D424A15B9A689F0101F45F98087E093CEB94FE3FE7879241642DBD39F10B487BA64D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\bn.pak
- Size 812KB
- SHA256 e325d936cd97c3f9ddfca2d87caefb8b6e7465ffa31d0386ae2456b18f7a92da
- MD5 d6ccc9689654b84bc095cec4f1952cca
- SHA1 286130971826b0af1b6d29c5283dfa71af7cd7b0
- SHA512 db0400820c5cd1100337c955084eac3036b55bbf66b403337bec2079bc47696e2e48a771214662b286f4f45f763d2ad423aeccbd0f06cf0bc11038662558f4a5
- SSDEEP 3072:3V/mYMtWOsmmWlIpRb6rH4kSBbdXWSM5QwXlFE:3wP9sKIpRurHEBbd+5tle
- TLSH T19D05DE209C6E91B2A8D5CDC9434C6370C1236E9B9B61F74DDC17A24938ADC7C8CADDB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ca.pak
- Size 384KB
- SHA256 e1d6b5fd0bc411f2895eaaa1409916f5ffe39a5c6bd1bafe8af7ce33da5be17d
- MD5 2f8d050c228583559cda181291b76e5a
- SHA1 b047f1cfb30b1162b1dd79f7e424a83fd807eec7
- SHA512 e4f150cd9942ef5105e72376835da6edc31ef91783e41cd2fc04600c04f342bbc96e08e23c8af1c0c1e563bb8a7d3840a2289767525c30d08c2f23d0e837801f
- SSDEEP 12288:HQrijIs3cejEYBCqol3nbhj+YbHQluSwWwXcMjdLbpuQRBtryBiGIle3nei30CtX:HPm+thFMNSGhrKU5qzEK
- TLSH T145840A238BCD3B7744D2220AFB46C257F08CA9847B06D294F5AF0B5622CCADCD677695
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\cs.pak
- Size 393KB
- SHA256 936466784a55b965d23b016bc49377655bc5d281d012c8369c0809c961e05c74
- MD5 26765c7be201444f0238962bb16a506b
- SHA1 f9d4a33795e45127c14bcf35cc770845627e15e8
- SHA512 577d52d2d5048cd952aff1e76121a495328c1978cdea2eaa4f85812cc513917f69510e135e96f7967f4ed43cf88e180cb1d9059e17c855c8d4f94ca036730214
- SSDEEP 6144:qEcblAZYhg7PlAKRM55Z8+U1KN0g588QM:qfJAahgrxM55Z8+UoN0gb
- TLSH T13F844A1EDBA76435894002887BFA5228BD1E87540B6FA4BB7CCF9885217177E8FF4D48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\da.pak
- Size 356KB
- SHA256 1b0793b1cbeb6a56ff1e64523c37ba753457320aa29f9718022caa07b4981d8f
- MD5 fecabf71853bab84eacdd95699c49f69
- SHA1 8519afc13e100a550ca3d756518a0bc33674e0d3
- SHA512 e932d382d41a79ece172349e916221a67d97f5fd4b2dc1325d6bd2f7c6757cbc01d6fbc8d9846f6ec462eb637210f7c650f6944418edbd3f8614ef99030d9392
- SSDEEP 6144:tihc7yqxL8DzQ4XwltFJJwRXmN3OOr5xYrUGzOZiY4TWwz:GWyRvLDm/5er3T7
- TLSH T171745C4B8C9C332F85E94B65F2118DA7EB6D943CC680268F75D8943A49CBD7093BE1C6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\de.pak
- Size 381KB
- SHA256 e0f632ce324951002c80e019dd0169be9f6b0640533fa434cd6ca80f28a1d3f7
- MD5 ec069f60c9825080b9d18ff6492e816d
- SHA1 34ce5101c9646f9c2deb9820a3b26eb91c525ebc
- SHA512 95a88ac98f0957e5f200af76c1a743b976228f7da1bb6c6b3b88a54adcff05e1172d7cf2e6f0a82cbc8ad0aa79974a1bc046516250a3a5889fd7b2e4d7c0b804
- SSDEEP 6144:uASGgzYoRm0c8x+ZaRKcUCYV3rfZ6zhq7mp5/g3nBIRgql:VS3R28oZafGfZ6V5EyRgql
- TLSH T1E9840603A9DF625FC78273507701CDBB7B28E26BC386316798DDD13B654B5B282AC426
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\el.pak
- Size 691KB
- SHA256 92403b6160e38746597d4dd7f64d64cf19e30b5e7862901263c39679187b2c91
- MD5 306a80dadadb1f9182810733269537fd
- SHA1 bc01a65a9d024ec72e613aedc60f4838be798040
- SHA512 491016b8fcca59a7dc9523358c4a7b56c55360f424e8fe9330d6f01480835805e961f1e48f8777660510d9af9a66961c639df162190dec595a867d54150eecfc
- SSDEEP 12288:T9HAquNw2202pgtZqK4qILjJCaP5A3HRnkOY63Tog6sDPfFnxPuUWTT9rk2B0pzg:ZHAquNw2202pgtI/quJCaRA3HRnrY63U
- TLSH T198E4DFEFB4542DED8086950785D8F07C67C62D6CE749CBD86229CB60BDF90718A22E1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\en-GB.pak
- Size 310KB
- SHA256 463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b
- MD5 502260e74b65b96cd93f5e7bf0391157
- SHA1 b66d72b02ff46b89ee8245c4dd9c5b319fc2abf7
- SHA512 0f0f9aac8e6b28c1e116377ab8ee0ffadbf0802a4026e57aedb42d21c38fbf70159be9e0314799c1de1f7638fbbd25d289dff7cd2c9eb7c82e1b62b6c4e87690
- SSDEEP 6144:5QbJ7L0535IBMP9ecDl9bfaYENPQLP56Sbuo:5wseBMZl9qNPA56Syo
- TLSH T1BD643C1FF784226906931172BB45A6A2FB26D06CA35212673CAD802C33B7756C3777E7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\en-US.pak
- Size 313KB
- SHA256 bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f
- MD5 3f6f4b2c2f24e3893882cdaa1ccfe1a3
- SHA1 b021cca30e774e0b91ee21b5beb030fea646098f
- SHA512 bd80ddaa87f41cde20527ff34817d98605f11b30a291e129478712ebebe47956dbd49a317d3eeb223adf736c34750b59b68ad9d646c661474ad69866d5a53c5c
- SSDEEP 6144:SssphRVKuQ+KVMP9elsY4ZfaYe7RqIZ5HS5xswS:JsIvVMNY467Rv5HSPswS
- TLSH T1FA645D1FE7842266069312627F05A5A2FB36D06DA35112673CBC813C33B7B66C3776E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\es-419.pak
- Size 380KB
- SHA256 5aff3762747a6e8c6df9f2a3b470bf231b44163006b17ce87e2a03694be27b81
- MD5 774ced79da2fd32bd1ba52a0f16e0a19
- SHA1 ff36dcf8b62046871f441f301dd7af51cb9ce7ee
- SHA512 7763c15fa97efa9a5af73dcdedd4fe260139bd8ff782ca3aa0937d9355b2d14c3e482e570844ac33d22d7b016c7b9097d727c1dd585f421dccd59ca7bbc24269
- SSDEEP 3072:L5LE4Mkik4iEt9zj47Z/HyuOd8phPWVinwwgOG55NlTfGLF+vVlBnG6:LRn4J9K/BpgMu5uLF+vVlFG6
- TLSH T1A1840A22AAC81F5300E2A348B783D757E5D49545F408C29BE9EB83A522CCF8CD977ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\es.pak
- Size 380KB
- SHA256 267e7b6376e7e5ab806b16fde93bbbcd961bf0c3a7b3a2cabccab37faa9a1d16
- MD5 ba80f46ef6e141cef4085273a966fd91
- SHA1 878f35e15b02558f75f68ec42a5cc839368c6d61
- SHA512 8a8b4f7db23d4c93756b6dc4219f00c77358a8fe992da1f51431597b82c3aa87abf3a98d79e13e7b4a14a1a9e94d388760fb6abf3a744406dee951c8e78cf361
- SSDEEP 6144:ViU/EFsDXGXU0qqhgf/xTp6Ne45OQjc5Or97bzm2nE6PZmy:Vi5FsLGqtpTp+ec9jc5OrZmksy
- TLSH T151842922AACC1F6300D3A345B783D743E5D89585B408D29BE9EF87A611C8F8CC967ED5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\et.pak
- Size 342KB
- SHA256 d984aee4d18ca24a88846b1b6e0294d373733430f30bb4f1b97bc7d50d512c2e
- MD5 e97fe1e6d06a2275a20d158dc4e3b892
- SHA1 1575b9b1fc331a70bbe4ca7d1095d4ed6777ecc1
- SHA512 77879a4d1062671b616ba9b2ce0b6f69a5dbed6bd56b73ded902d1f9f44ecd96a2212690b3568c0ba273c73d91589ff2bf18c7ef9b66e0630fbaafde2a61b1b1
- SSDEEP 6144:55jgjLsO7p+nG1x3y0DLdyjvQJbT/RPiiEZ55Uj04375LBjPQu:5xgdiGPu8u55Ujt
- TLSH T1A9743B42A27E7717597021F8D233AD63DC9EE7C9B0000D967896491971FEF8C39B2B68
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\fa.pak
- Size 557KB
- SHA256 221bbbde078d135f6daca4978a31cc6a82f8f46536467ebc9a0cd322c58a7785
- MD5 d55f65c6fda6ed6f549d2c9f0a4ce874
- SHA1 952792f2da5ed9cb1cfed14e5afb8abf5cf29cb3
- SHA512 d0bb83467182d8b3a8f8371d749e682cf05f89daefe28764f2c263e7cfbfc3f86cb388061b48dadda26c3dd246dd6f7a57af58ca9344c2f6b90de87af1e91c69
- SSDEEP 12288:/IDIX9nuyaXTfwI/wNUWGSEfStQvjy1PeZwMTAKzIxRAQiHedNu3htodxWetlClh:/IDmuyaXTfwgwNUWGSEfStQvjy1PeZws
- TLSH T186C4C2D56AAC9AB16756CA0341D33438C773EF12D349FE40ACA1076609A5B139F4FA3B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\fi.pak
- Size 351KB
- SHA256 5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c
- MD5 fa7dbd2ee35587ff31fde3c7107e4603
- SHA1 baaa093dcb7eccf77ce599c8ff09df203e434b60
- SHA512 587f6d0e216d1688227345a8a75b94848ee710ec633fe6805db66bb0e8cad1b8d24a1e6a7e234061516770d881571166c78d8fa1c40e6335f3dcb1339fbffc14
- SSDEEP 6144:TNqgL9T4VbhCY4bsz/aOE/caYMvLXV5tljSHIEJ18GWU/WnBR7X1w72:RHxTLVcaH5tl+HIEJ18GWU/92
- TLSH T105744E91421AC26137C4928E7CF09079F6E9E3DDCC288C96F843C6D545EA9C87E7276E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\fil.pak
- Size 394KB
- SHA256 4cd3fa70487e894400ad29e3bfbfba3e1c5edd799aab12c62c3aff3c2580ce5e
- MD5 3126f74d021e9423d71913bb45a62935
- SHA1 c9a80c8585aabbfec34ae891416794b1b3e29a11
