Overview

overview

7

Static

static

3

0223d85eaf...e7.exe

windows7-x64

7

0223d85eaf...e7.exe

windows10-2004-x64

7

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

LICENSES.c...m.html

windows7-x64

1

LICENSES.c...m.html

windows10-2004-x64

1

Sky Beta.exe

windows7-x64

1

Sky Beta.exe

windows10-2004-x64

7

d3dcompiler_47.dll

windows10-2004-x64

1

ffmpeg.dll

windows7-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows7-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows7-x64

1

libGLESv2.dll

windows10-2004-x64

1

locales/af.ps1

windows7-x64

1

locales/af.ps1

windows10-2004-x64

1

locales/en-GB.ps1

windows7-x64

1

locales/en-GB.ps1

windows10-2004-x64

1

locales/et.ps1

windows7-x64

1

locales/et.ps1

windows10-2004-x64

1

locales/pt-BR.ps1

windows7-x64

1

locales/pt-BR.ps1

windows10-2004-x64

1

locales/sk.ps1

windows7-x64

1

locales/sk.ps1

windows10-2004-x64

1

locales/uk.ps1

windows7-x64

1

locales/uk.ps1

windows10-2004-x64

1

resources/elevate.exe

windows7-x64

1

resources/elevate.exe

windows10-2004-x64

1

vk_swiftshader.dll

windows7-x64

1

Analysis

  • max time kernel
    148s
  • max time network
    227s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231215-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231215-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12/02/2024, 02:25

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    0223d85eaf5cd5b188e61e9c99b62a9b5cfba4c5d2ed13576858b40327451ae7.exe
  • Size 68.1MB
  • Sample240212-cwne5sac64
  • SHA256 0223d85eaf5cd5b188e61e9c99b62a9b5cfba4c5d2ed13576858b40327451ae7
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates processes with tasklist 1 TTPs 10 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\0223d85eaf5cd5b188e61e9c99b62a9b5cfba4c5d2ed13576858b40327451ae7.exe
    "C:\Users\Admin\AppData\Local\Temp\0223d85eaf5cd5b188e61e9c99b62a9b5cfba4c5d2ed13576858b40327451ae7.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    PID:2404
    • C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\Sky Beta.exe
      "C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\Sky Beta.exe"
      2⤵
        PID:1700
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "tasklist"
          3⤵
            PID:1556
            • C:\Windows\system32\tasklist.exe
              tasklist
              4⤵
              • Enumerates processes with tasklist
              PID:3432
          • C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\Sky Beta.exe
            "C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\Sky Beta.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\project" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1740 --field-trial-handle=1760,i,17923429405453101632,18263317253668152087,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
            3⤵
              PID:3888
            • C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\Sky Beta.exe
              "C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\Sky Beta.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\project" --mojo-platform-channel-handle=1956 --field-trial-handle=1760,i,17923429405453101632,18263317253668152087,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
              3⤵
                PID:1508
              • C:\Windows\system32\cmd.exe
                C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                3⤵
                  PID:5052
                  • C:\Windows\system32\tasklist.exe
                    tasklist
                    4⤵
                    • Enumerates processes with tasklist
                    PID:1232
                • C:\Windows\system32\cmd.exe
                  C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                  3⤵
                    PID:1420
                  • C:\Windows\system32\cmd.exe
                    C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                    3⤵
                      PID:3592
                    • C:\Windows\system32\cmd.exe
                      C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                      3⤵
                        PID:4272
                        • C:\Windows\system32\tasklist.exe
                          tasklist
                          4⤵
                          • Enumerates processes with tasklist
                          PID:1572
                      • C:\Windows\system32\cmd.exe
                        C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                        3⤵
                          PID:628
                        • C:\Windows\system32\cmd.exe
                          C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                          3⤵
                            PID:888
                          • C:\Windows\system32\cmd.exe
                            C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                            3⤵
                              PID:3532
                              • C:\Windows\system32\tasklist.exe
                                tasklist
                                4⤵
                                • Enumerates processes with tasklist
                                PID:1408
                            • C:\Windows\system32\cmd.exe
                              C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                              3⤵
                                PID:3456
                              • C:\Windows\system32\cmd.exe
                                C:\Windows\system32\cmd.exe /d /s /c "tasklist"
                                3⤵
                                  PID:2604
                            • C:\Windows\system32\tasklist.exe
                              tasklist
                              1⤵
                              • Enumerates processes with tasklist
                              PID:3320
                            • C:\Windows\system32\tasklist.exe
                              tasklist
                              1⤵
                              • Enumerates processes with tasklist
                              PID:5036
                            • C:\Windows\system32\tasklist.exe
                              tasklist
                              1⤵
                              • Enumerates processes with tasklist
                              PID:4252
                            • C:\Windows\system32\tasklist.exe
                              tasklist
                              1⤵
                              • Enumerates processes with tasklist
                              PID:2920
                            • C:\Windows\system32\tasklist.exe
                              tasklist
                              1⤵
                              • Enumerates processes with tasklist
                              PID:4548
                            • C:\Windows\system32\tasklist.exe
                              tasklist
                              1⤵
                              • Enumerates processes with tasklist
                              PID:3356

