Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

19/03/2024, 16:19

240319-tsyv5sgc62 7

19/03/2024, 16:12

240319-tnhclagb68 7

Analysis

  • max time kernel
    118s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    19/03/2024, 16:12

General

  • Target

    Sky-Beta Setup 1.0.0.exe

  • Size

    80.2MB

  • MD5

    f35cdad9509e69a23a92f011429b363a

  • SHA1

    6d4785a2ca81dda97e8f16f83e676b5dc79966e3

  • SHA256

    ddad1649d171367b307aa77f14b10826d6a5ae1d1dc1656ef1a7ddbe6ca43af3

  • SHA512

    5465a46dfffa5aa83d077640736b3ff0678843b67cdc6d6c26c02f09c6b35a7baf86fdb63be2575a911297041bd29b45132828e64407ec24d0068c58eead9736

  • SSDEEP

    1572864:JkJ39KfNXWLJ9MXY5B8ceyIS7nqYdd6hIEhSmnJZxRByudPXFPR:JnfNY9MA/vP7nMhJnzxRB5dPXdR

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 20 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Sky-Beta Setup 1.0.0.exe
    "C:\Users\Admin\AppData\Local\Temp\Sky-Beta Setup 1.0.0.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2512
  • C:\Users\Admin\AppData\Local\Programs\Sky-Beta\Sky-Beta.exe
    "C:\Users\Admin\AppData\Local\Programs\Sky-Beta\Sky-Beta.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    PID:1276

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Programs\Sky-Beta\Sky-Beta.exe

    Filesize

    301KB

    MD5

    183819a95dafd576cb537cc2c2a1b8d5

    SHA1

    73b4c21dac61b9b2f9461bd7f994ac2cf761c541

    SHA256

    0b06e6b4c778ed2a4361304f9dddf7688f3c94c8b81d234a233a15eab3bedf38

    SHA512

    c6f93f5279ddfc948ad7cbb3e2cd79b755d1e0fe6cd6284cfdf0694dc6dfb4f1b0e9a2484251b38e41a1db8ed75ae9ad3b4920fb73a50997c268723312af8e58

  • C:\Users\Admin\AppData\Local\Programs\Sky-Beta\ffmpeg.dll

    Filesize

    293KB

    MD5

    26860599921ba56ab71e5fd6f9c938a8

    SHA1

    9350984729c443ed14836e131d230fc02b46d4f3

    SHA256

    afa4a14339dada2ceab252ed457cd85878ef27b66f55de059dec1561bd87750b

    SHA512

    a18921c64af4f1e606f1db4bf4c21511e85b83b164b37b69f9e4efa5608e8d73f0fcce6dcdb62462301d61d94842496202478fc8a862daac144686a16355ef9a

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\LICENSE.electron.txt

    Filesize

    1KB

    MD5

    4d42118d35941e0f664dddbd83f633c5

    SHA1

    2b21ec5f20fe961d15f2b58efb1368e66d202e5c

    SHA256

    5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

    SHA512

    3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\LICENSES.chromium.html

    Filesize

    2.2MB

    MD5

    ea0bf34483970bb1986da5267a72fe12

    SHA1

    cb1557b2732ce472d3f95f7011147524d3d698dc

    SHA256

    3adb5e68bb8bb091e7b250706f3e66d1eba2fd95c418ace96f526197a5ceeb4d

    SHA512

    a8a94b7d02774bf061a16e6daa031102aabf3d902a0345731f8e034c6689f72bc57b107ab89b548238be75771ca10df5ee59912d74b0f88efef7ec8f0d9dda6b

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\Sky-Beta.exe

    Filesize

    823KB

    MD5

    2197c6852e2e60b0d2445fac9486b06f

    SHA1

    18885c627b5c46c38f17839364053ce136ec2af5

    SHA256

    06c2bdeb3819eba22daf43926ece8bc1e7576906c06393067d77395cc1a70e94

    SHA512

    db50e02802ae7d6a1be2e14266aa04d723c96753ce45d978b58b4206cf07778379aa94d18310c65d16ca97036157c74346825e6339e3755ddbf69151be1b5ee4

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\chrome_100_percent.pak

    Filesize

    124KB

    MD5

    acd0fa0a90b43cd1c87a55a991b4fac3

    SHA1

    17b84e8d24da12501105b87452f86bfa5f9b1b3c

    SHA256

    ccbca246b9a93fa8d4f01a01345e7537511c590e4a8efd5777b1596d10923b4b

    SHA512

    3e4c4f31c6c7950d5b886f6a8768077331a8f880d70b905cf7f35f74be204c63200ff4a88fa236abccc72ec0fc102c14f50dd277a30f814f35adfe5a7ae3b774

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\chrome_200_percent.pak

    Filesize

    173KB

    MD5

    4610337e3332b7e65b73a6ea738b47df

    SHA1

    8d824c9cf0a84ab902e8069a4de9bf6c1a9aaf3b

    SHA256

    c91abf556e55c29d1ea9f560bb17cc3489cb67a5d0c7a22b58485f5f2fbcf25c

    SHA512

    039b50284d28dcd447e0a486a099fa99914d29b543093cccda77bbefdd61f7b7f05bb84b2708ae128c5f2d0c0ab19046d08796d1b5a1cff395a0689ab25ccb51

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\d3dcompiler_47.dll

    Filesize

    4.7MB

    MD5

    2191e768cc2e19009dad20dc999135a3

    SHA1

    f49a46ba0e954e657aaed1c9019a53d194272b6a

    SHA256

    7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d

    SHA512

    5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\ffmpeg.dll

    Filesize

    2.7MB

    MD5

    a007299c49fa50aeff594655859780ae

    SHA1

    d202f1f617023763a0e9418878e8ecac96be9fd4

    SHA256

    b78f0036621ad1d5833289f2ad509963ef78f1a89a3c7df0f1370fd2d35a2804

    SHA512

    444c4baa1e1d941bd04f78184cec519c6eb53a83fbc3aa3ea30522bffc9ecde73ebe7b910c1a37c345429298ada3c0ffcb3e3849e21b2009487b5cd1a02cb2a9

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\icudtl.dat

    Filesize

    3.0MB

    MD5

    c1c832b5e885ccc9c702cbaa788935e4

    SHA1

    3c49a0ca267fadbd0d2a4433d516abf356eaa0e9

    SHA256

    05eb5b6a899df5a2c16379742dac943fb964a88910f712fd59363b088f64ed52

    SHA512

    bba2d1b1ecd2c105ac9a3da7eea2500f18c0b61a06f498aaedeba7813c7320b3ab55a6a9ac23489db4769907d47a14e39d3177b44605ff54cebd662436af3496

