rhadamanthys | hxxps://github[.]com/vova-20007/Nitro-Generator-3Months/releases/download/Nitro/Nitro-Generator-Set[.]up[.]exe

Analysis

max time kernel
606s
max time network
610s
platform
windows10-2004_x64
resource
win10v2004-20240221-en
resource tags

arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
submitted
22/02/2024, 15:22

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://github.com/vova-20007/Nitro-Generator-3Months/releases/download/Nitro/Nitro-Generator-Set.up.exe
Sample240222-sr4vbsca86

Score

10^/10

rhadamanthys discovery stealer

Malware Config

Signatures

Rhadamanthys
Rhadamanthys is an info stealer written in C++ first seen in August 2022.
stealer rhadamanthys

Suspicious use of NtCreateUserProcessOtherParentProcess 2 IoCs

description	pid	Process	procid_target
PID 3728 created 2444	3728	RegAsm.exe	62
PID 4488 created 2444	4488	RegAsm.exe	62

Downloads MZ/PE file

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3538781373-1545967067-4263767959-1000\Control Panel\International\Geo\Nation	Launcher.exe
Key value queried	\REGISTRY\USER\S-1-5-21-3538781373-1545967067-4263767959-1000\Control Panel\International\Geo\Nation	Launcher.exe

Executes dropped EXE 10 IoCs

pid	Process
2216	Nitro-Generator-Set.up (2).exe
1912	Nitro-Generator-Set.up (2).exe
1976	Nitro-Generator-Set.up (2).exe
2068	Launcher.exe
2812	Launcher.exe
3044	Launcher.exe
1736	Launcher.exe
1412	Launcher.exe
1400	Launcher7.exe
4404	Launcher2.exe

Loads dropped DLL 19 IoCs

pid	Process
1912	Nitro-Generator-Set.up (2).exe
2216	Nitro-Generator-Set.up (2).exe
1912	Nitro-Generator-Set.up (2).exe
1912	Nitro-Generator-Set.up (2).exe
1912	Nitro-Generator-Set.up (2).exe
1912	Nitro-Generator-Set.up (2).exe
1976	Nitro-Generator-Set.up (2).exe
1912	Nitro-Generator-Set.up (2).exe
1912	Nitro-Generator-Set.up (2).exe
2068	Launcher.exe
2812	Launcher.exe
3044	Launcher.exe
1736	Launcher.exe
2812	Launcher.exe
2812	Launcher.exe
2812	Launcher.exe
2812	Launcher.exe
1412	Launcher.exe
1412	Launcher.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Suspicious use of SetThreadContext 2 IoCs

description	pid	Process	procid_target
PID 1400 set thread context of 3728	1400	Launcher7.exe	147
PID 4404 set thread context of 4488	4404	Launcher2.exe	148

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Program crash 4 IoCs

pid	pid_target	Process	procid_target
1460	3728	WerFault.exe	147
4472	4488	WerFault.exe	148
3052	3728	WerFault.exe	147
996	4488	WerFault.exe	148

Enumerates processes with tasklist 1 TTPs 1 IoCs

Process Discovery

T1057

pid	Process
884	tasklist.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe

Modifies registry class 1 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-3538781373-1545967067-4263767959-1000_Classes\Local Settings	msedge.exe

Modifies system certificate store 2 TTPs 8 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8	Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 0400000001000000100000000cd2f9e0da1773e9ed864da5e370e74e14000000010000001400000079b459e67bb6e5e40173800888c81a58f6e99b6e030000000100000014000000cabd2a79a1076a31f21d253635cb039d4329a5e80f00000001000000200000003f0411ede9c4477057d57e57883b1f205b20cdc0f3263129b1ee0269a2678f631900000001000000100000002fe1f70bb05d7c92335bc5e05b984da620000000010000006f0500003082056b30820353a0030201020211008210cfb0d240e3594463e0bb63828b00300d06092a864886f70d01010b0500304f310b300906035504061302555331293027060355040a1320496e7465726e65742053656375726974792052657365617263682047726f7570311530130603550403130c4953524720526f6f74205831301e170d3135303630343131303433385a170d3335303630343131303433385a304f310b300906035504061302555331293027060355040a1320496e7465726e65742053656375726974792052657365617263682047726f7570311530130603550403130c4953524720526f6f7420583130820222300d06092a864886f70d01010105000382020f003082020a0282020100ade82473f41437f39b9e2b57281c87bedcb7df38908c6e3ce657a078f775c2a2fef56a6ef6004f28dbde68866c4493b6b163fd14126bbf1fd2ea319b217ed1333cba48f5dd79dfb3b8ff12f1219a4bc18a8671694a66666c8f7e3c70bfad292206f3e4c0e680aee24b8fb7997e94039fd347977c99482353e838ae4f0a6f832ed149578c8074b6da2fd0388d7b0370211b75f2303cfa8faeddda63abeb164fc28e114b7ecf0be8ffb5772ef4b27b4ae04c12250c708d0329a0e15324ec13d9ee19bf10b34a8c3f89a36151deac870794f46371ec2ee26f5b9881e1895c34796c76ef3b906279e6dba49a2f26c5d010e10eded9108e16fbb7f7a8f7c7e50207988f360895e7e237960d36759efb0e72b11d9bbc03f94905d881dd05b42ad641e9ac0176950a0fd8dfd5bd121f352f28176cd298c1a80964776e4737baceac595e689d7f72d689c50641293e593edd26f524c911a75aa34c401f46a199b5a73a516e863b9e7d72a712057859ed3e5178150b038f8dd02f05b23e7b4a1c4b730512fcc6eae050137c439374b3ca74e78e1f0108d030d45b7136b407bac130305c48b7823b98a67d608aa2a32982ccbabd83041ba2830341a1d605f11bc2b6f0a87c863b46a8482a88dc769a76bf1f6aa53d198feb38f364dec82b0d0a28fff7dbe21542d422d0275de179fe18e77088ad4ee6d98b3ac6dd27516effbc64f533434f0203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e0416041479b459e67bb6e5e40173800888c81a58f6e99b6e300d06092a864886f70d01010b05000382020100551f58a9bcb2a850d00cb1d81a6920272908ac61755c8a6ef882e5692fd5f6564bb9b8731059d321977ee74c71fbb2d260ad39a80bea17215685f1500e59ebcee059e9bac915ef869d8f8480f6e4e99190dc179b621b45f06695d27c6fc2ea3bef1fcfcbd6ae27f1a9b0c8aefd7d7e9afa2204ebffd97fea912b22b1170e8ff28a345b58d8fc01c954b9b826cc8a8833894c2d843c82dfee965705ba2cbbf7c4b7c74e3b82be31c822737392d1c280a43939103323824c3c9f86b255981dbe29868c229b9ee26b3b573a82704ddc09c789cb0a074d6ce85d8ec9efceabc7bbb52b4e45d64ad026cce572ca086aa595e315a1f7a4edc92c5fa5fbffac28022ebed77bbbe3717b9016d3075e46537c3707428cd3c4969cd599b52ae0951a8048ae4c3907cecc47a452952bbab8fbadd233537de51d4d6dd5a1b1c7426fe64027355ca328b7078de78d3390e7239ffb509c796c46d5b415b3966e7e9b0c963ab8522d3fd65be1fb08c284fe24a8a389daac6ae1182ab1a843615bd31fdc3b8d76f22de88d75df17336c3d53fb7bcb415fffdca2d06138e196b8ac5d8b37d775d533c09911ae9d41c1727584be0241425f67244894d19b27be073fb9b84f817451e17ab7ed9d23e2bee0d52804133c31039edd7a6c8fc60718c67fde478e3f289e0406cfa5543477bdec899be91743df5bdb5ffe8e1e57a2cd409d7e6222dade1827	Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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	Launcher.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13	Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 0f00000001000000140000005bcaa1c2780f0bcb5a90770451d96f38963f012d090000000100000042000000304006082b06010505070302060a2b0601040182370a030c060a2b0601040182370a030406082b0601050507030406082b0601050507030106082b060105050703086200000001000000200000000687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd67707390b000000010000001e000000440053005400200052006f006f0074002000430041002000580033000000140000000100000014000000c4a7b1a47b2c71fadbe14b9075ffc415608589101d00000001000000100000004558d512eecb27464920897de7b660537f000000010000000e000000300c060a2b0601040182370a03047e000000010000000800000000c001b39667d60168000000010000000800000000409120d035d901030000000100000014000000dac9024f54d8f6df94935fb1732638ca6ad77c1320000000010000004e0300003082034a30820232a003020102021044afb080d6a327ba893039862ef8406b300d06092a864886f70d0101050500303f31243022060355040a131b4469676974616c205369676e617475726520547275737420436f2e311730150603550403130e44535420526f6f74204341205833301e170d3030303933303231313231395a170d3231303933303134303131355a303f31243022060355040a131b4469676974616c205369676e617475726520547275737420436f2e311730150603550403130e44535420526f6f7420434120583330820122300d06092a864886f70d01010105000382010f003082010a0282010100dfafe99750088357b4cc6265f69082ecc7d32c6b30ca5becd9c37dc740c118148be0e83376492ae33f214993ac4e0eaf3e48cb65eefcd3210f65d22ad9328f8ce5f777b0127bb595c089a3a9baed732e7a0c063283a27e8a1430cd11a0e12a38b9790a31fd50bd8065dfb7516383c8e28861ea4b6181ec526bb9a2e24b1a289f48a39e0cda098e3e172e1edd20df5bc62a8aab2ebd70adc50b1a25907472c57b6aab34d63089ffe568137b540bc8d6aeec5a9c921e3d64b38cc6dfbfc94170ec1672d526ec38553943d0fcfd185c40f197ebd59a9b8d1dbada25b9c6d8dfc115023aabda6ef13e2ef55c089c3cd68369e4109b192ab62957e3e53d9b9ff0025d0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020106301d0603551d0e04160414c4a7b1a47b2c71fadbe14b9075ffc41560858910300d06092a864886f70d01010505000382010100a31a2c9b17005ca91eee2866373abf83c73f4bc309a095205de3d95944d23e0d3ebd8a4ba0741fce10829c741a1d7e981addcb134bb32044e491e9ccfc7da5db6ae5fee6fde04eddb7003ab57049aff2e5eb02f1d1028b19cb943a5e48c4181e58195f1e025af00cf1b1ada9dc59868b6ee991f586cafab96633aa595bcee2a7167347cb2bcc99b03748cfe3564bf5cf0f0c723287c6f044bb53726d43f526489a5267b758abfe67767178db0da256141339243185a2a8025a3047e1dd5007bc02099000eb6463609b16bc88c912e6d27d918bf93d328d65b4e97cb15776eac5b62839bf15651cc8f677966a0a8d770bd8910b048e07db29b60aee9d82353510	Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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	Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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	Launcher.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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	Launcher.exe

NTFS ADS 5 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 460371.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 321408.crdownload:SmartScreen	msedge.exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 850567.crdownload:SmartScreen	msedge.exe
File created	C:\Users\Admin\AppData\Local\launcher-updater\installer.exe\:SmartScreen:$DATA	Nitro-Generator-Set.up (2).exe
File opened for modification	C:\Users\Admin\Downloads\Unconfirmed 544650.crdownload:SmartScreen	msedge.exe

Suspicious behavior: EnumeratesProcesses 26 IoCs

pid	Process
2892	msedge.exe
2892	msedge.exe
2852	msedge.exe
2852	msedge.exe
4960	identity_helper.exe
4960	identity_helper.exe
2708	msedge.exe
2708	msedge.exe
1912	Nitro-Generator-Set.up (2).exe
1912	Nitro-Generator-Set.up (2).exe
884	tasklist.exe
884	tasklist.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
4384	msedge.exe
1412	Launcher.exe
1412	Launcher.exe
3728	RegAsm.exe
3728	RegAsm.exe
4488	RegAsm.exe
4488	RegAsm.exe
4820	dialer.exe
4820	dialer.exe
4820	dialer.exe
4820	dialer.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 10 IoCs

pid	Process
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	884	tasklist.exe
Token: SeSecurityPrivilege	1912	Nitro-Generator-Set.up (2).exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe
Token: SeShutdownPrivilege	2068	Launcher.exe
Token: SeCreatePagefilePrivilege	2068	Launcher.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe

Suspicious use of SendNotifyMessage 26 IoCs

pid	Process
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2852	msedge.exe
2068	Launcher.exe
2068	Launcher.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 2852 wrote to memory of 1928	2852	msedge.exe	87
PID 2852 wrote to memory of 1928	2852	msedge.exe	87
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 3064	2852	msedge.exe	90
PID 2852 wrote to memory of 2892	2852	msedge.exe	88
PID 2852 wrote to memory of 2892	2852	msedge.exe	88
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89
PID 2852 wrote to memory of 3476	2852	msedge.exe	89

