5b71a5f2095ed4720ad63ad9c630d585ee82032f66dba772c6b6c970150b511d

Analysis

user interaction
yes
max time kernel
35s
max time network
53s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
26/08/2026, 16:06

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
atlas_vault_plus.exe
Size 77.6MB
Sample260826-tkfdtssbkb
SHA256 5b71a5f2095ed4720ad63ad9c630d585ee82032f66dba772c6b6c970150b511d
MD5 351d2451d832f87cabfc692bfe20c4be
SHA1 792814214b6c73668381f7e6c88d01d98f3e3e4a
SHA512 b7906973134f88742fbd8d1a9fa9bcc97e05fcae22c9a9748e541062a1fac7a1c3dc82dd9865430a4c966995e1942bfd421d8d06a6848460fdb8b6ecac24dde9
SSDEEP 1572864:CSnyecAvMzBGjAp0R3WHOQRIZ8REkdqkhtoiY2gfl+4bbHoKsiSR7:CeyeFTjGjuQGORPdqkhtMJwKMR7
TLSH
T1C50833D98BFD077DEA325AB5053DB27507BDA8134F90E88A729B8E3042F75B1127142B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution persistence spyware stealer

Malware Config

Signatures

Command and Scripting Interpreter: PowerShell 1 TTPs 6 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
5924	powershell.exe
1280	powershell.exe
3304	powershell.exe
5132	powershell.exe
1172	powershell.exe
4632	powershell.exe

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000\Control Panel\International\Geo\Nation	atlas_vault_plus.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2370214745-1838013427-2987045292-1000\Control Panel\International\Geo\Nation	wscript.exe

Executes dropped EXE 5 IoCs

pid	Process
3784	atlas_vault_plus.exe
1532	atlas_vault_plus.exe
4332	atlas_vault_plus.exe
6096	ShellExperienceHelper.exe
5384	ShellExperienceHelper.exe

Loads dropped DLL 16 IoCs

pid	Process
5324	atlas_vault_plus.exe
5324	atlas_vault_plus.exe
5324	atlas_vault_plus.exe
3784	atlas_vault_plus.exe
3784	atlas_vault_plus.exe
1532	atlas_vault_plus.exe
4332	atlas_vault_plus.exe
1532	atlas_vault_plus.exe
1532	atlas_vault_plus.exe
1532	atlas_vault_plus.exe
1532	atlas_vault_plus.exe
1532	atlas_vault_plus.exe
6096	ShellExperienceHelper.exe
5384	ShellExperienceHelper.exe
6096	ShellExperienceHelper.exe
5384	ShellExperienceHelper.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003

Looks up external IP address via web service 1 TTPs 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
29	ipapi.co
32	ipapi.co

Executes a VBScript file via the Windows Script Host. 1 TTPs 1 IoCs

execution

Visual Basic

T1059.005

pid	Process
5136	wscript.exe

Hide Artifacts: Hidden Files and Directories 1 TTPs 2 IoCs

defense_evasion

Hidden Files and Directories

T1564.001

pid	Process
4648	cmd.exe
5060	cmd.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 15 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
6792	cmd.exe
804	cmd.exe
2268	cmd.exe
608	cmd.exe
6100	cmd.exe
3512	cmd.exe
2004	cmd.exe
5472	cmd.exe
6632	cmd.exe
6680	cmd.exe
7060	cmd.exe
7164	cmd.exe
3324	cmd.exe
4416	cmd.exe
5800	cmd.exe

System Location Discovery: System Language Discovery 1 TTPs 3 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ShellExperienceHelper.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	atlas_vault_plus.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	ShellExperienceHelper.exe

Checks SCSI registry key(s) 3 TTPs 3 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\FriendlyName	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000	taskmgr.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Properties\{b725f130-47ef-101a-a5f1-02608c9eebac}\000A	taskmgr.exe

Kills process with taskkill 10 IoCs

defense_evasion

pid	Process
6832	taskkill.exe
4940	taskkill.exe
6124	taskkill.exe
5064	taskkill.exe
6564	taskkill.exe
7108	taskkill.exe
3980	taskkill.exe
5160	taskkill.exe
5144	taskkill.exe
6728	taskkill.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	wscript.exe

Runs net.exe

Scheduled Task/Job: Scheduled Task 1 TTPs 1 IoCs

Schtasks is often used by malware for persistence or to perform post-infection execution.

persistence execution

Scheduled Task

T1053.005

pid	Process
1192	schtasks.exe

Suspicious behavior: EnumeratesProcesses 18 IoCs

pid	Process
1280	powershell.exe
1280	powershell.exe
5924	powershell.exe
5924	powershell.exe
5924	powershell.exe
3304	powershell.exe
3304	powershell.exe
3304	powershell.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeSecurityPrivilege	5324	atlas_vault_plus.exe
Token: SeDebugPrivilege	1280	powershell.exe
Token: SeIncreaseQuotaPrivilege	1280	powershell.exe
Token: SeSecurityPrivilege	1280	powershell.exe
Token: SeTakeOwnershipPrivilege	1280	powershell.exe
Token: SeLoadDriverPrivilege	1280	powershell.exe
Token: SeSystemProfilePrivilege	1280	powershell.exe
Token: SeSystemtimePrivilege	1280	powershell.exe
Token: SeProfSingleProcessPrivilege	1280	powershell.exe
Token: SeIncBasePriorityPrivilege	1280	powershell.exe
Token: SeCreatePagefilePrivilege	1280	powershell.exe
Token: SeBackupPrivilege	1280	powershell.exe
Token: SeRestorePrivilege	1280	powershell.exe
Token: SeShutdownPrivilege	1280	powershell.exe
Token: SeDebugPrivilege	1280	powershell.exe
Token: SeSystemEnvironmentPrivilege	1280	powershell.exe
Token: SeRemoteShutdownPrivilege	1280	powershell.exe
Token: SeUndockPrivilege	1280	powershell.exe
Token: SeManageVolumePrivilege	1280	powershell.exe
Token: 33	1280	powershell.exe
Token: 34	1280	powershell.exe
Token: 35	1280	powershell.exe
Token: 36	1280	powershell.exe
Token: SeShutdownPrivilege	3784	atlas_vault_plus.exe
Token: SeCreatePagefilePrivilege	3784	atlas_vault_plus.exe
Token: SeShutdownPrivilege	3784	atlas_vault_plus.exe
Token: SeCreatePagefilePrivilege	3784	atlas_vault_plus.exe
Token: SeShutdownPrivilege	3784	atlas_vault_plus.exe
Token: SeCreatePagefilePrivilege	3784	atlas_vault_plus.exe
Token: SeShutdownPrivilege	3784	atlas_vault_plus.exe
Token: SeCreatePagefilePrivilege	3784	atlas_vault_plus.exe
Token: SeDebugPrivilege	5924	powershell.exe
Token: SeIncreaseQuotaPrivilege	5924	powershell.exe
Token: SeSecurityPrivilege	5924	powershell.exe
Token: SeTakeOwnershipPrivilege	5924	powershell.exe
Token: SeLoadDriverPrivilege	5924	powershell.exe
Token: SeSystemProfilePrivilege	5924	powershell.exe
Token: SeSystemtimePrivilege	5924	powershell.exe
Token: SeProfSingleProcessPrivilege	5924	powershell.exe
Token: SeIncBasePriorityPrivilege	5924	powershell.exe
Token: SeCreatePagefilePrivilege	5924	powershell.exe
Token: SeBackupPrivilege	5924	powershell.exe
Token: SeRestorePrivilege	5924	powershell.exe
Token: SeShutdownPrivilege	5924	powershell.exe
Token: SeDebugPrivilege	5924	powershell.exe
Token: SeSystemEnvironmentPrivilege	5924	powershell.exe
Token: SeRemoteShutdownPrivilege	5924	powershell.exe
Token: SeUndockPrivilege	5924	powershell.exe
Token: SeManageVolumePrivilege	5924	powershell.exe
Token: 33	5924	powershell.exe
Token: 34	5924	powershell.exe
Token: 35	5924	powershell.exe
Token: 36	5924	powershell.exe
Token: SeDebugPrivilege	3304	powershell.exe
Token: SeShutdownPrivilege	3784	atlas_vault_plus.exe
Token: SeCreatePagefilePrivilege	3784	atlas_vault_plus.exe
Token: SeShutdownPrivilege	3784	atlas_vault_plus.exe
Token: SeCreatePagefilePrivilege	3784	atlas_vault_plus.exe
Token: SeShutdownPrivilege	3784	atlas_vault_plus.exe
Token: SeCreatePagefilePrivilege	3784	atlas_vault_plus.exe
Token: SeDebugPrivilege	5888	taskmgr.exe
Token: SeSystemProfilePrivilege	5888	taskmgr.exe
Token: SeCreateGlobalPrivilege	5888	taskmgr.exe
Token: SeSecurityPrivilege	6096	ShellExperienceHelper.exe

Suspicious use of FindShellTrayWindow 26 IoCs

pid	Process
3784	atlas_vault_plus.exe
3784	atlas_vault_plus.exe
3784	atlas_vault_plus.exe
3784	atlas_vault_plus.exe
3784	atlas_vault_plus.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe

Suspicious use of SendNotifyMessage 27 IoCs

pid	Process
3784	atlas_vault_plus.exe
3784	atlas_vault_plus.exe
3784	atlas_vault_plus.exe
3784	atlas_vault_plus.exe
3784	atlas_vault_plus.exe
3784	atlas_vault_plus.exe
3784	atlas_vault_plus.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe
5888	taskmgr.exe

Suspicious use of WriteProcessMemory 30 IoCs

description	pid	Process	procid_target
PID 5324 wrote to memory of 3784	5324	atlas_vault_plus.exe	86
PID 3784 wrote to memory of 2848	3784	atlas_vault_plus.exe	87
PID 2848 wrote to memory of 2492	2848	net.exe	90
PID 3784 wrote to memory of 2268	3784	atlas_vault_plus.exe	94
PID 2268 wrote to memory of 1280	2268	cmd.exe	96
PID 3784 wrote to memory of 1532	3784	atlas_vault_plus.exe	99
PID 3784 wrote to memory of 4332	3784	atlas_vault_plus.exe	100
PID 3784 wrote to memory of 5800	3784	atlas_vault_plus.exe	104
PID 5800 wrote to memory of 3752	5800	cmd.exe	106
PID 3784 wrote to memory of 2004	3784	atlas_vault_plus.exe	107
PID 2004 wrote to memory of 5924	2004	cmd.exe	109
PID 3784 wrote to memory of 3304	3784	atlas_vault_plus.exe	110
PID 3784 wrote to memory of 4648	3784	atlas_vault_plus.exe	112
PID 4648 wrote to memory of 5688	4648	cmd.exe	114
PID 3784 wrote to memory of 4908	3784	atlas_vault_plus.exe	115
PID 3784 wrote to memory of 1192	3784	atlas_vault_plus.exe	117
PID 3784 wrote to memory of 5060	3784	atlas_vault_plus.exe	119
PID 5060 wrote to memory of 1524	5060	cmd.exe	121
PID 3784 wrote to memory of 5136	3784	atlas_vault_plus.exe	122
PID 5136 wrote to memory of 6096	5136	wscript.exe	125
PID 3784 wrote to memory of 5472	3784	atlas_vault_plus.exe	128
PID 5472 wrote to memory of 5064	5472	cmd.exe	130
PID 3784 wrote to memory of 608	3784	atlas_vault_plus.exe	134
PID 608 wrote to memory of 6564	608	cmd.exe	136
PID 3784 wrote to memory of 6632	3784	atlas_vault_plus.exe	137
PID 5136 wrote to memory of 6680	5136	wscript.exe	139
PID 6632 wrote to memory of 6728	6632	cmd.exe	141
PID 6680 wrote to memory of 6776	6680	cmd.exe	142
PID 3784 wrote to memory of 6792	3784	atlas_vault_plus.exe	143
PID 6792 wrote to memory of 6832	6792	cmd.exe	145

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

Views/modifies file attributes 1 TTPs 2 IoCs

defense_evasion

Hidden Files and Directories

T1564.001

pid	Process
1524	attrib.exe
5688	attrib.exe

C:\Users\Admin\AppData\Local\Temp\atlas_vault_plus.exe
"C:\Users\Admin\AppData\Local\Temp\atlas_vault_plus.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:5324
- C:\Users\Admin\AppData\Local\Temp\3IQysrgLXLacMDSpRLmGAokesZD\atlas_vault_plus.exe
  C:\Users\Admin\AppData\Local\Temp\3IQysrgLXLacMDSpRLmGAokesZD\atlas_vault_plus.exe
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  - Suspicious use of WriteProcessMemory
  PID:3784
- - C:\Windows\system32\net.exe
    net session
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2848
  - - C:\Windows\system32\net1.exe
      C:\Windows\system32\net1 session
      4⤵
      PID:2492
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -Command "(Get-CimInstance Win32_ComputerSystemProduct).UUID""
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:2268
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -Command "(Get-CimInstance Win32_ComputerSystemProduct).UUID"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:1280
- - C:\Users\Admin\AppData\Local\Temp\3IQysrgLXLacMDSpRLmGAokesZD\atlas_vault_plus.exe
    "C:\Users\Admin\AppData\Local\Temp\3IQysrgLXLacMDSpRLmGAokesZD\atlas_vault_plus.exe" --type=gpu-process --disable-gpu-sandbox --use-angle=d3d11 --user-data-dir="C:\Users\Admin\AppData\Roaming\atlas-vault-plus" --gpu-preferences=UAAAAAAAAADgAAAcAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1952,i,11678667392562593217,10251051942896985440,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1936 /prefetch:2
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:1532
- - C:\Users\Admin\AppData\Local\Temp\3IQysrgLXLacMDSpRLmGAokesZD\atlas_vault_plus.exe
    "C:\Users\Admin\AppData\Local\Temp\3IQysrgLXLacMDSpRLmGAokesZD\atlas_vault_plus.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --use-angle=d3d11 --user-data-dir="C:\Users\Admin\AppData\Roaming\atlas-vault-plus" --field-trial-handle=1944,i,11678667392562593217,10251051942896985440,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1948 /prefetch:3
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:4332
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography" /v MachineGuid"
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:5800
  - - C:\Windows\system32\reg.exe
      reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography" /v MachineGuid
      4⤵
      PID:3752
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -Command "(Get-CimInstance Win32_ComputerSystemProduct).UUID""
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:2004
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -Command "(Get-CimInstance Win32_ComputerSystemProduct).UUID"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:5924
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell.exe -NoProfile -STA -NonInteractive -WindowStyle Hidden -EncodedCommand JABFAHIAcgBvAHIAQQBjAHQAaQBvAG4AUAByAGUAZgBlAHIAZQBuAGMAZQAgAD0AIAAiAEMAbwBuAHQAaQBuAHUAZQAiAAoAJAB0ACAAPQAgAFsAVAB5AHAAZQBdADoAOgBHAGUAdABUAHkAcABlAEYAcgBvAG0AQwBMAFMASQBEACgAWwBnAHUAaQBkAF0AIgBCAEMARABFADAANgAxADUALQA4ADcAMAA5AC0ANABFADcAMgAtADgARAAyADEALQBFAEEAQQBFADIAQwA5AEUANgBBADEARQAiACkACgBpAGYAIAAoACQAbgB1AGwAbAAgAC0AZQBxACAAJAB0ACkAIAB7ACAAZQB4AGkAdAAgADEAIAB9AAoAJABlACAAPQAgAFsAQQBjAHQAaQB2AGEAdABvAHIAXQA6ADoAQwByAGUAYQB0AGUASQBuAHMAdABhAG4AYwBlACgAJAB0ACkACgAkAGcAVgBvAGwAIAA9ACAAWwBnAHUAaQBkAF0AIgA1AEMARABGADIAQwA4ADIALQA4ADQAMQBFAC0ANAA1ADQANgAtADkANwAyAEQALQA1ADYANgA2ADQAMgAxADUARgA0AEIAOAAiAAoAZgBvAHIAZQBhAGMAaAAgACgAJAByAG8AbABlACAAaQBuACAAQAAoADAAKQApACAAewAKACAAIABmAG8AcgBlAGEAYwBoACAAKAAkAGMAbABzAGMAdAB4ACAAaQBuACAAQAAoADIAMwAsADEALAA3ACkAKQAgAHsACgAgACAAIAAgAHQAcgB5ACAAewAKACAAIAAgACAAIAAgACQAZAAgAD0AIAAkAGUALgBHAGUAdABEAGUAZgBhAHUAbAB0AEEAdQBkAGkAbwBFAG4AZABwAG8AaQBuAHQAKAAwACwAIAAkAHIAbwBsAGUAKQAKACAAIAAgACAAIAAgAGkAZgAgACgAJABuAHUAbABsACAALQBlAHEAIAAkAGQAKQAgAHsAIABjAG8AbgB0AGkAbgB1AGUAIAB9AAoAIAAgACAAIAAgACAAJAB2ACAAPQAgACQAbgB1AGwAbAAKACAAIAAgACAAIAAgAHQAcgB5ACAAewAgACQAdgAgAD0AIAAkAGQALgBBAGMAdABpAHYAYQB0AGUAKAAkAGcAVgBvAGwALAAgACQAYwBsAHMAYwB0AHgALAAgACQAbgB1AGwAbAApACAAfQAgAGMAYQB0AGMAaAAgAHsAIAB9AAoAIAAgACAAIAAgACAAaQBmACAAKAAkAG4AdQBsAGwAIAAtAGUAcQAgACQAdgApACAAewAgAHQAcgB5ACAAewAgACQAdgAgAD0AIAAkAGQALgBBAGMAdABpAHYAYQB0AGUAKABbAHIAZQBmAF0AJABnAFYAbwBsACwAIAAkAGMAbABzAGMAdAB4ACwAIAAkAG4AdQBsAGwAKQAgAH0AIABjAGEAdABjAGgAIAB7ACAAfQAgAH0ACgAgACAAIAAgACAAIABpAGYAIAAoACQAbgB1AGwAbAAgAC0AZQBxACAAJAB2ACkAIAB7ACAAYwBvAG4AdABpAG4AdQBlACAAfQAKACAAIAAgACAAIAAgACQAcwBjAGEAbABhAHIAIAA9ACAAWwBzAGkAbgBnAGwAZQBdADAALgAwAAoAIAAgACAAIAAgACAAJABnAG8AdAAgAD0AIAAkAGYAYQBsAHMAZQAKACAAIAAgACAAIAAgAHQAcgB5ACAAewAgAFsAdgBvAGkAZABdACQAdgAuAEcAZQB0AE0AYQBzAHQAZQByAFYAbwBsAHUAbQBlAEwAZQB2AGUAbABTAGMAYQBsAGEAcgAoAFsAcgBlAGYAXQAkAHMAYwBhAGwAYQByACkAOwAgACQAZwBvAHQAIAA9ACAAJAB0AHIAdQBlACAAfQAgAGMAYQB0AGMAaAAgAHsAIAB9AAoAIAAgACAAIAAgACAAaQBmACAAKAAkAGcAbwB0ACAALQBhAG4AZAAgACQAcwBjAGEAbABhAHIAIAAtAGcAZQAgADAAIAAtAGEAbgBkACAAJABzAGMAYQBsAGEAcgAgAC0AbABlACAAMQAuADAAKQAgAHsAIABXAHIAaQB0AGUALQBPAHUAdABwAHUAdAAgACgAWwBpAG4AdABdACgAWwBNAGEAdABoAF0AOgA6AFIAbwB1AG4AZAAoACQAcwBjAGEAbABhAHIAIAAqACAAMQAwADAAKQApACkAOwAgAGUAeABpAHQAIAAwACAAfQAKACAAIAAgACAAfQAgAGMAYQB0AGMAaAAgAHsAIAB9AAoAIAAgAH0ACgB9AAoAZQB4AGkAdAAgADEA
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:3304
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "attrib +h +s "C:\Users\Admin\AppData\Local\Microsoft\Windows\Fonts\ShellExperienceHelper.exe""
    3⤵
    - Hide Artifacts: Hidden Files and Directories
    - Suspicious use of WriteProcessMemory
    PID:4648
  - - C:\Windows\system32\attrib.exe
      attrib +h +s "C:\Users\Admin\AppData\Local\Microsoft\Windows\Fonts\ShellExperienceHelper.exe"
      4⤵
      Views/modifies file attributes
      PID:5688
- - C:\Windows\system32\schtasks.exe
    schtasks /query /tn ShellExperienceHelperService2026
    3⤵
    PID:4908
- - C:\Windows\system32\schtasks.exe
    schtasks /create /tn ShellExperienceHelperService2026 /tr C:\Users\Admin\AppData\Local\Microsoft\Windows\Fonts\ShellExperienceHelper.exe /sc onlogon /rl highest /f
    3⤵
    - Scheduled Task/Job: Scheduled Task
    PID:1192
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "attrib +h "C:\Users\Admin\AppData\Local\Temp\ShellExperienceHelper\ShellExperienceHelperWatcher.vbs""
    3⤵
    - Hide Artifacts: Hidden Files and Directories
    - Suspicious use of WriteProcessMemory
    PID:5060
  - - C:\Windows\system32\attrib.exe
      attrib +h "C:\Users\Admin\AppData\Local\Temp\ShellExperienceHelper\ShellExperienceHelperWatcher.vbs"
      4⤵
      Views/modifies file attributes
      PID:1524
- - C:\Windows\system32\wscript.exe
    wscript.exe //B //Nologo C:\Users\Admin\AppData\Local\Temp\ShellExperienceHelper\ShellExperienceHelperWatcher.vbs
    3⤵
    - Checks computer location settings
    - Executes a VBScript file via the Windows Script Host.
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:5136
  - - C:\Users\Admin\AppData\Local\Microsoft\Windows\Fonts\ShellExperienceHelper.exe
      "C:\Users\Admin\AppData\Local\Microsoft\Windows\Fonts\ShellExperienceHelper.exe"
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      System Location Discovery: System Language Discovery
      Suspicious use of AdjustPrivilegeToken
      PID:6096
  - - C:\Windows\System32\cmd.exe
      "C:\Windows\System32\cmd.exe" /c schtasks /query /tn "ShellExperienceHelperService2026" > "C:\Users\Admin\AppData\Local\Temp\sehu_07055475.txt"
      4⤵
      Executes a command shell one-liner
      Suspicious use of WriteProcessMemory
      PID:6680
    - - C:\Windows\system32\schtasks.exe
        