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\libEGL.dll

    Filesize

    469KB

    MD5

    ca5bb0794b7700601e9438283d458665

    SHA1

    7fcf090b19820b9450937be800575c526448b581

    SHA256

    4a8be3b4d9fe790efdce38cff8f312a2f8276908d6703e0c6c37818e217cf1e3

    SHA512

    36ebab858fe7e014837548575389e7df2e86676888e4a9039c736d0f2e6463102e68989b794d949ddb16d9bcce43ce55737fcf2a4b09b1667bf968a9540e9f32

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\libGLESv2.dll

    Filesize

    1.8MB

    MD5

    706396aeb88244df5c19319ee14c9c6b

    SHA1

    98a7e4696098d0735dd1d10adb0f9a00bfc6586a

    SHA256

    f73c03195754f882749e0bd766c0d169794dec77d519cc910251d31e03bafdc4

    SHA512

    88111f18c90be4504c992fe66716045407d728010109d6dbd59e9a72d576fff4e83c0b0099d83052c43e1f33cf6c82d610e41529bbab0171385840a4b4add14c

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\af.pak

    Filesize

    368KB

    MD5

    7e51349edc7e6aed122bfa00970fab80

    SHA1

    eb6df68501ecce2090e1af5837b5f15ac3a775eb

    SHA256

    f528e698b164283872f76df2233a47d7d41e1aba980ce39f6b078e577fd14c97

    SHA512

    69da19053eb95eef7ab2a2d3f52ca765777bdf976e5862e8cebbaa1d1ce84a7743f50695a3e82a296b2f610475abb256844b6b9eb7a23a60b4a9fc4eae40346d

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\am.pak

    Filesize

    571KB

    MD5

    6adf124390fdb2622c95eb6a941e3f5b

    SHA1

    5940333e1abdd484fa2d40a99cf521fdd56f0a1d

    SHA256

    1ee4669d705ed7cf6e17d54ae9c528f0cd94f64f9d840f58e34d1336f44d8f9f

    SHA512

    7890432a854fc633b05854a38f9a8408692e01f03c252970f8d9156df6dd7e79312a51bdde71e138796fdc2a4bffb072331561147f4ee9c672cf2be0d1087fa0

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\ar.pak

    Filesize

    655KB

    MD5

    56f6dc44cc50fc98314d0f88fcc2a962

    SHA1

    b1740b05c66622b900e19e9f71e0ff1f3488a98e

    SHA256

    7018884d3c60a9c9d727b21545c7dbbcc7b57fa93a16fa97deca0d35891e3465

    SHA512

    594e38739af7351a6117b0659b15f4358bd363d42ffc19e9f5035b57e05e879170bbafe51aece62c13f2ae17c84efb2aed2fc19d2eb9dcb95ebd34211d61674e

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\bg.pak

    Filesize

    359KB

    MD5

    1fc67e8e9cfa2726c251b7681d0d6d61

    SHA1

    dbbbdabd1e8ac302e8deec4c0593847fdce04b87

    SHA256

    c1a5369e5ff88d5c52ffa241b2c3bb53e3239a426299609e5be2225a409bace2

    SHA512

    a9f1df520410eb37d82a5f851890777e32ff9d47fc0ca9d6911d23c862105dfd398b6cc7fbae702fd9644462424d9435938bbb3fd4df7e17e6f3b311a025164a

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\bn.pak

    Filesize

    622KB

    MD5

    87cb6ce19b2e29dc8610ed5e6e4187cc

    SHA1

    32645e455deca481dce78fcafd2767b32f8f01ff

    SHA256

    f21eb5c68b08fe5c394128692f513c096686f97d176c2cdc04837614e9f141bb

    SHA512

    2ed53691e9ccd4cc5d0af6c3fe4d3d8e85775138ab9a92117ee68c9bc147fbae16e6c72065315d8e0235c4bd8e223a5a5350a26ff75edc4bccad78b2d05cbd2a

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\ca.pak

    Filesize

    416KB

    MD5

    01acd6f7a4ea85d8e63099ce1262fbad

    SHA1

    f654870d442938385b99444c2cacd4d6b60d2a0d

    SHA256

    b48d1bad676f2e718cbe548302127e0b3567913a2835522d6dd90279a6d2a56a

    SHA512

    2bd13eca1a85c219e24a9deb5b767faa5dc7e6b3005d4eb772e3794233ed49cb94c4492538d18acc98658c01d941e35c6f213c18ac5480da151c7545eedeb4ab

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\cs.pak

    Filesize

    307KB

    MD5

    14d9689b98681de14b437a5bd809e0a7

    SHA1

    1342953d732c624c8ff0185e52bde0a74ba834d8

    SHA256

    916156377d872d6a13f998c59612b184b6fcab38a8351efb2b71b00998b7e5da

    SHA512

    287502153b24408a3f98731da3144385281815be9bbfc48d2cf125b7a65f08a8ec99ccc25204ae7722a7bbe9f2318f2d9700b1d90c852c8351a887f36c701160

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\da.pak

    Filesize

    387KB

    MD5

    bb5252dc6f0f3c01ce3638138bf946c8

    SHA1

    bfb584b67c8ca51d94bff40809410553d54da1cf

    SHA256

    c93f39d0ab9a2fab26977aa729261633225879ba6dc5ea8d0ca89814b2df9fa9

    SHA512

    e411fd3cc5285a6059c3fd80c3421253a4ce06b2d0cd1cd1efc25e88191a58fed176452d852922137268be2824e1e162cd4d4a6f8c695a50517a783d15b1c6e7

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\de.pak

    Filesize

    414KB

    MD5

    ed329b35d10e81f55d611fe8748876f8

    SHA1

    0d998732bb4c4d1faad5a5bc0a21d6c5672418d3

    SHA256

    6facd562add58c4684ef4a40de9b63581fea71c5b83049ed8a2c2a2c929c45ce

    SHA512

    bd713ff78e375fec3a04ab0c9476c0379f87efc6d18359c2a4d297303d78381081120c371848c8675f1f16dd4ab7284d81e5bfc9ae11ab33e12f96c12d89e764

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\el.pak

    Filesize

    449KB

    MD5

    12a0a69cc02cdcab73bf4b06a71248ea

    SHA1

    3bbcda2d64fca977f0b0a778aea14ecb1648f35d

    SHA256

    19b2fef73ba4d370c5af876b5ac07c9fe820b21bc420a9d99e4ef7949a609ae6

    SHA512

    10b938b093783158c6e918a7081a5c62f89487453f1aa6eb43407d32becd2e1d11613478e6290f0f3dfe1698fe57e9635d2e2e51ada9575d1d6c67c7f654dab7

