Analysis

  • max time kernel
    139s
  • max time network
    155s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/02/2024, 15:17

General

  • Target
    Blitz-1.15.35.exe
  • Size 73.2MB
  • Sample240226-sn7rtahc33
  • SHA256 4aab20889fea1250ebff86fd28bebdaa19cc310c496bcddcfdf2d3db56387a3c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 9 IoCs
  • Loads dropped DLL 42 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Modifies registry class 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 15 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Blitz-1.15.35.exe
    "C:\Users\Admin\AppData\Local\Temp\Blitz-1.15.35.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2636
  • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
    "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Modifies registry class
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:2772
    • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
      C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\Blitz /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\Blitz\Crashpad --url=https://sentry.blitz.gg/api/2/minidump/?sentry_key=d0d473722f3c496a9d6097abb79c953f --annotation=_productName=Blitz --annotation=_version=1.15.35 --annotation=prod=Electron --annotation=ver=15.0.0-alpha.2 --initial-client-data=0x304,0x308,0x30c,0x300,0x310,0x84efa60,0x84efa70,0x84efa7c
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2356
    • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
      "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=gpu-process --field-trial-handle=1256,16268188297665536147,14080294386847172459,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,HardwareMediaKeyHandling,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1264 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1440
    • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
      "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1256,16268188297665536147,14080294386847172459,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,HardwareMediaKeyHandling,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --use-fake-device-for-media-stream --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --enable-sandbox --mojo-platform-channel-handle=1632 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:1040
    • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
      "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --enable-sandbox --app-user-model-id=com.blitz.app --app-path="C:\Users\Admin\AppData\Local\Programs\Blitz\resources\app.asar" --enable-sandbox --disable-blink-features=Auxclick --js-flags=--expose_gc --use-fake-ui-for-media-stream --field-trial-handle=1256,16268188297665536147,14080294386847172459,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,HardwareMediaKeyHandling,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1928 /prefetch:1
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2520
    • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
      "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=gpu-process --field-trial-handle=1256,16268188297665536147,14080294386847172459,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,HardwareMediaKeyHandling,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1264 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3036
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      powershell.exe -NoProfile -NonInteractive -InputFormat None -Command "Get-AuthenticodeSignature 'C:\Users\Admin\AppData\Local\blitz-updater\pending\temp-Blitz-2.0.98.exe' | ConvertTo-Json -Compress | ForEach-Object { [Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($_)) }"
      2⤵
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2052
    • C:\Users\Admin\AppData\Local\Programs\Blitz\resources\elevate.exe
      C:\Users\Admin\AppData\Local\Programs\Blitz\resources\elevate.exe C:\Users\Admin\AppData\Local\blitz-updater\pending\Blitz-2.0.98.exe --updated /S --force-run
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1064
      • C:\Users\Admin\AppData\Local\blitz-updater\pending\Blitz-2.0.98.exe
        "C:\Users\Admin\AppData\Local\blitz-updater\pending\Blitz-2.0.98.exe" --updated /S --force-run
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:1496
        • C:\Windows\SysWOW64\cmd.exe
          cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Blitz.exe" | %SYSTEMROOT%\System32\find.exe "Blitz.exe"
          4⤵
            PID:2072
            • C:\Windows\SysWOW64\tasklist.exe
              tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Blitz.exe"
              5⤵
              • Enumerates processes with tasklist
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              PID:2248
            • C:\Windows\SysWOW64\find.exe
              C:\Windows\System32\find.exe "Blitz.exe"
              5⤵
                PID:1516
      • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
        "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --updated
        1⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2748

      Network

            MITRE ATT&CK Enterprise v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            Blitz.exe

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
            • Size 768KB
            • SHA256 9a101b5303a16f7f8683b1c787b1cc85a09ca8e38bfd5eaedd768092579df7d2
            • MD5 SHA1 SHA512 SSDEEP

            Blitz.exe

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
            • Size 704KB
            • SHA256 0e994deb8a7c2963ef1a6f4bd92e300e0fdc8ed136d08149a910e33f6cdee93b
            • MD5 SHA1 SHA512 SSDEEP

            Blitz.exe

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
            • Size 1.9MB
            • SHA256 f8a10c258ee6aeb7aae6527f5f9bb500eb3f5b42d5736322469202fa7a421002
            • MD5 SHA1 SHA512 SSDEEP

            Blitz.exe

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
            • Size 1.1MB
            • SHA256 73d4f91763ee456923ae0bc7777073bd4180ffc3b7a62d4fcb0aace6d4714795
            • MD5 SHA1 SHA512 SSDEEP

            Blitz.exe

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
            • Size 576KB
            • SHA256 377838deb4a5487f27ee66c568072c87d137a8b5686eb92fa130292fdf76d792
            • MD5 SHA1 SHA512 SSDEEP

            Blitz.exe

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
            • Size 1024KB
            • SHA256 2d762938904eede24d5c3ecf94c2d9ae544cfdbd395b050d651de6cf93163908
            • MD5 SHA1 SHA512 SSDEEP

            Blitz.exe

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
            • Size 1.7MB
            • SHA256 2e3f4803512544956beb816ac4fab93f252559763a753c5e3561d68edf5f6423
            • MD5 SHA1 SHA512 SSDEEP

            D3DCompiler_47.dll

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\D3DCompiler_47.dll
            • Size 3.4MB
            • SHA256 c8df2ad80f2f606e635e6a1510ab9bb0eec6507e8d449a5e96971f6f8f67d824
            • MD5 SHA1 SHA512 SSDEEP

            chrome_100_percent.pak

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\chrome_100_percent.pak
            • Size 139KB
            • SHA256 06e55f7514d5b2cfb080b69308fe2d8d40c47dece689271d0900f49a86aae8f0
            • MD5 SHA1 SHA512 SSDEEP

            chrome_200_percent.pak

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\chrome_200_percent.pak
            • Size 203KB
            • SHA256 c03272210b2fe01cc676a3768f65124ce5e374d7b7f9960ef84a292aade1f2df
            • MD5 SHA1 SHA512 SSDEEP

            ffmpeg.dll

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\ffmpeg.dll
            • Size 960KB
            • SHA256 5177fa45b9a9adb22d733cda6c4cfaa5b4e40d83b066f490fb44d756077cae82
            • MD5 SHA1 SHA512 SSDEEP

            icudtl.dat

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\icudtl.dat
            • Size 8KB
            • SHA256 7de921a1e374c4f51dc882a609cfead656666fdbc8d346411b0fea9a37286625
            • MD5 SHA1 SHA512 SSDEEP

            libglesv2.dll

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\libglesv2.dll
            • Size 4.8MB
            • SHA256 9645bd9d900fdbcdd7f67129cb5920ceced6374063ef03646677a085ef93ccc1
            • MD5 SHA1 SHA512 SSDEEP

            en-US.pak

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\locales\en-US.pak
            • Size 91KB
            • SHA256 84f6e8fc1cd59b00ca30ad7434add523d08c51f4212291c7f25fe5baa0a2edb9
            • MD5 SHA1 SHA512 SSDEEP

            resources.pak

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources.pak
            • Size 832KB
            • SHA256 5b8b4290c1865b7f79383d5fa3390792d6262f5b28b3f30b9533447c3bc8d935
            • MD5 SHA1 SHA512 SSDEEP

