Analysis

  • max time kernel
    148s
  • max time network
    137s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    01/07/2026, 04:58

General

  • Target
    YouTube-Music-Web-Setup-3.12.0.exe
  • Size 665KB
  • Sample260701-flvm9aex3r
  • SHA256 b8edd18bec9791aa9068c6a2baa74346437fa1eb7587393325a6473c00442c71
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Loads dropped DLL 10 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Run Powershell to get system information.

  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 25 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\YouTube-Music-Web-Setup-3.12.0.exe
    "C:\Users\Admin\AppData\Local\Temp\YouTube-Music-Web-Setup-3.12.0.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4736
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
      2⤵
      • Hide Artifacts: Ignore Process Interrupts
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2108
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:5292
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\youtube-music', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:5612

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        StartupProfileData-NonInteractive

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 17KB
        • SHA256 cf5c12a94387a4954ce0b2ee0a6566dbda70b919686bfc7762a0777fdccad5cf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StartupProfileData-NonInteractive

        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 16KB
        • SHA256 46c42f678bbf234e5f16909a7dc3f8da8669b8bfe81d5d13d1d2846d6dec43d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        __PSScriptPolicyTest_jqbthjgn.kse.ps1

        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_jqbthjgn.kse.ps1
        • Size 60B
        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
        • MD5 SHA1 SHA512 TLSH

        LICENSE.electron.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH

        LICENSES.chromium.html

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\LICENSES.chromium.html
        • Size 19.4MB
        • SHA256 e3c8a6093358521d4512d68945e16338755e687619196e63948d46c9267537b6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\chrome_100_percent.pak
        • Size 117KB
        • SHA256 15a5bcb49a5c02d6a4e736e8dfa11dabb0bac0589641a4e25f0c06472ccaae6d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\chrome_200_percent.pak
        • Size 192KB
        • SHA256 b7acfb068fa681f4ecb8f782bd4e3926590076c61fd0de3de4a12dde227cf52b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxcompiler.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\dxcompiler.dll
        • Size 24.4MB
        • SHA256 34e36e7d0888e8c9653314d375297abf3f027dc179920102b9b8293f79555de4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        dxil.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\dxil.dll
        • Size 1.4MB
        • SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\ffmpeg.dll
        • Size 2.9MB
        • SHA256 93f4c1a211c90978c585815ec652525d749e86ad6b6202c905ac47a85e4f66a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\icudtl.dat
        • Size 10.4MB
        • SHA256 bd8c145abdf3f8383276ce01dfa4ae48709bef9fef1c0711eb7c3fab4f6eb7c2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\libEGL.dll
        • Size 467KB
        • SHA256 630401e4e008b80c4bfca28cf01b02e371698e855aa132a7a31f6248c0a5c32f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\libGLESv2.dll
        • Size 7.6MB
        • SHA256 e9c1b0055ddd591fd33fa9a30a9adb262490f998b3c343b8225e14996aecbf77
        • MD5 SHA1 SHA512 SSDEEP TLSH