- SHA512 fb360723ee53b3f7038eebd1b919a36784a0e3dc878e810bc905c4297379dade6006c8872ed68412b06161cacb0d6e32a7157ecf97d9e103a4ca3b2b71db8765
- SSDEEP 6144:iS3yaVyEDQXwYRkj6LxephG+Z30mi5qgm+HmAx378:iSKnmjAWi5Hmv
- TLSH T1E484C501A3442748DBC356E613A0682F66E570B83F826C6E4FBF26977BE7CD5D270186
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\fr.pak
- Size 410KB
- SHA256 1f6bc09499ee37456968a28b67b81bbf5b9df4f0c6035a388242d2037a3b65a1
- MD5 51ee1ed54fec49effd103c29677885b5
- SHA1 ced6fd3354007d1ef3ea7b6689aae5213c20cc69
- SHA512 dfd50ad99b89345940afead11c3a6940d4408a0e6265cddda1d71ad92527ea00d8057ac77ceb2ffe137a3f0d2f321c210bc7cf97ed821f01e538dc08d07149a4
- SSDEEP 12288:Ul8Gst6QuagV1ZziU0Z7MYnYV1mdBn5axlqE0wCMkFT4MEzQ5FC6KaJ0o7PBcIJ3:Ul8uVQMg5Zv
- TLSH T14E94E75FA9D432C715C212B3FB12D667DE348248F216E340D8DF4296129A8ECD39F6E9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\gu.pak
- Size 787KB
- SHA256 c36a20730d5f2b91cb61b5b2a5912db2ea5a328a9b8abe0fca0af300446d3c20
- MD5 b7f4c73d56be31042d8edd7e8ea080f3
- SHA1 c0c3595701c0a75c14931ed65958d36df0d925c5
- SHA512 ea0d766a754604cad4d5f3180c30f7dfdc3e1cfe79d67365b72adc0d7574851f21bdd5b748b16e8b4a95ade40c8ed0442bcefd511a2934cc9c701e379c955d60
- SSDEEP 3072:xJeMsB1rr1NlwIHEVJhITsKMaWZKerbtsMhmksd4Mqz2sQmE51jvHsWnI4AfZw/m:xJeMsB1RXqNQHesX5cEhkiyj
- TLSH T1F00519D0D3B9F07119DA9F7E819E512086695343D67E230051CEEE898801DDF3EEEA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\he.pak
- Size 488KB
- SHA256 875712bb852c698f677c0c74e088f62d31adb2bce65648fc390607aad8705c45
- MD5 6376d0a5f4273b76b1f4aabade194e0c
- SHA1 337ba39f09454c0779ab64872b9fa11f866d6adc
- SHA512 00347f16b5abbaf47fb08663d5efde26ab7de0c7a2fa42e6b5f03c41a83cecbd8e78cc3aef41d5f08658cf346e0ade732774485e8a10008a43fa41ffaf73b2be
- SSDEEP 12288:a/x8HkArOpFLLj2/vtN6l160SAXqJi5IgoaHM7G5clmVSDnwvrQgo:Yx8md53od
- TLSH T1A9B498C4A2D452255131AAC39FA4FA286FF3CAB53CA37512CB18526CAC774F4BE530B5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\hi.pak
- Size 821KB
- SHA256 1e9623c7407ae8b8a88df3f69a47ae8117f74c4dcb56897bb794a9c38ee5805b
- MD5 ede7fa471c5eebc1fa55b9b3b6f92d00
- SHA1 1d1f529c615799bb3a3319ddd1357cb5dc71464e
- SHA512 0f51ea54e828700080effa6c728230c523ff8e26fb350e6f337028d18614d5dfc4a2792cb92b5e606bd0702067f55fea546029cddd1ebf7fa74ef5521ff08338
- SSDEEP 3072:qPgjbNHZaMPBeMApi4DqPdkhSvf4QAEm5dmGrsXt4GR3doE1NtdYbOqGPtv83Y8r:o67P7QRU5B5MQut
- TLSH T1D505070CEBBEF3B55DEC3C8A32890D37D59D3674A3E9521348D5B3DB9844CB4146A2A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\hr.pak
- Size 381KB
- SHA256 3d7685163c5eb6a11e745ff934312b8681c5f85dfa8d9ea701e9dcaee1e7a285
- MD5 7095ef4caf6bd39174487002a4e09300
- SHA1 1efe686bd0b7f035aee7ab4c52be6133121cd0f3
- SHA512 45488d46dfe7a31a007932917f7baf4c195da899de5dc56d98e555336668af3edb77996487649b86f56beac688374ce77f8feadc01e3f84d30d83bd67631f9c1
- SSDEEP 3072:jYUVsjdr8X6cCgVRTJfOSFmZ0uPfzG4dQ6WI6DkYAiKbeM/PXbnjajLw/W0ZSJfB:MUVsjdG6cdekFK5A37gBZW
- TLSH T110842B7CBEF367090996A346EFA6434479FE08CCE56597BB384F522E0043F0D6AB8159
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\hu.pak
- Size 411KB
- SHA256 3ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f
- MD5 d6904e7d1b6750d43a6478877c42618d
- SHA1 919f090a6a3aa1112916f5bb0d5b73a62be43c1e
- SHA512 d600fedb5ef1b2eb49a0122536c642b350ce67bb7a9da205890d9d13a195ac17c14607b4489715fd34506ec0ea4c80f245e09cf048aef52dcc8094f3138b2fad
- SSDEEP 6144:wzLY6NBOuSSfXbV5z8bZfGRaqY68EISam7MhOwKX5gRbGGttG2UnvydpECk3ICf:4BF5V5z8BBA7NwKX5Qenp
- TLSH T196945C7793B69049B8AC17C378643F16492E585B9E3B25F728C788AD30A17CD4D83C9E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\id.pak
- Size 336KB
- SHA256 9210c4c4c33e7ceb5f70005a92a4fd36ca4facdd41701fdc1d2ce638db8adf22
- MD5 881ff04e220aa8c6ed9d0d76bfa07cb8
- SHA1 cacf3620d1bf85648329902216e6cdc6f588a5ba
- SHA512 9134102928aa80c49bbf2b862e8079b2ee23636ce63412a4c3813f234d623ff563f5ca1ac407ddb77cecf1224896ed59ae979dcf63435d35a4f13de9c22755d5
- SSDEEP 6144:Bhuyv4xtWuEjulOCGVQDv1La/BbfjDVnjHF0RmP21AfW5/yhhvt7nSRsEa6:Bhbv4LWuEjulOCK6LODVnjHFKm+1sW5J
- TLSH T18674F8632ECD310C4A4802D5A2C9A91F7CCD233BAB05B76F8E748F7055B67686726BD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\it.pak
- Size 373KB
- SHA256 c0dc0a4a87f7bb054a30eb1174c3228ea2014bd94668a7d22995b99c4937d817
- MD5 91391f388b4b6c12a72710c35f4c355d
- SHA1 f89e6ea977a10a9f050395489285ce8c041c2c05
- SHA512 8796d69d1a8bdbc7690ded45404174b7fa0b5bec8453d79a3c85bf4707c3f32caf634c792c72ce7bda3522eceb5fc6761b696471586397064d9f1f1988ceee88
- SSDEEP 6144:Pwi7KLoyqgrYctogSrqRrhsO11GT9TeLAGBXnlWgYzPwkkWgYgZ8HryYuxNBAjXi:PRH/ZzZ/y8+6nHSSL53soo
- TLSH T16784293A95D620111A976359E611B085FBAEF8CDFE41721C999B431C23CFE84F2ECA47
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ja.pak
- Size 456KB
- SHA256 3accfd9a1833ddeedb2082fb94101beb59b555c60f42e3070e9e04a372eba84a
- MD5 8209dd8cf4e416416e015ff239b7c483
- SHA1 7affd1707b9eec52c26a4c17708c8471c369e2f6
- SHA512 6a58a1ea8a46c325cac0629f2e3b571532a9a2a342ed61ca47bd1dcee20ce0b0350e4f6d3e8e4c6903c7ba4a4592a6382bf0fcb5437febd1673b3c2ce8cd7499
- SSDEEP 3072:ePJ0ZJjJWdbb9L3SMJhr04MUrypZC2hMANlLQPkw0IhpeUNH7nbeCry5FtgF9bFb:excJNobV3NJZFrypZC2vL+hE5mCxVg
- TLSH T154A44F7CE3C969369D6153A22C0E36D17606EC9BFCA23636442DC074BDB0BCEE515AB4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\kn.pak
- Size 910KB
- SHA256 90b2df3338468e84e2cf2f2f67597cba5c3ceb5dba9c59ebd072ec15a70ce741
- MD5 d3d6bc60bead608e68e776e07d21ad30
- SHA1 e40e38ca99026056c127e9e1a1ff821a50310887
- SHA512 05421db2f1202573a34de1e722c6bdb55a35821c4aebd54c80e6594fc92075cd9b97e5bfdfe93b4228c3a2646b92a27da4722ef3826e2807238dcc56ba273706
- SSDEEP 6144:NAhoSeyuY1Eb7y2vGvGK2Ij/u7sBwjJOth0VlkcVwV/ttrmVLHMj0kEjciYRpySV:2lZfS7y+13VqxyZKe7Z53YUS+4l+99S
- TLSH T1D415CE186DBA7D302BD5006B24EC603EDFF16BD29CAA07D2F4DDD7802C66C6A90865DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ko.pak
- Size 383KB
- SHA256 b04c1b91cab31054be70cb851dc6716065545445801045daceb96eeee4d2334a
- MD5 b31780fff9541290c1d9f5b76141430d
- SHA1 8b0fbdccd0a7f8141846763a0d27e4e0da0552dc
- SHA512 a573dd09520059832e7f53386a64dcdde47452b02ce1e5d7e11385abbc8b734dcee0065b4ca351591bf9cc2f66fae204b9300702246d20265e8ddff4f7c1e6d8
- SSDEEP 6144:bmq5Sz+36z6EJt91QdfVKZqfXRZqiq7vqLZyuI9kYv1Jtt8OhWJru/3CqT5I7FiA:bmpz+3IlJtbK9nKJtt8OhWJruvCqT5IR
- TLSH T1A084E9F238DB23CD12939D82AEF4FA198381E977F7430294ED44CE549E505C7458AABE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\lt.pak
- Size 412KB
- SHA256 9200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350
- MD5 7b6bf901352885c0699db71239b7cf24
- SHA1 9e3ec5f327c0d0e54a449332061e60a8c79243cf
- SHA512 79ebef723fb4c17581eb869b4b4e1a364a3d28df0e168e7e1a3583e0c1ec5b9716dd270925c0545b8247421a64b03705f10910fe3416900de9258840c470d580
- SSDEEP 6144:RvrvZ8MmncI0t4X4um4GhTnyIpoOScfi78S5bzzv+4yaN9lN2ICP2IF6SB:RvWcI0Fbp/poOL5S5nzv+SN2Jt6SB
- TLSH T18D943B0066D3AEFBAA4053CA81E4CA74DFFE50009627AC61EC59C79BC47BF4625A4F35
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\lv.pak
- Size 410KB
- SHA256 b5a31cbfcb40ad8d911de1618c4eb7e8cc67b97eb8878220f15d40eb014d8ac8
- MD5 e664eb35f1284e9fc615e1bb4fab892b
- SHA1 e777653abec377a394170b04f79e78acbe4b6a3b
- SHA512 c3232997e8d306e91ded72e9d81ffae2018af3e6c32fe620532e03bccd2883fce59b2a2290a1580d7080c468c02bcd24c1bc90051f06bfa9a4e17857d4aa583f