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://github.com/vova-20007/Nitro-Generator-3Months/releases/download/Nitro/Nitro-Generator-Set.up.exe
1⤵
- Enumerates system info in registry
- Modifies registry class
- NTFS ADS
- Suspicious behavior: EnumeratesProcesses
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2852
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xfc,0x100,0x104,0xd8,0x108,0x7ffd3b6546f8,0x7ffd3b654708,0x7ffd3b654718
  2⤵
  PID:1928
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2256 /prefetch:3
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2892
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2756 /prefetch:8
  2⤵
  PID:3476
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2108 /prefetch:2
  2⤵
  PID:3064
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3372 /prefetch:1
  2⤵
  PID:1964
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3388 /prefetch:1
  2⤵
  PID:1136
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5400 /prefetch:8
  2⤵
  PID:1420
- C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\92.0.902.67\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5400 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4960
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4092 /prefetch:1
  2⤵
  PID:2552
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5396 /prefetch:1
  2⤵
  PID:5036
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --disable-client-side-phishing-detection --instant-process --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4784 /prefetch:1
  2⤵
  PID:4452
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:1296
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --service-sandbox-type=collections --mojo-platform-channel-handle=4844 /prefetch:8
  2⤵
  PID:4548
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5888 /prefetch:1
  2⤵
  PID:3080
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6344 /prefetch:8
  2⤵
  PID:1968
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5672 /prefetch:8
  2⤵
  PID:4840
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5768 /prefetch:1
  2⤵
  PID:2280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=6076 /prefetch:8
  2⤵
  PID:1344
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5096 /prefetch:1
  2⤵
  PID:4980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=3456 /prefetch:8
  2⤵
  PID:4464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=24 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5968 /prefetch:1
  2⤵
  PID:1984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5556 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:2708
- C:\Users\Admin\Downloads\Nitro-Generator-Set.up (2).exe
  "C:\Users\Admin\Downloads\Nitro-Generator-Set.up (2).exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2216
- C:\Users\Admin\Downloads\Nitro-Generator-Set.up (2).exe
  "C:\Users\Admin\Downloads\Nitro-Generator-Set.up (2).exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - NTFS ADS
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:1912
- - C:\Windows\SysWOW64\cmd.exe
    cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Launcher.exe" | %SYSTEMROOT%\System32\find.exe "Launcher.exe"
    3⤵
    PID:4384
  - - C:\Windows\SysWOW64\tasklist.exe
      tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Launcher.exe"
      4⤵
      Enumerates processes with tasklist
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:884
  - - C:\Windows\SysWOW64\find.exe
      C:\Windows\System32\find.exe "Launcher.exe"
      4⤵
      PID:4304
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,18404806096609760393,7913533041323770916,131072 --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=UAAAAAAAAADoAAAQAAAAAAAAAAAAAAAAAABgAAAEAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=6060 /prefetch:2
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4384

C:\Windows\system32\sihost.exe
sihost.exe
1⤵
PID:2444
- C:\Windows\SysWOW64\dialer.exe
  "C:\Windows\system32\dialer.exe"
  2⤵
  PID:728
- C:\Windows\SysWOW64\dialer.exe
  "C:\Windows\system32\dialer.exe"
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:4820

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2924

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4980

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2280

C:\Users\Admin\Downloads\Nitro-Generator-Set.up (2).exe
"C:\Users\Admin\Downloads\Nitro-Generator-Set.up (2).exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1976

C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
"C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Modifies system certificate store
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of SendNotifyMessage
PID:2068
- C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1552 --field-trial-handle=1728,i,8422517485399332990,3538503361869697189,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2812
- C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --mojo-platform-channel-handle=2100 --field-trial-handle=1728,i,8422517485399332990,3538503361869697189,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3044
- C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --app-path="C:\Users\Admin\AppData\Local\Programs\Launcher\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2452 --field-trial-handle=1728,i,8422517485399332990,3538503361869697189,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1736
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "Launcher2.exe"
    3⤵
    PID:3444
  - - C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher2.exe
      Launcher2.exe
      4⤵
      Executes dropped EXE
      Suspicious use of SetThreadContext
      PID:4404
    - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
        
        "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
        5⤵
        Suspicious use of NtCreateUserProcessOtherParentProcess
        Suspicious behavior: EnumeratesProcesses
        
        PID:4488
      - C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 4488 -s 608
        6⤵
        Program crash
        
        PID:4472
      - C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 4488 -s 604
        6⤵
        Program crash
        
        PID:996
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "C:\Users\Admin\AppData\Local\Temp\Launcher7.exe"
    3⤵
    PID:3660
  - - C:\Users\Admin\AppData\Local\Temp\Launcher7.exe
      C:\Users\Admin\AppData\Local\Temp\Launcher7.exe
      4⤵
      Executes dropped EXE
      Suspicious use of SetThreadContext
      PID:1400
    - - C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe
        
        "C:\Windows\Microsoft.NET\Framework\v4.0.30319\RegAsm.exe"
        5⤵
        Suspicious use of NtCreateUserProcessOtherParentProcess
        Suspicious behavior: EnumeratesProcesses
        
        PID:3728
      - C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 3728 -s 608
        6⤵
        Program crash
        
        PID:1460
      - C:\Windows\SysWOW64\WerFault.exe
        
        C:\Windows\SysWOW64\WerFault.exe -u -p 3728 -s 576
        6⤵
        Program crash
        
        PID:3052
- C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
  "C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\Launcher" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3648 --field-trial-handle=1728,i,8422517485399332990,3538503361869697189,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:1412

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 408 -p 4488 -ip 4488
1⤵
PID:2540

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 436 -p 3728 -ip 3728
1⤵
PID:5100

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 544 -p 4488 -ip 4488
1⤵
PID:1544

C:\Windows\SysWOW64\WerFault.exe
C:\Windows\SysWOW64\WerFault.exe -pss -s 404 -p 3728 -ip 3728
1⤵
PID:3116

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 f168242e74bfde18bacb9e18945a39bb447188eba916c7adf0f342ed8d82281e
MD5 f4db60c9bb06ea5452df26771fa873ac
SHA1 c118183a1315a285606f81da05fc19367a2cdfe1
SHA512 180ed98f9d5a14a22687a099c4a0ba6b586610f7b8b4c8de89f3b91713b07a2ef3726fcd318cb4e270b1745213b898037d29cca4b490d0c91833b797d69ac406
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 152B
SHA256 562016f9159ef363fcbe62ed13ee26052b31d4f67dc5ea6d60864a7d5dfa50a1
MD5 f5b0bf4edca2187f7715ddd49777a1b2
SHA1 eb78099013d0894a11c48d496f48973585f0c7c0
SHA512 1039b98cffd32ca4c9e37486b96e01b167d76b19dd8440a21da4932d677c463f4c5ce2260239e8337f59bd61ff3111905e23ab71d3ca5b20e7d2935fea7952c9
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 111B
SHA256 aa10bf07b0d265bed28f2a475f3564d8ddb5e4d4ffee0ab6f3a0cc564907b631
MD5 807419ca9a4734feaf8d8563a003b048
SHA1 a723c7d60a65886ffa068711f1e900ccc85922a6
SHA512 f10d496ae75db5ba412bd9f17bf0c7da7632db92a3fabf7f24071e40f5759c6a875ad8f3a72bad149da58b3da3b816077df125d0d9f3544adba68c66353d206c
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State
Size 265B
SHA256 79a078c39145a1dc1c27c15f05bb7a39bdaf7aec14fd85a2dcfd36b95a3f5b36
MD5 ee77ee0ddce6df6a4cf39b6d19ea6b4c
SHA1 d5407a3c365266b7a794e647bc17ed9e06b4389f
SHA512 1841689b05aab9ba73ac48bb390c148e92d218b07da6b89bbec900bcb84055fe2080115545933d495f6e8f2506497af930fbab1c68cf65ff080f2d5a61b30eeb
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 877ca6409c60d5e5ac42fffcc127ff08d9e4460b893fa7c6d099fa9927849f61
MD5 511b7e39f4ae57a8ce1802049a4b72f2
SHA1 95767990ae67918648473940daf10cc73e2d6b00
SHA512 52b1039a38a7af95417236f83d85f12cc4f93fda4972a6a4fb6580e2611e58d8143dfb505ef031564986f16b6c2fb2eeb703cad23dabac33acfe2ee2a84060ec
SSDEEP 96:nik8sQxSxm/FnmqG1ncS/wpvWMoiVmdeHlHfnW0UWQyV+VD7AiEwb:nikAP89WcGWMXlvW0rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 dccb20c2f22ecc6d0df9f8b2d227c6af6b459aa517ca06bde3a5143e046af4c1
MD5 bc2c78f1395b6ebca3cf00b22a1a276a
SHA1 ed412b60879b5e37343245647390cf0d446351b2
SHA512 01b64cbacc9cd032710f9e55d1e8da8c4a726ea8c3bf5771b89b6f481f6b2d5a589a379c6c557de23c0c150c5318c78fd5bc5d7bc2b404dc21ef399158fcffde
SSDEEP 96:nikzSxm/FQYmqG1ncS/wpvWMoiVmdeHlHfnW0UWQyV+VD7ziEwb:nikzPO9WcGWMXlvW0rt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 6KB
SHA256 bd95d2a93fb07e7ee02ef0c0cace8f126aacf8579d641f671aa1d3ea267de958
MD5 d41136287d60dee5cd50f36d92843ad9
SHA1 a74125dfba28d36c45b0248845a01911a4706882
SHA512 161d69d46dcb27fb9d5ac821a767e1803aa387bc086ea0b5c52e8edb4d63231c34994fc05b67edf15ab4d38e5234158bafe1ee0bb20621b62122d956c699383d
SSDEEP 96:nik8sQxSxm/FnmqG1nIS/wpvWMoiVmdeHlHfnW0UWQyV+VD7AiEwb:nikAP89OcGWMXlvW0rg
MD5 SHA1 SHA512 SSDEEP

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 203B
SHA256 87450818155ea98d64eebce82eba717df288f1f2e4d932de16daed60f8e0c455
MD5 9d77053853c79b387403c03af66ea911
SHA1 bc173b83b06510fa158ef3ab36c3f6bae6f1f5de
SHA512 6e2e4b21bc60c07677c088d91590fe0b1c796f73a48ed81d3bb2c814b89bc3141aec207b7cd0e1a3fa30197c240aca09b1de1df8ada7de38bd5961d1df7b0b3e
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 203B
SHA256 3c409e88d9644d95c77b52f4a6674d0f25baa77aad6deb19e480243fae68507e
MD5 726a6538ad4f69a0629b4779ff6e6790
SHA1 e9a98710f7bb161f33b0b3dd82b95b8103e20ee3
SHA512 eb40cd87a6507a7ab1b116e6a1ccaf8cce18a54ce45502bc1b12e124df4b61a5825d69ef07ebf4289b0307886158ea4edfa146a7712976398f795d8ad861532a
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity
Size 203B
SHA256 4c98afc755fb022348f27382958fbc7c1dd7173e8e1fe81312652c52f577cd2f
MD5 02395fea16d08ba15ca02803f247c2e5
SHA1 a0a897f1c30949e68d7c0aa662a9806544ef928a
SHA512 be376b34040670537b8227c546c6d8e1409d8078c01c8f64175f627da24e30d3ac153f87ebe97940161f957e31147c0229bc0ca7bb31fc457a5a08914e0bfa0e
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe57fec3.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe57fec3.TMP
Size 203B
SHA256 9c454613dece10102b8b8f9dc005d842008f18deff43e0f0713967f79652422d
MD5 6c02246d7740d00dd29060826ea62643
SHA1 6f8acfeaca0e3bb27725a59fda8a835ea11903fb
SHA512 f6cd1726d6fbf6c93ae4c02f6986dd9592724db1251ecab67060c1df0037413b7b7791e41f28b6d361b287d9d05925898c9c8fa264ffc943930797c5abb96efe
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\data_reduction_proxy_leveldb\CURRENT
Size 16B
SHA256 0861415cada612ea5834d56e2cf1055d3e63979b69eb71d32ae9ae394d8306cd
MD5 6752a1d65b201c13b62ea44016eb221f
SHA1 58ecf154d01a62233ed7fb494ace3c3d4ffce08b
SHA512 9cfd838d3fb570b44fc3461623ab2296123404c6c8f576b0de0aabd9a6020840d4c9125eb679ed384170dbcaac2fa30dc7fa9ee5b77d6df7c344a0aa030e0389
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 11KB
SHA256 564b2535db0f9e2e546eb84034774ff280df034f9daf2afa1b5e45fcd6a2227d
MD5 d66fe924cb27a6cc66eb70712aaa305e
SHA1 815dd6337c0e8f7731e5f297443e2691aef970c3
SHA512 071d52eabd6437fd817922d4d24befa241278dafd1f49e952c0f5f5dba2736f755970d31fa34d6818e00fe5baf1c9e776e79b30f6c338832bd1f3b4f8572aaba
SSDEEP 192:YoCL/Pgu90RZj8Sr6FA4ZiIxuERzA83h09RZxAexupde2RUHsbt69xUX1MPeuu0D:A9iIxuERzA83h09RZxY5N69E1MeuBOXQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 12KB
SHA256 b8609e562bcf005cf3687ee052f07b30958a04b4c3946ec7f20618eebd11bce3
MD5 adad96fb61eb9b55b894e28329057d1f
SHA1 58ce7ef2186fa0e45cced81d7b4f2c0eaeca5a8b
SHA512 7310a31419677b655c7d7aa6212e7965430984e5b6bfd9a93f02b8f125ad1179619dfed81a2bf0f988524c21d5cd6209c9316a6d347a093ec13eabc6b014ead6
SSDEEP 384:39iIxuERzA83h09RZxYHVKCc9E1MeuBOXQ:sIxuERzA83h09RZxHCcTOXQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

Launcher.exe

Path C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
Size 512KB
SHA256 d84239d62c1dfe40b9fc2e08bd1181eb81d4748aac2c7c1b42248a4cf9f9e997
MD5 97d19b8da40fc76dbac051b20d2418bb
SHA1 93d3a956b1dab8dce4328599b33e1bb37c0d9dde
SHA512 35a80cdc9dc9f91a34f0598dfa26fed97c2afebaad6b35556292393439386aeb2cdfbf83bbd2a22a5392a27f6f19cc9dcec767830a8435789f8a2f4405eddf9a
SSDEEP 6144:VhypTp4xtwCnSqpRr+keJRjo7/7PlnDelt5fhWVpetyU:I/gr+danDelt5fhWVpW
MD5 SHA1 SHA512 SSDEEP

Submit Download

Launcher.exe

Path C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
Size 576KB
SHA256 d02bccfdc0a5019099af92a9323d048823e55cc660cfba40b2a16698162830b1
MD5 eada2daeba2d12ae6e26fdb1704c6a4a
SHA1 040f1c9e450e810ce8fb1d9cd6404b5c86b16868
SHA512 4bf4dcfc19fa18f4c17651664951043d049e3a04ccfbef68b7dfe452f9aa5e4187fe78410c1e5f5135167fd4b24dab18c9fece4d921c45401bc3a699e76d470b
SSDEEP 6144:VhypTp4xtwCnSqpRr+keJRjo7/7PlnDelt5fhWVpetyp:I/gr+danDelt5fhWVp7
MD5 SHA1 SHA512 SSDEEP

