Analysis

  • max time kernel
    298s
  • max time network
    320s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    26/02/2024, 15:17

General

  • Target
    Blitz.exe
  • Size 116.9MB
  • Sample240226-sn7rtahc33
  • SHA256 69c7e42589e6e8026fc2c3d54a346832cdfa01e4bb3ac40e969c37201917d4a2
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 15 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Modifies registry class 7 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Blitz.exe
    "C:\Users\Admin\AppData\Local\Temp\Blitz.exe"
    1⤵
    • Checks computer location settings
    • Loads dropped DLL
    • Modifies registry class
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:2176
    • C:\Users\Admin\AppData\Local\Temp\Blitz.exe
      C:\Users\Admin\AppData\Local\Temp\Blitz.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\Blitz /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\Blitz\Crashpad --url=https://sentry.blitz.gg/api/2/minidump/?sentry_key=d0d473722f3c496a9d6097abb79c953f --annotation=_productName=Blitz --annotation=_version=1.15.35 --annotation=prod=Electron --annotation=ver=15.0.0-alpha.2 --initial-client-data=0x310,0x314,0x318,0x30c,0x31c,0x7ebfa60,0x7ebfa70,0x7ebfa7c
      2⤵
        PID:2528
      • C:\Users\Admin\AppData\Local\Temp\Blitz.exe
        "C:\Users\Admin\AppData\Local\Temp\Blitz.exe" --type=gpu-process --field-trial-handle=1228,2199269155233707785,6173176425594968698,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,HardwareMediaKeyHandling,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1248 /prefetch:2
        2⤵
          PID:1120
        • C:\Users\Admin\AppData\Local\Temp\Blitz.exe
          "C:\Users\Admin\AppData\Local\Temp\Blitz.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1228,2199269155233707785,6173176425594968698,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,HardwareMediaKeyHandling,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --use-fake-device-for-media-stream --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --enable-sandbox --mojo-platform-channel-handle=1652 /prefetch:8
          2⤵
          • Suspicious behavior: EnumeratesProcesses
          PID:1384
        • C:\Users\Admin\AppData\Local\Temp\Blitz.exe
          "C:\Users\Admin\AppData\Local\Temp\Blitz.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --enable-sandbox --app-user-model-id=com.blitz.app --app-path="C:\Users\Admin\AppData\Local\Temp\resources\app.asar" --enable-sandbox --disable-blink-features=Auxclick --js-flags=--expose_gc --use-fake-ui-for-media-stream --field-trial-handle=1228,2199269155233707785,6173176425594968698,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,HardwareMediaKeyHandling,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1820 /prefetch:1
          2⤵
          • Checks computer location settings
          PID:2556
        • C:\Users\Admin\AppData\Local\Temp\Blitz.exe
          "C:\Users\Admin\AppData\Local\Temp\Blitz.exe" --type=gpu-process --field-trial-handle=1228,2199269155233707785,6173176425594968698,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,HardwareMediaKeyHandling,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1248 /prefetch:2
          2⤵
            PID:2004
          • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
            powershell.exe -NoProfile -NonInteractive -InputFormat None -Command "Get-AuthenticodeSignature 'C:\Users\Admin\AppData\Local\blitz-updater\pending\temp-Blitz-2.0.98.exe' | ConvertTo-Json -Compress | ForEach-Object { [Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($_)) }"
            2⤵
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:1560
          • C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe
            C:\Users\Admin\AppData\Local\Temp\resources\elevate.exe C:\Users\Admin\AppData\Local\blitz-updater\pending\Blitz-2.0.98.exe --updated /S --force-run
            2⤵
            • Loads dropped DLL
            PID:2660
            • C:\Users\Admin\AppData\Local\blitz-updater\pending\Blitz-2.0.98.exe
              "C:\Users\Admin\AppData\Local\blitz-updater\pending\Blitz-2.0.98.exe" --updated /S --force-run
              3⤵
              • Executes dropped EXE
              • Loads dropped DLL
              • Suspicious behavior: EnumeratesProcesses
              • Suspicious use of AdjustPrivilegeToken
              PID:2948
              • C:\Windows\SysWOW64\cmd.exe
                cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Blitz.exe" | %SYSTEMROOT%\System32\find.exe "Blitz.exe"
                4⤵
                  PID:1912
                  • C:\Windows\SysWOW64\tasklist.exe
                    tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Blitz.exe"
                    5⤵
                    • Enumerates processes with tasklist
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:2768
                  • C:\Windows\SysWOW64\find.exe
                    C:\Windows\System32\find.exe "Blitz.exe"
                    5⤵
                      PID:2752
            • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
              "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --updated
              1⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:2868

            Network

                  MITRE ATT&CK Enterprise v15

                  Replay Monitor

                  Loading Replay Monitor...

                  Downloads

                  Blitz.exe

                  • Path C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                  • Size 384KB
                  • SHA256 07122bc1b5fcc808072d253398daef93ba467961862c88613e8d8d02eb5cf452
                  • MD5 SHA1 SHA512 SSDEEP

                  ffmpeg.dll

                  • Path C:\Users\Admin\AppData\Local\Programs\Blitz\ffmpeg.dll
                  • Size 448KB
                  • SHA256 e85bcb7f8fa9c3a078cd5135a6c66666caab82442579317d7eb2261c701284aa
                  • MD5 SHA1 SHA512 SSDEEP

                  CabBA5C.tmp

                  • Path C:\Users\Admin\AppData\Local\Temp\CabBA5C.tmp
                  • Size 65KB
                  • SHA256 c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d
                  • MD5 SHA1 SHA512 SSDEEP

