Analysis

  • max time kernel
    117s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20231215-en
  • resource tags

    arch:x64arch:x86image:win7-20231215-enlocale:en-usos:windows7-x64system
  • submitted
    12/02/2024, 02:25

General

  • Target
    0223d85eaf5cd5b188e61e9c99b62a9b5cfba4c5d2ed13576858b40327451ae7.exe
  • Size 68.1MB
  • Sample240212-cwne5sac64
  • SHA256 0223d85eaf5cd5b188e61e9c99b62a9b5cfba4c5d2ed13576858b40327451ae7
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 5 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0223d85eaf5cd5b188e61e9c99b62a9b5cfba4c5d2ed13576858b40327451ae7.exe
    "C:\Users\Admin\AppData\Local\Temp\0223d85eaf5cd5b188e61e9c99b62a9b5cfba4c5d2ed13576858b40327451ae7.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2928
    • C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\Sky Beta.exe
      "C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\Sky Beta.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2324

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Sky Beta.exe

        • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\Sky Beta.exe
        • Size 50KB
        • SHA256 da3b7e84ee43d3635939073615de9851e132f37a59323ad782d00a5df417fe31
        • MD5 SHA1 SHA512 SSDEEP

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\ffmpeg.dll
        • Size 39KB
        • SHA256 276193b442b133816600c8b0856f64bf827bdd1691ca8be874acf51007a47df8
        • MD5 SHA1 SHA512 SSDEEP

        LICENSE.electron.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512

        LICENSES.chromium.html

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\LICENSES.chromium.html
        • Size 1.0MB
        • SHA256 72c06234501f6b477579630ad647c8bc3c72f88bcd7e6bcae924e993d29f2c87
        • MD5 SHA1 SHA512 SSDEEP

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\chrome_100_percent.pak
        • Size 124KB
        • SHA256 ccbca246b9a93fa8d4f01a01345e7537511c590e4a8efd5777b1596d10923b4b
        • MD5 SHA1 SHA512 SSDEEP

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\chrome_200_percent.pak
        • Size 173KB
        • SHA256 c91abf556e55c29d1ea9f560bb17cc3489cb67a5d0c7a22b58485f5f2fbcf25c
        • MD5 SHA1 SHA512 SSDEEP

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\d3dcompiler_47.dll
        • Size 2.8MB
        • SHA256 7c7ec5907e67b0a4c61188dfaad964c3b7a3f5c04c89703d5434b6a8da0b420e
        • MD5 SHA1 SHA512 SSDEEP

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\ffmpeg.dll
        • Size 979KB
        • SHA256 cc87db41be19dfc5210414285d7689d0b3cb4da5f79da2dfe6c21ca8a6215210
        • MD5 SHA1 SHA512 SSDEEP

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\icudtl.dat
        • Size 1.2MB
        • SHA256 c54c640cd6fdab52a736cf60dbced775ab121b8c145a05449f74f046721ef8d1
        • MD5 SHA1 SHA512 SSDEEP

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\libEGL.dll
        • Size 470KB
        • SHA256 897ceb95fb164640ddd2426673997b5f6fc2619fd916b038b575a70a0682a706
        • MD5 SHA1 SHA512 SSDEEP

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\libGLESv2.dll
        • Size 912KB
        • SHA256 cdf167e0f2d6404f342e5904597280b1d6f34569b173ec883d14a54116274131
        • MD5 SHA1 SHA512 SSDEEP

        af.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\af.pak
        • Size 92KB
        • SHA256 9ede27d5d1a2fe8ff1544d6b7c2796cfc07b17c7ca09bdad823aaf83b7ad80e8
        • MD5 SHA1 SHA512 SSDEEP

        am.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\am.pak
        • Size 145KB
        • SHA256 c3b0e2fed316fb288f3cb2e361a60813897c85200bf9fa8202d70dc649279384
        • MD5 SHA1 SHA512 SSDEEP