Submit Download

Launcher.exe

Path C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
Size 256KB
SHA256 339280f0b2842f3ac64a2a3283f9c5c36678ae7155e1ffd0b2446649e426e21a
MD5 5fc8af2e5ecaf724acd482c16adb5b47
SHA1 90aeb26411be3ddd4ac46f9c5ea40daf35a09ebd
SHA512 fc752706f1a461ea9c2d545a8fd25e095c9dcc7295aa80c83e3c75a3adbd1ebbbf0335497820cbc265b5a8b5d03b419f6d813a47511682518309e11dc142c587
SSDEEP 3072:NvhypTp4xtV4b68/ykd8Sq2pppPpCH57v0DCKsc6XhUM3XtescRRt:VhypTp4xtwCnSqpRr+keJRt
MD5 SHA1 SHA512 SSDEEP

Submit Download

Launcher.exe

Path C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
Size 2.4MB
SHA256 3a81c7606fb7a1945aa21c482f11c051e088e1a9cdb38b094610309c7526d362
MD5 076d849c7cac8c813ed40767c655e109
SHA1 7b09721ce0d80e4b7e1cba471104b8f13e9520dd
SHA512 0e4998d743cdcac1354a240a6d85cc87e0d9b3301425c1eb7858549345b9955875d92e43604d9470aebdeabf913c0171d7bca60fd39c6e2d30855032d114dd70
SSDEEP 24576:bPBlgwpGQ/5sPrSpt6eXE2nxIt+kIZBm+Wvcwz78MOzvLUVgPL:bPTQPrSpAeXDk8m+Wvcw3zivwuz
MD5 SHA1 SHA512 SSDEEP

Submit Download

Launcher.exe

Path C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
Size 2.3MB
SHA256 3967786b856ae9e3bb3c972bcd72cb7bd65be8b707e52a4eb9a513c23bf48481
MD5 259235d4cba582edd729248ce8049c3e
SHA1 232394d2718bd40c2ebfac96e426cbf33b2e0f8e
SHA512 1ce0f0fdb3ffc88e3b559175b5bb9490901a94c882a64dfc6f4488e469a84b90decbe1fe4df5033be2a9a20e9e6c4efc70a07f56b6b605214a2bfdd89ba6b8e6
SSDEEP 24576:bPBlgwpGQ/5sPrSpt6eXE2nxIt+kIZBm+Wvcwz78MOzvLUVJ:bPTQPrSpAeXDk8m+Wvcw3zivwr
MD5 SHA1 SHA512 SSDEEP

Submit Download

Launcher.exe

Path C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher.exe
Size 1.6MB
SHA256 bcc7fcbc406559fad731e46f05ecde217a50069af9e014ead6bf74260ba8e5a6
MD5 1c42f9453c6493e6eb96aa99104f490e
SHA1 0e9c36c4b243bb0628510858a341a7afc32c31b6
SHA512 3a8315df03bdf1a3b2105088579756fc4f8bc89e84effc6e1428aca71aa1eaeec87b480913ddcf50d516a999c2bf3af648b145209bed64046e8252a2f50b56fd
SSDEEP 12288:I/gr+danDelt5fhWVpxFL0LCPP/7i/Qd+P8F5RpGQ/5sPdgCLixDpt6eX6P3SpsW:bPBlgwpGQ/5sPrSpt6eXE2nxIt+kIZz
MD5 SHA1 SHA512 SSDEEP

Submit Download

Launcher2.exe

Path C:\Users\Admin\AppData\Local\Programs\Launcher\Launcher2.exe
Size 1.4MB
SHA256 922dac20f0cff2ef4778d3d25b34922e2a8c4f684ef09cc957058e0ffec0e201
MD5 736fa573c0c9da67bdccd7cf507c45f7
SHA1 419dd146d7e270aa960df56c13fb10b40aceff0c
SHA512 7c32b1a3ffa43de779871a36181926aeeb6afbb848ea25964a0585eb6e82ed0679a895a76d7eb4087a0b29d918f6383920eb859c0747e190dc1de1e66d7ea344
SSDEEP 6144:psT+Q165QWcT2Bz3ltsJ/gXTPZpJLkd1JXNhR7LW6Tx5SuOlr4hxhsbzZtWkX:psfWBh33sJuThL41J7R7hb0r4hYB/X
MD5 SHA1 SHA512 SSDEEP

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Programs\Launcher\chrome_100_percent.pak
Size 126KB
SHA256 9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e
MD5 d31f3439e2a3f7bee4ddd26f46a2b83f
SHA1 c5a26f86eb119ae364c5bf707bebed7e871fc214
SHA512 aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5
SSDEEP 3072:5KzwqCT4waJL2myFhPNL2o418Gb0+VRLf0ld0GY3cQ39Vm2I:5Kzwt4LwmU3K18Gb0OV8ld0GecQ3f2
MD5 SHA1 SHA512 SSDEEP

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Programs\Launcher\d3dcompiler_47.dll
Size 448KB
SHA256 29d7154fbd29cbe5e03730f13f5a5b738cc0d544f7b5d685dfd7f2db2dc1cf77
MD5 aed38f29ea52a1ce381e979264542160
SHA1 f0f70ec8539e2b85b1e794cfb8417d79a7301e64
SHA512 0496d9734486809683d33a94d734077b75a3c1cce0f050ae63a50188435c276d043ab644e8cb2166564bcff41fa61c682373ac7a2388f89e6fed2dd00c6eddd0
SSDEEP 12288:QguucqjQvXBkz3KakqCWqK4nmP/BXKjt0Op:IucqjwXmz3KlqCWMmPZXq3p
MD5 SHA1 SHA512 SSDEEP

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll
Size 512KB
SHA256 c047274fccc093029b0d88b8757d352cf2af9547a643a577cda703587ab9afbc
MD5 1ea5e7c9ad488172d20c8e0dce15cb31
SHA1 d484cef666bc21b09a24863face8f6e9cdc17bec
SHA512 3cdab1da9af4213066a648f2836c030c0dea2775e76abf793c5cef73f4dd50f4a2451189082b76c2d9309cb781b591dcd218b49f840816ed11dc7aa43f8183ef
SSDEEP 12288:jDnK+Z3ROGU8MUn3/UDabQtRXUb2qAAYiMGIkMz/Ef:13ROGU8MUn3/OYqMAAYi96DEf
MD5 SHA1 SHA512 SSDEEP

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll
Size 640KB
SHA256 b24d2f21e1754ba3951863ada0064be7d721be2a84d5653675073efeefd420f8
MD5 129273ea4a76e7d82cff0340a0b99097
SHA1 fb2b5f34e081b6ff89dce5a3c635ce116267e2b7
SHA512 d14db433720ec557a23838049c4dd0086db3af216b26e5331d41fad077f0e78c64dd65b937a1b25d34160a71c16504ad5425abcc9560be0d8997aa924b8b212c
SSDEEP 12288:jDnK+Z3ROGU8MUn3/UDabQtRXUb2qAAYiMGIkMz/EQvcxB4Q8:13ROGU8MUn3/OYqMAAYi96DE3Wf
MD5 SHA1 SHA512 SSDEEP

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll
Size 2.6MB
SHA256 3beb061f63b5fbb542403975e6238f821d444a830fe5444529c3926e06e3fea0
MD5 bb0b52fbc62625839b703a780164d4d2
SHA1 1bfeee8d44317f729f0ce1babfe92e9187fffd8f
SHA512 f71b9fd312cd4d41a8b7fa71cec8be3e83213dc97d22f2d13b6202361891d516e2b3080b102ab493ada2dfe15bec2558015ba1224808b8a8a518921bb71bfe3c
SSDEEP 49152:/qMAAYNDEmcTfAZMHkwfPYX6Edxhi1uGaVrFY7Q9b5hpN3lzl3hHLNoJ:/GDfRMHR8rFYU5hNA
MD5 SHA1 SHA512 SSDEEP

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll
Size 2.4MB
SHA256 d899efa46952f258bd236a1657fa54686d92d6acdee9a6b920369aa7e1389f54
MD5 32e35f8a1f5b47ea635c009237d1a45d
SHA1 a695e8b1cf1a60b4d662c3ecadd9fedc5cddcc9f
SHA512 9377215b3c923f31ed3aab3cc09e3009c7d8befc0beb0092a3819dbe86e020fd74e891f2fdbd38b7d8ac330186bf31d13e279323b83a99d1e0c92899e986005e
SSDEEP 49152:/qMAAYNDEmcTfAZMHkwfPYX6Edxhi1uGaVrFY7Q9b5hpN3lzl3hHLNoJd:/GDfRMHR8rFYU5hNAd
MD5 SHA1 SHA512 SSDEEP

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Programs\Launcher\ffmpeg.dll
Size 574KB
SHA256 3b1b24d323bbb5e52e9bab65bb87eb7a86bd7a4b4d89ffeb975ae90d352ce78f
MD5 698461a3f1385155a9782f8c6808f8fb
SHA1 c5ae28de0baed3920b7d253c74b6258db5ce643b
SHA512 020433ef4d967f06dbfb76a86b1c2aec37e31f73ae14117e88626dc9c306cae60346fc900aeb64ed7e7d40aa16d46b350792e3b041e9464f4d575038e92a48dc
SSDEEP 12288:jDnK+Z3ROGU8MUn3/UDabQtRXUb2qAAYiMGIkMz/EQvcxZ:13ROGU8MUn3/OYqMAAYi96DE3Z
MD5 SHA1 SHA512 SSDEEP

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Programs\Launcher\icudtl.dat
Size 6.2MB
SHA256 bef468c5168cace983845f692c468951803b96b94a5351224d245b71c9f884ca
MD5 3959b0d9ce2885bd7b9cccdf1802015d
SHA1 7ff11f137aebdad777275ea34f51f5419ef7122b
SHA512 32a1202a55f290caf79947594c83558fe0e96fbf8935ccd2a9c0cf2eb9dade895253041fc94f06df52823615a3e77cf3cf8df950342b3a86c0d24a29dd858952
SSDEEP 98304:p5zwpcvFjHPUFAhEJHGtYfQCiliXUxCGZHa93Whlw6ZN:p5zwSv9AAyse6liXUxCGZHa93Whlw6ZN
MD5 SHA1 SHA512 SSDEEP

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Programs\Launcher\libEGL.dll
Size 384KB
SHA256 23b4ebedbdb7260b4f76219977cd0bddb73c5fc6d9f3f9129215d19155b1252f
MD5 9f31a792d834b096e68d9ab4edc92bdf
SHA1 8b783578afb53f1452f2b9cedd821d69871274da
SHA512 51e1a77e042665d73f401978a33cb7eb830964bcd65137d35ec7a1706995ae29c581bf8c26eb31dbf191c4c8be362890e1d7b625a5bcc15405fc37e6b2f748b1
SSDEEP 6144:mTv0fq4dz9B4x4w/jvtGW9ZST3BypG48yOnb4pgsHVlAYe:mTN4dNw/jvtGW9c3BypaagYe
MD5 SHA1 SHA512 SSDEEP

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Programs\Launcher\libGLESv2.dll
Size 448KB
SHA256 cff194bce1f99e5cafc5cefc5502196b49f72f1a61dc04f1a01dd66c4682ad43
MD5 231dfa9177bf6d4fdc83edcdf09c9a69
SHA1 95e9a87397f4e5cfc5b860b876fcdfd9370231a7
SHA512 4fea07200a8ba51cbce020503e8e917a00e8a502fa27181a9639d2d4438d6dd2ffcbdede80d9be04202c63ad374728116bda001595f25709f4297efd7535dee5
SSDEEP 6144:n9vmk9OQx+CfQXyDbrGmD1sY0K0uLgouri8kCNgr7JU0Pc6Cf:jYCfrv1sY09g7JU0dCf
MD5 SHA1 SHA512 SSDEEP

Submit Download

libegl.dll

Path C:\Users\Admin\AppData\Local\Programs\Launcher\libegl.dll
Size 448KB
SHA256 cf3912221f90e03ff179c8959249b9f217abf2e2b4dfd05f32c41202fef54849
MD5 86b2e9054bba502de7a50bac6573dc0c
SHA1 c21d2afeef36ce40fb2bc6379c53296feaa9e1dc
SHA512 9b3f44421c375c1e2092d2bf6934cd068ab57be7fcbf3ab8df16f789d8231f7026532c655adabbc51d4673627b675444266c8d2b736b973fa6f7a0b35ccd113d
SSDEEP 6144:mTv0fq4dz9B4x4w/jvtGW9ZST3BypG48yOnb4pgsHVlAYnTeZ8:mTN4dNw/jvtGW9c3BypaagYnk8
MD5 SHA1 SHA512 SSDEEP

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Programs\Launcher\resources.pak
Size 1.7MB
SHA256 c0ce37cf5431b4850ffb2cdd900aae37cbef0c8153207094f191fe1add884a57
MD5 af7d33eb3fd91157dcbea878cb49e704
SHA1 72ff44d1458286223a07b0dfc9f3229d35455f58
SHA512 f277c6e38a5cfcdb511414b210c4688006f6838038f66b47a2450d02643b566ff2018ee7020a8263057f2c8747cb33f0115e209ac23b55192b41d7162a7c215d
SSDEEP 49152:Qkmq/28oNgvV1HI7i84GiuGm7CkM8Bi96N89oo1D:Defgvjou82INBibN
MD5 SHA1 SHA512 SSDEEP

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Programs\Launcher\resources\app.asar
Size 1.9MB
SHA256 ddcde74e81d44ee2c244a3b8278672fe526f20cd04ff2a0e352518cc74e34cea
MD5 def208c9d6a4c5a384feda50bead3949
SHA1 bec7c2201858a5fe8f8f96153487729c3eeb67db
SHA512 c9c4a8ec7900da8828a0bea38eb10db9414088120dad0bad28f8dce35648b4b8751875df9eff3dd7c5ee8750322f01a3cf7aecae2eeddd85f3d7f56a8ce20a8e
SSDEEP 49152:g6LOVHOi9K1mgCDXTynt7O+2IoAxdbLv1g:PODIcmnt52LArL2
MD5 SHA1 SHA512 SSDEEP

