2f8b8a84d3353ad1b0dacd081d1025e3fda262540659b05c852c46caa87430c0

Analysis

max time kernel
45s
max time network
50s
platform
windows10-2004_x64
resource
win10v2004-20250619-en
resource tags

arch:x64arch:x86image:win10v2004-20250619-enlocale:en-usos:windows10-2004-x64system
submitted
18/07/2025, 22:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Era Setup 1.0.106.exe
Size 111.9MB
Sample250718-2dd67awqz6
SHA256 2f8b8a84d3353ad1b0dacd081d1025e3fda262540659b05c852c46caa87430c0
MD5 2ac375ac35f061962b71ea99cb56f3df
SHA1 47d165ca177f06ef401c7b81121c2169780ee3e2
SHA512 81f0a27f6a7144399e02588204112c880668e63cae3e042fc41ba0f69a1eead878cb7227f71f84146602ce839f09a18140db059c73b5f29b5b99dc63a757961f
SSDEEP 1572864:f12/nTEfsr6fyt/nR0sD7GcGsOSLkxMjCMfEbZP+nH2R15DsxsiIWlbL+m4sAr+e:fYEly1RnDJCMfENbDIIMv+m4sAr+3u
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-4097847965-469305640-2969917343-1000\Control Panel\International\Geo\Nation	Era.exe
Key value queried	\REGISTRY\USER\S-1-5-21-4097847965-469305640-2969917343-1000\Control Panel\International\Geo\Nation	Era.exe

Executes dropped EXE 5 IoCs

pid	Process
888	Era.exe
1944	FortniteLauncher.exe
3004	Era.exe
3192	Era.exe
1676	Era.exe

Loads dropped DLL 21 IoCs

pid	Process
3060	Era Setup 1.0.106.exe
3060	Era Setup 1.0.106.exe
3060	Era Setup 1.0.106.exe
3060	Era Setup 1.0.106.exe
3060	Era Setup 1.0.106.exe
3060	Era Setup 1.0.106.exe
3060	Era Setup 1.0.106.exe
3060	Era Setup 1.0.106.exe
3060	Era Setup 1.0.106.exe
3060	Era Setup 1.0.106.exe
3060	Era Setup 1.0.106.exe
888	Era.exe
888	Era.exe
888	Era.exe
3004	Era.exe
3192	Era.exe
1676	Era.exe
3004	Era.exe
3004	Era.exe
3004	Era.exe
3004	Era.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\Era\LICENSE.electron.txt	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\cs.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\fr.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\chrome_200_percent.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\ru.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\te.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\index.js	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\he.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\id.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\nb.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\nl.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\app-update.yml	Era Setup 1.0.106.exe
File opened for modification	C:\Program Files\Era\resources\app.asar.unpacked	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.215D9D61.tlog\CL.write.1.tlog	Era Setup 1.0.106.exe
File opened for modification	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\src	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\bg.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\fil.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\sl.pak	Era Setup 1.0.106.exe
File opened for modification	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\bin	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\src\register_linux.cpp	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\lt.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\icudtl.dat	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\vk_swiftshader.dll	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\mr.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\th.pak	Era Setup 1.0.106.exe
File opened for modification	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\node_modules\@sentry\cli-win32-x64	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\package.json	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\snapshot_blob.bin	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\et.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\pt-PT.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.215D9D61.tlog\CL.read.1.tlog	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\ar.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\node_modules\@sentry\cli-win32-x64\package.json	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\build\register-protocol-handler.vcxproj	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\src\register_mac.m	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\ca.pak	Era Setup 1.0.106.exe
File opened for modification	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\node_modules	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register-protocol-handler.node.recipe	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\vk_swiftshader_icd.json	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\uk.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry\cli\node_modules\@sentry\cli-win32-x64\bin\sentry-cli.exe	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\register-protocol-handler.ipdb	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\Era.exe	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\v8_context_snapshot.bin	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\de.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\fa.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\app.asar	Era Setup 1.0.106.exe
File opened for modification	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\build	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\binaries\vulcan.exe	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\zh-CN.pak	Era Setup 1.0.106.exe
File opened for modification	C:\Program Files\Era\resources\app.asar.unpacked\node_modules	Era Setup 1.0.106.exe
File opened for modification	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\build\Release	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\en-GB.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\vi.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\elevate.exe	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\register-protocol-handler.exp	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\gu.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\ml.pak	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\locales\sw.pak	Era Setup 1.0.106.exe
File opened for modification	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\@sentry	Era Setup 1.0.106.exe
File opened for modification	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme	Era Setup 1.0.106.exe
File created	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\bin\win32-x64-130\register-scheme.node	Era Setup 1.0.106.exe
File opened for modification	C:\Program Files\Era\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj	Era Setup 1.0.106.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Era Setup 1.0.106.exe

Checks processor information in registry 2 TTPs 7 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString	Era.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2	Era.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Era.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	Era.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Era.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	Era.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz	Era.exe

Modifies registry class 7 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4097847965-469305640-2969917343-1000_Classes\fluxapp\shell\open\command\ = "\"C:\\Program Files\\Era\\Era.exe\" \"%1\""	Era.exe
Key created	\REGISTRY\USER\S-1-5-21-4097847965-469305640-2969917343-1000_Classes\fluxapp	Era.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4097847965-469305640-2969917343-1000_Classes\fluxapp\URL Protocol	Era.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4097847965-469305640-2969917343-1000_Classes\fluxapp\ = "URL:fluxapp"	Era.exe
Key created	\REGISTRY\USER\S-1-5-21-4097847965-469305640-2969917343-1000_Classes\fluxapp\shell\open\command	Era.exe
Key created	\REGISTRY\USER\S-1-5-21-4097847965-469305640-2969917343-1000_Classes\fluxapp\shell	Era.exe
Key created	\REGISTRY\USER\S-1-5-21-4097847965-469305640-2969917343-1000_Classes\fluxapp\shell\open	Era.exe

Suspicious behavior: EnumeratesProcesses 6 IoCs

pid	Process
3060	Era Setup 1.0.106.exe
3060	Era Setup 1.0.106.exe
3060	Era Setup 1.0.106.exe
3060	Era Setup 1.0.106.exe
3060	Era Setup 1.0.106.exe
3060	Era Setup 1.0.106.exe

Suspicious use of AdjustPrivilegeToken 61 IoCs

description	pid	Process
Token: SeSecurityPrivilege	3060	Era Setup 1.0.106.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe
Token: SeShutdownPrivilege	888	Era.exe
Token: SeCreatePagefilePrivilege	888	Era.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 888 wrote to memory of 1944	888	Era.exe	103
PID 888 wrote to memory of 1944	888	Era.exe	103
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3004	888	Era.exe	105
PID 888 wrote to memory of 3192	888	Era.exe	106
PID 888 wrote to memory of 3192	888	Era.exe	106
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107
PID 888 wrote to memory of 1676	888	Era.exe	107

C:\Users\Admin\AppData\Local\Temp\Era Setup 1.0.106.exe
"C:\Users\Admin\AppData\Local\Temp\Era Setup 1.0.106.exe"
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:3060

C:\Program Files\Era\Era.exe
"C:\Program Files\Era\Era.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:888
- C:\Program Files\Era\binaries\FortniteLauncher.exe
  "C:\Program Files\Era\binaries\FortniteLauncher.exe"
  2⤵
  - Executes dropped EXE
  PID:1944
- C:\Program Files\Era\Era.exe
  "C:\Program Files\Era\Era.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Era" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1952,i,416435071201418230,6671210427713501726,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1944 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3004
- C:\Program Files\Era\Era.exe
  "C:\Program Files\Era\Era.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Era" --field-trial-handle=2400,i,416435071201418230,6671210427713501726,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2292 /prefetch:3
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3192
- C:\Program Files\Era\Era.exe
  "C:\Program Files\Era\Era.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Era" --app-user-model-id=Era --app-path="C:\Program Files\Era\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2688,i,416435071201418230,6671210427713501726,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2684 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1676
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "reg query "HKLM\SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x64" /v "Installed""
  2⤵
  PID:5976
- - C:\Windows\system32\reg.exe
    reg query "HKLM\SOFTWARE\Microsoft\VisualStudio\14.0\VC\Runtimes\x64" /v "Installed"
    3⤵
    PID:6032

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

LICENSE.electron.txt

Path C:\Program Files\Era\LICENSE.electron.txt
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
MD5 SHA1 SHA512

Submit Download

chrome_100_percent.pak

Path C:\Program Files\Era\chrome_100_percent.pak
Size 148KB
SHA256 a659ee9eb38636f85f5336587c578fb29740d3effaff9b92852c8a210e92978c
MD5 83ec43f2af9fc52025f3f807b185d424
SHA1 ea432f7571d89dd43a76d260cb5853cada253aa0
SHA512 6ddca85215bf6f7f9b17c5d52bd7395702515bc2354a8cd8fa6c1ccd7355a23b17828853ceabeef597b5bca11750dc7c9f6ec3c45a33c2106f816fec74963d86
SSDEEP 3072:ez8JCGIdTwTPagr8o9RHi/T9P1L2o418Gb0+VRLf0ld0GY3cQ3ERVm2I:ez81IdT8agr8EC/T95K18Gb0OV8ld0Gq
MD5 SHA1 SHA512 SSDEEP

Submit Download

1c6821f1-0ea6-46bf-a446-295e81e06341.tmp.node

Path C:\Users\Admin\AppData\Local\Temp\1c6821f1-0ea6-46bf-a446-295e81e06341.tmp.node
Size 100KB
SHA256 c5929bdd422d0277427b99b20b6f5f6adeed09a72d58c8399511785a647b005c
MD5 235a20d88e14e066518b5ff6644b258b
SHA1 5cc4870a4432e0c2bfa66bbc4f9cdab9cf329b1d
SHA512 856016b8530ae1b5d651d5e4c3123e5b4f023af436c929512a876a2bc58c15e3cfed7f40b6b907a72a2a7c80bf0d386a8fce9090b73d36fc873420aed63c5376
SSDEEP 3072:Gf0c2iqOi/j0P8AmXW+tD1t9NK7i33Y7aM2WH/C:F/iqPrW8AmGVzf
MD5 SHA1 SHA512 SSDEEP