            .env.production

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\.env.production
            • Size 389B
            • SHA256 289e57f10e1df2147c34e1055b5b79fe89d45d7204bfc6bb609fac7162a0af06
            • MD5 SHA1 SHA512

            app.asar

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\app.asar
            • Size 1.3MB
            • SHA256 60b03a19c03ffebaba73bc875a2c0cf708be98ebc34150124f531967e1842d57
            • MD5 SHA1 SHA512 SSDEEP

            PinManager.exe

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\PinManager.exe
            • Size 36KB
            • SHA256 ad65d2dc6f4993b8c55823386821ac4ada4b2838d195e5f53f4a1279f8e0d9d8
            • MD5 SHA1 SHA512 SSDEEP

            blitz-overlay.dll

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\blitz-overlay.dll
            • Size 1.7MB
            • SHA256 6af97585953a5ba4ebed672330d51eba208b94392807ec0a009a227ca1726da2
            • MD5 SHA1 SHA512 SSDEEP

            blitz_core.node

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\blitz_core.node
            • Size 485KB
            • SHA256 1ba42dc32bb40722e22b765b6687dc16e8611a2285be034370ef0f492e713a5b
            • MD5 SHA1 SHA512 SSDEEP

            electron_overlay.node

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\electron_overlay.node
            • Size 1.1MB
            • SHA256 57178ce0ca43069ba75e43520e314f87b50a1da1dd934496727efc5a27d0e2a1
            • MD5 SHA1 SHA512 SSDEEP

            injector_x64.exe

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\injector_x64.exe
            • Size 64KB
            • SHA256 584b57a54a5ea333d1c3ca714df177e035f6b977b07dd50e701997cc3c6a2747
            • MD5 SHA1 SHA512 SSDEEP

            n_overlay.dll

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\n_overlay.dll
            • Size 757KB
            • SHA256 6dab08574b02e8cfc49d21b99a0e80e1a82cdd8ecbf47f4c995d3a1685e7d0d6
            • MD5 SHA1 SHA512 SSDEEP

            n_overlay.x64.dll

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\n_overlay.x64.dll
            • Size 917KB
            • SHA256 48733e6726cbf9940809663d468a01758a82248b6d3915542850c42611bd4f02
            • MD5 SHA1 SHA512 SSDEEP

            native-utils.dll

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\native-utils.dll
            • Size 203KB
            • SHA256 bed8b8f289279164888a600a049d2e954f13a33ca76d2919cfdf03d4efb59b19
            • MD5 SHA1 SHA512 SSDEEP

            safe_x64_injector.exe

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\safe_x64_injector.exe
            • Size 19KB
            • SHA256 43aeb443bd56514aaa03c2b0872b5c3c770ec0dcca2ce4573b8152cb7eec5e4a
            • MD5 SHA1 SHA512 SSDEEP

            safe_x86_injector.exe

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\safe_x86_injector.exe
            • Size 87KB
            • SHA256 cd93e6e1fe499b86609b7ca8e6f0725dedc21821a8ea58115aa43d5ff3d50d0a
            • MD5 SHA1 SHA512 SSDEEP

            tft-internal.dll

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\tft-internal.dll
            • Size 254KB
            • SHA256 bafbb466243d30c10967e6228309ce00ae62ff98a8a19609fe313cdb307c3a69
            • MD5 SHA1 SHA512 SSDEEP

            v8_context_snapshot.bin

            • Path C:\Users\Admin\AppData\Local\Programs\Blitz\v8_context_snapshot.bin
            • Size 8KB
            • SHA256 ea1b066aa9bf8da627b715f237b97061bc090949fbde767676400ced80b51d6b
            • MD5 SHA1 SHA512 SSDEEP

            CabEB89.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\CabEB89.tmp
            • Size 65KB
            • SHA256 c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
            • MD5 SHA1 SHA512 SSDEEP

            TarED03.tmp

            • Path C:\Users\Admin\AppData\Local\Temp\TarED03.tmp
            • Size 19KB
            • SHA256 f8c7416ec28aa706a3909acb99791488cca259e243ea97436c76bbb0eeaaf220
            • MD5 SHA1 SHA512 SSDEEP

            .electrum

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\.electrum
            • Size 8B
            • SHA256 8c562718401a5de2356ac032aae2efae3af2760d615cf82aa09fa226ae2cb52e
            • MD5 SHA1 SHA512

            Blitz.exe

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\Blitz.exe
            • Size 192KB
            • SHA256 1c99c8edeb8f93acb471b64be20a1f920b933e7c5b3873319883fbf6575f8aee
            • MD5 SHA1 SHA512 SSDEEP

            LICENSE.electron.txt

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\LICENSE.electron.txt
            • Size 1KB
            • SHA256 fd8fba3293b11d24886743418bfb624de8c46f81772b60a7e1b08a029e24c5b9
            • MD5 SHA1 SHA512

            LICENSES.chromium.html

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\LICENSES.chromium.html
            • Size 960KB
            • SHA256 f46f186b142ba8e99e323942ee3f5886e9a629292eb4c11313e19eea03dc3aa1
            • MD5 SHA1 SHA512 SSDEEP

            chrome_100_percent.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\chrome_100_percent.pak
            • Size 126KB
            • SHA256 02125a23b4ba2c49a30db2ef5d741a96d519ecae0f37eaf4d102f30f88948078
            • MD5 SHA1 SHA512 SSDEEP

            chrome_200_percent.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\chrome_200_percent.pak
            • Size 175KB
            • SHA256 b48dc9f6ae23d63e4db8010830f58a9bb66885f9f2f86856ec848d656937a024
            • MD5 SHA1 SHA512 SSDEEP

            d3dcompiler_47.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\d3dcompiler_47.dll
            • Size 836KB
            • SHA256 2ad3367c668b69703147a86df777f891654892f303cdec4e4df3cc697b15186a
            • MD5 SHA1 SHA512 SSDEEP

            ffmpeg.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\ffmpeg.dll
            • Size 704KB
            • SHA256 9c8710b2dfbbc8b2e9c4cdc17c4fad5b5c49a2701b38e79128d33ffd16c81f21
            • MD5 SHA1 SHA512 SSDEEP