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Programs\Launcher\v8_context_snapshot.bin
Size 471KB
SHA256 c16dcec41919a6d2850214f2275824be8a97d8c5e694e2ec8dd7d16ab2d5015c
MD5 031ea03da08fe1247280cfe781658791
SHA1 e91db50ad16b5a5fbbaf4118672d60b347ea6161
SHA512 b3d6f282761f8ab8760728ecb108f64741f6f3cd2a143813042ff63a3b6604fcfe7c1feabafb65f9f67906217edb5851f44605a34f7a50ed2058c25ce5efb30a
SSDEEP 6144:1jKA3pW4TRwsLj3spK0P8iWhyFUaxw/5h56N:R0G4f8i2yy/5h58
MD5 SHA1 SHA512 SSDEEP

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Programs\Launcher\vk_swiftshader.dll
Size 384KB
SHA256 c101f69c359e38e12595aa628c9981a81af5e575df80b1111ba3fb6d27bccf7b
MD5 db7e09aa122008d981a771b2ff1d4efe
SHA1 c42a081e61d8fe89b04aa7e0f44f0bd42e91e842
SHA512 48cf708a008dcda1a6f4e155e57f3dc725b98e7ddf111e941fc0c4d52972436f9a3f87522ad7f60c1fb0dc58f9bab33284dbc57cd8d11f3b3f6eb11f04762ddd
SSDEEP 6144:KFhF8jugnxJkkbMrzp9G2XjXT8rsvpuMHxIlKs8bKwNSt2Dp+l8kuGIL9n8dVXJA:KFYjugnxJkkbMr982XjXT8rsvpuKzs8h
MD5 SHA1 SHA512 SSDEEP

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Programs\Launcher\vk_swiftshader.dll
Size 768KB
SHA256 fdbf880ccda8893cbd6cf8e5bbabc881c19add0810128d31f3b7c14967225b69
MD5 24b809f29fe3f919a35a3d8ea785bd94
SHA1 d3a80338b27923909f47d152929f0a7e1295f8cf
SHA512 f6767d9f7eafb40f6523585ea746ab98f4cf7c52274f4017c3981d3871bec4ec7bb0b14f58bbf95b0b19c061e0274b9e5ac097c7e12ddc73c82ed4d364063a85
SSDEEP 12288:KFYjugnxJkkbMr982XjXT8rsvpuKzs8bKwgt2Dp+l8kuGIRn8dVXJHxiRn14jagQ:KGignxGr982XjXT8rsvpu8sBxMjEmdtb
MD5 SHA1 SHA512 SSDEEP

Submit Download

Launcher7.exe

Path C:\Users\Admin\AppData\Local\Temp\Launcher7.exe
Size 377KB
SHA256 ed6392eb75c083c29191a5c2c03cf16e3cf5d2cf4f5c276b04fd10cdeab8a3fc
MD5 c30771ded415416ecf03f724600f4dc1
SHA1 3eb5ff7502a967c78147ab4e13199c912cba69d4
SHA512 440e8993a42f4c773850bb101ca4fb8c8e42aed1da782a3af0c0e95725b1218eacdd22dafb7f0cccadee69b30ba865fe1d4880e92c721b6bfe463f6c194cfe7c
SSDEEP 6144:psT+Q165QWcT2Bz3ltsJ/gXTPZpJLkd1JXNhR7LW6Tx5SuOlr4hxhsbzZtWkX:psfWBh33sJuThL41J7R7hb0r4hYB/X
MD5 SHA1 SHA512 SSDEEP

Submit Download

Launcher7.exe

Path C:\Users\Admin\AppData\Local\Temp\Launcher7.exe
Size 422KB
SHA256 05aa9f641281a53717abd615825475083fa5e88a271191cd4900e560586a28c6
MD5 fe7de6fd8abc3dc3fac0f1e5b58f6346
SHA1 fc72eb8d4e4e718b3d4c3b114708c949b7fa7838
SHA512 dc6ba9f023eafb42c194865e962297de2e62e3d29d26e1669330a5b43752b67b32103a2529d8119465a19a5fa3f82e53b3a9406a28c0d8fc7cabdf3c2c422af1
SSDEEP 6144:psT+Q165QWcT2Bz3ltsJ/gXTPZpJLkd1JXNhR7LW6Tx5SuOlr4hxhsbzZtWkX:psfWBh33sJuThL41J7R7hb0r4hYB/X
MD5 SHA1 SHA512 SSDEEP

Submit Download

Launcher7.exe

Path C:\Users\Admin\AppData\Local\Temp\Launcher7.exe
Size 960KB
SHA256 68072f0f549901daf299a2a7d6aa0e1bed9ac4296bcb44b68cd0ec83c6335a4c
MD5 4d712d85de6ee130d83ae37c21fe2148
SHA1 048690bfec06a66f3feed9b1b7604618de55f429
SHA512 b3b4ed41f23419da12ca5e4357169646d3bb8c6d840068c9e063814cf4ceab944a8ffb965a63054e863e088121ae06f963e32995f7bfabfdc1aac2bc4d46a098
SSDEEP 6144:psT+Q165QWcT2Bz3ltsJ/gXTPZpJLkd1JXNhR7LW6Tx5SuOlr4hxhsbzZtWkX:psfWBh33sJuThL41J7R7hb0r4hYB/X
MD5 SHA1 SHA512 SSDEEP

Submit Download

LICENSE.electron.txt

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\LICENSE.electron.txt
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
MD5 SHA1 SHA512

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\LICENSES.chromium.html
Size 3.9MB
SHA256 48b145f3c37c5eb3e2ad8b71370e7465e9c5f52e5da45ea770b31184ec30a512
MD5 f52109ed61b170352997e34f4f9d659b
SHA1 121bb260ee17cc23e129befd04be1bcd60f5bbe6
SHA512 020985401699df32c6e2733dd2eacb4f78366de0780d5b590039d2f234c8199c02c7aebe2e2f1fa31e399e83370f60f2c4672a1a44ae36e0f0def444492c7016
SSDEEP 12288:FetnBnVncnJnknhnpWQtnwn7n9nJnCnZnGn3eQSnqnBnununFn/nwnJnqnvnOnqX:8P5K5WfWSJiJjQlaCmf2P6e6P
MD5 SHA1 SHA512 SSDEEP

Submit Download

Launcher.exe

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\Launcher.exe
Size 7.6MB
SHA256 e14c43b4481adce6a6d833ec4fda931db7a82cc00596f87483f7fa4e288a269b
MD5 a6021f0a4c9902be5522073179560bc2
SHA1 223636a0c81c7d068896ebcfd29112ed33924531
SHA512 6d95b83776874c22bbf766e767efbf0baec8144a682ab9387fde2ceb38eb1bb20cd238362c0054b0b92276a2de94c365ba3f9f17768834ceccea9d6ea0c0d92f
SSDEEP 98304:wP2HDk8m+W4pzCgpItKFSKNHc0hsRnaZ6FKNSU:wP2HDksraKVV6Fs
MD5 SHA1 SHA512 SSDEEP

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\chrome_200_percent.pak
Size 175KB
SHA256 1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c
MD5 5604b67e3f03ab2741f910a250c91137
SHA1 a4bb15ac7914c22575f1051a29c448f215fe027f
SHA512 5e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d
SSDEEP 3072:+DQYaEQN6AJPRJL2myFhPNafR54x5GMR+F44ffbdZnYw9p4AbIVGYoDd+HxNK/r4:+DQYaNN68RwmU0gx5GMRejnbdZnVE6YR
MD5 SHA1 SHA512 SSDEEP

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\d3dcompiler_47.dll
Size 4.7MB
SHA256 5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
MD5 cb9807f6cf55ad799e920b7e0f97df99
SHA1 bb76012ded5acd103adad49436612d073d159b29
SHA512 f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62
SSDEEP 49152:IuhjwXkKcimPVqB4faGCMhGNYYpQVTxx6k/ftO4w6FXKpOD21pLeXvZCoFwI8cc:oy904wYbZCoOI85oyI
MD5 SHA1 SHA512 SSDEEP

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\ffmpeg.dll
Size 29KB
SHA256 ea78382568de8ac9d215f8181e77ef23a85897640052c67d5915d2836d22c9dd
MD5 f251c370a5e6a7fd6a2024cc6eefa1bd
SHA1 8a891b821af4360ed90af622e2a416ff09f4733e
SHA512 470c77c775759a891b815955b539634c61c51a5cb9f668bcd774930a1820f8d7bfa0c8e890afb602cbb8f6289ff8b9cde0085031d6f79c3d41f5bc9399aab3b5
SSDEEP 384:WdWzCEbGDTpOWombBd2BvhiigvKn/ZBMZlM+Wub8XPSE2:WdWBy8vhToYDSh
MD5 SHA1 SHA512 SSDEEP

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\icudtl.dat
Size 9.3MB
SHA256 fb4f9325e47d166002e52c23a4aada9150753761cd2b132b9c5cfca6b45d98f4
MD5 9be6649fcc46e0945ba232bc9f6ca27a
SHA1 e345c3d92c8fd5284746e139a4f82ad8db429a6f
SHA512 56d9d1884b9c574264a34859e65afcf8c4bf8f09ac191b18b7da71407033444509d1646b0a1da7cdf2013d58cb6fdf47f030a8a6a9606ebabb5d056a9154d17e
SSDEEP 196608:p5zwSv9AAyse6liXUxCGZHa93Whlw6ZCXb:pyKlysTliXUxCGZHa93Whlw6ZCXb
MD5 SHA1 SHA512 SSDEEP

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\libEGL.dll
Size 473KB
SHA256 3c51a8e53ef7473e9a335673e909dc9c67bf962997e6e2a319c3bd70fd52b4ed
MD5 637eeb39ddbeb3ff518ff1988604505f
SHA1 8b3d9a0d542718fb906f8fafb2583d7bb53176ef
SHA512 3257f9c96665f1bc8bb39acd0d98015b7d5e32f3cf3f84e795df4d19f6bd3bcc14a4e89759cc0de83289b79cd290fd5f4b176c3e9a4cb2eca3acfba0c9e232df
SSDEEP 6144:mTv0fq4dz9B4x4w/jvtGW9ZST3BypG48yOnb4pgsHVlAYnTeZRO8:mTN4dNw/jvtGW9c3BypaagYnkRO
MD5 SHA1 SHA512 SSDEEP

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\libGLESv2.dll
Size 2.3MB
SHA256 e9a0f1d28066747863d3fdec88767a26bf1a57924f33df7fc241489c69e392e1
MD5 c0b31ae91f3e4bff05cd753a6ac5958d
SHA1 10dcc480592b741142688e71ab603002a92a1c84
SHA512 e36fb3c36fbef53f5e2b399bf22bbc9e473ed3adc9a0d1a2d30f71dc6d7556ce5d8e193407852580a3acdc9f5a311e029a9cb71d635ea557700abe486058d8a0
SSDEEP 24576:jvZl7JU0dZ5p++UlYKgjeAsbQt5Vyiwplr5fM2scMirt26SPtz:jh9J1b5p/KgjxYb02VNrt26SPtz
MD5 SHA1 SHA512 SSDEEP

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\af.pak
Size 340KB
SHA256 d63222c4a20fa9741f5262634cf9751f22fbb4fcd9d3138d7c8d49e0efb57fba
MD5 198092a7a82efced4d59715bd3e41703
SHA1 ac3cdfba133330fce825816b2f9579ac240dc176
SHA512 590dcc02bc3411fa585321a09f2033ca1839dd67b083622be412d60683c2c086aac81a27bc56029101f6158515cc6ae4def39d3f246b7499b30d02690904af0d
SSDEEP 6144:ptbDrUln/WiOvz9P5D4uEmv0XPjC6nAcbaK6pgwwexhsVxS42K6tA3pU5tpwDw44:ptfOOiOvzg/mCPjC6nAcbipgwwePSS4C
MD5 SHA1 SHA512 SSDEEP

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\am.pak
Size 551KB
SHA256 f92b0299185d963337e96df1016e1cf5ca335e22ff86568c1a6507c3fea29094
MD5 a2a17bdd83467a027505bc817d1ac028
SHA1 cc1266a22606a1055db9653b82e90c9d1f551d44
SHA512 193c5db0a30a3c8ef5e8c821cafb9d0b5671b7e7821748c7b432e927bd4638ecf5bfc1d99721ce89fb3df4f6f23b5e55d753430e8ef2bedd1e1633e613321028
SSDEEP 12288:WcWa+uPPo8xJTgWHsEaYM5g9yaAVmHukPQyx30jH8+I:Wuno8xOWHbaYM5g9yaAVmvPQ+
MD5 SHA1 SHA512 SSDEEP

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\ar.pak
Size 602KB
SHA256 7ab39416b60ee342ff2874aaa7b9b95b290828807b1395192cdbd29ee1be15e8
MD5 b2a23f285858db5e3e53d6a5d5291623
SHA1 674adfeb57075f86f40ff4b14916c3af29695813
SHA512 92c9b31f82f62b15eed3edaf437412cb630e8deb2226ad162d7cb4c252d8cb7f0453b3121a846ffcb1547570e2eadb04cfd3877ab120496a7fefb47a6d96cba0
SSDEEP 12288:R2Aj3MtqtWx8QvYUjBLs6kXBz5ANbT+NTgTbMMgSEN7o:R2Aj3BI2H15o+u
MD5 SHA1 SHA512 SSDEEP

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\bg.pak
Size 631KB
SHA256 fc4a59ea60d04b224765be4916090e97ed8ddda6b136a92a3827ed0fcc64bb0e
MD5 9dc95c3b9b47cc9fe5a34b2aab2d4d01
SHA1 bc19494d160e4af6abd0a10c5adbc8114d50a714
SHA512 a05a506a13ac4566ecbfe7961ace091295967ea4e72a2865e647b5fa9adac9f7cf5e80b53fae0e3917dfb0b9a3f469189cd595cc4ae9239d3a849f5cedd60e46
SSDEEP 12288:mEJqOwccalYrdAs1alUx42aVVwslyLKmF/RY3YKN3R5ObDGIV+Jfu64KyzEfSZpR:vqAZlYrdAs1alUmys8lY3YKT6q2Qu6pu
MD5 SHA1 SHA512 SSDEEP

