Analysis

  • geolocation tags

    nanew-jerseynorth-americaunited-statesususa
  • max time kernel
    152s
  • max time network
    138s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/08/2026, 01:41

General

  • Target
    soda-beta-setup.exe
  • Size 122.6MB
  • Sample260813-b4e83axybv
  • SHA256 dc0586ea15e47a4f5c2cd2a6863a52e552bf6e9a85d5949da0e85abaf205e832
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 6 IoCs
  • Loads dropped DLL 19 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Discovers running processes 1 TTPs 1 IoCs

    Running process information can be used to identify security tools or plan follow-on actions.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 5 IoCs
  • Suspicious use of SendNotifyMessage 3 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\soda-beta-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\soda-beta-setup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3300
    • C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq soda-app.exe" /FO csv | "C:\Windows\system32\find.exe" "soda-app.exe"
      2⤵
      • Executes a command shell one-liner
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1820
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq soda-app.exe" /FO csv
        3⤵
        • Discovers running processes
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:1992
      • C:\Windows\SysWOW64\find.exe
        "C:\Windows\system32\find.exe" "soda-app.exe"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:1928
  • C:\Users\Admin\AppData\Local\Programs\soda\soda-app.exe
    "C:\Users\Admin\AppData\Local\Programs\soda\soda-app.exe"
    1⤵
    • Executes dropped EXE
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3012
    • C:\Users\Admin\AppData\Local\Programs\soda\soda-app.exe
      "C:\Users\Admin\AppData\Local\Programs\soda\soda-app.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\soda" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1712,i,1490765788133395612,3822316914332566905,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1708 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5560
    • C:\Users\Admin\AppData\Local\Programs\soda\soda-app.exe
      "C:\Users\Admin\AppData\Local\Programs\soda\soda-app.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\soda" --field-trial-handle=1712,i,1490765788133395612,3822316914332566905,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:11
      2⤵
      • Executes dropped EXE
      PID:4572
    • C:\Users\Admin\AppData\Local\Programs\soda\soda-app.exe
      "C:\Users\Admin\AppData\Local\Programs\soda\soda-app.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\soda" --app-user-model-id=com.4urxra.soda --app-path="C:\Users\Admin\AppData\Local\Programs\soda\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1786585363432924 --launch-time-ticks=611453618 --field-trial-handle=1712,i,1490765788133395612,3822316914332566905,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2420 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5656
    • C:\Users\Admin\AppData\Local\Programs\soda\soda-app.exe
      "C:\Users\Admin\AppData\Local\Programs\soda\soda-app.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\soda" --app-user-model-id=com.4urxra.soda --app-path="C:\Users\Admin\AppData\Local\Programs\soda\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1786585363432924 --launch-time-ticks=611508563 --field-trial-handle=1712,i,1490765788133395612,3822316914332566905,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2440 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4544
    • C:\Users\Admin\AppData\Local\Programs\soda\soda-app.exe
      "C:\Users\Admin\AppData\Local\Programs\soda\soda-app.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\soda" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1712,i,1490765788133395612,3822316914332566905,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=3536 /prefetch:10
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:5052

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        LICENSE.electron.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH

        LICENSES.chromium.html

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\LICENSES.chromium.html
        • Size 14.6MB
        • SHA256 6965e1b04dc81a012981508299e28542abff2bc7f418071c264f0b53e0c63f34
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\chrome_100_percent.pak
        • Size 163KB
        • SHA256 4474d496b4eb082073fb439133728eed72da35f4519505c1c246ef2b9552cf49
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\chrome_200_percent.pak
        • Size 252KB
        • SHA256 3e815b1223026c0bdfffcee62a58885e0ccd99d77f0b950778d109832e38e9cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.7MB
        • SHA256 289767b49dc8525bce262ea06fee4ef9fced2e131a55b25654ce871c1f0498b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxcompiler.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\dxcompiler.dll
        • Size 24.7MB
        • SHA256 6bf9d1e2befc53a95b7b7c374def814af0e1a21ddeb617779397e3e6ccd3b497
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxil.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\dxil.dll
        • Size 1.4MB
        • SHA256 473f5e853120a5b6ca583ac51f453664abae15c0db1d307f29c8bf7a7b89f96c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\ffmpeg.dll
        • Size 2.9MB
        • SHA256 67f37568031d61040ae13022a8ec933f7d4ca7faecbb71a701f0b36489c5a330
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\icudtl.dat
        • Size 10.0MB
        • SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\libEGL.dll
        • Size 493KB
        • SHA256 4e33a8b0632cdab12c0fab456a7d76c3c608fc9940746acd158effc493ba49c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\libGLESv2.dll
        • Size 7.7MB
        • SHA256 1a606ebb09bc8bcb64edefffe3fccecf720b557b9f23ba2aa4331b58106d9991
        • MD5 SHA1 SHA512 SSDEEP TLSH