        af.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\af.pak
        • Size 605KB
        • SHA256 d990f4ced39e31a1149d2a1842ce2504706885e6ab05957ee2f338c77d94c16b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        am.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\am.pak
        • Size 983KB
        • SHA256 8d3d5dfc64acfbb0c35036d74561d09ddf3b22058eeed0f8d26a2e9c0703248e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ar.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\ar.pak
        • Size 1.1MB
        • SHA256 c54e67e232852d9b14b2bbf4c1a83f0e13a4970c2a83fd26dfb8d8c9eb40e3d6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\bg.pak
        • Size 1.1MB
        • SHA256 2789212aac5f2133ed23c1f84623bc64eb4cfbd93aef7af751d1221e27a21daa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\bn.pak
        • Size 1.4MB
        • SHA256 e72b72977b40fb10472fe1a3fcffcda8b434bf52e2bb2da2935faa80da224812
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\ca.pak
        • Size 683KB
        • SHA256 bc72ff7dd7c4286c1abb52da11c4dfdc42c917cdb267004eb2a906201850bca6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\cs.pak
        • Size 709KB
        • SHA256 8386f70e830a565d0674014ae4ad385a61eb43d7e7b99d4d373d14388dfd32ce
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\da.pak
        • Size 637KB
        • SHA256 ff687bb6dc79bb638bca4f6a9226544a783209645922d323cf777b169690b25a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\de.pak
        • Size 684KB
        • SHA256 19d27a3d2e2f1f43e9a3f1d31e62239b413041fa6abecaa9d6d2c7aa874635fd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\el.pak
        • Size 1.2MB
        • SHA256 3ee2e46a5a569e411ccf9d77ee4f356e1833bfccbaefcc5e71b7c1517206ab5f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-GB.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\en-GB.pak
        • Size 552KB
        • SHA256 aac3b4904d021d58d053bdea2d8056a219ecda1e341d87cb70070aea2cee418f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\en-US.pak
        • Size 558KB
        • SHA256 bce3ec06227dba2273c4ff12482cba37b709cc8bf5fd29c4380f9a07b92bf821
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es-419.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\es-419.pak
        • Size 674KB
        • SHA256 3beaef48bc776d3ebcfb867786fc47f78af2dfd6503f460094db5183666ce34e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\es.pak
        • Size 670KB
        • SHA256 669099cdff7ace75d40fa7b2fcb731b9fa3946d7939cae5dc6d751cdc88519e4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        et.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\et.pak
        • Size 612KB
        • SHA256 ecc838878412cc9f28dda9efed2fc60b67315f5fdf64e912db33cee7571a5939
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fa.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\fa.pak
        • Size 1013KB
        • SHA256 b516e6a0969753c2631a99d232cccc91f21aa72b208b5e5f8da17e40ab1622c9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\fi.pak
        • Size 623KB
        • SHA256 18d904efd7d15a49ef3638c45a40b3aa604e5ec4b68e017ab3f568e6a8202fd4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fil.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\fil.pak
        • Size 706KB
        • SHA256 4034bd7ef11f48d7d646aacb7006562f0f9caec888785a13c36e31b9724dd798
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\fr.pak
        • Size 728KB
        • SHA256 5c2ec8e30476184d5366427784646b4e35954dbf3490fe9b50fe84642e34f32d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\gu.pak
        • Size 1.4MB
        • SHA256 b207f2046791aa8150015ca78f9f76f2f6509953a00c5e89b155bb40e3a26474
        • MD5 SHA1 SHA512 SSDEEP TLSH

        he.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\he.pak
        • Size 887KB
        • SHA256 905504cc269112f0f2db7ddf16d751921f73ee64876e759f71fa5fe5287faa23
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\hi.pak
        • Size 1.5MB
        • SHA256 6e58e12bfc69547d03d61f23445bc996e1b09ed5e8599b00f553bf8d022a08b5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\hr.pak
        • Size 682KB
        • SHA256 6990ba056fcd1cac97ed5b48024be4ab366846a9c517d43a181cbb0eefa095d1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\hu.pak
        • Size 729KB
        • SHA256 b83fc60c6d3ce3a04338ea16ba4627d6dfdf81f4373fe4921ac01c7c9558bcb6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        id.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\id.pak
        • Size 603KB
        • SHA256 a6ccb8c77ecd0db5c9d8d3b809937e627fffb136737ffeba65a9c09e6469a243
        • MD5 SHA1 SHA512 SSDEEP TLSH

