Analysis

  • max time kernel
    139s
  • max time network
    145s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26/02/2024, 15:17

General

  • Target
    Blitz-1.15.35.exe
  • Size 73.2MB
  • Sample240226-sn7rtahc33
  • SHA256 4aab20889fea1250ebff86fd28bebdaa19cc310c496bcddcfdf2d3db56387a3c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Blocklisted process makes network request 2 IoCs
  • Checks computer location settings 2 TTPs 8 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 20 IoCs
  • Loads dropped DLL 64 IoCs
  • Reads user/profile data of web browsers 2 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

  • Adds Run key to start application 2 TTPs 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Program crash 1 IoCs
  • Checks processor information in registry 2 TTPs 9 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Enumerates processes with tasklist 1 TTPs 2 IoCs
  • Modifies registry class 64 IoCs
  • NTFS ADS 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 13 IoCs
  • Suspicious use of SendNotifyMessage 12 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Blitz-1.15.35.exe
    "C:\Users\Admin\AppData\Local\Temp\Blitz-1.15.35.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3484
  • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
    "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Modifies registry class
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:4560
    • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
      C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\Blitz /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\Blitz\Crashpad --url=https://sentry.blitz.gg/api/2/minidump/?sentry_key=d0d473722f3c496a9d6097abb79c953f --annotation=_productName=Blitz --annotation=_version=1.15.35 --annotation=prod=Electron --annotation=ver=15.0.0-alpha.2 --initial-client-data=0x498,0x49c,0x4a0,0x494,0x4a4,0x751fa60,0x751fa70,0x751fa7c
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1900
    • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
      "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=gpu-process --field-trial-handle=1840,9804258013301094202,8818914201872522390,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,HardwareMediaKeyHandling,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1848 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2716
    • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
      "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1840,9804258013301094202,8818914201872522390,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,HardwareMediaKeyHandling,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --use-fake-device-for-media-stream --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --enable-sandbox --mojo-platform-channel-handle=2204 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:1368
    • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
      "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --enable-sandbox --app-user-model-id=com.blitz.app --app-path="C:\Users\Admin\AppData\Local\Programs\Blitz\resources\app.asar" --enable-sandbox --disable-blink-features=Auxclick --js-flags=--expose_gc --use-fake-ui-for-media-stream --field-trial-handle=1840,9804258013301094202,8818914201872522390,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,HardwareMediaKeyHandling,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2776 /prefetch:1
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1304
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      powershell.exe -NoProfile -NonInteractive -InputFormat None -Command "Get-AuthenticodeSignature 'C:\Users\Admin\AppData\Local\blitz-updater\pending\temp-Blitz-2.0.98.exe' | ConvertTo-Json -Compress | ForEach-Object { [Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes($_)) }"
      2⤵
      • Blocklisted process makes network request
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3464
    • C:\Users\Admin\AppData\Local\Programs\Blitz\resources\elevate.exe
      C:\Users\Admin\AppData\Local\Programs\Blitz\resources\elevate.exe C:\Users\Admin\AppData\Local\blitz-updater\pending\Blitz-2.0.98.exe --updated /S --force-run
      2⤵
        PID:2448
        • C:\Users\Admin\AppData\Local\blitz-updater\pending\Blitz-2.0.98.exe
          "C:\Users\Admin\AppData\Local\blitz-updater\pending\Blitz-2.0.98.exe" --updated /S --force-run
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:1392
          • C:\Windows\SysWOW64\cmd.exe
            cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Blitz.exe" | %SYSTEMROOT%\System32\find.exe "Blitz.exe"
            4⤵
              PID:3832
              • C:\Windows\SysWOW64\tasklist.exe
                tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Blitz.exe"
                5⤵
                • Enumerates processes with tasklist
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of AdjustPrivilegeToken
                PID:4688
              • C:\Windows\SysWOW64\find.exe
                C:\Windows\System32\find.exe "Blitz.exe"
                5⤵
                  PID:184
        • C:\Windows\System32\CompPkgSrv.exe
          C:\Windows\System32\CompPkgSrv.exe -Embedding
          1⤵
            PID:208
          • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
            "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --updated
            1⤵
            • Checks computer location settings
            • Executes dropped EXE
            • Loads dropped DLL
            • Adds Run key to start application
            • Checks processor information in registry
            • Modifies registry class
            • NTFS ADS
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of SendNotifyMessage
            • Suspicious use of SetWindowsHookEx
            PID:316
            • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
              C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\Blitz /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\Blitz\Crashpad --url=https://sentry.blitz.gg/api/2/minidump/?sentry_key=d0d473722f3c496a9d6097abb79c953f --annotation=_productName=Blitz --annotation=_version=2.0.98 --annotation=plat=Win32 --annotation=prod=Electron --annotation=ver=23.0.0-alpha.1 --initial-client-data=0x4b8,0x4bc,0x4ac,0x480,0x4b0,0x8b7adf8,0x8b7ae08,0x8b7ae14
              2⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:4956
            • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
              "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1860 --field-trial-handle=1996,i,1684512535249555871,7064858141687781753,131072 --disable-features=AllowAggressiveThrottlingWithWebSocket,BlinkSchedulerMicroTaskQueuePerWindowAgent,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
              2⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:2980
            • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
              "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --use-fake-device-for-media-stream --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --enable-sandbox --mojo-platform-channel-handle=2220 --field-trial-handle=1996,i,1684512535249555871,7064858141687781753,131072 --disable-features=AllowAggressiveThrottlingWithWebSocket,BlinkSchedulerMicroTaskQueuePerWindowAgent,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
              2⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:372
            • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
              "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --enable-sandbox --app-user-model-id=com.blitz.app --app-path="C:\Users\Admin\AppData\Local\Programs\Blitz\resources\app.asar" --enable-sandbox --disable-blink-features=Auxclick --first-renderer-process --use-fake-ui-for-media-stream --js-flags=--expose_gc --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=3028 --field-trial-handle=1996,i,1684512535249555871,7064858141687781753,131072 --disable-features=AllowAggressiveThrottlingWithWebSocket,BlinkSchedulerMicroTaskQueuePerWindowAgent,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
              2⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              PID:4408
            • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
              "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --enable-sandbox --app-user-model-id=com.blitz.app --app-path="C:\Users\Admin\AppData\Local\Programs\Blitz\resources\app.asar" --enable-sandbox --disable-blink-features=Auxclick --use-fake-ui-for-media-stream --js-flags=--expose_gc --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3580 --field-trial-handle=1996,i,1684512535249555871,7064858141687781753,131072 --disable-features=AllowAggressiveThrottlingWithWebSocket,BlinkSchedulerMicroTaskQueuePerWindowAgent,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
              2⤵
              • Checks computer location settings
              • Executes dropped EXE
              • Loads dropped DLL
              PID:1396
            • C:\Windows\SysWOW64\cmd.exe
              C:\Windows\system32\cmd.exe /d /s /c "chcp"
              2⤵
                PID:2824
                • C:\Windows\SysWOW64\chcp.com
                  chcp
                  3⤵
                    PID:760
                • C:\Windows\SysWOW64\cmd.exe
                  C:\Windows\system32\cmd.exe /d /s /c "reg query "HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0" /v FeatureSet"
                  2⤵
                    PID:4924
                    • C:\Windows\SysWOW64\reg.exe
                      reg query "HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0" /v FeatureSet
                      3⤵
                      • Checks processor information in registry
                      PID:5340
                  • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                    powershell.exe -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:2032
                  • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                    powershell.exe -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:2856
                  • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                    powershell.exe -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:4348
                  • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                    powershell.exe -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:4464
                  • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                    powershell.exe -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:4672
                  • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                    powershell.exe -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                    2⤵
                    • Executes dropped EXE
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:2448
                  • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                    powershell.exe -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:1104
                    • C:\Windows\SysWOW64\WerFault.exe
                      C:\Windows\SysWOW64\WerFault.exe -u -p 1104 -s 2412
                      3⤵
                      • Program crash
                      PID:5344
                  • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                    powershell.exe -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:2812
                  • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                    powershell.exe -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:3988
                  • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                    powershell.exe -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:1208
                  • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                    powershell.exe -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                    2⤵
                    • Suspicious behavior: EnumeratesProcesses
                    • Suspicious use of AdjustPrivilegeToken
                    PID:3032
                  • C:\Windows\SysWOW64\cmd.exe
                    C:\Windows\system32\cmd.exe /d /s /c "echo %COMPUTERNAME%.%USERDNSDOMAIN%"
                    2⤵
                      PID:3560
                    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                      powershell.exe -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      2⤵
                      • Suspicious use of AdjustPrivilegeToken
                      PID:5476
                    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                      powershell.exe -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      2⤵
                      • Suspicious use of AdjustPrivilegeToken
                      PID:5468
                    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
                      powershell.exe -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      2⤵
                      • Suspicious use of AdjustPrivilegeToken
                      PID:5460
                    • C:\Windows\SysWOW64\cmd.exe
                      C:\Windows\system32\cmd.exe /d /s /c "findstr /C:"Detected boot environment" "%windir%\Panther\setupact.log""
                      2⤵
                        PID:5124
                        • C:\Windows\SysWOW64\findstr.exe
                          findstr /C:"Detected boot environment" "C:\Windows\Panther\setupact.log"
                          3⤵
                            PID:2248
                        • C:\Users\Admin\Downloads\Blitz-2.1.132.exe
                          "C:\Users\Admin\Downloads\Blitz-2.1.132.exe"
                          2⤵
                          • Executes dropped EXE
                          • Loads dropped DLL
                          • NTFS ADS
                          PID:700
                          • C:\Windows\SysWOW64\cmd.exe
                            cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Blitz.exe" | %SYSTEMROOT%\System32\find.exe "Blitz.exe"
                            3⤵
                              PID:5696
                              • C:\Windows\SysWOW64\tasklist.exe
                                tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Blitz.exe"
                                4⤵
                                • Enumerates processes with tasklist
                                PID:5324
                              • C:\Windows\SysWOW64\find.exe
                                C:\Windows\System32\find.exe "Blitz.exe"
                                4⤵
                                  PID:4672
                          • C:\Windows\system32\wbem\unsecapp.exe
                            C:\Windows\system32\wbem\unsecapp.exe -Embedding
                            1⤵
                              PID:3088
                            • C:\Windows\SysWOW64\WerFault.exe
                              C:\Windows\SysWOW64\WerFault.exe -pss -s 468 -p 1104 -ip 1104
                              1⤵
                                PID:5308
                              • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                                "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe"
                                1⤵
                                • Checks computer location settings
                                • Executes dropped EXE
                                • Loads dropped DLL
                                • Modifies registry class
                                • Suspicious use of FindShellTrayWindow
                                • Suspicious use of SendNotifyMessage
                                PID:1204
                                • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                                  C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\Blitz /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\Blitz\Crashpad --url=https://sentry.blitz.gg/api/2/minidump/?sentry_key=d0d473722f3c496a9d6097abb79c953f --annotation=_productName=Blitz --annotation=_version=2.1.132 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=26.2.2 --initial-client-data=0x48c,0x490,0x494,0x488,0x498,0x7ff7537b1ef8,0x7ff7537b1f08,0x7ff7537b1f18
                                  2⤵
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  PID:4716
                                • C:\Windows\system32\cmd.exe
                                  C:\Windows\system32\cmd.exe /d /s /c "chcp"
                                  2⤵
                                    PID:5372
                                    • C:\Windows\system32\chcp.com
                                      chcp
                                      3⤵
                                        PID:1268
                                    • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1972 --field-trial-handle=1976,i,8542801877145258260,14433965110560120188,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                                      2⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      PID:5916
                                    • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --use-fake-device-for-media-stream --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --enable-sandbox --mojo-platform-channel-handle=2152 --field-trial-handle=1976,i,8542801877145258260,14433965110560120188,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                                      2⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      PID:5228
                                    • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --enable-sandbox --app-user-model-id=com.blitz.app --app-path="C:\Users\Admin\AppData\Local\Programs\Blitz\resources\app.asar" --enable-sandbox --disable-blink-features=Auxclick --first-renderer-process --use-fake-ui-for-media-stream --js-flags=--expose_gc --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2972 --field-trial-handle=1976,i,8542801877145258260,14433965110560120188,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
                                      2⤵
                                      • Checks computer location settings
                                      • Executes dropped EXE
                                      PID:468
                                    • C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                                      "C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Blitz" --enable-sandbox --app-user-model-id=com.blitz.app --app-path="C:\Users\Admin\AppData\Local\Programs\Blitz\resources\app.asar" --enable-sandbox --disable-blink-features=Auxclick --use-fake-ui-for-media-stream --js-flags=--expose_gc --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3108 --field-trial-handle=1976,i,8542801877145258260,14433965110560120188,262144 --disable-features=AllowAggressiveThrottlingWithWebSocket,HardwareMediaKeyHandling,IntensiveWakeUpThrottling,SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
                                      2⤵
                                      • Checks computer location settings
                                      • Executes dropped EXE
                                      PID:3520

