Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    132s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    28/08/2026, 02:21

General

  • Target
    NitroAI-Setup-Windows.exe
  • Size 115.1MB
  • Sample260828-cszzrsstcx
  • SHA256 5a99be446e5ce23a4c46d7bc0f23fe2e31e1a51027179efa433798cbc6b43e16
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped DLL 12 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Using powershell.exe command.

  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 25 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\NitroAI-Setup-Windows.exe
    "C:\Users\Admin\AppData\Local\Temp\NitroAI-Setup-Windows.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4084
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
      2⤵
      • Hide Artifacts: Ignore Process Interrupts
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:6544
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:704
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\NitroAI', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:6176

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        StartupProfileData-NonInteractive

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 17KB
        • SHA256 30db34123ab5c193dd76b82fa1661671812d10862b74b13345bd5d5e988503f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StartupProfileData-NonInteractive

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 16KB
        • SHA256 8d7c54dc76fc779f89fa5c9856ac01ad35b84be2215ccaf930d487697f0b032a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __PSScriptPolicyTest_5byldzio.rqs.ps1

        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_5byldzio.rqs.ps1
        • Size 60B
        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
        • MD5 SHA1 SHA512 TLSH

        LICENSE.electron.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH

        LICENSES.chromium.html

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\LICENSES.chromium.html
        • Size 19.4MB
        • SHA256 b911161e6594ec76b872498b423c54406168f2974e0d407a847f7de1e5ff94dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\chrome_100_percent.pak
        • Size 117KB
        • SHA256 d76fe8fa3a14cd73e4c858746e2ab2d2fa6f2df38a906fa5814b50a8a895fc96
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\chrome_200_percent.pak
        • Size 192KB
        • SHA256 b74ad439f3d3762657f3ba533a6af3ac63315c838ed46519891366f43d834a0e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxcompiler.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\dxcompiler.dll
        • Size 24.4MB
        • SHA256 a26f279fb9e49fef94d60710a8371f5f9cbeac73d92d6ad072a664c9c4442213
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxil.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\dxil.dll
        • Size 1.4MB
        • SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\ffmpeg.dll
        • Size 2.9MB
        • SHA256 eaeb2203f72d89615ffbf6a38bb96860cc78a9095126b790e36fc91c8f1fef3d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\icudtl.dat
        • Size 10.4MB
        • SHA256 bd8c145abdf3f8383276ce01dfa4ae48709bef9fef1c0711eb7c3fab4f6eb7c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\libEGL.dll
        • Size 463KB
        • SHA256 0c2960b094a77dba406e1401c6dcdc35245f218c7b910062d51cfac0f4898830
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\libGLESv2.dll
        • Size 7.7MB
        • SHA256 d254bf59b7e56730e56f58061ba83f0e75c0b393c4879a64560cc867d1f8e7f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        af.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\af.pak
        • Size 599KB
        • SHA256 bcd699e5adc1fa4a665baeed6540f50f88b2dad9180b35d613e77e681faa5bff
        • MD5 SHA1 SHA512 SSDEEP TLSH