Submit Download

b1d44fd5-1c48-4c16-a3a2-1165005dcbc3.tmp.node

Path C:\Users\Admin\AppData\Local\Temp\b1d44fd5-1c48-4c16-a3a2-1165005dcbc3.tmp.node
Size 4.6MB
SHA256 3d9f7f668c8d8226d1a6eddab4ece0eb43c58c7e29094ed0c61d9acf6605b719
MD5 c319438eeed81f8f12bcc325252348a4
SHA1 7a8dd7f4433b227dfd67180ae78308f3fe0064c8
SHA512 974cf5a030682a2b51c1d66cc81372654abc5cadb826c74b4a30151adba9981c1b39187bfeff55111347fe2d8a6e999bc57bcb71722e423707bf334b440ce914
SSDEEP 49152:cGtlq03IU6i1VwASOQlzK/zvA4S4yWue6qnE15+LmuLFj0PW12X7jUZc3zCkNRwH:++itKU77SE1M2PW11ZyCUR7OsICy
MD5 SHA1 SHA512 SSDEEP

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\LICENSES.chromium.html
Size 8.7MB
SHA256 0ba4c7b781e9f149195a23d3be0f704945f858a581871a9fedd353f12ce839ca
MD5 6ff57c0aeccdf44c39c95dee9ecea805
SHA1 c76669a1354067a1c3ddbc032e66c323286a8d43
SHA512 d6108e1d1d52aa3199ff051c7b951025dbf51c5cb18e8920304116dcef567367ed682245900fda3ad354c5d50aa5a3c4e6872570a839a3a55d3a9b7579bdfa24
SSDEEP 24576:2o9dQ06p6j6j1WOwRiXjYmfy6k6mjK64jK6gjK6e6cjK6feGjl8PpE:BFOeGT
MD5 SHA1 SHA512 SSDEEP

Submit Download

FortniteLauncher.exe

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\binaries\FortniteLauncher.exe
Size 52KB
SHA256 31eb3c804c7a248fe505d948ad9b3891b6b6f9210bd84aaf0eb716478c490b66
MD5 aeaa6f47b71614437c0d47828da005ca
SHA1 f9d016d3817ebbc28556967b8b8c05d120acbc58
SHA512 6785eb5ae5d6d78a9c2f004ba5c91dd6603fd8efb39cb50f4bc3ac16d7377fb1317ba12658b63d575c17de04696b88c09c8a812340c4c40394196dab99d41a60
SSDEEP 768:XvoQcESFi3EadmMYDH8B85W2Fb9bCm/fOhgrv3B+o:QQ5AijdmMYDo85Wkb9bCm+Wbb
MD5 SHA1 SHA512 SSDEEP

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\chrome_200_percent.pak
Size 223KB
SHA256 2c1b3e4b8a0cf837ae0a390fca54f45d7d22418e040f1dfea979622383acced6
MD5 dc48a33bd20bfc7cacfc925a84b015b6
SHA1 8dfee88fd1dc77f89ad88c19146fe3ab45e43f3c
SHA512 1d54eb5d2ba06af0ba8f6b491b0d43f178a48ac82cdf383beb265e732ddfc06bca9692003fdfce56f7f00af97f29acf046c73b891b8c561610098f9626eaf05a
SSDEEP 6144:coDQYajN6svyA6nI86ur8EC/T9ugx5GMRejnbdZnVE6YoppO4:cVfjN6svyA6D4B79a6edhVELoXO4
MD5 SHA1 SHA512 SSDEEP

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\d3dcompiler_47.dll
Size 4.7MB
SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
MD5 a7b7470c347f84365ffe1b2072b4f95c
SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
MD5 SHA1 SHA512 SSDEEP

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\ffmpeg.dll
Size 2.8MB
SHA256 015c30885776c9fe35242bc7ed612c1a3caaf737c4d3116a443e2c473cd87270
MD5 122ac1450759999a23bb68230770d998
SHA1 72142d71a8fa21e4a54d23fce08d817cfd4c7ed7
SHA512 fa0d26b23c2e1a7395bbe63615b103581c0f1fc7663530e154ab569ca28723303738b8c54c3569f9fc1b1a842064db57cffd95a71cfe711f1b91f6a364d664eb
SSDEEP 49152:o/Prfh/7w2EsYHhrNnpSMGH6qfBvvnIS5ikbUaRkY:o/Pp7wpLBrNnpSF55igA
MD5 SHA1 SHA512 SSDEEP

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\icudtl.dat
Size 10.0MB
SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
MD5 ffd67c1e24cb35dc109a24024b1ba7ec
SHA1 99f545bc396878c7a53e98a79017d9531af7c1f5
SHA512 e1a865e685d2d3bacd0916d4238a79462519d887feb273a251120bb6af2b4481d025f3b21ce9a1a95a49371a0aa3ecf072175ba756974e831dbfde1f0feaeb79
SSDEEP 196608:+SPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2Y6U:++wkpHiXUxY/iJ53IWhlVjEeIZU
MD5 SHA1 SHA512 SSDEEP

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\libEGL.dll
Size 481KB
SHA256 071160c865fac5bc6c232a10b1906cda0c4315fcf8c5349541cc709e9bcf386c
MD5 50e76b71cba1747050f591f60d49a465
SHA1 21d9652102d47bbf818f2a41ebc6e888d88eade9
SHA512 6923968062cee0d1660280fcd386f13c3b5650d49b73dd66f9c6f4634cb6314d2132d47e161671d41dc355c08bdc55dcdb5b9c566b633db52270a293e23dc312
SSDEEP 6144:Auf2dkQcAxA+q6RBo8FrjSUPa87/vmddEnikirIhd2p2:bk6z6RG8Frj9bvyEnikirU1
MD5 SHA1 SHA512 SSDEEP

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\libGLESv2.dll
Size 8.0MB
SHA256 c57cf0d74eddd6324a437d3e210949ae39b15c6f058b0828f3cde07c11b6c52c
MD5 e450b4432235e3ef2ab86f9f12e14680
SHA1 a6e9f17508d126ddbe5d47c7991512c304b35cf5
SHA512 ecaaa302c410ebe004bee4d6c93a7ecdcad3257b126ea2d27aaf4f91708876364ad44877e4b107b2d0b88ae8530a83dd6e9d33bb19606d03ea32d9ebcb93d17c
SSDEEP 49152:a5cuyPXoUUELhguXVfZ7S7LANafEwDpiGCfE9GhGHLYJZk2yGU6reDT8tjDJXMbG:PNES1f2VivcbfZK47NfX436uigE
MD5 SHA1 SHA512 SSDEEP

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\af.pak
Size 520KB
SHA256 c56cb2841ee2e40fbdd6b7e293a1ce74bd10fd500465fcf99d1e07f8d69f8ce7
MD5 fc32a6b72fc91e1be9c2c9d2ea586ec3
SHA1 5d439600cff26476d8715b778881f5735356d723
SHA512 b34c7390d4a15936b1f74f42fa91ccd0ca0587f0dd630096c9a16ec77756e2137d9e49ab1ebbf703c8ce6f56f110d5bb3333b1ebed51779d1bb2460b203a7250
SSDEEP 12288:WEG8+ocurcdy6VGycsaja+H2Jyngae5Ig1eo0vMIlgL2pQ+FXZG2vt2pslFd5/51:WC+ozrc86VZBaja+H2Jyngae5Ig1eo0N
MD5 SHA1 SHA512 SSDEEP

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\am.pak
Size 840KB
SHA256 8f46ccb4459b50fe06c4f825dd42c4d458dcc05df9631fdfb9d5a0926038246e
MD5 873548bf4ab0feadf7c83068036377ca
SHA1 b0b4311d02a1be1933fa90233e436e23da178640
SHA512 0ee9a1046d4fbde5a7caa7d922d3ed910023337d87e727b9a216f07c43f511563b93910e1992b9f8df6dbcf96c7f527451f2ebfa48868724b83297a50f34d202
SSDEEP 24576:odLToH2hTCNRysrxQH9hjN3fpzvh51muMXqVFq+XG/6WxLP5A:e5N
MD5 SHA1 SHA512 SSDEEP

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\ar.pak
Size 921KB
SHA256 e8d59cb109f5f6a923281c619ba1eacbe795c88a3da30c3fcb960a54230627bf
MD5 8d4ab96df9be981c11a48955117463c2
SHA1 338eb5752bdefa22cd0db3853b9a45d5d6bc0d27
SHA512 d7bb3b9b96e5ae4d12d7e937a13ca839232cf06d1f172602fb7a250c9c17d0119c53ca308092c0ef4d0e7a3cd34f5a25ffc1fd54a222304a3a203f0899f122c5
SSDEEP 12288:aJnSBUC/+/RnfESugvPUz6m7kOCSn5KNp5QpnSEUt:wgP5aQ0
MD5 SHA1 SHA512 SSDEEP

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\bg.pak
Size 959KB
SHA256 f08de6909faf88465c28388aa03fdf08e165866a5a23c738ed33382275c4ec83
MD5 d9d3b4d420be9277d69584a3c0b5080a
SHA1 285a094979b739c4455e3790968d33ca4d466146
SHA512 388ca1cc11485fd3d31a7fbf710145cbd480cb386d96cf6dfd83e1ef2f5376df76db5c2cb051c5a045452875f8362890cbc6df547200bec624c9f13636655803
SSDEEP 24576:MhrgWoOYLYyzQkECvUPVbKDks373ZAW3AAK1mVDLpv74umpjd2SI5IxuFsoGQXxQ:+gWoOYLYfYUPVbKDks373ZN3ApmVDLpw
MD5 SHA1 SHA512 SSDEEP

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\bn.pak
Size 1.2MB
SHA256 c48b7423d5638b09860ed1ed4a0741890dc4b3f7c9e682e94867eb8441d196ba
MD5 c798cc5946a04209cb601637fda7e573
SHA1 c4a503fe368980d12e097792fa67b76b5934ade7
SHA512 7ef077cd66508d47ef4f0e5ec98fd3f18469b66fdd468c9f8eb71e1a960042b12ac9f185fbf598544997cbf7dd7de5694c7bfd7f8b9d7d5c267baf81218ccc2b
SSDEEP 3072:LEcoGqGB2le1abaCb6Ew/0WySZISex22f/MHDrYfHBpxspSPrCXqB+iBbHRI8T51:LjJfa56/0zpgpCOXqB+iBbD5YqNn
MD5 SHA1 SHA512 SSDEEP