- SSDEEP 6144:3zQa1Lm8NItVFq7mvly4Gh1VWtpaRd5tNm0YME19AWranpWBAFTDVs1C:DDRFog4GRWAd5PEJ18s1C
- TLSH T11E942B958AC68F964E905DCB7336D133A9CCD740EE07E122ED7D4B2A610F52432B5EE2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ml.pak
- Size 948KB
- SHA256 61a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6
- MD5 00292b0801e0dd0a74091bf53f1574c9
- SHA1 63a002e7a8796bc4b4459a19c95ce426fbd1ec7f
- SHA512 e2e15f66851aa435e3bf4de6672f4aa8b01204d8efe11ec6ee9a51d9877ec4f2e71d7e9547d6eab9bfa04af1bea71fa72aa4963fa08b48717bf1c3fd21c00cd5
- SSDEEP 12288:0uZPZlsLnAkQx7/bmXXrwMmWDcZubSA5WNPT43e6hD5b/7dS1u3SE:dRlrkfIt43eI5b/7Cu3B
- TLSH T19425AE1BA035CD3B0FD102297B4E2FABCD5B9F9140AF668B5869F2628C59F7D0C99431
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\mr.pak
- Size 772KB
- SHA256 481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09
- MD5 b9a2aa88c69c42ebcc41fef00c980a38
- SHA1 9e373dfa11f95c31ffdca70bd83d2f66e1ddcef8
- SHA512 5f4582723429a44dd517322babae4466efb4e8723c0247754e2a9a2929133d6fee5c3533c4cf567954e2a5aab47940a136a178405de36e38b50e8d4a6d5c504f
- SSDEEP 3072:fP4KgyOUcME3Z2D8FXspvicDVFTMEy3R+f3XD5lx14+o4WmHwMaGwt4RLfNJZIFC:fPpNiZs82wVjbIv0/Am5KeCHF
- TLSH T101F4D34CF7BAF3685DACBC8E36540D3BD8FD21B1C3E9925648E1B3E74884CB405596A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ms.pak
- Size 351KB
- SHA256 fe58cc4f62fc31e32c1fb9a0893a5483391ab6a91b1c92ed4a5e3103a962da7a
- MD5 d5da199f347452c5904bff9332a08f84
- SHA1 b5fb8c22708a7e3130684f1a9923b6dab10c3ae5
- SHA512 9fddeb376bececc51dec997b3ed1e22821340fa172636f641af774dae8bc9b5c0780757380bf3fa8df0f9682a555ede81c449ae9468f63215c17123d13ee9f35
- SSDEEP 6144:netFWrIxF1cdyqul9SQq/8dQU5sNNsAMMg8/1:nePTxzXl9ZM8/5ssTM1
- TLSH T1EE74D6068EDE3158056843D9D2DA6A1B7CDD3333B705AF2B4DA08FB112AE7A53316F49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\nb.pak
- Size 344KB
- SHA256 d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8
- MD5 bbae0915edec081b04bb903b689bc40b
- SHA1 6a0fc635ce1c431e512b8b3b8448176aa4025556
- SHA512 573a9fe43213829a6a4b39e67be25bc330b417750ea6d66e26163de7a80c29f6f5deeb841d9ff8303595943a81fc01ab668aab02a5cac4eda078ed06120138b4
- SSDEEP 6144:7ULEQH/NIh/cMi6qOp7f10agtmy07pGzEW5F54hQ3Ohuf:7UXfNUcMi6qOp7f10Ipa15F54xhuf
- TLSH T116742983EE86B72AF6A447A4F418955B9B7D942CCD88199B64CCC63B0DC3EF052BD1C1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\nl.pak
- Size 356KB
- SHA256 55413d5eddb3300e0ae0fa5d79d26fdf1e5a12922d7018c8054b1faa9d660301
- MD5 9f547a24e2840d77339ca20625125b4c
- SHA1 23366411b334f990a0328a032b80b2667fda2fcd
- SHA512 34da7a0b58ee3904d00cf02d16d5a3ef508fb708d7c0a887286fc32cd6145b2bd857d317c784d1d1b17662041eadcf7e225908980eb93f2b81161d845c0bb67f
- SSDEEP 6144:hADhrbZEe187gdbg5rVgHkpaN93D+qnkm1D5e/xiGpVx6jPW:hAt+e1cgdbg5rVsRkyD5e/xiGpVxiPW
- TLSH T128741B13A98E253E19C0B749FA044FBBBF2ED22CC26CE67D94DDD1350453F68926D889
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\pl.pak
- Size 396KB
- SHA256 53b59486361b11512fb90f15065104b15ee2322bb7804f859cde2f2ecf9581fb
- MD5 0dc77139d3530695cb4e85b708bc0bf6
- SHA1 6915655afd1e37361c011f5c2113d72c7a0e85bc
- SHA512 ee1ca1d99ac279df4cc0e532aef2fc531061736b636a84310bdbd627e0f2435eac1a386ebb19aa901b6eae3929bda1c5da4f41b73a25a1b20137522e34547600
- SSDEEP 12288:EYRmjSoV/AmiWybOvPeCUdZUEKwmNF1QhtmB5Wg4M5X:E+A2KD1QhU5HX
- TLSH T191845C0E86E69A4E4DB008E6F5E31B3CACDCC848F109C35FE45F8526615719ECABE5D8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\pt-BR.pak
- Size 374KB
- SHA256 c9ec3822044365457b8736348cf95a8e39bdfe3ed36267449bf3ed739accef2e
- MD5 a064cb9d7cf18936600e9ccc03297006
- SHA1 eb436a0c584ba91acb05dfccde139afbe26fe9f4
- SHA512 95af684abf9d24cfc4d0668a02da1e2e69f5e671d671d8cdfadc22ec991908c6aa5663fe1fa88ca8e85c0508f409fa6c2bbc174c53674270f2b188018d358415
- SSDEEP 3072:fMKmwRJqa/pXgV5WfEAVPBp8cFInNBXBLGm+4BShfCn5/OTGFcBLUbxRy2x8zcZy:fV916nNBXBLBKObqx8yw15nsJmvFp9oX
- TLSH T1B6845E2E5DCE136605225340B74AEB47E6885642FD06CACBDCFF4B46A3D8E40DA33B65
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\pt-PT.pak
- Size 376KB
- SHA256 c89170385b3afb2ec89fbd61b8470ac718713c7296441c8430f173dac218e74b
- MD5 3f367760b57a5e4360dabcd4a650bc5f
- SHA1 8d7cd6b0eb42361ee862455ecfa475d28f5aa934
- SHA512 3dc30780d57dee91215a716dc6b4cb432838aa0161af4371f49f70db2076bd155b170fd2c1617f59e1b572144a2e150a34143eda82d9f2227d24d2281d5aba60
- SSDEEP 6144:UvMZfHf6E+4jieJVJJxhO0aJjqPJ8a5RKE6B:UvMZffI70vaa5RKP
- TLSH T1A4842A285EDA136605225341770AEB43FBC86655F809CAC7DAEF0B4272CDF84D2B6F61
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ro.pak
- Size 387KB
- SHA256 7247470057a936d03bfa2a8776508ab66aa1040c41a4eb8f79c1e93551c74bb8
- MD5 745a9b8c6422682f2cfa5561cc1f4022
- SHA1 31e3616ef09f9b1fd1c41cf8f43e504a6f90276f
- SHA512 8e0b7f98cb842a862ceca65e0166462275feed26c32c9c299aba9986d36b716a90d4a8db5ccef355ac266b7e969071014cc7ab6439778e77c52754bc23b4c575
- SSDEEP 6144:GjOSwH+9dlnyEFGw6mf/E1B5Z/loFs22/BuoTr:8S+9d8EFGw6mf81B5Zdoc/rr
- TLSH T144845D2391C86ED32D910272B76634D7E98E205DF641D28D60EEC97910C99DBC62EECF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ru.pak
- Size 634KB
- SHA256 b4223b56ec88235819a427d60bb937eb3984076523f02a018f57819e0429bea9
- MD5 5cc0f54e022a9996773dbd64906d5580
- SHA1 87c103bd69724579b478f904235e03caf61d5d79
- SHA512 b3365fedcba50643cecf1a70297e1e67990d63ae05caa87de01a70ef6f28e0f73a9a0edb0ff80b4138c624e51aa2dac065a2d40877fc92137714ae07734c2f4a
- SSDEEP 12288:URApY5eXN2hHO3j/jHXzvMBJl5kF3e8P/X1f0awGL8UFC0WDWCfG1UMZ22bqGYhM:UqhvC5g6o5
- TLSH T130D47660669E64DE1101F01BDC08BE0D7CEB45FE3FABA36619642D7E35F2024C67E61A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\sk.pak
- Size 399KB
- SHA256 75f179897cad221ca6e36b47f53cead7f3fb4159ee196f1d10a5181b84e1b5b7
- MD5 72946b939f7bcaa98ab314cfba634e0b
- SHA1 71c79a61712c8c5d3dac07a65d4c727e3b80ab17
- SHA512 2a8fa7108c58f4cb263900a555714d5638d961d14d9f4ddf8a9ab5b880afdbc5d2325fed1e158dbaf42a9cd20e8e372e6a8f52fce842a6940ea52e43e4a1f1e5
- SSDEEP 6144:qlLG0J3t/FveyMigJ90585Wh4LuaQrBGLxGf:qlqu3zWyMim0m5Wh4LuaQrBGL6
- TLSH T19B945E3FCFE71C1E8E990248DEE67110F9BE4690864DA4A5D44F328724E37ED9AB4D48
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\sl.pak
- Size 385KB
- SHA256 6002c129a56558832e9bd260c427c0bd2e1566e0aea3ad999f89c8e479534f9b
- MD5 4ad22c6c64dbe0fc432afaa28090c4d9
- SHA1 19eb65ae52a585dbd9c25c32f22b099020c43091
- SHA512 94f9d34e76560059ef80fc04be4d54e52a7d934dd28747db7f0f6684243b841087245699a471a55d667623d2ce5e597a3d2c6bc37cfd7ebd2f5b8fb40e6207e7
- SSDEEP 6144:uYV1rGhmiYBnnbANjbn+42m4ocyxPbPDTNud+roftjQLz/54dF4cmg6EI1i/fzZM:uYJqmD0/5IKcIE+i/fzZiqg
- TLSH T1ED842C35ABAB9E0E0DAB728BFDB202017FDC048CD241E6A5FC4F33695051A3827BD559
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\sr.pak
- Size 595KB
- SHA256 524acc64e70918a77cda43fd9b27a727645b28ad2d4cce16b327105101c8bbeb
- MD5 fca817ed4b839b976ebcbf59cac66d68
- SHA1 413efa65470319999032b6a25b3b2ee33b8cd047
- SHA512 cb246d5c5cea30d6e7514841ab93803984cda37461a09b6c340ca64f7cbce4e1212951a4de421d928d433a619dac18454fb403b42581757b76c7eb124ce70cf2
- SSDEEP 12288:i2L7GiX1RIScE15HeQ0AsrJE5eaxLvRWr37vXDt/k/t:iwfRMpE5nx71
- TLSH T161D446B19B9E64DB0501F41BD808BE493DAF41FE3FAB975211202DBD35E20B847B925E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\sv.pak
- Size 347KB
- SHA256 3420a1fbcca5bf8c2d65d6dcb0db78b03f95f7f2fc56479a0de6e3312333ce6f