        am.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\am.pak
        • Size 971KB
        • SHA256 b43249afabe7397c2edfbe6db7d958e5b769288f38089f388697f26ff8de3f70
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ar.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\ar.pak
        • Size 1.0MB
        • SHA256 c3e70424c99efe86563be417ca202540eea7edcf3c794db8144578d7c069b207
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\bg.pak
        • Size 1.1MB
        • SHA256 8709a84ee1a5e11d47b2257de317cc8862431e2b8753c9dc63113274419ddc12
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\bn.pak
        • Size 1.4MB
        • SHA256 a499c2171370db5d8b5a7ed536d7da0f2a85712417cfd5381d20aaff3a2a134c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\ca.pak
        • Size 675KB
        • SHA256 6593826d70efc1797cf6075af8e85877a1eed16632e9e13b21669acba62a8291
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\cs.pak
        • Size 701KB
        • SHA256 eb3bc9a2e720c08c6ebb8351e996bc71667f3c5cbf6fe9e72c43bbec044ec275
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\da.pak
        • Size 629KB
        • SHA256 97474f6e29941f58f30f74a0f4af761a4b1902736d1452d9aeb0f3c8e93476c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\de.pak
        • Size 677KB
        • SHA256 f33ffe012c8c26b031d4dee3d0a7c99d54598b7c80d071ea92bb6dce54de6c53
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\el.pak
        • Size 1.2MB
        • SHA256 85280574dad3264a551058dc7643ee800e7a31c441ca2084881defb317adf5bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-GB.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\en-GB.pak
        • Size 546KB
        • SHA256 81178ea8d9a22d5630fcc17cedd68d4df7c5648283ef2b6d153cd1add77843b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\en-US.pak
        • Size 552KB
        • SHA256 489c50f77896a0512f2bd173d4d8e9b5e7ef1d61f37acb75194e3e6ad8b8a83d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es-419.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\es-419.pak
        • Size 667KB
        • SHA256 6ad72c6e0305507860c6f76389aa3c42ba8e4e461232ad5171b19672c6b8110f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\es.pak
        • Size 663KB
        • SHA256 107f812a6f50442ed057686488b695862f7c9d5f76c8dee1a934982515fe16dc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        et.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\et.pak
        • Size 605KB
        • SHA256 16c524461003fac5e8142e4c57c1cca1827c49c53eac0df99c6f277b0402c420
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fa.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\fa.pak
        • Size 1002KB
        • SHA256 e6a33472801c9a3774ae67caeb3f4778101ad715a70ca83c2463053fac8853e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\fi.pak
        • Size 617KB
        • SHA256 47f3d15268378f666a71c01f4c71752e397907319bfea45b208d84d3dde0ac65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fil.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\fil.pak
        • Size 698KB
        • SHA256 5d132169ac855704ae19d33d603cd0b3875a040380d057141a434823d32cffab
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\fr.pak
        • Size 721KB
        • SHA256 8b4563c764abbaf01e93107f911bd47f39c3a77e28648046f7800c2cef0172f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\gu.pak
        • Size 1.4MB
        • SHA256 199f6481582a48a8b1e8c0ce45c83c58ddc8d709216860b4315da731f516e908
        • MD5 SHA1 SHA512 SSDEEP TLSH

