Resubmissions

04/10/2024, 13:28

241004-qqpb5s1akh7

03/10/2024, 22:49

241003-2rvfbsvbpb7

01/10/2024, 17:12

241001-vqtdbavcpg7

10/09/2024, 12:08

240910-pa23maveje7

10/09/2024, 12:07

240910-pajlaatbrl7

05/09/2024, 12:10

240905-pcfx6s1eja7

04/09/2024, 23:57

240904-3zwtssyepr7

Analysis

  • max time kernel
    1772s
  • max time network
    1798s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    03/10/2024, 22:49

General

  • Target
    ArenaWarsSetup.exe
  • Size 79.2MB
  • Sample241003-2rvfbsvbpb
  • SHA256 57ee3d6b943838945eb81e1cfff28f891e3ee7edbbaed68b66a7ed31664d4f44
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 11 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs
  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 3 IoCs
  • Suspicious use of AdjustPrivilegeToken 6 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ArenaWarsSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\ArenaWarsSetup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1992
    • C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq ArenaWars.exe" /FO csv | "C:\Windows\system32\find.exe" "ArenaWars.exe"
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:1864
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq ArenaWars.exe" /FO csv
        3⤵
        • Enumerates processes with tasklist
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:3044
      • C:\Windows\SysWOW64\find.exe
        "C:\Windows\system32\find.exe" "ArenaWars.exe"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:2704
  • C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1372 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:2
    1⤵
      PID:336
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --mojo-platform-channel-handle=1368 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:1
      1⤵
        PID:1424
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3416 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:8
        1⤵
          PID:2488
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3476 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:8
          1⤵
            PID:904
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3648 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:8
            1⤵
              PID:408
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3764 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:8
              1⤵
                PID:2896
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3476 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:8
                1⤵
                  PID:1940
                • C:\Users\Admin\AppData\Local\Programs\ArenaWars\ArenaWars.exe
                  "C:\Users\Admin\AppData\Local\Programs\ArenaWars\ArenaWars.exe"
                  1⤵
                  • Executes dropped EXE
                  PID:3248
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=14 --mojo-platform-channel-handle=1768 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:1
                  1⤵
                    PID:2040
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --mojo-platform-channel-handle=1168 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:1
                    1⤵
                      PID:1724
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --mojo-platform-channel-handle=2500 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:1
                      1⤵
                        PID:2704
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --mojo-platform-channel-handle=1564 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:1
                        1⤵
                          PID:2504
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --mojo-platform-channel-handle=2464 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:1
                          1⤵
                            PID:1564
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=19 --mojo-platform-channel-handle=992 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:1
                            1⤵
                              PID:3132
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=20 --mojo-platform-channel-handle=3356 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:1
                              1⤵
                                PID:2824
                              • C:\Program Files\Google\Chrome\Application\chrome.exe
                                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=21 --mojo-platform-channel-handle=820 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:1
                                1⤵
                                  PID:3428
                                • C:\Program Files\Google\Chrome\Application\chrome.exe
                                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=22 --mojo-platform-channel-handle=3476 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:1
                                  1⤵
                                    PID:3520
                                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=680 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:8
                                    1⤵
                                      PID:3620
                                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1256 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:8
                                      1⤵
                                        PID:3664
                                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=25 --mojo-platform-channel-handle=1588 --field-trial-handle=1224,i,13431296871829266670,17166708874279467079,131072 /prefetch:1
                                        1⤵
                                          PID:3780
                                        • C:\Windows\system32\AUDIODG.EXE
                                          C:\Windows\system32\AUDIODG.EXE 0x2d0
                                          1⤵
                                          • Suspicious use of AdjustPrivilegeToken
                                          PID:3852

                                        Network

                                              MITRE ATT&CK Enterprise v15

                                              Replay Monitor

                                              Loading Replay Monitor...