                  TarBA9D.tmp

                  • Path C:\Users\Admin\AppData\Local\Temp\TarBA9D.tmp
                  • Size 171KB
                  • SHA256 4276af3669a141a59388bc56a87f6614d9a9bdddf560636c264219a7eb11256f
                  • MD5 SHA1 SHA512 SSDEEP

                  .electrum

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\.electrum
                  • Size 8B
                  • SHA256 8c562718401a5de2356ac032aae2efae3af2760d615cf82aa09fa226ae2cb52e
                  • MD5 SHA1 SHA512

                  Blitz.exe

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\Blitz.exe
                  • Size 1.8MB
                  • SHA256 6727572ed7b311d7c9bcb379b5e677d4f0543bd3d7d053f35481312640d0f9ff
                  • MD5 SHA1 SHA512 SSDEEP

                  LICENSE.electron.txt

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\LICENSE.electron.txt
                  • Size 1KB
                  • SHA256 fd8fba3293b11d24886743418bfb624de8c46f81772b60a7e1b08a029e24c5b9
                  • MD5 SHA1 SHA512

                  LICENSES.chromium.html

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\LICENSES.chromium.html
                  • Size 832KB
                  • SHA256 177875077a0c103f288e064d05163d5553a372a2e9728068e595fc0fa329743a
                  • MD5 SHA1 SHA512 SSDEEP

                  chrome_100_percent.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\chrome_100_percent.pak
                  • Size 126KB
                  • SHA256 02125a23b4ba2c49a30db2ef5d741a96d519ecae0f37eaf4d102f30f88948078
                  • MD5 SHA1 SHA512 SSDEEP

                  chrome_200_percent.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\chrome_200_percent.pak
                  • Size 175KB
                  • SHA256 b48dc9f6ae23d63e4db8010830f58a9bb66885f9f2f86856ec848d656937a024
                  • MD5 SHA1 SHA512 SSDEEP

                  d3dcompiler_47.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\d3dcompiler_47.dll
                  • Size 768KB
                  • SHA256 2f5678dfdf3d8126ec956a3c3df48e1767661cbca27e4bb406ca63b592ccd007
                  • MD5 SHA1 SHA512 SSDEEP

                  ffmpeg.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\ffmpeg.dll
                  • Size 1.2MB
                  • SHA256 53949dab09648d5ff1839e5ef808b3a719ddd163c87254e797e213d337912904
                  • MD5 SHA1 SHA512 SSDEEP

                  icudtl.dat

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\icudtl.dat
                  • Size 1.1MB
                  • SHA256 3fc58d94674d0f2ebff0d31927c595d3d27e937485e5b41a2040b2b69c4e0ad1
                  • MD5 SHA1 SHA512 SSDEEP

                  libEGL.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\libEGL.dll
                  • Size 370KB
                  • SHA256 b6b411a4a252ec3c8c247440db143bd6022a0294c005dd5d97521fad238acc87
                  • MD5 SHA1 SHA512 SSDEEP

                  libGLESv2.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\libGLESv2.dll
                  • Size 832KB
                  • SHA256 2c7c6b74f3c95a05c16aa9edeef42bae4a594ca5831b91111ccf75e1b3683782
                  • MD5 SHA1 SHA512 SSDEEP

                  af.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\af.pak
                  • Size 353KB
                  • SHA256 0ad547bb1dc57907adeb02e1be3017cce78f6e60b8b39395fe0e8b62285797a1
                  • MD5 SHA1 SHA512 SSDEEP

                  am.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\am.pak
                  • Size 448KB
                  • SHA256 b3512e5c6273646977c907854bf6c865d5e6a752bdf2d04ad82bcd2f3adba9e8
                  • MD5 SHA1 SHA512 SSDEEP

                  ar.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\ar.pak
                  • Size 624KB
                  • SHA256 00861d9fa5763cc5c3152edb4a5c956c6bc4f56311ce2ed9e6b496181624ab5e
                  • MD5 SHA1 SHA512 SSDEEP

                  bg.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\bg.pak
                  • Size 652KB
                  • SHA256 898621731ac3471a41f8b3a7bf52e7f776e8928652b37154bc7c1299f1fd92e1
                  • MD5 SHA1 SHA512 SSDEEP

                  bn.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\bn.pak
                  • Size 838KB
                  • SHA256 1ea245646a4b4386606f03c8a3916a3607e2adbbc88f000976be36db410a1e39
                  • MD5 SHA1 SHA512 SSDEEP

                  ca.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\ca.pak
                  • Size 400KB
                  • SHA256 f7f54b55a917a0f68e4b7ed7a3e6feabb224c52d09786b939712607ebe8ab0ea
                  • MD5 SHA1 SHA512 SSDEEP

                  cs.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\cs.pak
                  • Size 384KB
                  • SHA256 4854d604820863f80b0609ad3d85f6d773c4b909733ca39c4dcebacd387eb66b
                  • MD5 SHA1 SHA512 SSDEEP

                  da.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\da.pak
                  • Size 371KB
                  • SHA256 40b32636ffb813574d8a063ce7e74860ab06b93a9b16dd56b5b6aa602b5e6943
                  • MD5 SHA1 SHA512 SSDEEP

                  de.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\de.pak
                  • Size 397KB
                  • SHA256 9c335a4e85b4ac58ed386d89d284be053ef288b2706a4cae433d91625ec1b31e
                  • MD5 SHA1 SHA512 SSDEEP

                  el.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\el.pak
                  • Size 712KB
                  • SHA256 21d1d273124648a435674c7877a98110d997cf6992469c431fe502bbcc02641f
                  • MD5 SHA1 SHA512 SSDEEP

                  en-GB.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\en-GB.pak
                  • Size 324KB
                  • SHA256 6b0e81b2198e025eae1e2f6d5d3a33ccce034d1f4bc59e4cade1b5f5adb99f1a
                  • MD5 SHA1 SHA512 SSDEEP