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\en-GB.pak

    Filesize

    336KB

    MD5

    0db7f3a3ba228aa7f2457db1aa58d002

    SHA1

    bbf3469caadfa3d2469dd7e0809352ef21a7476d

    SHA256

    cf5aca381c888de8aa6bbd1dcd609e389833cb5af3f4e8af5281ffd70cd65d98

    SHA512

    9c46c8d12579bd8c0be230bbcdb31bdb537d2fea38000cf700547ca59e3139c18cc7cb3e74053475605132404c4c4591f651d2dad2ce7f413ccffd6acf7139e8

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\en-US.pak

    Filesize

    286KB

    MD5

    53d4b415f1c7805a900cfeca6d3e8ac7

    SHA1

    3bf5628d24e6faa84d99de5a6149cd2b479ecb0a

    SHA256

    76cbad4f6da216c12715b6a938fa8b95f2cd93896c8df093ad49ed7e89ef0479

    SHA512

    d497d0b1e4ea963ee4b8b871ffef136c9b38195e78ac4478024acce4b6c48f935bb6c43cdf42a04c832e65705d2b243abbfeb73f20f10e1ebcb68a5a239dec08

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\es-419.pak

    Filesize

    148KB

    MD5

    4f664a39c8a061efa0aaaf377c166bdd

    SHA1

    d7261425a76d9ec7659f11132d5bc9796e8f83b9

    SHA256

    91abef157b88cb6f5161afe3b11ad775ae6b66930543ac39dd269d53ec56ee0a

    SHA512

    33a54e0933986ca149321ef89cbfd56798441d4f318e66b570b5d0ea2ed5d938ca83344f185c870d215926a26c0518f5f632e2fdbac3d0fcfa4aff50dea2e9a4

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\es.pak

    Filesize

    209KB

    MD5

    55e7344d16f7272e0aa3b06956a5db98

    SHA1

    6088d5ef8dca34a343aa3f2d842eb99801664518

    SHA256

    122c5d9d3c5ef3a12bd207473544052318203c9590d789b8b50ec1a8c0e2b129

    SHA512

    4a853a400792c6156bafee933a1a6327bab0bc845ec8ef770658f77343a82556c2be0f88279c49fa041ed8845d99869b06f064335e64e76b56c33234ee52b8e3

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\et.pak

    Filesize

    115KB

    MD5

    25e104ba5c6068d4876309114db90802

    SHA1

    a949c00170cc2e76a9783c6d195e2e445042cf3d

    SHA256

    65d354a421fada54d701f146a9ce7335dafe29c4a95ea6b72d56f069475f2e17

    SHA512

    b013ae5f469da609979ffa0b2e98e3268d6b6e0c9a23ffd392f8ed343896860765bcafdad5ae68ff68f7886e2c82511c570e93428d0c0c01569a6a4c02517b24

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\fa.pak

    Filesize

    195KB

    MD5

    232443ac360792f019060da7ce9fccce

    SHA1

    227537258eb4d95b820c1a6bbd99ad90a01e5068

    SHA256

    e342d3c5e85701c4b2f5021ad5aaea6ca5994112555a2debe4b2c8f0a618442d

    SHA512

    22b40754eae65bce7a0506ce99bceb8d09e4613115009e0cbcf04f5c97d5b9b9d5cad6d988c9943b1e6c003a6c521457046da5851f43b985b62b45bb466ec397

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\fi.pak

    Filesize

    159KB

    MD5

    728fdb9b00b93d5947b2f0d26cc614e1

    SHA1

    ce1c6de53bb2e64ea06be94d79567b829cb707a2

    SHA256

    2eed1d4ff707f9d8163084702da623243eafdcd8d37a39109db0223b8147292b

    SHA512

    eb351dbdf2a813a1d5a772dc544c8aa510960266576ce6f73cd6f627b2a43df855d2650b8e3927cc34aad138e2c1793a93ccd97cedd20afe2413fb3d46d56255

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\fil.pak

    Filesize

    73KB

    MD5

    4182fd3392fe89e2e7b5f14688da0287

    SHA1

    cd2782949fa599e654840b18e03c5dbec811ef63

    SHA256

    6d99cfcbba689f44fdb97a52e8ed13884dac36cb73ffc17002c9203e23ee72f9

    SHA512

    9ec7d1825ce47b40f82e1e65611b60f329b23dc0398b190bdbe6bd6e34e6fe79e38e5948716d67fb50e6573dde4d4192ec34f363fdde27d29babd20ba8d7a0c9

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\fr.pak

    Filesize

    52KB

    MD5

    129569fe4c70822a7aa0fae088cb2e6c

    SHA1

    fd87bf0714477ed4733231198ab3acb13731669b

    SHA256

    28625e80a8b990593a972bb860b9dd6e2e61eafd2c551b276ed71b7fafe9463c

    SHA512

    b46b5cecdd740d17ce8b474e53dae2cb445fe814368fefb01c7796deeb2f7f5161339e1c349b014075d37c84bd8282aa2c2694b7aacc181b0a20508300d63750

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\gu.pak

    Filesize

    61KB

    MD5

    34230973d5b4c61dcf8100e2f2fff767

    SHA1

    f01c9d2addd843766aae75e64a0a1cd31cb7cdd7

    SHA256

    2edc00822919ec5a1ebe10b00da315698c5b2b85fbae1d93eb71b026fb05c2ff

    SHA512

    437c8b4a27ad9dd81d9baec7f588db191dc6d1c88e03a9bff3e322ce89ddc9fc3d42b0341e33e2c0270a6b00197827c2109364926f89be36adc203c00c74248a

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\he.pak

    Filesize

    131KB

    MD5

    d8a33e9e3e4a77cc941f3c0fedc91731

    SHA1

    bee43ad79cfb07a3f8886b3e13a0b3975791223a

    SHA256

    c8563a5048abcff6a34e2ae9befde2eddef63701bfb5285f1e71a9bf8f9603ef

    SHA512

    3209c7491d15f3a83a04f13a84ee1e1c452a1ad22a7ac8c5242f4541361a63dd409310d88614635e4258c07d09e63b5d019d9e4e87a4a4def2b04f4ac28414a6

