Analysis

  • max time kernel
    49s
  • max time network
    73s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231222-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231222-enlocale:en-usos:windows10-2004-x64system
  • submitted
    13/02/2024, 17:27

General

  • Target
    Lunar Client v3.2.3.exe
  • Size 1.0MB
  • Sample240213-v1rbpsdh2s
  • SHA256 560b03c4ba18e5a443f74a69727db0eabac6f455bb836757d620cc51615a92ea
  • MD5 SHA1 SHA512 SSDEEP
Score
4/10

Malware Config

Signatures

  • Loads dropped DLL 6 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Lunar Client v3.2.3.exe
    "C:\Users\Admin\AppData\Local\Temp\Lunar Client v3.2.3.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1648
    • C:\Windows\SysWOW64\cmd.exe
      cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Lunar Client.exe" | %SYSTEMROOT%\System32\find.exe "Lunar Client.exe"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2032
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Lunar Client.exe"
        3⤵
        • Enumerates processes with tasklist
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:4268
      • C:\Windows\SysWOW64\find.exe
        C:\Windows\System32\find.exe "Lunar Client.exe"
        3⤵
          PID:3496
    • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
      "C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe"
      1⤵
        PID:4224
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "chcp"
          2⤵
            PID:2296
            • C:\Windows\system32\chcp.com
              chcp
              3⤵
                PID:4052
            • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
              "C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\launcher /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\launcher\Crashpad --url=https://f.a.k/e --annotation=_productName=launcher --annotation=_version=3.2.3 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=25.9.8 --initial-client-data=0x528,0x570,0x574,0x4b0,0x578,0x7ff6f8a7d208,0x7ff6f8a7d218,0x7ff6f8a7d228
              2⤵
                PID:2744
              • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
                "C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\launcher" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1872 --field-trial-handle=1876,i,3250297134571219158,383108619572400870,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                2⤵
                  PID:6620
                • C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
                  "C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\launcher" --standard-schemes --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=2064 --field-trial-handle=1876,i,3250297134571219158,383108619572400870,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                  2⤵
                    PID:6580
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe"
                  1⤵
                    PID:6976
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0x11c,0x120,0x124,0xf8,0x128,0x7ffe98fc9758,0x7ffe98fc9768,0x7ffe98fc9778
                      2⤵
                        PID:6992
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1784 --field-trial-handle=1900,i,12185102412272623256,12774533208636845473,131072 /prefetch:2
                        2⤵
                          PID:5484
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2256 --field-trial-handle=1900,i,12185102412272623256,12774533208636845473,131072 /prefetch:8
                          2⤵
                            PID:5560
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2156 --field-trial-handle=1900,i,12185102412272623256,12774533208636845473,131072 /prefetch:8
                            2⤵
                              PID:5504
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3116 --field-trial-handle=1900,i,12185102412272623256,12774533208636845473,131072 /prefetch:1
                              2⤵
                                PID:5592
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3108 --field-trial-handle=1900,i,12185102412272623256,12774533208636845473,131072 /prefetch:1
                                2⤵
                                  PID:5584
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=4700 --field-trial-handle=1900,i,12185102412272623256,12774533208636845473,131072 /prefetch:1
                                  2⤵
                                    PID:5380
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5140 --field-trial-handle=1900,i,12185102412272623256,12774533208636845473,131072 /prefetch:8
                                    2⤵
                                      PID:5228
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5268 --field-trial-handle=1900,i,12185102412272623256,12774533208636845473,131072 /prefetch:8
                                      2⤵
                                        PID:5144
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=5148 --field-trial-handle=1900,i,12185102412272623256,12774533208636845473,131072 /prefetch:8
                                        2⤵
                                          PID:620
                                      • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                                        "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                                        1⤵
                                          PID:7164