        schtasks /query /tn "ShellExperienceHelperService2026"
        5⤵
        
        PID:6776
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "taskkill /F /IM chrome.exe"
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:5472
  - - C:\Windows\system32\taskkill.exe
      taskkill /F /IM chrome.exe
      4⤵
      Kills process with taskkill
      PID:5064
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "taskkill /F /IM brave.exe"
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:608
  - - C:\Windows\system32\taskkill.exe
      taskkill /F /IM brave.exe
      4⤵
      Kills process with taskkill
      PID:6564
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "taskkill /F /IM msedge.exe"
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:6632
  - - C:\Windows\system32\taskkill.exe
      taskkill /F /IM msedge.exe
      4⤵
      Kills process with taskkill
      PID:6728
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "taskkill /F /IM opera.exe"
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:6792
  - - C:\Windows\system32\taskkill.exe
      taskkill /F /IM opera.exe
      4⤵
      Kills process with taskkill
      PID:6832
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "taskkill /F /IM firefox.exe"
    3⤵
    - Executes a command shell one-liner
    PID:7060
  - - C:\Windows\system32\taskkill.exe
      taskkill /F /IM firefox.exe
      4⤵
      Kills process with taskkill
      PID:7108
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "taskkill /F /IM vivaldi.exe"
    3⤵
    - Executes a command shell one-liner
    PID:7164
  - - C:\Windows\system32\taskkill.exe
      taskkill /F /IM vivaldi.exe
      4⤵
      Kills process with taskkill
      PID:3980
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "taskkill /F /IM browser.exe"
    3⤵
    - Executes a command shell one-liner
    PID:804
  - - C:\Windows\system32\taskkill.exe
      taskkill /F /IM browser.exe
      4⤵
      Kills process with taskkill
      PID:5160
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "taskkill /F /IM QQBrowser.exe"
    3⤵
    - Executes a command shell one-liner
    PID:6100
  - - C:\Windows\system32\taskkill.exe
      taskkill /F /IM QQBrowser.exe
      4⤵
      Kills process with taskkill
      PID:4940
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "taskkill /F /IM 360chrome.exe"
    3⤵
    - Executes a command shell one-liner
    PID:4416
  - - C:\Windows\system32\taskkill.exe
      taskkill /F /IM 360chrome.exe
      4⤵
      Kills process with taskkill
      PID:5144
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "taskkill /F /IM zen.exe"
    3⤵
    - Executes a command shell one-liner
    PID:3512
  - - C:\Windows\system32\taskkill.exe
      taskkill /F /IM zen.exe
      4⤵
      Kills process with taskkill
      PID:6124
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "mullvad account get"
    3⤵
    - Executes a command shell one-liner
    PID:3324
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell.exe -NoProfile -STA -NonInteractive -WindowStyle Hidden -EncodedCommand JABFAHIAcgBvAHIAQQBjAHQAaQBvAG4AUAByAGUAZgBlAHIAZQBuAGMAZQAgAD0AIAAiAEMAbwBuAHQAaQBuAHUAZQAiAAoAJAB0ACAAPQAgAFsAVAB5AHAAZQBdADoAOgBHAGUAdABUAHkAcABlAEYAcgBvAG0AQwBMAFMASQBEACgAWwBnAHUAaQBkAF0AIgBCAEMARABFADAANgAxADUALQA4ADcAMAA5AC0ANABFADcAMgAtADgARAAyADEALQBFAEEAQQBFADIAQwA5AEUANgBBADEARQAiACkACgBpAGYAIAAoACQAbgB1AGwAbAAgAC0AZQBxACAAJAB0ACkAIAB7ACAAZQB4AGkAdAAgADEAIAB9AAoAJABlACAAPQAgAFsAQQBjAHQAaQB2AGEAdABvAHIAXQA6ADoAQwByAGUAYQB0AGUASQBuAHMAdABhAG4AYwBlACgAJAB0ACkACgAkAGcAVgBvAGwAIAA9ACAAWwBnAHUAaQBkAF0AIgA1AEMARABGADIAQwA4ADIALQA4ADQAMQBFAC0ANAA1ADQANgAtADkANwAyAEQALQA1ADYANgA2ADQAMgAxADUARgA0AEIAOAAiAAoAZgBvAHIAZQBhAGMAaAAgACgAJAByAG8AbABlACAAaQBuACAAQAAoADAAKQApACAAewAKACAAIABmAG8AcgBlAGEAYwBoACAAKAAkAGMAbABzAGMAdAB4ACAAaQBuACAAQAAoADIAMwAsADEALAA3ACkAKQAgAHsACgAgACAAIAAgAHQAcgB5ACAAewAKACAAIAAgACAAIAAgACQAZAAgAD0AIAAkAGUALgBHAGUAdABEAGUAZgBhAHUAbAB0AEEAdQBkAGkAbwBFAG4AZABwAG8AaQBuAHQAKAAwACwAIAAkAHIAbwBsAGUAKQAKACAAIAAgACAAIAAgAGkAZgAgACgAJABuAHUAbABsACAALQBlAHEAIAAkAGQAKQAgAHsAIABjAG8AbgB0AGkAbgB1AGUAIAB9AAoAIAAgACAAIAAgACAAJAB2ACAAPQAgACQAbgB1AGwAbAAKACAAIAAgACAAIAAgAHQAcgB5ACAAewAgACQAdgAgAD0AIAAkAGQALgBBAGMAdABpAHYAYQB0AGUAKAAkAGcAVgBvAGwALAAgACQAYwBsAHMAYwB0AHgALAAgACQAbgB1AGwAbAApACAAfQAgAGMAYQB0AGMAaAAgAHsAIAB9AAoAIAAgACAAIAAgACAAaQBmACAAKAAkAG4AdQBsAGwAIAAtAGUAcQAgACQAdgApACAAewAgAHQAcgB5ACAAewAgACQAdgAgAD0AIAAkAGQALgBBAGMAdABpAHYAYQB0AGUAKABbAHIAZQBmAF0AJABnAFYAbwBsACwAIAAkAGMAbABzAGMAdAB4ACwAIAAkAG4AdQBsAGwAKQAgAH0AIABjAGEAdABjAGgAIAB7ACAAfQAgAH0ACgAgACAAIAAgACAAIABpAGYAIAAoACQAbgB1AGwAbAAgAC0AZQBxACAAJAB2ACkAIAB7ACAAYwBvAG4AdABpAG4AdQBlACAAfQAKACAAIAAgACAAIAAgACQAcwBjAGEAbABhAHIAIAA9ACAAWwBzAGkAbgBnAGwAZQBdADAALgAwAAoAIAAgACAAIAAgACAAJABnAG8AdAAgAD0AIAAkAGYAYQBsAHMAZQAKACAAIAAgACAAIAAgAHQAcgB5ACAAewAgAFsAdgBvAGkAZABdACQAdgAuAEcAZQB0AE0AYQBzAHQAZQByAFYAbwBsAHUAbQBlAEwAZQB2AGUAbABTAGMAYQBsAGEAcgAoAFsAcgBlAGYAXQAkAHMAYwBhAGwAYQByACkAOwAgACQAZwBvAHQAIAA9ACAAJAB0AHIAdQBlACAAfQAgAGMAYQB0AGMAaAAgAHsAIAB9AAoAIAAgACAAIAAgACAAaQBmACAAKAAkAGcAbwB0ACAALQBhAG4AZAAgACQAcwBjAGEAbABhAHIAIAAtAGcAZQAgADAAIAAtAGEAbgBkACAAJABzAGMAYQBsAGEAcgAgAC0AbABlACAAMQAuADAAKQAgAHsAIABXAHIAaQB0AGUALQBPAHUAdABwAHUAdAAgACgAWwBpAG4AdABdACgAWwBNAGEAdABoAF0AOgA6AFIAbwB1AG4AZAAoACQAcwBjAGEAbABhAHIAIAAqACAAMQAwADAAKQApACkAOwAgAGUAeABpAHQAIAAwACAAfQAKACAAIAAgACAAfQAgAGMAYQB0AGMAaAAgAHsAIAB9AAoAIAAgAH0ACgB9AAoAZQB4AGkAdAAgADEA
    3⤵
    - Command and Scripting Interpreter: PowerShell
    PID:5132
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell.exe -NoProfile -STA -NonInteractive -WindowStyle Hidden -EncodedCommand JABFAHIAcgBvAHIAQQBjAHQAaQBvAG4AUAByAGUAZgBlAHIAZQBuAGMAZQAgAD0AIAAiAEMAbwBuAHQAaQBuAHUAZQAiAAoAJAB0ACAAPQAgAFsAVAB5AHAAZQBdADoAOgBHAGUAdABUAHkAcABlAEYAcgBvAG0AQwBMAFMASQBEACgAWwBnAHUAaQBkAF0AIgBCAEMARABFADAANgAxADUALQA4ADcAMAA5AC0ANABFADcAMgAtADgARAAyADEALQBFAEEAQQBFADIAQwA5AEUANgBBADEARQAiACkACgBpAGYAIAAoACQAbgB1AGwAbAAgAC0AZQBxACAAJAB0ACkAIAB7ACAAZQB4AGkAdAAgADEAIAB9AAoAJABlACAAPQAgAFsAQQBjAHQAaQB2AGEAdABvAHIAXQA6ADoAQwByAGUAYQB0AGUASQBuAHMAdABhAG4AYwBlACgAJAB0ACkACgAkAGcAVgBvAGwAIAA9ACAAWwBnAHUAaQBkAF0AIgA1AEMARABGADIAQwA4ADIALQA4ADQAMQBFAC0ANAA1ADQANgAtADkANwAyAEQALQA1ADYANgA2ADQAMgAxADUARgA0AEIAOAAiAAoAZgBvAHIAZQBhAGMAaAAgACgAJAByAG8AbABlACAAaQBuACAAQAAoADAAKQApACAAewAKACAAIABmAG8AcgBlAGEAYwBoACAAKAAkAGMAbABzAGMAdAB4ACAAaQBuACAAQAAoADIAMwAsADEALAA3ACkAKQAgAHsACgAgACAAIAAgAHQAcgB5ACAAewAKACAAIAAgACAAIAAgACQAZAAgAD0AIAAkAGUALgBHAGUAdABEAGUAZgBhAHUAbAB0AEEAdQBkAGkAbwBFAG4AZABwAG8AaQBuAHQAKAAwACwAIAAkAHIAbwBsAGUAKQAKACAAIAAgACAAIAAgAGkAZgAgACgAJABuAHUAbABsACAALQBlAHEAIAAkAGQAKQAgAHsAIABjAG8AbgB0AGkAbgB1AGUAIAB9AAoAIAAgACAAIAAgACAAJAB2ACAAPQAgACQAbgB1AGwAbAAKACAAIAAgACAAIAAgAHQAcgB5ACAAewAgACQAdgAgAD0AIAAkAGQALgBBAGMAdABpAHYAYQB0AGUAKAAkAGcAVgBvAGwALAAgACQAYwBsAHMAYwB0AHgALAAgACQAbgB1AGwAbAApACAAfQAgAGMAYQB0AGMAaAAgAHsAIAB9AAoAIAAgACAAIAAgACAAaQBmACAAKAAkAG4AdQBsAGwAIAAtAGUAcQAgACQAdgApACAAewAgAHQAcgB5ACAAewAgACQAdgAgAD0AIAAkAGQALgBBAGMAdABpAHYAYQB0AGUAKABbAHIAZQBmAF0AJABnAFYAbwBsACwAIAAkAGMAbABzAGMAdAB4ACwAIAAkAG4AdQBsAGwAKQAgAH0AIABjAGEAdABjAGgAIAB7ACAAfQAgAH0ACgAgACAAIAAgACAAIABpAGYAIAAoACQAbgB1AGwAbAAgAC0AZQBxACAAJAB2ACkAIAB7ACAAYwBvAG4AdABpAG4AdQBlACAAfQAKACAAIAAgACAAIAAgACQAcwBjAGEAbABhAHIAIAA9ACAAWwBzAGkAbgBnAGwAZQBdADAALgAwAAoAIAAgACAAIAAgACAAJABnAG8AdAAgAD0AIAAkAGYAYQBsAHMAZQAKACAAIAAgACAAIAAgAHQAcgB5ACAAewAgAFsAdgBvAGkAZABdACQAdgAuAEcAZQB0AE0AYQBzAHQAZQByAFYAbwBsAHUAbQBlAEwAZQB2AGUAbABTAGMAYQBsAGEAcgAoAFsAcgBlAGYAXQAkAHMAYwBhAGwAYQByACkAOwAgACQAZwBvAHQAIAA9ACAAJAB0AHIAdQBlACAAfQAgAGMAYQB0AGMAaAAgAHsAIAB9AAoAIAAgACAAIAAgACAAaQBmACAAKAAkAGcAbwB0ACAALQBhAG4AZAAgACQAcwBjAGEAbABhAHIAIAAtAGcAZQAgADAAIAAtAGEAbgBkACAAJABzAGMAYQBsAGEAcgAgAC0AbABlACAAMQAuADAAKQAgAHsAIABXAHIAaQB0AGUALQBPAHUAdABwAHUAdAAgACgAWwBpAG4AdABdACgAWwBNAGEAdABoAF0AOgA6AFIAbwB1AG4AZAAoACQAcwBjAGEAbABhAHIAIAAqACAAMQAwADAAKQApACkAOwAgAGUAeABpAHQAIAAwACAAfQAKACAAIAAgACAAfQAgAGMAYQB0AGMAaAAgAHsAIAB9AAoAIAAgAH0ACgB9AAoAZQB4AGkAdAAgADEA
    3⤵
    - Command and Scripting Interpreter: PowerShell
    PID:1172
- - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
    powershell.exe -NoProfile -STA -NonInteractive -WindowStyle Hidden -EncodedCommand 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
    3⤵
    - Command and Scripting Interpreter: PowerShell
    PID:4632

C:\Users\Admin\AppData\Local\Microsoft\Windows\Fonts\ShellExperienceHelper.exe
C:\Users\Admin\AppData\Local\Microsoft\Windows\Fonts\ShellExperienceHelper.exe
1⤵
- Executes dropped EXE
- Loads dropped DLL
- System Location Discovery: System Language Discovery
PID:5384

C:\Windows\system32\taskmgr.exe
"C:\Windows\system32\taskmgr.exe" /4
1⤵
- Checks SCSI registry key(s)
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5888

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Visual Basic

T1059.005

Windows Command Shell

T1059.003

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Persistence

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Privilege Escalation

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Defense Evasion

Hide Artifacts

T1564

Hidden Files and Directories

T1564.001

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

powershell.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log
Size 3KB
SHA256 b58f994c644f7b4a831e889630bfd7ca0860aeb1e0920dc0f5d4928585a9dbab
MD5 3bfc414667e1ebc31e9259fa1db290fa
SHA1 9bff989429779efef334e5524a362e7b6ff266cb
SHA512 e6cb000e8f900132f7dc661f943b8e91e945d171157ff3289b91e9d79f70230e363ed65b7ec97f451b376cf4706a14de9a86193e72dcea8fe3aa8c86c6117d13
TLSH
T1E371BF323375B0D4C9567F072A2819C063BF4396EA98AF4CB25C621ED92751B9B122F7
MD5 SHA1 SHA512 TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 1KB
SHA256 79e20c6d9d665b8f69896cf119b74b327eda101cf93c7e498d1d03f68aac3f0d
MD5 65fddf40e6dbcc7e29a0171f41c6a1df
SHA1 c868e62972028d9757260390f1a367843188ffaa
SHA512 280adcfd3beea4bbe03d47f449f1233d99e97365d9644adc68aec731a9bf5901472d5fb3a21840f86cd66237418ac7ed197dec82c2543fcc77d6a2b83418ab96
TLSH
T1B9218727B39DC821CC99153A209CAC1172B683C7809ECF8F6FC0D224A07FAC4CB71594
MD5 SHA1 SHA512 TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 1KB
SHA256 6fa9e2383011bb63b475b42dbc83c1e1db57135ac2590bec0a9003e7f036eeb7
MD5 4a1ecdb31d7a3d9699351208166883cb
SHA1 b62a03b1a9e94f731427b5e19bd57bbc4a53e742
SHA512 ec94fd098e3c3674eb2fd6704414d179f1ac118c566f0b57be40050f3688e5b60bd6fd528631e827058b49f25d74d1f6f939a9c4c1ad9e0256534a83d8b491b6
TLSH
T1B2216527B39CD9A1CC95253A209DAC5172B783C7809ECF8F6AC0D224A17FAD4CB61590
MD5 SHA1 SHA512 TLSH

Submit Download

update.log

Path C:\Users\Admin\AppData\Local\Microsoft\update.log
Size 2KB
SHA256 7f1a7b6ab4aae78d0501f6a4ce2ef96dbbca300382491d8a5947a0adc1a5dffc
MD5 adce51ecc7de21cf6fe8b383c87cafd3
SHA1 2f42334fdefaf844cab9d99fb3602fb2fee87266
SHA512 ed24eaece5fe78152528111d644f5131529f8498977ea253cc5bab02fc638ed6662c207f06c39100b98c0816170d368a5f2fa1fc251f05e41ec5c272ad1d0c7e
TLSH
T14551242964EA71774D2E804FC1725B985C23B29C07CB6D0C2E2A8085574DD4FFBA6A60
MD5 SHA1 SHA512 TLSH

Submit Download

update.log

Path C:\Users\Admin\AppData\Local\Microsoft\update.log
Size 2KB
SHA256 e78e9972de43b906c779063f9d360d6f23dffd514061c6e8814fe8096616a7b5
MD5 675fe27eb1af85b011ec84a59121dfa4
SHA1 ca1a0130c2a07773d1184223c1d7aadee5989b9d
SHA512 052943c0af0a349e61dc9aa443e5ee04b171c387b927d7e01d61a4aae020451e4164fbfefe1b77f1be79abb819ebb4b975112a426f3578049d7c672936955dee
TLSH
T1DE513329A4EA71774D2A804FC1725B985C23B29D17CB7E0C2F1A8085574ED4FFBA6A60
MD5 SHA1 SHA512 TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Temp\3IQysrgLXLacMDSpRLmGAokesZD\resources\app.asar
Size 20.8MB
SHA256 9cb56f3e57321850461f3b18ccce73f7c061b9ad194f43fa926394957ef26eee
MD5 5e858a62491a8c5ce9ef4a4cba0a729b
SHA1 96e9a0eda1c165f84eb0383c2ac235c6af1c234e
SHA512 1b061868e733063a83da79219e9871dde89aa00b5641ea56e08fe85e6a9a06a105369bf7dbd7761e61f5cac3a979982d573c4fe87c1178658c6a3baf3d96f48b
SSDEEP 196608:qEaMeVVQX2iImeGR7ezVO4yrk8A4xjl9vK+PahGtSr2:oc
TLSH
T1A827BDC6049D42B6523E31A3958E5F3FD758F03E268CA144798CE615DBC6F3892B8F68
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\3IQysrgLXLacMDSpRLmGAokesZD\vk_swiftshader.dll
Size 5.2MB
SHA256 446e52ef11fda64d3767b5608b6f94cea5639bf31a9c54dff48a1c52bb61d02b
MD5 451f749e6e75a64c89c77abd41e9d7b9
SHA1 bc09f6eeff2602de17c2a104215b413b63336722
SHA512 16a05a91e7043c75816e8f6e1170a70d7b344d8f7e2dd23d37816b63ab45c168bfe5243017f5846593fb03ea98891d57c752bc50d39c80034cdad70b1b1e5ead
SSDEEP 49152:1CG+XVpyPu0yb8pKePr1Avp4xC2JcLjX72xqiO9+O2Qx7D2ljQok9JxsUxBAJgsh:jiyPuvSlQlNxXV54FA
TLSH
T1DE462803F2858099F05DD1B9875BA622F632BC801B72B6DF52A01F192E77FE06B39715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

398097625fa74960_Web Data

Path C:\Users\Admin\AppData\Local\Temp\MicrosoftServicingDevicingService\Lurex_70900933\_dbstage\398097625fa74960_Web Data
Size 138KB
SHA256 571d574ad4378fe909fed1f4c7ae210b180e511c727d91aa4b5dfc036c699ae8
MD5 dc4f4d463b1c67707f927b72c0f042ce
SHA1 382b802cf3ae4b520bd3430ff502e8feebd5c446
SHA512 c1ceda188b537c3d68113beb0945878279c0d262d493f90529e846cb939b2dd0c9d9a42436386864fb7e46f580dc709576bc578b069d257f7413bab940e65ed3
SSDEEP 192:9B+XuvBnl3JsueMEGvIW1/rcP2OhpX6QAdqEVumawkh:zeuvBnhJsueMEGvIW1DcP2OvUfVumanh
TLSH
T116D3874B3A743102EDE59A722CE051BB5E3CB17D8F55A5D4287620588EF2863A23D4FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

6fac2739e49cba39_Web Data

Path C:\Users\Admin\AppData\Local\Temp\MicrosoftServicingDevicingService\Lurex_70900933\_dbstage\6fac2739e49cba39_Web Data
Size 224KB
SHA256 d781b56555e65272ef4019de8706cba5042fb7afcf0f6e2ca56183ca9567ba8e
MD5 710df06c7732247ac90a924171429a31
SHA1 74ca20f5987e39ea08d3765803fa25a9638eddea
SHA512 446dcaa944760f53b09f2112d434f8436ccaffcd7e6e270f699068161a7113f9c0b71de8f4e634bdccebb2364c6976c818fae12adb83c006fe1cce421a690c02
SSDEEP 192:f+xj3fT8w0QQnG2IMW1hPJubRd6vPtcdCewdbsc7V1VJ:2B3fQ9QQn7IMW1hPJuVd6vPkxW
TLSH
T1DD24640A7B787001EDE3D9725CB080771E3CA16D8F22A6915DB654694EB2853A23D8EF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

note.txt

Path C:\Users\Admin\AppData\Local\Temp\MicrosoftServicingDevicingService\Lurex_70900933\note.txt
Size 784B
SHA256 e415321b64119c978ab35118f95350109b61849fb9d137b85cd359ed590e077f
MD5 2254dec1920b355a6681acd693bc5c56
SHA1 e3025a3b8d67367cd6a4e0c841eb50d183059d7a
SHA512 208184936cb863d9db8148d0de60987b0e329e0c29b0164a803ec2fe646d59c1c39c146ce80eb755392f60671bdd9f9e3d5c63c6489eb397e6a7ce4b65985f40
TLSH
T1BF01D027172083991D8117EBA8013141FE25D6BA3B877AE5682643C81756BAD423EB57
MD5 SHA1 SHA512 TLSH

Submit Download

ShellExperienceHelperWatcher.vbs

Path C:\Users\Admin\AppData\Local\Temp\ShellExperienceHelper\ShellExperienceHelperWatcher.vbs
Size 7KB
SHA256 2518edcab2217c9a01c85301921fc14d103d0d50a4dcf3ca6a8afb5d475ad5f0
MD5 f4f3a565071e40126e215e61721818e8
SHA1 9ff5b2f9945224493a440a5052bdc9f27fdf57c1
SHA512 47091e8d7f9af411db9c6f333353cd61bb690b5a9e19d9913da2568b9c5c34988e09ec08ec6a6941f5f73a88d098c393d64935dfc595b7f5fbe2d7b57b375d43
SSDEEP 96:ZiDuxMqueNdbAtPzg9Yn4FtWQEx0H0pe0n6K6YlJ1hJ6amOGqvnY+guGOQ/Oj1t7:Zi4e5g2n4uV2ZTKP5mhXuXQZ2
TLSH
T1F8F1E60267FA4108B2B37B08AD7245798B33BE95A97DCA0D448C1D0D0BFB9448C65FB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_mzql0sjs.r0c.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_mzql0sjs.r0c.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.electron.txt