            icudtl.dat

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\icudtl.dat
            • Size 779KB
            • SHA256 45cd1eeaee5b0856f5f94050630e61adef9bf0468bb3a1706bd4bf36473bf53c
            • MD5 SHA1 SHA512 SSDEEP

            libEGL.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\libEGL.dll
            • Size 370KB
            • SHA256 b6b411a4a252ec3c8c247440db143bd6022a0294c005dd5d97521fad238acc87
            • MD5 SHA1 SHA512 SSDEEP

            libGLESv2.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\libGLESv2.dll
            • Size 1.1MB
            • SHA256 b84dccbf3f3418472fe2540f0cd88295360165e230cf357d846ee194cbee82f8
            • MD5 SHA1 SHA512 SSDEEP

            af.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\af.pak
            • Size 353KB
            • SHA256 0ad547bb1dc57907adeb02e1be3017cce78f6e60b8b39395fe0e8b62285797a1
            • MD5 SHA1 SHA512 SSDEEP

            am.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\am.pak
            • Size 569KB
            • SHA256 fa1e44215bd5acc7342c431a3b1fddb6e8b6b02220b4599167f7d77a29f54450
            • MD5 SHA1 SHA512 SSDEEP

            ar.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\ar.pak
            • Size 624KB
            • SHA256 00861d9fa5763cc5c3152edb4a5c956c6bc4f56311ce2ed9e6b496181624ab5e
            • MD5 SHA1 SHA512 SSDEEP

            bg.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\bg.pak
            • Size 320KB
            • SHA256 006792d5689b6c7c3238d5cb5bb71fa2ad2ab7e7f8ed752afd38499fc1ec5810
            • MD5 SHA1 SHA512 SSDEEP

            bn.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\bn.pak
            • Size 838KB
            • SHA256 1ea245646a4b4386606f03c8a3916a3607e2adbbc88f000976be36db410a1e39
            • MD5 SHA1 SHA512 SSDEEP

            ca.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\ca.pak
            • Size 400KB
            • SHA256 f7f54b55a917a0f68e4b7ed7a3e6feabb224c52d09786b939712607ebe8ab0ea
            • MD5 SHA1 SHA512 SSDEEP

            cs.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\cs.pak
            • Size 409KB
            • SHA256 877a0a3dcb5d393365b2f775faff0d3593dd84b380a27dc72025597061a50ba7
            • MD5 SHA1 SHA512 SSDEEP

            da.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\da.pak
            • Size 371KB
            • SHA256 40b32636ffb813574d8a063ce7e74860ab06b93a9b16dd56b5b6aa602b5e6943
            • MD5 SHA1 SHA512 SSDEEP

            de.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\de.pak
            • Size 397KB
            • SHA256 9c335a4e85b4ac58ed386d89d284be053ef288b2706a4cae433d91625ec1b31e
            • MD5 SHA1 SHA512 SSDEEP

            el.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\el.pak
            • Size 256KB
            • SHA256 80a70f9503086b0ca0071e59c4f47b6444d38a47bc9ceb88bdc15949eabebd8d
            • MD5 SHA1 SHA512 SSDEEP

            en-GB.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\en-GB.pak
            • Size 324KB
            • SHA256 6b0e81b2198e025eae1e2f6d5d3a33ccce034d1f4bc59e4cade1b5f5adb99f1a
            • MD5 SHA1 SHA512 SSDEEP

            en-US.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\en-US.pak
            • Size 326KB
            • SHA256 1d20e626444759c2b72aa6e998f14a032408d2b32f957c12ec3abd52831338fb
            • MD5 SHA1 SHA512 SSDEEP

            es-419.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\es-419.pak
            • Size 395KB
            • SHA256 77114f519743741a488a9b57cdc7190f0507c37dc3b29811704a048172ba6736
            • MD5 SHA1 SHA512 SSDEEP

            es.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\es.pak
            • Size 394KB
            • SHA256 d539c88c4493cb1d9eae600611e3119fe129ec95149049f4b62fc3a97d78ca61
            • MD5 SHA1 SHA512 SSDEEP

            et.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\et.pak
            • Size 356KB
            • SHA256 c351b84558214420495bed6d882d37496483cc66b0e10400ca872e3fc4145b66
            • MD5 SHA1 SHA512 SSDEEP

            fa.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\fa.pak
            • Size 192KB
            • SHA256 0e496dbb74f12d4ceb34b79e2593a0eebb4c87944c8a7b64366255bd4da6b2a5
            • MD5 SHA1 SHA512 SSDEEP

            fi.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\fi.pak
            • Size 365KB
            • SHA256 6581fca26336f66d8ba898ec1253b237db30e7cd1a25fc788290d7ace96fa6e1
            • MD5 SHA1 SHA512 SSDEEP

            fil.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\fil.pak
            • Size 410KB
            • SHA256 db4a63fa0d5b2baba71d4ba0923caed540099db6b1d024a0d48c3be10c9eed5a
            • MD5 SHA1 SHA512 SSDEEP

            fr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\fr.pak
            • Size 426KB
            • SHA256 b62c51b85545b3f5d70ac9c684a111689044636eafaeb196f5d52760e0f96f91
            • MD5 SHA1 SHA512 SSDEEP

            gu.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\gu.pak
            • Size 812KB
            • SHA256 9c210e3143f99df59bebea6bdb6e30959f8520d59a20fffd437f7029840bb3a9
            • MD5 SHA1 SHA512 SSDEEP

            he.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\he.pak
            • Size 128KB
            • SHA256 d7a22c2d34b9dbeb8a0efd1807e0e0162e7c1342980892c0e377dcbf444931b5
            • MD5 SHA1 SHA512 SSDEEP

            hi.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\hi.pak
            • Size 848KB
            • SHA256 ccf7a557d0f8353ff3d656d4c2a4fca2d462ed2cc3d18c599d98f4d57b23c615
            • MD5 SHA1 SHA512 SSDEEP

            hr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\hr.pak
            • Size 397KB
            • SHA256 6ea4b1a28cf567cca73ccdb7eec631fffba3b49acc41e3c88b448514578d80da
            • MD5 SHA1 SHA512 SSDEEP

            hu.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\hu.pak
            • Size 427KB
            • SHA256 b59f932df822ab1a87e8aab4bbb7c549db15899f259f4c50ae28f8d8c7ce1e72
            • MD5 SHA1 SHA512 SSDEEP

            id.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\id.pak
            • Size 350KB
            • SHA256 0853a5543923b7a8db5989ebb8ebe8f9fb6271bfa59b94f5843f97de4401e2d8
            • MD5 SHA1 SHA512 SSDEEP

