f35d2a35061098400a3fafc1bfd38d8bd33f1ad76df8b78b62ccdf20b0a30d26

Analysis

user interaction
yes
max time kernel
150s
max time network
139s
platform
windows11-21h2_x64
resource
win11-20260130-en
resource tags

arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
20/04/2026, 03:58

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Obsidian-1.12.7.exe
Size 281.8MB
Sample260420-ejyrfsgw2j
SHA256 f35d2a35061098400a3fafc1bfd38d8bd33f1ad76df8b78b62ccdf20b0a30d26
MD5 7c5810d219a74340134736f8d853298c
SHA1 6ae6f3e5b2cd8e182f5321aa4640f264959739eb
SHA512 b9356652a162db341adfd716d87436fb4ce39e9e4371cb0df1a4343c53334edb70ab658d57cebb700b2a527dc4f4f85af8cabc8c42015cf807114b18e83bea32
SSDEEP 6291456:6S4Ih5kTco3vEVw/gkYBqZ9Gofdhw0ks4CjN62:14MqcDwuI4s4CjN62
TLSH
T100E833536210AF63C924FF39A5D25DE0CB6A39051C62FCBD4A1EAAF1CA18478FC31756
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery spyware stealer

Malware Config

Signatures

Reads ssh keys stored on the system 2 TTPs
Tries to access SSH used by SSH programs.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	raw.githubusercontent.com
2	raw.githubusercontent.com
5	raw.githubusercontent.com

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Enumerates processes with tasklist 1 TTPs 1 IoCs

discovery

Process Discovery

T1057

pid	Process
1608	tasklist.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\SystemTemp	Obsidian.exe

Executes dropped EXE 4 IoCs

pid	Process
3296	Obsidian.exe
2812	Obsidian.exe
5952	Obsidian.exe
3344	Obsidian.exe

Loads dropped DLL 18 IoCs

pid	Process
5100	Obsidian-1.12.7.exe
5100	Obsidian-1.12.7.exe
5100	Obsidian-1.12.7.exe
5100	Obsidian-1.12.7.exe
5100	Obsidian-1.12.7.exe
5100	Obsidian-1.12.7.exe
5100	Obsidian-1.12.7.exe
5100	Obsidian-1.12.7.exe
5100	Obsidian-1.12.7.exe
5100	Obsidian-1.12.7.exe
2812	Obsidian.exe
2812	Obsidian.exe
2812	Obsidian.exe
2812	Obsidian.exe
2812	Obsidian.exe
2812	Obsidian.exe
2812	Obsidian.exe
3344	Obsidian.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Obsidian-1.12.7.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	cmd.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	find.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	tasklist.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\obsidian\shell\open\command	Obsidian.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\obsidian\shell	Obsidian.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\obsidian\shell\open	Obsidian.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\obsidian\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\Obsidian\\Obsidian.exe\" \"%1\""	Obsidian.exe
Key created	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\obsidian	Obsidian.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\obsidian\URL Protocol	Obsidian.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-600123060-2148212387-2211176695-1000_Classes\obsidian\ = "URL:obsidian"	Obsidian.exe

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
5100	Obsidian-1.12.7.exe
5100	Obsidian-1.12.7.exe
1608	tasklist.exe
1608	tasklist.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	1608	tasklist.exe
Token: SeSecurityPrivilege	5100	Obsidian-1.12.7.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe
Token: SeShutdownPrivilege	3296	Obsidian.exe
Token: SeCreatePagefilePrivilege	3296	Obsidian.exe

Suspicious use of WriteProcessMemory 7 IoCs

description	pid	Process	procid_target
PID 5100 wrote to memory of 4364	5100	Obsidian-1.12.7.exe	78
PID 4364 wrote to memory of 1608	4364	cmd.exe	80
PID 4364 wrote to memory of 1684	4364	cmd.exe	81
PID 3296 wrote to memory of 2812	3296	Obsidian.exe	85
PID 3296 wrote to memory of 5952	3296	Obsidian.exe	86
PID 3296 wrote to memory of 2812	3296	Obsidian.exe	85
PID 3296 wrote to memory of 3344	3296	Obsidian.exe	87

C:\Users\Admin\AppData\Local\Temp\Obsidian-1.12.7.exe
"C:\Users\Admin\AppData\Local\Temp\Obsidian-1.12.7.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:5100
- C:\Windows\SysWOW64\cmd.exe
  "C:\Windows\system32\cmd.exe" /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Obsidian.exe" /FO csv | "C:\Windows\system32\find.exe" "Obsidian.exe"
  2⤵
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:4364
- - C:\Windows\SysWOW64\tasklist.exe
    tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Obsidian.exe" /FO csv
    3⤵
    - Enumerates processes with tasklist
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:1608
- - C:\Windows\SysWOW64\find.exe
    "C:\Windows\system32\find.exe" "Obsidian.exe"
    3⤵
    - System Location Discovery: System Language Discovery
    PID:1684

C:\Users\Admin\AppData\Local\Programs\Obsidian\Obsidian.exe
"C:\Users\Admin\AppData\Local\Programs\Obsidian\Obsidian.exe"
1⤵
- Drops file in Windows directory
- Executes dropped EXE
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3296
- C:\Users\Admin\AppData\Local\Programs\Obsidian\Obsidian.exe
  "C:\Users\Admin\AppData\Local\Programs\Obsidian\Obsidian.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\obsidian" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1728,i,713930415135977226,10275148097180297339,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker,SharedArrayBuffer --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708988185955192 --log-level=3 --mojo-platform-channel-handle=1716 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2812
- C:\Users\Admin\AppData\Local\Programs\Obsidian\Obsidian.exe
  "C:\Users\Admin\AppData\Local\Programs\Obsidian\Obsidian.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\obsidian" --standard-schemes=app --secure-schemes=app --fetch-schemes=app --streaming-schemes=app --code-cache-schemes=app --field-trial-handle=1728,i,713930415135977226,10275148097180297339,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker,SharedArrayBuffer --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708989122997041 --log-level=3 --mojo-platform-channel-handle=1980 /prefetch:11
  2⤵
  - Executes dropped EXE
  PID:5952
- C:\Users\Admin\AppData\Local\Programs\Obsidian\Obsidian.exe
  "C:\Users\Admin\AppData\Local\Programs\Obsidian\Obsidian.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\obsidian" --standard-schemes=app --secure-schemes=app --fetch-schemes=app --streaming-schemes=app --code-cache-schemes=app --app-path="C:\Users\Admin\AppData\Local\Programs\Obsidian\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1776657494996426 --launch-time-ticks=542901747 --field-trial-handle=1728,i,713930415135977226,10275148097180297339,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker,SharedArrayBuffer --disable-features=LocalNetworkAccessChecks,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --trace-process-track-uuid=3190708990060038890 --log-level=3 --mojo-platform-channel-handle=2560 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Network Share Discovery

T1135

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Programs\Obsidian\chrome_100_percent.pak
Size 112KB
SHA256 45d14a4278b1e152b363197401a5604aa5a3cee6512a6b52df978038fa521a0f
MD5 e7bbddff3081eeecf7f56e76ce1d48e4
SHA1 eb83b418ad0e8f502f12a339cabc2fef8ec06cb4
SHA512 2caaa851d095d1a641b959cf092a2ce02328298aafdfadafc773eb0a0054054ae54c41574328694f6a37928203509a0c7e38f3beff1f4fd2ded00b5ed5531d85
SSDEEP 3072:z84PisCv+/P9NebGz8LI1TwuLjQBHe7YAP18RVC2I:zRYWFUbGz8LI1TnjQBQCrC
TLSH
T13AB3D0D7B7B0AD7DDA474BB783560170FCB30B2D0682120A5A99E479653AF88C8D93D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE.electron.txt

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\LICENSE.electron.txt
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\LICENSES.chromium.html
Size 14.4MB
SHA256 f9c475876b01bb4d654b8f630f11219cc96198efe91d7f2602a97f0f3c86c3cb
MD5 bfb383dedf6aaeab3061c79362a85ff6
SHA1 e536a576ae468795949e3a124b7038d0a9c96510
SHA512 963a3f806237ca758361cefd5b836e51743d7b4c350b75286d8387a20040f9ea05fef0d8b83ab6f35e312309d96f33ae3c1cbb1eea99b6b9c28c6d5e7c212476
SSDEEP 24576:HCNXjZ6doVjZ6/O3jK6DTmwR0wuDGKjr61jK6yjr6gjK6ajK6XjK6QjR6pjr61jN:HYwBeXEn8mb
TLSH
T170E6A42F7B48037306C642A2AB8B65CAF31E903F3B561654345CD1681F6BA2583FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Obsidian.com

