71131cc161bf19febc61f1174208529e9fc9de2a6fd2b60bcc78638657bd5692

Analysis

max time kernel
149s
max time network
138s
platform
windows10-2004_x64
resource
win10v2004-20260911-en
resource tags

arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
27/10/2026, 18:43

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
a.ps1
Size 53KB
Sample261027-xc1lksty2n
SHA256 71131cc161bf19febc61f1174208529e9fc9de2a6fd2b60bcc78638657bd5692
MD5 f1382610aa28c3d496a99481719b1120
SHA1 33d290dd7ca4b7839e35e9d0aaff8f03107d6ce0
SHA512 7b7fc194d70ff79e3f91b199373e05c3fdba9079ebbe58b25e26eb9d6bddbfcbc1567d54f2f7ea90308d6766a91122825a82227253930ae235b707e38cf66bb7
SSDEEP 1536:8noTQ8eluK5RjjjQHCH8LQFgDaLROlhx5DKpiS:8t8pK5h4Ql4aLRO/vWiS
TLSH
T17C33F249AF8A0F59D244749C79A33B1C2D80B794D228CD99BFF740AE696C7C61937109
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

discovery execution persistence privilege_escalation

Malware Config

Signatures

Badlisted process makes network request 1 IoCs

Network request originating from process or tool commonly abused by malware.

flow	pid	Process
7	5056	powershell.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 13 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
5056	powershell.exe
3052	powershell.exe
2672	powershell.exe
5076	powershell.exe
416	powershell.exe
3480	powershell.exe
2872	powershell.exe
4108	powershell.exe
1004	powershell.exe
2944	powershell.exe
4608	powershell.exe
5076	powershell.exe
4608	powershell.exe

Creates a file in the Startup directory 1 TTPs 1 IoCs

A file was written to a Windows startup folder. Files in these directories are executed automatically when a user logs on or an application initializes.

persistence privilege_escalation

Registry Run Keys / Startup Folder

T1547.001

description	ioc	Process
File created	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\MicrosoftEdgeUpdate.cmd	node.exe

Executes dropped EXE 1 IoCs

pid	Process
564	node.exe

Queries registry keys for unique system GUIDs 1 TTPs 2 IoCs

Queries the MachineGuid or HwProfileGuid value from the command line, commonly used to create a unique victim ID.

discovery

System Information Discovery

T1082

pid	Process
2480	reg.exe
4564	reg.exe

Executes a command shell one-liner 1 TTPs 16 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
1904	cmd.exe
4828	cmd.exe
3120	cmd.exe
5032	cmd.exe
4944	cmd.exe
4240	cmd.exe
4612	cmd.exe
4972	cmd.exe
4260	cmd.exe
3868	cmd.exe
1448	cmd.exe
3628	cmd.exe
2696	cmd.exe
4676	cmd.exe
804	cmd.exe
2572	cmd.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	node.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	node.exe

Checks processor information in registry 2 TTPs 24 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	node.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\~MHz	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\~MHz	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\ProcessorNameString	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\~MHz	node.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5	node.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString	node.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\ProcessorNameString	node.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3	node.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\~MHz	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\~MHz	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\ProcessorNameString	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\ProcessorNameString	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\ProcessorNameString	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\~MHz	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\ProcessorNameString	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	node.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz	node.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7	node.exe

Runs net.exe

Scheduled Task/Job: Scheduled Task 1 TTPs 1 IoCs

Schtasks is often used by malware for persistence or to perform post-infection execution.

persistence execution

Scheduled Task

T1053.005

pid	Process
5108	schtasks.exe

Suspicious behavior: EnumeratesProcesses 23 IoCs

pid	Process
5056	powershell.exe
5056	powershell.exe
2944	powershell.exe
2944	powershell.exe
3052	powershell.exe
3052	powershell.exe
3052	powershell.exe
2672	powershell.exe
2672	powershell.exe
5076	powershell.exe
5076	powershell.exe
416	powershell.exe
416	powershell.exe
3480	powershell.exe
3480	powershell.exe
2872	powershell.exe
2872	powershell.exe
4608	powershell.exe
4608	powershell.exe
4108	powershell.exe
4108	powershell.exe
1004	powershell.exe
1004	powershell.exe

Suspicious use of AdjustPrivilegeToken 53 IoCs

description	pid	Process
Token: SeDebugPrivilege	5056	powershell.exe
Token: SeDebugPrivilege	2944	powershell.exe
Token: SeDebugPrivilege	3052	powershell.exe
Token: SeDebugPrivilege	2672	powershell.exe
Token: SeDebugPrivilege	5076	powershell.exe
Token: SeIncreaseQuotaPrivilege	5076	powershell.exe
Token: SeSecurityPrivilege	5076	powershell.exe
Token: SeTakeOwnershipPrivilege	5076	powershell.exe
Token: SeLoadDriverPrivilege	5076	powershell.exe
Token: SeSystemProfilePrivilege	5076	powershell.exe
Token: SeSystemtimePrivilege	5076	powershell.exe
Token: SeProfSingleProcessPrivilege	5076	powershell.exe
Token: SeIncBasePriorityPrivilege	5076	powershell.exe
Token: SeCreatePagefilePrivilege	5076	powershell.exe
Token: SeBackupPrivilege	5076	powershell.exe
Token: SeRestorePrivilege	5076	powershell.exe
Token: SeShutdownPrivilege	5076	powershell.exe
Token: SeDebugPrivilege	5076	powershell.exe
Token: SeSystemEnvironmentPrivilege	5076	powershell.exe
Token: SeRemoteShutdownPrivilege	5076	powershell.exe
Token: SeUndockPrivilege	5076	powershell.exe
Token: SeManageVolumePrivilege	5076	powershell.exe
Token: 33	5076	powershell.exe
Token: 34	5076	powershell.exe
Token: 35	5076	powershell.exe
Token: 36	5076	powershell.exe
Token: SeDebugPrivilege	416	powershell.exe
Token: SeDebugPrivilege	3480	powershell.exe
Token: SeDebugPrivilege	2872	powershell.exe
Token: SeDebugPrivilege	4608	powershell.exe
Token: SeIncreaseQuotaPrivilege	4608	powershell.exe
Token: SeSecurityPrivilege	4608	powershell.exe
Token: SeTakeOwnershipPrivilege	4608	powershell.exe
Token: SeLoadDriverPrivilege	4608	powershell.exe
Token: SeSystemProfilePrivilege	4608	powershell.exe
Token: SeSystemtimePrivilege	4608	powershell.exe
Token: SeProfSingleProcessPrivilege	4608	powershell.exe
Token: SeIncBasePriorityPrivilege	4608	powershell.exe
Token: SeCreatePagefilePrivilege	4608	powershell.exe
Token: SeBackupPrivilege	4608	powershell.exe
Token: SeRestorePrivilege	4608	powershell.exe
Token: SeShutdownPrivilege	4608	powershell.exe
Token: SeDebugPrivilege	4608	powershell.exe
Token: SeSystemEnvironmentPrivilege	4608	powershell.exe
Token: SeRemoteShutdownPrivilege	4608	powershell.exe
Token: SeUndockPrivilege	4608	powershell.exe
Token: SeManageVolumePrivilege	4608	powershell.exe
Token: 33	4608	powershell.exe
Token: 34	4608	powershell.exe
Token: 35	4608	powershell.exe
Token: 36	4608	powershell.exe
Token: SeDebugPrivilege	4108	powershell.exe
Token: SeDebugPrivilege	1004	powershell.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
1408	conhost.exe

