Analysis

  • user interaction
    yes
  • max time kernel
    143s
  • max time network
    141s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    25/08/2026, 02:18

General

  • Target
    http://fruitzmovies.com
  • Sample260825-crd1xawcmd
Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Executes dropped EXE 11 IoCs
  • Loads dropped DLL 40 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Looks up external IP address via web service 1 TTPs 3 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 8 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 18 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 46 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of WriteProcessMemory 55 IoCs

Processes

  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument http://fruitzmovies.com
    1⤵
    • Checks processor information in registry
    • Enumerates system info in registry
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:5000
    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x25c,0x7ffdd527c188,0x7ffdd527c194,0x7ffdd527c1a0
      2⤵
        PID:1304
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=1980,i,10072952838520285305,4094739814881983613,524288 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=3056 /prefetch:3
        2⤵
        • Downloads MZ/PE file
        • System Time Discovery
        PID:3724
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1652,i,8988227412756736653,8056704164836029729,262144 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=2940 /prefetch:2
        2⤵
          PID:4652
        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2264,i,3646695147585629421,13455777346276995316,524288 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=3064 /prefetch:8
          2⤵
            PID:1500
          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3424,i,11153764412933839335,15979093471955302312,2097152 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=3500 /prefetch:1
            2⤵
              PID:1092
            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3428,i,3909726948248196361,16440937739775685784,2097152 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=3504 /prefetch:1
              2⤵
                PID:4304
              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4172,i,13063750695921599397,17239545757443715135,2097152 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=4324 /prefetch:1
                2⤵
                  PID:1528
                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4184,i,12912809525340892100,3852403580245219981,2097152 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=4376 /prefetch:2
                  2⤵
                    PID:3648
                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --always-read-main-dll --metrics-shmem-handle=5056,i,130226267763765077,9793338100408401208,2097152 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=5052 /prefetch:1
                    2⤵
                      PID:1172
                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5252,i,12404372912332711383,14737774293783737055,524288 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=5280 /prefetch:8
                      2⤵
                        PID:4264
                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5248,i,4393277063669931855,6760377585647081112,524288 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=5300 /prefetch:8
                        2⤵
                          PID:4376
                        • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                          "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,16140553409794282806,8181920222421251665,524288 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
                          2⤵
                            PID:3584
                          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
                            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5924,i,16140553409794282806,8181920222421251665,524288 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=6020 /prefetch:8
                            2⤵
                              PID:3392
                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4388,i,12270569409905079577,5276837638994553461,524288 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=4820 /prefetch:8
                              2⤵
                                PID:5456
                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4832,i,9627767888221739178,17895791734733340089,524288 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=4404 /prefetch:8
                                2⤵
                                  PID:5464
                                • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4836,i,3450175178736837462,4578418330469912474,524288 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=4788 /prefetch:8
                                  2⤵
                                    PID:5472
                                  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=5236,i,15954190785147488931,1340498917785893122,2097152 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=4816 /prefetch:1
                                    2⤵
                                      PID:6016
                                    • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6064,i,5438152433409178675,1867818322848428900,524288 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=6264 /prefetch:8
                                      2⤵
                                        PID:6092
                                      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=5072,i,8925404251250179886,17913966312674289937,2097152 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=6316 /prefetch:1
                                        2⤵
                                          PID:6100
                                        • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                          "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5316,i,14079350557830546210,4620166614381777656,524288 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=5504 /prefetch:8
                                          2⤵
                                            PID:2004
                                          • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                            "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6900,i,17108873808541199711,2892184083341099205,524288 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=6892 /prefetch:8
                                            2⤵
                                              PID:4996
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6844,i,17508131469993313324,14701158693148219595,524288 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=6880 /prefetch:8
                                              2⤵
                                                PID:5172
                                              • C:\Users\Admin\Downloads\FruitzApp.exe
                                                "C:\Users\Admin\Downloads\FruitzApp.exe"
                                                2⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • System Location Discovery: System Language Discovery
                                                • Suspicious behavior: EnumeratesProcesses
                                                • Suspicious use of AdjustPrivilegeToken
                                                PID:5280
                                              • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
                                                "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=4180,i,7164304613562641558,14307329325134094933,262144 --field-trial-handle=2944,i,7333327234382651041,16094653172873633264,262144 --variations-seed-version --mojo-platform-channel-handle=6796 /prefetch:8
                                                2⤵
                                                • Suspicious behavior: EnumeratesProcesses
                                                PID:5452
                                              • C:\Users\Admin\Downloads\FruitzApp.exe
                                                "C:\Users\Admin\Downloads\FruitzApp.exe"
                                                2⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • System Location Discovery: System Language Discovery
                                                • Suspicious behavior: EnumeratesProcesses
                                                • Suspicious use of WriteProcessMemory
                                                PID:3504
                                                • C:\Users\Admin\AppData\Local\Temp\nsv28B8.tmp\old-uninstaller.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\nsv28B8.tmp\old-uninstaller.exe" /S /KEEP_APP_DATA /currentuser --keep-shortcuts --updated _?=C:\Users\Admin\AppData\Local\Programs\fruitzapp
                                                  3⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  PID:6548
                                                • C:\Users\Admin\AppData\Local\Temp\nsv28B8.tmp\old-uninstaller.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\nsv28B8.tmp\old-uninstaller.exe" /S /KEEP_APP_DATA /currentuser --keep-shortcuts --updated _?=C:\Users\Admin\AppData\Local\Programs\fruitzapp
                                                  3⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  PID:1484
                                                • C:\Users\Admin\AppData\Local\Temp\nsv28B8.tmp\old-uninstaller.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\nsv28B8.tmp\old-uninstaller.exe" /S /KEEP_APP_DATA /currentuser --keep-shortcuts --updated _?=C:\Users\Admin\AppData\Local\Programs\fruitzapp
                                                  3⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  PID:1004
                                                • C:\Users\Admin\AppData\Local\Temp\nsv28B8.tmp\old-uninstaller.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\nsv28B8.tmp\old-uninstaller.exe" /S /KEEP_APP_DATA /currentuser --keep-shortcuts --updated _?=C:\Users\Admin\AppData\Local\Programs\fruitzapp
                                                  3⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  PID:7128
                                                • C:\Users\Admin\AppData\Local\Temp\nsv28B8.tmp\old-uninstaller.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\nsv28B8.tmp\old-uninstaller.exe" /S /KEEP_APP_DATA /currentuser --keep-shortcuts --updated _?=C:\Users\Admin\AppData\Local\Programs\fruitzapp
                                                  3⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  PID:7012
                                                • C:\Users\Admin\AppData\Local\Temp\nsv28B8.tmp\old-uninstaller.exe
                                                  "C:\Users\Admin\AppData\Local\Temp\nsv28B8.tmp\old-uninstaller.exe" /S /KEEP_APP_DATA /currentuser --keep-shortcuts --updated _?=C:\Users\Admin\AppData\Local\Programs\fruitzapp
                                                  3⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • System Location Discovery: System Language Discovery
                                                  • Suspicious behavior: EnumeratesProcesses
                                                  PID:6856
                                            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
                                              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
                                              1⤵
                                                PID:2556
                                              • C:\Users\Admin\AppData\Local\Programs\fruitzapp\FruitzApp.exe
                                                "C:\Users\Admin\AppData\Local\Programs\fruitzapp\FruitzApp.exe"
                                                1⤵
                                                • Executes dropped EXE
                                                • Loads dropped DLL
                                                • Suspicious use of AdjustPrivilegeToken
                                                • Suspicious use of WriteProcessMemory
                                                PID:1488
                                                • C:\Users\Admin\AppData\Local\Programs\fruitzapp\FruitzApp.exe
                                                  "C:\Users\Admin\AppData\Local\Programs\fruitzapp\FruitzApp.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\FruitzApp" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1744,i,2684723218155919926,4958955370051745858,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1732 /prefetch:2
                                                  2⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  PID:4728
                                                • C:\Users\Admin\AppData\Local\Programs\fruitzapp\resources\java\jre\bin\javaw.exe
                                                  C:\Users\Admin\AppData\Local\Programs\fruitzapp\resources\java\jre\bin\javaw.exe --enable-native-access=ALL-UNNAMED -Djava.awt.headless=false --add-opens java.base/java.lang=ALL-UNNAMED -cp C:\Users\Admin\AppData\Local\Programs\fruitzapp\resources\java\116f55040987.jar V ira-c31a32d4::cegidabi
                                                  2⤵
                                                  • Executes dropped EXE
                                                  • Loads dropped DLL
                                                  • Checks processor information in registry
                                                  PID:1720

