Analysis

  • user interaction
    yes
  • max time kernel
    307s
  • max time network
    328s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/10/2026, 16:13

General

  • Target
    ProjectLightningInstaller-v5.exe
  • Size 373.4MB
  • Sample261024-tpazxavycs
  • SHA256 fee773534802fee19bcf3f166a9d41aeeed28abf3273da45a365886d7ed9d2ac
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 10 IoCs
  • Loads dropped DLL 20 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Discovers running processes 1 TTPs 31 IoCs

    Running process information can be used to identify security tools or plan follow-on actions.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 31 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 8 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Inno Setup is an open-source installation builder for Windows applications. 3 IoCs

    Inno Setup installer

  • Checks SCSI registry key(s) 3 TTPs 6 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies registry class 12 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 32 IoCs
  • Suspicious use of SendNotifyMessage 19 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ProjectLightningInstaller-v5.exe
    "C:\Users\Admin\AppData\Local\Temp\ProjectLightningInstaller-v5.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1100
    • C:\Users\Admin\AppData\Local\Temp\is-DJNDUPLUWR.tmp\ProjectLightningInstaller-v5.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-DJNDUPLUWR.tmp\ProjectLightningInstaller-v5.tmp" /SL5="$402B6,390056086,842240,C:\Users\Admin\AppData\Local\Temp\ProjectLightningInstaller-v5.exe"
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1224
      • C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe
        "C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • Checks SCSI registry key(s)
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:3164
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:4788
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            • Suspicious use of AdjustPrivilegeToken
            PID:3016
        • C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe
          "C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\project-lightning-data" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1756,i,11842953837383758982,17368106199294941980,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1752 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4744
        • C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe
          "C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\project-lightning-data" --field-trial-handle=1756,i,11842953837383758982,17368106199294941980,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2224 /prefetch:11
          4⤵
          • Executes dropped EXE
          • Reads the TCP/IP host and domain name from the registry
          PID:5180
        • C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe
          "C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\project-lightning-data" --app-user-model-id="Project Lightning" --app-path="C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1756,i,11842953837383758982,17368106199294941980,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2616 --from-game-shortcut=false /prefetch:1
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4756
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:944
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            • Suspicious use of AdjustPrivilegeToken
            PID:4660
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:2700
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            • Suspicious use of AdjustPrivilegeToken
            PID:5272
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:4652
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            • Suspicious use of AdjustPrivilegeToken
            PID:432
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:1176
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            • Suspicious use of AdjustPrivilegeToken
            PID:984
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:1528
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:4668
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:4092
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:5756
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:1484
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:2740
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:1068
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:776
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:2716
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:5252
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:4768
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:200
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:5228
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:6056
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:4492
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:1808
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:1728
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:4312
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:1576
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:3068
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:2992
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:5256
        • C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe
          "C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\project-lightning-data" --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1756,i,11842953837383758982,17368106199294941980,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=1832 /prefetch:10
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:3488
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:5124
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:5904
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:5980
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:268
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:3412
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:2464
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:1376
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:5724
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:4944
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:2180
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:5168
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:3844
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:2832
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:4080
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:2728
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:1236
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          PID:3148
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:5592
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          PID:3476
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:1248
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          PID:5848
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:3940
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          PID:2496
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:1760
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          PID:1636
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:200
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          4⤵
          • Executes a command shell one-liner
          PID:2340
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            5⤵
            • Discovers running processes
            PID:1828
  • C:\Windows\System32\rundll32.exe
    C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
    1⤵
      PID:4160
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k GPSvcGroup
      1⤵
        PID:5916
      • C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe
        "C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe"
        1⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • Modifies registry class
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        • Suspicious use of WriteProcessMemory
        PID:4044
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist /FO CSV /NH"
          2⤵
          • Executes a command shell one-liner
          • Suspicious use of WriteProcessMemory
          PID:3420
          • C:\Windows\system32\tasklist.exe
            tasklist /FO CSV /NH
            3⤵
            • Discovers running processes
            PID:1344
        • C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe
          "C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\project-lightning-data" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1832,i,10218429841815397084,18223625232313237848,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1820 /prefetch:2
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5204
        • C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe
          "C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\project-lightning-data" --field-trial-handle=1832,i,10218429841815397084,18223625232313237848,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2212 /prefetch:11
          2⤵
          • Executes dropped EXE
          • Reads the TCP/IP host and domain name from the registry
          PID:2676
        • C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe
          "C:\Users\Admin\AppData\Roaming\ProjectLightningV5\Project Lightning.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\project-lightning-data" --app-user-model-id="Project Lightning" --app-path="C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1832,i,10218429841815397084,18223625232313237848,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2632 --from-game-shortcut=false /prefetch:1
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3188

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            e71f70c1-4b71-4f8a-b75d-6b9d2120b98a.tmp.ico

            • Path C:\Users\Admin\AppData\Local\Temp\e71f70c1-4b71-4f8a-b75d-6b9d2120b98a.tmp.ico
            • Size 361KB
            • SHA256 d8e29cb60fb03bfa6f1d7dc51ab22e8f840feba979d20577d9f2111691165aa5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ProjectLightningInstaller-v5.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\is-DJNDUPLUWR.tmp\ProjectLightningInstaller-v5.tmp
            • Size 4.2MB
            • SHA256 39d1b48fdb3f695f0ebbd1b3e286750f224667b079fd2514085a28de98b34c6d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            default.exc

            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
            • Size 2B
            • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
            • MD5 SHA1 SHA512

            chrome_100_percent.pak

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\chrome_100_percent.pak
            • Size 112KB
            • SHA256 cbe052e9bd36032cde9d0ad7496d611c6a3c98a130b960e1298d490254be1159
            • MD5 SHA1 SHA512 SSDEEP TLSH

            chrome_200_percent.pak

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\chrome_200_percent.pak
            • Size 182KB
            • SHA256 6593ba8ece63001a3fb77bd1d872566edeb26213a1be8e852dd956f6d0e2c93e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            d3dcompiler_47.dll

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\d3dcompiler_47.dll
            • Size 4.5MB
            • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dxcompiler.dll

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\dxcompiler.dll
            • Size 24.4MB
            • SHA256 1565adbd62a0e8ba2a8b25b3da5d2e2a45032c13aeffdd061228abc3ee5c1585
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dxil.dll

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\dxil.dll
            • Size 1.4MB
            • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ffmpeg.dll

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\ffmpeg.dll
            • Size 2.9MB
            • SHA256 26eed00c4da27de095ba76030b47bc0436ba659a7443e05f11ee162dc225e828
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icudtl.dat

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\icudtl.dat
            • Size 10.3MB
            • SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libegl.dll

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\libegl.dll
            • Size 503KB
            • SHA256 61ebcd780d17d37ec09a5eb7ff7399ad67726a5a1ff73be1c37734551c3ef1fe
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libglesv2.dll

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\libglesv2.dll
            • Size 7.6MB
            • SHA256 b35d3337ef4cad5423f4e11a06e280763deae634f7e39c7844e4f0fcb455b3e9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            en-US.pak