                                  Network

                                        MITRE ATT&CK Enterprise v15

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        .electrum

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\.electrum
                                        • Size 8B
                                        • SHA256 8c562718401a5de2356ac032aae2efae3af2760d615cf82aa09fa226ae2cb52e
                                        • MD5 SHA1 SHA512

                                        .electrum

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\.electrum
                                        • Size 10B
                                        • SHA256 1f9bab6c2c975a0dd3614bb7b8b7045fdda298da93035d95041a07812b3e3a20
                                        • MD5 SHA1 SHA512

                                        Blitz.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                                        • Size 52.3MB
                                        • SHA256 6df88405becd59e14b1ed0aafb8909509031808514d3b9a78b39f473a09bfd8d
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Blitz.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                                        • Size 22.9MB
                                        • SHA256 99ce20d6c466d79a7fe941d6b30a188e385c3dff5e431516c7e95ea78ce7dd39
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Blitz.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                                        • Size 1.6MB
                                        • SHA256 e1e7dc8b6fdd6b2ff8c16b50bc78c055e4c7b94cf4b9e1cd13c100917f1ee070
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Blitz.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                                        • Size 4.8MB
                                        • SHA256 9941a95d2163dd5b276658de507d319f131c8d33db0f1032625c2e6cc7a24ae3
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Blitz.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                                        • Size 4.6MB
                                        • SHA256 3dfea6453125b91507cdb170fd46677ba58e2a15800a63790cc52511ccb3dedf
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Blitz.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                                        • Size 4.1MB
                                        • SHA256 ffc0f2a002bcf7f6fe78bec5c9645c68861eac09199e3fa9665c5e6dc98ade12
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Blitz.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\Blitz.exe
                                        • Size 4.6MB
                                        • SHA256 d3331c02b0274193de50040899d0898af35b4e4041adba3fcc0b077fc2515aad
                                        • MD5 SHA1 SHA512 SSDEEP

                                        chrome_100_percent.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\chrome_100_percent.pak
                                        • Size 139KB
                                        • SHA256 06e55f7514d5b2cfb080b69308fe2d8d40c47dece689271d0900f49a86aae8f0
                                        • MD5 SHA1 SHA512 SSDEEP

                                        chrome_200_percent.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\chrome_200_percent.pak
                                        • Size 149KB
                                        • SHA256 ccfabc5e7f84b7c04f7ab69d7d3d808f123df075b0acdd0a081b10cec894a109
                                        • MD5 SHA1 SHA512 SSDEEP

                                        d3dcompiler_47.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\d3dcompiler_47.dll
                                        • Size 3.5MB
                                        • SHA256 2630f4188bd2ea5451ca61d83869bf7068a4f0440401c949a9feb9fb476e15df
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ffmpeg.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\ffmpeg.dll
                                        • Size 2.4MB
                                        • SHA256 053cc4f74ec1feffdb03b3c7fb53a03dd3f31a8e2379d597d9ae05b56eef440c
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ffmpeg.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\ffmpeg.dll
                                        • Size 1.4MB
                                        • SHA256 85d183da39ae439ac33eef92ec839a9cbccee4a60645fa13e6155f843b0e1bf1
                                        • MD5 SHA1 SHA512 SSDEEP

                                        icudtl.dat

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\icudtl.dat
                                        • Size 9.7MB
                                        • SHA256 4bb1b7689b6deba236af142eca6102bace405166eb31e998ae46669031cf1405
                                        • MD5 SHA1 SHA512 SSDEEP

                                        libEGL.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\libEGL.dll
                                        • Size 346KB
                                        • SHA256 a919667f018f6158898fb740507fd004b9a49c00d11c162863ac0e5273ccb6ab
                                        • MD5 SHA1 SHA512 SSDEEP

                                        libGLESv2.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\libGLESv2.dll
                                        • Size 4.7MB
                                        • SHA256 42be4f840c18193961d42d69eafb513f65a6f53ac812b9f7abe13a7f5984d555
                                        • MD5 SHA1 SHA512 SSDEEP

                                        libglesv2.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\libglesv2.dll
                                        • Size 5.1MB
                                        • SHA256 f6451ec0e06e73b7d00091c4f92a2ef031adab74cb0b8bbdc1c1c9d482184f39
                                        • MD5 SHA1 SHA512 SSDEEP

                                        en-US.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\locales\en-US.pak
                                        • Size 91KB
                                        • SHA256 84f6e8fc1cd59b00ca30ad7434add523d08c51f4212291c7f25fe5baa0a2edb9
                                        • MD5 SHA1 SHA512 SSDEEP

                                        pt-PT.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\locales\pt-PT.pak
                                        • Size 391KB
                                        • SHA256 60a5a7f03d4d54397ca04be0c89d1f67a496b72807c0bd660c076bc945b40339
                                        • MD5 SHA1 SHA512 SSDEEP

                                        sl.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\locales\sl.pak
                                        • Size 483KB
                                        • SHA256 fcd27a9f5cb4b4be373da7076a8232006ebe020999fdf90d20745f16cd7ef223
                                        • MD5 SHA1 SHA512 SSDEEP

                                        resources.pak

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources.pak
                                        • Size 224KB
                                        • SHA256 c190b2b82d928978000152fef7e05b2b2237a52c7a0d8c589138032a0349d1ab
                                        • MD5 SHA1 SHA512 SSDEEP

                                        .env.production

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\.env.production
                                        • Size 389B
                                        • SHA256 289e57f10e1df2147c34e1055b5b79fe89d45d7204bfc6bb609fac7162a0af06
                                        • MD5 SHA1 SHA512

                                        app-update.yml

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\app-update.yml
                                        • Size 163B
                                        • SHA256 3e93569d2f31ba009648b27d7ad384b7a4dbc0d7c945b3cba7a22c4895b3c4fe
                                        • MD5 SHA1 SHA512

                                        app.asar

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\app.asar
                                        • Size 794KB
                                        • SHA256 d0c8adc93da6c2f536ac4ebd07c34d7c61f68d79d11684ac6f1402fada97ae60
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\win32-ia32\node.napi.node
                                        • Size 405KB
                                        • SHA256 16a0f74da89fd1c98027627a82b63173e6e7b53dc9ecaee5d325095f353f198f
                                        • MD5 SHA1 SHA512 SSDEEP

                                        PinManager.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\PinManager.exe
                                        • Size 36KB
                                        • SHA256 ad65d2dc6f4993b8c55823386821ac4ada4b2838d195e5f53f4a1279f8e0d9d8
                                        • MD5 SHA1 SHA512 SSDEEP

                                        blitz-overlay.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\blitz-overlay.dll
                                        • Size 1.7MB
                                        • SHA256 6af97585953a5ba4ebed672330d51eba208b94392807ec0a009a227ca1726da2
                                        • MD5 SHA1 SHA512 SSDEEP

                                        blitz_core.node

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\blitz_core.node
                                        • Size 485KB
                                        • SHA256 1ba42dc32bb40722e22b765b6687dc16e8611a2285be034370ef0f492e713a5b
                                        • MD5 SHA1 SHA512 SSDEEP

                                        electron_overlay.node

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\electron_overlay.node
                                        • Size 1.1MB
                                        • SHA256 57178ce0ca43069ba75e43520e314f87b50a1da1dd934496727efc5a27d0e2a1
                                        • MD5 SHA1 SHA512 SSDEEP

                                        index.node

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\index.node
                                        • Size 1.3MB
                                        • SHA256 b614283d5f156b0668e4f7e98795d31e84f003f826dac2add249de8c3cfd7cac
                                        • MD5 SHA1 SHA512 SSDEEP

                                        injector_x64.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\injector_x64.exe
                                        • Size 274KB
                                        • SHA256 3f50bfa6c138457d03221cf5cb5bfa3b746be190c33b15289e971e0090c1a766
                                        • MD5 SHA1 SHA512 SSDEEP

                                        n_overlay.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\n_overlay.dll
                                        • Size 757KB
                                        • SHA256 6dab08574b02e8cfc49d21b99a0e80e1a82cdd8ecbf47f4c995d3a1685e7d0d6
                                        • MD5 SHA1 SHA512 SSDEEP

                                        n_overlay.x64.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\n_overlay.x64.dll
                                        • Size 917KB
                                        • SHA256 48733e6726cbf9940809663d468a01758a82248b6d3915542850c42611bd4f02
                                        • MD5 SHA1 SHA512 SSDEEP

                                        native-utils.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\native-utils.dll
                                        • Size 203KB
                                        • SHA256 bed8b8f289279164888a600a049d2e954f13a33ca76d2919cfdf03d4efb59b19
                                        • MD5 SHA1 SHA512 SSDEEP

                                        safe_x64_injector.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\safe_x64_injector.exe
                                        • Size 60KB
                                        • SHA256 1b543e906101520e2382894ce4620472dbf92c8a1da545c94c6c2fd4e525aaf0
                                        • MD5 SHA1 SHA512 SSDEEP

                                        safe_x86_injector.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\safe_x86_injector.exe
                                        • Size 87KB
                                        • SHA256 cd93e6e1fe499b86609b7ca8e6f0725dedc21821a8ea58115aa43d5ff3d50d0a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        tft-internal.dll

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\binaries\tft-internal.dll
                                        • Size 254KB
                                        • SHA256 bafbb466243d30c10967e6228309ce00ae62ff98a8a19609fe313cdb307c3a69
                                        • MD5 SHA1 SHA512 SSDEEP

                                        elevate.exe

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\resources\elevate.exe
                                        • Size 105KB
                                        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
                                        • MD5 SHA1 SHA512 SSDEEP

                                        v8_context_snapshot.bin

                                        • Path C:\Users\Admin\AppData\Local\Programs\Blitz\v8_context_snapshot.bin
                                        • Size 160KB
                                        • SHA256 66739a7a8adaed9db83091b90491f0ea16d00d69ab98c8bef5e305345df52915
                                        • MD5 SHA1 SHA512 SSDEEP

