Overview

overview

8

Static

static

3

Asset Mana....2.exe

windows10-2004-x64

6

Asset Mana....2.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

8

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

3

Asset Mana...io.exe

windows10-2004-x64

7

LICENSES.c...m.html

windows10-2004-x64

3

LICENSES.c...m.html

windows11-ltsc_2024-x64

3

d3dcompiler_47.dll

windows10-2004-x64

1

dxcompiler.dll

windows10-2004-x64

1

dxil.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

resources/app.js

windows10-2004-x64

3

resources/app.js

windows11-ltsc_2024-x64

3

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-ltsc_2024-x64

3

resources/...ry.dll

windows10-2004-x64

1

resources/...ry.dll

windows11-ltsc_2024-x64

1

vk_swiftshader.dll

windows10-2004-x64

1

vulkan-1.dll

windows10-2004-x64

1

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

8

$PLUGINSDI...7z.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    901s
  • max time network
    803s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/10/2026, 22:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Asset Manager Studio Setup 1.2.2.exe
  • Size 101.2MB
  • Sample261013-15cl1ade39
  • SHA256 183aae37c45116f15bfa46caf504ac4902a391c864e12ed92c3cc29bfcc462e0
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryexecutionspywarestealer

Malware Config

Signatures

  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

    spywarestealer
  • Command and Scripting Interpreter: PowerShell 1 TTPs 3 IoCs

    Using powershell.exe command.

    execution
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Executes dropped EXE 14 IoCs
  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

    defense_evasion
  • Loads dropped DLL 30 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 6 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies registry class 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 10 IoCs
  • Suspicious behavior: LoadsDriver 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 26 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio Setup 1.2.2.exe
    "C:\Users\Admin\AppData\Local\Temp\Asset Manager Studio Setup 1.2.2.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:5824
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
      2⤵
      • Hide Artifacts: Ignore Process Interrupts
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2588
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:4232
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3992
  • C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe
    "C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Reads the TCP/IP host and domain name from the registry
    • Checks SCSI registry key(s)
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:1988
    • C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe
      "C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1976,i,13258489861497025817,16471555878464316443,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1980,i,13966209803240889842,4058606116253551017,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1972 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1548
    • C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe
      "C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --field-trial-handle=1976,i,13258489861497025817,16471555878464316443,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1980,i,13966209803240889842,4058606116253551017,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2028 /prefetch:11
      2⤵
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      PID:4740
    • C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe
      "C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1791938366121898 --launch-time-ticks=657766771 --field-trial-handle=1976,i,13258489861497025817,16471555878464316443,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1980,i,13966209803240889842,4058606116253551017,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2564 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1468
    • C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe
      "C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1791938366121898 --launch-time-ticks=658249067 --field-trial-handle=1976,i,13258489861497025817,16471555878464316443,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1980,i,13966209803240889842,4058606116253551017,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3384 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2332
    • C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe
      "C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --time-ticks-at-unix-epoch=-1791938366121898 --launch-time-ticks=658280659 --field-trial-handle=1976,i,13258489861497025817,16471555878464316443,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1980,i,13966209803240889842,4058606116253551017,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3528 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3144
    • C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe
      "C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --time-ticks-at-unix-epoch=-1791938366121898 --launch-time-ticks=659327744 --field-trial-handle=1976,i,13258489861497025817,16471555878464316443,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1980,i,13966209803240889842,4058606116253551017,4 --trace-process-track-uuid=3190708992871164437 --mojo-platform-channel-handle=3960 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2880
    • C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe
      "C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --time-ticks-at-unix-epoch=-1791938366121898 --launch-time-ticks=662091732 --field-trial-handle=1976,i,13258489861497025817,16471555878464316443,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1980,i,13966209803240889842,4058606116253551017,4 --trace-process-track-uuid=3190708993808206286 --mojo-platform-channel-handle=4156 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3536
    • C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe
      "C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --time-ticks-at-unix-epoch=-1791938366121898 --launch-time-ticks=662366582 --field-trial-handle=1976,i,13258489861497025817,16471555878464316443,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1980,i,13966209803240889842,4058606116253551017,4 --trace-process-track-uuid=3190708994745248135 --mojo-platform-channel-handle=4268 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3280
    • C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe
      "C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1976,i,13258489861497025817,16471555878464316443,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1980,i,13966209803240889842,4058606116253551017,4 --trace-process-track-uuid=3190708995682289984 --mojo-platform-channel-handle=4740 /prefetch:10
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:2204
    • C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe
      "C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --time-ticks-at-unix-epoch=-1791938366121898 --launch-time-ticks=788986711 --field-trial-handle=1976,i,13258489861497025817,16471555878464316443,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1980,i,13966209803240889842,4058606116253551017,4 --trace-process-track-uuid=3190708996619331833 --mojo-platform-channel-handle=4156 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2160
    • C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe
      "C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --app-path="C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --time-ticks-at-unix-epoch=-1791938366121898 --launch-time-ticks=793233664 --field-trial-handle=1976,i,13258489861497025817,16471555878464316443,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1980,i,13966209803240889842,4058606116253551017,4 --trace-process-track-uuid=3190708997556373682 --mojo-platform-channel-handle=3676 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2964
    • C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe
      "C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --field-trial-handle=1976,i,13258489861497025817,16471555878464316443,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1980,i,13966209803240889842,4058606116253551017,4 --trace-process-track-uuid=3190708999430457380 --mojo-platform-channel-handle=4844 /prefetch:14
      2⤵
      • Executes dropped EXE
      • Modifies registry class
      PID:2596
    • C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe
      "C:\Users\Admin\AppData\Local\Programs\Asset Manager Studio\Asset Manager Studio.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\Asset Manager Studio" --field-trial-handle=1976,i,13258489861497025817,16471555878464316443,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1980,i,13966209803240889842,4058606116253551017,4 --trace-process-track-uuid=3190708998493415531 --mojo-platform-channel-handle=4824 /prefetch:12
      2⤵
      • Executes dropped EXE
      PID:4728
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:4668
    • C:\Windows\System32\SecurityHealthHost.exe
      \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
      1⤵
        PID:3404