                            Network

                                  MITRE ATT&CK Enterprise v15

                                  Replay Monitor

                                  Loading Replay Monitor...

                                  Downloads

                                  D3DCompiler_47.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\D3DCompiler_47.dll
                                  • Size 589KB
                                  • SHA256 4bebf8700bb091bc49202979124544c6d29001c7f704847ea92723125d0d22a4
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  Sky Beta.exe
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\Sky Beta.exe
                                  • Size 114KB
                                  • SHA256 e03493bf8eb9e76374919484af966a170848204ae6ac77ec4839cf6ef1879777
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  Sky Beta.exe
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\Sky Beta.exe
                                  • Size 726KB
                                  • SHA256 4d4e80e8c5d33cc4ebcafd43a3d3448c2e813cc873d2af7ca154a57a84082303
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  Sky Beta.exe
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\Sky Beta.exe
                                  • Size 453KB
                                  • SHA256 e0f4d213d13a15b003c176dc3f7a6bd187b5b1e6af2e240e7a161a7e617e05c4
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  Sky Beta.exe
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\Sky Beta.exe
                                  • Size 1.4MB
                                  • SHA256 2ae0e65770a8a4088af6f0169b62c33f58678564d5f4bdd3c8eb32e315acb829
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  chrome_100_percent.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\chrome_100_percent.pak
                                  • Size 124KB
                                  • SHA256 ccbca246b9a93fa8d4f01a01345e7537511c590e4a8efd5777b1596d10923b4b
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  d3dcompiler_47.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\d3dcompiler_47.dll
                                  • Size 421KB
                                  • SHA256 97c8d0ec2b8b66f9dc7bf6125b11ff8a6be9008d227d7c495d702ef540c0fe54
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  ffmpeg.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\ffmpeg.dll
                                  • Size 502KB
                                  • SHA256 6b40bb7afcadb05a49ea7a497556f355d0fb7779f53953281ff25652cd04d79a
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  ffmpeg.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\ffmpeg.dll
                                  • Size 246KB
                                  • SHA256 0dd6cfa5f9f77c7b1421619456ce271aa92bdd39f6ae615c8b3decd16936f52b
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  ffmpeg.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\ffmpeg.dll
                                  • Size 838KB
                                  • SHA256 166ac74965c755fb9db02aac90b79e4ee9e290a8130d6bcd0f3b79cf29fa68a5
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  ffmpeg.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\ffmpeg.dll
                                  • Size 898KB
                                  • SHA256 43195c3844be1361c8d62919e8a63c8e71630c6b3195c552ade83ecd950d1a9b
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  icudtl.dat
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\icudtl.dat
                                  • Size 153KB
                                  • SHA256 288ce2f0c8b0edc2b702e83121ddb52d02e451228a97f1ef3d9aa491f098f87d
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  libEGL.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\libEGL.dll
                                  • Size 323KB
                                  • SHA256 ec6317251ae158ce511e481b7944f4bac114164fd6772deae60aac24c4ea83f4
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  libGLESv2.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\libGLESv2.dll
                                  • Size 838KB
                                  • SHA256 525a827aeaf87b09e08103f7e1d8adc48ae09d2c60997f962b1af02cdf5b42f1
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  libegl.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\libegl.dll
                                  • Size 470KB
                                  • SHA256 897ceb95fb164640ddd2426673997b5f6fc2619fd916b038b575a70a0682a706
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  libglesv2.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\libglesv2.dll
                                  • Size 327KB
                                  • SHA256 c04986b3450bfde7967f038c9872628aa06a4e4e5795446823beaaf36cce6db8
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  en-US.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\locales\en-US.pak
                                  • Size 338KB
                                  • SHA256 4d207c5c202c19c4daca3fddb2ae4f747f943a8faf86a947eef580e2f2aee687
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  resources.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\resources.pak
                                  • Size 661KB
                                  • SHA256 a188ec236f753e8db8304f2577b3b81ca5ad2f556babbf9fe115ceb7bea5d312
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  app.asar
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\resources\app.asar
                                  • Size 340KB
                                  • SHA256 c2f7451df7e3b4a54d6db2bcdba0329f8e831741f0980e5c76898f5a5b8e639d
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  v8_context_snapshot.bin
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\v8_context_snapshot.bin
                                  • Size 214KB
                                  • SHA256 84809650a4e646eb9a4abaca75e13ae1448cbf1af7a6fe2be9522b631ad94e08
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  vk_swiftshader.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\vk_swiftshader.dll
                                  • Size 444KB
                                  • SHA256 ac707a0b1bda151a66aa215fd9493731be34a82d19fecc13cd0bd3350630cfa6
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  vk_swiftshader.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\vk_swiftshader.dll
                                  • Size 1.2MB
                                  • SHA256 7650cb8bfe3d206cb65b2d6caba98b921854c0e427ecccdc9421a181e5930fa3
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  vk_swiftshader_icd.json
                                  • Path C:\Users\Admin\AppData\Local\Temp\2c11jhXNs4OzgUAhFGSEteqdE2J\vk_swiftshader_icd.json
                                  • Size 106B
                                  • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                  • MD5 SHA1 SHA512
                                  Submit Download