                  en-US.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\en-US.pak
                  • Size 326KB
                  • SHA256 1d20e626444759c2b72aa6e998f14a032408d2b32f957c12ec3abd52831338fb
                  • MD5 SHA1 SHA512 SSDEEP

                  es-419.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\es-419.pak
                  • Size 395KB
                  • SHA256 77114f519743741a488a9b57cdc7190f0507c37dc3b29811704a048172ba6736
                  • MD5 SHA1 SHA512 SSDEEP

                  es.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\es.pak
                  • Size 394KB
                  • SHA256 d539c88c4493cb1d9eae600611e3119fe129ec95149049f4b62fc3a97d78ca61
                  • MD5 SHA1 SHA512 SSDEEP

                  et.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\et.pak
                  • Size 256KB
                  • SHA256 b492b5c5f2fff5749dad1f72253586b35664256d870d037e09aee9cdc8e33020
                  • MD5 SHA1 SHA512 SSDEEP

                  fa.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\fa.pak
                  • Size 577KB
                  • SHA256 f9a8e3b9bbc809f11cc3dc32811940e033bd78a31ec154d28321473f8efa1e4d
                  • MD5 SHA1 SHA512 SSDEEP

                  fi.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\fi.pak
                  • Size 365KB
                  • SHA256 6581fca26336f66d8ba898ec1253b237db30e7cd1a25fc788290d7ace96fa6e1
                  • MD5 SHA1 SHA512 SSDEEP

                  fil.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\fil.pak
                  • Size 410KB
                  • SHA256 db4a63fa0d5b2baba71d4ba0923caed540099db6b1d024a0d48c3be10c9eed5a
                  • MD5 SHA1 SHA512 SSDEEP

                  fr.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\fr.pak
                  • Size 426KB
                  • SHA256 b62c51b85545b3f5d70ac9c684a111689044636eafaeb196f5d52760e0f96f91
                  • MD5 SHA1 SHA512 SSDEEP

                  gu.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\gu.pak
                  • Size 812KB
                  • SHA256 9c210e3143f99df59bebea6bdb6e30959f8520d59a20fffd437f7029840bb3a9
                  • MD5 SHA1 SHA512 SSDEEP

                  he.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\he.pak
                  • Size 507KB
                  • SHA256 3cd4440501bc67d0b2e33e1346ba133fb9a09a8762f2334732f8cc349cd840b7
                  • MD5 SHA1 SHA512 SSDEEP

                  hi.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\hi.pak
                  • Size 848KB
                  • SHA256 ccf7a557d0f8353ff3d656d4c2a4fca2d462ed2cc3d18c599d98f4d57b23c615
                  • MD5 SHA1 SHA512 SSDEEP

                  hr.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\hr.pak
                  • Size 397KB
                  • SHA256 6ea4b1a28cf567cca73ccdb7eec631fffba3b49acc41e3c88b448514578d80da
                  • MD5 SHA1 SHA512 SSDEEP

                  hu.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\hu.pak
                  • Size 192KB
                  • SHA256 d49742a92ffd731b27a826f0bea8f2decdf23461d0fdc7a861180cfa34aa253c
                  • MD5 SHA1 SHA512 SSDEEP

                  id.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\id.pak
                  • Size 350KB
                  • SHA256 0853a5543923b7a8db5989ebb8ebe8f9fb6271bfa59b94f5843f97de4401e2d8
                  • MD5 SHA1 SHA512 SSDEEP

                  it.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\it.pak
                  • Size 388KB
                  • SHA256 d011fd39c3cbab740a7944a60a8dd48d6f76c563ea473cfd1f569c5e6fc9fa4e
                  • MD5 SHA1 SHA512 SSDEEP

                  ja.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\ja.pak
                  • Size 472KB
                  • SHA256 ba2acb635671a48ed0bf8cdc6e0a0318cfb33eb74b4171c6b483b95f2a167bc5
                  • MD5 SHA1 SHA512 SSDEEP

                  kn.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\kn.pak
                  • Size 938KB
                  • SHA256 47c77fdf73267865a025a54027865a8d67e26943264a43c6e794ccbd6eec549b
                  • MD5 SHA1 SHA512 SSDEEP

                  ko.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\ko.pak
                  • Size 398KB
                  • SHA256 8d131066e2fa004e11f9128162bfc354d3254381059d6c852bf88a55859ae3e8
                  • MD5 SHA1 SHA512 SSDEEP

                  lt.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\lt.pak
                  • Size 429KB
                  • SHA256 8a5d6e29833374e0f74fd7070c1b20856cb6b42ed30d18a5f17e6c2e4a8d783e
                  • MD5 SHA1 SHA512 SSDEEP

                  lv.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\lv.pak
                  • Size 427KB
                  • SHA256 0ff66161377be2fb8b2b456a64dd910d8375a2b9f1f6f22333540a77111903d6
                  • MD5 SHA1 SHA512 SSDEEP

                  ml.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\ml.pak
                  • Size 974KB
                  • SHA256 27b7947e36a521403de094cc563d5eced1e46f98e4d6b872fd424352f798e84d
                  • MD5 SHA1 SHA512 SSDEEP

                  mr.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\mr.pak
                  • Size 128KB
                  • SHA256 0d08d6f6e7fcfe3b48816ab4d282077545942c6d26ef3fd323a2cad89b435ca5
                  • MD5 SHA1 SHA512 SSDEEP

                  ms.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\ms.pak
                  • Size 365KB
                  • SHA256 c6471aee5f34f31477d57f593b09cb1de87f5fd0f9b5e63d8bab4986cf10d939
                  • MD5 SHA1 SHA512 SSDEEP