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\locales\en-US.pak
            • Size 537KB
            • SHA256 ef30389492cc2d31bc5c162056fe68c27a5d57b0a69f5f878562325f795c5185
            • MD5 SHA1 SHA512 SSDEEP TLSH

            resources.pak

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources.pak
            • Size 6.1MB
            • SHA256 ce5c35017fd7aa648fe44381711cbf42eff5f6923b11241a4789058dbc5b27aa
            • MD5 SHA1 SHA512 SSDEEP TLSH

            app.asar

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar
            • Size 38.2MB
            • SHA256 ab81ecae04d1e862c649fffb8739888829f4e9a0d81e929171391665a685a194
            • MD5 SHA1 SHA512 SSDEEP TLSH

            better_sqlite3.node

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\better_sqlite3.node
            • Size 1.8MB
            • SHA256 715dc7eadd3fa56a68716eba485e45ffc687a16a3affb7c592fa1c246cedadd5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            database.js

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\database.js
            • Size 4KB
            • SHA256 02ea23bdd23d7ac5de0675a2f32fc686e76d5c6a32bd3e3891f360e72e07f61f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            index.js

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\index.js
            • Size 110B
            • SHA256 82db11c4ee43a41d859988c5db42c3771dff565371f94bacbd1e4d8d6ceb47cd
            • MD5 SHA1 SHA512 TLSH

            aggregate.js

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\aggregate.js
            • Size 1KB
            • SHA256 e9f74eb919ec93fe089c95ddf25a98f1f631c80418fa34fb2346ca1bc29f1b82
            • MD5 SHA1 SHA512 TLSH

            backup.js

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\backup.js
            • Size 2KB
            • SHA256 ea29d34992bb02e006d0fdeda9675ac5d2bb227aaf57468decd997e9fc9c7dbf
            • MD5 SHA1 SHA512 TLSH

            function.js

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\function.js
            • Size 1KB
            • SHA256 f431d49303b8bbdc044b1f1b455bdad21fc9b74b007de0acb22f08f25b4febd3
            • MD5 SHA1 SHA512 TLSH

            inspect.js

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\inspect.js
            • Size 174B
            • SHA256 4975a78daee850adee62ba98719d0f223819a0ec135a07c0e302994bd8dbff61
            • MD5 SHA1 SHA512 TLSH

            pragma.js

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\pragma.js
            • Size 536B
            • SHA256 8b1c54475bd4340b15e25c50d53d06308be65f8f919ecbe4aa9d285ca859ad5a
            • MD5 SHA1 SHA512 TLSH

            serialize.js

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\serialize.js
            • Size 625B
            • SHA256 7a10ee5c2735384b7f0c361811bc6d017db29f62b203fd3c68a35f667e2c2605
            • MD5 SHA1 SHA512 TLSH

            table.js

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\table.js
            • Size 6KB
            • SHA256 97c42d9ded1aa96c7d916b5b92f96b4e59581d50eaf629cd2c7afb78ff26a9ea
            • MD5 SHA1 SHA512 SSDEEP TLSH

            transaction.js

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\transaction.js
            • Size 2KB
            • SHA256 bc8624a3ef689d8f78e5669020ad121e17acbc93b1d5ee5afe26860b1084c66c
            • MD5 SHA1 SHA512 TLSH

            wrappers.js

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\wrappers.js
            • Size 1KB
            • SHA256 a150a6271d23f4e5f8953b129f370ff096c7cdc4b812afbf080a6cf4ab741bcf
            • MD5 SHA1 SHA512 TLSH

            sqlite-error.js

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\sqlite-error.js
            • Size 717B
            • SHA256 2582d61c27680dead168543f392eb102be621dfbef282a4ca4c7c21aa5e7c75d
            • MD5 SHA1 SHA512 TLSH

            util.js

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\util.js
            • Size 331B
            • SHA256 92b2e39e2151b43a2252e10b6d6de876ecaf0008336a4fa1dfe1317b20f1916f
            • MD5 SHA1 SHA512 TLSH

            package.json

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\better-sqlite3\package.json
            • Size 936B
            • SHA256 67f68163a5fba6a9920b1f9151c997c7b4d03d74669035c6d3f52a3620b486d6
            • MD5 SHA1 SHA512 TLSH

            binding-options.js

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\node-hid\binding-options.js
            • Size 64B
            • SHA256 e7c820107f3b6571ca1505a5ffbe17511088336e4c410ec718ea9ec200c6b1e6
            • MD5 SHA1 SHA512 TLSH

            HID.node

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\node-hid\build\Release\HID.node
            • Size 593KB
            • SHA256 3b35b1f90763bdc89e24c9864c11f65f3cf22432495aa5bfee4b0391c15c4d65
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-QOQ0M7XNNG.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\node-hid\build\Release\obj\hidapi\hidapi.tlog\is-QOQ0M7XNNG.tmp
            • Size 212B
            • SHA256 0c6b2a65604c0377d0ba11cc8322409b96f49486765fadd5ef65108ca7d08eb3
            • MD5 SHA1 SHA512 TLSH

            is-59NW3WC657.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\node-hid\hidapi\windows\test\data\is-59NW3WC657.tmp
            • Size 1KB
            • SHA256 1671fe1fe8ad966dce4be2e3720e8e2636c21f2e4c3c129a236c2b9f69edc7a5
            • MD5 SHA1 SHA512 TLSH

            is-AJQO08Q81Z.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\node-hid\hidapi\windows\test\data\is-AJQO08Q81Z.tmp
            • Size 152B
            • SHA256 1e5a247f3bcf95efcc35cec58d2604e15cdcfb52ec2569aa1697a91226aaa205
            • MD5 SHA1 SHA512 TLSH

            is-FO2RVGN5XM.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\node-hid\hidapi\windows\test\data\is-FO2RVGN5XM.tmp
            • Size 219B
            • SHA256 68843541e7bf5b3ba766d3cbaf26c8f4ab7c9d090ba746feff32b9d35ce25417
            • MD5 SHA1 SHA512 TLSH

            is-HCAEG6833Q.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\node-hid\hidapi\windows\test\data\is-HCAEG6833Q.tmp
            • Size 219B
            • SHA256 a18fcc24552c8abcee4cc9e324056971dc92e06208d33ca5e2f01495a910d6a5
            • MD5 SHA1 SHA512 TLSH

            is-L1QV6HP2Q0.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\node-hid\hidapi\windows\test\data\is-L1QV6HP2Q0.tmp
            • Size 402B
            • SHA256 6a0b9853f26a2eb372c1742d4b22c2ad237190b76d4832e5f257efc4f8660c1a
            • MD5 SHA1 SHA512 TLSH

            nodehid.js

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\node-hid\nodehid.js
            • Size 7KB
            • SHA256 84053a6ea19b238e61368f5220a9a8af96b27e752569f14d63dba2127a37988b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            package.json