            it.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\it.pak
            • Size 388KB
            • SHA256 d011fd39c3cbab740a7944a60a8dd48d6f76c563ea473cfd1f569c5e6fc9fa4e
            • MD5 SHA1 SHA512 SSDEEP

            ja.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\ja.pak
            • Size 472KB
            • SHA256 ba2acb635671a48ed0bf8cdc6e0a0318cfb33eb74b4171c6b483b95f2a167bc5
            • MD5 SHA1 SHA512 SSDEEP

            kn.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\kn.pak
            • Size 64KB
            • SHA256 fcb88a8ab08fe4d175cb879c8eb6694fbe1c7823559ba79b2870a7eb6595ea10
            • MD5 SHA1 SHA512 SSDEEP

            ko.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\ko.pak
            • Size 398KB
            • SHA256 8d131066e2fa004e11f9128162bfc354d3254381059d6c852bf88a55859ae3e8
            • MD5 SHA1 SHA512 SSDEEP

            lt.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\lt.pak
            • Size 429KB
            • SHA256 8a5d6e29833374e0f74fd7070c1b20856cb6b42ed30d18a5f17e6c2e4a8d783e
            • MD5 SHA1 SHA512 SSDEEP

            lv.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\lv.pak
            • Size 427KB
            • SHA256 0ff66161377be2fb8b2b456a64dd910d8375a2b9f1f6f22333540a77111903d6
            • MD5 SHA1 SHA512 SSDEEP

            ml.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\ml.pak
            • Size 974KB
            • SHA256 27b7947e36a521403de094cc563d5eced1e46f98e4d6b872fd424352f798e84d
            • MD5 SHA1 SHA512 SSDEEP

            mr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\mr.pak
            • Size 797KB
            • SHA256 671c3cb2a805a63a275ad608d37d0577c6a2813dd67fb6c2b70f8232323aac04
            • MD5 SHA1 SHA512 SSDEEP

            ms.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\ms.pak
            • Size 365KB
            • SHA256 c6471aee5f34f31477d57f593b09cb1de87f5fd0f9b5e63d8bab4986cf10d939
            • MD5 SHA1 SHA512 SSDEEP

            nb.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\nb.pak
            • Size 358KB
            • SHA256 4f44789a2c38edc396a31aba5cc09d20fb84cd1e06f70c49f0664289c33cd261
            • MD5 SHA1 SHA512 SSDEEP

            nl.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\nl.pak
            • Size 19KB
            • SHA256 7a015ce5c8aa82b2d3ffbf6be2e039725da99b75443b5e1b954b15651fc88ca7
            • MD5 SHA1 SHA512 SSDEEP

            pl.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\pl.pak
            • Size 412KB
            • SHA256 0948238576efb502327af4040c1d9eb1346fbf1bdcee35cd46746b170a7ea6a7
            • MD5 SHA1 SHA512 SSDEEP

            pt-BR.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\pt-BR.pak
            • Size 389KB
            • SHA256 7f41c3a58d08d98f21232e7c85839c9dec0053b447bb4dae867d2faadb278d45
            • MD5 SHA1 SHA512 SSDEEP

            pt-PT.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\pt-PT.pak
            • Size 391KB
            • SHA256 60a5a7f03d4d54397ca04be0c89d1f67a496b72807c0bd660c076bc945b40339
            • MD5 SHA1 SHA512 SSDEEP

            ro.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\ro.pak
            • Size 403KB
            • SHA256 3a58f2275ea6a2baa68924b1dab6b0f06abf8b6657a878dea94b0060a95e38f0
            • MD5 SHA1 SHA512 SSDEEP

            ru.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\ru.pak
            • Size 656KB
            • SHA256 e4edec80c9e29357bcf31eda5d8b046c6c9fbc6434a0b5594b6a906d5f1407d1
            • MD5 SHA1 SHA512 SSDEEP

            sk.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\sk.pak
            • Size 416KB
            • SHA256 b7ba1d08ac8498ea6a37186a51b30d6d0db17136ac734982af4dab97f4a6cd9a
            • MD5 SHA1 SHA512 SSDEEP

            sl.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\sl.pak
            • Size 401KB
            • SHA256 ab2079923e2baa27c220df2f1559af8edc785f8e9fe2e12c8ecb0e0e7e7d0a09
            • MD5 SHA1 SHA512 SSDEEP

            sr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\sr.pak
            • Size 616KB
            • SHA256 ab96a18177af90495e2e3c96292638a775aa75c1d210ca6a6c18fbc284cd815b
            • MD5 SHA1 SHA512 SSDEEP

            sv.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\sv.pak
            • Size 361KB
            • SHA256 e1cbce672de3ba3a01272b9b763dcfd8229fba0883df2b4117ac6b0f9916c073
            • MD5 SHA1 SHA512 SSDEEP

            sw.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\sw.pak
            • Size 8KB
            • SHA256 7c3247d01fccf06133b8a27dd07cd246837f830f8c1479827fa5a32dfa53f16e
            • MD5 SHA1 SHA512 SSDEEP

            ta.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\ta.pak
            • Size 964KB
            • SHA256 d5bfe0699342b8bba6c4c73c115b1c7f3f903c4ed95d77461c34369f2f60d5ee
            • MD5 SHA1 SHA512 SSDEEP

            te.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\te.pak
            • Size 894KB
            • SHA256 aa2b9d1ad8591e91872c3fee62b111b74d6e7e890a47d0bcc388947ae5245290
            • MD5 SHA1 SHA512 SSDEEP

            th.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\th.pak
            • Size 753KB
            • SHA256 3d4556bc0f26b89d090a8a779a8fda8f6fbe157a23181cbfb1d6c67a6212b864
            • MD5 SHA1 SHA512 SSDEEP

            tr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\tr.pak
            • Size 385KB
            • SHA256 5a7e1c8b572f67ed40e9d5107ddd6f8791b03138bb9933cfb26f1678b2c4a9cd
            • MD5 SHA1 SHA512 SSDEEP

            uk.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\uk.pak
            • Size 657KB
            • SHA256 e914b8956745a14d9d64f12698805e0910f9d3581dd380468949b54576fad2a6
            • MD5 SHA1 SHA512 SSDEEP

            ur.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\ur.pak
            • Size 571KB
            • SHA256 3941364d0278e2c4d686faa4a135d16a457b4bc98c5a08e62aa12f3adc09aa7f
            • MD5 SHA1 SHA512 SSDEEP

            vi.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\vi.pak
            • Size 455KB
            • SHA256 ef3ddadb90dc73b73e25e9608626ce68d6778445812b8bd2f6c81e1f1e4bff16
            • MD5 SHA1 SHA512 SSDEEP

            zh-CN.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\zh-CN.pak
            • Size 332KB
            • SHA256 539f0bfdb461bf777aab14a4baaf47c8c32ae1856cc4ac93b23ce73dc50ba02a
            • MD5 SHA1 SHA512 SSDEEP

            zh-TW.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\locales\zh-TW.pak
            • Size 330KB
            • SHA256 9689ba3f2dc7248a3ab5db3b97d473e29464afbc7f2d1c7035f7e8e9a1c05aa4
            • MD5 SHA1 SHA512 SSDEEP

            resources.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources.pak
            • Size 960KB
            • SHA256 b47e77be00c77509220deb775135e0359e21ee08e06fbe4d6b2e6c937ccd8e3c
            • MD5 SHA1 SHA512 SSDEEP