        af.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\af.pak
        • Size 546KB
        • SHA256 5f3f662f860d0f319027e68d4fb1e68933b2bc3d1beff05bbcfd13f490623bab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        am.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\am.pak
        • Size 886KB
        • SHA256 ca2e31cb035c8f48758c1181078edfce56127ee782198f8765cfd16b5163bf16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ar.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\ar.pak
        • Size 980KB
        • SHA256 a9bc6ec0e5d458468e0659e19641b52ca371f03daa92b84c63bab38e4ce3bdcd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\bg.pak
        • Size 1011KB
        • SHA256 5907a91c11524603f87bf474825d2f30562a89fd9a8e2595f2fb9003106e6201
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\bn.pak
        • Size 1.3MB
        • SHA256 0a88efecf87d216bbb081d3d26f8ac91656642ab52a66ff9d91ee8e61673d7c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\ca.pak
        • Size 615KB
        • SHA256 74c25c05829be034b1ae6469205f07830f9733e28989a3e500322493536f0279
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\cs.pak
        • Size 636KB
        • SHA256 efb45cc491a3df934aee0eef9eeb147643823784d696a53036ff9c9c2eefeb47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\da.pak
        • Size 574KB
        • SHA256 6380dcf390f08fba53019aede4b5b26754eeaaf6968147780d8f085a9f8c2631
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\de.pak
        • Size 615KB
        • SHA256 ae28e9e71aaf424c0323f2949f7426405ccf7509a2568c93bfe29690a7302094
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\el.pak
        • Size 1.1MB
        • SHA256 5e5f96c79a23c8c2a00efc76918594fa3c13d93d75effe5ff7df4cf78d820396
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-GB.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\en-GB.pak
        • Size 498KB
        • SHA256 2565bfd2216dd922c6d099e276c9c098cbbc0bb65d089c191b253ba592e74cec
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\en-US.pak
        • Size 503KB
        • SHA256 b9a2cccc13d7dac53210e37248dd70df32dbec43bd33d2c663c6290155fb751e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es-419.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\es-419.pak
        • Size 606KB
        • SHA256 6cee6e9e899e7ee46dfacfc21ef78533e1b98907570d82fd58f1065e1efb645e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\es.pak
        • Size 604KB
        • SHA256 cf47d64bad26d12f6f39f56c4cef093aaec2ee4a1f7b4e88f6b08d34034865bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        et.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\et.pak
        • Size 551KB
        • SHA256 20c0c24314c9e49011220ab545441efdb49780d9966285e48c79a9512665b7d8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fa.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\fa.pak
        • Size 907KB
        • SHA256 9f687b6e3ab82e33ac72f866c101558aa49923ac98ca6e49c0daf5d2220b130b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\fi.pak
        • Size 562KB
        • SHA256 e8ee33a17b25b64ba25c55d688eabb90f49d8f3ca29daed0d54ef693bab9bca0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fil.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\fil.pak
        • Size 636KB
        • SHA256 5c2ec565f41cf4b2664054d52dfdf8db1782a13b97b5e227917941e7c5ae8887
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\fr.pak
        • Size 656KB
        • SHA256 a33c1812a95c46fd03317620211bf1f2212b6f089d2520df30ffb1c116de95b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\gu.pak
        • Size 1.3MB
        • SHA256 89ce115c7b2c5c4eba2640fcd5b11355224e1faaf3950d7a16de203db4b8ae08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        he.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\he.pak
        • Size 796KB
        • SHA256 e91cc42a2e369914e6bd3535b5c15bcc95334974b6a059c585b995ee92143df9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\hi.pak
        • Size 1.3MB
        • SHA256 b7b9c280c81b6e3ee3e5a8f7884602814740cf72983faaa57b43f6e369b240b9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\hr.pak
        • Size 613KB
        • SHA256 bb05be3c417bbda1662a5fbb0ad411e5016b5be59e28ce466be6294908c6c961
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\hu.pak
        • Size 658KB
        • SHA256 484a56e14cd1fdc0933f6c1b94a57af6f5fd774c729e100f10ff3406740d5184
        • MD5 SHA1 SHA512 SSDEEP TLSH