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\node-hid\package.json
            • Size 934B
            • SHA256 6fde9f9e079631f100806daeab792c456b5e90b718146effff5bb4288ba55bbf
            • MD5 SHA1 SHA512 TLSH

            is-ECCWC36WHO.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\app.asar.unpacked\node_modules\utf-8-validate\is-ECCWC36WHO.tmp
            • Size 136B
            • SHA256 70846a43c2bd3b1077461563194e4d2407b18e7d767d6fd8785ea9b7d6ddd044
            • MD5 SHA1 SHA512 TLSH

            is-119EEM0FB4.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\greenlet\is-119EEM0FB4.tmp
            • Size 4KB
            • SHA256 82847d669ac6a2aef5981461cc1b9ec45bd336bcaf7f8b9c78c1cc21a4b1877a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-P52GCQXVRI.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\is-P52GCQXVRI.tmp
            • Size 4B
            • SHA256 ceebae7b8927a3227e5303cf5e0f1f7b34bb542ad7250ac03fbcde36ec2f1508
            • MD5 SHA1 SHA512

            is-HOQ9T8X7MM.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\cachecontrol\is-HOQ9T8X7MM.tmp
            • Size 558B
            • SHA256 86eeee87be2a43f3ff1f56496f451f69243926f025fedbb033666c304c4c161b
            • MD5 SHA1 SHA512 TLSH

            is-XQXG17TYKK.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\certifi\is-XQXG17TYKK.tmp
            • Size 989B
            • SHA256 e93716da6b9c0d5a4a1df60fe695b370f0695603d21f6f83f053e42cfc10caf7
            • MD5 SHA1 SHA512 TLSH

            is-97252B0SZZ.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\distlib\is-97252B0SZZ.tmp
            • Size 14KB
            • SHA256 808e10c8a6ab8deb149ff9b3fb19f447a808094606d712a9ca57fead3552599d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-D8Y3CD73RD.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\distro\is-D8Y3CD73RD.tmp
            • Size 11KB
            • SHA256 cb5e8e7e5f4a3988e1063c142c60dc2df75605f4c46515e776e3aca6df976e14
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-V2A5H3POU6.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\idna\is-V2A5H3POU6.tmp
            • Size 1KB
            • SHA256 1a9a4f0e3d479a27240ddd59a9137a66ab4a0f9dfdc8ca6188cc0bfd85187f04
            • MD5 SHA1 SHA512 TLSH

            is-Q3N7QGXJ7N.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\msgpack\is-Q3N7QGXJ7N.tmp
            • Size 614B
            • SHA256 492dedba85da5872f78e6091bcd1fea474d660d35acb4dee964b8aab3f007427
            • MD5 SHA1 SHA512 TLSH

            is-9XKTX6XD4J.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\packaging\is-9XKTX6XD4J.tmp
            • Size 197B
            • SHA256 cad1ef5bd340d73e074ba614d26f7deaca5c7940c3d8c34852e65c4909686c48
            • MD5 SHA1 SHA512 TLSH

            is-IA0N5VPEM6.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\packaging\is-IA0N5VPEM6.tmp
            • Size 1KB
            • SHA256 b70e7e9b742f1cc6f948b34c16aa39ffece94196364bc88ff0d2180f0028fac5
            • MD5 SHA1 SHA512 TLSH

            is-21TMH44LM0.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\pkg_resources\is-21TMH44LM0.tmp
            • Size 1023B
            • SHA256 86da0f01aeae46348a3c3d465195dc1ceccde79f79e87769a64b8da04b2a4741
            • MD5 SHA1 SHA512 TLSH

            is-POWU5DVH7R.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\platformdirs\is-POWU5DVH7R.tmp
            • Size 1KB
            • SHA256 29e0fd62e929850e86eb28c3fdccf0cefdf4fa94879011cffb3d0d4bed6d4db6
            • MD5 SHA1 SHA512 TLSH

            is-BSHW93W0N0.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\pygments\is-BSHW93W0N0.tmp
            • Size 1KB
            • SHA256 a9d66f1d526df02e29dce73436d34e56e8632f46c275bbdffc70569e882f9f17
            • MD5 SHA1 SHA512 TLSH

            is-Z560S88IM1.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\pyproject_hooks\is-Z560S88IM1.tmp
            • Size 1KB
            • SHA256 1b22b049b5267d6dfc23a67bf4a84d8ec04b9fdfb1a51d360e42b4342c8b4154
            • MD5 SHA1 SHA512 TLSH

            is-TNSAKP08XA.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\resolvelib\is-TNSAKP08XA.tmp
            • Size 751B
            • SHA256 f388fd38cad13112c1dc0f669bbe80e7f84541edbafb72f3030d2ca7642c3c9d
            • MD5 SHA1 SHA512 TLSH

            is-WNEA5BXXV0.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\rich\is-WNEA5BXXV0.tmp
            • Size 1KB
            • SHA256 deed7c17a4318158190a3ea239cc879a5a50271cebb98ae7025f48fbe58dca15
            • MD5 SHA1 SHA512 TLSH

            is-POCMGNJ3RJ.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\truststore\is-POCMGNJ3RJ.tmp
            • Size 1KB
            • SHA256 33be7b7e8fa4fd19b1760e1a8ed8a668bdab852c91b692dd41424bcb725a9fca
            • MD5 SHA1 SHA512 TLSH

            is-LBTIOJ3XS2.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip-26.2.dist-info\licenses\src\pip\_vendor\urllib3\is-LBTIOJ3XS2.tmp
            • Size 1KB
            • SHA256 130e3a64d5fdd5d096a752694634a7d9df284469de86e5732100268041e3d686
            • MD5 SHA1 SHA512 TLSH

            is-WFAX8F69VZ.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip\_vendor\requests\is-WFAX8F69VZ.tmp
            • Size 9KB
            • SHA256 09e8a9bcec8067104652c168685ab0931e7868f9c8284b66f5ae6edae5f1130b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-L70OCVFP5R.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip\_vendor\tomli_w\is-L70OCVFP5R.tmp
            • Size 26B
            • SHA256 f0f8f2675695a10a5156fb7bd66bafbaae6a13e8d315990af862c792175e6e67
            • MD5 SHA1 SHA512

            is-SVIU0JNNTY.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\pip\_vendor\tomli_w\is-SVIU0JNNTY.tmp
            • Size 1KB
            • SHA256 b80816b0d530b8accb4c2211783790984a6e3b61922c2b5ee92f3372ab2742fe
            • MD5 SHA1 SHA512 TLSH

            is-I4OUU8YYU3.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\playwright-1.62.0.dist-info\licenses\is-I4OUU8YYU3.tmp
            • Size 11KB
            • SHA256 7fab1461b41970ff376f1c9303a637076bfaaeb71cd12dd3a1c44aaf59a1a2b9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-8HN8AYYMA3.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\playwright\_impl\__pyinstaller\is-8HN8AYYMA3.tmp
            • Size 695B
            • SHA256 d4a8c45554b3ba55e8102f03f576bab6ea4abfb70cdc60095471d504e34a1014
            • MD5 SHA1 SHA512 TLSH