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\ca.pak
Size 584KB
SHA256 06809011053b482b4830517039057c65021783129cc90b20857141d4f37ce9bb
MD5 f20051b4128957c1637c01ead53b97f2
SHA1 dfa1cb8288e5489f126bb6998581176ac3f296e0
SHA512 d63ab5d8b0641b6eb984fa9162a565bda14692b86b18d69e4b676d6f2e894d2317022d713bc726f94578c9518162479ab68ff6e52f5c60bcee416df79a1b2a18
SSDEEP 12288:BVdZr7D1MeCi24V3Fe5PFFuN3Mw2juwHzejm0t3l3kb7TenzL8wOwjcXR2lxQE8h:BVHRVoiL6MhgMNxgQh5vfScs
MD5 SHA1 SHA512 SSDEEP

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\cs.pak
Size 602KB
SHA256 690f31abc263f7c479531b267909777dcb20c680b3cf7801b287860d2415af3f
MD5 d661bfa360061a0d0f18024cbc00bb6a
SHA1 8603b59dc08b8256b242332effbc0430677aa8d7
SHA512 52c3c82e6f08fe0c2a2cd9b22aa185084d0378f75a6b8bb53d012a1c56a12231540b819724a76ab622a36d9165237299727d1cc0ba49c04c0314ba9bf2ce7e57
SSDEEP 6144:863oqX0g5QkuA9jN85ASh6mARAO52C+wH/NOnbJSBXR8QQ:VYmB85AS0P52C+wH/NObJS+
MD5 SHA1 SHA512 SSDEEP

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\da.pak
Size 545KB
SHA256 e71730c1bfb469f327212f7488c7674e66a59f857a4bdbb8c7736765215e5ffb
MD5 3c8a4730a2d935de6ecf17ad8d782f48
SHA1 f520707cfd5856a8f868099fdb894b41993b1637
SHA512 bc92bf0dc203fe3b65bbbbbacfbf44835d65bf869b91be292a2f196a34f47a253be77f4aa2be8da3103d6e62fef0ad93614ea55d3ad28516372d096c60cb39df
SSDEEP 6144:Hfstn+siRMmQzVmh5OsLZE1seDrcwlQJWJwgKobwmPaHL95bpkUdRi3jd45FQwA:HUZ+ssLArYb55bpfdNm
MD5 SHA1 SHA512 SSDEEP

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\de.pak
Size 582KB
SHA256 be0d49be3b021c0a4d917ad437d8ed817d676c40bca4fc08f2f9a8b2cbe67fc3
MD5 dd811ae7ee2beb54b60246e8dcd3e212
SHA1 967de04b1c9d98e41de4ab1c7f73428a2b14d654
SHA512 970135c8591f33d978bc705724c1ab42ead4050b60bfc5315ea47a9e12ce967f2cf6136f863e772c76ef2550aa36544b5afbaef215acc6cdd547d85cf6ff6faa
SSDEEP 12288:55U5D5nPs3K7UpGg5aL9Xtt5fPMkUz1CTz:5enPs3K7UpGg5aLRf53MtCTz
MD5 SHA1 SHA512 SSDEEP

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\el.pak
Size 1.0MB
SHA256 7e54f3c19a0343435685738d41cbedcba6b1df30f6cc837f0b5c27e0a91e2d84
MD5 444f3f565941ddd5f108f17c3803079b
SHA1 f90d186106f1ad8625257b549dd1d0ebd48b623b
SHA512 d6d9afb0c138cdbf6d5e23d5120b3e953eb1848fa790f481dc92dbfb6b8a084511dee873acc0fdee4188d3a07843635e0231d5a1cf3c3f37545d12e2aa1e0d17
SSDEEP 24576:NvcHcaFbu4FDYX9QnMDhWJXDsS7miHk3D2NpYRDojvmXgVT8y2IWYNQKlCt2rDQ+:NvcHcaFbu4FDYX9QnMDhWJXDsS7miHci
MD5 SHA1 SHA512 SSDEEP

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\en-GB.pak
Size 474KB
SHA256 33132446072ddfd058a395afeec901d7fae18505bb48e271ca870a4435d9e338
MD5 5c61abacfcec504091c0bdd7efe9b4dc
SHA1 fd794fd1ec93028b1cf9ef482b0940f40012a327
SHA512 a9cc6fc1b3ddf941fcfacf3101600cd9e1feb664bda0b0a9f8e5f30ba1db70590dc148fb0b8cb7f5adc8dd3cc1ed65187908463ccb923f53efdc5a1150aba7c1
SSDEEP 6144:Ll+NihP3X267KdFkFufMP9ezQSKrfaYdrcLlY5IPxZBcvRJ+G:Ll+APWc0fMuQSK3Z5MxLG
MD5 SHA1 SHA512 SSDEEP

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\en-US.pak
Size 478KB
SHA256 75db989561e145d0d990c4918502316c77ce66b344d3dce4739e3a6db43fde82
MD5 a99b6152bdeac44148f94394c4149622
SHA1 df7371533e92aa24f48469116d9a8ac73249315e
SHA512 3160b58d10ca147594ff4aca004007d4e6823421be349cfad945c681e220eec7266d88434a4d31c719a346650ac0ed31f1f13fca3e824d81bb65ebb4d21cc2c1
SSDEEP 6144:1kdXRDCEmszpReMP9e0QcD2faYjNCu454ZxDng/t/XFLwB:1sUEmGeM1QcDq+5UxOLwB
MD5 SHA1 SHA512 SSDEEP

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\es-419.pak
Size 575KB
SHA256 0ee595ac6814586b46101e854d01ce6b1076092b07aa2564d6c8adb5d7a082e6
MD5 3b180e08076ae90821f3b305ee5728ec
SHA1 690509fa47f843d443c423e0e9b344e4e15bc995
SHA512 cdb7b852bf9098813b2fba593fbc9dcc8136c1e643300e4117948fd49dc9f9779eaa99571d36722dacf38f9c71709778618ed271aadaeb3c2f75641b56a3f867
SSDEEP 6144:cfKWQ1cE01mlpDYl7G8oZOZ5zazaQ+ax891:cyWQPjpuGS5za9+D1
MD5 SHA1 SHA512 SSDEEP

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\es.pak
Size 575KB
SHA256 31f98fca9ab6837569315fd1baac8fab16c592b03e47d7e1dfe4c16bb3ac2567
MD5 fb43793b61c4a62da84ff340c3a342d7
SHA1 72941c56a2e268ec7262efc92bf3cfe9c06d07ae
SHA512 35572bffc9b113616958f2aa50265417f22c653c97eaabcefad1fe71bcb97b0aef79efbe363f5eaa64571a8d4014c614621f3059ee66bc5f77116b9dedb93e1f
SSDEEP 6144:cLfC370f5SWVIhaJ13K4G0gkjqpT+ZqBQihXFijs5JEf2D//z/h6PZOkx:6K36Vmd4LepVBQiXijs5+2r/Lzk
MD5 SHA1 SHA512 SSDEEP

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\et.pak
Size 523KB
SHA256 9954e80792a5cac7b0a7ae2899b0adaa620af2f3ed2a273ee65b10b22ffa4bbc
MD5 ace748cc20a646162bd473343539d5ce
SHA1 d9aeba3004206b76a1f6b23607281b6484df76d1
SHA512 a9b36941a808c2b93beb1d3cb4d939ce3333f2f42316b9eb47ad31fbce85e789230856e43be1f2660f22677ddbeb192cb492511596ea318a24f158b8c0319571
SSDEEP 6144:HeaF27VNhXV9RAOrs99Z0+I+eL40dmFZxEYTHbtiPSia6OSt75H50MHsjiCKM2a6:HhFEVN5Ge6Z8+wmFZq0SfH50MIW
MD5 SHA1 SHA512 SSDEEP

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\fa.pak
Size 855KB
SHA256 b2d24b4311edd8e0cad01308b6667c8be2fb04ca624666cf0a841e907312b551
MD5 587832600a9d596f526f1edc8b845b55
SHA1 1eab6376bdd341de25a4017a65508eb5e03af5a2
SHA512 1e1a975ffa69f12ec8f88eafc80bb8c6c7838a7be570c3d4fcf471018b2b4d4acb124205f01b06a4755b1224471c34c7b969d93effebdac7dc75912e245dfce9
SSDEEP 24576:U+E+8u313uyqoT+seqyRmX5loTUOmdAQifaQ2XxFMJGk62YhYaiiIQMX4qOwUCqq:m5jv
MD5 SHA1 SHA512 SSDEEP

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\fi.pak
Size 534KB
SHA256 8d62395944362d437fc1bd7810d8fd037afcc2f94f56bfaee4368350c189c106
MD5 b452982f5d1dc232ac8869217348bb74
SHA1 39cfefdce0ad7dbbfd72789eef4835e25d1585f5
SHA512 f053285f4341e92a6b06bc019a90c461cb76281c8c5d6b8024f8c15eaa20ac42ad7409b71178ca0b9cb5adbfac0216d73b9eb63bf8563f1c9f82c1028a5f5c3b
SSDEEP 12288:sXT/419l5MtWuah5EinUtWnSp0WahHNYM:yTiB5E8nRl
MD5 SHA1 SHA512 SSDEEP

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\fil.pak
Size 604KB
SHA256 1a6d121fb42a1b2941f2bc3c11c25e2a7c1e96ed845d08cd5f2370b9d399a0be
MD5 d02d3bb645c67a0a3c12f1d174545b48
SHA1 6e1aa00c0eb20489ab7e518faa43f6d3a99ec8f3
SHA512 5f3ae15a587f7cc2cdb10a4c1535e039517b08d24bcb8acbadbb2d2b9ba8425c26852a82441a9a32d190e4c06fd83c80b8d06d4226ecc49dc77dd77a67ac717d
SSDEEP 6144:fGsxIsSp+ynDQmiSANIhxp3amx5GhV7MQoE8AYzwK:f7ilx5G7s
MD5 SHA1 SHA512 SSDEEP

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\fr.pak
Size 622KB
SHA256 4abf6ce2de7f20ffaeed953b97d364f08324bbc9819d2ae02a4aaadcf9b88cff
MD5 0ee0556f9fd32215ff5a6b64e1a71a59
SHA1 8e1c8774daf341d3b4e541b6bd443f22cb3fbb2e
SHA512 ba7bc3637a57b26e990c4e23f3f4a3337a5566d0bcbb46238e58ef774605ecc58055ce32be01584792d5e0a7986fb59138a690d8bff86cdaee434cc8d97735a8
SSDEEP 12288:1SMTx7ZL85Z4p5ZR6QuaMVq0YzRnP4ZoZCMYnYyGGGDYQzc7IvO8Ixat40wCSsmL:scVYVW45g2
MD5 SHA1 SHA512 SSDEEP