        he.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\he.pak
        • Size 877KB
        • SHA256 c283dd012f2ada6a82ce809a001ac275b23e5e55a33543f31a2de4296478b07d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\hi.pak
        • Size 1.5MB
        • SHA256 ce24189f4ee5dce6b7d8fe523ac2e603ec22dc3a6d01b6e73ba051b83e6c2cd4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\hr.pak
        • Size 674KB
        • SHA256 25345235918f877cd08a76e2456bbc81beb7fc5c34e3e454f725ad7016d58670
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\hu.pak
        • Size 721KB
        • SHA256 375c5539c79971d5c772c5145e12f7fd068166830ec52314379571431ad76a47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        id.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\id.pak
        • Size 598KB
        • SHA256 b2a8a8bf8b0e519c5513bd8a3585fe73dc39022d1873f6e12bc9a9201eafea3b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        it.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\it.pak
        • Size 653KB
        • SHA256 562643bd150ec5bd78508b5e5eb7f8d85d55ff838534aba277e452829bbb6730
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ja.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\ja.pak
        • Size 796KB
        • SHA256 cec10b6f1d27db699cfbf6b6c03270574497a20d686cdf6487a6f702f4295bca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\kn.pak
        • Size 1.6MB
        • SHA256 8ece9919ebdf9747891fb1dd1628ebf4c4b7f29bb572a8740f5602d05ecb3619
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ko.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\ko.pak
        • Size 677KB
        • SHA256 7c3edacb5d5c42578044da20f8f36c53914b92b117c602c69f6289c102530bd8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lt.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\lt.pak
        • Size 734KB
        • SHA256 28e9142d90ef2bcc3e2e080e4530283469cd20016cacd937ffae36fe40b40c09
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\lv.pak
        • Size 731KB
        • SHA256 e24b0a613d1938165939da9b13c44e71f7efae5d63f6d7740967ddbbfb2a9413
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ml.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\ml.pak
        • Size 1.6MB
        • SHA256 615bcd6a3ebb38d5b493c9234415b5c3cf5a736bf36d770ed10a4e6ced771a60
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\mr.pak
        • Size 1.3MB
        • SHA256 38d55029feb5e3c02dbf09a47bc1247def1d37674e5f49f1ca9c3a94d50fa05e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ms.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\ms.pak
        • Size 629KB
        • SHA256 05ca8159ca326b7771452016b157fc497b6fd516ed4a07ae7c8bf8ce27f13adf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nb.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\nb.pak
        • Size 601KB
        • SHA256 41b6d4edcc4d337c7bad85bb938e36230585ed317e137fd81ad7951abc372184
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\nl.pak
        • Size 627KB
        • SHA256 22a6c897b6cfa6035859034af6e5f04c7b9cad57599cc76b3aca5d5294518124
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\pl.pak
        • Size 700KB
        • SHA256 5c3ea243cbcf2b02f4ebb4c6d2084911a659ba004577f8d7e7be042909b40554
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-BR.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\pt-BR.pak
        • Size 657KB
        • SHA256 59097afdd559a1f5226a21bb4ca7e9f02a67324e24cfdd11c95fa4b84ffed74a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-PT.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\pt-PT.pak
        • Size 661KB
        • SHA256 3587df3daf2deb4f7b1344c8bbd6060c01e77666b7ce76f3cd685e2b90c02c76
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\ro.pak
        • Size 686KB
        • SHA256 5cccf3499e269c04129313727365f731e626fd9f9c13ef7be6923ef0004a93f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\ru.pak
        • Size 1.1MB
        • SHA256 d7b44e59fe5a3e7c404f13c02f3ef3937b3ce85478b71357b333076c9f2da608
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\sk.pak
        • Size 713KB
        • SHA256 f596900d469a427534ea3e1d89fcc8ba1d57f2feb926e24a6b28c765a9ad891b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\sl.pak
        • Size 682KB
        • SHA256 761c168cdd0b0d3059a8443d0a4ccdcbb7117cf33f942dab656d6d52c86b7ac8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\sr.pak
        • Size 1.0MB
        • SHA256 3b5f56f39f5dcf2e0892d9c4ba42651ac40e3190fb7c2a7814f8d379341740c1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\sv.pak
        • Size 609KB
        • SHA256 dc87c14774ff4bdf92b3a6c07fdcaf8ff6b75daf61dc4194570a9a92251b53d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sw.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\sw.pak
        • Size 645KB
        • SHA256 cfeac9831d79358ebe74aba22b97bbe92f944d8698579b301e93b31f9fc84231
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ta.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\ta.pak
        • Size 1.6MB
        • SHA256 b0d00020375764809d8bea9af7aa41af602dfd1c40a16f13d99a1a93a84201e6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        te.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\te.pak
        • Size 1.5MB
        • SHA256 af69ebaa5eaaffb78c15ea3365c90c66d8d54870cc0c9e9e56be6b7f16f0b250
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\th.pak
        • Size 1.3MB
        • SHA256 cc482b8150cc038bf579fafd83966a6874679125f58ccac0a3e2532f01d5a3ed
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\tr.pak
        • Size 656KB
        • SHA256 491e72d429f624cacf76e7c6850fa70b98ff5fa58ff838f99d8aaef78023c73f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\uk.pak
        • Size 1.1MB
        • SHA256 fc6a7d98ede5fdaca5fbb7118262a0c042c999d3c8752c2126fb1b5751fe42e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\ur.pak
        • Size 986KB
        • SHA256 74442c280cba9a3769e0d115b24a79eaba711ef79d04d9192dd7a2dfcb083307
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\vi.pak
        • Size 780KB
        • SHA256 63e8ab8827fdb5f9c1677d0bfd4c00b9188550d1a1f729b1a66c5afb989483cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\zh-CN.pak
        • Size 558KB
        • SHA256 b840baf265bde98314ec678e54b73eb91eca2b8ebd62bca5aa9c01596c8e477f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-TW.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\locales\zh-TW.pak
        • Size 551KB
        • SHA256 ac7ae67d4cc9fafdded38ca3d837d3ab20fd5ff7beff8f7a81d22727f33efd24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources.pak
        • Size 6.8MB
        • SHA256 a6db258ba22e9a9d440a6aac5c4189d26d337b0a3cfa948fdfc082869740b2b9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\@napi-rs\canvas-win32-x64-msvc\icudtl.dat
        • Size 10.0MB
        • SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\@napi-rs\canvas-win32-x64-msvc\package.json
        • Size 637B
        • SHA256 82baadf7af9491a1047f977b667e9cc939cece91da1b0f798dd0d186c48856af
        • MD5 SHA1 SHA512 TLSH