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\Obsidian.com
Size 22KB
SHA256 0061796f2e869d91fc33ff94824a2e65dbf46d73fcebbae472fd13bf457dfa4c
MD5 1cbf21e6511d9004e6c1568537c455b0
SHA1 eaa7dd5ad68fb2cf40264b8847d9c5f1312c2e4b
SHA512 c235bee93f496463b3eb18aaeacb2f88fdfba26001e5df083cb6f0f8fc2264ae2b815996ecf33de7d0e4804f5f511047203908d1884f34dfe1639f6c37eeea7d
SSDEEP 384:wedpxBbXE9Lrj3nAnwDpWnAnwDpwXa/rl9qX2Ip4LTjdAA1m5wM6ZENsufjUWFgG:ldpxODK8pwK8pKKrLy2Ip4LTxf1ml6ZU
TLSH
T124A25CDB4A385017FE976E7186D4EA53BA7CE7E32960C5B7A4ABD1C009533C2F704229
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\chrome_200_percent.pak
Size 182KB
SHA256 aafc61b89748d17fcbc9fecd9844a77be2c584529a81714c98e0c4d453ea9496
MD5 1e1744b9410d29e7d1ed28c4f67d6317
SHA1 4f3fcf3db1f8a1eeefd5a4c2f3f2d2b34c094a82
SHA512 10fbcc89ae3251f4c163beea1dd3a53bca239486e1ed7a997e9b04d3a6193266cd96db4a1f8b753942429305ae9ee28b1e9d3fee7e2ddfee847a4db40c8cea93
SSDEEP 3072:dl4J8LahaY7d6iN6uSwxohPQDQYaEjrvy/IwXJPoLjQBHe7YAP10uxR/TbIM0:tGQ+N6uSZQDQYakvyAkcjQBQNd4
TLSH
T13804F1D373B8AD3DDA570B73926610E0FD7A20291EB3110A5A9F98397925E8CD9CD343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\d3dcompiler_47.dll
Size 4.5MB
SHA256 5809a3aafabc10d58bbe86f0050b61e33e7c093674dff827e1db0236c1caa7a7
MD5 874acefea5601a707d56047ee3dfe843
SHA1 2afadf5d2800154822718a6d761d8b5d072b98fb
SHA512 5ee93165374ec2ea6562cfc22f5e21b3c250a0fb197f1c46f578614a5d79201d31d5d9a9b1a38eb38160487bf2f21cb381b0cf815dcfb91251ff3e1c1cab5a9b
SSDEEP 49152:gSHvWaWTktEzfRriMsCL98dhdVhpHGC6GNCxJYrv9y5Eze+V7ZpdKMZzaWoUyxq5:ruktcrfNlTyj5byqS6
TLSH
T10E268D5767E840E9C5BBD138C687931BEBB1B80413345BDF01508669AF73BE26A3E724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxcompiler.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\dxcompiler.dll
Size 24.9MB
SHA256 70f7f28e3d3324f23a0dc52dcca8e60c33dce5b73959fd6ea3a18593b45865f6
MD5 7f590de4dcd69bd7705027de2992a9c5
SHA1 199804588dc0ace68072183e060f2c427ddbc8bc
SHA512 feee80058dddf5b9496d84db433b2b581a063e27b6fde8664eaf711a66d7ff263aa595262f5e56f6b48a22ac4450178c5c9135557a4da21ba6673e1c9b43e925
SSDEEP 196608:8+kiCf+BWW8fUA4BejnQI180uNJSf4iIJwEMWRsKtvUY:8+kNf+BWWyUA4Qjnw6+RsKtvD
TLSH
T19D4729122246D49CF059C878C3678626CA6C34E73FA779EBC0B461252B7BEBC5B39135
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\dxil.dll
Size 1.4MB
SHA256 970110d905a9e5f7f6b23f3b2564104ad37b6770cc3220e8a7ba3e957e6450c4
MD5 89e30dd117d489c04cdbdefd9b2013a4
SHA1 88c48d7ee5fd2ce62ea2d659b0b12c098dd7d10b
SHA512 dee881e8d3ddf1d613724ed6785225d9adda8800a24ff18200294a5be36fbefd89cdbd9b71a64acbdde25faec38235a4ebe837b41990e597ca9e8ac7bf37636e
SSDEEP 24576:bY+wATtbKYxy0y3ny6eBjNSGlVZyi27+V0IJNSD11J7R+j+v1acLUkJvS5Kad:UiTMYxy0Sy66Zh7Sh/cyvS5T
TLSH
T1E9657E1B229801B6D4BBD17CDA47CE0BE6B2B41503B09BCF12B406692F5BBF55A3E351
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\ffmpeg.dll
Size 2.9MB
SHA256 89361695084cc50d17a35dc8ad4d7f04616f004c172490fdb7716b228c33a15e
MD5 b780af9057f16c47cff5d416a14c0abf
SHA1 5638d3b76e6ca4562096e60cd53c2e0cbb73e09f
SHA512 2ee101ff9205891ad9d54c03794ebd64806eb0b53f4665b3416c8886ed98d4aa148c68e47e5a33ce848585f4af2b4160396d2527d6a3745e791887ce04be604e
SSDEEP 49152:aESTAZFzTxMIP29EeLfptJrj0vVJA8ANdZGNxcO6IhgiS9Nol7WtaRRqSorwIaGi:aDaTSEYht8OnZGNxcO6IhgiS9Nol7WtI
TLSH
T16AE5AE03F6D650D9D029D57197AB9313F631380A4F2056EF2A804A253FA7FD86E3E768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\icudtl.dat
Size 10.0MB
SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
MD5 4171402e385f07007de57f45ff540e9a
SHA1 aab98edda310e6ddd3e4b71f95b6225c4defa7fc
SHA512 53e303895fa80944f7b0e0f64ab657b79bfe0d7c462b853ed06b556e42d78c639021c4c337743f18174614a1f74c805198ae868c52dfd8a2e270e4ce4a2880ff
SSDEEP 196608:rwPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2YDU:rswkpHiXUxY/iJ53IWhlVjEeI0U
TLSH
T1CEB63807A2FB8DC6F9F76F30E8F452679567BD496E32805911042F3B1D332A08661BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\libEGL.dll
Size 507KB
SHA256 d404b25ead5034acd0b589e2d2aeb0443686f3dc4093d77b14da03c3c1c5c659
MD5 48cd57bec36b7fcc1908884d55339f2a
SHA1 96d359af6219236d48edc33006ff9ed005df2081
SHA512 87c65ac7a731bcb8a3971917f5ef82e7ee48f19ffa48aa7b27c658fde5da9ab2fedc13c48561d5db87279422db6e0aeac7fe28775b3d5dc7d71ce372e915bc2e
SSDEEP 6144:ytqwvC8uRreZw/ebZyu5sIAeoZPw1ODZ6R3/8cWqR/H2p5HoSAhg:UqwvC8SrZmNEIsPwa6R3/8cWqt0HoSv
TLSH
T1A6B49E05F3E945A9E06AD4348B538603DA7278570B65FAEF03E092792F37BE45B39324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\libGLESv2.dll
Size 8.0MB
SHA256 242f74df6fcd27649469a33c28f0198a3e03f8dd94b4477aa5ff37f8f0205b64
MD5 16e71f0fd0b1111747511e44e4e51364
SHA1 f3833780ff857448e1f5ebeeb6d775077311cd41
SHA512 c03b466fda63ad125ef2a7f32d572f61f65bb3a7fa199ff39ccbd4dc7c4f0aa23e906fe95d33a6092823ec5eaaf781426bf7052f42d987719c51a392ba6291fd
SSDEEP 49152:Ch+XpQjxg3kJjrCtf/EbJ2npdfPHn7VHe1yTveomnSfb+5LDrpRXJDysxrY0U5Ap:OLQXVv/f+vplJLdPCuAYT7tc3Vi84
TLSH
T162867C03F69581D8C05DE2B8975B9227FA31B8490734B6CF2AA413152F6BFE0A77E354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\af.pak
Size 568KB
SHA256 ca253121434ef430661c30672e1097e6d238e42821585b700776b56977c05d97
MD5 fc774f629eef0d028ef6c0d759b86176
SHA1 8a57809eb22b2d77a2b18ad1c12a17698c512e69
SHA512 ea2c29892c7313063512d4223884e5301ddd265c7299a93384ad1a7d98c950db52665063671242ddb6f2785dbb48d26439b423b12d41055484791414fea07b64
SSDEEP 12288:18abGwqRXxgtRGt+vW5RwONM8KuY3GB1sz4H2Jyn9N+saAQGmQo0v4JIAga26F+C:KaPqRXutRGt+vWDwONM8KuY32sz4H2J5
TLSH
T1F2C41B0BE781173D09B07696FA0845B7FB9CA26CC770B2BADDA982310966DFC11BD1D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\am.pak
Size 921KB
SHA256 1f126a64a58ece296209d24c36ae416e3187996765027b1198ee01dead17394c
MD5 e523ed0f5b61632b6bcecdba23754417
SHA1 e146bf586f4b0d05732ada8ef1db69d750ef5d24
SHA512 444e540b31e713e0c3c354cb8b6d7e1b6a2953fe7290210ba26f05241c31b6d0f49ed818ddc438754403e7ce0fb06af4e9be6c46e101da6cf96bef6082d58d4a
SSDEEP 24576:tC4KpTe1jEQhTCMpyGvxVdDSjyc8TzeIXGf5530iABV6zZUPhW:NS5l
TLSH
T1F215AB547EF9F7570F8E8A19A4320E4E9594AE4652803C38C35AE3FC2B2DF1B4DDA215
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\ar.pak
Size 1016KB
SHA256 cf46d1687d01d8ba58512ea7082aedbaa14ff0e748eae295fbcdae464b271b77
MD5 9236822ebebe58d5931cb3abfa59d05e
SHA1 a28c445ee0f9ba804f448d37ca7da3720d664f28
SHA512 368fca3153f7130b3fa76e373a1574a0db440a027697651c8ae075804c78d9d50a6d98c0b7d4edd13094d1da6c332a00ab943893b3006b507e491a489b457e65
SSDEEP 12288:8yq5GPb4BBjLVHTLG2awjy8u+7v4UDodMqkMZS158qNjpPEKLLlYy:8yvm5zE6
TLSH
T107258BE21B2984720B56DF0FD1E23668E872BD23DB4BFC3124934A2156D7513E78E678
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\bg.pak
Size 1.0MB
SHA256 f2a46c4ee04330ef49f6acc62c26ed7ec57dfe124aa386e08c5b582832c4000e
MD5 934193d485de19986de7e0277c139cd3
SHA1 387b3699cfbfa62fbdeeb4f6d9b127df0eb7e719
SHA512 d3516bb252832db4573d38ae9d6ab63db4a5988f49f92fbcdf191a12d9be078600dda750330fe66286a89dcf614864191f60a97999e66e317eedb0fea75bb8e9
SSDEEP 24576:qDcOWNy/LYJzQkECtUrVb6tbGdx373ZTm1z3GjK4UfVDsMX74u2VZsxI5e468KtL:XOWNy/LYO6UrVb6tbGdx373ZTmZ3G7Ul
