Analysis

  • max time kernel
    151s
  • max time network
    142s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    26/10/2026, 14:34

General

  • Target
    dotnet-codex-bootstrapper.exe
  • Size 65.9MB
  • Sample261026-rxea7aev8s
  • SHA256 e16b496d3dc7dc4623ff956e43eee8cb32f0af322326ef6cce7c8d369ce83f48
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 14 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates connected drives 3 TTPs 23 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 8 IoCs
  • Drops file in Windows directory 50 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Modifies data under HKEY_USERS 9 IoCs
  • Modifies registry class 64 IoCs
  • Modifies system certificate store 2 TTPs 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 14 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\dotnet-codex-bootstrapper.exe
    "C:\Users\Admin\AppData\Local\Temp\dotnet-codex-bootstrapper.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3268
    • C:\Users\Admin\AppData\Local\Codex\Codex Bootstrapper.exe
      "C:\Users\Admin\AppData\Local\Codex\Codex Bootstrapper.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4316
      • C:\Users\Admin\AppData\Local\Codex\staging\runtime\windowsdesktop-runtime-win-x64.exe
        "C:\Users\Admin\AppData\Local\Codex\staging\runtime\windowsdesktop-runtime-win-x64.exe" /install /quiet /norestart
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        • Suspicious use of WriteProcessMemory
        PID:1700
        • C:\Windows\TEMP\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\wixstdba.exe
          "C:\Windows\TEMP\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\wixstdba.exe" -burn.ba.apiver 569705357157400576 -burn.ba.pipe BurnPipe.{5D58FD17-A7A2-47E4-8183-B4CF6564CA34} {6AF5F528-74D8-4E8D-943A-12EC3908C48C}
          4⤵
          • Executes dropped EXE
          • System Location Discovery: System Language Discovery
          PID:1260
        • C:\Windows\TEMP\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.be\windowsdesktop-runtime-10.0.13-win-x64.exe
          "C:\Windows\TEMP\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.be\windowsdesktop-runtime-10.0.13-win-x64.exe" -q -burn.elevated BurnPipe.{C0BD474C-E064-41E1-8EAB-906CD4BEB302} {09B00C87-F53B-4C55-B0F1-6B64237ECCB0} 1700
          4⤵
          • Executes dropped EXE
          • Adds Run key to start application
          • Drops file in Program Files directory
          • System Location Discovery: System Language Discovery
          • Modifies registry class
          • Suspicious use of AdjustPrivilegeToken
          PID:6068
  • C:\Windows\system32\msiexec.exe
    C:\Windows\system32\msiexec.exe /V
    1⤵
    • Enumerates connected drives
    • Drops file in Program Files directory
    • Drops file in Windows directory
    • Modifies data under HKEY_USERS
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3360
    • C:\Windows\System32\MsiExec.exe
      C:\Windows\System32\MsiExec.exe -Embedding FEF456829C45583A9707118C654E97BE
      2⤵
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      PID:2300
    • C:\Windows\System32\MsiExec.exe
      C:\Windows\System32\MsiExec.exe -Embedding 485A507FCBE8A4D91585B4B42F26961F
      2⤵
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      PID:2308
    • C:\Windows\System32\MsiExec.exe
      C:\Windows\System32\MsiExec.exe -Embedding 878221B77983124070B149AC1C6BF18C
      2⤵
      • Loads dropped DLL
      PID:3204
    • C:\Windows\System32\MsiExec.exe
      C:\Windows\System32\MsiExec.exe -Embedding 3A28B6B335CB3024426FB938D2A00B59
      2⤵
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      PID:3344
    • C:\Windows\System32\MsiExec.exe
      C:\Windows\System32\MsiExec.exe -Embedding 8D974AA4473697E5B4F810BF172D8E3D
      2⤵
      • Loads dropped DLL
      • Suspicious use of SetWindowsHookEx
      PID:5916
  • C:\ProgramData\Package Cache\{3A4D9E06-6029-4CBB-BB9F-2799A6AF4AC1}\windowsdesktop-runtime-10.0.13-win-x64.exe
    "C:\ProgramData\Package Cache\{3A4D9E06-6029-4CBB-BB9F-2799A6AF4AC1}\windowsdesktop-runtime-10.0.13-win-x64.exe" /burn.runonce
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:788
    • C:\ProgramData\Package Cache\{3A4D9E06-6029-4CBB-BB9F-2799A6AF4AC1}\windowsdesktop-runtime-10.0.13-win-x64.exe
      "C:\ProgramData\Package Cache\{3A4D9E06-6029-4CBB-BB9F-2799A6AF4AC1}\windowsdesktop-runtime-10.0.13-win-x64.exe" /burn.log.append "C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_10.0.13_(x64)_20261026143531.log" /quiet /install /norestart
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5840
      • C:\Windows\TEMP\{23537445-BCF2-49F0-A7F6-A0A63A772B6A}\.ba\wixstdba.exe
        "C:\Windows\TEMP\{23537445-BCF2-49F0-A7F6-A0A63A772B6A}\.ba\wixstdba.exe" -burn.ba.apiver 569705357157400576 -burn.ba.pipe BurnPipe.{2A30262A-4CA3-46DB-9343-3AC2E7B24937} {E24C772D-0847-460B-A462-3FF99E7FB8F4}
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:5076

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        e5a23a9.rbs

        • Path C:\Config.Msi\e5a23a9.rbs
        • Size 11KB
        • SHA256 8586feaa187548d7b438e2bfb9ca04d20f0da586e51fee8e86d00fe296466f9e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e5a23b0.rbs