                                              Network

                                                    MITRE ATT&CK Enterprise v16

                                                    Replay Monitor

                                                    Loading Replay Monitor...

                                                    Downloads

                                                    blocklist

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
                                                    • Size 105KB
                                                    • SHA256 f0ead82c3c8a4cd9959a8cd1cef74705c67e276b4a574243e75c890cb0b0b8fe
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    settings.dat

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                    • Size 280B
                                                    • SHA256 3eacdfce7dc5d437b4447cf27ab297d2d39d13a22d53487691f060212cddb6b2
                                                    • MD5 SHA1 SHA512 TLSH

                                                    settings.dat

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
                                                    • Size 280B
                                                    • SHA256 7aa2bb81937fdcdafd5d33143cfe61093f5233469b36757de171e12cc0c6215f
                                                    • MD5 SHA1 SHA512 TLSH

                                                    BookmarkMergedSurfaceOrdering

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
                                                    • Size 6B
                                                    • SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
                                                    • MD5 SHA1 SHA512

                                                    the-real-index

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                    • Size 3KB
                                                    • SHA256 6fae18bc1ba1e640aa8cbfb71ddcb6af2e0ebf782ed59c513cc8ef048a7954a1
                                                    • MD5 SHA1 SHA512 TLSH

                                                    the-real-index

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
                                                    • Size 3KB
                                                    • SHA256 892878994ea177f0c187ca32a703db28f54e76360c262cee30ce48f812aa854f
                                                    • MD5 SHA1 SHA512 TLSH

                                                    the-real-index~RFe58a44a.TMP

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58a44a.TMP
                                                    • Size 3KB
                                                    • SHA256 4b9590a62223c1a66c26e9f11718fe7ccc9d1ac6d6bbf150969f4dd1b9ad10a1
                                                    • MD5 SHA1 SHA512 TLSH

                                                    SiteList-Enterprise.json

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
                                                    • Size 2B
                                                    • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                    • MD5 SHA1 SHA512

                                                    Edge Profile.ico

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
                                                    • Size 70KB
                                                    • SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Network Persistent State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                    • Size 111B
                                                    • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                                    • MD5 SHA1 SHA512 TLSH

                                                    Network Persistent State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
                                                    • Size 4KB
                                                    • SHA256 1b3a927392c3e0cb0b2eff67fde98d2c2d86882f1a75131b71bbced6a4380a49
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    SCT Auditing Pending Reports

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
                                                    • Size 2B
                                                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                                    • MD5 SHA1 SHA512

                                                    Preferences

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                    • Size 12KB
                                                    • SHA256 47a0688d0e2334c69f52888f665c4ec7178f13e01cbe88665ce4ebed3255e6eb
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Preferences

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                    • Size 13KB
                                                    • SHA256 5fe4ace0c278fb470153224ae22fe0b1f2054e3cd72b1b807a934d5e036d809d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Preferences

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
                                                    • Size 14KB
                                                    • SHA256 bf95bde226725590fc9afce2791a2cbe814d5a211d64be671ed421543585bbdd
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Secure Preferences

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
                                                    • Size 30KB
                                                    • SHA256 b77e20c80b6373946013fa8a0f41d60ebe0a52c1b430e445e99dc21e1abcf9b7
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    sync_diagnostic.log

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
                                                    • Size 5KB
                                                    • SHA256 ae8a8f01e9901fc2a66f261c9a8464f97bdc4ca0dae9ce78edc61e770d180f90
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    54f275d6-5acf-4967-93db-fd2e54b8cd6c.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\54f275d6-5acf-4967-93db-fd2e54b8cd6c.tmp
                                                    • Size 22KB
                                                    • SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Local State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                    • Size 18KB
                                                    • SHA256 36d68bb2bbaee2c04fdf7f12d1e42071dab7288a5b6b096f045ce750adb3bb59
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Local State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                    • Size 26KB
                                                    • SHA256 f95669ffbdffd8f8e8423331538bbe7410fc85213e29d56bef0f12c0c1155f04
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Local State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                    • Size 8KB
                                                    • SHA256 630e9a44c4071bb46976ee51bcddbee7b6cecd45fd3d4c5b02deaed05f31ac78
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Local State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                    • Size 26KB
                                                    • SHA256 e0e2f2461020eec22fd2f58cb24e2b4dae79a8128fbf4605597d59075430f0a3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Local State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                    • Size 26KB
                                                    • SHA256 36ac16c2f8d73769c99545ab13fe8ac7307e72b37d0119f74808368e8f1a4a67
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Local State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                    • Size 26KB
                                                    • SHA256 0c9750b32dcaf84d869d059def2bb8ff0cc453ae382f6b39f020b4615961de9e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Local State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                    • Size 18KB
                                                    • SHA256 d8760309c1007a3e2259fe35e3725ec81fd7458a78773d80d22f90a947231277
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    Local State

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
                                                    • Size 8KB
                                                    • SHA256 3833f965f3383a063bb666d978fb175a4394f1e5e6eb99d28b5ec2fb11154ccd
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    6a920fc5-0abe-40ed-bc5e-57a4c489bd4b.tmp

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\6a920fc5-0abe-40ed-bc5e-57a4c489bd4b.tmp
                                                    • Size 13B
                                                    • SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
                                                    • MD5 SHA1 SHA512

                                                    5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

                                                    • Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
                                                    • Size 2KB
                                                    • SHA256 d22ffc27473142f5cef2acbd5f4336d05f9d9a19c57601bcc703c0cf227a420c
                                                    • MD5 SHA1 SHA512 TLSH