                                  708da3ea-6362-4aed-8ab9-344a26fa3b6f.tmp.node
                                  • Path C:\Users\Admin\AppData\Local\Temp\708da3ea-6362-4aed-8ab9-344a26fa3b6f.tmp.node
                                  • Size 155KB
                                  • SHA256 eec714e3ec4aa4f4894541829ebca1cea5bded48a1995ff9534ce57d41ffc3de
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  dd8a2196-e69c-4356-805f-bd3aba150cc2.tmp.node
                                  • Path C:\Users\Admin\AppData\Local\Temp\dd8a2196-e69c-4356-805f-bd3aba150cc2.tmp.node
                                  • Size 399KB
                                  • SHA256 27e7689e4aa129a07ce3199ce31a659ecaeb90ac46806c1e72eae6712a4f2a58
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  LICENSE.electron.txt
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\LICENSE.electron.txt
                                  • Size 1KB
                                  • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                                  • MD5 SHA1 SHA512
                                  Submit Download

                                  LICENSES.chromium.html
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\LICENSES.chromium.html
                                  • Size 296KB
                                  • SHA256 63920fbfb638c29f0180c952e0ed253571176b1d6bd98e02f04bd9df08eff4da
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  Sky Beta.exe
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\Sky Beta.exe
                                  • Size 270KB
                                  • SHA256 9a2d9f60b0f50e8148ace4cf65cec8fb89a56918851f002cb31e84b067129ec1
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  chrome_200_percent.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\chrome_200_percent.pak
                                  • Size 173KB
                                  • SHA256 c91abf556e55c29d1ea9f560bb17cc3489cb67a5d0c7a22b58485f5f2fbcf25c
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  d3dcompiler_47.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\d3dcompiler_47.dll
                                  • Size 510KB
                                  • SHA256 b00d36893b5a13254712145535ad2a0489a720b7fdd805e7565c01e4a0a83741
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  ffmpeg.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\ffmpeg.dll
                                  • Size 347KB
                                  • SHA256 0e178acf947e3ec167343cd73cc64b58f8c5be6d49ea7378a3c0281ceea08a7d
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  icudtl.dat
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\icudtl.dat
                                  • Size 357KB
                                  • SHA256 a69c0b97d73d2eab57dcb1383c6a878a2acbacef89c4527efcc27b137e2172b0
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  libEGL.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\libEGL.dll
                                  • Size 200KB
                                  • SHA256 57ef664f834e214eda6e143296c015741951c931fb3ada3f3be54196a6e8fc30
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  libGLESv2.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\libGLESv2.dll
                                  • Size 408KB
                                  • SHA256 bad96249a3f92973c406878a98590f3fd2965ef5f4103e304fbc74a6a52c7fd1
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  af.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\af.pak
                                  • Size 228KB
                                  • SHA256 afd6bde2616cf88bb5c02647d290f0d5732e448172ae21776a235df5d128de13
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  am.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\am.pak
                                  • Size 91KB
                                  • SHA256 5f6f278af87994473212bbc14ff038c40ba4dc4feb7cfa4ef90224682d96be77
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  ar.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\ar.pak
                                  • Size 193KB
                                  • SHA256 5d759b44280ac7f36c4d25f465e05240c964b6aae6fe43d41c5f19c1a56b4dea
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  bg.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\bg.pak
                                  • Size 132KB
                                  • SHA256 b18df877367512a0455356b3cf04c19df9944092d65cf460498e6a18012100e9
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  bn.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\bn.pak
                                  • Size 93KB
                                  • SHA256 d1846d97c72d2db6b00f447e8919abcdb7b8aafaf41d3773262fa984da26f1cc
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  ca.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\ca.pak
                                  • Size 50KB
                                  • SHA256 8181f24af8c62aaa54bc891705e12eb8bb441e33569a4024fae3e15e2a7cad16
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  cs.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\cs.pak
                                  • Size 125KB
                                  • SHA256 41ac82908c1f30cc92fcfe1253f65acc9bd1590be68c42a44ecaf91b09ac6a44
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  da.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\da.pak
                                  • Size 73KB
                                  • SHA256 4b7799c94ecbebef65afdcb2baaaebde905525abd746c48676a1b24ebaadbd7f
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  de.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\de.pak
                                  • Size 78KB
                                  • SHA256 80d7b0927ac0f12edfcde3dbb67ac9b611b02d97aebb6f405423a425f7e9d541
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  el.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\el.pak
                                  • Size 82KB
                                  • SHA256 06a2555a7138d24ed109ffcb45775d596b5cf10c9fe54d719e49b6483a9d5552
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  en-GB.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\en-GB.pak
                                  • Size 40KB
                                  • SHA256 36f7b12b7b625672cafe1d509bd4395987b4c210f647421c086971066ebe80ee