TLSH
T1283524A15B9A68DF0101F45F98087E093CEB84FE3FE7879241652DBD39E10B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\bn.pak
Size 1.3MB
SHA256 b4ada9665be5c9d9fe4254bff291978dfb50c2b22a7149faf9b9c3f470f0d32f
MD5 22f36ee63dd0e66da673a95e85352e1c
SHA1 65ea5cfaadabe5ed611a20f77d816b1f51aeea1d
SHA512 98b7661cf382ab9feedd09c074b8fa458e061633b250e0dff3ae5417fa7ee43f950f3952aecad8dc6d4dc8ece3d7f4428f4440acf03b525850476517ddd53efb
SSDEEP 3072:xlE7CdT2+xplSGuIpdJ5259J9gJfifHRbkWvLypUBbqVQL55BkwuHX:xeCdT2+xpsLIp3UkWvLypUBbb5UwM
TLSH
T1E755EF209C6E81B6A8C5CDC9434C6370C523AE9B9B61F74DDC17A14938ADC7C8CADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\ca.pak
Size 640KB
SHA256 252c097b90fc3ba9096c519a6ab2e91b441f11cce65c7c47777542959dbf6c34
MD5 10db08caf10e1b1bf0570cf1b765278c
SHA1 914c5c8e9eb7cc7e718c16036025199c6dafd0bb
SHA512 e62302f4240f5eb5c56ec3f6ffa7846a562c02628812e70880f86818a061ab5b29197fa677c72f78bad9e0118f8de1e3ff13c223ccc6e54a2356dddb50caf343
SSDEEP 12288:YTW25sL27hjGlCiGh3UQU8K5PsFYN3Mw2juwHzejm0t3l7b7T5+vHcwTLT/fnWyN:YT5sio4L622l8MN2M0K5MYwUy
TLSH
T163D408239FC93B7704D2330EFB46C217A48CA9847B16D254F4AE1B1622CCADCD677A95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\cs.pak
Size 663KB
SHA256 5e9385505f9507d4a57f7a5960ceb35b5fba92c662b53bda4e4dc0d63245059a
MD5 b5daa2520a4bf24cb6b5298aa518f444
SHA1 6255446419fc78dc365267f254e7cbb5f5033b40
SHA512 000a7b9512ac05d027c43c80d397efc0b082305fcb52c499b587bd0584c54ae3794a4c74fefef9c7280f1cfaec4d21696178a5ba52815f992c9b5fe3df5e6899
SSDEEP 6144:CWEvFuhf4xp+EHbF2Pw00z35AtYJlA7Af5Bzp/GZ8OwwJSBW48Qz:9iohwrbF2HO35AtWD5Bzp/GZ8OLJSV
TLSH
T1BCE4391EEEA36435584002487FBE4128BD6E83140B6EB9AB7C8F9D91257577E8FF0D48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\da.pak
Size 598KB
SHA256 054849037db8f9672ab80606dd7163f25b18710ee7f777e7eeaa68d24447aee6
MD5 f5e55fe7f2cde2968c0d2d0cac10dc36
SHA1 4c93a1eeced587dc5b01d7d8e3a063a5a2a7b4db
SHA512 3042ee29efef6d8c580758c623173c6fca5bb6a65779f928d6c1e635bccdd0f0c0528d1a2cda4409a1be1c25d6f0006cef3bd6982fafa0400c784890681494e0
SSDEEP 6144:sATJBS1qVIQRMNiVzVIv5MwHJBE/evTawlAnsJwOgobiq2SaE5dtfwcYsghHLd4E:sAIiAHVTe9q5dt4nsR8
TLSH
T1E8D45A4BDC9C732FC9A90725F3118DA7EB6D543CC684264F65D8943A09CBCA097BE2C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\de.pak
Size 640KB
SHA256 404975e6b3af1f4e40be3905da1850c3e87e29bd03d0866185ff85c06861ba68
MD5 a63e224a1e24b61f3acf3bbdd212f563
SHA1 17e6e42e88509e1aca6ec87a0d5e936633bbb5be
SHA512 7db291bb6df49ad037916d31244636ce588f851b7e2d6e9b5c05bbf9199377a45f852ec979fcbe40b5810c0d8f2b1fcde924d7f8d1ff4bd33a3778dbbdf07a53
SSDEEP 12288:ZyDS5JG/3K7Up+guafzEmLO35aSUMUdChT:Z0S5c/3K7Up+gua7R650ChT
TLSH
T1AAD41803ADDF625ED68673617305CDB77B19E36BC342322788EDD12B614B5B283AD422
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\el.pak
Size 1.1MB
SHA256 dc27d24e9afd24124abca6dca1a362462851267902fe6493ff3165a1c5aab69f
MD5 bd76528a8fc532885ecb7530f543e975
SHA1 a95e9ed8e3b7fd6a768f37465cd66b09404aa156
SHA512 b9d4a98768a56509ebb4a55f1c2a05300e32be939647a0b3acbb45083930d91967c68c5a0276d5f57400a6b8a410c8d0289ee403d127e7985db502675729a398
SSDEEP 24576:rqss46HWFbrlK5Yp9Ck2txZu8OJXDsSHCmu2Od7IO2USUBx3PyjkHvFz4VoyNJmJ:rqP/HWFbrlK5Yp9Ck2txZu8OJXDsSHCT
TLSH
T12845CFEFB4582DED8046950785D8F07C2BC66D6CE749CBD86229CB60BDF80719A22D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\en-GB.pak
Size 518KB
SHA256 ee6fc979d1fff0c1a4d6bca929691733665c5df7e7a43cc54f1165ea14cffa67
MD5 c66a0ee9892bdb1f511a614d432b5b68
SHA1 0bade47c568201dfca6982d46d44a64e44de288e
SHA512 c83f45164b07932bfb17204ba3016ef4bc2c68817f7456d9a25f807d0ffeb4c1eeb1d3114bac5dd3907332765b20ae0790fe90d54399b6e0e4733adc40e708c7
SSDEEP 6144:mCJMs1KdSc4rcuF4yVEMP9pQRIBfaYHHDjko5b0DG1BcERQu:1J1IR4/EMLQRI7F5wDw
TLSH
T199B43C1FF785126A059352A2BB0AA562FF22D07CB35112663CBD801C33B6766C3777E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\en-US.pak
Size 524KB
SHA256 bfa782c9efae2c9cd2c0214dae1bbb3c259d4d4c38d920b06677b9c4cf4f813d
MD5 bfbb69222dcc50ca860b6a80a3da4f4c
SHA1 51200c9bd18b0999ba38033662c5e319485e7420
SHA512 940a2855b5de5f1545abbfed5dad0cfe81e74e847a60f65b4a8df54860649502062ff8941c0fbb248c203fbe6b883ecae8b21e91215b07c1231129a914008a28
SSDEEP 6144:njtGVh0jMRG0PTMP9QQo94faYQ6TFB+5P2jdnngP8/s1wf:jEVhmOTMCQo9+C5Ojawf
TLSH
T160B44C1FF744122A05A352627F0995A2FF32D06CA35112663CBD812C3376B6AD3B77E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\es-419.pak
Size 631KB
SHA256 2b728123b590c5570a46ec2da7d4e620cb81559629f933ee5d71386fa142e02b
MD5 b0a63cb56453f3ec942195e1065e129a
SHA1 5016eab186612f33a7241f842cbcbe80ca709cce
SHA512 ea61a557d626f91c12e22dde790804dcdf6d407ea623369fcb4bd376d72152b71648263f02d2600fd77b2655d34382be95f32ede24057bafdb891ccec45a537c
SSDEEP 6144:rsK6lxhznjoJYLFLnQ2FYjnmo5vV305ieSr5AAoRGCl:m1BmpVu5ieUAfl
TLSH
T1F1D4F822BAC81F5310E3A388B743D757E4989545B408C29BE8EB876522CCF8CD977ED5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\es.pak
Size 628KB
SHA256 4801312dd5d7e3d62db05b8fe326d982f3887c65ac9faa7621009853c0d3b0b1
MD5 60abb63b7d0a231c361bb03111499b89
SHA1 e6ec3f843f199b706fbe7c1d3a342c667bfc6e7f
SHA512 b61b34f108e264bb24fdaa5c638cfb5afc428a1f28edde8a1839b6af84c2d6889b460a0e73a9ec3d3dd0d3c4e1041aab8fac7413e64863a0bddb6339542207b6
SSDEEP 6144:b1YkJ88v4zeV/1uGbU5gtEa+5QhGcm3X8ji5JOvAJLlvJ58J36PZOW/:Ze8v6GbUy9hGjX8ji5AoJJvf8ho
TLSH
T14AD40822AACC1F6310E39349B743D753E8D89545B508D29BE8EB876621CCF8CC967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\et.pak
Size 573KB
SHA256 488a91b53d17ca8b52e25f143197875aef7dd50e1bd51bad749f559c17f52aec
MD5 afe1f76bc67ea3886fd0d6ada960dc06
SHA1 363cb7d2713e4f286c3655df753108b8bc1dc5d0
SHA512 b5d178f2e27e751a173b2556199eaf7a3855dc537ddb76dc105e697faaec69cedac955202838b4288f562f154e55abf12a181a1bc1dc7a61a4d5d74d1200e97f
SSDEEP 6144:yc6YcUBG7nXh+f9jaH+KPe6yH07nFdGpNQvmdxIPOTQysogWUiofoflLXhS51Tqi:ybYGDR+MvPe0nFdGpUoPfljhS5Zqcr
TLSH
T1DCC44C42A27D771B182412F9E737E927DC9FE7D8B4000D9668974A1970EEF8C38B2B54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\fa.pak
Size 946KB
SHA256 cfd05fb194e5c43c2c65e7803eca72fde4f5629e849cf2dbb8f6f62156485aba
MD5 71ac9af8d1deebd0f4ac15a2f2b81e12
SHA1 8c61c12860d220b0fdf2d0162ff95c53afac73a6
SHA512 cb9f4071da718edc0ae735ac087ae2329384ad34f11dcabe2af40ca19f8a7b83cc95160e3aa3ae88bd9a4f0dffe19eceb46e2a68903381d350a761ffafd02beb
SSDEEP 24576:BOoBOF5I8u313uyqoz+sb2vRmXnloTUoXtCfGk62Yh78ai/78MX4UOVU8Rkc02un:MdS5im
TLSH
T19625C1957AAC9AB15747CA0341E33834C773EF12D349FE40ACA1076609A5B139B5FA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\fi.pak
Size 584KB
SHA256 c04f5e2b7f30e8e350feefd6cc45f266dbeacf11837cc774c977bf76e9b403a7
MD5 4c9edf90a899707ff2ac97c81b5e61b1
SHA1 967ed2339e4a14147ed60d0875f16ea3d3cd480d
SHA512 fe80a1f6df3458e43bebe1f62203bf3f738055f4a13412c6ab0bc16da83b876b05c8aa89baa365a1ca7155296cfb3dbed4f143b89e4dacb98aaf50edbea1ab2b
SSDEEP 12288:ulx/dp19Tca5WaW5wJw+UURI8pvWamvaG:8x/25wJzId
TLSH
T1EBD45C915219C22237C4D29E7DB0903EF5E5E3DCCC284D9AE843C7D849EA9887D7276E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\fil.pak
