Analysis

  • max time kernel
    48s
  • max time network
    68s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-de
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-delocale:de-deos:windows11-ltsc_2024-x64systemwindows
  • submitted
    25/08/2026, 16:39

General

  • Target
    ModsHubSetup.exe
  • Size 113.5MB
  • Sample260825-t58k4scl8x
  • SHA256 7a0d488e54283c0e0e20864b8734580d7057e190601fd97463df8e9a6b5a1192
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 19 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Obfuscated Files or Information: Command Obfuscation 1 TTPs

    Adversaries may obfuscate content during command execution to impede detection.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Using powershell.exe command.

  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 34 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ModsHubSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\ModsHubSetup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3396
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
      2⤵
      • Hide Artifacts: Ignore Process Interrupts
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:4856
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:1200
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\ModsHub', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3884
  • C:\Users\Admin\AppData\Local\ModsHub\ModsHub.exe
    "C:\Users\Admin\AppData\Local\ModsHub\ModsHub.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks processor information in registry
    • Modifies registry class
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2884
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /d /s /c "chcp"
      2⤵
      • Executes a command shell one-liner
      • Suspicious use of WriteProcessMemory
      PID:2084
      • C:\Windows\system32\chcp.com
        chcp
        3⤵
          PID:2120
      • C:\Users\Admin\AppData\Local\ModsHub\ModsHub.exe
        "C:\Users\Admin\AppData\Local\ModsHub\ModsHub.exe" --type=gpu-process --disable-breakpad --user-data-dir="C:\Users\Admin\AppData\Roaming\ModsHub" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1816,i,11703739259310800942,16392750606181122767,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1800,i,5344514521837516595,5807213546063090561,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1708 /prefetch:2
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2500
      • C:\Users\Admin\AppData\Local\ModsHub\ModsHub.exe
        "C:\Users\Admin\AppData\Local\ModsHub\ModsHub.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=de --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\ModsHub" --field-trial-handle=1816,i,11703739259310800942,16392750606181122767,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1800,i,5344514521837516595,5807213546063090561,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2236 /prefetch:11
        2⤵
        • Executes dropped EXE
        PID:2908
      • C:\Users\Admin\AppData\Local\ModsHub\ModsHub.exe
        "C:\Users\Admin\AppData\Local\ModsHub\ModsHub.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ModsHub" --app-path="C:\Users\Admin\AppData\Local\ModsHub\resources\app.asar" --no-sandbox --no-zygote --disable-breakpad --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1816,i,11703739259310800942,16392750606181122767,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1800,i,5344514521837516595,5807213546063090561,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2464 /prefetch:1
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4320
      • C:\Users\Admin\AppData\Local\ModsHub\ModsHub.exe
        "C:\Users\Admin\AppData\Local\ModsHub\ModsHub.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\ModsHub" --app-path="C:\Users\Admin\AppData\Local\ModsHub\resources\app.asar" --no-sandbox --no-zygote --disable-breakpad --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=de --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --field-trial-handle=1816,i,11703739259310800942,16392750606181122767,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1800,i,5344514521837516595,5807213546063090561,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3616 /prefetch:1
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5488
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /d /s /c "powershell.exe -NoProfile -EncodedCommand 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"
        2⤵
        • Suspicious use of WriteProcessMemory
        PID:2768
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -EncodedCommand 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
          3⤵
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:2576
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k GPSvcGroup
      1⤵
        PID:4808

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            StartupProfileData-NonInteractive

            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
            • Size 18KB
            • SHA256 106b1d1e243a1490fd8f03694e3e642c669413d7096a9eff7fa156758355d0c9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            StartupProfileData-NonInteractive

            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
            • Size 17KB
            • SHA256 cbdbbb540c8c241848175b707e7e1476cb8ed4b5f187eb1157e8b75f6a45f315
            • MD5 SHA1 SHA512 SSDEEP TLSH

            StartupProfileData-NonInteractive

            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
            • Size 16KB
            • SHA256 a7ba9a8c0037e77a8d414bf30a076a295217f6e8de722ab083beb7a5276abc13
            • MD5 SHA1 SHA512 SSDEEP TLSH

            __PSScriptPolicyTest_q3qzrcq3.nag.ps1

            • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_q3qzrcq3.nag.ps1
            • Size 60B
            • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
            • MD5 SHA1 SHA512 TLSH

            LICENSE.electron.txt

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\LICENSE.electron.txt
            • Size 1KB
            • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
            • MD5 SHA1 SHA512 TLSH

            LICENSES.chromium.html

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\LICENSES.chromium.html
            • Size 18.6MB
            • SHA256 62e3b53be6bbbb2e7747b7a55c8b4f4a3cf38b95e0fff594737b3bfdac8cf373
            • MD5 SHA1 SHA512 SSDEEP TLSH

            chrome_100_percent.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\chrome_100_percent.pak
            • Size 113KB
            • SHA256 34433fa04ddf5eb78b3b4e9c64a3af626e28641907ad7a6086614eb6a8f00a07
            • MD5 SHA1 SHA512 SSDEEP TLSH

            chrome_200_percent.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\chrome_200_percent.pak
            • Size 183KB
            • SHA256 581c8d53199c10512d31a340699f9ad269f8eea5fe6bc49e05c1bde98ee612aa
            • MD5 SHA1 SHA512 SSDEEP TLSH

            d3dcompiler_47.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\d3dcompiler_47.dll
            • Size 4.5MB
            • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dxcompiler.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\dxcompiler.dll
            • Size 24.5MB
            • SHA256 e84c0fa1ddffe7a656224d7350cff0f928498921e43842ed5f83d94fa926c3bd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dxil.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\dxil.dll
            • Size 1.4MB
            • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ffmpeg.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\ffmpeg.dll
            • Size 3.0MB
            • SHA256 2382025652ccb4ab5ee3121b3bb20de08b0e04b27a8e624c231d438cc0b14e36
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icudtl.dat