        • Path C:\Config.Msi\e5a23b0.rbs
        • Size 9KB
        • SHA256 4b5f24e80b6c577281ae3258b15eab03f6c9679f9f05cdab947f5818810f41c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e5a23b7.rbs

        • Path C:\Config.Msi\e5a23b7.rbs
        • Size 8KB
        • SHA256 4d3d5253b71d69320e8c9a84ac82a35a97f7b702410bb4f395fc8abb8772e642
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e5a23b8.rbf

        • Path C:\Config.Msi\e5a23b8.rbf
        • Size 370KB
        • SHA256 2e6bf792d54303a54467102fd873a7d7a993f828e8d19c040e13e428e5f2d9c8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        e5a23bb.rbs

        • Path C:\Config.Msi\e5a23bb.rbs
        • Size 9KB
        • SHA256 71e0767643feaf5a0ae89c896d5ff925cca166eb37b77cc3f498611fc576ca31
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ThirdPartyNotices.txt

        • Path C:\Program Files\dotnet\ThirdPartyNotices.txt
        • Size 77KB
        • SHA256 deb4427a295e1ed474b0d81c5a0d972c1b550b9a715cda939cdfa9236b1b418f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dotnet.exe

        • Path C:\Program Files\dotnet\dotnet.exe
        • Size 163KB
        • SHA256 abce6623a6729059cf39bb0f728c4a7804f625895099c88c17e6e704661e09eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DotNetRuntime

        • Path C:\ProgramData\Package Cache\.unverified\DotNetRuntime
        • Size 28.1MB
        • SHA256 d3008cda18f40bc728311e7c5ed3cf18a3f3c30e52496bdc4e271637c6886b0d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        state.rsm

        • Path C:\ProgramData\Package Cache\{3A4D9E06-6029-4CBB-BB9F-2799A6AF4AC1}\state.rsm
        • Size 1KB
        • SHA256 c9d0a129c10bd0f8945ee1bf3de9255b453442b808f8ce20bb3776a9ea0ed6a7
        • MD5 SHA1 SHA512 TLSH

        bootstrapper-20261026.log

        • Path C:\Users\Admin\AppData\Local\Codex\bootstrapper\logs\bootstrapper-20261026.log
        • Size 557B
        • SHA256 c11b5367b45737fec82645ebe6a70ef92ab74cbcde5a5896f2f2ee279d229613
        • MD5 SHA1 SHA512 TLSH

        darklua.LICENSE.txt

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\assets\bin\darklua.LICENSE.txt
        • Size 1KB
        • SHA256 e513e441353603683f94241a3f8924cca2d8483a51316845ea148900ae2697d7
        • MD5 SHA1 SHA512 TLSH

        darklua.VERSION.txt

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\assets\bin\darklua.VERSION.txt
        • Size 189B
        • SHA256 024d75f8a114bfbdaf4094f6d439bd41e55906ae3f3f6d96fcf5fed8a57e03f6
        • MD5 SHA1 SHA512 TLSH

        darklua.exe

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\assets\bin\darklua.exe
        • Size 8.3MB
        • SHA256 0c8df78d9d99e21f0a095e975bb7449e49155398d3f7cae46a9b0527fa491bd2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-us.json

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\assets\bin\en-us.json
        • Size 5.6MB
        • SHA256 96886460943447f1b7a287c100e46742342412091d012503b6a2bbd2a31be6b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        globalTypes.d.luau

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\assets\bin\globalTypes.d.luau
        • Size 430KB
        • SHA256 3b6f5251daa89d25fce58cf52f24c00a9cbb9712d3ebcf200fe5ed9e1ff80360
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lsp.d.luau

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\assets\bin\lsp.d.luau
        • Size 12KB
        • SHA256 b9c8fa71bf92ae8763fb82dd30c96ac13c95d31e9f5d1a0414b18a6b45312a10
        • MD5 SHA1 SHA512 SSDEEP TLSH

        luau-lsp.exe

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\assets\bin\luau-lsp.exe
        • Size 3.4MB
        • SHA256 d38d6297b4653f30397b7f45964ed99a70c8ab73d60063f68d3380c309e626a4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Inter-Variable-0be2399e.ttf

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\Inter-Variable-0be2399e.ttf
        • Size 854KB
        • SHA256 0be2399ea925f1f83ff974764761da9860ec50742ed29a5d4c1ffd0c5c7ac3a8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        abap-b43a89e6.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\abap-b43a89e6.js
        • Size 14KB
        • SHA256 b33914256914783e4f91d58082a7a788aec9911074d865a574d354f838619115
        • MD5 SHA1 SHA512 SSDEEP TLSH

        apex-937df311.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\apex-937df311.js
        • Size 4KB
        • SHA256 242179cbdca958f05aa4ad7ffe4dd2d4ffcd136efcf6a45d28c9d5edd2f60d77
        • MD5 SHA1 SHA512 SSDEEP TLSH

        azcli-282bdb58.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\azcli-282bdb58.js
        • Size 1KB
        • SHA256 0371566ef7b93bef059a6676630728283c4924152d3dfbcb8698ef9f5bc90409
        • MD5 SHA1 SHA512 TLSH

        bat-3e233203.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\bat-3e233203.js
        • Size 2KB
        • SHA256 c59e4381d00e00370a14a11608be39e3ca7d9d8bda20dc3151294fb0532cd790
        • MD5 SHA1 SHA512 TLSH

        bicep-a145af43.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\bicep-a145af43.js
        • Size 2KB
        • SHA256 120e3a6dae38468e17dbc12f67ba0e936cec868d29fa55b0a8c289aeabf727e7
        • MD5 SHA1 SHA512 TLSH

        cameligo-06e900e4.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\cameligo-06e900e4.js
        • Size 2KB
        • SHA256 88ee85a1f4b12c139989635f133d29e913c1cbd071757316ba9266264a5fb61b
        • MD5 SHA1 SHA512 TLSH

        clojure-db811a57.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\clojure-db811a57.js
        • Size 9KB
        • SHA256 1b25626c7a98f70527ac09b9ad542b114fc21869be62b670d378ca716e1325e8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        codicon-71cccbf1.ttf