Size 662KB
SHA256 48884f90e800b0b0803ddaa0bbebbea1292bf8e1bb5ee8f035a79371bef7ac2b
MD5 4fcaec162908f63d6da009e18ad83539
SHA1 953d1748d721717dd7ad7f535764a73bc6a4d616
SHA512 0ca395473ef66ad1142c5f6088ce90a534f7eb45fc9e9e5acc32eab5f371571679b2bd6538f09c5223a82558371cd247182f4b64624cc507b09f2815daae1c19
SSDEEP 6144:4IC7/okacr/Er9FFfNy4DQ+ZyIWltRFhsAcJ56SGvla9boV8A1cOO:Hi/aO/ELn5yvO
TLSH
T10BE4C61577402748DBC352E55360A82F6AE560B83F827C6E0FBF269B7BA7CD5D270182
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\fr.pak
Size 682KB
SHA256 e311ebdf49828d313760453a01ad1335bac955b4b8b291accf038714c91ebc03
MD5 73896c5acfb23715348065cfeaaa95ca
SHA1 a5faac8ea692e1dbe6dc667fea32a1a6ad8f845e
SHA512 4de8e3bd5bc4fadf655536b5285e4f5f570236d3c60d1e52259bd1d7568415f9c57816a97633d439eb36e22ffcdfd46913465dc827ea74ea3ae1e2b3b0ec7855
SSDEEP 12288:Abw5DvTZLAqb5dZb2Z7R6QuaSVYLyH81ezQI9kiZuYnY88jw2wTxJDzLmdxSm40m:3o6VmZf55M
TLSH
T1D2E4E66FBAC431CB19C60277FB16D663DD348248F215E340D89F4296129A8ECD39F6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\gu.pak
Size 1.3MB
SHA256 11e4ab3cfa421ea0d4d0971b038a6e7a254094fa6dfe9b8f65fd1572f36bcabb
MD5 d76f8c03323625db4edfee35784da1be
SHA1 af7cdb843bd30ca234d81cd9c593c87709aec30c
SHA512 3af2d086b5abb988b2c67037870c1d2a9cf68ace232d99cda47b93d2639adafed3bc39300ac5635d7028004c2d3a327179be90568e27a1a1a6c7869f5d76359d
SSDEEP 3072:/sKn1zW++jFtt1Ib9tPjAwREJKVMjNiT7llj63rAulfcSi5NnWsWi+/GQoy7vBzu:/sCNWxCbjs7z5qCVCi1ssLw
TLSH
T1BD5518D0D7B9F07019DA9F7E819E512086695343D67E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\he.pak
Size 829KB
SHA256 30409b7264418b9b9852b2419669bb8da6f489b58d4eeb1007b39d5cc978621d
MD5 2fe5716790acc2234910947f2501f387
SHA1 062c54e342088acd61a8cdafc6a2264235c54c94
SHA512 57ffdc66c062819d8a5e2edc82d04e626b1ca00e5528f796e46e170c29f69ec89a771d157799ed732fce31f97bc2f6001b559471cfa84f8ad0d1f932fa4bbe6a
SSDEEP 12288:wGrhOF2GrTmoBrAfDuBAlGWq+/1J3GIGAACXlXeQCaj35RXbN60jsXk5mOmmrrB9:l5j62
TLSH
T1BB0599C4B2E452255131AAC39FA5FA286FF3CAB53CA27512CB14526CAC774F0BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\hi.pak
Size 1.4MB
SHA256 59ae1278d1b58da7c0a11e5a23bf69ea31c674aebbc24fcd537a84769efe9d69
MD5 116a4f944f08e6005b792d89d3f0bf96
SHA1 b507dc68a7f86abe2db57dedf3b04a8ca7534acb
SHA512 f3547fbc2e28a34f7ed849f05280fc1ad13c0e81cae85e06a89068bf8b1c1b10901fc067b3c066d89640f40e82236878e365d039d531d5ab4cad3b8535626d41
SSDEEP 3072:eUe+UDOnh+DI6ESjQrcewaV/B90ZV1d3uGlqvN3dgNJEdtDVeDn1s4f4/BtROy4N:8+jh+QSjQt/+U5pAndKtu
TLSH
T11165050CEBBEF3B55DEC3C8A32890D37D59D3674A3E5521348D5B3DB9844CB8146A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\hr.pak
Size 639KB
SHA256 36d9939cd9d89baae124fc930cc050e386df2b8fd0eda0fb48882a2929b94a76
MD5 8ca2b00eb3f0a1aba023d6bd80b0df03
SHA1 925a49d5c63dfe2a5a4f235bb31007f060751ab3
SHA512 df5406e2cbbed3f612554c2a13c71211c0d8883f69b96f0116b5044ec8d8ea8b39bce572f158d2eed52fefee9ea8dda684987019f78830d2b2deaafcb379cdd1
SSDEEP 6144:krVaCiySH1RnvXOKDOYE/5wQCOR7PrzpJ:kxZu1RnvXfM5+O9pJ
TLSH
T119D42A7DBEF3570A0897B34AEFAA434479BD08DCE56597B7684F522E0003F4C6AB8149
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\hu.pak
Size 684KB
SHA256 501569c5e74285231b41d067e0ea28972ef0ab7b269886485cf1b42cd78cbd1d
MD5 b898f99d79360f2bf2ce506c324c25a1
SHA1 8805034141ac3b138688d00bb8ffaec7a5033f68
SHA512 bf55f3b15964e346e9b6be757de03fa0c610d568428d443a55135c8a823e71ae3c7bb99ef40e429950e601ce96ad8fa2b68d7fb482c785a10c5dd8e52b76ae23
SSDEEP 6144:MddbPxudyTpVHiLlw5kgWA4ZtOu8U5UTt8gZ494rYhCi/UtmuFNer2EnjD+54RIf:MdVPELAjU5UJ8LRa5Tys
TLSH
T18FE44BB79376905ABC6C179778643F15592E481BAF2B32FB2883846D24A178D0DC3CDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\id.pak
Size 565KB
SHA256 09d4dd7cbe4eb1b7730a80a3a3cd0606139f4b9647b0a04b49314638680b0a31
MD5 7bbdc528c668aa0994417aac9301a718
SHA1 71a6c00c115c5c6ea01d8f6258f141e5a35c70c9
SHA512 52e742e249f12fa3185c961e91c39a290b8ffcfd4260d9b502b90608ebdbbfeb834a43b150a415af76e84a0527c7473da122c6e857ab12b4e0c87319f64d9c6d
SSDEEP 6144:4pNXRs8aNQQ83ZA9tK4AfjzTFjlFtXmBmiFp/Q25R61lKOBCTmWiTv8oyHu:w/vaNI3ZWj8TFjlFlmAi75R61T4u
TLSH
T1F4C4E8632ECD310C094842D5F2DDAA1E7CCE233BAF05B76E8E348F7055A67686716B94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\it.pak
Size 619KB
SHA256 901a28a4cd0b1d545f0c2e4aa54914029adc03801859761db30c81947de63f92
MD5 5643e0b3864700801fc4a1c59a1244d5
SHA1 2c7529e034bf04589ed52a4bafc5123d7f424910
SHA512 bc60b4df1f943df74a93046eae531ad8a2eb7c0186a8df9c5e9b4a09b3a3466f8b3e8f0246fcf53bf819e3744599519182bd9a3e52d87e683fa260b007002766
SSDEEP 6144:ct7Hl4tBXWx8miX97+2N9rYS/qBRRs61wtl/RT9TbOKkg3gCYrqdqpzSj9f3wBYE:0sGMXZZ/K8YM1CWkb5PkSlxVr
TLSH
T1F6D41B3AA5D6212519976359E611B085FB6EFCDCFA41721CC99B031C22CFE80F2ADB47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\ja.pak
Size 754KB
SHA256 8250b4783dcc389fa96fdf79e8188e439ffe5fc01325f32ab8c322c4d27f20a4
MD5 830a7cba279a3deb42af3e23775cbc4b
SHA1 7102caba0d73d48af569d6c9877fa3955fb778b6
SHA512 e0277e4dc6a1f603a0ffb40e7e01dace0f49604eef6aa6d4fe554592f7366af490b84c6d7b823ab61fea55d335437f69ba04502537a3d90fc704a741b6633b2d
SSDEEP 6144:mnhlmdGBTZTDm1CQRdMfdV+Z8Q2E0uRUNbN5ziIy5GzV3:qraGBBDTyO+Z8Q2E0sUj5zVy5U
TLSH
T18EF44F7CE3C969369D6152A22C0E36E17506AC5FFCA23A3A443DC074BD70BCEE515AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\kn.pak
Size 1.5MB
SHA256 847c5e6abcddf120b4dbc34e28dcd1c2e93f94ab1d6f016d0c1504a58cfd5b93
MD5 4183e32193ba8bd36bc421490dfd0959
SHA1 c3c1ea138dbe32969f10f3d25556f381ec1e3688
SHA512 06b0fb8ac6c844b3efa6a26c0af5e295d0074ec78902bb7c1767191440176a60367e4deb7ff527284c12b5de22fe84e943967e37a6baafdee798d7dc2b642017
SSDEEP 12288:BiHflzAE1TS7ZhbUqZMS1M7P5JVHM+4EryjEi:BsKQ5nMl
TLSH
T19A75CD18ADBA7D301BD5106B24EC643ECFF16BE29CA907C2F4DDD7802C66C6A90865DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\ko.pak
Size 640KB
SHA256 b8ecd18ce8601686ef64129c77f5307d0c60656d27eede7a23b4f3947647b302
MD5 577ffa9acdca15ad31b1bcb16814d4cc
SHA1 799416720afe209f47355542cbd6ca607a965df8
SHA512 01837e4a84bb4eef059bda5ffab9bc4bb7d3b349bdb3a11d7d01471f1d9afec817a26925255078c62dbe05b51a8aff4a652a93740a1ea8833d3471b7f3f535e3
SSDEEP 12288:47/T8gEgukiPM1WNiPszcbifYj4ZGRy0IeYs1ubLwLCMrI01xWSJGRG1zLhwEtFr:6/g6Im3R5o3uHuI
TLSH
T129D4C5F23CDB63C91193CD82AEF4FA198382D976F7530294ED44CE449E245D74886ABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\lt.pak
Size 694KB
SHA256 6d648211ff3a6801e049c9a3931afaf3007857b2872e55ae11e19849180d19da
MD5 bf8e3fb7d28a72a7064e593c065e2535
SHA1 127eaad62f1298643dc2b2558f24d18a24eb7355
SHA512 930027bacb01d41124167b326df40d61e7119d81046eb289ae5577cf5bc492762bcb80932dcb56e4a8103d63fbde11873b1477af627f159e709c9fcfa84771ba
SSDEEP 12288:zzffIIZg4oMwQSY0PrVKrY4bi5P7MIAAJP6StA:zzffIBM0Bbqi5oItJ4
TLSH
T182E42B0069E3AEFB9A4467C981A4CA78DEFD50009767BC61EC69C78BC43BF4525A0F35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\lv.pak
Size 692KB
SHA256 0c0663909339a1f4edf09355a67eea0fcfe821c78d4891604eee31695ce20b37
MD5 247ff0976e6756e17f3260b19ec59ff8
SHA1 a42f0145d6c7422bab290a7552155aa8b420e515