                                        __PSScriptPolicyTest_lx3dsy5h.4gt.ps1

                                        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_lx3dsy5h.4gt.ps1
                                        • Size 60B
                                        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                        • MD5 SHA1 SHA512

                                        SpiderBanner.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsa46FD.tmp\SpiderBanner.dll
                                        • Size 9KB
                                        • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
                                        • MD5 SHA1 SHA512 SSDEEP

                                        StdUtils.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsa46FD.tmp\StdUtils.dll
                                        • Size 100KB
                                        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        System.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsa46FD.tmp\System.dll
                                        • Size 12KB
                                        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                                        • MD5 SHA1 SHA512 SSDEEP

                                        WinShell.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsa46FD.tmp\WinShell.dll
                                        • Size 3KB
                                        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                                        • MD5 SHA1 SHA512

                                        nsExec.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsa46FD.tmp\nsExec.dll
                                        • Size 6KB
                                        • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
                                        • MD5 SHA1 SHA512 SSDEEP

                                        nsProcess.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsa46FD.tmp\nsProcess.dll
                                        • Size 4KB
                                        • SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
                                        • MD5 SHA1 SHA512 SSDEEP

                                        nsis7z.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsa46FD.tmp\nsis7z.dll
                                        • Size 424KB
                                        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Blitz.exe

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\Blitz.exe
                                        • Size 1.2MB
                                        • SHA256 1a170fc48db40ffdd8fa9b81bdae353b001e466de9eb539fcdcc3de1f17c53f5
                                        • MD5 SHA1 SHA512 SSDEEP

                                        LICENSE.electron.txt

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\LICENSE.electron.txt
                                        • Size 1KB
                                        • SHA256 fd8fba3293b11d24886743418bfb624de8c46f81772b60a7e1b08a029e24c5b9
                                        • MD5 SHA1 SHA512

                                        LICENSES.chromium.html

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\LICENSES.chromium.html
                                        • Size 1.2MB
                                        • SHA256 e5204861c24a5aad54cfa9ade964282c28273e88266338913a053fa9665479f0
                                        • MD5 SHA1 SHA512 SSDEEP

                                        chrome_100_percent.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\chrome_100_percent.pak
                                        • Size 126KB
                                        • SHA256 02125a23b4ba2c49a30db2ef5d741a96d519ecae0f37eaf4d102f30f88948078
                                        • MD5 SHA1 SHA512 SSDEEP

                                        chrome_200_percent.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\chrome_200_percent.pak
                                        • Size 175KB
                                        • SHA256 b48dc9f6ae23d63e4db8010830f58a9bb66885f9f2f86856ec848d656937a024
                                        • MD5 SHA1 SHA512 SSDEEP

                                        d3dcompiler_47.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\d3dcompiler_47.dll
                                        • Size 1.3MB
                                        • SHA256 5c60163eda7e5c185e6bda5155926472f7e091154dc35f9d60924e2f0a171c7c
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ffmpeg.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\ffmpeg.dll
                                        • Size 1.3MB
                                        • SHA256 1db7fecfa376dc083cac2177b6a54a4e8804db93004f833ff0e6a652df89332c
                                        • MD5 SHA1 SHA512 SSDEEP

                                        icudtl.dat

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\icudtl.dat
                                        • Size 1.3MB
                                        • SHA256 5054bed4ead143a84d770c349b4fcd588d417eefdb2b4a6eeedabb0948260571
                                        • MD5 SHA1 SHA512 SSDEEP

                                        libEGL.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\libEGL.dll
                                        • Size 370KB
                                        • SHA256 b6b411a4a252ec3c8c247440db143bd6022a0294c005dd5d97521fad238acc87
                                        • MD5 SHA1 SHA512 SSDEEP

                                        libGLESv2.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\libGLESv2.dll
                                        • Size 1.4MB
                                        • SHA256 c32916f49aaea7a5716ded580fe30d742460726abc7b0e835acc00b65faef9d8
                                        • MD5 SHA1 SHA512 SSDEEP

                                        af.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\af.pak
                                        • Size 353KB
                                        • SHA256 0ad547bb1dc57907adeb02e1be3017cce78f6e60b8b39395fe0e8b62285797a1
                                        • MD5 SHA1 SHA512 SSDEEP

                                        am.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\am.pak
                                        • Size 569KB
                                        • SHA256 fa1e44215bd5acc7342c431a3b1fddb6e8b6b02220b4599167f7d77a29f54450
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ar.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\ar.pak
                                        • Size 624KB
                                        • SHA256 00861d9fa5763cc5c3152edb4a5c956c6bc4f56311ce2ed9e6b496181624ab5e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        bg.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\bg.pak
                                        • Size 652KB
                                        • SHA256 898621731ac3471a41f8b3a7bf52e7f776e8928652b37154bc7c1299f1fd92e1
                                        • MD5 SHA1 SHA512 SSDEEP

                                        bn.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\bn.pak
                                        • Size 838KB
                                        • SHA256 1ea245646a4b4386606f03c8a3916a3607e2adbbc88f000976be36db410a1e39
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ca.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\ca.pak
                                        • Size 400KB
                                        • SHA256 f7f54b55a917a0f68e4b7ed7a3e6feabb224c52d09786b939712607ebe8ab0ea
                                        • MD5 SHA1 SHA512 SSDEEP

                                        cs.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\cs.pak
                                        • Size 409KB
                                        • SHA256 877a0a3dcb5d393365b2f775faff0d3593dd84b380a27dc72025597061a50ba7
                                        • MD5 SHA1 SHA512 SSDEEP

                                        da.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\da.pak
                                        • Size 371KB
                                        • SHA256 40b32636ffb813574d8a063ce7e74860ab06b93a9b16dd56b5b6aa602b5e6943
                                        • MD5 SHA1 SHA512 SSDEEP

                                        de.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\de.pak
                                        • Size 397KB
                                        • SHA256 9c335a4e85b4ac58ed386d89d284be053ef288b2706a4cae433d91625ec1b31e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        el.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\el.pak
                                        • Size 582KB
                                        • SHA256 5aa1067f2106408a9938e6c158c67ad368ee068c14a7af5d0ed1cca6980e8743
                                        • MD5 SHA1 SHA512 SSDEEP

                                        en-GB.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\en-GB.pak
                                        • Size 324KB
                                        • SHA256 6b0e81b2198e025eae1e2f6d5d3a33ccce034d1f4bc59e4cade1b5f5adb99f1a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        en-US.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\en-US.pak
                                        • Size 326KB
                                        • SHA256 1d20e626444759c2b72aa6e998f14a032408d2b32f957c12ec3abd52831338fb
                                        • MD5 SHA1 SHA512 SSDEEP

                                        es-419.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\es-419.pak
                                        • Size 395KB
                                        • SHA256 77114f519743741a488a9b57cdc7190f0507c37dc3b29811704a048172ba6736
                                        • MD5 SHA1 SHA512 SSDEEP

                                        es.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\es.pak
                                        • Size 328KB
                                        • SHA256 eb530d21a2f874fea51723f971796d6d23c52c575ad6df47c02d875f5bbf0552
                                        • MD5 SHA1 SHA512 SSDEEP

                                        et.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\et.pak
                                        • Size 356KB
                                        • SHA256 c351b84558214420495bed6d882d37496483cc66b0e10400ca872e3fc4145b66
                                        • MD5 SHA1 SHA512 SSDEEP

                                        fa.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\fa.pak
                                        • Size 365KB
                                        • SHA256 7e3ece49254269b4d84010c68a9778af145f6a654f49dc18455c69fd9cbe800a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        fi.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\fi.pak
                                        • Size 312KB
                                        • SHA256 53e88f5d0cf28d0ebe3a38fd0013aeb19397b218e59771ec8303499a3827fa27
                                        • MD5 SHA1 SHA512 SSDEEP

                                        fil.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\fil.pak
                                        • Size 177KB
                                        • SHA256 3cec1e5a194ab83d9d26fd845e701439175cfacd4d62dcaf4ca8c979df8a308f
                                        • MD5 SHA1 SHA512 SSDEEP

                                        fr.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\fr.pak
                                        • Size 315KB
                                        • SHA256 bbb537ab59e4d5b71ada93aa8fed2c9ee56ad65b721e80f33693d7d06fe5bd31
                                        • MD5 SHA1 SHA512 SSDEEP

                                        gu.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\gu.pak
                                        • Size 265KB
                                        • SHA256 280176c531c876d8da72387b58ea229e913f1f93b6500379208a35195bfa4d91
                                        • MD5 SHA1 SHA512 SSDEEP

                                        he.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\he.pak
                                        • Size 507KB
                                        • SHA256 3cd4440501bc67d0b2e33e1346ba133fb9a09a8762f2334732f8cc349cd840b7
                                        • MD5 SHA1 SHA512 SSDEEP

                                        hi.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\hi.pak
                                        • Size 848KB
                                        • SHA256 ccf7a557d0f8353ff3d656d4c2a4fca2d462ed2cc3d18c599d98f4d57b23c615
                                        • MD5 SHA1 SHA512 SSDEEP

                                        hr.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\hr.pak
                                        • Size 397KB
                                        • SHA256 6ea4b1a28cf567cca73ccdb7eec631fffba3b49acc41e3c88b448514578d80da
                                        • MD5 SHA1 SHA512 SSDEEP

                                        hu.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\hu.pak
                                        • Size 427KB
                                        • SHA256 b59f932df822ab1a87e8aab4bbb7c549db15899f259f4c50ae28f8d8c7ce1e72
                                        • MD5 SHA1 SHA512 SSDEEP

                                        id.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\id.pak
                                        • Size 350KB
                                        • SHA256 0853a5543923b7a8db5989ebb8ebe8f9fb6271bfa59b94f5843f97de4401e2d8
                                        • MD5 SHA1 SHA512 SSDEEP

                                        it.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\it.pak
                                        • Size 388KB
                                        • SHA256 d011fd39c3cbab740a7944a60a8dd48d6f76c563ea473cfd1f569c5e6fc9fa4e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ja.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\ja.pak
                                        • Size 472KB
                                        • SHA256 ba2acb635671a48ed0bf8cdc6e0a0318cfb33eb74b4171c6b483b95f2a167bc5
                                        • MD5 SHA1 SHA512 SSDEEP

                                        kn.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\kn.pak
                                        • Size 938KB
                                        • SHA256 47c77fdf73267865a025a54027865a8d67e26943264a43c6e794ccbd6eec549b
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ko.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\ko.pak
                                        • Size 398KB
                                        • SHA256 8d131066e2fa004e11f9128162bfc354d3254381059d6c852bf88a55859ae3e8
                                        • MD5 SHA1 SHA512 SSDEEP

                                        lt.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\lt.pak
                                        • Size 429KB
                                        • SHA256 8a5d6e29833374e0f74fd7070c1b20856cb6b42ed30d18a5f17e6c2e4a8d783e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        lv.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\lv.pak
                                        • Size 427KB
                                        • SHA256 0ff66161377be2fb8b2b456a64dd910d8375a2b9f1f6f22333540a77111903d6
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ml.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\ml.pak
                                        • Size 173KB
                                        • SHA256 e0af377cb3212a666c8f1389967932b4a898e6d50408960c1b13392998bd8579
                                        • MD5 SHA1 SHA512 SSDEEP