            .env.production

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\.env.production
            • Size 409B
            • SHA256 e5746cebef7e0550b47ddf2f6c7ce26153b8bb7e7d78afdc4581b21d2d61a121
            • MD5 SHA1 SHA512

            app-update.yml

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app-update.yml
            • Size 164B
            • SHA256 38170150435f16f6eb41e2528a78073797357d454f0da847c3f0241dd4e09f58
            • MD5 SHA1 SHA512

            app.asar

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar
            • Size 4.0MB
            • SHA256 832b7d5c3529c0cc7d3c2b89fd46a37481fadbebbdbff95e910a7c96ebee15f2
            • MD5 SHA1 SHA512 SSDEEP

            node.napi.armv8.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\android-arm64\node.napi.armv8.node
            • Size 317KB
            • SHA256 2f64fd8131f9b323c16feddae331e65a588129c9e70b458dd78dc984ed5dd465
            • MD5 SHA1 SHA512 SSDEEP

            node.napi.armv7.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\android-arm\node.napi.armv7.node
            • Size 323KB
            • SHA256 6651e0b7db51176ea6a4613e89a478711d7ca6e66f2f6ed6f6456108674d1569
            • MD5 SHA1 SHA512 SSDEEP

            node.napi.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\darwin-x64\node.napi.node
            • Size 281KB
            • SHA256 84808e4380ed8a7ce9104037e700f509015197bcf82b9f417cf426e4e0b14bb4
            • MD5 SHA1 SHA512 SSDEEP

            node.napi.armv8.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\linux-arm64\node.napi.armv8.node
            • Size 393KB
            • SHA256 2504593370f95285dce8a41a17cf5d468506a11a4ba36112155e88a4e20ecc1c
            • MD5 SHA1 SHA512 SSDEEP

            node.napi.armv6.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\linux-arm\node.napi.armv6.node
            • Size 335KB
            • SHA256 a43b0b848910aec87f53675d826fe0595834933e6652f9ea7c7d97e82ddbfed0
            • MD5 SHA1 SHA512 SSDEEP

            node.napi.glibc.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\linux-x64\node.napi.glibc.node
            • Size 469KB
            • SHA256 84be7bceeebf718d7efe41c51425027e86d7cdbbeb3d5c4665bb87a183080bd2
            • MD5 SHA1 SHA512 SSDEEP

            node.napi.musl.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\linux-x64\node.napi.musl.node
            • Size 405KB
            • SHA256 ce51540197bbdba835d0adf02047f9e86dd27c8dd4dfea41de8ff969def2c9b3
            • MD5 SHA1 SHA512 SSDEEP

            node.napi.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\win32-x64\node.napi.node
            • Size 486KB
            • SHA256 a5e7f1970623d39f7a51d512726b0a6a113d8ab0acb117758bfc9a3f407882f7
            • MD5 SHA1 SHA512 SSDEEP

            ci.yml

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\.github\workflows\ci.yml
            • Size 2KB
            • SHA256 621ab98517f0305b666608e6696ea116ae1bb5fa64a9185f1ec8c769f41f6c7b
            • MD5 SHA1 SHA512

            LICENSE

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\LICENSE
            • Size 1KB
            • SHA256 9415b233c6c5a6fc3ac6977cde3530d149f45a61d86b2fd9611cbca4bf08f4e2
            • MD5 SHA1 SHA512

            lzmajs

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\bin\lzmajs
            • Size 1KB
            • SHA256 f29aae866c7bb66e5424a730c473231c1329f6bb0636ad33945299a4c4957a50
            • MD5 SHA1 SHA512

            index.js

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\index.js
            • Size 13KB
            • SHA256 77d9568c9c5479953a4588875b9d5c4a06ce9f926f9fab96d7678e68a74e6985
            • MD5 SHA1 SHA512 SSDEEP

            liblzma-build.sh

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\liblzma-build.sh
            • Size 138B
            • SHA256 ae56a4c3e521e37c5677e4d867e79ab46ac23b3f5682a7e2893497232a0326ce
            • MD5 SHA1 SHA512

            liblzma-config.sh

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\liblzma-config.sh
            • Size 733B
            • SHA256 100d04495f6b1804aef3983377d91509864758cf9aa7470d28a24b69f0bce116
            • MD5 SHA1 SHA512

            package.json

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\package.json
            • Size 777B
            • SHA256 492448e7c5e26eada710d45c14a2d8eb5c6333eb39dbaff4631befaad37e0ed6
            • MD5 SHA1 SHA512

            electron.napi.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-arm64\electron.napi.node
            • Size 227KB
            • SHA256 b322385eb19c1d0737144fbe2fef3c5d27b5e5531878f5a21700489785e51ac4
            • MD5 SHA1 SHA512 SSDEEP

            node.napi.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-arm64\node.napi.node
            • Size 227KB
            • SHA256 7eb79b4ace336fc1f31923f7407d997d2676f95a5fab4a3dc4688be2ed659f1a
            • MD5 SHA1 SHA512 SSDEEP

            electron.napi.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-x64\electron.napi.node
            • Size 434KB
            • SHA256 37713bcaf2468d4a60c94652dd2ed8801fff57f270650b2fee90428bc5ad290a
            • MD5 SHA1 SHA512 SSDEEP

            node.napi.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-x64\node.napi.node
            • Size 434KB
            • SHA256 5c77fb5f183ee197b110c76440b390d74aae7c35ab1ea48861308d8b62c22f65
            • MD5 SHA1 SHA512 SSDEEP

            electron.napi.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\linux-arm64\electron.napi.node
            • Size 421KB
            • SHA256 99006146d3f02a3701a254dbf57d10175a2950fa7d85b4dee90b99c997d882da
            • MD5 SHA1 SHA512 SSDEEP

            node.napi.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\linux-arm64\node.napi.node
            • Size 421KB
            • SHA256 9a03f9e38254ac721d042561b23842c944db243c3c30fb21f240a577a34c8cb8
            • MD5 SHA1 SHA512 SSDEEP