            is-XF4Y9D67F6.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\playwright\driver\package\lib\vite\htmlReport\is-XF4Y9D67F6.tmp
            • Size 97KB
            • SHA256 afa5c8f204098c79eb093e9354d82488a2ccaa771b45453cd4d1e9a075779cb8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-4Q9U1K5M6E.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\playwright\driver\package\lib\vite\recorder\assets\is-4Q9U1K5M6E.tmp
            • Size 78KB
            • SHA256 0f1d5219934e96e83b8db162d60b4d8c09b5de1e7d38031cbafe4a3c0f2889c9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-JW3UR2KVN9.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\playwright\driver\package\lib\vite\traceViewer\is-JW3UR2KVN9.tmp
            • Size 6KB
            • SHA256 20be824a82832b62cc04642d31da3c609fd280b23f1cdcb1e622c4f40aac5ab8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-WUBGWK0SFG.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\playwright\driver\package\lib\vite\traceViewer\is-WUBGWK0SFG.tmp
            • Size 4KB
            • SHA256 6b0a4367bdeab10995bc239278f04c68c10e48adbec15e799e01909a0d66dcb9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-BCRIUT982C.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Lib\site-packages\typing_extensions-4.16.0.dist-info\is-BCRIUT982C.tmp
            • Size 82B
            • SHA256 1b68144734c4b66791f27add5d425f3620775585718a03d0f9b110ba3a4d88db
            • MD5 SHA1 SHA512 TLSH

            is-PLKT9SHJ87.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\binaries\win\python\Scripts\is-PLKT9SHJ87.tmp
            • Size 105KB
            • SHA256 a896f1cfa736f092873a2af32f540bccfef6ae715b41ae9eceba46a831ee4ed1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-22YUL30P0M.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium-1234\chrome-win64\hyphen-data\is-22YUL30P0M.tmp
            • Size 687B
            • SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
            • MD5 SHA1 SHA512 TLSH

            is-HKP04XFZP9.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium-1234\chrome-win64\hyphen-data\is-HKP04XFZP9.tmp
            • Size 141KB
            • SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-TI9AWEH5BR.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium-1234\chrome-win64\hyphen-data\is-TI9AWEH5BR.tmp
            • Size 703B
            • SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
            • MD5 SHA1 SHA512 TLSH

            is-FHVVZIYIOC.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium-1234\chrome-win64\is-FHVVZIYIOC.tmp
            • Size 449KB
            • SHA256 32d811521ab6d2249aee6c2cb51c0082e78c44ab4a32b0222c104b38a64c0389
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-WHRPBBIWW8.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium-1234\chrome-win64\locales\is-WHRPBBIWW8.tmp
            • Size 18B
            • SHA256 ca73097bd968b363b7145e86b64f3c595e533808b0763dc8863a27fc363cfa51
            • MD5 SHA1 SHA512

            is-6V1JV13P8L.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\PrivacySandboxAttestationsPreloaded\is-6V1JV13P8L.tmp
            • Size 7KB
            • SHA256 59e345dc13aedee9ea46b92e58300ecaca944aaea9384c7af885400ac2ae8806
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-LZFA5LY6I9.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\PrivacySandboxAttestationsPreloaded\is-LZFA5LY6I9.tmp
            • Size 122B
            • SHA256 51c311a4ba03140bcd1c827f8d93dba50cadda736925903b26e95609275dbffd
            • MD5 SHA1 SHA512 TLSH

            is-1CX1NRI5X7.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-1CX1NRI5X7.tmp
            • Size 75KB
            • SHA256 5ebde398944b461cf940f0520c5a49c0882b6f36f9ac5cda0538c8c8b44fb7ca
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-1FUX1L1WXV.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-1FUX1L1WXV.tmp
            • Size 35KB
            • SHA256 4d0569fe2f4b41b3164cf610310e1d996fd2c553cc39de6062e50f4e033cc207
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-1YU5MI7MC6.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-1YU5MI7MC6.tmp
            • Size 776B
            • SHA256 90572db8f49b01ec6a102732cdf14fc3f07d363cbe0d261103e583043164e888
            • MD5 SHA1 SHA512 TLSH

            is-24TFE329HT.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-24TFE329HT.tmp
            • Size 117KB
            • SHA256 d673805547a0228d2f57a5ad551b8760cfcc521f38c49284ed3976e3515bca49
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-2Y8ZK5LWL1.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-2Y8ZK5LWL1.tmp
            • Size 14KB
            • SHA256 137461792537a2e56a6475e81e2b9ad7a2bdabf1f4738fae186dca3022357349
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-3BJWW4ZXQO.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-3BJWW4ZXQO.tmp
            • Size 34KB
            • SHA256 1e3043f395bfb2a4c43d0480ba2f168ed622881cc3482359ca6e99821e983be8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-4HPA47ONQR.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-4HPA47ONQR.tmp
            • Size 70KB
            • SHA256 56642aa5a37625ff9d034761d16b034d4ba5be74090cbd825956bbce2775ecd1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-4MMD9YFLQ3.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-4MMD9YFLQ3.tmp
            • Size 3KB
            • SHA256 7593f0395081e3eeb2d8516d10746608afd826cffd4e7e37d53936993d200a13
            • MD5 SHA1 SHA512 TLSH

            is-7OZ6DKAJT8.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-7OZ6DKAJT8.tmp
            • Size 62KB
            • SHA256 97a4755fe9e653a08969f1933e3db19c712078b227bd5aa6799093abc5a0edc3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-832URI3INA.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-832URI3INA.tmp
            • Size 703B
            • SHA256 516fa9654fa3aeaab480d40eaf6ad78fc039086bd8edc144be3d59525edcac29
            • MD5 SHA1 SHA512 TLSH

            is-8Q6WJNZJH0.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-8Q6WJNZJH0.tmp
            • Size 51KB
            • SHA256 2baee19d5024ff87dcf3a1b9d0da1b3ac5a1e506adeead3b96a4de5395d0290e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-96BQ7ZSGF9.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-96BQ7ZSGF9.tmp
            • Size 7KB
            • SHA256 6fe2da26a96834fb9aecbe586d40f728df0ef676a4f235450054e66841b9e2ca
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-9O31M8E0VL.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-9O31M8E0VL.tmp
            • Size 117KB
            • SHA256 8223a912160354e05735522fdb339dc59b353ad5d1e4f4cfa94898dc348e748f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-B1ODTH2YBQ.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-B1ODTH2YBQ.tmp
            • Size 554B
            • SHA256 40fda94856a86f065de8baa6184ea63dcdb011ee4ca498a7c1fee44c99314c67
            • MD5 SHA1 SHA512 TLSH

            is-CDQKHC4BKK.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-CDQKHC4BKK.tmp
            • Size 9KB
            • SHA256 2472271c7955c67e9fdb86d0cd3c5d88f5e598da4f44b6741284b2bbcb2e4d52
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-DLC3U7V0RB.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-DLC3U7V0RB.tmp
            • Size 655B
            • SHA256 af0edb67c2219b803c3eb6c1dee6f2d41a3fe00468a9da8be8ef5056d701abf3
            • MD5 SHA1 SHA512 TLSH

            is-HWHTIYW6O2.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-HWHTIYW6O2.tmp
            • Size 2KB
            • SHA256 f9c027d7fd44b01cd5e1cdf802e20c63560673098af18bea0930ba9af334e0f7
            • MD5 SHA1 SHA512 TLSH

            is-IHLDNU136S.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-IHLDNU136S.tmp
            • Size 20KB
            • SHA256 10079c66014dd2e6abfef5a018e6553fd5a036afb96bd2a235440a188f88b15e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-IY7T60E3NA.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-IY7T60E3NA.tmp
            • Size 665B
            • SHA256 e2778a4fc7b8f064a32b6a44bc29f10e264d9d6214b8edb8ebd1f5f6d68e2eb2
            • MD5 SHA1 SHA512 TLSH