                                        mr.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\mr.pak
                                        • Size 797KB
                                        • SHA256 671c3cb2a805a63a275ad608d37d0577c6a2813dd67fb6c2b70f8232323aac04
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ms.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\ms.pak
                                        • Size 365KB
                                        • SHA256 c6471aee5f34f31477d57f593b09cb1de87f5fd0f9b5e63d8bab4986cf10d939
                                        • MD5 SHA1 SHA512 SSDEEP

                                        nb.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\nb.pak
                                        • Size 223KB
                                        • SHA256 3b1390d5f4c865ce50bef7974d46819fa1c880328af1a56378af4b1303a4f6fd
                                        • MD5 SHA1 SHA512 SSDEEP

                                        nl.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\nl.pak
                                        • Size 253KB
                                        • SHA256 a42bcbe1d45f7dd22aec6f359c5d425fee632d74361618ea2ba48ce94d96d9fd
                                        • MD5 SHA1 SHA512 SSDEEP

                                        pl.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\pl.pak
                                        • Size 412KB
                                        • SHA256 0948238576efb502327af4040c1d9eb1346fbf1bdcee35cd46746b170a7ea6a7
                                        • MD5 SHA1 SHA512 SSDEEP

                                        pt-BR.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\pt-BR.pak
                                        • Size 389KB
                                        • SHA256 7f41c3a58d08d98f21232e7c85839c9dec0053b447bb4dae867d2faadb278d45
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ro.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\ro.pak
                                        • Size 403KB
                                        • SHA256 3a58f2275ea6a2baa68924b1dab6b0f06abf8b6657a878dea94b0060a95e38f0
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ru.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\ru.pak
                                        • Size 656KB
                                        • SHA256 e4edec80c9e29357bcf31eda5d8b046c6c9fbc6434a0b5594b6a906d5f1407d1
                                        • MD5 SHA1 SHA512 SSDEEP

                                        sk.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\sk.pak
                                        • Size 416KB
                                        • SHA256 b7ba1d08ac8498ea6a37186a51b30d6d0db17136ac734982af4dab97f4a6cd9a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        sl.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\sl.pak
                                        • Size 401KB
                                        • SHA256 ab2079923e2baa27c220df2f1559af8edc785f8e9fe2e12c8ecb0e0e7e7d0a09
                                        • MD5 SHA1 SHA512 SSDEEP

                                        sr.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\sr.pak
                                        • Size 240KB
                                        • SHA256 da278a3ba4f5c7baa3bd384686c8e88e6f90dab28d51c4f64d4a519b95b250b9
                                        • MD5 SHA1 SHA512 SSDEEP

                                        sv.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\sv.pak
                                        • Size 133KB
                                        • SHA256 ab21fd233132efef998533eb289338a3e75e10733af302ef2b92c437d36e6b6b
                                        • MD5 SHA1 SHA512 SSDEEP

                                        sw.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\sw.pak
                                        • Size 126KB
                                        • SHA256 dccb9f26bba67e4cc7f05742485f1c1a6a892f21770a1ca77f7953a43533c115
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ta.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\ta.pak
                                        • Size 123KB
                                        • SHA256 21bec9d1da7f4822daf569ee498522560bc5b9dc03da2082c150bcd4a5b62ec5
                                        • MD5 SHA1 SHA512 SSDEEP

                                        te.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\te.pak
                                        • Size 286KB
                                        • SHA256 22a475e9e64da84809702ff86af7dbfcc290131fdc726f36bf0fe268db51b9d1
                                        • MD5 SHA1 SHA512 SSDEEP

                                        th.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\th.pak
                                        • Size 195KB
                                        • SHA256 f771c8afce54308bea6871a49a7a47cfe71b94173831f1da6eb89902049e319f
                                        • MD5 SHA1 SHA512 SSDEEP

                                        tr.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\tr.pak
                                        • Size 221KB
                                        • SHA256 f3134df9b8b4630916349d1a52f95eb711acf66a8d4f6419c900c406800d6689
                                        • MD5 SHA1 SHA512 SSDEEP

                                        uk.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\uk.pak
                                        • Size 657KB
                                        • SHA256 e914b8956745a14d9d64f12698805e0910f9d3581dd380468949b54576fad2a6
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ur.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\ur.pak
                                        • Size 571KB
                                        • SHA256 3941364d0278e2c4d686faa4a135d16a457b4bc98c5a08e62aa12f3adc09aa7f
                                        • MD5 SHA1 SHA512 SSDEEP

                                        vi.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\vi.pak
                                        • Size 128KB
                                        • SHA256 7a0e50545bfc43c66b7c31edd2f62a7a442bd37d868324dbf7a8c99761f2d090
                                        • MD5 SHA1 SHA512 SSDEEP

                                        zh-CN.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\zh-CN.pak
                                        • Size 332KB
                                        • SHA256 539f0bfdb461bf777aab14a4baaf47c8c32ae1856cc4ac93b23ce73dc50ba02a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        zh-TW.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\locales\zh-TW.pak
                                        • Size 83KB
                                        • SHA256 6bf973f4ba82c9b9ad24066696dcfd8b25e60544682372a4767478e8b26b8449
                                        • MD5 SHA1 SHA512 SSDEEP

                                        resources.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources.pak
                                        • Size 658KB
                                        • SHA256 9dea0371c2da005e73cf97eda7bc6ccabd41066d0fcb2ff028877a61f73952f3
                                        • MD5 SHA1 SHA512 SSDEEP

                                        .env.production

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\.env.production
                                        • Size 409B
                                        • SHA256 e5746cebef7e0550b47ddf2f6c7ce26153b8bb7e7d78afdc4581b21d2d61a121
                                        • MD5 SHA1 SHA512

                                        app-update.yml

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app-update.yml
                                        • Size 164B
                                        • SHA256 38170150435f16f6eb41e2528a78073797357d454f0da847c3f0241dd4e09f58
                                        • MD5 SHA1 SHA512

                                        app.asar

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar
                                        • Size 1.1MB
                                        • SHA256 d6559d7c020d4e8e9141ad1cfe47def24c237a63d5c05008291329c6252ff4b2
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.armv8.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\android-arm64\node.napi.armv8.node
                                        • Size 317KB
                                        • SHA256 2f64fd8131f9b323c16feddae331e65a588129c9e70b458dd78dc984ed5dd465
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.armv7.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\android-arm\node.napi.armv7.node
                                        • Size 69KB
                                        • SHA256 6a0d9d04be78553ba5071accf25ce7a8e2d34719cc52afa332bc2a7add11faa2
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\darwin-x64\node.napi.node
                                        • Size 281KB
                                        • SHA256 84808e4380ed8a7ce9104037e700f509015197bcf82b9f417cf426e4e0b14bb4
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.armv8.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\linux-arm64\node.napi.armv8.node
                                        • Size 84KB
                                        • SHA256 65598c7bf9bc807aebdb74743e4e72664302430ffd6d43d41c2f1b897bb05ac7
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.armv6.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\linux-arm\node.napi.armv6.node
                                        • Size 335KB
                                        • SHA256 a43b0b848910aec87f53675d826fe0595834933e6652f9ea7c7d97e82ddbfed0
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.armv7.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\linux-arm\node.napi.armv7.node
                                        • Size 375KB
                                        • SHA256 3254461647a55dbc8db283866bf6d3351fe14074b58875c94d02e0bf2e227f4a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.glibc.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\linux-x64\node.napi.glibc.node
                                        • Size 469KB
                                        • SHA256 84be7bceeebf718d7efe41c51425027e86d7cdbbeb3d5c4665bb87a183080bd2
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.musl.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\linux-x64\node.napi.musl.node
                                        • Size 405KB
                                        • SHA256 ce51540197bbdba835d0adf02047f9e86dd27c8dd4dfea41de8ff969def2c9b3
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\win32-x64\node.napi.node
                                        • Size 50KB
                                        • SHA256 32c7b08ab4273e4fb0a3e4eb9cb22895d8ba9acf858a4ae61d7ce8b4f65739e8
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ci.yml

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\.github\workflows\ci.yml
                                        • Size 2KB
                                        • SHA256 621ab98517f0305b666608e6696ea116ae1bb5fa64a9185f1ec8c769f41f6c7b
                                        • MD5 SHA1 SHA512

                                        LICENSE

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\LICENSE
                                        • Size 1KB
                                        • SHA256 9415b233c6c5a6fc3ac6977cde3530d149f45a61d86b2fd9611cbca4bf08f4e2
                                        • MD5 SHA1 SHA512

                                        lzmajs

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\bin\lzmajs
                                        • Size 1KB
                                        • SHA256 f29aae866c7bb66e5424a730c473231c1329f6bb0636ad33945299a4c4957a50
                                        • MD5 SHA1 SHA512

                                        index.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\index.js
                                        • Size 13KB
                                        • SHA256 77d9568c9c5479953a4588875b9d5c4a06ce9f926f9fab96d7678e68a74e6985
                                        • MD5 SHA1 SHA512 SSDEEP

                                        liblzma-build.sh

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\liblzma-build.sh
                                        • Size 138B
                                        • SHA256 ae56a4c3e521e37c5677e4d867e79ab46ac23b3f5682a7e2893497232a0326ce
                                        • MD5 SHA1 SHA512

                                        liblzma-config.sh

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\liblzma-config.sh
                                        • Size 733B
                                        • SHA256 100d04495f6b1804aef3983377d91509864758cf9aa7470d28a24b69f0bce116
                                        • MD5 SHA1 SHA512

                                        package.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\package.json
                                        • Size 777B
                                        • SHA256 492448e7c5e26eada710d45c14a2d8eb5c6333eb39dbaff4631befaad37e0ed6
                                        • MD5 SHA1 SHA512

                                        electron.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-arm64\electron.napi.node
                                        • Size 227KB
                                        • SHA256 b322385eb19c1d0737144fbe2fef3c5d27b5e5531878f5a21700489785e51ac4
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-arm64\node.napi.node
                                        • Size 227KB
                                        • SHA256 7eb79b4ace336fc1f31923f7407d997d2676f95a5fab4a3dc4688be2ed659f1a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        electron.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-x64\electron.napi.node
                                        • Size 262KB
                                        • SHA256 45dd17019b5c868c1b02d02d8e9ed10156774d281ae45aed1ee214ffda43c8a2
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-x64\node.napi.node
                                        • Size 201KB
                                        • SHA256 80c2fab88bb7087af3c2e776f4b87270220fc5f503d4abb8feb5c05dcc7e8843
                                        • MD5 SHA1 SHA512 SSDEEP

                                        electron.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\linux-arm64\electron.napi.node
                                        • Size 283KB
                                        • SHA256 1553c58b9472b44d4143563eba3714892464114430f48e913cced5edc2203f5f
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\linux-arm64\node.napi.node
                                        • Size 289KB
                                        • SHA256 5414c55a8e56a309bb90b613fc04e25d332c6412e9e92303fa0e4442da827f92
                                        • MD5 SHA1 SHA512 SSDEEP

                                        electron.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-ia32\electron.napi.node
                                        • Size 266KB
                                        • SHA256 6b1bf49cd256df5439232dd72d7b0c983e34009dba8e2d2c89857789d6eafd8a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        liblzma.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-ia32\liblzma.dll
                                        • Size 148KB
                                        • SHA256 37c4a4277ac066522402c71fd03bea5e8900fefd505ccf9b6399128c92182780
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-ia32\node.napi.node
                                        • Size 129KB
                                        • SHA256 b88091008697da049cfc7c56e9d86fe2c96ad9d368b5267ed5b39cd44867f04d
                                        • MD5 SHA1 SHA512 SSDEEP