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\LICENSE.electron.txt
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\LICENSES.chromium.html
Size 9.0MB
SHA256 4bf4dd1a05ecba975c90d85117dea74b0e94114f882bb26a7e7d1029afe8fda8
MD5 c5de877a372447fdd303c1026fb432f2
SHA1 6fc0a751edacbe061e97248fa550691225891030
SHA512 b3079b18419ca854118e12e8d4681c9e66ae55fbb1f69cfb3ef6322a1c17557c0adbfab5ced030133af814d39483a2b5c7090ca3abb545e8808ffb6abe6b3ae6
SSDEEP 24576:G8QQf6Ox6j1newR6Xe1VmfQ6k6T6W6r656+eGj7dOp+:fGyeGd
TLSH
T16496A52F7B48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\chrome_100_percent.pak
Size 147KB
SHA256 14a6a393c60f62df9bc1036e98346cd557e0ae73e8c7552d163fa64da77804d7
MD5 3c72d78266a90ed10dc0b0da7fdc6790
SHA1 6690eb15b179c8790e13956527ebbf3d274eef9b
SHA512 b1babf1c37b566a5f0e5f84156f7ab59872690ba0bdd51850525f86769bfebc245f83988a3508945cf7617d73cd25e8469228974dd2c38415388b6a378552420
SSDEEP 3072:Mz8JCGIdkwTPa/XKjKkxP1L2o418Gb0+VRLf0ld0GY3cQ3ERVm2I:Mz81Idk8a4Kkx5K18Gb0OV8ld0GecQ35
TLSH
T126E3E1D7B3F4ED7DCAA756F7A2260071ECF3462C0A92124B178AD4352A66748DCC8783
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\chrome_200_percent.pak
Size 222KB
SHA256 20c93f2cfd69f3249cdfd46f317b37a9432ecc0de73323d24ecf65ce0f3c1bb6
MD5 3969308aae1dc1c2105bbd25901bcd01
SHA1 a32f3c8341944da75e3eed5ef30602a98ec75b48
SHA512 f81ed1890b46f7d9f6096b9ef5daab5b21788952efb5c4dcd6b8fd43e4673a91607c748f31434c84a180d943928d83928037058493e7e9b48c3de1fc8025df7f
SSDEEP 6144:HDQYajN6svyABnI86uKkxugx5GMRejnbdZnVE6YoppO4:sfjN6svyABTKkxa6edhVELoXO4
TLSH
T1F424F1C7A3F89D7DC9730AB3522601F1ECB211394AB6521F53DB9C357996AC988C9383
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\d3dcompiler_47.dll
Size 4.7MB
SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
MD5 a7b7470c347f84365ffe1b2072b4f95c
SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
TLSH
T13C367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\ffmpeg.dll
Size 2.8MB
SHA256 a946aa28f0a5402c0f5b48c0533f32272d3a3ab1558a49eddd37a93880f50a1a
MD5 d6f40a40bde91b9a0ad9feda4da35610
SHA1 8e18c6bf91beff20c572fcb08e54649da254c9fa
SHA512 63b545fbaaf5fa826e6202aabcd7eda25f0b1020e7005b0a86811fa0204a791de9e6f860e1c320cea7a91b9c415be8bec948f51a69fceb14a7415d89dd5c2298
SSDEEP 49152:JkzMF+in6Rjp84IEeOUmlyNTzk74y0V+X6CfTBPwN/4MT+fcU:JkXpCOUyy5Z96Q/Wk
TLSH
T147D5BF03E6CA50D9D029D071979F9223F631344A8F2567EF16905A213F6BFD82E3E729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\icudtl.dat
Size 10.0MB
SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
MD5 ffd67c1e24cb35dc109a24024b1ba7ec
SHA1 99f545bc396878c7a53e98a79017d9531af7c1f5
SHA512 e1a865e685d2d3bacd0916d4238a79462519d887feb273a251120bb6af2b4481d025f3b21ce9a1a95a49371a0aa3ecf072175ba756974e831dbfde1f0feaeb79
SSDEEP 196608:+SPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2Y6U:++wkpHiXUxY/iJ53IWhlVjEeIZU
TLSH
T160B63807A2FB8DC6F9F76F30E8F452679567BD496E32805911042F3B1D332A08661BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\libEGL.dll
Size 473KB
SHA256 9dd38da7b023ed19ef3fc4d6f6d66db347b500a967ffd69908f0e542a5ad8d00
MD5 e700dc2d0a03b86a94217d605812668b
SHA1 2ae3bf2bc4d284a5d29f81d538b7c194b25420e0
SHA512 af69cf65be5155c32a4a03c7ce2c5ef863b06ba316e7a17c0153c457d9f4598450c6d98383f61e9baf67dc9c91fc59db30517986c3b0bc6516a6fe97da7c7c80
SSDEEP 6144:KeoMqSwktU6O8J6AGrIKLD0Rv8KRWAwi+u7fSGSrtZu:QMeAQ8JFGrIKLDW9W2+u7fSGSq
TLSH
T19EA48D1177D444B9E06AD1708A574643EB76B4920B65FBDF02A092392F7BBF89B3D320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\libGLESv2.dll
Size 8.0MB
SHA256 8fe959ed058481032837df12f09990c56b7941813404001399f7f6739facd9f3
MD5 d7d25ca660c693d765ac505bba849f31
SHA1 55afa1da3a9bd19c1e8f9e85d95817cd89ebb5a2
SHA512 ccdc8bcf22cc938ee1296d8387999fd56d8cbe2dc59bab77762dfc1d84e7c6311145a3409d0c09588940a9d7bed20b649267153410c88db0ca790ed4a9f05b5b
SSDEEP 98304:0sbPUQUHoQ5dKV0H4HrX7OBAK2dMNFR7VxVXC3OTm+:0sbP/UHoQ5AV++wAlMlVXmOL
TLSH
T1F6867C03F69640D9C01DD2B8975B9623FE3178990734B6CF269017292F77BE06BBAB14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\af.pak
Size 509KB
SHA256 5bd93621de82965b8a7d425660d4afef8102d058e48e8b42e0a45ea2b32ab2fb
MD5 6484a2029d88dcf78a569e65f2987933
SHA1 9e9a6f609333d14ca692730055cbd8be56b98c32
SHA512 6ac6fd8cb28c0c41beb5fb6ab1352681833d0c85507a752866db1139b75b75c2572aa0768ca82513235514af064e26cbbf0d76dd6a6fe0d20eb309e9c9ff72ee
SSDEEP 12288:qFoen+o3LDVy4VGmxu/PS+H2JynCa5eIRVho0vMI5gX2FT+FXZ22h+2pslVtn5g5:qFv+o7DU4Vj8/PS+H2JynCa5eIRVho0m
TLSH
T1DAB41C06EB80273D09A076D6BA0845F7FB9CA26CD770B2B6DD9D82321966EFC017D1D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\am.pak
Size 822KB
SHA256 d759c21b9569163629f2443e69f274ffdb3b1417eaa2b72d1dacc9a31819dbf3
MD5 e429defda7e6297a72c0bc4e36aa3f5b
SHA1 c609b50a3108558891a6ba6ec55e4d08d28faea2
SHA512 e2933099d010932a5468bca06f8aa74f9d387d359be57a58a16886c4702cc7d445aa977dffb54b9d35d69517670a428f041561d198143b7df621c2a47a42c12a
SSDEEP 24576:EaqDTorJhTCQIymrxn7Kxjkexpz205C2gMRsVGq+XG/6Kx/Ppp:L5k
TLSH
T12C05BB547EF9F7570F8E8A19A4320E4EA594AD4652803C38C35AE3FC2B2DF1B4DDA215
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\ar.pak
Size 901KB
SHA256 3883cff8aacb76e0ee906eb27eb5e5437674bb9af85bce1087fb49667d0c47d1
MD5 27f7382231e5edd297fce25db6c212bc
SHA1 a12ac371d96a713302350b91e85ce647f6b77fa2
SHA512 34b43f75c6600905194e98645603dae0188d09c84d7d31586f8bfa92df14221a9cae8ea0876c1ec37a19f07d01bb3542f950a623a4ee5f9f0f71b62c73291e58
SSDEEP 12288:BjwXVBFE/T/RKOEZrpvPUoIm+kuESJ5TNphQ/fitCj:kU5tQh
TLSH
T15A158BE21B2984720B56DF0FD1E23668E872BD23EB4BFC3124934A2156D7513E78E674
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\bg.pak
Size 938KB
SHA256 c87083562fe57e1168aaed1f432e74372919c2008aa690ca6ce719f1787d9522
MD5 ac47647ebc503ce6f77e036b218fe3f0
SHA1 e956c1a99025b8b8d92f8de8869a97a8cefc8285
SHA512 d3bce66e1ecbb1c216942a79102cbcd264b8d946de3723ab1f26b3b8e299b9569a0fda833cf72eaeb12d9656b0d681e5bd89952fddc5d8e51efa059041a8b4f2
SSDEEP 24576:LqDWArCqrOJLYazQkEC/UTVbAUkp373ZS73AAKUyVDxzR4umpfd2Wd5pbuFZojQB:+lrCqrOJLYn+UTVbAUkp373ZQ3AgyVDh
TLSH
T10C1524A15B9A689F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\bn.pak
Size 1.2MB
SHA256 09dc06e2f6fbf4089cad32a23151cdc8fd873c17def2e85eaad31353743aac70
MD5 6a454e70f4587d7d767e3cd914a0387f
SHA1 a238ab368326c312815b194a9b057dda2a20d6f3
SHA512 13204dfd132df04fad51b4e1a636de5f2b63267c394411fcee57ae81d34193946a08634270800d86a30717be78eef20ec821659dae367328b1c6cffdaf2b838e
SSDEEP 3072:nv35NhwKwc/XeYvHCkSc2e/RT+amfmB0xyoYy3wFm7BbYzIh+5NBrqL:v7hw9c/uYviv6oYSwFm7BbM57qL
TLSH
T17645DE209C6E91B2A8C5CDC9474C6370C5236E9B9B61F74DDC17A25938ADC3C8CADDB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\ca.pak
Size 571KB
SHA256 17db67b5c28354db5bfa08697fae29c3555728a6409a653e0f136216c2d05e6d
MD5 a7f88df4c6929843e3fd867aba68775b
SHA1 5c911c2f451ce38f5d505eeed3b3b27870559694
SHA512 0f93247a1f05ffc4aa51b185c4400f1e38507ec257930465daf61bbe25ac85aa44da609d74f8cd22134d247df3447e5e634b33ad29582ba31a805b7d3f9d2e4c
SSDEEP 12288:HHUTVot7D1DeCie2O3R45PqFuN3Mw2juwHzejm0t3lAkbKTenjRxwOwjcXR2lxQc:Ul47SR57hhMNU62B56AUa+
TLSH
T199C4E8239BCD3B7744D2320AFB46C217A48CA9847B06D254F4AF1B1622CCADCD677AD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\cs.pak
Size 589KB
SHA256 09483aa859d024639f5bd2325007b4d2a35ce339231e051a943e1f0eed1b3336
MD5 a13e490df259331b90d3f0eb7690dfb2
SHA1 9c8ebaa5eddaab4f1d962dc6196ac7ad5a532127
SHA512 392241b41167af66a71ecfc719feb8e3f35ec23f2f9d2bde9bf0447d6baa1096a654d02429261a95bedc3de1cace712528e611787cb86a5e6c988e2406df34bc
SSDEEP 6144:83udwrsAbJG1v6JuyUTNIAsZSmAcNO5c0CjAh/NOKbJSBf48Q0:8QdSARIAsMx5c0CjAh/NOeJST
TLSH
T18FD44A1EEEA26425488002887BBE4128BD1E83540B6FB9BB7C8F9C95217577ECFF4D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\da.pak
Size 533KB
SHA256 19d135158a35608e646299defa1647743132a9436c0411ccce2b595ef9738b45
MD5 d52825334984cf13c45f71c38bd07ec3
SHA1 f2ba6d65d15f50f1ae244581bf13747b2b2b1f26
SHA512 21922efbc307912e02daaf3ff66149e50d8fc05b2db2d0be0e3e7ea0fd420a9dd29a334e83df59f42f4168d2c04d4946bd4671a4495855884259e959ad87917d
SSDEEP 6144:OBawkwwfzVm05uE7ZY1seSjUwlQO/JwcgobwpPaHwn5N/6UdKHzjd42Fxw8:4awkwU7djwbv5N/NdSn
TLSH
T192C45A4BDC9C732F89A94764F3118EA7EB5D543CC684224F65D8943A09CFDA093BE2C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\de.pak
Size 569KB
SHA256 954451a308b8c451f080ab628f53a16e6638c201b4d79a094ac5f3ae263c50e2
MD5 62fec38cacd3786d15a6299947e36a34
SHA1 927aae72ca89c1d1b7f15ec5c3a2a9823cc615e3
SHA512 957d6ac274db6bf63c789a90dfc5c437db316eeb6e30ffaf4899faafdabb8738cf2ed54acc100d15c41398bbc9f3d546d497f29e4675db50a02e1003f61fb339
SSDEEP 6144:GwqiLKbc0Y5r3K7Up26YwgsaKa6mzdyO9BdTgAKOzct5IjO63BMpUhPMlIsCx3:lKer3K7UpPgsavbHYt5y/MpU/sCx3
TLSH
T193C41703ADDF625EC78273607305CDB77B19E36BC346312A88EDD12B654B5B283AD426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\el.pak
Size 1.0MB
SHA256 627dfa327bd3971ae2f26048c247fcbeaa33b3301c3b78f72ec3f199a365ca2d
MD5 de1a605a023f9f70c167c0b5dfe3a3ab
SHA1 bfc7f3ad1782ba103227401cc40508be58a931bb
SHA512 2f8f3c40419761b6331927c0287b1e65067ae5815e6c4fba764d17a2a4d670a54a0db2b35108d5967067c40ab987e458b0e84af9a4ad851afdd6286758cd8265
SSDEEP 24576:BVwHcaFbu4FiYX9m3MDlrJXDsSlmiH63D2NpUyEjHm1mVT8y2IWYNQKlCt2rDQu8:gHcaFbu4FiYX9m3MDlrJXDsSlmiHaD2t
TLSH
T10825CFEFB4542DED8086950785D8F07C2BC62D6CE749CBD86629CB60BDF80718A22D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\en-GB.pak
Size 463KB
SHA256 811cc30238e961c852267a897c579d6cbebfb957fde9be662d23e4ad989ec894
MD5 f5e4073325dfebfd35aa09016108f480
SHA1 93919cb1a28ac0a4a77e966d6599fd832edafef8
SHA512 503bb198fbdad64c67df0a2a1a2730153758e58fdd3c0139bf7e89477b96cf7c8ecebb23184d48163e6e96d1dfca9646870aed77bb393a5355605efed49032eb
SSDEEP 6144:e/BeweES7Ve7adMUwzqNMP9eqQ3K8faYmfcmk59MxhBcRRpVA:IetJhMiNMtQ3KB+5ux8A
TLSH
T147A42C1FF7841269069311B27F09A662FF26D06CB35116663CBD802C33B676AC3776E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\en-US.pak
Size 467KB
SHA256 de60674fcae1e9395cb9a2a2987dfbd97defba59dcf7e5e61a452602e38179c0
MD5 45b984d76459ab58884ad190f54bd93b
SHA1 6c70aad992986beecd86aa35d04441d345b9beca
SHA512 57635aa89a30a0dbece3586ef4b92ef96003faa11c8f666b8bab6522f7c26d7d6431e08c6335d41aaf5e33844e5fb735a22ee7aa621956dab6fb6615ab54795d
SSDEEP 6144:5sNJk9kFTDBop3rfxnKF8HWMP9epQBDRfaYNr2B55Mxwngpt/hLFwB:AobfxnlWMaQBDBm5qx/FwB
TLSH
T1E0A43B1FF744126A069352A27F0995B2FF36D06CA35112563CBD802C33B6B66C3B76E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\es-419.pak
Size 562KB
SHA256 99d5177b232925a00917b191ac358d88cd8e9a3eed73ed456ac4a62928345b49
MD5 7c122de65f4203421225e792afd77fb9
SHA1 964edb32afbb973635397b66f36a42255f9e89cf
SHA512 fb8fb7d87500fb1ff2ab16a2c960428ab5d9548a17ae24aa313d8ea60b11a36478f86ff99bc45d29e0cf33e7a97ab9a99b05412337aa5f6a7a076c7df506f1f4
SSDEEP 6144:TeTY0pDeoFnPbDRpDYBcO5oi1A5za6aQ+lR51m:V04WprOE5zaI+7m
TLSH
T17BC4F822BAC81F5310E3A388B743D753E4989545B408C29BE8EB876562CCF8CD977ED5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\es.pak
Size 562KB
SHA256 d66d7ac73c09edc6dd00dcb1b414bb662de6b588c06621764eb2e212db80fe9e
MD5 3c4e61e751fd35dba90695f806011bfe
SHA1 c29105b94443f3fe8400eead098d8c53fb9b7dca
SHA512 de3fb60248914f470a6677de2769efa485151b2e5c7a9f972c829cf7ad1c61d4542e71dea3df132bbb5202daaac45a60b01965ca03d39179d7830a6604072e1c
SSDEEP 6144:DNvbzJTpoaw30n1Fl0fEgRNkpT+KeuiR5R9njm5JLf2Q9g/N6PZauu:JXoS0Fqp6uiRpnjm5Z2oghv
TLSH
T137C40722AACC1F6310A39389B743D753E4D89545B508D29BD8EF876612CCF8CC967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\et.pak
Size 511KB
SHA256 7b17cf34b75cbcf65476af00a0751f55f77ade6caa68513ab3629a5254742b9c
MD5 c4e47186acd7c727283b480ad18e6f33
SHA1 96ba904d1a82286692f16cdbe8c44e310e5adb92
SHA512 a105c16e26b43a2f983096e9a7a2065fb255d951e365716faea81d3c9fccac3b93197052eea0cbb61b51fbbce48f6ff062c5d87574b2f9a7d8638bbbed2b4da6
SSDEEP 6144:8OunMp9UWdLs9/8uq+p9fUL40tmFooSPT88trPSikntfLH5oM2CjiCKMxacfJPQc:5uMpRNG/PhQmFoX4fLH5oMYW
TLSH
T183B43B42A17D731B282412F9E737A963DC9EE7D8B4000D9668970A1971FEFCC38B6B54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\fa.pak
Size 836KB
SHA256 00a9c5e4915408b948667b7b5c5715fc3fc8e6d628210bf9a341a55e86b6dfd3
MD5 6e6eff8214f35735566b31d1754ed6b9
SHA1 bcd1fb9a6202d98ed0db195c3c9748d6175ff8b6
SHA512 4c95e42e65e287ddc62266d39ab580cb1d552756a1576477c2e0af3e6f7555e6bdae0fd1c3e2b3840630e73bdb7be4eb6bc630b19a4a4e1f7d268d1484484221
SSDEEP 24576:eDH08u313uyqoT+seqyRmX1loTUOmdAQifaQ2XxFMJGk62YhhdTiI5MX4qOoUtjV:/55X
TLSH
T1A705D3956AAC9AB16747CA0341D33834C773EF12D34DFE40ACA1076609A5B139F5EA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\fi.pak
Size 522KB
SHA256 c2e954d937baa4a8ad382d064d8c6b0ce2fc3375c576dde7b8f8adccb83e4bc5
MD5 1920bd8cf37dedd27bedf200f350e1aa
SHA1 4c39426f62b03091130704ba5e6c9bd5442a1921
SHA512 f42a61efe41b6f4e2eedb4690f48b876af4a9c08a596143c3e6b6e12f7e546fcf2cf7f42f3d1fb0072ee98496255811d11934465627096feab5792c76b9b6db5
SSDEEP 12288:C5Hs0LI19loPajaQ5lkgUtWnep0WaAvqYM:6Q5lTn1l
TLSH
T1FCB46D915219C22237C8D29E7DB0903EF5E5E3DCCC284D96E843CBD849E99887D7276E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\fil.pak
Size 590KB
SHA256 70e5b30013027e3406ee0a9953bb34e27229d3e0ff60758a7c53837336966833
MD5 f244bdb007787a98e41196e403a002fb
SHA1 95ba50906890d275674d254ec39880e642733f37
SHA512 8720503d85ec0f2ea6ff8127e7c40786d5ffe7545845c7d0795c4fd7b58044549c6f194f0f7e54c49a1b32a78b5594e5bc1637eb62d61927df081b5c4be14882
SSDEEP 6144:lFcF+oO8bCkUEmsynDQ1Jx0phwA6umx5vMq7proEuAlmdK:loO8xTx5N7V
TLSH
T105D4B615B7402748DBC352E51360682FA6E560B83F82786E0FBF269B7BE7CD5D270192
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\fr.pak
Size 609KB
SHA256 fae930c71e897b3a6275d526384e9a5ac62fedc562b76904dd108b55b26f1246
MD5 c4a35720d8c9397215cc73ebf096ca44
SHA1 fddfa670699437b1b7b86975734de0279ff442f0
SHA512 ac0b1a210a30719b58223894367d28e3f8ea1c29ab782181ad135df07174bcbab4274d73b6bcfa850b72f5dcb6b35332040018274fe7cd24f7331d7831a04e08
SSDEEP 12288:MuGwUHo87ZL1H43p9ZR6QuaMVqRZz14xlZsZCMYnY8R58g9sQzc7IPV8IxwSSWt5:fbYViO5+W
TLSH
T10FD4F76FADD431CB1AC612B7FB12D663DD348248F215E340D89F4295129A8ECC39F6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\gu.pak
Size 1.2MB
SHA256 391a825c8f33718bc87ba6d8407e7fbe951b0fe554d0db689a6762eed38f3006
MD5 0ae1b87656ad93fdf7077743964f25d0
SHA1 501e4abb0e046e80812140bc7ae4db8d316ad759
SHA512 196b92f0c7d51cbff1a8c298656559b2a5b00685fbcba1d44ab6a002abe28c07347400eb5c4cd3b790a7912009c430af52a38d695e49eab906d80b9a1f5a946c
SSDEEP 3072:1oXxpIkT/T2imKPo5zfpJ/rfoIwjAwREJKVMjNiT7llj63rFulPCaSi5NAWsWi/p:1OIiTHm6o5NJbgb6/5qwhr1lXR
TLSH
T13B4519D0D3B9F07119DA9F7E819E512086695343D67E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\he.pak
Size 734KB
SHA256 1325b70d40e5d5019276c50b4777451875f6dda15e9bb4e23df0de404a2bf76a
MD5 aab6517caad0afbad64ff1736ecd15d2
SHA1 33782592c0e22e54e91225dcb33a3b703c075ff3
SHA512 1497a5069015c37296ad71f6a37ad155f70d4cb06c4c63431382eaa18b2a12870511b7e754968009f5b200537202083cdd272401915a478284f22675127d7a8b
SSDEEP 12288:9XqylNaQm9hVzyD4ki2T2rnCkW9Wqu/5l2PX8ACeX+7eQCajp5Q6syU+ZHWO53N7:FqyNart5Y+j
TLSH
T1F7F49AC4B2D452255231AAC39FA4FA286FF3CAB53CA27512CB14526CAC774F4BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\hi.pak
Size 1.2MB
SHA256 92b057a1e57bef223a3fd8c4789c0b8b94825822a07c29b2e7c057853cc627ef
MD5 af21f47fa2fe383621a66adf29101fba
SHA1 85492bdf2ad120f2885053bd72b3091ea9d0f121
SHA512 f985a3bc72bcce3083c17fd968e6c9119d0abe281b24738a0829c77d6c172b71694960b2cb23ea6bfb7545bd045d31410e0f04accdae60362c44abcdcb710433
SSDEEP 3072:udTXlt9ui9DMN74LYYK7lWV/BB0ZV1dKu4lYvhOEOTByntDPtDlgpfgrs4fe/8K/:udblvui94ycYK7lD25RKbhcn
TLSH
T1D555060CEBBEF3B55DEC3C8A32890D37D59D3674A3E5525348D5B3DB9844CB8046A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\hr.pak
Size 567KB
SHA256 5df6daf8c34c3e74eea274c8d608b3a177f4d6070a3bfb481cec19ae853b58dc
MD5 512e38d6328c71a24b8a9e068d2a4db9
SHA1 66fdaae1696b4cce1e0ec0d13d346ca5ebd8bb37
SHA512 116f8cbcf0d59139d7b1d197bb2117d34b9579dc418c0c6f17d0b3ffd338836e5d5ce8f1439f792a08839e0a1079ed4afe4f85752c5aea22844a70cbfd551a25
SSDEEP 6144:ikTWSkiC1OhHU0qhw8ZhTE765e9YjPCjlK:ikjgdhw8PE25uYrUK
TLSH
T10EC42A7CBEB297090897A386EFA643447DBE08DCE52597B7784F532E0043F4D6AB8149
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\hu.pak
Size 611KB
SHA256 a09f07ffc112438f9e79b88907b7853de161bbb91a807af96f57d01339e365bf
MD5 ac4b7e349c25d9d2b29f2cbf2ef866e6
SHA1 d56fc6fb8f66a0b0a0883f572f8345b6ec2072be
SHA512 e70066da52cf2d6752e6e22465c9ff891bfcdb5d04c9f2b2cd052c5059e0229f86a188cf0cb3435b059f66d2e97912d8df33c7ef4b400b5e51e457fe4e84ecfc
SSDEEP 6144:2w6RVhkmyedqVRj9/Hd2DfAUAxekitpd5qK8FZ9plLcYNtDdK0djew6cTnjDi54W:23V7ndqVaAcd5qK8ZhD0qbm5HPyK
TLSH
T15CD44C779376905AB8AC17D378647F16592E481BDF3B26F72887886D30A078D0D83C9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\id.pak
Size 505KB
SHA256 8bd54bf3b8cd369b4a92804c160bd3d2b888cc0a716d910c7a324569777f4e95
MD5 5785c0a1142b99b41b6118e096e37e1f
SHA1 a2e8ed5ca1fec60ec811ae9cab74c1286467a4ba
SHA512 2a2a374f74c24cd1876859e4fca2525b5bc8e6d86f88212af1e13970cf4c5b52e7dac31911f6dcaa54c94c0829fff39a984f738813be68c3a80d30051b02249a
SSDEEP 6144:KNU4nGe83eEhx38gmO8jBYBkf+eVnjHFHTmiZI/u5C7pjOBsIn0iT8wHp:BGGdeEhx3F82BcVnjHFzm8IG5C7pWp
TLSH
T159B408632ECD300C594843D5B2DDAA1E7CCD233BAF05B76E8E348F7055A67682726B94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\it.pak
Size 554KB
SHA256 d881daf64575dab20072130995d602d21381ec4536b7c57d862b511fc7b34e63
MD5 4e6fb4c153c436faeadf56125b6d2ced
SHA1 bb50f6204e0b7c2d08845ebb46136e552a72c229
SHA512 b44b674e10e726e4eba3a4b0a6e22a14c0cedbabc41e8af42bf2ce0ee008ed944e54e0ee185b116971dd9e14f145c9365c949183cbd27d0c629d0fffeb28b202
SSDEEP 6144:jHeZxQ1ClwrdN/hTx991jY9NxvESIqRRxsO1ytKvWjRT9Tj+ia3bDxLUAqpzSw9D:j+7QPdNe0lZTG8/Pskfgm4s5pLI1W
TLSH
T197C42C3AA5D621151A976359E621B085FB6EFCCCFE417218C99B031C23CFE44E2ADB47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\ja.pak
Size 675KB
SHA256 c772f5030a7fa6437e8ec2161694566c8e22319b68c2a2d4777eea7b327f8142
MD5 26579ff78414768486706a010168661e
SHA1 e56243b75fc025bb75d75a6889b6627100c78bc8
SHA512 814984f571a79026b855efb435cbc7e6e24c67a60899cfde9f055375c1b3ba072f47483bb3e059ac3e9d3607ca76bbc4d4f9d97a25538c5de92b2d5a9b8bc22e
SSDEEP 3072:tO5HmTzjDuFR6pe4VhuLKOw7Ei/lwLhO3tcACd5XYSRL51aZEhyQ2ImkNuHvPkwm:YFR6pe49kgKoixaZLQ2ftXabt5z2vVVs
TLSH
T1A3E4407CE3C569369D6153A22C0E36E17606AC9FFCA23A36442DC074BD70BCEE515AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\kn.pak
Size 1.3MB
SHA256 29e2613bc55ebf10dc0e6318233aaac0b39428a3af0b1e0867805ba60194e88e
MD5 ab565e8d33e64bd5b2b33ee54e3ae644
SHA1 07fd172a4b28dc2eda3081befbf9f6a03d5130e0
SHA512 6698acdbfa8116e124512644de545b5b28fcece8e745122fb53bfb3a81f16dca128bd657c8b5808aaa4b7f055d10b2484c9c92bf425a3f3c82369b6220e0cbf0
SSDEEP 12288:APR7MrXUZiMdlzb4VMQOEoTQ6m0hY7Q593W24hjSEjR:AzizA51WR
TLSH
T1F855CD186DBA7D301BD5006B24EC643EDFF16BE29CAA07C2F4DDD7802C66C6A90865DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\ko.pak
Size 572KB
SHA256 6b32ceb4d71dc8fbebde2f4ca3a543dbc4963525345c9298e8daaa3279663340
MD5 d1ff388e387db1ce20d5f2d462e49981
SHA1 c5a5f2ea00be1d4d8a10960564deceaee958224c
SHA512 0dfd299a6c3a3aeafa1c50254a1a422f7247869cf99548b477802cb0d24cfc6c105172538a9c9f4651a82fb562c40c4757a7af8a34cec2fd969fbeed3e6ed521
SSDEEP 12288:PEw78zNYv7ANf/FTS0mIXRxMSAG0GlzRXhw8fIt8OQ4E3hstRbrCqYwH75Rag7j8:L83A5vK2oUa
TLSH
T14FC4D6F238DB23CD1193C982AEF4FA198382D976F7530294ED44CE44DE645D74886ABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\lt.pak
Size 615KB
SHA256 1334d488e5b1a8357cb480508c8f6ce2ad211a9997f347e9ed1b9f712c60f74d
MD5 24d1fc605857a53ee7a92e6003d032ad
SHA1 dc744cb97b47f26cf74ba9e52666cd6c21656456
SHA512 552b1458337403c697b5112e5486aefa50ad994ed8cc9e11bb12a91bf0de2be92e934debe8af1dc670e398464096c925542eb63009bdaba8ce348cd597281a22
SSDEEP 12288:9pa3G+S6MAMF2glccVOc354745CMjMK6SuM:q3GOMxmE3595JjMA
TLSH
T18FD43B0069E3AEFB9A4467C982E48A78DEFD50005737BC61EC69C79AC43BF4525A0F35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\lv.pak
Size 614KB
SHA256 2486f896cf18c55462835ad2f363866995cbb992d5d9d39239b569727afa58b0
MD5 5d5b4c71b5d3cb178511d2c7d7488d1c
SHA1 3bfbfaaf6ccc59e49649ed69a42fbf0d4151f887
SHA512 ccbab44c35da319eab4563ec15d4e612462074e6a99ab35a775531badc6160c5b379f8000420f57894be691da46b9579e48d1c0f57e6cedac350871b19da1c85
SSDEEP 6144:Qa6OdcQGWLW+ta28mZEN4mNLtVFFKbW0E14i4f/ZbOHu51b4BWFAqZTCO5CoCYJf:BXyQzrGPUBE0HcHu5xFAqZTP5bJhgB8
TLSH
T17DD42A559EC68FAA4D908DCB7327D123A8CCD740EE06E112ED7D4B3A650F52432B5EE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\ml.pak
Size 1.4MB
SHA256 3335642c3f0c852beb595889d8a86431001133cb8c14c45bba688b764008b1d0
MD5 af63dfcb2b13d55a37875fb74c30d1cc
SHA1 b3b45850a5a07d1561412882526d5b4ebda643dc
SHA512 73b8ea93e3e0c35b5792cda9e7044c86111b7229d5d83005bbc1efd13a2afcc06b48899a44d50710567234c5788ab8331aefc61f09ac65aaac13e8a0b86f2f93
SSDEEP 12288:FvvbhsMrrKWIcaWyygh4hxn9mMPIPFiKfpBP1zX13dqc9Cuz3ejha+5465MXAfGS:dbhtPpgQKfpBP1zXLRz3eb546WXAu3C
TLSH
T180659D5BA036CD3B0FD102167B4E2FABCD5B9F9140AF668B5869F2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\mr.pak
Size 1.1MB
SHA256 39b3080a83994129a5dd5222dce549640bf51de644da13f2769e836126b7b782
MD5 d9edbcd139a2dda14efb088dbb99d36f
SHA1 757434df97d64e25bbd2e7f9f456283807a49c0a
SHA512 0309a16c49920b45e2add8020c527350dc6613ffcd3ad3ad22694ba419396b583108698ee6dfcdc5c28cd2562c5bb1bf82f1313243a4fc969e1914599d3b8b5b
SSDEEP 6144:aK4MfL6X/05r9Bvw9acCsKZKJUPjSHro053mPnkj:3PL6X/CC9acCVZ1PjSHrJ53mPnkj
TLSH
T13E45C24DF77AF3685DACBC8E36580D3BD8FD21B1C3E9925648E1B3E74884CB401596A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\ms.pak
Size 529KB
SHA256 0615106f5c7adbeccd9bb1ea207c8bbdf5e917499e3860103a3fa60069b835b2
MD5 6f0d9ca4630b5ffe349247ccb3f34589
SHA1 ff9a079ada57344154741070ad85902d576476d9
SHA512 d63db7111f9f92bb18c908bc5a499bc918df54859dca5267e352fa9355968198bcfb42872d96a61c5e4355713ecd0c21aa72383e84bc3713d15526de613c3ae2
SSDEEP 6144:/LPFWCBDA6axAq2YemRl/B5VTUcjt95b3RSyGADBmvzt:5WC1MxH2sl/FL95V9Gv
TLSH
T140B4B6469EDE3118085843D9D2DD6A1B7CDD3332B705AB2B8DB08FB0166E7E53316B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\nb.pak
Size 513KB
SHA256 114ca3cf8ba38df9885e54feced2db9f25c789c12fbf41ded07e58ffeb7d852b
MD5 8788fd146d53925f54e127a2b99eed0d
SHA1 0e892f0ea357ada0e66a868dc908cee3a448c858
SHA512 45927030c080846ce3c533c84cf26ad93f15aed8070edc07f6e12d7a4b4aad3eff6d84cd0b998314635a1655e0c8836199e110ff7f86077f46caebbd268353db
SSDEEP 12288:xygOR9chol4u5Op7f1MHY+HVbE59KLbSAk7f7t:xY899+HVbE54LbP4R
TLSH
T1B5B40783EE86B72EF6A443A4F41885579B7D942CCE98199B54CCC63E18C7EF092BD1C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\nl.pak
Size 530KB
SHA256 f7577370e356b5d1868b0faee46a3030aad4d7a72ff068e8910972862f7e43be
MD5 fc2f845462d8fd201dd55a9bab0c13ac
SHA1 d07988fc8baaaa94cc70e0b3152f96944c8579b5
SHA512 7712854e94730be7973231a55379d51271969cb156bfb88c45497c1b1563f1c4817595397570a2236a43aaaf07db9de89bf3294d76b35952491d9461680e0f69
SSDEEP 12288:G7JXlbJ9WQusQUWFgY5smc2x5btfmzmkbqqn9/OTy:kRlbJ9WQusQUM5smc2x5bFmzmkbqqn9V
TLSH
T1C7C4F917A84E253E59C1A385F6094FBBBF2ED22CC36CE67D94DDC1341443FA882AD589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\pl.pak
Size 591KB
SHA256 4f12dccb61513bad8306c4f8865daf59d5f666c3540c81bb9c56ef52a972819f
MD5 b6fd1e076dd7b6027d27b09c86440513
SHA1 0a59a7168c7a5f96a4c675b8191c9581f6d61a28
SHA512 d5b77baaf891fbba7786bd67b280fb1289751f9535586a236660a8e573d6ea87b4aec8616076d9987659d4d08b58ef6111766efdef1c15eb5793bd7b000a86b7
SSDEEP 12288:+7Y+WoOB/kDqOXfQfuzSJY6HAubIoP/CUdse3m2UXMgm/1QhHsB51bT46ewy:+62DM31QhU5KF
TLSH
T11BD46C0D96E98A4E4DB008E6F2E70B7CACDCC808F109D35FE45F452A615B19ECABE5D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\pt-BR.pak
Size 555KB
SHA256 74f1be3440a80f55b028cb3c42f291fe41c1626267603d94f57fdececeda3358
MD5 b00063d518dc48d46182bb86a2676357
SHA1 850c6757ebf56758f4ad9452e394427903527889
SHA512 75459d63e98eda8b450576d9cc1931c0e11f208ddc0742b9962b5e63c47dba92b6cffe2ef8bc5fb288a2302303628dbc6b9b7837a61b50e9dad1d6df29a16345
SSDEEP 6144:ikRiNLcbEORKqqZdNBXBLQSL4yPN5hDXFmW1sRgMCrX:ihcbEORKnZb5ZXPsR9CT
TLSH
T10EC41B2A6DCA136605225350B74EEB43E5881745FE0ACA87DCEF4F05A3DDE40DA33BA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\pt-PT.pak
Size 558KB
SHA256 72d9a069944ccf2ac4a6ef44110a2e3e70e8aa550664bc70445947ff72847038
MD5 27c720e2920e684d908f6037a9d9efd7
SHA1 28384d13c87368cd4196c461b86315eaa91525f7
SHA512 136d22693d858e968651c50d3759796f15bdcf20d002a41e70939291398d30774c4677284d13d20332571e04b54653880fa03cc310c0ea18e33c2b5bb7c2ab00
SSDEEP 6144:higrtjhtJKr5QBieJVJJxh2D43RfZRI5ejB/9SRIh:higvseI5ejB1SRA
TLSH
T1AAC419286EDA136605135341B70ADB03FAC86645F90ACA87D9EF0B0672CDF84D776F62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\ro.pak
Size 579KB
SHA256 432c9424a471857301b724035c973ad009502a7dec2a9df95ccfa73fc46dd0f9
MD5 f9d153fc60c03ac552c775c79f862513
SHA1 7e3dc463ad9c4e2d3cea0e5af84aa6afefef086a
SHA512 3fa61ff461ad751e51270ffea575cd0a2c70691afb895de2860c45d3b77e669061d3fabc2fca47bf4b3e2dbd87b2cd150f2d827eb4a5466658fcb223c3a11d20
SSDEEP 6144:z+nmepgF/wMnXEvTpGKdjOoTxatgVSK0GFq584xUXqs2u2/t2E3:Cmepuw0XEv8KBOo9aoFJq58CUv2/p3
TLSH
T12DC43C13A1C82A97199152B2B73624D3E88E105DF641D2CDA4EEC97D10CDDDBC62EECB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\ru.pak
Size 952KB
SHA256 d9dd48e68d20de6d90f8ae074b4f0f94ad8a9a9fcf20fb86a9a2a41caa618ea5
MD5 19ee869997b40de66599e7dc8d4b8432
SHA1 d7e320dd0a46e1137a2792ed37eb937545544455
SHA512 be3899306e7fdc8de376e2bb92469c61040e3f6256301d04f60578f705ec8e69f2c58e7e01c98dce1a2295f786748f1aabe0d84fca5f1657860850eeb3c26bdf
SSDEEP 12288:OHKqmXdfQjRo4YSWPAY+zJ9ZF1WAavd/96HzW/yqSvDs/m1sXel+YHVeXN2hVO3Z:oKqmXdt5/3rb
TLSH
T10A258660669E64DE1101F01BDD08BE093CEB45FE3FABA35619A42D7F35F2024C63E65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\sk.pak
Size 598KB
SHA256 99ed2b13a2804a399a6f4bd5e5608221ffb5874229dea14c33ceb24d99dcbbea
MD5 93d13caf1d389a6489d911468af1df66
SHA1 e57c07f3a46518edd327166b31f443b20e419209
SHA512 4f449e4fe79393c228936c76f11088ec1cf0df887a9d3e6781e9bf4e5d5c41b9f7ebbc1c7f94e8b5b7527be8a3d1037453e7dbe3b585f84d0f83ea59da318476
SSDEEP 12288:1PFFojkpIh4di1i5JAY5Evvw3QXtWTjsxt90g:PFobciY5gwIPtCg
TLSH
T111D45D3FDFE6181E8E8D0148EFEA7110FDBE46508A4EB0A5D84F364714E26ED8A78D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\sl.pak
Size 574KB
SHA256 d6a8d1e4539dc08fc4dd6ac5a048dc20047b6f202103e3782ce59e3f2d908696
MD5 acd74a626e4e41f0e5f3516790ffc410
SHA1 2becb9f0394e61459530cf7028caca2d5b77fd3e
SHA512 0e5d2ca27d1331e916f0a71546351fedbe060efa44726a41a117b3a8fef949604d30a194523a88421bb9740e1092bc288ab19a5eea326c8bdba70e4673a48b28
SSDEEP 12288:o0MGJ7P3cB2FXoFPy53rfpWJU1ui/fzxlqc:oVGJbXkPy53rfgi/fzx7
TLSH
T157C42C35BAAB9E0F0D9BA2CAFEA606007FDC044CD252A661FC4F337D5015A3827BD595
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\sr.pak
Size 884KB
SHA256 de79d880a33f7ba3e5cd8ae457321671582e8fe513eb4e6f5b9e257f6fd3581d
MD5 b4c168b797939706eeab8e590df41a87
SHA1 96aef6c5565c407c1b8558630829e8df34e00caf
SHA512 12d3c08f4d28f7bfb7bcafb3df6ceda91c371d58d6df819810df3a9c0db11c89378cad0a2c7b0c63b618c92d6db7f603ba043c28c494857ede5c6df1a9ba3905
SSDEEP 12288:u2uMrZb7M3KS7PISzNSzdV/Jui4til40b95YLEqu0xjHgV37n5Di/k/0:VuCCuv595guWp
TLSH
T15D1557A19B9E64DB0501F41BD808BE093DAF41FE3FAB975215601DBD34E10B887B939E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\sv.pak
Size 516KB
SHA256 298cadec1174abc1b918bce83b22a09835cf8dcba87a3438dbe114bbc0463bd9
MD5 409223e938df09ff042e51247591bc47
SHA1 19d98ed2b4e7f6eee3d07913e442c65195aedc5e
SHA512 208266b425d6813f6889d7abed9dfd549602fa26f21231beedf13f8b09f3b2f9ae33d709540a3bb5d637d299fc2976bdbcfc9c7d4671851519318ca7559f7bb4
SSDEEP 6144:wQ/ltJdLdItw1QdjT6shgjCCx//Gl9dB+4RFcz5RtGl5nYF4tkvMmSO5DE/xJa5z:1ttjLdYdjTaCUL50rF2MC
TLSH
T17BB42C438A10F526FB72134DB608115B0AEDE25CE7E2958EB8D9883DAD8BD5805FF347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\sw.pak
Size 543KB
SHA256 c39c3ada455757bfcaecc3d80652e79201d2264578d42d221c52d7c50a601b0e
MD5 40c6e45bbe6afb7e05bf476c9a9b0fa2
SHA1 3d9b166d7ee7eecd748ef5b5796105397fde437f
SHA512 112d77897a9676220bc825ecee6598f0ebbcd5618f7756fab651ab8d6990959bbb16f1f481397f365f4a202366f714d432d3976ffa3e6e787bc3e62f12262f5f
SSDEEP 12288:vslxH+oNrKJpdscpU5QmedqrCBfRdBFUQbQW47TxEaFqYJjNegarCgMje15Z1/hz:0lxHlFC15//B
TLSH
T167C4D6629871E1191233518603DCFF731BDCED5C2E2B29A35A46BF0F218F58857ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\ta.pak
Size 1.4MB
SHA256 c66ce9d65f8691cc431db79178e77bc615bc1f212b27a754d395e5c8adc0fe13
MD5 2401a2e74b1462715a3322101e76e1e4
SHA1 f3ba3ee37edb088faf069de6f83e92ca7426504b
SHA512 28505fbed2d8b665b623053ad4cecc8a7226071779ce50f735efdcf5fa472a5cc00e1a89ab6fcd46a5df11d14b32a7b2f9a99161ee2bf15e4396c6dd9018d629
SSDEEP 3072:cg2yHsU3/YSTDZkE0tJzjKGfd5k62sntRdRtm1vYpiMyf:nBHPL/eF5KGfd52sntRdRtm1vYpiMyf
TLSH
T11B650CCE923EEE890F93288F0319536912986155C47BE3A67C766E1198ECC5DCF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\te.pak
Size 1.3MB
SHA256 4d9ba6b2727f5f62d90dd45019c68137f3d55efc23a85f62b4fa52ece972a073
MD5 e9933a531c8c72a589de854195e9c45b
SHA1 ca9cabd1c81bdfffff5da404b7f2cda5a2fc5905
SHA512 444d751674d9c6a00d571f918582b46ac78fc4be78636c4a1caf9fb52bea63469f70fc8a0f57fdaccd79f12327583f24ab575890dad6d2613bd38d2f29ea0da1
SSDEEP 12288:bKQ1jr7McKNq0yRcJ7FgnC8ybtKRT52bNcW3pk8W9fhBp3p1FZCnATitlF2iJk78:GQ1j/e50UHVj
TLSH
T1EE5591023A6AD310DAE60273752CF66C49781B8161D6732C1EAFA357FB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\th.pak
Size 1.1MB
SHA256 77209d15decca546704f621bf4e8d9269c56add000c057c568d0fe977c447e21
MD5 aad565b6857b6acce9bd4d551c80308e
SHA1 fc4883a2ef32230f8fbc768e949a443f57217dfa
SHA512 eb75505f6fa302d68def6cab133c6b448f40a2a9e1f4c2910bf56f68388272c8515253143fdf69f0e1febcb9596980ad4f2be0a9b3b96ae229c7f6d5aed31fb6
SSDEEP 12288:EDtO4bQGN9LyZYAPTKznLCVsjU7ynaO1vuB5UzKdfL3fgj8uRU+wunRUdG4Lw+wz:EcT5hNC
TLSH
T127355BB37247DDD479441B5B262A7789673DAE693F73F8E00089215A73F071A8422EE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\tr.pak
Size 554KB
SHA256 df9220e39703440ea7c9d9b74796ab5196fdd0ce7b5953af8813567f39ff500f
MD5 f5ffed9e08e2456bec4f4304358f37a3
SHA1 7fa837edec8f65c80a9873a24f9040046ce1a69f
SHA512 473b831dbe75c08ccc4668920fde200abbb23a4145b255d56fbea41ac1f51e0c71801f8b194324b46c0319d4a86adb89084c7e6b86e3c5cf92de2f313ea9f3a9
SSDEEP 12288:cBr+XqaG9flVXHzNs7DQqZFwbyt+545MI8JX:GsoVq+54538JX
TLSH
T149C4FA8178EF281C8FB9278BD6E90666F89F0766F331F4469A1A9636774535303E360C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\uk.pak
Size 952KB
SHA256 b76695b9352440d27c0319f59cd66df2d8d76eb1162d5f78a8374748562ad210
MD5 1ac5ee33a091d5c44ea7b0c9dbcf01cd
SHA1 97eba903ca99c5764ac11fb075eb06fcfe7fffdf
SHA512 74c72262cdf2d9e02e91490d03c1801416851150a910221cb5cefc4ac5e7f888978d0ccb7583f98d7abd54695a97279b91a4bd466d1fa5a0d66db19212712278
SSDEEP 12288:7MHxyqFx4gaqwmsSr+rhqdgZ0ZYd0IniML5iB3IjsHAf+rTjuuKLNiXErqXYjgX:7MHwY45kr9
TLSH
T14D2599A19A9D58DF0106F05BE84C7A0D7DA741FE7FA6471625A43DBF38F20248A3C35A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\ur.pak
Size 831KB
SHA256 78799d1065fe84bc64c8c851d5457639172830516ee5c74f08e210973908770e
MD5 b105eed802ffaa71f4c5d802d286a6e2
SHA1 369a0042ccab4ccc1f629f0fa186c62e96feb12d
SHA512 94c08fbb7eec3398ff1a9082c558b5c6830122ff8cfeee03361783a777d0393dbd99a4d654e9d40ba941f798185c171a3b9232f696828aba2a7830453df22c77
SSDEEP 12288:cEYAPz7FC8PIARlaXd28NJry41cfP5k66EhTCkORvlpQYrlYVwadcJKwUku5co/u:cEDPvb55CPn
TLSH
T19F0510D2E6BC96B25A21D92780D33C34CB635F13D34BF285E52246C54E9A0139F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\vi.pak
Size 658KB
SHA256 55bbd8fed3330da92aee877fb18640cf7c6391d7a6c6bb5aa2d072b4800d3ac4
MD5 95daebfa784e7401c2261f4b3e85013a
SHA1 47e290ed5029f297054eeff67089d974fd3a6c6e
SHA512 fa84e9cd8ba8bd6ce1067ad90373433c8183ed70595fd73915f48823fdbdf9c1b581ab8f10fe738e1b4c7fb6986c62f965e2618b7044e7ce6b7ca0b6d34fe034
SSDEEP 12288:joKSvf1+c8ZoET9VwMNgFu088xY2GbfEj2Wx5a8hZ7cE8UO+mziKHrvacQ1h8:j0v9+c8JVDgo07xHss5a8T7RlO+wiKLp
TLSH
T1EFE4851216E1702680AC553EC6CD540E6FCAE42FF7C18FE56FF429747A221A45F21AAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\zh-CN.pak
Size 473KB
SHA256 67e96bfc54394701cb91e112bb07b7b7042ce9f285db3332a19476af566444f6
MD5 780ad68339ccbdd2d0b3590fea4f0d0f
SHA1 c9fe2e935a5f43e90ac6d778d2c7f77209f6c2b4
SHA512 c77f4eb2639f6277404be4a0c70ae68626f119b4a47b8dabd86ed599c07bbde3bc5fb8eae2b2c36b5806def0d08fd9ba756c770f4ba365897368d4166170a35a
SSDEEP 6144:F+Fhet0dfThfYzhJxs7+56PCXTH61pH59zb/4krv7HpulM:F+bemJThQzh3L56PCXTHiH5Zr4krTT
TLSH
T158A48EA911E9BDEC014640E03B29617D7C40B20BF667AF766DD244DD2BA2FAD0717E0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\locales\zh-TW.pak
Size 468KB
SHA256 ed372b000597fce75c14edd18ccad1c99e2100be884b58a7e7498488163f2554
MD5 550e545b7a3a3ae0e5b73f127b09813c
SHA1 23592a5cce7a4791366653fdbebcb21b456b2651
SHA512 0e4b4851b0f73159ef0e205e9732eaf3e7aaddfb786327f81571b7f8304a13f26ef27fd901f19a6f4805834615b8b683637dab0f9cb551b3d9eb7b5bdd488412
SSDEEP 6144:/WIM+T9wfsQwTc9ti65JyF72/Yu/lVNt5+QznGhkUnKFieWTl:/WkT9wfEcLi5qNlVNt5+Qzn19S
TLSH
T1E4A46DA609FBDAEF0901F884B7CD523EBC8B746CDD377736FC4518942E7AA640A61049
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources.pak
Size 5.4MB
SHA256 585bbdc05da4ceb1dfb0ce6fc3001dfec3c798140da3004a39b444900bda7679
MD5 0db1896c517ee4046bcd033fee82164a
SHA1 b75983857715a55160de8fc89d22469181f1c465
SHA512 e352591866742d9c44ec40affecd46d9706b4f1eda90fc6cc0790d3de60cbc74bac15fd55ba90924412611eb4495427df8235e2827528d0e707b747ba33a68f9
SSDEEP 98304:knNlsliLKTPeIoXG13gkPOG3KJSml2rwrxySNYtu397pE2RSvc:wlGiLKT1gG1n3KJSmQkrxOwkvc
TLSH
T1CF46338EB7691D3BC8AD43BB48A8463316A9D9390660B857314CE0746F273DC5BC94BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\colour\LICENSE.md
Size 4KB
SHA256 e2eaa4603c14cb26f301e88648c12a853fa3f0f5da6d4b0972958c666e7f2ab8
MD5 a00f8d8266b0c994e79eba9ce7e08dbd
SHA1 b01305ee483665a1bfb23d9509d4668bcae41d28
SHA512 0efa3ee72d5efe8487fdef75147479296a6a3d83efc39afe4f3c226cffad10e51de69876e5b7622d9446aea4675c793f0d1acc74de17ab09fe847fc9d938417c
SSDEEP 96:yPut0CQHT6fPut0CQHT6fPut0CQHT61PsbQHnoW:5bQHTLbQHT1bQHT3QHnP
TLSH
T1A291651EB26457B218A7137055757CC4B26BB25F7AAF2788246EF344232B46CE5FB840
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