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\hi.pak

    Filesize

    66KB

    MD5

    65d6b40bd1dd3b49ad99f57838f0d405

    SHA1

    7c330368388f95a613ba48e49d3526ecbde2d79d

    SHA256

    3070de6bc9490ce5fbf6757d52b274664492c3f8157d5852f274ca874e4c618b

    SHA512

    94d6fc709a9d1597cfb565af9118592d949391c746ffcee1e625f6e7bf15a09d5ef9d0175b562cc4110b992030d198e0a76a91cccbeceeff2d1336eda10e26f4

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\hr.pak

    Filesize

    70KB

    MD5

    390bf10b10f298fc361e22a378601b85

    SHA1

    46b89218d2169ddd124ddf5d0483f83375204bdd

    SHA256

    72bae14154f7a8dedd0d8f97d3856daefb1bae3a5df09ac737ef74b509aa2b11

    SHA512

    b13ae95edddd662d2506f841e4b61a3affc3ed52ce63d2465f80f677a01a2c45d0066a6421bc5007dee5f1a4cf338e012deecf58dacfdea2791f7a1ef0a11c51

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\hu.pak

    Filesize

    34KB

    MD5

    bc2d32e5881d3d19a5ef1aa34c8d5a81

    SHA1

    1fd8ae2cd4622357c74471f144b2d6a3628e1e97

    SHA256

    1cb952555baa230017a8893f6455fc8a4f8cbe0d6ecc6d27d9ce850bd95b3141

    SHA512

    6b36240806b2c0de67dda0659cf6e157b05eded7466caa452e87618fcc0d7c7fe6959a4cd455b8936887b6f102330d5a6601d96d0dfec4928d4271466713cc47

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\id.pak

    Filesize

    27KB

    MD5

    eabe34691437495a7c87f5f247f646f9

    SHA1

    4169848e1c2f09945a81c4cf0764469ad4e3a5f0

    SHA256

    90e94f0b919bdbab65b3743851e6961db92c5a448ed133882bc146244093620a

    SHA512

    e13af1ba6eab7b30e1455e1f067b6f0af23d8c1125bbb67cad2094191659105bf038494bb748c3ad1a1625262836bcc43850c757bc850677b92f8bf786ff5905

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\it.pak

    Filesize

    64KB

    MD5

    db426b994524f7b3b04ea1034ad2d580

    SHA1

    4c11370bfcd2382624296df26567679b43173d94

    SHA256

    262a4eb061b56a94a05ef82e80476b17b8253e797ccf88aff13138abd3911189

    SHA512

    e5a4dcc4ffc19cf81e365efd529f003efd4d9482f9ac51278b1d1bd66f4d464e682c835ffca4daa8ea4dc82f4f9180157a5abf0abe8cf67eb8d471ec7602dea1

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\ja.pak

    Filesize

    34KB

    MD5

    4fd5f2a3f3b595b9ae87f197efecd241

    SHA1

    f62540192a04a1d938e2031da71bb5ad8f9c41bf

    SHA256

    50067cfdfcf617168229300a28ecb40de7206f106fa900313204e9f1b67eeef0

    SHA512

    82291f1c0c0c2b1e14a6815b7df4f5ad956e74e5dc4d40212c522be470dfb21bd46fd26c2438753d76a1f706b8c310f3648888cf153258d388868be117a9576d

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\kn.pak

    Filesize

    440KB

    MD5

    3ba1da81b88de994ee49d6ffd2706382

    SHA1

    031fb9bbd06924a7c9865e10049a4cc6f51ab724

    SHA256

    5b7f280ce0415f4e17c99862b7855966e767755af90453e916f7902b4476f98e

    SHA512

    a2b7b14a159599bb3853968bff3b694ef0556bcd56d6b28e2b8f76ca2e94e06bd1d7b7e85589b55218abc1863565ee33290185b96231853818a821e1a3bbbd29

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\ko.pak

    Filesize

    415KB

    MD5

    b83bc27c5bc2bb4d0ff7934db87e12ad

    SHA1

    050f004e82f46053b6566300c9a7b1a6a6e84209

    SHA256

    ab3060e7d16de4d1536ff6dd4f82939a73388201ad7e2be15f3afee6a5aae0ef

    SHA512

    b56b211587fe93a254198ca617cdecd8dc01e4561151a53173721665111c4d2440535f5f6b8a5a69a31840ea60124f4afd2c693d1fc4683fa2cf237c8ede5f0a

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\lt.pak

    Filesize

    421KB

    MD5

    6999495c1b3dc9a124cc187f319c60e2

    SHA1

    86b165f24f48e655c560f3f67b9062d5f544c19f

    SHA256

    b764da64fe2bceb3ab2b80d072f75bb77d301bb9f1003937759335c0a9bd93b1

    SHA512

    045db8f6f6964b702bda63c387dc90222de691a7d0ff15af63e74c5ae88000782c36df1623dda07672c27929831dff80864e9f3f4969b907d0eecabb9f4607ed

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\lv.pak

    Filesize

    335KB

    MD5

    a2bd88c3085ae7f92c4583f4a55747b4

    SHA1

    d89500daadb01d2b0615571abbeb0e444145d723

    SHA256

    42b6a02a7b6d3d43fb7d07f9a5a73003d4dce485321036e00828b19883348d72

    SHA512

    dd86ad11f6316902583bac6111d922e26f49509010663aa039325f9c56ac2288178c5ff5f8a98b73bcbd7bbcb27aa15898907dad0c04e9d4f89d0529c047b62d

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\ml.pak

    Filesize

    306KB

    MD5

    613c3fb30082804aa9d6e394328a0ecc

    SHA1

    5f3dfc8a3c6869be328db464f8dd8cfc7e26d194

    SHA256

    ab4ea67c61efc7a48cbf28288ed09e49fc20b316246a1c3169bf1ece87ad16bf

    SHA512

    7f0a9e5caa841ac4d02f6aadf07594f401713385937c36da6de2a5e732ef9de0f2363b554a1802e0fbb8613762e03450b9045e957d55324f251dbbc5c471e61f

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\mr.pak

    Filesize

    443KB

    MD5

    567e6177b49f64aefdd27cda0c47a45a

    SHA1

    87caf0e04eea9084c8131bad02424e7f7ca1fd76

    SHA256

    f48bd04a3aca7e47ddfb164684addf19ee17aa1bf1576ced0ed827d06064c41d

    SHA512

    a4f93ea2e64461cb5b9d108744303c7bb56b58fdeae7d3c95259c5eb8d15c9ecb2a525c9978ce01b4c997d156cdee1e0f923c103f02e4e9c87bc14d0fd681943