- MD5 5130a033016b45ae2c3363edb3df7324
- SHA1 9f696d78b1b9efec180dc89ee0defc3ba23e6677
- SHA512 401b71360dcacf3b1fdc411c92195051370db110863cbed37143263e7804cb24b75ff1908ee39ee848c28776df00d6edd8cc748acf3725668af7815929e8066b
- SSDEEP 6144:yNsNTvoAjMwfjo+BpxzakZ45LX1uZSO8DE/xUDSSXo5Oi55gb1:WsNTTfZBlR5/5M
- TLSH T1CC743B438A20F536FBB2170DB904115F4AEDE15CE6E2948EB8D9883DAD87D9405FE34B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\sw.pak
- Size 365KB
- SHA256 690027c4a31c4aea00b7d1b32ec6cd3fa50b1eac412ae273ab15e72eb485dd6e
- MD5 9632dd7d883fa4deb3963ea663e0ffd4
- SHA1 0db135be4b3a7c54c39e9df5034d5576b68ea92e
- SHA512 3aac1857784dfecd2ae5f7c4056f58e27a966a6cb949e02eaba56fc1fc283243ed6213f17628d62d435e33fa4771eb43623f25da6510aa4ce6f2149f72ab0d37
- SSDEEP 6144:gtvDyRFVwZHZATwBqkN6vesxnCIfujNXDLLKvh8K/5ESaDN+C5C7ChfpnHwQ0/:wDgV4HZBgnENb+WK/5f6C2hq
- TLSH T11884F8628871D0195373518603D9FF7317DCEC9C292B68936A46BF4F218F98C67ABE09
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ta.pak
- Size 936KB
- SHA256 7e818deedd50a533851bbf08e056bf2ad8d45f442a1a61d9b48e66804ea848db
- MD5 f100566697a96ce1f0a0c7e0bbfbe36d
- SHA1 4c80a4930ba7d174c4203c199492463242bddf62
- SHA512 dfa6132a5b7e819e8d326bf5ee539d9ecb2dcd7fea429c75afec2291df9eeead6fa347b01f9feaf2235bce627fd39116176195f7a3d7d74de28951f939db1645
- SSDEEP 3072:A/8IEMgtILv22ElYNWwRY/q5pG7zctR1cA2F:A/8ggtSgmZRY/q5uzctR1cA2F
- TLSH T1BE150BCE923EEE890F93288F0319536912986155C47BE3A67C756E1298ECC5DCF3427E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\te.pak
- Size 869KB
- SHA256 d839531c4ff4a2885c993e0d358f78667215b0950c77a06ef01a6acff9221c5b
- MD5 b1b6a9e3a04be79080ebbfacc1a0eb2d
- SHA1 a5c8eb6a930062f6021d073d5f74ae146dc7fbc8
- SHA512 bf0b163c8fc3988bfeb3cbb4b981596ce5afdf7e40149622fc3b60994e7d8efa5bb24c830036d168a6638feca48b8755aefa8640faae37055cae8fffb6a85568
- SSDEEP 12288:WalFrABW3p1F9YKiTlwJAg5NFOodr/8f4JOQvmEC28+5HX0DTq9OyUpzAkm9dGMI:WalF0cs53MlU
- TLSH T1B81592023A6AD310DAE70273752CF66C49681B8161D6732C1EAFA357FB87D7E0843676
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\th.pak
- Size 731KB
- SHA256 cd80bf232f2f128a3d411f52c8039987559dbc1055f746eed6e0e8478b116dc1
- MD5 a970b7e9d3aec2cd1b8ab798b3179f07
- SHA1 bf17a7e80e01ac1704a1efdf27baf271b4c21e36
- SHA512 880555a2ac2f278aecb8794d8cc51f0833052e9f4ca187ed91fa35bb475e68ae3255cfe1dc074eac960c73c203e62c6b38077b266f5fab66ccc3ca73e94d4d60
- SSDEEP 12288:EwLc31Mkgs3s5UvfcLRfl1mj83v6DoTGjyeuLAD57Kle9dwn7j9Fv3o09XAyFH1p:EExSK5h5N
- TLSH T165F44BB33247D9D479441B5B262A7789673DAE693F73F8E00489215A73F071A8422EF3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\tr.pak
- Size 371KB
- SHA256 b22fc7b75c52cc142f201d5cf107d17c1b173a494a6add022127f559fb46bcb0
- MD5 46f9b2a35efdf1120a8a946e4f1d0115
- SHA1 af7bec1fba32d912b50288a7d988440627e4ee85
- SHA512 cd67f9c328408a8295f224aec190c7c411a868755fc5c9e90b4985b3c41a05d6d34dd30d4a3866f6c24e1d640f4c324bfba8c7ab806a6b216151cf0a504a03d7
- SSDEEP 6144:1Pk7AA4K9G2Px9DOjKW8IuTu7AT7W5geL5J/D+6Mi1/BvEBVwiBcJmt:eMdKQ259CB1s7q5J/y
- TLSH T1A5840A8178EF382CCBB9278FD2E50626F89F1766F331E4469A169636774674703E220C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\uk.pak
- Size 634KB
- SHA256 28ea88f19b2c34699d535ca0c691449b7e4001c12e8aed8d04b2078916e88a37
- MD5 3b2a976a25dca963e91df3695c502d8c
- SHA1 ce7ae51211f512c3723bb43ea0de9e6debb70597
- SHA512 ba41ee074239afdf8f194b4ccb33060fa9655e3ccdac6a16090959d3214f8db15396b3e038d7de26c478fdd003472f680d2b6ac9a92acaf6ebf8aa258747ecc6
- SSDEEP 12288:9ho+Aqwniyv1mNLtN1nBxs5fB3IjltE07kLNiXEFqS/V2:9ho+kiC52Ei
- TLSH T132D488B19A9D58DF0105F05BE84C7A0D7DA741FE7FA6871625A43DBF28F20248A3C71A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\ur.pak
- Size 552KB
- SHA256 4c7affdcc324cd791d10e235da809ce7501e8005be64340b6e8bf5595647a707
- MD5 ba86f1f13fdc37a2c48c1da34c84f4c4
- SHA1 2f1578d0eee76e60effb63967712b15c0d56829e
- SHA512 fb2fe1548574da860bf27408a4f29d781fcefc300f744f4214843f343e343ad8bae29cb7047f87f5c3277641f561c6a30e5bc9d6490afbefc7af36974305a688
- SSDEEP 12288:+ebg/8PzMVEOyMKdAMBa5UUEA2Wb9YQYrtu+co/9NjjFpvJ1:+XHD5gWQ
- TLSH T1E8C410D1E6BC92B25A21D92780E33C34CB735F13D34AF286E56106C54E9A1136F6DE3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\vi.pak
- Size 439KB
- SHA256 b75694e390bd2e20780b3bc72f6e1473ba45d7537c27642a7d888dfd3bb6c3bb
- MD5 065179c466c5b7457e249f11d152b99f
- SHA1 cfc05e9dfb91b2af2944aed4718fa05b43844914
- SHA512 fb598391a028b7d3c7e25cae21ccfde655e6f871e498767a54f7cf0d5d4e48207213cd2598ca88e4f46c303cd2d8175238a5a5b720ab37beec1873d681165a8d
- SSDEEP 12288:liWu4Bnzm058lwSwS2J6RlV5qhWziZ+UHNJziVyYH:liWxBnzm05kwSr2SX5uEiZ+UtliVyYH
- TLSH T1AAA4851217E0702680AC553EC5CE540E6FCAE42FF7C08FE56FE4297576221A56F21BAB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\zh-CN.pak
- Size 319KB
- SHA256 a7ac9fda6f4cd189b75fdadc4b70cd0d369a09b66eaeb5d032678cb97ffc98f6
- MD5 2febe4ef32e1a3884089908f402ad62f
- SHA1 e65c54adc127b78494dd6189cca71f1c7bd2a5b0
- SHA512 8e8b030af4c952c32ec277850d5573414630ff5196eaed52820f44e9c5bd03ab6f71a8add19215b0456eed859be0d5a6f28d48e12f1677d39842f35feffd5e57
- SSDEEP 6144:1n8PHtbPARLb7SnZKVtRU/0k5UNzRMLUyl1:1n8fgenZKfR/k5UNzRMZ
- TLSH T12A646DE901FCBDEC058640942725613D7840A20BF667EFB76ED244ED2BA2F9D0757A0B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\locales\zh-TW.pak
- Size 316KB
- SHA256 c5061ec00bd969f76f3c0c6ff15ddacafed7491260bd8ced78118691ba57bdff
- MD5 02e9e0bc5c30ca60a869ea761fb662eb
- SHA1 c5200f692544b681af8757627da430aeea4283ee
- SHA512 07b5f401f89dfc36499a3e74318b471d9b2e795dc363dfd5a9394089d4783a4b51fd78e2092701b6974f1c51020f3b5f81171ce21690f8547ff3c8f3d54ce781
- SSDEEP 6144:yulvlGyS2kZuhv2hl4a85DuzpE49/9ywTl:N9Ag2hl4a85Duz2U/f
- TLSH T196646DA608FFDEEE0901F884B3C9062F7C8B742DDD377677FC8818952E76A445A5214A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources.pak
- Size 5.1MB
- SHA256 4f29587bcd952de1dbc0b98df0aa506bd9fcf447e6a7258c5eb7e9eb780e6d6c
- MD5 f5ab76d2b17459b5288b6269b0925890
- SHA1 75be4046f33919340014a88815f415beb454a641
- SHA512 6ec6a08418743adb5e20218b73169be4f45f5458592219497c3718e620e37871876788937418f1341e0023c1137f9cac715e6bb941f4690febdda993b072feab
- SSDEEP 98304:jefgvjX8Y3INBibFPzG/7DN7h1rA0Z0rwreQVnHbwJwKgoHksnR:jeIvQY3IzAq31hKi0kreS45JR
- TLSH T119463320E1686D37D58A977AE4AC91335735C9031CA1782CF4CD620E8F9D2EE16B93BD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app-update.yml
- Size 89B
- SHA256 d85485b3db97203f85ed8607c500084f71c681654781b18bb11d849dce9d78bf
- MD5 0859f868f307a60fb150dfda984b128e
- SHA1 328b11bb18c0ca41a872e8412fb1a2ad5c5e8ce8
- SHA512 ec5d95651fb34ed1b62a1c8fc975254915ae2c7618574f6dc1002671d2f4748e990e372689ea4ecb785713f94bbbbfd7e86c753441511364630f56e80897043c
- TLSH T1AEB012448251C12101350D316C468724DA88D763C342099080CE044DC3338224A2F6C8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar
- Size 25.6MB
- SHA256 181202e63c2a27ee8a98f06d5493c64429862bcaa4eea699174bf9d5df363bb3
- MD5 58da6ff52bb52a4a2a5adfc42555de14
- SHA1 dbe27eee3186f09a2ca7624150d14552d00f6bf3
- SHA512 e7e3f49910c98f615aec36d6503c1e4477d9a93ba2e03be3ee53a7c3858293ad80635fc635b8ec4128a423e25a5301e2e630d635ab167fb31b63a2781d64057b
- SSDEEP 98304:JuL74roRkn3WT4FjrFOP2Xb4i1PwAb3ech1uvtNgFOPK4:AzT4Fj1PCtNr
- TLSH T1B5477C06BEE5217206A721759B8F1051E73A80131558DCE4F48CD2882F59D6EE3BBFAF