color.cjs

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\colour\color.cjs
Size 44KB
SHA256 f7c3efcf482624007f2019fffee3e1dec56b8cb893faa9a420b2832805888dce
MD5 fadf27036e4867ef68b926db250c4055
SHA1 82e42ec32823223fb0b732a14ca166ec86969f80
SHA512 24b7b8f29a9971881931989d4e0b4f9f9506e502098e79b7cb25a01b8862ee25edb38eefb841fc2c2326975b6300c3b2d366443fca069c2350636136f807045b
SSDEEP 768:NsUrIflE9Rw3q+FWAb93N0VZbYEYqSgqfbHC9zdrSMtMVyFVhy/Dgbzi5huG:NsOAaiA9z0MtWC6
TLSH
T1A813845865F658064317F0B81A4BD824B76EE503305EEECDBA1C92502F8E4A5C2F7FAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.cjs

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\colour\index.cjs
Size 49B
SHA256 e6e93e7fb209420a20fdf2ec676e9c67413be8d5ace99eec64f9468480f0368d
MD5 2c7e8d1ea5faddd0e7b60ee027d1e2b0
SHA1 fa7b65e1f316542140a9e72964cee52621b6fb61
SHA512 bd4b390007a10fb7c5f96ed91c3e0997aa10aa907b70df87c1589c41dfa7ed44495e4c95ab7b92aa75c44e97f8f5064a7c4ce73e00edade277119f10a254a816
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\colour\package.json
Size 1KB
SHA256 d8de837c60986566ef156246162f79d5ebc90d9dfe515f3207406759962b4b14
MD5 6479456540518ee0be7901eb54f55b35
SHA1 d3ef4cb07d3297f9bf6d664c38daa452cb72fa23
SHA512 33cf675c30ac83cd7eae8b98f7ffc806b7a4e0db00ef12bb43283ff2d4808c95eef3fcc7183558a7412466b60f43f170b53d7d67b37205abc1f6eabb3d523151
TLSH
T16711E171D2544D5306D866A8BC6C66426222081B5D68FF8C33C7412C8F9F1BF12FE2BD
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\sharp-win32-x64\LICENSE
Size 10KB
SHA256 dc1f5d2d43c5531dfe0acaf4e950ea5dbe3e61e1850cf0e983bda7efc10d6693
MD5 715f3348ed8b9bf4fac3b08133384a4d
SHA1 24e69035545b2aadd9e1295d80197648406796dc
SHA512 6c40de9325475a4cb58cbabfe0c5748ca7934bbbdf7b06d57e8af0b08aacf39884867c060e52405175e8f5e4715fc0bf13ce1871f03a8f656269f61a8790b08d
SSDEEP 192:9zOWY3y+++Io1UY74FtFiPpH1H8/fWRKt+eLYQ2H7xNSnGzgLtTBoffH2:FJMz1UA4H+ls32U9pTBof+
TLSH
T15E22667EB74D03770AD20162B74BA4DBF31E903D3B5A1A252059C06C236B96583FB6DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libvips-42.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\sharp-win32-x64\lib\libvips-42.dll
Size 18.2MB
SHA256 f8d356def73941668252347b825055310e99023ff77c7d3036e592d0771e1529
MD5 5f3e5819b9b10f5d7711b090e1e7ef81
SHA1 17951621e24f55505c654adccaa9f4977e850fb0
SHA512 3fa9e5499d218dcfc9c3a9254677ab7e37596402c94fc1c5e59ff12116e31d957168fc3524aa41228216bc3b983cb61bb2c2020ca2f874e548fddfd782fc0f3b
SSDEEP 393216:2z+r10n8PyGuudU2D3zDJxl9crqKBMBG9WCNV+ygLfENwq4YrM2KLQ01HaERtj9c:OdMY
TLSH
T16517AE0BF1C250E8C41BC570836BA722FA35784D476565EB27989B603E66BD07B3EF48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libvips-cpp-8.17.3.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\sharp-win32-x64\lib\libvips-cpp-8.17.3.dll
Size 319KB
SHA256 f1b3c3eeea1b6a8292a69d78dd2cd1debacb9951cabdd9217a57e34137570cd1
MD5 6015f5e1ffe05ef54b13e105c141dbb0
SHA1 b56d0de903d70030f0f8129927a15372c98aa79e
SHA512 0c95e0075f85bdce5f9a346e247be0d4c6838a2fb524030a281709a4fc8aff53ec2f01eac8b0476095d62a2936a95b3e86f1888e4e8569dcbf9a67f01cf7fd8f
SSDEEP 3072:NxpfGuA3jxPZjlgGFOwsLWNM7aa+E9wNtj/RpELtcoEM/XlbkfbwHv4nZv7Jlho:NxpfGuA3jP/FfSWyfJ9y/cL2Th7Jl
TLSH
T1CE640957A7250CE2E46FD03EE85A8412F572A45503A3EFCF07B4821A6B1BBD56D7EB00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sharp-win32-x64.node

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\sharp-win32-x64\lib\sharp-win32-x64.node
Size 423KB
SHA256 afc813593f255968ddae8f1d66557e0f96484bb374606e4eb2267a7dbc7cb25a
MD5 671cdb967cc79774146da9fde5e0b322
SHA1 23fb09dde3fa1820d48f80ae2673e08e502e8a15
SHA512 1a716a71a64d159f777e5c0ceefe0c0b253a9c89ada17d83c2f777cb1596d0342fddb3985e04b431c41ca25e4d4a55c2d7b721294a2c62dd910e3c0b4f40d0bd
SSDEEP 12288:FSrXFko1ziH8hriRoWQb+AujFRNI+x06x3:FSBk0echGlK+dHTxn
TLSH
T1D9947C2BD3650476E1BBC17DCA978502FA3238054372EAEB07E1DA655F137D1A63EB02
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\sharp-win32-x64\package.json
Size 908B
SHA256 3421485756b0a25573ee62e147a62908608e3014a2bfed64381473a22e9351d2
MD5 a7d30ddb3a4c4dd859687a61665b89e1
SHA1 03e703f4e13551d7b711e5a30cda3afb0be76ae4
SHA512 45e9e35a51bd1655e0691f1a8faa0733bb0bb246ebcc00604af4f4cccd0aa882892a98bdd1ac1bbd9a1ee465a5de782a5ac70fb27d9aabb0c6a9c205b79ce0de
TLSH
T173115927D4A498631AFC6A74AD2D2399F3112F2F05754C8B38B2661C1F6211B219ABAC
MD5 SHA1 SHA512 TLSH

Submit Download

versions.json

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\@img\sharp-win32-x64\versions.json
Size 594B
SHA256 e823074bfa33ed7b1861b797dd3c60d7ef8c34cd2faa9a7d22ec32dd6d6ad8ad
MD5 614d1fa12a1279b507a9926fd810534d
SHA1 db52d26234270a20b5b52cfed332b20ca5c68fc6
SHA512 13bde9d31a1c25ddfbc542a3ae7eb13950ab22f45633ccc4bb0dc8997065865580cfb74b829d56831d8305e8cfc43915f05195ddd58eddc97413c9c97a4c1e54
TLSH
T183F0F036E70643A3E0D44294387A4B8404D98C9B854AB08C13A72911E94CAD3717A87D
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\@koromix\koffi-win32-x64\index.js
Size 52B
SHA256 f9991ec70a0f775487ffadc2461d69edd1555e3d9bf80de0bbdd2eec7d245c49
MD5 9ef0f57aa4c79713cd79def89909e55f
SHA1 380b8f5c86294ef42f983464b04f98f16c44a9c8
SHA512 997833faf54e78b3da0a25c31474c4038edca84e730834d4789b498421f479193d8166e36323ffa4f733518e9e779414471ba9b143babba0ea2f5d5104c36423
TLSH
T1BA9002461690F199A2684594D3D195022C85D4C01C094B0145058DE51C548808905CA1
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\@koromix\koffi-win32-x64\package.json
Size 644B
SHA256 b6de93190da0ae6507dece77198436c7d84f11ed2dd0427dd89af53bc4cb26ad
MD5 74c502f89b2f64a178b1f73108a3b6f5
SHA1 a45fafa0889653d498ba51b2f2d02782bd00fabf
SHA512 7801ae26a09166222c7e1751c9e1c73cefd6a57a085120a243aaada5307c2ce8203a33a788238ec7f7726df53832a1ba4d299a431e83a5d6bd83a623e1be8db1
TLSH
T1D4F07873CC340CA32B8418A4A89E1085E214011B4CC4BD46BB1D9A1C6F9C4FF16BC26E
MD5 SHA1 SHA512 TLSH

Submit Download

koffi.lib

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\@koromix\koffi-win32-x64\win32_x64\koffi.lib
Size 1KB
SHA256 581078774d824496b8250bf436f47ef80e1694700c83955d9e9475fcfaebd980
MD5 d7891b9a2a83144bc9dd14cafe54f6a9
SHA1 4af3facad5abb9d60171fbd4f3404b324e84f18d
SHA512 4f121daaa70169ee54ebfa7bd3ea7d6ef32e45d808dcb1dc4b5bf632e9b0a5706bee0b2a2efdb7b187174f999699c9b8ec2be3f2091c90520d6d670ed92dd2a0
TLSH
T1EC316B9AAAA2D88BF83C863D75C2E780DBAC50C057434F6F3A0C04D02FB5F49A5C3469
MD5 SHA1 SHA512 TLSH