SHA512 3ec584b9b637a5554a5ee1e182851dd254f28d1767b582b1bcf81b0c4096a0ff74487f3153bebce2126e1de05c813cb0d1b2dac251d6fbf3a71abc486a6fcf8b
SSDEEP 6144:5mjmTu+M7F28kCybaFGkrNStVFxH9KGz8mQWQd5VbONT5rmNnaERchTyGisHcAz2:1R4CCywMd9zpQHINT5UchTyscSx5S
TLSH
T16DE42B959EC68FA94D904DCA733AD132A8CCD740FE07E112DD7D8B3A650F52822B5EE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\ml.pak
Size 1.5MB
SHA256 2bc35d18af85b3c7004a6e1e02591f5db4430a2f334f5c4be3c0a0e04837d9ae
MD5 d2faced6115180461f01ec5b37780721
SHA1 04af518a359396406efe27062de502d72a0efee2
SHA512 cdfe605367e5a2ef4026d1a1805f932397b161c28e37673be06431494bcecf4757aa4677d9ea38659e40a0a4dabf482ac4598eaa430ce8ec59cf26e6525567a4
SSDEEP 24576:7zVM/oZAuuxyYl+9y9XBkx/em7KfyBR+zXcj+v2uiLl3751aaiAD3e:7zJ5g
TLSH
T1F5759D5BA036CD3B0FD102167B4E2FABCD5B9F9140AF668B5869F2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\mr.pak
Size 1.3MB
SHA256 5dee369e9366bfcc4fc95aec6c58b915933efd72c718d56802e35e8af5a880a0
MD5 83769844b688def4c5a1f4ad810cdf03
SHA1 8280d04751f52d62397fa9eb0fd73811cb331344
SHA512 15b1bce67685c1a3e250f89c70a6e47c16cf1d78cc089c86bbc342aa047ec248db71a0ca0cdf00d1147341289b778ae280d0d29932f673bbc65d79736f28079a
SSDEEP 3072:zDvYSVM2ENIGC6dN5t1iIh8roTsElUrX3iWUVse0NF05HwF/yGRR3R5EodxEdY+7:zTfM36iWUPuH0P2Qt4P45tmbAy2
TLSH
T1A855C24DF7BAF3685DACBC8E36540D3BD8FD21B1C3E9925648E1B3E74884CB401596A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\ms.pak
Size 595KB
SHA256 5af99080b311e15a19f9988779a1cdd939a7fb9b98bf093fca324eeb58b39602
MD5 ec5e67d9e72519f3a1c7611ef1919a9a
SHA1 eadf0806da3c5020ded53cd0a0a2a16551aa0de5
SHA512 3c5101b115e548134ae8c1b915305b0cbf81b955a63859def2271796353d7a6f3441c01956fa3f6eca855c40febba666b6c11322a9dd6399918bede5fdafcf3f
SSDEEP 6144:l5PzpO9dhf94qE1XJHxze6L/rg42Huqwo9O78AVzZY5b4tVlqL3VDhh:ncjqz1Rx66Q/HuqwoWfY5GlqF
TLSH
T130D4B6469EDE3118085843D9D2DEA91B7CDD3332B705AF2B4DB08FB0126E7A53316B99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\nb.pak
Size 572KB
SHA256 11e798ef612a1d22b90450c547998bf0b23ccc4ca5265f27f1924c8b09f22937
MD5 08d67d2d33fbac45ccd9d09f86f16d9a
SHA1 1537998d712de4d4936a00df571d979f56523ff7
SHA512 df267cbcaeba56aefd906005c11fe62ef1d697c2e0213bdce1fc24805cd20e384ea213da0c1255e156fdcab3ea59f4d2b200868a6d02e8ddf9f4c1ed878b95bf
SSDEEP 12288:Qzjx5QXbO2jOp7fI4R36v3qG5wmNBdls7FDu:uxmOes6v3qG5XNB7uA
TLSH
T121C40883EE46B72EF2A443A4F519855B9B7D942CCE98199B54CCC63E0CC7AF052BE1C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\nl.pak
Size 594KB
SHA256 bf2a7d52d8c061b5f5543e7c4e20b4eac96e65e02a967752af873c3ec30034b2
MD5 628efc38e167f553e6ea4e46fe77c112
SHA1 44734e1804e10bf0a18675432904ce2689293064
SHA512 200ea89e0c466216af6be2d029c057c15b3afd5e48287fc978d551b14116f41712289fff86234e5dc5f7e33260723a5b4ed0a9d48672d0d496bb5f8d8935cd9d
SSDEEP 12288:KqKspUlbJWQusNUSX/gmfex95bt8ysigqHgGfDTF:KqGlbJWQusNUsfex95biysVqHgG7R
TLSH
T155D4F907AC4E653E59C0A349FA098FBBBF2ED22CC26CE67D94DDD5340443F6842AD589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\pl.pak
Size 663KB
SHA256 7a464e196878d304c7358e7ea457e5d2a17e3065ab02f29b8402803c401d747f
MD5 879a5773cc682f1d557eef24cf02c8d4
SHA1 eda4190bd8831926b8736d5f7d86d1c84228e52a
SHA512 1a2c9d120136eda736fcbc30a03aeee3ff5f23c794bbff63b384299deccb65a378cc6d2f126c625ae29fe968db842a2b39692f112f472baedbac7ba83e11c939
SSDEEP 12288:FvPTW96Z+wKppFwfQfuzSJabZLbEYPPcCUdTe3m4U0hMrma1Qh8j5Ra7FolEqtT:F3Ti6ZopPYfhM91Qhk5bB
TLSH
T192E45C0E5AE58A4E8CB008E6F2E70B7CACDDC808F109D35FE45F4526615B19ECABE5D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\pt-BR.pak
Size 621KB
SHA256 6cb59658b372d605c4dac61711b56abf5555ed69e7b9ab0916f9185af48e66ec
MD5 51094db887fd87bbc9162d5521e22973
SHA1 36e3c2e2516493c35dbe11ba18548eeb7e2dec99
SHA512 c5c15fdf857144105f2d544f70a454aa9322e4e451c377e184b543d99f20ff5daeadde54694ab1e77385893f9f728cec0402891bd98da86571d73893fa24e98e
SSDEEP 6144:0D/LLEOBh0NBXBLJZPlQcy2Q58ENAhzgesRUJmMs:0DjLEOBmY58EAXsRemv
TLSH
T194D42C2A6ECA136604225350774EDB47E5881745FE0ACA87DCFF4F06A3DDE40DA33AA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\pt-PT.pak
Size 625KB
SHA256 b727b377a6ccf25952189c59ef175c213dd1e29e896b6b5fdfacd024c711ac93
MD5 ccd1baf51f76cf4041c5946a3280c5d4
SHA1 98d8c6adab3d8bff3a4339898a8bbf68047d8c8d
SHA512 b6233a3eb262cb16b4cd61302dda8a74b129af80596528289f47e3efabce50fd4e06b8ee6e39dfb3426851f191ee62d79bef2ed97757fb2da02f0284b079e7f9
SSDEEP 6144:kKrHqVBc1X+oYpStieJVJJxhbGDLfbDGfDUh5snsusGMSRTd:klDe+oYbxh5sns6MSRJ
TLSH
T1D1D429286EDA136605135341770ADB03FAC86655F80ACB87C9EF0B4272CDF94D6B7B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\ro.pak
Size 648KB
SHA256 205ea8cc0b368426f06c533b636a2845e66e3f7932aa6a680645e79de15edff3
MD5 06edd53ab148c98097b5970386e2f9ef
SHA1 c1cc65de8cc69e82666f7fecbe510de7a9f8cda6
SHA512 9bc9a8b34bd6be4bbbe959757c23708aa109ca476727686c5cf4de295c596bd96ea4f226b2b93d04fe0f67b9011f14ecbd3648e967fa003b9b1b26e548575aa5
SSDEEP 12288:sVjgzMdy7hjolyvnBf4d2/j5sAZ5Bc2/ff:KgOs5X5y4
TLSH
T1B7E44D23A1C82A972D5152B2B73624D3E88D105DF641E28DA4DEC97D10CDDDBC62EECB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\ru.pak
Size 1.0MB
SHA256 54f1bc4ffc72547a655d4737d2c7260a71794dda56fbffd13e6e8cc313c5520c
MD5 b000132c3da11a23d9502e879e35244c
SHA1 19d441ddab87bd2ae421b31196ecd2c9c1c158ab
SHA512 b3d43c43701c569060d3f5a942102d07fe7f2c76e7856eb4769f5fccd56aae9907c69e1cedb391cd66fe437ac92105a4e5f3d4d949982a5adb6c8bf72708f57d
SSDEEP 12288:V5ThpwfQeRo4YwispqzJ9sF+oa+UWXv6HzW/oqSv9s2WTBENtgA8Nb6dwYHyO3j7:ffcBW5eohP
TLSH
T1B5358760669E64EE1101F01BDD08BE0D3CEB45FE3FAAA31619642D7F35F2024C67E65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\sk.pak
Size 675KB
SHA256 eb91fe27fd087433da4d21dc1c387a816bed0de3e6a140b4597caa90f4921fda
MD5 b4438d51809fe2f1ce9b6dae65644de8
SHA1 43c5adb90d117414c9b21fb122e268c67513ac4e
SHA512 b0c49d7cb43680358ce5692079d27bac6b3e6a21ccd23182252a17775652e9c9b4fee9e2833b28798749f4e9e97b8130e5791f737fdd66cd909b9712adecc462
SSDEEP 12288:oGoBq77+NUAyi5i2Tj5Bnyf9YQ6+8pTjsxt9ia:oY+NKix5cYM/twa
TLSH
T1FEE44D3FDFE7181E8E8D0148EFEA7110FD7E8650864EB4A6944E324714E26EDCAB4E54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\sl.pak
Size 646KB
SHA256 52426fb8fc82d1ed28797ccb62b7fe14f123cddf011f5d5875b076cdb0c33695
MD5 ac0a75c5b39b5d01894e81fd0705b1b5
SHA1 0bb293f904c9450e26f88b47462fabdf75f03d3d
SHA512 4c002d8206040e0d76f4b7c26cdfc75e7a86cae6187d4361f8b20cf071994415bc1e8f613794b3233d631faf9cc9705549b846322430ac3e0be02380eacf404d
SSDEEP 12288:voOLftUNcWtpeWpcB2BLBPHL5lbH80WOq9Myi/fzeDJql/ad:wkftUNleWHPHL5lbH8ji/fzeDj
TLSH
T1E3E41B357AA75E0F0C9AB28FFEB606007FDC044CD252A6A2FC4F336A5415A3827BD595
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\sr.pak
Size 993KB
SHA256 92dc15bac0e96ede33a7055994f3558605b3147b890ee0414314274216dbaf80
MD5 b1c9028a635ac87124f958cdf762f9e5
SHA1 342a883649a11645c90ba87713619de0ece94002
SHA512 0d5f64e224bd84873bf6d1fe004ec1c79680bb29e6eefcde0aee7460e2417a8555b9b3816ca190039165ee6cf98b1171983ae99ffb08203f95b5fe956c483cc6
SSDEEP 12288:aBNEoTHMyfD0+z3nIAhuSOd8CC0ili4MCkHvj5YEZ/XCnxKnZ37GbuEU/k/D:y+oTs5ucb5JC4o
TLSH