            is-JOEO6XRQGU.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-JOEO6XRQGU.tmp
            • Size 1KB
            • SHA256 bc29c9401ce952414cbaebc5c8ee1d27c1706c6f77807b5ff713e2124438b3ca
            • MD5 SHA1 SHA512 TLSH

            is-K713YJ9974.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-K713YJ9974.tmp
            • Size 37KB
            • SHA256 65962ccb5055e4c693e5ac493d6affdc810ec168eb2942f5705b7f4e464f9993
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-M5NC6EFAU5.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-M5NC6EFAU5.tmp
            • Size 7KB
            • SHA256 00bd8b2d398d77575da2bfbbc5ec641aad7f2a87d4a31186ec169e85a27de5b7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-O2U21O0CYR.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-O2U21O0CYR.tmp
            • Size 6KB
            • SHA256 ad746c68562603ac3b15e89da03c76e081c08e7d9c8d4c9f64763e53d696c77c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-O4GTANA5NR.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-O4GTANA5NR.tmp
            • Size 5KB
            • SHA256 0d2731f16aa2c90faec8e63260358cbccede403faf95e3af8c66bc2db0729ca0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-ONEPW7RE5S.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-ONEPW7RE5S.tmp
            • Size 70KB
            • SHA256 5487ee44a4cd706d0086522e90c59c76cdf2ac68ce506fd3eae6054b9220c0cf
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-PKY19ED5J1.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-PKY19ED5J1.tmp
            • Size 1KB
            • SHA256 f6fbf1bcb260cc86256fc494f388f7b27d10865fbf8f61517dee25af4d58d6e8
            • MD5 SHA1 SHA512 TLSH

            is-QJGSQ6K43I.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-QJGSQ6K43I.tmp
            • Size 309KB
            • SHA256 8b3a16268cc932b226c17ff405b3cfb6eb38a9511a2043d653dc03729efceac1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-QSLGF0VW2P.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-QSLGF0VW2P.tmp
            • Size 711B
            • SHA256 2b999d0a152f804601aa8f38ff0d3a6e5949977bf1daa76fa888acae21526287
            • MD5 SHA1 SHA512 TLSH

            is-SF5PZNKBE5.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-SF5PZNKBE5.tmp
            • Size 2KB
            • SHA256 d5f066a5657f1d7c39d053956df204b7926f40d2fe4f69573af09d909066e26c
            • MD5 SHA1 SHA512 TLSH

            is-TAQI8859D1.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-TAQI8859D1.tmp
            • Size 118KB
            • SHA256 8c5fa4b29519d17593e923bc6a9a284df7a6d07fac42f897110b8fb2e0baeef5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-TBLZW006Z3.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-TBLZW006Z3.tmp
            • Size 5KB
            • SHA256 25b7cfa039f82ac92990e1789de40988d490db9b613852fb24036b38ff87893c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-TJ8WV2F1AJ.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-TJ8WV2F1AJ.tmp
            • Size 19KB
            • SHA256 336ce2048ffd31b7bcaf435e53badfaf0579e405042d49adbc0823f6be5f9614
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-TLKFHSKRZW.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-TLKFHSKRZW.tmp
            • Size 3KB
            • SHA256 1de83cb787dfaf53fb7e6e8db3aae5008ad24ebdd28be02031306ea9e9f3e285
            • MD5 SHA1 SHA512 TLSH

            is-TZJX8IK5N6.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-TZJX8IK5N6.tmp
            • Size 45KB
            • SHA256 ae4b78009d18e849d87458677151ee3aad1608ad72ec050dfd2421d22e7d031f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-UNUYYOD1UX.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-UNUYYOD1UX.tmp
            • Size 647B
            • SHA256 4e9cd302baffc4ea3e9652327ea24072ebf37b5c4fc0719292bdac10aaad665b
            • MD5 SHA1 SHA512 TLSH

            is-UOFM1NNJ46.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-UOFM1NNJ46.tmp
            • Size 1KB
            • SHA256 fd4b6f36135cd3b932e350ec2017dfd89d2e36ac226f54e4c8f2e4bc6db0593d
            • MD5 SHA1 SHA512 TLSH

            is-WLOW39B1Q2.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-WLOW39B1Q2.tmp
            • Size 2KB
            • SHA256 77fdaed29bd842aaa976ab7ef81b617a15c0a2d1ebd1161c1bf26b79a108b5cd
            • MD5 SHA1 SHA512 TLSH

            is-WYOX00L6EY.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-WYOX00L6EY.tmp
            • Size 58KB
            • SHA256 03727cd6f4aa71b203c4c74ca6987ac7d87f13037337ac6f4b6996c2a0dc5f8c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-WZCZZYSXR9.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-WZCZZYSXR9.tmp
            • Size 6KB
            • SHA256 86fdfc8db62cdaa11f615dad3712da1f4708294e029a4aad0fc285d4ea16c4bd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-WZYZIH0D3O.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-WZYZIH0D3O.tmp
            • Size 62KB
            • SHA256 138c5990961da21993653f54a413ddacb8921d6d70b892b7ca154d6e8ad2028c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-X10J2GIR0L.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-X10J2GIR0L.tmp
            • Size 18KB
            • SHA256 1c626abe40d43f6d56a01b5b40305d7c7d6481f616eac00a3f3aaaaca8388786
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-XB76L4QVL6.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-XB76L4QVL6.tmp
            • Size 607B
            • SHA256 470329d28faa484f945d78ffefb176dcb6f2032c753e25bc014106ad24b2c68a
            • MD5 SHA1 SHA512 TLSH

            is-Y7MIYVNPJ4.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-Y7MIYVNPJ4.tmp
            • Size 605B
            • SHA256 9b34dfca85cb27546829f104f137757efb274934c1e9d4991f55ad564962a76a
            • MD5 SHA1 SHA512 TLSH

            is-YZL2FPU5EW.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-YZL2FPU5EW.tmp
            • Size 4KB
            • SHA256 76ae3454fb0045adb83094832578aa4749ce4dc694c4edcf85b419c1e2d9bcd3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-Z47SJB0GVE.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-Z47SJB0GVE.tmp
            • Size 9KB
            • SHA256 89d98eff14e2cf1c2314efdf392339e62d7e786f100202a7377bf7b22095a0c5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-ZE7HH8CXG4.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\hyphen-data\is-ZE7HH8CXG4.tmp
            • Size 3KB
            • SHA256 f2fac1bd069ffe5cd1112d94cc31137ed38a1b161093ecd74c9c1688428b688b
            • MD5 SHA1 SHA512 TLSH

            is-0399WZVZBS.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\is-0399WZVZBS.tmp
            • Size 5.2MB
            • SHA256 492c2b5cb17fd2e1cef419612cc389716d2bd2c33da617ae695d40a68b372333
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-26SJXHTCGI.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\is-26SJXHTCGI.tmp
            • Size 943KB
            • SHA256 b6b2cf8b1e49e8a6e7b2a3415498931dc58fa384ce42aa39aac8b71619f4317a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-9DRJGYOJ7Y.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\is-9DRJGYOJ7Y.tmp
            • Size 10.4MB
            • SHA256 9f48c7f9c7c94d516a14870707e910ab94d75ae640ff6842c4af53276cd26ebe
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-DZSA9EK25K.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\is-DZSA9EK25K.tmp
            • Size 257B
            • SHA256 122b32f3ee3f1e8d65c774f5257fc6cc2127b666148ced0ce2efa3ea57e1d93c
            • MD5 SHA1 SHA512 TLSH

            is-VMI1BULAQM.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\is-VMI1BULAQM.tmp
            • Size 106B
            • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
            • MD5 SHA1 SHA512 TLSH

            is-W878I5GO4H.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\is-W878I5GO4H.tmp
            • Size 723KB
            • SHA256 f4ca0c7dc3fa0329d15128cf217f279650d7dad93b6a1629bb3a303a8a04671b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            af.pak