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            StartupProfileData-NonInteractive
            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
            • Size 17KB
            • SHA256 ad07f2bff199fc987c5d0800207c9c8f56483e9ceedc02020e5ecb37259f0b43
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            StartupProfileData-NonInteractive
            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
            • Size 16KB
            • SHA256 8a89fb4895b910108de80a4c5f9356ce7bddc95c004ca9a0107d9ebfd3237f55
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            __PSScriptPolicyTest_zztl0e5l.i2m.psm1
            • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_zztl0e5l.i2m.psm1
            • Size 60B
            • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            LICENSE.electron.txt
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\LICENSE.electron.txt
            • Size 1KB
            • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            LICENSES.chromium.html
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\LICENSES.chromium.html
            • Size 18.6MB
            • SHA256 62e3b53be6bbbb2e7747b7a55c8b4f4a3cf38b95e0fff594737b3bfdac8cf373
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            chrome_100_percent.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\chrome_100_percent.pak
            • Size 113KB
            • SHA256 34433fa04ddf5eb78b3b4e9c64a3af626e28641907ad7a6086614eb6a8f00a07
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            chrome_200_percent.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\chrome_200_percent.pak
            • Size 183KB
            • SHA256 581c8d53199c10512d31a340699f9ad269f8eea5fe6bc49e05c1bde98ee612aa
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            d3dcompiler_47.dll
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\d3dcompiler_47.dll
            • Size 4.5MB
            • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dxcompiler.dll
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\dxcompiler.dll
            • Size 24.5MB
            • SHA256 e12b0115ed17f7ecf8a02124f636f64ad7616aa1930215360b70bf40078d05ac
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            dxil.dll
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\dxil.dll
            • Size 1.4MB
            • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ffmpeg.dll
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\ffmpeg.dll
            • Size 3.0MB
            • SHA256 f7ec87420582ec37e15b9001c3d06c0a606bb34c3de889c515b14112621d2259
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            icudtl.dat
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\icudtl.dat
            • Size 10.3MB
            • SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            libEGL.dll
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\libEGL.dll
            • Size 510KB
            • SHA256 98f7c150ddd36f54b345f4a53d34e6f021ab0ebf3a420b59cbbcabbfa19a71f9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            libGLESv2.dll
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\libGLESv2.dll
            • Size 7.6MB
            • SHA256 054b4f2e2ee0ccd08d65c78e573fa92d80b0c9abd0b09629cf06815cb9fc59b9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            af.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\af.pak
            • Size 595KB
            • SHA256 973c21a2ccc0375a016b1ba0028cc3fb2cfa4e9ab82a52217fdff342ba43fbe5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            am.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\am.pak
            • Size 966KB
            • SHA256 ab591598cac20048c2b7a2d73eb4d1ca9054f9dda153eb51855935e969c7f54d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ar.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\ar.pak
            • Size 1.0MB
            • SHA256 dacb642f184b6aa20d062eae55b49101c507d7378d60e53a014a2631c0bb20bd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            bg.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\bg.pak
            • Size 1.1MB
            • SHA256 e854a940ef467662ee733bcf5c5aac0f5aef8d006200af173b4f840ab9f6d3ff
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            bn.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\bn.pak
            • Size 1.4MB
            • SHA256 2465ef35bd984ed78c1a0ffff00713facada7ca0d419104716eafb149187d9f8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ca.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\ca.pak
            • Size 670KB
            • SHA256 7f9a90bc5821548acd42546604c18d525b3b00f87094739ab95b5683d08aa79c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            cs.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\cs.pak
            • Size 696KB
            • SHA256 94c119305964dd203e4335ef1676f373d56fad9e27ae6e11987d790b2b3f5a41
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            da.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\da.pak
            • Size 626KB
            • SHA256 f097260d271900ebb3a6a68e42e49005d3441026904462c3b306c87e21f2d640
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            de.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\de.pak
            • Size 671KB
            • SHA256 1eec5b0a6d7a2888127c1a490d40497e2913460b96c4334815e278bc882802e9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            el.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\el.pak
            • Size 1.2MB
            • SHA256 f9715c939e27d6da75c89866aac6de5fe9f25baef524d85db2fd812750cc43b1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            en-GB.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\en-GB.pak
            • Size 542KB
            • SHA256 acefd35ede3e9dde3c91880bba726546cfb8e543712b7c7167b53867a0f155e7
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            en-US.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\en-US.pak
            • Size 548KB
            • SHA256 a02518efe75c630a1b5419af5ffdb1b16636b939139bccd7710e37f36ad9d55c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            es-419.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\es-419.pak
            • Size 661KB
            • SHA256 818f06880dc921662f0685d8f79d85f76ab7b5490deb7497208f307ba9c6d42e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            es.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\es.pak
            • Size 658KB
            • SHA256 5228d6bbac5909cf285aceeac65c042462c6da99b957f03f5c4070763bcba583
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            et.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\et.pak
            • Size 601KB
            • SHA256 c7364bca48cec7994e40a3169d465d6af04a66becbadccff24c9fa74d9410cbb
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            fa.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\fa.pak
            • Size 995KB
            • SHA256 d840449c2aa71835bfaa739156c5ad00c4d0709557e129e4c87ae8ca38c4d960
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            fi.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\fi.pak
            • Size 612KB
            • SHA256 6b09e983a58aca1a3b4bdfe35f4c8d37a568feda3ed680e14b24395ba04d880c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            fil.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\fil.pak
            • Size 694KB
            • SHA256 c5335e3b4468ebafd55fdbe77553a3838bfb6a1fd5a5ed0396598a0e96e7792d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            fr.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\fr.pak
            • Size 716KB
            • SHA256 06acba3cbd3f4e7cca4fa2103c5d71e8f6de3a7530717b0c72b454bd670be503
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            gu.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\gu.pak
            • Size 1.4MB
            • SHA256 897b9ed176073cd0e8a39004158a2ad9877bc69f79cf260e029937fc9c556f95
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            he.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\he.pak
            • Size 871KB