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  en-US.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\en-US.pak
                                  • Size 55KB
                                  • SHA256 e28d9d01170c46af73c99f5be3f209b20d4a491330e1da95d85c51068e9b98ef
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  es-419.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\es-419.pak
                                  • Size 91KB
                                  • SHA256 f55d34ac4c4e3630eec2965aa16d40076789b13639cab71786fb91f563835362
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  es.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\es.pak
                                  • Size 40KB
                                  • SHA256 66f35a39bd16ac3cdb3ea83a804e52942b9fcc0857db2c35be6031a98f27bb34
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  et.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\et.pak
                                  • Size 59KB
                                  • SHA256 364d921d5bcdc9b4c9abf45727f59b0c35ccb1402b2646288bcd02a78a22a10b
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  fa.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\fa.pak
                                  • Size 96KB
                                  • SHA256 b97fcebce157fccaf2ed7ea7f5b8976cedb65a3d93a56e6678831739c1bfa676
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  fi.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\fi.pak
                                  • Size 68KB
                                  • SHA256 159c69080f77bc99ae43719a80e2ad41a115259849cf4b3ac66632869a39dfe1
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  fil.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\fil.pak
                                  • Size 41KB
                                  • SHA256 1bac4ecf56a7e011b5446733e302688d153f5bab45898c23fde6644325b81fc2
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  fr.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\fr.pak
                                  • Size 25KB
                                  • SHA256 12fc55da587d7f1fb8af921b884f756f55024e195e97f5311e5e9f418e6f841d
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  gu.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\gu.pak
                                  • Size 65KB
                                  • SHA256 d283f4beaa25f477a327e71cea1d779de8eb1c450486ca87edb1cda3c4b64fde
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  he.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\he.pak
                                  • Size 92KB
                                  • SHA256 a80ef605e3eaa04f2959448ce44054c23449c70a99dbfa9f925c8e8718f08364
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  hi.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\hi.pak
                                  • Size 78KB
                                  • SHA256 721f506b38ab137ddd17b0d8fcf4da18ab79c4828331da40cea08d7ca9c5a813
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  hr.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\hr.pak
                                  • Size 16KB
                                  • SHA256 19657ce1aa8d954a2d97d8a3ecb97a9f9c73b1b0fd3bcdc225c4da57db5b5ffa
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  hu.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\hu.pak
                                  • Size 52KB
                                  • SHA256 f41603d2b215e0bde83f7fe1b62ddae6564aa2b1c00a1f567e9491631f5ad0df
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  id.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\id.pak
                                  • Size 40KB
                                  • SHA256 974fa875081b078ab58ff4fc29e241a5565ed021fbb1f9049f178f363ca83a57
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  ja.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\ja.pak
                                  • Size 57KB
                                  • SHA256 9b8de778679b2c12663b3c66303d3e99a8e4f0b9f1df3778ded54505700bc73f
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  kn.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\kn.pak
                                  • Size 121KB
                                  • SHA256 5c749f959ef118db3ca8ca8100d6922425334f9ad35cd819715250b45617cd13
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  ko.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\ko.pak
                                  • Size 39KB
                                  • SHA256 186f5e3370f4c92d3e168b23f3979c8c5bd16aa26befeac0270a888f36e68729
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  lt.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\lt.pak
                                  • Size 92KB
                                  • SHA256 ce038a31c9b5b39a89a8b480f906cb33f9f24293da342f518e01566b0ef9bda1
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  lv.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\lv.pak
                                  • Size 15KB
                                  • SHA256 450a3920ae4468131cdf6e6c925d544dccf113ed4584f61168401edb93edce1d
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  ml.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\ml.pak
                                  • Size 57KB
                                  • SHA256 5d3e9ab2fe6f3bb315775244e00ec32e297185f2c6068abbbbd591cfccd4b303
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  mr.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\mr.pak
                                  • Size 115KB
                                  • SHA256 eda22c10c1c96c554bb1c80a591081757118a1d3a31bec8b895472dce68b8e42
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  nb.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\nb.pak
                                  • Size 58KB
                                  • SHA256 e9537e61eaf2600d8cb84c09f218233f9a8bbba2aae9596bc72be048df8145dd
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  nl.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\nl.pak
                                  • Size 1KB
                                  • SHA256 9b1978d2b7e94ce4823fc21fdfbb91123f9c823f68a962a9c46da6203f15e311
                                  • MD5 SHA1 SHA512
                                  Submit Download