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@serialport\bindings-cpp\prebuilds\win32-ia32\node.napi.node
- Size 175KB
- SHA256 df91e6a6764481b58c95f07a7f81193ae4f99877d1e3da26a05f99664b2f2b23
- MD5 419592c27ce0f6fa145bd380461b9e9b
- SHA1 486426243606d1dd4e0205ff74ad49529f6e716a
- SHA512 78a0536db2ee219e9ba4c688923520cdba438f3318035f583daad931c9918fdaed23e541879b87647cb7460ae6371757d148f7367b847c2d7961ff7272fa3b23
- SSDEEP 3072:8wrdwjhJOzx/eHEfq+0oIvuyvwNfds0ETKn0M7WOzfKPSzr74Wvq:7ZeHcq+iv5voFoTeJeSz/rvq
- TLSH T1F6048D11B280C23BD66F1634112D9773593DA8300FA1B9CB9B9A1EBD5E742C39739B27
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@serialport\bindings-cpp\prebuilds\win32-x64\node.napi.node
- Size 224KB
- SHA256 2d5d112e2e57054034fa9454e9c33dc306377455d989644f7d4c1b43027eb006
- MD5 05a55ec538c75c3210a86bf8b1eb5ecf
- SHA1 bf35e20173d7f2cbb6bcb14d299cf10d9091c203
- SHA512 43e6423e1a7f7da4816271bdf55439f59b375db24c26f71e0fb0512133585620295ae5e1d5222adda1a087011281438b51ecf27a7fb50ddd3a879e70db6d0c86
- SSDEEP 3072:3atD8NJGcBG67Im/oza9hco0gyy1B23r699WyBg3IwIVEiLlaL+BVS:KCJGh67N/oza9hbyy1kM9TBg8hy+bS
- TLSH T1EF247C49A2A40DF9EDB7C13989C3DA02E672BC504370DBDF136046569F277E2A93BB41
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\quiklight\lib\binding\quiklight.node
- Size 301KB
- SHA256 169cef7996649a6481bb93cc41db02b8574b0ce4b3a1f4b74549c9ccc0211e37
- MD5 2cd7fd1b75ee95c15cc283c810ad803d
- SHA1 775291e0223d54c9e27b0c418d4708ddafde1d7e
- SHA512 94aef3787a0034e2c627d26fad6871b96eef17dffee2a43e195c021df7c85d7d59fd1a27ae45775c49ad4a7351647d615a211d7eb592e8bb27ec1c5ef47400fc
- SSDEEP 3072:JBWXOOLi3GJOp6ZOI7kbo0SYN0mfC3pyjBqyR6rPgDhQPWSn0Vz39cwsVcIU0BoG:JBJeO80SYimq3m42hHS0V1lsZPBF
- TLSH T194646C16F3A510B9E277857CC9534902EBF27C5647B0E6CF03A04A9A2F237E1563E722
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\android-arm64\node.napi.armv8.node
- Size 291KB
- SHA256 1f4f296237737fa01cf31790ec1bb0948c7f32015ef3b9ab90e1f3090786c011
- MD5 e07bf8a9220d1a8c148f4c09b947e6b6
- SHA1 77d749c32537ed3aa59db49458500e4c4381d0dd
- SHA512 54813e32ec752574ec8124528a384c938b24de23f4e8d78d00f6a162bab9b036260fe413580b70505007203432a9a451e46bc71c97bea96c5eac813512a2cccc
- SSDEEP 6144:+3gFKGYQrH5vGAAI7UHXsOGs89wjrCijmu7:+3oyI7UHisz1f
- TLSH T161544C06FA6CAC33C58AB0BE4E464BD2F12374B14714C3FD6F16454EBE6A2C6E505B92
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\android-arm\node.napi.armv7.node
- Size 259KB
- SHA256 cdc351468846e4c03205694d09c09ba4a8d6cc20ca58e9138d1505db82615270
- MD5 cd2c875f9c1745918a70498a8f988e7d
- SHA1 28827d90a28e509aed516bd26e8e7032dcd072dc
- SHA512 94ecdc6b19fbb9f0c459c6f4afe1d14ccfe6dd0c8e6973886971a771db85835b4d8b4a49be030fdf49d110d532480d94c69ee709852a039dd5d530a4f7f4c079
- SSDEEP 6144:IxFK4EC3xuUwyqFzylBuKky9bLwU7cTAC3kn8:IH3xuUwyqFzynuKZppYj
- TLSH T19244E75FF895DA02C4E5257BB55AC1A83257A2B482DD73028F07CE383CEB5CF0936686
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\darwin-x64+arm64\node.napi.node
- Size 557KB
- SHA256 27754607baee0cf2c907cf6d58a91c9d9a2123f7675a72e9464b6f74aac9a3c1
- MD5 cf7e40996b7809f758d24b7eae446524
- SHA1 0d083ce15c9915d915fd05f63fd6aad34dcb43db
- SHA512 276c926de37204e9224d00ed148aa4479faacbdb87f3e7949146cf5de0f29f415316d0f721b49466de5320bc0172062ef771b15b3688df5a424bb0db36b862d9
- SSDEEP 6144:VM5YGPAjml30ogLNkJHI9aUoFkOblLGJS+oxq47p7olg+UmHX99/lBkBVJO5kJtY:JjmlEojXP8JSPN+nMU5kJtyBlXJpga
- TLSH T133C47D1BA3BC8811DD45F1BC4E654661F113FDB54A20A2BD2FA1F31C7EB4AE1532AA07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\linux-arm64\node.napi.armv8.node
- Size 272KB
- SHA256 bb6e73a8e8285d680bac99d93fe6ae79557ca9205f52aa1e4fa938fe93193e33
- MD5 28dc86c4019eb23dbf754396598db860
- SHA1 b6a9f6acfb112fc3f0841336642d6c89401119a3
- SHA512 635490794f127f16bfaf8d2977a1c2faeed33db9620a68450ca960d1975f2c11ced80755196779057267a67daf59893f62e0948868ad8785d21e262de06d5ae3
- SSDEEP 3072:lWB4LAYSS5eUw8kavlUuBKReDyDrI0XfWb2FWFQKaJhYnsahNqkDa8awaJhOqJSw:IB42Srw8BvlUuBKRik+ljwEltS
- TLSH T12F546D6FFE8D6C01D19BF13D8E5E82A3F1179CDCC31112D63624525B9EAB8C98A77980
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\linux-arm\node.napi.armv6.node
- Size 239KB
- SHA256 c01e7ab46d61132081ab88fed49d4a487a384cf7700ad67bdcc10e1b7814ffef
- MD5 0323bd7f577744119a908a1b7a536b83
- SHA1 9a07fd653ecf0dff27792c6490797a20cd82c665
- SHA512 84bf64f26d1f6e9fd72d2f047e8948e5996f6d639ce04534de570e68de2ccf300dfc985b4def7947846ac6a62750f0cc5fad49bad3270247c0d37c454dc62e1f
- SSDEEP 6144:Y4B4yOZwqzA9pkk5FbjLp3S/8wb9cpVm1cEP44OWLi26XgHA3Ng8R8:Yu0wqcX15FbjLp3S/8wb9cpEiEP44OWD
- TLSH T1DD340857F995C6DAC0D0267AB31EC3657353ABB5C3FF3202C6215A383CDA1AE453A582
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\linux-arm\node.napi.armv7.node
- Size 239KB
- SHA256 cd9b67c26a6592862c13a310ccf63f83e43bc8e75580b4e6011b7baec809c885
- MD5 08856f98c9b81eaaac2332e494d6e239
- SHA1 80d246754eddd6910e95c4637077de7948f8a77c
- SHA512 b85bb284af10d690497592ee3d4300af98a7407a14e6b1d27dce6146ccc3501a45f82993645777a351642e35e2efc751ce48f470eb29241f23856b3523724075
- SSDEEP 6144:wy+lB4GuBBTqQ4ROM+oFLyNtgg+mh7HMWXi95kmmJ8:0XoM+o9yNtgg+d6i95kmm
- TLSH T1A5340767F944DA96C0D16776B32AC3947353ABF5C2F97203C6254A383CDA8EE0A39581
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\linux-ia32\node.napi.node
- Size 321KB
- SHA256 3a995b9c4633dd0d995e7e97e7aa321440f1c05f1a71a306f99da821569fe066
- MD5 08ae86f06504d513feb687d65897e58d
- SHA1 d56ec367e95ec9de6ffde501ed1651612a5c3fd9
- SHA512 9401a81acd2b5d801b6cc2ec7819a8c356c6f54c397db841a3797af3ce2de80ca5b7577df4d11425591cbd877cdd30b878d23b364b48104c8a23d6a16e833478
- SSDEEP 6144:nGB4FbvNDWgxgqHAEVq/kGEbFIwjIk2V:b8gxgqHAEOpINoV
- TLSH T1CF64A52FB500DC32D4775CB305C58B94F0360C39BB02F3576CAB2DAAE5AA9C19F256A5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\linux-x64\node.napi.glibc.node
- Size 284KB
- SHA256 fbbe12c009f1ad4aba6c8b3c489233ecaf98d25b4b15daeba2e3c9f9c86fc75d
- MD5 51a35834f29cf98521064dd94ae9e83c
- SHA1 b4c15d2fe80fa1db59823487b7b2cdbdf22002d8
- SHA512 245fd722a1845be08be0c450262c4964cd70ba9bafa80ef2dcfacfa34a4583bc6754dfdf3d559ec2b7a3c840d393bad06d77c974987c4f29021d37bc483eaefb
- SSDEEP 3072:YprB4dAjr3nCnFEjKl9Kfuo6UG2UwK6mhquLpig8CzJ8Gto+uAUHUXKzYCDVh1hY:crB42mFzl9KGF6Ct8Gi+kG
- TLSH T176543C2FA360847CC059C4704EAF42E196A4F9E98B34342E33C5FBB53D91DA54B1EB69
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\linux-x64\node.napi.musl.node
- Size 282KB
- SHA256 7733a5ad437746de6fe3abc88f904be443fe395fe99b946027100a7e3ae26dcb
- MD5 faff4cbc190288f3a44fc63a76e4a904
- SHA1 2388613a6506e81cfaefcc23cd88fb083da1e23d
- SHA512 f301a5bc35550da07c3383a04a76ce1695562a156dfd946a3d1d5ff2c68f48c978bd8efa6fb53d6607fc32c07f08d76dc1224fbb4f5b3970a41be9285def2b57
- SSDEEP 3072:tBB4sir9vuSXSx2efjfThmDDFu+LlnjTCEWGfC3fczlRBhhYCD2h/hrpFhlEOhc3:tBB4jG2IfqIEWKOczlPzQ8UqIz4
- TLSH T164543C1BB264C578C069C0B04ABF8AD25272F4F8D931352E72C5A7B43DA58E6431FF96
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\win32-arm64\node.napi.node
- Size 691KB
- SHA256 86f724f89d5166c82d779ecd490b67944098e5026285ba357f37be11327684c7
- MD5 d69b2f730f725e73ebc9e4ec714ca069
- SHA1 d1ed8966b3d7b28add63747eae928c1eb66f40ce
- SHA512 092498ba87433b3a1317dab1c2ab1882ea47dfbc504a89e8d41838b91feafcfd818ac430f9f8da86b10dc011fb13df573f265bff95b11ef0b1e985e69bd2886b