                  nb.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\nb.pak
                  • Size 358KB
                  • SHA256 4f44789a2c38edc396a31aba5cc09d20fb84cd1e06f70c49f0664289c33cd261
                  • MD5 SHA1 SHA512 SSDEEP

                  nl.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\nl.pak
                  • Size 370KB
                  • SHA256 b20178135b9f21feef0315fb2f2bc574c2876385e607a539ff0ce6ae7faf707b
                  • MD5 SHA1 SHA512 SSDEEP

                  pl.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\pl.pak
                  • Size 412KB
                  • SHA256 0948238576efb502327af4040c1d9eb1346fbf1bdcee35cd46746b170a7ea6a7
                  • MD5 SHA1 SHA512 SSDEEP

                  pt-BR.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\pt-BR.pak
                  • Size 389KB
                  • SHA256 7f41c3a58d08d98f21232e7c85839c9dec0053b447bb4dae867d2faadb278d45
                  • MD5 SHA1 SHA512 SSDEEP

                  pt-PT.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\pt-PT.pak
                  • Size 391KB
                  • SHA256 60a5a7f03d4d54397ca04be0c89d1f67a496b72807c0bd660c076bc945b40339
                  • MD5 SHA1 SHA512 SSDEEP

                  ro.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\ro.pak
                  • Size 403KB
                  • SHA256 3a58f2275ea6a2baa68924b1dab6b0f06abf8b6657a878dea94b0060a95e38f0
                  • MD5 SHA1 SHA512 SSDEEP

                  ru.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\ru.pak
                  • Size 656KB
                  • SHA256 e4edec80c9e29357bcf31eda5d8b046c6c9fbc6434a0b5594b6a906d5f1407d1
                  • MD5 SHA1 SHA512 SSDEEP

                  sk.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\sk.pak
                  • Size 64KB
                  • SHA256 2255fe01ebc5cbcbfc3c57f65251928688dd69684d43a20ccb2c18fc47145362
                  • MD5 SHA1 SHA512 SSDEEP

                  sl.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\sl.pak
                  • Size 401KB
                  • SHA256 ab2079923e2baa27c220df2f1559af8edc785f8e9fe2e12c8ecb0e0e7e7d0a09
                  • MD5 SHA1 SHA512 SSDEEP

                  sr.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\sr.pak
                  • Size 616KB
                  • SHA256 ab96a18177af90495e2e3c96292638a775aa75c1d210ca6a6c18fbc284cd815b
                  • MD5 SHA1 SHA512 SSDEEP

                  sv.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\sv.pak
                  • Size 361KB
                  • SHA256 e1cbce672de3ba3a01272b9b763dcfd8229fba0883df2b4117ac6b0f9916c073
                  • MD5 SHA1 SHA512 SSDEEP

                  sw.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\sw.pak
                  • Size 379KB
                  • SHA256 41dfb772ae4c6f9e879bf7b4fa776b2877a2f8740fa747031b3d6f57f34d81dd
                  • MD5 SHA1 SHA512 SSDEEP

                  ta.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\ta.pak
                  • Size 964KB
                  • SHA256 d5bfe0699342b8bba6c4c73c115b1c7f3f903c4ed95d77461c34369f2f60d5ee
                  • MD5 SHA1 SHA512 SSDEEP

                  te.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\te.pak
                  • Size 894KB
                  • SHA256 aa2b9d1ad8591e91872c3fee62b111b74d6e7e890a47d0bcc388947ae5245290
                  • MD5 SHA1 SHA512 SSDEEP

                  th.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\th.pak
                  • Size 753KB
                  • SHA256 3d4556bc0f26b89d090a8a779a8fda8f6fbe157a23181cbfb1d6c67a6212b864
                  • MD5 SHA1 SHA512 SSDEEP

                  tr.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\tr.pak
                  • Size 385KB
                  • SHA256 5a7e1c8b572f67ed40e9d5107ddd6f8791b03138bb9933cfb26f1678b2c4a9cd
                  • MD5 SHA1 SHA512 SSDEEP

                  uk.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\uk.pak
                  • Size 657KB
                  • SHA256 e914b8956745a14d9d64f12698805e0910f9d3581dd380468949b54576fad2a6
                  • MD5 SHA1 SHA512 SSDEEP

                  ur.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\ur.pak
                  • Size 571KB
                  • SHA256 3941364d0278e2c4d686faa4a135d16a457b4bc98c5a08e62aa12f3adc09aa7f
                  • MD5 SHA1 SHA512 SSDEEP

                  vi.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\vi.pak
                  • Size 455KB
                  • SHA256 ef3ddadb90dc73b73e25e9608626ce68d6778445812b8bd2f6c81e1f1e4bff16
                  • MD5 SHA1 SHA512 SSDEEP

                  zh-CN.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\zh-CN.pak
                  • Size 332KB
                  • SHA256 539f0bfdb461bf777aab14a4baaf47c8c32ae1856cc4ac93b23ce73dc50ba02a
                  • MD5 SHA1 SHA512 SSDEEP

                  zh-TW.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\locales\zh-TW.pak
                  • Size 42KB
                  • SHA256 85345b01a48f64df926f6c5500748f46d641e0516a0c88325400ce0122dd8b3c
                  • MD5 SHA1 SHA512 SSDEEP

                  resources.pak

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources.pak
                  • Size 576KB
                  • SHA256 f4a30531f027394f695c5fdc94ab8f2e4b3b7eed5149c2e3c2618518f2baf8b8
                  • MD5 SHA1 SHA512 SSDEEP