                                                    chrome_100_percent.pak

                                                    • Path C:\Users\Admin\AppData\Local\Programs\fruitzapp\chrome_100_percent.pak
                                                    • Size 148KB
                                                    • SHA256 7dd5485def22a53c0635efdf8ae900f147ec8c8a22b9ed71c24668075dd605d3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    jna16297057089757843582.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\jna-63116079\jna16297057089757843582.dll
                                                    • Size 248KB
                                                    • SHA256 69c45175ecfd25af023f96ac0bb2c45e6a95e3ba8a5a50ee7969ccab14825c44
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    LICENSE.electron.txt

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\LICENSE.electron.txt
                                                    • Size 1KB
                                                    • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    LICENSES.chromium.html

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\LICENSES.chromium.html
                                                    • Size 9.0MB
                                                    • SHA256 96837a4a521a61bd3d34f2f660e29902d228aaec501eeb2a84403f1926c3df9d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    chrome_200_percent.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\chrome_200_percent.pak
                                                    • Size 223KB
                                                    • SHA256 2408969599d3953aae2fb36008e4d0711e30d0bc86fb4d03f8b0577d43c649fa
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    d3dcompiler_47.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\d3dcompiler_47.dll
                                                    • Size 4.7MB
                                                    • SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    ffmpeg.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\ffmpeg.dll
                                                    • Size 2.6MB
                                                    • SHA256 604de5c5b2d25c731e01d0c08b8cb21c872a886ac1f6d3e3c13e8b29f84a0f93
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    icudtl.dat

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\icudtl.dat
                                                    • Size 10.0MB
                                                    • SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    libEGL.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\libEGL.dll
                                                    • Size 470KB
                                                    • SHA256 0152aca7a9865b7cae2c437d85d6c771a16afc9da2929ddb49eff9cc70b42f62
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    libGLESv2.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\libGLESv2.dll
                                                    • Size 7.7MB
                                                    • SHA256 c5f86befae432c8d0b8942e7cf24a4b5c307e7fd421eae248946e81381cd62f3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    af.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\af.pak
                                                    • Size 494KB
                                                    • SHA256 e2470090a09ca500679e68bb5e3b1acc35a5873fea4f93af25a23c82122f2c13
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    am.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\am.pak
                                                    • Size 799KB
                                                    • SHA256 f7d24b9cd21562665ba250caee9c280a1c95efea4b5f37d1afdd36c369a61b87
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    ar.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\ar.pak
                                                    • Size 874KB
                                                    • SHA256 f25c74e780aafe043e275c891a5f009327d0e3ab92a3d53b393ca84651acde61
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    bg.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\bg.pak
                                                    • Size 913KB
                                                    • SHA256 97ef7984074775282b68dca5d5a469efdb2b22474ee6669fdfb5197d3f1b3768
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    bn.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\bn.pak
                                                    • Size 1.1MB
                                                    • SHA256 e3f2a4b955b9a701829cd71d22bdcc562a67bc7926a3a349d99dfa2c5863bdf5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    ca.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\ca.pak
                                                    • Size 556KB
                                                    • SHA256 c178611c586deefdaa2f202981b84e75b8400908bc5fffc65226a06af0790536
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    cs.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\cs.pak
                                                    • Size 572KB
                                                    • SHA256 85699626522c2a8eb1efa3354c570057c3f665217d9d02a5d366a7c9048db59c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    da.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\da.pak
                                                    • Size 518KB
                                                    • SHA256 2cdc82681d523c3f6a1e432281079019a5aa7597f6bd9800aa37566fea9354a3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    de.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\de.pak
                                                    • Size 553KB
                                                    • SHA256 1966aab0f4386010e86fd8aef913a55680052b4351a8f405e842fc2848197403
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    el.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\el.pak
                                                    • Size 1002KB
                                                    • SHA256 6a2db5d60532c50501f247773aa225cc463772925fedd6959af4f64d69bcfe33
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    en-GB.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\en-GB.pak
                                                    • Size 450KB
                                                    • SHA256 e5a70b7c1a2cf6838dfe033b9107e663878656f9315b704eec1c6e6b6f3858a7
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    en-US.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\en-US.pak
                                                    • Size 454KB
                                                    • SHA256 0013a8efed8a17a93b0e718fb41652b8a2a6ed38128575cee89a258134167e41
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    es-419.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\es-419.pak
                                                    • Size 547KB
                                                    • SHA256 a27f6f9f6e80ebf322ce8b11c73545096268c382c54867e3e66057f4339b282b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    es.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\es.pak
                                                    • Size 547KB
                                                    • SHA256 6b0259c95d5308a785d54098d2ce24fe74fd7aed59a16ee0604de92c47e1d524
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    et.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\et.pak
                                                    • Size 497KB
                                                    • SHA256 77822b71398a329c43b57d9d8c0b27fff7f30c3a35fbd7850161549a23b0b9b2
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    fa.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\fa.pak
                                                    • Size 813KB
                                                    • SHA256 fee6bd019b4fdf35b3012317595df9babff11215dd5adba9841aa3dd92f47f5d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    fi.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\fi.pak
                                                    • Size 508KB
                                                    • SHA256 0d426d5510b38dfbf2e54a3b139b1728724bb8982ae31a96ed7affe9b2329e40
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    fil.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\fil.pak
                                                    • Size 573KB
                                                    • SHA256 d7fdc7fd08dcc421bc8aaae3fdc72599c60a3b96f05989a3e46736f0de06e745
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    fr.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\fr.pak
                                                    • Size 591KB
                                                    • SHA256 a04d58a97122a946a2ecb6a3ca06bd50564ae186d1fdb58fda6a02140f46bacf
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    gu.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\gu.pak
                                                    • Size 1.1MB
                                                    • SHA256 a45dad53748632e8ae1632aeed12b45d259155a1211921a4a8804791ac68aff4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    he.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\he.pak
                                                    • Size 713KB
                                                    • SHA256 f1add8ea5410dbf2d16443683c5868c1bb194821e4e527bc64135f19f2e72034
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    hi.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\hi.pak
                                                    • Size 1.2MB
                                                    • SHA256 18d6db4ee11de42d038e718ea1c565ae48b50747be29894de2e191d63d9c9a04
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    hr.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\hr.pak