                                        electron.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-x64\electron.napi.node
                                        • Size 236KB
                                        • SHA256 578e1bed7674311ec5f82038aab432c940b9ee6b75e4cbaf33d4922eb616dba7
                                        • MD5 SHA1 SHA512 SSDEEP

                                        liblzma.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-x64\liblzma.dll
                                        • Size 147KB
                                        • SHA256 fc7348418be392d5ecebd7b9f07c1ae5bc530260fef923801b140088eddce96e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-x64\node.napi.node
                                        • Size 371KB
                                        • SHA256 d0f0fecf7dcb49d2245941060635b72c879b015460b3d386601efc53c47e1b5e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        filter-array.cpp

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\filter-array.cpp
                                        • Size 1KB
                                        • SHA256 0cbca5a1c726cbb06e9f466727cdd2eeabf33588f9b54138eaf14f5e8eb1f988
                                        • MD5 SHA1 SHA512

                                        index-parser.cpp

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\index-parser.cpp
                                        • Size 15KB
                                        • SHA256 9fe709a77ab9073a903922a88f242f997985fb62e997e1c876685a67beac54cd
                                        • MD5 SHA1 SHA512 SSDEEP

                                        index-parser.h

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\index-parser.h
                                        • Size 7KB
                                        • SHA256 e3f9760df002dcf558888484cd4eea67b4812b9ea46411d4574e1f1270d7feeb
                                        • MD5 SHA1 SHA512 SSDEEP

                                        liblzma-functions.cpp

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\liblzma-functions.cpp
                                        • Size 2KB
                                        • SHA256 0061d0cf1cafa5664e456d28156b26b864eb3db973e4d7d66c8e6a00951a5820
                                        • MD5 SHA1 SHA512

                                        liblzma-node.hpp

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\liblzma-node.hpp
                                        • Size 7KB
                                        • SHA256 083be435288cabebb7e7d2663e06396327b5d9c58bc0a48ffa1e849aa4bc3998
                                        • MD5 SHA1 SHA512 SSDEEP

                                        lzma-stream.cpp

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\lzma-stream.cpp
                                        • Size 10KB
                                        • SHA256 62a94542647f30332b4c9d4b26092980a46e056b15037c68a6ad2463beb378d8
                                        • MD5 SHA1 SHA512 SSDEEP

                                        module.cpp

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\module.cpp
                                        • Size 5KB
                                        • SHA256 952f0fe5f1e6421a91f5cfc5f1556d8f88af6072676bed71691c2d1dfe8bbd33
                                        • MD5 SHA1 SHA512 SSDEEP

                                        mt-options.cpp

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\mt-options.cpp
                                        • Size 793B
                                        • SHA256 955fef2460387cab4f96a45bc03a110bf82e062d1b6f62c524cd037a9835857c
                                        • MD5 SHA1 SHA512

                                        util.cpp

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\util.cpp
                                        • Size 4KB
                                        • SHA256 88a6913de83d47fb45ae173d7b61c2545d65cf19707ceaedbc0385bb1ea0301e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        PinManager.exe

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\binaries\PinManager.exe
                                        • Size 38KB
                                        • SHA256 51e41a2d9e0539a24e1b5e20637e58be680d843ca4ac18a9c91fa2d3a0b2eee1
                                        • MD5 SHA1 SHA512 SSDEEP

                                        apex-internal.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\binaries\apex-internal.dll
                                        • Size 304KB
                                        • SHA256 b534e1cdec85100a03b4a731e83e268df285bf9e9be03a9116d4c4d69f6b9818
                                        • MD5 SHA1 SHA512 SSDEEP

                                        blitz-csgo-external.exe

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\binaries\blitz-csgo-external.exe
                                        • Size 232KB
                                        • SHA256 165955155e6e0789a8a1d5ef0cab7867b991b6d7bd73343e9eb5184ccd88eb83
                                        • MD5 SHA1 SHA512 SSDEEP

                                        blitz-overlay-old.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\binaries\blitz-overlay-old.dll
                                        • Size 201KB
                                        • SHA256 aff129584cef39ab2168c447b72c3fe7dce9cf80d63c5c7f1c72fd9bdf2c8958
                                        • MD5 SHA1 SHA512 SSDEEP

                                        blitz-overlay.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\binaries\blitz-overlay.dll
                                        • Size 406KB
                                        • SHA256 a374d3a4500a2cfb1f54bf7ef118fb7a0829bb803fb2326898be19f2881a4910
                                        • MD5 SHA1 SHA512 SSDEEP

                                        blitz_core.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\binaries\blitz_core.node
                                        • Size 160KB
                                        • SHA256 66fae4efb2671f8bcf64644073d9e3b430fc3f431647841ea81235627ff4fa9e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        fortnite-internal.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\binaries\fortnite-internal.dll
                                        • Size 236KB
                                        • SHA256 f2847abd13a155bafa555c6f3b492ce210c20aed8d5bdabeb48f1ef036ff7cb2
                                        • MD5 SHA1 SHA512 SSDEEP

                                        fortnite_napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\binaries\fortnite_napi.node
                                        • Size 308KB
                                        • SHA256 25b76d4dbc1bd94dd64087e331513254eea61736f4308c1771fd1dc5089be499
                                        • MD5 SHA1 SHA512 SSDEEP

                                        index.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\binaries\index.node
                                        • Size 323KB
                                        • SHA256 1cd85e3540269e6a787cfb79bc2849479e8775c74d936d39af15786d86cb6776
                                        • MD5 SHA1 SHA512 SSDEEP

                                        lor-overlay.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\binaries\lor-overlay.dll
                                        • Size 285KB
                                        • SHA256 dc33008feb33582bf90b82c400d25d8c874a18c642bd409ff32a6eb352a78649
                                        • MD5 SHA1 SHA512 SSDEEP

                                        minecraft.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\binaries\minecraft.dll
                                        • Size 187KB
                                        • SHA256 034af85bbec313b9ff4bb62fdebad9f1962f04ee41b5da4b44b935f986d5a4ca
                                        • MD5 SHA1 SHA512 SSDEEP

                                        safe_x64_injector.exe

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\binaries\safe_x64_injector.exe
                                        • Size 316KB
                                        • SHA256 10190f01730ae495d5a8d1deb471a74cff3dbb9d1c48dba14fa97f59e52085d9
                                        • MD5 SHA1 SHA512 SSDEEP

                                        safe_x86_injector.exe

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\binaries\safe_x86_injector.exe
                                        • Size 245KB
                                        • SHA256 d5765c35ee50a0e6bba3ca0cfb259e844d07bd366fcb11990a5c143f8c603e52
                                        • MD5 SHA1 SHA512 SSDEEP

                                        valorant-internal-old.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\binaries\valorant-internal-old.dll
                                        • Size 162KB
                                        • SHA256 56f75cc1035550e878cf16d5885f39788029190abba66dc749a61e8edaf22f12
                                        • MD5 SHA1 SHA512 SSDEEP

                                        valorant-internal.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\binaries\valorant-internal.dll
                                        • Size 127KB
                                        • SHA256 5915cfffd9383f8f39330a145834f57a9b31fc9df949a02c2af64b9271e3414c
                                        • MD5 SHA1 SHA512 SSDEEP

                                        index.html

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\overlay\index.html
                                        • Size 350B
                                        • SHA256 3584d8a01d9debce177b7f5823cae843d77847a71607b0d15cc1dbdd043b3c1b
                                        • MD5 SHA1 SHA512

                                        index.js

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\overlay\index.js
                                        • Size 179KB
                                        • SHA256 4a60891a52dd2fd044317128a27454b91817246c74abd6b6f4bc61a8500d0c8d
                                        • MD5 SHA1 SHA512 SSDEEP

                                        index.js.gz

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\resources\overlay\index.js.gz
                                        • Size 174KB
                                        • SHA256 052a861d96885af3f00efbbcbe387fecaa67b311089c87dcd86b656bd5535c93
                                        • MD5 SHA1 SHA512 SSDEEP

                                        snapshot_blob.bin

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\snapshot_blob.bin
                                        • Size 295KB
                                        • SHA256 0577f2c32e5e578e3aa5a6f1d5541dfd696301f52053812ec5e0e69bd2213700
                                        • MD5 SHA1 SHA512 SSDEEP

                                        v8_context_snapshot.bin

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\v8_context_snapshot.bin
                                        • Size 591KB
                                        • SHA256 129e9f08e60d4a7ad984a359945cfc99490938662fc5f45c665c13488c78aa7e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        vk_swiftshader.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\vk_swiftshader.dll
                                        • Size 812KB
                                        • SHA256 505a0649a5a686abe2ad8646ce1867351b2e7257f51b4891b5495bfd6cde0eff
                                        • MD5 SHA1 SHA512 SSDEEP

                                        vk_swiftshader_icd.json

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\vk_swiftshader_icd.json
                                        • Size 106B
                                        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                        • MD5 SHA1 SHA512

                                        vulkan-1.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsiD92B.tmp\7z-out\vulkan-1.dll
                                        • Size 780KB
                                        • SHA256 d16d54345a32cab09a4b4d7923e64dd84789590a323f2b82e3455fb2d641b98e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Blitz.exe

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\Blitz.exe
                                        • Size 2.7MB
                                        • SHA256 815c9179c605a0780a11ffa2a21e3e78bad82541ad712052570ba7c44349decf
                                        • MD5 SHA1 SHA512 SSDEEP

                                        LICENSE.electron.txt

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\LICENSE.electron.txt
                                        • Size 1KB
                                        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                                        • MD5 SHA1 SHA512

                                        LICENSES.chromium.html

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\LICENSES.chromium.html
                                        • Size 2.4MB
                                        • SHA256 db29d0b450fbb9203d87501ed3c2b0b4e9d0d22d5d1e9af2bc8a085c0f066a74
                                        • MD5 SHA1 SHA512 SSDEEP

                                        chrome_100_percent.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\chrome_100_percent.pak
                                        • Size 132KB
                                        • SHA256 24d92bbeb63d06b01010fe230c1e3a31e667a159be7e570a8efe68f83ed9ad40
                                        • MD5 SHA1 SHA512 SSDEEP

                                        chrome_200_percent.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\chrome_200_percent.pak
                                        • Size 191KB
                                        • SHA256 55d873a9f3ac69bbf6eb6940443df8331ebd7aa57138681d615f3b89902447e7
                                        • MD5 SHA1 SHA512 SSDEEP

                                        d3dcompiler_47.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\d3dcompiler_47.dll
                                        • Size 2.5MB
                                        • SHA256 ba87b7945abb6fe7cdce866e5f9f1ac97cf08e650354651dd1e2c2e28efbe2e8
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ffmpeg.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\ffmpeg.dll
                                        • Size 2.7MB
                                        • SHA256 614b2d4a2d57a0765f92ccafd75d493b1aefb24af0999d10a2b90b4d4a7edb8f
                                        • MD5 SHA1 SHA512 SSDEEP

                                        icudtl.dat

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\icudtl.dat
                                        • Size 2.8MB
                                        • SHA256 95c6d62b9800eb3a5c8deb34309a8a7cc2ee26878c5a0e9c1c2fdfbf4984a32a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        libEGL.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\libEGL.dll
                                        • Size 469KB
                                        • SHA256 3c543255d163f16c7c15431a11748341edbe6a68e1e6b4eb468b244b5ff7d745
                                        • MD5 SHA1 SHA512 SSDEEP