                                              Downloads

                                              LICENSE.electron.txt

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\LICENSE.electron.txt
                                              • Size 1KB
                                              • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                                              • MD5 SHA1 SHA512

                                              LICENSES.chromium.html

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\LICENSES.chromium.html
                                              • Size 9.0MB
                                              • SHA256 96837a4a521a61bd3d34f2f660e29902d228aaec501eeb2a84403f1926c3df9d
                                              • MD5 SHA1 SHA512 SSDEEP

                                              chrome_100_percent.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\chrome_100_percent.pak
                                              • Size 148KB
                                              • SHA256 7dd5485def22a53c0635efdf8ae900f147ec8c8a22b9ed71c24668075dd605d3
                                              • MD5 SHA1 SHA512 SSDEEP

                                              chrome_200_percent.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\chrome_200_percent.pak
                                              • Size 223KB
                                              • SHA256 2408969599d3953aae2fb36008e4d0711e30d0bc86fb4d03f8b0577d43c649fa
                                              • MD5 SHA1 SHA512 SSDEEP

                                              d3dcompiler_47.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\d3dcompiler_47.dll
                                              • Size 4.7MB
                                              • SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ffmpeg.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\ffmpeg.dll
                                              • Size 2.6MB
                                              • SHA256 16261687febd0d707c7b90eeb802b3befdec9b20c4fbd29068540c2b94c81de6
                                              • MD5 SHA1 SHA512 SSDEEP

                                              icudtl.dat

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\icudtl.dat
                                              • Size 10.0MB
                                              • SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
                                              • MD5 SHA1 SHA512 SSDEEP

                                              libEGL.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\libEGL.dll
                                              • Size 470KB
                                              • SHA256 18cca9a1952e2699a955690b8a870e614c28321a4e032392f8526677b5712f98
                                              • MD5 SHA1 SHA512 SSDEEP

                                              libGLESv2.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\libGLESv2.dll
                                              • Size 7.7MB
                                              • SHA256 ce43b08039628c9969345fdf0861f7633faa9a00356173e6c170dc437353a2b3
                                              • MD5 SHA1 SHA512 SSDEEP

                                              af.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\af.pak
                                              • Size 494KB
                                              • SHA256 e2470090a09ca500679e68bb5e3b1acc35a5873fea4f93af25a23c82122f2c13
                                              • MD5 SHA1 SHA512 SSDEEP

                                              am.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\am.pak
                                              • Size 800KB
                                              • SHA256 4e15946e86a578eeff41feda808bb291d81e240fbdfc96cbe2efe692ad35eef5
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ar.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\ar.pak
                                              • Size 874KB
                                              • SHA256 5cc02570e5f61cbca791309985df3a29584e41583b3344f1d9fb6b04ce423e6f
                                              • MD5 SHA1 SHA512 SSDEEP

                                              bg.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\bg.pak
                                              • Size 913KB
                                              • SHA256 97ef7984074775282b68dca5d5a469efdb2b22474ee6669fdfb5197d3f1b3768
                                              • MD5 SHA1 SHA512 SSDEEP

                                              bn.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\bn.pak
                                              • Size 1.1MB
                                              • SHA256 1aba82aee8c985e5e370e7cf2b35c9ec20cbe5174db5fcb54ec7d19ec5d79587
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ca.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\ca.pak
                                              • Size 556KB
                                              • SHA256 b3d5dfae25427596b1f14a8e13d6bcb58532c82554229c2367779ff5c42b28bb
                                              • MD5 SHA1 SHA512 SSDEEP

                                              cs.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\cs.pak
                                              • Size 572KB
                                              • SHA256 7d7b701ce510b2e4a18e957e500086db590aad8bf5acd37f82263a676f0b556c
                                              • MD5 SHA1 SHA512 SSDEEP

                                              da.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\da.pak
                                              • Size 518KB
                                              • SHA256 3430c0f1946901dfa24190ca3989f72171ec564bc7c523853e6a1f531b61b5ee
                                              • MD5 SHA1 SHA512 SSDEEP

                                              de.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\de.pak
                                              • Size 553KB
                                              • SHA256 662496eff49febbe49f0a03cf2c51acaa743cb2237de3c41014556e16f3d8e2b
                                              • MD5 SHA1 SHA512 SSDEEP

                                              el.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\el.pak
                                              • Size 1001KB
                                              • SHA256 162e51bc7d682e223e498f4ff8c81f019d136d857bd25a1c982d4a1084a8c840
                                              • MD5 SHA1 SHA512 SSDEEP