        skia.win32-x64-msvc.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\@napi-rs\canvas-win32-x64-msvc\skia.win32-x64-msvc.node
        • Size 26.0MB
        • SHA256 4b84487b59a595b269cb994f90669602d07bd6670305d5c8c4a1622ee2b8467a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        .codeclimate.yml

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\.codeclimate.yml
        • Size 208B
        • SHA256 3641875e15f3cf7a09a245414d7717f88831d41c1ee0d241be1b33465b89b582
        • MD5 SHA1 SHA512 TLSH

        .editorconfig

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\.editorconfig
        • Size 115B
        • SHA256 45cac0fcacf725939699e02bbe9a4910e4aa955876e2800acca2e069aa776019
        • MD5 SHA1 SHA512 TLSH

        .eslintrc.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\.eslintrc.js
        • Size 896B
        • SHA256 0ddfbda0c594ca371f67baaa166734f5075d34ef56fdd2984f574564843c2a66
        • MD5 SHA1 SHA512 TLSH

        .jekyll-metadata

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\.jekyll-metadata
        • Size 24KB
        • SHA256 e51c201effba98383bc00ca20c945550405b23cf431c1b8a80276cd0a8241565
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CHANGES.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\CHANGES.md
        • Size 11KB
        • SHA256 dfb792e5a1bf94399d7c11227197158d9851d64520f400ac9848435364fc64f6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE.markdown

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\LICENSE.markdown
        • Size 32KB
        • SHA256 566c953c6090b1218ca6217dd7359d45dde46581968586dc607d59a78af6a9c4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        README.markdown

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\README.markdown
        • Size 678B
        • SHA256 5eee3659204ed8f04b58d388b2dae55539c5cbcda733e4e945811c9121a68ede
        • MD5 SHA1 SHA512 TLSH

        deps.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\deps.js
        • Size 1KB
        • SHA256 35b1b517365d5935151333ef8b57048261b79573b765e96e5ba69aa0cc05a8bb
        • MD5 SHA1 SHA512 TLSH

        jszip.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\dist\jszip.js
        • Size 365KB
        • SHA256 e2e1be5c22d3f15b0b89e676d3eede94644529996d9898a6b1587c9908a78506
        • MD5 SHA1 SHA512 SSDEEP TLSH

        jszip.min.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\dist\jszip.min.js
        • Size 95KB
        • SHA256 acc7e41455a80765b5fd9c7ee1b8078a6d160bbbca455aeae854de65c947d59e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        graph.svg

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\graph.svg
        • Size 44KB
        • SHA256 4ee632fe1845c8981cf958f30a34b585ccd1d6562d8f1657938a67ca4d25e6af
        • MD5 SHA1 SHA512 SSDEEP TLSH

        base64.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\base64.js
        • Size 3KB
        • SHA256 5df6b73d9ed6c317c67835f3427d860c16fd93acf503eb471fd897167e747fdb
        • MD5 SHA1 SHA512 TLSH

        compressedObject.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\compressedObject.js
        • Size 2KB
        • SHA256 b91f823d32f39cda4002bc0954993f20ffea6747d42109253b7d6347b4abb31b
        • MD5 SHA1 SHA512 TLSH

        compressions.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\compressions.js
        • Size 350B
        • SHA256 50e650a7eaf2a54ede299c12dfba30a362c7644e7c00df0d16ab3cf228bb77b0
        • MD5 SHA1 SHA512 TLSH

        crc32.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\crc32.js
        • Size 1KB
        • SHA256 63750f4131b1eabb545a4718c863af860184baf033c76851be282f1c7f5dcba9
        • MD5 SHA1 SHA512 TLSH