        it.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\it.pak
        • Size 660KB
        • SHA256 35a28c5136ba21b8d42a3c792f1571b2d0fb466392104f35e821f101e5696f37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ja.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\ja.pak
        • Size 804KB
        • SHA256 ba5b0b157956274ed1b8e1af1d858ca9862d59ce3ba5b833f54a613697153825
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\kn.pak
        • Size 1.6MB
        • SHA256 d154c50013245a268ba9b4b49639516ab0593922d893bdd551e4aa30ee6a3e2f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ko.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\ko.pak
        • Size 684KB
        • SHA256 8a899f9df64736f4f8b295361bcb95f501835350b9320c2396e1d6f03cde5ee8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lt.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\lt.pak
        • Size 742KB
        • SHA256 0c755ce72d1b71e77d58ab014228458d8ce2b0c51a9b00769635c6609255c9f2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\lv.pak
        • Size 739KB
        • SHA256 911f922f6ab11d04c4913b04088619276994104979b2c5f132182953fabc24a9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ml.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\ml.pak
        • Size 1.6MB
        • SHA256 8beb5df27b5a1b88d0f441518a807b2c6acd99a81820cd0249710ea12bc179d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\mr.pak
        • Size 1.4MB
        • SHA256 1971da05e4868841c9d9f78be5e17ab09178af99b86a6c07df385015a0c9d9ef
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ms.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\ms.pak
        • Size 636KB
        • SHA256 b60c552a9ced5d0e1f4ed408f65a04068acad7d80db7cf88528fbebbcd337e23
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nb.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\nb.pak
        • Size 608KB
        • SHA256 cb50908b03c77263297e63ff75d4d3c58fb0cb491c69a8964239e787c762f52d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\nl.pak
        • Size 634KB
        • SHA256 b6a6cecceeb0097d5fd9628c684d53339f7871948655740e0f625bfedbf526ae
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\pl.pak
        • Size 708KB
        • SHA256 dee5b710ca72425cd4d1236ce260f8d68b41bfdfceaeb2f98c8e89217b24208f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-BR.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\pt-BR.pak
        • Size 664KB
        • SHA256 4993d091892f4aecc9eab20bb78962f0a69c44bbea36bb5d8a65b036391cf56e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-PT.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\pt-PT.pak
        • Size 668KB
        • SHA256 266e49a497c6bf9e48502c7eb01aea1fa90260b6fb1609165ff50307a3d81b59
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\ro.pak
        • Size 693KB
        • SHA256 16b11fb73ea0c5d0336de453d3e2abd2de69b3e6c66dcd72bae318666525bb18
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\ru.pak
        • Size 1.1MB
        • SHA256 fdef254910340aef9725b2c31db4587b2b80ea7947878628235cfda2b6d0b9eb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\sk.pak
        • Size 720KB
        • SHA256 8c14d528efad4c75e09ce70719b0b3d1162954b4de4013112e014e2ac6a84d3d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\sl.pak
        • Size 690KB
        • SHA256 1550f8df161a3484a6c7af9bc5321fae524e10d6853467afcb8749054a73e601
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\sr.pak
        • Size 1.0MB
        • SHA256 a76930f2c72e49dc3a2c9be7e7bce0f9da0c93de03b6e275521fa86da0d2d39c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\sv.pak
        • Size 615KB
        • SHA256 b101225f190ed1f1738059283058703afb7eb2e0fb245dd076f919d993427b04
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sw.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\sw.pak
        • Size 651KB
        • SHA256 f4e0e2f5b49d9d767884074cc3ee8d0dd83a986f7c1d2de236885998d7a53460
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ta.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\ta.pak
        • Size 1.6MB
        • SHA256 2c5f8aaf21c9a035f71d763cfa9a20886892fcde7cf71878168a9df0faa6d417
        • MD5 SHA1 SHA512 SSDEEP TLSH