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\ms.pak

    Filesize

    381KB

    MD5

    9b3e2f3c49897228d51a324ab625eb45

    SHA1

    8f3daec46e9a99c3b33e3d0e56c03402ccc52b9d

    SHA256

    61a3daae72558662851b49175c402e9fe6fd1b279e7b9028e49506d9444855c5

    SHA512

    409681829a861cd4e53069d54c80315e0c8b97e5db4cd74985d06238be434a0f0c387392e3f80916164898af247d17e8747c6538f08c0ef1c5e92a7d1b14f539

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\nb.pak

    Filesize

    374KB

    MD5

    7576c2fa9199a4121bc4a50ff6c439c3

    SHA1

    55e3e2e651353e7566ed4dbe082ffc834363752b

    SHA256

    2a3dfc6b41fa50fabed387cb8f05debbc530fa191366b30c9cb9eaae50686bd5

    SHA512

    86c44e43609e6eb61273f23d2242aa3d4a0bfa0ea653a86c8b663fa833283cc85a4356f4df653e85080f7437b81ae6201a3ecf898a63780b5ca67faa26d669fe

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\nl.pak

    Filesize

    385KB

    MD5

    bc41967b2ff493e7f151c7721245739d

    SHA1

    7606133ddbb58492dbbf02c03a975fb48da1e26f

    SHA256

    3dbe5569f53d1314dcb1bc99540cf6a0fea45b6d67576fd0d14c688107892f32

    SHA512

    9e395a3b5bbf64de3e474c56c4fb39879f107a9db246632cf6bb4b06160e05a82c0161d6496edb2bc29febb4a8f67ca7ea904167b860fd6da96636a6711cb593

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\pl.pak

    Filesize

    429KB

    MD5

    61c093fac4021062e1838a32d79399c2

    SHA1

    84a47537ef58d2507cf7697ea7e1e27b1f812ee8

    SHA256

    58067ec06973f5dd7afebbe57bffce3a3ed9f8e5093af8fcefdb6a65b2b68b22

    SHA512

    475d9d4f27cbc23efd9acf75024f993bcf7a8279e658ccbd84c8ac810e1c828de4dac4141298865faf1bb8858a7a88a12d1a21c467e8c656533e364ceff7e5dc

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\pt-BR.pak

    Filesize

    391KB

    MD5

    6d5d0687a64be70787116097138eade4

    SHA1

    db868d2f30aae6d04c420b26b76b1e505f66c7ae

    SHA256

    c495fbd1abbae9786daa80d96dc5a406bb706040005264bf33cf4385a6e41aab

    SHA512

    71cbea24a8e7424562bfedf7667cf57ef19e98aad49612434482b820408968f8c700ef4e013ce23db1c83e671e4fe311016846f57a635e4722c703241157444e

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\pt-PT.pak

    Filesize

    404KB

    MD5

    f4b0556da525b1f010c418dac2b7a33d

    SHA1

    1b414f4a6efc40245a431e77e50f83e49fb39603

    SHA256

    939a4b12d441a205b8bfe7186763b2294188f5723cac75453de006dc065d16a1

    SHA512

    685a2002db3611d25789900082d386d0459b8ab8459ec5ebccadcc669991e3aa9b479b5441d900681e38d08095b436c92f3e95eb290f9700687e0cbcba732f7a

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\ro.pak

    Filesize

    420KB

    MD5

    19cfc7c8f1a2e4a2de1f9f64475469bc

    SHA1

    bf6c4f373c19b03e116d2593c64e1ceca47d79dc

    SHA256

    3e725f7a791aed1fbed57f075ca11ce389a5bd425ccce3c00537dad27e5a8dd6

    SHA512

    ff5254e3a3676b8f5e74cba6661ae43d5739c7363c66cb17f74dce158dc36cee103885f055846dd320b932f2e7fbdc831bcee6293d423ff9b842b68644f633bd

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\ru.pak

    Filesize

    410KB

    MD5

    7d4df4548a52efb8eaec938b0e389b8d

    SHA1

    2244a9d3624110203b29d41d3434256cc9f22339

    SHA256

    845e04b8c1594d5c826acd6c6eb89c69088b4abae0590eaad3882ae012fdb63e

    SHA512

    84b2d569a8dd9ce7f8added360ed23bba80d79f8f1bd77bdbd2f122f26229fb78a78f6094b26ca0c468bee6f99a74c8653d3829458ee2b490c719764c6693a4a

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\sk.pak

    Filesize

    384KB

    MD5

    d7feb876984818abf87ad9b40c17d96b

    SHA1

    1596ca1bcba8995db0b77e88a9f34463a5f7ba2c

    SHA256

    7deda17dc357f4c59fa23a0e7516ee3f392f218629b5179b668fc451af3e377d

    SHA512

    f0ce84d56535b95383aed9fa18f7e0b3ac30cfc92ff7c0e898f6c8caf5377db8ed1164a7c27571ec93625ec9bd013500c97c591c8e0e8b93370149451801640e

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\sl.pak

    Filesize

    417KB

    MD5

    4d9d56ef0b176e7f7aa14270e964ec77

    SHA1

    515aac37e4f25ca50bd52ea73889b70b1e79863d

    SHA256

    6ba684a8f06f7eb175955b15d30c7162d92c7e7c48864dfb853238263e1be8c7

    SHA512

    740adbb7d8b039f98e187f45a1a87d0354136fb48b75262e508f720bfcbeb2746f04d31a57dccd50e37ddb5a1b7c0ad79a01cac6ba5fb98a9af272ad99fcb169

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\sr.pak

    Filesize

    294KB

    MD5

    86be6d0c57011e9151c9a3a7c91c7936

    SHA1

    263b7c6d71a59fe80755db78ebb9904dee1d0f08

    SHA256

    9668788685b58ed8d024bbdbc1052ca5eb661e16a332053df670843cfa37d2a6

    SHA512

    43a332b16d6c9b9a530aed1dac962ff678a7d2d5f78d57bc7416c204bdbd70663cd9032efcaa0e98cbdcf349cdca33472dea700f94475e0849213653dac354aa

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\sv.pak

    Filesize

    376KB

    MD5

    bbe0785c5f9591e8a1e7c4830fe949d6

    SHA1

    da4f3286079d50e1c04e923529e03e7d334c7fff

    SHA256

    0ad84f6f95fd7505862278a7c1c92d00a7e7dd4a765569e9c3086f55c1d7059d

    SHA512

    38bab6f3a6c9395d3b57e63168045ad2e8188b2f04751a15253e7226ec3043c9678a77be1eb27a3b2e751934a024f3ffc89fffd9f1e229e19638be318b53e961