        defaults.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\defaults.js
        • Size 284B
        • SHA256 585eeeb04375fe7bd27e846d8941d26fd435efb36a87fba9ff137fd8b97880a6
        • MD5 SHA1 SHA512 TLSH

        external.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\external.js
        • Size 438B
        • SHA256 982fed36a600668223d1d0ce8c446f87ccd1f82634df18f206b4a2f4096e31c7
        • MD5 SHA1 SHA512 TLSH

        flate.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\flate.js
        • Size 2KB
        • SHA256 57f1452680cf7af6a9659de398d847dd1e870ea3a601662c498b073c640eb547
        • MD5 SHA1 SHA512 TLSH

        ZipFileWorker.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\generate\ZipFileWorker.js
        • Size 17KB
        • SHA256 907d84ea582def3954aade073444f398bef6edf1b931084da4a77bb4dc26c1c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\generate\index.js
        • Size 1KB
        • SHA256 19f13a6ff615464657aa5b8651e669950c633095cea37d3179a51d8c645adb3b
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\index.js
        • Size 1KB
        • SHA256 0fdb844fcdd6fd8ce8ced5e20b37cdabb629b4c155a1d3fb5df29c69eeb4f228
        • MD5 SHA1 SHA512 TLSH

        license_header.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\license_header.js
        • Size 388B
        • SHA256 27873abeec2df3693480a8d1b8fe17dd61bee843d1b39c1c9cfab57ffe93099e
        • MD5 SHA1 SHA512 TLSH

        load.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\load.js
        • Size 3KB
        • SHA256 7e3181c7669cfc584f29f3060cdf210021ec5c723c36af039fb5433de52d25da
        • MD5 SHA1 SHA512 TLSH

        nodejsUtils.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\nodejsUtils.js
        • Size 1KB
        • SHA256 763d0af1cde619da6d9cfbe1ee82e2e32d86349d8abe32613c7481e8143740e1
        • MD5 SHA1 SHA512 TLSH

        NodejsStreamInputAdapter.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\nodejs\NodejsStreamInputAdapter.js
        • Size 1KB
        • SHA256 dcf35c72168e825d2e634cfa13a289ba8c7a76da0584a39b785611d0d736ddd9
        • MD5 SHA1 SHA512 TLSH

        NodejsStreamOutputAdapter.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\nodejs\NodejsStreamOutputAdapter.js
        • Size 1KB
        • SHA256 cc88c3a8e6aa74262bd1ecc452ee8f78c48a16a0b6095d2f9df7500320957799
        • MD5 SHA1 SHA512 TLSH

        object.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\object.js
        • Size 12KB
        • SHA256 51f8d689e02f62837edeb449866238cf03df7d779d260d19a683abee27651273
        • MD5 SHA1 SHA512 SSDEEP TLSH

        readable-stream-browser.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\readable-stream-browser.js
        • Size 441B
        • SHA256 ed51f0a96964f61d5700b6c681b055dd07e27140f1b719d2fe1c64fd14b506e0
        • MD5 SHA1 SHA512 TLSH

        ArrayReader.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\reader\ArrayReader.js
        • Size 1KB
        • SHA256 bb711509472587e8c88e8e311d5c86bde76528286793afbc6573c1ddd9674814
        • MD5 SHA1 SHA512 TLSH

        DataReader.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\reader\DataReader.js
        • Size 3KB
        • SHA256 e8e0b4728ddc6fc3dbe5b449d87b884c4b3be99862bd1edf6a700ecfb3b3b247
        • MD5 SHA1 SHA512 TLSH

        NodeBufferReader.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\reader\NodeBufferReader.js
        • Size 519B
        • SHA256 1703f32f1cba687ac630690901848ab07a1b6a06b0e8fbe88a8ae6f5a67da84d
        • MD5 SHA1 SHA512 TLSH

        StringReader.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\reader\StringReader.js
        • Size 1020B
        • SHA256 477a2e887eee11a56a50726152327b2a4d75d778f96463933197706e1ce90d59
        • MD5 SHA1 SHA512 TLSH