                                        libGLESv2.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\libGLESv2.dll
                                        • Size 2.4MB
                                        • SHA256 f4e1e41b3c8ae243f75fe8ed5b0421ab6ff8e1fef1b410288287d7c5acca756d
                                        • MD5 SHA1 SHA512 SSDEEP

                                        af.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\af.pak
                                        • Size 425KB
                                        • SHA256 e4c2378f4254e11e3d79a735314a2ec712389ad4d9fae3fb429d364ea0978bf4
                                        • MD5 SHA1 SHA512 SSDEEP

                                        am.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\am.pak
                                        • Size 693KB
                                        • SHA256 0b1d326be9dabcda8e37740017383f2d8f1bec7a8fdb1f11ebe538c3632453fd
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ar.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\ar.pak
                                        • Size 758KB
                                        • SHA256 e96ebff226ad97b3a0f8b288d6eb79e3dab624aea13365fa36dce1df81de2cdf
                                        • MD5 SHA1 SHA512 SSDEEP

                                        bg.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\bg.pak
                                        • Size 788KB
                                        • SHA256 13d08d2c4972cd18bb8ea8a57587dad29684c2336f73282dd3284b0649377cf8
                                        • MD5 SHA1 SHA512 SSDEEP

                                        bn.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\bn.pak
                                        • Size 1019KB
                                        • SHA256 2dc26dee345271f4606650912b0b7b5df68f621f2920864e0e36c1d1b22459b1
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ca.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\ca.pak
                                        • Size 479KB
                                        • SHA256 3d82bd3de5447eb04f205383dce91e812e87820bb1e9b0ab5acfd924db1cf8aa
                                        • MD5 SHA1 SHA512 SSDEEP

                                        cs.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\cs.pak
                                        • Size 494KB
                                        • SHA256 cc6ff937d1c9fec4634db4e2f6c0718d2606fe2d5d25addf1314e110c5b78772
                                        • MD5 SHA1 SHA512 SSDEEP

                                        da.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\da.pak
                                        • Size 446KB
                                        • SHA256 1a51de04cb205c708520f1b013447f1a89f0b1330dbce6d1e71cf355319d1108
                                        • MD5 SHA1 SHA512 SSDEEP

                                        de.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\de.pak
                                        • Size 477KB
                                        • SHA256 163ea4c2cf67edd0526a8e18d3810872e92a1d4e17b5cf4f04107fda5967b0c9
                                        • MD5 SHA1 SHA512 SSDEEP

                                        el.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\el.pak
                                        • Size 865KB
                                        • SHA256 932a3ae4fe40cf79f20991608dcda90e94435d79f9405f5948b8211f8de0c284
                                        • MD5 SHA1 SHA512 SSDEEP

                                        en-GB.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\en-GB.pak
                                        • Size 389KB
                                        • SHA256 38d8a09cee11668341781030439729af895ba8ad079775d7552758a9a995f5fe
                                        • MD5 SHA1 SHA512 SSDEEP

                                        en-US.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\en-US.pak
                                        • Size 391KB
                                        • SHA256 0364c73f320e441b03cb2afcaaca3ffbfac51a3559dcd0ff99a1accf82c7f762
                                        • MD5 SHA1 SHA512 SSDEEP

                                        es-419.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\es-419.pak
                                        • Size 473KB
                                        • SHA256 41b96bdecd2f8adb79171b710169683401d5943e86e836280bd26b8100f3537e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        es.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\es.pak
                                        • Size 14KB
                                        • SHA256 716d2783f951b691a82bdb38ec9845ea493310789f816dc3ffd60874372afd51
                                        • MD5 SHA1 SHA512 SSDEEP

                                        et.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\et.pak
                                        • Size 428KB
                                        • SHA256 890429677a648a0489e734fd3856677c083b9ac1a88ea6c7278c0055bf20ad06
                                        • MD5 SHA1 SHA512 SSDEEP

                                        fa.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\fa.pak
                                        • Size 703KB
                                        • SHA256 7b98811c21db6284626c3c3c97f6b54a4bccc0289d6c80b980a87a092d1573fd
                                        • MD5 SHA1 SHA512 SSDEEP

                                        fi.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\fi.pak
                                        • Size 438KB
                                        • SHA256 8f3e8ec0fbb471b45db65a77dc1013e3363f387d3d0c6a458c90f371907d0085
                                        • MD5 SHA1 SHA512 SSDEEP

                                        fil.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\fil.pak
                                        • Size 495KB
                                        • SHA256 b6ce37b1aeb4ca17a7f78ebc8f97c2807f588dfc4ad3e0639005c626b5c9b939
                                        • MD5 SHA1 SHA512 SSDEEP

                                        fr.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\fr.pak
                                        • Size 513KB
                                        • SHA256 a69f52162f6081a06f835ede10818218df6e211f00d0ef24561e6221f4696e61
                                        • MD5 SHA1 SHA512 SSDEEP

                                        gu.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\gu.pak
                                        • Size 996KB
                                        • SHA256 bbb17268412fb3e13584ca4dc90a94f984177d3c97ee89af2a57324709f8ed1d
                                        • MD5 SHA1 SHA512 SSDEEP

                                        he.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\he.pak
                                        • Size 616KB
                                        • SHA256 dff85c48182320e584466e0f37aa4b17429e9545fb48d1c4c088d612f7b88b8c
                                        • MD5 SHA1 SHA512 SSDEEP

                                        hi.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\hi.pak
                                        • Size 1.0MB
                                        • SHA256 0936587aa072339f8dc347506e5553159319a686010ca1912bed1d830e107c6e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        hr.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\hr.pak
                                        • Size 477KB
                                        • SHA256 07effa557c8bc822626c05a4d299296f88d3da0654248c326d796f7c2de3ec64
                                        • MD5 SHA1 SHA512 SSDEEP

                                        hu.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\hu.pak
                                        • Size 513KB
                                        • SHA256 70d4a0724a2e0e80ec047e7683eec7715c0fb5f88795cc97a63e4c2ee2237800
                                        • MD5 SHA1 SHA512 SSDEEP

                                        id.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\id.pak
                                        • Size 421KB
                                        • SHA256 60409d8b785dd057e3495190b18e6d6d235d8313555341cba5f64327e3d8c3aa
                                        • MD5 SHA1 SHA512 SSDEEP

                                        it.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\it.pak
                                        • Size 466KB
                                        • SHA256 c04c144683be80154f229c65d69a2816375260f9c0875e1d7e7da19589f8d17e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ja.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\ja.pak
                                        • Size 570KB
                                        • SHA256 2a0f9c4b08b474117b0eae8316a391f77a828d03e32496ed692bdda3c8efb677
                                        • MD5 SHA1 SHA512 SSDEEP

                                        kn.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\kn.pak
                                        • Size 1.1MB
                                        • SHA256 0f955bbe226eb0bda2c3528f682281133f2c58a519418bb4f6f89bbe56e9578a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ko.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\ko.pak
                                        • Size 481KB
                                        • SHA256 150c66ff7d0dddb84dcb6bec9bcb5c6d41f6601496c277b7bee627cbd8591ce3
                                        • MD5 SHA1 SHA512 SSDEEP

                                        lt.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\lt.pak
                                        • Size 519KB
                                        • SHA256 4a80792cb9a401ebfa7ec3212182b5024d651ca6a5ead8fc9809d0d3ad4803cd
                                        • MD5 SHA1 SHA512 SSDEEP

                                        lv.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\lv.pak
                                        • Size 516KB
                                        • SHA256 113073cf60ae3d2bcf8a61df655762e34ba28e4b35b97de33c18e13f959d76ff
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ml.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\ml.pak
                                        • Size 1.2MB
                                        • SHA256 e1f97ce3011d9231f23fe033bdbb0905c173921b18402d362bfc35224ff67db7
                                        • MD5 SHA1 SHA512 SSDEEP

                                        mr.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\mr.pak
                                        • Size 976KB
                                        • SHA256 fcb7c4aeed28ae4d16fa7b82d9571165aab0fdd46eb65d3ab29007231630ccef
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ms.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\ms.pak
                                        • Size 442KB
                                        • SHA256 a9f9ae23a3bc2ac919c5b46d16b7e1f3bff73698d2626260196210e101d119c2
                                        • MD5 SHA1 SHA512 SSDEEP

                                        nb.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\nb.pak
                                        • Size 431KB
                                        • SHA256 4f3babcbec0d138654ec59fd8ab5fd58da2273237a587928b9687928c7ca10ff
                                        • MD5 SHA1 SHA512 SSDEEP

                                        nl.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\nl.pak
                                        • Size 444KB
                                        • SHA256 0f51c724a8008107b457ed398b29f98b5b41a1da2a25931a566362dfe658c8bb
                                        • MD5 SHA1 SHA512 SSDEEP

                                        pl.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\pl.pak
                                        • Size 497KB
                                        • SHA256 7f1a8392fe3aff4e6bb4bacbc1f4b395f08ecafda9f81e36b41b77fb4ab0bc76
                                        • MD5 SHA1 SHA512 SSDEEP

                                        pt-BR.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\pt-BR.pak
                                        • Size 468KB
                                        • SHA256 210082d26b3ea228c87e4711324ad61de91ec9479a197ea95e1340d1785b9cb9
                                        • MD5 SHA1 SHA512 SSDEEP

                                        pt-PT.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\pt-PT.pak
                                        • Size 469KB
                                        • SHA256 1fadff356a7e89a8ff2af3ddf84f70fd0ce69525c7787f8adae10beed9d76d4e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ro.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\ro.pak
                                        • Size 486KB
                                        • SHA256 b7ba9435d82f6bedd7005b6e868ee86f0bb6c4d7b312fe5f5d4afbd440ad5b85
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ru.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\ru.pak
                                        • Size 797KB
                                        • SHA256 b25592ef1c37677d5741a28bedfe143f7b2e17fcd711e62febb0562e2d5b5b3b
                                        • MD5 SHA1 SHA512 SSDEEP

                                        sk.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\sk.pak
                                        • Size 502KB
                                        • SHA256 ec15c82956ebddb7b246c78045ad414ed34ca97d890a915070e252c8715096b0
                                        • MD5 SHA1 SHA512 SSDEEP

                                        sr.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\sr.pak
                                        • Size 745KB
                                        • SHA256 b4cf2d19b5e443b57ca9d1189880458a7cacfe1c8b231265557a3fb58f597617
                                        • MD5 SHA1 SHA512 SSDEEP

                                        sv.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\sv.pak
                                        • Size 256KB
                                        • SHA256 4d78833599049f23ce1bee892dcd9f740b5b902e2405c9ce52a168ee46392862
                                        • MD5 SHA1 SHA512 SSDEEP

                                        sw.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\sw.pak
                                        • Size 197KB
                                        • SHA256 1ddce80e64898a62f4510f0931c4f03b57d6cb471761abd5b7236f1f787fe9d3
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ta.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\ta.pak
                                        • Size 229KB
                                        • SHA256 6c20cb3e358c203dc06dcb58e461bbc327050dc0b38f4aef89cbe36c66a2561f
                                        • MD5 SHA1 SHA512 SSDEEP

                                        te.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\te.pak
                                        • Size 193KB
                                        • SHA256 2620f430b004364e37d58ca9ccd7104908c732502cc46be83b90787148b50c99
                                        • MD5 SHA1 SHA512 SSDEEP