T1CA2556B19B9E64DB0901F41BD808BE493DAF41FE3FAB975211601DBD34E10B847B929E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\sv.pak
Size 577KB
SHA256 51f5cfc915aef54ffa11077d00021c99aac1c86f04076ba70f43608b11486199
MD5 fbc8be5878cf2eb9caa03249a2703960
SHA1 397a3975e8bfe33d4a569d1ec193ca1788f49b83
SHA512 80884b7f345add46c2d3949700cee62be1beb70e19c37cc6e1f37dff16b899dc483205ca487677f3cb7766eb736ecb1fc3d21480f2e66900e8df11268c03d3cf
SSDEEP 6144:iRdRvgh0hKL6Av+iIkQywo+nmHg2NxbINlujnLAVRFcz5RtGm0+SM49mFMuISOG9:UdRvgAO6W+DTj2E/5Mi/38N
TLSH
T123C42D438A10F526FBB2530DB609015F0AEDE15CE7E2958EB8D9883DAD8BD5805FF247
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\sw.pak
Size 610KB
SHA256 e3bf553f18a0008dc5ac86e001a0ffb190f885260a7bf06feaf34822f0dde36a
MD5 5d8f54655b52c495469c81505bc70cf7
SHA1 1137cfcc672d04e4d042af5e9035807ad1ee4de1
SHA512 77b01a29418ba010d1da495692ca4a388e6ef3da808c337c4696deb49af364ece62b97cfc9ca89cc5375951611f6f0e19375cb9858f15eb152da639afc07b6a7
SSDEEP 12288:x1XijzUy72yxGC2qMrZ5CmedqNGjRdpvC574FqHKLC6y5IZSLQB4GFpP2NUiQlZi:xdinNUGFDi4p5WcQ
TLSH
T165D4D6629871E0191233518603DDFF732BDCED5C292B2D935A46BF0F218F98C56ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\ta.pak
Size 1.5MB
SHA256 d3849b163ddca28155194a3b68583e115943d087a4d0bdb90ea815eff618cb73
MD5 f940b7b57fa0f5bc1c10c646318970bd
SHA1 d2c84040cbe3b317a2f237d05db14a31fd1be347
SHA512 fd1f8762582e0dd34b0791b38f5220eee384a8c11acd97b37194563ba8e1dd96e844d13c2e963fafb7f999f3ab6698303baead64e789780097a88856987c38eb
SSDEEP 6144:XUBBTJI5LocB5aAkuWdGP5f55q3tR9Ptm1vYpiMyO:wTq5Ll4FdGR55qBtm1vYpiMyO
TLSH
T1CD750CCE923EEE890F93288F0319536912986155C47BE3A67C766E1198ECC5DCF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\te.pak
Size 1.4MB
SHA256 4038e8dda796e26e5101da4af24a2a9c212637fec1e7633458b821d38023751b
MD5 09af4a60f243cb0211a69c142ef858a6
SHA1 3a6e821cb8ce2362a093d983ff51b41f01cbec81
SHA512 408bcd2cf86965f1fe6d71d2bcfc2231fff02259b5ff755903232503600466e32f04370d43dce55cea6c2b732ff92f9a5b9089099322f67efa475dc81c82a3cf
SSDEEP 12288:EGJlztoiUy7McKNxywG6USF602ygIC8ymoRRT5bbiu52C6WuB6SI3p1FG1Y5/C/K:EG7aRt/5SRcO9
TLSH
T1E66592023A6AD310DAE70273752CF66C49781B8161D6732C1EAFA357EB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\th.pak
Size 1.2MB
SHA256 e4e627969668d8672cc5212b9b3a1f3c42fe0c5d90d15ee893ff0bce8cf7c2c3
MD5 2f2e7773c921c55378207f4262daf575
SHA1 e919488f38f46afeba97d0759c00c66bacc728a1
SHA512 347bf1308e9ec5fe18f9e0e1f30c0c56f1b629db99be3ec4ddd8d03c4b9f6e09b6938cb93ad385fe194441e4540c190e367eaa7785917a068e9bf4fb7524b176
SSDEEP 12288:SY6dz/wyzx9N9LyZYAozYLz8AsShukJUseTPsO5eXffpbDFDS6Sd2N+Qj4o1qsl7:54Iyzxg15Csj
TLSH
T190453BB37247DDD479441B5B262A7789672DAE693F73F8E00089215A73F071A8432EE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\tr.pak
Size 621KB
SHA256 eafa2065b5dc4a3c95e5f0207fc31dc54f63aee65a8fe79925ac62a15161ee68
MD5 c7c5739fde8a8e6a74fc67fe10cc92cf
SHA1 9be5a3f6aead9c0a7d5fe6d688eece2d1db53a1b
SHA512 2bb59e05dc1499e326533b3521c5345b50c404efa512043ce4f908909242ccb8cdfaa5e12218ef9769bb3199b7a01ea7d4b364cb6608072f74415b5d82bfff88
SSDEEP 12288:yR597aXhXBQTw5Hz6sgwpIfZFR9G4pKkf5Mo4c:yJ7xcgKkf5F4c
TLSH
T167D4EA8178EF682C8BB9278FD6E90666F89F0766B331F4469B168636774535303E360C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\uk.pak
Size 1.1MB
SHA256 4b65c4e32609f29eebe8fefa25b0fa861c05cfb51131d5ba64e1878666a0bd24
MD5 1b697e603f9828c5ad13e36afa829341
SHA1 f4653e5619ac52b79da8b6576ed4febff8f92ef5
SHA512 434e17983b7502743c2210bddf1679541c8bba9c0f5b715d8b77cc919cc8d46395449054a0b407e024e30fb661acc00d1f8aa6f90bd141e1c87328204d8ccaed
SSDEEP 12288:phbqFH3ijmrV7GjIwkkzVWxjvC6sSr+fQn1u6ChdiBEIKT3/5iNvcA6Qwe860Yuo:p4ZSyrkim5K8E
TLSH
T1DF35A9A19A9D54EF0105F05BE94C7A0D7DA701FE7FA7871625A43DBF28F20248A3C35A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\ur.pak
Size 933KB
SHA256 c0d81e0446bae6d62b496f5268222ad53fe5e6f7325c19bdb7685974967beb3b
MD5 38e2b44e1d59e3275cafac4225896dab
SHA1 18c75e680d79c648434ddd19dd22a55fd49530ad
SHA512 a5a4dcf0c24538bfec537cdccb993032bb5947e3c7c37793f7a6204df77513bb8ec6bade6e832a6248c1e670c513a8dbed2a9e2f30fcc7d60f034500dfd94dd2
SSDEEP 12288:9uidSKoWw8Pl1eqtdQarI7yRbTpt5gnpEhjGMOd+DyQYrsKYjwadcJKwUduqco/r:9QI/5xGtu
TLSH
T1BA15F0D2E6B896B34A21D92780D33C34CB735F13D34AF285E56246C54E9A0139F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\vi.pak
Size 737KB
SHA256 3db088338da5890b390d6bdc047bd038ef2b2f3d982c74f546784895dd0d9b18
MD5 7772d478e416ee84286e591f5ff60c18
SHA1 1294bda5e37a7e02ee16a0ebe5937af99a5ecb50
SHA512 be88f4200d81916d18880160087a0c360c213fd4cd1356a691d00a525399422782e14fa39207d9c3ad75ed3e6979c6cea87342483b7ae329ca675a860b3a06ac
SSDEEP 12288:TQq+cyZ8oE1sVpBhbgN0+QYVN5OFWdjaMg3p5a8iVy7oIN1ZIj6l2eziuR2mfzqK:TQq+cyZVU0DFG2r5a8JFC+l2YiuhfzqK
TLSH
T111F4851216E1302680AC553EC6CE540D6FCAE42FF7C18FE56FF4297476221A46F25BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\zh-CN.pak
Size 529KB
SHA256 e0eb2457c1edb82ab19f484e45d3e029ad0c5b5cc07d68a82faf6bab55f52e52
MD5 0049a699318d1fcba473a12387e12154
SHA1 8f6395bd3c089aef2f69827e66eef04a37f241c1
SHA512 8af8059f8ade9df619068945ac9836a58b700fbbad2cece134cea82a5a250f93c2abd1ebe54390dc01bb1f0de93266661a86da984c325259b766e20f52966dd2
SSDEEP 6144:FJzyWdo7DRSkO1zik9nV7u8UkEZWbn5tXNIXp3IYj2EBxnWuY7lA:FZyWdoX4ziinc8UkEZWL5RNsYYhBUu
TLSH
T1F0B47DE910F9BDEC004650E03729613DBC41760BF66BAF366ED248DD1AA2FAD0757A07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\locales\zh-TW.pak
Size 523KB
SHA256 a5847062b32872a9a9b77361aa1a1e7f8734f6547adaa62f312a78baf20ef5c4
MD5 41adb340e5e3f4ce714359af89247e64
SHA1 65279e638f06fb1f8270955ca2d38d1065cf6100
SHA512 ceb4473347ce8e9c0bdf78c450e93f70c89e36abfdc9b4d613e1c1e73ade52d65c2ec226350e49a32fc1d4752752fd09e54fd0a1fd2294fe1a76b074ab0512fc
SSDEEP 6144:6HMV/vahIDnbeaVJVhKM92GuEL7t405YYUoH8DnXmYX2LX5mdT4:9VXaweCh9jL7t405XUoH3BLh
TLSH
T15AB46CB618FBDBEF0901E884B7CD523BBC9B342CDD777632FC4518D42E6AA641A61085
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\resources.pak
Size 6.0MB
SHA256 40af4117b0bd35da141aa599255b879013bfda5968401feccb5c43cb372cdae6
MD5 bc041e16180d671ae720a4a799e106ce
SHA1 b286bbcc059a31c8f44cca7443f88d60a4790737
SHA512 da141f2e6c2ac36dc924f1c72616db08927fd6277c7d7b12ca97dcf43a1f6ce906d269d6b6d9cf9cd957c432f5374f9be126111e006d88644f5c98ca33309fb5
SSDEEP 196608:ccLBR5ltjL+WkrYtJ/eGDi/F7MeZFFfD5CcowhJT:cOT5n1krI/7i/BZfD5N1b
TLSH
T19D5633B3F760243FC088477942D087755B3C594A2A41A0174AECF265CE6A24F6BC6BBF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\resources\app.asar
Size 454KB
SHA256 fcfed6233474be16330ffccb734401df1a5e132581e1ff673b1df16656735c1b
MD5 6fb65b1a7ddaf85e6d1adf19936ee0d3
SHA1 25825e4bb938bceffa34500a49e8f0f2bd9a038d
SHA512 091154d6d987599732f929a56fe88cb427b8c8d6574ffa3bb94c8382352fa41c48a6fbb865234e912f6f8b4461677535337c008ac35a1bb3f23d803ba6167515
SSDEEP 12288:ddP5WsGEkRBa8iOV65+04Ho8mhRMf3j/LtapJiKXwlzb/QNJnThjRD75kZUXbBcR:iDHo8mhR+/QNBDFpFXr7N11DZmJw1E
TLSH
T16EA40B0436E6F2511AA3E2625D2B5211DE1580372F3CDB90F1DDB7247F844AEB23A79B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