            electron.napi.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-ia32\electron.napi.node
            • Size 619KB
            • SHA256 e73951d1d9f4155cadbeb530be14dd32e1abc4ad9332527507ede586ce41e095
            • MD5 SHA1 SHA512 SSDEEP

            liblzma.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-ia32\liblzma.dll
            • Size 148KB
            • SHA256 37c4a4277ac066522402c71fd03bea5e8900fefd505ccf9b6399128c92182780
            • MD5 SHA1 SHA512 SSDEEP

            node.napi.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-ia32\node.napi.node
            • Size 619KB
            • SHA256 ab5e095b49f13ef86a3dc83f0c11b9bee1fef24a4cf0616b0015d0ebabd443e5
            • MD5 SHA1 SHA512 SSDEEP

            electron.napi.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-x64\electron.napi.node
            • Size 797KB
            • SHA256 5c7dd24a625d806e37cca949e52ec348ef0054a902e8700f9fdb61cac44e4c9e
            • MD5 SHA1 SHA512 SSDEEP

            liblzma.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-x64\liblzma.dll
            • Size 147KB
            • SHA256 fc7348418be392d5ecebd7b9f07c1ae5bc530260fef923801b140088eddce96e
            • MD5 SHA1 SHA512 SSDEEP

            node.napi.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-x64\node.napi.node
            • Size 796KB
            • SHA256 c738ba03c84330556184b07d4f9a94bb875807834f46c0b49ea42c8e45df714f
            • MD5 SHA1 SHA512 SSDEEP

            filter-array.cpp

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\filter-array.cpp
            • Size 1KB
            • SHA256 0cbca5a1c726cbb06e9f466727cdd2eeabf33588f9b54138eaf14f5e8eb1f988
            • MD5 SHA1 SHA512

            index-parser.cpp

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\index-parser.cpp
            • Size 15KB
            • SHA256 9fe709a77ab9073a903922a88f242f997985fb62e997e1c876685a67beac54cd
            • MD5 SHA1 SHA512 SSDEEP

            index-parser.h

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\index-parser.h
            • Size 7KB
            • SHA256 e3f9760df002dcf558888484cd4eea67b4812b9ea46411d4574e1f1270d7feeb
            • MD5 SHA1 SHA512 SSDEEP

            liblzma-functions.cpp

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\liblzma-functions.cpp
            • Size 2KB
            • SHA256 0061d0cf1cafa5664e456d28156b26b864eb3db973e4d7d66c8e6a00951a5820
            • MD5 SHA1 SHA512

            liblzma-node.hpp

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\liblzma-node.hpp
            • Size 7KB
            • SHA256 083be435288cabebb7e7d2663e06396327b5d9c58bc0a48ffa1e849aa4bc3998
            • MD5 SHA1 SHA512 SSDEEP

            lzma-stream.cpp

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\lzma-stream.cpp
            • Size 10KB
            • SHA256 62a94542647f30332b4c9d4b26092980a46e056b15037c68a6ad2463beb378d8
            • MD5 SHA1 SHA512 SSDEEP

            module.cpp

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\module.cpp
            • Size 5KB
            • SHA256 952f0fe5f1e6421a91f5cfc5f1556d8f88af6072676bed71691c2d1dfe8bbd33
            • MD5 SHA1 SHA512 SSDEEP

            mt-options.cpp

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\mt-options.cpp
            • Size 793B
            • SHA256 955fef2460387cab4f96a45bc03a110bf82e062d1b6f62c524cd037a9835857c
            • MD5 SHA1 SHA512

            util.cpp

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\util.cpp
            • Size 4KB
            • SHA256 88a6913de83d47fb45ae173d7b61c2545d65cf19707ceaedbc0385bb1ea0301e
            • MD5 SHA1 SHA512 SSDEEP

            PinManager.exe

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\binaries\PinManager.exe
            • Size 38KB
            • SHA256 51e41a2d9e0539a24e1b5e20637e58be680d843ca4ac18a9c91fa2d3a0b2eee1
            • MD5 SHA1 SHA512 SSDEEP

            apex-internal.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\binaries\apex-internal.dll
            • Size 1.9MB
            • SHA256 70ff17482cd7a6f866d2f0dd6ac903f9bdfd132b897879b2a1408988b8c99414
            • MD5 SHA1 SHA512 SSDEEP

            blitz-csgo-external.exe

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\binaries\blitz-csgo-external.exe
            • Size 1.8MB
            • SHA256 c268c7eaa6ff861a4cf7d319a02d785a2fc883fb730dd1ee13e79004ecaede1b
            • MD5 SHA1 SHA512 SSDEEP

            blitz-overlay-old.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\binaries\blitz-overlay-old.dll
            • Size 1.8MB
            • SHA256 366a09ef0cfb49ab47f6d2559b38d913f0e4570f8c2b080afb183a9e4f0b466d
            • MD5 SHA1 SHA512 SSDEEP

            blitz-overlay.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\binaries\blitz-overlay.dll
            • Size 1.8MB
            • SHA256 d8ad3562e24c56c6299660f93349b475c098d015c6659baee08d40f495cbb1d0
            • MD5 SHA1 SHA512 SSDEEP

            blitz_core.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\binaries\blitz_core.node
            • Size 719KB
            • SHA256 377c5b66a914c329690c7bb25290db13334c31434001f17ccf761036034c56e6
            • MD5 SHA1 SHA512 SSDEEP

            fortnite-internal.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\binaries\fortnite-internal.dll
            • Size 1.7MB
            • SHA256 f6c645727c67d24dfaba6c6b0b33a408541e1a9bb056b91872e34d0d0681fad5
            • MD5 SHA1 SHA512 SSDEEP

            fortnite_napi.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\binaries\fortnite_napi.node
            • Size 1.0MB
            • SHA256 0da8243dd9a1fcf3bef177dac81aa7f9d8a293146aefed2cf7eb598e0deda82f
            • MD5 SHA1 SHA512 SSDEEP

            index.node

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\binaries\index.node
            • Size 1.3MB
            • SHA256 39f65e562898692e42eaa17fcbd472892f76844a75ad27c169b8c75dd0b4252a
            • MD5 SHA1 SHA512 SSDEEP

            lor-overlay.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\binaries\lor-overlay.dll
            • Size 1.6MB
            • SHA256 9ba73d4722f24689385ace422436fcf7a3ea1203b01154ef309a48f35c6afecb
            • MD5 SHA1 SHA512 SSDEEP

            minecraft.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\binaries\minecraft.dll
            • Size 1.6MB
            • SHA256 c3253a906376322b4e0caff0411d594f808ca031520f460c75087597ec521d9f
            • MD5 SHA1 SHA512 SSDEEP