                                  pl.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\pl.pak
                                  • Size 19KB
                                  • SHA256 e56e77b0e0d9fb4ec767e9a31ead2437bd69b93bf434917359fde2fa06346e46
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  pt-BR.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\pt-BR.pak
                                  • Size 98KB
                                  • SHA256 0eca10cb9e6cc5733c2bf8d2d0cbd3cea53ea8d616f18b323fe9831f04c2ac66
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  pt-PT.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\pt-PT.pak
                                  • Size 180KB
                                  • SHA256 c0b456ec55e67ba76dacca0c930fdcd6b362dae36b883f7cbfe2647e7d9c9ef2
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  ro.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\ro.pak
                                  • Size 92KB
                                  • SHA256 de672a8f2c8aac9d50e18d786ed834b4ec1f4ba20d54b2bb376a2efd22d30444
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  ru.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\ru.pak
                                  • Size 55KB
                                  • SHA256 a2b2ac1ed168e8f8e7424f267fe3a46aea85f4be3cc54cc9eaf45b1524614b7f
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  sk.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\sk.pak
                                  • Size 172KB
                                  • SHA256 e1be89d159f9b0ea9262986d8dd054fa70d1899d180c540ec1c9bc816c935d76
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  sl.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\sl.pak
                                  • Size 73KB
                                  • SHA256 473dd9984d1d1f9ff71a609d66484a669c8002d3a5fa31f8fbc08cfebf3511d2
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  sv.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\sv.pak
                                  • Size 39KB
                                  • SHA256 50a14d74ab93ba651100b31ebff66dfd628b3d8e21a6c0f87d2eeb7b7889c760
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  sw.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\sw.pak
                                  • Size 92KB
                                  • SHA256 ec0b061d213176cf04500cab9d564dbae23409aa8af671e1e65ff97f35a95844
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  ta.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\ta.pak
                                  • Size 1KB
                                  • SHA256 e309833f031b43ff37168cb392688f5854ab21db534da25a0c55e8823d03c62e
                                  • MD5 SHA1 SHA512
                                  Submit Download