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\gu.pak
Size 1.2MB
SHA256 d0ee25a5a7dee8337b9dd12e65a5910e75c09aed36eb3ade0907de6e14a6d760
MD5 69b8b51ca26d07c798b8216f51e8e8c9
SHA1 a50995b86475799a32ccf48ba92dd736f4175731
SHA512 5be0c2c91fcd5fb4c45ddc57fa2e07a40eafcbc9e1eabd29e59af33b147cad5a7ffecf4c1e9c05b0282c01939bec11b13656a8cb299ce286188e2281f7b08e05
SSDEEP 3072:LtyLn9udlz6IqpIVIwjAwREJKVMjNiT7llj63rFulPCaSi5NAWsWi//GQoy2zb/q:cD9DkCyF5qdhX11oG
MD5 SHA1 SHA512 SSDEEP

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\he.pak
Size 751KB
SHA256 f9e4f3e50d86f0c6fd271caa160675e224adb56a292bf21283733e2066a09995
MD5 3ee6aecc3e7faab761ee57f73852bc2a
SHA1 32374d3e543a57fb7e883b73522314d1958f3401
SHA512 298ffc69605c0bf9bd809fa3dda05769c78eede7e39934d8db71c2362cab07fe361f21de9ab6696cea38399e3f44819ec5a9559151eade82d65a254be8e90270
SSDEEP 12288:i2MtD9IESdhVzCDFVF2TWrqnV3mWqu/rHQxssACnX+8eQCajZ5Q69Zt+yr4w5ONn:i2MF935J+f
MD5 SHA1 SHA512 SSDEEP

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\hi.pak
Size 1.3MB
SHA256 f73ccac3debba20fb225209805ff2383609853111f931e6b82095c1eb56a6ce4
MD5 fa5f71ca9c17172d374d0a2fcfe907eb
SHA1 23abf6f3ead1559632caa31ee351193ef6cb7983
SHA512 06d990747eded7aa09ce13107e44fbdde17e60031191564d51d7e15c6dcc2ed411dd31ed5b343052757fa99ce2969321c61733cfd28c4309f3db97ae4c8e2c87
SSDEEP 3072:69+sMSOGLEyMJLtS4Ba0cVk0G9V/BB0ZV1dKu4lYvD6OEOTByntDPtDlZpfRQhss:6RMTEvMJg4Ba0c60oXp5CKMhqQ
MD5 SHA1 SHA512 SSDEEP

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\hr.pak
Size 581KB
SHA256 3ca8e7eb09aa20845684beefa2351afd4c6ca95bc09ba8bd7a0b629fe8a40565
MD5 51b515fbc314ce3c9bad9c4e64380b7c
SHA1 46ffd2d0f72eb74066139edb79aa9ad55edef6dd
SHA512 97f23db01d5517f5f2dd49bf3d8479ea2f7825a0684fbcf1decee49a136cfc0e933f1dd04d2b21edf2e4a2200ec4a663c38e42e43fa2c1557e709ac010ec8b74
SSDEEP 6144:I44gmOy0YXl+Qv6QyTRw6chThwl57v9YMrbLPDK:IZcucQSFRw6khS5BYAzK
MD5 SHA1 SHA512 SSDEEP

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\hu.pak
Size 625KB
SHA256 ec81ac981af0e962654ad4f65030064a6369dc2316cb1b10bb24b473808ad1e9
MD5 85d8bd3516b1965b153236d86b9bccbc
SHA1 996fa6ae823e72e811311c7f4f4fe76cce686dd6
SHA512 ecaa5210de1b3e389e5c728fead4538deae129339f3aa577aeb231e5fdb6c6615c11fe345753559ff491e63f80eb8390893a3576f3061979ce513a8193c3595e
SSDEEP 6144:oeo/GHgmRXxh1Rd9gHo2pKJDAxukitluTd5kt8zZ9pwJcYNV9SLg+4ev6DbnjDiw:Ho/GBBHAZd5kt8Ex9y+O5LG9b
MD5 SHA1 SHA512 SSDEEP

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\id.pak
Size 516KB
SHA256 84a9b61e27edda9b2998e8c57e5e81bc0c0d47d6988bd3b03959487d2fff4921
MD5 7f8abc55705a2e2561b2b2bb3068f361
SHA1 4f1e68732efc7e3f0f6e01b9e2093c0370ba4955
SHA512 865b7571551e029b066e5db9519aaffd0a611644b860cb249d4344482b2ffd9ca5454b83c5150a9b89d1d8d270e304d848c8a6285f136fdedaa3fc6f54cbc0cc
SSDEEP 6144:MB0vgN7NxNRHOKd/+tQqDHcyef+eVnjHF/TmiZAWO5ABpIOBhUnNiT8kLHp:MB0mnJ/qYy2VnjHFbm8At5ABp9p
MD5 SHA1 SHA512 SSDEEP

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\it.pak
Size 567KB
SHA256 73cd1e113eba841c26e67ea9431b885f7c51fe85d61862b1a766e185accb3e20
MD5 c1b0dcd5078858e58b6bb2dbd387b713
SHA1 291eff6c34726fd1d5ff950de3c55fcdc6b211cc
SHA512 2923967c21594d4a67c5c66e6f380bb4045271a2bb94f02221e63adaf2e352e2c421d7bfd2832c2a5f85c6bead89f30dd22e0a1e2f01ae7bba0e2ea0d6624abc
SSDEEP 6144:Mi/nBHNmhXUerU9ZTx994eN7NgvESIqRRxsO1ytBvWjRT9Tj+rhazYDxrvAqpzSd:Mi/B+fbXlZm128uJekfXEpe5kLISg
MD5 SHA1 SHA512 SSDEEP

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\ja.pak
Size 691KB
SHA256 1dd20f7bd91426229bfb131b575e8154b21e623e3db0162aec26dc67e568584a
MD5 6d6909eb9e119554810ec30769475367
SHA1 f54bf21a6df4cd16ebc4460697f29c6b0406cce0
SHA512 73f32bc9f0fc9cc4c0b06eac9f4eafc8b2fdf424bcac1ec8ec1e78c592c9302f847fcd3c15e52b15150ce8ff48aae503b048f8819062df1a2542a64dd528c9c3
SSDEEP 6144:SCG5Mw7ENPvE7v5DD79ZgQ21XymbA5zFLbbvVt:SrSw7ENPvE7F9ZgQ21Xi5zFLbj
MD5 SHA1 SHA512 SSDEEP

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\kn.pak
Size 1.4MB
SHA256 87ee47c4cec984a995a53ce2ef212539b7adee4a9011775b8699a29164e53c5c
MD5 e0263df94950f8d42a2ab5e966b9fcc6
SHA1 6081b840c5925212c3e298a4d4423138faea117d
SHA512 35f020b541654b3ca776c1151a542cb8f2dcbf565693c313da654708cb502ffe8454e8ec90575fba54081e9b33b4e11d3272e49b37bfae5b76f8c58d8e09a758
SSDEEP 12288:X3jl6ezb4OpsJHVLl6S9Ab745LmWA4hqSm2Z:kbd5qWj
MD5 SHA1 SHA512 SSDEEP

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\ko.pak
Size 585KB
SHA256 1af8aeac229711e127844a71cabcafb29fc752d3d8401f42cd120fce3084744b
MD5 136eec6fcc52d9320760b395ce88bce2
SHA1 1e5390aaf2d771767c955ca141e75f650547603b
SHA512 95f4d062771250f883dd6d42128bd53392ba5390f695a868d11f626688727466ddbec992ee391006779cd56f6116edd88e37ce06dde878d3dcecda188599efdc
SSDEEP 12288:TwAD0v1A/t0ZTvIXzxMSAG0GlzRXhw3zTt8Onat7DXCqYwHs5Ra1i7vlq5zULZK5:Tg75vKLCWj
MD5 SHA1 SHA512 SSDEEP

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\lt.pak
Size 629KB
SHA256 b31b65e81db7f1f3daffac67b6436039ead2545f02c428e60ab755aa2630285f
MD5 f17350067d1481437bb09810f7df062e
SHA1 b2fadff14a973ea17a8b1b9462ac989059e05ba4
SHA512 b1463705e672b54cd9dea76756ae3357c1750d9e2fdad0dfa1799c896417637557f0269f830dad73c4be4cee3564a4021d70bd692345ebacdc6dd9733df46a8d
SSDEEP 12288:kjFt+07S0MAcrMqecJwuxZ5b7MjC3jqt6S0M:WFQ0JMnrLZ5sjIjqN
MD5 SHA1 SHA512 SSDEEP

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\lv.pak
Size 628KB
SHA256 614e634224d32e39e9a79679d915ce402a6d0106bee37d39930884f9f6e3e01c
MD5 157d4757176a12671e1ead17e4fc2c1e
SHA1 ba783cbe4a80d91f5331cf8c39637530caf3ee45
SHA512 fe55263345e043f9a1042b81df6e5b04698ddf00b462ac51dff7b3b6e73285315824d63e68a28b5ca236e211e6e04432153051e535315fe7ccd03d9848e02480
SSDEEP 6144:Uz9waCt7e5ov28mvsf4xN3tVF89voxEJiiLh/7bOEw5hp1UgFeTE/CoCKbnh2DeS:UbKvNMEpFOEw5pFeTunbf35S
MD5 SHA1 SHA512 SSDEEP

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\ml.pak
Size 1.4MB
SHA256 f003a5671d619e6ed42370e70d943ee276012246dfe99310366bc3a70484307a
MD5 8ef6f88631246b1b0eac82e2d8329d20
SHA1 346584aed03dd416fd4f81e3ed6c33004b5efd35
SHA512 83cc553d2238b83170054d13fa3bdfba400fa9d55f256f53529b89d69e0370e0c0f9a93ab0ac10592e0d8cc64a3b6f4bed9753e0440fdc0d35d79dc0f8c1733a
SSDEEP 12288:gtUOGV+75aWEyghv479y6DPnXKfhBP1zXnxooG98MF3e7hDK5V6jX9fb3VV:gtu+mGKfhBP1zX23F3ek5V6jX9D3j
MD5 SHA1 SHA512 SSDEEP