Suspicious use of WriteProcessMemory 37 IoCs

description	pid	Process	procid_target
PID 5056 wrote to memory of 564	5056	powershell.exe	91
PID 564 wrote to memory of 5108	564	node.exe	93
PID 564 wrote to memory of 4972	564	node.exe	94
PID 4972 wrote to memory of 2944	4972	cmd.exe	96
PID 1408 wrote to memory of 3792	1408	conhost.exe	101
PID 564 wrote to memory of 4240	564	node.exe	102
PID 4240 wrote to memory of 3052	4240	cmd.exe	104
PID 564 wrote to memory of 2572	564	node.exe	105
PID 2572 wrote to memory of 2672	2572	cmd.exe	107
PID 564 wrote to memory of 3628	564	node.exe	108
PID 3628 wrote to memory of 5076	3628	cmd.exe	110
PID 564 wrote to memory of 1904	564	node.exe	111
PID 1904 wrote to memory of 416	1904	cmd.exe	113
PID 564 wrote to memory of 4828	564	node.exe	114
PID 4828 wrote to memory of 3480	4828	cmd.exe	116
PID 564 wrote to memory of 2696	564	node.exe	117
PID 2696 wrote to memory of 3836	2696	cmd.exe	119
PID 3836 wrote to memory of 2956	3836	net.exe	120
PID 564 wrote to memory of 3120	564	node.exe	121
PID 3120 wrote to memory of 3844	3120	cmd.exe	123
PID 564 wrote to memory of 4260	564	node.exe	124
PID 4260 wrote to memory of 2480	4260	cmd.exe	126
PID 564 wrote to memory of 3868	564	node.exe	127
PID 3868 wrote to memory of 2872	3868	cmd.exe	129
PID 564 wrote to memory of 5032	564	node.exe	130
PID 5032 wrote to memory of 4608	5032	cmd.exe	132
PID 564 wrote to memory of 1448	564	node.exe	133
PID 1448 wrote to memory of 4108	1448	cmd.exe	135
PID 564 wrote to memory of 4944	564	node.exe	136
PID 4944 wrote to memory of 1004	4944	cmd.exe	138
PID 564 wrote to memory of 4676	564	node.exe	139
PID 4676 wrote to memory of 4288	4676	cmd.exe	141
PID 4288 wrote to memory of 3400	4288	net.exe	142
PID 564 wrote to memory of 4612	564	node.exe	143
PID 4612 wrote to memory of 1168	4612	cmd.exe	145
PID 564 wrote to memory of 804	564	node.exe	146
PID 804 wrote to memory of 4564	804	cmd.exe	148

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
powershell.exe -ExecutionPolicy bypass -File C:\Users\Admin\AppData\Local\Temp\a.ps1
1⤵
- Badlisted process makes network request
- Command and Scripting Interpreter: PowerShell
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:5056
- C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node.exe
  "C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node.exe" "C:\Users\Admin\AppData\Local\Microsoft\Services\2579\790714a4141bdc66.js"
  2⤵
  - Creates a file in the Startup directory
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  - Checks processor information in registry
  - Suspicious use of WriteProcessMemory
  PID:564
- - C:\Windows\System32\schtasks.exe
    C:\Windows\System32\schtasks.exe /Create /TN MicrosoftEdgeUpdateTask69d8 /TR "\"C:\Windows\System32\conhost.exe\" --headless \"C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node.exe\" \"C:\Users\Admin\AppData\Local\Microsoft\Services\2579\790714a4141bdc66.js\"" /SC ONLOGON /RL LIMITED /F
    3⤵
    - Scheduled Task/Job: Scheduled Task
    PID:5108
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "[System.Globalization.CultureInfo]::InstalledUICulture.Name""
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:4972
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "[System.Globalization.CultureInfo]::InstalledUICulture.Name"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:2944
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "[System.Globalization.CultureInfo]::InstalledUICulture.Name""
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:4240
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "[System.Globalization.CultureInfo]::InstalledUICulture.Name"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:3052
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "(Get-WmiObject Win32_VideoController).Name -join ', '""
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:2572
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "(Get-WmiObject Win32_VideoController).Name -join ', '"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:2672
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "try { (Get-CimInstance -Namespace root/SecurityCenter2 -ClassName AntivirusProduct -EA Stop).displayName -join ', ' } catch { 'none' }""
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:3628
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "try { (Get-CimInstance -Namespace root/SecurityCenter2 -ClassName AntivirusProduct -EA Stop).displayName -join ', ' } catch { 'none' }"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:5076
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "(Get-WmiObject Win32_ComputerSystem).Domain""
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:1904
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "(Get-WmiObject Win32_ComputerSystem).Domain"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:416
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "(Get-WmiObject Win32_ComputerSystem).PartOfDomain""
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:4828
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "(Get-WmiObject Win32_ComputerSystem).PartOfDomain"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:3480
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "net session"
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:2696
  - - C:\Windows\system32\net.exe
      net session
      4⤵
      Suspicious use of WriteProcessMemory
      PID:3836
    - - C:\Windows\system32\net1.exe
        
        C:\Windows\system32\net1 session
        5⤵
        
        PID:2956
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v ProductName"
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:3120
  - - C:\Windows\system32\reg.exe
      reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v ProductName
      4⤵
      PID:3844
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "reg query "HKLM\SOFTWARE\Microsoft\Cryptography" /v MachineGuid"
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:4260
  - - C:\Windows\system32\reg.exe
      reg query "HKLM\SOFTWARE\Microsoft\Cryptography" /v MachineGuid
      4⤵
      Queries registry keys for unique system GUIDs
      PID:2480
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "(Get-WmiObject Win32_VideoController).Name -join ', '""
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:3868
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "(Get-WmiObject Win32_VideoController).Name -join ', '"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:2872
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "try { (Get-CimInstance -Namespace root/SecurityCenter2 -ClassName AntivirusProduct -EA Stop).displayName -join ', ' } catch { 'none' }""
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:5032
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "try { (Get-CimInstance -Namespace root/SecurityCenter2 -ClassName AntivirusProduct -EA Stop).displayName -join ', ' } catch { 'none' }"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:4608
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "(Get-WmiObject Win32_ComputerSystem).Domain""
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:1448
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "(Get-WmiObject Win32_ComputerSystem).Domain"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:4108
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "(Get-WmiObject Win32_ComputerSystem).PartOfDomain""
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:4944
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -NonInteractive -WindowStyle Hidden -Command "(Get-WmiObject Win32_ComputerSystem).PartOfDomain"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:1004
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "net session"
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:4676
  - - C:\Windows\system32\net.exe
      net session
      4⤵
      Suspicious use of WriteProcessMemory
      PID:4288
    - - C:\Windows\system32\net1.exe
        
        C:\Windows\system32\net1 session
        5⤵
        
        PID:3400
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v ProductName"
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:4612
  - - C:\Windows\system32\reg.exe
      reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v ProductName
      4⤵
      PID:1168
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "reg query "HKLM\SOFTWARE\Microsoft\Cryptography" /v MachineGuid"
    3⤵
    - Executes a command shell one-liner
    - Suspicious use of WriteProcessMemory
    PID:804
  - - C:\Windows\system32\reg.exe
      reg query "HKLM\SOFTWARE\Microsoft\Cryptography" /v MachineGuid
      4⤵
      Queries registry keys for unique system GUIDs
      PID:4564

C:\Windows\System32\conhost.exe
"C:\Windows\System32\conhost.exe"
1⤵
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1408
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe
  2⤵
  PID:3792

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

powershell.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log
Size 3KB
SHA256 0da1f19c9de673ef00b2acc9265ca816755a40b3ed10709f16ec473fac57cb64
MD5 39551a0ec18d648d06690eab475de7aa
SHA1 d6174a0edabe9a0a76f2a6e4ef55d9e5a28f5183
SHA512 f2633515d9bbcaaf31e00f1dee48e3046d3ccf1ef109da4e1ac58d3e8e824442d54a72be77409a55aa385874caffedf86c591e8031daff844fd618cd21803c76
TLSH
T10471EF313275B0D489567F071E6819C453BF4346FAA4AF5CB29C621EDD2640BCB221F3
MD5 SHA1 SHA512 TLSH

Submit Download

790714a4141bdc66.js

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\790714a4141bdc66.js
Size 11KB
SHA256 730e53bea5d3b22ad171b644c1c4c072469555114ced184dceb0f9e7ee1837c0
MD5 8c709f92431aafb6c8f001a0906be7cd
SHA1 164152da0c329b4fa4483fc1baead9d52cfe9993
SHA512 8a8d217dcae36c5b0623c429ff775efa1972089d10a717ffbd0c437fcc1eea7b6d130da7f3162186d13d993af715869452edc3cdbb85d8f44b5f5c22c39dce69
SSDEEP 192:/G9Pn21nltAUAaU18H/xUtS+H128TmSW6G6KZY2fLPUR1Oa3L72yRx3nCm:uGW1ypUWHqkwR1Oa3Pz
TLSH
T10C42439A167B6225467361DD0BAB4009622FE4433384DDE87F9CC3056FC7668C6E3AEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fe1ab4

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\fe1ab4
Size 163B
SHA256 6e5a6131f8acb7cc12204afe8a3ef4a31a758d905195f6beaf141d43b9d12562
MD5 769f4ca28e557062b5d53b67c6530458
SHA1 6f84de31b7e340a46ee59e9be8736194790e233e
SHA512 ae3725cbcc74a9b56a475b33a7d6b210ea54ee662dd1a58b19b079044bf8a15dff281261b9dda2b5b1053abff84fc239992d6b6ad1c6b6690b299f5139ec3194
TLSH
T1DBC08C5CD8B2228820A840607E8046D4A63C64DA282B13F3359A9A923935F3782A60BD
MD5 SHA1 SHA512 TLSH