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\icudtl.dat
            • Size 10.3MB
            • SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libEGL.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\libEGL.dll
            • Size 510KB
            • SHA256 a67b58c7490c91d600465f6f2d81312253c29f9d2e50dfaf1596bd0c8130093e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libGLESv2.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\libGLESv2.dll
            • Size 7.6MB
            • SHA256 3eeab764257fc03ff1ea0429fd13012cdee4943bc94118a4df5dfed8cb7fce02
            • MD5 SHA1 SHA512 SSDEEP TLSH

            af.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\af.pak
            • Size 596KB
            • SHA256 7bf59977f051c1ccb19cb8c48a8efd57922d088ad26cd51a85a671000c845a4e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            am.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\am.pak
            • Size 966KB
            • SHA256 a387f4af550667980c7631532b5c8f50a20ecf2c2f45392a7e0bf23f8f6c91fc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ar.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\ar.pak
            • Size 1.0MB
            • SHA256 e8f4b9b64235893bbee95c8360c739e5ba09687072dd4b7d706cee9ae4032887
            • MD5 SHA1 SHA512 SSDEEP TLSH

            bg.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\bg.pak
            • Size 1.1MB
            • SHA256 da36ef0cde92b2021ff39b6c3341f4d2832c1129d13248aa371573812140db9a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            bn.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\bn.pak
            • Size 1.4MB
            • SHA256 4f246bc78ddfc2cc249ae99990470e2d470a13a2d7599ab8787400c4fd179cdc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ca.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\ca.pak
            • Size 671KB
            • SHA256 b232cebcb102bf03c81286f1ec082e80d0e399d09d9251c3e574ef24fb15b68b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            cs.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\cs.pak
            • Size 697KB
            • SHA256 58b2d7c81430bec91ff72560acd604df82ff0090e2c4e3d1ce8cac2b69bc40e9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            da.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\da.pak
            • Size 626KB
            • SHA256 66de87f60ce23d82457271b34da1baed85bf0f3f63b04d90610a20c4ebe66c23
            • MD5 SHA1 SHA512 SSDEEP TLSH

            de.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\de.pak
            • Size 672KB
            • SHA256 dadd0439167371607d9a82222f248f268d9e27669c1d87ca09d8751c07a90d01
            • MD5 SHA1 SHA512 SSDEEP TLSH

            el.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\el.pak
            • Size 1.2MB
            • SHA256 9a9db32904381a6eda169f56099313a494dae63f2795678449c4ad87cd3a69fb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            en-GB.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\en-GB.pak
            • Size 543KB
            • SHA256 7bbcf19623b0a34524d75a3211d305d6b01150b3ecf2bff3b140189a13c29eb4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            en-US.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\en-US.pak
            • Size 549KB
            • SHA256 446a0f711467b162cced38128932f712e4a53fe344a165110196c366fd3d87ea
            • MD5 SHA1 SHA512 SSDEEP TLSH

            es-419.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\es-419.pak
            • Size 662KB
            • SHA256 337a0ef8be48fcf7d120026d8dd9970737604ad177df1709fefa5cca79c70079
            • MD5 SHA1 SHA512 SSDEEP TLSH

            es.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\es.pak
            • Size 659KB
            • SHA256 b32a3073e0e749b8b1f0f3e082343a8ca192cf3b7244847387526a5cd8beef7f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            et.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\et.pak
            • Size 602KB
            • SHA256 740a4632aa00dbc07251c10cdef1480739069a6456fa9a642eef387fba935e09
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fa.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\fa.pak
            • Size 996KB
            • SHA256 7d13dfa4bc6ea7ae996f0696eb328de26b35e1ec7e606fb0c4f8192d4bfcbaec
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fi.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\fi.pak
            • Size 612KB
            • SHA256 53cca3552a8bf4ccc516103cdf929b5f10ba1859ccebe644bb080082faff6878
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fil.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\fil.pak
            • Size 695KB
            • SHA256 3503fbfa400b23a3019005a2f1d7a31d623b056889a66abcaeb1558ad4316924
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\fr.pak
            • Size 716KB
            • SHA256 a8db41476a1103bc5bfb617b150c6b6e2ca1eb24f534872c9c15e353649cd0bc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            gu.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\gu.pak
            • Size 1.4MB
            • SHA256 947324c6aada6255df0c702114796436215f8012634a58b065b7ff3fc92162bd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            he.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\he.pak
            • Size 871KB
            • SHA256 d06fb5dc66cc104503a861d2e4e6ef53e9172549c862aadeddcc2b5bb856f25c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hi.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\hi.pak
            • Size 1.5MB
            • SHA256 a775f5724ccbe9bdfeefc448b42e3b48402f81404d94dea4252bfb765a314b96
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\hr.pak
            • Size 671KB
            • SHA256 84c6bd6ce5bcd81a89b0908f22576725128e27688f6578d13d8b2f0e7fa6335f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hu.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\hu.pak
            • Size 717KB
            • SHA256 cd1026c6596610617d8a313b899e9d2e2514d0cd1fbf97790f2c450309ede792
            • MD5 SHA1 SHA512 SSDEEP TLSH

            id.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\id.pak
            • Size 592KB
            • SHA256 4de71f7c766db79412dcc1f5521c5f3e678cf343327cc31b0fc28472102e0247
            • MD5 SHA1 SHA512 SSDEEP TLSH