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\bn.pak
Size 812KB
SHA256 71f99a67bb310fab8068eeed7ce24ea7624a66051ba4e719d051cc7e67e78001
MD5 fac2c752c57175a4b1f4630e3667123e
SHA1 a2dbcf1dd7b3cac499b9f782c7393ab438039584
SHA512 4820704bd92dfb60736da5b84c8bc9135fca484c678585ec9d26dcb90632e382f354d03b539599f4816feb027dd285ff06ed8a520bede56d7a1c590d942e4250
SSDEEP 3072:3V/m0JEVzjcnmbVrH4kSBbdXWSM5QwXlFE:3w0a5rHEBbd+5tle
MD5 SHA1 SHA512 SSDEEP

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\ca.pak
Size 384KB
SHA256 b6c895fbca90c36ae2cfefefda989922162a2cc259603fbca066f0cfbf43c4ff
MD5 0312c87b6436e733a037bfb3084f7550
SHA1 e3f30b8f3bfc8ddbf4b8f85f845733ed5ac8c632
SHA512 24b7780211b9dcaf7cbe3915851c7b873562e0cff022c29ca1b4e159b9da152b517305f81dd33712a0224fc3b77e594405e432fe5eecf29b7a4f83f441d6905e
SSDEEP 12288:L0s8rijIs3cejEYBCqol3nbhj+YbHQluSwWwXiMjdLbpuQRBtryBiGIle3nei302:L0sLm+JzFMNSGhrKU5qzEK
MD5 SHA1 SHA512 SSDEEP

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\cs.pak
Size 393KB
SHA256 1b8c3add009028eb567b0094759daff29b7861e11d5a9d864071012200e9735a
MD5 ff919631102a3a9ec635b3080b63e305
SHA1 e43b117ad5b2d5b373321ab0ae63dd4bc1352a89
SHA512 21833774413cc71ba9c0c592504ae6288e3c8ac4e5d1d62768f4b3eca09e90009abec5e8fadcb4e7d63b99a522ae48fd608aad432eb4165ec7021c8888ad7df1
SSDEEP 6144:qEHFUi7lAZYhg7FlAKRM55Z8+U1KN0g588QM:qCVpAahgxxM55Z8+UoN0gb
MD5 SHA1 SHA512 SSDEEP

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\da.pak
Size 356KB
SHA256 2497368658a988e4eb3f64cd17423ea04e7555b104d43c8996c0ecbbfed5f74d
MD5 4bccba46add5ebaf6efd4ade3c42aed9
SHA1 e48dcc2de930bbf0ea8ee7b735ead321dadb5be8
SHA512 e2059e2a7f80353981eef6982a7da006fa3753aeba9aca5279eef71aa2fa4b7adbf9cbb17c85b8060359f9e871b1a5c665226f8d3b8a6fe49f908fd44e1b46bd
SSDEEP 6144:t7bMqk8D0Q4XwltFJJwRXmN3OOr5xYrUGzOZiY4TWwz:aOQLDm/5er3T7
MD5 SHA1 SHA512 SSDEEP

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\de.pak
Size 381KB
SHA256 068ba3e34e7f253fad7dc526b1078aaa969bea044d48171925534598aa8becb3
MD5 8569900305a5661573f7766b93909f16
SHA1 3529376f54e32c17447b065d08c77314c4db2ec8
SHA512 d544febbe20a9bc5cf31f79f7ef74c1a742cccc99136e9828187c9a643bd0317c7cc48706346ee1a3c9eda8984be9c8606e9dfa7a6ce2cff49db2d785c2aa1c3
SSDEEP 6144:Mh8eunIm0cux+raRKcUCYV3dfZFzhq7mp5/g6nBIRgql:mBN2uorafAfZFV5ZyRgql
MD5 SHA1 SHA512 SSDEEP

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\el.pak
Size 691KB
SHA256 e42aeaea80dabe82657983a462e4cd3ec74f71d4f08a689f5825f55fc02f3141
MD5 8025eb8756d4bf3126d83c9078935520
SHA1 78895218a90680fe223af0b003c195da84902e1f
SHA512 f99f47e54583b60857a31648b985216713725496d8653ca04eb1d6634f2b7f7a1f9f70b8a7938529bfc6c8665360da5e6bfb6b68c314c011fef4a9817010c42b
SSDEEP 12288:TfSaqquNw2202pgtZqK4qILjJCaP5A3HRnkOY63Teg6sDPfFnxPuUWTT9rk2B0pU:GaqquNw2202pgtI/quJCaRA3HRnrY63G
MD5 SHA1 SHA512 SSDEEP

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\en-GB.pak
Size 310KB
SHA256 463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b
MD5 502260e74b65b96cd93f5e7bf0391157
SHA1 b66d72b02ff46b89ee8245c4dd9c5b319fc2abf7
SHA512 0f0f9aac8e6b28c1e116377ab8ee0ffadbf0802a4026e57aedb42d21c38fbf70159be9e0314799c1de1f7638fbbd25d289dff7cd2c9eb7c82e1b62b6c4e87690
SSDEEP 6144:5QbJ7L0535IBMP9ecDl9bfaYENPQLP56Sbuo:5wseBMZl9qNPA56Syo
MD5 SHA1 SHA512 SSDEEP

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\en-US.pak
Size 313KB
SHA256 bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f
MD5 3f6f4b2c2f24e3893882cdaa1ccfe1a3
SHA1 b021cca30e774e0b91ee21b5beb030fea646098f
SHA512 bd80ddaa87f41cde20527ff34817d98605f11b30a291e129478712ebebe47956dbd49a317d3eeb223adf736c34750b59b68ad9d646c661474ad69866d5a53c5c
SSDEEP 6144:SssphRVKuQ+KVMP9elsY4ZfaYe7RqIZ5HS5xswS:JsIvVMNY467Rv5HSPswS
MD5 SHA1 SHA512 SSDEEP

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\es-419.pak
Size 380KB
SHA256 1b23cda69927c77764bda121ee398ffefcf5edcb5866432aa3526c378553c9b5
MD5 02452424bb0cf6ab832808d04883f147
SHA1 a8e97ee52f3d97c1a4c678f7578808416e9fac65
SHA512 9e750b26ab40b5f1c075acbdeb15a57cda9e6bd8049488cfaf368b5cbe8cd9b6e5dc96130e4137370c90bb0777b97515ea2be0787e255cff750fb7e188e22ab2
SSDEEP 3072:4oXao3vylYxh6i9zj47YRryuOd8phPWV0UwwgOG55NlTfGLF+vVlBnG6:DaQvYi99tBpgHu5uLF+vVlFG6
MD5 SHA1 SHA512 SSDEEP

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\es.pak
Size 380KB
SHA256 85fff1ca6bd2527073de03fa77dd013db2557a57cce1fd370caa2b185abb9336
MD5 4ca91891b2d4670d02931f0ca84e4744
SHA1 85f6559b09c80af2575e3b7626842c10081e188e
SHA512 83eae7ab2f03598c657786bff6171803b6bbe2128d1a5b8a01d9a13337113632279712dd8ffcd3b707fa6052a936d92a57cb67d848c77ee291e75700e29f2bf8
SSDEEP 6144:ViU/EFsDXGXU0qqhgf/xTpaN+45Owjc5Or97bzm2nE6PZmy:Vi5FsLGqtpTpe+cdjc5OrZmksy
MD5 SHA1 SHA512 SSDEEP

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\et.pak
Size 342KB
SHA256 e2d38131a5ef4b0e8438f45e8c74c56bcf666760d4682120c8071c9220230555
MD5 74eda453b23793ced4480ea7a595fe44
SHA1 76964af9c8024bd84fa1d89f60784e7ee6569350
SHA512 e9928cfac01f10b040c74e63242ffa1f7f616d8598f49f0aa7ddad063e18666cf5649cc65d00b3526526af8a7b46ee3b3655da22adf46aa44c0c6a1c2ac4dc7b
SSDEEP 6144:55Q8+18XTAO++nG1Z3y0DLdyjvQJbT/RPiiEZ55Uj04375LBjPQu:5bk/wG/u8u55Ujt
MD5 SHA1 SHA512 SSDEEP

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\fa.pak
Size 557KB
SHA256 b93145f30e25122015373a248d6ea22a539c7d0d58c8aa853ac35cc80dc06bfe
MD5 99de8cfda36ab9ab3342889fb6da393d
SHA1 6bdd3d627d4b6702f43725039089562af58898c0
SHA512 aa20793f9ece5823cb9e74a4a3ff97d7a1860a593f427fb5eacb0390569a48122589610fe5a02577577f3a30f981c5e3da97cf73bdfe158a6bb845586c5b19d6
SSDEEP 12288:WmX9nuyaXTfwI/wNUWGSEfStQvjy1PeZwMTAKzIxRAQiHedNu3htodxWetlClY5f:9uyaXTfwgwNUWGSEfStQvjy1PeZwMTAz
MD5 SHA1 SHA512 SSDEEP

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\fi.pak
Size 351KB
SHA256 5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c
MD5 fa7dbd2ee35587ff31fde3c7107e4603
SHA1 baaa093dcb7eccf77ce599c8ff09df203e434b60
SHA512 587f6d0e216d1688227345a8a75b94848ee710ec633fe6805db66bb0e8cad1b8d24a1e6a7e234061516770d881571166c78d8fa1c40e6335f3dcb1339fbffc14
SSDEEP 6144:TNqgL9T4VbhCY4bsz/aOE/caYMvLXV5tljSHIEJ18GWU/WnBR7X1w72:RHxTLVcaH5tl+HIEJ18GWU/92
MD5 SHA1 SHA512 SSDEEP

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\fil.pak
Size 394KB
SHA256 a737a14f84b10b2e3c9ad4d147b430fd30c5ac0e125d5aaaf1ea19b0507de5af
MD5 0b7d25d70a2d94a032b7ff7faea45a75
SHA1 d9d473b2ea936ffea4f751d8716cb03407a95785
SHA512 e4dbef6fae4cb56c3cd7bd5dbb239b5136eb2534a17cacbf628f5e5d77bfca924580ad4e4d0ec580ffaf94d6e1fafad58e9c5f472c3a3ff782702ea5eae2aea3
SSDEEP 6144:hTh0oiatMaVyEDQXwYNkj6LxephG+Z30mi5qgm+HmAx378:hl0oVtknyjAWi5Hmv
MD5 SHA1 SHA512 SSDEEP

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\fr.pak
Size 42KB
SHA256 9029cf4a88233a41183be0b0ff23762194db88a3637ccbe828f9b09647a5242e
MD5 256962ddc66cdfffc59824663128ee3f
SHA1 3ec2db058bd2f8f41ae7a415451da12b3ed2ec91
SHA512 d5231d7e6b095000f40d013cf5c6b7c5fa293696e9f4b90f7c752ed448aad35adf64d8754265f92879fa6db4469d8c137cf4e60f29afb1b62edf8919311b998e
SSDEEP 768:59rcBmSW6EvcJqkYs+4D7ne1U5IL7DHrJTTbazBx8ywvXFiVzmR/JDCGhlLlKPNl:5hjSPEEIkYs+43EYIL7zrBTD7FidYJDU
MD5 SHA1 SHA512 SSDEEP

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\gu.pak
Size 787KB
SHA256 dee5ef4f4b36fc5fe0f3b5e10c7cc3a7edc14bf948317b31a3287a95bfe0afa4
MD5 3268b8d9b4d4db87ec627b09f1c55a6d
SHA1 683ba367e40abb2fefd4548805e845fc1b452855
SHA512 59cff62843d35f790092f42b611e9bcd80d948c0ef27a770b2d7af859997f40c320d67df3c5a9420d28d5c8f1678df4677e01cb99b729664d198b3b95b5fbd20
SSDEEP 3072:xJeMsBhDwgnu1JjzkVgITsKMaWZKerbtsMhmksd4Mqz2sQmE51jvHsWnI4AfZw/+:xJeMsB5Hnu1Jjz1OHesX5cEhkiyj
MD5 SHA1 SHA512 SSDEEP

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\he.pak
Size 488KB
SHA256 875712bb852c698f677c0c74e088f62d31adb2bce65648fc390607aad8705c45
MD5 6376d0a5f4273b76b1f4aabade194e0c
SHA1 337ba39f09454c0779ab64872b9fa11f866d6adc
SHA512 00347f16b5abbaf47fb08663d5efde26ab7de0c7a2fa42e6b5f03c41a83cecbd8e78cc3aef41d5f08658cf346e0ade732774485e8a10008a43fa41ffaf73b2be
SSDEEP 12288:a/x8HkArOpFLLj2/vtN6l160SAXqJi5IgoaHM7G5clmVSDnwvrQgo:Yx8md53od
MD5 SHA1 SHA512 SSDEEP

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\hi.pak
Size 821KB
SHA256 5e8f2593dbea5a57c3a974558a3fc91b6087329a1e7b11622a6eac120a973718
MD5 9b5d94450fb03c34759653deb0551441
SHA1 b9134fbc75304ca73b156e77425505ed6dc6d629
SHA512 caed9535d487833bdde51e82b76d3b8d2e6ea18ec0b4b7a98552be9266ff0728bb1133d8f9cbd169345aa08b0073f04d649baa71bb487483951cfa1a92080d63
SSDEEP 3072:qBva9hs91PqPdkhSvf4QAEm5dmGrsXt4GR3doE1NldYbOqGPtv83Y8A7ndUT5bHH:hgPjU5B5MQut
MD5 SHA1 SHA512 SSDEEP