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\mr.pak
Size 1.2MB
SHA256 0e65a4f22a6a52369f948526d5a3ee3c9bbc99ae23e0b2c414b376ba23c2d411
MD5 7d2a82ce8f0f601cac213b692484db4d
SHA1 fc90ec9c5e3ced11f0ea18eaad949384b3cdb321
SHA512 bce9b80a8ad088af4d480e1beae9d8123cd7772ec0211041b8b537e18757e32ee6446005974596a92b2e7e1cf922d440a926c68c760d06326319107f538a7684
SSDEEP 3072:gOG1c9CX6VI4rB1miMpvVL8lownlWGrInbizwF/yGRu3RxYR3GodgEWYJrOznup6:fG0m4HwcasmKZKbzNvfq1E5imHRen
MD5 SHA1 SHA512 SSDEEP

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\ms.pak
Size 541KB
SHA256 ce4b0390f707e3ec3bcbefc11cb7b6b914af50d89b950e16704dfb6d13f0fca2
MD5 9e6eaf18a4406adf701388f8a1a43bb3
SHA1 fa06d4903ad23d67b9b55a54e76b852d2091389e
SHA512 f14c00aeed38c9abd356805830279e64c35cae07fd70c8d1b33f1f39a5e989785fe78b100e30629a74eea2f208370b1ea1f6319351df4a6e583e5f0c0b91e384
SSDEEP 6144:1fZuPdEaPHfvDKUaxe+2cgFRlWWNxTUcWR95bxlqyGkuBm9ch:xg9HDsxd2hlWEG95vFG3
MD5 SHA1 SHA512 SSDEEP

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\nb.pak
Size 525KB
SHA256 697882ac2da78894e449cb1f75da43e7115c2481bbd2fee3bdaa425e82fc232c
MD5 84bb0f7aec428dc3d18aaa5d95d649f5
SHA1 090a7a274f885c7a31c6872ca353000e6e7276b7
SHA512 5e92c748bb0b0f8e9605a5e851fe4441399d3cdf12192339c5ed6b707cc7d0b3d7a0131add9baf7d7a83abb895a415f93bf2472009bec423d1ed6c59c3e7254b
SSDEEP 12288:ruVkaF73k4oOp7fBpHXYbhOs5wk+bhPLgg5t:MkaRk01YbhOs5f+bFUG
MD5 SHA1 SHA512 SSDEEP

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\nl.pak
Size 543KB
SHA256 68d981bd2119d714fbc4ba22ea2d2a0b3d9e127da7060d3bd02bd1fb5e895a43
MD5 e0926abe13ae64ee311d61621cffba0e
SHA1 667307630e89f42838f8a644cce5c4ee3745035f
SHA512 0be1820ec3d592af20f884fe9a9411209f5eeedd656873c2304a3ae709c08cf5b724082810cfc9c7017248228400f4e55cbbb80592e51f897add2e44d6322bbc
SSDEEP 12288:j8uP9HylbJ9WQusFUdFgN5tmjdx5btfmzaWDZqqn9pmTy:LPUlbJ9WQusFUu5tmjdx5bFmzaWVqqn1
MD5 SHA1 SHA512 SSDEEP

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\pl.pak
Size 604KB
SHA256 2ab697892ed2186bde0cfa3ed27857f850a73b195529f5a4f5a9658de188ef6a
MD5 2fa7348a1a79d06a0e19954504752a69
SHA1 6c6108d36c9ec617e467a60d3025803e52ecb3ac
SHA512 3ee745fa39164ae8d08a531664d0f3d48b42bdf0a4e75542ba18f850ad2c087c7153592fdd588a0fcf9c3131320603441a3de45170d5b12d64d8d39db0c3c6c6
SSDEEP 12288:ziKEE6WoOB/ktv/XfQfuzSJY9HQbyDPSCUd4e3m7UAMgmx1QhH1b5FuH4VZy:VmxnMJ1Qh15w
MD5 SHA1 SHA512 SSDEEP

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\pt-BR.pak
Size 568KB
SHA256 5a496e969e72eebbd4d4757923c8c47f15ca3aff2a5f9cd3147ff9fdf7f9baa3
MD5 fed7836f880f10063c82a7535904d132
SHA1 6f7415bae68ce0177505451684bf64f40dbe9d3f
SHA512 f63f431416f73b1b570e1ac1e6067d5d64fd729bdba49655c01f28a40ff36d2227ccdef610b8beeb52a0e9c911b7880304ae26c798d92c1e6846b46a3cf6f34d
SSDEEP 6144:mHM4QhMCJisw0NBXBLGfs9y+z5GH8XuH0msRgMpI2:CchHiswI5tXIsR9pN
MD5 SHA1 SHA512 SSDEEP

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\pt-PT.pak
Size 571KB
SHA256 9ebafb943bf20c66f8d9ca533633fdc63519e8ad38d78a3dd28b4457c38ba79d
MD5 75a31e0fb6cd1d9725ac06a0aa3571f0
SHA1 c72a670a4ad9ae358acc58b6a0e9c0cebe5260a9
SHA512 1aa5874cb6ad6da85b3cd36787d6783f27a8f6a0a17b7bae1e1fc1749b385d76cd899f95ba1b3900e80113d176b011e659b8ecc17e0a721db2d357f7cf1febb1
SSDEEP 6144:Edk/CJfjRJ97ieJVJJxhbHMm1wfBCV5z6jPdoSR7oF:6kQRM+V5+jPSSR7Y
MD5 SHA1 SHA512 SSDEEP

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\ro.pak
Size 592KB
SHA256 cb60090b451122165bb41abc238318474c4e86a545eef28ae2790c310c7d0050
MD5 f9f4dbbf7ef8b266c557230667da57df
SHA1 375b4cb7b9decdf88d9604defd0ec2bb71976a44
SHA512 e667cb46fa9ad15abeec1fc30718bb21832233dab257491827b70bc136162314ed5f51ce5debbdba80ae7183114d297c3e5220d4824efe4a33baea237de63a1d
SSDEEP 6144:kxrPki8XWrfGENd49ow6q0gdKXKkQGXq5e3jUZGs2hj/Xrbf:CrSXWr3Nu9o7qHKasq5ezUuj/3f
MD5 SHA1 SHA512 SSDEEP

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\ru.pak
Size 972KB
SHA256 53ced8c091b6745d06d6fe06ea3e9b6824256cd279a45c6ade419ba1c9d547ef
MD5 0a6433f5a21736c5f764bd09125493bb
SHA1 d6138d087ba165f5166e550578c33a8242753d3c
SHA512 3d939f38baa94d40a51b7056d81fc05c8180846f911768432e5044f235c5bed93f209adfeb4bce6e9e085fca00efcb7191ef1d22860fe48c7ec1fb6d4e2f0ec6
SSDEEP 12288:W+uapfQjRo4YS9PAY+zJ9LF1WAati/16HzW/yqSvDsNL4kXew+YHVeXN2hVO3j/o:WrU5H3O8
MD5 SHA1 SHA512 SSDEEP

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\sk.pak
Size 611KB
SHA256 2f09ff1b8f02f735511f1ac1ecae5a3e88cd7fe16c58cee38beea5aba7fb83c9
MD5 4a1099074ddf127479370924850f9596
SHA1 b638f9d506d05151148334a8c6a564f3b589349d
SHA512 2f1bb9fc1aecd7ed5f3ca217a5bcd3482c699c785604492471e8eb8e2d233bee3494224fa659a9fc7e7bab5fbd9a235db24a7b3e493b9e942de28840560d1131
SSDEEP 12288:6fK4vsktDh40i/igVQm5611wYZLtWTjsxt9Wl:6K8xjib5ewsPtIl
MD5 SHA1 SHA512 SSDEEP

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\sl.pak
Size 587KB
SHA256 70457f29ed3790557ef4c9792620c499a9e6134e004c5034586fadef5a833f6b
MD5 e1fe6b616d7c2149ed10303a0e1b2397
SHA1 d115e509b608a11bd0f7ce7420803efb19acfc48
SHA512 780567ffca7c960a9a58e78b755f2cd334d4b1869c523621d8d36495e83be77ebdbfb90faa2fb99bf62544343d83db1f618989425d6edf4d8b8dc19debb70bdb
SSDEEP 12288:mZQlfcB2z/i1SE5vqfCWJU171i/fzSjqc:m+lBWSE5vqfmi/fzSl
MD5 SHA1 SHA512 SSDEEP

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\sr.pak
Size 903KB
SHA256 7f3c729230ef2ed709c17bcdff781ec4aa5921334ccedda148df0027544094dd
MD5 f18b138f89861aba4e85dfa74cbe2ee7
SHA1 a86c210ab3e972578cff3755a1ad1df9116d87da
SHA512 f4f80ccb74e49b0338b2d0b9db7add3bf03b85b47119bb44a84697aa08a0081b4a6cb61fe970719268c3e9c6fb32a2cf21ec7c34ee12deeb3a1d982b3485bb99
SSDEEP 12288:nP3ydDt2p7UinNLQIlApSld7vwFi4CBaAwN5YvTEquCxa4F37nyIzy/k/S:P3GwdfWX5suBr
MD5 SHA1 SHA512 SSDEEP

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\sv.pak
Size 528KB
SHA256 7fd305f5ec9ac220d6ba7eefe49686ee02a574146ad023c99ea5c364780e79ab
MD5 7fbb29177d899c484cab464442e57521
SHA1 2e3a42786109d84fd2b8388e9abb1ec4993477f3
SHA512 88738d0f652cc41c32e1018378252c8370ba9d9bfdbe5122380f9c1fc05bf6a437ffd3e562216f281d628294d9eee74c4f10819ebfe7c2b6de04ea2ca7ddb280
SSDEEP 6144:MnZyPzwENByftoSM1Q0Z4IooOVChcxorsl6hI+vRFcz5RtGl2KYF4bkvMrOSOgft:i8U2yfn0Z4+hJW5krMoMo
MD5 SHA1 SHA512 SSDEEP

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\sw.pak
Size 557KB
SHA256 434879a83079fba562af9dac928ad2fcc1033e0a6a5a1f4822d36e710decdd2b
MD5 af1fb718bfb3484f5df40300b777e399
SHA1 ccfb3f58a16388448bc9707e7e5cf79a6cf3a838
SHA512 7666c6aefcf9a7c266e3b2a0144ccd77448ce09d6b7fd2d863d9ff12689e393b5733b2dd577db853a0775935f176cc1f6ea3e804b11db14b831271af4d6f0aee
SSDEEP 12288:EvzoOr9Cpdjcu25KmedqrCBfRdpG5PbQW49qx2FRyl+Y4jNUkCarOg6jP5AuNskZ:Evkyv15zsI
MD5 SHA1 SHA512 SSDEEP