- SSDEEP 12288:5IpFovzNUzxjjacA9m9rLTVcOc3Ysbsedm0oYwlFbTII9Tk/vWfm/cnUqQV2oWc:5PzYMRmYwrwI9Tk/vWfm/cnUqQV2dc
- TLSH T172E44CA05B8DAC5AE2C7937DCC228E60713BB97C4930D5873067021EEDDEAD4D6E5362
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\win32-ia32\node.napi.node
- Size 538KB
- SHA256 af2bb8f687e9b0aa6cf182bfafd4d82ae13a2902f1333b1d0642d45009f4c78f
- MD5 0e22b431abc5844591e9775fe2a91d42
- SHA1 9e9e2efe0d2159087ffa6b49537ef3f1c0b43f5c
- SHA512 dc81d1ff4d929284022befcade903536a928c3fae23550e761009639a2ec24d71e2c067aaad54dce7ec3050bdd2cc5a3fcd66b0a6ae71337e56887361daf4d8a
- SSDEEP 12288:NQx3ZisMtTzaHzqRQ2oie+3le+sGDEE4eC:m3iX9zaTqRQ2oiVbDEE4
- TLSH T1D4C4AF1276C1D0F6F4AF00701A69EBAADA7DA9304F31D9C7A7D42EAD89345C1973A343
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\@warren-robobloq\usb\prebuilds\win32-x64\node.napi.node
- Size 681KB
- SHA256 a7e4f777ed3d1753d60020578ad92af2e3b7e3cce804699ed10493a3d932b320
- MD5 f58624395b675b6085a9b9082c5475ec
- SHA1 14bb16cf8b261065cec478f2760fa12ecb549ff8
- SHA512 6d7e1a6ca59d36382081fd9eaa7221088cb87de50643c30bd97b2bcbbc05b095d6a92ba909eaf2858f63027c0adc009dfea6e07c6a6b0fe8f7a6e62660cf701e
- SSDEEP 12288:VfAcIX07kpM7B5xRfwkfkUcq0cD1ZfCGwb:icIXHCBXRf7/cqTZZfHwb
- TLSH T173E48E16A6E802B9E1BBD135C9934523EBB1B849137077DF43A04A996F37BE1863F311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-darwin-arm64\node-napi-v3.node
- Size 198KB
- SHA256 0ce780aeeb1e9c7f7850325990fd3c7f8fc11cdf3adf6f6a173aaacc861d798b
- MD5 85ac41077414c7776bfb61f1831a4fc9
- SHA1 95a02489ce60ea74978c12828b9041601daf8013
- SHA512 c6315806b7dd9de63d734b5dee5894f536ea65622a0b7337f31d6add38705137bb7d8429544eebde447f67113a89e39d3da13a9e6fad1c3e5990322e0477a5dd
- SSDEEP 6144:ESv6/UZ7b3GQ00SXPMn4fKtailu72RPkBe:JeUZ77GQ5SXPMdD
- TLSH T14B140946FFBD5D12D4C9B2FE4D0146A9B11BFEB48E21C3F87E9A420C9C85391542AB27
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-darwin-x64\node-napi-v3.node
- Size 182KB
- SHA256 b31148f180b7ad348b5d34258341205c0c90879297b18e200dba4416950924e0
- MD5 523b78f39d488e911acf3ba7ce4e18f2
- SHA1 034f856e162f3cbff67907e67f193787de796485
- SHA512 155dceb768b12344f42ca898670f26e14e73405559797d13b9165e085a56a9e4e8f9330b096157f5194663a6a396669266d8dfd1438ff5b5e849d7d04f48cfe6
- SSDEEP 3072:WtnLyucweA24aAfA0trvQzTUMfLCQ/f3/ORTI/Wle57TByhPkBb:+LVcweA24aAfA0rvQ/UMfLCcvks57TB5
- TLSH T1D6045B26A37AC0A6C9D5E2B0166F42539B20F5BB5F343B5D13D8E3181F71DD36B2920A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-linux-arm64\node-napi-v3.node
- Size 211KB
- SHA256 f07204583083835f887cdc19b51281bdfefb858736371c5c4c07730bbd266d79
- MD5 b780e8558e25bb975b9458b64ab61958
- SHA1 9309f02bfb5d8828e86e7160259c4fd6e2f5ba91
- SHA512 3d768cf40800d2ddd78bf008fa5d9cf273d629b043f1d0ea9849fb5850c0eaf61b62ff2407662eced8e6b9f1c073d3d39bf9326fecbaa6effcb566a4d0e8c00f
- SSDEEP 3072:2AHiB4kXXbnvguZPvXrCca+s3v2a6Wvxf2MqGKyO1Te95yRjqs:2DB4kXXbomn7Cxvx+MqaO1DRe
- TLSH T1C724190AF75DEC02E04AF7BE5E0E43A2F12B5C8CE36491E93532532DEF965898B76450
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-linux-arm\node-napi-v3.node
- Size 140KB
- SHA256 cacd01b510fa7bb990853d241c28b12618029fc887aa719204bb543734ea524a
- MD5 279e812c2c6f301a9101b06573a230b3
- SHA1 7128c78acc48b231a1846b7626dbbf0240c96526
- SHA512 844d854939bfc91100f1ca682f7b369631dafc2bc7c26493c3394b638621ac42cf5e3c789101ae664862156d69cba5baba41ae14c9908deed00dc21e680a1990
- SSDEEP 3072:AoB4p87JmMyumLIJUBVan8zBxTq4U0jJ9IqM/YbskBYqK9DcFnR:AoB4p87JmTzLB7anA3+4/jPCYbskBYrM
- TLSH T13DE37DDAF65D8EAAC881F3FA3C538D91844D8CA88DB08B52DA500E3D4DD70B9543EF95
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-linux-x64-musl\node-napi-v3.node
- Size 245KB
- SHA256 e06ea75ed09de9c486b4b8b7c8a0655b1096593955f06c7ac22d8d9b923b06e4
- MD5 3046fb1d3ac9ef42bcaba5c598dd1b57
- SHA1 f789dba3138fdc25a2a6b4363a93ade4ef5ca677
- SHA512 e82f4a6b2fe37793cca872af5f2290773311cde9075acecf8b415bb3f891d2c56465081dab18906e3f720d502f9d4e95043215b2bc71dda5e6455d4fc93b785e
- SSDEEP 3072:ISjB4WqFA4riCpqOS6GM6Rhwa/3R6Byqrgcs04MppoLMigpC6kFpdXebqIHDNjf:HjB4WqFA4rA3uJccsANpYFpn0Dpf
- TLSH T152342A2BB2148C7CD86681B11DDF839101A2B5FDD931A41F36C96B7A1E938B14B1E3DB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-linux-x64\node-napi-v3.node
- Size 231KB
- SHA256 43a558956b7f7bfc94c270faf861fd1b0276c9247a58d8fda0c0ed0ddbc61787
- MD5 308605e43cd1d7e75d3654a628624740
- SHA1 ce3d9f7dbeb0a43983041231f636728dd8fbe902
- SHA512 5ef2a1176bdffb31f333516c969cc9db9b49aeeba27430fa21462898876d0949e148f3bdeaad20f170d813c4a498f8df4df7479dcb8bd5cd7056b6231a4c6096
- SSDEEP 3072:kZTzW6XB4eHXDUkDuYNaka5YNW/aM/ImD4vQq5N7VpM51qQT7U8L57aY:kXXB4eHXDb3++QaM/ImD4v5gbTQ8l7a
- TLSH T1AC343C3AB2144CBDE86181B50ADF82D21171F5FDDA30A41F37C8977A2E938A14B1A7D7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-win32-ia32\node-napi-v3.node
- Size 469KB
- SHA256 5f286bba3b661b278261356b5d476386923b6f97e2b41e4e7e66cc182fda5257
- MD5 0c60346c46349b1e17488f1a940cbb02
- SHA1 c20b8ad071f342c924bd0f5c2f74474cadad1275
- SHA512 efa78f9621087349edcebffdfccb99763c92b986926e751f68e7dcaf1addef5321689e950d1bda18259969a1d1b618b1cce9347e9c1aaec8a51156dfb584e9f7
- SSDEEP 6144:/uNA56ba6p2/zdd/cFDVttmnUGHA+VwZ3JXPx3QdpqYxsNKAO2himBeA:/OA56Ppk/cFDVtUnUGH16Z3JWgFBeA
- TLSH T1FDA4AE217186C0B3D87F013015289B7A667EAC710B3959DBE7E46A3F5BB05C28739E1B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID-win32-x64\node-napi-v3.node
- Size 613KB
- SHA256 5eec7398592cb3a009eb3fce46243f64429429fdb7426fa212dc149fcd3d28fa
- MD5 2924460e91ac35ffbfa0273b6032e6ad
- SHA1 60300692c937c6c6fd67e8d6e1166fe0fcd5cfc4
- SHA512 f70b896eed3939d61cfc1cd75c3d4dbd3978702d468153ed0ca0fd079bb2be5868dda8c1dd12cd5b378774c425031eaff84f3c3a07b484661f8fb5606324a7bc
- SSDEEP 12288:YQYwgqfDGLk7iIkYGBS6hg5aKsmsf65n5CmOAiAqRc91534xB48z+gV52rkIJnAs:n5tLZ44nAKhI90f/
- TLSH T15DD47D1962AC41B8E177D078C8979916E7B278461331ABDF43E08A6B1F2B7E15F3E350
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID_hidraw-linux-arm64\node-napi-v3.node
- Size 199KB
- SHA256 5c036de425ee8ec85ecaf99c7b9fe488d901fd54d88b2f8a8949c54b05fb626c
- MD5 6ae682fff9eeb1a33c99d0e8eb90bfbe
- SHA1 c478e8aaca6065094110cf1a5fe1e31d737dacb3
- SHA512 44aa7f11734152c5a68a6a4bacac10b789fecbded1faf4a922fbdafc8d7833621557598650399f99761648253aebc63ee5fed054b46771723f4c8bcb1622ce42
- SSDEEP 3072:pUyNzB4kXXkhfcdZcUNS78XeXk6o2ZFULDCu4oFa9C95j+kjlra9:pxzB4kXXIcdE06jZuHCuTF2kr4
- TLSH T1F614294AFB5DBC02D04AFBBE5E0E8392F20B5C8CE72491FA3521531DDF966898B72511
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID_hidraw-linux-arm\node-napi-v3.node
- Size 134KB
- SHA256 a5b4addb9a800fd605d1587da97d10d9f7941638a4f2ac738967a1be7d6eb5bf
- MD5 1a96c5deb479034e3fbfbf4a563891d3
- SHA1 c4f278bca379495549bb741972f66b8a6ce3ac3f
- SHA512 caa6ef0603418e193eb87c2708074d9e1f7a5ffcacd79a16acc662becf207b9dee6a479c916a78c81226f764004b0706819f7d350518a17593dc483e37fdaa4e
- SSDEEP 3072:f3CcB4p87ghpK60mP7gZOYOAoxX8Y3HoV/CCOOm+ozbev:qcB4p87ghU9ZVeXpHoVaLODozb
- TLSH T1E4D39DDAF78DCFA2CD92E3F22E638E9564599CA85D604F6395C00E2D4CD24B9403EBD4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID_hidraw-linux-x64-musl\node-napi-v3.node
- Size 230KB
- SHA256 df9df4565fd758a82126f8e408011958f824b26482b288a557071bab7f0db4f4
- MD5 2d6fe26154e7e03bc7d56b208590982f
- SHA1 063dc8a1500e352fd8a5c197d308c6c3241e5202