                                                    • Size 551KB
                                                    • SHA256 723c65592d15311d33fe35b2865849cccffbbf58a280859af972c77df96e14d0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    hu.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\hu.pak
                                                    • Size 595KB
                                                    • SHA256 b4e6a1135de8bdc42c04f4db4eb1ce48256f18eb46a5146a21010b6165a90e7a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    id.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\id.pak
                                                    • Size 490KB
                                                    • SHA256 e95ac873b16983ef8a9019fc7141bd56315e082f531d37c5b8377645226fe5ee
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    it.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\it.pak
                                                    • Size 539KB
                                                    • SHA256 dc97bf831f3ed10a92f7131ba6079628747974bbf9b6719d0044a3e689e6506c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    ja.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\ja.pak
                                                    • Size 659KB
                                                    • SHA256 c1fb05d866c06db03b724ef009c04657b2c7ef007535a62dba48ced5194c68a7
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    kn.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\kn.pak
                                                    • Size 1.3MB
                                                    • SHA256 aafe9a01be0450564f9498b5e4e20300d71ce2ee1fbf1cfcdb2045123576f84a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    ko.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\ko.pak
                                                    • Size 557KB
                                                    • SHA256 7234a1390377451087a764bd31c817a5ce6695fa517119e7dccba642fac65e43
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    lt.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\lt.pak
                                                    • Size 597KB
                                                    • SHA256 a1257d10e673311747363e6929832e70f36668b1fc0d6a5ddd550fe88007aa58
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    lv.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\lv.pak
                                                    • Size 596KB
                                                    • SHA256 3e3c9953e679f391167a5d5536a4ace4d56558909ac8ad5b9f08650254d99f40
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    ml.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\ml.pak
                                                    • Size 1.3MB
                                                    • SHA256 520d60e6f297e8273113e8c73aa90aa026a75098f38175b22bd4b8fa761eb2e4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    mr.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\mr.pak
                                                    • Size 1.1MB
                                                    • SHA256 039f4e0176c38867fef57482825d043fa63bf1356c85eab0fc665f118db125e4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    ms.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\ms.pak
                                                    • Size 514KB
                                                    • SHA256 354d7a3fc5c9f6e965f54da155d66eafc8e5b5eab08cd782e9fdc379a5829e48
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    nb.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\nb.pak
                                                    • Size 499KB
                                                    • SHA256 c365bde65c8933c6b0691da32428815ffe7254415d8f859d1bd8a13f04bdd1f8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    nl.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\nl.pak
                                                    • Size 516KB
                                                    • SHA256 619c61701b3a142733d23ad8c7117bc013867a842d3d1d572faa56895ad8257e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    pl.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\pl.pak
                                                    • Size 574KB
                                                    • SHA256 e82bd1dcc3da3a8502a866b362435149d27ace82e4ad96deac3a71e5b64329ca
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    pt-BR.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\pt-BR.pak
                                                    • Size 540KB
                                                    • SHA256 d274344839fe26c722b59f5edd24e1fade04aba97a05e4ec0fdd1a669536e779
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    pt-PT.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\pt-PT.pak
                                                    • Size 543KB
                                                    • SHA256 0eea90a5b2b7b5d5f8b426ce77562fed82a709e38d2e47f6dc3a96d65b674d81
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    ro.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\ro.pak
                                                    • Size 562KB
                                                    • SHA256 f360247be07a19a0a5a2f4a46195ab2411ea3f634e86cd884ef59fa60e9b6b7b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    ru.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\ru.pak
                                                    • Size 924KB
                                                    • SHA256 f0ae92ad7c985d8c5955a8503d7473f36b3f7e54363cd4eeaeecef282f1a0abf
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    sk.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\sk.pak
                                                    • Size 580KB
                                                    • SHA256 bfd5b52a544428c5aaa4f418903610f1373c808c20110c145d95b34c51c7cf80
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    sl.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\sl.pak
                                                    • Size 556KB
                                                    • SHA256 f7539df33ea860bc42a76047fa4fa0dc75044df6d602f8735c9acfa5d7995198
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    sr.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\sr.pak
                                                    • Size 859KB
                                                    • SHA256 3aed83391c97ce05aab07239d0cbfe5a2b596d7a3bec39dbebced4e43704b8b7
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    sv.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\sv.pak
                                                    • Size 501KB
                                                    • SHA256 35c295c0a633ec0591058412c3b398940bcd92f6e12be20d51c01dcf7d9560ab
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    sw.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\sw.pak
                                                    • Size 529KB
                                                    • SHA256 462809f4337c1d6511d53e496937828ed07d64e7144954da794c36584c94b543
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    ta.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\ta.pak
                                                    • Size 1.3MB
                                                    • SHA256 5ca80548ecba32360e8d0b0ae1b40da47b708d6924ba77936e0ce24a6ffef4a5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    te.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\te.pak
                                                    • Size 1.2MB
                                                    • SHA256 8264244c6de861817f5b19cef282844a18ed8cb7d4e059451489652749fe931e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    th.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\th.pak
                                                    • Size 1.0MB
                                                    • SHA256 286ff381b36963a165fc4a7acbdeb0d08dc00702f62e2739b49436f4c9448892
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    tr.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\tr.pak
                                                    • Size 539KB
                                                    • SHA256 dbaeb803ebabd1b92f1892b075e044e42fd2a372c87cd7bed988fe2c427d6160
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    uk.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\uk.pak
                                                    • Size 923KB
                                                    • SHA256 fe35828cba11f536859e7693821d1e43ab1d89c385cfc49616859684d663d470
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    ur.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\ur.pak
                                                    • Size 808KB
                                                    • SHA256 60310f9a3457fae0395b447a30646211ef4160ba84bd7c36d291af4c8ec2b79a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    vi.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\vi.pak
                                                    • Size 639KB
                                                    • SHA256 738b87b76aedd9cd85dab2c461e0260e0214a2baaa6a53c24abffb6ecb8c4fce
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    zh-CN.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\zh-CN.pak
                                                    • Size 460KB
                                                    • SHA256 ea08c31a5d4e6aafbc5b657c5960135e64506593729fdb759874e55876580666
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    zh-TW.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\locales\zh-TW.pak
                                                    • Size 455KB
                                                    • SHA256 9b1e3ce2e425eb945cf74458bae6cfabecd170a4535ee97202c92a8227b314e4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    resources.pak