                                        th.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\th.pak
                                        • Size 175KB
                                        • SHA256 027c59dd1a77808e291b4f2bc4584f7424a30e3fa89a64b107946de972dbc222
                                        • MD5 SHA1 SHA512 SSDEEP

                                        tr.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\tr.pak
                                        • Size 465KB
                                        • SHA256 be5a3224592a4ae0b5e80277486e3bb7ffcd1f5e5552a706b449622e31f85577
                                        • MD5 SHA1 SHA512 SSDEEP

                                        uk.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\uk.pak
                                        • Size 798KB
                                        • SHA256 af9f638e8ca464f0b2e706200e90ebd6d70f08e378ff4004693606c91aa15d7a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        ur.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\ur.pak
                                        • Size 696KB
                                        • SHA256 91318006c880e427417a2b2fff81fd451769a5536fa16d1dc185972137bc2d6a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        vi.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\vi.pak
                                        • Size 551KB
                                        • SHA256 0c2593a21f021128f7882869014f3b6959322531d91af7322c3ea9177c79c90f
                                        • MD5 SHA1 SHA512 SSDEEP

                                        zh-CN.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\zh-CN.pak
                                        • Size 398KB
                                        • SHA256 01384c60d6a54badd745c55b0a5e8dd83f7f003934acd095986c5028463f1548
                                        • MD5 SHA1 SHA512 SSDEEP

                                        zh-TW.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\locales\zh-TW.pak
                                        • Size 394KB
                                        • SHA256 1f73e98ee70a660250cfb138a30b5a263ee0de756c7e35f054a50a5745e16d84
                                        • MD5 SHA1 SHA512 SSDEEP

                                        resources.pak

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources.pak
                                        • Size 2.3MB
                                        • SHA256 139148f5261d8a1b942b2c627345a434e34c89ab46e8d4c52ec68b9e082a35b1
                                        • MD5 SHA1 SHA512 SSDEEP

                                        app.asar

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\app.asar
                                        • Size 6.7MB
                                        • SHA256 c2a182edad93fc9086a1ce37227ade64e6e4a496179a81ebb09f32dba69ee8d5
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.armv8.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\android-arm64\node.napi.armv8.node
                                        • Size 352KB
                                        • SHA256 5a48730eb00ed420052488e4140418d87d7e4fadc4c975821cb75e80a640e67b
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.armv7.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\android-arm\node.napi.armv7.node
                                        • Size 317KB
                                        • SHA256 8a6f1f4ede9c14b7459214429dffbbd0962ab18a63573d5e3db4a071b4425e53
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\darwin-x64+arm64\node.napi.node
                                        • Size 631KB
                                        • SHA256 18b01d23ed59caf184d3236597d786190fd00dfd1b60b47827b6016aed4a0a6f
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.armv8.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\linux-arm64\node.napi.armv8.node
                                        • Size 413KB
                                        • SHA256 8a33b138161ee5c9abdd58acca3ad0e46141dae475ede3daacc7a748641c19e7
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.armv6.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\linux-arm\node.napi.armv6.node
                                        • Size 383KB
                                        • SHA256 7bbecbc527d97794ac439173572b324c036d61a53fca92e7f6136615c2634247
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.armv7.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\linux-arm\node.napi.armv7.node
                                        • Size 383KB
                                        • SHA256 3e1893440bbef942c70830d325f28e18b8f424e4a2d0530bcb04854707faae84
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.glibc.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\linux-x64\node.napi.glibc.node
                                        • Size 485KB
                                        • SHA256 a4b2e54a3b557a027356ae0f5d11645393f5fa1248ff773e2f826588a46e17ff
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.musl.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\linux-x64\node.napi.musl.node
                                        • Size 449KB
                                        • SHA256 7e47d25bbbde4268ebadef394c651f3851179a6937bdb7acea6f507a74ed5081
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\win32-ia32\node.napi.node
                                        • Size 434KB
                                        • SHA256 a4f03881ba542dff477f08028c9ea3385662f6e540f3f46b3118a60ec34cf692
                                        • MD5 SHA1 SHA512 SSDEEP

                                        node.napi.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\app.asar.unpacked\node_modules\classic-level\prebuilds\win32-x64\node.napi.node
                                        • Size 502KB
                                        • SHA256 2e46125d679a7e1051fef7b862008ff520e06b49130c70378ee817ca7c63cafc
                                        • MD5 SHA1 SHA512 SSDEEP

                                        PinManager.exe

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\binaries\PinManager.exe
                                        • Size 41KB
                                        • SHA256 13afc0e1cb2a24d2fb506ca9e5fa7ab8dff74029f30346611c11040e74373b64
                                        • MD5 SHA1 SHA512 SSDEEP

                                        apex-internal.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\binaries\apex-internal.dll
                                        • Size 3.4MB
                                        • SHA256 dd70c29c44c8759e05f90b9f3836eaef86afb2a484c572b586f982810ab4931b
                                        • MD5 SHA1 SHA512 SSDEEP

                                        blitz-csgo-external.exe

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\binaries\blitz-csgo-external.exe
                                        • Size 3.2MB
                                        • SHA256 23f099e9437c9c869b6752ecea9989ce3f4564caa4d056d45514d14b4716c09a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        blitz-overlay.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\binaries\blitz-overlay.dll
                                        • Size 3.8MB
                                        • SHA256 1b6a3f4197643c4288d791e25093e63c7b50c3249d22bda8e33f74b760c65475
                                        • MD5 SHA1 SHA512 SSDEEP

                                        blitz-update-digicert.exe

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\binaries\blitz-update-digicert.exe
                                        • Size 244KB
                                        • SHA256 1fba3e3c5ca0d9dc583dd39f34f75cb2475e0d36c01a2902d9a4bcf01d5febb8
                                        • MD5 SHA1 SHA512 SSDEEP

                                        blitz_core.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\binaries\blitz_core.node
                                        • Size 903KB
                                        • SHA256 87d1461a7842f3874b795286f521fda1e996840a5bcfb4dbb2941ebb745bd6ff
                                        • MD5 SHA1 SHA512 SSDEEP

                                        blitz_fortnite.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\binaries\blitz_fortnite.dll
                                        • Size 3.6MB
                                        • SHA256 487ff9af9805924e1cb6b5721547adb4c9fa9149339af3c76db3e3870cd2381c
                                        • MD5 SHA1 SHA512 SSDEEP

                                        blitz_palworld.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\binaries\blitz_palworld.dll
                                        • Size 5.2MB
                                        • SHA256 711f25817a8a59b525ad7c5b5ee8885e63e7efb01dbdecd925f687246b8bb79d
                                        • MD5 SHA1 SHA512 SSDEEP

                                        csgo-demo-parser.exe

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\binaries\csgo-demo-parser.exe
                                        • Size 8.2MB
                                        • SHA256 e92e6160722d4e59ac28f1955a092576fa9aa95d8ce24aa1eafa3d1bdc11b381
                                        • MD5 SHA1 SHA512 SSDEEP

                                        index.node

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\binaries\index.node
                                        • Size 3.0MB
                                        • SHA256 7ad5d3556e8be648b4935fbb2857fbecf96c83ded89010753663c08b9f536489
                                        • MD5 SHA1 SHA512 SSDEEP

                                        safe_x64_injector.exe

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\binaries\safe_x64_injector.exe
                                        • Size 318KB
                                        • SHA256 cca7277f73a64df6c934144474260cefa4ceb89b135e23dfc5adc21efefa143c
                                        • MD5 SHA1 SHA512 SSDEEP

                                        safe_x86_injector.exe

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\binaries\safe_x86_injector.exe
                                        • Size 250KB
                                        • SHA256 309812fa6275b2ac9910b0f35a000d6e9e90a429482c34932bed1c95537344f5
                                        • MD5 SHA1 SHA512 SSDEEP

                                        steam-tool.exe

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\binaries\steam-tool.exe
                                        • Size 2.6MB
                                        • SHA256 c945392b41c97e83c385496743d6348d715ae7b115880f3e17160b995cbe4d4a
                                        • MD5 SHA1 SHA512 SSDEEP

                                        steam_api64.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\binaries\steam_api64.dll
                                        • Size 291KB
                                        • SHA256 a44e5537939ae4eebc69000589aa9b2437a667813a1657cc779198bae9b815a9
                                        • MD5 SHA1 SHA512 SSDEEP

                                        valorant-internal.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\resources\binaries\valorant-internal.dll
                                        • Size 3.7MB
                                        • SHA256 f42cc50f76da6d427637f0cfab7a3e2d92e202c442f83f48a3c26e29e58cf616
                                        • MD5 SHA1 SHA512 SSDEEP

                                        snapshot_blob.bin

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\snapshot_blob.bin
                                        • Size 262KB
                                        • SHA256 57cb73262e8a93baebe63db8a5b70b829f2bd3062edba20ab4015104d476df56
                                        • MD5 SHA1 SHA512 SSDEEP

                                        v8_context_snapshot.bin

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\v8_context_snapshot.bin
                                        • Size 581KB
                                        • SHA256 535fe8389ba233e57182fac05f96f612d04187d3cf7ea8a2702e4e28878e97bb
                                        • MD5 SHA1 SHA512 SSDEEP

                                        vk_swiftshader.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\vk_swiftshader.dll
                                        • Size 2.3MB
                                        • SHA256 e9d80ad28118ceb1b3be3d7d558302a5f8c212c88252be6bb48ef43da996e6ee
                                        • MD5 SHA1 SHA512 SSDEEP

                                        vulkan-1.dll

                                        • Path C:\Users\Admin\AppData\Local\Temp\nsvEA1E.tmp\7z-out\vulkan-1.dll
                                        • Size 917KB
                                        • SHA256 925fc969b7b4bdf9b852cbdd0578b684449a06ff2f88fc61034735bf1ea22ece
                                        • MD5 SHA1 SHA512 SSDEEP

                                        installer.exe

                                        • Path C:\Users\Admin\AppData\Local\blitz-updater\installer.exe
                                        • Size 4.6MB
                                        • SHA256 c2bc53768f5e5703e1ddb2505234264d7b30004fd1c63dfa29f82f80b6144f69
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Blitz-2.0.98.exe

                                        • Path C:\Users\Admin\AppData\Local\blitz-updater\pending\Blitz-2.0.98.exe
                                        • Size 1.0MB
                                        • SHA256 610e5b704c794ada2ae651bcef22c93e6b7f6a6d831a223b5c3546d8fcba4292
                                        • MD5 SHA1 SHA512 SSDEEP

                                        temp-Blitz-2.0.98.exe

                                        • Path C:\Users\Admin\AppData\Local\blitz-updater\pending\temp-Blitz-2.0.98.exe
                                        • Size 549KB
                                        • SHA256 990100fcf865c7e5814090e11ca23016429dd233c3626c9ddd8b2177b3fe2b24
                                        • MD5 SHA1 SHA512 SSDEEP

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\Code Cache\js\index-dir\the-real-index
                                        • Size 1KB
                                        • SHA256 13f582aefde468f1f881236691f5da41296510f270f4b09224e6b093125aea49
                                        • MD5 SHA1 SHA512

                                        settings.dat

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\Crashpad\settings.dat
                                        • Size 40B
                                        • SHA256 c87b6e5afd34600b343332d9fd64527d6a4b5a18835b8ecdc88fa8edd23e7b32
                                        • MD5 SHA1 SHA512

                                        data_0

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\DawnCache\data_0
                                        • Size 8KB
                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                        • MD5 SHA1 SHA512 SSDEEP