                                              en-GB.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\en-GB.pak
                                              • Size 450KB
                                              • SHA256 7df934906a61c0ae7a952f9ed058f4a06cd3989663a7d9f50afc3c9f830135bb
                                              • MD5 SHA1 SHA512 SSDEEP

                                              en-US.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\en-US.pak
                                              • Size 454KB
                                              • SHA256 41123d72bd8e289e85bd35227aabb4cc61fe1de02b5cd7a7834e5ec200bc2078
                                              • MD5 SHA1 SHA512 SSDEEP

                                              es-419.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\es-419.pak
                                              • Size 547KB
                                              • SHA256 ec922f8ca16b7e7642fc73369ba7b75ec950cafb1dcadc6c88426c034382d483
                                              • MD5 SHA1 SHA512 SSDEEP

                                              es.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\es.pak
                                              • Size 547KB
                                              • SHA256 0385e6776de5a0d8a3b30b7bad44308ac4cb04e2bcebd573d3c7938b68036573
                                              • MD5 SHA1 SHA512 SSDEEP

                                              et.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\et.pak
                                              • Size 497KB
                                              • SHA256 ba4ec85d2306a1f1f178a017fef4d340b77b33e10bbee07bd359a8e0ff8ea461
                                              • MD5 SHA1 SHA512 SSDEEP

                                              fa.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\fa.pak
                                              • Size 813KB
                                              • SHA256 f1a7351bf0d8cad475d2761b9edf970c3098836e38aa98106a5e04a41002b7c8
                                              • MD5 SHA1 SHA512 SSDEEP

                                              fi.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\fi.pak
                                              • Size 508KB
                                              • SHA256 11b0b9b0f74d01f16db7aa49be9dceeb55fde9da56f17419c4bca159cdcae274
                                              • MD5 SHA1 SHA512 SSDEEP

                                              fil.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\fil.pak
                                              • Size 573KB
                                              • SHA256 d7fdc7fd08dcc421bc8aaae3fdc72599c60a3b96f05989a3e46736f0de06e745
                                              • MD5 SHA1 SHA512 SSDEEP

                                              fr.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\fr.pak
                                              • Size 591KB
                                              • SHA256 1f6cc56e04bcbd6b6ecbe500bcb0a5702551ec80d79e624642d0c7d9758d4424
                                              • MD5 SHA1 SHA512 SSDEEP

                                              gu.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\gu.pak
                                              • Size 1.1MB
                                              • SHA256 087e99953eef9b5fd736e3dbd98d702fdb01dc614593a4c575cb619159688118
                                              • MD5 SHA1 SHA512 SSDEEP

                                              he.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\he.pak
                                              • Size 713KB
                                              • SHA256 20b1c80f8b2bd5130a1fb372814fb9c9ceac15305da3da0cb29923960a94a934
                                              • MD5 SHA1 SHA512 SSDEEP

                                              hi.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\hi.pak
                                              • Size 1.2MB
                                              • SHA256 9c6d8d93278a6e375405142df9829adefbcc8ae9797a4f589591b9784b2b71c8
                                              • MD5 SHA1 SHA512 SSDEEP

                                              hr.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\hr.pak
                                              • Size 551KB
                                              • SHA256 afed35643df24709c8c5cc9b8158b3d9a2266fbfeed132e98ff254ced4086c5f
                                              • MD5 SHA1 SHA512 SSDEEP

                                              hu.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\hu.pak
                                              • Size 595KB
                                              • SHA256 b4e6a1135de8bdc42c04f4db4eb1ce48256f18eb46a5146a21010b6165a90e7a
                                              • MD5 SHA1 SHA512 SSDEEP

                                              id.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\id.pak
                                              • Size 490KB
                                              • SHA256 a21f9474a19fe2d7f26c59f5ba8d6e72801a8a057b7dbcb8b3f96471043d9059
                                              • MD5 SHA1 SHA512 SSDEEP

                                              it.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\it.pak
                                              • Size 539KB
                                              • SHA256 33652aae78a486dc3ce4e5affd1b7f72e1248f6f9f3e62188afe3b5d73bd148e
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ja.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\ja.pak
                                              • Size 659KB
                                              • SHA256 c5692ca739c31569ae2431fd58f1028e6c8c01af278b76656ee0bb65b79e9985
                                              • MD5 SHA1 SHA512 SSDEEP