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources.pak
                                                    • Size 5.3MB
                                                    • SHA256 a6b12ba6867faea8b81f2260993fc6616fc3da7491220c1003569eae65d0b09a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    app.asar

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\app.asar
                                                    • Size 3KB
                                                    • SHA256 063525f94cc5b14bdeaa0cf2c8355c39c877f82338cfd4da6c7f04d58a6695f1
                                                    • MD5 SHA1 SHA512 TLSH

                                                    elevate.exe

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\elevate.exe
                                                    • Size 105KB
                                                    • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    116f55040987.jar

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\116f55040987.jar
                                                    • Size 26.3MB
                                                    • SHA256 0741fef7f432fc61dec7589c3b01293d4890e384a68481d56afe87775f2bc959
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-console-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-console-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 88ace577a9c51061cb7d1a36babbbefa48212fadc838ffde98fdfff60de18386
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-console-l1-2-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-console-l1-2-0.dll
                                                    • Size 21KB
                                                    • SHA256 c062477ad3bfdc57b0cc402179637a214dab5045c8d644592c7decca7d18aa50
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-datetime-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-datetime-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 1bd81dfd19204b44662510d9054852fb77c9f25c1088d647881c9b976cc16818
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-debug-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-debug-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 591358eb4d1531e9563ee0813e4301c552ce364c912ce684d16576eabf195dc3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-errorhandling-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-errorhandling-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 d56ce7b1cd76108ad6c137326ec694a14c99d48c3d7b0ace8c3ff4d9bcee3ce8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-fibers-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-fibers-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 91d249d7bc0e38ef6bcb17158b1fdc6dd8888dc086615c9b8b750b87e52a5fb3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-fibers-l1-1-1.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-fibers-l1-1-1.dll
                                                    • Size 21KB
                                                    • SHA256 fc9d86cec621383eab636ebc87ddd3f5c19a3cb2a33d97be112c051d0b275429
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-file-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-file-l1-1-0.dll
                                                    • Size 25KB
                                                    • SHA256 1ca895aba4e7435563a6b43e85eba67a0f8c74aa6a6a94d0fc48fa35535e2585
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-file-l1-2-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-file-l1-2-0.dll
                                                    • Size 21KB
                                                    • SHA256 4cadbc0c39da7c6722206fdcebd670abe5b8d261e7b041dd94f9397a89d1990d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-file-l2-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-file-l2-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 93c624b366ba16c643fc8933070a26f03b073ad0cf7f80173266d67536c61989
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-handle-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-handle-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 39095f59c41d76ec81bb2723d646fde4c148e7cc3402f4980d2ade95cb9c84f9
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-heap-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-heap-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 8f105771b236dbcb859de271f0a6822ce1cb79c36988dd42c9e3f6f55c5f7eb9
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-interlocked-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-interlocked-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 53b25e753ca785bf8b695d89dde5818a318890211dc992a89146f16658f0b606
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-kernel32-legacy-l1-1-1.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-kernel32-legacy-l1-1-1.dll
                                                    • Size 21KB
                                                    • SHA256 a9b13a1cd1b8c19b0c6b4afcd5bb0dd29c0e2288231ac9e6db8510094ce68ba6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-libraryloader-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-libraryloader-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 7f39ba298b41e4963047341288cab36b6a241835ee11ba4ad70f44dacd40906c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-localization-l1-2-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-localization-l1-2-0.dll
                                                    • Size 21KB
                                                    • SHA256 6ee44dd0d8510dc024c9f7c79b1b9fa88c987b26b6beb6653ddd11751c34e5dc
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-memory-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-memory-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 0512a35316ec9180437f86696a84c5c06a7e4e82e050055a656e5bf9fca206f9
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-namedpipe-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-namedpipe-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 c05f1fffe3b5a2738ea54ce9485cca026fb9635f982626fba1e1dcc531897273
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-processenvironment-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-processenvironment-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 c4eca98c3c67b6395d5b005b00ac1eb0318b86b23aa71035a44c2b1602befba9
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-processthreads-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-processthreads-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 5ccb89e93d67bc3288d4e84649c5346e66e15e3d7cd65d989daf3f4cb584be9a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-processthreads-l1-1-1.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-processthreads-l1-1-1.dll
                                                    • Size 21KB
                                                    • SHA256 4ad565a8ba3ef0ea8ab87221ad11f83ee0bc844ce236607958406663b407333e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-profile-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-profile-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 7809160932f44e59b021699f5bc68799eb7293ee1fa926d6fcca3c3445302e61
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-rtlsupport-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-rtlsupport-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 9dc1e91e71c7c054854bd1487cb4e6946d82c9f463430f1c4e8d1471005172b1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-string-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-string-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 60fc31d2a0c634412f529dba76af3b9bf991352877c6dae528186d3935704cfd
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-synch-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-synch-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 3a72b4f29f39a265d32ad12f0ce15dbf60129c840e10d84d427829ede45e78ad
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-synch-l1-2-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-synch-l1-2-0.dll
                                                    • Size 21KB
                                                    • SHA256 efc1e4460984a73cf47a3def033af1c8f3b1dbc1a56cd27781d3aacf3e3330cb
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-sysinfo-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-sysinfo-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 b203d862ddef1dd62bf623fc866c7f7a9c317c1c2ae30d1f52cb41f955b5698e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-sysinfo-l1-2-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-sysinfo-l1-2-0.dll
                                                    • Size 21KB
                                                    • SHA256 2703635d835396afd0f138d7c73751afe7e33a24f4225d08c1690b0a371932c0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-timezone-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-timezone-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 33f4fddc181066fce06b2227bded813f95e94ed1f3d785e982c6b6b56c510c57
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-core-util-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-core-util-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 6eda016742a6171205a387a14b3c0b331841567740376f56768f8c151724207d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-crt-conio-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-crt-conio-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 b762061b688aae679afe788904d2c9970f74a7dac98f3b42463d08f25e483d3f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-crt-convert-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-crt-convert-l1-1-0.dll
                                                    • Size 25KB
                                                    • SHA256 ebb2ae5535a64f65daeab8235585114fc9dd2cf1a49f5852d446250b998b6ae4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-crt-environment-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-crt-environment-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 17d63275d00bdd8670422b95bd264c532998e0a1b041079e54fce4b6b7a55819
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-crt-filesystem-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-crt-filesystem-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 9a9e2a65a281644e368d0f272b95ba5f6b445d1c35910d06056c5ebeb77402db
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-crt-heap-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-crt-heap-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 bab9ac3ec83e380ae51e4295ef3bf2c738627812d3a49d1e713661abbc8dc57a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-crt-locale-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-crt-locale-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 bd14c67ea28e21d6257ad780a37122c9b5773f69e693f5db6bffaee4d839526e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-crt-math-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-crt-math-l1-1-0.dll
                                                    • Size 29KB
                                                    • SHA256 606d66d82db562ea7979179d06486a0f94d079941d26b80a1e2c49d29959df6f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-crt-multibyte-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-crt-multibyte-l1-1-0.dll
                                                    • Size 29KB
                                                    • SHA256 95f49efbe8107786733fa7c474025cf3fee0ac632f240367b296c736d06572aa
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-crt-private-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-crt-private-l1-1-0.dll
                                                    • Size 73KB
                                                    • SHA256 1bc82bed6143d2bf1b6b08a7809f4a5e29317d6fddd338a7da3c0223522e4bbf
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-crt-process-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-crt-process-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 f6156b1020380ec4f0e48577ebedaaef5fb1ab1f337d8b4e72e6a33a7567a9cc
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-crt-runtime-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-crt-runtime-l1-1-0.dll
                                                    • Size 25KB
                                                    • SHA256 c5902934d026d7e15fbe9917d474f3322846a41a25e66f4b2b1f758801879f4b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-crt-stdio-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-crt-stdio-l1-1-0.dll
                                                    • Size 25KB
                                                    • SHA256 a9c5a153d8c0286f9b41a2b1c65854ad9e6471b8755b7de87bae4470e60bcab6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-crt-string-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-crt-string-l1-1-0.dll
                                                    • Size 25KB
                                                    • SHA256 25b8f83a7767211b11132775a0e27a45aa4ec8ab4e6572599f9c172ae3606b40
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-crt-time-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-crt-time-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 7c7f6393f06de11750adb09cc5698ae55cd9fb27b2e51e207286feb1b5b2b156
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    api-ms-win-crt-utility-l1-1-0.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\api-ms-win-crt-utility-l1-1-0.dll
                                                    • Size 21KB
                                                    • SHA256 d8ba5f17b9ffcbf3aeaf3fa1da226832d2fa90f81acce0cd669464e76ce434ac
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    awt.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\awt.dll
                                                    • Size 1.4MB
                                                    • SHA256 bd5117c04f9f9ac24cab5069eac3016f8fb2e9e3c442f5a033a5dd60e3e7329d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    fontmanager.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\fontmanager.dll
                                                    • Size 1006KB
                                                    • SHA256 460703129063b9a1f640a334b929f85af309af70afb7f3d1b15ac997514aebb2
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    freetype.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\freetype.dll
                                                    • Size 547KB
                                                    • SHA256 59715823f681a1cfffeecbf3de8db4ad2833f00df66273fda1454b4709aadb4f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    java.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\java.dll
                                                    • Size 119KB
                                                    • SHA256 1c3ee3a20a349fd8c0f99d439866e02831144011f92841dd40bf4c6e646e29a5
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    java.exe