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\codicon-71cccbf1.ttf
        • Size 70KB
        • SHA256 71cccbf15f547a7392f5f2e0ae0c42d5b64cb29ba690eb346b3cb2aa5e4a19e7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        coffee-09967f6c.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\coffee-09967f6c.js
        • Size 3KB
        • SHA256 96b64f97d1954be2fa2c2ee68bf8274a00c4665911bf3ae1ee42b29102a78f48
        • MD5 SHA1 SHA512 TLSH

        cpp-faa9e9b6.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\cpp-faa9e9b6.js
        • Size 5KB
        • SHA256 5dc057c10e0bd0a64694b327d5d3bea90eae4d0e7fc2febe7da55b70a483b325
        • MD5 SHA1 SHA512 SSDEEP TLSH

        csharp-97f4fb7d.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\csharp-97f4fb7d.js
        • Size 4KB
        • SHA256 a20609417d3ee131822087339bc6b5ee2f4a6f81470644a7004c73db993ec34d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        csp-a35669e2.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\csp-a35669e2.js
        • Size 1KB
        • SHA256 69a779ae10e364aa9c349131766948bc95bcd017cfc76cf55a291f86d5217f4a
        • MD5 SHA1 SHA512 TLSH

        css-2476f175.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\css-2476f175.js
        • Size 4KB
        • SHA256 fe96ce0abf74ade29f7fdebffa8343315e23c92531cb776dea3901fa58b691ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cssMode-ae140568.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\cssMode-ae140568.js
        • Size 32KB
        • SHA256 661710c436009257895ec50a4ef292dc9f94da423077dba6d2ebe91c3aa77905
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cypher-303c3469.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\cypher-303c3469.js
        • Size 3KB
        • SHA256 37493bc93c8c13f01113ad7b1bb744e2b905f097c6e4b18e531703be3c6483b2
        • MD5 SHA1 SHA512 TLSH

        dart-49550748.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\dart-49550748.js
        • Size 4KB
        • SHA256 bcc053c6b1cb035aa9ca969d7dd7b8fdc89c3a90521b4495dc922adb49ecf1f6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dockerfile-f0d559c9.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\dockerfile-f0d559c9.js
        • Size 2KB
        • SHA256 a387113661c6c2448d1e10e58a16c890ba718555b10fb7b287c91d87143da7a9
        • MD5 SHA1 SHA512 TLSH

        ecl-8f371079.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\ecl-8f371079.js
        • Size 5KB
        • SHA256 d4ef6518c353118b335ca27acf506da21e065a584cebd249525a1ad34bdbf482
        • MD5 SHA1 SHA512 SSDEEP TLSH

        editor.worker-75310a73.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\editor.worker-75310a73.js
        • Size 170KB
        • SHA256 ac4f13fad9f55bfd5948a155600dde3afca17ad11b5376013218c66fbdabf556
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elixir-8520cbc3.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\elixir-8520cbc3.js
        • Size 9KB
        • SHA256 9b692668c56983b81565543b3700291763cb8bc63722f9176c132fd2df937418
        • MD5 SHA1 SHA512 SSDEEP TLSH

        flow9-21ceb8bd.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\flow9-21ceb8bd.js
        • Size 2KB
        • SHA256 dcb5a8e473f94cb9b3fb706049f6f79a238d3c1128e07fa265783ed118231674
        • MD5 SHA1 SHA512 TLSH

        freemarker2-428d4752.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\freemarker2-428d4752.js
        • Size 15KB
        • SHA256 c8bb72ea7b47eda6501b3d21b63cb398836437905cf9cc0e60ced3b523d5407f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fsharp-2e782b00.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\fsharp-2e782b00.js
        • Size 3KB
        • SHA256 11fa6c43e2f0166f7d24d3460ae16a242deb19abbf16f2fbda6aedf88ae1b94d
        • MD5 SHA1 SHA512 TLSH

        go-606d7332.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\go-606d7332.js
        • Size 2KB
        • SHA256 dc14bf07b9f056b429493ce1427f037542fab78c0ff9b50737a7269ffb8d77f1
        • MD5 SHA1 SHA512 TLSH

        graphql-503141bc.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\graphql-503141bc.js
        • Size 2KB
        • SHA256 f17b75827053de124a922168f750d10c480e7f6fe2c2298e6b4250cf00da6880
        • MD5 SHA1 SHA512 TLSH

        handlebars-2bc66846.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\handlebars-2bc66846.js
        • Size 6KB
        • SHA256 82c7043e288232bf93039a571647c6baa4e1e63af5fd945917dd952f57df493b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hcl-41af7310.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\hcl-41af7310.js
        • Size 3KB
        • SHA256 a182206c3bdd4848b1fbe90621ea2937dad8cd7e68523ef7e34fbb86176d12e4
        • MD5 SHA1 SHA512 TLSH

        html-65710edc.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\html-65710edc.js
        • Size 4KB
        • SHA256 c04386a6c220739106d54f60ce574e4d8acabfa6ab44e6a7d57f7c01d57e3adb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        htmlMode-4ecbd34d.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\htmlMode-4ecbd34d.js
        • Size 33KB
        • SHA256 3e13201b8e465a0dfced7b0c0a25d3010b023473cc9c5848bd92d0cc28c9acd6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index-3093d9a0.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\index-3093d9a0.js
        • Size 3.5MB
        • SHA256 c3d8851b3ca5784de52aee2e4a5da321efcfc0b87f778dc606d2abb0c1dc06e3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index-c4aedd64.css