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\af.pak
            • Size 548KB
            • SHA256 b9ee49aa16150d8c47af4455473efdc82389688a9294a2ea819c8d0955da6bc5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-0KI8446LJB.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-0KI8446LJB.tmp
            • Size 956KB
            • SHA256 16b0c0020bc8e8b9ad075bf401592f1f16b1d6d6836a86921f18b78cc8d8c798
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-13FTWECTGH.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-13FTWECTGH.tmp
            • Size 621KB
            • SHA256 73142f5f4654721d4de9ee4da2a87ade603f221043f2d08eca83d1e0950c632e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-1U8KH5HFFJ.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-1U8KH5HFFJ.tmp
            • Size 621KB
            • SHA256 a9c0724286172300222ba0fe06ac0cf87282092f5bee3ef7dbd93000015621a0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-40BW8UZHB0.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-40BW8UZHB0.tmp
            • Size 504KB
            • SHA256 3915a43dab5c12f08562d1bb6d4e493b35cb88e87c04c532ee660fd9b9f432b7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-47EVYKVXIQ.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-47EVYKVXIQ.tmp
            • Size 1.3MB
            • SHA256 b4196b31df1c5277a12a6a476c54b68796d1376657e8f64eef4d87a117203364
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-4GB5TJ2ICF.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-4GB5TJ2ICF.tmp
            • Size 732KB
            • SHA256 c6cb2d7727c50cf4aadd7515f118ebb781f340397de25ea6c12a91c0320578d3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-4P849SSK7L.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-4P849SSK7L.tmp
            • Size 669KB
            • SHA256 df846ae100968980b636ae7e7ea1169add7746d2e508ade2fb45c0c2370df5b4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-58YCMO383D.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-58YCMO383D.tmp
            • Size 1.5MB
            • SHA256 de76045ac1ffce626712a92890e2672d7a91702ff0ae4fa125a83f7ef8bf4466
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-6IC7DNMQ5P.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-6IC7DNMQ5P.tmp
            • Size 574KB
            • SHA256 d528bea655865ee76f2466c0f111644912bcd3637b660f57400e6f02364cbd97
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-77C6Z2KZ3A.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-77C6Z2KZ3A.tmp
            • Size 505KB
            • SHA256 4a81ddb231934c4fed86c5c5692cce1a005cafcd5a448e0d05dc87a03e7683b1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-7QG6L3GXMY.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-7QG6L3GXMY.tmp
            • Size 499KB
            • SHA256 56a7d6209fbbb67b2d7abdb994e687f155525cdf3e934343dc699cf78e2c5bd7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-90TIVW36XN.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-90TIVW36XN.tmp
            • Size 667KB
            • SHA256 e2137b28c394048c49947825c46bcf39e2fb77dce69717a2016bf49c33d98c6f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-A8YCY8N1X4.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-A8YCY8N1X4.tmp
            • Size 914KB
            • SHA256 2eb85f449ff35075c0637489f0874d6af3299b165edd8c96e48ae37ffe82f570
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-D08I6H05KG.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-D08I6H05KG.tmp
            • Size 887KB
            • SHA256 4be0fe51b7d2a4682a1c1dc998e1d54f1498f02e02400f898382364d7914df87
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-D72HHOTT9I.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-D72HHOTT9I.tmp
            • Size 649KB
            • SHA256 4906dac62f2b7baa1dc5a84c3f8046c9c1445696613810e59778ac6bfee3c68e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-DO9DZSRDSL.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-DO9DZSRDSL.tmp
            • Size 547KB
            • SHA256 c47e73b1595000f6317f73af619ae0985bf85692b325e4dbf6caf87a216e21e2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-E82HDJ7LN9.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-E82HDJ7LN9.tmp
            • Size 578KB
            • SHA256 ee5b3812c6781d94e19a110b2f6ef44ae90577842837fbbe16faa68a7d079f5b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-EH9VZNRGQR.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-EH9VZNRGQR.tmp
            • Size 716KB
            • SHA256 8a0f45756a67a0d1ee65a850d8a73c0bfbef8704d47a56dbc589e71e88a8e81c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-EMGT1WGULE.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-EMGT1WGULE.tmp
            • Size 551KB
            • SHA256 b40b6c476668bdfc0f8f49eb7fa4652c6deb475dbc9fcb39d44302c3f42c0bb7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-EWK1F2EYOB.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-EWK1F2EYOB.tmp
            • Size 607KB
            • SHA256 31a91835460093e0232eaa62b8ee9e933517149ee1c35c105865f139a414f877
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-EYP2YFU1LK.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-EYP2YFU1LK.tmp
            • Size 1.4MB
            • SHA256 be20963a52729226be40cf72b0caa3192ccfeb81c1c89b565d50324900a16c95
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-F0985DIKR2.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-F0985DIKR2.tmp
            • Size 1.3MB
            • SHA256 bec1cbc65372738e1adefe1783c6e9bb8c3429531dacc79b9767c07e5e067567
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-F4U06AYL54.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-F4U06AYL54.tmp
            • Size 661KB
            • SHA256 f1339796d791bc26019191413b432ab233424e490582292a064da898d2cdc3bf
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-FP3O9BDBXP.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-FP3O9BDBXP.tmp
            • Size 663KB
            • SHA256 82d01358794d1bef4d830b884a6d82b2c0025f313b665dd8a9f56bd3fa566664
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-FZV8W2X7PG.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-FZV8W2X7PG.tmp
            • Size 557KB
            • SHA256 9275e22f72fc9e7d930661c1c0fb0769ef0b31278cf0256fe68609d813350c82
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-G5QLDJC694.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-G5QLDJC694.tmp
            • Size 616KB
            • SHA256 eed6e6e5b67d65968ee668e83e037ee1d3fc7e29ecab18d565833a1b4a3b8622
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-H6J4MOYI56.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-H6J4MOYI56.tmp
            • Size 1.0MB
            • SHA256 45d43af4307c1405e7a337bec4d219bb785fe5b21c5dabf1c1dde78f1d5eb1bf
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-H6KAFEBQ97.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-H6KAFEBQ97.tmp
            • Size 1.4MB
            • SHA256 affb488ae55c810439f2d211e2c6d7c6f59328182925bb3563eca2563fdc7bd2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-K42L91I54J.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-K42L91I54J.tmp
            • Size 639KB
            • SHA256 55370c6dede71850680a1b1eba8bdce9827fc9fb8cb7a23e90c67a0dd8599602
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-KG6ET32256.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-KG6ET32256.tmp
            • Size 803KB
            • SHA256 bfac84a8044abe11c7528efe3adddca8f2c60abaece41a6b0ba2a4ae5ab724a5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-L2ZISWRV73.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-L2ZISWRV73.tmp
            • Size 1.1MB
            • SHA256 74e238fbdf2e1afd23b5e2feb2c615740647ea5f571d6276acc3cafe6204931b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-L4R8QBN26T.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-L4R8QBN26T.tmp
            • Size 605KB
            • SHA256 09cf7b75ee110cae4056261ba504b7d0bd32841880ba4d00f8c7bfe62f104b9c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-MI1FH7XGKW.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-MI1FH7XGKW.tmp
            • Size 600KB
            • SHA256 a8589923633b1e8aab4948ce8d5e489596201e436a1d60987473477c959d3097
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-NPY7WEW03B.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-NPY7WEW03B.tmp
            • Size 511KB
            • SHA256 3a39dc23923ee9526aa3b2690588999646e97a2f326f39ec82e7daab7f5dc379
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-NU9848W9X3.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-NU9848W9X3.tmp
            • Size 1017KB
            • SHA256 2f97ca7d570bfe1a87ac0b08b8fe2af4b5b92e0baf620a6eb2bc89a1a7bdf681
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-OREYD8Y4FP.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-OREYD8Y4FP.tmp
            • Size 624KB
            • SHA256 9b12826879dc78e30aff3ca6e1aa42e2e3f3c5d323724b60c3d0e6cecdb15e82
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-QLPHPZZCHV.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-QLPHPZZCHV.tmp
            • Size 898KB
            • SHA256 326c6791f15872f9011a6dc4a0be864f0bf225bd5a57e8d1a3a828c0e7a1c20c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-RBLDSUAO1X.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-RBLDSUAO1X.tmp
            • Size 564KB
            • SHA256 e1087ecceb95867148da739e99bac37cbb63e7c37fe02b9a6338deaea1fb8fda
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-RGDSUFC9H3.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-RGDSUFC9H3.tmp
            • Size 982KB
            • SHA256 d343607a7d477d50393b85b55f423d8cde968214cb6af240a94eae2f5206079a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-SBZK41N39D.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-SBZK41N39D.tmp
            • Size 611KB
            • SHA256 a1f9a2fa2400980cf72fba0a28b3de19d5552e9bf8d65bfbec8b021890f15ca1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-TAU0ZRRA4L.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-TAU0ZRRA4L.tmp
            • Size 574KB
            • SHA256 f4f0747d32946f050083234541103edb8951adb7f55bc72f0347f63f396776ef
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-TINPBX8BS7.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-TINPBX8BS7.tmp
            • Size 557KB
            • SHA256 c7e95e286c926957ff09cff68a62080e6ae41856efff680e37a37e41220b8b28
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-TTE8MGBOKZ.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-TTE8MGBOKZ.tmp
            • Size 600KB
            • SHA256 b3e50c7f580742678db17a146c157cc075f8c57d90c9449c582bd39c02dc8dcb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-V4QNC09WPX.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-V4QNC09WPX.tmp
            • Size 1.2MB
            • SHA256 f53c61d26d0371e81e3991e744efe8a07511469c34b5290906486745d744fb11
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-W0RLIXIZO5.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-W0RLIXIZO5.tmp
            • Size 1.5MB
            • SHA256 ce48cffa2ef397ea290c2442e7cf506c547e4ec9b66fcab65b52897424b94702
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-W77TU2RHZ7.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-W77TU2RHZ7.tmp
            • Size 641KB
            • SHA256 e6eb05a01719de033d2a490074ead42b2c070533d83b3e32acb718714165eed8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-X6D37IVP5Z.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-X6D37IVP5Z.tmp
            • Size 1.3MB
            • SHA256 5dd22faa01fc467b5426e820cd402c1388347faab5aad4bd2eb5f9bee130198d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-XEBCGBMYSB.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-XEBCGBMYSB.tmp
            • Size 590KB
            • SHA256 8bde1c563849f7e9421d0244e649f20230b7aca6fb6fd3008e3a9827d61605bb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-XWTW3HTPMG.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-XWTW3HTPMG.tmp
            • Size 627KB
            • SHA256 290013857205ad97261e83c730609ad549a643feafca7005ab27f7dcb690f522
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-Y0OILBZ7B7.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-Y0OILBZ7B7.tmp
            • Size 638KB
            • SHA256 4575c012d98cdd7dcc2c8188826e2806fd8479f54683f12fd3c75cb14ff559c0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-Y40Y2RBB7B.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-Y40Y2RBB7B.tmp
            • Size 605KB
            • SHA256 8218387150c92be4b439882b42245f92545b44e40a5b0bca1cd7a4e66391d6c5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-Y87OFLWI9T.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-Y87OFLWI9T.tmp
            • Size 1.0MB
            • SHA256 b8cce90bb492d4b589c6163684dc5c4f3be1c21ba8238a1b549bcf82a284494f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-ZSWJLNIMPY.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\is-ZSWJLNIMPY.tmp
            • Size 1.2MB
            • SHA256 fc728079f2b5b8968cf60244720521788de776094e30f0968ca7643578c538fe
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ro.pak