Submit Download

koffi.node

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\@koromix\koffi-win32-x64\win32_x64\koffi.node
Size 1020KB
SHA256 939156f310bd7a7d9d1db1b5249a5d135739b049c24c79fd3c201701333ddbf3
MD5 4027742348f5f33279eb8b35c0ad3aca
SHA1 5a3b568495778b0579071d7f87aaa8d5384d93cb
SHA512 e9481710ae07fcded014f8646471990404dd53002fa4ea0a803ea437475767096ed5f1bc71dda307fa724fb388587943ee0d0a9b00cf8a680f72e6191de03586
SSDEEP 24576:fq0AtRFRz9AT+VCOOt3rKi86ofR2V2Jnl9l8PW:fqRFRxQKz6U2V2J8
TLSH
T19A25F641F71A96E9C45EC0344B7BC7113921F84A07BD68DBD68CFE993E126BC163A2E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\LICENSE
Size 1KB
SHA256 09856b52897c91ab67e7456ef43067019f31dfd3b87fda72e655736b1ebdee55
MD5 daaa6378e66cac5c1de3eabc51c6020f
SHA1 af2953c8dc440c83d917e16ca36146363a283af0
SHA512 ab76e13a535d397ddd8e33caf39fcc9cbdc8b63cb8c5de70e4df328d4a85d19978b1da0a52bd795a2eb77a897ac2ede8aa2e65d17bf286e1eccfcd8ccbffcd4d
TLSH
T1FD11B91E73510B72189A13A055786CD9F23B715F7A5F2E84246DF341233B06CC1FB840
MD5 SHA1 SHA512 TLSH

Submit Download

better_sqlite3.node

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\better_sqlite3.node
Size 1.8MB
SHA256 74a19708a559c80545b77f551b9bc9ccdc3ee205798d1946b929cc069073b063
MD5 26fa57cd990ab96f342f5b99710452c3
SHA1 478b42b94dbeaa8b7cf04643c7107c8cad593c4a
SHA512 3878df118f864c0956d8c1cca9883c233f5a0da10798d80b4c6e25979c7e97d17565a3a61431335414aff2076870cfe79777be61e3bc7127f5521a0810b2a24a
SSDEEP 49152:RNQwQpWTWl8jtGzItkc2HFpz3VIJ+Tg4:RCIFuD
TLSH
T1F8957C4BF2B400B9C1A7C079851B560BEBB2B40517709BDF1594CA6A6F63FE217BE324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

common.gypi

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\common.gypi
Size 1KB
SHA256 e71a565cd7733e05efc3a2792b54e260126f03f490325aa2a201202acbbdb315
MD5 bc44eafb20590feef28f6382e0db7ea7
SHA1 db26781b95d0b3e5d97371b8be96d842f3e7c365
SHA512 c8bb9777d8ba552668cda8e21bd5b7dfd57077b1d944b3ff2ea36502d2f2883374824f0e01ac57f9ceb98c9dcdbec3cd8a6c6d0cb8c79bc627c0d20cd34f8f26
TLSH
T17B3187B404BB098FD0AB663F905E6448A52985A30D3C3F74B15D048D0FDD48E83BA1B8
MD5 SHA1 SHA512 TLSH

Submit Download

copy.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\copy.js
Size 897B
SHA256 05a2bd41dbd96e33e2fc6cf4bcbc722b4bc8c529813b882f92113d7dbbbece67
MD5 722c2b2dbeee143a14c7ba04edf8e3f7
SHA1 88321c5c15ed00c72570b28e8183b2440bbf6419
SHA512 0537a881c397d0bb0836ff74a881d650d59fc151f0e4ccb1c4f5a9fe84549dc9753b886b3e14534c551c167ff702fae71b58fe4fe90c78b43ef05a4cb2761855
TLSH
T11C115CCF4B4A2678E3F2B7C1EE21E94E046442E47A5A0824C0CC1DC139AB15A78C6DB6
MD5 SHA1 SHA512 TLSH

Submit Download

defines.gypi

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\defines.gypi
Size 1KB
SHA256 029426d3d6528d56ea75682a67a49e48747ccb7439faa75107601d4e2cafabc3
MD5 df6aad70662c3051d98ee622adcd9c53
SHA1 24c8f38b88987b4a41aa325ce5d08fee3be7b3e7
SHA512 58e98874dd6c16d5899558a6f08218c07c52a430b12c8aec7691fe0ee504316f53eb49e6e38cecbe7d32baa28e0c5b74fb12dc112f55b2b1e115c8cfdda85b51
TLSH
T1532144B51B575A0D36BA141BA43C850A7B84E2AB0F3730407050AA684FFD8FE08364BF
MD5 SHA1 SHA512 TLSH

Submit Download

download.sh

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\download.sh
Size 3KB
SHA256 cc2c1539a4c906bd0ec38104264f9bc1d45120e79de8cc595c29a2319d5c4628
MD5 cb7e3101f3677fc3806f8669898e8644
SHA1 211963816c4a49797f3a6230d829f1bd5d22fcc0
SHA512 686a80c83893a86103ad086b271e22613ad49debf012bcf03b7af21f7caea0fea0559719aa882f265e7f5902c1b4bd5ae1302008b33f64b2196f51e1b76f9e7d
TLSH
T1CF8160F7A789077D24C70069A12D62CABA23C32F8B74784840C9566C4530AE45FBADFF
MD5 SHA1 SHA512 TLSH

Submit Download

1208.patch

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\patches\1208.patch
Size 597B
SHA256 5d1f22d69fee3551b70a7b7b9b14be43fcfd04dbc8683233667abfa75905011a
MD5 c26f21402ea045fee5214a2af12b8d25
SHA1 9adc0b47f388eaeb40685151ed8e67da4d3382ef
SHA512 3f149123d9000f1e3e285125ace919a25eeb776343c4336671a40b752aec513099976e3b0342faaf306997139d445050e456554dbe05a70fe3e775f57ca97750
TLSH
T198F0F68255F66B9371EDD170811B3DC643DA222CAAF3088E364C5BEF1F4D28D8759C96
MD5 SHA1 SHA512 TLSH

Submit Download

sqlite3.gyp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3.gyp
Size 2KB
SHA256 a009b8f80cf0a944eacaf71a84e590504f353fbd8f8b341138d0c3094e372d18
MD5 ec4186a11866324c718f05aa7070de29
SHA1 78f251a963af25d039dcd82c38deb31723b04a88
SHA512 659279f346bdcea623d26c0619b088852137dd598677f3abf6798fa086292fac6d78b90071d116133162ffb5bf3c275220468727a8e2c8a3ed0ca3aad7dc037f
TLSH
T14F5142A8197F1309A5CA6A7FF95D82C20428A117CEBA3D35B88E44492FED1CC1233F74
MD5 SHA1 SHA512 TLSH

Submit Download

sqlite3.c

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3\sqlite3.c
Size 9.1MB
SHA256 60d2f39a3726cd6b9021da6f4e868608d66fbb6528a9f513dc8ffcc640493422
MD5 f92a8c1bfd211b95e80be6424908e772
SHA1 273ff72bef0b1c508f098cc50926ee12a48a79c6
SHA512 158eae3da7d42150556a49b01ddbc1a3c98f276f104305076f29ec8a446126ac593f709c6aa49c24d96afc5150a848fdca37d079cd95b3c493c33e706c4b0cb6
SSDEEP 98304:IY78z2MfMdmL7dAtP6bR3PswkCld01NkeVGgbOLcm8bbSBdolTNYqkTc8GVDZTj8:R8jKtP6aFLVS
TLSH
T191A61AF53BC30E2760D38175A76F32D0A219C02F67B4D0947C5CA1382F58AA5967ABF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sqlite3.h

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3\sqlite3.h
Size 674KB
SHA256 9e69a1353a4288450b0d5239ede11fc7f1f4c8e5eb07491fc8317eacb5b7de7e
MD5 3ac3102b99aa02f4f5b084ad943dedf8
SHA1 e44a6290f390b3ca7bf0e8e16aae647c799ddd9c
SHA512 b66569d963d3dfbc6fb7d135bb4c22e3a0eebb711909788c8bb3b34076e0c931f56589cb4353146ffd1cd921543577e5cd49095c424245c530cda39c05f9367e
SSDEEP 6144:EjuVMvmZCuA9CK+rvym0kVs3uvYJ1KKzR0XXUDBlZVurxqc+uqwdzBzfJ7LdKwti:gA2InDyLJ4YnKKzQkjZVQb+6FBhi
TLSH
T11CE4A5B737032B3A20D341C1D16F53E49729E0ADAB715064BC5CC1682B25DA5A37BAFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sqlite3ext.h

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3\sqlite3ext.h
Size 38KB
SHA256 ac9645e5c9ff0cf176efdd6e75cb5e98f46295d38e02db5c4d208826a39ab4be
MD5 162f3e108e18fc2306d19ca7ea4173da
SHA1 8aa6409d84caab65654fddd8f6b012927b7619a5
SHA512 b6a838e9802c5e694975803454f5ec94410d79d1228722e981379a3d3e78d4ca85984325554ff1d7f497bdaf887c5fedde035479b3b576c4c0d9a8f38fa8245d
SSDEEP 384:Tuz4G/SLqcMgCTmTgVYmLEjMhN0/kvINuYY04vFJzIAx:TC4NH7/T4YmeM7nIYYYAO
TLSH
T1130365D36B93105E74FBC542C19B20D14016EA33FEB3A7E4FE1DA8280F52665A0B65ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

test_extension.c

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\test_extension.c
Size 587B
SHA256 948af88dbf356835f5496c1a3d047fdbcc58f3717aa9bc94d0943d7de2b7cf5b
MD5 e5338de97cb9fffe3bafc7534c249be8
SHA1 9430bda15ed8d152f41f1ee83c096da50c80d00a
SHA512 f336c5bf5f2f93e13864e0f7b71034009592ebe3504f6bc4822983ba304cf71d1040ebb484e155c7b03c43f999908e8fbc25182681ef69edcb5169a94975c3df
TLSH
T119F0ACF2270F24E934DA8421C4BF90DDA220D11CEF30A459E84601C00E741AD003BE75
MD5 SHA1 SHA512 TLSH

Submit Download

database.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\database.js
Size 4KB
SHA256 02ea23bdd23d7ac5de0675a2f32fc686e76d5c6a32bd3e3891f360e72e07f61f
MD5 952ebcfa3d8727e8b1d7b681c9f5bf32
SHA1 6168b5f5ed77669b3c6c1f1d526f0eb116bd3a43
SHA512 d2dc310d2e4a491903988ed88228d35e9688e48c9b6180c797fb58f84d1105724ab3933ade92be0e73c8a27fb6f3064449bfe00cfa1dc92919ad53a81af2680e
SSDEEP 48:+FzYIUZFeVxWy3h9zxIEXMOK0ZHQZ27euTqQaqE8E+LC7yIGrtRxtjFvcLd3s03M:ac1ZFjQBG1oQZi9qSvNRBkLveomRz
TLSH
T1EA818388DBF5611247EB30D4A674A48D6234D27971AD08E0D8CBC3F531E60C9BBE3B66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\index.js
Size 110B
SHA256 82db11c4ee43a41d859988c5db42c3771dff565371f94bacbd1e4d8d6ceb47cd
MD5 26660b3078523a953ee252b4e86e1c8b
SHA1 f7c22bdc8183f6a9cb73a9b4a735a5bab7ca01b4
SHA512 d4f32ba712ff15e8b6a1634eee089057a4716318b90e932b95a1c1cd30945ba708e7e725316fc824107637d2e97a2a64193ae81c0a3d2484651f52122bace99f
TLSH
T16EB012CF1BF0B18F26A44184E9618493D8C2E466841A40208F05CFFFA484CC42FE2DE1
MD5 SHA1 SHA512 TLSH

Submit Download

aggregate.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\aggregate.js
Size 1KB
SHA256 e9f74eb919ec93fe089c95ddf25a98f1f631c80418fa34fb2346ca1bc29f1b82
MD5 25fdd950809b2b22d0ba6917fe014c35
SHA1 5555b3223918668b5bf244e892b1d6a258f0099a
SHA512 50516a2d2265513dd7ee727cf9cf21d118601a0ee2b9de61111c6f5fd8933915f3029ef6f764f7803cf5438725c6017002d7f58cc36988d97cc1bdb805dd42c1
TLSH
T142412121E2D2221605DB24E07097F909EA7ED720B54DB4F0C92EA7E910D1DCDE9E7A80
MD5 SHA1 SHA512 TLSH

Submit Download

backup.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\backup.js
Size 2KB
SHA256 ea29d34992bb02e006d0fdeda9675ac5d2bb227aaf57468decd997e9fc9c7dbf
MD5 69638dc10c19961a0c05350ae333d6a4
SHA1 5941988b67c6fa083358002ba36538f1e39ad03b
SHA512 495ecffdadbc8c9bb2e886f9f7a93668fa5b2192a0ba79a7e1a9d3c2640e0520e39f2d2c6f3a26b55c72ff882bff43ed6439c0ad7c7622461e6ccaf1ee8f119a
TLSH
T171413158F39E5169436734C04490E00EE93DD6B6313E09F1AC8953F022C66CDE9DBBC5
MD5 SHA1 SHA512 TLSH

Submit Download

function.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\function.js
Size 1KB
SHA256 f431d49303b8bbdc044b1f1b455bdad21fc9b74b007de0acb22f08f25b4febd3
MD5 1036ce624efbb9fbbb387fec25fd1bcb
SHA1 35395f7ef4c18b845582b9289bc802d87c9e3c11
SHA512 7d65a4bc5bf5c9b97dce021cdb8c888cf975ad24613b12b239db1e03a98dda89faf7b1b204c906f6dde5439d22414d9b4410554d01eea8fc121287ed8821f9a0
TLSH
T1E021C911F2A6214246DB24E0B0ABF909E97AD765B44C74F0C58B97FC40A1DCED8E3A81
MD5 SHA1 SHA512 TLSH

Submit Download

inspect.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\inspect.js
Size 174B
SHA256 4975a78daee850adee62ba98719d0f223819a0ec135a07c0e302994bd8dbff61
MD5 21784edff107eaec0e9ef7e66e83552b
SHA1 6b59caa4cc8a568a8ed3f184a075d66c68f17d08
SHA512 9bf6d36dbc01dbad11d5d01c0b662620bf6c0cebd85c0065882e8ec57e3304bc4d301add25bf57ea425a270f3ace6a44fcb958dcc8bf993f411eb81a5369adfa
TLSH
T125C0800973F1B465554F30D5955FD00451E5F0242CC450420D1DC684CD708697F3790F
MD5 SHA1 SHA512 TLSH

Submit Download

pragma.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\pragma.js
Size 536B
SHA256 8b1c54475bd4340b15e25c50d53d06308be65f8f919ecbe4aa9d285ca859ad5a
MD5 9354074a096ee1cf58905ca8dabfd60c
SHA1 63e6c02339c45c252ae3bb24267610a636117eb6
SHA512 32bdf8866d1c4e3db8a2ca65df2c1bd0d33c064d4cc526e264587cbf9c09ba7b97c8adc430a9dc019d9863e0e90b4318442ffb5cd08e0de52cdd4f081b5150b5
TLSH
T155F0C91602F245530BFF14C094E5F534F4B7C668B50E94F0D99E83FE41808DAEA83E95
MD5 SHA1 SHA512 TLSH

Submit Download

serialize.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\serialize.js
Size 625B
SHA256 7a10ee5c2735384b7f0c361811bc6d017db29f62b203fd3c68a35f667e2c2605
MD5 41cfeffe67a2975f68aeeaaed0bf384c
SHA1 321f3f817bc095c34b76d060d706ed2cc48f204d
SHA512 8a0ad9732b5a07866eee742b2e884e521111f213af9ae39ebd92fa029d88f087c43f8826672d1fac5c571d14b284f20ae25e12aa4058a7881d6fd5e93c0b0a0c
TLSH
T1F5F0783A3365564B0997A0C050E1B429E9B5D324312D68A0E989C3F511D48CEEAF7B9F
MD5 SHA1 SHA512 TLSH

Submit Download

table.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\table.js
Size 6KB
SHA256 97c42d9ded1aa96c7d916b5b92f96b4e59581d50eaf629cd2c7afb78ff26a9ea
MD5 43137a36158617045d106a2ff534edaa
SHA1 f365ee98f7e36d1bab09e58187d467dd5f73b6f3
SHA512 f4330d881ae76d41083d3ba9d0056697abd634638a9951a4ebe4044fb79eceff4da034d22d9ba2ad4cd1a208fb0ec1c47855da781d9c9dabc34979f6f7f9eff3
SSDEEP 96:bJx7JBAUU6VtWpzwukGy2K3rN6gYMNEXxulo+yrgrm+IttSXFJ:bJx7J25PUyKb0+UklovOQk1J
TLSH
T18BE12308A7E17A13404B7095BC58605EEDBC98B27C1C48F5B8DC45E92491CBEF9EAF26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

transaction.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\transaction.js
Size 2KB
SHA256 bc8624a3ef689d8f78e5669020ad121e17acbc93b1d5ee5afe26860b1084c66c
MD5 6b77badde74e5a5b854041134e62041d
SHA1 47f5883e26f1aedb2bc1557cef9dd21c26e0e0ef
SHA512 d5be3aed74a9c9a948afbf6f03c19e21ec6d5a86f5f277de85d9d7374136fab4cf68bca1a6e752e5d41ba6b48c00577ca26ebacabd5bec51491da28affb3719d
TLSH
T1EB514312F67ADE7063E23088FA0B630EF5299A49E03494B0E760EB4A3A958CD8117D53
MD5 SHA1 SHA512 TLSH

Submit Download

wrappers.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\wrappers.js
Size 1KB
SHA256 a150a6271d23f4e5f8953b129f370ff096c7cdc4b812afbf080a6cf4ab741bcf
MD5 9e2ba6058f66127065c27ea3e81b8e68
SHA1 92346423dab9536ca4afa50e7ef171843d5eba5d
SHA512 2b6644404fea27117b74f904bc608fa42e36e3b100f51010394ef917df7c48f40af018e5b06243d31d7ccba5ab05cb32541566e79775df482e09a107524d091d
TLSH
T187213A8A72E6F162D31530309DCFD184FCF9B861694C64BCE47497922DE007942DEDB8
MD5 SHA1 SHA512 TLSH

Submit Download

sqlite-error.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\sqlite-error.js
Size 717B
SHA256 2582d61c27680dead168543f392eb102be621dfbef282a4ca4c7c21aa5e7c75d
MD5 e1372372ca8f94dd66666d886a81f9b5
SHA1 437034e71dedf15013967b540db157cbe3eac3ef
SHA512 5bbfce635aa1b10b30f1703eded4256224500705e3b14c7cefcd522ad703596d15d6cfee7914dd70700827afd01a50d61bef1954d29b8788bf6347f96e9cd8d4
TLSH
T1660168C69F7099BB01E15884FC116806996C5678C021B5E4B6C8DD9F2DF0087CDA56A0
MD5 SHA1 SHA512 TLSH

Submit Download

util.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\util.js
Size 331B
SHA256 92b2e39e2151b43a2252e10b6d6de876ecaf0008336a4fa1dfe1317b20f1916f
MD5 a5d75fb36bedb4938a8b9dc6525fd515
SHA1 b5270aef455a7de04d31d19713ed7dfceb55fa06
SHA512 c181b25f5b991826159125a4f7af8ec0f8a7bbceba674121f144f401295670136daa64598d4e0f48cb8ea2849000ac8e7f59881220f6a30a4905ce9309db8067
TLSH
T1E6E0261BDAD2876511AB30862E8EE404DE6CD2A6746854F0682AB64970C84B4EA8B25A
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\package.json
Size 945B
SHA256 35f5841195912569932e7816ca09d03f6567a9c37a6668d4fdd450314d46e24b
MD5 1c385b7e6e66a16946f1c031c3b9fd46
SHA1 7d3eaae39c73e9d37c913de6da3a9b3593a41b51
SHA512 b69406457e1f218a93458f6c521cadc9e81eb179165e1287509688a157dcd770dd2d507efcad8d708168cce687e3a0035391e1087df1f932cd83d91a990d7a43
TLSH
T1BA113AA0CE258DB32AC569D5ACB91182B22048078CA5FC4C3387466D5F4E4BF21BD57E
MD5 SHA1 SHA512 TLSH

Submit Download

addon.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\addon.cpp
Size 1KB
SHA256 20f19f480ce060900521cf9510922e5ca1c8e76936f07ac2916f316e549a0190
MD5 209775309a8c12a8943c64d77c91413d
SHA1 c3938ab2752829cc5570416beb44a1d02f0e9b03
SHA512 859c54263a2192e6322a212091ab64e909a5fa48e1c861d385966401c080a32603354219aeca796f70c13411892c90607c2a075492376a9cba71a4c897a93dc7
TLSH
T1FD2101E2EFEE981B2EB96058C967C19DCC1896755BB90C57CC13E1182C74059D53C865
MD5 SHA1 SHA512 TLSH

Submit Download

better_sqlite3.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\better_sqlite3.cpp
Size 2KB
SHA256 01b2333517538a24919cc0b916c5a436561d7f712bac7befb6850e9f4b042dc5
MD5 318041616600cf3ecd982be52f3caaf7
SHA1 b5553f47110347a5b9e113b74cacb9214ce937f8
SHA512 95a0da2e8f26c065bd19445b4dcf52142f28cde7c1b90f798490925adab5ca0f7b4850c2054864c23577685464502a1584b83566672da6deec8c4c62415ec985
TLSH
T1FA51D26BEE3D04E38B5F59F2B297858099097088934978251C9ED6E0F6C9CE8F4DF714
MD5 SHA1 SHA512 TLSH

Submit Download

backup.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\objects\backup.cpp
Size 4KB
SHA256 16a67102c49c9312eb1deecd08c27064325840df51d6957fe134b871f5d8798c
MD5 4b3e383a7b8cb932613fc836964ed647
SHA1 d927d4f59b26ab6d2a46209bc9687b3c74cc6d6c
SHA512 f7b7cb2a9f588afd2d9a80e14a34434fb40a1e884f5cd3144391301cb2eac0dc2565aee94b651af3aa9ee4960da840b10a8c03c987a6d24a85035851a112df51
SSDEEP 96:plUB3byOOHClL+W4Pi8E/wFZpqsORzXNQ6v:uboHe6W4I6qsORz+6v
TLSH
T18681975EF75BA81A3CB3149DED66478DCC2C5A08623D1E47CC66F2EC1170860947E53E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

backup.hpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\objects\backup.hpp
Size 705B
SHA256 02d57e03a1a03b3f8bb2fc503fc1704d4143b76d939fe37230fbb3b44177c44a
MD5 0d7b7cf24a841a0cc3a158ca68ecbeda
SHA1 f9a013e3857a45341d97d492b7f7fc1594e2155a
SHA512 cbef3f70327be6f57d1c46bcee1bb403a3b02885bf5725f921f622cebaf8e3783be4f4f670db5967ae149b3ecb1ea51c4632cac4e3a466a57606f3ac84156753
TLSH
T1EE019C6CFF1AC47478F228CBDE8B4191B81E03253ABD9EC1D81CF6C42C52050A507057
MD5 SHA1 SHA512 TLSH

Submit Download

database.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\objects\database.cpp
Size 13KB
SHA256 081c514fb0a472a0e0962f0619149c187b6cf424e09baa7f39cc5246c17f75aa
MD5 f21c536ac1d5bb03e9d94aaf109d5d1b
SHA1 320f8e72989abbb9543bab5b1f95c71b6aad8c1e
SHA512 ae9477edef98a331691c5c47612e6edbf7d5f01549376930415b7139df405daa04a82f7fc88f934c66d3c8e7e52ff47d936207b5e2c1b45327788166ba84d295
SSDEEP 192:0ARvJtwI6MnQGhrb7pSHZizMgY03hoPPcnKucjFK4aIaYd+ex40m9FPRkz9nWiEK:HJtndQMrb7s7XLLXX95oi
TLSH
T1DE52A541EFB77E1731BBC098E8264D5E8C24F24C62BC1D258C7AE66924B5894B03CB76
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

database.hpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\objects\database.hpp
Size 3KB
SHA256 f47ab5d6bb775cadd0b2b73c4fcb6faf5cb2ae783a049ff4691fafc5d29a0bca
MD5 e433d5ac95084876861c6e6d5d718017
SHA1 cfaeb9f5821d31fe0d0202ba400ae8889821195a
SHA512 cabb79f8a4e4277bbb5c69b6db6a9394bafc5562f51bfb37ea4006fe4429d923b4e996c786060da203c18c8bc4709defcb538173bd755dfdc68dc9f47064bf04
TLSH
T1E2513F59F72AC5657CED14DA8F4B01E1FD26126936B14E91CC2EF9A4BCB3084A53F092
MD5 SHA1 SHA512 TLSH

Submit Download

statement-iterator.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\objects\statement-iterator.cpp
Size 3KB
SHA256 6ac791fbb786fc498450e843f2a043eddeb03093eb6b31012a04ae7b84a8d7ab
MD5 3280ce9231eeaa600041c81a5de41e1c
SHA1 0eb4ef8d4d569798b0fb6a00ccdcaca0d2683fca
SHA512 b62341b5bd701096012bf3a34539dacf21d0622ed8c3fd201181c8d631ef8abaa0e79b5c1d368aba7ad681b5da043e432097c44b8b8c67c6846ee0c8ffacc42e
TLSH
T166613163FAF3EC1998ADA129DC9D4AA54C9601C5FD4C5C05846D086AFA7B8F0473CC36
MD5 SHA1 SHA512 TLSH

Submit Download

statement-iterator.hpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\objects\statement-iterator.hpp
Size 1KB
SHA256 c064f10ad6bca99154d4f5325e187978d4c6d6cc6fedaa047a4d2f3b4b4f9655
MD5 547a24e1556aeb48907aea0148be644b
SHA1 41880fb8b27c927ce3f70fefad22ab1599df422b
SHA512 43c7cb7ce7cd3fce3956e4c306336b56d80b78468b90deedd9c524b9256a8f93339140f234908e4c083ae766c57a6b7b983a0a0b9aeef6337e020dade647e999
TLSH
T150216315FFB7C185AAEC8198DC1F06D2EE06019D7F6CBE6CD81FD4C46D56891217C422
MD5 SHA1 SHA512 TLSH

Submit Download

statement.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\objects\statement.cpp
Size 12KB
SHA256 4875a4d1942b89b1dc715b50f3f01e0899530a0772d0fef6f26c358d7e3d12a3
MD5 f1cb368c8d479251f3804379199ad8f3
SHA1 a87642ae847becbab4c48d3a8fe83f1c64d49d11
SHA512 22cfc30939ac6b0330f7e8bf10b4cefc3e7c095ac602e4a50e81e4221e432a66e19ddf8de0b8d1cfdc33c9d715a4e3690a1b73d6b365f308f1dff2634b16cf69
SSDEEP 384:g+H4AbnE06iZoku8ZRulF74U8XmNRPat937kk/nIM:8AoCokoAruiHIpM
TLSH
T15E42B743FF7B382A75FEA058F86E09D9CC18629DF5682C58AC94D13C5868C75ECBC612
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

statement.hpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\objects\statement.hpp
Size 1KB
SHA256 3dca186418c62d81f4b9170904fdc02e624c3d76a0c0c61e6aa95486799808e9
MD5 6754aca58cbac788c26e6b41bebde25d
SHA1 10c91fc0c3ffd1c87671b21d4a606da581929141
SHA512 7abb1eea05f1913607b269f27d8c3616be14a29200432e8a67123ec4a7fc5e68de3c18c99b48529044ebb3226b7c6b13ddff924c06ffb3a8ce1c8f62a497dc95
TLSH
T1CB215929FE63D124BCED60CE8F8A80D0B91623A43FB65D81DD2CDD842C26445AD6E19F
MD5 SHA1 SHA512 TLSH