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\index-c4aedd64.css
        • Size 84KB
        • SHA256 c4aedd64b5777412358dcf71ea5e581dc63b00ae992e49254cc82f0c5162e097
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ini-46e7a95b.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\ini-46e7a95b.js
        • Size 1KB
        • SHA256 d014f2e517ce8051db4d7c529588fc9a4827ebba5696f4fe3f81d90bf1a6ca4e
        • MD5 SHA1 SHA512 TLSH

        java-79ea7274.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\java-79ea7274.js
        • Size 3KB
        • SHA256 f5c23348268092b60a7e597c486773b186ef78bfb014d6aec78694230272e476
        • MD5 SHA1 SHA512 TLSH

        javascript-71c3e60b.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\javascript-71c3e60b.js
        • Size 929B
        • SHA256 05249c403e8111f7e9ed960d2b0ecfae9185608a2e89419c3b2d4ec625e37fa7
        • MD5 SHA1 SHA512 TLSH

        jsonMode-c46bb8a1.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\jsonMode-c46bb8a1.js
        • Size 38KB
        • SHA256 b4b65ece24a99ad16a8a0602bffbfd37f19d965dc35eca86fe1093c5dc8ffe81
        • MD5 SHA1 SHA512 SSDEEP TLSH

        julia-25a565bd.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\julia-25a565bd.js
        • Size 7KB
        • SHA256 7687d7322e93699a9849ea02635b8ab725d2e236b1b2dda8981175d185ab321b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kotlin-cef1b1fd.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\kotlin-cef1b1fd.js
        • Size 3KB
        • SHA256 dc2b8e5c75d17b8db94e9e7ce58941110b1cdd7fed7f912d0b4ed20df55c76fe
        • MD5 SHA1 SHA512 TLSH

        less-909e640f.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\less-909e640f.js
        • Size 4KB
        • SHA256 89011cb6df595cec43405e76eda4393ae249dfd5aa8075b40f0b9fee61defd4e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lexon-8c13c279.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\lexon-8c13c279.js
        • Size 2KB
        • SHA256 88b206b09cab832f9f49f0585f96b222e4d85aee94d9a8f0f88a40c128500682
        • MD5 SHA1 SHA512 TLSH

        liquid-fe1416c6.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\liquid-fe1416c6.js
        • Size 3KB
        • SHA256 6cfe3fa59154ae2f00f0ecda5b5a55a42a18aa118daef34fb8d5fb6f363ef42b
        • MD5 SHA1 SHA512 TLSH

        lua-10f18aa7.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\lua-10f18aa7.js
        • Size 2KB
        • SHA256 2b3d522930421a6da87b9972899fb6054e03111bf338ec2c63b2b89df76e1538
        • MD5 SHA1 SHA512 TLSH

        m3-b84828cd.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\m3-b84828cd.js
        • Size 2KB
        • SHA256 e18e9040e1d79cebb7981217d70bca82d05906d78b7445b2ced0aa0e17683bab
        • MD5 SHA1 SHA512 TLSH

        markdown-727f1fa6.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\markdown-727f1fa6.js
        • Size 3KB
        • SHA256 27f777131f7a90e46254bfd1cc4db28a46c811b566d716a5d5bad973f9995a57
        • MD5 SHA1 SHA512 TLSH

        mips-17479448.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\mips-17479448.js
        • Size 2KB
        • SHA256 699c3ba720529214d5fbbaf1b826702d7aa2d82d41e09a1633443c98b8f2c418
        • MD5 SHA1 SHA512 TLSH

        msdax-2d903eee.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\msdax-2d903eee.js
        • Size 5KB
        • SHA256 7befdcad21921683c815f06b60ce6ade6f9d8a39cc2572fa1060c47769d6c7ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mysql-c74c16f3.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\mysql-c74c16f3.js
        • Size 11KB
        • SHA256 cc0e83846a9f4ddd984c4d7c816cf83a4fdc745f2ad35cf20a951c3632100570
        • MD5 SHA1 SHA512 SSDEEP TLSH

        objective-c-465e183d.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\objective-c-465e183d.js
        • Size 2KB
        • SHA256 fa121396d1ac892b8caf025ac2974f403061321ad28cb42a088cde2843289371
        • MD5 SHA1 SHA512 TLSH

        pascal-32b3f17b.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\pascal-32b3f17b.js
        • Size 3KB
        • SHA256 9e648bff62721b7e7a9ea074ae6c63ce22a8151c7f6582c6c0059e7cf0bcbdcd
        • MD5 SHA1 SHA512 TLSH

        pascaligo-54265dfb.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\pascaligo-54265dfb.js
        • Size 2KB
        • SHA256 3f47e1d40f51fd55f4315468aec6fd29fe055f79d4a0a11df3a5eea88cd9b7a4
        • MD5 SHA1 SHA512 TLSH

        perl-040d59d8.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\perl-040d59d8.js
        • Size 8KB
        • SHA256 15784e900c76c0f72b04237380318e061e4c08659caa485d10a186775337149b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pgsql-cb78cfb3.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\pgsql-cb78cfb3.js
        • Size 13KB
        • SHA256 26513405a3a023360d5c8a22998cc85fd6dce0b6b2eeb38fc0dd261554cd06ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        php-01af256a.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\php-01af256a.js
        • Size 8KB
        • SHA256 92b5e2c2acf8bd5679d4ffe06f1c4a4da8364cdc191eff8184a3e53f69d3fd55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pla-c7898dec.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\pla-c7898dec.js
        • Size 1KB
        • SHA256 f3091bd6f76f803a7620517138a0e00641c5c742b3e778133176bc43f0a5989c
        • MD5 SHA1 SHA512 TLSH