        id.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\id.pak
        • Size 543KB
        • SHA256 91cb6812b4e995189b1e2b61ae0565b92dac4ab3c34efd6e0920591dc005d82a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        it.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\it.pak
        • Size 596KB
        • SHA256 a71cbb5cc0336c0732e9781e6965b9080ff2f160be1696724da27d78b470262f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ja.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\ja.pak
        • Size 727KB
        • SHA256 30a10162ef5b90e31fe708e7de992622b659c13e5fc4b7c691142fb3d959cc7d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\kn.pak
        • Size 1.4MB
        • SHA256 dfb1512aff3d9622b8f46be89d05d7927a74b984eb0213e84f27d248f75bcee4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ko.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\ko.pak
        • Size 615KB
        • SHA256 aa78a00d77318d70a356f83ee5e9a0cbd579a560f8b8ffd05f9959ecb965b6a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lt.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\lt.pak
        • Size 666KB
        • SHA256 3e9afca6cb3cf70dce1c3b5a0becd2714aab49c9ceb5bbec39f313a063fb3d05
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\lv.pak
        • Size 664KB
        • SHA256 28115981e00562f3028fb55dc0ebf6d9d2bdf4735bb0d4d2d90aea589d24c822
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ml.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\ml.pak
        • Size 1.5MB
        • SHA256 3415158190b1d8880811a4f54a3998fb1f3f9f71ed913e1d3452f15f1495facf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\mr.pak
        • Size 1.2MB
        • SHA256 c0b1cdf0bba3e2762fc5afc89ac7d443f53f6c1079f40b7683ceedbe2ba58e65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ms.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\ms.pak
        • Size 571KB
        • SHA256 cd9a68fc1b1348b29e6c43adf5c94b9f6238146b8ec7d551e1e1997ae1773e8f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nb.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\nb.pak
        • Size 551KB
        • SHA256 40277ff47002ca9e7a64c692c2e6b39667bae45ea3a411daaba16cb892e8dad0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\nl.pak
        • Size 572KB
        • SHA256 114a11236f70de85330ed374e9658a4dfd21721f7e7cee80e746451bc68a5250
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\pl.pak
        • Size 637KB
        • SHA256 d5179295319698755b51af402731a34b75b32b76b99ad92640319b65c4c52992
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-BR.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\pt-BR.pak
        • Size 597KB
        • SHA256 b111cb265d59d861c8dac2ec37733bbb2df6c923236c79d99452535215fef58b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-PT.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\pt-PT.pak
        • Size 601KB
        • SHA256 252ae86b97ed89e0cac7b9f581dbbae78e7041b28dd6b8be836048ea905dafd5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\ro.pak
        • Size 623KB
        • SHA256 5094807f7e9fa04fb9eeb451c09542587e48ec432dde00c13ed3135b72df2309
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\ru.pak
        • Size 1.0MB
        • SHA256 cc4307b19d0832b86cff809367f23346e9da41e3fc1155aa723b29542aea015b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\sk.pak
        • Size 647KB
        • SHA256 12b0f67bff228cf65c6f9f5a410c0758e4d52f0cdb9abbd4dd9ef828f99e07c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\sl.pak
        • Size 620KB
        • SHA256 bf4846b38adeae6794d2565faeee093e9ea77febe1c2db3ac18193cc1e0e8d2f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\sr.pak
        • Size 956KB
        • SHA256 ae56d881a0f06647dbfe173f3cabedc734a8353d6183099c734570276f38e104
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\sv.pak
        • Size 555KB
        • SHA256 5e44c6ff9d4f432696c747fda111a7ad99df0b818254bbf251e578952ae06d36
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sw.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\sw.pak
        • Size 586KB
        • SHA256 bd6ab24cd929d6809dca3ea0a5105cc567e9c9c2bf65f8814b480def6cf1992e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ta.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\ta.pak
        • Size 1.5MB
        • SHA256 ca560534ff3ca837cbcbbfc240af7dae12a82466bc16e99e7b79376cd102e342
        • MD5 SHA1 SHA512 SSDEEP TLSH