            safe_x64_injector.exe

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\binaries\safe_x64_injector.exe
            • Size 316KB
            • SHA256 10190f01730ae495d5a8d1deb471a74cff3dbb9d1c48dba14fa97f59e52085d9
            • MD5 SHA1 SHA512 SSDEEP

            safe_x86_injector.exe

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\binaries\safe_x86_injector.exe
            • Size 245KB
            • SHA256 d5765c35ee50a0e6bba3ca0cfb259e844d07bd366fcb11990a5c143f8c603e52
            • MD5 SHA1 SHA512 SSDEEP

            valorant-internal-old.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\binaries\valorant-internal-old.dll
            • Size 256KB
            • SHA256 8c1b6d911f9ed51d229fa25480fdb8a197d48ccb83487250e55f8b697d36f51b
            • MD5 SHA1 SHA512 SSDEEP

            valorant-internal.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\binaries\valorant-internal.dll
            • Size 8KB
            • SHA256 6c18a52b33c4c85cb08c645b6eb5be4e871fdc7cc4d0b977f708a60f21ad85b2
            • MD5 SHA1 SHA512 SSDEEP

            elevate.exe

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\elevate.exe
            • Size 105KB
            • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
            • MD5 SHA1 SHA512 SSDEEP

            index.html

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\overlay\index.html
            • Size 350B
            • SHA256 3584d8a01d9debce177b7f5823cae843d77847a71607b0d15cc1dbdd043b3c1b
            • MD5 SHA1 SHA512

            index.js

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\overlay\index.js
            • Size 256KB
            • SHA256 105f28519325b536a2c1e246af940fe0fb564a21c3553a7ea7ddcef50dfec53a
            • MD5 SHA1 SHA512 SSDEEP

            index.js.gz

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\resources\overlay\index.js.gz
            • Size 8KB
            • SHA256 09b7912e5472331c9e51ad646d3bed24e66db46c49de4b394a456af9448d50f7
            • MD5 SHA1 SHA512 SSDEEP

            snapshot_blob.bin

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\snapshot_blob.bin
            • Size 295KB
            • SHA256 0577f2c32e5e578e3aa5a6f1d5541dfd696301f52053812ec5e0e69bd2213700
            • MD5 SHA1 SHA512 SSDEEP

            v8_context_snapshot.bin

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\v8_context_snapshot.bin
            • Size 591KB
            • SHA256 129e9f08e60d4a7ad984a359945cfc99490938662fc5f45c665c13488c78aa7e
            • MD5 SHA1 SHA512 SSDEEP

            vk_swiftshader.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\vk_swiftshader.dll
            • Size 896KB
            • SHA256 cd0f2bc1db464f05913d57572c4e84f020deba5b9c8235d5be9f0be1840a6701
            • MD5 SHA1 SHA512 SSDEEP

            vk_swiftshader_icd.json

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\vk_swiftshader_icd.json
            • Size 106B
            • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
            • MD5 SHA1 SHA512

            vulkan-1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nso30D1.tmp\7z-out\vulkan-1.dll
            • Size 780KB
            • SHA256 d16d54345a32cab09a4b4d7923e64dd84789590a323f2b82e3455fb2d641b98e
            • MD5 SHA1 SHA512 SSDEEP

            6e6090d6-b962-4794-bb22-4b1b93681f2e.tmp

            • Path C:\Users\Admin\AppData\Roaming\Blitz\6e6090d6-b962-4794-bb22-4b1b93681f2e.tmp
            • Size 57B
            • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
            • MD5 SHA1 SHA512

            f_000001

            • Path C:\Users\Admin\AppData\Roaming\Blitz\Cache\f_000001
            • Size 441KB
            • SHA256 0d6803758ff8f87081fafd62e90f0950dfb2dd7991e9607fe76a8f92d0e893fa
            • MD5 SHA1 SHA512 SSDEEP

            settings.dat

            • Path C:\Users\Admin\AppData\Roaming\Blitz\Crashpad\settings.dat
            • Size 40B
            • SHA256 8f55fd394b75916bd3e111c52fc5bd084d9c28357daf99da242ff88a1f8f9bfc
            • MD5 SHA1 SHA512

            data_0

            • Path C:\Users\Admin\AppData\Roaming\Blitz\GPUCache\data_0
            • Size 8KB
            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
            • MD5 SHA1 SHA512 SSDEEP

            data_1

            • Path C:\Users\Admin\AppData\Roaming\Blitz\GPUCache\data_1
            • Size 264KB
            • SHA256 be66e0a351b0e37c81690c820eed86ffec6c618bb25096deeb7788f037342b74
            • MD5 SHA1 SHA512 SSDEEP

            data_2

            • Path C:\Users\Admin\AppData\Roaming\Blitz\GPUCache\data_2
            • Size 8KB
            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
            • MD5 SHA1 SHA512 SSDEEP

            data_3

            • Path C:\Users\Admin\AppData\Roaming\Blitz\GPUCache\data_3
            • Size 8KB
            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
            • MD5 SHA1 SHA512 SSDEEP

            CURRENT

            • Path C:\Users\Admin\AppData\Roaming\Blitz\Local Storage\leveldb\CURRENT
            • Size 16B
            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
            • MD5 SHA1 SHA512

            MANIFEST-000001

            • Path C:\Users\Admin\AppData\Roaming\Blitz\Local Storage\leveldb\MANIFEST-000001
            • Size 41B
            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
            • MD5 SHA1 SHA512

            index.node

            • Path C:\Users\Admin\AppData\Roaming\Blitz\blitz-deps\1.15.35\index.node
            • Size 1.3MB
            • SHA256 b614283d5f156b0668e4f7e98795d31e84f003f826dac2add249de8c3cfd7cac
            • MD5 SHA1 SHA512 SSDEEP

            Blitz.exe

            • Path \Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
            • Size 2.0MB
            • SHA256 da1a232f41dbb528a8528647e4935f91ae1741fbecb519a5e6f974b4d479b8fd
            • MD5 SHA1 SHA512 SSDEEP

            Blitz.exe

            • Path \Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
            • Size 2.3MB
            • SHA256 2bbde4ff07120e268dab1756541ebabecad0bb99c0b1b0d9df2a5d8df41785aa
            • MD5 SHA1 SHA512 SSDEEP

            Blitz.exe

            • Path \Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
            • Size 1.8MB
            • SHA256 f59fd1fd1220ea1b6ca52b14c9799b73829e07c2dcd2b0de9a010fd86c7c8920
            • MD5 SHA1 SHA512 SSDEEP