        Uint8ArrayReader.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\reader\Uint8ArrayReader.js
        • Size 652B
        • SHA256 198816389bc1c62b3ca7c5c6f5fdff1b076f83e5bd74b37ee5b504e6d7e155d9
        • MD5 SHA1 SHA512 TLSH

        readerFor.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\reader\readerFor.js
        • Size 904B
        • SHA256 1eef5a73bba844922812893f9a7e01cfdb54072aae42f7ecf67c41dc925ea9cf
        • MD5 SHA1 SHA512 TLSH

        signature.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\signature.js
        • Size 294B
        • SHA256 18e10348490604003a2480aea813a6e90eaaac26c050d559c281618b9aaded56
        • MD5 SHA1 SHA512 TLSH

        ConvertWorker.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\stream\ConvertWorker.js
        • Size 648B
        • SHA256 ae1dc8573bab7e5be4a4cb9958201e3e763cb2f2392a04d9a8dc440d683042f0
        • MD5 SHA1 SHA512 TLSH

        Crc32Probe.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\stream\Crc32Probe.js
        • Size 599B
        • SHA256 8e186e5e0ab42fff35907666a90266420751613c28266e5809b7bfa2d55a3a9a
        • MD5 SHA1 SHA512 TLSH

        DataLengthProbe.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\stream\DataLengthProbe.js
        • Size 829B
        • SHA256 638e65360b0fbe1f4e0b2628fd3a1782a4df59c477d454007fa52b1a2587b93f
        • MD5 SHA1 SHA512 TLSH

        DataWorker.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\stream\DataWorker.js
        • Size 2KB
        • SHA256 8203f14e856d33aa9afc272a576f169b29980e8da0ee0f633e6e5f23cfa48a3e
        • MD5 SHA1 SHA512 TLSH

        GenericWorker.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\stream\GenericWorker.js
        • Size 8KB
        • SHA256 ae76cecd1d728ca41dd6ae0665b258f442da64d9b25ff94785dcb80a501b8be1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StreamHelper.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\stream\StreamHelper.js
        • Size 6KB
        • SHA256 aebc6518b4871d106e799f90139d55620d02e9413ef2a7b0f953a9cea7bda124
        • MD5 SHA1 SHA512 SSDEEP TLSH

        support.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\support.js
        • Size 1KB
        • SHA256 7629a6ef610030595e4c2211249f487e44cfbe4b8299105d64b5491d87fd3a51
        • MD5 SHA1 SHA512 TLSH

        utf8.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\utf8.js
        • Size 7KB
        • SHA256 5bdfe3666fe57640bc791b4d6d2fc00853f4d954596260138bf488054fa9df5a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        utils.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\utils.js
        • Size 16KB
        • SHA256 c77e896a1e47b44939e9dcdc2e05275fd83c1d69ee252089f9a1f44ba8c5cd1d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zipEntries.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\zipEntries.js
        • Size 11KB
        • SHA256 0891a1a82e557c64a51893a5ad70dec76f6b5c91170047ab28617286c96c6ec7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zipEntry.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\zipEntry.js
        • Size 11KB
        • SHA256 105b8cec00daa3852f92371b3898d6eab52eeb984113ba8958d09bce701e34df
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zipObject.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\lib\zipObject.js
        • Size 4KB
        • SHA256 18871af92fac75d015ba7d4d3105c0746839ab089f78670cb86d76bfa53b1ce6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\package.json
        • Size 1KB
        • SHA256 dbaa02a0b92bfe7641b7a040e39e688ab5366bfb062a07d8ee257039eed5f1f7
        • MD5 SHA1 SHA512 TLSH

        sponsors.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\sponsors.md
        • Size 704B
        • SHA256 05023a2cdb8fbddf99c368ce364e008f99d2b8da90ce5aec67d2ad633665f672
        • MD5 SHA1 SHA512 TLSH