            it.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\it.pak
            • Size 648KB
            • SHA256 ac12cbbdeeea05f0cf90cc57df1f6ef299444b1f499157eef8aa089f73da25f9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ja.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\ja.pak
            • Size 791KB
            • SHA256 c737584f4b525c4d17cc2a79f0318640a7a666c43ef7aa24753551d1b75d7d7f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            kn.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\kn.pak
            • Size 1.6MB
            • SHA256 3eb9b3dda74b5e21abf7d7726cc2e682afd87141ee30a488e288695d48a5352e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ko.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\ko.pak
            • Size 671KB
            • SHA256 bcc64be2004522a68a12dcfb6efb45f030d0badfe048220d2830b188e7f4135d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            lt.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\lt.pak
            • Size 729KB
            • SHA256 a7eae3ba06229763b85b29eb64e011b992679952165bb7239a9ece1d441de4ab
            • MD5 SHA1 SHA512 SSDEEP TLSH

            lv.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\lv.pak
            • Size 727KB
            • SHA256 8a4c31840217419f608b15eca1490bb4e83c5a896556a045f95af7f1390f5f8a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ml.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\ml.pak
            • Size 1.6MB
            • SHA256 434221a29e71a6dfc6c14a5843713df51b2afe8cc3114cb9fedfbfdfc590ce4d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\mr.pak
            • Size 1.3MB
            • SHA256 ae12ff8ac009a4991d71363ff442abb3beaef772d08e72f4ccd685403a02f332
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ms.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\ms.pak
            • Size 624KB
            • SHA256 77912adf05407adf3dfd2b0eba269b1cb99d980dd0a16fae74dabea3a584a869
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nb.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\nb.pak
            • Size 598KB
            • SHA256 81b5a935f83a49ef4faf7132876e500a6cd49909c1d2b45d4bf1336769874b86
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nl.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\nl.pak
            • Size 623KB
            • SHA256 afc9e6696a40b0318ba96e786fe0b286c3ea9a2d548479c1fa43d96b1c137c62
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pl.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\pl.pak
            • Size 696KB
            • SHA256 f92f6bff33a975e189b78a4cf0e153e85743dda432347745ebf8f1b4ff51a99b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pt-BR.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\pt-BR.pak
            • Size 652KB
            • SHA256 d1aba0dbde99231d3096b7ef9ec62ed017c72804257de62ffb649d45cf234f9d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pt-PT.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\pt-PT.pak
            • Size 656KB
            • SHA256 1326efcde830a8b29541c98fb51e3b5e5428d2a59e1b21a11a677317d08b2bbd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ro.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\ro.pak
            • Size 681KB
            • SHA256 7fd5b85509f67394eee48b07339c9a3a77fb1fb99b6204bae3209f9f0ffab3b1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ru.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\ru.pak
            • Size 1.1MB
            • SHA256 23166d431d70048e248e3ff47732642cb1ab73f9516384e33ef3c1979574f2ff
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sk.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\sk.pak
            • Size 708KB
            • SHA256 91037f2ecb636857b92a2729b7c116d8dd98082b068e4f78b0fdab06f27d2eb7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sl.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\sl.pak
            • Size 678KB
            • SHA256 321ab341e3225dddcac858448367d43677c20e739b2ccab52f8c86aa0727d868
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\sr.pak
            • Size 1.0MB
            • SHA256 7b337dcad390a9f08c3bd1d27235898e588827fa8da8808f4bc7012011578ef0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sv.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\sv.pak
            • Size 605KB
            • SHA256 f10b4db7184a14f28bfdad82597d2d43b4ec859ab6eab59a5c3891aa6070f3ed
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sw.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\sw.pak
            • Size 640KB
            • SHA256 726ba26363103920712874418cbfc23ce899c46ca8a6dc3ec9da0bf48355622b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ta.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\ta.pak
            • Size 1.6MB
            • SHA256 fd8fe5c21a10e6542599e9148c8a30557c4d437b9606d6b29b685d474d89534d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            te.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\te.pak
            • Size 1.5MB
            • SHA256 28b85fa550df913e970fac8a599ec4963b1466e3b610350924518de107e41602
            • MD5 SHA1 SHA512 SSDEEP TLSH

            th.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\th.pak
            • Size 1.3MB
            • SHA256 cfd9e6651e9335fbc0483aed1098112234e973303bf7101d88e0518d3fb16ffe
            • MD5 SHA1 SHA512 SSDEEP TLSH

            tr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\tr.pak
            • Size 651KB
            • SHA256 4b047663f169169f3ccd33923782ae33348c37e5107314d3324f1850f3c5fb42
            • MD5 SHA1 SHA512 SSDEEP TLSH

            uk.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\uk.pak
            • Size 1.1MB
            • SHA256 3ebafedd5f6005f56a2d7a500e59bcb435e58a6013c7e075b241a91ab1c605ed
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ur.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\ur.pak
            • Size 981KB
            • SHA256 51c318f3df2673cb34d0df9235021dd1794073cddf59d14433620da1141ec650
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vi.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\vi.pak
            • Size 774KB
            • SHA256 45c351251b938ea6f46305f2c324e8144bdf7500e08d430f8280b7db9e2ce52d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            zh-CN.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\zh-CN.pak
            • Size 554KB
            • SHA256 78837eb8a17d34e371ed72b7c7d9262876592f409fc66b293461c5468386834c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            zh-TW.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\locales\zh-TW.pak
            • Size 547KB
            • SHA256 fb77ff841f652f0ac8be02ce625559ae516c63081a45bde96f9277f241172eca
            • MD5 SHA1 SHA512 SSDEEP TLSH

            resources.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources.pak
            • Size 6.5MB
            • SHA256 096373b7b5a9535b5ba60a37883d1d2010d28dafd90d4c819a902db09aef4ad1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            app-update.yml