Submit Download

fe1ab4

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\fe1ab4
Size 216B
SHA256 b3c0c575dbf669a2529cb68a3ded9b4eb2796183d54b68ba5cf967dc30e4c347
MD5 7bd3e2ba0686d21a486e139873896bdf
SHA1 7e190e0d22c2ba5801e327acc0d8cbb6440e3a78
SHA512 c839f9b235af44a227b3d8aac677c5ed5b38f89f44881d1c65b4b062654eb30e027270f7b9579beab6546c19da37821ae41b0d3eb7a7c8edf48e938bc02ee139
TLSH
T1B9D023529ECD034DB0103B25870A4FC00F15308548083FB5208F2045A09D70147FD17B
MD5 SHA1 SHA512 TLSH

Submit Download

fe1ab4

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\fe1ab4
Size 552B
SHA256 6209e77fc2b3069bba7fe605e58e9cbeec6146e311427716b84c1f26f2e98441
MD5 04af73f548b166bddd5db3e5d23a0cdd
SHA1 ce64fbc1d44828e7acae4086823357f01a637e80
SHA512 70524f57a2c4df34145c37deab48e378bd0a6eaba738b91ec54a26b574f8e67b03a2729e820ec52e8e3d2506e9c0b7dbcec358cd295cee6bd131ba273e5df2c3
TLSH
T14CF0202A2DB2377CF400732E0A015FC0AB18A89B09C43FC0E49926C526953C2C9FA0FF
MD5 SHA1 SHA512 TLSH

Submit Download

corepack

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\corepack\shims\nodewin\corepack
Size 334B
SHA256 dcef0a787c4654ac5c085fafa3a1e12d60d6f42e0d259c38378b61ef64295fa2
MD5 1a27e3e2f449816f5ffcdd57703a3f78
SHA1 b529a4d96ca51d2bb96f7868970ed39c7259f3cf
SHA512 32c2bc00b1ac8755c571eee99a565e82a9e617bec608229992a66628b50f647848598064207c9c1631a68d709220f6b84601f5aeb8554a8c35edc70ef996119d
TLSH
T1B5E04FA451AA5F72491D7AF0AC599459449E43832051AE98EC1C3B41847439E72CB6AC
MD5 SHA1 SHA512 TLSH

Submit Download

corepack.cmd

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\corepack\shims\nodewin\corepack.cmd
Size 218B
SHA256 920630a1d1ec47aedea7345e3c868ecdc07e191373497bbf47fbbf5942fbad4f
MD5 c046e14548ebb384ef71c0efea0e857a
SHA1 504e3d339b444b1051fb0b033da0f2e661385c0d
SHA512 efac98aadbdea59064d5752884bc9697c9fd15ad44e820f9457f679ad4e68be2e11e965af03ad70fee1f34c93c64eaf1813c60f19145ec1b693787a45c602833
TLSH
T12FD0127005BE4F333A5A2DF9F48213B778CDABA104150DBC7D29439202CC2C687D12D5
MD5 SHA1 SHA512 TLSH

Submit Download

npm-global.5

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\man\man5\npm-global.5
Size 8KB
SHA256 a415f32a0d97e13491ad7a38720a90586a1ac92a52fd5b9c5bdae315c4076287
MD5 8b64f80d3713aed195debdbb3a8cb707
SHA1 be292de92c9c00851f78f1cdca51a68165bee8a3
SHA512 e6e52fce3c8366c13eb9f9dfa2e1f44c504d025e6408b51187a6b712de9531ca5c0a51219ccee0d025a1779a54b67bacdb482a9d39f3d3237c943e025ecff17a
SSDEEP 192:+z8SLUYj/v313IZqmhO29ntkO/Ej3C2/uluF53N:+zLLLDpIZqSHEMc3N
TLSH
T1D902B66B223603363DB01F92F4CB5C557B6FE1F953B9C1E0A8AD8098252729A41B71D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package-json.5

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\man\man5\package-json.5
Size 34KB
SHA256 45322fd009fd2d5ddc852f9da04d2b199d2dc99ddefa54d0b39da959a98be3a8
MD5 cef93e52ebd3e4dc54a6e526e7a46dd9
SHA1 d440bf6131bec0ec1239ad887e097cecd387ce38
SHA512 2901a6c44d0e3dfe0e3b1c5ea391814e084623ddf547ef3515f566a51d52fba84cecd212a1f2b38370bcb8cc11e6d519992a95868411ae76fb968fe541dd8777
SSDEEP 768:TxvrnpuhTLYhNxIlabLWUBE+1htjaiIrwhWO:TdDQstIlabCJ+vZaiMq
TLSH
T1B6F2CA17D706833B2AF20FD0BA0A5D82F71BA57D2375C4C1B4BE425C36631A74167EAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RGI_Emoji.js

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\emoji-regex\RGI_Emoji.js
Size 12KB
SHA256 de04908dc7f8e992e649e317d2b72108d0c20f622647e33170237b6d3afd2372
MD5 dc07d6e3b5be4a8fe3c570b22c3a4671
SHA1 6a6195959560f0cd732bcd7cd119b87132a9b670
SHA512 ad3c9eade92a6e1913dacf6f19866f58618030e3f862ed58cf2a225f770a8894ec8af3e9ed38e317316be638df2502ceef0b53c44539d12eb76cc4be22675903
SSDEEP 96:49tOjllm4Uh4zutkZyhRA4JUraRFsw7ZpqsFRatj9Fnkz+jmS0WVJK4m1io++Qd6:4bzTgMU4GgawCZleP
TLSH
T171428CB085217E6274A2001B5D541B1FF0ACA54BE962EF37979CF19EB345231CAD36F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RGI_Emoji.js

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\emoji-regex\es2015\RGI_Emoji.js
Size 13KB
SHA256 74839f673bb72c8ae55ce2c844a832e75c7b14b244c9181e446b6b00485b458e
MD5 bb5cc58d6a908fba4c33adc7437e858b
SHA1 a87a9b7bcbb25d5b8328aebf05979c2ea45bb02c
SHA512 fe69afde16b9269e48529046e7c546a98286a3c4a0bba463a30c63905ac3c6e71ba4ad426a554bb0f45bd7777f08d0a7434912dd40b9aab47eb4dc957b84d3e0
SSDEEP 192:4uyCa20qNgG/kFBEKT4BlvFuTMS8Z4wZQZotVNZl8b2vKO9XuLYRfTAkCwtU1kI9:4ng4LYVNn8b8K+eLWD7GxuM
TLSH
T1925292BC018846973D2DE0D4AF64EAD6299D4B4A240CD3365F8BFC3726CA4F4ED994E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