                  .env.production

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\.env.production
                  • Size 409B
                  • SHA256 e5746cebef7e0550b47ddf2f6c7ce26153b8bb7e7d78afdc4581b21d2d61a121
                  • MD5 SHA1 SHA512

                  app-update.yml

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app-update.yml
                  • Size 164B
                  • SHA256 38170150435f16f6eb41e2528a78073797357d454f0da847c3f0241dd4e09f58
                  • MD5 SHA1 SHA512

                  app.asar

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar
                  • Size 5.4MB
                  • SHA256 aaad55e03807a9613c14e130e172644ec46ea210974e375cd40d93efef1fd175
                  • MD5 SHA1 SHA512 SSDEEP

                  node.napi.armv8.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\android-arm64\node.napi.armv8.node
                  • Size 317KB
                  • SHA256 2f64fd8131f9b323c16feddae331e65a588129c9e70b458dd78dc984ed5dd465
                  • MD5 SHA1 SHA512 SSDEEP

                  node.napi.armv7.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\android-arm\node.napi.armv7.node
                  • Size 323KB
                  • SHA256 6651e0b7db51176ea6a4613e89a478711d7ca6e66f2f6ed6f6456108674d1569
                  • MD5 SHA1 SHA512 SSDEEP

                  node.napi.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\darwin-x64\node.napi.node
                  • Size 281KB
                  • SHA256 84808e4380ed8a7ce9104037e700f509015197bcf82b9f417cf426e4e0b14bb4
                  • MD5 SHA1 SHA512 SSDEEP

                  node.napi.armv8.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\linux-arm64\node.napi.armv8.node
                  • Size 8KB
                  • SHA256 4c8c14b3c003f1af23b20283dd00efb196ba93e4cfe9af914ddf9c5be46d8f4b
                  • MD5 SHA1 SHA512 SSDEEP

                  node.napi.armv6.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\linux-arm\node.napi.armv6.node
                  • Size 335KB
                  • SHA256 a43b0b848910aec87f53675d826fe0595834933e6652f9ea7c7d97e82ddbfed0
                  • MD5 SHA1 SHA512 SSDEEP

                  node.napi.armv7.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\linux-arm\node.napi.armv7.node
                  • Size 375KB
                  • SHA256 3254461647a55dbc8db283866bf6d3351fe14074b58875c94d02e0bf2e227f4a
                  • MD5 SHA1 SHA512 SSDEEP

                  node.napi.glibc.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\linux-x64\node.napi.glibc.node
                  • Size 469KB
                  • SHA256 84be7bceeebf718d7efe41c51425027e86d7cdbbeb3d5c4665bb87a183080bd2
                  • MD5 SHA1 SHA512 SSDEEP

                  node.napi.musl.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\linux-x64\node.napi.musl.node
                  • Size 405KB
                  • SHA256 ce51540197bbdba835d0adf02047f9e86dd27c8dd4dfea41de8ff969def2c9b3
                  • MD5 SHA1 SHA512 SSDEEP

                  node.napi.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\win32-ia32\node.napi.node
                  • Size 405KB
                  • SHA256 16a0f74da89fd1c98027627a82b63173e6e7b53dc9ecaee5d325095f353f198f
                  • MD5 SHA1 SHA512 SSDEEP

                  node.napi.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\win32-x64\node.napi.node
                  • Size 486KB
                  • SHA256 a5e7f1970623d39f7a51d512726b0a6a113d8ab0acb117758bfc9a3f407882f7
                  • MD5 SHA1 SHA512 SSDEEP

                  ci.yml

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\.github\workflows\ci.yml
                  • Size 2KB
                  • SHA256 621ab98517f0305b666608e6696ea116ae1bb5fa64a9185f1ec8c769f41f6c7b
                  • MD5 SHA1 SHA512

                  LICENSE

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\LICENSE
                  • Size 1KB
                  • SHA256 9415b233c6c5a6fc3ac6977cde3530d149f45a61d86b2fd9611cbca4bf08f4e2
                  • MD5 SHA1 SHA512

                  lzmajs

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\bin\lzmajs
                  • Size 1KB
                  • SHA256 f29aae866c7bb66e5424a730c473231c1329f6bb0636ad33945299a4c4957a50
                  • MD5 SHA1 SHA512

                  index.js

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\index.js
                  • Size 13KB
                  • SHA256 77d9568c9c5479953a4588875b9d5c4a06ce9f926f9fab96d7678e68a74e6985
                  • MD5 SHA1 SHA512 SSDEEP

                  liblzma-build.sh

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\liblzma-build.sh
                  • Size 138B
                  • SHA256 ae56a4c3e521e37c5677e4d867e79ab46ac23b3f5682a7e2893497232a0326ce
                  • MD5 SHA1 SHA512

                  liblzma-config.sh

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\liblzma-config.sh
                  • Size 733B
                  • SHA256 100d04495f6b1804aef3983377d91509864758cf9aa7470d28a24b69f0bce116
                  • MD5 SHA1 SHA512

                  package.json

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\package.json
                  • Size 777B
                  • SHA256 492448e7c5e26eada710d45c14a2d8eb5c6333eb39dbaff4631befaad37e0ed6
                  • MD5 SHA1 SHA512

                  electron.napi.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-arm64\electron.napi.node
                  • Size 227KB
                  • SHA256 b322385eb19c1d0737144fbe2fef3c5d27b5e5531878f5a21700489785e51ac4
                  • MD5 SHA1 SHA512 SSDEEP

                  node.napi.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-arm64\node.napi.node
                  • Size 227KB
                  • SHA256 7eb79b4ace336fc1f31923f7407d997d2676f95a5fab4a3dc4688be2ed659f1a
                  • MD5 SHA1 SHA512 SSDEEP

                  electron.napi.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-x64\electron.napi.node
                  • Size 434KB
                  • SHA256 37713bcaf2468d4a60c94652dd2ed8801fff57f270650b2fee90428bc5ad290a
                  • MD5 SHA1 SHA512 SSDEEP