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\locales\ro.pak
            • Size 627KB
            • SHA256 fed1bd17ab916153d227ed55fa860c355563063f3632dfcaa739fd7f7e7b5ab7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            is-W9EXJJHJ4J.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\resources\accessibility\is-W9EXJJHJ4J.tmp
            • Size 2KB
            • SHA256 d51da94171a43a6e72684d7031b2b80cea6cb3b4936e25441b1e8129f508dc7b
            • MD5 SHA1 SHA512 TLSH

            is-1K38NHZZZM.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\resources\accessibility\reading_mode_gdocs_helper\is-1K38NHZZZM.tmp
            • Size 1KB
            • SHA256 d291adabcfcb1a4a4a2ffacdd9d04fdb473ab0d6903556bef7446be9c3646d86
            • MD5 SHA1 SHA512 TLSH

            is-TFAKIBPSFP.tmp

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\resources\browsers\chromium_headless_shell-1234\chrome-headless-shell-win64\resources\accessibility\reading_mode_gdocs_helper\is-TFAKIBPSFP.tmp
            • Size 439B
            • SHA256 6c0aeaaf9a71ad68aa45764c111e70bb23aa0fbf406644a375b6b709cbbe4b6e
            • MD5 SHA1 SHA512 TLSH

            v8_context_snapshot.bin

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\v8_context_snapshot.bin
            • Size 696KB
            • SHA256 1df86ae706c6fc60bb6f4e60d76c5a3f56affa54e6b1442f51127bedc589d089
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vk_swiftshader.dll