            • SHA256 b777e7ede2e0ba88186a1a6dcacbcc918e7983c2027922f92994f937a1f0327e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            hi.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\hi.pak
            • Size 1.5MB
            • SHA256 966845384bd7213dd03e87a80655cdcb2bb02d180e778fa0583e86edcdba73cc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            hr.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\hr.pak
            • Size 670KB
            • SHA256 30d7259b46052fa6735cab8a6d4cba682df021e68998a4b3723248a5b806eacd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            hu.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\hu.pak
            • Size 717KB
            • SHA256 3bf2106670f2a461ec3454d790bf94010079e4e683d24aabd4a19e8d89e333c9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            id.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\id.pak
            • Size 592KB
            • SHA256 4d003b8e85f4daea7c28c4f6854d46a62b32abe9973e6df764e2882b4472ea64
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            it.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\it.pak
            • Size 648KB
            • SHA256 3e241f9341c9593ecbe3a2a74a5249e8d737962741b51fe60143e3529470d716
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ja.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\ja.pak
            • Size 791KB
            • SHA256 03427863b47fcde8164855a13d01f09cfcf27bf9ea59d6abf74f2f7b255fb1ef
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            kn.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\kn.pak
            • Size 1.6MB
            • SHA256 1dc837117f2b3dc69fc36c1c199addc999d5fb5a131072680796accd25e33b8c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ko.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\ko.pak
            • Size 671KB
            • SHA256 e43762e4f3b00819c2c5570ed292a6d42e53bbb00220c3f76a6aa0d502a76060
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            lt.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\lt.pak
            • Size 729KB
            • SHA256 1cf37f7eafa0612186eebb76406767518f9b5dba12872bc3170b9a309c5050cd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            lv.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\lv.pak
            • Size 726KB
            • SHA256 01913d9951959803c419816189ba5517568b1f36f70c539549713c4579105be9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ml.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\ml.pak
            • Size 1.6MB
            • SHA256 98c8ecff32021c532167cbd7e60b714c6dd8e240a3527af141da9d3916ea7d4f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            mr.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\mr.pak
            • Size 1.3MB
            • SHA256 962928ac0c648b426dbd5dc930528900935acca4b336be6cf3fd911e99ef400f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ms.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\ms.pak
            • Size 624KB
            • SHA256 7b5ecc027a33e3123596cacfe6d4a8b33c8185c6d90d65aceb686aaaa234c5c0
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            nb.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\nb.pak
            • Size 598KB
            • SHA256 c4bfbb6dfa8c2f38caa27f77b58a5a373792284032d998f48469b2d8f050b084
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            nl.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\nl.pak
            • Size 623KB
            • SHA256 1f9f8fdf67a93b571823fcdbf4f6c1132663a92bf199fcd8b3554a1404138182
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            pl.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\pl.pak
            • Size 696KB
            • SHA256 1c328e8286098d6758aae4562ad0465094bf38477035475ea3b7ce9729c59518
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            pt-BR.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\pt-BR.pak
            • Size 652KB
            • SHA256 76af448316964d70f5ca6ea2d3d10dfdda055521d981c0342c8eb2df1aace27d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            pt-PT.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\pt-PT.pak
            • Size 656KB
            • SHA256 8ecd368ebcf0c4cbd3decb1709c1e6cda9ebd75dc4c3d0869b86dcf959c15565
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ro.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\ro.pak
            • Size 681KB
            • SHA256 bb8cb9b4b9708cba17c6a1b00d448c500ecb1658019fd2451868603c68251e92
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ru.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\ru.pak
            • Size 1.1MB
            • SHA256 4f7ef4e041932011eabc4d2dc8f8544106f57ee62c023e6b6a9a3a3ac23a7cc2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            sk.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\sk.pak
            • Size 708KB
            • SHA256 9494cb93b7dd65cef73072d315c7c031005a3783594fdf43fe96d9e531f5cda7
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            sl.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\sl.pak
            • Size 678KB
            • SHA256 b50824ca2479dc29b404a8e2c252a9a791f444ba10b839d09b684b52cbb7b4b4
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            sr.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\sr.pak
            • Size 1.0MB
            • SHA256 02224e36d8d12e79c22e573425b5e7b2505e1f68d8be4cebada710a9c0ebdb00
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            sv.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\sv.pak
            • Size 605KB
            • SHA256 ba098c7e48f588677686e8c4353432ef185ed4d659bd43d0b1bc76029b36aa30
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            sw.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\sw.pak
            • Size 640KB
            • SHA256 c806d266dacc573c6f2a852bbba1cf1980063f08a803e6a0f5783c1418b4c16d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ta.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\ta.pak
            • Size 1.6MB
            • SHA256 cc82344df7ec4fefc02fc36f5d1af7286b27f4c267477bffbb0ac4f4fefab901
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            te.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\te.pak
            • Size 1.5MB
            • SHA256 f354b638c25843ec70a625d98066d1e291d6567830a327a308262f7872739f43
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            th.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\th.pak
            • Size 1.3MB
            • SHA256 72495fa1c87e6009499c3c478eb8ff1dc295e4fa8e1e97c915c4334cd48df45f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            tr.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\tr.pak
            • Size 651KB
            • SHA256 d42ef3d1bfd531ef93d1e30e34d0c9a9fad37d08aa26fb61930d67ef31e5a471
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            uk.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\uk.pak
            • Size 1.1MB
            • SHA256 2b3e02603e4d06b513b59db0d262971c8ec9e7f85233c6862f52e72bbc4e0afc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            ur.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\ur.pak
            • Size 981KB
            • SHA256 0f5565df4484d9c0ed2f3033156e876aa8ff25406fb5a628ba12dc2588d5f7b9
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            vi.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\vi.pak
            • Size 774KB
            • SHA256 b5ae891cb2c1b98e01b7b819946849b7f1530b2991584b74045766f566ab739a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            zh-CN.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\zh-CN.pak
            • Size 554KB
            • SHA256 d9ba93569044c34fdc3aea0a0be892e0b6eab8a71e3008bc854924bd5efcd19a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            zh-TW.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\locales\zh-TW.pak
            • Size 547KB
            • SHA256 217b6776de0fc342d2ba3259aef9c5a6d9747f20942791be4e5fa16cb412b970
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            resources.pak
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources.pak
            • Size 6.4MB