                                              kn.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\kn.pak
                                              • Size 1.3MB
                                              • SHA256 a6ecf1dfe4d99f6ba0926c696b5b23b77d234fa8fd03da9825b074ecc640d508
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ko.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\ko.pak
                                              • Size 557KB
                                              • SHA256 3fa72d61a997c36f9c093f769f4bba60b290d1fbcb71d5544f85e8e1efe51d07
                                              • MD5 SHA1 SHA512 SSDEEP

                                              lt.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\lt.pak
                                              • Size 597KB
                                              • SHA256 a1257d10e673311747363e6929832e70f36668b1fc0d6a5ddd550fe88007aa58
                                              • MD5 SHA1 SHA512 SSDEEP

                                              lv.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\lv.pak
                                              • Size 596KB
                                              • SHA256 33fdf706f6d3f06b485c5115a7c73a571296dac41c582fc9d0dbb371d86e8653
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ml.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\ml.pak
                                              • Size 1.3MB
                                              • SHA256 87384db1ddcac012b0b40ec89daf47ebbbcf1497705f023a6983fb2470e4abd6
                                              • MD5 SHA1 SHA512 SSDEEP

                                              mr.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\mr.pak
                                              • Size 1.1MB
                                              • SHA256 039f4e0176c38867fef57482825d043fa63bf1356c85eab0fc665f118db125e4
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ms.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\ms.pak
                                              • Size 514KB
                                              • SHA256 2f0c83b5b3bff8f624d78e0670a31c509e7f1d5330f72aaede471b2e97c956e2
                                              • MD5 SHA1 SHA512 SSDEEP

                                              nb.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\nb.pak
                                              • Size 499KB
                                              • SHA256 887a0278971d6ba61e2f24c62029a3087a46c4962c4357412c28ede12ed6da15
                                              • MD5 SHA1 SHA512 SSDEEP

                                              nl.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\nl.pak
                                              • Size 516KB
                                              • SHA256 619c61701b3a142733d23ad8c7117bc013867a842d3d1d572faa56895ad8257e
                                              • MD5 SHA1 SHA512 SSDEEP

                                              pl.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\pl.pak
                                              • Size 574KB
                                              • SHA256 f2a7dcb69a433c2a898866c555b82c26e3515c089f500e7748b9b11ec3047786
                                              • MD5 SHA1 SHA512 SSDEEP

                                              pt-BR.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\pt-BR.pak
                                              • Size 540KB
                                              • SHA256 5ff219be32f9178fee40e8966ac5deff2be1f2ff259a66cb9cdce81c2e90a7e8
                                              • MD5 SHA1 SHA512 SSDEEP

                                              pt-PT.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\pt-PT.pak
                                              • Size 543KB
                                              • SHA256 02ea290fac25b414a1d4ed78cdc159cf6c73fe5350824c2f36f032e426a23364
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ro.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\ro.pak
                                              • Size 562KB
                                              • SHA256 655c175903a791d0ff56264a487c53f7bd09ed037cf04cfa6e79eb8be5b677e9
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ru.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\ru.pak
                                              • Size 924KB
                                              • SHA256 4babe5f20caafca33867ee263aa9dd55ed271704a062e4372fdd133eb359a558
                                              • MD5 SHA1 SHA512 SSDEEP

                                              sk.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\sk.pak
                                              • Size 580KB
                                              • SHA256 89f984a67cea3997c704005fbfbacd3f6f5652248626945c2ab1c3bcf24e6623
                                              • MD5 SHA1 SHA512 SSDEEP

                                              sl.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\sl.pak
                                              • Size 556KB
                                              • SHA256 458b15bf249c1e6fe9843725c42443274ef6e09dcb15f5288c916c0561aefc47
                                              • MD5 SHA1 SHA512 SSDEEP

                                              sr.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\sr.pak
                                              • Size 859KB
                                              • SHA256 4cea4c83b5e887463dadbf470a9953b8175149f31fd07b83406a6fc59acfde41
                                              • MD5 SHA1 SHA512 SSDEEP