license

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\@isaacs\cliui\node_modules\string-width\license
Size 1KB
SHA256 fcf1a18be2e25ba82acf2c59821b030d8ee764e4e201db6ef3c51900d385515f
MD5 b862aeb7e1d01452e0f07403591e5a55
SHA1 b8765be74fea9525d978661759be8c11bab5e60e
SHA512 885369fe9b8cb0af1107ee92b52c6a353da7cf75bc86abb622e2b637c81e9c5ffe36b0ac74e11cfb66a7a126b606fe7a27e91f3f4338954c847ed2280af76a5f
TLSH
T1A821961E72551363186613E069A9ACC5B32BB11F7DAF5684286DF248633746CD4FB844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\@npmcli\fs\LICENSE.md
Size 818B
SHA256 733dcbf5b1c95dc765b76db969b998ce0cbb26f01be2e55e7bccd6c7af29cb04
MD5 2916d8b51a5cc0a350d64389bc07aef6
SHA1 c9d5ac416c1dd7945651bee712dbed4d158d09e1
SHA512 508c5d1842968c478e6b42b94e04e0b53a342dfaf52d55882fdcfe02c98186e9701983ab5e9726259fba8336282e20126c70d04fc57964027586a40e96c56b74
TLSH
T14301128A62E62A9055D19F956DA2B89E61CCF0673903681430B4E24CDA7704AC07E414
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\@npmcli\installed-package-contents\LICENSE
Size 754B
SHA256 45e433413760dc3ae8169be5ed9c2c77adc31ad4d1bc5a28939576df240f29a0
MD5 d2cf52aa43e18fdc87562d4c1303f46a
SHA1 58fb4a65fffb438630351e7cafd322579817e5e1
SHA512 54e33d7998b5e9ba76b2c852b4d0493ebb1b1ee3db777c97e6606655325ff66124a0c0857ca4d62de96350dbaee8d20604ec22b0edc17b472086da4babbbcb16
TLSH
T1DC01208FB2E52AD454D19BA53DA1EC8961C9F0773D43AA0430B4E34CCBB780F98AB404
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\@npmcli\promise-spawn\LICENSE
Size 748B
SHA256 c7ec219b06de947768be869516c7021648e4d1445a07759e1327922de636ff45
MD5 472ca09cb6b144cdf6fa55610fb363d3
SHA1 d73d283fedfb1eddd0b20694365536476caae4ac
SHA512 b715e202466b097c84e7f20adfed98fd6a053a72b06faef2aaf7dc799116407b1390d72188c7d8ed80077713143418ec629a2cdf3b7d8d11cb3e38d39ad4ab5d
TLSH
T15D0125CE72A61AD414A05F803CA1F489618DF076B443FA0030A5F14CD7B744ED87F040
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\@sigstore\protobuf-specs\LICENSE
Size 11KB
SHA256 7b0ce3425a26fdba501cb13508af096ade77e4036dd2bd8849031ddecf64f7c9
MD5 dfc1b916d4555a69859202f8bd8ad40c
SHA1 fc22b6ee39814d22e77fe6386c883a58ecac6465
SHA512 1fbe6bb1f60c8932e4dcb927fc8c8131b9c73afd824ecbabc2045e7af07b35a4155a0f8ad3103bf25f192b6d59282bfc927aead3cb7aaeb954e1b6dbd68369fa
SSDEEP 192:qf9qG4QSAVOSbwF1wOFXuFJyQtxmG3ep/7rlzKfHbxc+Xq0rhlkT8cHfH2:kOu9b01DY/rGBt+dc+aclkT8cH+
TLSH
T1B932722BBA4903771AF20162AB4764CEF31EA03F37591525315CC1682F7B96183FB69E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

provider.js

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\@sigstore\sign\dist\identity\provider.js
Size 79B
SHA256 ef1f170ad28f2d870a474d2f96ae353d770fff5f20e642cd8f9b6f1d7742df13
MD5 24563705cc4bb54fccd88e52bc96c711
SHA1 871fa42907b821246de04785a532297500372fc7
SHA512 2ce8d2cf580623358fef5f4f8925d0c9943a657c2503c80048ca789bf16eacdb980bfc8aaaa50101a738e939926fcf2545500484dcad782c700ee206d8c6f9b9
TLSH
T1C4A01201A934C5F1038000C44525E0C1A0C10432006528A55BA84D65440088C5050001
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\@tufjs\models\LICENSE
Size 1KB
SHA256 6ba2fb4cc004819b1d872168a7ba6ac4a5a07400366680750321058fe21dd36b
MD5 dfee32877d06166fae6096f9359e68aa
SHA1 28a83f15648b5088399a0dd3aac207d192bba5f0
SHA512 ed9b0514e9f8a2204d6900f5b5a6065272b91d70b076c91ec8e101a3288c83f19b139210da6de526e269fc85469708478dfec8664e9c3131408af3818ef128cc
TLSH
T1A711631E735903621C9257A055A9ECC5F12BB14A7E6B1985346DF209132A458C6FF8A4
MD5 SHA1 SHA512 TLSH

Submit Download

license

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\ansi-regex\license
Size 1KB
SHA256 67292c32894c8ac99db06ffa1cb8e9a5171ef988120723ebe673bf76712260ec
MD5 5ad87d95c13094fa67f25442ff521efd
SHA1 01f1438a98e1b796e05a74131e6bb9d66c9e8542
SHA512 7187720ccd335a10c9698f8493d6caa2d404e7b21731009de5f0da51ad5b9604645fbf4bc640aa94513b9eb372aa6a31df2467198989234bc2afbce87f76fbc3
TLSH
T18521961D72551363186613A069A9ACC5B32BB11F7DAF5684286DF248633746CD4FB844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\color-support\LICENSE
Size 780B
SHA256 3f24d692d165989cd9a00fe35ca15a2bc6859e3361fa42aa20babd435f2e4706
MD5 b020de8f88eacc104c21d6e6cacc636d
SHA1 20b35e641e3a5ea25f012e13d69fab37e3d68d6b
SHA512 4220617e29dd755ad592295bc074d6bc14d44a1feeed5101129669f3ecf0e34eaa4c7c96bbc83da7352631fa262baab45d4a370dad7dabec52b66f1720c28e38
TLSH
T1D501418FB2A12A8414D09B643DA1EC8971C9F03B3C43AA153074E258C7BB80F947A400
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\common-ancestor-path\LICENSE
Size 763B
SHA256 1fccd0ad2e7e0e31ddfadeaf0660d7318947b425324645aa85afd7227cab52d7
MD5 7428aa9f83c500c4a434f8848ee23851
SHA1 166b3e1c1b7d7cb7b070108876492529f546219f
SHA512 c7f01de85f0660560206784cdf159b2bdc5f1bc87131f5a8edf384eba47a113005491520b0a25d3cc425985b5def7b189e18ff76d7d562c434dc5d8c82e90cce
TLSH
T14701F18FB2A16A9454D19B653DA1ED8961CDF0373D43AA143075E258C77780FA46A404
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE-MIT.txt

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\cssesc\LICENSE-MIT.txt
Size 1KB
SHA256 f996f6e050e6fc18086162b4b44e301bba345c87deca83f57a27e6d54195556e
MD5 e0be9e751faf84fbb7c61c63af745e32
SHA1 48e53e2b46d48cc6ea16f03ab1ecb69a86f5db0b
SHA512 6686277ceafd63dc89b17315c43134098cd131d16c7d42fad82cee5b7c78e4aa1f7cb199db352b9e54adb3f09dc77b1dc6665a5667c4ab8b3639fa254e20ecce
TLSH
T1D211895FB261137B1C66139069A4AC85B36B715BBDFF2384345DF244231A468D9F7C04
MD5 SHA1 SHA512 TLSH

Submit Download

index.mjs

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\diff\lib\index.mjs
Size 45KB
SHA256 ef80d89e2bbaae30f978b4a092f262d273f01e27a972a64631616c0776c5e386
MD5 463e40677aa5889662fd2ff148041c8c
SHA1 931381af5da92c012c3e9b74b034469792970fce
SHA512 50ecc89ab287f81f341240a14da3b97fc0dafac68ee554d913f2c590f19a3f549734699a19c680cc6882d50b06af44ac6758f4d77664611e59e05cffaeacc8b3
SSDEEP 768:10MKJC/SlEfMCjrEkKRtDsBGBdYiIMROU6xJgI5PCvpbPPbSgPBoMVeDM4Ld:10ZqrEka4XJgIgtPPCd
TLSH
T19E2352A56846225296F37370AF2F5408F775817399058151FAAD96813FF0838A3EAFFC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

text.js

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\emoji-regex\es2015\text.js
Size 10KB
SHA256 ce054f085a529c312e6902f27b47b4e06f8d0db61df255d8b5319cf71844ccc2
MD5 c689037953ff36229874f5855b58e7be
SHA1 a7de6674a48ea021741fb388cba5b645bc4e547b
SHA512 d5d48c465244e8bba737de332ef5bd3a1722cd7982c3ac1c53f5b9f6476fb6d92f90e7086225298b2110f0fc4542f410e663de6b76145de8b0172c6a7de3e523
SSDEEP 192:4Cmtl1qCooeMLbJ7Ex9rtWhbY3X2HYnO/yVgmDwqbO70yHnDMotVD+:4C1riYGHqQyVghJ4MdVD+
TLSH
T1AC3292BC008846963D6DF0D4AF34E5D62A8D4B4A240CD3365F9BF83766CA4F4ED9A4E1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

text.js

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\emoji-regex\text.js
Size 10KB
SHA256 386ba84c070d0af1ab94dc202247b133b4954865004325b5b83f93616237aa5b
MD5 362c3598feb1a659eceda0956a80f2aa
SHA1 1abaac514bc696c6916d49346fbcc62dfdc1261b
SHA512 68420552ca37f9cb3571453f736fa2187c379b4bae4a42c0d21c139a54d11eb8980b48ca36924bc51eb9c03dfbb01719f4f78eebc9f8872fe22a3f74ebcd0060
SSDEEP 96:48ZyEVZKmkKDw4WrUtTk0BQj9zTFQldJQdi4+Ds7mCK2m0W1EojSVQdZ8w4kvP25:4m3OxUwwZh0w8/
TLSH
T1E522B07044217E5675B2001B6D845B1FF0AC998BE922EF37A7ACF19EB346131CAD26F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

glob.d.ts.map

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\glob\dist\esm\glob.d.ts.map
Size 3KB
SHA256 1de1f2236791645b26d81dba70f2125b6ab012ff2c8d9f8ce6bec1a8a8b00d19
MD5 8853d3115e68bdbfd9d586dc79d5df5f
SHA1 d4f2adb88631c602f55e9ab9145fe3136aa60720
SHA512 93e9a64a0ad78059a41cb339ec4e0dd74d695219f2f304578a464c07c56327cad8f4f88650ba0eb032c49610818cd28153c67468d3e3aa0d7e1b8732491d0ecf
TLSH
T16281CD614076E81F2A6F5A8724CF07676E0840556DC9AB00488D9226F1D2F3EFFF7D26
MD5 SHA1 SHA512 TLSH