        te.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\te.pak
        • Size 1.5MB
        • SHA256 e9e85c763b92b5a98e74290c3ff07e7953269ab6228a4cc343745229819d7f8f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\th.pak
        • Size 1.3MB
        • SHA256 fa33c671ef03a11f1069cfb389df5c8f311daf145f7359ee78758c3a0709b209
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\tr.pak
        • Size 663KB
        • SHA256 b45fc423de628212dc8c8112641567fe050c7274eae82291b39e8209085b6b09
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\uk.pak
        • Size 1.1MB
        • SHA256 39e272f1acb9c0b0bc791efa0347b92cb29e20cfbb5ae14f539628f10f45b0f1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\ur.pak
        • Size 997KB
        • SHA256 0c1cfa61d9a9be6338b0a160b43ff362a982003053ae5be3b3ec867e78374d7b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\vi.pak
        • Size 789KB
        • SHA256 3594ddfb89758a3d87d51bf90e676a5dd6107a6becd96c8840df6739cf268af1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\zh-CN.pak
        • Size 564KB
        • SHA256 6e427060d2a08f2dc73de05734c1f235d3a04ef0540914587166138e0f44fda8
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-TW.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\locales\zh-TW.pak
        • Size 556KB
        • SHA256 39e6196432e79380a812d6af2e99fd198a5ca3e81565435af136531a4c9cbf42
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources.pak
        • Size 6.6MB
        • SHA256 70d973f4b90bce28ae9d2f69c953979bdf26a29298d21f5ec13143a2e7dc96fb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app-update.yml

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app-update.yml
        • Size 96B
        • SHA256 9f4859533accbac0d9812518418f98e7e067912b9fc0f8f374c14d526197361b
        • MD5 SHA1 SHA512 TLSH

        app.asar

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar
        • Size 39.8MB
        • SHA256 50edb66c2790e00bf9f7c88b08c584cb534ad59187a087f520ce2b58c7f65e3a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        error.html

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\error.html
        • Size 1KB
        • SHA256 b44d4a61592ff69f8701c561a62a842c9f315f22b4d380c132f1e2c38c7856a9
        • MD5 SHA1 SHA512 TLSH

        SVG Image.svg

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\generated\icons\mac\icon.icon\Assets\SVG Image.svg
        • Size 2KB
        • SHA256 f99d8df8a147b5ce734aa9407f470492e8468c8101deba90931409cfbfbb2cec
        • MD5 SHA1 SHA512 TLSH

        icon.json

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\generated\icons\mac\icon.icon\icon.json
        • Size 1KB
        • SHA256 293d5438631c6009ee1b50b93959c1dc3614c195f49216c115bc8266255dd720
        • MD5 SHA1 SHA512 TLSH

        1024x1024.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\generated\icons\png\1024x1024.png
        • Size 748KB
        • SHA256 b646d32eec469348945fc9f07b22c06caf9e2bf0d2dd262d97ce31ca39623054
        • MD5 SHA1 SHA512 SSDEEP TLSH

        128x128.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\generated\icons\png\128x128.png
        • Size 14KB
        • SHA256 df0edf6f765d522ec2352a13705ceaf62cd47b0150fc6a98c212efefe1d95c09
        • MD5 SHA1 SHA512 SSDEEP TLSH

        16x16.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\generated\icons\png\16x16.png
        • Size 857B
        • SHA256 d13dfb17f010fb2c62fcd589e0905d9824085b3444dd97eb622ae4b83fd5672b
        • MD5 SHA1 SHA512 TLSH

        24x24.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\generated\icons\png\24x24.png
        • Size 1KB
        • SHA256 f2e62e8a3ecba8a213e40a19adb808ca9151b409be7606f9a1684449523a0625
        • MD5 SHA1 SHA512 TLSH

        256x256.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\generated\icons\png\256x256.png
        • Size 45KB
        • SHA256 6d46f590bdef5ccf46ba2c5f715ccc84615054c511d44d163f38c18350823ea5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        32x32.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\generated\icons\png\32x32.png
        • Size 1KB
        • SHA256 b0f77f9798dd157ec3405c54ce11e9c72b4087a96f7bda133a50ef128810833d
        • MD5 SHA1 SHA512 TLSH

        48x48.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\generated\icons\png\48x48.png
        • Size 2KB
        • SHA256 db69b3943e1123ba1feca70777e2e49e3265f3cb8c578df0c8d4fdb859c6327a
        • MD5 SHA1 SHA512 TLSH