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app-update.yml
            • Size 369B
            • SHA256 6e1cf915c6e61ac79200711d11b387d1a7a81621ab046912a8ad5fc28372a600
            • MD5 SHA1 SHA512 TLSH

            .prettierrc

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\.prettierrc
            • Size 73B
            • SHA256 bd5cc7b1eba49f927a3bdbc18c009407ea2f5ae07bdc980c193907d7d7c7a11b
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\LICENSE
            • Size 1KB
            • SHA256 c5f00acfdb0120b3fafa9869ece941c0a095253770f652927da96352b502df90
            • MD5 SHA1 SHA512 TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\index.js
            • Size 1KB
            • SHA256 04a22ae517a8f93453097ed636dee04a7635f928eef73cbc003916d091d0bbce
            • MD5 SHA1 SHA512 TLSH

            checkGrowl.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\lib\checkGrowl.js
            • Size 550B
            • SHA256 01c807bd9f273f09ffd87bab13473865bbf321071513f5c487dd1b6e7fbdaf10
            • MD5 SHA1 SHA512 TLSH

            utils.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\lib\utils.js
            • Size 14KB
            • SHA256 bd5ed859adeda193e15672e769551966b31cecaa6294fc52297533d835af3702
            • MD5 SHA1 SHA512 SSDEEP TLSH

            balloon.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\notifiers\balloon.js
            • Size 4KB
            • SHA256 ef68f4d2e8dfcd1443843d81707a3e0e7a2e01d9573100710736eb1990306220
            • MD5 SHA1 SHA512 SSDEEP TLSH

            growl.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\notifiers\growl.js
            • Size 1KB
            • SHA256 922eecd40262c26337901479de95b0960c719df76fd3b53dfa3fc3aaed95823f
            • MD5 SHA1 SHA512 TLSH

            notificationcenter.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\notifiers\notificationcenter.js
            • Size 2KB
            • SHA256 10dc099d7164133959a61c70ed2951921ef591738c327dbd76d7338f1c9630b4
            • MD5 SHA1 SHA512 TLSH

            notifysend.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\notifiers\notifysend.js
            • Size 2KB
            • SHA256 29fe357ee97ad29245f55bfcfee3ce75bc86375910d9b9709105a11d28f287de
            • MD5 SHA1 SHA512 TLSH

            toaster.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\notifiers\toaster.js
            • Size 4KB
            • SHA256 3dc551eb4aa9f5ef5a2d983336e8e52714b16ad044a6e29435300299058823ed
            • MD5 SHA1 SHA512 SSDEEP TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\package.json
            • Size 1KB
            • SHA256 930aaacf5d93e64d22491731b89edd9000971824255bf0fbd8f029629bca0978
            • MD5 SHA1 SHA512 TLSH

            Info.plist

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\mac.noindex\terminal-notifier.app\Contents\Info.plist
            • Size 1KB
            • SHA256 258d7eb87e20094ee0a3c9b65e33a90effdec238c5d785a088af3d2e1ead4a61
            • MD5 SHA1 SHA512 TLSH

            terminal-notifier

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\mac.noindex\terminal-notifier.app\Contents\MacOS\terminal-notifier
            • Size 85KB
            • SHA256 2588f4ae2118396419767c388cf2b0a9a5e0cb53ce5d05a07c00f68a97a50215
            • MD5 SHA1 SHA512 SSDEEP TLSH

            PkgInfo

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\mac.noindex\terminal-notifier.app\Contents\PkgInfo
            • Size 8B
            • SHA256 82502191c9484b04d685374f9879a0066069c49b8acae7a04b01d38d07e8eca0
            • MD5 SHA1 SHA512

            Terminal.icns

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\mac.noindex\terminal-notifier.app\Contents\Resources\Terminal.icns
            • Size 360KB
            • SHA256 ccfc0f457dbbed2b164a9f708e1a0000fad8f896b0d5332b376e2b748f3ff525
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Credits.rtf

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\mac.noindex\terminal-notifier.app\Contents\Resources\en.lproj\Credits.rtf
            • Size 436B
            • SHA256 b4386fe1cef65cd91e6c8ecc065d117089083f91b7cadbf0c3e5eae20e8b9640
            • MD5 SHA1 SHA512 TLSH

            InfoPlist.strings

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\mac.noindex\terminal-notifier.app\Contents\Resources\en.lproj\InfoPlist.strings
            • Size 92B
            • SHA256 39cf2ee07b7b333e7c179d0bf4d798a5b72af6a4e584f51e642703bbfa4fc828
            • MD5 SHA1 SHA512 TLSH

            MainMenu.nib

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\mac.noindex\terminal-notifier.app\Contents\Resources\en.lproj\MainMenu.nib
            • Size 25KB
            • SHA256 66a2378cee667b39af5a92676f20f2db13dcf73cf2d23d2a30ef140cdb71f1ad
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\notifu\LICENSE
            • Size 1KB
            • SHA256 70277439f914fd361541c44fec279ae8d03ad37aeac8c92f79c2914da4b5d7eb
            • MD5 SHA1 SHA512 TLSH

            notifu.exe

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\notifu\notifu.exe
            • Size 250KB
            • SHA256 43ab3c4eac18a2d5cf05c5aa25f7d4b2c7b8d6b0b956aa039b5b135049e57475
            • MD5 SHA1 SHA512 SSDEEP TLSH

            notifu64.exe

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\notifu\notifu64.exe
            • Size 299KB
            • SHA256 3c9b686cb83e381805dd19a9ff469c8c59787a0661806c2efe372589fd48abfa
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\snoreToast\LICENSE
            • Size 7KB
            • SHA256 2f4414f727c43c1ea8778482d4a88087f871717539299116c498fa113d1fcdbc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            snoretoast-x64.exe