                                        Network

                                              MITRE ATT&CK Enterprise v15

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              main.log

                                              • Path C:\Users\Admin\.lunarclient\logs\launcher\main.log
                                              • Size 1KB
                                              • SHA256 ec86b328e4f91c94d887957414122ddfd6230640ce33799ebfd9414183613eea
                                              • MD5 SHA1 SHA512

                                              launcher.json

                                              • Path C:\Users\Admin\.lunarclient\settings\launcher.json
                                              • Size 2B
                                              • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                              • MD5 SHA1 SHA512

                                              Network Persistent State

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                              • Size 1KB
                                              • SHA256 fba04d5b3c30c6f97fa58923d01b40d200c4b62a9fd05e5ecede1e7812098816
                                              • MD5 SHA1 SHA512

                                              TransportSecurity

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
                                              • Size 371B
                                              • SHA256 c0ce1437ec4efc34604f4e6d1fd965d9aa217a3306483e1a56af65d780b76601
                                              • MD5 SHA1 SHA512

                                              Preferences

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
                                              • Size 6KB
                                              • SHA256 9ae910c72d41530e0e5a7cfe338182a8482440dd7e67f490b60dabe85d0da358
                                              • MD5 SHA1 SHA512 SSDEEP

                                              Secure Preferences

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
                                              • Size 15KB
                                              • SHA256 50cc23eff64e41b2479c9989d695e22acc4816e73f204a3931487752b7a69aae
                                              • MD5 SHA1 SHA512 SSDEEP

                                              Local State

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
                                              • Size 239KB
                                              • SHA256 8e785266d34ce66813df841efad2fd6ba8259635e5367c0a5859206dc10e450f
                                              • MD5 SHA1 SHA512 SSDEEP

                                              data_1

                                              • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\ShaderCache\data_1
                                              • Size 264KB
                                              • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                              • MD5 SHA1 SHA512 SSDEEP

                                              D3DCompiler_47.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\D3DCompiler_47.dll
                                              • Size 2.3MB
                                              • SHA256 1206f79010cf434bd722788a6b8e961a01723f74ae64041bf385ca18369553cd
                                              • MD5 SHA1 SHA512 SSDEEP

                                              Lunar Client.exe

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
                                              • Size 1.7MB
                                              • SHA256 c28f93ab8e7aeb4b2576635e641075cf6d9015413d41471622f5e8276625faf9
                                              • MD5 SHA1 SHA512 SSDEEP

                                              Lunar Client.exe

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
                                              • Size 1.6MB
                                              • SHA256 3f510c455c95c5aea22370820059136d90374a84e40148e05b5662f390ff9d29
                                              • MD5 SHA1 SHA512 SSDEEP

                                              Lunar Client.exe

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
                                              • Size 4.3MB
                                              • SHA256 d59401d6ade7d3ed020506d173a75ca0e2b75ad9275793fd2a7a918f5716339f
                                              • MD5 SHA1 SHA512 SSDEEP

                                              Lunar Client.exe

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
                                              • Size 4.5MB
                                              • SHA256 ce6cd3e2d58ff2723f0817f460199bcc2464942115b07c53fd3facfa3a3caba2
                                              • MD5 SHA1 SHA512 SSDEEP

                                              Lunar Client.exe

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\Lunar Client.exe
                                              • Size 960KB
                                              • SHA256 17156a6c8b74baddbce09df6ab515bee8a6bfafdac01de4f861436f3210f3bf1
                                              • MD5 SHA1 SHA512 SSDEEP

                                              chrome_100_percent.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\chrome_100_percent.pak
                                              • Size 132KB
                                              • SHA256 99ca6947d97df212e45782bbd5d97bfb42112872e1c42bab4209ceedf66dc760
                                              • MD5 SHA1 SHA512 SSDEEP