        512x512.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\generated\icons\png\512x512.png
        • Size 164KB
        • SHA256 0b867a7a5e25df1a7e7d49c1eab7ef61d091dec141461b0a5faa7cf9b8b8f1f5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        64x64.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\generated\icons\png\64x64.png
        • Size 4KB
        • SHA256 8555f17d92e670e06857e4226ae6f7ae0c70a09a036ea5c30a9c22a0d5dd32dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icon.ico

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\generated\icons\win\icon.ico
        • Size 35KB
        • SHA256 61e01b21e16bf631f6395f72a4f1903fcaa4dba2785675bb6e6fb1478fd1fb55
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icon.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\icon.png
        • Size 790KB
        • SHA256 7187a5724e3fb65b314389407d628a6572feb8c27972e87aa9864856067a2ff6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icon.svg

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\icon.svg
        • Size 2KB
        • SHA256 d97a66460e3c1f474cece1c34a37560328c9fef1fa4f3200fccb3250ec07eeb0
        • MD5 SHA1 SHA512 TLSH

        mdui.css

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\mdui.css
        • Size 19KB
        • SHA256 c58ab6ee5ca5f77955b50391475a748aa90c8c31a7c3eb0f74d489027e8a356b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        next.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\media-icons-black\next.png
        • Size 13KB
        • SHA256 ee3df5a82c601005b517bcf462ec7438c78f0f095f328a693c35806dce84f3fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pause.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\media-icons-black\pause.png
        • Size 12KB
        • SHA256 770e0ae0ae48d1ee4f97998d338c788c8667be9ba8a9d7e3b4823d8212cfbe43
        • MD5 SHA1 SHA512 SSDEEP TLSH

        play.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\media-icons-black\play.png
        • Size 12KB
        • SHA256 3112cce9bad388e494a3a1a32b2524b6776c2b913d89607060469a5f986624b2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        previous.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\media-icons-black\previous.png
        • Size 12KB
        • SHA256 6484e00ca4d65259056ad1bb4d7f447d8c9380224a0d4fd7424849175783cd81
        • MD5 SHA1 SHA512 SSDEEP TLSH

        next.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\media-icons-white\next.png
        • Size 13KB
        • SHA256 9ebb630857537c90aae2d64815e0f6804c6f882a02c0d07d0ca026a86396f968
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pause.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\media-icons-white\pause.png
        • Size 9KB
        • SHA256 0f6f1dea4e9f2662f1398dc1585ab0637694ee150a39f3f57851f4a03df718fa
        • MD5 SHA1 SHA512 SSDEEP TLSH

        play.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\media-icons-white\play.png
        • Size 13KB
        • SHA256 a526e24a98f31b2febc223afbf9c7984806cd36a211c3d0bfdb4976162e2b9fe
        • MD5 SHA1 SHA512 SSDEEP TLSH

        previous.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\media-icons-white\previous.png
        • Size 13KB
        • SHA256 3921ccf475060687c10f4cbcd20b30969098a561343cf24617ea22e2c99f6426
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tray-paused-white.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\tray-paused-white.png
        • Size 2KB
        • SHA256 7040c3f08726ef6f91342c20986f7e8a53c6dfe9a63a5a32d27e2f4fe364df64
        • MD5 SHA1 SHA512 TLSH

        tray-paused.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\tray-paused.png
        • Size 21KB
        • SHA256 d2c13e6a0e75602bda1cc699ec15bbb0b7ee4b0570f27e87900358e5020cdc19
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tray-white.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\tray-white.png
        • Size 2KB
        • SHA256 efa933d1d2ab6db94afdcd07813d1d28f081c0a1add2c189e4f324ed70e7b6c4
        • MD5 SHA1 SHA512 TLSH

        tray.png

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\app.asar.unpacked\assets\tray.png
        • Size 21KB
        • SHA256 ca8aeb67872c335fd7e247d9ff4e635b3a25d7677424752bcf59e590de86ec1a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\snapshot_blob.bin
        • Size 338KB
        • SHA256 f58cece21f318e08621201ce5c9b48b318d3177d9903ceab7a63f09fdeeef65f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\v8_context_snapshot.bin
        • Size 704KB
        • SHA256 df9460b22168f0cadd582ab07da1bf72c640b1955fb2aadaaa6c652a92b5780c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\vk_swiftshader.dll
        • Size 5.3MB
        • SHA256 7251ad75403775b327643d38a4de09a0eec3442e02ee946d48f50d8900afccd9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader_icd.json