- SHA512 b9f2d457460894e3c5e73f915385a843b2fa5dbf685df2f4b264fe5021e5518e480ee95a9ac3583cd3d70d2c0beddf04f1f3c5483fc487990b0b98afabf37369
- SSDEEP 3072:gB4WqFAYTREpX+yjwpOYuXw6xlAKZ7GllCQJyPwmYpT1IKYX3j:gB4WqFAa/1uBsKAuk1IbXz
- TLSH T1DC343A2BB3188C78D45681F01EDF839201A2B5FDD931641F36C96B7A1E92CB14B1E79B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-hid\prebuilds\HID_hidraw-linux-x64\node-napi-v3.node
- Size 215KB
- SHA256 69fb5fb4124c0a7d20defca43420873e38bb1b1af3f9a5072285581ede58dda1
- MD5 5ec13ac112b25526fb19fbf2b23892b5
- SHA1 9c90477a4c2d3be2b50ed18f0cdb49a26c60b8c3
- SHA512 a2881f99d8bd47a99b444e96a89e853927cad38d1c2eed0c9fb9587d30eeb4a7660158bd39b1e3d2e991b0b50996a7ffbdea831966d22dd1f403d13ae6427545
- SSDEEP 3072:6TO9LB4eHXdcqotAGBraFJ6KAODiEVIsTsDUtG0GcuDCe:6YB4eHXdiaFJ6Kg2ttG2re
- TLSH T1A6243B3AB2144CB9D46280B50EEF82D211B1B5FDDE30651F36C45B7B2E928B14B1E79B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\android-arm64\node.napi.armv8.node
- Size 267KB
- SHA256 7979549425402d9fd75fb3ac7c2dd26b6884771e53c488f775aed9f90a9df7a8
- MD5 dd1ed3639d916f4b862ccbaa4d2a808e
- SHA1 6e5d2c4f762cfe24d6391566aab40a7ae4a39e35
- SHA512 13188de6580f9e9afbfb7663932bfaed20e8eab82d9c4f59736a40d9d0eece976ed1e45101f6cfec5bbfa397a067af10c5e473e2da03e8215abc0e8c438b8ea6
- SSDEEP 3072:im95JGuFKHGH8iCUJn1PxvspLEyZukm4VtCkGwgQCAVnjHbQMF7t1HHZ4voQZB98:JFKHB1TtCkh5jhFLkB9j2txIHMz0GM2
- TLSH T15344170BF67C9D33D08AB0BE8E424BA0F22375654654C3FA7F26464CFE59286E505BD2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\android-arm\node.napi.armv7.node
- Size 249KB
- SHA256 b4d152765fade095183487f08e33f50e2e4dec3b517e01a8f1a311c6ae0d1d6f
- MD5 de9a5592b41d7f4c882d51b6d9506cf1
- SHA1 10b8ee6a44055528f195a721d4b7652c83c34238
- SHA512 a6c531c3053b9bd622d09ed57c0177717734e244a6fadc8a3c710656959008ae04aec7479afb80a8efb645fe613a8b53e409abc149bda67dea91dd2e2e208604
- SSDEEP 6144:Ii7FKX+GSih9xZfDgYC6DBbaT70UnaFiNK/x2BhNA0u:LGSih9xZfDvC6DBOT7CsNrtDu
- TLSH T1BA44D7AFB894CE02C4D5257B751AC1B83247A3B483DDA7129B058E3D7CDBACE09366C5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\darwin-x64+arm64\node.napi.node
- Size 567KB
- SHA256 e7c296a32998cdf5d05f88b4b66627ba16e15e4089c7dd62b7d7bacbe2053980
- MD5 fad0031c13b427672bf30a47c8cccabf
- SHA1 902003d5d18c7c5a32c9bd28146e2cc8de7b4c86
- SHA512 89c4a004c525608b89d0f5cbd673661a497f4bc6466334f766d77446e091a3e6af8225e1b23b70d1d4dc443e10d7f2487b67ff4321dc1150d4c4405db9c856ba
- SSDEEP 6144:E5Yi/WLvEru2YKbixfv6lmzRb72jKIfkB6WBYdi0iI6hjv9NxM1TBazw720kBKdw:2x/WzQoDmKIpWBYdRiIW1yNQ
- TLSH T1CFC46C0AEF6C9812DDC9B07D4D6E8660E01BFD648E20A2BD7BA5F31C3DF56E24216507
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-arm64\node.napi.armv8.node
- Size 252KB
- SHA256 101ac804446c81997cd43c544a9046b2d21ed18ad3a960b8820b0068976c6b63
- MD5 5498484a0626a8522b6e46ae3943f79b
- SHA1 6e6ed7c59426f885e2ac9c5bf0cc83e4c7433e09
- SHA512 70443c85d7680ac974e9517891c00f1c80f5bf77459990dd0e67cb094f228274dcca71ac25b5bacdd5c8522d327e3e0991ba0a4fa30a6a9eca5f7f81708a81da
- SSDEEP 3072:X8B4cgXaGbJUwLFWizEeaeBMZDOeQ+NUls2T4RpL0cV2GWJdaJhYnIahN5k0hfa8:MB4nbJFXzp1KpL0SKI
- TLSH T109445C9AFB4CBD12C1CAF13E5D4A4752E20B9C8CC23567E27710A25DBF964CACDB2419
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-arm\node.napi.armv6.node
- Size 227KB
- SHA256 771d34dd9e582502eee89eea5b59d6b05858d65a2ea12018450a6b4a0108620f
- MD5 48f6368e74f4e1cf6d7ac69aa99ec7a9
- SHA1 97d4753bc70ba8c03d164a76f0ad2c9cb676382b
- SHA512 e7fab6dab53b34287222f0a886282f5b18d26f1ddb70ec761419cd0ecdf1dce2a4a12e8035192c8eeb358c1a7553b05684458e3192072f22240911dfe01d2ae9
- SSDEEP 6144:8VB4oKXRJrugjtlAkbgmOdWVKCxe1jjYtRtVJpC8H56ASfQg5:83KXRtugj3AWgmOdWVKCxs8ftVJpC8H+
- TLSH T187341A57F994D69AC0C026BA771EC3697353EBB5C2FF3206C5209A783CDA4EE4539182
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-arm\node.napi.armv7.node
- Size 227KB
- SHA256 cc5df5eb0a977993c32f1f3500222622f7c72abd324bebbd7ed1040b648d3320
- MD5 957ef0cf774b12106d832b42c1f71ae1
- SHA1 c9bec126e1b061707414159fbd0c3935cd84bcf8
- SHA512 0de9a8373255985312ca4315ba48b81cd80a80209c80b04cae825a0d89d7479719eb59e9b77325f86ba16af72fe11936c57dba69608d30c73c671e19479aa4fb
- SSDEEP 6144:umB4GASDxQ1swIN55q7t/i+Kh6KpYldxiHOuy5/rco8PiNB:EsTN55q7t/i+Kh6Kp7uuy9rc+
- TLSH T177341866F998DAE6C4C067B7770AC3987353ABF4C2F96207C6158A383CDA4DE0639581
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-ia32\node.napi.node
- Size 301KB
- SHA256 da64f84eacdf4b791916f1d463a10ff071cb5c142ab8acd3a13a71d2d42dcc6a
- MD5 669677ccfb9289823edc863afb8121b3
- SHA1 285e9b61bf2bf9089be5f87d775145f80540947e
- SHA512 6a0b4306342037e48332e3dd896465fc59243184728bbb5dc32c7406d4dc6f2a383ae0708e1bd45d4f9b034525e2648f2996fa73ec9cf6eb024ffdf30e4d9f92
- SSDEEP 3072:G6QTB4H/jVeH3nZz5IqVtH/mm4Rufy6bp0OQOkOoOkO5I/F8lngJ0j+y7/dNfIza:GhB4o3Zd3tHuAgJ3o9RX
- TLSH T17964D82FB611DC32D2365CB305C58790B0355839B702F3537CEB2DAAD5AA9C29F593A4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-x64\node.napi.glibc.node
- Size 264KB
- SHA256 4d315fe6953802b240754371d21435ad6aa3a3f844408a42453da204264c2257
- MD5 cc45e67f91c168152d159c505126201a
- SHA1 399f7523620f6a948a4e120414c8d2d7e0001275
- SHA512 7c2c3fcdf45149c3b82da785816aabb647f6e398fcf02d5f9289ae410838c77fdbb9fd592ba239aeabd9fba489438eb0b34c4fb35ccd2bba8ff3783e84133a80
- SSDEEP 3072:YjbRB4+saK3ef7PksIVshDOGUbsbackk+Xna3qDTCQUUTLiqSVgAvyb9+fDrzYC+:6B4dJuf7PksIVS9GTCRUTLYqL0n
- TLSH T1D9443B1FE260847CD059C4704EAF42D196B0F9E98B35341E32C6FBB53E91CA14B5EB6A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\linux-x64\node.napi.musl.node
- Size 266KB
- SHA256 e04ff70d4dee89356099c52d6b533a958283d07010786a9bd9ed3501570e0101
- MD5 1f4cec904d7f0c7a57bb1c7b266a8270
- SHA1 769257561176ebf5a2a72bacb9f534ade38cb598
- SHA512 d7bac9fc7dce46622e90b7367cd3af6012a792fad28413d674fa39260a0f6a801fedfd911ab4d2d8306df01cb870aeac88d6f1fb25e85d8f569c6ab9ae1bb2f7
- SSDEEP 3072:8OwYadBKB4ySdtKcrnEvYxXPUTwg6ZLHZgGN0/1uFV175GwUMdYCDAhLhrp9+uEN:8lJGB4XzEvYjHoCU95MB
- TLSH T150442A1BF25484B8C05AC1B14DBF86D241B2F5FDDA323A1E36C567B43DA18A2431EF96
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\win32-ia32\node.napi.node
- Size 525KB
- SHA256 1d2fc38aa3ecadd30e0967ec727c1744afe86e0b5c2ca1a527fc6ef2f3449d96
- MD5 36caa1ca5b936e5f94863e688e2d6dc7
- SHA1 6d476c850add905f517fcfc63b9b02edea0777fe
- SHA512 ec83c44a3fd05977bff965b640d368f8e0865932bc8513ba0260c2f9dccae6c95e47858a87f15d8033e8599482e1b2bb4c516736d900f80496ce95ad75adc97c
- SSDEEP 12288:VVqFJ2hxy5E4hX+6MJ8SJwzKAQAQuyWOPEMv:D8My5PhX+6MJ8pjQASPV
- TLSH T1EBB4AF12B2C1C0B2D4AE01700554B7B696BEBD204B3589D7E7E0397DAEB05C29B3BB57
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\app.asar.unpacked\node_modules\usb\prebuilds\win32-x64\node.napi.node
- Size 698KB
- SHA256 0c5b0c120d215680f3b9db514cddcb12922ddd228f5c780cec83a31fd8fa40f0
- MD5 3e20639051ac7f002dfdcd25cd82d3bd
- SHA1 5590c1f8ed977e18ae38c020bc52b8596e90fbb2
- SHA512 9726dced74306290fb9c0951059334f36668dfb77c7bfabc4e9cc9f7877464db9fcb9d4ba4e864698d8d42c6bbe5730c77a5110339b88040325ad7be5f060629
- SSDEEP 12288:1oB27SXIu1h812E+qZePZ6aNlC80qU89W323Ia2JuV06koZYpuT9NS0LL4EVLrg2:Y7XTESqEVfg8IrnOVw
- TLSH T1C6E48D1662E842B8D0BBE135C9875616E7B17409137167EF42F046AA2F2B7F29B3F311
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\static\osx\tray.png