                                              d3dcompiler_47.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\d3dcompiler_47.dll
                                              • Size 1.7MB
                                              • SHA256 14a57f632ac58d1840b68f4575a132f505fca3cd13f3e5fd40acc259c3505fed
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ffmpeg.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll
                                              • Size 1.8MB
                                              • SHA256 8e0d084358ffdacb461d9e26a58effeb17a92db91f3259185a8c14c48e3dcafa
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ffmpeg.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll
                                              • Size 1.4MB
                                              • SHA256 fa0acc5f05e7b37c5ed76253d60fbef4529a9ca3374ee90a9956f30fbc2cb452
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ffmpeg.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\ffmpeg.dll
                                              • Size 1024KB
                                              • SHA256 3df8399b54c33e88d5aaeb2e6410089d9e28cf81df7544c589b60f2024133774
                                              • MD5 SHA1 SHA512 SSDEEP

                                              icudtl.dat

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\icudtl.dat
                                              • Size 3.4MB
                                              • SHA256 c8ccd3a8a9f8b41e317799c30d42d9e1f2404af5496f995eb6004116cafd7bf7
                                              • MD5 SHA1 SHA512 SSDEEP

                                              libGLESv2.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\libGLESv2.dll
                                              • Size 1.9MB
                                              • SHA256 259d5e27212dffe8f50fdb2e9d97b8f0f24e50f68402dd473623ec4f56d5fcc9
                                              • MD5 SHA1 SHA512 SSDEEP

                                              libglesv2.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\libglesv2.dll
                                              • Size 1.7MB
                                              • SHA256 d44b25c3238f30a16b8966ff70373da4b4a1d9da69d67cce87f8422ad9cd5b69
                                              • MD5 SHA1 SHA512 SSDEEP

                                              resources.pak

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\resources.pak
                                              • Size 2.4MB
                                              • SHA256 83d6c498ed499988a9125a3bec56d6839df8751f7e72ed035d03180cdbfd5407
                                              • MD5 SHA1 SHA512 SSDEEP

                                              app.asar

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\resources\app.asar
                                              • Size 3.2MB
                                              • SHA256 4d58ba6d8bf1eec08f49c49748b6d84fedcd622131a26a70d8931588244c6167
                                              • MD5 SHA1 SHA512 SSDEEP

                                              vk_swiftshader.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\vk_swiftshader.dll
                                              • Size 1.5MB
                                              • SHA256 9459203008988736ea5384dc39f30e717c334675f3ffaa8ffe7d62ec924c0a61
                                              • MD5 SHA1 SHA512 SSDEEP

                                              vk_swiftshader.dll

                                              • Path C:\Users\Admin\AppData\Local\Programs\launcher\vk_swiftshader.dll
                                              • Size 1.9MB
                                              • SHA256 7ddb6a113e4cc2f5ee50b760d6ec7f95421025250e3ef0398c3eee44e82e3f3f
                                              • MD5 SHA1 SHA512 SSDEEP

                                              3c77d78b-b3b7-4081-a5ba-5987dc92d365.tmp.node

                                              • Path C:\Users\Admin\AppData\Local\Temp\3c77d78b-b3b7-4081-a5ba-5987dc92d365.tmp.node
                                              • Size 259KB
                                              • SHA256 7031bf1b506c31245a6505722a4be79684bca41ea65b271b314d4466032530b9
                                              • MD5 SHA1 SHA512 SSDEEP

                                              LICENSE.electron.txt

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\LICENSE.electron.txt
                                              • Size 1KB
                                              • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                                              • MD5 SHA1 SHA512

                                              LICENSES.chromium.html

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\LICENSES.chromium.html
                                              • Size 4.6MB
                                              • SHA256 6d27285c76a712c3960f51e1844bb12d3d89272454facbff7b070e92f308382b
                                              • MD5 SHA1 SHA512 SSDEEP

                                              Lunar Client.exe

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\Lunar Client.exe
                                              • Size 14.7MB
                                              • SHA256 7f71022a5e233a591b0cbd4c037cb391a07a3db309b575fb12e889e05a4a28d1
                                              • MD5 SHA1 SHA512 SSDEEP