        tsconfig.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\tsconfig.json
        • Size 10KB
        • SHA256 513defa2eb1fc4aed9407b2b08fb21ab1c9c54b043609fe6c2b344891392606d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        FileSaver.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\app.asar.unpacked\node_modules\jszip\vendor\FileSaver.js
        • Size 7KB
        • SHA256 67421e50f3ff4c97f1c3fa3749bf071cc57357c0da97783f4f8fe3affa3a52cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\snapshot_blob.bin
        • Size 356KB
        • SHA256 4bfe54996b0a08dbc37d298f21a3b45034b0b9a3fb75498442887bba2c96037e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\v8_context_snapshot.bin
        • Size 722KB
        • SHA256 43fc0784f72a4b1f15909553c88a297539a2bc5e86e162211499c908b7f96abb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\vk_swiftshader.dll
        • Size 5.2MB
        • SHA256 0fc94c88bf7cedaf866da5c959a1c52fd1b8ddb2d72185bd8fa2843fe9112e7c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader_icd.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\7z-out\vulkan-1.dll
        • Size 908KB
        • SHA256 1843299ee154fc50d6d11ff5918742852d70467385e10b7a1019ea3358f3085a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        UAC.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\UAC.dll
        • Size 14KB
        • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WinShell.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH

        nsDialogs.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsExec.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\nsExec.dll
        • Size 6KB
        • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsis7z.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsp73D0.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/704-67-0x0000000073630000-0x0000000073DEC000-memory.dmp

        memory/704-54-0x0000000073630000-0x0000000073DEC000-memory.dmp

        memory/704-65-0x0000000007CA0000-0x0000000007CB1000-memory.dmp

        memory/704-64-0x0000000007D20000-0x0000000007DB6000-memory.dmp

        memory/704-61-0x000000006FFF0000-0x000000007003C000-memory.dmp

        memory/704-57-0x0000000006190000-0x00000000064EB000-memory.dmp

        memory/704-56-0x0000000073630000-0x0000000073DEC000-memory.dmp

        memory/704-55-0x0000000073630000-0x0000000073DEC000-memory.dmp

        memory/6176-74-0x000000006FFF0000-0x000000007003C000-memory.dmp

        memory/6176-77-0x0000000070150000-0x00000000704AB000-memory.dmp

        memory/6544-28-0x0000000005E40000-0x0000000005EA6000-memory.dmp

        memory/6544-50-0x0000000073630000-0x0000000073DEC000-memory.dmp

        memory/6544-40-0x00000000069E0000-0x0000000006A00000-memory.dmp

        memory/6544-41-0x00000000076A0000-0x0000000007743000-memory.dmp

        memory/6544-42-0x0000000073630000-0x0000000073DEC000-memory.dmp

        memory/6544-43-0x0000000007DD0000-0x000000000844C000-memory.dmp

        memory/6544-44-0x0000000007750000-0x000000000776A000-memory.dmp

        memory/6544-45-0x00000000077C0000-0x00000000077CA000-memory.dmp

        memory/6544-46-0x0000000007960000-0x000000000798A000-memory.dmp

        memory/6544-47-0x0000000007990000-0x00000000079B4000-memory.dmp

        memory/6544-48-0x0000000070150000-0x00000000704AB000-memory.dmp

        memory/6544-37-0x000000006FFF0000-0x000000007003C000-memory.dmp

        memory/6544-36-0x0000000073630000-0x0000000073DEC000-memory.dmp

        memory/6544-35-0x0000000006A00000-0x0000000006A36000-memory.dmp

        memory/6544-34-0x0000000006420000-0x000000000646C000-memory.dmp

        memory/6544-33-0x00000000063E0000-0x00000000063FE000-memory.dmp

        memory/6544-32-0x0000000005F20000-0x000000000627B000-memory.dmp

        memory/6544-29-0x0000000005EB0000-0x0000000005F16000-memory.dmp

        memory/6544-27-0x0000000005750000-0x0000000005772000-memory.dmp

        memory/6544-26-0x0000000073630000-0x0000000073DEC000-memory.dmp

        memory/6544-25-0x0000000073630000-0x0000000073DEC000-memory.dmp

        memory/6544-24-0x00000000057F0000-0x0000000005E3A000-memory.dmp

        memory/6544-23-0x0000000002BD0000-0x0000000002C06000-memory.dmp

        memory/6544-22-0x0000000073642000-0x0000000073643000-memory.dmp