        ar.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\ar.pak
        • Size 131KB
        • SHA256 e384b682e3e21adc1dbb9658c8ccbe9dea74e4a6b28d03916b243644ee677b72
        • MD5 SHA1 SHA512 SSDEEP

        bg.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\bg.pak
        • Size 162KB
        • SHA256 afeb8537d8b1ba6ebb5c01780b4628cb22a923d6f1cb62e93102c911be83e1af
        • MD5 SHA1 SHA512 SSDEEP

        bn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\bn.pak
        • Size 152KB
        • SHA256 412b4c56ed7d9ee909022ee5bedef413e2d80cece025a03a74e5e1bb3a7195b6
        • MD5 SHA1 SHA512 SSDEEP

        ca.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\ca.pak
        • Size 105KB
        • SHA256 117614fe4e99ce219be6bad4913eec55c0cd19994ce2431fb367cfed44e3711b
        • MD5 SHA1 SHA512 SSDEEP

        cs.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\cs.pak
        • Size 31KB
        • SHA256 a63c777ab77035993ea5e260a85a14189e3c7cffef8fbaf28f118fffd3ff078d
        • MD5 SHA1 SHA512 SSDEEP

        da.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\da.pak
        • Size 13KB
        • SHA256 0caecd8c7644b349a1d7c981e00d41035d82d963a6f3e3a1e012ced19f6e44cf
        • MD5 SHA1 SHA512 SSDEEP

        de.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\de.pak
        • Size 77KB
        • SHA256 ecdbb194a2247a8fd3e7bdd2c1a44694e820ebd4f546829645017f5cd02d127a
        • MD5 SHA1 SHA512 SSDEEP

        el.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\el.pak
        • Size 204KB
        • SHA256 b13912a8b51fe4d3ee254167f82ef718e04d6fff87d5ce1fa043f30f567220b8
        • MD5 SHA1 SHA512 SSDEEP

        en-GB.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\en-GB.pak
        • Size 240KB
        • SHA256 959619b3a4dbdb5cf4d2c4a8f32f1619bbf9e202141d905bf0819cf59195a3a4
        • MD5 SHA1 SHA512 SSDEEP

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\en-US.pak
        • Size 256KB
        • SHA256 e5563be963f8ccd50a142e796c7249da75790b9826b382787d6625355ee3193b
        • MD5 SHA1 SHA512 SSDEEP

        es-419.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\es-419.pak
        • Size 215KB
        • SHA256 fbec0e385cecbee43fb72c24164334f0adc997639c5dd26cdd4cd97b4d67309f
        • MD5 SHA1 SHA512 SSDEEP

        es.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\es.pak
        • Size 310KB
        • SHA256 ca3b7affdc40521cd23d15dd4d4d0e6813b061690e23b29cd3fe36bdb1416b60
        • MD5 SHA1 SHA512 SSDEEP

        et.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\et.pak
        • Size 85KB
        • SHA256 7ef61f2825160924cc4c199740d9aead9f3a1796d6702b204e44987caf8f09cd
        • MD5 SHA1 SHA512 SSDEEP

        fa.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\fa.pak
        • Size 74KB
        • SHA256 178032cf9a39e1024d155e46d7b949ccc9523c457455e9c5b56aabec886318f9
        • MD5 SHA1 SHA512 SSDEEP

        fi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\fi.pak
        • Size 212KB
        • SHA256 0ce1559428ae1a68dc2d374d53e6a1dab0606d7165b4aaf1b017285e61bf633a
        • MD5 SHA1 SHA512 SSDEEP

        fil.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\fil.pak
        • Size 79KB
        • SHA256 8f84c8e0a868a7c41406d7b99c2d256af42a410adffeb65198c105784b56104c
        • MD5 SHA1 SHA512 SSDEEP

        fr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\fr.pak
        • Size 34KB
        • SHA256 ffc9753567e1d463ba51ef8c3138eecf8753366dfe7454b372ce78f79de7b804
        • MD5 SHA1 SHA512 SSDEEP