                                              chrome_200_percent.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\chrome_200_percent.pak
                                              • Size 191KB
                                              • SHA256 cb4fd141a5c4d188a3ecb203e9d41a3afca648724160e212289adcac666fbff4
                                              • MD5 SHA1 SHA512 SSDEEP

                                              d3dcompiler_47.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\d3dcompiler_47.dll
                                              • Size 4.7MB
                                              • SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ffmpeg.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\ffmpeg.dll
                                              • Size 2.7MB
                                              • SHA256 e1ab367644f72ebcdc8eb3fcfe829ff51719559ac2a43a1600e712b16871ad65
                                              • MD5 SHA1 SHA512 SSDEEP

                                              icudtl.dat

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\icudtl.dat
                                              • Size 7.9MB
                                              • SHA256 74cde512559dd05d4ad7436161cb133d7d000c79fc472916fe51ccd644f96015
                                              • MD5 SHA1 SHA512 SSDEEP

                                              libEGL.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\libEGL.dll
                                              • Size 469KB
                                              • SHA256 e142752e073c0051a0beb963981af70263ed673959515545521a7941d3230838
                                              • MD5 SHA1 SHA512 SSDEEP

                                              libGLESv2.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\libGLESv2.dll
                                              • Size 4.8MB
                                              • SHA256 18bb30d83549a500144ce180d7280b32158d90eb08b3091dc09993f19570fbcc
                                              • MD5 SHA1 SHA512 SSDEEP

                                              af.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\af.pak
                                              • Size 381KB
                                              • SHA256 7bb75adef02d28819f1bd3b42fa46ed56d6dfbeae072341997b09b8c1f52d8dc
                                              • MD5 SHA1 SHA512 SSDEEP

                                              am.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\am.pak
                                              • Size 619KB
                                              • SHA256 685ecdff01d4ae92be1d900ef00fd8632616bc41f18a56e682528f312d4a5167
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ar.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\ar.pak
                                              • Size 680KB
                                              • SHA256 acc1b352ea206c25afe88a614346b468f4f78bf23f886883a38dae905d121dc0
                                              • MD5 SHA1 SHA512 SSDEEP

                                              bg.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\bg.pak
                                              • Size 706KB
                                              • SHA256 3fd27d562e32f1a052e924b6c468486acf0b2af42dd1ad2270e83d115d4b3f65
                                              • MD5 SHA1 SHA512 SSDEEP

                                              bn.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\bn.pak
                                              • Size 911KB
                                              • SHA256 2bb70dc94361267e755169dde430ea31aa21b4daf31b5eed78901b27bc596a2e
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ca.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\ca.pak
                                              • Size 430KB
                                              • SHA256 02d60b97f70c31f5c5003108321fc3ac3c79bf39a36392c3adaf7735b9cc1c1d
                                              • MD5 SHA1 SHA512 SSDEEP

                                              cs.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\cs.pak
                                              • Size 441KB
                                              • SHA256 c1020222b90558a6a8a07f24756b183594641ef77562d35e7899e1489d0ebd8e
                                              • MD5 SHA1 SHA512 SSDEEP

                                              da.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\da.pak
                                              • Size 400KB
                                              • SHA256 dab543bcc1a8abf057f720f9f448e45ca5cfd1c424826bce8933174bb2eccad7
                                              • MD5 SHA1 SHA512 SSDEEP

                                              de.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\de.pak
                                              • Size 427KB
                                              • SHA256 6283ec48cddd08c387a36ec71fff87c2ab0ef27449e8971eba2d76a6136b1708
                                              • MD5 SHA1 SHA512 SSDEEP

                                              el.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\el.pak
                                              • Size 775KB
                                              • SHA256 87f0a26d73fea2ebb5017a95e937e08d7c347baecbe93514c1b866c1e28dea32
                                              • MD5 SHA1 SHA512 SSDEEP