        te.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\te.pak
        • Size 1.4MB
        • SHA256 11a1d2d935b401bc9b24f158774310d73c31b1616bacc61a054c7ef4661618b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\th.pak
        • Size 1.2MB
        • SHA256 d8f5800cb99e227287bdbed8d807380185e20d166901917b6b58dedc5fdafbf6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\tr.pak
        • Size 597KB
        • SHA256 71b1b037ab44e6ed3f954b2c6318063d29e708dd87306c9051f1e48e43714322
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\uk.pak
        • Size 1.0MB
        • SHA256 fff206f5f631d0dda9579cf806cde4de5848a7474bb1ac2b1239ab967a8ca88c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\ur.pak
        • Size 898KB
        • SHA256 0f3cc59fd6c706ae8d84a0cc50301a4929ea1f0204ad5e48250f1a354d6613e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\vi.pak
        • Size 709KB
        • SHA256 f7df08dbb5ca133109ad809bdd89be82cc956a0518e6dee7e02fe4f65118d77d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\zh-CN.pak
        • Size 508KB
        • SHA256 e27395a6c73ac592f05e0de00f4c17efe181a4900c1f649e69d3a21dbb87cde5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-TW.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\locales\zh-TW.pak
        • Size 503KB
        • SHA256 aee4d9c6230c5ae8257fecbccaba6b8668e5a34d6c44ef06e4574e12fed7fd8e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources.pak
        • Size 5.8MB
        • SHA256 13d24097d2c5684f4a893c42beef385927d522ea94f77f470ce11270ffa22231
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app-update.yml

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app-update.yml
        • Size 92B
        • SHA256 e85c804f39fd9ea8f3618ecfee81fb4402cd7667664c7e210387f8d8c359af72
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\@tailwindcss\oxide\node_modules\@tailwindcss\oxide-win32-x64-msvc\LICENSE
        • Size 1KB
        • SHA256 60e0b68c0f35c078eef3a5d29419d0b03ff84ec1df9c3f9d6e39a519a5ae7985
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\@tailwindcss\oxide\node_modules\@tailwindcss\oxide-win32-x64-msvc\package.json
        • Size 528B
        • SHA256 03a263c6e333e7cc4731c236533be067d092cdfec32f7ebafb77db1e749611bf
        • MD5 SHA1 SHA512 TLSH

        tailwindcss-oxide.win32-x64-msvc.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\@tailwindcss\oxide\node_modules\@tailwindcss\oxide-win32-x64-msvc\tailwindcss-oxide.win32-x64-msvc.node
        • Size 3.1MB
        • SHA256 d0aa887d95f0b8f2d58ee4cbb1f297d013bc6d11a77cfa50c4fa706c20840055
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\lightningcss\node_modules\lightningcss-win32-x64-msvc\LICENSE
        • Size 15KB
        • SHA256 5eba353fe5076ac3432177f8ab1cf75e3afcd0584251e37c3bfead5f447d040e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lightningcss.win32-x64-msvc.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\lightningcss\node_modules\lightningcss-win32-x64-msvc\lightningcss.win32-x64-msvc.node
        • Size 9.1MB
        • SHA256 83e7e838ef1bbf5454c651103574fec31a1cec0b453b999d1173365cbc6c7841
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\lightningcss\node_modules\lightningcss-win32-x64-msvc\package.json
        • Size 719B
        • SHA256 76456a8ca20848b96b5819f115368bebfbb941c51c860b62073e3e591c836b8b
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\LICENSE
        • Size 1KB
        • SHA256 071c22737c45e77621eb378db221ebf88cf86138474371dbcc06382d6606980f
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\dist\index.js
        • Size 5KB
        • SHA256 e3d73946a486b90dc7d304f980458ba4fd49bbc32551c2b40c493faaffee4a55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.js.map