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\java.exe
                                                    • Size 49KB
                                                    • SHA256 a38d821efb69ef99c55d315b00d9e8b88f126743b8773e44154e1a3d193efd41
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    javajpeg.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\javajpeg.dll
                                                    • Size 176KB
                                                    • SHA256 5321bbee3d7f42f080826dcb5aebc106b3caf16aaec7307ca9e164a858026af4
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    javaw.exe

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\javaw.exe
                                                    • Size 49KB
                                                    • SHA256 5e4b114ef331b2ffb2c91db26f7707a50acc4973312fe0ae6d776ef14fabd837
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    jawt.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\jawt.dll
                                                    • Size 21KB
                                                    • SHA256 0a319816a1a7e40b448bde3e5406c98394709debe8ba03f70e8ce28f99238a94
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    jimage.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\jimage.dll
                                                    • Size 33KB
                                                    • SHA256 d3d2564f8be67d88d564e491fa3d51c5194f9ddc869cc2cd28d97c738b0961b8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    jli.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\jli.dll
                                                    • Size 87KB
                                                    • SHA256 ccc91f3d4b17a173299d6301e06d6cf3bd35869afb451969e751a1c677ce3a69
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    jsound.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\jsound.dll
                                                    • Size 59KB
                                                    • SHA256 de597f157b5832c066594cbbd12bf0078aacf08a0da3eec3cfa4496ee14897a8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    keytool.exe

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\keytool.exe
                                                    • Size 24KB
                                                    • SHA256 7b54dd8df13f8359555dd4ca7d4794d3d9de944b16b5d59f065f7ff0bf9c4cf1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    lcms.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\lcms.dll
                                                    • Size 254KB
                                                    • SHA256 aa270954821c034458c84e8fa2de39ad9c19d6ad6d943667fd964a0f4d15aae9
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    mlib_image.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\mlib_image.dll
                                                    • Size 509KB
                                                    • SHA256 6a9f44c9caf302c3f38d157256f8724e8e91da83ec6cf47d387222d3dce5734b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    msvcp140.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\msvcp140.dll
                                                    • Size 561KB
                                                    • SHA256 a4c2229bdc2a2a630acdc095b4d86008e5c3e3bc7773174354f3da4f5beb9cde
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    net.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\net.dll
                                                    • Size 58KB
                                                    • SHA256 d28327c435dcaf28cac426bab285bcee07c4a3b549fa00f9897f5f6723b72c1d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    nio.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\nio.dll
                                                    • Size 78KB
                                                    • SHA256 034650d4d364bffa0911586a370da552d996c651297d6245bdc50c1834d78613
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    prefs.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\prefs.dll
                                                    • Size 25KB
                                                    • SHA256 6eb0cd6a5fd404adf03d222302a89a8e76fd5cd1ba12e76403357e8d8b44c344
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    rmi.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\rmi.dll
                                                    • Size 20KB
                                                    • SHA256 722cc76561317ea88e09c58340a80e9cc163c997a04ee0b62592871accdab89f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    rmiregistry.exe

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\rmiregistry.exe
                                                    • Size 24KB
                                                    • SHA256 e3b367f360e2c1d961111e1e108e4b38081cbe120ab2cfbd2cbab71e9d81e92e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    jvm.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\server\jvm.dll
                                                    • Size 13.3MB
                                                    • SHA256 e92b9a0cbe431c5ed0b6ffd55932a04b23df812d77d282859f1a3e6f35218448
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    splashscreen.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\splashscreen.dll
                                                    • Size 211KB
                                                    • SHA256 1a0d66061b1a2b5ad8bf396a4ac38254eba2a711b4b0d3bdc11acde14cc969ff
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    syslookup.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\syslookup.dll
                                                    • Size 28KB
                                                    • SHA256 8a40afe7b8deb35b4d2cb5b06ab55d1c83b60008d63be9de0f6f21503056ff39
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    turbojpeg.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\turbojpeg.dll
                                                    • Size 841KB
                                                    • SHA256 0f72d216b7c7816e552f50ad594c3daaf7ff16074722d073e3b246f04f85e877
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    ucrtbase.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\ucrtbase.dll
                                                    • Size 1.3MB
                                                    • SHA256 2e5fb14b7bf8540278f3614a12f0226e56a7cc9e64b81cbd976c6fcf2f71cbfb
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    vcruntime140.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\vcruntime140.dll
                                                    • Size 117KB
                                                    • SHA256 02c6aa0e6e624411a9f19b0360a7865ab15908e26024510e5c38a9c08362c35a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    vcruntime140_1.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\vcruntime140_1.dll
                                                    • Size 48KB
                                                    • SHA256 7dd9aa02e271c68ca6d5f18d651d23a15d7259715af43326578f7dde27f37637
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    verify.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\verify.dll
                                                    • Size 53KB
                                                    • SHA256 038ac9a9e3ea740a0ab1f415f57af0321701013e1bee625ddb7ec22872591706
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    zip.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\bin\zip.dll
                                                    • Size 85KB
                                                    • SHA256 98635d214b33c5123136feccb41cd86c5ecb11355d3520ee1528795d867e9d3d
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    jaxp.properties

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\conf\jaxp.properties
                                                    • Size 7KB
                                                    • SHA256 7d95c49465d0c836d608d02856d3b097934dfb5dc4bd2279affaf337d045b708
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    logging.properties

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\conf\logging.properties
                                                    • Size 2KB
                                                    • SHA256 b62d2733ab99556b108a1951d894c5a8d76b1ac7a00c02c388f9eb9be046c56f
                                                    • MD5 SHA1 SHA512 TLSH

                                                    net.properties

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\conf\net.properties
                                                    • Size 7KB
                                                    • SHA256 56dd1f6095c189c1052f6baa32e457efc09de4832e19cdb82bb236dc8abfee9f
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    java.policy

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\conf\security\java.policy
                                                    • Size 2KB
                                                    • SHA256 d51bcab7ed301caeff3779a5e777e6019864cecee5e2abc102ef991b0de77af2
                                                    • MD5 SHA1 SHA512 TLSH

                                                    java.security

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\conf\security\java.security
                                                    • Size 71KB
                                                    • SHA256 7eff0eef66774d0c6a07f6c69fae02d8a7dff9b2ef3d7751af9af87a4dda33e6
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    README.txt

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\conf\security\policy\README.txt
                                                    • Size 2KB
                                                    • SHA256 6da0747334b0fea7592fd92614b2bbc8b126535e129b1fee483774d914e98eb5
                                                    • MD5 SHA1 SHA512 TLSH

                                                    default_US_export.policy

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\conf\security\policy\limited\default_US_export.policy
                                                    • Size 146B
                                                    • SHA256 758b930a526fc670ab7537f8c26321527050a31f5f42149a2dda623c56a0a1a9
                                                    • MD5 SHA1 SHA512 TLSH