        gu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\gu.pak
        • Size 188KB
        • SHA256 1f9577d8c1e2ff1181353db4cdfbfff5b29532dc58f626156c022f938629284a
        • MD5 SHA1 SHA512 SSDEEP

        he.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\he.pak
        • Size 5KB
        • SHA256 5f86ca20f4a08f226e1992ae72c8612ae3c2bf2c4e077fbf3e73ed466cbbab75
        • MD5 SHA1 SHA512 SSDEEP

        hi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\hi.pak
        • Size 400KB
        • SHA256 77eb61e8825c2aae710bb8421401f36676588723da35a996b620b49fd145e9cc
        • MD5 SHA1 SHA512 SSDEEP

        hr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\hr.pak
        • Size 90KB
        • SHA256 c87b7b0b93b7b513cf96be7b1261574c47f3b584b119c3c1f899de3a16e2e0f7
        • MD5 SHA1 SHA512 SSDEEP

        hu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\hu.pak
        • Size 150KB
        • SHA256 9b40ff394f49978b8481a4eb8df4047fded10ea0f58c3a32c16251b4edabdc57
        • MD5 SHA1 SHA512 SSDEEP

        id.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\id.pak
        • Size 210KB
        • SHA256 6a838a32c3ce655ad472bb3b9221142299d8dba67a20bea6d7b5021f2182e3db
        • MD5 SHA1 SHA512 SSDEEP

        it.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\it.pak
        • Size 152KB
        • SHA256 1660d0057f0023733a24ad715703afe4531f29041eaf638294703bf3d817e0ff
        • MD5 SHA1 SHA512 SSDEEP

        ja.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\ja.pak
        • Size 135KB
        • SHA256 bcf4efcb8ad1768b47c789df9d7080ef09ed54ab61974a2bc0091b1e917704fd
        • MD5 SHA1 SHA512 SSDEEP

        kn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\kn.pak
        • Size 151KB
        • SHA256 3e1cf577d492fe0e6bccf3a5f3a75299737691d7abb56b6eedf23784ff5f5dc3
        • MD5 SHA1 SHA512 SSDEEP

        ko.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\ko.pak
        • Size 415KB
        • SHA256 8c9acde13edcd40d5b6eb38ad179cc27aa3677252a9cd47990eba38ad42833e5
        • MD5 SHA1 SHA512 SSDEEP

        lt.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\lt.pak
        • Size 53KB
        • SHA256 0e3237844a59c3330d2f448a8ad1b1672449573331a9f3b6ff097ab5887171dc
        • MD5 SHA1 SHA512 SSDEEP

        lv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\lv.pak
        • Size 245KB
        • SHA256 9423bbfa2992bf423721874a6d055a36b742b51537f29d73e8485afe1a85487d
        • MD5 SHA1 SHA512 SSDEEP

        ml.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\ml.pak
        • Size 251KB
        • SHA256 6ec17dd548cc82389b0c732beab4d653e49a0a454867e8dcc831bf1fe4027167
        • MD5 SHA1 SHA512 SSDEEP

        mr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\mr.pak
        • Size 89KB
        • SHA256 77e263fe0461702f16aec091060ae4176f4615a70b0923ad1143d515695c18ea
        • MD5 SHA1 SHA512 SSDEEP

        ms.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\ms.pak
        • Size 341KB
        • SHA256 ec177e8edb7f92e78f2884876766017427274d9d7f202ed52b6acaffab85f180
        • MD5 SHA1 SHA512 SSDEEP

        nb.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\nb.pak
        • Size 151KB
        • SHA256 0e338ebb689041eb7c6add9c472d56e437f6bfbdbd10fe6586fcf1e9be478506
        • MD5 SHA1 SHA512 SSDEEP

        nl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\nl.pak
        • Size 175KB
        • SHA256 c83caf1f88c8c85367052dfa31a2b54a60430de45343af737f57ea4bee93e14f
        • MD5 SHA1 SHA512 SSDEEP