                                  te.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\te.pak
                                  • Size 6KB
                                  • SHA256 22cd000481df76f8f3f13e666aa37aa74b5650112331c0a7e31ec8e470e58d7a
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  th.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\th.pak
                                  • Size 46KB
                                  • SHA256 13380cef8a0d92b0522701645b84bec5d32cc397b391aa08a8e163ad926904bb
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  tr.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\tr.pak
                                  • Size 10KB
                                  • SHA256 fa95de50cddba1c85e2984519aee47ea061ab0b2bfcaa9d666e997f6646ae7cb
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  uk.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\uk.pak
                                  • Size 53KB
                                  • SHA256 338344c74c264d5c7487f8911773d523e8a7c8ae0ed2a0e73ff1411ce51f291a
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  ur.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\ur.pak
                                  • Size 16KB
                                  • SHA256 5d3bbdb200e5bee6517fd50830cbeea50f1864517d3fa44abddf4c4ec4a73b32
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  vi.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\vi.pak
                                  • Size 119KB
                                  • SHA256 94bdcc78a8ab1c70047b4312d2b5829ac991aef6329497af9e22abd8c5fff2d0
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  zh-CN.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\zh-CN.pak
                                  • Size 92KB
                                  • SHA256 315064f42b711d6e330e4a216a61fab64b6cb63597145bd908fdbb2a7ecc6ea1
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  zh-TW.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\locales\zh-TW.pak
                                  • Size 114KB
                                  • SHA256 3c131539902a5fdc3ccf6e90ce3ab8ecf48acec38ffe4cd723edb457f926d2d7
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  resources.pak
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\resources.pak
                                  • Size 303KB
                                  • SHA256 5fbc5bcfaa10f500af91ea08f42e820244dc5c33407f407f780321792d840940
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  app.asar
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\resources\app.asar
                                  • Size 254KB
                                  • SHA256 b16beb5da257ddd05df6a2a075e6e201a89c5589ce307a2c6d2f6b491f353d51
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  elevate.exe
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\resources\elevate.exe
                                  • Size 30KB
                                  • SHA256 339831ad63487c80a2e67da5eb04bfbb8186ad61cca668849a54dc3e5d9951fb
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  snapshot_blob.bin
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\snapshot_blob.bin
                                  • Size 266KB
                                  • SHA256 c1802b29b13663a8890031411270866834246931f71f41397682dd88fa16d485
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  v8_context_snapshot.bin
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\v8_context_snapshot.bin
                                  • Size 211KB
                                  • SHA256 b2d094a074baaf851d8f2cd18d602f5334c6d623a37afdf671aad24b637aae31
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  vk_swiftshader.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\vk_swiftshader.dll
                                  • Size 252KB
                                  • SHA256 131915dc9525bfe6501e65436fb21b5a6a8f0f1ee9b7a4fe94860acb3dbb9183
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  vulkan-1.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\7z-out\vulkan-1.dll
                                  • Size 322KB
                                  • SHA256 249222bb4ced92bbb1fcb8794bb027350d578380d92a1c0e9e88d4adfa08dabd
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  StdUtils.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\StdUtils.dll
                                  • Size 100KB
                                  • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  System.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\System.dll
                                  • Size 12KB
                                  • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download

                                  nsis7z.dll
                                  • Path C:\Users\Admin\AppData\Local\Temp\nsy73EF.tmp\nsis7z.dll
                                  • Size 128KB
                                  • SHA256 845ceab6f308c77b8c085b61c1791aa40170eee9c0f8a5e2ab01ab63a70e585b
                                  • MD5 SHA1 SHA512 SSDEEP
                                  Submit Download