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\ta.pak
Size 1.4MB
SHA256 8c3e1b39555fd7852eefdbf8e0d32843605e5b5c3b6770d573a89dbec7cdeb85
MD5 7b03d2e9dcd91caa8fcd7c38475eb1e0
SHA1 6a4e53a3f995afd5af8b845850b2f100fb355281
SHA512 1883c030690e962833cbe5f7a68a870577d47ebe5018035153edd365889722d0d4654be384b6be48cdfdd229d992c45b73304b1ca8333dde212abf15a2d3de94
SSDEEP 3072:eO7hLhGq5MLs32+LCraKa1i55G62sRtRdutm1vYpiMy+:rdLhGoC+e2D1i554sRtRdutm1vYpiMy+
MD5 SHA1 SHA512 SSDEEP

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\te.pak
Size 1.3MB
SHA256 513a1db6caa7f4e454ddc0cba87494f5adb754f437019696a991d228ebbbe945
MD5 466338a39904d7758bab24cfb55c61d4
SHA1 1f147e8ccadd1e40a91752542b80cf59fa6a19e7
SHA512 d6e935b1595d6ee595db5b9c690f69f9daaf44cbd9614716846abf753726cfeeee8415dec41ff184d3f0cd17548f09696a2f832bedf432dc7da515e15c9cb28b
SSDEEP 12288:1/Tiy7McKNW0yR5D7FgpC8ybtKRT5sbvkW3p/8WffhBc3p1FPntTitlF2iDk7Pgm:1/OI5RNH3y
MD5 SHA1 SHA512 SSDEEP

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\th.pak
Size 1.1MB
SHA256 6605217a533a0d0a9060dbd94ab3027762b21cb29c3bf1d2247ca4459d288bb9
MD5 631edf43bb77d016f4ae0be9e979ffb5
SHA1 597783295612e603917ea0b981105267cd902da9
SHA512 26f9150757fd6b863e837d1c83c9548b372ee05969999ef4316a538d1bacbe342e5ca908609acae1cb2c277314aeee26567177470c11f4cc1a883c55e0feca7e
SSDEEP 12288:O80Z0XXN9LyZYAPTKznL/4svUSynUGevuB5Uz0dNL3fRj8NRU+wunRUdGILV+w1Q:OP0a5ANf
MD5 SHA1 SHA512 SSDEEP

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\tr.pak
Size 567KB
SHA256 f2ca71fed0f1c1d8f081adf740e5a04927890ff35dccde1fb2253479b927f93f
MD5 4b2ae4045996e28aa7dc340d8ee70672
SHA1 b943ee6fb376df266d8a0d0e8d6bacb337190dfb
SHA512 5703645908eafab11503593f4a3b7f3bb278422f32608429cd98b28c5708d2656bf9042f41b3a70afbd7dcd962a7cab0476308abaa987e395270ccf11ba64ba4
SSDEEP 12288:A9d79N/9/UHzNsgkDQqZFtQSJ8kJ5MLJy:09Zb8kJ50Jy
MD5 SHA1 SHA512 SSDEEP

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\uk.pak
Size 973KB
SHA256 843c206ad3fdd6a34d083ae3f969ef58bf3c087dcba31af6126ffe46b2726511
MD5 7a639846a33339b486f485df1706f3ca
SHA1 eccf7589474b7da80cba4670fef45103b6770ef7
SHA512 32fe2d71233d300fa3054e631234194429a7c80bea879f342ea4ee67b7bc514f697fa618deb8ed456c0a9a099af1d17811e621a359e66d4469229c95c8bfd39e
SSDEEP 12288:1xJLTABEpt2I9FGGHWY9TddsSr+whF5gZrZ+dIIXgOb5YB3Ijwl2Ab+rUcauHLNq:3RAypAI9tn75Brm
MD5 SHA1 SHA512 SSDEEP

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\ur.pak
Size 850KB
SHA256 1929f3c85e550ccca9985cef47be30b690a701cbca70345baa0c2aaee99809f6
MD5 e63b8cf9588245f579fccb8dae57daa4
SHA1 8638a0b0bcdfdc973b6491f9bdaaf2ecf9c6ac94
SHA512 e7e3ef949b4917f929536f094884149e27d98a13d90a00d81f1fd0e2a67408839705bdd718e17da6e1228dbe20d63746d7078ca15d2f59a8a37310f1972c04f6
SSDEEP 12288:wtiyilnG/Xo458PMzCR4FXdQLN9AyTibR45GO6EhTCWORJlbQYrMYVwadcJKwURn:VyieKT5/Cgu
MD5 SHA1 SHA512 SSDEEP

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\vi.pak
Size 673KB
SHA256 590c7c9bcceb61c96b24bcfbacc2b77b02a643e028c838abbdac7327a53d63b0
MD5 7e8b63ac1207caca4892722737568983
SHA1 81d8aaf528146b58e69635db579ff62c9560c9e2
SHA512 5ecda016a2ca9c4fb72bdf63cc145c580bb67489f1383ad51046e68b55e1fb39c0dde084ca43080112cda71f2847e9060ff2f5ab590365f08211dfc450b87468
SSDEEP 12288:32HxPY+cGZoEK9VaZLsFK0FnxBxJbTsIxvx5a8h/+cDNUOnmzi0HRva8Z1lc:1+cG6V4sE0RxHZH5a89+yiOnwi01a8ZE
MD5 SHA1 SHA512 SSDEEP

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\zh-CN.pak
Size 484KB
SHA256 a9d2faa4ed07828e9939854a1ae09f3b42eac956abaa75af66c37dd923b191c2
MD5 6f713d7bf5fe896f7bfb8f224d5e9fef
SHA1 6fb7c002cee17130c7e429b446ab84c1029b2120
SHA512 0a692e643dd687f787f8681adc6a4dd55d0cac68b8ca640072ca5bdf897a816553f8fae7d9ae674053051001bf0471a762807d6135e2d13c79052a7319e22619
SSDEEP 6144:7Ol06NkCyyFF7puTIzL1EM7i56pz2dHy1t59/o3/4oT2Paq8lc:7OJNkc7puUzLe956pz2dH05xov4oTUV
MD5 SHA1 SHA512 SSDEEP

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\locales\zh-TW.pak
Size 479KB
SHA256 965a32f56caabad66615659a0d79e0a4eb7a60c6e5cd8dc784fd7a1f95e80a0d
MD5 71fb2e4270d6f3a1f04669e019f33764
SHA1 e9f6ed29af9daf900431480cb8a17a1ee852459d
SHA512 39b7434dcab722bfb14387f477990ddb2e13113f2065a047b5249dc075e98775d1868cee30032c612b5aff1b5bdc05192bc859f2c11e3e9cb89e4e694ce60322
SSDEEP 6144:IpP3cuA6WNemy5JSFW2uHu4u0cU52UznMi4LnKeze9Tk:qNWgmfWzu0cU52UznUeC
MD5 SHA1 SHA512 SSDEEP

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources.pak
Size 5.5MB
SHA256 e52ff4895aa4e1dc82462cdeeb0bcb1d89fc481bf82e8c604d0d0bd383ac3ec8
MD5 22729a6f12bff0fec1f416b52291e22c
SHA1 851e4f5bd748f8e7f726314f9df6fbcfe797d7bd
SHA512 da88f1ef938f87ad8ade5c71df828521c06c5057a020c6aff4074dbe33ddf72e2ef79f36d1cf92807796d8e0f4093bbb1676225e28155a9e02a55f27cf664da4
SSDEEP 98304:QGZOyi6+Ykrht455GGPeenn0KJ00LEpxIvMi8rwrGU3nAabpdkmYAzFKwR4:QsnilYkrP455GGHnZEXU8kr1Xddf1FvG
MD5 SHA1 SHA512 SSDEEP

Submit Download

app-update.yml

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app-update.yml
Size 169B
SHA256 7c31e77f83dffe9224573b12be86a166450b64f057b0d1a439d3771ec1eb1edf
MD5 acaf467ebdc18681f30a7ffe57913e2a
SHA1 d84653d3f3b850787d9fedfeab1771d0de716b08
SHA512 eae63c9a241c2fcf4442388602a0e50e1d9078ccc7287e8f31ce90830a169025a60f03be88968486926f3a4207ccbd28b04b03dcaec9b1889dda66315f17b60f
MD5 SHA1 SHA512

Submit Download

sentry-cli.exe

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\node_modules\@sentry\cli-win32-x64\bin\sentry-cli.exe
Size 8.4MB
SHA256 afbcd1d671e55c567212f1ded3870fee4d5ca4624fd1016d4f615c8775db48f7
MD5 da814af1129166350db6fa57d4412756
SHA1 b6a0d759eae3260339b0618518bf511a691d71fe
SHA512 536781b6ddaeddceea0e75d93e07097c1930c308688886c263197ce67d2037303e06a35ae5e35fbac84edf1f2e9a963551660037f25d204011e99623d0bdf4ce
SSDEEP 98304:1Mq3kiKVXD85sItza4CisgwXylQ0z2rjLQ9JOwzhv7QGEVDeoWnOU:h8NSsGaYFz2rjLQDz9sGEkZr
MD5 SHA1 SHA512 SSDEEP

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\@sentry\cli\node_modules\@sentry\cli-win32-x64\package.json
Size 365B
SHA256 78038097ae27d336e9acb79ea69a9603fabe3774ca191b711f1b7307389bd362
MD5 890e7e106024153e9438d21f6d36c967
SHA1 cb9eb8d2b86fd9a47c6d1ad5c5315e66c7f8ac9e
SHA512 01820f88ac9edd10ba9a634fa04075e36daed6725993ecbbbb644c33c5697cf7990bce1d2901277a5e7c5ba0b7555fe95a2ab47c0fc1bb7cfa63447e8459bbd9
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\bin\win32-x64-130\register-scheme.node
Size 131KB
SHA256 9a458ead35e8b20a70517fbfa9c9442fe4b357f186e5c5ff7f57252c60f5efb5
MD5 3db7e2066a369ec7570c1aa34658df56
SHA1 bd0ce05815db3a8d0e09b5b60866243871b746c0
SHA512 a37bcf99375bce460eb458365c72b9658617a5a7852b41e217461427b3b59ab1de3334bc3711654789f88924d8f59adfb4fb8da5ab1fdefe28df9703fbac6c2f
SSDEEP 3072:a/xHNMR+73ZNNoNlfCY+pFZ7ncxImp/NiTnWv1P5TXr:asR+9joGnpTcxImp/NiedX
MD5 SHA1 SHA512 SSDEEP