                                                    default_local.policy

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\conf\security\policy\limited\default_local.policy
                                                    • Size 647B
                                                    • SHA256 2b2627548e61316150d47ffc3e6cad465ca05b3cccd4785eb7d21aa7baa0f441
                                                    • MD5 SHA1 SHA512 TLSH

                                                    exempt_local.policy

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\conf\security\policy\limited\exempt_local.policy
                                                    • Size 566B
                                                    • SHA256 8c3d7648abcd95a272ce12db870082937f4d7f6878d730d83cb7fbb31eb8b2c9
                                                    • MD5 SHA1 SHA512 TLSH

                                                    default_local.policy

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\conf\security\policy\unlimited\default_local.policy
                                                    • Size 193B
                                                    • SHA256 8d8a318e6d90dfd7e26612d2b6385aa704f686ca6134c551f8928418d92b851a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    sound.properties

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\conf\sound.properties
                                                    • Size 1KB
                                                    • SHA256 299c2360b6155eb28990ec49cd21753f97e43442fe8fab03e04f3e213df43a66
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ADDITIONAL_LICENSE_INFO

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.base\ADDITIONAL_LICENSE_INFO
                                                    • Size 2KB
                                                    • SHA256 a69bce275ba7a3570af6579cb0f55682cd75fedfcd49e0e8e9022270c447c916
                                                    • MD5 SHA1 SHA512 TLSH

                                                    ASSEMBLY_EXCEPTION

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.base\ASSEMBLY_EXCEPTION
                                                    • Size 1KB
                                                    • SHA256 75292f03bf23d3db7c985aecc191029b93883200721ed23ed34a2e601463df33
                                                    • MD5 SHA1 SHA512 TLSH

                                                    LICENSE

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.base\LICENSE
                                                    • Size 18KB
                                                    • SHA256 4b9abebc4338048a7c2dc184e9f800deb349366bdf28eb23c2677a77b4c87726
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    aes.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.base\aes.md
                                                    • Size 1KB
                                                    • SHA256 45c6d4da48325edfbff3dcf71c704e504c057904435ed23c6d57046d551eb69d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    asm.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.base\asm.md
                                                    • Size 1KB
                                                    • SHA256 683be15695bd248272d60f5b7fbe5e126a935ea6bf231a624a9aa164733e1d1d
                                                    • MD5 SHA1 SHA512 TLSH

                                                    c-libutl.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.base\c-libutl.md
                                                    • Size 1KB
                                                    • SHA256 bef40679922d6fdfb7e4ddb223ad6722300f6054ba737bbf6188d60fcec517f9
                                                    • MD5 SHA1 SHA512 TLSH

                                                    cldr.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.base\cldr.md
                                                    • Size 9KB
                                                    • SHA256 19515e14a240e022640e95b61b5095127fa9690755950b4a2b0a02e783e08163
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    icu.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.base\icu.md
                                                    • Size 29KB
                                                    • SHA256 1bf28459c6e0af9f3429f4f8becd1668d6544055f8df240277456bc4b3d8a752
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    public_suffix.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.base\public_suffix.md
                                                    • Size 17KB
                                                    • SHA256 861de1e4992a7d28f1de25c73cd50d26a94779ebd749c0643fecfa56442c3429
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    siphash.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.base\siphash.md
                                                    • Size 8KB
                                                    • SHA256 5a792b5a74ad2a5f3d6a7ad8b7a841116e58a772c18bc6e392320a365b222c76
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    unicode.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.base\unicode.md
                                                    • Size 8KB
                                                    • SHA256 6f72f10d166b2c2e8a395e03e734c5afc852b59aeca73ced124f6b9c96268d53
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    wepoll.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.base\wepoll.md
                                                    • Size 1KB
                                                    • SHA256 3ac2992770080453b98c42afa807ba4b2c1738ef756b92a55c645f55e7df48f0
                                                    • MD5 SHA1 SHA512 TLSH

                                                    zlib.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.base\zlib.md
                                                    • Size 1010B
                                                    • SHA256 c9c70c36a1f0325e8788771906202d42ba6ab4205caca44ec0f665707e83226b
                                                    • MD5 SHA1 SHA512 TLSH

                                                    colorimaging.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.desktop\colorimaging.md
                                                    • Size 167B
                                                    • SHA256 04d61e3e8e71dd452ebe52008af5378d9f6640d14578aeb515dc5375973b0189
                                                    • MD5 SHA1 SHA512 TLSH

                                                    freetype.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.desktop\freetype.md
                                                    • Size 29KB
                                                    • SHA256 553e804baecb7de7129d77c7259a6b70037d1893f1c600b41b35201695fb7758
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    giflib.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.desktop\giflib.md
                                                    • Size 1KB
                                                    • SHA256 206aab89ec75968e48a6a1ed6df7d8b9bfb7aea12cbe4c9345d93e5d97460a25
                                                    • MD5 SHA1 SHA512 TLSH

                                                    harfbuzz.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.desktop\harfbuzz.md
                                                    • Size 3KB
                                                    • SHA256 5ec7cba7f8e7fc3a089213140aab6fa1b3bd5bf8a91bf8bddb3b8d315fc5f7d0
                                                    • MD5 SHA1 SHA512 TLSH

                                                    jpeg.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.desktop\jpeg.md
                                                    • Size 3KB
                                                    • SHA256 c1dfb9719a71ad9f861f8728550542d681e25c8ef40e6393606e6e2a0c1d653a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    lcms.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.desktop\lcms.md
                                                    • Size 2KB
                                                    • SHA256 843f9f6fa9c3f8109fcf4d5fe74caf7f2ae8e9bcd92238e4aff2d428c932b24b
                                                    • MD5 SHA1 SHA512 TLSH

                                                    libpng.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.desktop\libpng.md
                                                    • Size 7KB
                                                    • SHA256 f73afb394792f3aeecd959e89487603677a430e56b44eba596d8b572accfd540
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    mesa3d.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.desktop\mesa3d.md
                                                    • Size 5KB
                                                    • SHA256 63f4e6f75caebbccb95d903fb43e46ac7111b3624d0a34f146b276d7d9e7b152
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    ADDITIONAL_LICENSE_INFO

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.logging\ADDITIONAL_LICENSE_INFO
                                                    • Size 49B
                                                    • SHA256 ebf9777bd307ed789ceabf282a9aca168c391c7f48e15a60939352efb3ea33f9
                                                    • MD5 SHA1 SHA512

                                                    ASSEMBLY_EXCEPTION

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.logging\ASSEMBLY_EXCEPTION
                                                    • Size 44B
                                                    • SHA256 b998cda101e5a1ebcfb5ff9cddd76ed43a2f2169676592d428b7c0d780665f2a
                                                    • MD5 SHA1 SHA512

                                                    LICENSE

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.logging\LICENSE
                                                    • Size 33B
                                                    • SHA256 86e0516b888276a492b19f9a84f5a866ed36925fae1510b3a94a0b6213e69192
                                                    • MD5 SHA1 SHA512

                                                    bcel.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.xml\bcel.md
                                                    • Size 10KB
                                                    • SHA256 cd578186ad93de46cca29ec8ace2b11f9da751987f3f140e6095c528596cc8c1
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    dom.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.xml\dom.md
                                                    • Size 3KB
                                                    • SHA256 6686e8877667584a3a7c07344baadca1a03e29f677162d87c3c0811e990d1148
                                                    • MD5 SHA1 SHA512 TLSH