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\dist\index.js.map
        • Size 4KB
        • SHA256 e2a30cb822d50e225411ab55ff9ca2038ab4f732746945209092ea062da594b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        prebuild-test-noop.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\dist\prebuild-test-noop.js
        • Size 120B
        • SHA256 9a7b050e26b0ee0076ebebe7b44e779d1b4b90d50331550316b47ba1d82b8cfc
        • MD5 SHA1 SHA512 TLSH

        prebuild-test-noop.js.map

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\dist\prebuild-test-noop.js.map
        • Size 140B
        • SHA256 a4ce7fc9d8cecdaa9e93b6717740e9cf83f5896f0da7d21d74db438dd201a363
        • MD5 SHA1 SHA512 TLSH

        COPYING.LESSER.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\COPYING.LESSER.md
        • Size 7KB
        • SHA256 7ad7cd468312ef58e478eac02729063dd07ab2320c35adc08c2ad00f840b9237
        • MD5 SHA1 SHA512 SSDEEP TLSH

        COPYING.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\COPYING.md
        • Size 34KB
        • SHA256 7197726772381c35c87079bd872e3671f6c43466498368f885631deb351ca221
        • MD5 SHA1 SHA512 SSDEEP TLSH

        README.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\README.md
        • Size 2KB
        • SHA256 b990913af4b50c93a698ba7c43683748d87b40f5be8cd4008ce768a50362b29e
        • MD5 SHA1 SHA512 TLSH

        uiohook.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\include\uiohook.h
        • Size 17KB
        • SHA256 f752d74b8572e1fb833a9440341a45a4c4364a354fe627f6f645b959cd897b86
        • MD5 SHA1 SHA512 SSDEEP TLSH

        input_helper.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\darwin\input_helper.c
        • Size 31KB
        • SHA256 b0bf7ad4231638589ac96454044a8ec2cd545df152613c0475ac68a9abf54780
        • MD5 SHA1 SHA512 SSDEEP TLSH

        input_helper.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\darwin\input_helper.h
        • Size 5KB
        • SHA256 93064e88c32ebe57c72b94b3da4015ca940d25c5e2d41568eb7b124c13fc816e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        input_hook.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\darwin\input_hook.c
        • Size 53KB
        • SHA256 58fd4b36ace091559efe8007bdafe26b1a9bab9912c284150cb71d9a4ffb71ab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        post_event.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\darwin\post_event.c
        • Size 9KB
        • SHA256 6797f21c8dd8f33717f2393d59574551ca9b3fc6fc39c6a4cfdf91a04a1c3ef5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        system_properties.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\darwin\system_properties.c
        • Size 17KB
        • SHA256 4b325656c6319013d04380a52ffa9d1fc57cfde10a90a9fa42dd07bd72fba9fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        logger.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\logger.c
        • Size 1KB
        • SHA256 7c980d3a0590098b682b467a6f789751bc6f30658d9f3a761c280f8c573b258d
        • MD5 SHA1 SHA512 TLSH

        logger.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\logger.h
        • Size 1KB
        • SHA256 60a432037bc5488fb5f82a214315ecb93e24261c81363ce41e973138fa8e2cf7
        • MD5 SHA1 SHA512 TLSH

        input_helper.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\windows\input_helper.c
        • Size 52KB
        • SHA256 e6e7212e87b7796a7d4387728d991c9c3e188f898a7b9efcdcc5c1b13c537b41
        • MD5 SHA1 SHA512 SSDEEP TLSH

        input_helper.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\windows\input_helper.h
        • Size 4KB
        • SHA256 05a6728996ca1ad8699b2398b284a11e3749141475d4cb84dd0ac0b124fbc2e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        input_hook.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\windows\input_hook.c
        • Size 24KB
        • SHA256 ea0e810349be7055e86c183736c5c2692501cfab4b1665698f38066519a0f1ef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        post_event.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\windows\post_event.c
        • Size 8KB
        • SHA256 40119006fd5ed676084cfa5a0a5ff8841ecde15c326917e601513949fbc40c4c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        system_properties.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\windows\system_properties.c
        • Size 6KB
        • SHA256 294dcc832cbb64463fa37e96bf35240a3b9b1814b4dff7d9f79c27c78fad1e3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        input_helper.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\x11\input_helper.c
        • Size 125KB
        • SHA256 a540a9b4609cab8db9bd7525a12a3beeb4401e70a49f5e04076cc37c6cec8b16
        • MD5 SHA1 SHA512 SSDEEP TLSH