Submit Download

has-magic.d.ts

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\glob\dist\esm\has-magic.d.ts
Size 773B
SHA256 52030a2056912c1b82c99f424edb29ce47b3a761089b326749f02d484ef81ce8
MD5 fda1f363c2b7534e0d2de2dfc3096084
SHA1 14e1205bfffa66aad64f46d627920a21bc646c85
SHA512 b5cec0217ae5b8620d8f3c7a2ff1abaa3973a67e2e7121e811ea6d999caadd1c10472642c71eb534ab1ad068ed4ad3680d0a91b9dfda0db6f524aa97e1bca55a
TLSH
T1E5012017A9E303314CF300DF614A8090CBFBA103BA0958F2AD54A2EA3D12924F673C46
MD5 SHA1 SHA512 TLSH

Submit Download

has-magic.d.ts.map

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\glob\dist\esm\has-magic.d.ts.map
Size 246B
SHA256 9e87ee2704ddd099ab4b6e6822d64df9b42c2d8b963a1ca0b9a6119814602a4f
MD5 2a0a9f911d67fcf8b51620a5d7179986
SHA1 cdb0c45c5ccb976e2fffb975235d91192af11a30
SHA512 edc89c77bf7c13a55b1a87b32f641f94641c1f19694f810159ea102bbdaca7bbc21445cdd9fed58241aee877d2407dc03e2aaf49ff512ed78861300a76980093
TLSH
T1FDD0A7568472B9221D15039A04A45F552FB86410ACCC6B0088C8D8152961F2FBFF3916
MD5 SHA1 SHA512 TLSH

Submit Download

ignore.d.ts

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\glob\dist\esm\ignore.d.ts
Size 689B
SHA256 aa1fbc4c3a701f474cb517ae4bdd247b18531f263fa6fe26f2bad265e0164679
MD5 235e78975b18e1be24d78e40b4c0f09b
SHA1 17482999b182fa136abe52b1c6fe9a022e58c09d
SHA512 7eff90a9fac6767dd53d6744704885cb5584a7a01ce3547fc1df238c82635608ab1e482120d2174503905f11b0d4e57d0789eac5c7555da0810417aa91f6cbbe
TLSH
T1CE01C05248762562166462DF4E69C029FD029127B79011B8F63C51A42B239D011076DA
MD5 SHA1 SHA512 TLSH

Submit Download

ignore.d.ts.map

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\glob\dist\esm\ignore.d.ts.map
Size 723B
SHA256 851067f0a6d522b68c0c3a3cc955bc48e8a93253b8210ecbbb09ffee007855b1
MD5 82fe72e288d5c370c3f351a561171095
SHA1 28d36ffa7a4c97ec72077ef10b52240021ca1984
SHA512 19de2b57f133e597c2b67a8beae3e2e6afc359baff1cd63231a7c6d56deb4f83eec55a1d4666d2fef0e5dbeb9e1652fdbaa09018fe6bbd73d5c7d04b99c67187
TLSH
T1420162628073E92E626B13CB74DE05636E588855BC889E544C9C9225B197F3EBCE6C22
MD5 SHA1 SHA512 TLSH

Submit Download

index.d.ts

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\glob\dist\esm\index.d.ts
Size 6KB
SHA256 8d38597bca0db3476881ef00747f5422b87bcdbf6e70ada346cea208169e1be0
MD5 00657a9c1d55ed48aee49572e8f65352
SHA1 51ba0e72252171f173dbea7a00c5973f0b4ceda9
SHA512 316cb3cdf652bfad2eafdacece6b8fd93e514b272419cd23627fd8fd679c49f8519c1e2feb8d95a554c347bc9eaa76978c8c855bfa249dc104672fc0472cb640
SSDEEP 96:2ByGMwuie9s35NQ1ZUKKrJKuKQJK6q0IvceNEJfcghewLNrrv6c8YJ5zUzv4tEXp:TGIdw1ucC08L8y+QlTLF
TLSH
T193D19A05691E9325CEF7312EC9C74104A9A1D2637A5436F2FDCC93AA796702CE0B79BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.d.ts.map

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\glob\dist\esm\index.d.ts.map
Size 3KB
SHA256 4361b137443839426bf25791effc92e0f2bf5b4f736de052961e5797e2b68a2f
MD5 7df650b59f752d552c8b4aa784c139df
SHA1 0013502dd069f2f129aa65719fc211da848ba462
SHA512 458d517946088ea3ede4434212320de236a2880e521305b2237484ae85a518bc3d871df8470ef47a918deb0e9a47e3b3e4acca3acdfc1583255c770ec6bdfff7
TLSH
T16181166055BBE80B727B938B18CB41A66F019555B9C8AF80095CD65BB193F2DFCF2D30
MD5 SHA1 SHA512 TLSH

Submit Download

pattern.d.ts.map

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\glob\dist\esm\pattern.d.ts.map
Size 1KB
SHA256 3c614bfbb95a4b629e00a9ec90b356e7688125489379013a1fdfe090370bb7fb
MD5 c8e20d74464e58d84434018366863784
SHA1 95972c215f926d10782028c7631259bc92d2a26b
SHA512 8ce99937129473428e8dca933bf07ef1c3422f654856b6c1ac681c2d19c32bed76878bef4e7d717a9f7836656c4aab36e349cc7cab85cf62f438e766e4e949c8
TLSH
T152211D218477C8196B2257C7148F04B65F0C842EBCC9AF048DDC9652B063F79FEF6522
MD5 SHA1 SHA512 TLSH

Submit Download

processor.d.ts

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\glob\dist\esm\processor.d.ts
Size 2KB
SHA256 347be9ba90b8f03651e1ba369ce4915b65fac75df6987b570f133f1d758099a4
MD5 0bbfb19539158643aae1620b77a488c2
SHA1 0a212abff8d41ddb424d20fade9c60ad76154532
SHA512 de41c2731332b0d4a487481a36c4385cb5b733c3f038a72c773a8ead3afc28014c69ccae51ada0628845e227fe317ea061d52dc5d736fdce5257518852f8abbb
TLSH
T13C41EF12E24C254466F6C35F13A74925CF58E02A9FD100F6F66CD3AD1F2387092528BF
MD5 SHA1 SHA512 TLSH

Submit Download

processor.d.ts.map

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\glob\dist\esm\processor.d.ts.map
Size 1KB
SHA256 02d7eae78fbf7982dacb1d96604804f1d1f205a5cd2e42618269403dad9ee410
MD5 913d72208ae0175f2b8e315049262ed0
SHA1 df557102aef30f61dfe75b0b0a627d979a62cddc
SHA512 d8eecd4a84b2ee1109651145c45de6e06e6556953996999230aa91cb1f4eb9fda052f28724d74eecdfbd57084dde9eddb2a4826c6d43ea6a03c3db43321fa259
TLSH
T10031E821907BDC1F2527A3C718CA04B26E46C459BC99AE484C8D9615B5A3F3DBCF5826
MD5 SHA1 SHA512 TLSH