                                              en-GB.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\en-GB.pak
                                              • Size 348KB
                                              • SHA256 914b7bec10c1e8c2a9e461edaa498b2b344aadc130a30321d4116ce0c4c99ad3
                                              • MD5 SHA1 SHA512 SSDEEP

                                              en-US.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\en-US.pak
                                              • Size 351KB
                                              • SHA256 69c1a2e1b30d83612decf1a8dd7b124a04f58e9f2465876726f02f7f7d5eb54a
                                              • MD5 SHA1 SHA512 SSDEEP

                                              es-419.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\es-419.pak
                                              • Size 425KB
                                              • SHA256 5fcf21564ceec93eb64d2002de165a55c1875859975e0bf9035cbe96f258b50d
                                              • MD5 SHA1 SHA512 SSDEEP

                                              es.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\es.pak
                                              • Size 425KB
                                              • SHA256 468e0143c978a948c62d4a3dc743099a4147d39773a6112b303692d0e335810e
                                              • MD5 SHA1 SHA512 SSDEEP

                                              et.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\et.pak
                                              • Size 384KB
                                              • SHA256 41883af1e49cc180fb48e02659e75b0169d974d77373cf7bb2a4ea02dd654e26
                                              • MD5 SHA1 SHA512 SSDEEP

                                              fa.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\fa.pak
                                              • Size 629KB
                                              • SHA256 9068dc6c71fd8bbc1a4f3b2009689472d1fd2c096b7e8afb3e089a46b98d8b38
                                              • MD5 SHA1 SHA512 SSDEEP

                                              fi.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\fi.pak
                                              • Size 392KB
                                              • SHA256 052a72c9d6f2bb55f02fb1c5c4c68525a32b8cc9120c270d07d7b813d604f7dc
                                              • MD5 SHA1 SHA512 SSDEEP

                                              fil.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\fil.pak
                                              • Size 442KB
                                              • SHA256 e8f03c2e9c88adb04648ef93f9ea3cff87641638ac97c9a6752b751e7f7a8a20
                                              • MD5 SHA1 SHA512 SSDEEP

                                              fr.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\fr.pak
                                              • Size 459KB
                                              • SHA256 cd21cae54eb6cb115771d1afe14d17822e13332759f8710d6386a6e4277c11c8
                                              • MD5 SHA1 SHA512 SSDEEP

                                              gu.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\gu.pak
                                              • Size 886KB
                                              • SHA256 0f0fee8a2f22f80a0c4a758e7f4fd90d40be4048dcab0d824135caa5e92efd5d
                                              • MD5 SHA1 SHA512 SSDEEP

                                              he.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\he.pak
                                              • Size 549KB
                                              • SHA256 ad20b3d634130c247f4ff954f1a5c56687523e5610f2ec6085e257126c4513a4
                                              • MD5 SHA1 SHA512 SSDEEP

                                              hi.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\hi.pak
                                              • Size 928KB
                                              • SHA256 71830814b8c7028a114a53a4e715ffa8da12f01d920455242a0cbc35fef48e6b
                                              • MD5 SHA1 SHA512 SSDEEP

                                              hr.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\hr.pak
                                              • Size 428KB
                                              • SHA256 08fc2b1e6b9652d809a7550f1343b3ee54ebcbad0fe74b009aab6ef926c0279b
                                              • MD5 SHA1 SHA512 SSDEEP

                                              hu.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\hu.pak
                                              • Size 460KB
                                              • SHA256 ca4b4c7c7be45ea0871abf7d5668ab948f712a02facdc1d6bbc189b1b3522446
                                              • MD5 SHA1 SHA512 SSDEEP

                                              id.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\id.pak
                                              • Size 377KB
                                              • SHA256 bd512e36a88f0d7e6fecc0b559adb2761589947fef9c253dc350cd8d6ea889f2
                                              • MD5 SHA1 SHA512 SSDEEP