                                              sv.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\sv.pak
                                              • Size 501KB
                                              • SHA256 105460cb717104d82f99cf8c5e2c51ff252211a605bd1c98bf75981f100d619e
                                              • MD5 SHA1 SHA512 SSDEEP

                                              sw.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\sw.pak
                                              • Size 529KB
                                              • SHA256 f0fccf2e3ad332846736d816e254028569f5f84918573872442987a8bc9bba58
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ta.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\ta.pak
                                              • Size 1.3MB
                                              • SHA256 1cebac8d758298ed2763e62b9bdfb17351831e691ff3e1ba85252c9a66d66242
                                              • MD5 SHA1 SHA512 SSDEEP

                                              te.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\te.pak
                                              • Size 1.2MB
                                              • SHA256 8264244c6de861817f5b19cef282844a18ed8cb7d4e059451489652749fe931e
                                              • MD5 SHA1 SHA512 SSDEEP

                                              th.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\th.pak
                                              • Size 1.0MB
                                              • SHA256 647ad394e92e7610bd0f6c4e08d28748408fcd5a816a35e4622ea7f71cfa7a9d
                                              • MD5 SHA1 SHA512 SSDEEP

                                              tr.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\tr.pak
                                              • Size 539KB
                                              • SHA256 f58ed19be62706fb4fd797a6bfd3af5c6ad4b39aef994a577cd28968fcac0291
                                              • MD5 SHA1 SHA512 SSDEEP

                                              uk.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\uk.pak
                                              • Size 923KB
                                              • SHA256 13e40208e2c9f4f4b83dcf422610dc82314a8f99ba50acdbd286c508f92eb232
                                              • MD5 SHA1 SHA512 SSDEEP

                                              ur.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\ur.pak
                                              • Size 808KB
                                              • SHA256 60310f9a3457fae0395b447a30646211ef4160ba84bd7c36d291af4c8ec2b79a
                                              • MD5 SHA1 SHA512 SSDEEP

                                              vi.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\vi.pak
                                              • Size 639KB
                                              • SHA256 fb9463d5655e73fa69cace9800d95f8cd077ee9284fef3bfe162d2bfe220c257
                                              • MD5 SHA1 SHA512 SSDEEP

                                              zh-CN.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\zh-CN.pak
                                              • Size 460KB
                                              • SHA256 f0c0ba53c954325b3bbefb333ba23f7fb40a7a4e506043e9f7886089f611943b
                                              • MD5 SHA1 SHA512 SSDEEP

                                              zh-TW.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\locales\zh-TW.pak
                                              • Size 455KB
                                              • SHA256 d4033cb3264c7c4cd2636ea2a202421650c449e5bfb10f29949e4c44e91ca93b
                                              • MD5 SHA1 SHA512 SSDEEP

                                              resources.pak

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources.pak
                                              • Size 5.3MB
                                              • SHA256 f299b8d2e59b047f8473e86d88a9ef20b447627c40b5d5a2ebb77c7144faca94
                                              • MD5 SHA1 SHA512 SSDEEP

                                              app.asar

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar
                                              • Size 8.3MB
                                              • SHA256 46142b7bf1f82056b2449c08e941113337a60c054b17cf1cb9adfef62a1ffb2d
                                              • MD5 SHA1 SHA512 SSDEEP

                                              LICENSE

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\LICENSE
                                              • Size 1KB
                                              • SHA256 455dda47a3fc2f58ab06d8e526f490ec43d0fc23a5ea80dd0942644397316d9b
                                              • MD5 SHA1 SHA512

                                              index.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\dist\index.js
                                              • Size 412B
                                              • SHA256 a7ff0225cb5ebcbef8499c6c8ac2be924f584eb375dacb1d8bd3dc6540b510f2
                                              • MD5 SHA1 SHA512

                                              package.json

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\package.json
                                              • Size 934B
                                              • SHA256 59f4704391d2247b2a8d029d7338566d47d2ff0cd7477c49343efe93475f7a12
                                              • MD5 SHA1 SHA512

                                              node.napi.node

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\prebuilds\win32-x64\node.napi.node
                                              • Size 137KB
                                              • SHA256 da2172ce055fa47d6a0ea1c90654f530abed33f69a74d52fab06c4c7653b48fd
                                              • MD5 SHA1 SHA512 SSDEEP