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\snoreToast\snoretoast-x64.exe
            • Size 2.4MB
            • SHA256 2c43158afcf46b2baad832c27691784ab102f51a9d87088af3bb3c9caee9f7b5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            snoretoast-x86.exe

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\snoreToast\snoretoast-x86.exe
            • Size 2.0MB
            • SHA256 a6b67827581f0a4da306e6498778ce1fbf7af3cb312be90e957bd4d1e820572e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            terminal-notifier-LICENSE

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-notifier\vendor\terminal-notifier-LICENSE
            • Size 1KB
            • SHA256 77a2769c8dc103f8051ccabab083c18e4cfbd26ba51589f26278c94dee997e56
            • MD5 SHA1 SHA512 TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\ps-list\index.js
            • Size 3KB
            • SHA256 b7ac5fa0d24df44755481b9876850fed593423d68c48eed9d30e989879b1864b
            • MD5 SHA1 SHA512 TLSH

            license

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\ps-list\license
            • Size 1KB
            • SHA256 5c932d88256b4ab958f64a856fa48e8bd1f55bc1d96b8149c65689e0c61789d3
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\ps-list\package.json
            • Size 606B
            • SHA256 b7a7af79ae2225f7dee5b160559468efc4663cf8dfd2c6e9a068969cb089b003
            • MD5 SHA1 SHA512 TLSH

            fastlist-0.3.0-x64.exe

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\ps-list\vendor\fastlist-0.3.0-x64.exe
            • Size 275KB
            • SHA256 b0ea9d051301ebfb66536469717fb4f7104ace02bc070ef7a5d5aab3fc4df2e3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fastlist-0.3.0-x86.exe

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\ps-list\vendor\fastlist-0.3.0-x86.exe
            • Size 220KB
            • SHA256 0ca4cc45df6c2177a2003c854465c3be35170428eebe5df82d013b7d7010e5c2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            .prettierignore

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\.prettierignore
            • Size 102B
            • SHA256 12fa21eee0c543b12b40854c69351b4380cb40c787086a7fd84ab2fe57ee732f
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\LICENSE
            • Size 1KB
            • SHA256 371fcc6c09ada2d6103115f65cbe5e892893086c3abe837859753150fcfb808e
            • MD5 SHA1 SHA512 TLSH

            registry.node.recipe

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\Release\obj\registry\registry.node.recipe
            • Size 320B
            • SHA256 edc6b61b3508e47c7d714d90961a2a6a6d8cd8970485f55187ff47d910461dce
            • MD5 SHA1 SHA512 TLSH

            CL.command.1.tlog

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\Release\obj\registry\registry.tlog\CL.command.1.tlog
            • Size 5KB
            • SHA256 ef2e456be050792a423bedb3941f00878d45e72d7c0853113258ca89a85aac14
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CL.read.1.tlog

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\Release\obj\registry\registry.tlog\CL.read.1.tlog
            • Size 59KB
            • SHA256 d0e8d6eaea1f846f631bf6f4eb803ba0fe31ab5773a5d8e27a09fb8237a38c6b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            CL.write.1.tlog

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\Release\obj\registry\registry.tlog\CL.write.1.tlog
            • Size 668B
            • SHA256 eb710f2ebe352030b599da393f5de56210ae6fa616ecd253b36b54162eae5da7
            • MD5 SHA1 SHA512 TLSH

            Cl.items.tlog

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\Release\obj\registry\registry.tlog\Cl.items.tlog
            • Size 329B
            • SHA256 d65f48599f47f0e7ca00bf5f17bc337262063ba315554f53f9a585db98a8e035
            • MD5 SHA1 SHA512 TLSH

            link.command.1.tlog

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\Release\obj\registry\registry.tlog\link.command.1.tlog
            • Size 1KB
            • SHA256 0b296ff85b76665735b81b91d7eeca9f23dcf3c783da7d62fda3a732648acbc3
            • MD5 SHA1 SHA512 TLSH

            link.read.1.tlog

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\Release\obj\registry\registry.tlog\link.read.1.tlog
            • Size 5KB
            • SHA256 1a5890b8489e173c2a4e19cd136d2c33fd5d236f7ce9280379c8e64571db0ba8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            link.secondary.1.tlog

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\Release\obj\registry\registry.tlog\link.secondary.1.tlog
            • Size 507B
            • SHA256 0352d3b64b55e5a2f3844d0ad2d15a0e595edcc5d03126ac8ae36e1a48c0bfbf
            • MD5 SHA1 SHA512 TLSH

            link.write.1.tlog

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\Release\obj\registry\registry.tlog\link.write.1.tlog
            • Size 702B
            • SHA256 005a96bfdf1a79e8682e87d5b2afc65334248c478d394347b56888d0a93fec3d
            • MD5 SHA1 SHA512 TLSH

            registry.lastbuildstate

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\Release\obj\registry\registry.tlog\registry.lastbuildstate
            • Size 187B
            • SHA256 9d0208995d930443da2085fc7f9773a7daefae8ef90b05845b7a54b40e7d7088
            • MD5 SHA1 SHA512 TLSH

            registry.exp

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\Release\registry.exp
            • Size 987B
            • SHA256 cb4ac057f0966bad99e0e284dba7d11f73efc13821ce560a6732f98babe6c553
            • MD5 SHA1 SHA512 TLSH

            registry.iobj

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\Release\registry.iobj
            • Size 604KB
            • SHA256 6109f90b3453be0ecca1cb05d368c2ffe7d4d16c8a042f843e6aa07b0ab0b479
            • MD5 SHA1 SHA512 SSDEEP TLSH

            registry.ipdb

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\Release\registry.ipdb
            • Size 264KB
            • SHA256 2e56b74b8f4ee1d850d9ca3b8a819ed7213f63663e671a784dc4ffd8237d947e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            registry.lib