Submit Download

bind-map.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\util\bind-map.cpp
Size 1KB
SHA256 7026e107a7f662b6460fbd05e91d9594f5114ffa69de7a8ddb082911f6e90876
MD5 c50b45c62d55f5e31d5184c53d386a61
SHA1 685b072ff47470c7ef87cf0c54d47a6008909c88
SHA512 853639a90d1f924e0aabbde488d5c38ab7a31b00776170b77d35deb41273ef282e9695482a4b022ce6776862dd31d73232c58af3c24ff4e582f7cba2fa6a972f
TLSH
T17F31CD23FFFC59A51181D1AEE73E0AC0693D017673982D8E6C6E013495C3A31D2BDA99
MD5 SHA1 SHA512 TLSH

Submit Download

binder.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\util\binder.cpp
Size 5KB
SHA256 64e2ebe910f2efc1d7a847672565745da2c4f5656d951033d99567e7593409d8
MD5 1a8fc22dcc2f099c316a4381a647a579
SHA1 1e871c5462ce55c7b1c97416dd092f8defc7296e
SHA512 932343b8b7f35474332104de75838cf5419bcc7e933c9e498a33ad0a1f63a61208c6e9ac866e23045e382e55ac082b009f256cf48f8473fe7008e9de15eb8096
SSDEEP 96:vxbmP1gU/VNAReKJxCUxJBNOU0EmMNW5TrdlILDY7aNTMqJSCCJ3+ocC:Zo2U/MReKmUx1OU0EmMUcvY7eT++K
TLSH
T1DAC18441FFDD838B059061409D140DDEFB4D5AB5B2B82CEEECC8D224B4A683CA5BCA52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

constants.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\util\constants.cpp
Size 8KB
SHA256 bbf4a3f983631f01f723627ee0e897f92b12cd6ca3e8b8b965318931bba0f2b4
MD5 822fb4c51a7e189f7c82b7ad01f86f21
SHA1 0445b00e224a9ea5be2a34f75cfec292999036c0
SHA512 f55639a101c23101be488bd9788f0cbca42048839dc1871e157eb78a17143443c84c93e34094f831d59cb4f234068fe2aa07c08343158d337b42ec0775dbc68f
SSDEEP 192:HbPdxtZ3Blf/DT/73zH/qwt9yKyg/mXdqv+j:HbPdxtZ3Blf/DT/73zH/OK5/mXsv+
TLSH
T196128A78DB39141D24EB8969F07109ABF569C44F0BBDADACED5B5C4001B58F0609CA7F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

custom-aggregate.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\util\custom-aggregate.cpp
Size 3KB
SHA256 742d03187a7b8483c9f42bb7b77ed29d0f6877450584fba2662164d2b8dd11b6
MD5 26327392f1f0d4df88116c7fe3439a26
SHA1 779cfb5958e3bd6666a700069c22eb249ded4a13
SHA512 70197f62f344b362be10cfe7d0c900ae4d3605b49b39fc93698e03aac720f7cf18d3a8d86329ae19a60ff0c0855bdc45dc1ecf6e1385b30f46e05b161f713771
TLSH
T1528175DAFFF9C057BBF1E82AD42F0E85CA5544DDA2B92D19ED8AC5113CD053C02BA860
MD5 SHA1 SHA512 TLSH

Submit Download

custom-function.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\util\custom-function.cpp
Size 1KB
SHA256 6a1f826df2cc2c402d8a3dd747a57dbcedb52fe9220a2bbda6a5e01f038b13d1
MD5 561ec79937afc2e00954777f6847243b
SHA1 2f0d56ea528bfe088af8dc11edf6206a1bcf1d8c
SHA512 a23c7709ee0d3182445b8f253a44f11efc04184610ca1f0b47fa00f3c171f7c4664a50132cc3aa9cc34e4741df4d243dc3b38369a14ac2cd8fa7e8fb41a7d762
TLSH
T18831316AFFF5D09B37A1A439C02F5E81CC35809E76A85F48C85FC41428F043C9475D60
MD5 SHA1 SHA512 TLSH

Submit Download

custom-table.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\util\custom-table.cpp
Size 14KB
SHA256 7549b38f24b7e69e78d407534a5cde8814a8a08628a421b122644a43940e0aaf
MD5 a8be17a9e4c7c88a42182f479265c764
SHA1 d9b02a6c6e378f44fc55401e4e7b80ec34c244d2
SHA512 4cf37ac03b85f73dbd8eecad2b97e46cda06f7d82b891c74b99e16f4a9ba36232972c90f66880c61c786ec817a1731dc7bae42c55bba084acf769cfb8e6dc01f
SSDEEP 384:LcRMEixEROtOBKt6Qb4z1okopMP1IJpDV8Sp6LioUBcD:5EOACyKt6ZK7pM9upB8Sp6t
TLSH
T1FB62D874BFEE993B2A527014A15D08DFEA2CD06CB3986E8DFC1F8558972587C81788F1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data-converter.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\util\data-converter.cpp
Size 460B
SHA256 3cb73d0911e92893abf840752e9cfd6baded604d49b39ec4000599eec7c8c594
MD5 93da4fad536f5cc2f37e76b158ac93e0
SHA1 57068a0b0f7af70d7176811c2b69c6346adf92b5
SHA512 2aacba638b1734e7a27048db3a7e6d9182b3ce496f550103238815401c7622c42871993cba630fabc793775e2c248b7a0a497bf79f047c5992b9be1674f964b3
TLSH
T1B6F09E3B935C096F91A1D089CB54D81B8127DCA52FD18D31754A000E2CD069D94B17D2
MD5 SHA1 SHA512 TLSH

Submit Download

data.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\util\data.cpp
Size 9KB
SHA256 74de42f9a0fa68277d8ea9cbaf8ee5f455bbd99cc41297696546c0ec8408c882
MD5 081c3157fc2bc76b0320c198ef93e149
SHA1 8aaa9eb93383f73fb500b6927df8eba5a6a66774
SHA512 174ef9f723aabdda4598a53045361c73ea74fc3bdbd1040a0c4373ec2e2f34fb6da60a8a39b023b67e69ae6db3e02d3c9a16d55cc1ad9c7331029cf564d5bfe2
SSDEEP 96:CpDQUtMf55t1TOP3iwNiLGOOY8urCarE9otGOOYx1eWiOOYE46vt2+t/t625O7Zn:mUAMOnNhu2ao7qMYLZkJQaNOet18
TLSH
T193123363EFBE948E1AE690399C7A0DC5DD045BDAB6A46CECFC0DE2044B11835C4BDE64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

helpers.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\util\helpers.cpp
Size 4KB
SHA256 7b763d2caa40f70bf6726c0f70ea50c1db69c7fa453b3bc2ec19577e99800984
MD5 342818b9196b8d6952b2217345c659ce
SHA1 8cd4b4b5b10f98b8a01d143e7fdff64a6cc5791c
SHA512 9bd8b2a8e39a4fc491ab0ec982714d3a932aad7be0a01db2a941bc7ed8b2d94ab6c3d64e67ac72dd8301a6476e1fb50f9bb292e0872fafc1bdc1b555153ae77a
SSDEEP 96:mbPAGiA4+ePoShsb3hqkfQyMeyEtGyRy3u0TzDyAu0Wdyl90ghoP4PDopwe:yPTi5+ePXsVHoO5UyRMTnJSMugKgopwe
TLSH
T146915F02EFB646D605D281A5E03B0EC5DE14A57E73B53EB98C8FB3A002B943DE179745
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

macros.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\util\macros.cpp
Size 4KB
SHA256 09d5605bb65c8d43c0e235f878cbbffc98d79b1e35ee05b7c33766ce114a13a4
MD5 99d8d17391d296aed276d9a937992540
SHA1 522863cc3d36ffdcd22cf5e63eb109d4a1fe491f
SHA512 3813cacbe2ce315acb2dac122eda5bc221a53b606b55600a3ff266c20056bedaf5225126493550e7dfeb0e20b31a0818909ae10267fb0851d4e6e9e0d96417bb
SSDEEP 96:a6zjLC2y3EUNVjcvFVLl3LEU7wsIrE1irUziEESolvvOpeGeT+0Vclfkbx84:rLf9awl3IRoIUziEES4vvOpeGr+
TLSH
T141911101AFD26D022B37D1A46D3D24A5CC55CCF7612894FC75AEA89C1FA04A096FE3ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

query-macros.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\util\query-macros.cpp
Size 4KB
SHA256 0dcf68c3ff527398ebe0a6b874b38aa23b3fb87f285b9701636c3b19282dde8c
MD5 45ff28d1ab5f73c8bc7f8caec7c10421
SHA1 2fc19e7f000e09deb9c5c8f2f7bed9cf0259b332
SHA512 568f9256e04cf400da1a640e45043e83f93cb5fa6604dbf85d9d5e98088a75370b372abb4b7009b096a4cd5cd81d390d3506e82acd5aff6eb80bbba7d060b414
SSDEEP 48:kLdmms8UOosyen7XDt5B+8v0Dc1+JsSW/dBvv4PMyncFGB28dBaEqp9gg:Adf+ygv+1eMyr28CPzgg
TLSH
T11181EC11FEDB345E53AB80356FBD4092A855B9E7F02C10A8B8DD65181B398349CFD2FA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

row-builder.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\util\row-builder.cpp
Size 1017B
SHA256 d5b352ac4959a07db22a825019286e085910310d6363c61fbdf037e3f32d56fc
MD5 a3d85e4964e2c0836c416e6f3aba1bb9
SHA1 396c35cf298535f38401378ec5ca297a4ab23592
SHA512 828f7bb6d3878bba480cb6a3f6c6057a2ed1aaf2eb0edec8d2f4e8ba641eefede9ae38a1d70ba59b08aba0c55c94b1f155247af97c2db3c91fff0a33f099d3e8
TLSH
T18F117B53FF6D46CA38F26006B47E0BC68C18562F6AC43ADDBCC8A2125541926C5B8E29
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.txt

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\LICENSE.txt
Size 1KB
SHA256 22bcbbbacd739b026a8dc484f62a31484ce4c4e31f3408b60b29b4e41d62b290
MD5 ca42d48ef430db5a77c152e6f454872d
SHA1 6b8d0037509891e3bd2579ab690888a2c8edaa44
SHA512 1bc3f15b1d3fa5e718a866ca21c5f38e837d8d07bd7af8601fc400983bbeb20345503b824c1db396fb062d2e5ff86a1e20da53481909d84ba23e1b377dad99c3
TLSH
T18321961E726007721C571360657568C5F21BB15FB9AF6784242DF346632A46CD1FF844
MD5 SHA1 SHA512 TLSH

Submit Download

cnoke.cjs

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\cnoke.cjs
Size 31KB
SHA256 6f3004eb44c074df7f7f521f25bfdad255fd75cc794b11d1d04f2a712b1557a9
MD5 08bbd3a0e1f89ec5ac4b99d9ae873da4
SHA1 213a3d4875e8dc6b6c2cb999f1986eeac76232cb
SHA512 e18f8496198dca23cff6109babed6a639c1d0ff4d644702edf8b881e8c8b6a72b5698e2baaa1592c487243db720ccf972024b992c0ba7cd2212afb33e1e48e64
SSDEEP 768:hrLDJYIA/IhZziMHOlnPRjcjKESfoeu6Wp:hny/IhZmMHuJjH8p
TLSH
T102E2E71666FB25230363F47939AB94057AFAC6170308D86CBE1CD7C06F9417486FBBA9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

benchmarks.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\benchmarks.md
Size 2KB
SHA256 05f1b7b394380125a3d66b7bc05101f21980d8d78cf5c554d6e2c7f29120f5d8
MD5 8daef2dfb0cb56a615dae46c0a323db0
SHA1 b5309d8c9fc77b39790acb52f3a63b64388408c7
SHA512 63d500d1bf4554193675ac0891ad82fcbe2fc8afd341acd443b60eb2da4b6278ff23d8e746682f2c5738b2f621a830e4c0377bcd7cc6065f6335eae0600ca44a
TLSH
T1C95135102BB2B7634C1302E37045927AF63BF388774A519AEEDD85BD1275C26B59FD20
MD5 SHA1 SHA512 TLSH

Submit Download

callbacks.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\callbacks.md
Size 7KB
SHA256 f1e3f14a1d84a5b6d6d7d6d3015a9859043f4d3773b932d361bc49f08a240284
MD5 37425259c6604de5ab0e914a45af875a
SHA1 ddd83578a0a328da6ca8344b04020f53bee0d061
SHA512 40ace7359355a9d3c8db73e00ec38e46b655541d988f257e7c2fd3bf2777d3739cc6c20ff853ceabe5c8abed4d4201e3a802f5d59f169a59086b06b281c746c6
SSDEEP 192:BRo/4rhoWSrG95jSjKynaojrqDQsGxvqjWlSSl8RFCa3QU51bep:kANoWGIvilIm
TLSH
T167F1A80B631353225C71B3A3544F67F6A23FC8A9392985C1A48DD3A13F9646D9233DEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

composites.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\composites.md
Size 15KB
SHA256 7160ecf9e4796d172de3e62cadf7759a299ec94515b3e6993a494ca50b70f389
MD5 b03f0fb620a68bb64999cbea78a8caad
SHA1 4814ca38fdaac99606400366f36b248c44261012
SHA512 a6dbd5cd905a4ad282fe3fa382eaa2b225557bb9fb091b9d7999309fc6a3198fe871583e77e46547300c1a4a37f77209b81773e20d5ab689f06f11db97bb9a3d
SSDEEP 384:TwVFzZWna9C/DwYE+idncDqEUEiL1Gfl/6DCJJhsze:MFWn4C/EkWcpUEjp6DCUe
TLSH
T16D72EB1727B2B234846212D2934F55A3A13680773269DDC43C8E66707F159BFE272BED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

contribute.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\contribute.md
Size 5KB
SHA256 72cecf31345e1d4e46d564bc4aa5020c5a445968cc2a818b337bf3a1019a4cbe
MD5 5e07fde549beb86dd1bb4cf8e9d40fdc
SHA1 7ff830ca847cfe7cffa59a550b8c37d4ab4dabe3
SHA512 c1256910834d03865b5c87164d480993624c309f556c63bd6b7867dfdc42d2af06ab43457dda8f3fe3fb04decee17f5b83268052d7f6742075530f3553ff39a8
SSDEEP 96:A08TEKY5HtuJIdIWuGT9ycIqycj7ISzJcVi6AxxTLPso5JYvuzCbaSpPu:A0wNY7NaXs7jz6SLPdfzCbaSs
TLSH
T18DC1D877A356477117E001AA760A63F6D36F91BF27C982AB9CFC153C439959280FB4E0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\index.md
Size 2KB
SHA256 9884dbaae3b6614094723767de7d6f68c7d4d938fa65a26cdb8aaa041c69f9d4
MD5 cfb3f60e4efd616a2858628871eb75e3
SHA1 70ea30459f524195626450a8758f79f2b08da00b
SHA512 a5a8b9c46605a735858e1142cc7c0d9c34809adf63f5a31c80305fd218d2c78656aeaaab2d2446177bc6cec57bc49682cda1f5686102cb0575dbff16eeffa19c
TLSH
T12251932B5D42AB6A1FB3F3B37A031397FD0BCA7E35225189B10F010C5320466007F299
MD5 SHA1 SHA512 TLSH

Submit Download

load.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\load.md
Size 7KB
SHA256 7b9d19a90f00c1cc47537ac65742e577fad22ec2fd18d400d4485fe4e00022c4
MD5 455af2ea8cd69cfb61dd2c22315bea93
SHA1 b3e59a474c60f283f883f675e9efe06492f914fb
SHA512 c71a8627a0041a6c8f0aa9e9a8e5d6dd9e2f892112f6b0738dc194d05a38b25b8805ea7161e1ce4b5474312457582468594b48ac8b2c60316161a3aac66354fe
SSDEEP 192:IjA2uonSZRkRtywT7mo/m/g09qrmQSDypNbYVrwKozqcr:qSZRktNnmot0kCtyNbY1wB9r
TLSH
T17CF1B61B3F81939961F3E2F1A50F24F6E33ED4A6313160C5745C02A86B2689A51BFEDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

migration.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\migration.md
Size 8KB
SHA256 b5b4d49ed4658000c6d406b6975c5a7eacce42f1ad3f94e936e1339890381bd3
MD5 238540ed7d6a359b4d5c4e8ce81cc4f6
SHA1 e1eb3bbc7f367e6c4037fa282ea3bd0a483bbace
SHA512 dfb13d4c98357fc798c2202e735f5c09760123a810e87a2871aa849d192edbafcefc3ff1208514a624267db43ca5e80d84da76a763a123f2f7d027cbfacfc202
SSDEEP 192:LVhYG/QfckjxSPNTK6TMTWu/4LVLipkEec7l98aAsf:IGkxV/Dv8Mf
TLSH
T1E302C7136A67D334ECF16682B0435879632FCAA9325D8388740853B97F608DE17B976A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

misc.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\misc.md
Size 3KB
SHA256 df10e522dd8c9512c949073d243cb9cff4dceaea69139c98c773ababb067f4c3
MD5 c2eb86ef0352b60f2bec135bd6f58b2a
SHA1 10fae605bb20e4f65c3ea2411e6d9f770573ac85
SHA512 2c355109da5f15f96ab0934069d0f35c1d1903564c7ad925c9b48ff32bde166e5926c23a57c327e8e37b1fadcadd70498203efd00799de1070f0c11a40a5166a
TLSH
T1E07186077F68832818B1F3A5B55EB1F4CA3D956A36306AD370BC817833104A652BDBAD
MD5 SHA1 SHA512 TLSH

Submit Download

output.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\output.md
Size 9KB
SHA256 78a692be2e23954ad024345806b2d4937a45113be6c48cfc2fdd53dc49c32580
MD5 437e7cdd35b524afe67625a3edbc87e7
SHA1 95c4d09edf75c969c20fd3307b51c6769e613f6d
SHA512 a271746a5d374413ebef8e0d77cdc348ed3a4f47acd6820a84883aeaf529ebc51e19e59d7c049d61498d2aa2df366335f13a19db8fefa5c7eb4e19095a3f4032
SSDEEP 192:fZAmTLnanz3E8D0CO/sq17pG4M3A/rEPxSYw28y:f6mvnanrjDOkq13/hYIy
TLSH
T1C412A62317657270606233E1A64FA9F9122AC04631658D807CAD47703FD38BEE2B6BFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pointers.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\pointers.md
Size 14KB
SHA256 628890dec2cbe8304e006effaaead83e36d5e6b3695f3b7bf7e8add1d26f513c
MD5 13c51e70e7435551ebcea82fd56a2e04
SHA1 60cfdc3dde5e60e6c20f4e01cd4ec689e126263f
SHA512 2ded38276f774a572a8595cdd5288624c29d69ee3ae42dec77f6b9880cc9fe877495c3976939875586e48d47884e7d249a89aa325158e84b91c283880980c1da
SSDEEP 384:/6pQH3BQXdjraNtj75VOlCGQSYncjR6TZ:/iQX+X5raf7XOlrQSYncjR6TZ
TLSH
T1FE62981727927270D0B213E2924FA5AF5237C01632629AD1389D86743F678BD61B7BBC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

primitives.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\primitives.md
Size 7KB
SHA256 3b4cab3721ecd6cad4ccc0ba251f9edae24e3b03bb94ac22234b5c8718a7f346
MD5 d07acb973effeef6b6d44c93405a03e7
SHA1 b35ec408b3fc4b482b56e15919212e464fc88339
SHA512 1151c74883f884ccdcc1a4e751d772e76fbe04d0cd70f82e8716adfec64f9565b2f759a8efc04ed18fce723457af18238385831f2d2fe270ab54d202d343523e
SSDEEP 96:cXnWinghPP1w1H2EvBfGYxtml75eEpMy8l3NLsK9KX+5imMbSW+gYd2:ZRPP1w1HRcqWzpMy8bLsqC+NMws
TLSH
T190F10FC71D14C5341579C627A25FB571FE10883E77D62AEE382E943C134BA8E96BC2CA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

start.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\start.md
Size 2KB
SHA256 95c57729bd5b4477e39a8950fd4f1e6c8121cf5fba58907d16f2c8d5bdf92b8d
MD5 a893d9275d0ee2ec789fb63ef481aeee
SHA1 5986f428bf07e616671316f98d9db4714c5412b3
SHA512 eb6802da18d021c9f214c30d9c641b8da3b9e1b2b8fefad1036036f43f257269c5b289c6beb678e554129261a0f8d6a20085320d5899110a102f5082587bb5fc
TLSH
T1EB51885322305069E4B132D3A65E70F69737CDB639F57510646E04E53F224DF50B36AA
MD5 SHA1 SHA512 TLSH

Submit Download

types.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\types.md
Size 2KB
SHA256 d8a1acfcc5f416038f05b6f53a93445e80cba70755592d6ceaf5b9df9b3c5440
MD5 e2775daa3dd62f9b47e9cb44137e79e4
SHA1 79be37ba757eef878ed173631798be0cd8167ad5
SHA512 b7d2ab012da0ae6766c2f5d06b5ec86fd1af3efd528592fd611a2ffec90fc0a6d03e71c3586e8bd1ad9cd8ea7fdebc72bf5459477cf2a5bc174583a1fb9eef64
TLSH
T1085175C37BE4D157153246B2938FD0938334C05733281ED938ACC67C6B05C6A62337AA
MD5 SHA1 SHA512 TLSH

Submit Download

values.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\doc\values.md
Size 6KB
SHA256 f712dc80674c1711b76edc64b1a55c06e5003e17b542afe071bc20cdfed161ba
MD5 989e88157467518f3722d876c793fecb
SHA1 7b0c451c1a13e38bccf876995921251ce77493c2
SHA512 89678ddafd5a1147040cdfcdca078126161171bfab1ec8be57a6702210c5fe2bfbcbfdb2824fb94ea7159da97cec30795013b1c7d52e15b3131a80f4e8cfc15f
SSDEEP 96:019bhzic1M0svM0sge64jjOjNg0kEz2na7rh:0HbhGxjUNmhhr
TLSH
T1CBD1EFE30E0286E5E07CC216614A4191F52A3C8F92D276887D6DA39C6F0B8F6C1BF975
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.cjs

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\index.cjs
Size 50B
SHA256 a200e15ec168d00cb3155794808a98243051c61dd7f6989c23c57ee220c918b9
MD5 57993c7e641cd870fae9c777d50809fb
SHA1 b25be4b38b547961a693f9a97957675c0140b5eb
SHA512 81c3435ef3a1c17765b9753b3378b1103977ff9c12d5264faf0fb780949d5b136d4ebd2aeb457b9c00bd11debf3f0a3e9bf92360515b3fcb1d8620fc8f923dbd
TLSH
T1DF9002A33599734122054594DA5B551316D2C4940404500041454DA915C5890057A8E0
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\index.js
Size 85B
SHA256 34508972d2e18b79fd4a289943568a68bbaf18badd2e82a25c8deb1af27f6225
MD5 41a4989dc898c85ccf28ad1fddc02e55
SHA1 0bb42eeda3a963b16d67815ad2eeef165cec4942
SHA512 9aa53114456ba82075300ac40a1295f91f4ee9bef3924581700a1bf5843d02d0576b238bae00496afc862599eac1e5d8e654345d6ae040fd53de4baa9f681214
TLSH
T1C6A00273215FC600511114D5CB07851693F306981C41141401581E19E4C5040E8DD374
MD5 SHA1 SHA512 TLSH

Submit Download

indirect.cjs

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\indirect.cjs
Size 53B
SHA256 f36c7fd3caa9c43da3db45e1ee272892087b4001b6f575fffb76dd80574829b1
MD5 8d380c9a11bb3d8e4f5f59af630d8576
SHA1 48ed0d8ca326ce03fb42949bab32ed64ab875cd4
SHA512 c21c61d9c540a7dc07a2fbf3e634747d1307982b30cfaa893c1b005f03ef3f0a3edee6b71065b28a7d621fd5b4e51653f241e2729bcc11c70061b69a745cf198
TLSH
T1DD9002B339D97A4522054594EA53511325D9C4A00408501441454EB9158585005728A1
MD5 SHA1 SHA512 TLSH

Submit Download

indirect.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\indirect.js
Size 91B
SHA256 5c5045c5b5ec2083535efdfdbd95f5212545ce29a4b7f33a683504a35e5b6a02
MD5 229edfefb90c516d26d8dc24500fc814
SHA1 917138078e15edb96c7308c8820dd58bad249eb1
SHA512 cda3b794367bd424e3fa8cf76cde29cbcea6294ae5a111ac7d69aa69f1bc2c28139cc16741eefa0b3df72a01bcb23054facda1e03639b164598beef6ce46be69
TLSH
T168B0027335CFC904511514D5CB4F8116A7B20A981C4D542C01581F3964C5000E8517B5
MD5 SHA1 SHA512 TLSH

Submit Download

base.hh

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\base.hh
Size 169KB
SHA256 ab03a34e0e8fccc36fba776f85f9fb3f6fd62b5b3c8b375c3bc3a026bc331e64
MD5 ece4f731663533743a3faa7448f98ff6
SHA1 4197897d7bd0313d5d3e38d3264d1ef9574b1eee
SHA512 df3737e66db4d6dbc9fbef7cc2b3df1774ac67766b08fb99dba7f2820075398a8d523a34c9ef18ea75c50230a87d466a1b3a4947a337af79ada89e22c6fc95f8
SSDEEP 1536:+MZRyCqjC+AvS1utnFugSH+C8x7dtqViaWqG06SBlgOh:+HC+ytnFugSHCDtYH
TLSH
T13404B5546CE7604196A2D3BA9F8B4010F23894673769CDF5BD0E6220AF434A9F2FDF94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unicode.inc

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\lib\native\base\unicode.inc
Size 35KB
SHA256 a337b5e53a6c72534fcf093c58d7fbf12f7b1075f068ea83a09c91e34373b5a4
MD5 f1f66eda83f40b659c7425dab7305ecf
SHA1 97f601ec8a3f1374d92f7b50431fcbe4d30be63e
SHA512 87a5dda3d6b7a3e05e44be3607b743a0b9d354300e595067306b0f2f7c0292d84f9d8adedc2877d4d2411b74bac12b0a8deef6eab2b1e3653203d1843b19aae4
SSDEEP 768:LkS4TyQ5256j3IbWA6GPqv7X8IshABkbWA6GVPyn4EPH:Lks6p7X8UH
TLSH
T1EDF24368924D19C03513608CF314A523A2FC74736BF46F8BF62E5788EAABC4858B5D7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\package.json
Size 1KB
SHA256 f1001456a27f0e57c435f4d5670fbf73a9da34eb57f478205f3420d66c4af31a
MD5 86bbd8be1d3c23454e7d29089d26376a
SHA1 6a1dedbbcd48309a6c85c5a9a56f748b678fcea4
SHA512 d977785f3065d6983b50c67bea48e1773c020f2984fe404f8f8a3f4e2a7018be2876cd41d7375b61176157b69909518c0ad3ddd5fb060b9a6f5c254e4d91abbd
TLSH
T15431D423CFB00ED3269415E0A44E0056A1AD58F3888C798DF66A262CDF4D5EF6B7856E
MD5 SHA1 SHA512 TLSH