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\sw.pak

    Filesize

    394KB

    MD5

    ee8da42ffe40fbb916c56390e2cd99e8

    SHA1

    6d824f56afe6b3605a881d2c26e69a46e6675347

    SHA256

    192e248c7ac4644f8712cf5032da1c6063d70662216ccf084205f902253aa827

    SHA512

    7befe72b073000bc35a31323d666fd51d105a188d59c4a85d76ee72b6c8c83a39a1beb935c1079def8e3ffa8c4bf6044cf4f3bef0f1c850c789b57e1144ff714

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\ta.pak

    Filesize

    484KB

    MD5

    e77cb250c3b0c5ad61aabd89566ccfe9

    SHA1

    d3ab59435e3ff42cfd47d78c8d0aada4c24c07fd

    SHA256

    a65c89c42a639c110981f6e5be026b913104b0448a591f95cf14689e0d33686f

    SHA512

    f6e61ac16c2b4bedf1a363f0a5e34acfca5eaf53c0bccdcbef57d930e23ad1845a869f11ddf320d798cd28590fa3c984419989970235085ac796e50ab2da49d8

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\te.pak

    Filesize

    318KB

    MD5

    62021845810614a38024d471b8a33e2c

    SHA1

    10710287646a7981436b420f3316bb46497576ba

    SHA256

    7256e2e621b7f65c38edca601fa02feeebc5ece7f5fdf74680333c1cee4d2473

    SHA512

    9cc4ef7b202704121a565576458d0e2386eab6af1a882caafe94d6ac3ff58fec1df2379169d6088d2f9c261bb602de91221dbab231ce035c1afd5a8c18f25e5d

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\th.pak

    Filesize

    391KB

    MD5

    394841b817b0a36e12c8afc2c00ec6a7

    SHA1

    555e88381743cd945c53d915fea82678d5543718

    SHA256

    4eddab6b4589b6fe9ed52cfd4ab0f6e7dd3cdde9bdd4acf2cb6484ccd4983639

    SHA512

    b5e93507a448425875b40dfebd955adba30d398032122aeefed32286fd76e27b6f94642087ac7fb3ec59620e5bc5794e1a4e0d9897d6bbb0ebc8f02050e558f3

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\tr.pak

    Filesize

    254KB

    MD5

    99b93ecad823ec6dc65ddf3eee0a2ca1

    SHA1

    d0591247e1becb8217237258bfb683aeda5766d1

    SHA256

    73dcd32fa45a8928e55bab8dc0d43e7027ee9fb140ed070cf51e027c71fd7ba5

    SHA512

    3657e404ebf02c84d02a1d87871193bd84e52492a2b0a5681c05e04aba1c038b0c80fd7345e5dcdcc3cb743fb24f1de3a675710c6b86914f12469b4a968b5477

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\uk.pak

    Filesize

    289KB

    MD5

    0f3facf63ceaf8cf360172e48fc84662

    SHA1

    9fabacae1a79bac31ba3e53fca3ae3c139c2896d

    SHA256

    e6a1be08060bfee05a89e042fb8a4e59f89b4b91761bae8d3be0a284411d93e0

    SHA512

    f992d8d618999d767e31ad5d5b26c8d5072c051d0a489fc246733cb0907d62f01fe31016437dcc982f1ec7f729f6917f0a3f71c1dfaf5bca8de67ea93cfad77a

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\ur.pak

    Filesize

    256KB

    MD5

    504762cd07fddf7781d492682d6f6d56

    SHA1

    34841302409f48c35b18ed7a3a83b79919603e88

    SHA256

    535a44a7bbf844d49456838bc6c2a2cb9c4b15b2e6cba1bdf3bc0ef4c636ee0b

    SHA512

    1fdf28d1ab9df3e51fab5297dbd8e983f316af0265c2c00e36f6c673814e0bb10914bf6c0dec1da8e97ba166f27446df869185ad242c12bb82587a8a965956d2

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\vi.pak

    Filesize

    399KB

    MD5

    66f65bc97e48d25d02f25da41b4252f0

    SHA1

    1b36a48ec042f00efa744f3713444c594a7e14fb

    SHA256

    e04bc4b4e277f8c5672d1dd9c652cf52c8c4c5a34a6a8fcf93d7ebb7b2925c14

    SHA512

    ffa7ee83a15bce99241d8de677335d570c69014550361d1d154e7b679ae3e8dabca179a687030bc0144af651a4b1d5b323e10b83eaa27f0d8a62c3c2b731c95a

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\zh-CN.pak

    Filesize

    206KB

    MD5

    6ff75690bdf56e5ae62c98699b955a1f

    SHA1

    ba69f05da878fb8d74f10cead1ed023436e81299

    SHA256

    2982ce7cf264285ef1216c44d63a757e825db91386c918e26563213c1ad05081

    SHA512

    be57dad6db7a1b38bacbc9c6e275b1aad456d0127c22f907ca6af026e8bac51384c58baba1ed55fb9226966ace2c90b7197f09bab3ed8688b78337a2c0c09e85

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\locales\zh-TW.pak

    Filesize

    215KB

    MD5

    b7e748873b0c7199cf2731038ec3b4ed

    SHA1

    fb1d96d445551b8b3ae7b3f9f0dd164405c48b9f

    SHA256

    f426aa76149eb2bf04212a30f6b35c2cd3243c9524904c9b7671a4d105ec9d14

    SHA512

    1fcc503d1f478835fa46fd6038481719ce88e583ffd6e50f8ac42ca34bdef095d5b20dbde74ea1cfb503724772e223a266ba17208247b5e65129fb6b2583edf6

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\resources.pak

    Filesize

    1.3MB

    MD5

    22de86e62b7a8be82b76c434fb2ad3ab

    SHA1

    ebbb533044e89787760d9aed39cc3a468296e62f

    SHA256

    40302ef5dcd9e0e71e3f4787b12111ab9b14466c29b24b2b1f7a9e73deca54d0

    SHA512

    79a18d074a2ec788db57b21185e5853b4658812eacaccfb0ae63d73e36ec59f5447b7c7aa2176cade14ff8cc24c71eb9a45c279d14af40d93f80272b56377972

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\resources\app.asar

    Filesize

    385KB

    MD5

    e4e7f775e98a4d810e7ae660535e6ad8

    SHA1

    d7432d937501ba9554ae85b3d7019b582be21e57

    SHA256

    724281871628f1ef3f17360746fdbc27a6e6cbac51d9286a0e35aff318a29af0

    SHA512

    ec7936c3ffcbad2807f9ff2d7ed586c9d213a4e4f1c6574937bc45eeb939d23ce3f05aa408faca85116ad95b8b59dbb5fa73cc43403d84757f6a9c85dc2d1e93