Submit Download

walker.d.ts.map

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\glob\dist\esm\walker.d.ts.map
Size 4KB
SHA256 070b109859e433fd8280ac4c9a83c7b8414afd2e7440d7875c2c65fd242ccb3a
MD5 95292d93de9818645820855f04145616
SHA1 f128a44aa65d0d0da36c039f9e55d0e8b76abd1e
SHA512 3bb157712a45bca8809cd5bd5554abab18e83d85097a4a91bf8366a24a134844b65e55dfa346e25ec57bb8614806d154383abc811c6fe9c022519dda92c3f1ff
SSDEEP 96:fXgEBWTdKPZvzVznLcjn/cgc9NNCruTcER9cb4rmooEo9b30fq:fXgu+c9NcruAKXXy
TLSH
T12691919140B7DC5B7167538729CB44A27E459019BD89AF104CAD931AF1A3F3EFCF2861
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\init-package-json\LICENSE.md
Size 735B
SHA256 30ae8a003712dae3986756f28f24c0ea8c8f85b233a542f7e9181b2d2af7fe5e
MD5 413ffa0215ce6d5f570aaf9f9e7a64d3
SHA1 c21f139706d4a4845db84cb4a62c132cf7d8411a
SHA512 29011711d9002ab04dce017d05c14b1810bd3f9e86a1f03a5ee474697120cd9828adf3e474c24ec98984a6abfa1830935d1b23b88660451a82d203a486e5297e
TLSH
T17201D08A62A62A9055D59F852DA1F89D60CDB1677903691530A8E248CB7744ED47B014
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\is-cidr\LICENSE
Size 1KB
SHA256 73f22b23c0069037f86eae441acd720dfa7c1637e1f91112e9bc1c533352e222
MD5 a38f1117f12b14c67e0f2c163a0f86ac
SHA1 cac4c710c0e9b09bed3cfff8fc94b81f6f23319a
SHA512 d8fe0bd7bce568fa008386c17f0a866d61c8459baa2735ae1b86d1702c3572651e07f761945d81eec57a3e0cbdc5a5f45eb5d788d1e5e2383b1c3299e8708a8f
TLSH
T16221535B11444BE74AE206853AA5AA84F0DDC02E3E176D08287AF348A77B43ED87B454
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\jackspeak\dist\commonjs\package.json
Size 19B
SHA256 fa6944a20ca5e6fbaf98fd202eb8c7004d5b4ab786e36b9ed02ee31dbe196c9f
MD5 95b08bc3062cdc4b0334fa9be037e557
SHA1 a6e024bc66f013d9565542250aef50091391801d
SHA512 65c66458abe2101032cdd1b50ca6e643e0c368d09dfa6cc7006b33ed815e106bb20f9aff118181807e7df9f5d4d8d9796709b1ec9a7e04544231636fdf8fdf42
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\jackspeak\dist\esm\package.json
Size 17B
SHA256 6dc1b06d6b093e9cccb20bee06a93836eee0420ae26803ca2ce4065d82f070d1
MD5 6138da8f9bd4f861c6157689d96b6d64
SHA1 ee2833a41c28830d75b2f3327075286c915ed0dd
SHA512 0a3f1cb1522c6e7595186a9a54ed073ffa590b26c7d31b0877f19c925f847037e9f972066bfed62609b190eb2bc21ff7b31514e08c3de64780fef5982cbb21f2
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\just-diff-apply\LICENSE
Size 1KB
SHA256 c4f5a45599ea54331e65a21df7c3738f8c9b3e688e1913caf47facee9017a439
MD5 82ecfe973dec5e2ac8d4070615844a32
SHA1 a78e38293f042b154f71ade44ca1b5d5b95cd264
SHA512 80ceaf0c96be7753103ed699459cf4063a4c2ed28aab9bb9bbb88da23fdb198bd21a14b338b559d1bd678260a096abb9a768ff7895cebecf5b444a2d40ee5f60
TLSH
T1FC11B61E72560363188247A045A8ECC5F12BB04A7F6F1A84306DF3051326058C5FFC68
MD5 SHA1 SHA512 TLSH

Submit Download

rollup.config.js

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\just-diff-apply\rollup.config.js
Size 123B
SHA256 8bbbcc7950fc4f220264b765facff1aff6da4b8fe1714c04295a7c885dc31243
MD5 372f06d1beabae6af29b774ff6ec93e7
SHA1 1f62669048ec009022f1b2c42a7afa25833d3a16
SHA512 72c5bbb41b086ded1b6229c5e403708f87a20b08d2d29ecbe5ef6c62d7a0826083eccd99aade8dfaa58af64011b61e74a73d0665a85c4ee05f754b2a442d7ae3
TLSH
T1C2B092FB936C314B15C48083D3F32C81CEE4C250A40808A6580CA16AE18A688818C674
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\libnpmexec\LICENSE
Size 756B
SHA256 60aa4cf74af0ae39c694e32cab95606789180da3b79cb584e1b7f310242d6329
MD5 9854e089665bdb46b01e2ffd1a535343
SHA1 726ab697c06feca26ba6d7a01a56a74ac03736f5
SHA512 bf2c1c41c66c85b7c5706182d2f283fa9ffecf750e90da612bcc9cd8352e9976ef8d868c70e113f576ab3ffcaa20d07a76f7827dc8f30018f0d99c4f78e6ad3e
TLSH
T1E70125CF72E12AD454D19B653DA1ED8961C9F0773D47AA0430B4E34CC76784FD46A400
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\libnpmfund\LICENSE
Size 753B
SHA256 ae23f46306824f42c6ab243b232b571bb98d8dfa25c58bf02e1dac2520a4f44a
MD5 7d7d008babf781101b46923e92bf3678
SHA1 0ad31b134da3c6c458ba5468068b37e8b2331feb
SHA512 ad0d32ab7401f6e0567673607e30db126b47b0db3c1be1d7e246695a9a5a1002bfd4f44de53c4018bd0448595cf3649869ace1587e74073cf0c9cfdc80e8813f
TLSH
T13801208FB2E22AD454D19BA53DA1EC8961C9F0773D43AA0430B4E34CCBA780F98AA400
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\libnpmhook\LICENSE.md
Size 771B
SHA256 b49c8d25a8b57fa92b2902d09c4b8a809157ee32fc10d17b7dbb43c4a8038f79
MD5 e9dc66f98e5f7ff720bf603fff36ebc5
SHA1 f2b428eead844c4bf39ca0d0cf61f6b10aeeb93b
SHA512 8027d65e1556511c884cb80d3c1b846fc9d321f3f83002664ad3805c4dee8e6b0eaf1db81c459153977bdbde9e760b0184ba6572f68d78c37bff617646bcfc3b
TLSH
T15F01259A62E56DF46DD19F806DF1B98D70CCF076BC47A91530A8E258C7B704F88AE414
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\libnpmorg\LICENSE
Size 730B
SHA256 2ef361317adeda98117f14c5110182c28eae233af1f7050c83d4396961d14013
MD5 072ac9ab0c4667f8f876becedfe10ee0
SHA1 0227492dcdc7fb8de1d14f9d3421c333230cf8fe
SHA512 f38fd6506bd9795bb27d31f1ce38b08c9e6f1689c34fca90e9e1d5194fa064d1f34a9c51d15941506ebbbcd6d4193055e9664892521b7e39ebcd61c3b6f25013
TLSH
T1C001D08FA2D12AD454D59F643DA1BD4861C9F17B7D43AB043074E358DB7744F986A404
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\lru-cache\dist\cjs\package.json
Size 28B
SHA256 58b55392b5778941e1e96892a70edc12e2d7bb8541289b237fbddc9926ed51bd
MD5 56368b3e2b84dac2c9ed38b5c4329ec2
SHA1 f67c4acef5973c256c47998b20b5165ab7629ed4
SHA512 d662bff3885118e607079fcbeedb27368589bc0ee89f90b9281723fa08bda65e5a08d9640da188773193c0076ec0a5c92624673a6a961490be163e2553d6f482
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\lru-cache\dist\mjs\package.json
Size 26B
SHA256 1bf0e53fc74b05f1aade7451fbac72f1944b067d4229d96bae7a225519a250e4
MD5 2324363c71f28a5b7e946a38dc2d9293
SHA1 7eda542849fb3a4a7b4ba8a7745887adcade1673
SHA512 7437cf8f337d2562a4046246fbfcc5e9949f475a1435e94efbc4b6a55880050077d72692cbc3413e0ccd8f36adf9956a6cc633a2adc85fbff6c4aa2b8edac677
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\minipass-flush\node_modules\minipass\LICENSE
Size 802B
SHA256 04400db77d925de5b0264f6db5b44fe6f8b94f9419ad3473caaa8065c525c0be
MD5 d7c8fab641cd22d2cd30d2999cc77040
SHA1 d293601583b1454ad5415260e4378217d569538e
SHA512 278ff929904be0c19ee5fb836f205e3e5b3e7cec3d26dd42bbf1e7e0ca891bf9c42d2b28fce3741ae92e4a924baf7490c7c6c59284127081015a82e2653e0764
TLSH
T15F01128FB295269419D09B943DA1AC8961C9F0773D43AE153074E248C7AB40EA47A404
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\minipass-flush\node_modules\minipass\index.js
Size 16KB
SHA256 7a395802fbe01bb3dc8d09586e0864f255874bf897378e546444fbaec29f54c5
MD5 bc0c0eeede037aa152345ab1f9774e92
SHA1 56e0f71900f0ef8294e46757ec14c0c11ed31d4e
SHA512 5f31251825554bf9ed99eda282fa1973fcec4a078796a10757f4fb5592f2783c4ebdd00bdf0d7ed30f82f54a7668446a372039e9d4589db52a75060ca82186b3
SSDEEP 384:PjFrIA8zJ08TEcGpIuqbI0WXsJY+cHK+34x2WkFUasBq7BmDWC:PjFrIKf8JKjV0DJ
TLSH
T196722F552B9E61229373B77ADD47900FE722141B393F5014B8AC46D02FB99B48B38EF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\minipass-flush\node_modules\minipass\package.json
Size 1KB
SHA256 c3052bd85910be313e38ad355528d527b565e70ef15a784db3279649eee2ded5
MD5 d116a360376e31950428ed26eae9ffd4
SHA1 192b8e06fb4e1f97e5c5c7bf62a9bff7704c198b
SHA512 5221c7648f4299234a4637c47d3f1eb5e147014704913bc6fdad91b9b6a6ccc109bced63376b82b046bb5cad708464c76fb452365b76dbf53161914acf8fb11a
TLSH
T1AB217927DD589D7715B52760A8781603F2635B2F20348C0B75F6012E9FB392B0099BAC
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\npm-bundled\LICENSE
Size 771B
SHA256 24b8d53712087b867030d18f2bd6d1a72c78f9fb4dee0ce025374da25e4443b9
MD5 1d7c74bcd1904d125f6aff37749dc069
SHA1 21e6dfe0fffc2f3ec97594aa261929a3ea9cf2ab
SHA512 b5ac03addd29ba82fc05eea8d8d09e0f2fa9814d0dd619c2f7b209a67d95b538c3c2ff70408641ef3704f6a14e710e56f4bf57c2bb3f8957ba164f28ee591778
TLSH
T14801F18FB2D52A9454D19B653DA1EC8961C9F0773D43AA0530B4E248C7AB40F95BA404
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.md