Submit Download

CMakeLists.txt

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\CMakeLists.txt
Size 9KB
SHA256 4575a48303f31a3f13c9d2797b26fee189dd9df1c7106bc39c486c2d2af8571e
MD5 a0117f6596c88541c990629af4b8989e
SHA1 5f52e32803abd61f2f694a640843cf5f6357c60f
SHA512 5f6fef835595aa947fa2cdccb66dfe55bac6a75b23a8d5d2441f781b3d79effc86f125fdc4846da59189b635bf98c488de995480f4799c4be5670c50c7f95f44
SSDEEP 192:ZEtjX3jyUVjnr6jJTxiHhU/+8ygQ/i8caiQdNWEcx4kXR6UZzpJAVAfd1lF:utjHjDVjnujD/+81Ci8caiQdoEcx4kXV
TLSH
T102128437292C186353C7D5D1AAF0091B40A897D72D8A0614FD9CDBA01FB59F5A263BFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.cjs

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\index.cjs
Size 12KB
SHA256 1844678dd71b4291829ae5dca42a3a701dbab9601264387af06d539ec1906d5d
MD5 56ca4cc4d2573348c0224ded63e98d4b
SHA1 b6056af646be13e4536dd19ecc1605f2af4db476
SHA512 6fe98939abfb9b19a27f062d05215bf1337084e4fbdd7a0c2cbc16d65d2d97cc0877ba3b1d132a5647c4bd9cdb9601e3c3dc3a19b0bfb9d6ef6bcc7e13df52e0
SSDEEP 192:3Meztl+YA68htwokQ+PkRuO4igQA1mFIytXuP0fMrmAMxym1ykRS+HCXaPi/vkcb:f5srNhtBb/IAuMfvhFwX7nukE9PSAq
TLSH
T1B242750A4BFA71129693B065253E54863FF984578248EE1875CCD390AF9D0B88BF17FB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\index.js
Size 11KB
SHA256 7f59ff496565fe4d62aaf4ca76317a390b121af953d36464416328584da0936d
MD5 d699834d8e5e627081e5c15a2cddf863
SHA1 69b719317946119a506907503d021ace518e67ba
SHA512 1e4aff993c54284a3e5b0ee8eacc61fde59bc695920b8335e025f92716c8edcfd6669d871b384d1d51ce45143a3f5b13c48c5ad88fda7a0e3d8f5101dbc78ce7
SSDEEP 192:NMwwokQ+PkRuO4iWcQA1mFIytXuP0fMrXTR1RDPixt2cNYMRCETAQdqZQI5zw6bd:zBbQIAuMfwt1c2QI9ikpYo9/x
TLSH
T1CB3253194ABE7023555770E5A41F04862AB6802B410CFD1AB68CD2D0BFDC4B9CBF2AFD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

arm64_asm.S

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi\arm64_asm.S
Size 4KB
SHA256 9ef4d4095faddda9e5807137cbfbf40908ec2b373e6f0e2e3ee70e7b919d37b4
MD5 fec17e1f7441d36de58217a7186b3d9b
SHA1 d5d003c9eee08caa7d5c32e7d8ba35150e60221b
SHA512 f849732fe753ce2c82a68b442196732bcbcdb99a4ed97fae9bbbed672c7940127fc44c380db5fd3bb8f356c4f67e1ad33bac78705c9c8c85f8b739d67c9e903e
SSDEEP 96:ryCamFUTqcYK6KDsC+ZTDCuGTgIIlLPrBvgi4qHUYx5jYK6K8Dr0CBP2+ZTDCetQ:WT2UTqcYzAB+ZTDCucgIggA0Yx5jYz1e
TLSH
T1C9A15545BC0933390D15C136A4D69D16C69A68B3F2BE9518B30BA3CD2F42176B3FD5D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

arm64_asm.asm

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi\arm64_asm.asm
Size 3KB
SHA256 58053bbdc192f2191fceaba048798d9862f2fffbca992cd09ad1bbed8c61d4d2
MD5 f01e5aa9ea327b07ad9cd5320a86848a
SHA1 44f664d3ef43a092ad834334965f0e4cc4613d47
SHA512 7c5a2354586131c0c386a69a4ad1b44d51375c8e21654fe53de3d18b93a477704d16755a9d733976d218c8704137ba94a84df79be8df54db6db90a7fa9c31458
TLSH
T18881100EFC0EA7652D50DAB8598B4F17D26A0997B2FD8450B30E6B981F4153DC7AC2E8
MD5 SHA1 SHA512 TLSH

Submit Download

loong64_asm.S

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi\loong64_asm.S
Size 4KB
SHA256 5df3967e737eadd1509812e76b6ce4dcbfd8672797158a3fc37ac5f3755d14de
MD5 0074a3a78bb59b658453085d49bb7082
SHA1 4504fbd954b711db7c8e5f7b9f41cf3c19474b4f
SHA512 909828edfbe92be325a4b5577271f6777b0782cdd86e667ebd714c26083b72cb1abe7fcf4817346ac0d1c6813e85a8e72fba09847ac9365dc9ced3cfd8f84df1
SSDEEP 96:rPjog6WkD+Jo5MHyzx8As39uF8i4qHUkqE6jtUnmSwd6U6C+r:/ogQDKo538A0kF6GmSu56C4
TLSH
T10991CEC6FC0BD6170410E59AC98BD698CDAF299707A90C94F11E2FD43F8256DD3A91E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

riscv64_asm.S

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi\riscv64_asm.S
Size 4KB
SHA256 46f910cc423ca39305b19a38db13a1480061735258f189ee631237ea13fd2ba7
MD5 80a2ec7fff5c566924978a3ae45c9abc
SHA1 d89f00acda30586f3b40bf77662a871781021a21
SHA512 1ae443c3a5f24c546df623ab46b419095dedaa727979b080d6acb459e5f895b965912620ddd2a9be6960477d815654b316b024d5e4adbce2dd795de3ff0a789c
SSDEEP 96:rPjonU9kob+0yzx8As39uFpi4qHUwW7htUnmSwB55VJ:/onUyob+npA0wIkmSO55VJ
TLSH
T12E910F45FC0A53650722D67E98DA8E84F58F2DF7ABB84C90719E2BCD2F45434D7AC0A8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

x64sysv_asm.S

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi\x64sysv_asm.S
Size 5KB
SHA256 822fc8d707b9e7ffd4fb4899d9d7bad2b2ee732f9e3203b9fcd367e750e2a08f
MD5 6c8a0d96cc6db117862b072a29b48c1e
SHA1 5674128da429dc1a6791be14b0408d937961f86b
SHA512 b0806a84cccc9adf8393bb6c2e298385dbdeb214dad6e42b1b908805ee138b26a4dd28acb6902210ca46393a37662327fc20710a4657f5bab92dd9a45f09609e
SSDEEP 96:ryCamcbfqONGd4HCSCaAQKIkLxS4vjBa7L7ap7Y7t7d7B7+7U7D79i4qHUYq55qs:WTtbfqON+4HCSCadGiA0Yq55qqMBfwHX
TLSH
T1B2B14500FC0A13690AE5C75A68C69633D18EB97F67775928734A2FCD1F8397066E9C48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

x64win_asm.S

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi\x64win_asm.S
Size 3KB
SHA256 dcfd393d8605f97064e69fa31f2d533e2f62f1e0d378a85be7251952c679f9fe
MD5 6bdff22bccc043bee1c0e3d720b4a718
SHA1 f580124e93dff62857a33f78ac9966fd0278865f
SHA512 e39b1247185ce15779a2daf3c7a47d6376a4fba6e06b46bb0bb6eaa9ce3d837b0446b23821c8b63ade11d1df4060acda948d672f78903818397a651b6b5b33ef
TLSH
T1E4817011FE0A87461DD0EB0D98D6C3F3D18E7EAF227A1835B2190B851FC2872539D885
MD5 SHA1 SHA512 TLSH

Submit Download

x64win_asm.asm

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi\x64win_asm.asm
Size 4KB
SHA256 227e656e5099b48550cee7f16efa9a2dfe2c58f3c46ae71e2f1ab9d80146ead0
MD5 30de5811984a2c71e14deace14dd953e
SHA1 85b8cd9fcf8f6d9a6939cbf4eba2838666849497
SHA512 652fd09597d7791d6f6ca730461b9956fc20fb25a18bcc28a46bdfd45b997bd869bfaba802c5a4163c756ec73a758cc2dba9676fde54e986fb145189ea479624
SSDEEP 96:b8bQI3v4xfj7ZAhldTmh/6rmhJrT66C4SVMIQnvaUZXPH7mlUfmyWpz+9OQK:4bevZfhi6rT66oMVyet+yWpzsOQK
TLSH
T190A16113FA0F839A1DD0DF4998D686F7E39F7CAB61B0042072A947621FD642A536C9E4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

x86_asm.S

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi\x86_asm.S
Size 4KB
SHA256 d073e326858e5475575b66088a67f495b6fe26011e027b8ee86e4377872be25d
MD5 db928497b34b4585ddc01eed16fb8dca
SHA1 7371508b24b5b0b6b0dcedfbb252e4e46ad6d3ea
SHA512 a8abf9798040555d409fcf315ee8db8b2f6c34b9f5ce625a168a57c6ba49346b1042b85c73ec217724a4f3d9e1cde4ca4b95a0da98c376f73b6eab092978d6a0
SSDEEP 96:ry2am6yWqYjQVMCFism164vpGHUO7CssP5qd9RrMuMKMCetUnm0qYjJ/NLMCUYhd:WfIWqYj8MCFcM0v7P5qd9lMuMKMCNm0J
TLSH
T135A195019C170FA005E4F259D9EEA373C20A5C2FA2F15C9DF1AAABC93F9136165D909F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

x86_asm.asm

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\abi\x86_asm.asm
Size 3KB
SHA256 3e59a94cb4ee78165f0545a68ce6c397103a106516fb7fe0c2f1e46471315767
MD5 f660d539700771ab47b1a2c47f72a9fc
SHA1 23499ceac13d6caf4977045d2ba6ee5091e71b7e
SHA512 c0d2c3b7d9332a191185d4e38811931312467267c99ad8bedc9667bbed4eb171ce78c2f3ceb3ab9f69f4aa8702c75429103c3c3a17851af70e8a668d7e1dbc8e
TLSH
T115810572A816069F9690DF45C8C586BBEB2FBC5712F404D4B6AD07650FD2317C29CAE3
MD5 SHA1 SHA512 TLSH

Submit Download

call.hh

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\call.hh
Size 5KB
SHA256 e812c77c23a0f959b12fc967776b3112268fa92c79c15e67501480538fa882f4
MD5 4c34968d67c543043fd7d5a7ac1eb16d
SHA1 2beb6756c3832eb5090b88279dfc3209a9c92b59
SHA512 16b7478e1ed280d2ae5e8f4871ddf1b9a6588dab2636962d24be39e3b54d955f551b781ed6791dfdb198746c7c2d866c805f2e0673f8969e7fc9bb72f6d574f3
SSDEEP 96:T0pCfa9OQ+fv04xu8Vz/sduMVj6o6VlmNsBycNEXuUQyd8D3O3YDZGo:IIfa9/WPu8Cf6owlRBRqXnQyuD+I1Go
TLSH
T164B182213BB092014A6282708B0B6C4175369633FAF1F1E5B6CD135DAFB38E5B15378B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

errno.inc

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\errno.inc
Size 8KB
SHA256 f2fea4a329fbf7aa7e5a6c52daacc480d70d782344e37fd7e62019f6b914201a
MD5 a775a877032b80967468462032d0fac7
SHA1 6ffb6ec93a4b7b54b6677390732b5aa10a719e74
SHA512 97a2c7cb683dc61d126a6f7df853149b114c1af7f20fc754954b391e3c0a5b357d0c2214a847ca47460b191d67cf70a354142415928d0223f18fe4bb6d6eb4b7
SSDEEP 96:TnghghwhSlI+/x3GMGrB3VJOUsjaNnGmBla1mUoazCZURLaF53nnvCI/e9YazSlT:M/5VqUla1HoBURL23uo5
TLSH
T188028879F96B0CE687233495A68A0C3B0150DEAB07A6C1F4BB81ED993FDD47025BE447
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffi.hh

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\ffi.hh
Size 10KB
SHA256 3ca1bb69f226dca6a992c434581ca7b4684635cb5c9d42a6345dbbc2e5d43879
MD5 54324fada6a13a2baaeb6a4280255818
SHA1 7bf96694c99ee8a08c26fcea1f393163f7d753fb
SHA512 910d3d44047f7cf03e27203e979a67bac8ad4a3f393c480145b6a1fa6d1c248d3e93ec002499ffa6ba6bdec448987df8f2d77e88ed7adf5aaf49061af18a5153
SSDEEP 192:hE8pUPP86jTTqNcdo2ei3V+P/ahcLdjVwBQRS2mBQj5U1nVKdljKr2U5iF93pdKq:hE8pUPPjjOuVf3V+P/uIdjVwBQRS2mBq
TLSH
T12632A610BABBE1810E9A2651CB6B19071411D9377AA4ECD07ECD07683F1771EF2B739A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

parser.hh

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\parser.hh
Size 1KB
SHA256 cfd9e374884cdc0f60716de41bbe110d361bc10d0a8539942e37d34c86b525ae
MD5 9fc15a215fa2865edbf58c410c9c4144
SHA1 67649407d334d8c8303e65ab82a1f2602b444d6c
SHA512 beb0901512dbfe144c5802c7ad31e84f313a889d7c694787eaa8b3dc5e6085692a64b046bb75ed51ce3a845a1540a235bd7aa45f8e7f5c28b154127790f3e699
TLSH
T10B211204677805D18D4A02E25F9BF8372931642371C9C8F2388D2351FFE7147A49374A
MD5 SHA1 SHA512 TLSH

Submit Download

primitives.inc

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\primitives.inc
Size 857B
SHA256 34f524982a6e921a63c6766619b337b6d15f0a5cdefbf252481dda4b4369afda
MD5 f2ff761d6ca5fb88470fd65cea69b065
SHA1 11bc65ec926b55f0d62b0335387f31e8371cab91
SHA512 7aeca6a50f36bc1252000d6156d502ffac4d0f1e45fef557edc9d3051ed6ce31a05a276d9a037728da1645c74b807b6ac206f3328df56a891868c74071919ab2
TLSH
T11F119E83291600163B1D401DEC305D42F09CF65EF172973CF02739593165362DBB54C7
MD5 SHA1 SHA512 TLSH

Submit Download

static.cjs

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\static.cjs
Size 2KB
SHA256 25dff303c876cfdb531e2d9590ecbbb4928c8e60453c484faad66b2a3abd1556
MD5 75bcccb53182b15569252e35b8e9c68e
SHA1 5bbcd034eb0cdda2fbbde0b443a1fded5073f18e
SHA512 ea003482fe300e59fb08f52f2b7d99302f81a48c6d63ec075972a9b3c74df654f35ed916c8fd5f7ecd3912b22df3f5786e494855419576dac7508addf8433273
TLSH
T19F5180AA0AE96160640B3DF64EEF10D4B133D4F346097E59FC8E4791AF805754FD0BAA
MD5 SHA1 SHA512 TLSH

Submit Download

static.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\static.js
Size 2KB
SHA256 3f2b291e2129181c2984e6508b51efa5be30775afbdbafe6c0f4ed076d80d9d1
MD5 02ad8994298edcd3becaa5cebd77f14b
SHA1 63effedaa4b9b0e72bbec7a831eb9bc29e7c2e5e
SHA512 47c4e3f3637308f83066178f1aa57c740dcb98f4d352326e43b820f27f0c1369fa75df84a068a3e2647f1179bb0a30cc888870131e7a6d4269c2c0543d7a69ea
TLSH
T13251A2AA0AE96160640B3DF64EEF10D4B133D4F346097E59FC8E8791AF805754FD0BAA
MD5 SHA1 SHA512 TLSH

Submit Download

trampolines.cjs

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\trampolines.cjs
Size 1KB
SHA256 82895e2a78b911b297e7497d9d6033ab87a0afe64f4904615dacfa318d83adfa
MD5 c1b26567b48c410348b0ae179341af2f
SHA1 e1d04930a83a7faeb5a07004eb488dd510b724b6
SHA512 75e35ba9444c3a245402e41477698e133afa9cb064835762800d50c67036745bda2d48325e12a21904d26be5280426d81deab4075c0cea8dbfeba7893a6bf004
TLSH
T1C941A124D99E02344323846A6F77D40244C9BD1739D8EE14FD1CA7852FDA63EB6A1729
MD5 SHA1 SHA512 TLSH

Submit Download

type.hh

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\type.hh
Size 2KB
SHA256 691479b990ddf7364c5f316d0a653d32f13181c1f5f68ad55d1db3ccb58f9b24
MD5 e67d28bc2ef977a190abaf4625bf4e50
SHA1 ba935bb1cf32213917d169e8694f8887b9310a99
SHA512 33243102d63c80a6fd4f283480f5b905f0e126061cd55eca745ea122ddda8916678fa9596c923b2443ac339945b469411cfbf244c8093f544275c6c9cd3f48e7
TLSH
T1DF41CD703FB4AA156D1943518B45EC439A43FA25B6D8D0E8B09C0761FBAF691F0A638B
MD5 SHA1 SHA512 TLSH

Submit Download

util.hh

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\util.hh
Size 14KB
SHA256 4aab905947a127652107e20016880d2d34ae46e3290705d8a485e01abd864360
MD5 00bc7060a4a5d801e7b2dbcad098da53
SHA1 ca3f991492b1ec7b9cfe4bc387800837ad0708dc
SHA512 92b35b6812cc9bd5a9fc39656acc5ba5d14065e2cf6c235364a2c3eeb6ba9686dfa1ae53e44ae6ca5493973a53fcfc6b67c81e55276cb4e08b8c1a484f269dd1
SSDEEP 384:ES+t6692CCT896vQWWUNrL9A7qCQzZbgzq/3sB:ES+A6cCCT896oWWUNrL9A7qCQzZbgzqM
TLSH
T1D4524439BDE1F4014B12982A8B0A9810DD25953B6E74C1D4FACD1228BFB1DEFD17A7D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uv.def

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\uv.def
Size 134B
SHA256 4a40dc700dc66214fc1c464db8c4b78b82845e3b7b4e6103418ac519346ca4d2
MD5 5fb10d87c69c21b959d28fb65d65538e
SHA1 4b93b79184b9fe056b470bfd97afdced7f56e117
SHA512 798f0fee4bd932e988b7b42c54f0f3ea2b3d478e0924b8570e81dd0b0ca942325a1d516868fb2ba353e309db998f045fc78ee58d419195d6191572383d60ed21
TLSH
T143C02B2FB03D80A330E084084AD401DCC3E1340E8CC91CCA846017E404008403CD5EB8
MD5 SHA1 SHA512 TLSH

Submit Download

uv.hh

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\uv.hh
Size 2KB
SHA256 6ad3aeceec4070cbf5fe1f9e54a75b58dc57c2686174c654b341ff9215d70aca
MD5 437dd3ad521dca2a49b9d70ba3be7dfa
SHA1 eea31b009961d9ef2b017800f9848981eae2ea2d
SHA512 10289fba36dd867b7f4809aea2d16b8dc62ab07a662f866e6dff6115177f46a44acd69f3c38bd0034cce6804e54d127c3e51fc661a6ab2c62267dca384f2e6b1
TLSH
T1975132987A3E81C2B8F2C020C69209496D72723B2ECAFCC4754733F55FA405A66BDB34
MD5 SHA1 SHA512 TLSH

Submit Download

win32.hh

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\src\koffi\src\win32.hh
Size 3KB
SHA256 eeec401597da546109b9729113ccb635c61db325f2d394f883c2293955f119a5
MD5 8c243f12a79a02709b5c78bed980f474
SHA1 84b987f8de7043e546de1eab3dcf59c27b0f3464
SHA512 c559f1806b692e65c8553b2f9c5275f1ef991d2132baef105f3754ad3bcffc576fe6fed412558ff9de40cfbd8fd83bd58fa92836c8211569a30966fec06a3d1f
TLSH
T16671E06D9033064399C301E5EB772826A829B4BF70B4F811B98E9E093F57DBCB5C251B
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\LICENSE.md
Size 1KB
SHA256 89024017b88a9f2b763f79b941a4f2db3b4428edfcacdc0b23866b2da633ad0c
MD5 fc3ff1120869be6b3cce17f9a06bfe2e
SHA1 59cbd579b31f0c6932deaf31d0181203c501c9b1
SHA512 54481c328231787e3319e8678b56b0c898bb6d7b1302a7c74320060116fc03a6d747d02df068bba7960a71a78608f3a5b40a3e110bae107d41bb40988d8fc2b2
TLSH
T1D5219A1EB25007631CD223A0596968C8B35F714FBD9F6A44345EF344233A06CD2FF858
MD5 SHA1 SHA512 TLSH

Submit Download

README.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\README.md
Size 4KB
SHA256 fa7f9a510c5dc46161e8216dae94e3857e466d7552059baed3b6fb36874a14ad
MD5 9bf5dce5b2fd64488da01eee7e93fdb8
SHA1 897720a5f1073052d7a71cdfa3a16320605dd454
SHA512 4d355a0ad7ae0b484852fe33e7db1e7714cca4fe503574a8872712a46708bb85b28786519c604035f049f0051ef123ad3421f8c85ad24c686f18dbc055f659c4
SSDEEP 96:eO2LoFpRdzrdB7kPCCg/IH5lDLHnbz/Vc6pR4Ewsx+GWKsWKmGgMPdPn:eOyoFfdvdZzC0IHHDLHnbzdXnx+GNsNp
TLSH
T1A1A1DEE38E409A6B2F63D5C09849E6D9FF2650ECDC90DC3CB77E4184670087746EE5AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

napi-inl.deprecated.h

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\napi-inl.deprecated.h
Size 6KB
SHA256 b66ed1e565e735bbfabcc2f72d466ab7c5414d3ef8851d1af440b81be7f2375c
MD5 afa451c950b59bf34189cf627881fc38
SHA1 f420000cb09f5546bd8f04d69c9736f6511ac46e
SHA512 3b85fc0bb429ff1519b697bf7b543e8265224bb9027ceb6a947bdf6108dff56df797d911e6f42f74664ae9af798b060bec1b081065ebe67286725f22445388d6
SSDEEP 192:2h3Gk+qh6Ge1gT0xUHggy0xxE7itK9NlDit/9r5:2hWk+qhjGgWUHggPx8itkNlDitlF
TLSH
T17AD16A53EE52BBC50EA25A22EC19B340CA10911F1FB55A62B2DC7B375F0E2DCB278406
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

napi-inl.h

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\napi-inl.h
Size 236KB
SHA256 384d2f7934e898e324560443a0cb76f6c1cfa086f0f6fdfdc643396177025bd1
MD5 871fcd90b4b614f7e9913f5e162de2db
SHA1 6800411ef992671afb16918e69c27429c3f8cfa5
SHA512 e45c3964ecdb1d6424d9b5170378e1e4a70036bd99d14ee5ddf39f4fecc767cc1c1ac82741cce769442bb0d3a9c22a573c26cf9126437e93a727d16b524f55a2
SSDEEP 6144:rdPvxOsSD7EkWBm8iOwnz65n04Ho8mhRFf3j/LtapJiK7wflzw/QNJbThjh9Dt5f:rdP5OsqEkWBm8iOwnz65n04Ho8mhRFf1
TLSH
T17534A61436E5F1012A62E723682A92519E19943B2F3CDF90F1DDB3247F805BEB13A797
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

napi.h

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-addon-api\napi.h
Size 121KB
SHA256 5b41d4d85e183e5c69b0e5dab5801dc1fb00fb72579f9b278bb7f70d412d8d38
MD5 693d87ecff25bdcc254095e9db5848fd
SHA1 b14db5a8a7083701bc85a77d2a3297e6ef9e5efb
SHA512 58621cf8e742dc3a1aa48500090434af354e2efb0117e66776ce4ba58e03172b4fb7d8c612700b6208fa6506e0c49892c3eb07bcf5b6fbed3168fe43a8f9f262
SSDEEP 1536:JE5Gj3Ue9PoP+7K2+sr2BdRr7N11zKmzZmJS6dbhViAcE:hUe9Pvx4r7N11NZmJTd1pcE
TLSH
T142C3B9003B15E7611992D5D18B3B7262CE118036AF38D2D0F5EF560CAF9A46BA3367DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\LICENSE
Size 1KB
SHA256 a553508f516031c91f3af1148d44970cb81bbae6c4f091be6835d39cc252238c
MD5 6adb2909701d4605b4b2ae1a9b25d8bd
SHA1 bd154892baffc0504f1ed936d83882d209beb0cc
SHA512 a60fb76e9ddf6ca0db27cb5fe5956fdbab8923130fe8d3b06ed2e33dd79c4e75fbfc3b11d91484313cb9e81667f6c0d89a27f3a06e3dd24686c5662d20b90c19
TLSH
T1C811751E72510773289B13A05978ACD9F23BB25F7A5F2A84246EF345633A06CC5FF840
MD5 SHA1 SHA512 TLSH

Submit Download

README.md

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\README.md
Size 2KB
SHA256 63a4e81d19f02b164d51c4721ff3e88c81d410640de7e1d3520a2c406f0a7d83
MD5 dac20c182143e177cafd467572f1eb93
SHA1 8a5472aaf23c41df46626064927fc4b76cd52571
SHA512 9b1f5897a2c4f74f065d586ab315b19909d3daf064fcccbcb11c54f0c2a1d6837a9e9d33486fbc677ea8cfe4ddac973905076a245fe00a5364efa3d944713488
TLSH
T1535155015689F737560300B1B96AF4DDFA88C06ACA79A6B0365D019E1B109EF83BB18F
MD5 SHA1 SHA512 TLSH

Submit Download

js_native_api.def

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\def\js_native_api.def
Size 2KB
SHA256 77653a554fbb27f6c5666f4ba05f87d26f0de72bc3d0439961ac030030c2be66
MD5 fc4b999abb32893381b4e18a050d1faa
SHA1 6de009f0b36f5ab015c43adfd43982c8f4337ba8
SHA512 0d8c4b53d0183aa7b488e17235bd0fa87a8ade1a3edae82bdc54173b8e5a39799760217e2a3ef87e7a5331610ea7e477227873144b1f546c46fd003d91524c09
TLSH
T181516821F324D40A85812823C9647F45F18272BF5E3046F1DFC4963E8E75D5AA85AE9B
MD5 SHA1 SHA512 TLSH

Submit Download

node_api.def

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\def\node_api.def
Size 3KB
SHA256 e0d5e3da0520a42e26b563f6321291081bd15bdd20821d46818e5f47900f77d6
MD5 cc46a5660b05065e1b906235e29df91f
SHA1 56aa120880b416c528505b36194a301125e9123e
SHA512 e3f2116afd4d6a9b8a057424f2000f753e00d00c2d3f6461affc3ed5340b096aec63ad272c7dc770c1b32103b9c605b82702864b7fa23b8bf41ef2975767722d
TLSH
T130717515F228E50684823C53C9653F49F59273BF1F3006E2CFC4C63D8E7592AA85AE9B
MD5 SHA1 SHA512 TLSH