                  node.napi.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-x64\node.napi.node
                  • Size 434KB
                  • SHA256 5c77fb5f183ee197b110c76440b390d74aae7c35ab1ea48861308d8b62c22f65
                  • MD5 SHA1 SHA512 SSDEEP

                  electron.napi.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\linux-arm64\electron.napi.node
                  • Size 421KB
                  • SHA256 99006146d3f02a3701a254dbf57d10175a2950fa7d85b4dee90b99c997d882da
                  • MD5 SHA1 SHA512 SSDEEP

                  node.napi.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\linux-arm64\node.napi.node
                  • Size 421KB
                  • SHA256 9a03f9e38254ac721d042561b23842c944db243c3c30fb21f240a577a34c8cb8
                  • MD5 SHA1 SHA512 SSDEEP

                  electron.napi.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-ia32\electron.napi.node
                  • Size 619KB
                  • SHA256 e73951d1d9f4155cadbeb530be14dd32e1abc4ad9332527507ede586ce41e095
                  • MD5 SHA1 SHA512 SSDEEP

                  liblzma.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-ia32\liblzma.dll
                  • Size 148KB
                  • SHA256 37c4a4277ac066522402c71fd03bea5e8900fefd505ccf9b6399128c92182780
                  • MD5 SHA1 SHA512 SSDEEP

                  node.napi.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-ia32\node.napi.node
                  • Size 619KB
                  • SHA256 ab5e095b49f13ef86a3dc83f0c11b9bee1fef24a4cf0616b0015d0ebabd443e5
                  • MD5 SHA1 SHA512 SSDEEP

                  electron.napi.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-x64\electron.napi.node
                  • Size 797KB
                  • SHA256 5c7dd24a625d806e37cca949e52ec348ef0054a902e8700f9fdb61cac44e4c9e
                  • MD5 SHA1 SHA512 SSDEEP

                  liblzma.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-x64\liblzma.dll
                  • Size 147KB
                  • SHA256 fc7348418be392d5ecebd7b9f07c1ae5bc530260fef923801b140088eddce96e
                  • MD5 SHA1 SHA512 SSDEEP

                  node.napi.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-x64\node.napi.node
                  • Size 796KB
                  • SHA256 c738ba03c84330556184b07d4f9a94bb875807834f46c0b49ea42c8e45df714f
                  • MD5 SHA1 SHA512 SSDEEP

                  filter-array.cpp

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\filter-array.cpp
                  • Size 1KB
                  • SHA256 0cbca5a1c726cbb06e9f466727cdd2eeabf33588f9b54138eaf14f5e8eb1f988
                  • MD5 SHA1 SHA512

                  index-parser.cpp

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\index-parser.cpp
                  • Size 15KB
                  • SHA256 9fe709a77ab9073a903922a88f242f997985fb62e997e1c876685a67beac54cd
                  • MD5 SHA1 SHA512 SSDEEP

                  liblzma-functions.cpp

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\liblzma-functions.cpp
                  • Size 2KB
                  • SHA256 0061d0cf1cafa5664e456d28156b26b864eb3db973e4d7d66c8e6a00951a5820
                  • MD5 SHA1 SHA512

                  liblzma-node.hpp

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\liblzma-node.hpp
                  • Size 7KB
                  • SHA256 083be435288cabebb7e7d2663e06396327b5d9c58bc0a48ffa1e849aa4bc3998
                  • MD5 SHA1 SHA512 SSDEEP

                  lzma-stream.cpp

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\lzma-stream.cpp
                  • Size 10KB
                  • SHA256 62a94542647f30332b4c9d4b26092980a46e056b15037c68a6ad2463beb378d8
                  • MD5 SHA1 SHA512 SSDEEP

                  module.cpp

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\module.cpp
                  • Size 5KB
                  • SHA256 952f0fe5f1e6421a91f5cfc5f1556d8f88af6072676bed71691c2d1dfe8bbd33
                  • MD5 SHA1 SHA512 SSDEEP

                  mt-options.cpp

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\mt-options.cpp
                  • Size 793B
                  • SHA256 955fef2460387cab4f96a45bc03a110bf82e062d1b6f62c524cd037a9835857c
                  • MD5 SHA1 SHA512

                  util.cpp

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\util.cpp
                  • Size 4KB
                  • SHA256 88a6913de83d47fb45ae173d7b61c2545d65cf19707ceaedbc0385bb1ea0301e
                  • MD5 SHA1 SHA512 SSDEEP

                  PinManager.exe

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\binaries\PinManager.exe
                  • Size 38KB
                  • SHA256 51e41a2d9e0539a24e1b5e20637e58be680d843ca4ac18a9c91fa2d3a0b2eee1
                  • MD5 SHA1 SHA512 SSDEEP

                  apex-internal.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\binaries\apex-internal.dll
                  • Size 1.2MB
                  • SHA256 6e28832c4954f651b87bb7b17985358df3af31c28ce4a502480287a1de6abf3c
                  • MD5 SHA1 SHA512 SSDEEP

                  blitz-csgo-external.exe

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\binaries\blitz-csgo-external.exe
                  • Size 1.2MB
                  • SHA256 830a4345629fb6bad204fe2a2b32d9e502c7a6e4fee6bfb86966a51033787db5
                  • MD5 SHA1 SHA512 SSDEEP

                  blitz-overlay-old.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\binaries\blitz-overlay-old.dll
                  • Size 1.2MB
                  • SHA256 8476200537d5b775851bb0b0de9d0bf84d010d97fa4cb56fa76c69d0a8176f1e
                  • MD5 SHA1 SHA512 SSDEEP

                  blitz-overlay.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\binaries\blitz-overlay.dll
                  • Size 1.1MB
                  • SHA256 527b1c3d9eb1a50c6c3d41b1d7c3b455675fb7a90e74f3f4a6a80be042da8712
                  • MD5 SHA1 SHA512 SSDEEP