                                              it.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\it.pak
                                              • Size 417KB
                                              • SHA256 95bbf94625cf0476124763cebedcf5ee46148bb6b5c006f86540a02e8d8c883c
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ja.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\ja.pak
                                              • Size 510KB
                                              • SHA256 88383ddccacb53f3ce5918cd80b5dafb16b3cf1fab295e230cc15490600615e4
                                              • MD5 SHA1 SHA512 SSDEEP

                                              kn.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\kn.pak
                                              • Size 1023KB
                                              • SHA256 0c8e0b6a8398d7b9ab9cac634e4a7ce4453540358e79ac6e9c5633efb4182fe9
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ko.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\ko.pak
                                              • Size 429KB
                                              • SHA256 56100d20a59fe6cb333f57ffdef90157324ae1b90194e852478daa8c46d29de9
                                              • MD5 SHA1 SHA512 SSDEEP

                                              lt.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\lt.pak
                                              • Size 463KB
                                              • SHA256 ecb4ecbd96575f6f984f60e85ab1ebb0067e73174ff9912941ee1aaa28516d93
                                              • MD5 SHA1 SHA512 SSDEEP

                                              lv.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\lv.pak
                                              • Size 461KB
                                              • SHA256 dfb9b5ee446977dc0435cff4d66402d3a9426edb106effdbb7d86379527c5956
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ml.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\ml.pak
                                              • Size 1.0MB
                                              • SHA256 a7afb3ebfa8f4d2e35dfdd5554ff2702182e73dad0fd82f8b4207a61563ed134
                                              • MD5 SHA1 SHA512 SSDEEP

                                              mr.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\mr.pak
                                              • Size 870KB
                                              • SHA256 436efbdbce605c23f855644a9ff1b04d9a3eca37de3b18de8c3e589930d54096
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ms.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\ms.pak
                                              • Size 395KB
                                              • SHA256 163eb7ba5f0c61acb6443709c24e38ca6370a33f89a12e13d0a57c258a87ca16
                                              • MD5 SHA1 SHA512 SSDEEP

                                              nb.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\nb.pak
                                              • Size 386KB
                                              • SHA256 29f38d3720c948fd261a2aea7d195e861a73a1313071bd2cbf1ebcbba77c63e6
                                              • MD5 SHA1 SHA512 SSDEEP

                                              nl.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\nl.pak
                                              • Size 398KB
                                              • SHA256 3c682e37df71cc036c2b5e91064407fed8091c0306a856121e28c19e7110e1e4
                                              • MD5 SHA1 SHA512 SSDEEP

                                              pl.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\pl.pak
                                              • Size 444KB
                                              • SHA256 d52358b8fd70f1f18b3f8ecc4aa9c791591dbb698ef8d8670312e50f024db451
                                              • MD5 SHA1 SHA512 SSDEEP

                                              pt-BR.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\pt-BR.pak
                                              • Size 419KB
                                              • SHA256 b4e0a6064dcfe876c819ec4b00f9857b84ff52cd3e845bd0c48e31ad43a23db9
                                              • MD5 SHA1 SHA512 SSDEEP

                                              pt-PT.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\pt-PT.pak
                                              • Size 420KB
                                              • SHA256 342381f89058bedd809991a0b416f48642df3c71aea10bb13e13bc15eaaf46c8
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ro.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\ro.pak
                                              • Size 434KB
                                              • SHA256 b7b56396806412ac1721d2648fa98a89a069d1f58d359d8e90dd1c6b8473b9a2
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ru.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\ru.pak
                                              • Size 711KB
                                              • SHA256 c5264fa2b485326e91d4df7a6e39122554ed632c0c17fa1f130205ed50e2d6b9
                                              • MD5 SHA1 SHA512 SSDEEP