binding.node

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\resources\app.asar.unpacked\node_modules\btime\binding.node
Size 147KB
SHA256 475d3754f19f7075daad17a1eb1b55862d7e7866a6ba794a5763dd15fcb4be52
MD5 bfe75b93a160203b56ac60781e9ed503
SHA1 ef35a7a4bb46a747f17c6332db69e0d8762b2fde
SHA512 f06b0b8be4776921497155f96fd13e6faf5a6d5ddad434d1d1362f5dc531fd01b6dd1f26e3021d7a288871e36696e96fba0a67254a6a70c9a0b629b8f6c19f56
SSDEEP 3072:5BqdeRvWQVpkMEfi2UbUxcSSVjSSWmnCwS41kg:5BqdKvWQVpLndbUxRSemnCwSS
TLSH
T11CE36D5BB2A840B7E1A7C574C4934A02E772B8624B609FDF07E486491F237D1ED3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\resources\app.asar.unpacked\node_modules\btime\index.js
Size 1KB
SHA256 7ade5c334d6eb8a2e5ef8b6d52c5396641903af30c3c2ceda5e4934e3b88f35c
MD5 add2916dc6f63a4097ac09890ea4da3b
SHA1 e95f396302f31acae84640d5a1d25b4798fc3ac9
SHA512 e4e5956ca6e84b489cce280d074eac11365d23f650572c28c4deca02aa5aa587dcd8b7cea4faf97de05e93f741bec2ed2c901c3d219717099fa1b70b5591485e
TLSH
T1A531FD00ACF64122C0F73B36251DAD0876A0D074456DCED2926C97266FC5BBC8DED8B8
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\resources\app.asar.unpacked\node_modules\btime\package.json
Size 407B
SHA256 0db31b9e4d259fe4975a30ae751b08a5a52423cbed7c64cb992e0e66063a4320
MD5 e0fe39b2de46d23fab8e1a3cb7697a8c
SHA1 93b6dd282bff60948e8d8bb0c4ef0210ae138998
SHA512 2aeb05d2b4c2e9fbd5a4e5ca399a1581919ba368b9286a0a28564a32a96da44ea89e38d5b96759d457b20222b00be7e0995940594dc1be028f67f2a4be8e11cc
TLSH
T1B1E02220EA208EB324C969D21D5D498652120C3B400A7C2833EB601C8F5D66B24FE2BC
MD5 SHA1 SHA512 TLSH