        postiats-664fccce.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\postiats-664fccce.js
        • Size 7KB
        • SHA256 d9e386a21fe29beba86f697095aa7451d5a27d0da136504df2865c1f1d8e1970
        • MD5 SHA1 SHA512 SSDEEP TLSH

        powerquery-3f2f8847.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\powerquery-3f2f8847.js
        • Size 16KB
        • SHA256 cfc3b5e1da8192fc15e727e6e6bfe7889fd4be3add375f20e12187716fb72a81
        • MD5 SHA1 SHA512 SSDEEP TLSH

        powershell-ff2186c8.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\powershell-ff2186c8.js
        • Size 3KB
        • SHA256 8d155020d5747de01217b8a354bcf84ebc3cc7b453c0c5988e9b415a253df6be
        • MD5 SHA1 SHA512 TLSH

        protobuf-ede8c39c.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\protobuf-ede8c39c.js
        • Size 9KB
        • SHA256 03a5dc3eb2784723452bc8ebcd7713478608dd2c22de5ff0572b14d06fa9cd87
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pug-d64d016c.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\pug-d64d016c.js
        • Size 4KB
        • SHA256 0d04a1ccedc5a5c4cd09a7076052f4725cdc59bc4999835773b99bdc4a064dbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        python-75905c4b.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\python-75905c4b.js
        • Size 3KB
        • SHA256 9a21fd3d2f4c5dc4bd3787c18fde087238c2fadf454f1636e13ad6479a8cc046
        • MD5 SHA1 SHA512 TLSH

        qsharp-db4d2332.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\qsharp-db4d2332.js
        • Size 3KB
        • SHA256 35bf4439612bda02bb57acde3ba1671a9851b44285b45955bcaa47358d50a9af
        • MD5 SHA1 SHA512 TLSH

        r-fcb36db0.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\r-fcb36db0.js
        • Size 3KB
        • SHA256 1f2910f8d4441cf63322980262a4031fde6d58e6095dd141f6336c6959b2391d
        • MD5 SHA1 SHA512 TLSH

        razor-a3d00c41.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\razor-a3d00c41.js
        • Size 8KB
        • SHA256 c4bfdca6128fd2e1560df20a30c99f13d3cb262a422abd6fe191e555aa22e831
        • MD5 SHA1 SHA512 SSDEEP TLSH

        redis-c9bf3394.js.part

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\redis-c9bf3394.js.part
        • Size 3KB
        • SHA256 f33472675a53acbdd64664c00730ad9e03ace467ccab2057e8b88a5098a3e2a5
        • MD5 SHA1 SHA512 TLSH

        redshift-8d0f2494.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\redshift-8d0f2494.js
        • Size 11KB
        • SHA256 7027f3c44908ea56f6cc947bad27e145373e586b05d59462ed9935f710b70039
        • MD5 SHA1 SHA512 SSDEEP TLSH

        restructuredtext-98785e74.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\restructuredtext-98785e74.js
        • Size 4KB
        • SHA256 87482313a9e0df68368ac0d57ba6f879a73c612a7564e2bf1ac88eb1d95d15fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ruby-f75707b3.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\ruby-f75707b3.js
        • Size 8KB
        • SHA256 2a8e02d3fc616ef5d86902e06a935d31d1eb374e8c5c4346f27da89fc5d63b3a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        rust-9b309104.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\rust-9b309104.js
        • Size 4KB
        • SHA256 08a64e77fddf0170ca33e816689feaa3f2eeb662e8265422e7a4ff4ef088d836
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sb-99792fa3.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\sb-99792fa3.js
        • Size 2KB
        • SHA256 334a643331b64dd8fa1b19f95308f7e46c6b26cf9d6d48e3881defe07c82e0a8
        • MD5 SHA1 SHA512 TLSH

        scala-ec1f6546.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\scala-ec1f6546.js
        • Size 7KB
        • SHA256 176e65a834f23e874ee376aed162aa17a2b7618ef566aa359aa713597d981bdc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        scheme-2dfeec6d.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\scheme-2dfeec6d.js
        • Size 1KB
        • SHA256 0d19a6382e3af8228e3c1a6e1e4dfb7a0e78a992db0bba66142b586989d9ddf7
        • MD5 SHA1 SHA512 TLSH

        scss-1cfe6898.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\scss-1cfe6898.js
        • Size 6KB
        • SHA256 559898037bcff6a6a932556283ddff6be3d9e8e2b64c9d111db4b4c7cce1e0f7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        shell-09b1527a.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\shell-09b1527a.js
        • Size 3KB
        • SHA256 b006546ed2a0fb932db5dd6e37058beb1b7da258d7ea1321f54e26c2c252fd14
        • MD5 SHA1 SHA512 TLSH

        solidity-42cedeeb.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\solidity-42cedeeb.js
        • Size 18KB
        • SHA256 6dbc46d29064fa80f38ad191fec8e660f4dfa17a6ba1b22d1609641d99755340
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sophia-640bb318.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\sophia-640bb318.js
        • Size 2KB
        • SHA256 404d49e115444563f2c149f3f5a5cb74f57fec0a9f4a7816aacfa70c47792f0a
        • MD5 SHA1 SHA512 TLSH

        sparql-1350b581.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\sparql-1350b581.js
        • Size 2KB
        • SHA256 9226c14e055e31ef64c39bee5f52175766c0c6e3739562eb1d06623d496440ba
        • MD5 SHA1 SHA512 TLSH