                                              sk.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\sk.pak
                                              • Size 448KB
                                              • SHA256 04b179b5c3a5468f495a0620a2dbc6e312ebd76ba32b98d8cc7daafb46edc21e
                                              • MD5 SHA1 SHA512 SSDEEP

                                              sl.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\sl.pak
                                              • Size 433KB
                                              • SHA256 b36e1fe2405cc4b9f34587e30da2feadaa6f03124769b02f79333adacaddb49b
                                              • MD5 SHA1 SHA512 SSDEEP

                                              sr.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\sr.pak
                                              • Size 666KB
                                              • SHA256 b75a222db70c3f5734a75042718da599881d5e84cc52b332e9162f78b32f4819
                                              • MD5 SHA1 SHA512 SSDEEP

                                              sv.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\sv.pak
                                              • Size 389KB
                                              • SHA256 110112c2f7ff5d3c8599036669d156e96ec19e70515fbba3bbcb2043ab994680
                                              • MD5 SHA1 SHA512 SSDEEP

                                              sw.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\sw.pak
                                              • Size 408KB
                                              • SHA256 7a5d056fd317b7b60a4fbf0df39dfdd21829f2245393a21e1ddccf1a4e3b61fe
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ta.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\ta.pak
                                              • Size 1.0MB
                                              • SHA256 9cd624a97493282afed3b9b1e848b12639234fa54c04b22128169924f9c92777
                                              • MD5 SHA1 SHA512 SSDEEP

                                              te.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\te.pak
                                              • Size 973KB
                                              • SHA256 11df9eaa9216b091fab01f66fd77bcb17c0bea0db3ea7a803bdf5dc6c6e18322
                                              • MD5 SHA1 SHA512 SSDEEP

                                              th.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\th.pak
                                              • Size 817KB
                                              • SHA256 610a440605110f1aa18b1134d116c66cd2050da53e0360924a3171d0850c27fc
                                              • MD5 SHA1 SHA512 SSDEEP

                                              tr.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\tr.pak
                                              • Size 415KB
                                              • SHA256 26fd3317bedd4080038d7a0003d73923fc0edd40283ef11b5ba80bb27f946c13
                                              • MD5 SHA1 SHA512 SSDEEP

                                              uk.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\uk.pak
                                              • Size 711KB
                                              • SHA256 0523b68c3320674d1565dedaf0436ec821a7175a34ac673338d6447aab20fd7a
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ur.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\ur.pak
                                              • Size 622KB
                                              • SHA256 578aef61fc8b5c2e0f3765b1487f8af9f72f6506050d501fec9edcbf93c7a3e4
                                              • MD5 SHA1 SHA512 SSDEEP

                                              vi.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\vi.pak
                                              • Size 492KB
                                              • SHA256 326e44c27579796e4b55cc281c3e4c9bf5ad7aa87156530709cd6296350758af
                                              • MD5 SHA1 SHA512 SSDEEP

                                              zh-CN.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\zh-CN.pak
                                              • Size 357KB
                                              • SHA256 b33b23552f8f76aa43671556676298c0af54641e9f1de27a8208750148e737ca
                                              • MD5 SHA1 SHA512 SSDEEP

                                              zh-TW.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\locales\zh-TW.pak
                                              • Size 353KB
                                              • SHA256 69d888be9d5affc6086e901cf52936477101374abd8186f8e8f6cc38af826691
                                              • MD5 SHA1 SHA512 SSDEEP

                                              resources.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\resources.pak
                                              • Size 5.0MB
                                              • SHA256 0c967cb604d5066f1ab609e81895c1271475a2e1b4b3d5930eea720fc218781b
                                              • MD5 SHA1 SHA512 SSDEEP

                                              app-update.yml

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\resources\app-update.yml
                                              • Size 175B
                                              • SHA256 9161bcc9763091ff3670ef98eff99d004c0f67f13b5dd94715c661fae274cf33
                                              • MD5 SHA1 SHA512