Submit Download

nothing.lib

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\nothing.lib
Size 91KB
SHA256 9bb7fbf77d29e8ef8b797e8eb8468ede8bf0792ec136d6c104f399f56668c3fd
MD5 711dec7fcf9d7fb797bf84e79542e42e
SHA1 a97b1c540d44f2d129c7bd32d8f5912c596799a2
SHA512 9ecf5bd4742a5e0753b8e3ada4f57ce425f55249a70218f1431854a4899b3e382a112ef951da32a76e09c6ec9b144c4e0ca77bdcb4e6fc5a8e98201a42e3dcf4
SSDEEP 768:KktcHUFVEyjPhrbISg7QDmkl9gjjO3zgUiFt/ycFA0voGaEHjNxortqtHG39+i6c:KkyHUVzhfILkl9aO3zgUytqcdNveark7
MD5 SHA1 SHA512 SSDEEP

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register-protocol-handler.node.recipe
Size 373B
SHA256 cc104e2c832f6c731d796fcee368d3b1b754e6703c665b3d3eb98e301087cad7
MD5 bb09751c0255693aa21913487484cca3
SHA1 367931e97b65a3c30e75ea2ca3decf433ec4ed88
SHA512 ff20ec3b7fc32ddf26f02a199fcf44b30bf72cc904174068cda1e0832594a58ec5fbd4071dd0fcbfd8d3188dbab27af24508eb5cbc1acc0082f1c8185e3dd674
MD5 SHA1 SHA512

Submit Download

CL.command.1.tlog

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.215D9D61.tlog\CL.command.1.tlog
Size 9KB
SHA256 43ec3dc409822552e08c92bee73bbd7f1822a86ac7eff2e258a38c5d104a2ce1
MD5 481cb5a306fd711e980d61b4ddd2b794
SHA1 7e0fcfb379c63fbaba56831732b88db7643ebdf3
SHA512 f6fca86cdc5cea1ec5cc95c6452c3175a0be0d0fd1f8374c974ddd790d0bb156f0cba3627e7319f3d1b87f2c0ebdb776e9a64034d0d20b4bc0ee074274fcc0cb
SSDEEP 192:7hYhM4W969Ciq9khjh3hM4W969wiq9khUhrvhM4W969Diq9khrX:76+ICiP1h+IwiPu9v+IDiP9X
MD5 SHA1 SHA512 SSDEEP

Submit Download

CL.read.1.tlog

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.215D9D61.tlog\CL.read.1.tlog
Size 50KB
SHA256 056f662dfe441d08c823adea1c10ba49c82662e7fad2a28999529e03e715b1fe
MD5 f9b92020b8f64d90df59e6b7f31006ae
SHA1 b4ba37bbb78486359bcc781a4a7bbbbbb7119adf
SHA512 203b345ee9089ddf46971ec7155425e650d8347e3c1b27d0b11919e14ff6279a71ed172c2ff6b936d8f868d54e51f3db92f70a028a7fde0ba7b17abaafe1b04f
SSDEEP 384:7dg+OjFCrq4gnjDrzxzgfC9GgRtDrzxzgfM:Yjd6fC6fM
MD5 SHA1 SHA512 SSDEEP

Submit Download

CL.write.1.tlog

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.215D9D61.tlog\CL.write.1.tlog
Size 1KB
SHA256 3bb16599db7c05a5f928a71736c1e63eeebf28248bf48c17826199894ab67f7e
MD5 ffd03c85039700df9ca69e6eb7f7beb7
SHA1 1eb9fdfba6fa5eb117584b3d1a414c8f3aeaabe3
SHA512 72d9d4d5ebef1708e7ddb7d7a63f916f8246092c70ec729c90cdfbc9049685ba973e1121636102ebfdb0f35d9bf32a16b56c21a93c6cb9a728bfc5b265156333
MD5 SHA1 SHA512

Submit Download

link.command.1.tlog

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.215D9D61.tlog\link.command.1.tlog
Size 3KB
SHA256 2ef15d6fb2a5f97edc3a83f2720fd71b8baace18c54b5892a30e25fb8dde0e7b
MD5 a938bf2f60abf5d77ac2f9d016a031e3
SHA1 ee6acfba91087a16a50c641d1f040f9a0cb49d80
SHA512 1ec0708c8b78fdce34129d3cafef8178bb0ab2f30a065cc7d7210f05a4086dd175ceabcad7b44094ee0c7313c4817c6c7530bf6d679c997e94c49af6fe4c5d8a
MD5 SHA1 SHA512

Submit Download

link.read.1.tlog

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.215D9D61.tlog\link.read.1.tlog
Size 6KB
SHA256 9b9fad58d266445eba8e477eb62693893e2acddbce8939c7602250f3c5ec684d
MD5 153798fea955e55681e500076df4efb1
SHA1 91b3e5373cbfd6c5e576705e35fc7d6062a54578
SHA512 724ea2c586285d2c86749aecb4635a4a6114250b816e923a3c7038fefd0fa337a900abf1de4055f32ec0fc7c726f6cc5dcd3a39a4262382e16e2abdb6280f195
SSDEEP 96:7hDBhDgQS7hDgQQ7hDgQKJgtwpVN9Ylt9fGyhDgQKPhDgQThDgQlhDk7RrmL2Euy:7hthhS7hhQ7hhKKXhhKPhhThhlhgEVnD
MD5 SHA1 SHA512 SSDEEP

Submit Download

link.write.1.tlog

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.215D9D61.tlog\link.write.1.tlog
Size 1KB
SHA256 7dfa9b290fe7553fc6fd08616acfcefdfb38d3e93a1e12150b4da6f00f46a742
MD5 0e46e0b4befe3709a5ed1df47221cce4
SHA1 457cbc8a786e9352a53b4ba8b76912a4176866c6
SHA512 fcddea7eb094bebe99b67c6426c84db6c4166d28d6b6cdacd962fe4ac87c20cb9908712d9b4033d1beb5160fc1fc1368703c965463728cae22667f46494caca6
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.215D9D61.tlog\register-protocol-handler.lastbuildstate
Size 248B
SHA256 1936d4baf4ca8d9da86a602afc55b7d9a8c1453f73eba7f8c967852e5efdc331
MD5 96c73bcf6d183f84aef93f3125c5013f
SHA1 5984b1a653b1ee07f0cbe31ffa23695c6251883b
SHA512 bda37f37a0f6bcdc9003ed49004f4e00d63a7a85ef771a4ac5a17e4a1a118ea9724fb3c9d06aae36f968d7e4f9c04d7e487b0874618e88914d0bc3d19b2b5d92
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\register.215D9D61.tlog\register-protocol-handler.write.1u.tlog
Size 1KB
SHA256 54443b6ae155e249d4be89960b7d1191f418f5f78fa2a7e884bb5a6af0cf4126
MD5 1a4e87ccbd5529da0666a77a3c33e55e
SHA1 c270825d365dfe5b72cfefa48768c11030ca3fed
SHA512 fe45d8526064e667fa723e5b4a4764e7c2cb96584afe8d3423ecdc3cecb2355bf8a8b0b7c9f23a56463305df693a8f98b75ee358335d285a85ffbe9f10ca6529
MD5 SHA1 SHA512

Submit Download

vcpkg.applocal.log

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\obj\register-protocol-handler\vcpkg.applocal.log
Size 5B
SHA256 f01a374e9c81e3db89b3a42940c4d6a5447684986a1296e42bf13f196eed6295
MD5 3bab25a3e651a9e4a00473d2257b99f9
SHA1 1419458f2696be8daeade77ddad380cd0c871fdb
SHA512 ae8dc1129b7a81ba70c9512a94a3e9ccd8c159f1817e309198c2babaf5bcb3f7e97f43b54ea4937cbea468bb5a62328fc0c01982aa1b883d8fd6d2e2c58090ff
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\register-protocol-handler.exp
Size 1KB
SHA256 6691cdb62aa569d49637e7b6533d8557b2f2d365a2f9355241ccf131ae5783ca
MD5 eb16b61a6014484f4d8aa5c3b8b680fa
SHA1 deca7b8a83c587ea3cc918154b055bd1d2bdd2d1
SHA512 980f996a6a133fc35d2ed3514d8facab72bfccbe8f138a7250a6c8bbaed3b37a3f49144eba1d303baecdf269f260827ae49e14bd25c042bb7090066e475f7ac0
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\register-protocol-handler.iobj
Size 347KB
SHA256 907b05adf7b9fc39ccf31b5fec234b96e3fc4b214cbc74910914482fe251efc8
MD5 909025f1b85496a52609c511e6d527e7
SHA1 fb07b320057fb50af1b79cb7fd5d0b549c6f2a96
SHA512 ac94a55e192fe4bb3afd9665e182ad4bbf0cd2123967de8bbd0db1f85d0594b7efb870eeec4a68a2cfa219e4c211ab29026d03c12ad7e6596c462903ae0577f1
SSDEEP 6144:XES7Faujq5/jHd1h3Sci1CqZz7lFq83c+MvXg9:Jaujq51SXZz7Bc+MvXg9
MD5 SHA1 SHA512 SSDEEP

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\register-protocol-handler.ipdb
Size 97KB
SHA256 5ebc6cd60dcbfc9563a922d6993a736a79b04a9ffa0386b3f7cac87f873eded8
MD5 b9567f3de5493f18bd6eb2006116db55
SHA1 a3a2f093f783b59878803f6c40e1828800b3cefa
SHA512 727276ad5acec9243ba852568478df6a29ec07cf73c96e3cbab847cc8fbd6ea7547225669ae12df26150ba6c4c94b7446db232022aff7e08f4206a79d3994163
SSDEEP 768:QaAYhzZtHZS9/RTQi47EaI9uJmmsJunc/NxlV2pDn:QaAYlQ1dyNnfT
MD5 SHA1 SHA512 SSDEEP