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\7z-out\vulkan-1.dll
        • Size 904KB
        • SHA256 7258023684cea51fa08bdf3f06a24dc6ab91f48b361707f345ebbc7b29579122
        • MD5 SHA1 SHA512 SSDEEP TLSH

        INetC.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\INetC.dll
        • Size 238KB
        • SHA256 ed04a4823f221e9197b8f3c3da1d6859ff5b176185bde2f1c923a442516c810a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        SpiderBanner.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\SpiderBanner.dll
        • Size 9KB
        • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        WinShell.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH

        nsExec.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\nsExec.dll
        • Size 6KB
        • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsis7z.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nse4C91.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH

        memory/2108-43-0x0000000070170000-0x00000000704CB000-memory.dmp

        memory/2108-17-0x0000000073662000-0x0000000073663000-memory.dmp

        memory/2108-18-0x0000000002490000-0x00000000024C6000-memory.dmp

        memory/2108-19-0x0000000073650000-0x0000000073E0C000-memory.dmp

        memory/2108-20-0x0000000005110000-0x000000000575A000-memory.dmp

        memory/2108-21-0x0000000073650000-0x0000000073E0C000-memory.dmp

        memory/2108-22-0x0000000004F00000-0x0000000004F22000-memory.dmp

        memory/2108-23-0x00000000050A0000-0x0000000005106000-memory.dmp

        memory/2108-24-0x0000000005760000-0x00000000057C6000-memory.dmp

        memory/2108-27-0x00000000059A0000-0x0000000005CFB000-memory.dmp

        memory/2108-28-0x0000000005970000-0x000000000598E000-memory.dmp

        memory/2108-29-0x0000000005D10000-0x0000000005D5C000-memory.dmp

        memory/2108-31-0x0000000073650000-0x0000000073E0C000-memory.dmp

        memory/2108-30-0x0000000006EB0000-0x0000000006EE6000-memory.dmp

        memory/2108-32-0x0000000070010000-0x000000007005C000-memory.dmp

        memory/2108-35-0x00000000062B0000-0x00000000062D0000-memory.dmp

        memory/2108-36-0x0000000006F90000-0x0000000007033000-memory.dmp

        memory/2108-37-0x0000000073650000-0x0000000073E0C000-memory.dmp

        memory/2108-38-0x00000000076C0000-0x0000000007D3C000-memory.dmp

        memory/2108-39-0x0000000007040000-0x000000000705A000-memory.dmp

        memory/2108-40-0x00000000070B0000-0x00000000070BA000-memory.dmp

        memory/2108-41-0x0000000007250000-0x000000000727A000-memory.dmp

        memory/2108-42-0x0000000007280000-0x00000000072A4000-memory.dmp

        memory/2108-45-0x0000000073650000-0x0000000073E0C000-memory.dmp

        memory/5292-49-0x0000000073650000-0x0000000073E0C000-memory.dmp

        memory/5292-50-0x0000000073650000-0x0000000073E0C000-memory.dmp

        memory/5292-51-0x0000000073650000-0x0000000073E0C000-memory.dmp

        memory/5292-55-0x0000000070010000-0x000000007005C000-memory.dmp

        memory/5292-58-0x0000000007700000-0x0000000007796000-memory.dmp

        memory/5292-59-0x0000000007660000-0x0000000007671000-memory.dmp

        memory/5292-61-0x0000000073650000-0x0000000073E0C000-memory.dmp

        memory/5612-68-0x0000000070010000-0x000000007005C000-memory.dmp

        memory/5612-71-0x0000000070170000-0x00000000704CB000-memory.dmp