Submit Download

js_native_api.h

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\js_native_api.h
Size 30KB
SHA256 0953395662ea63697cd7a77a9320d94aa2829f9c9569abf3a74272b7a2923ce8
MD5 b4b703a7fef4bbecad0e4314016c308b
SHA1 7c74cfbecac03b96bb700fc8a90bdc2f72e4f0ae
SHA512 38df5523d1c9d7e347cbdb439bf8dc327bbb896e191c42f43ccb86347cd4abcc40b43cde2d7545f531b761f1e2436a5dd674e8024c78280e43f2e691f2b916aa
SSDEEP 384:4GQwUyGXDDyMA4VTYHkMUZn5xq6ppGHgBHwRbtYz:4SXGTDyJ4VUHkHZn5tGwQRbtYz
TLSH
T10ED26A22F634F5056BACAC03053C26169A902D331E6436D6B2DD614CFF29D9FB63F686
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

js_native_api_types.h

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\js_native_api_types.h
Size 6KB
SHA256 21eebde05d2ee59d315ac27d4aa82434ca88508a0b2cf5819802a00ca523831d
MD5 c0898e956505ab3fa1bd56d432b2096a
SHA1 98b8384227a4de792073b1c9799ed23cb8c31612
SHA512 358f94637c35d74f35200f6ed18d398b28c49885660ebc359c0bf2e74ca638ad47c225e3f5d477ff0b3d11d392c146ae27f5f8b375d0428a577f4398b94eaefd
SSDEEP 96:kuiRbD1HSp5ow0yHb16Qziq5QRkR/zi2M/r2LR61Rr86AyrUHvdscX3weR4pR9Rq:sDYHsQWq5LGCGJcvdsYJ4Tnq
TLSH
T1B5D1531CAE69F26D05882CD385392748E60F85361E34F9E071FD652C7F0D825A27AB8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

node_api.h

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\node_api.h
Size 10KB
SHA256 2d4560831e525b47b060ec8a0864ab73993df9e20215ce9f0fe7b24cd31af32a
MD5 46789b9f660aa72c7ba93fa36075ef0d
SHA1 912cccee5631ce9c0a74277345de57a58ed65786
SHA512 28aa05d2b5cbd84949da5cad5f0574f177d41c58e094a5272b57efd2ed22c6336299091331538c98af66efb175444220ac9f17f09ff083efb467399465b2c4d9
SSDEEP 192:/PQ8bOh/n9Vg7iECm+6O6dG4ZGjIAWnIJc8couQv8kap:/PQ8bOhg8JdMQkko
TLSH
T19E223F16B930F6405BECBC53041E21199961AE370F1C2782B2CD719DEF59A5FB27B19C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

node_api_types.h

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\koffi\vendor\node-api-headers\include\node_api_types.h
Size 1KB
SHA256 a25356630d3058f0a0c8937d9f297e9471e037fda58c2696d8a505c2bd99cb00
MD5 7869cfb6871aa1b76abcd0cfba9305c1
SHA1 a48b37eff5f42d48938ac614bb38abb10816921b
SHA512 02fd989a6e2d1674e640e64ba8e74805ba6e5a274e88b07dfc07c59f33a101e92afd75a641e2d86a90c7b2470ee2e0f2a260337613925f49d5443a642395736a
TLSH
T173417CAA6D69F1E509C07DA3815E310C18AB57300E0499D2B19DB1EFFF5193B526F398
MD5 SHA1 SHA512 TLSH

Submit Download

node-screenshots.win32-x64-msvc.node

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-screenshots-win32-x64-msvc\node-screenshots.win32-x64-msvc.node
Size 684KB
SHA256 6c35b478456f35cc1069d340a8f5b021eac3ca24336bb90550b00082687da4a1
MD5 0d1ec3fffebc55bc7230f5362af52a85
SHA1 b26b670f3d5ca3b456a31f841405c1abada6d641
SHA512 73c737f823fe245e482d431ad6e9d8e965677d8025154a9a56a002e03f779b9292859d3effdff8801a08ae6cd6e4beeb8035d7397345e6cd35bfc8c60018b399
SSDEEP 12288:t3uFDaLM80EYeEGqHrUVnp1pMsuD8r5tGUXV:t3amLMbEYeE9IN6sNH
TLSH
T179E45B16BAAAD47DD059C07583178BB36B3670DA1B2279FB11C4823D3F69BE52A3D700
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-screenshots-win32-x64-msvc\package.json
Size 666B
SHA256 a6fe650ceea5b78af97e9eb21b5297f61ba4afb618c5b7a9cf79e4536f2b353a
MD5 547ab26c44cd076d6854f31f070be465
SHA1 95b64c6fa7c410a313acfbb1f26c49b75be70618
SHA512 d135047e646f626691fd12d0a63224926992337ba29e005489c6e5e48cab7428c615d438babce28bdbc705fa9c4fba3ce2a32c56638dc73d5768dcb69d84ff40
TLSH
T12B01FE91DD76D96312DD2E47BC79508450304C470C787C096781886CCF1C07323F915C
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\LICENSE
Size 10KB
SHA256 73ba74dfaa520b49a401b5d21459a8523a146f3b7518a833eea5efa85130bf68
MD5 19cbd64715b51267a47bf3750cc6a8a5
SHA1 172ca3bbafe312a1cf09cfff26953db2f425c28e
SHA512 f32944d2f94b018f42e0138eb9a1b7df3145beb1c7215e3c0e091bb07a083e3c23c379d47881da00a51e244d9c3708119aefd1658c988c1487923c7ba932c246
SSDEEP 192:i8W9NHT+cuo1mGLFvFYkgHRyE9WKm7svyOMHUxXphzfFKBT00FTHbHR:i7rZ17h4fnGmRXpGT0QTHt
TLSH
T13622643E774903770AC301B2BB8BA4DBF31E903D3B5A56644059C068236B96583FB6DE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

build.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\install\build.js
Size 882B
SHA256 37f7c9591d75dbc5fe734c5a196a46c355b3d7de5134260ba011efed8433a718
MD5 804646c5651fe9057989fd3f91d28253
SHA1 3f99d5243e0d44b5ce1bc7e72834910c5e4a5bad
SHA512 1b85350efcfa50a619b4fa740d3eee0eb8e60804f45d099306f8a3daa121c4ffe2fac71e1d8103a98db2bf47296001ad389f86c6333d3bb644520c980b97f659
TLSH
T17B11569B409F547F2D330CC7C0176A23EA2AC284534D8668C67F03873B6A29A40F3056
MD5 SHA1 SHA512 TLSH

Submit Download

check.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\install\check.js
Size 383B
SHA256 31fd360ede9ff3e80d643faff6c4570d0b2b5c621dc421b6c4086dfe86ce981f
MD5 03db44a15054520fa3a63dfb30c43af6
SHA1 1de2238c09673b155f8efd23a181f952d297eb7b
SHA512 e89f0a7f1815d7ed8a5882ce993e2978c6ef8bf496d06a87c82d1493c73a1477210f813c3375533f488b628a40911eefef089c2f1f3f2589e03a2c01ef633eb2
TLSH
T1C4E0C0EA89BC165039520DC3E81FBCBBA415EB91431DDBA2336C0195AB6163001E314B
MD5 SHA1 SHA512 TLSH

Submit Download

channel.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\channel.js
Size 5KB
SHA256 4a699621c111427f9f6b3b767764a292f6a358616de2866e0078475830420f42
MD5 41825ee4aaf6309d61b0e17ffe1f9df3
SHA1 7473cdf471470ce8f36720411298e8086cde4571
SHA512 66c42b5e267e2a3a21fab6d6e6eb7dae117bb2a226b5c0b7faa62db537768f67318597a1c9591182dc7770a115d6e4de874fe961aa468ae2f7284f2ff87cb883
SSDEEP 96:MU/9D4VzfdY8b8+shbcqUzoKeGbtSUYiSFxIcTl130X608GM:MsWpU+MGLE3Fx1l1kX8GM
TLSH
T11EB1648CF9D06223459378E415DF4085556DA31AE42BCA59328DB390CF7C8F9E9B1ECA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

colour.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\colour.js
Size 5KB
SHA256 024d2e9c04d50b492e91ae781da539c837fcaf40a585508c043356fdd9e69297
MD5 f8e8c780e4ce105553fd7ddc9851ab5d
SHA1 48fda8431a01c8dd38db128cddb23e20ff889e6e
SHA512 b78ef03e44a9cede6c84bbe79b2f96de6ce9d8d6299be6ae4c94d37377f96e829600ed6a8b1f13bb199f6c94329e0c1828e3c0ae80083449b955b9e8a93ee9b5
SSDEEP 96:BCp3qBbeUavKmpPx2HAksoyvsQJeGzWQfw7oY81YMe:aqgNvbxkstH9wkY8M
TLSH
T12FB1654CDB92511A3A779CAC2CDE91409059831E26235ECD7DBAAD802F4C4F5F472EBB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

composite.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\composite.js
Size 8KB
SHA256 73f04ab765a11bfc72771dbd0a6324e8e34ea354d16108cc1277bba4e80dd523
MD5 8dc15bd70c21fe95879c1af0bc1bd1ad
SHA1 bcbf2829152ee6ccd5ef6324e4c1d569e7252c60
SHA512 191229068717fd8573c7a98e419c9a376691819a6919c2d91e27ed20614ad2e17fa6160affad52eea139e0a56028d733b58184c10f788677afec4413c382c097
SSDEEP 192:DhU3cDlTxqqKct5/tNO557H9VdE465JKAJtQcKiPipiJiP/iViQAW:DhU3cDVxqqKct5/tNO55brdE465RtQcP
TLSH
T12202623A0EA9701341A761B076DF02806395905FE36BC381774D7D507FEE6B4AAB4F90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

constructor.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\constructor.js
Size 19KB
SHA256 b38f3e7ceecc305a8f81f278bf9219cba966993b8c2d7cebafdb8e8d5005760c
MD5 ccd92574d65e7c9a200897c6043c1a61
SHA1 ddac4648ff2e37a5e7c54e51a48be825a55a978a
SHA512 3b18f51d08aadce0d00df8977455915e3bedd86cc1c26c36b73639ede35900052463c9d8f1dd6d8ed395f7b0a16c76daedfa15ddd4c4aa9d6bca2ce8e439479b
SSDEEP 384:8zXJormMAgtb1FB3LRd7OL5uwN9zVRHIIkRGSMXQF9q8YuAUsPk+:8tRDBpVuA/Pj
TLSH
T14092E72AAE1112265467C4F129EF42981364C33B7E13B198714DBE641F8E4BEB2F6FC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\index.js
Size 385B
SHA256 5e30578a16290fa0855c32fe3d544ce4f26c147de6bad69cffaf7bc416a2919a
MD5 7258e49e156aa4cc13574942457431fa
SHA1 25ff8f1243b587cb04057eb55f7cd1e15f36d216
SHA512 783e8a989764e2d1bf7b1fb8cc62a7e75b632dc4246c0eee9119aa7972364531dede1c7aa679b0936628ffe7fea0568d82d93cf6196313cdbe16c7258d8e2918
TLSH
T14FE06DD34FA0EC0E79F903C198E34585B022D312A3496250B50C2CCB41D91D18E53D2B
MD5 SHA1 SHA512 TLSH

Submit Download

input.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\input.js
Size 32KB
SHA256 d88bdf5d807ef57ce8aa5d9be29bc7b9199974eac385bf559f19d5fc06bd632a
MD5 ff01fadd3885471ddc4fa1d791048aea
SHA1 71ec70a6e72d1a29aa5be333f6cb04428feda6e1
SHA512 5a2e752db6b5a4f95c06b2cbba6b174f439ee3080866d23c07a7c891f74f25eb1dc3a2aa54fcd8b8b8e11add741b4dc7c24a9ba1436f08dbc9409bebaf9f4921
SSDEEP 384:tgJ1/RhZDPs0BZxCNKY6kssxpOU8BXA5ZNMzefCd5T37C82WnmLBJGdbyd6qyEjC:iprs0BZxC5p14zRxhbyHckuO4
TLSH
T126E2200D1EB61212498370712EDE41016276DA7BB269CA933FADD6554FC86B0EFF6F80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

is.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\is.js
Size 2KB
SHA256 7ecb71679b5b58e7ddf7e14fa697ff6a31bbe9ef107745170095031519e93463
MD5 ea3c318037ab9458b0bc7bcf949c7663
SHA1 be7deb9c421e283ce9b7587f87d14919d42164ea
SHA512 04ce8395346dae2ce6e82dd70b70ac06c682274a56dd1d6d0df806315f5b736370ecf13baed0759d3cb89597694b74560367b2fe1104aad4ad689d64fb55a54f
TLSH
T1AF51DE411BA100A5411845A5F4F0BBC7DD12403A73157CEEA6EFA8721FDEC71C6B6EEA
MD5 SHA1 SHA512 TLSH

Submit Download

libvips.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\libvips.js
Size 5KB
SHA256 ae8cbc8008bf88f5100ca56729ed43d45cd88316e030dc2eed62e142f657cd79
MD5 3cd07a80fb4842c16c97b576de73fa75
SHA1 d29700413966ad1ab438095e1f73d1bcde30ec93
SHA512 581b872a8deba9359c0bfbd649b86fdf4eaf73af446d9f463bd78a825747584b649cd7373d0fbcef1eb3132ed158300b59c9ec537e19525adbcb3711f94b26d0
SSDEEP 96:jLDz8tIv4IcQBAcJROk/mFQBG5dtBZm0SIoBXu+2/5XOTUUtpMV6jo0nWWsnTvf3:bz8+4I/AaRO02dSIoMt5XO4UPMV600nc
TLSH
T1DCC176A625F6653A10935DD5949AA804AB7FD323728CE9ECFC4C215DBFC62D881F20D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

operation.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\operation.js
Size 32KB
SHA256 01019d62cfb83c5f6192a65a4a97635214e5dc61da07c51be59b8216ba907a7a
MD5 7077676037d5c71485ddd117f77209cf
SHA1 b9e90c5ff48914277380d472ec6e2858a981d1b7
SHA512 55256fc89de869f524d7558a8e9eb99663c0677fe2aca7a4b39db4141771185e8a5d03eb8a25111f2ada6e13eb7adfbcc5d6a77bc2c8e4fee970fad1c49c4d3b
SSDEEP 384:AYCB3aT0aIqQc8czWirEJNkbXufeEIxOOvIld1bHrYe/5i/JWnJga:AY/TOCTEfwbbxOkIld1Dji/JWma
TLSH
T16FE2851996A51302468376F449DF4089213CD36BB61B8D85369DB7E01F8E8BAE6F3FC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

output.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\output.js
Size 59KB
SHA256 71cec9ac95f3db764ee4d2e26eec1deb16da63c47fdd352f6a41af4dbb0f1831
MD5 a69b5f8309e94520044bc8eb83aed541
SHA1 eb16f67d231ba0eb21efd588ed463c0cbd83dce1
SHA512 1a397504a8a2b10cb9e53ac9c72223a8bfefbf5671834fa757a562e1b3d6e04ec505b185680f68fd7c5e2cfbd12009afafb11e653deca948f0902912664cccb6
SSDEEP 768:LxgejrMbssjPs9SvYqcjktD8u0kXrsGB6I/ztT/R0giembMOniOlxUWDW9AINp4I:Lxl0Ysjk9Smo1rQI7LonplCiYp
TLSH
T15F53531957A1131246E7B1F019CF008963B8C36FB51A89867A5DAFD04F8D8B5EAF3F90
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resize.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\resize.js
Size 20KB
SHA256 d85081a35bb1195ff6f057d2db4343adfe3241abccc7e277d13673a116fea1ad
MD5 de0735f099e493cd834bfb7b96a24976
SHA1 374ba44c0085a6f1b6912154461195d1746558ab
SHA512 35d571bd3eff328bdb678e32e00120fd87e48a44a689aa307f2b785e0adee5a1c8920c1aa09b074dea57eec276191ede98f2d3d7eb059f973c8244498b7dab4b
SSDEEP 384:NXeLtSZ5cR8WkddzSCtZ5C4x2+gjfGuGXCFbOWQ2P2++EJ9wRYMdbU2:0LYoOP3WfGmqIqxdx
TLSH
T11092A52D26951302128395F42A9E408C9239C22FA34799597BCDB7E06F8DCB6E5F3FC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sharp.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\sharp.js
Size 3KB
SHA256 59e9436f1c62a58b8781acb3803e55114bada9984cc7c39b9291769155811cd3
MD5 d98706f602a8952985d6d8b2028353b2
SHA1 d39ff562c87567a74a115493ce902163fb052a37
SHA512 f8d2f5d5c9528ebdf0c15e6034e1ed6eb4e9ee5dbadcc1a6a71e01b6d9ec996283e08cf992f1010ca5e1d48027dd8e9d25f36b279221be33a1f0b265a170faef
TLSH
T1FF81652905B7273A307743A7A4DB2422E395C35B2852C90E3AED12911FA505E61F37FC
MD5 SHA1 SHA512 TLSH

Submit Download

utility.js

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\lib\utility.js
Size 9KB
SHA256 ada1854f397f54ee09286094a4f4cd9a4d4af9f4ddbaae3b4f477edbd8c1fd14
MD5 b055d6a1de00fafb47a498b677a12b47
SHA1 0939ce8cd8113ddfe3c2b35deda19984134ce22f
SHA512 34b9ee27d55c867b6b9d96ffd3b290a43b3cf51991c32614dc24e9d3f04914cc008584a734a4d98b295d82c6f342486df78e17103db67df47aa932da9d29bfd0
SSDEEP 192:6aZFD9HsxLGgOAC+f7T2sdhX3hsgIIMPBf+4d:60lMS+hhHhQH1+u
TLSH
T1C612C89156A1737321B367E114AF4088637AC31A3153948DB09DB2746F498BCB3F7EE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\package.json
Size 2KB
SHA256 3748ed1d76c3086f1bb6522895de5e2fb408ec7793ef1cf173ef916bb0bab335
MD5 cb9b094dc286ae3c4f49b27da9a51ab6
SHA1 52ba145158809f8c21d166d5b7f80b513446fd70
SHA512 6453e0ee179d329c44f75e885a8231b73e7e71f456e611109b1c8f641214d59ef7698e281748195fd37c39b27a20246c16dafe21e56736a5991922d74d01a1ab
TLSH
T1A951A920C6140EB33EC569746C62748D2B542A5309C5B888BFA4930EFF4C39F75BA9BC
MD5 SHA1 SHA512 TLSH

Submit Download

common.h

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\src\common.h
Size 10KB
SHA256 44940aefc7ec601e316dad5c3882041c56d6070f84cc2b2871f6236b75df5cb4
MD5 7edf99357662ab3bea87346f8b17316c
SHA1 d84167f7fc7723d6ce8735e73d51241cd68794cd
SHA512 8da608558e9699b9bf8b10d368fe681af2682fcfc4887ce4ea4748bd8f4c73d786de3c15be9e86a319d07df09011df491a0e922cffd61a6c6eccab5777a6bb3a
SSDEEP 192:Qzg+/aeMs4G28zz1D5nx+fD4RQe+WKdhK+SKC4GJlb2PWiPDMpvNFoogcZqpzCrN:48PV85n+b4Rv+WKhbSKC4GJlb2PWiPDk
TLSH
T1EE2223494E727913101211E27BBB34818E8161176BA7F3F0BAEFA19CBF5E6685377381
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

metadata.h

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\src\metadata.h
Size 1KB
SHA256 bd50ae9c3e55d9ed5f8b3c4e09d9a79f496ef665b6c993ff1b2c7edecc32d03a
MD5 cf64ae4c198bf5122bcb9261d56bcf27
SHA1 d84816863ae939b2a19dd9f80bb6a006d56f28ae
SHA512 3ca20c8ad4ec334b9079f1b68e426183983cf457104e83d14876f0900636be04b33b5f2f11e2705109523f326d26ddf09cae1d26ecbc791db03b70d47f88f408
TLSH
T1BB31FEF065716852B80331919DA710020801A6B39F9AF5B4FECB66927F4E2CC77B2BC5
MD5 SHA1 SHA512 TLSH

Submit Download

operations.h

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\src\operations.h
Size 3KB
SHA256 80a4f350793f657c10769e2b4e82d3b103f5d4984dc27d10e592e14b8cc1b34b
MD5 92c87eb80d23e15b28039a531bb34de6
SHA1 e236004593231b2ec1d4f98f1e6fa76e98a0fdb2
SHA512 a2e0880ec33724a9300046fde866665e586c451a0c582c140ff928b11783f45769e78444e2b1e05a72825038f17a06e642b2dfca7ed22d570b72d5e82f7b397a
TLSH
T14E719A1E4EF02987411249F276AB7680CE97525B338BD3D4383E6058BF62B74A2777D2
MD5 SHA1 SHA512 TLSH

Submit Download

pipeline.h

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\src\pipeline.h
Size 9KB
SHA256 89f81e2d0308ed696a0f39099d42b7867b8ffb5fcd4969c7dbfb3e6778c0de23
MD5 f26d248ab6bd2ae6c7bbff1dfe1baed7
SHA1 0d4cb76c9446301b9d2601cd964c31c7638d3fb1
SHA512 7e40a2811efa47a79087fe23771aa6b864085180d7416ec37c23ba38b4843f5eb0e528ef63c92e214111811083eb4ac6156254b9a051b6a77cb55bcdb62b0651
SSDEEP 192:qE4+acZyAUuwpC/l9hfsBFgXHt+MHdFUNS9gaWkV2w5j0Y4Mvhj1zThkweEwJz4l:RYcZyAUuwpC/l9hfsBF6vn6S9gtkV1Oo
TLSH
T1F612109C1425186BB403B9464E9311452B3380A75ECEF0B4B6DBF22A7F9E25D76B2742
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

stats.h

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\src\stats.h
Size 1KB
SHA256 db854f0c3c4a0db1751021ed676413c6d5ca00becc08bdc13258b29047450b8c
MD5 ecfd9dfa6d569bba6363c6079b67bbf5
SHA1 bc34d2f0e315f16da3293347565cc75d07d0ba3c
SHA512 14241f0e4752a525a389ddc79f48231fa31b8d0adda9e106fc9cbf0ed4c4b6547b5ea13f2ca006ed1a79964853c9c3ad84696bf296bab4b90112d564a93cf339
TLSH
T1AC21E27CF5EC32911C93F9D206921540C822F5B3D289E4F4225162B2DFC50D5B2FA683
MD5 SHA1 SHA512 TLSH

Submit Download

utilities.h

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\app.asar.unpacked\node_modules\sharp\src\utilities.h
Size 741B
SHA256 0b126ab63cf1aedf8e71e6cb8179899d3ef02c46419100e847b2ca4284b8901b
MD5 4c2baa9a407bd6062d7292979e21180b
SHA1 c29432a14d59f62d4a072c363711fcd02fdfde0f
SHA512 ddf37daad403e6f01438cc3f5617b5b4dc4b232f86654d52f0aeb00efce0fa7339d68fd21e18cc7c83dcda3aa25b57504cdcba0e83820108c2fd4da665edf42e
TLSH
T1CE01DB32177103822D79424328860A549CD9768F3D8DF4EAE21C0B866A8B3CBA35EF05
MD5 SHA1 SHA512 TLSH

Submit Download

elevate.exe

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\resources\elevate.exe
Size 105KB
SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
MD5 792b92c8ad13c46f27c7ced0810694df
SHA1 d8d449b92de20a57df722df46435ba4553ecc802
SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
TLSH
T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\snapshot_blob.bin
Size 306KB
SHA256 318c99695b76079bc82378d5bf38dc9f8bc2d28fe4fbb487a1eda03170af233e
MD5 41a4e7070733f20097218576f6484fa9
SHA1 495a36f4d85946a8e95d8f0ba85c8b2a400e1670
SHA512 e644a726d26d887305018f337c91db8d7f207f3a9d75e71f531cd58e62fbeb0a4b2ffe6d14b4e16c8b791ca05d249573ea04964df46f597bd295eb17c2b493df
SSDEEP 3072:DgC8/wQXLwqHMp2ubdJbhlsN2CZz6ZU7A9Z9lYu1dVkoBzpLDTA:DgC8Xwqexre4awnG6s
TLSH
T16864FB05F7A0CB1EEB156A709DF8DF9A3235B2DE5E06AA0B32C5432D3979A340E0574D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\v8_context_snapshot.bin
Size 650KB
SHA256 8ac45d2ee2705bab53e3ff9564936455301ff722c3b0af0680fabb83d3c27bae
MD5 c3048304913b58e1f8e0df23f15bc864
SHA1 241013fabc2e905dbcd8f02af4d008676db421b6
SHA512 a9a1e2b3af0fee8eafede606594b4f934ee4f0c34ed288b6366897cd42042a1ce3fa9d55029f9a87e6e692ae7f7d5e83d007bcb8e6bd685d84ef0df0fdffa9e1
SSDEEP 6144:KBUhye6gCsgwqexre4awBTGWDgH1Q1dhgXFUhxRg/4RpZqCaBygPEkknFmJA:KBUhye6gCoLGWD9q1xNCaBVEznFmJA
TLSH
T16BE4C767F394DF2AE7C95E70AEF7DB923234B089AE0A651B3196532D3179B240F4424C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\7z-out\vulkan-1.dll
Size 874KB
SHA256 5126d395e5722b6d7cb0876cb66c54309eee83c13ef07193daf41f0f28ef31ed
MD5 13e9debbd8dc6eb51d282c4143c94692
SHA1 9fb41f200dd6a386377d11315fd9135c481f75b0
SHA512 40d86a8b9a5f8bc32e68a286ed985c9b263d2eb40ced63aa03e16a6e9123df67afe1f42974b526b4abd4d99d6b62155a9d2f0817ad4795dc1401ca697d80bbae
SSDEEP 24576:IvBtBPY5xbcAl7iAP7u6Z5W1DYsHq6g3P0zAk7/BoxyKDz:IZA+AdH7u6Z5W1DYsHq6g3P0zAk7+
TLSH
T11F156C22A6A4866DD47A9034C9C24603C9F274921326F9CF03A45718BF6BFF47B7DB25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk10D5.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1280-1616-0x00000277EF120000-0x00000277EF14A000-memory.dmp

Download

memory/1280-1617-0x00000277EF120000-0x00000277EF144000-memory.dmp

Download

memory/1280-1608-0x00000277D5970000-0x00000277D5992000-memory.dmp

Download

memory/5888-1717-0x000002199F8C0000-0x000002199F8C1000-memory.dmp

Download

memory/5888-1716-0x000002199F8C0000-0x000002199F8C1000-memory.dmp

Download

memory/5888-1728-0x000002199F8C0000-0x000002199F8C1000-memory.dmp

Download

memory/5888-1727-0x000002199F8C0000-0x000002199F8C1000-memory.dmp

Download

memory/5888-1726-0x000002199F8C0000-0x000002199F8C1000-memory.dmp

Download

memory/5888-1725-0x000002199F8C0000-0x000002199F8C1000-memory.dmp

Download

memory/5888-1724-0x000002199F8C0000-0x000002199F8C1000-memory.dmp

Download

memory/5888-1723-0x000002199F8C0000-0x000002199F8C1000-memory.dmp

Download

memory/5888-1722-0x000002199F8C0000-0x000002199F8C1000-memory.dmp

Download

memory/5888-1718-0x000002199F8C0000-0x000002199F8C1000-memory.dmp

Download