            • Path C:\Users\Admin\AppData\Roaming\ProjectLightningV5\vk_swiftshader.dll
            • Size 5.4MB
            • SHA256 a638bd2235309493f50adfcae707675bb6c3615a2ac44ccefeca7c7085389d49
            • MD5 SHA1 SHA512 SSDEEP TLSH

            data_2

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Cache\Cache_Data\data_2
            • Size 8KB
            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
            • MD5 SHA1 SHA512 SSDEEP

            data_3

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Cache\Cache_Data\data_3
            • Size 8KB
            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
            • MD5 SHA1 SHA512 SSDEEP

            f_00000d

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Cache\Cache_Data\f_00000d
            • Size 33KB
            • SHA256 faa24ec881e6040655c187a681d6dc496eb8aa41e1bd0652a180b3a40b457187
            • MD5 SHA1 SHA512 SSDEEP TLSH

            f_000033

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Cache\Cache_Data\f_000033
            • Size 242KB
            • SHA256 341cca70dd894d4e8e37feab8f58b00ceaad701111847b88e8df1eb119ea817c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            f_000045

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Cache\Cache_Data\f_000045
            • Size 323KB
            • SHA256 47ee325b72429ced8a91f5ff8cf90e7f9ba92e7c037a254a72048e4150366ff5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            f_000047

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Cache\Cache_Data\f_000047
            • Size 123KB
            • SHA256 287e21763124c1fabe13c229ce0c5d53fc86d543ed2e4674a9444dbd952d36cb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            f_000049

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Cache\Cache_Data\f_000049
            • Size 450KB
            • SHA256 497c391a3fdcd902326ff66c68549c1453f3255d6c7addb10c42a12135b89d41
            • MD5 SHA1 SHA512 SSDEEP TLSH

            f_00004b

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Cache\Cache_Data\f_00004b
            • Size 117KB
            • SHA256 0ac77bddd469b33d1b6ecbddc78833527275f23442cef5bfba4b139416e59173
            • MD5 SHA1 SHA512 SSDEEP TLSH

            the-real-index

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Code Cache\js\index-dir\the-real-index
            • Size 48B
            • SHA256 2ef6b141a4d0cd67097da04d950ca990762d445a7cb7ba155e144f869170f049
            • MD5 SHA1 SHA512

            index

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Code Cache\wasm\index
            • Size 24B
            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
            • MD5 SHA1 SHA512

            the-real-index

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Code Cache\wasm\index-dir\the-real-index
            • Size 48B
            • SHA256 da6e9e10cb469917e7db5e96bbb8c57eaa4cc346e66e0b970f26e9efa47f03e1
            • MD5 SHA1 SHA512

            Local State

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Local State
            • Size 434B
            • SHA256 59f6cff2480891e555579a02dbb19252fbb9c9b7a8af25d117b0cfd4e35f0b8f
            • MD5 SHA1 SHA512 TLSH

            CURRENT

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Local Storage\leveldb\CURRENT
            • Size 16B
            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
            • MD5 SHA1 SHA512

            1032b68c-504e-4d31-a630-06e8948574b9.tmp

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Network\1032b68c-504e-4d31-a630-06e8948574b9.tmp
            • Size 3KB
            • SHA256 52977e0914fdb7b0b96624e76014e8182a3eff5062bf716e54240a030b1c2a3f
            • MD5 SHA1 SHA512 TLSH

            98001360-ffe1-4f2d-acb6-4e353047ea6e.tmp

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Network\98001360-ffe1-4f2d-acb6-4e353047ea6e.tmp
            • Size 2KB
            • SHA256 242a163f6bb29ae64f05ff1b174f541323be3d199b06e779c360ad821d443ee5
            • MD5 SHA1 SHA512 TLSH

            Network Persistent State

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Network\Network Persistent State
            • Size 59B
            • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
            • MD5 SHA1 SHA512 TLSH

            cddf3f84-2bcd-4b76-b949-a0a091052100.tmp

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Network\cddf3f84-2bcd-4b76-b949-a0a091052100.tmp
            • Size 61B
            • SHA256 e1b77550222c2451772c958e44026abe518a2c8766862f331765788ddd196377
            • MD5 SHA1 SHA512 TLSH

            Preferences

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Preferences
            • Size 93B
            • SHA256 529b6595a4727a6b2d6cc154ae51f426216c01fc7fda02de2460abfb3de118a4
            • MD5 SHA1 SHA512 TLSH

            MANIFEST-000001

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\Session Storage\MANIFEST-000001
            • Size 41B
            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
            • MD5 SHA1 SHA512

            biblioteca.db

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\biblioteca.db
            • Size 40KB
            • SHA256 b76d67ab24800ace303b7f31fb13ad6259207bd746ec0307b2920f3458dda6c8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            config.json

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\config.json
            • Size 20B
            • SHA256 876c2ee98531d13b8fc50e49fb768944f36504b17ee4a56267c7006163d01280
            • MD5 SHA1 SHA512

            config.json

            • Path C:\Users\Admin\AppData\Roaming\project-lightning-data\config.json
            • Size 53B
            • SHA256 da5368b6b2dfdaa0cbe7fcc5842d90457fde9a4116929008fb42912cdcbdd8fb
            • MD5 SHA1 SHA512 TLSH

            memory/1100-1-0x0000000000AA0000-0x0000000000B7D000-memory.dmp

            memory/1100-7825-0x0000000000AA0000-0x0000000000B7D000-memory.dmp

            memory/1100-8-0x0000000000AA0000-0x0000000000B7D000-memory.dmp

            memory/1224-7823-0x0000000001000000-0x000000000146A000-memory.dmp

            memory/1224-10-0x0000000003650000-0x0000000003651000-memory.dmp

            memory/1224-6-0x0000000003650000-0x0000000003651000-memory.dmp

            memory/1224-5081-0x0000000001000000-0x000000000146A000-memory.dmp

            memory/1224-7748-0x0000000001000000-0x000000000146A000-memory.dmp

            memory/1224-5919-0x0000000001000000-0x000000000146A000-memory.dmp

            memory/1224-186-0x0000000001000000-0x000000000146A000-memory.dmp

            memory/1224-12-0x0000000001000000-0x000000000146A000-memory.dmp

            memory/1224-6847-0x0000000001000000-0x000000000146A000-memory.dmp

            memory/1224-9-0x0000000001000000-0x000000000146A000-memory.dmp

            memory/3488-8156-0x000001B0E60C0000-0x000001B0E60C1000-memory.dmp

            memory/3488-8147-0x000001B0E60C0000-0x000001B0E60C1000-memory.dmp

            memory/3488-8149-0x000001B0E60C0000-0x000001B0E60C1000-memory.dmp

            memory/3488-8153-0x000001B0E60C0000-0x000001B0E60C1000-memory.dmp

            memory/3488-8154-0x000001B0E60C0000-0x000001B0E60C1000-memory.dmp

            memory/3488-8155-0x000001B0E60C0000-0x000001B0E60C1000-memory.dmp

            memory/3488-8157-0x000001B0E60C0000-0x000001B0E60C1000-memory.dmp

            memory/3488-8158-0x000001B0E60C0000-0x000001B0E60C1000-memory.dmp

            memory/4756-7891-0x00007FFAC4BF0000-0x00007FFAC4BF1000-memory.dmp

            memory/4756-7892-0x00007FFAC52C0000-0x00007FFAC52C1000-memory.dmp