                                        data_2

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\DawnCache\data_2
                                        • Size 8KB
                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                        • MD5 SHA1 SHA512 SSDEEP

                                        data_3

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\DawnCache\data_3
                                        • Size 8KB
                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                        • MD5 SHA1 SHA512 SSDEEP

                                        data_1

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\GPUCache\data_1
                                        • Size 264KB
                                        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Local State

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\Local State
                                        • Size 434B
                                        • SHA256 5a409b13789d44fa396a04b6dbe83b358de5e0594626f1cb3acc3b9226f88b58
                                        • MD5 SHA1 SHA512

                                        CURRENT

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\Local Storage\leveldb\CURRENT
                                        • Size 16B
                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                        • MD5 SHA1 SHA512

                                        Network Persistent State

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\Network Persistent State
                                        • Size 111B
                                        • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                                        • MD5 SHA1 SHA512

                                        Network Persistent State~RFe57d745.TMP

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\Network Persistent State~RFe57d745.TMP
                                        • Size 59B
                                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                        • MD5 SHA1 SHA512

                                        TransportSecurity

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\Network\TransportSecurity
                                        • Size 3KB
                                        • SHA256 4bc6b2f79b6da3d876c92b25735abfba36e6aef8ee0de5ef77294666257ad96b
                                        • MD5 SHA1 SHA512

                                        TransportSecurity

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\Network\TransportSecurity
                                        • Size 347B
                                        • SHA256 4c0752e9de56da28a0e68105add962ec7114decc47a6302bc0d92d0a4b25b617
                                        • MD5 SHA1 SHA512

                                        TransportSecurity~RFe586f5f.TMP

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\Network\TransportSecurity~RFe586f5f.TMP
                                        • Size 347B
                                        • SHA256 ed5c38a88329695d20742c3abe0beb1fb441f6fee8dbf3c9e43e86bedea238ec
                                        • MD5 SHA1 SHA512

                                        Preferences

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\Preferences
                                        • Size 86B
                                        • SHA256 8029940de92ae596278912bbbd6387d65f4e849d3c136287a1233f525d189c67
                                        • MD5 SHA1 SHA512

                                        index.txt

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\Service Worker\CacheStorage\def18c870a86b4bed9723549188adec65eda9630\index.txt
                                        • Size 104B
                                        • SHA256 beb29d17a01c59b33e426c607d49206b91be3b8fd296a6e3f344d4579772312b
                                        • MD5 SHA1 SHA512

                                        index.txt~RFe586359.TMP

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\Service Worker\CacheStorage\def18c870a86b4bed9723549188adec65eda9630\index.txt~RFe586359.TMP
                                        • Size 111B
                                        • SHA256 90fa8a7cf6fbd8fd783a7e4d738d041aa272d7415b2053b827201f6364cd850b
                                        • MD5 SHA1 SHA512

                                        the-real-index

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\Service Worker\ScriptCache\index-dir\the-real-index
                                        • Size 72B
                                        • SHA256 bf381221d572ff67e0ea9cc65e414dc1cb271298e3550d387e6f8a362c2d9a28
                                        • MD5 SHA1 SHA512

                                        the-real-index~RFe58630a.TMP

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\Service Worker\ScriptCache\index-dir\the-real-index~RFe58630a.TMP
                                        • Size 48B
                                        • SHA256 a1ca9245bfb553c75430cdeeb48708bfb6d29685c64a9ea0ed9a8f8b21a94560
                                        • MD5 SHA1 SHA512

                                        MANIFEST-000001

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\Session Storage\MANIFEST-000001
                                        • Size 41B
                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                        • MD5 SHA1 SHA512

                                        index.node

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\blitz-deps\1.15.35\index.node
                                        • Size 1007KB
                                        • SHA256 d49b4de19111818963f2c620396b3180fc7666f6f0e5cae7223dd57c90064f17
                                        • MD5 SHA1 SHA512 SSDEEP

                                        d3694474-3e6a-4482-b29d-b8c0de2b2c48.tmp

                                        • Path C:\Users\Admin\AppData\Roaming\Blitz\d3694474-3e6a-4482-b29d-b8c0de2b2c48.tmp
                                        • Size 57B
                                        • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
                                        • MD5 SHA1 SHA512

                                        default.dic

                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                                        • Size 2B
                                        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                        • MD5 SHA1 SHA512

                                        Blitz-2.1.132.exe

                                        • Path C:\Users\Admin\Downloads\Blitz-2.1.132.exe
                                        • Size 16.4MB
                                        • SHA256 febbbcc2f420f266ea678e5732cb36245dc68fd433e0ceb82072b40b96b1fd5b
                                        • MD5 SHA1 SHA512 SSDEEP

                                        Blitz-2.1.132.exe:Zone.Identifier

                                        • Path C:\Users\Admin\Downloads\Blitz-2.1.132.exe:Zone.Identifier
                                        • Size 53B
                                        • SHA256 2f9b89d54589afd801d1f928307fb9511d953ef764f16e5d2faa9fd735036b02
                                        • MD5 SHA1 SHA512

                                        memory/316-2251-0x0000000063CC0000-0x0000000063CED000-memory.dmp

                                        memory/468-3774-0x00007FF931850000-0x00007FF931851000-memory.dmp

                                        memory/468-3790-0x00007FF931930000-0x00007FF931931000-memory.dmp

                                        memory/1104-2224-0x000000006F1D0000-0x000000006F980000-memory.dmp

                                        memory/1104-2191-0x0000000004860000-0x0000000004870000-memory.dmp

                                        memory/1104-2225-0x0000000004860000-0x0000000004870000-memory.dmp

                                        memory/1204-4173-0x0000000063CC0000-0x0000000063CEC000-memory.dmp

                                        memory/1208-2102-0x0000000005C30000-0x0000000005F84000-memory.dmp

                                        memory/1208-2082-0x000000006F1D0000-0x000000006F980000-memory.dmp

                                        memory/2032-2226-0x0000000000A90000-0x0000000000AA0000-memory.dmp

                                        memory/2032-2123-0x000000006F1D0000-0x000000006F980000-memory.dmp

                                        memory/2032-2124-0x0000000000A90000-0x0000000000AA0000-memory.dmp

                                        memory/2448-2254-0x00000000071A0000-0x0000000007216000-memory.dmp

                                        memory/2448-2089-0x000000006F1D0000-0x000000006F980000-memory.dmp

                                        memory/2812-2159-0x0000000004E10000-0x0000000004E20000-memory.dmp

                                        memory/2812-2223-0x000000006F1D0000-0x000000006F980000-memory.dmp

                                        memory/2812-2169-0x0000000004E10000-0x0000000004E20000-memory.dmp

                                        memory/2856-2219-0x0000000002250000-0x0000000002260000-memory.dmp

                                        memory/2856-2125-0x000000006F1D0000-0x000000006F980000-memory.dmp

                                        memory/3032-2227-0x0000000006370000-0x00000000063BC000-memory.dmp

                                        memory/3032-2086-0x0000000004DA0000-0x0000000004DB0000-memory.dmp

                                        memory/3032-2085-0x000000006F1D0000-0x000000006F980000-memory.dmp

                                        memory/3032-2088-0x0000000004DA0000-0x0000000004DB0000-memory.dmp

                                        memory/3464-447-0x000000007FB50000-0x000000007FB60000-memory.dmp

                                        memory/3464-461-0x0000000004E60000-0x0000000004E70000-memory.dmp

                                        memory/3464-478-0x000000006F090000-0x000000006F840000-memory.dmp

                                        memory/3464-475-0x0000000008960000-0x0000000008E8C000-memory.dmp

                                        memory/3464-468-0x0000000008260000-0x0000000008422000-memory.dmp

                                        memory/3464-449-0x000000006B5F0000-0x000000006B63C000-memory.dmp

                                        memory/3464-467-0x00000000077A0000-0x00000000077B1000-memory.dmp

                                        memory/3464-466-0x0000000007830000-0x00000000078C6000-memory.dmp

                                        memory/3464-448-0x0000000006840000-0x0000000006872000-memory.dmp

                                        memory/3464-446-0x00000000062B0000-0x00000000062FC000-memory.dmp

                                        memory/3464-465-0x0000000007600000-0x000000000760A000-memory.dmp

                                        memory/3464-463-0x0000000007BE0000-0x000000000825A000-memory.dmp

                                        memory/3464-430-0x0000000004E60000-0x0000000004E70000-memory.dmp

                                        memory/3464-432-0x00000000053F0000-0x0000000005412000-memory.dmp

                                        memory/3464-464-0x00000000075C0000-0x00000000075DA000-memory.dmp

                                        memory/3464-431-0x00000000054A0000-0x0000000005AC8000-memory.dmp

                                        memory/3464-445-0x0000000006270000-0x000000000628E000-memory.dmp

                                        memory/3464-444-0x0000000005D10000-0x0000000006064000-memory.dmp

                                        memory/3464-434-0x0000000005CA0000-0x0000000005D06000-memory.dmp

                                        memory/3464-428-0x000000006F090000-0x000000006F840000-memory.dmp

                                        memory/3464-429-0x0000000004E60000-0x0000000004E70000-memory.dmp

                                        memory/3464-427-0x0000000004DD0000-0x0000000004E06000-memory.dmp

                                        memory/3464-455-0x0000000004E60000-0x0000000004E70000-memory.dmp

                                        memory/3464-462-0x0000000007460000-0x0000000007503000-memory.dmp

                                        memory/3464-460-0x0000000007440000-0x000000000745E000-memory.dmp

                                        memory/3464-433-0x0000000005BC0000-0x0000000005C26000-memory.dmp

                                        memory/3988-2071-0x000000006F1D0000-0x000000006F980000-memory.dmp

                                        memory/3988-2074-0x0000000002950000-0x0000000002960000-memory.dmp

                                        memory/3988-2077-0x0000000002950000-0x0000000002960000-memory.dmp

                                        memory/4348-2103-0x000000006F1D0000-0x000000006F980000-memory.dmp

                                        memory/4348-2104-0x0000000002ED0000-0x0000000002EE0000-memory.dmp

                                        memory/4348-2229-0x0000000006690000-0x00000000066D4000-memory.dmp

                                        memory/4464-2091-0x0000000004AC0000-0x0000000004AD0000-memory.dmp

                                        memory/4464-2090-0x000000006F1D0000-0x000000006F980000-memory.dmp

                                        memory/4464-2092-0x0000000004AC0000-0x0000000004AD0000-memory.dmp

                                        memory/4672-2140-0x000000006F1D0000-0x000000006F980000-memory.dmp

                                        memory/4672-2222-0x00000000053A0000-0x00000000053B0000-memory.dmp

                                        memory/5460-2257-0x0000000004970000-0x0000000004980000-memory.dmp

                                        memory/5460-2259-0x000000006F1D0000-0x000000006F980000-memory.dmp

                                        memory/5460-2256-0x0000000004970000-0x0000000004980000-memory.dmp

                                        memory/5468-2260-0x000000006F1D0000-0x000000006F980000-memory.dmp

                                        memory/5468-2258-0x0000000004E00000-0x0000000004E10000-memory.dmp

                                        memory/5476-2252-0x000000006F1D0000-0x000000006F980000-memory.dmp

                                        memory/5476-2253-0x0000000002CE0000-0x0000000002CF0000-memory.dmp

                                        memory/5476-2255-0x0000000002CE0000-0x0000000002CF0000-memory.dmp