        sql-d6fbbba2.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\sql-d6fbbba2.js
        • Size 10KB
        • SHA256 6fe39403cf70baff66715c8acba74999709b24605894528c6abc2225c1afc96e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        st-39d02679.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\st-39d02679.js
        • Size 7KB
        • SHA256 212e420d914562ba2577a9ddf1cfc6dd9c14a4617c1b88af35ea49ae175d9c3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        swift-deed2269.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\swift-deed2269.js
        • Size 5KB
        • SHA256 cf7076c53731d360e3bff1b7288ca602d5bd954f3c7b3b4ce7a231ae55ab6513
        • MD5 SHA1 SHA512 SSDEEP TLSH

        systemverilog-fe8f44a0.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\systemverilog-fe8f44a0.js
        • Size 7KB
        • SHA256 54c80d4225ee2182e3cd9810962e5306ff9c089cd7d15ecfdd831cf727efb4b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tcl-c3d9d7a8.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\tcl-c3d9d7a8.js
        • Size 3KB
        • SHA256 e8544a5df7de335bc655eaf96ac2e5c42fd55495ecbb904a234bded4fb318e1d
        • MD5 SHA1 SHA512 TLSH

        tsMode-aa9a7ba9.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\tsMode-aa9a7ba9.js
        • Size 21KB
        • SHA256 a96714c71baf02b9fa7e4bb17db12fd90f75f77fbf48a2c7b78945b69ee89bd8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        twig-6fc061e8.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\twig-6fc061e8.js
        • Size 6KB
        • SHA256 ff3264b5ff0b210f0dbdff1fc82baf28c23f7e4330bfb78290c5398b45c90612
        • MD5 SHA1 SHA512 SSDEEP TLSH

        typescript-bb87d65b.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\typescript-bb87d65b.js
        • Size 5KB
        • SHA256 9f067d1d1614e13d0b27907959fbc510cc7ce1508de4f6ca168ca33292ba3c3f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vb-4f8c002b.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\vb-4f8c002b.js
        • Size 5KB
        • SHA256 514f44e7cf96cdc552b6ed2df91805fe9e0cc2d830e58f5452696a5abeb4f2b3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        xml-422f1782.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\xml-422f1782.js
        • Size 2KB
        • SHA256 b93423ba61c3632059735b27e9226ce6d30ff84a9a85d79b218a4a054432f627
        • MD5 SHA1 SHA512 TLSH

        yaml-5b46198b.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\assets\yaml-5b46198b.js
        • Size 3KB
        • SHA256 1475a5091c47944ac3b70655b6fc9a186705d87376251df02726a8e9a18214ef
        • MD5 SHA1 SHA512 TLSH

        index.html

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\client\index.html
        • Size 624B
        • SHA256 f9578203245a082009e2bdc550567776b9069521a81ff54642aeabcc81ee4526
        • MD5 SHA1 SHA512 TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\bin\language-server\dist\server\index.js
        • Size 1.4MB
        • SHA256 28fb9f4e2ce0d83044b1516784f5d60d6448a7be8972e034e31a1b8d986df161
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dotnet-codex-ui.deps.json

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\dotnet-codex-ui.deps.json
        • Size 8KB
        • SHA256 7f989d3a9444d656eebe6b852aa05270c955807f0900ce573978b9c7eb186496
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dotnet-codex-ui.dll

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\dotnet-codex-ui.dll
        • Size 6.1MB
        • SHA256 6e1e7643fd0fb8ea02170164d9c7db1293c1bacc8d4a8041c9f5776e7c88ccad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dotnet-codex-ui.exe

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\dotnet-codex-ui.exe
        • Size 169KB
        • SHA256 2f40a14717871bb7279be4a12951385d2556f1cb7ea8cdfbc4dd44f1a5dbe568
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dotnet-codex-ui.runtimeconfig.json

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\dotnet-codex-ui.runtimeconfig.json
        • Size 519B
        • SHA256 96bc2946dff8790400d652ec7f8de7bb043e954980d59470c112788b68a1fbd3
        • MD5 SHA1 SHA512 TLSH

        libwebp.COPYING.txt

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\libwebp.COPYING.txt
        • Size 1KB
        • SHA256 5aec868f669e384a22372a4e8a1a6cd7d44c64cd451f960ca69cc170d1e13acf
        • MD5 SHA1 SHA512 TLSH

        libwebpdecoder.dll

        • Path C:\Users\Admin\AppData\Local\Codex\staging\files\libwebpdecoder.dll
        • Size 159KB
        • SHA256 edd45b643107f624bb9ded6ed0c21745eb258853f97a612eaeef939ddeb2e578
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cefsharp.common.netcore.140.1.140.nupkg

        • Path C:\Users\Admin\AppData\Local\Codex\staging\nuget\cefsharp.common.netcore.140.1.140.nupkg
        • Size 34.3MB
        • SHA256 80163f86f4dbaebb5fa7fa2e3cd372803ece2a72de5ffab403369eec0b5d8e5b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cefsharp.wpf.netcore.140.1.140.nupkg

        • Path C:\Users\Admin\AppData\Local\Codex\staging\nuget\cefsharp.wpf.netcore.140.1.140.nupkg
        • Size 256KB
        • SHA256 17a5e242f5bee274f872c027db40e3eb3f06a0194a8afc992445acdfb6cc8faa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chromiumembeddedframework.runtime.140.1.14.nupkg

        • Path C:\Users\Admin\AppData\Local\Codex\staging\nuget\chromiumembeddedframework.runtime.140.1.14.nupkg
        • Size 35.7MB
        • SHA256 fe6e0749a45128b1164f846a238808118a8967f8f6ae02d05be6ff1d65e8b14a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d2phap.filewatcherex.3.0.0.nupkg