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\Release\registry.lib
            • Size 2KB
            • SHA256 056b41bf7eb5431c4555a7a46157e4e570eb596cbbd08e2bfab2bfac1591b69c
            • MD5 SHA1 SHA512 TLSH

            registry.node

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\Release\registry.node
            • Size 200KB
            • SHA256 3f5405df5011370724bae9b88cacad393ea0d1abb1c867f5f4dc08dd33a1487e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            registry.vcxproj

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\registry.vcxproj
            • Size 11KB
            • SHA256 5dca4bf556d7cb348559e0e596fadc5fb3abad299f9bad05b2a895768e881250
            • MD5 SHA1 SHA512 SSDEEP TLSH

            registry.vcxproj.filters

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\build\registry.vcxproj.filters
            • Size 2KB
            • SHA256 5e63028c6a85414e6853b089891f9b1e736bd230dfcb1e90564dc4d237b3f75b
            • MD5 SHA1 SHA512 TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\dist\lib\index.js
            • Size 658B
            • SHA256 f8a6cc69584e07a08a4e72ba1c89bfe791af854a62d2085f230a95a6e2ed8da4
            • MD5 SHA1 SHA512 TLSH

            index.js.map

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\dist\lib\index.js.map
            • Size 128B
            • SHA256 0bba03610cf289de9e8b201f7ff8898bf7c36c23d42e1bd67b15c9f6292d935b
            • MD5 SHA1 SHA512 TLSH

            registry.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\dist\lib\registry.js
            • Size 5KB
            • SHA256 41589ec896a2d3b80311fc2325e1385f9d91dd15d0bf384c85dda403ac3e7871
            • MD5 SHA1 SHA512 SSDEEP TLSH

            registry.js.map

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\dist\lib\registry.js.map
            • Size 3KB
            • SHA256 b401771fed6bd7b3bc8fcd7ed64c6367c1fbf84d60455a0a24f19038555e0f2d
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\registry-js\package.json
            • Size 946B
            • SHA256 53b66cfa9694e7c62e40a59683000ed73b5ed8db4598c8a9ca7dbfce25dc26c0
            • MD5 SHA1 SHA512 TLSH

            LICENSE.md

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\LICENSE.md
            • Size 1KB
            • SHA256 d2ef4f15fa14b3d6bfd2418406ce713d201fe9cccaa2750b03de71e7b59119af
            • MD5 SHA1 SHA512 TLSH

            main.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\dist\main.js
            • Size 10KB
            • SHA256 3944732a99e7edb3650d55bda9e07218c092a386b0999c2c966e0b68aa892fc9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            main.js.map

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\dist\main.js.map
            • Size 9KB
            • SHA256 4d4ebc6343317d3bef0f067394c7d771e90aa0d1209340a33af059c549e457cb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            utimes.node

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\lib\binding\napi-v3\utimes.node
            • Size 143KB
            • SHA256 ced919ef7c441905cfddf3c6a5ba330305180b143365491b5e4ee39ab8401778
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LICENSE.md

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\LICENSE.md
            • Size 1KB
            • SHA256 4fcf69bbecb999ec8fa0ece62bc8934b7cdd45061ac1a8b1939a09be64cd4352
            • MD5 SHA1 SHA512 TLSH

            common.gypi

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\common.gypi
            • Size 762B
            • SHA256 f15742e3019096b85ef3e8985e2fe66c4dda722908577e113a1b0264893ecca8
            • MD5 SHA1 SHA512 TLSH

            except.gypi

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\except.gypi
            • Size 560B
            • SHA256 ddbc09f5b66fe24dd898fbe659085a6ff72e9575025004fc3762271dba781e8b
            • MD5 SHA1 SHA512 TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\index.js
            • Size 296B
            • SHA256 6528e924b31e091c3243132fe713ea0f1fa6362ffaa3c2dd09d12670db6b60dc
            • MD5 SHA1 SHA512 TLSH

            napi-inl.deprecated.h

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\napi-inl.deprecated.h
            • Size 7KB
            • SHA256 96afb169fd8af899ddcadc102ea137e3cd253c13b8862cb11bd58601fe2a5f90
            • MD5 SHA1 SHA512 SSDEEP TLSH

            napi-inl.h

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\napi-inl.h
            • Size 199KB
            • SHA256 141fee09a5439de973314b4ddb783a09e74a097f7ddfc5e3b994764a182e3795
            • MD5 SHA1 SHA512 SSDEEP TLSH

            napi.h

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\napi.h
            • Size 118KB
            • SHA256 38ece42f702d0226ecd63c8b9f0a13e71368d55944994bd2954dc142efdde669
            • MD5 SHA1 SHA512 SSDEEP TLSH

            node_api.gyp

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\node_api.gyp
            • Size 132B
            • SHA256 3cd2c44fb0974f016376b676d46bbebbca7c89d4383b09ece30e4cb4122a1499
            • MD5 SHA1 SHA512 TLSH

            noexcept.gypi

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\noexcept.gypi
            • Size 639B
            • SHA256 494060b87197c489497a038504147c435b1d09306152048add42ba0d7d16e747
            • MD5 SHA1 SHA512 TLSH

            package-support.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\package-support.json
            • Size 467B
            • SHA256 b1cb7da23cca1681c7392a3c889eb0cc4916c53d2d7692d4b654ae751f3442f3
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\package.json
            • Size 927B
            • SHA256 2fa7fd19a60a8618850ad6a63a527e5798e9dc1c02f602360ad24dc0cafe0a37
            • MD5 SHA1 SHA512 TLSH