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\path-scurry\LICENSE.md
Size 1KB
SHA256 865576de51d520f97c8869b9b9f96caf8efd69b82bb6e575fc00b0964dc7a3ca
MD5 236eea678a0baae4690b3fee5f11cd6d
SHA1 0d97e894b9fe7f7a8e74bb99619e415a65726a40
SHA512 e7e720da4ec95a289fdc5acb7d9d06fbab28b15476e1eb51155e0a131a0222d5e44794bd49088230ae602173ec3c49c789b6c2e28a3146778624f4b9244c1d8a
TLSH
T1AC31E02F665E975302D041066F43A0BFF51A457D966E02F23496905833F6B2246BB8BC
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\read-cmd-shim\LICENSE
Size 766B
SHA256 1b94c9898885c681c1e0ebbf96494e49662842f88ac1e4dd8ffad0ac047108ae
MD5 9ea8c9dc7d5714c61dfdaedcc774fb69
SHA1 5ea7b44b36946359b3200e48de240fe957ee70f1
SHA512 0401c416464818fcaadd6e156ce92c28448e990765ddb7d0097b0c30ea9c8a5d862a53a94fd4a0adb502db1e3abe445c08f18e6fcccbb9f70fcbab273a938e60
TLSH
T10901258FB1912AD454E1ABA43DA1AD4861CDF03B7D43AB043479F34CDB7B44FD869904
MD5 SHA1 SHA512 TLSH