            • SHA256 741b7aebbec65ed7af754530e77b45ea4274e8f7c012c4396de789563a1183a5
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            app-update.yml
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\app-update.yml
            • Size 155B
            • SHA256 88249caf3696cf4c07de31de122a8a956fe555fdf4df0fa08769d2ab9d6c8831
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            app.asar
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\app.asar
            • Size 1.1MB
            • SHA256 27976f3491ba1dea0ecbf23ed19bcd1674dbe5fa0cbd4e87d82923e72e3231c6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            elevate.exe
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\elevate.exe
            • Size 117KB
            • SHA256 ed2edfb13fb387a6063e71631578f51dfe1d34b9b57fb44690e957b0efd1409a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            qi.1
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\qi.1
            • Size 33KB
            • SHA256 a160312bb8b72ea5fe5f67fafe5d6722726c1d0eeb7a7c1413849864da8944b3
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            qm.1
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\qm.1
            • Size 8.3MB
            • SHA256 332f7d4df46502736fe9c7431ef30c46495a8d4b89e2e19cc0d3f02592f82913
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            qo.1
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\qo.1
            • Size 1.4MB
            • SHA256 34634204e3e7c802e5f277dc13d3b64f2dfbfa7cd1bcf91a0efcc7e16cb78edd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-01.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-01.avif
            • Size 28KB
            • SHA256 d864c42b0a4bbf3f6646af778912cceec0b0a3940a9075e2d8bcdb7220b26284
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-02.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-02.avif
            • Size 89KB
            • SHA256 e93a4b06997fbcbf557348b2b322142db492fc645c1d5d9c51e21d432e9a44ec
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-03.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-03.avif
            • Size 39KB
            • SHA256 f2c06b30bb17d678b9d305a569c67c280c0fab183f6893c9f77241c72464bbb6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-04.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-04.avif
            • Size 52KB
            • SHA256 9e8c6452e9594c5005ae7b660e5fefcc5b239b42df3e5acb7fb973e6c7ed74b6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-05.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-05.avif
            • Size 39KB
            • SHA256 3b8d8139cacecd7cdaa1e2b34a830b230d5e7d958705ee1f1ec6e7de63eddd81
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-06.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-06.avif
            • Size 27KB
            • SHA256 9629c956c834eea4a4a5baa5306622968b62aaae1f2f4216a004c7e45afb40d8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-07a.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-07a.avif
            • Size 21KB
            • SHA256 6d62e142a64ea61e5096a276092e3c3cfce37ee03007366b326cf5e07e9fdae8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-07b.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-07b.avif
            • Size 20KB
            • SHA256 5a15f47ab68d7ea921826790483f418dae5b72120da06c5bfc918af0721f9abe
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-08.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-08.avif
            • Size 23KB
            • SHA256 86ee679fb0c5286c4d823f0ef442c2795089f8f41cb249c90d836eae75648b2b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-09.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-09.avif
            • Size 27KB
            • SHA256 1d52092c0dd8a92b891e114afc595f536919230377e3e1b8edbc8a7250f196bc
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-10.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-10.avif
            • Size 30KB
            • SHA256 abd99bb888f1c26d679d02391a07b7bfff6ffc99d59560296e2882e7a1ae1a31
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-11a.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-11a.avif
            • Size 24KB
            • SHA256 aae6679ba78fa8d8498a5c3225aff30d3339fad0e65929f639cbe5194c59cdce
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-11b.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-11b.avif
            • Size 22KB
            • SHA256 4aab9c20a8f03b34d8efed4a08784bf7f655de4da6ba1faf9cd578ff5acee40b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-11c.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-11c.avif
            • Size 21KB
            • SHA256 0df74eaa91c81412d9488bf2cb53c6f57266d7858a8b916af878e39b80772384
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-11d.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-11d.avif
            • Size 24KB
            • SHA256 bd445e859f2326456964744663f0f82d9f980d0001d819a099dba9f8abf8e0ed
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-12.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-12.avif
            • Size 42KB
            • SHA256 f7f71506f00f6661405c45079d63750b697d5c035a13b423d27afef643d1b0c1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-13.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-13.avif
            • Size 36KB
            • SHA256 fa7d8acf8b713af81a9f9987e4f7ad978e69f29722d4485695b3addc742ddca2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-14.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-14.avif
            • Size 35KB
            • SHA256 97f4e7c26447d9e7d8a8ed319ce198675f773af88731c140d2c9ae4bc7e0500c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-15.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-15.avif
            • Size 49KB
            • SHA256 29611e2ebc791485979714f5fe1cb69310b5096a14780d9b75709183c74d14cf
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-16.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-16.avif
            • Size 61KB
            • SHA256 3edc80f0361abb6f2259b46375c162e7c81ded76245b2c67ecfe60bc6253d951
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-17.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-17.avif
            • Size 50KB
            • SHA256 bdaa1780f9ad911154cc55ddc919a9a9469ecd5e15aa222a685a4171d14ec357
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-18.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-18.avif
            • Size 55KB
            • SHA256 1da6401e0a09a7fff566c1d4c527a490ae9c2659cb285862ab04e5967c087437
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-19a.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-19a.avif
            • Size 66KB
            • SHA256 dfec5b52752e2ae24bece901593f299bdc42a3b90901b35fce313f83befe0971
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-19b.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-19b.avif
            • Size 70KB
            • SHA256 389ccfd1e27468c6bb1831e6465caa8ea88daef19e653833bde0061b056a9bd2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-20.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-20.avif
            • Size 42KB
            • SHA256 5cfea919e228a7ff064ac51e2c51520a26e36161d1a4ef1ab0c2e7e7d96e4e94
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-21.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-21.avif
            • Size 59KB
            • SHA256 97e2227ea85e78d7408b004cb29fe85a5f1b65f34e8a8291d45b435683fa5a1d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-22.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-22.avif
            • Size 42KB
            • SHA256 6e3e75cd419a582c49c9cb849c77d4f8d8714d94bb763f70d37a36bd883f61b1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-23a.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-23a.avif
            • Size 40KB
            • SHA256 eb017b747416b80d79eab9d95176cfdb195d2f9bfab6c68c7bb6bd0f4a219994
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-23b.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-23b.avif
            • Size 44KB
            • SHA256 dc84f8e5e4f1133287ca0010d0fa36bb55ee49240ae49c2ca879a066aa89e389
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-23c.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-23c.avif
            • Size 36KB