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\hr.pak
Size 14KB
SHA256 7d30f1a01cde50ffc3eb2f61e8af8e4d625eb500f2ce615e51865825c7d2fc61
MD5 c05e58cee718a42132d6366742f1e79f
SHA1 ab05712b84dad75b0fc089ca90032b130f3b65bf
SHA512 551f713da9c356da1ec6e1ad55b9d31ba703e762293cf1810c404820aba987d972862bedbfb0c3189ef8b2c8fab64941fed2eeebec9e68ae09c0d9752e835bcb
SSDEEP 384:qw0EncjkciyNuWeIgsmvmD9m02Omi8Et0+:qXScjk3y61srD9T7H8Et0+
MD5 SHA1 SHA512 SSDEEP

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\hu.pak
Size 411KB
SHA256 3ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f
MD5 d6904e7d1b6750d43a6478877c42618d
SHA1 919f090a6a3aa1112916f5bb0d5b73a62be43c1e
SHA512 d600fedb5ef1b2eb49a0122536c642b350ce67bb7a9da205890d9d13a195ac17c14607b4489715fd34506ec0ea4c80f245e09cf048aef52dcc8094f3138b2fad
SSDEEP 6144:wzLY6NBOuSSfXbV5z8bZfGRaqY68EISam7MhOwKX5gRbGGttG2UnvydpECk3ICf:4BF5V5z8BBA7NwKX5Qenp
MD5 SHA1 SHA512 SSDEEP

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\id.pak
Size 336KB
SHA256 9210c4c4c33e7ceb5f70005a92a4fd36ca4facdd41701fdc1d2ce638db8adf22
MD5 881ff04e220aa8c6ed9d0d76bfa07cb8
SHA1 cacf3620d1bf85648329902216e6cdc6f588a5ba
SHA512 9134102928aa80c49bbf2b862e8079b2ee23636ce63412a4c3813f234d623ff563f5ca1ac407ddb77cecf1224896ed59ae979dcf63435d35a4f13de9c22755d5
SSDEEP 6144:Bhuyv4xtWuEjulOCGVQDv1La/BbfjDVnjHF0RmP21AfW5/yhhvt7nSRsEa6:Bhbv4LWuEjulOCK6LODVnjHFKm+1sW5J
MD5 SHA1 SHA512 SSDEEP

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\it.pak
Size 373KB
SHA256 e76c3f15529fa7cc088dc32903c6885f4cfa170a1e0144710b05965f3210c31c
MD5 6629c344b6e5ee8fb476522627b34221
SHA1 28335e3c96a68a560c68756860394a0a86c21870
SHA512 78ca2ebf40d6cc3eb7035cca78364be63b8eb69e27caf2cae57e3489b39a9e443409e800fd95e1b646d37655c37ee8a9ae1ab344b506cf65f8603a6a3ad892ed
SSDEEP 6144:Pw2oHww3I2Pz186WkYctogSrqRrhsO1MGT9TeLAGBXnlWgYzPwkkWgYiZ8HryYur:PgtOZRsZ/o8+6tHSSL53soo
MD5 SHA1 SHA512 SSDEEP

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\ja.pak
Size 456KB
SHA256 21cd7ae581f6d0c19e90ac7df03d7dd5305b882776a1f091573f824bd28514da
MD5 c294012268f9e611fdc2904be57e45d8
SHA1 9ba4bd190ced7ffe053fa74071fc5836bdebea53
SHA512 d16653f30617e52a040c5e033896a71055fee9992e54ffca5029601bb62a41b9685a68655b9c8bf7a7ba54a914836a0f7a49cccacae0eda180a6b68c0471a268
SSDEEP 3072:Xbkb3FMjD/rMG+Mr04MUEypZC2hMANlLQPkw0IA0wUNH7nbeCry5FtgF9bFCCr9p:XIhMjU1yFEypZC2vL+AD5mCxVg
MD5 SHA1 SHA512 SSDEEP

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\kn.pak
Size 910KB
SHA256 ae4e003458f1a8bd3652e61241e11ff91bd887f6b95c1fe2700e76a117ba2119
MD5 01e8dc084d07743fbda50d54d86ee3bd
SHA1 e0709217e1a6785706b7d14037b1478ee2a3a59d
SHA512 7d8db84f975d778bde21253f43d174921c2c71111644a953ad8671754e5d656f72bcabf62f4b960cbf4ca0ccc5f67d1558ed250b568c1f2308a31970e380654d
SSDEEP 6144:NAd9emdhFrCEb7y2vGvGK2Ij/u7sBwjJith0VlkcVwV/ttrmVLHMj0kEjciYRpyA:2d9edS7y+1DVqxyZKe7Z53YUS+4l+99S
MD5 SHA1 SHA512 SSDEEP

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\ko.pak
Size 14KB
SHA256 1ba8a67256d4550e226355630636b700175cc6364242e6504749cadf68de9865
MD5 df33b4bdf28e2a26ea730f63df10abc5
SHA1 8e44f02866f7b37b2c935e000cf1872b7949d3cf
SHA512 98ef9cf2b9411017a407f3d23bb4381355b0424139fcfffee427a8ee611f22fc42b9d7d66ca4aec42ca4acad089d8c16cbbe779d8169f79b2249e692560ad4c0
SSDEEP 384:aVkS0eWPOtLXd2m2c+JYARdAb0aSmwFBrabkGwmQ+j:KzWY7cVXJ3RdAQauFUbkTj+j
MD5 SHA1 SHA512 SSDEEP

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\lt.pak
Size 128KB
SHA256 29d3b2ef855032addc97a66d7bc01a185da874b4f33115998fb0488daaf98cda
MD5 36a88e13072304338958f09cbe82e709
SHA1 9f0b7cc19ac86527ef5010a3d97bc0c1bca32ad4
SHA512 f6606071051ba5f6d99b4d57fc2a05da9d06371493ccfa6b21633674e95045a1377a8ca9115d23ae1b65bedfef26c948606968692c9d505c008302ea366780c6
SSDEEP 3072:R1Wf9SrvZ8MmncIintgNyY41AfcHF4M4v:RvrvZ8MmncI0t4X4um4v
MD5 SHA1 SHA512 SSDEEP

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\lv.pak
Size 410KB
SHA256 7467360f9addd4d8694e1508a6ab3a3e00dce57e5897d5376ad27d8e651b23d4
MD5 cccbd7f8a0c34c7094ce4d7b8e7e0588
SHA1 1a08401e2dc8c59200c4ecaa1886b43b6faa6979
SHA512 2cc43437f1cd8d5fda0e95e7dd117c9b82e90cfed58ad8f492f46b4634aa01cd1b0ebe39377231a0828fc1ccd39641e4efc2f1210d629f9aba12ea9048accd95
SSDEEP 6144:3aJdahLmmNItVFq7mvly4Gh1VWtpaRd5tNm0YME19AWranpWBAFTDVs1C:+dUrog4GRWAd5PEJ18s1C
MD5 SHA1 SHA512 SSDEEP

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\ml.pak
Size 948KB
SHA256 61a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6
MD5 00292b0801e0dd0a74091bf53f1574c9
SHA1 63a002e7a8796bc4b4459a19c95ce426fbd1ec7f
SHA512 e2e15f66851aa435e3bf4de6672f4aa8b01204d8efe11ec6ee9a51d9877ec4f2e71d7e9547d6eab9bfa04af1bea71fa72aa4963fa08b48717bf1c3fd21c00cd5
SSDEEP 12288:0uZPZlsLnAkQx7/bmXXrwMmWDcZubSA5WNPT43e6hD5b/7dS1u3SE:dRlrkfIt43eI5b/7Cu3B
MD5 SHA1 SHA512 SSDEEP

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\mr.pak
Size 772KB
SHA256 481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09
MD5 b9a2aa88c69c42ebcc41fef00c980a38
SHA1 9e373dfa11f95c31ffdca70bd83d2f66e1ddcef8
SHA512 5f4582723429a44dd517322babae4466efb4e8723c0247754e2a9a2929133d6fee5c3533c4cf567954e2a5aab47940a136a178405de36e38b50e8d4a6d5c504f
SSDEEP 3072:fP4KgyOUcME3Z2D8FXspvicDVFTMEy3R+f3XD5lx14+o4WmHwMaGwt4RLfNJZIFC:fPpNiZs82wVjbIv0/Am5KeCHF
MD5 SHA1 SHA512 SSDEEP

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\ms.pak
Size 351KB
SHA256 ead5a37549b98d55839ffcf0dc8f8201d37d71968ec9138fdea79d7c9b79549d
MD5 6de7b004a86967a3433545b3b38bf89d
SHA1 113bd5b28dda669b27c798e0b46fd680f3a04956
SHA512 239c4acd2c0b6c08fb92fd95b89a302ddefc01ea843950a0247b7310c2b024383ae98286c2d4b83b99833452c41b386e047b2ef33610ef122fcf2f439ef43726
SSDEEP 6144:netFWrIxF1cdyQul9SQq/8dQU5sNNsAMMg8/1:nePTxzhl9ZM8/5ssTM1
MD5 SHA1 SHA512 SSDEEP

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\nb.pak
Size 344KB
SHA256 d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8
MD5 bbae0915edec081b04bb903b689bc40b
SHA1 6a0fc635ce1c431e512b8b3b8448176aa4025556
SHA512 573a9fe43213829a6a4b39e67be25bc330b417750ea6d66e26163de7a80c29f6f5deeb841d9ff8303595943a81fc01ab668aab02a5cac4eda078ed06120138b4
SSDEEP 6144:7ULEQH/NIh/cMi6qOp7f10agtmy07pGzEW5F54hQ3Ohuf:7UXfNUcMi6qOp7f10Ipa15F54xhuf
MD5 SHA1 SHA512 SSDEEP

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\nl.pak
Size 356KB
SHA256 65a9c1efcdd451504e2e9b44b0c8fafd2c3c1445d760fd6c435305e2f8534f59
MD5 9fdf47fef5b549497005ef8efd2a2c59
SHA1 3449de72bfc2be537f4b007c81e5bc5de6ff3d0a
SHA512 3e77178dcd9e8894847039a997c87d5d04eef8a1ace1846132fde229285da08ffc8d3ba697226130bd07ab122a868cc53693981a21f8211c839ccdaba77207cd
SSDEEP 6144:ZZm07gdbu5rVgHkpaN93D+qnkM1D5e/xiGpVx6jPW:Jgdbu5rVsRkID5e/xiGpVxiPW
MD5 SHA1 SHA512 SSDEEP

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\pl.pak
Size 115KB
SHA256 65e00abc424774094e712d040a4f809b1de1b0c3d71ea73a4778a21099d62f12
MD5 135d552d1106b63a7a4c02dba3bbc446
SHA1 c44b6f8fce08b0d07538d156f615ac0005f50a1d
SHA512 ba5f3bdca7ea162dde4edbebee22779da8dddc8b6c9a674d563e66933a56dfd134909074f950ae83951d639469d320b57de3d00f04f650a8b026b0d32ff742d1
SSDEEP 3072:E1hIhOIVNIke+mskAIqDB5jSoIw+gAmiWTb:E1h6akeDO/jSoV+gAmiWTb
MD5 SHA1 SHA512 SSDEEP

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\pt-BR.pak
Size 374KB
SHA256 b26499a256d66feed42b372ea2eaceb75c279694b40a7b5d0f8c1a5c24cf381c
MD5 c68170e4948cf3ae6910364c1e68ce90
SHA1 420f3a392db28b6fd6be44fd702b455518b67bbd
SHA512 29482ced2091873a8c6242a608ed641b3a4d72fb93ccc2eb58d2769c446195f717b438d5633522f457234f3d209029936e9ea4ccd65d45ba8ae0c2df71043797
SSDEEP 6144:fOlSTvnNBXBLBKObqx8yw15nsJmvFp9oX:2lST8K5sJkZ4
MD5 SHA1 SHA512 SSDEEP

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\pt-PT.pak
Size 376KB
SHA256 abb012215610178b7f8203f61f41103546d3949ac3df4acb3a622b01663f39cc
MD5 9b04c89c2d17c7c00a6a4342f0771fec
SHA1 a0886040fd5f870023cc3038f5722f4ba6d7c8b6
SHA512 7c4cf5e7bfad4709db49779c1e3e762b8d0bac6cd736c511711ddca7682e08bc6b3274c9872d88db78bc36b0456b29680d3c4e518d4a401830cfb37b48567bb8
SSDEEP 6144:lo0+dApj44jieJVJJxhO0aJjqPJ8a5RKE6B:lE70vaa5RKP
MD5 SHA1 SHA512 SSDEEP

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\ro.pak
Size 387KB
SHA256 3e89d43b86b2582fd7db236659af47ff459a44c5b5ebcbb0bcc9eda244c8e501
MD5 9b9c22a12ddce43a4a3c0c047a16a5c3
SHA1 901e072d644a79e0b18be2f4a81e6842b070485d
SHA512 196a5bb1b0b5093d4a18279037ef7993525c36c136d4560b7e902c815687f7992ecd2b64d96422911a3468cf3f1478b21df6465d3b31486466cbb5573ff0e7e0
SSDEEP 6144:GjLFrTzaOWFnyEFGw6mf/E1B5Z/loFs22/BuoTr:8LFX2cEFGw6mf81B5Zdoc/rr
MD5 SHA1 SHA512 SSDEEP

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\ru.pak
Size 103KB
SHA256 f6ac8b67327a4ac24a3873b7887576856d9c113ca8fd81255bb033cfd85bb960
MD5 687870890567ce3a0bb8e95ee66d6340
SHA1 af24ac1883dbc1bdc671937fad77a4cf07571b90
SHA512 50820a090ad9e2c0a12ee08ca2acfe9e65916aea6179738abe793ba6b469b6c22a423740b3036e4d9dda70b20a5b8eb9af499f34cb097570e42ba02173db599f
SSDEEP 3072:SGhPYGHttBPC0J5td7rY6ujiXN2hHO3j/jHXzvMV4ra+d+rJbe+xlx0xukFN:3KSjFnY5eXN2hHO3j/jHXzvMBJl5kFN
MD5 SHA1 SHA512 SSDEEP