Submit Download

json.js

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\sigstore\dist\util\json.js
Size 1KB
SHA256 4ac8cf74569306ecab3ee2a03b2882229770691f50c87d2c88af00d8f259f32a
MD5 86991f26c4c2c2abfbd5fd2cdf6f440c
SHA1 e724cfe4776a2d23dabf8320e6e0770c2dde160b
SHA512 aca25caa4a74bac2e36d5c97252b87972b1495829e6bc58e616f8c0982354adc282693415628030c09d16b82fa7d31767042af58cd375d38542eaeb82ec6392f
TLSH
T1CC41E05FB80189B20EB3A3676F0BE88EE3044823C415E25075ACCAE86F3366645D0DE3
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\string-width-cjs\index.js
Size 970B
SHA256 2a08baa8b66a1e2dedd04b9a5d5e1eec5ecf1ffb26c0583f6cc251738282e6d0
MD5 4ad00eeaf20a33b5c04040591f7a545a
SHA1 44027a8e98b8ead3e5d0bc738d076c491d90709a
SHA512 082a4a3d9aa55705eb584d235d769417beb79e2054df57ed134f8e99a54ff4f8d689a4b5d37b5bbf96ac742a8fd162acc945e0156122f6fffb170dfb590663c5
TLSH
T17F117D5025DB844D0E823261C6F88496E9DAD8B167BEB1F8FDCD0999308646D81B1FFE
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\string-width-cjs\package.json
Size 997B
SHA256 e4ccd8b5171cd2242ee9323b4da2ec324b8819bbf2e69c4290de1d8f89a81f26
MD5 fae14741f7c1dd1ce75aae53583d5ae4
SHA1 b1c806f2f7aad4f5e23b73810a870f7685013c00
SHA512 96aa52fc420f987dc32a48919179911c0ac682763104d6f99e49414c3447592f4c32f923f0a9e5f9e52243d8e724b347afcd7b72672a62b89dbe92ea968e133b
TLSH
T1FB119C2BBDDAB09B0A89A3C46876C2BA0C24409FD34F8E7D3D857E14C19466210BF720
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\strip-ansi-cjs\index.js
Size 158B
SHA256 ee7638c432f16042a7c64c40b4bf326e44b7d6d9b7add19806637240c246a6a6
MD5 3f03b6fe5c918ae1b49ed36f4581762f
SHA1 1dc3afa3b08728017bdff8105d7424fc8951902f
SHA512 b271511f7fd29719d06dbd162ac5259355c682675316aa4c8c513f30f8c390974948a4c02f383a43757c66c2247047f80dc88c2ebf261d9b3dfe0138f1a3c7d7
TLSH
T1DFC08C562075A5472C1340C4F0E859401583C4B03AB8A2F1FECB15A6609947E0670A6A
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\strip-ansi-cjs\package.json
Size 852B
SHA256 dec16b172e99984a3c913a9ec30d854da58467ae1fbde1b43a1d8f9562b80ed8
MD5 d59bf9acae68d3368565b2c4302d1c82
SHA1 dc8dd3a6928631b912f6dbb9471b43e9a15117ae
SHA512 b74620e60f75f889654c57c5a8c3a1a69d003523f78a539085ab521c599e905c0038e958533d6a38643d6ecee3dfed97190e595f1309d775fd41e29487162a5f
TLSH
T15D014537B9E230AB09DC92C064B2C5A21C38005FE108CE7E3ED52D38D1D45A620ABB10
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\supports-color\index.js
Size 3KB
SHA256 124c1d239e1efceb7621296d04c298e59026e4c018e2a179ba071ebb6b83432c
MD5 c907084cae8d2057b8bb1905dbd39d2e
SHA1 c3527e0ea388eab8a0863c5e0d8a40d30e5b6e78
SHA512 5f4ab7167e248f63b29cd7070f1ea6179fbe5d27478e8b10cd9b7762b4a95b12dbae9bd9fdb077755ef3590cabb9e6cf8b8cb6e280f57f38ae18aab18341de29
TLSH
T1518122E4758B114B4BD3238C4139A907ABFCF8B30569B2FCF58A6202776021EC27D9C8
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\tar\node_modules\minipass\LICENSE
Size 802B
SHA256 1f16e79ed0491d739b6961d4c49a1659ff3158fa639704b4ed4671e59a2048dc
MD5 4447d2a569aa1119cec476f9c7d00040
SHA1 ac5021746649d59911458ad8504812ff7f4d2821
SHA512 1076803d94dcf6f084e1c910bf72494f77f9b2a0acf4a0f9b436d02b596d5aa88476d59a6355a40cd3d4b2dd6b80627430cb0656a8a6433d50912d9f3505e26b
TLSH
T16401468FB2D526D458D09B543DA1EC8971C9F0773D43AE153074E248C7BB40FA47A404
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\text-table\LICENSE
Size 1KB
SHA256 a9ecf3da3825b3e7232f29c970a2869bb1752c900bd75ba7cbabeb69b8f032b4
MD5 a6df4eaa6c6a1471228755d06f2494cf
SHA1 b7d2d5450231d817d31b687103065ac090e955ab
SHA512 340a980d3cbe1fae476b27dce893a707b40d8db4c35a3d5cb0e8a907bb8792e06dc50f23ce4abd50a35f18fa74e20caf92e142de4100fb2c5a5e58d5152800b9
TLSH
T15111863E735143721866276165A9B8CAF22EB19F7E5F178434AEE209133B05CC4FF854
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\wrap-ansi\node_modules\ansi-regex\index.js
Size 358B
SHA256 75fce023de747716f8a40f7f0c02abf1c76b9c9fc0dfe50cf7320bdd9b3ca867
MD5 a64c98d662ba77e05bd25f4321782544
SHA1 c23efe3d30d32889341b85b9c7fab06fc96766f2
SHA512 e7e1b065178c54e8da869c7d0cb6eb9cbd7b7883c7f6c8251cdf30b17e7d86d1d042617b589573849e9347c042146eb73822371acc4b27f603b43aef3884391f
TLSH
T12DE0D84A5846055DE8D131562E328C749759BF297DA35306D134EA0D6E4A04F539C62F
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\wrap-ansi\node_modules\ansi-regex\package.json
Size 1016B
SHA256 d26781a70b722c2ff943cdfc64b21981dde97842ad26ebd0a48d5a234978d17b
MD5 0127d05635e3d6bc3fe3084764b65031
SHA1 a84bc827323645d8992d82361d33c7901d329a28
SHA512 f94011c68410ed2ed25618e7e25b927aeb390d17d571aeec5147850e43fb6b06e8b09a16eb6471f95d8800484ea3a4d38ccbdcfe3e424132cee9c8350b822a3b
TLSH
T13A11CC3BF9E170EB49CC66C074B2C5A21C3D405FE28CCF6EBE5A3D28D1D85A5219BA11
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\wrap-ansi\node_modules\emoji-regex\package.json
Size 1KB
SHA256 ea044f5a19ab0cffdf047194d1ba9185b01f991e50c9fc9d82fa8fcab5e87c49
MD5 23bb44061de2811fef5fcb8bff8acfbf
SHA1 c3502d5153760228927f9aa390a61eb6a3d05ae1
SHA512 9e23a780c46cccb31be63f8a945bf8216a98e6006ab53b1ee3f63adaae158cf4ebfeccd7ade408f80169cc45fd351c56a4e6c88bef79cd780e7b8d9a0561a924
TLSH
T1F021BB33C8688C3B4FB4D75498A81643FA171B5F20B48C0F3BB9822C0F751771099B6A
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\wrap-ansi\node_modules\string-width\index.js
Size 1KB
SHA256 00b571134030bbaea4cb78c45ca41ff9f7614a3b48449d079c2f9c14be26649f
MD5 2ea068c391e135dc312fb061125e62e7
SHA1 d8020289721ba02fc5563c94ddd254ec8a336883
SHA512 9e1c80b3bf373ed31a347d549a54edb291fe1ca9fa0502b8e25d3103d691181e97f0f84ede94adbf24b989eaaf66ac055ab06c0eb9bf6c297103efda03edcb32
TLSH
T11621DD5130CB114C09EA234800BA8584D4B8E92027BF31F6FCCE5A14308648E8AB9B5E
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\wrap-ansi\node_modules\string-width\package.json
Size 1KB
SHA256 4c2f6a20a8fd9cb0234bae6eb648b62b5ba44758d75c574201cc09c363b8e2ee
MD5 7f4f5fe8fb5dbbf1b319d3e80e963a13
SHA1 e042be323be5de3b40a9bd3f71b60578c08048b1
SHA512 3f7061c29435f66cfc4dedc4cf72c0d1fe7b570485a22f953930fbdebfeb7e5b4ab737b49c81d0451b36d71efa1bd42535f889970c589e3284e79310c36f207d
TLSH
T184117F37BDD6B19B4698A3C05879C26A0C30405FD34F8DBD7C897E14C19469320BF614
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\wrap-ansi\node_modules\strip-ansi\index.js
Size 482B
SHA256 555ba55a62a19bced3b49301d368e50654f56ee704046a303a17e84e069d6cb3
MD5 61c1f9db454432c9fd66ff26e09bdb04
SHA1 6918370a6a5c6b0f94d9585519549d87c5b23af4
SHA512 5360f31c68b38ecaed2bf4f426dfcbd3c64d051d027f62f9008e83a04204634e642350acc05d33e28fdcf1b9e8f5d1d78864c68cca9011d34fee4ef3a299bd20
TLSH
T1ADF09E1E701301AE0DA1318872E994566B21E1603BADB9E466DA102931A501F0036BEB
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\node_modules\npm\node_modules\wrap-ansi\node_modules\strip-ansi\package.json
Size 971B
SHA256 c5bf7fc8cf64e085ccf2e73fc41513f48ab75b6692929201458d9336ad139b98
MD5 dd70bab1c8fe7c8675587c08d815e5d6
SHA1 a22260513f148df090a2f7776cb17bbc744eeef8
SHA512 af8bac8043cdf436c3dc512924dacc5aa7edfb962e951e859d20a6a5e89e4358a6acb603ad6f942852318e6156c046f56689bba18b8a6a7932d9c06e66e02106
TLSH
T1C1118C3779E1309755CC62C0B4B2C4B61C39405EE148CDBE7DD63D38E1D45E620ABB11
MD5 SHA1 SHA512 TLSH

Submit Download

npm

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\npm
Size 1KB
SHA256 f87e46c007b033acf291372dd2fe45b895582bdb5fff6e8812ea22ce426d07be
MD5 fb2ef0a3ca4696176e070ee8a658db6f
SHA1 eee6662a953efd3cfc158e35003040b96eadc341
SHA512 4947aed47b64d2c40395555f3b2e5ad0f15b96ee68a6e1c28cd0b37473b0046e2b03efa30f735d7ff6debefe460c9619402318deaf298a5ec85134ba37951a75
TLSH
T1C541D6B7B9EC5FB47D980BA03C0B1824379A90FF077431D0A01EAA0079D8579985737B
MD5 SHA1 SHA512 TLSH

Submit Download

npm.cmd

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\npm.cmd
Size 483B
SHA256 afa68b96334ea8493bcb908743af3dbd619cf26be7b44460179abd4d75d849d2
MD5 d5b5acb61c9bf69fb8bfc65eba28c6ab
SHA1 eebdd696f7f1aaea15ac4e10f5a6e5aa5a6aca8c
SHA512 69483d7c5e49efdcdf054b3c5d96d9d315e436f60ef3059dd6a80472445d79068655a8a27d868e907f2ebafc49b8f638947b2fb49d42e4a9f427fec74fb58822
TLSH
T14FF0E2B6FCA94EDC711A0F613C36482574CB78477C6220E6262C8865C7E46F400C339B
MD5 SHA1 SHA512 TLSH

Submit Download

npx

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\npx
Size 2KB
SHA256 4cd50f2a542db7f65459de435c0e67f9e86054951e22e84effb4962c9c1c5c66
MD5 a9ecab0db8ea8456d7c28fe69ea1b593
SHA1 ba2767e41d1c1f54ed5f87dddd6c76e4200f6392
SHA512 6c4e244defea3d666e28986d5853b72d64f96c700938d6d168b1630447497ccf0e3973ffa4166db82834f6e385f65878fc8d40082d193c3e9e38659e620029d9
TLSH
T19A41D7B7B8EC6BB47D980FA03C1A1415378A90FF077431F0A11EA6003EA857594573BB
MD5 SHA1 SHA512 TLSH

Submit Download

npx.cmd

Path C:\Users\Admin\AppData\Local\Microsoft\Services\2579\node-v18.19.0-win-x64\npx.cmd
Size 539B
SHA256 b6004636a98cbb9814fdfc98bb7365e78ab48b3208f60ac5b2f17794c5285f26
MD5 d679d19cfab093d75d4b75672a0ba98a
SHA1 515c2954d10d4c27b564a11631ad29b553531731
SHA512 26eeb8e686470c0bf036c50bc9e05635d1ec28d278290c201111f431771e9af4e0be8af3d69993736fe1712ae8cd1173f9e07f54422f7289a128d7ea6275bc97
TLSH
T127F0F0B6FCE94ADDB11A3F613C76482474CB78C76C2220F9272C85658FA46F000C229B
MD5 SHA1 SHA512 TLSH

Submit Download