                                                    jcup.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.xml\jcup.md
                                                    • Size 1KB
                                                    • SHA256 8d5dcfdf50455a3c34c753a98f21e953248af200415a9084e3f102cb6c43b8bf
                                                    • MD5 SHA1 SHA512 TLSH

                                                    xalan.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.xml\xalan.md
                                                    • Size 13KB
                                                    • SHA256 c27eb875da4be683d4d7422be986e5e30f636ede31958ff1d39f9cd6109e7a00
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    xerces.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\java.xml\xerces.md
                                                    • Size 11KB
                                                    • SHA256 4a6bf6b367193ee68681cb2d9fed30ffc5d62dd2d477bd62e0271707d71b3244
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    cldr.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\jdk.localedata\cldr.md
                                                    • Size 33B
                                                    • SHA256 09972449731a1d1a0863af0384aeb7839f84cac74983c96856e6c305e31ed8b2
                                                    • MD5 SHA1 SHA512

                                                    thaidict.md

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\legal\jdk.localedata\thaidict.md
                                                    • Size 1KB
                                                    • SHA256 c326144a2351c9608fa708b5d7d3c5a3da03e82b66479b128e9db4969539824a
                                                    • MD5 SHA1 SHA512 TLSH

                                                    classlist

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\classlist
                                                    • Size 77KB
                                                    • SHA256 bee5fb44a1db38097034c3e6f85af40c76df6da815f75d5fe782ff0d296081c0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    fontconfig.bfc

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\fontconfig.bfc
                                                    • Size 4KB
                                                    • SHA256 c7e2e76b908cb6330823e698889943c162e9861a4575501cbb59c9b830158ab0
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    fontconfig.properties.src

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\fontconfig.properties.src
                                                    • Size 12KB
                                                    • SHA256 74e6c464ae1e63983ada241869fdc66ef8c28cef403ee2301e0a90db9555b00c
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    jawt.lib

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\jawt.lib
                                                    • Size 1KB
                                                    • SHA256 af64af138d14b9fd0849d7f66ad6b529a4e5ec9c25476557bf6b3d65a8ac6884
                                                    • MD5 SHA1 SHA512 TLSH

                                                    jrt-fs.jar

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\jrt-fs.jar
                                                    • Size 107KB
                                                    • SHA256 dc4d8909cc36acd34e87d88ab31b2c07218199850ae2a379d4ded21786c033f9
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    jvm.cfg

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\jvm.cfg
                                                    • Size 29B
                                                    • SHA256 aa9efb969444c1484e29adecab55a122458090616e766b2f1230ef05bc3867e0
                                                    • MD5 SHA1 SHA512

                                                    jvm.lib

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\jvm.lib
                                                    • Size 1.1MB
                                                    • SHA256 58fbee0f29d91056c2b251a11627d1c090f19a877ec254eb02ecb02d1477d50a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    modules

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\modules
                                                    • Size 35.8MB
                                                    • SHA256 9088c8bc7fdb0419511e6b822d1a1edc0ca779eb7b095e0fc8580bba450dc359
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    psfont.properties.ja

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\psfont.properties.ja
                                                    • Size 3KB
                                                    • SHA256 5a4bd51b969bf187ff86d94f4a71fdfbfa602762975fa3c73d264b4575f7c78f
                                                    • MD5 SHA1 SHA512 TLSH

                                                    psfontj2d.properties

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\psfontj2d.properties
                                                    • Size 11KB
                                                    • SHA256 780c565d5af3ee6f68b887b75c041cdf46a0592f67012f12eeb691283e92630a
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    blocked.certs

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\security\blocked.certs
                                                    • Size 2KB
                                                    • SHA256 583500b76965eb54b03493372989ab4d3426f85462d1db232c5ae6706a4d6c58
                                                    • MD5 SHA1 SHA512 TLSH

                                                    cacerts

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\security\cacerts
                                                    • Size 149KB
                                                    • SHA256 98d34a90fca2688ef5674862d2a484e09e5ca25d2f07c5d654aa28f1581f3419
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    default.policy

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\security\default.policy
                                                    • Size 11KB
                                                    • SHA256 69790a79bb9d4bef6b544c1878410bfa0c6a92171834c188772a0ba1ca8c0d95
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    public_suffix_list.dat

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\security\public_suffix_list.dat
                                                    • Size 223KB
                                                    • SHA256 37e71e43c8605f29b9072f152d0ea4708735cdf335a5b68b2bc2f875760806c3
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    tzdb.dat

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\tzdb.dat
                                                    • Size 100KB
                                                    • SHA256 5906b44e25a8a730131d7ba1beb5d15af27043f6536f1a169ca8a5d8b8bed8f8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    tzmappings

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\lib\tzmappings
                                                    • Size 21KB
                                                    • SHA256 b41575b332809b37ad423bdca30c7c48cdef3d82f82fa9d534781a6f15d6a2ab
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    release

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\resources\java\jre\release
                                                    • Size 219B
                                                    • SHA256 028dabdc6fa92a2fed3e772b609ab86ba6e03c30b659cc023f2db759ec72237e
                                                    • MD5 SHA1 SHA512 TLSH

                                                    snapshot_blob.bin

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\snapshot_blob.bin
                                                    • Size 302KB
                                                    • SHA256 7a0c73bd91f93f73b3da2e568412bcec64aad64c91c5b7795d67209fd3d4a221
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    v8_context_snapshot.bin

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\v8_context_snapshot.bin
                                                    • Size 646KB
                                                    • SHA256 4aa1bf0ca492470a966bb52165cdd0a7a3d6bba7f20e932a86bd9b2be41ae3fb
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    vk_swiftshader.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\vk_swiftshader.dll
                                                    • Size 5.2MB
                                                    • SHA256 7d2774eab7cf7daea6e112092a45862a651689e863fa8c22dbf55c777718d70b
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    vk_swiftshader_icd.json

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\vk_swiftshader_icd.json
                                                    • Size 106B
                                                    • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                                    • MD5 SHA1 SHA512 TLSH

                                                    vulkan-1.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\7z-out\vulkan-1.dll
                                                    • Size 938KB
                                                    • SHA256 9772ec778911124af85619663f6a78eb0596860a6c27e3e03e9eb0a31cea1cf8
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    SpiderBanner.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\SpiderBanner.dll
                                                    • Size 9KB
                                                    • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    StdUtils.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\StdUtils.dll
                                                    • Size 100KB
                                                    • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    System.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\System.dll
                                                    • Size 12KB
                                                    • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    WinShell.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\WinShell.dll
                                                    • Size 3KB
                                                    • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                                                    • MD5 SHA1 SHA512 TLSH

                                                    nsis7z.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsf5D3A.tmp\nsis7z.dll
                                                    • Size 424KB
                                                    • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH

                                                    nsExec.dll

                                                    • Path C:\Users\Admin\AppData\Local\Temp\nsy30F5.tmp\nsExec.dll
                                                    • Size 6KB
                                                    • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
                                                    • MD5 SHA1 SHA512 SSDEEP TLSH