        • Path C:\Users\Admin\AppData\Local\Codex\staging\nuget\d2phap.filewatcherex.3.0.0.nupkg
        • Size 40KB
        • SHA256 772fe371de91e13fe50d577469f1dce66155836dd49dd8378aa026bd55a496d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        newtonsoft.json.13.0.4.nupkg

        • Path C:\Users\Admin\AppData\Local\Codex\staging\nuget\newtonsoft.json.13.0.4.nupkg
        • Size 2.4MB
        • SHA256 f09081d457405baf35a973fa0c50d6bf272ed683f2568c5a620a49da952f6529
        • MD5 SHA1 SHA512 SSDEEP TLSH

        serilog.4.4.0.nupkg

        • Path C:\Users\Admin\AppData\Local\Codex\staging\nuget\serilog.4.4.0.nupkg
        • Size 751KB
        • SHA256 b4fe17d3a4e170354be975ed60885d272c67e2e2fd8cb2f4b370d13ba1cd424f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        serilog.sinks.async.2.1.0.nupkg

        • Path C:\Users\Admin\AppData\Local\Codex\staging\nuget\serilog.sinks.async.2.1.0.nupkg
        • Size 77KB
        • SHA256 2c3a0ba57925783d8c54f2b6281b0b1917f9caaaf07240620276036ee21b6943
        • MD5 SHA1 SHA512 SSDEEP TLSH

        serilog.sinks.file.7.0.0.nupkg

        • Path C:\Users\Admin\AppData\Local\Codex\staging\nuget\serilog.sinks.file.7.0.0.nupkg
        • Size 162KB
        • SHA256 2f165852850f9028c82156ab2629675e7a9088cac5349b68462966cd336d523a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        D3DCompiler_47_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\Codex Bootstrapper\oS9dgImg4il1\D3DCompiler_47_cor3.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        wpfgfx_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\Codex Bootstrapper\oS9dgImg4il1\wpfgfx_cor3.dll
        • Size 1.9MB
        • SHA256 501a1cd67d51bb1663870b12af0f8c0ba29b3d37b8b509be896d2aaf32db214a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        PresentationNative_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\dotnet-codex-bootstrapper\oS9dgImg4il1\PresentationNative_cor3.dll
        • Size 1.2MB
        • SHA256 42e2e543c17e1b37499baf00d956433b8afb655348ec0fae89c926fb7d149b6e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vcruntime140_cor3.dll

        • Path C:\Users\Admin\AppData\Local\Temp\.net\dotnet-codex-bootstrapper\oS9dgImg4il1\vcruntime140_cor3.dll
        • Size 121KB
        • SHA256 d5e4d9a3e835fa679450145d6a7d94e36573a509317111904d9b3712c30d9066
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft_Windows_Desktop_Runtime_10.0.13_(x64)_20261026143531_000_DotNetHost.log

        • Path C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_10.0.13_(x64)_20261026143531_000_DotNetHost.log
        • Size 4KB
        • SHA256 6afe24b9c5506452255d92c3b560d0b1dcae38a25a4c54c0e0b30b1742672868
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft_Windows_Desktop_Runtime_10.0.13_(x64)_20261026143531_000_DotNetHost_rollback.log

        • Path C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_10.0.13_(x64)_20261026143531_000_DotNetHost_rollback.log
        • Size 1KB
        • SHA256 85fd8a2c54c8e74a5655b22467b7ff1d2a9a6a9c38ccab050fe8796c3c219262
        • MD5 SHA1 SHA512 TLSH

        Microsoft_Windows_Desktop_Runtime_10.0.13_(x64)_20261026143531_001_DotNetHostFxr.log

        • Path C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_10.0.13_(x64)_20261026143531_001_DotNetHostFxr.log
        • Size 27KB
        • SHA256 980967cda4dab9c8694a74197dda291bca02405d9a4eb0951e497bfa588a2de6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        Microsoft_Windows_Desktop_Runtime_10.0.13_(x64)_20261026143531_001_DotNetHostFxr_rollback.log

        • Path C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_10.0.13_(x64)_20261026143531_001_DotNetHostFxr_rollback.log
        • Size 3KB
        • SHA256 263f096acdd9643fea90ed4fce6fcb0bc085c4a3ca6793851121ad4ddf474be6
        • MD5 SHA1 SHA512 TLSH

        Microsoft_Windows_Desktop_Runtime_10.0.13_(x64)_20261026143531_002_DotNetRuntime.log

        • Path C:\Users\Admin\AppData\Local\Temp\Microsoft_Windows_Desktop_Runtime_10.0.13_(x64)_20261026143531_002_DotNetRuntime.log
        • Size 2KB
        • SHA256 058e727fb45ca84ff687c8988f92bf6b564bdfcb10ee04bd13400b52a435801f
        • MD5 SHA1 SHA512 TLSH

        DotNetHost

        • Path C:\Users\Admin\AppData\Local\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\DotNetHost
        • Size 848KB
        • SHA256 35fc82403cad4434570098cd328e7c08cdaf5900eb28abccce14ca505007ee74
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DotNetHostFxr

        • Path C:\Users\Admin\AppData\Local\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\DotNetHostFxr
        • Size 920KB
        • SHA256 9859abee395772c1701282e498f8eb712f68bef719ab8d0e7c5c5209b15079c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WindowsDesktopRuntime

        • Path C:\Users\Admin\AppData\Local\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\WindowsDesktopRuntime
        • Size 28.7MB
        • SHA256 e482536962aa0524cac35f3f85e05a88d8ce00b3d98772a9e03983536d7fc195
        • MD5 SHA1 SHA512 SSDEEP TLSH