        input_helper.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\x11\input_helper.h
        • Size 3KB
        • SHA256 4b02b9d69eb7d43b3c9b4db5197c77a36bac50a03c0a7c32abba096bb49c05f8
        • MD5 SHA1 SHA512 TLSH

        input_hook.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\x11\input_hook.c
        • Size 41KB
        • SHA256 fd77ed43059f15c29f9dd14010436ed944b84f1234104b45b70150654d83633f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        post_event.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\x11\post_event.c
        • Size 14KB
        • SHA256 4d37abe0ff1e145b90ae15bdc90339d6268bb77164cbc53214d8c2c0b6948f02
        • MD5 SHA1 SHA512 SSDEEP TLSH

        system_properties.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\libuiohook\src\x11\system_properties.c
        • Size 16KB
        • SHA256 644b6f0f5faf0b948ba6897cd956150579f73dd1940c87ca4fcee9d23dc9e967
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\package.json
        • Size 716B
        • SHA256 2cddae6874361712224c5693501c928a6d3f1289c9874f07cf9ffd8751ba5664
        • MD5 SHA1 SHA512 TLSH

        node.napi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\prebuilds\darwin-arm64\node.napi.node
        • Size 84KB
        • SHA256 e640ba9413bec27ec6167e323826c94cc72fc24fb7155ee98f13b54486afe074
        • MD5 SHA1 SHA512 SSDEEP TLSH

        node.napi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\prebuilds\darwin-x64\node.napi.node
        • Size 100KB
        • SHA256 a1e4b8ab3c6a14efcde8b2f06ef57eb1db9171fdea49832a4000a0c8b9f7c87f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        node.napi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\prebuilds\linux-arm64\node.napi.node
        • Size 69KB
        • SHA256 f347ff7c1cdb54a22575bf1d1073430b8709462a4a5261b44a30b5bdcf714ead
        • MD5 SHA1 SHA512 SSDEEP TLSH

        node.napi.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\prebuilds\win32-x64\node.napi.node
        • Size 164KB
        • SHA256 a4e18d5896c5889635efe31c6f1a0ce8ccafeabe9521e0f92c46a5861e8c290b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        addon.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\src\lib\addon.c
        • Size 13KB
        • SHA256 e8fbce3d54ecb92cd908832b2c12b5aa2625c62af7566e6f2b01fe3599f63a47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        napi_helpers.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\src\lib\napi_helpers.c
        • Size 1KB
        • SHA256 04a8f6de366c6f82df91a90b07b8ebc009efc3a5ace2881b86cdc40e69625bea
        • MD5 SHA1 SHA512 TLSH

        napi_helpers.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\src\lib\napi_helpers.h
        • Size 2KB
        • SHA256 a3fb38e83a34d7978eb700ceee527c6b1e5f1b89cd21e25fc516cfbb08aa7cd8
        • MD5 SHA1 SHA512 TLSH

        uiohook_worker.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\src\lib\uiohook_worker.c
        • Size 5KB
        • SHA256 be0026bbe03fcaaeb79db6c636a525d7a98d895902767c9462956bde73987c8f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uiohook_worker.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\node_modules\uiohook-napi\src\lib\uiohook_worker.h
        • Size 262B
        • SHA256 f4dbc36bbaf5ef04d701365ea7e72a0f02f77537e9f517e6cc65ebc2f2776a0b
        • MD5 SHA1 SHA512 TLSH

        click.wav

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\resource\click.wav
        • Size 18KB
        • SHA256 aaabe235363612be0bf1fb13b243bb624eb5debf7afa56c4463f0c62245f8f25
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hypixelbridge.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\resource\hypixelbridge.json
        • Size 2KB
        • SHA256 cd64b7f9cdccf291598540865321be71fde081574cf71de41e324c23a2f95968
        • MD5 SHA1 SHA512 TLSH

        hypixelbw.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\resource\hypixelbw.json
        • Size 2KB
        • SHA256 0d9dc903474ff3903f0ee28742dfd29a8f7ae4d5f7738057dd041157a29a1a08
        • MD5 SHA1 SHA512 TLSH