                  blitz_core.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\binaries\blitz_core.node
                  • Size 719KB
                  • SHA256 377c5b66a914c329690c7bb25290db13334c31434001f17ccf761036034c56e6
                  • MD5 SHA1 SHA512 SSDEEP

                  fortnite-internal.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\binaries\fortnite-internal.dll
                  • Size 1.1MB
                  • SHA256 9d64fbaf704741907a3db483ef47fab3f74e3e7d537a7f1befd61385bb7985bf
                  • MD5 SHA1 SHA512 SSDEEP

                  fortnite_napi.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\binaries\fortnite_napi.node
                  • Size 1.0MB
                  • SHA256 0da8243dd9a1fcf3bef177dac81aa7f9d8a293146aefed2cf7eb598e0deda82f
                  • MD5 SHA1 SHA512 SSDEEP

                  index.node

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\binaries\index.node
                  • Size 1.1MB
                  • SHA256 7084c3dacdc5edb5158cdac84a64d61df606ed5950c7b74af0a2e3b67753291a
                  • MD5 SHA1 SHA512 SSDEEP

                  lor-overlay.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\binaries\lor-overlay.dll
                  • Size 960KB
                  • SHA256 cc1cb038a288a70505caba03cc5346ed17406ef3053cffb42c7f214ec4fc1c6d
                  • MD5 SHA1 SHA512 SSDEEP

                  minecraft.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\binaries\minecraft.dll
                  • Size 1024KB
                  • SHA256 aa06d7b4fa8527bb7689b41140c430aad0db1cd78c9d799f50ec6778e177091b
                  • MD5 SHA1 SHA512 SSDEEP

                  safe_x64_injector.exe

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\binaries\safe_x64_injector.exe
                  • Size 316KB
                  • SHA256 10190f01730ae495d5a8d1deb471a74cff3dbb9d1c48dba14fa97f59e52085d9
                  • MD5 SHA1 SHA512 SSDEEP

                  safe_x86_injector.exe

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\binaries\safe_x86_injector.exe
                  • Size 128KB
                  • SHA256 12de190e39576909e0dbde3e639fde143d4810d22aeceb9d28769b2323179e8a
                  • MD5 SHA1 SHA512 SSDEEP

                  valorant-internal-old.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\binaries\valorant-internal-old.dll
                  • Size 128KB
                  • SHA256 d41c7ef2684c118525320584eead72a310f5da21077c2e3efd8527f121faaa94
                  • MD5 SHA1 SHA512 SSDEEP

                  valorant-internal.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\binaries\valorant-internal.dll
                  • Size 64KB
                  • SHA256 1c2e4f6998a34f0d26f1ae17525cc5618f98cf073c763404e08cc7db9195ebc4
                  • MD5 SHA1 SHA512 SSDEEP

                  elevate.exe

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\elevate.exe
                  • Size 19KB
                  • SHA256 67dcbdeea31be61a3b3755bbe22ac471affc15a0c4eb30ce14dc8c81ce1e29e8
                  • MD5 SHA1 SHA512 SSDEEP

                  index.html

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\overlay\index.html
                  • Size 350B
                  • SHA256 3584d8a01d9debce177b7f5823cae843d77847a71607b0d15cc1dbdd043b3c1b
                  • MD5 SHA1 SHA512

                  index.js

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\overlay\index.js
                  • Size 64KB
                  • SHA256 7abd1047e6b8d292e9b3eaad799486b1fb70666b9c35d0cc7359dfdb1d1cb74d
                  • MD5 SHA1 SHA512 SSDEEP

                  index.js.gz

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\resources\overlay\index.js.gz
                  • Size 64KB
                  • SHA256 3534d5cd9381481badaee37c830d0d1b4493a63bd3055d60e8c56062b5b46444
                  • MD5 SHA1 SHA512 SSDEEP

                  snapshot_blob.bin

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\snapshot_blob.bin
                  • Size 295KB
                  • SHA256 0577f2c32e5e578e3aa5a6f1d5541dfd696301f52053812ec5e0e69bd2213700
                  • MD5 SHA1 SHA512 SSDEEP

                  v8_context_snapshot.bin

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\v8_context_snapshot.bin
                  • Size 502KB
                  • SHA256 561d6e629422d14bcfe3cb46847edc24da7aa8ff42983db55eab01cef5cbaf6e
                  • MD5 SHA1 SHA512 SSDEEP

                  vk_swiftshader.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\vk_swiftshader.dll
                  • Size 448KB
                  • SHA256 a26e96f7b7a2b793e0741dde19d0fcab6612d30eabc4bb51093fdac34e3c477e
                  • MD5 SHA1 SHA512 SSDEEP

                  vk_swiftshader_icd.json

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\vk_swiftshader_icd.json
                  • Size 106B
                  • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                  • MD5 SHA1 SHA512

                  vulkan-1.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\7z-out\vulkan-1.dll
                  • Size 384KB
                  • SHA256 dff096857e9fb235c6b89cc3b69e0873a109bc2b59df394146b8f8e03bea29f1
                  • MD5 SHA1 SHA512 SSDEEP

                  StdUtils.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\StdUtils.dll
                  • Size 100KB
                  • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                  • MD5 SHA1 SHA512 SSDEEP

                  nsProcess.dll

                  • Path C:\Users\Admin\AppData\Local\Temp\nst2FE.tmp\nsProcess.dll
                  • Size 4KB
                  • SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
                  • MD5 SHA1 SHA512 SSDEEP

                  Blitz-2.0.98.exe

                  • Path C:\Users\Admin\AppData\Local\blitz-updater\pending\Blitz-2.0.98.exe
                  • Size 2.1MB
                  • SHA256 ae9308c5f955c3fd8d48663499db0858305346d9eea3dbfa5ba99970901bfa47
                  • MD5 SHA1 SHA512 SSDEEP