                                              dpapi_addon.h

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\src\dpapi_addon.h
                                              • Size 206B
                                              • SHA256 18280b1135123aff82fbf4188a5aadfc9a5d6fffad9309f72f347f380f2da550
                                              • MD5 SHA1 SHA512

                                              dpapi_not_supported.cpp

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\src\dpapi_not_supported.cpp
                                              • Size 327B
                                              • SHA256 7c03cec11c438b6d2512239477d9f1b45d6e16763122a3a36458ab339f50d3c4
                                              • MD5 SHA1 SHA512

                                              dpapi_win.cpp

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\src\dpapi_win.cpp
                                              • Size 2KB
                                              • SHA256 da37b02fb0babb651244479ea019d229fff1c41ecde74bc06335b5e603d9b30e
                                              • MD5 SHA1 SHA512

                                              main.cpp

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\@primno\dpapi\src\main.cpp
                                              • Size 698B
                                              • SHA256 1ada21451bab629832372d519e366bfb08c80facfefe5a40c76a4f10a697c905
                                              • MD5 SHA1 SHA512

                                              LICENSE

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\LICENSE
                                              • Size 1KB
                                              • SHA256 7686f81e580cd6774f609a2d8a41b2cebdf79bc30e6b46c3efff5a656158981c
                                              • MD5 SHA1 SHA512

                                              common-sqlite.gypi

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\common-sqlite.gypi
                                              • Size 1KB
                                              • SHA256 7b557c097c162c9ba04985ab822f92a176bf848c34ca38e54f061057ad0d8bd0
                                              • MD5 SHA1 SHA512

                                              extract.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\extract.js
                                              • Size 224B
                                              • SHA256 5be353d29c0fabea29cfd34448c196da9506009c0b20fde55e01d4191941dd74
                                              • MD5 SHA1 SHA512

                                              sqlite-autoconf-3410100.tar.gz

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\sqlite-autoconf-3410100.tar.gz
                                              • Size 3.0MB
                                              • SHA256 4dadfbeab9f8e16c695d4fbbc51c16b2f77fb97ff4c1c3d139919dfc038c9e33
                                              • MD5 SHA1 SHA512 SSDEEP

                                              sqlite3.gyp

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\deps\sqlite3.gyp
                                              • Size 2KB
                                              • SHA256 8793f62b1133892ba376d18a15f552ef12b1e016f7e5df32ffb7279b760c11bd
                                              • MD5 SHA1 SHA512

                                              node_sqlite3.node

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\lib\binding\napi-v6-win32-unknown-x64\node_sqlite3.node
                                              • Size 1.8MB
                                              • SHA256 7fb52b781709b065c240b6b81394be6e72e53fe11d7c8e0f7b49dd417eb78a01
                                              • MD5 SHA1 SHA512 SSDEEP

                                              sqlite3-binding.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\lib\sqlite3-binding.js
                                              • Size 241B
                                              • SHA256 049b7b1b10417274be6c3e6a9518ac364729354435298d70abf834c35e8f3bf3
                                              • MD5 SHA1 SHA512

                                              sqlite3.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\lib\sqlite3.js
                                              • Size 6KB
                                              • SHA256 8d6b400ae7f69a80d0cdd37a968d7b9a913661fa53475e5b8de49dda21684973
                                              • MD5 SHA1 SHA512 SSDEEP

                                              trace.js

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\lib\trace.js
                                              • Size 1KB
                                              • SHA256 d06caec6136120c6fb7ee3681b1ca949e8b634e747ea8d3080c90f35aeb7728f
                                              • MD5 SHA1 SHA512

                                              package.json

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\package.json
                                              • Size 1KB
                                              • SHA256 b145c00c63dde4da0eb3736b0d25fe79fa252a02daa9c3fdbb2d3a5783e98cf6
                                              • MD5 SHA1 SHA512

                                              async.h

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\async.h
                                              • Size 1KB
                                              • SHA256 b6e86bf43d74c8ee2c2f57eb1947be6ce5d8c258c4866609571ed6c97b58b53c
                                              • MD5 SHA1 SHA512