            README.md

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\tools\README.md
            • Size 3KB
            • SHA256 65e9ea918538f453166b10a1d609cf44cec3d2d01f23fecb5265fb3a4bf303d5
            • MD5 SHA1 SHA512 TLSH

            check-napi.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\tools\check-napi.js
            • Size 3KB
            • SHA256 f3264fd3f9dd9bc3e051cdcf72125d34617b2b06b914c49f1e1297e53cfd524b
            • MD5 SHA1 SHA512 TLSH

            clang-format.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\tools\clang-format.js
            • Size 1KB
            • SHA256 f332f9209e5329776e63b4b48a53efbe95403e47ecea8c32dbcf937f3938d90a
            • MD5 SHA1 SHA512 TLSH

            conversion.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\tools\conversion.js
            • Size 14KB
            • SHA256 df2f681bdb4a1dac5faf7fa70a60dace4dd12ce0b9964effcee56a43f693fc6c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            eslint-format.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\node_modules\node-addon-api\tools\eslint-format.js
            • Size 1KB
            • SHA256 cb0d2625bbee44502b5c170386d00c7bc07d0e0ae4e995524d2d00b025a369e2
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\utimes\package.json
            • Size 1KB
            • SHA256 164686f1e585df676c580fa4214bc9b3988d0c051115e8e53250de41ca84488e
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\LICENSE
            • Size 1KB
            • SHA256 fe0982bd7d38ee4cb08b2f111067bdeedb9732a6621c761bcf7dd01aa6211c5a
            • MD5 SHA1 SHA512 TLSH

            bin.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\bin.js
            • Size 247B
            • SHA256 7f69b31efa09c6e7d442d6229e82e65f38faeafeda1fbed7c5e54324aff062e6
            • MD5 SHA1 SHA512 TLSH

            LICENSE

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\deps\UTF8Conversion\LICENSE
            • Size 573B
            • SHA256 7d355d1a2324c2073059ffe7ea4d96852c873e718bcc197374440dc3efc3f7ba
            • MD5 SHA1 SHA512 TLSH

            utf8conv.h

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\deps\UTF8Conversion\utf8conv.h
            • Size 4KB
            • SHA256 7340eea1def3c1d832a6f40c5022725f1704a783f7f992b71d5f3ba2dcaeb34c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            utf8conv_inl.h

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\deps\UTF8Conversion\utf8conv_inl.h
            • Size 10KB
            • SHA256 4955fbf455cc29d63f5dc777d3aa5172d6e1e6df221a33808a913bdebf5a1277
            • MD5 SHA1 SHA512 SSDEEP TLSH

            index.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\index.js
            • Size 514B
            • SHA256 5e591255fa35fb3650502e648ff51d6d7c7e57ada312bd33058da03cc412efb3
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\package.json
            • Size 947B
            • SHA256 0f49b6c0282be08a5dba3e98024401a921167974a516b630ce9f9a9f2301df08
            • MD5 SHA1 SHA512 TLSH

            node.napi.node

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\prebuilds\win32-ia32\node.napi.node
            • Size 198KB
            • SHA256 053c3100121939dfa1fb936718c6088e4490e72faa3c713310b556ea90155278
            • MD5 SHA1 SHA512 SSDEEP TLSH

            node.napi.node

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\prebuilds\win32-x64\node.napi.node
            • Size 251KB
            • SHA256 462e527de86494f96ed0d42a80c261e46bb57352e86d6175607186c1dcdfc7b0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            skip.js

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\skip.js
            • Size 117B
            • SHA256 c12583530edc83dcc7cacef4a428eaefa84c10bfe4b62c0c9707de015e338859
            • MD5 SHA1 SHA512 TLSH

            showver.h

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\app.asar.unpacked\node_modules\win-version-info\src\showver.h
            • Size 116B
            • SHA256 2b561b980e0a01191a6c7cc1cf94c8d5c061f9f299ea256f1e7ca17250ae08bb
            • MD5 SHA1 SHA512 TLSH

            elevate.exe

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\resources\elevate.exe
            • Size 115KB
            • SHA256 6bc7d2ccf7fd53330da2e384e494041ae49d4600bb7958f859f0c35de475023b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            snapshot_blob.bin

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\snapshot_blob.bin
            • Size 333KB
            • SHA256 a578866594759d3c20b8fc40ca8f312c283a09113920ac14aea9c88ce0e8d9ba
            • MD5 SHA1 SHA512 SSDEEP TLSH

            v8_context_snapshot.bin

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\v8_context_snapshot.bin
            • Size 698KB
            • SHA256 ed5e979db2aef4a152758f2b9b7b06349a1d3d5dd687fdb96e2b3fb730a465e0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vk_swiftshader.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\vk_swiftshader.dll
            • Size 5.4MB
            • SHA256 291fffa8c90f186d8fa6ed8c02c1eceeba85bd34ad8885a7bda4f9199024d9f3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vk_swiftshader_icd.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\vk_swiftshader_icd.json
            • Size 106B
            • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
            • MD5 SHA1 SHA512 TLSH

            vulkan-1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\7z-out\vulkan-1.dll
            • Size 932KB
            • SHA256 909de0ae2560b01b204aeabf26faad1cb312ec5ef83aa0e87703f5bffdc0f876
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SpiderBanner.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\SpiderBanner.dll
            • Size 9KB
            • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
            • MD5 SHA1 SHA512 SSDEEP TLSH

            StdUtils.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\StdUtils.dll
            • Size 100KB
            • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\System.dll
            • Size 12KB
            • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
            • MD5 SHA1 SHA512 SSDEEP TLSH