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\Release\register-protocol-handler.lib
Size 2KB
SHA256 1295ee726b53e080cea6d0f7d7758177bca1b46b4393592c902f195b472ddc4d
MD5 b31c77f32dcc43c23b70cbcb20225350
SHA1 1d2febfa3216c2541c4d58c5f50e29d227982707
SHA512 9b7603a5fcd8f7099e55e80c7894083645a2ea8a061c5bcfbad4f2509a11b96b65ac5b60cb822a2d69b90e98a6c5fe7788b8ce8fde225aeb739bbd1ceb798d01
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\register-protocol-handler.vcxproj
Size 12KB
SHA256 aebd5fb504b76626fc465c924c1ccdf60a650e7b82d5c876df39fe671f42fb0d
MD5 9582e05f80eaf9cb8e7622274052cbce
SHA1 e14d573e0d97adb2b20c63180c36f42694bf99ca
SHA512 678ffd227c31f23f066f54e732139e24b3bdb24fd40f1e61d4a4ff58d33c140f6a844164044c1c69f97c638013a034824537f71c5744fff666117c24d2c95437
SSDEEP 192:4S79wWPGK9dF14wkW49HWAz97F14wkW49TbxuO:4MwwdB49fHv5b49fpuO
MD5 SHA1 SHA512 SSDEEP

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\build\register-protocol-handler.vcxproj.filters
Size 3KB
SHA256 e6a40859d47c96d18e7d85ffc8ddae6617e5b96c54fa82f9a5780e9f5345953f
MD5 cde483557c3e79384d9d0d298a139040
SHA1 593bdb49efc1c6e2d4704f04842706c10192fa40
SHA512 e2fbd69f3e35f63354335abce2aed8fe64942baa52efd36018171751ecf3c1aaf6bf8d962e7e45dee393fbdc8315d4f93f945a4b904c39854cf0c2c83b5bf5ad
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\index.js
Size 91B
SHA256 9740d6b8f1290751808b9474175259aabd1cce2064ea6496b900b8bd9e1a6cb3
MD5 72c672f572f5bc3185b3dc87a245123d
SHA1 dcd3be3fcfcdb2bfb4e4ed04ec8b04d430ea5833
SHA512 bb2569d1a9a8d41350058863ee8cb8c066a2046092d93e7268b48574dfc4b9bc54513b3ca9dce10a75a71400ab9c2149334f243e44b62700b0f11e1bef9f1cc4
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\package.json
Size 434B
SHA256 a22c4510e3621818efa0c4626f304af59b27d0e2541b061a8874b1337240a016
MD5 ea92b31c5cb8c276d6f202d7eac70d49
SHA1 e8eeab404a0a13d4ce5782e6dd191c89b01abeb7
SHA512 6a38841a6567854893a39e94334a13bac7459df37b55b3fb6c5610269ff1275a00338fe7243b704818203f165d1003327283fdffb1c31fef0d37d872b76f3563
MD5 SHA1 SHA512

Submit Download

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\src\register.h
Size 139B
SHA256 6f6bace5153fffc785858db0936ec3fae35a1c03179d331be2f74a3f630ae818
MD5 818d871938aacacd36858f9d86f695b5
SHA1 b78763aae98dde223a592bc1b346c374de4386a3
SHA512 0cbeebab53fb364e026bd84e817fa85cb90ea36c56590435ac40910f90f1de3a21420f83377122a0dbf789ed0b46047113fb6ccf1367fc373d36c8ed2c36447f
MD5 SHA1 SHA512

Submit Download

register_linux.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\src\register_linux.cpp
Size 2KB
SHA256 bac828fb51a0c560f09281d750bb363b4d735c8fbd7add197102b978b88dcb9e
MD5 6493be5824a187e7475cde11c7f3d1e3
SHA1 4a1a0603b3feb2a1928cb716ef6836f57e89f86c
SHA512 11a0fc0acdba6481cc524449deb5a387499fc3751b6eccd70ccb2ce0b5f40901f7ec697bc4fa0b3dc4d2b08a70a3eb4d4e66f0aa041faafa2365a2bd00487b8f
MD5 SHA1 SHA512

Submit Download

register_mac.m

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\src\register_mac.m
Size 858B
SHA256 98c48101cdeeeeb1434d035c4b9198e51f10c64d39cdee18aa3f0f416632d248
MD5 b324312bc8aaedaa5744b7418691cf21
SHA1 97d48ddc9f910e25613c1cb29ebf59543b900877
SHA512 3280954bcc0e2d917791b74fe45cfdc0fbec575dd263c5ec75225f57fc66af00a867b074597a2529c424fa7fb35809cece643886f22678a4261302e6d37bdaeb
MD5 SHA1 SHA512

Submit Download

register_win.cpp

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\app.asar.unpacked\node_modules\register-scheme\src\register_win.cpp
Size 2KB
SHA256 ae5cd878e51b30980907180e4e3fd16aab249e8550fd6498bca7cef063d3efb3
MD5 268706ffbd087406b56549d565481704
SHA1 602ea958f32e47163a15a106dbc49b0535c42306
SHA512 b89594c69584627d07b9890dcd23744af951475de8cff94294e88bb8dd2f6d0a7d7f67c3c9eb926aad944a55447010efa3fe5be636a3bc20d1a735871ad99186
MD5 SHA1 SHA512

Submit Download

elevate.exe

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\resources\elevate.exe
Size 105KB
SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
MD5 792b92c8ad13c46f27c7ced0810694df
SHA1 d8d449b92de20a57df722df46435ba4553ecc802
SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
MD5 SHA1 SHA512 SSDEEP

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\snapshot_blob.bin
Size 309KB
SHA256 769785eda3922bd210ee776fa46e97e30217755ca1dbb928230542bda2786857
MD5 6afb38479a96ee960ed64fc0caa0401b
SHA1 01ff59215dfdfdb41a38634ee8115aaaf89553f5
SHA512 4ddebd9b337cb857835696e4579db0e735cb0e4ccc454ef851b940710cad2ce77cc55ad0d7c44d55e532d131d35317060addc7975f9da7d33d9165038fe143eb
SSDEEP 3072:5+JfFRciefJNlUMX2kIE1aOaVsS/3hYeFWYSITdJgClE+ceNTbM:5efPciePmMXh1aOCsy3hpFRlzVw
MD5 SHA1 SHA512 SSDEEP

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\v8_context_snapshot.bin
Size 671KB
SHA256 30f46b08a76755b48e569afff2657cd14734508a0d48dd053462d8c95604bc52
MD5 c7c05a84743ecdce85b273166d1e933d
SHA1 7f550b7ed0d4202f6e126a6d4615766998425437
SHA512 c43fcbf0ce71bb6144dd56a9bfd25341e60d0eadacee21a662d578ce40d79d8d9e377dfd5de3af2e33268041a5c665dc803d282243a145cae22600d77b6de5eb
SSDEEP 6144:XPYRCOn2E6keR1PciePmMXh1aOCsy3hbHRlEDMrVkSiF01gwoHZHCvqmO9iXz8pk:XPY5nnbe3WZBr/iXo73nVE+2l
MD5 SHA1 SHA512 SSDEEP

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\vk_swiftshader.dll
Size 5.3MB
SHA256 9ffb78591fdf2d24f8e7290dc95b98bd16eb59192d9ecec9d656c46164c27e22
MD5 e165350675c58a0c27ac73ddc852292f
SHA1 6103eb6d27653238a12b56f092937c58decb1894
SHA512 972b228a1ad7aa5cd3ccd3e4d1a18489d06b1c2f5d6ad742df250934406281a699717fee38c22902b0d59bdfa2f1bbaaa9bece3ba41292e9d45f7e3354c95d85
SSDEEP 49152:zun45w3vf22YlLzv3S1Lkc+httkltRx/FU5f/GeQZImSUzRTNaJmAvFOC8pefqql:0P3vfJGXKT8FIjU7s
MD5 SHA1 SHA512 SSDEEP

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
MD5 SHA1 SHA512

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\7z-out\vulkan-1.dll
Size 874KB
SHA256 7f6739a3a7f91e817dc5c6f25ec1e04cc453fa2e2c3ae676b198cde76e1fcf01
MD5 18ff150adb11324a4f3219aac9a7349b
SHA1 88150d7716d9e1acaf3814ea660f24da1ee70032
SHA512 536490da0c33aaa26d8b2879ec815a7135f172257f0708dd039042aa309caf129851c12bd01ae8df25ed379eca43d22c150cfabc025fa9f9342afa871da7539b
SSDEEP 24576:SuZ8ZzBN4kClmtVeEj3GxG6Z5WjDYsHy6g3P0zAk7TOwh2:SuZQnDOmtVeErG86Z5WjDYsHy6g3P0zJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

SpiderBanner.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\SpiderBanner.dll
Size 9KB
SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
MD5 17309e33b596ba3a5693b4d3e85cf8d7
SHA1 7d361836cf53df42021c7f2b148aec9458818c01
SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
MD5 SHA1 SHA512 SSDEEP

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
MD5 SHA1 SHA512 SSDEEP

Submit Download

WinShell.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\WinShell.dll
Size 3KB
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
MD5 SHA1 SHA512

Submit Download

nsProcess.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\nsProcess.dll
Size 4KB
SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
MD5 f0438a894f3a7e01a4aae8d1b5dd0289
SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
MD5 SHA1 SHA512 SSDEEP

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
MD5 SHA1 SHA512 SSDEEP

Submit Download

registry.dll

Path C:\Users\Admin\AppData\Local\Temp\nsl6ED8.tmp\registry.dll
Size 25KB
SHA256 4f585d4dcb449fc1b0e002d7e850a059bf254769aee0fb83841f73064ec63014
MD5 5408d183e7e2098ffa0290a7a5f9af49
SHA1 5e8402903bd805ea136796032115b72f2d728c8a
SHA512 2f3936808a257aeff0c1daabc274abca583e04395287c2a60778a4c01b5449c9364c6b42ef6a1588dab6823456b4f196ed22a7a911eb5cd65806a01da4d4c398
SSDEEP 384:wUsbaKAjqsQZlJee0QwFJM5LPnnqutjZGmaZUjeVRVKY/raQWBQqLN9AYUVf:uBAoBwF2ZtN77j0KUeZBQo9AV
MD5 SHA1 SHA512 SSDEEP

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/1676-1087-0x00007FF99BE90000-0x00007FF99BE91000-memory.dmp

Download

memory/1676-1086-0x00007FF99C170000-0x00007FF99C171000-memory.dmp

Download

memory/1944-1115-0x0000000000400000-0x0000000000412000-memory.dmp

Download