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\sk.pak
Size 64KB
SHA256 c1779142f740fa2cea9e66373ceebe8670aec4a2381a9307ba3b840021fae3a4
MD5 089cf40312e78d89971f2d884a142c50
SHA1 eb8cf476618ddf3ba6b4ac65ebb4530362dfa73e
SHA512 c199de45e87e170f2d94cf1bfab4dbb0dc98018d91a475f0923895fd732163895a9b11b4bc4c8fbb7af5d106319c3bf6471e6ace2f7bfc5a9cee3fc22b02a5e4
SSDEEP 1536:a/ZlLQD0bl/TJIlA5xG9+8SHoII+8lhs8SWDzBH:ahlLQ6b0f08SIr0tgH
MD5 SHA1 SHA512 SSDEEP

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\sl.pak
Size 64KB
SHA256 4c0f96798d2ac25a6c26dc6604a1df5b77d7f54c63c2b19196aaadf227d21649
MD5 61e8c1ddd226cc73e30c2c1f89b26430
SHA1 a908d74fe29189d0963a47aad7fdc60e70c5bf42
SHA512 c4135d612ea6f24e44dddc9b5ad09e7b6aa1daf6f07a2099ca8d3085698a507e76d8b4ab3b02e87a469c974eb29b0eff63decda24f1cedac77bff592871744eb
SSDEEP 1536:6/JoUk4pjYFlLMy3BuyrCSJrR2rnwzIKuOSGzp1eQkP:UJo0jYFlLH4ywwzrbahP
MD5 SHA1 SHA512 SSDEEP

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\sr.pak
Size 57KB
SHA256 1b401deedd33911d23a1a63b9c542c9756d3e7c5d02b6a54815d2828ba793753
MD5 a7131485eca9c05877aadd4ea03bd24e
SHA1 55edd8e5a563a91cf17b76a817f5ebc0053b6cd2
SHA512 fe3427149b7a3cae340c4c76910191fc2a8cee20e9f495ed2f96f4923ab628857527dac03a974933fc4236c3c95c973d0102243ba033aaa2e6a8eb1da974cb88
SSDEEP 1536:hXPK59PXmWuA24iBUBcf2R5Q9N63ZK70ymX6LP:hagK24iBfScUpKQymKLP
MD5 SHA1 SHA512 SSDEEP

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\sv.pak
Size 347KB
SHA256 690a83bbefe1e97de5d2c1c0791707e8ddc3414a12cf30b79329fa5d21840d6e
MD5 14ecf7684d7987950a9655258d3a72be
SHA1 b1506b3b4be332081dde72bf54a197b1ee0bde66
SHA512 fd9d36c63b00bb1caf6a25f2c797f3a844395f16016a9010819462d647e8e759fd8887e5eae3ef300871f4abef05f4ceca9edb5b30ffdd56efeede9c75f56e30
SSDEEP 6144:szFhLgYoAjMwfTo+BpxzakZ45LX1uZSO8DE/xUDSSXo5Oi55gb1:szvlfJBlR5/5M
MD5 SHA1 SHA512 SSDEEP

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\sw.pak
Size 365KB
SHA256 690027c4a31c4aea00b7d1b32ec6cd3fa50b1eac412ae273ab15e72eb485dd6e
MD5 9632dd7d883fa4deb3963ea663e0ffd4
SHA1 0db135be4b3a7c54c39e9df5034d5576b68ea92e
SHA512 3aac1857784dfecd2ae5f7c4056f58e27a966a6cb949e02eaba56fc1fc283243ed6213f17628d62d435e33fa4771eb43623f25da6510aa4ce6f2149f72ab0d37
SSDEEP 6144:gtvDyRFVwZHZATwBqkN6vesxnCIfujNXDLLKvh8K/5ESaDN+C5C7ChfpnHwQ0/:wDgV4HZBgnENb+WK/5f6C2hq
MD5 SHA1 SHA512 SSDEEP

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\ta.pak
Size 936KB
SHA256 9be97a18356b05ac4c3aa2b7e719eb29b47d8ad406aa50cf0f24bdde1d613083
MD5 714ef30e819d791b41ab093d515e1704
SHA1 5410b58dcaa0bc82146655ed56493581d18d5c04
SHA512 a35074a54dc12a68301553345c69f02ad31bc010690d5f4c4fad5d65b3fd9c3f7c3ec7e3637673d250cb33496b93a9582e28b5210d11137bc0bd5b2e219c0aab
SSDEEP 3072:A/8JcGmGIwp0nFXNWw+Y/q5pG7zctR1cA2F:A/8q9dlZ+Y/q5uzctR1cA2F
MD5 SHA1 SHA512 SSDEEP

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\te.pak
Size 869KB
SHA256 06dd7ae122d6f1f394aeb85089a9c837ec05dad627b0bcc92863ab2830e971c9
MD5 28f500e12a7b91d91d8f99395fce8332
SHA1 885fd6c78259ae38f7dba3887f7fee783c1766bc
SHA512 6f0fe4a527e9c53a41d20f95cafda7a2488bab310eecf68c98271a2db6f3efe5d2180e158b5018a9c56a0580b0735146f0ae07d884f564de1e8780956a10d190
SSDEEP 12288:W3ABW3p1F9YKiTlwJAg5NFOodr/8f4GOQvmEC28+5HX0DTq9OyUpzAkm9dGMnRm9:WFcs53MlU
MD5 SHA1 SHA512 SSDEEP

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\th.pak
Size 731KB
SHA256 7870b92c64f7776c469b4d19be8881ce30a5263cc8287c3d7de573aed43c7dba
MD5 d34a2993eaf0ee6bf65c3729baee426d
SHA1 d796911e57c89b11a603c645dd0e32aad7819d75
SHA512 eb2f4b3cb7741c996acbd121d0c69eda6cfac6bdbd7b8036dc6394ed7e49c9a45641c7983431b5f8c5db685fc7ce958e7c9f5e79837b381caeecf009f79ca4c2
SSDEEP 12288:Wvw2jFdeNP31Mkgs3s5UvfcLRfl1Xj83v6DoTGjyeuLAD57Kle9dwn7j9Fv3o095:WndyqP05h5N
MD5 SHA1 SHA512 SSDEEP

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\tr.pak
Size 371KB
SHA256 e8f86dc87dbf11935863efb3a5af8213a97123889019e98a7ef313b488088790
MD5 0662e2b67524444e843d0104adab0b7e
SHA1 ec39112f57e28010295398c24c6a17e60a88fd47
SHA512 6529083d04e777be3cdaa14f06bb6b3a3d26006ed9d067f7a1bdfcf669856cc6340bf0caf90bbceb75666062fac1bc02ca2d2cff94c6ca5627ccaece6f973a65
SSDEEP 6144:1PkFgKaZCG2Px9DFrKW8IuTu7A27W5geL5J/D+6Mi1SBvEBVwiBNJmt:eFg/L259xZ1R7q5J/0
MD5 SHA1 SHA512 SSDEEP

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\uk.pak
Size 634KB
SHA256 b86358579a9cec015c996c6ae862ddcb8cb558f30eedd0d0b9ef3cb18c3cc130
MD5 0d9b7f3ce815f7bcfd63ee3492350d52
SHA1 6138b5dc296cf406b2314b8b797f9f96de2b40fb
SHA512 17d874849e5eb17bff2ac98c8191f9f38a07a66eccc502122c0ed2bdd6af94eb17db1b0a2477a75c1fd4f3ed00c76b1818eac5bc4093d92eca0d0a5323718cc0
SSDEEP 12288:9hyAqwniyv1mNLtN1nBxs5fB3IjltE07kLNiXEFqS/V2:9hSkiC52Ei
MD5 SHA1 SHA512 SSDEEP

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\ur.pak
Size 552KB
SHA256 d0c8ae8f4f60f04d4eee8cc639ee3b52ad073f5c9ee6fb84c774eb855fd51e9c
MD5 6733dba4f3f0afeffc40bd87300b9d6e
SHA1 610aab026d25f2cec6c636fbaee922c099d26ef2
SHA512 40c1cb7be3709bb6ef01a4e66bfd85e20641020a800292a2a14f4cf188242aa0b8d42cabd0f323acd3d2f257243c7dc04b346a39475343c761af7a1833c3366a
SSDEEP 12288:DptcBCB5/8PzMVEOyMKdAMBa5UUEA2Wb9YQYrtu+co/9NjjFpvJ1:V1HD5gWQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\vi.pak
Size 439KB
SHA256 ff3cdd834569cf9f957a444ab8a51ebe673bd26d7c907a907aedfeed248d4890
MD5 5b8fc875f0b57ac7793e19e0ac6f4899
SHA1 b8ec064365fc29a70bc3a8d3df0ef222ed244fa8
SHA512 f3a9ad912823aaae0d089cf53151cfba0b6fbc2cebf826b1b7c70fec03bf3f967e440558fef94c990c87349b82c36379bf645b828ab6b69eb9f396165dd6178d
SSDEEP 12288:oF+V3qf4Bnzm05d1wSw72J6RlV5qhWziZ+UHNJziVyYH:q+1qwBnzm05PwSS2SX5uEiZ+UtliVyYH
MD5 SHA1 SHA512 SSDEEP

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\zh-CN.pak
Size 319KB
SHA256 4ff334da089d2ffb9c6173de7c918b74c9326ed7bd76317b2696d57861871488
MD5 37b051269289e0eaafd411d374663135
SHA1 fa94bc7fe89475f1d5e1c9a2d88161cc992a638b
SHA512 357350ec552765df460cd66ae59ebcc771df72431baa380247750627ee974f1859bfa423461a2197d4e608063d021faa7fc94bd30c6fe2b1a0cf9b9f7e64ea73
SSDEEP 6144:1n8Pk+kEpgeVB3mARab7SnZKVtRU/0k5UNzRgLUyl1:1n86EpPxhnZKfR/k5UNzRgZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\locales\zh-TW.pak
Size 316KB
SHA256 a0a715a3ef1ead036f0f03d02a8252fbdbd52ce6f8cc5b9298fc1c4494d4e508
MD5 032c4f24764d531d0de876f1e9d51dc9
SHA1 6662a5e3466c1ca415e219634cd67863ff830b32
SHA512 3cf212a638cfe9d08e625f7f70d453263e44721be9550c2aebfb67462666a8d67b87cd2ed613cc12c7d1fc7d1c1368c7d198a6669fa3a10c2c2bf61966c46aff
SSDEEP 6144:yZ5P+3Vtyg2kZuhv2hF4a85DuzpE49/9ywTl:k5PiVlg2hF4a85Duz2U/f
MD5 SHA1 SHA512 SSDEEP

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\resources.pak
Size 3.7MB
SHA256 3ac88bf3e9806f6282b3158a53c48461bccd54521b7475b36d557dfd86b21268
MD5 c580844025d070c6c8437ce0710131ac
SHA1 9e97ead7982609b4eaad675d843ddf1b64eff041
SHA512 5dec2c81fc5ccff42ca974541f126e677ad6ded70e62062c5009871752b7f4ba5b0f1a75503d9f0a7efb003d7357072b0beb0245955ae4df1d4f456929ad9819
SSDEEP 98304:Defgvjou82INBib8PzGc7D3Ch1rA0Z0rwreQVnHbZ:DeIvfIzTL3yhKi0kreS9
MD5 SHA1 SHA512 SSDEEP

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\resources\app.asar
Size 9.2MB
SHA256 e6b7d0ee7c3f7346d7484a73fa46151099b68ccab42f600ba86dec6b2408ad38
MD5 962ddd5ce127b1080aa038fa4caff2a0
SHA1 0ad8fb999d871d5e47b537b4246e2adec2048f65
SHA512 800aacac0289a01a015483204dbd84059bf474367952524c1070ad773253af0132455fcb4113ccc903051a42403111f31b201e0b02d965b77dec256afd3edb64
SSDEEP 196608:Pdlnt/nFs/35Iibx6GyOC/SJXrUBeaFLEVs5WiurNrP0NT:PR/Ov5IiQT/MUFFwVs5vKNrQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

elevate.exe

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\resources\elevate.exe
Size 105KB
SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
MD5 792b92c8ad13c46f27c7ced0810694df
SHA1 d8d449b92de20a57df722df46435ba4553ecc802
SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
MD5 SHA1 SHA512 SSDEEP

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\snapshot_blob.bin
Size 168KB
SHA256 943b27009d41801c5a649caf680e32d4dd25de002787a4ccd86b0925b3aac3a5
MD5 b82ff216a0babf602940759b9a3af870
SHA1 07e8a22dcf8d7be04a6ddbcab3098e040494bb0e
SHA512 da157570afbab7be135f7749df7f4518df1452ea24f98d8f5189430e732ad06ed438afc701cb70451bbc7137b5f35a0c5957df92ecb40d47d54c1071ea79fba1
SSDEEP 1536:DcdXkSCh6cYvaSvdoaApIVzFD41OM4p6kpP39USh9BgyLCIJ/3o4kjK78HdS9ObV:W7FogD41O3p6krnCI9+ql+PAO
MD5 SHA1 SHA512 SSDEEP

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\vk_swiftshader.dll
Size 3.3MB
SHA256 d5cfaa7ee13e398b6394481b6c7252982d5bd82d52ec59e0a2b305e2faf60f19
MD5 5e3afb448cb031ef5cd6c9b8c667a14d
SHA1 ea018009bf6176c4fdff763107f49f29012e1ca3
SHA512 952fe32c34e8d3c0414d0b4d0a883dd91362627836d06193f390896ef381b27a9dce59fc527c8368c346011c4f54aa246c9cd1428a0fbf84f6c02ee8eab93dd1
SSDEEP 49152:KGrnxGr9pGmj8pGtA/bVVku6KZlxsMOtVKOkc4FjHjAW3vZ1B93k1RE7SrLop8c7:lnxY9NURayzxX61u0LU
MD5 SHA1 SHA512 SSDEEP