            WinShell.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\WinShell.dll
            • Size 3KB
            • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
            • MD5 SHA1 SHA512 TLSH

            nsExec.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\nsExec.dll
            • Size 6KB
            • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nsis7z.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsvF5F0.tmp\nsis7z.dll
            • Size 424KB
            • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
            • MD5 SHA1 SHA512 SSDEEP TLSH

            f_000028

            • Path C:\Users\Admin\AppData\Roaming\ModsHub\Cache\Cache_Data\f_000028
            • Size 20KB
            • SHA256 f52caa54136f51dbbe909d15c63dd36dfcc4e20644ea9018c9350992a6343910
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Preferences

            • Path C:\Users\Admin\AppData\Roaming\ModsHub\Preferences
            • Size 54B
            • SHA256 aeef9ae170498c52c919f9bf07ab46d45a0fa78a685e345be40207d29adf6ace
            • MD5 SHA1 SHA512 TLSH

            Preferences~RFe5ac44b.TMP

            • Path C:\Users\Admin\AppData\Roaming\ModsHub\Preferences~RFe5ac44b.TMP
            • Size 90B
            • SHA256 50c1c30196c19e18b02755562de75e66c01f04b83066c4c9f7af1678695e6c7c
            • MD5 SHA1 SHA512 TLSH

            memory/1200-53-0x00000000733F0000-0x0000000073BAC000-memory.dmp

            memory/1200-63-0x0000000007FF0000-0x0000000008001000-memory.dmp

            memory/1200-64-0x0000000008020000-0x000000000802A000-memory.dmp

            memory/1200-66-0x00000000733F0000-0x0000000073BAC000-memory.dmp

            memory/1200-62-0x0000000008130000-0x00000000081C6000-memory.dmp

            memory/1200-61-0x0000000008040000-0x000000000808A000-memory.dmp

            memory/1200-58-0x000000006FD90000-0x000000006FDDC000-memory.dmp

            memory/1200-56-0x00000000733F0000-0x0000000073BAC000-memory.dmp

            memory/2576-1163-0x000001C0AF710000-0x000001C0AF75A000-memory.dmp

            memory/2576-1160-0x000001C0AEE40000-0x000001C0AEE5E000-memory.dmp

            memory/2576-1154-0x000001C0AED70000-0x000001C0AED92000-memory.dmp

            memory/2576-1155-0x000001C0AED40000-0x000001C0AED50000-memory.dmp

            memory/2576-1157-0x000001C0AF1B0000-0x000001C0AF2B4000-memory.dmp

            memory/2576-1165-0x000001C0AF130000-0x000001C0AF14E000-memory.dmp

            memory/2576-1164-0x000001C0AF140000-0x000001C0AF15E000-memory.dmp

            memory/2576-1151-0x000001C0AEE60000-0x000001C0AEEE6000-memory.dmp

            memory/2576-1162-0x000001C0AF110000-0x000001C0AF11A000-memory.dmp

            memory/2576-1161-0x000001C0AF4C0000-0x000001C0AF572000-memory.dmp

            memory/3884-78-0x0000000007F40000-0x0000000007F48000-memory.dmp

            memory/3884-70-0x00000000064E0000-0x000000000683B000-memory.dmp

            memory/3884-74-0x000000006FD90000-0x000000006FDDC000-memory.dmp

            memory/3884-77-0x000000006FFC0000-0x000000007031B000-memory.dmp

            memory/4856-46-0x000000006FF10000-0x000000007026B000-memory.dmp

            memory/4856-18-0x0000000004800000-0x0000000004836000-memory.dmp

            memory/4856-31-0x0000000005A40000-0x0000000005A5E000-memory.dmp

            memory/4856-30-0x0000000005E30000-0x0000000005F34000-memory.dmp

            memory/4856-28-0x0000000005AD0000-0x0000000005E2B000-memory.dmp

            memory/4856-29-0x00000000057E0000-0x00000000057F0000-memory.dmp

            memory/4856-24-0x00000000057F0000-0x0000000005856000-memory.dmp

            memory/4856-25-0x0000000005860000-0x00000000058C6000-memory.dmp

            memory/4856-23-0x0000000005650000-0x0000000005672000-memory.dmp

            memory/4856-22-0x0000000004E20000-0x0000000004EA6000-memory.dmp

            memory/4856-20-0x0000000004F00000-0x000000000554A000-memory.dmp

            memory/4856-21-0x00000000733F0000-0x0000000073BAC000-memory.dmp

            memory/4856-19-0x00000000733F0000-0x0000000073BAC000-memory.dmp

            memory/4856-32-0x0000000005A70000-0x0000000005ABC000-memory.dmp

            memory/4856-33-0x0000000006EB0000-0x0000000006EE6000-memory.dmp

            memory/4856-35-0x000000006FD90000-0x000000006FDDC000-memory.dmp

            memory/4856-34-0x00000000733F0000-0x0000000073BAC000-memory.dmp

            memory/4856-17-0x0000000073402000-0x0000000073403000-memory.dmp

            memory/4856-38-0x0000000006490000-0x00000000064B0000-memory.dmp

            memory/4856-39-0x0000000007190000-0x0000000007233000-memory.dmp

            memory/4856-40-0x00000000733F0000-0x0000000073BAC000-memory.dmp

            memory/4856-42-0x0000000007240000-0x000000000725A000-memory.dmp

            memory/4856-41-0x00000000078C0000-0x0000000007F3C000-memory.dmp

            memory/4856-43-0x00000000072B0000-0x00000000072BA000-memory.dmp

            memory/4856-45-0x00000000074C0000-0x00000000074E4000-memory.dmp

            memory/4856-44-0x0000000007490000-0x00000000074BA000-memory.dmp

            memory/4856-47-0x00000000074E0000-0x00000000074F6000-memory.dmp

            memory/4856-49-0x00000000733F0000-0x0000000073BAC000-memory.dmp