        MSI251D.tmp

        • Path C:\Windows\Installer\MSI251D.tmp
        • Size 411KB
        • SHA256 ac54078e0387d2a8ddcdbee3967da6ea6ec6508172505aca3d27a75fa43ce34f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BootstrapperApplicationData.xml

        • Path C:\Windows\TEMP\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\BootstrapperApplicationData.xml
        • Size 9KB
        • SHA256 d844332a2d80742561596a6f60b97359b11835425122e7d14aeab06fc85c349a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        DotNetLogo_256x.png

        • Path C:\Windows\TEMP\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\DotNetLogo_256x.png
        • Size 2KB
        • SHA256 0f571f95d8eab48dbc81b0ec5e9f7225e349e26ef50868bfaab556f3c2443b01
        • MD5 SHA1 SHA512 TLSH

        dotnet.ico

        • Path C:\Windows\TEMP\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\dotnet.ico
        • Size 44KB
        • SHA256 61a2cbd12868cb9b359e0c78961d409b7875f072eb8e53ea88d3e6bfe2961a18
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thm.wxl

        • Path C:\Windows\TEMP\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\thm.wxl
        • Size 7KB
        • SHA256 b00edd703dd8a475119d0e4dd70a3aaa47f0e95361af290e76d367a8edef3432
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thm.xml

        • Path C:\Windows\TEMP\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\thm.xml
        • Size 11KB
        • SHA256 dfee8e2d075087227f19c835c145c5bb8e72a46880ea24080bb2472fd3a521be
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thm.wxl

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\1028\thm.wxl
        • Size 7KB
        • SHA256 43e1e134d0591532323dfcd138ac8f5e99096cb6cb0213a486bbb3ecc5c47aad
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thm.wxl

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\1029\thm.wxl
        • Size 7KB
        • SHA256 2f174b5eed2a84e43396f3cae2e6521c9247bb0deccb16e7f9b461233c363534
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thm.wxl

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\1031\thm.wxl
        • Size 7KB
        • SHA256 2589887424dd4b0b27d36f7aa36d07fb6fa8d1c4dbe50059248a24823c742f92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thm.wxl

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\1036\thm.wxl
        • Size 8KB
        • SHA256 ecdd5f7b7ed65bef8e3eec00537da44939b8e8f8f604e9b39329b45ec210efde
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thm.wxl

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\1040\thm.wxl
        • Size 7KB
        • SHA256 c536f3f85936f6b38782df30a7bf88c7e7e66fa1e3257b20b75f9a4f0112b184
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thm.wxl

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\1041\thm.wxl
        • Size 8KB
        • SHA256 000e1508d9bacb7156951988ba1d6dc36165facd2163352a93b9a66e8c642089
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thm.wxl

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\1042\thm.wxl
        • Size 7KB
        • SHA256 09c51c910f7142ab7f73db8e826f3daff1525eea765d03bcd934cba53bc689d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thm.wxl

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\1045\thm.wxl
        • Size 7KB
        • SHA256 209911674536ad5976dad21ae1e96a9fdfa61270120a94bbe0e8ae32a67239a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thm.wxl

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\1046\thm.wxl
        • Size 7KB
        • SHA256 7b095c32d1fbdd924d710d18d51a88a710bc152c8b30c6051524583bfabe38c0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thm.wxl

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\1049\thm.wxl
        • Size 9KB
        • SHA256 3c911848f83d269fa2cd64bbfd7b5e88eb3a621bdd42c564c69100a8e8a40494
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thm.wxl

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\1055\thm.wxl
        • Size 7KB
        • SHA256 56d76adc63b71879e3291f0f306e54081e9e80f463fcb41dc6896ecd2298deae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thm.wxl

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\2052\thm.wxl
        • Size 7KB
        • SHA256 340154c87016bd6af740e6a91ea86d722817f6dc2bc675c33133901443658179
        • MD5 SHA1 SHA512 SSDEEP TLSH

        thm.wxl

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\3082\thm.wxl
        • Size 7KB
        • SHA256 2416f9a3daa6767f418c5ab94edb8a83dc9326fcaf13de1186e61b5248349edc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        BootstrapperExtensionData.xml

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\BootstrapperExtensionData.xml
        • Size 276B
        • SHA256 258fac237622533e7f9ec3f95bcec8abcc31ae87e2017e5717af0841c61e9df4
        • MD5 SHA1 SHA512 TLSH

        license.rtf

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\license.rtf
        • Size 215B
        • SHA256 75cf03762aea3f3ef6ae0dc0290c4426052549a0b4335bcc3ba9ca30391e0751
        • MD5 SHA1 SHA512 TLSH

        logo.png

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\logo.png
        • Size 852B
        • SHA256 cd2e8ed1fbb308d9d166f49794d323a9b22efba1033cdf906d1f4b030319e01b
        • MD5 SHA1 SHA512 TLSH

        wixstdba.exe

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.ba\wixstdba.exe
        • Size 431KB
        • SHA256 e9aad13949cd910523bf9547fc5c23bd2c26595e024809a9f8fa866c8d8e555b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        windowsdesktop-runtime-10.0.13-win-x64.exe

        • Path C:\Windows\Temp\{86E1AD82-DC2A-4656-AAEC-FBB5AEA4500D}\.be\windowsdesktop-runtime-10.0.13-win-x64.exe
        • Size 968KB
        • SHA256 4bdf11603894a1bb59fa182af466602b1172bd5903f1065bde97e466d3d3f4a6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/3268-6-0x0000024F17810000-0x0000024F1C6D0000-memory.dmp