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\resources\elevate.exe

    Filesize

    105KB

    MD5

    792b92c8ad13c46f27c7ced0810694df

    SHA1

    d8d449b92de20a57df722df46435ba4553ecc802

    SHA256

    9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

    SHA512

    6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\snapshot_blob.bin

    Filesize

    266KB

    MD5

    4ebd06bdf6cf8dacf6597586fd1704b5

    SHA1

    e6819ef37f99f91468f4b94370a4ab467a075a6d

    SHA256

    148e4b85983f0d27adecd9c6431b66379ac5538688f320e89d74ff6d48bb740b

    SHA512

    17ed5abe702748b4626b3ee6de4d0916738f095c913c2700eee06b65a2bbcaf72afc1f87af7ce0fcce8bd15fe6881508255d397a346c45a82c7791b9b9833ddf

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\v8_context_snapshot.bin

    Filesize

    574KB

    MD5

    146e284750735ef4798527dc1cd0e741

    SHA1

    6408985b7d05c768a62bcb912234f14e1898ffdb

    SHA256

    3820e8fa1077d02606fea8e1b3a9ca4bf7f4a71d0569d9a8ea9ee7a009d0ce80

    SHA512

    46824df5d20e02fb72c3efd07bee6d832b1ab78c0163688fa84edb831cbfbef2dde12ba9da01f9dd49c4008bd3862a95699a2f6d55b8d4b3165976d3851c7278

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\vk_swiftshader.dll

    Filesize

    995KB

    MD5

    6d685e1a1b4190f225eea3a074687fd9

    SHA1

    fb8984638317ccc7813761b8ba908486e215c133

    SHA256

    4b8098931fd883872badd2767ba2367dae4f12852c6ea8738a3746b1de5c0efa

    SHA512

    57cf5424eebffd9531c44305cd58ec4b10918454aafecd4d28e0a10035472f9442065a3b3a7a45c3a2337f2457cd87b7ad1dd48b0464047702f6d5df08d0e544

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\vk_swiftshader_icd.json

    Filesize

    106B

    MD5

    8642dd3a87e2de6e991fae08458e302b

    SHA1

    9c06735c31cec00600fd763a92f8112d085bd12a

    SHA256

    32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

    SHA512

    f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

  • C:\Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\7z-out\vulkan-1.dll

    Filesize

    677KB

    MD5

    d1a2397c93ec1ee8d40da99e1c944b3b

    SHA1

    c9a73c65d2cd4fa71491689104d8e66996eb7a77

    SHA256

    01487e570a3ad4fbd39d77ebf4e5ebdc1f49f55d94a87feb7a6055798f3d8016

    SHA512

    4061cbfa181592e97ba6641ca4b42370e135cc8dd61d358513e62eed118fe92e0333e53a1dada3dda216e293d704ee02c3a6d11b3abed11be22dd2ce62fa31b5

  • \Users\Admin\AppData\Local\Programs\Sky-Beta\Sky-Beta.exe

    Filesize

    258KB

    MD5

    607e8109245f7126a376ac9bd195769b

    SHA1

    cf6a8118f1219cf99fd1a081f34ad4ed7ec68f44

    SHA256

    551fe97422100c10f8100fc06448af2c1ed5fb511456a333c36537243b62fbed

    SHA512

    dc8cd1ced619e4c06cd663395e79e0db92711a5da9003452fbbc64f35609d87d88bfa74d82df565b402b0655de7f8f974217c4cfc3396c5fa8e3585effa2c1ab

  • \Users\Admin\AppData\Local\Programs\Sky-Beta\Sky-Beta.exe

    Filesize

    324KB

    MD5

    99c210bd5ad2aea5dd1d2f990b2f64eb

    SHA1

    985b7c031fef4f8db52b6a84a459a4cd8c0de2ad

    SHA256

    79d203e20567b00c4885b248b0807067cd0eb25c49840591ab39c2f26fc1253b

    SHA512

    c5384488e2b11e55ec3d2feae2ff9943e7c13964e0cbb055fe2f445fbc2f764b60dd8325a3139639d00c7154be336b012d40628a37df58e1edb75aedbcadc32f

  • \Users\Admin\AppData\Local\Programs\Sky-Beta\Sky-Beta.exe

    Filesize

    272KB

    MD5

    6923c547d3b5f6f81f27174e1d19da3b

    SHA1

    9baa279f7aaba7af4e9fb505ab6f2413989319b5

    SHA256

    ee8493e80332a7048a7dec280552a458e5b029e0fe05dc633cdfe126fcfe8e49

    SHA512

    17276b2a7fb6113b75c84fb9cbe514a3895d403a4ce14f9a7809ff38a18f733462a98e542c13e2c0058b15e15b7ffea10dd544c4e7f5c29c883ed68fc71ad374

  • \Users\Admin\AppData\Local\Programs\Sky-Beta\Sky-Beta.exe

    Filesize

    103KB

    MD5

    513b503878f976c9a38419a372449a83

    SHA1

    7b08fecdf7f200f972d0a56753d3ecc75ae4ad51

    SHA256

    4b84572707e4b9a10316fedf16053f22ed540eee1e30a8f2ca303cf28c00dc40

    SHA512

    891eab3a20fa0b5c3bef7edfd0c597b6cd6c165a21ab990f093754f60ebae5a098e09246f359051e834268f445b1a513e037b70998d02d46997c72f2760982e7

  • \Users\Admin\AppData\Local\Programs\Sky-Beta\Sky-Beta.exe

    Filesize

    108KB

    MD5

    f723919ec9df4386046a351de2b0bf80

    SHA1

    fc0d2f2eaa3410b0bb06bd3d1b5bca79d9211c5b

    SHA256

    e0855c4744c7f4b17bc19832124010825dee29302b38c37e1fd5ac8d4c4b4a55

    SHA512

    24eaa76e132fbea2139489315f4140bba4be7d43f0b1ac9eea2e9aec9784374507c74935f850bbf3dddce992a1865c85647238a51df029b448fffab0be9f15de

  • \Users\Admin\AppData\Local\Programs\Sky-Beta\Sky-Beta.exe

    Filesize

    1.1MB

    MD5

    553a561cba29eeb2a7c344a1f6dbf283

    SHA1

    433846fed9f92897fa760f4891e1c034f6736a70

    SHA256

    bfd6d9a4b20bf158bc6a385ef0c0d4099e567eda80b986531a801ad575a84320

    SHA512

    7ca9c514eb68d49cdf3a1fb975eef34a71bec450835e0c421c52bddbe35323fa69ecb60d99b75bd7939b8adf4ba914ddaf829a914e5d676afbd22d37b19c7bd5