                                              app.asar

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\resources\app.asar
                                              • Size 6.6MB
                                              • SHA256 3e08b5edc529edaa8b69aed7808a1f7522b6487119447e9672549fe1b83d3ee9
                                              • MD5 SHA1 SHA512 SSDEEP

                                              elevate.exe

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\resources\elevate.exe
                                              • Size 115KB
                                              • SHA256 e439b50cdf14e2e9fe147a0d819ab8e675151f60f91c5c356cccd42edf4b22aa
                                              • MD5 SHA1 SHA512 SSDEEP

                                              snapshot_blob.bin

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\snapshot_blob.bin
                                              • Size 253KB
                                              • SHA256 c1c9145735032bff20b2fff50a4b92ae9cf47290f433e3f3b32e3b232d610c59
                                              • MD5 SHA1 SHA512 SSDEEP

                                              v8_context_snapshot.bin

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\v8_context_snapshot.bin
                                              • Size 564KB
                                              • SHA256 5b1f69f39f3d5865dce13ee3bdbc1af2938f5cc4c056dc9f9e213e9af346ad4b
                                              • MD5 SHA1 SHA512 SSDEEP

                                              vk_swiftshader.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\vk_swiftshader.dll
                                              • Size 5.0MB
                                              • SHA256 2df870c1719ab057ea37aa15e3e379360c1dd8eaea2eaa56cb7b026f5ee4f19f
                                              • MD5 SHA1 SHA512 SSDEEP

                                              vk_swiftshader_icd.json

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\vk_swiftshader_icd.json
                                              • Size 106B
                                              • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                              • MD5 SHA1 SHA512

                                              vulkan-1.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\7z-out\vulkan-1.dll
                                              • Size 910KB
                                              • SHA256 5789ca1822f3a5a67cd2c24e6ff0307e688b76a2e99831050bdcf8b8d155956d
                                              • MD5 SHA1 SHA512 SSDEEP

                                              INetC.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\INetC.dll
                                              • Size 238KB
                                              • SHA256 ed04a4823f221e9197b8f3c3da1d6859ff5b176185bde2f1c923a442516c810a
                                              • MD5 SHA1 SHA512 SSDEEP

                                              SpiderBanner.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\SpiderBanner.dll
                                              • Size 9KB
                                              • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
                                              • MD5 SHA1 SHA512 SSDEEP

                                              StdUtils.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\StdUtils.dll
                                              • Size 100KB
                                              • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                                              • MD5 SHA1 SHA512 SSDEEP

                                              System.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\System.dll
                                              • Size 12KB
                                              • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                                              • MD5 SHA1 SHA512 SSDEEP

                                              WinShell.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\WinShell.dll
                                              • Size 3KB
                                              • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                                              • MD5 SHA1 SHA512

                                              nsExec.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\nsExec.dll
                                              • Size 6KB
                                              • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
                                              • MD5 SHA1 SHA512 SSDEEP

                                              nsis7z.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\nsis7z.dll
                                              • Size 424KB
                                              • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                                              • MD5 SHA1 SHA512 SSDEEP

                                              package.7z

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsw5787.tmp\package.7z
                                              • Size 4.6MB
                                              • SHA256 fb2df78601a1586e0bad029334f81d2610ef74b92a49241f432d9a25bdc307cf
                                              • MD5 SHA1 SHA512 SSDEEP

                                              default.exc

                                              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                                              • Size 2B
                                              • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                              • MD5 SHA1 SHA512

                                              8e57231d3a4a42da9e97f2a6c4b0c356

                                              • Path C:\Users\Admin\AppData\Roaming\launcher\sentry\queue\8e57231d3a4a42da9e97f2a6c4b0c356
                                              • Size 6KB
                                              • SHA256 c16b054c3e2cb1dd6d6b6883c977a1bb7698ac50edbfbe50dd281ee725e30929
                                              • MD5 SHA1 SHA512 SSDEEP