                                              backup.h

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\backup.h
                                              • Size 6KB
                                              • SHA256 d3956cdbb650e1ecff8c94fe4e8645f80e10088156d409703c19f186a9c41aa8
                                              • MD5 SHA1 SHA512 SSDEEP

                                              database.h

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\database.h
                                              • Size 5KB
                                              • SHA256 8c5bcd084dddab2f2994b6cddc9b69a8f78a1034588b765e7bd859f27868fe43
                                              • MD5 SHA1 SHA512 SSDEEP

                                              gcc-preinclude.h

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\gcc-preinclude.h
                                              • Size 861B
                                              • SHA256 9d4264bb1dcbef8d927bb3a1809a01b0b89d726c217cee99ea9ccfdc7d456b6f
                                              • MD5 SHA1 SHA512

                                              macros.h

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\macros.h
                                              • Size 11KB
                                              • SHA256 8d1afb5d27eab8302de08aca87eb6edc1b99ae963a854d3bd652a4fc61cbe3c6
                                              • MD5 SHA1 SHA512 SSDEEP

                                              statement.h

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\statement.h
                                              • Size 6KB
                                              • SHA256 2c99d9cef21876db64b610dd9baba8de1f7c94028d6d1c463eb3db213745b3bf
                                              • MD5 SHA1 SHA512 SSDEEP

                                              threading.h

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\app.asar.unpacked\node_modules\sqlite3\src\threading.h
                                              • Size 388B
                                              • SHA256 e0ab4f798bccb877548b0ab0f3d98c051b36cde240fdf424c70ace7daf0ffd36
                                              • MD5 SHA1 SHA512

                                              elevate.exe

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\resources\elevate.exe
                                              • Size 105KB
                                              • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
                                              • MD5 SHA1 SHA512 SSDEEP

                                              snapshot_blob.bin

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\snapshot_blob.bin
                                              • Size 302KB
                                              • SHA256 22a46de643045805a3e588f9a18ebaa377f9fba3dee46b2d60f3ae300a09cc4e
                                              • MD5 SHA1 SHA512 SSDEEP

                                              v8_context_snapshot.bin

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\v8_context_snapshot.bin
                                              • Size 646KB
                                              • SHA256 a8bd22478c4f85afa836c89d3a7f52c606b17872fbbefce268b499bedede10ae
                                              • MD5 SHA1 SHA512 SSDEEP

                                              vk_swiftshader.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\vk_swiftshader.dll
                                              • Size 5.2MB
                                              • SHA256 ff4384263025da5b1d9fb4741a80c43244003af04f78c59c527bbc17e61d59ba
                                              • MD5 SHA1 SHA512 SSDEEP

                                              vk_swiftshader_icd.json

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\vk_swiftshader_icd.json
                                              • Size 106B
                                              • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                              • MD5 SHA1 SHA512

                                              vulkan-1.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\7z-out\vulkan-1.dll
                                              • Size 938KB
                                              • SHA256 9587467b264fe5ee668cabe2c1fa34eb411f257d3a22c4d58e17e12e110c96e4
                                              • MD5 SHA1 SHA512 SSDEEP

                                              StdUtils.dll

                                              • Path C:\Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\StdUtils.dll
                                              • Size 100KB
                                              • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                                              • MD5 SHA1 SHA512 SSDEEP

                                              SpiderBanner.dll

                                              • Path \Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\SpiderBanner.dll
                                              • Size 9KB
                                              • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
                                              • MD5 SHA1 SHA512 SSDEEP

                                              System.dll

                                              • Path \Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\System.dll
                                              • Size 12KB
                                              • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                                              • MD5 SHA1 SHA512 SSDEEP

                                              WinShell.dll

                                              • Path \Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\WinShell.dll
                                              • Size 3KB
                                              • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                                              • MD5 SHA1 SHA512

                                              nsExec.dll

                                              • Path \Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\nsExec.dll
                                              • Size 6KB
                                              • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
                                              • MD5 SHA1 SHA512 SSDEEP

                                              nsis7z.dll

                                              • Path \Users\Admin\AppData\Local\Temp\nsjDAD6.tmp\nsis7z.dll
                                              • Size 424KB
                                              • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                                              • MD5 SHA1 SHA512 SSDEEP

                                              memory/1992-742-0x0000000002AA0000-0x0000000002AA2000-memory.dmp