  • \Users\Admin\AppData\Local\Programs\Sky-Beta\Sky-Beta.exe

    Filesize

    861KB

    MD5

    a3dab0e3b7e06137e98cf4ca96ea4339

    SHA1

    94906b7d4425143a2c6ad8c6b38f56df1afeb9d6

    SHA256

    882d3068f3953ccdc65f7064db90222b575bb816a9fc72fc6c84d24ae49dfa38

    SHA512

    a3d7e73ec3f29ddfead92455f9a0f371553e0b5947189bb562b8ef8bd6386ae516830b4c924bd4f823e85c2ad22dd5b69b2880c915f3c8c4c1df663fe9235a1e

  • \Users\Admin\AppData\Local\Programs\Sky-Beta\Sky-Beta.exe

    Filesize

    1.1MB

    MD5

    02af425c4cd433e5c4745c62ebbe13b5

    SHA1

    cb324bf7ac7287b4e22aaedfe690ebf70b677bf4

    SHA256

    ada381257cbeff54b842bb793d33d904cc153c2b5503dcf3ee7f57f5b02fcac2

    SHA512

    a34aae1811a674b055fce4dd96e838b6d9901e604db8601e6b25a4848721c0ee7a603e07b030faada34ef2ac7e70d6faf62e3e74cedc06b90d3e340c4d5d2818

  • \Users\Admin\AppData\Local\Programs\Sky-Beta\Sky-Beta.exe

    Filesize

    1.2MB

    MD5

    75c22adc50486c39867287ac1e45b9c2

    SHA1

    eb54f945b3e8c1e7d4243432895d486e324ac0c1

    SHA256

    0e9916d8739f7d1172451af3c58594255b50e964db5c1de1f6ebb4e955a16a89

    SHA512

    fd362686ce3dc5b36679147670b1a44deccc40477f6dbd8a0eb5e68bcfdc214a336f2d0c9a840828da92b86cbbaf579befb5f827ee05fcbc3d84564f91ae1ae1

  • \Users\Admin\AppData\Local\Programs\Sky-Beta\Sky-Beta.exe

    Filesize

    669KB

    MD5

    3d79fae362740eba0989ab22e85c99b6

    SHA1

    bff5c5a86e4fa8658041e4d78b43820cb8fa6684

    SHA256

    5a58150ab2a01fba8a79c70f7f7a8f9d78617df4f9d9d73516ef28f0b32db4e8

    SHA512

    56a7e1cdbe0e69e4df7ea7d6bbe39124dbf139ffa439b1ce53cd66539e0e8ccaf87f63b3424607accf2103c61b4ee1b1f88e5ed217e17450bc8f6acd6eb10f2f

  • \Users\Admin\AppData\Local\Programs\Sky-Beta\Sky-Beta.exe

    Filesize

    747KB

    MD5

    b4d1ad0fc335a6fd91f184de8c4feb8a

    SHA1

    a730e7f0139e7ddbc88fbce6a44a2b8702931dc6

    SHA256

    116dde39628d3275f1fbbd557c902ab4eee07f4b7a08d1d02ae3d7839b35f5aa

    SHA512

    0e3b26364a2db3489228b85a1e7e5bb23c2a229088d5ad15236bfbefe57f557e626417c5cdd48f1ff8b6de7a2ec48b944a772682fc3e175dfd0646e139dbabe1

  • \Users\Admin\AppData\Local\Programs\Sky-Beta\Sky-Beta.exe

    Filesize

    1003KB

    MD5

    9e7cca7494d1df3be37c23fc73c4668b

    SHA1

    e72ffcb293e02a88f050a8b85747370df5c96616

    SHA256

    d3b223a091b8516730eb8f71efc0a36639b7214eb56158a70ba1323aeb543fe2

    SHA512

    49b431395a3cc3f686c5354cf18b61c12357bd97c0607b02975e419f992d1e6f1b2ccb8541e46278e3e4f2d543eadaccb30602a6bb713d0a0f8bf27d02868cc3

  • \Users\Admin\AppData\Local\Programs\Sky-Beta\ffmpeg.dll

    Filesize

    177KB

    MD5

    b5afedc22306e074444d9654a7da379f

    SHA1

    1f4102360477d3bf43d30eee5b10b51ab5087533

    SHA256

    2836d740bbe329c22967e234b9432b05eb52d5a6ae336f5b1848b82dfb9e78fb

    SHA512

    4ad136e345cd1e09b28a2ed2a0d3d80444585cd6ef9975a808c0d33997274f6a4702d8a850289b3977b0892d720ea6a6002b5572ed9456bcb7a49f0835d0016a

  • \Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\SpiderBanner.dll

    Filesize

    9KB

    MD5

    17309e33b596ba3a5693b4d3e85cf8d7

    SHA1

    7d361836cf53df42021c7f2b148aec9458818c01

    SHA256

    996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

    SHA512

    1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

  • \Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\StdUtils.dll

    Filesize

    100KB

    MD5

    c6a6e03f77c313b267498515488c5740

    SHA1

    3d49fc2784b9450962ed6b82b46e9c3c957d7c15

    SHA256

    b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

    SHA512

    9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

  • \Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\System.dll

    Filesize

    12KB

    MD5

    0d7ad4f45dc6f5aa87f606d0331c6901

    SHA1

    48df0911f0484cbe2a8cdd5362140b63c41ee457

    SHA256

    3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

    SHA512

    c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

  • \Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\WinShell.dll

    Filesize

    3KB

    MD5

    1cc7c37b7e0c8cd8bf04b6cc283e1e56

    SHA1

    0b9519763be6625bd5abce175dcc59c96d100d4c

    SHA256

    9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

    SHA512

    7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

  • \Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\nsExec.dll

    Filesize

    6KB

    MD5

    ec0504e6b8a11d5aad43b296beeb84b2

    SHA1

    91b5ce085130c8c7194d66b2439ec9e1c206497c

    SHA256

    5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

    SHA512

    3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

  • \Users\Admin\AppData\Local\Temp\nsy2A2D.tmp\nsis7z.dll

    Filesize

    424KB

    MD5

    80e44ce4895304c6a3a831310fbf8cd0

    SHA1

    36bd49ae21c460be5753a904b4501f1abca53508

    SHA256

    b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

    SHA512

    c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

  • memory/2512-567-0x0000000003F20000-0x0000000003F22000-memory.dmp

    Filesize

    8KB