            • SHA256 9dc249228100f81cf72fadb466f5354a5913a3da62210e8badbd4df04256fab2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-24.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-24.avif
            • Size 36KB
            • SHA256 7c25ab9ff4039bc5e14bce4987e0f030da2ef2bc016a3b95f1bad20604e3af07
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-25a.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-25a.avif
            • Size 72KB
            • SHA256 8f99155c691fbc07761e667c73b4429ea06d7e474900af057b19ba180831deec
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-25b.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-25b.avif
            • Size 53KB
            • SHA256 217478e150f9fbfe1e301237c3c9e7b92138ac1c570b9e6105c3ddfc02fe5849
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-26.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-26.avif
            • Size 45KB
            • SHA256 68eda90b457431c94cae32d48a7f2dd7a62458d90a344f02c9c782fb867abc3d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-27a.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-27a.avif
            • Size 80KB
            • SHA256 7e98daa098b9c70eacb71c1c7eb8e62b37edd8ca13b7ab4297ec0e931310ef80
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-27b.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-27b.avif
            • Size 58KB
            • SHA256 a11b6e2f9c08f4c396fa4f002160e0577d5cf6a2cf4007cbaf03fe265f51039a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-28a.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-28a.avif
            • Size 76KB
            • SHA256 5568d18eae17bef81e94354c391633ad73a393d34ec810e07dd0633a7080baa1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-28b.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-28b.avif
            • Size 87KB
            • SHA256 020381446ef8903e67ba36cba51bd3b1947bbea31a9ebec4dcd86ad19cb2353b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-28c.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-28c.avif
            • Size 65KB
            • SHA256 2e8c8f97c89ed93cc06c35977899ed87ee9ce9c7735fc429c6aa131540dde536
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-28d.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-28d.avif
            • Size 65KB
            • SHA256 9dd2fd2cfec9a57287a444d0f78c0cd278a272b21d272d85f4a31a215ab93d66
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-28e.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-28e.avif
            • Size 44KB
            • SHA256 6f347c1d81c7f19f779ead73b07caa34baa13ccb84afe5e21c155c2e7bda279a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-29.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-29.avif
            • Size 34KB
            • SHA256 1e81ddecf833dd3fa868a45edaca57bfdd6e42f30b60143393c089e39956e50e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-30.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-30.avif
            • Size 50KB
            • SHA256 416d818050a4299c8dba03959187c6757b50c9c105352aaed21ae6b3d1c26dd1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-31a.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-31a.avif
            • Size 51KB
            • SHA256 c10483533119462b99b2d5bc0b8e143fcfbc2def7aa9416308f52241c9d5369c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-31b.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-31b.avif
            • Size 62KB
            • SHA256 dac6cdf3e1033e187a462423acf925e02d29bd4efa676767d467c3ad5bc9ca2c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-32.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-32.avif
            • Size 69KB
            • SHA256 48e04965acc3e1d435f34f7b144d8429c7b5763cf494eed02dddafb052a0bece
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-33.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-33.avif
            • Size 38KB
            • SHA256 de7a745e627e4195f9d5d3ec5315e9030ae7db9176402048bfeadff38ccf5c43
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-34.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-34.avif
            • Size 46KB
            • SHA256 2a89c09be912b622905d7f17d6077a7218e3c10431fac89b124ee2bf220f4caa
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-35.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-35.avif
            • Size 58KB
            • SHA256 372f75317c57b61fc370406dadd2deda1bf47c95ff0019867aa477fb96e0859f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-36a.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-36a.avif
            • Size 71KB
            • SHA256 22e28a2cc0f004b9d0e7b1414e7be0041b8c2794d15d0c7906c1a851f70a64f2
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-36b.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-36b.avif
            • Size 98KB
            • SHA256 2e19ed0723bb275abfa5e19d41bff2c9f84d49d27ba68b9264dc08e9b4ac315c
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-37.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-37.avif
            • Size 33KB
            • SHA256 7058a6edb0ac4fa4d7531ffbb4a042f7edb09f99c288d9569ac9c73982a12cfb
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-38.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-38.avif
            • Size 46KB
            • SHA256 16e30c73be89c75861d824efccfd092daf25545030d7595119ca08b84ab79b1f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-39.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-39.avif
            • Size 65KB
            • SHA256 eb98f6ea1722bd65e370a97c3e43102579e5daa585c30bacc5ea9e249d1535ee
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-40.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-40.avif
            • Size 49KB
            • SHA256 67c60a150ec603b805965e1bcee82766363f7bfab74aeebe659412c56998b632
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-41.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-41.avif
            • Size 51KB
            • SHA256 499762831fb111e01b1d108be9cb98a1e0d623ae452a6a309b1eaa9e7b21c857
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-42.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-42.avif
            • Size 57KB
            • SHA256 db7bdd1e36af5d612a6438356496b56b85bd601e8fd2ee51dcf0963bc8a955cd
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-43.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-43.avif
            • Size 40KB
            • SHA256 80e8a1871a60653504dd650af777d0ead7dfc136103c35f76f673c622ac628b8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-44.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-44.avif
            • Size 64KB
            • SHA256 12d1b49c6a4c68210373db5ee2773f8d601fde98ea2b5c379c97b525937e38ab
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-45.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-45.avif
            • Size 44KB
            • SHA256 3b1164be8302526da2a8c0f1dd344d0a135bfd11464296f47713952eed6c6ea6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-46.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-46.avif
            • Size 65KB
            • SHA256 9822c6667fc814c21842a5dc92f8c28d47a5bc0bd82684d380042c64c73b5601
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-47.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-47.avif
            • Size 74KB
            • SHA256 2b2905c2bdff32c64b4024eff76e249bb1b0d7d648c39603844861359d4dd422
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-48.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-48.avif
            • Size 37KB
            • SHA256 b357c3af07a1743c0577ab618f16d57e0b6ad00d97d216842ab6d526657f2235
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-49.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-49.avif
            • Size 35KB
            • SHA256 2f270af2e2a908cd210e14e93252e0b4bb0a72ca3d93e8429cf235403355c1df
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-50.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-50.avif
            • Size 41KB
            • SHA256 a6e3997115cb6f87258a434ffb32711de60a3e63511fdd8dea29657409503bd1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-51.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-51.avif
            • Size 59KB
            • SHA256 da20c6e6513f9516cf43569518362efa70512b4b0cae1c9498d53bab2b503d57