                  Blitz-2.0.98.exe

                  • Path C:\Users\Admin\AppData\Local\blitz-updater\pending\Blitz-2.0.98.exe
                  • Size 2.0MB
                  • SHA256 082f64eff12adcee009aa27fffa962a34bc92fdd07bd06c9c76579219b2d90bd
                  • MD5 SHA1 SHA512 SSDEEP

                  data_0

                  • Path C:\Users\Admin\AppData\Roaming\Blitz\GPUCache\data_0
                  • Size 8KB
                  • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                  • MD5 SHA1 SHA512 SSDEEP

                  data_1

                  • Path C:\Users\Admin\AppData\Roaming\Blitz\GPUCache\data_1
                  • Size 264KB
                  • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                  • MD5 SHA1 SHA512 SSDEEP

                  data_2

                  • Path C:\Users\Admin\AppData\Roaming\Blitz\GPUCache\data_2
                  • Size 8KB
                  • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                  • MD5 SHA1 SHA512 SSDEEP

                  data_3

                  • Path C:\Users\Admin\AppData\Roaming\Blitz\GPUCache\data_3
                  • Size 8KB
                  • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                  • MD5 SHA1 SHA512 SSDEEP

                  CURRENT

                  • Path C:\Users\Admin\AppData\Roaming\Blitz\Local Storage\leveldb\CURRENT
                  • Size 16B
                  • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                  • MD5 SHA1 SHA512

                  MANIFEST-000001

                  • Path C:\Users\Admin\AppData\Roaming\Blitz\Local Storage\leveldb\MANIFEST-000001
                  • Size 41B
                  • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                  • MD5 SHA1 SHA512

                  bb1f06f5-8b2b-48e2-ba8c-e1137ae9d385.tmp

                  • Path C:\Users\Admin\AppData\Roaming\Blitz\bb1f06f5-8b2b-48e2-ba8c-e1137ae9d385.tmp
                  • Size 57B
                  • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
                  • MD5 SHA1 SHA512

                  index.node

                  • Path C:\Users\Admin\AppData\Roaming\Blitz\blitz-deps\1.15.35\index.node
                  • Size 1.3MB
                  • SHA256 b614283d5f156b0668e4f7e98795d31e84f003f826dac2add249de8c3cfd7cac
                  • MD5 SHA1 SHA512 SSDEEP

                  en-US-9-0.bdic

                  • Path C:\Users\Admin\AppData\Roaming\Blitz\en-US-9-0.bdic
                  • Size 441KB
                  • SHA256 0d6803758ff8f87081fafd62e90f0950dfb2dd7991e9607fe76a8f92d0e893fa
                  • MD5 SHA1 SHA512 SSDEEP

                  Blitz.exe

                  • Path \Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                  • Size 82KB
                  • SHA256 3691ab7b25881bebaf0b2550f6f680c0cb08c88149deb75573c043e3a801833b
                  • MD5 SHA1 SHA512 SSDEEP

                  Blitz.exe

                  • Path \Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                  • Size 64KB
                  • SHA256 5af96436fe2aeaa176656c2ffdbfcb7b5970eee56c61616b2b05d66e8522da3d
                  • MD5 SHA1 SHA512 SSDEEP

                  ffmpeg.dll

                  • Path \Users\Admin\AppData\Local\Programs\Blitz\ffmpeg.dll
                  • Size 320KB
                  • SHA256 f658e8475788597e9d208731555c68465e469d8c29ab6a3d7b29728c5c2af280
                  • MD5 SHA1 SHA512 SSDEEP

                  System.dll

                  • Path \Users\Admin\AppData\Local\Temp\nst2FE.tmp\System.dll
                  • Size 12KB
                  • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                  • MD5 SHA1 SHA512 SSDEEP

                  WinShell.dll

                  • Path \Users\Admin\AppData\Local\Temp\nst2FE.tmp\WinShell.dll
                  • Size 3KB
                  • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                  • MD5 SHA1 SHA512

                  nsExec.dll

                  • Path \Users\Admin\AppData\Local\Temp\nst2FE.tmp\nsExec.dll
                  • Size 6KB
                  • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
                  • MD5 SHA1 SHA512 SSDEEP

                  nsis7z.dll

                  • Path \Users\Admin\AppData\Local\Temp\nst2FE.tmp\nsis7z.dll
                  • Size 424KB
                  • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                  • MD5 SHA1 SHA512 SSDEEP

                  Blitz-2.0.98.exe

                  • Path \Users\Admin\AppData\Local\blitz-updater\pending\Blitz-2.0.98.exe
                  • Size 960KB
                  • SHA256 3ab76d1e594ec8cdf8131c39031faf24f252c301e64f0214815f1d494efb6a9e
                  • MD5 SHA1 SHA512 SSDEEP

                  memory/1120-33-0x00000000007A0000-0x00000000007A1000-memory.dmp

                  memory/1560-244-0x00000000024E0000-0x0000000002520000-memory.dmp

                  memory/1560-243-0x00000000024E0000-0x0000000002520000-memory.dmp

                  memory/1560-242-0x00000000024E0000-0x0000000002520000-memory.dmp

                  memory/1560-241-0x00000000713E0000-0x000000007198B000-memory.dmp

                  memory/1560-240-0x00000000713E0000-0x000000007198B000-memory.dmp

                  memory/1560-245-0x00000000713E0000-0x000000007198B000-memory.dmp

                  memory/2176-126-0x000000000ADE0000-0x000000000ADE1000-memory.dmp

                  memory/2948-1294-0x0000000002E40000-0x0000000002E42000-memory.dmp