        pl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\pl.pak
        • Size 281KB
        • SHA256 f0fbc4611b40911a6fa4b3b5dbfa2b241773193154eb141214a04ac9e4bf2000
        • MD5 SHA1 SHA512 SSDEEP

        pt-BR.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\pt-BR.pak
        • Size 109KB
        • SHA256 4583683ee12fb5957f6fb54643efe6b5813f6b359ffa7bc84e749eef9cd816bb
        • MD5 SHA1 SHA512 SSDEEP

        pt-PT.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\pt-PT.pak
        • Size 216KB
        • SHA256 2242d7cee98698aa05ef38fd3517a0c718c0e1966575fd255d96471319e6b1c1
        • MD5 SHA1 SHA512 SSDEEP

        ro.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\ro.pak
        • Size 89KB
        • SHA256 0258f74f0dfd950d8dc45bedf1a8920158efd1be4e00c7b7de552d33012f2efc
        • MD5 SHA1 SHA512 SSDEEP

        ru.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\ru.pak
        • Size 323KB
        • SHA256 bc94891b9713c0ff391196dd9becff3953296b381de392d09d8ef692c1e5dfbe
        • MD5 SHA1 SHA512 SSDEEP

        sk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\sk.pak
        • Size 150KB
        • SHA256 095f6d9c7c6945185b1d615a2a273d578467f4e47ff8061b6e6ba13707bc61e8
        • MD5 SHA1 SHA512 SSDEEP

        sl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\sl.pak
        • Size 77KB
        • SHA256 fde2321b94cc32991ff1143c0626618e1f15300c27dbb178e0fe8d06c02172b7
        • MD5 SHA1 SHA512 SSDEEP

        sr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\sr.pak
        • Size 1KB
        • SHA256 a1563538160df2e5bf2aa19852ad545aa3f77ffe0d465ae462e9cc0ca5762226
        • MD5 SHA1 SHA512

        sv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\sv.pak
        • Size 168KB
        • SHA256 6959359a476b96b0ac45181cab7c8956c3481cbf25b8b371a896215ce31b0ded
        • MD5 SHA1 SHA512 SSDEEP

        sw.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\sw.pak
        • Size 42KB
        • SHA256 4b42de3c3b3b90fdc42d817efece08d17bed8bbffdf89b0eb0bb76d2f58dc6a7
        • MD5 SHA1 SHA512 SSDEEP

        ta.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\ta.pak
        • Size 208KB
        • SHA256 116c584c7b6e8296850e849ae1c651e7bcd61afa5d079eface1ce6775ee29217
        • MD5 SHA1 SHA512 SSDEEP

        te.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\te.pak
        • Size 155KB
        • SHA256 7b046e1facfbf55bcbdcd801e9fca562d9f49eac706e8254894a319272e830b6
        • MD5 SHA1 SHA512 SSDEEP

        th.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\th.pak
        • Size 286KB
        • SHA256 837fd39cf843dfce8f98e9aa147a4ca591128d0fdf99a8b104ddfea25b2ed68a
        • MD5 SHA1 SHA512 SSDEEP

        tr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\tr.pak
        • Size 250KB
        • SHA256 fa1dd459e6ea0c5ac638bb0dc1fe90071ccb7fc0bebc634d7afb5dc2fabd1f91
        • MD5 SHA1 SHA512 SSDEEP

        uk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\uk.pak
        • Size 265KB
        • SHA256 db610e569ee4217ddab13dad8ce49b8a876520dc499518197b3fc49bf000876c
        • MD5 SHA1 SHA512 SSDEEP

        ur.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\ur.pak
        • Size 340KB
        • SHA256 6117a4c1ca364e1ee505a42492b265e02e10b573688775f7048427cbd765a55c
        • MD5 SHA1 SHA512 SSDEEP