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-52.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-52.avif
            • Size 36KB
            • SHA256 5a8252463f88b914474a2c83e49114be63266affff98f9ac79b9e1d95e2663d1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-53.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-53.avif
            • Size 40KB
            • SHA256 91bbb8584a6df1598606cd7d18bb1469bd41008d5faea654b50a895c39c2a4f4
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-54.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-54.avif
            • Size 49KB
            • SHA256 56db3ef413e791f05cc119add771aaf08c605e712f3d03adedf7ed1f1e6e8d7b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-55a.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-55a.avif
            • Size 70KB
            • SHA256 90b2d1caa7bf777a84c942455bcce818b5aa296930232c2efd40f50d1eb16a4e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-55b.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-55b.avif
            • Size 88KB
            • SHA256 ff564056fc19eabeb1b7e6f7d07de5465aacbe756ef5d354d79a16a066e98755
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-56.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-56.avif
            • Size 30KB
            • SHA256 016db9a0eb48b35cea2a70f5ef2f3c4e37785c50ff859a8a3a0542599e71374d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-57.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-57.avif
            • Size 43KB
            • SHA256 9054f50c3cd6fea9c458fdd744f55818d389a486dae3996f014ea74213d23d0a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-58a.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-58a.avif
            • Size 82KB
            • SHA256 4ae2decdc7cf51feae80632271bb6d3a1c6b4e32bad44c9028352672f5c0b47e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-58b.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-58b.avif
            • Size 69KB
            • SHA256 31373ea6c0c58e3c3d04cff8f9fd7110d207f73385d0d3254762e88c3b0df840
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-59.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-59.avif
            • Size 37KB
            • SHA256 329ca5f642678c644f5901ccac2ed29f56278d6b0de6413ed2cdbafdc9e01589
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-60.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-60.avif
            • Size 48KB
            • SHA256 5381a46b94f6a261b0ce26dc0064a01e26b180b28ddca6fe5eaa3bf1a6be5a12
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-61.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-61.avif
            • Size 49KB
            • SHA256 8beca506b1041a9e88be824f057b6c2dada844ff7b7ee2c1229f78ecaf50018d
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-62.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-62.avif
            • Size 76KB
            • SHA256 ebbf44f30b5b1d665599ba53779d2f79566ef3f182bd029a4e9c21c8036b0b5a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-63.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-63.avif
            • Size 63KB
            • SHA256 a8700f0fb6b6a7462218c538c0980c26e6076734e3a8073dae6cc9548f79134b
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-64.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-64.avif
            • Size 39KB
            • SHA256 332ab34f3118fcf662a56a3a05ce50c0effcf26eea99e4017373a577f7c89c56
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-65.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-65.avif
            • Size 42KB
            • SHA256 78f3eb5b3b29e1e86b5f579d41aa38f2e27167339085f5cfdcede32e67105bda
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-66.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-66.avif
            • Size 44KB
            • SHA256 798c5cc0ce855ca4acee57757c928ca049f33062dd3c75b109bd68e5931649d6
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-67.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-67.avif
            • Size 53KB
            • SHA256 b5fea9bc3fd9f9b98112306710a033964df8ca82737eb904f7faf8226e3c0de8
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-68.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-68.avif
            • Size 50KB
            • SHA256 d7ce0e283829b5b12a9ccec3dee1cfdf0af660908b1ecd14a0b346ca69b03f5a
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-69.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-69.avif
            • Size 46KB
            • SHA256 e1a4d8b1f172de920eaf9871b89d50894157a0694a49b447478dc2c44bb21814
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            Tip-RobinVanina-70.avif
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\tips\Tip-RobinVanina-70.avif
            • Size 50KB
            • SHA256 07287747c078645a3eac20123c0f4dd734e19c248dc6c1a697f70a6ba3797046
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            winregistry.node
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\resources\winregistry.node
            • Size 126KB
            • SHA256 a6ff6baaa23689f14e1a2dad5369d0306107a173e47583a94ba888fa73211c85
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            snapshot_blob.bin
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\snapshot_blob.bin
            • Size 333KB
            • SHA256 ed719d078977be84118c45420df70a0cc46dd32ae326559c9e6d9a909aeda099
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            v8_context_snapshot.bin
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\v8_context_snapshot.bin
            • Size 698KB
            • SHA256 c321440b5b893fabf4cb983c46c325e6b1959536b7c98a3f1f0200df8ad61a33
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            vk_swiftshader.dll
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\vk_swiftshader.dll
            • Size 5.4MB
            • SHA256 69c97922d3fb8b8321585ef8adfaa42792acb9538efeadcd9de4c703227e86d1
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            vk_swiftshader_icd.json
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\vk_swiftshader_icd.json
            • Size 106B
            • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            vulkan-1.dll
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\7z-out\vulkan-1.dll
            • Size 932KB
            • SHA256 18976ec31cce534fa610a830841114a6e77cc2b4fb98cac0e335be8f8ad38110
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            StdUtils.dll
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\StdUtils.dll
            • Size 100KB
            • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            System.dll
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\System.dll
            • Size 12KB
            • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            UAC.dll
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\UAC.dll
            • Size 14KB
            • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            WinShell.dll
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\WinShell.dll
            • Size 3KB
            • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            nsDialogs.dll
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\nsDialogs.dll
            • Size 9KB
            • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            nsExec.dll
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\nsExec.dll
            • Size 6KB
            • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            nsis7z.dll
            • Path C:\Users\Admin\AppData\Local\Temp\nsxA1F4.tmp\nsis7z.dll
            • Size 424KB
            • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            1d6f2856-fb32-4c12-968e-4401eead47e4.tmp
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\1d6f2856-fb32-4c12-968e-4401eead47e4.tmp
            • Size 168B
            • SHA256 79c783be78f65d2d62c6c7e7381dcb6c51e55f6a59683e41d97bf159ab3a615d
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            data_0
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Cache\Cache_Data\data_0
            • Size 44KB
            • SHA256 ff99efd7f466a24f434c1e43b79d97923f38c6974ff583243d8f5b153cd8720f
            • MD5 SHA1 SHA512 SSDEEP TLSH
            Submit Download

            data_2
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Cache\Cache_Data\data_2
            • Size 8KB
            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            data_3
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Cache\Cache_Data\data_3
            • Size 8KB
            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            temp-index
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Code Cache\js\index-dir\temp-index
            • Size 96B
            • SHA256 b08f58cce002bbeedd48b2de13b6f124dcc312a1e8f1b87f59d21e266c921e68
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            temp-index
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Code Cache\js\index-dir\temp-index
            • Size 408B
            • SHA256 badae50343a1c53707f9daf8447f4121bd916b34ee5fbadd7b8e7d3de049ca8f
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            the-real-index
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Code Cache\js\index-dir\the-real-index
            • Size 48B
            • SHA256 9c8fbdfe3a87ab008077b8c7eac50864bfe689a074121a30d76658dbb60b7ddc
            • MD5 SHA1 SHA512
            Submit Download

            CURRENT
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Local Storage\leveldb\CURRENT
            • Size 16B
            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
            • MD5 SHA1 SHA512
            Submit Download

            8d6817d5-3d48-4867-aad5-42d3e1237640.tmp
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Network\8d6817d5-3d48-4867-aad5-42d3e1237640.tmp
            • Size 3KB
            • SHA256 0ca99b18f81d8573ce6c30a5236b28ca150f09d892b66768c8d2f9d7b5916b84
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            Network Persistent State
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Network\Network Persistent State
            • Size 59B
            • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            f4902408-5250-46dd-baba-885a6f0b9fa7.tmp
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Network\f4902408-5250-46dd-baba-885a6f0b9fa7.tmp
            • Size 804B
            • SHA256 892179d766c2823366d25a74e5171b4604d33e75c805374954b9f768ed827a58
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            Preferences
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Preferences
            • Size 93B
            • SHA256 529b6595a4727a6b2d6cc154ae51f426216c01fc7fda02de2460abfb3de118a4
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            MANIFEST-000001
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\Session Storage\MANIFEST-000001
            • Size 41B
            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
            • MD5 SHA1 SHA512
            Submit Download

            index
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\WebStorage\2\CacheStorage\3468e451-4624-4b6b-a2dd-0b3705e564b0\index
            • Size 24B
            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
            • MD5 SHA1 SHA512
            Submit Download

            temp-index
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\WebStorage\2\CacheStorage\3468e451-4624-4b6b-a2dd-0b3705e564b0\index-dir\temp-index
            • Size 72B
            • SHA256 81903474c0a4acdf0721b97b021985c8fc9eb87db7100f1fc41d5457be34a8a8
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            the-real-index
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\WebStorage\2\CacheStorage\3468e451-4624-4b6b-a2dd-0b3705e564b0\index-dir\the-real-index
            • Size 48B
            • SHA256 ed0f18ccafc6ed585a648ce378c6b6d070c72321be34a5b183c0fe77ed643a9e
            • MD5 SHA1 SHA512
            Submit Download

            index.txt
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\WebStorage\2\CacheStorage\index.txt
            • Size 180B
            • SHA256 b3df7b0489f2b0b284af0e110d7b6fcb9e0526724326073e8eebaf58bfb830f5
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            index.txt.tmp
            • Path C:\Users\Admin\AppData\Roaming\Asset Manager Studio\WebStorage\2\CacheStorage\index.txt.tmp
            • Size 93B
            • SHA256 36cdbfd8ebc59c711a12e23528fc41c0e64ba1c760b99390d6066562e2512682
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            default.exc
            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
            • Size 2B
            • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
            • MD5 SHA1 SHA512
            Submit Download

            Asset Manager Studio.lnk
            • Path C:\Users\Admin\Desktop\Asset Manager Studio.lnk
            • Size 2KB
            • SHA256 bbb22306a3b392d9bb9faca0db138a48c393d9f208623395c3261e604dbf78e1
            • MD5 SHA1 SHA512 TLSH
            Submit Download

            memory/1468-974-0x00007FFF22AA0000-0x00007FFF22AA1000-memory.dmp
            Download

            memory/1468-975-0x00007FFF22550000-0x00007FFF22551000-memory.dmp
            Download

            memory/2204-1295-0x000001F738EE0000-0x000001F738EE1000-memory.dmp
            Download

            memory/2204-1296-0x000001F738EE0000-0x000001F738EE1000-memory.dmp
            Download

            memory/2204-1299-0x000001F738EE0000-0x000001F738EE1000-memory.dmp
            Download

            memory/2204-1300-0x000001F738EE0000-0x000001F738EE1000-memory.dmp
            Download

            memory/2204-1297-0x000001F738EE0000-0x000001F738EE1000-memory.dmp
            Download

            memory/2204-1298-0x000001F738EE0000-0x000001F738EE1000-memory.dmp
            Download

            memory/2204-1289-0x000001F738EE0000-0x000001F738EE1000-memory.dmp
            Download

            memory/2204-1291-0x000001F738EE0000-0x000001F738EE1000-memory.dmp
            Download

            memory/2588-28-0x0000000005630000-0x0000000005696000-memory.dmp
            Download

            memory/2588-40-0x0000000006BE0000-0x0000000006C00000-memory.dmp
            Download

            memory/2588-47-0x0000000007190000-0x00000000071BA000-memory.dmp
            Download

            memory/2588-32-0x0000000005710000-0x0000000005A6B000-memory.dmp
            Download

            memory/2588-22-0x0000000073082000-0x0000000073083000-memory.dmp
            Download

            memory/2588-33-0x0000000005C10000-0x0000000005C2E000-memory.dmp
            Download

            memory/2588-44-0x0000000007600000-0x0000000007C7C000-memory.dmp
            Download

            memory/2588-51-0x0000000073070000-0x000000007382C000-memory.dmp
            Download

            memory/2588-23-0x0000000004760000-0x0000000004796000-memory.dmp
            Download

            memory/2588-48-0x00000000071C0000-0x00000000071E4000-memory.dmp
            Download

            memory/2588-46-0x0000000006FF0000-0x0000000006FFA000-memory.dmp
            Download

            memory/2588-43-0x0000000073070000-0x000000007382C000-memory.dmp
            Download

            memory/2588-45-0x0000000006F80000-0x0000000006F9A000-memory.dmp
            Download

            memory/2588-34-0x0000000005CC0000-0x0000000005D0C000-memory.dmp
            Download

            memory/2588-35-0x0000000006C00000-0x0000000006C36000-memory.dmp
            Download

            memory/2588-37-0x000000006FA30000-0x000000006FA7C000-memory.dmp
            Download

            memory/2588-36-0x0000000073070000-0x000000007382C000-memory.dmp
            Download

            memory/2588-25-0x0000000004E50000-0x000000000549A000-memory.dmp
            Download

            memory/2588-24-0x0000000073070000-0x000000007382C000-memory.dmp
            Download

            memory/2588-26-0x0000000073070000-0x000000007382C000-memory.dmp
            Download

            memory/2588-27-0x0000000005590000-0x00000000055B2000-memory.dmp
            Download

            memory/2588-29-0x00000000056A0000-0x0000000005706000-memory.dmp
            Download

            memory/2588-42-0x0000000073070000-0x000000007382C000-memory.dmp
            Download

            memory/2588-41-0x0000000006ED0000-0x0000000006F73000-memory.dmp
            Download

            memory/2588-49-0x000000006FB90000-0x000000006FEEB000-memory.dmp
            Download

            memory/3992-77-0x000000006FB90000-0x000000006FEEB000-memory.dmp
            Download

            memory/3992-74-0x000000006FA30000-0x000000006FA7C000-memory.dmp
            Download

            memory/4232-67-0x0000000073070000-0x000000007382C000-memory.dmp
            Download

            memory/4232-65-0x0000000007230000-0x0000000007241000-memory.dmp
            Download

            memory/4232-64-0x00000000072C0000-0x0000000007356000-memory.dmp
            Download

            memory/4232-61-0x000000006FA30000-0x000000006FA7C000-memory.dmp
            Download

            memory/4232-57-0x0000000005770000-0x0000000005ACB000-memory.dmp
            Download

            memory/4232-56-0x0000000073070000-0x000000007382C000-memory.dmp
            Download

            memory/4232-55-0x0000000073070000-0x000000007382C000-memory.dmp
            Download