        hypixelduels.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\resource\hypixelduels.json
        • Size 2KB
        • SHA256 d0c48cbb857a09f20cd259e04214e9134ed671c30fcdbf1ec6c427492cb0f736
        • MD5 SHA1 SHA512 TLSH

        hypixelskywars.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\resource\hypixelskywars.json
        • Size 2KB
        • SHA256 0e87410836d4ac331498f5260e6088c0d4580041aa02e5078715d3ba0592b5d4
        • MD5 SHA1 SHA512 TLSH

        maxed.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\resource\maxed.json
        • Size 2KB
        • SHA256 c5bb7ee0b581819fffce1bb3bec6bf218ded46833ae74b99490ef1ce026371d9
        • MD5 SHA1 SHA512 TLSH

        mmc.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\resource\mmc.json
        • Size 2KB
        • SHA256 d509017ad7cf6dd493558f26b7664c9aca53b73ae27d085a6772413f562b90cd
        • MD5 SHA1 SHA512 TLSH

        update.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\app.asar.unpacked\resource\update.txt
        • Size 5B
        • SHA256 f22abd6773ab232869321ad4b1e47ac0c908febf4f3a2bd10c8066140f741261
        • MD5 SHA1 SHA512

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        input_helper.py

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\resources\helpers\input_helper.py
        • Size 4KB
        • SHA256 716930d1010be9636aa0aea825b2f71872721b2f3d6104a29fb1f6cbcfb7b5cd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\snapshot_blob.bin
        • Size 314KB
        • SHA256 4bef4ff989a5e7f3f138b315e26e0cfea65487d2845b59508dc12b6f6e574778
        • MD5 SHA1 SHA512 SSDEEP TLSH

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\v8_context_snapshot.bin
        • Size 683KB
        • SHA256 cfa255a0c61f2926ead15f4d049d5e439d3745291058687c231cef3de56dbfc2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\vk_swiftshader.dll
        • Size 5.3MB
        • SHA256 176adce81d9f0f1aac302806be3dbb67abda46e13355bb85c4868057c6e3a223
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader_icd.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\7z-out\vulkan-1.dll
        • Size 900KB
        • SHA256 d5acc73241b46dcfd7ea5f970eab9fdc2ac5a3dc737e23d5947980972ed0a2b4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SpiderBanner.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\SpiderBanner.dll
        • Size 9KB
        • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WinShell.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH

        nsExec.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\nsExec.dll
        • Size 6KB
        • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsis7z.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsl52CA.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH

        default.exc

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512

        data_0

        • Path C:\Users\Admin\AppData\Roaming\soda\GPUCache\data_0
        • Size 8KB
        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
        • MD5 SHA1 SHA512 SSDEEP

        data_1

        • Path C:\Users\Admin\AppData\Roaming\soda\GPUCache\data_1
        • Size 264KB
        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
        • MD5 SHA1 SHA512 SSDEEP

        data_2

        • Path C:\Users\Admin\AppData\Roaming\soda\GPUCache\data_2
        • Size 8KB
        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
        • MD5 SHA1 SHA512 SSDEEP

        data_3

        • Path C:\Users\Admin\AppData\Roaming\soda\GPUCache\data_3
        • Size 8KB
        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
        • MD5 SHA1 SHA512 SSDEEP

        memory/5052-921-0x0000028FAF0F0000-0x0000028FAF0F1000-memory.dmp

        memory/5052-919-0x0000028FAF0F0000-0x0000028FAF0F1000-memory.dmp

        memory/5052-930-0x0000028FAF0F0000-0x0000028FAF0F1000-memory.dmp

        memory/5052-929-0x0000028FAF0F0000-0x0000028FAF0F1000-memory.dmp

        memory/5052-928-0x0000028FAF0F0000-0x0000028FAF0F1000-memory.dmp

        memory/5052-927-0x0000028FAF0F0000-0x0000028FAF0F1000-memory.dmp

        memory/5052-926-0x0000028FAF0F0000-0x0000028FAF0F1000-memory.dmp

        memory/5052-925-0x0000028FAF0F0000-0x0000028FAF0F1000-memory.dmp