- Size 1KB
- SHA256 598f5465fb5fecca46940783daf6a0369146e83618734c5be6d8ce9948bd8598
- MD5 8616a00c95dbd124bc9af883061957bb
- SHA1 fb44774e38bbd1a0d64b846e6fbdba4bc7703df9
- SHA512 5350661c66f3717fc62e0a78f3999a4c99447a849c0b8081b016c98335da1beabf0f2b48e565fcfdd865b01c046d4a07016c1f80b35317f7e559e55a7e3a4f9b
- TLSH T1F731839B7A209893D48CDE5716F5949ACE278241C5D060ECE9CFC09A41395E889F5DCB
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\static\osx\[email protected]
- Size 2KB
- SHA256 e107b801176d9565ab120be14477f7c59edbf5058509c70b8d0b6273e58c52f8
- MD5 54944c47c4827bfee1d0c66b2656b523
- SHA1 5ea99200ccbdc6a9d1ccd44d1e0a9192ddbfaa2e
- SHA512 484eb27f26b9001a1cde1bee1989ae98cf0b880c973dfa1f5bb9e2d8cad194aeebf4cc93a0ca267324112d8fd5e8b69731bd9494a67e3352845f6188a9e4376a
- TLSH T146514C8EFD618C83C9C3CC6119C9606ED92389D1C5E4D967E69FC053023A3A5DA95FCA
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\resources\static\win\tray.ico
- Size 1KB
- SHA256 43f943fe3803c6f2be3ab591816e197e415212cae8c9056112b4bb793bfaa01f
- MD5 cc0db83cd8536e562341ef557eab2748
- SHA1 816593a6365ba71d2c66fef10a4d135058442a3c
- SHA512 46fc13ac88f8016b8c09d14c7654f61984326f53396e11e224c495c45958d01c17375905b90a5ecdc1b50719e0a95b349cfe476c66abf875d2fd62ffb06e9b61
- TLSH T179219A095C62E49FC714B4B0AB077EF5B5985C714049E33246A63ECB8E33F04E09A1D8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\snapshot_blob.bin
- Size 168KB
- SHA256 8613412ebcf462373d4d50f5729f5b9a61ef2b5c599b267f750276c8e29caf25
- MD5 d276f526d6af118924193274b8456df4
- SHA1 19043bde20a58102d48e94a90074ab76cea9401d
- SHA512 4babc0c7df37a873053b6df8d3a3ad80a7231fbfbaae844297730bc4035c00a248812634a37ed12ccf569b0c250d0f15a153dcda4403f335e5ce270d4e96e186
- SSDEEP 1536:1cdXkSCh6cYvaSvdoaApIVzFD41OM4p6kpP31/mh9BgyLU0J/3o4kjK78HdS9ObV:g7FogD41O3p6kWnU09+ql+PAO
- TLSH T12EF34069D780BA36DC66AEB040B28A37FE31B7597805D21F90CF787D18BAEC92D5D140
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\v8_context_snapshot.bin
- Size 471KB
- SHA256 add78f3f85f0b173cbe917871821f74c5afe0a6562462762b181180d16df4470
- MD5 6503b392ac5c25ff020189fa38fbaecb
- SHA1 50fb4f7b765ac2b0da07f3759752dbc9d6d9867b
- SHA512 9c12fff1686845a2c0b43d35a8572f97e950f232f1ce5690fd1212f48c171edbcc5d725754f10a66599b0823ac0c995c7212e263b7e02ea0ed9f2d2b937fa760
- SSDEEP 6144:PjKA3pW4TRXsLj3EpK0P8iWhyFUaxw/5h56N:r0LQf8i2yy/5h58
- TLSH T116A4952CB701FA22CC576EF049F1DA51F7B17E8CBA02110BB1DE5EAE11EAB852D57190
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\version
- Size 7B
- SHA256 a0284d55dd0a3caa73f370b843bf9d52fe38adef2250ffc91db485b3b063daa6
- MD5 ab673fac30f954a71299726bf53ce210
- SHA1 29d7695cb1e97a88ca2e02259a4b03a0df26c32f
- SHA512 5ccdd1511d23e0d421e8423b29d4428c6a4210e074a5fc5472cf3f57036ac7ff74e94780edbc4d2f167514392ca7d6516dc94c4b426d733c3b8a62c46d3b6a0f
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\vk_swiftshader.dll
- Size 4.9MB
- SHA256 a32c3fbbf74699a10e7642bf4901191f29c88c5aec93ae7ba28c79ab28462a69
- MD5 afb174ccd1abb292da14779a079d4282
- SHA1 ddd74e61c48c4445f1b3fa886b7c28b0de3f1859
- SHA512 fddd4d70dc6b8d424adfa509ad145845d13d898eaedb1706de357cf1dcd4eb25fe581c9dc58c1de0954b1a10b232934d219563a1e2e8ed1bc01412bfc789cbfc
- SSDEEP 49152:/GrnxGr9pGmj8pGtA/bVVku6KZlxsMOtVKOkc4FjHjAW3vZ1B93k1RE7SrLop8cJ:YnxY9NURayzxX61u0Lflb0wrD
- TLSH T144363903B295819AF05ED179475FA632E631FC811B7276DF42A02F192E3BBE06B39705
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\vk_swiftshader_icd.json
- Size 106B
- SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
- MD5 8642dd3a87e2de6e991fae08458e302b
- SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
- SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
- TLSH T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\7z-out\vulkan-1.dll
- Size 894KB
- SHA256 1f8b647f161f20d45d554e349b3e5ef0b7b5da8c7bdbc1ff631d37dc9c819503
- MD5 7ba000aece0d376e6f77e4c2f48f69c8
- SHA1 24b103a2d9d5d742783ad3ecbfeb2cc57bd711c6
- SHA512 d051ed9d1b9c28cd38da020cebe8b58da53c520f8686dc08fb9e626a9751c23fc43b97b2c309314e3f9a94f1eea448b77657c955c7b22aaadc6c0753b85f744c
- SSDEEP 12288:3P1VNNJPqXu9D8xeLoCzG4JsZGS5ld/YlmQAuYvyRnsBsoj89C29h:3PXJPq+9QeLpDpmQ/YJBseS9h
- TLSH T10E156D27AA944966D476C034C9828603CDB27C921725B5DF03685B19BF6BFF83B3CB25
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
- SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
- TLSH T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\nsProcess.dll
- Size 4KB
- SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
- MD5 f0438a894f3a7e01a4aae8d1b5dd0289
- SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
- SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
- SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
- TLSH T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsg137F.tmp\nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
- Size 2B
- SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
- MD5 f3b25701fe362ec84616a93a45ce9998
- SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
- SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
- MD5 SHA1 SHA512
- Path C:\Users\Admin\AppData\Roaming\quiklight-desktop\DawnCache\data_0
- Size 8KB
- SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
- MD5 cf89d16bb9107c631daabf0c0ee58efb
- SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
- SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
- SSDEEP 3:MsFl:/F
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\quiklight-desktop\DawnCache\data_1
- Size 264KB
- SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
- MD5 f50f89a0a91564d0b8a211f8921aa7de
- SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
- SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
- SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\quiklight-desktop\DawnCache\data_2
- Size 8KB
- SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
- MD5 0962291d6d367570bee5454721c17e11
- SHA1 59d10a893ef321a706a9255176761366115bedcb
- SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
- SSDEEP 3:MsHlDll:/H
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\quiklight-desktop\DawnCache\data_3
- Size 8KB
- SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
- MD5 41876349cb12d6db992f1309f22df3f0
- SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
- SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
- SSDEEP 3:MsGl3ll:/y
- MD5 SHA1 SHA512 SSDEEP
- Path C:\Users\Admin\AppData\Roaming\quiklight-desktop\Network\Network Persistent State
- Size 300B
- SHA256 2a62145242a92a3132d486bab358abd484b566fa4d0a3bc5177983177f30be93
- MD5 646e932e1132a59b88cc914a4069f829
- SHA1 b99c140017ab4c9e29e8d748613c0fcaa1071fda
- SHA512 103d12220796bc8fa8d126fa6658e2c015c1b461f8519d648299c15f8cbad1682b5516d95bdd9a6c2f969a82789b7188ad598ab31789c1f83ee60934bf9888c8
- TLSH T191E07296C2D86CBE068143F02A282913C2BE080982183E06DAE8AB1E43A14BC480084B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\quiklight-desktop\Network\Network Persistent State~RFe5a9c8f.TMP
- Size 59B
- SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
- MD5 2800881c775077e1c4b6e06bf4676de4
- SHA1 2873631068c8b3b9495638c865915be822442c8b
- SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
- TLSH T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
- MD5 SHA1 SHA512 TLSH