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
MD5 SHA1 SHA512

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\7z-out\vulkan-1.dll
Size 894KB
SHA256 8d4b92d08f42bfe9d30362b9cf671fd6ae3166ade44f94de17dfc531393b66cd
MD5 c286e1191c5b91130b6d16e23cbd44f3
SHA1 8231664efdf30b07ff0dbc6b6f4e4d46ec574de0
SHA512 5cd07f2edec7bbe8684ea291a9d1dd3709f6a25c55fda3d92938eaf9c3b047ec481e3e7f3fc64973f6833422ab5880f1318a15afa666e2dd207763c7d3822bbd
SSDEEP 12288:0P1VNNJPqXu9D8xeLoCzG4JsZGS5ld/YlmQAuYvyRnsBsoj88C29h:0PXJPq+9QeLpDpmQ/YJBse79h
MD5 SHA1 SHA512 SSDEEP

Submit Download

SpiderBanner.dll

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\SpiderBanner.dll
Size 9KB
SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
MD5 17309e33b596ba3a5693b4d3e85cf8d7
SHA1 7d361836cf53df42021c7f2b148aec9458818c01
SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
MD5 SHA1 SHA512 SSDEEP

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
MD5 SHA1 SHA512 SSDEEP

Submit Download

WinShell.dll

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\WinShell.dll
Size 3KB
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
MD5 SHA1 SHA512

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\nsExec.dll
Size 6KB
SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
MD5 ec0504e6b8a11d5aad43b296beeb84b2
SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
MD5 SHA1 SHA512 SSDEEP

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nstE626.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
MD5 SHA1 SHA512 SSDEEP

Submit Download

installer.exe:SmartScreen

Path C:\Users\Admin\AppData\Local\launcher-updater\installer.exe:SmartScreen
Size 7B
SHA256 82254025d1b98d60044d3aeb7c56eed7c61c07c3e30534d6e05dab9d6c326750
MD5 4047530ecbc0170039e76fe1657bdb01
SHA1 32db7d5e662ebccdd1d71de285f907e3a1c68ac5
SHA512 8f002af3f4ed2b3dfb4ed8273318d160152da50ee4842c9f5d9915f50a3e643952494699c4258e6af993dc6e1695d0dc3db6d23f4d93c26b0bc6a20f4b4f336e
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Launcher\Network\Network Persistent State
Size 588B
SHA256 ee12a39c659896a436abeae46cc5399566535c2025203c3589c4e806ad1ea58b
MD5 e30ec8d7add55392c7999ce948ecf02e
SHA1 e4c69c2952a6eac85af1f292439704ccf2b35335
SHA512 5342d5683adb95bf74ebf8c02f081417298b54835d82d4555090e5e30696910acf1402ad35ae0e0b9b0b43f1d5d5d1a020cfaa7504f8a4656c1a9dec262e8048
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Launcher\Network\Network Persistent State
Size 586B
SHA256 59896045c6d607a82244b86c755b21100228e8e8c870fbb79aa6928fe4114ec8
MD5 31228ba71ffe86429c79d69ff71684e8
SHA1 77ca4c06937a718dd59338678fd21d3f1ceedfdf
SHA512 a10ef2fd1760fd280e8d0c382a00c90898113863a7b9058c9c32719c33c18276407027826f44c10315e0b9202735b99750a5f4627b325eddf78a831fc23d0fc5
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Launcher\Network\Network Persistent State
Size 619B
SHA256 848131b161189ec2abf8ea37f3af302487b4cd204641fc21512b10a029fe5229
MD5 d28ef66ad10b98e4f43385e1ba28c1c9
SHA1 e7f106f2ecc3e8996bbf521e6986179553949d59
SHA512 5fa7ce72a2a328ce56c4c781c7105e92c54b497a09a1aa9d384a6803e62bcc1246346dc375f6758d1df53d1d9cbd26becab98bf4b0eb1f620c49289bdba0210b
MD5 SHA1 SHA512

Submit Download

Network Persistent State~RFe5ab279.TMP

Path C:\Users\Admin\AppData\Roaming\Launcher\Network\Network Persistent State~RFe5ab279.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Roaming\Launcher\Network\TransportSecurity
Size 203B
SHA256 bd667f8f1e92a011f736599fb233416c8756aa3efbf61ae8e5c6a2ff486ce063
MD5 c5f5b871fdbd22e746ac8f682d7867f0
SHA1 4884e87d8362168392361b0b0511015a759c5171
SHA512 72f79e10dd4bfca1b424bea5ed93652ba69005c8ec1eb890a5d3cbcab2c48492f19b1eb95b68a08bc6b7b0b955b1410a6cc6d7ed48c7873d35494424f94f046b
MD5 SHA1 SHA512

Submit Download

TransportSecurity~RFe5a00dc.TMP

Path C:\Users\Admin\AppData\Roaming\Launcher\Network\TransportSecurity~RFe5a00dc.TMP
Size 203B
SHA256 db841faf5049cf841faa3ad64bc9e8698926ef13af6c34988e85284b09050539
MD5 0234bf0699c0729575a2ae6d41816971
SHA1 5e504bc0e6069c3560c9cbdbef7ef8e0eeaf0702
SHA512 228929cddb6608181386b24b018cfb793f06b409dc5767eb99eca5a7059271f288e0afb292835e0d70340fe56fc3b9e9532a2dd7e23c9fdcc60e502c1dfac9e9
MD5 SHA1 SHA512

Submit Download

c54be9d9-9dbc-4cf5-a035-716dd1378616.tmp

Path C:\Users\Admin\AppData\Roaming\Launcher\Network\c54be9d9-9dbc-4cf5-a035-716dd1378616.tmp
Size 203B
SHA256 1a75abfe5f97732c4f46ce69af4e260f69f3ecb03e00deededc47a7333666e47
MD5 be7a9ae4c130b9798a5559ead890d9bb
SHA1 73d74e0f2b131ea040a9757d3af1746c6c342a2b
SHA512 5f65c1d7d9fb25c04e95ed630a00d337074bcb74b12441c0c0f9bc49b245845ffbe0547b94a3f2b8235e8a86b613a8a482fa4c67be909c2cd0dee1a4fcf8a9ed
MD5 SHA1 SHA512

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Nitro-Generator-Set.up (2).exe

Path C:\Users\Admin\Downloads\Nitro-Generator-Set.up (2).exe
Size 11.2MB
SHA256 e610607ec215ef20c5e3b1bcc8b791bd711f5f18d57e5490dbc467401d58b022
MD5 225bafd37823e1fdc0d7048606f7e340
SHA1 8d694bcb50422f86f0a787218acd9609bc209078
SHA512 8ed82f8707b750061ea63c8ed6f6db29c89a7fa84b5ca5f04af0fb12ef74151f20e9ee0f4b59406a925cb823763ecbade66cd4d082a78ba92fc041a6ad37b838
SSDEEP 196608:ZHr6DJMXMS5TXRsggn0ez+zfj0NBqlLRS7mw1Jy4in3KW0OIN6amHGQmtUQEkEi:ZLKihon0eseQRSKwS4inZw6mL+kEi
MD5 SHA1 SHA512 SSDEEP

Submit Download

Nitro-Generator-Set.up (2).exe

Path C:\Users\Admin\Downloads\Nitro-Generator-Set.up (2).exe
Size 7.8MB
SHA256 99128b1f487ab6be9dfa450f95b387bdfc5379c88ee4dd9a9994628671ea6927
MD5 31efee3ff435cd8721b3491b6c593e53
SHA1 c8d45749f67071f8126b70bb11d258b11a696a07
SHA512 4409ec061390be2401321975f8dd1d6522984316f718461c88bca60f6e96b6e6cb33369291d2442ac10842d6f8a62128955df70afd5eda551c55db5cd454d3e0
SSDEEP 196608:ZHr6DJMXMS5TXRsggn0ez+zfj0NBqlLRS7mw1Jy4in3KW0P:ZLKihon0eseQRSKwS4inZu
MD5 SHA1 SHA512 SSDEEP

Submit Download

Nitro-Generator-Set.up (2).exe

Path C:\Users\Admin\Downloads\Nitro-Generator-Set.up (2).exe
Size 3.4MB
SHA256 11b081b988d03c491be9909874761582d2819388833c1f08ebcfc0cfe912023f
MD5 fe044fbe77f89098aca3b7674ce4625a
SHA1 01e2a816ca80258be745f81475481b66a07cddb7
SHA512 8b753a74d0faab814c23e3eb126d0987769845339c395cc14e78dfb27e65c29dbbaf712c01e16a719b1022dae7ac57966e073729ceae1610401648238c10c406
SSDEEP 98304:kqVVLSsUHDwiMa0rZKSTqyj7r/vCSRsgg2g0ez7TTi5G:ZHr6DJMXMS5TXRsggn0ez+c
MD5 SHA1 SHA512 SSDEEP

Submit Download

Nitro-Generator-Set.up (2).exe

Path C:\Users\Admin\Downloads\Nitro-Generator-Set.up (2).exe
Size 640KB
SHA256 5947fcb826194cd55be909afefa52472f1003d38365b975c3963a068cd4e6e06
MD5 3a53770e4a5f019c334bc906bcf0be80
SHA1 9ef58fd082ff034930126fbe8bab257f087ced80
SHA512 b05436d7fb1ef987f319b489a5f2300eaa836ea2c08a2f157d2cff159178a005a47e1f719f2d8460fd69345835b601073f8ce365c56ac5a75319386553f9f361
SSDEEP 12288:gl6AjYyKSRKSQ1S4q3WLCumIafIHz/3wws2iiwDv+2eh+9jjtQQnLk8Kqp:gl6dyKSMb1Tq3WLSI8IHjwvdFDv+utYm
MD5 SHA1 SHA512 SSDEEP

Submit Download

Unconfirmed 544650.crdownload

Path C:\Users\Admin\Downloads\Unconfirmed 544650.crdownload
Size 38.0MB
SHA256 1f8c712dd7454fea6933db4ea42eb5bf1f116521634fd6fbdeb247d6eff4dc53
MD5 01ad1e2756a988b6a33675b3003fcf25
SHA1 c4fd4037f327a842c4a080235e9a8e922158134e
SHA512 b8426d6a5abd1930264ea5f36fe43d940b81735a324b19b700cf71f74738a3aa2c20e059f96eaacf85d2a22ba9a93c0814b9a67d6c483710b37ee26107ee6c64
SSDEEP 786432:Z8Qe1KNxn29dXxC2OwnvSUSdZ7qmYKVvGak+v:Z8l+n6TlBqUgNAKV+Kv
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/728-1234-0x00000000027E0000-0x0000000002BE0000-memory.dmp

Download

memory/1400-1255-0x0000000002530000-0x0000000004530000-memory.dmp

Download

memory/1400-1194-0x00000000748B0000-0x0000000075060000-memory.dmp

Download

memory/1400-1196-0x0000000002530000-0x0000000004530000-memory.dmp

Download

memory/1412-1121-0x0000012D54360000-0x0000012D54361000-memory.dmp

Download

memory/1412-1117-0x0000012D54360000-0x0000012D54361000-memory.dmp

Download

memory/1412-1122-0x0000012D54360000-0x0000012D54361000-memory.dmp

Download

memory/1412-1120-0x0000012D54360000-0x0000012D54361000-memory.dmp

Download

memory/1412-1118-0x0000012D54360000-0x0000012D54361000-memory.dmp

Download

memory/1412-1119-0x0000012D54360000-0x0000012D54361000-memory.dmp

Download

memory/1412-1113-0x0000012D54360000-0x0000012D54361000-memory.dmp

Download

memory/1412-1111-0x0000012D54360000-0x0000012D54361000-memory.dmp

Download

memory/1412-1123-0x0000012D54360000-0x0000012D54361000-memory.dmp

Download

memory/1412-1112-0x0000012D54360000-0x0000012D54361000-memory.dmp

Download

memory/2812-996-0x00007FFD487A0000-0x00007FFD487A1000-memory.dmp

Download

memory/2812-1084-0x00000191D4BE0000-0x00000191D4CAD000-memory.dmp

Download

memory/3728-1208-0x0000000003680000-0x0000000003A80000-memory.dmp

Download

memory/3728-1184-0x0000000000400000-0x000000000046D000-memory.dmp

Download

memory/3728-1211-0x0000000003680000-0x0000000003A80000-memory.dmp

Download

memory/3728-1189-0x0000000000400000-0x000000000046D000-memory.dmp

Download

memory/3728-1213-0x00007FFD49550000-0x00007FFD49745000-memory.dmp

Download

memory/3728-1226-0x0000000003680000-0x0000000003A80000-memory.dmp

Download

memory/3728-1218-0x0000000075650000-0x0000000075865000-memory.dmp

Download

memory/4404-1198-0x00000000748B0000-0x0000000075060000-memory.dmp

Download

memory/4404-1199-0x0000000002F80000-0x0000000004F80000-memory.dmp

Download

memory/4404-1256-0x0000000002F80000-0x0000000004F80000-memory.dmp

Download

memory/4404-1179-0x00000000748B0000-0x0000000075060000-memory.dmp

Download

memory/4404-1177-0x0000000000DC0000-0x0000000000E24000-memory.dmp

Download

memory/4488-1209-0x0000000003790000-0x0000000003B90000-memory.dmp

Download

memory/4488-1221-0x0000000003790000-0x0000000003B90000-memory.dmp

Download

memory/4488-1223-0x0000000075650000-0x0000000075865000-memory.dmp

Download

memory/4488-1215-0x0000000003790000-0x0000000003B90000-memory.dmp

Download

memory/4488-1237-0x0000000003790000-0x0000000003B90000-memory.dmp

Download

memory/4488-1214-0x00007FFD49550000-0x00007FFD49745000-memory.dmp

Download

memory/4488-1204-0x0000000003790000-0x0000000003B90000-memory.dmp

Download

memory/4488-1202-0x0000000000400000-0x000000000046D000-memory.dmp

Download

memory/4820-1225-0x0000000002050000-0x0000000002450000-memory.dmp

Download

memory/4820-1231-0x0000000002050000-0x0000000002450000-memory.dmp

Download

memory/4820-1219-0x0000000000120000-0x0000000000129000-memory.dmp

Download

memory/4820-1235-0x0000000002050000-0x0000000002450000-memory.dmp

Download