Submit Download

binding.node

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\resources\app.asar.unpacked\node_modules\get-fonts\binding.node
Size 153KB
SHA256 4e3cb12f751b572d781a1f4b68eb27dea6156b1b0e1deedf71490f12ff7cb212
MD5 de6fdb7bc9f314598ad68d9b2bdecedf
SHA1 8169fb8747f50a8c0f11255dd206032a13e31cf7
SHA512 590786c06d262aff47ab966ad78e45e99822cf95a4f3faf961c3621bd0cb1bb46a1e212f669fcceb4767a33ba2ea936f764adb7050fb550578c1d033e1d90f78
SSDEEP 3072:KSexdeaJ7ApBEvaEQpLuiPzLXO7O22hCAmJz5:KSebeaJEHvrSiIOnAAmj
TLSH
T171F37C5BB3A50077E1A7D575C8D38A01F776B8520B609BDF03A482691F233D1EE3AB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fontsMac.mm

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\resources\app.asar.unpacked\node_modules\get-fonts\fontsMac.mm
Size 761B
SHA256 0a1a83b87b2bc325695d6c611e35b476588c9ce14566081dba296095cbea4c20
MD5 665245767a199ac7174c8573d41b1dbc
SHA1 f2e67402b036e23881e2a4723ef5fbc187a93b38
SHA512 ee7bfe0531e2b792cac09e82279aae3823ccb9006747a56ee6872e605718fd8c70a618d9c13661c373e06aae644ec6c55b36e4f8b25da9dcee0396abc7c21e23
TLSH
T16E016AB1A41D533318FFA2EBD697851F8C5471810B404471B0271FDAFCE12E54773805
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\resources\app.asar.unpacked\node_modules\get-fonts\index.js
Size 115B
SHA256 b44255cd3525bf6596a184d6d4db62c54be16826ac35c9384ead5f6a815a1b47
MD5 f149607405e03a05131c0f9c7461681e
SHA1 8eebb98c2cb58de585ec5fcdfd24b012ba6a6481
SHA512 042099077d2d561e82ddb9136f5e00ed20a5f5331f69a7f17447ac9f70820a6a21bf2589cd30bfa1fc6e76c03a9014ece924dc28b607363ec9a9a859ada2ca3f
TLSH
T11FB0123536F472DE69D045E4D3AC9002A4E2C471450BE4B21D6CE5D400D898E22F08FD
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\resources\app.asar.unpacked\node_modules\get-fonts\package.json
Size 339B
SHA256 be584f0765f4c2e00a3f86413f7c2be1c10668de047d579d7b7ed8e9aea1a7e3
MD5 04d81e5f1bfa7c2b70d6f05ee0031bcf
SHA1 f29ba5b273f87acdd8a74304e2e77795511265d1
SHA512 a6f618ea15c8b521df4e8d5b5e5a87081ee29891a7e00d338205d09daf13d42292ee2947f50d1cb34abc7d553caae9d375a2dcaed604ab81ea65678e73e45d9e
TLSH
T1C2E07D24E5208D7324C5AED20C6A851A12512C3B400CBC2C37DB901CCBAF27B15FF339
MD5 SHA1 SHA512 TLSH

Submit Download

obsidian.asar

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\resources\obsidian.asar
Size 22.9MB
SHA256 2b2483b2e1246772e0d25367ec055cbc5047ea2f0091b667c35656678f86d712
MD5 914de0dca5b6471ded847317ce6d7a9f
SHA1 12da7dd4ecd689915462833a55f94d4050e4503b
SHA512 f1644c75d1238317f1e4fad994ad614cc16a83a035a0807da1b5fe9cebadaeab7883939e589d241c0e8dcb2e56ac5472532ee7b8dbd699a4cc87730ca445056c
SSDEEP 196608:ja98QY0Epk4mhcDzKsyL6z1N7baLxhxAvhwvtDD1:/QrsyLA2xhxAvhYtDh
TLSH
T19E37AE84B3D97239428361E554BF3205B33E5C2AB008C0E8FA6CD5E93EB9A55917BF74
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\snapshot_blob.bin
Size 394KB
SHA256 eb484904e06c217beaafd2cd6847eb909225a5f0a4bf814cb1ec22653e6bd2e3
MD5 2475efe9ad373a9ffd0da6ff9853a9c9
SHA1 c63fdceef60f3409013df2af2802e681c71d982e
SHA512 9a5fc21e93df7df65ed051eed9c522b42dc5e11b58f5b370b7d699d4be1de8709e8a066e5ec6bfcafa2ebe069981bc5c3a1fb41b5874cce6c80c216600de98df
SSDEEP 3072:XU6QtROt+xeRvISYOoxs+Yi9qSkvpqE+IE3qfJjtN:X7t+OcTCvpDjz
TLSH
T13584A909B349CF36CE083A756CE887896526B18D6D96F31B7519772F38B35740E32A2C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\v8_context_snapshot.bin
Size 758KB
SHA256 1fa1cdd08423809344fe15fac2d9d1ec604cc3ea5af4b944d89a51b1e98c8665
MD5 00f69a4fa2169454a5601261a9c7245f
SHA1 b6d3d33b615fe050b7b2d009695a2a6e4e7c12a6
SHA512 abe8e379e1842d00c71a7c9cae3bd4d3a1d6ab4679f8c6d850dfee3f91affa23cbb4e0b35c035bf2832adb5f0cf5a8fe4fb21a7a377babf190fd6f11ce67e4c8
SSDEEP 6144:tU0ckYOkGt+OcqCvpWoNyuZaVaBgJjdOSkvh8mQu/INZV/peyWBOI:y1RNvMoNyerT8mQuANZhcOI
TLSH
T10EF48565F74ECF2ACA4537B86DE547463835B04A6F8BD21BB518233E38B65B00E3652C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\vk_swiftshader.dll
Size 5.4MB
SHA256 f50bfc899c3332246314f43c004d6c0bd57eb1bf87ddc67a356b19d915ed9ac7
MD5 8d7714292e881933bc76db231d3c5496
SHA1 46b7a71188cb92f14c088a792248a178210de9d9
SHA512 771920f2e13b2f3239a7b9b20117ca3c349afd62ba3c0967450d6fddee555396568c6a6311fdfcd7a0ed7b582e791a24a40b71f793512958b8b8b49e281dd385
SSDEEP 49152:VVlVRGSYZZaeYaOIHsu8n1o/n8fZ/sZSR0qCWUT8HeLig4SYLMRfXSlx1CB/wU/S:PlDYZZaeYwqqblXQ+9vWb
TLSH
T185462703F28681E9F06DD679875AA623F631F8844B2276DF16A01F192E77FE06739710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\7z-out\vulkan-1.dll
Size 937KB
SHA256 90c2e8ccdc5193275cbf99f4c43f4c419156407040a32f7d913d3429c059650b
MD5 06dff22d42fd1099b4e71f0756febb22
SHA1 79ca6054bc9153eab5fa1ad82f666881f241667a
SHA512 957e1174f05fb3bab12408dc116c6339fbd6b07965b9e4f23c4a567f545b10efc609351ed86a264aa6740b4b751683abd25392ed6afcecd5871d50a0bda009ba
SSDEEP 24576:1GVzDeAVM7N/L0H6tDVj3sF6Z5WGc4DYsHQDy6g3P0zAk79oOHAF:1GlDeAq7N/L0H6FVLsF6Z5WGc4DYsHQ6
TLSH
T167156D23965485A9D57AD034D9D28707C9B174822326B9CF02A81708BF6FFF47B3DB29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UAC.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\UAC.dll
Size 14KB
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
TLSH
T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WinShell.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\WinShell.dll
Size 3KB
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
TLSH
T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
MD5 SHA1 SHA512 TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\nsDialogs.dll
Size 9KB
SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
TLSH
T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\nsExec.dll
Size 6KB
SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
MD5 ec0504e6b8a11d5aad43b296beeb84b2
SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
TLSH
T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv534C.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\obsidian\Code Cache\js\index-dir\the-real-index
Size 48B
SHA256 dcee30dec26445f4cbc40b186eae39ac4a265103fae1c0472b494d3c7b88ae06
MD5 3572d60e546689888ca6c0e01d29bc77
SHA1 59fdd0662e6cb9cf67e073fbf113debe40108cc3
SHA512 83aeed6c49b58e6dd7f76a9d56355e8cd8c5db6151d8d7694085ca5984473698814753bf1d4b565515e8ff02a7146696914092860343279223a17b93d21cc329
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Roaming\obsidian\Code Cache\js\index-dir\the-real-index
Size 144B
SHA256 56461e8256bb280a4a7fae06ffe995fde9928721f84e2dbed4871acadd184c19
MD5 fc664b226a3d676e6174d40e554b3c8d
SHA1 37066e8fe48d3a3fd737078447c3045676e39114
SHA512 bf236914cf4372e95002a0309298d8c67a97c6aaa38aeb6a6e0f51417ba2c9f44c8725bb619aa93a3b58cdc2fe2ff2391d8cbe2259f79834adbb498c1c53aed8
TLSH
T1AEC09230B919C00DF33A417C00C140943A32DFC043D39F08E0D390BD98A438943D3480
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\obsidian\Network\Network Persistent State
Size 279B
SHA256 33d02be9a7f82a9173c73f2e00b354c334752ef97e4996d59a6e312079bd3666
MD5 8394aad06879f9ae40507ab96478d2af
SHA1 d711f9ffa93955ef9cf115cf5b6b72d99a45d9e9
SHA512 22b0e249a61a09e8259a6cded9a16cd094513fcec5c4a1e432db96eb87749740e2a2d812814190ec1a7986036c9c1f6c33fe41224c06a235c8907c4596d4e50c
TLSH
T1E9D0C2E657301CBE0352D3E05E146D67CAF90015135C9C6A81A46A1C83A247A540094A
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe59ec3b.TMP

Path C:\Users\Admin\AppData\Roaming\obsidian\Network\Network Persistent State~RFe59ec3b.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

memory/3296-835-0x00000241A3150000-0x00000241A31FF000-memory.dmp

Download

memory/5952-836-0x0000016D81020000-0x0000016D810CF000-memory.dmp

Download