            Blitz.exe

            • Path \Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
            • Size 1.8MB
            • SHA256 d5e896939ccae2fda1b471bc98cafd609e2fe06390044c9ea38a2a1fa1cf3b38
            • MD5 SHA1 SHA512 SSDEEP

            d3dcompiler_47.dll

            • Path \Users\Admin\AppData\Local\Programs\Blitz\d3dcompiler_47.dll
            • Size 3.5MB
            • SHA256 2630f4188bd2ea5451ca61d83869bf7068a4f0440401c949a9feb9fb476e15df
            • MD5 SHA1 SHA512 SSDEEP

            d3dcompiler_47.dll

            • Path \Users\Admin\AppData\Local\Programs\Blitz\d3dcompiler_47.dll
            • Size 192KB
            • SHA256 ccbc1108e8c49ee665196abeaa7ddd0012561cf92e9a932b79f04c11981b181b
            • MD5 SHA1 SHA512 SSDEEP

            ffmpeg.dll

            • Path \Users\Admin\AppData\Local\Programs\Blitz\ffmpeg.dll
            • Size 448KB
            • SHA256 250fd03f6ba73887abf552fbba98fa69c70942cd2b6a6067203f04dcc2f14775
            • MD5 SHA1 SHA512 SSDEEP

            ffmpeg.dll

            • Path \Users\Admin\AppData\Local\Programs\Blitz\ffmpeg.dll
            • Size 19KB
            • SHA256 23c0e7bd838b8bbf60d97148fead7e357cca93450f14daa8d1d3a228ca00fa02
            • MD5 SHA1 SHA512 SSDEEP

            ffmpeg.dll

            • Path \Users\Admin\AppData\Local\Programs\Blitz\ffmpeg.dll
            • Size 1.2MB
            • SHA256 518dbc669ec6100d73bb6f5e518c331009417ed64942a0afa6032f7692cacdb9
            • MD5 SHA1 SHA512 SSDEEP

            ffmpeg.dll

            • Path \Users\Admin\AppData\Local\Programs\Blitz\ffmpeg.dll
            • Size 1.4MB
            • SHA256 760abff393cd80242402c9578cd316adebe471d85485951c51c75e1bf9fc5f27
            • MD5 SHA1 SHA512 SSDEEP

            ffmpeg.dll

            • Path \Users\Admin\AppData\Local\Programs\Blitz\ffmpeg.dll
            • Size 1.7MB
            • SHA256 b50bb26243fc9a5332918a3a3d83d53416f373460a16457154f35a956a243cc5
            • MD5 SHA1 SHA512 SSDEEP

            ffmpeg.dll

            • Path \Users\Admin\AppData\Local\Programs\Blitz\ffmpeg.dll
            • Size 576KB
            • SHA256 7b2915a99ae05810d5dc9e6a0778717451613691dfd90bf474eeeb76bfce0918
            • MD5 SHA1 SHA512 SSDEEP

            libEGL.dll

            • Path \Users\Admin\AppData\Local\Programs\Blitz\libEGL.dll
            • Size 346KB
            • SHA256 a919667f018f6158898fb740507fd004b9a49c00d11c162863ac0e5273ccb6ab
            • MD5 SHA1 SHA512 SSDEEP

            libEGL.dll

            • Path \Users\Admin\AppData\Local\Programs\Blitz\libEGL.dll
            • Size 192KB
            • SHA256 a80a7fd5e95a7a5f41781a1544a85b8980b125f9d694e34509648401280af6fa
            • MD5 SHA1 SHA512 SSDEEP

            libGLESv2.dll

            • Path \Users\Admin\AppData\Local\Programs\Blitz\libGLESv2.dll
            • Size 1.5MB
            • SHA256 6dfd9f4ed18efe381395eb23aa3beba479ffa66088612e7d7a9565af238ce2b0
            • MD5 SHA1 SHA512 SSDEEP

            libGLESv2.dll

            • Path \Users\Admin\AppData\Local\Programs\Blitz\libGLESv2.dll
            • Size 192KB
            • SHA256 02ca9840b2e74ff6b1e0d7877159e36aeef6ad5a84737c8939a0a1d455548372
            • MD5 SHA1 SHA512 SSDEEP

            node.napi.node

            • Path \Users\Admin\AppData\Local\Programs\Blitz\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\win32-ia32\node.napi.node
            • Size 405KB
            • SHA256 16a0f74da89fd1c98027627a82b63173e6e7b53dc9ecaee5d325095f353f198f
            • MD5 SHA1 SHA512 SSDEEP

            SpiderBanner.dll

            • Path \Users\Admin\AppData\Local\Temp\nsi53DB.tmp\SpiderBanner.dll
            • Size 9KB
            • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
            • MD5 SHA1 SHA512 SSDEEP

            StdUtils.dll

            • Path \Users\Admin\AppData\Local\Temp\nsi53DB.tmp\StdUtils.dll
            • Size 100KB
            • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
            • MD5 SHA1 SHA512 SSDEEP

            System.dll

            • Path \Users\Admin\AppData\Local\Temp\nsi53DB.tmp\System.dll
            • Size 12KB
            • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
            • MD5 SHA1 SHA512 SSDEEP

            WinShell.dll

            • Path \Users\Admin\AppData\Local\Temp\nsi53DB.tmp\WinShell.dll
            • Size 3KB
            • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
            • MD5 SHA1 SHA512

            nsExec.dll

            • Path \Users\Admin\AppData\Local\Temp\nsi53DB.tmp\nsExec.dll
            • Size 6KB
            • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
            • MD5 SHA1 SHA512 SSDEEP

            nsProcess.dll

            • Path \Users\Admin\AppData\Local\Temp\nsi53DB.tmp\nsProcess.dll
            • Size 4KB
            • SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
            • MD5 SHA1 SHA512 SSDEEP

            nsis7z.dll

            • Path \Users\Admin\AppData\Local\Temp\nsi53DB.tmp\nsis7z.dll
            • Size 424KB
            • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
            • MD5 SHA1 SHA512 SSDEEP

            memory/1440-352-0x00000000009A0000-0x00000000009A1000-memory.dmp

            memory/1496-1591-0x00000000003E0000-0x00000000003E2000-memory.dmp

            memory/2052-583-0x0000000070930000-0x0000000070EDB000-memory.dmp

            memory/2052-587-0x0000000070930000-0x0000000070EDB000-memory.dmp

            memory/2052-586-0x0000000002750000-0x0000000002790000-memory.dmp

            memory/2052-585-0x0000000002750000-0x0000000002790000-memory.dmp

            memory/2052-584-0x0000000070930000-0x0000000070EDB000-memory.dmp

            memory/2636-272-0x0000000002090000-0x0000000002092000-memory.dmp

            memory/2772-413-0x000000000AE70000-0x000000000AE71000-memory.dmp