        vi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\vi.pak
        • Size 120KB
        • SHA256 d4346b2b5bf497ec579c60f1719458548c0f145ad10e886cadc21dcc1a033f41
        • MD5 SHA1 SHA512 SSDEEP

        zh-CN.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\zh-CN.pak
        • Size 16KB
        • SHA256 fd11a658f30b2575537e587623560ec81a2daa3848a9101721b362173c195f06
        • MD5 SHA1 SHA512 SSDEEP

        zh-TW.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\locales\zh-TW.pak
        • Size 38KB
        • SHA256 c34a862e3eb639f3e4868cd2e9f75b9a5cd162c1bb9d0d37a71f8ad2aefd8afb
        • MD5 SHA1 SHA512 SSDEEP

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\resources.pak
        • Size 887KB
        • SHA256 09059141842a417834bc16735f6bb4ca3ade3af18c858fbe088921d77cfb4b86
        • MD5 SHA1 SHA512 SSDEEP

        app.asar

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\resources\app.asar
        • Size 109KB
        • SHA256 e04136fd7d00bf103287b9411387dd605f0271e21b560583807ff55aaf0c8e85
        • MD5 SHA1 SHA512 SSDEEP

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\resources\elevate.exe
        • Size 64KB
        • SHA256 da79357b952f54d52ede45ff4fd87658c1ee019ce179752d62adea04dd3ae937
        • MD5 SHA1 SHA512 SSDEEP

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\snapshot_blob.bin
        • Size 93KB
        • SHA256 5ddc0b5d3793b4f1de9b06dd5927b32b5d461da5411de8540924723a5748115c
        • MD5 SHA1 SHA512 SSDEEP

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\v8_context_snapshot.bin
        • Size 211KB
        • SHA256 70b3357164c76d7a9a242b1d851e1b909b30d66b8c9dc86e63c516237966e558
        • MD5 SHA1 SHA512 SSDEEP

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\vk_swiftshader.dll
        • Size 96KB
        • SHA256 806b365df79138290fc1ccaa6df97650c424b3b143b588760d1d8e1ece4b99e3
        • MD5 SHA1 SHA512 SSDEEP

        vk_swiftshader_icd.json

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\7z-out\vulkan-1.dll
        • Size 103KB
        • SHA256 9c3e45626d7c5597d8b42c0ba0d9fd560dc63f0d860ffa7412dd8e0d66ce22ae
        • MD5 SHA1 SHA512 SSDEEP

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\StdUtils.dll
        • Size 1KB
        • SHA256 3f1bc7aefd01690f7da8927c81531d7434e9a834259673a825b6b8ba1152a090
        • MD5 SHA1 SHA512

        nsis7z.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nso197B.tmp\nsis7z.dll
        • Size 169KB
        • SHA256 e0ec0fa9982f7b7461c145bcd062c603fa11aa42e83b4e39b906e18c5d864b36
        • MD5 SHA1 SHA512 SSDEEP

        Sky Beta.exe

        • Path \Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\Sky Beta.exe
        • Size 4KB
        • SHA256 04be8f5a88992041e4cac3ef39abb51381eacd9fc44411d34260661aebaef9eb
        • MD5 SHA1 SHA512 SSDEEP

        ffmpeg.dll

        • Path \Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\ffmpeg.dll
        • Size 19KB
        • SHA256 a8752f608985767b1c474b78cb800fc160bc35419992c2b6e2f4561673de5e5d
        • MD5 SHA1 SHA512 SSDEEP

        StdUtils.dll

        • Path \Users\Admin\AppData\Local\Temp\nso197B.tmp\StdUtils.dll
        • Size 57KB
        • SHA256 9d5694aa5d2be95931ae81696a59a6597b3ad9f4b3876c8f04f7804f868a8ff4
        • MD5 SHA1 SHA512 SSDEEP

        System.dll

        • Path \Users\Admin\AppData\Local\Temp\nso197B.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP

        nsis7z.dll

        • Path \Users\Admin\AppData\Local\Temp\nso197B.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP