Overview

overview

8

Static

static

3

STALCUBE_Setup.exe

windows10-2004-x64

7

STALCUBE_Setup.exe

windows11-ltsc_2024-x64

8

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

3

d3dcompiler_47.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

resources/...vc.dll

windows10-2004-x64

1

resources/...vc.dll

windows11-ltsc_2024-x64

1

resources/...ge.dll

windows10-2004-x64

1

resources/...ge.dll

windows11-ltsc_2024-x64

1

resources/...dex.js

windows10-2004-x64

3

resources/...dex.js

windows11-ltsc_2024-x64

8

resources/...ack.js

windows10-2004-x64

3

resources/...ack.js

windows11-ltsc_2024-x64

3

resources/...dex.js

windows10-2004-x64

3

resources/...dex.js

windows11-ltsc_2024-x64

3

resources/...ain.js

windows10-2004-x64

3

resources/...ain.js

windows11-ltsc_2024-x64

3

resources/...on.dll

windows10-2004-x64

1

resources/...on.dll

windows11-ltsc_2024-x64

1

resources/...sh.bat

windows10-2004-x64

1

resources/...sh.bat

windows11-ltsc_2024-x64

1

resources/...don.js

windows10-2004-x64

3

resources/...don.js

windows11-ltsc_2024-x64

8

Analysis

  • user interaction
    yes
  • max time kernel
    282s
  • max time network
    309s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/07/2026, 10:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    STALCUBE_Setup.exe
  • Size 95.3MB
  • Sample260702-mcs7dset7q
  • SHA256 6208391cc72e3943aa95d6aca5ad2120bbae984dfdacf1f2a7d13b2051dbdb23
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoveryexecutionpersistenceransomwarespyware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Executes dropped EXE 15 IoCs
  • Loads dropped DLL 32 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops desktop.ini file(s) 3 IoCs
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 1 IoCs
  • Command and Scripting Interpreter: PowerShell 1 TTPs 59 IoCs

    Using powershell.exe command.

    execution
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 50 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
    adwarespyware
  • Modifies registry class 64 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 58 IoCs
  • Suspicious use of SendNotifyMessage 64 IoCs
  • Suspicious use of SetWindowsHookEx 17 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\STALCUBE_Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\STALCUBE_Setup.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2776
  • C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe
    "C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Drops file in Windows directory
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2844
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /d /s /c "chcp"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4492
      • C:\Windows\system32\chcp.com
        chcp
        3⤵
          PID:1784
      • C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe
        "C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\stalcube-launcher /prefetch:4 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\stalcube-launcher\Crashpad --url=https://f.a.k/e --annotation=_productName=stalcube-launcher --annotation=_version=2.2.2 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=31.7.7 --initial-client-data=0x54c,0x570,0x578,0x4b0,0x57c,0x7ff738c8a8b8,0x7ff738c8a8c4,0x7ff738c8a8d0
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5376
      • C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe
        "C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\stalcube-launcher" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1816,i,1761835852614470475,9663058794739846867,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1800 /prefetch:2
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5568
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /d /s /c "echo %COMPUTERNAME%.%USERDNSDOMAIN%"
        2⤵
          PID:4132
        • C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe
          "C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\stalcube-launcher" --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --field-trial-handle=2204,i,1761835852614470475,9663058794739846867,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2200 /prefetch:11
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:5580
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:6016
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:4796
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:4740
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:4304
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:1820
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:3696
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:3396
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:3832
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:1212
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:5620
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:2132
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:5252
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:5256
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "reg query "HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0" /v FeatureSet"
          2⤵
          • Suspicious use of WriteProcessMemory
          PID:5392
          • C:\Windows\system32\reg.exe
            reg query "HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0" /v FeatureSet
            3⤵
            • Checks processor information in registry
            PID:1664
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:3392
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:1656
        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
          2⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of AdjustPrivilegeToken
          PID:4264
        • C:\Windows\system32\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography" /v MachineGuid"
          2⤵
          • Suspicious use of WriteProcessMemory
          PID:4064
          • C:\Windows\System32\reg.exe
            C:\Windows\System32\reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography" /v MachineGuid
            3⤵
              PID:1820
          • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
            C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
            2⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            PID:5428
          • C:\Windows\system32\cmd.exe
            C:\Windows\system32\cmd.exe /d /s /c "findstr /C:"Detected boot environment" "%windir%\Panther\setupact.log""
            2⤵
            • Suspicious use of WriteProcessMemory
            PID:3376
            • C:\Windows\system32\findstr.exe
              findstr /C:"Detected boot environment" "C:\Windows\Panther\setupact.log"
              3⤵
                PID:3220
            • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
              C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
              2⤵
              • Command and Scripting Interpreter: PowerShell
              • Suspicious behavior: EnumeratesProcesses
              PID:2400
            • C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe
              "C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\stalcube-launcher" --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --app-user-model-id="STALCUBE Launcher" --app-path="C:\Program Files\STALCUBE Launcher\resources\app.asar" --no-sandbox --no-zygote --node-integration-in-worker --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=3160,i,1761835852614470475,9663058794739846867,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3156 /prefetch:1
              2⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:2820
            • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
              C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
              2⤵
              • Command and Scripting Interpreter: PowerShell
              • Suspicious behavior: EnumeratesProcesses
              PID:4620
            • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
              C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
              2⤵
              • Command and Scripting Interpreter: PowerShell
              • Suspicious behavior: EnumeratesProcesses
              PID:3080
            • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
              C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
              2⤵
              • Command and Scripting Interpreter: PowerShell
              PID:3412
            • C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe
              "C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\stalcube-launcher" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2168,i,1761835852614470475,9663058794739846867,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=952 /prefetch:10
              2⤵
              • Executes dropped EXE
              • Loads dropped DLL
              PID:5748
          • C:\Windows\system32\sihost.exe
            sihost.exe
            1⤵
            • Suspicious use of FindShellTrayWindow
            • Suspicious use of WriteProcessMemory
            PID:4588
            • C:\Windows\explorer.exe
              explorer.exe /LOADSAVEDWINDOWS
              2⤵
              • Boot or Logon Autostart Execution: Active Setup
              • Drops desktop.ini file(s)
              • Enumerates connected drives
              • Checks SCSI registry key(s)
              • Modifies Internet Explorer settings
              • Modifies registry class
              • Suspicious behavior: AddClipboardFormatListener
              • Suspicious behavior: GetForegroundWindowSpam
              • Suspicious use of FindShellTrayWindow
              • Suspicious use of SendNotifyMessage
              • Suspicious use of SetWindowsHookEx
              • Suspicious use of WriteProcessMemory
              PID:2884
              • C:\Program Files\STALCUBE Launcher\resources\elevate.exe
                "C:\Program Files\STALCUBE Launcher\resources\elevate.exe"
                3⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:4816
              • C:\Program Files\STALCUBE Launcher\resources\elevate.exe
                "C:\Program Files\STALCUBE Launcher\resources\elevate.exe"
                3⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:6008
              • C:\Program Files\STALCUBE Launcher\resources\elevate.exe
                "C:\Program Files\STALCUBE Launcher\resources\elevate.exe"
                3⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:4692
              • C:\Program Files\STALCUBE Launcher\resources\elevate.exe
                "C:\Program Files\STALCUBE Launcher\resources\elevate.exe"
                3⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:4840
              • C:\Program Files\STALCUBE Launcher\resources\elevate.exe
                "C:\Program Files\STALCUBE Launcher\resources\elevate.exe"
                3⤵
                • Executes dropped EXE
                • System Location Discovery: System Language Discovery
                PID:4344
              • C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe
                "C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe"
                3⤵
                • Executes dropped EXE
                • Loads dropped DLL
                • Checks processor information in registry
                • Suspicious use of WriteProcessMemory
                PID:4592
                • C:\Windows\system32\cmd.exe
                  C:\Windows\system32\cmd.exe /d /s /c "chcp"
                  4⤵
                  • Suspicious use of WriteProcessMemory
                  PID:696
                  • C:\Windows\system32\chcp.com
                    chcp
                    5⤵
                      PID:5896
                  • C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe
                    "C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\stalcube-launcher /prefetch:4 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\stalcube-launcher\Crashpad --url=https://f.a.k/e --annotation=_productName=stalcube-launcher --annotation=_version=2.2.2 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=31.7.7 --initial-client-data=0x52c,0x550,0x558,0x4b8,0x55c,0x7ff738c8a8b8,0x7ff738c8a8c4,0x7ff738c8a8d0
                    4⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    PID:6136
                  • C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe
                    "C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\stalcube-launcher" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1872,i,13591394754861936573,10506499698147124652,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1860 /prefetch:2
                    4⤵
                    • Executes dropped EXE
                    • Loads dropped DLL
                    PID:4612
                  • C:\Windows\system32\cmd.exe
                    C:\Windows\system32\cmd.exe /d /s /c "echo %COMPUTERNAME%.%USERDNSDOMAIN%"
                    4⤵
                      PID:5024
                    • C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe
                      "C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\stalcube-launcher" --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --field-trial-handle=2168,i,13591394754861936573,10506499698147124652,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2164 /prefetch:11
                      4⤵
                      • Executes dropped EXE
                      • Loads dropped DLL
                      PID:5428
                    • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      4⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:1588
                    • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      4⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:4764
                    • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      4⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:5396
                    • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      4⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:932
                    • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      4⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:3392
                    • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      4⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:4160
                    • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      4⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:3148
                    • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      4⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:2760
                    • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      4⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:6072
                    • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      4⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:4620
                    • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      4⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:3840
                    • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      4⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:2648
                    • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                      C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                      4⤵
                      • Command and Scripting Interpreter: PowerShell
                      PID:3592
                    • C:\Windows\system32\cmd.exe
                      C:\Windows\system32\cmd.exe /d /s /c "reg query "HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0" /v FeatureSet"
                      4⤵
                        PID:4828
                        • C:\Windows\system32\reg.exe
                          reg query "HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0" /v FeatureSet
                          5⤵
                            PID:464
                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                          4⤵
                          • Command and Scripting Interpreter: PowerShell
                          PID:4088
                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                          4⤵
                          • Command and Scripting Interpreter: PowerShell
                          PID:1028
                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                          4⤵
                          • Command and Scripting Interpreter: PowerShell
                          PID:1064
                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                          4⤵
                          • Command and Scripting Interpreter: PowerShell
                          PID:4148
                        • C:\Windows\system32\cmd.exe
                          C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography" /v MachineGuid"
                          4⤵
                            PID:4820
                            • C:\Windows\System32\reg.exe
                              C:\Windows\System32\reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography" /v MachineGuid
                              5⤵
                                PID:2216
                            • C:\Windows\system32\cmd.exe
                              C:\Windows\system32\cmd.exe /d /s /c "findstr /C:"Detected boot environment" "%windir%\Panther\setupact.log""
                              4⤵
                                PID:4852
                                • C:\Windows\system32\findstr.exe
                                  findstr /C:"Detected boot environment" "C:\Windows\Panther\setupact.log"
                                  5⤵
                                    PID:4056
                                • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                  C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                  4⤵
                                  • Command and Scripting Interpreter: PowerShell
                                  PID:2592
                                • C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe
                                  "C:\Program Files\STALCUBE Launcher\STALCUBE Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\stalcube-launcher" --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --app-user-model-id="STALCUBE Launcher" --app-path="C:\Program Files\STALCUBE Launcher\resources\app.asar" --no-sandbox --no-zygote --node-integration-in-worker --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=3064,i,13591394754861936573,10506499698147124652,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3060 /prefetch:1
                                  4⤵
                                    PID:4076
                                  • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                    C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                    4⤵
                                    • Command and Scripting Interpreter: PowerShell
                                    PID:5508
                                  • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                    C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                    4⤵
                                    • Command and Scripting Interpreter: PowerShell
                                    PID:1668
                                  • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                    C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                    4⤵
                                    • Command and Scripting Interpreter: PowerShell
                                    PID:2224
                                  • C:\Windows\system32\cmd.exe
                                    C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\system32\reg.exe QUERY "HKLM\Software\Microsoft\Windows\CurrentVersion" /v ProgramFilesDir"
                                    4⤵
                                      PID:5928
                                      • C:\Windows\system32\reg.exe
                                        C:\Windows\system32\reg.exe QUERY "HKLM\Software\Microsoft\Windows\CurrentVersion" /v ProgramFilesDir
                                        5⤵
                                          PID:1536
                                      • C:\Windows\system32\cmd.exe
                                        C:\Windows\system32\cmd.exe /d /s /c "echo %COMPUTERNAME%.%USERDNSDOMAIN%"
                                        4⤵
                                          PID:404
                                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                          4⤵
                                          • Command and Scripting Interpreter: PowerShell
                                          PID:5480
                                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                          4⤵
                                          • Command and Scripting Interpreter: PowerShell
                                          PID:6072
                                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                          4⤵
                                          • Command and Scripting Interpreter: PowerShell
                                          PID:1148
                                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                          4⤵
                                          • Command and Scripting Interpreter: PowerShell
                                          PID:4892
                                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                          4⤵
                                          • Command and Scripting Interpreter: PowerShell
                                          PID:4056
                                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                          4⤵
                                          • Command and Scripting Interpreter: PowerShell
                                          PID:5836
                                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                          4⤵
                                          • Command and Scripting Interpreter: PowerShell
                                          PID:1664
                                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                          4⤵
                                          • Command and Scripting Interpreter: PowerShell
                                          PID:4956
                                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                          4⤵
                                          • Command and Scripting Interpreter: PowerShell
                                          PID:2212
                                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                          4⤵
                                          • Command and Scripting Interpreter: PowerShell
                                          PID:1756
                                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                          4⤵
                                          • Command and Scripting Interpreter: PowerShell
                                          PID:992
                                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                          4⤵
                                          • Command and Scripting Interpreter: PowerShell
                                          PID:1920
                                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                          4⤵
                                          • Command and Scripting Interpreter: PowerShell
                                          PID:1772
                                        • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                          C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                          4⤵
                                          • Command and Scripting Interpreter: PowerShell
                                          PID:5324
                                        • C:\Windows\system32\cmd.exe
                                          C:\Windows\system32\cmd.exe /d /s /c "reg query "HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0" /v FeatureSet"
                                          4⤵
                                            PID:5312
                                            • C:\Windows\system32\reg.exe
                                              reg query "HKEY_LOCAL_MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0" /v FeatureSet
                                              5⤵
                                                PID:4680
                                            • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                              C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                              4⤵
                                              • Command and Scripting Interpreter: PowerShell
                                              PID:6208
                                            • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                              C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                              4⤵
                                              • Command and Scripting Interpreter: PowerShell
                                              PID:6216
                                            • C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe
                                              C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NoLogo -InputFormat Text -NoExit -ExecutionPolicy Unrestricted -Command -
                                              4⤵
                                              • Command and Scripting Interpreter: PowerShell
                                              PID:6224
                                            • C:\Windows\system32\cmd.exe
                                              C:\Windows\system32\cmd.exe /d /s /c "findstr /C:"Detected boot environment" "%windir%\Panther\setupact.log""
                                              4⤵
                                                PID:6488
                                                • C:\Windows\system32\findstr.exe
                                                  findstr /C:"Detected boot environment" "C:\Windows\Panther\setupact.log"
                                                  5⤵
                                                    PID:6560
                                                • C:\Windows\system32\cmd.exe
                                                  C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography" /v MachineGuid"
                                                  4⤵
                                                    PID:6568
                                                    • C:\Windows\System32\reg.exe
                                                      C:\Windows\System32\reg query "HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography" /v MachineGuid
                                                      5⤵
                                                        PID:6572
                                              • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
                                                "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
                                                1⤵
                                                • Modifies registry class
                                                • Suspicious use of SetWindowsHookEx
                                                PID:3676
                                              • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
                                                "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
                                                1⤵
                                                • Modifies registry class
                                                • Suspicious use of SetWindowsHookEx
                                                PID:3372
                                              • C:\Windows\System32\rundll32.exe
                                                C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
                                                1⤵
                                                  PID:4888
                                                • C:\Windows\system32\OpenWith.exe
                                                  C:\Windows\system32\OpenWith.exe -Embedding
                                                  1⤵
                                                    PID:6892

                                                  Network

                                                        MITRE ATT&CK Enterprise v16

                                                        Replay Monitor

                                                        Loading Replay Monitor...

                                                        Downloads

                                                        Uninstall STALCUBE Launcher.exe
                                                        • Path C:\Program Files\STALCUBE Launcher\Uninstall STALCUBE Launcher.exe
                                                        • Size 191KB
                                                        • SHA256 4977d64f02db582dd57390cce52c38d8483bfe2847a8e70876f39b73a96e2124
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ModuleAnalysisCache
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache
                                                        • Size 67KB
                                                        • SHA256 c32bab8cc6b4cd057e2e02ae5fac2d93e59e0b7f81185e27ea9d743f42931493
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ModuleAnalysisCache
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\ModuleAnalysisCache
                                                        • Size 67KB
                                                        • SHA256 9c0c8b594926d73e2e2de1ee6c6382f4961c671976ef66bcceb6f5629b220907
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        StartupProfileData-Interactive
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive
                                                        • Size 1KB
                                                        • SHA256 9755b1e9f88f8306c157dd6385673f972e974cb6cb353821ae00cc72f5e6ba9b
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        StartupProfileData-Interactive
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive
                                                        • Size 1KB
                                                        • SHA256 53b87e947572f88ef3d9bfcc0682fa7f45c1cd5433bd2cd8f915f0dc2ad388be
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        StartupProfileData-Interactive
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive
                                                        • Size 1KB
                                                        • SHA256 32cb9de8f353647667b7f924bb30db77f8f0fb89be6c64bcdafe6ae2081e4f65
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        StartupProfileData-Interactive
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive
                                                        • Size 1KB
                                                        • SHA256 3816e535b41b467cc35dda24454d688893dd25cbf8458bd5485b89b7127e3cd8
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        StartupProfileData-Interactive
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive
                                                        • Size 1KB
                                                        • SHA256 ed38e16f88585646a7d2aea3cf85e0559729b324b3584813e04d3c23abfdf356
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        StartupProfileData-Interactive
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive
                                                        • Size 1KB
                                                        • SHA256 fa31a35f9e3d787dccd09f39e84b3b23a6ebe737620d94c422236e4901c88061
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        StartupProfileData-Interactive
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive
                                                        • Size 1KB
                                                        • SHA256 edf370f8930b03e4adbcec6fc14fcec363a4a1d798f3ec2622352d3de1a711f3
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        StartupProfileData-Interactive
                                                        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-Interactive
                                                        • Size 1KB
                                                        • SHA256 f004e88cd299601f2e8a4328bf312e0db1cde6d291029759767ebab9b8526b76
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        prep_Activatable Class_Hermes_perf.cache
                                                        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
                                                        • Size 599B
                                                        • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        __PSScriptPolicyTest_lwaqqzlh.tdp.ps1
                                                        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_lwaqqzlh.tdp.ps1
                                                        • Size 60B
                                                        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        LICENSE.electron.txt
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\LICENSE.electron.txt
                                                        • Size 1KB
                                                        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        LICENSES.chromium.html
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\LICENSES.chromium.html
                                                        • Size 9.0MB
                                                        • SHA256 dc2878d9bf6ef5fca45737536272a7a1877e0c6f89cb9578cb0f956781102986
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        chrome_100_percent.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\chrome_100_percent.pak
                                                        • Size 148KB
                                                        • SHA256 7dd5485def22a53c0635efdf8ae900f147ec8c8a22b9ed71c24668075dd605d3
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        chrome_200_percent.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\chrome_200_percent.pak
                                                        • Size 223KB
                                                        • SHA256 2408969599d3953aae2fb36008e4d0711e30d0bc86fb4d03f8b0577d43c649fa
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        d3dcompiler_47.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\d3dcompiler_47.dll
                                                        • Size 4.7MB
                                                        • SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ffmpeg.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\ffmpeg.dll
                                                        • Size 2.6MB
                                                        • SHA256 113ccc8e701157d0d59283baa5dc1fd3b0eae2571fd825084d7a4d58697a5ec2
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        icudtl.dat
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\icudtl.dat
                                                        • Size 10.0MB
                                                        • SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        libEGL.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\libEGL.dll
                                                        • Size 470KB
                                                        • SHA256 01b8a8c2875ecb9979de339500ce0e0b7ecc3c5387053ce27bea51e6a09e2d72
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        libGLESv2.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\libGLESv2.dll
                                                        • Size 7.7MB
                                                        • SHA256 fb6ea924fbb9417e4695ce414cdcbc299f13451dbedd2d9adb55479bf1cbf57f
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        af.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\af.pak
                                                        • Size 494KB
                                                        • SHA256 e2470090a09ca500679e68bb5e3b1acc35a5873fea4f93af25a23c82122f2c13
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        am.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\am.pak
                                                        • Size 800KB
                                                        • SHA256 4e15946e86a578eeff41feda808bb291d81e240fbdfc96cbe2efe692ad35eef5
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ar.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\ar.pak
                                                        • Size 874KB
                                                        • SHA256 5cc02570e5f61cbca791309985df3a29584e41583b3344f1d9fb6b04ce423e6f
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        bg.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\bg.pak
                                                        • Size 913KB
                                                        • SHA256 97ef7984074775282b68dca5d5a469efdb2b22474ee6669fdfb5197d3f1b3768
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        bn.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\bn.pak
                                                        • Size 1.1MB
                                                        • SHA256 1aba82aee8c985e5e370e7cf2b35c9ec20cbe5174db5fcb54ec7d19ec5d79587
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ca.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\ca.pak
                                                        • Size 556KB
                                                        • SHA256 b3d5dfae25427596b1f14a8e13d6bcb58532c82554229c2367779ff5c42b28bb
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        cs.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\cs.pak
                                                        • Size 572KB
                                                        • SHA256 7d7b701ce510b2e4a18e957e500086db590aad8bf5acd37f82263a676f0b556c
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        da.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\da.pak
                                                        • Size 518KB
                                                        • SHA256 3430c0f1946901dfa24190ca3989f72171ec564bc7c523853e6a1f531b61b5ee
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        de.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\de.pak
                                                        • Size 553KB
                                                        • SHA256 662496eff49febbe49f0a03cf2c51acaa743cb2237de3c41014556e16f3d8e2b
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        el.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\el.pak
                                                        • Size 1001KB
                                                        • SHA256 162e51bc7d682e223e498f4ff8c81f019d136d857bd25a1c982d4a1084a8c840
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        en-GB.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\en-GB.pak
                                                        • Size 450KB
                                                        • SHA256 7df934906a61c0ae7a952f9ed058f4a06cd3989663a7d9f50afc3c9f830135bb
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        en-US.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\en-US.pak
                                                        • Size 454KB
                                                        • SHA256 41123d72bd8e289e85bd35227aabb4cc61fe1de02b5cd7a7834e5ec200bc2078
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        es-419.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\es-419.pak
                                                        • Size 547KB
                                                        • SHA256 ec922f8ca16b7e7642fc73369ba7b75ec950cafb1dcadc6c88426c034382d483
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        es.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\es.pak
                                                        • Size 547KB
                                                        • SHA256 0385e6776de5a0d8a3b30b7bad44308ac4cb04e2bcebd573d3c7938b68036573
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        et.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\et.pak
                                                        • Size 497KB
                                                        • SHA256 ba4ec85d2306a1f1f178a017fef4d340b77b33e10bbee07bd359a8e0ff8ea461
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        fa.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\fa.pak
                                                        • Size 813KB
                                                        • SHA256 f1a7351bf0d8cad475d2761b9edf970c3098836e38aa98106a5e04a41002b7c8
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        fi.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\fi.pak
                                                        • Size 508KB
                                                        • SHA256 11b0b9b0f74d01f16db7aa49be9dceeb55fde9da56f17419c4bca159cdcae274
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        fil.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\fil.pak
                                                        • Size 573KB
                                                        • SHA256 d7fdc7fd08dcc421bc8aaae3fdc72599c60a3b96f05989a3e46736f0de06e745
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        fr.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\fr.pak
                                                        • Size 591KB
                                                        • SHA256 1f6cc56e04bcbd6b6ecbe500bcb0a5702551ec80d79e624642d0c7d9758d4424
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        gu.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\gu.pak
                                                        • Size 1.1MB
                                                        • SHA256 087e99953eef9b5fd736e3dbd98d702fdb01dc614593a4c575cb619159688118
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        he.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\he.pak
                                                        • Size 713KB
                                                        • SHA256 20b1c80f8b2bd5130a1fb372814fb9c9ceac15305da3da0cb29923960a94a934
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        hi.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\hi.pak
                                                        • Size 1.2MB
                                                        • SHA256 9c6d8d93278a6e375405142df9829adefbcc8ae9797a4f589591b9784b2b71c8
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        hr.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\hr.pak
                                                        • Size 551KB
                                                        • SHA256 afed35643df24709c8c5cc9b8158b3d9a2266fbfeed132e98ff254ced4086c5f
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        hu.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\hu.pak
                                                        • Size 595KB
                                                        • SHA256 b4e6a1135de8bdc42c04f4db4eb1ce48256f18eb46a5146a21010b6165a90e7a
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        id.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\id.pak
                                                        • Size 490KB
                                                        • SHA256 a21f9474a19fe2d7f26c59f5ba8d6e72801a8a057b7dbcb8b3f96471043d9059
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        it.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\it.pak
                                                        • Size 539KB
                                                        • SHA256 33652aae78a486dc3ce4e5affd1b7f72e1248f6f9f3e62188afe3b5d73bd148e
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ja.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\ja.pak
                                                        • Size 659KB
                                                        • SHA256 c5692ca739c31569ae2431fd58f1028e6c8c01af278b76656ee0bb65b79e9985
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        kn.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\kn.pak
                                                        • Size 1.3MB
                                                        • SHA256 a6ecf1dfe4d99f6ba0926c696b5b23b77d234fa8fd03da9825b074ecc640d508
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ko.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\ko.pak
                                                        • Size 557KB
                                                        • SHA256 3fa72d61a997c36f9c093f769f4bba60b290d1fbcb71d5544f85e8e1efe51d07
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        lt.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\lt.pak
                                                        • Size 597KB
                                                        • SHA256 a1257d10e673311747363e6929832e70f36668b1fc0d6a5ddd550fe88007aa58
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        lv.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\lv.pak
                                                        • Size 596KB
                                                        • SHA256 33fdf706f6d3f06b485c5115a7c73a571296dac41c582fc9d0dbb371d86e8653
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ml.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\ml.pak
                                                        • Size 1.3MB
                                                        • SHA256 87384db1ddcac012b0b40ec89daf47ebbbcf1497705f023a6983fb2470e4abd6
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        mr.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\mr.pak
                                                        • Size 1.1MB
                                                        • SHA256 039f4e0176c38867fef57482825d043fa63bf1356c85eab0fc665f118db125e4
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ms.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\ms.pak
                                                        • Size 514KB
                                                        • SHA256 2f0c83b5b3bff8f624d78e0670a31c509e7f1d5330f72aaede471b2e97c956e2
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        nb.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\nb.pak
                                                        • Size 499KB
                                                        • SHA256 887a0278971d6ba61e2f24c62029a3087a46c4962c4357412c28ede12ed6da15
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        nl.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\nl.pak
                                                        • Size 516KB
                                                        • SHA256 619c61701b3a142733d23ad8c7117bc013867a842d3d1d572faa56895ad8257e
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        pl.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\pl.pak
                                                        • Size 574KB
                                                        • SHA256 f2a7dcb69a433c2a898866c555b82c26e3515c089f500e7748b9b11ec3047786
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        pt-BR.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\pt-BR.pak
                                                        • Size 540KB
                                                        • SHA256 5ff219be32f9178fee40e8966ac5deff2be1f2ff259a66cb9cdce81c2e90a7e8
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        pt-PT.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\pt-PT.pak
                                                        • Size 543KB
                                                        • SHA256 02ea290fac25b414a1d4ed78cdc159cf6c73fe5350824c2f36f032e426a23364
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ro.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\ro.pak
                                                        • Size 562KB
                                                        • SHA256 655c175903a791d0ff56264a487c53f7bd09ed037cf04cfa6e79eb8be5b677e9
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ru.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\ru.pak
                                                        • Size 924KB
                                                        • SHA256 4babe5f20caafca33867ee263aa9dd55ed271704a062e4372fdd133eb359a558
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        sk.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\sk.pak
                                                        • Size 580KB
                                                        • SHA256 89f984a67cea3997c704005fbfbacd3f6f5652248626945c2ab1c3bcf24e6623
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        sl.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\sl.pak
                                                        • Size 556KB
                                                        • SHA256 458b15bf249c1e6fe9843725c42443274ef6e09dcb15f5288c916c0561aefc47
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        sr.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\sr.pak
                                                        • Size 859KB
                                                        • SHA256 4cea4c83b5e887463dadbf470a9953b8175149f31fd07b83406a6fc59acfde41
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        sv.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\sv.pak
                                                        • Size 501KB
                                                        • SHA256 105460cb717104d82f99cf8c5e2c51ff252211a605bd1c98bf75981f100d619e
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        sw.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\sw.pak
                                                        • Size 529KB
                                                        • SHA256 f0fccf2e3ad332846736d816e254028569f5f84918573872442987a8bc9bba58
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ta.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\ta.pak
                                                        • Size 1.3MB
                                                        • SHA256 1cebac8d758298ed2763e62b9bdfb17351831e691ff3e1ba85252c9a66d66242
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        te.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\te.pak
                                                        • Size 1.2MB
                                                        • SHA256 8264244c6de861817f5b19cef282844a18ed8cb7d4e059451489652749fe931e
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        th.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\th.pak
                                                        • Size 1.0MB
                                                        • SHA256 647ad394e92e7610bd0f6c4e08d28748408fcd5a816a35e4622ea7f71cfa7a9d
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        tr.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\tr.pak
                                                        • Size 539KB
                                                        • SHA256 f58ed19be62706fb4fd797a6bfd3af5c6ad4b39aef994a577cd28968fcac0291
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        uk.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\uk.pak
                                                        • Size 923KB
                                                        • SHA256 13e40208e2c9f4f4b83dcf422610dc82314a8f99ba50acdbd286c508f92eb232
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        ur.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\ur.pak
                                                        • Size 808KB
                                                        • SHA256 60310f9a3457fae0395b447a30646211ef4160ba84bd7c36d291af4c8ec2b79a
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        vi.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\vi.pak
                                                        • Size 639KB
                                                        • SHA256 fb9463d5655e73fa69cace9800d95f8cd077ee9284fef3bfe162d2bfe220c257
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        zh-CN.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\zh-CN.pak
                                                        • Size 460KB
                                                        • SHA256 f0c0ba53c954325b3bbefb333ba23f7fb40a7a4e506043e9f7886089f611943b
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        zh-TW.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\locales\zh-TW.pak
                                                        • Size 455KB
                                                        • SHA256 d4033cb3264c7c4cd2636ea2a202421650c449e5bfb10f29949e4c44e91ca93b
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        resources.pak
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources.pak
                                                        • Size 5.3MB
                                                        • SHA256 a5908171bfbb738ac015e7c9903c838d93359ed12c3b7d86545514dc1f0e9d62
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        app-update.yml
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app-update.yml
                                                        • Size 126B
                                                        • SHA256 3c5277bce365adac0dda171bf446974cdce963dcc267ff1d6dbbef8b57619f1b
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        nice.win32-x64-msvc.node
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\@napi-rs\nice-win32-x64-msvc\nice.win32-x64-msvc.node
                                                        • Size 227KB
                                                        • SHA256 310f9f72ea6665278111e3a457c7d36df5d373f701c365765007edd56a9c27a0
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        package.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\@napi-rs\nice-win32-x64-msvc\package.json
                                                        • Size 537B
                                                        • SHA256 17edd392804e886fd60863feca265b2576f4462d35398ea185e90270dd2b5e43
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        .editorconfig
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\.editorconfig
                                                        • Size 180B
                                                        • SHA256 12c500d4f4b256022ed030c6da244da8f270a5936a5effa693a748196b95f781
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        LICENSE
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\LICENSE
                                                        • Size 1KB
                                                        • SHA256 b7c02ebd74b762254f563f6a7c17f7a10265e30055633dd850d17e0fd08d5e19
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        diskusage.iobj
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\build\Release\diskusage.iobj
                                                        • Size 546KB
                                                        • SHA256 aef130b2f1d3a8c2c78149988b03fb487f8e688052cf37d795371d48769f0bbe
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        diskusage.ipdb
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\build\Release\diskusage.ipdb
                                                        • Size 187KB
                                                        • SHA256 8f51055ac3b696aa05ef5ff8ca1af62fd9d8216ba73718779921c4534955299c
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        diskusage.node
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\build\Release\diskusage.node
                                                        • Size 173KB
                                                        • SHA256 80ab73bc53289794a00ef1904de39ea25a7d66447c465419e492a13ffb023cab
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        diskusage.node.recipe
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\build\Release\obj\diskusage\diskusage.node.recipe
                                                        • Size 353B
                                                        • SHA256 5820ba63310866bf6b7be14c58858d0f4ef9065576a904893face38ed65f9108
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        CL.command.1.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\build\Release\obj\diskusage\diskusage.tlog\CL.command.1.tlog
                                                        • Size 8KB
                                                        • SHA256 054278893ad6e12d5512ca913fd8e147403c56cf0b1a1363e41757e73adf3ced
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        CL.read.1.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\build\Release\obj\diskusage\diskusage.tlog\CL.read.1.tlog
                                                        • Size 97KB
                                                        • SHA256 1da1afc0d16b6a13f5a4b710542921a9a72eb95614ef9249ef574df5f0e0c727
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        CL.write.1.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\build\Release\obj\diskusage\diskusage.tlog\CL.write.1.tlog
                                                        • Size 1KB
                                                        • SHA256 e9be56b6aff678e493248c4461d5e6c4207e162e88d7206e7f72f3d91772fdf4
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Cl.items.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\build\Release\obj\diskusage\diskusage.tlog\Cl.items.tlog
                                                        • Size 709B
                                                        • SHA256 888e5770f8d7c3f94490830e18b183f13b077045aafb29d2c437c0f07f0ec420
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        diskusage.lastbuildstate
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\build\Release\obj\diskusage\diskusage.tlog\diskusage.lastbuildstate
                                                        • Size 219B
                                                        • SHA256 1d4717a6a7b3f604351834038c417a33aa7eb1ef149505a7b9de74dc80e3cd72
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        link.command.1.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\build\Release\obj\diskusage\diskusage.tlog\link.command.1.tlog
                                                        • Size 2KB
                                                        • SHA256 982bea1e2836c257110615c7fb04d2dba9d90056f3d324300a06c791ec0e198d
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        link.read.1.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\build\Release\obj\diskusage\diskusage.tlog\link.read.1.tlog
                                                        • Size 5KB
                                                        • SHA256 12c21689f64753bccf8785a20f0f62b361b5551f70e321b6120e2134b014e736
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        link.secondary.1.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\build\Release\obj\diskusage\diskusage.tlog\link.secondary.1.tlog
                                                        • Size 615B
                                                        • SHA256 ac3940c67e7e9c5d5847ce0b97a49bfbdf53675257a6e7a9f065bc2ba708c3ea
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        link.write.1.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\build\Release\obj\diskusage\diskusage.tlog\link.write.1.tlog
                                                        • Size 1KB
                                                        • SHA256 c748fdb36be9e3ef732edbfbb2973866cea9d15c49f70a62bcf9f0f9bdf21c27
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        diskusage.vcxproj
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\build\diskusage.vcxproj
                                                        • Size 11KB
                                                        • SHA256 5740329de782ca55799d7fff2cb0e569c38fb27a536efdbb11f52c88b672bbe5
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        diskusage.vcxproj.filters
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\build\diskusage.vcxproj.filters
                                                        • Size 3KB
                                                        • SHA256 1b03db46f1e291eb75d54130c429693b3f1aa318621d1dd32f544fa7ea02a3b5
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        index.js
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\demo\index.js
                                                        • Size 923B
                                                        • SHA256 45a4bc8111be8bc7292df05830150f38de73dc026d8963b9c75955647fc0b308
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        fallback.js
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\fallback.js
                                                        • Size 677B
                                                        • SHA256 ba34dfcda1ececcfad1c14331b97391f37e875fca932167fd931ed380a74081a
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        index.js
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\index.js
                                                        • Size 1KB
                                                        • SHA256 c87aa357fc676205fa60a6c0215738b0a261f7f7b1fb1f836231de38ef2d2abf
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        package.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\package.json
                                                        • Size 563B
                                                        • SHA256 f9231a5612e4555ae06d957da5e9cf0e770ed127696222c26418ae43d7c86bb2
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        diskusage.h
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\src\diskusage.h
                                                        • Size 778B
                                                        • SHA256 9b6f99854f4220696e3c0d98dd68a21d9caf38f16bce9a23c059e8d503c186f9
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        diskusage_posix.cpp
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\src\diskusage_posix.cpp
                                                        • Size 540B
                                                        • SHA256 b4e1b5bbdce40b162482bc5d013d86d87e0d787f74e5cca421bd0031f4289ddb
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        diskusage_win.cpp
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\src\diskusage_win.cpp
                                                        • Size 1KB
                                                        • SHA256 407317f29571d697108dd8424527cabeb4b69b02716ab07abfa2d0e3d0ae0491
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        main.cpp
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\diskusage\src\main.cpp
                                                        • Size 1KB
                                                        • SHA256 1d7b34b781d9da00887cbc9498ff675b0c464ee99d33038102447f9792458c19
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        LICENSE
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\LICENSE
                                                        • Size 1KB
                                                        • SHA256 c4ffe9a94792de9f5b9cc5d7da05a3ce3f7adff3f7dd4b7d5e3c8162b8917f39
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        addon.exp
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\Release\addon.exp
                                                        • Size 1KB
                                                        • SHA256 c24d74ad2a99c997757b9300d794b7a663f93f9dbda806381494455351603868
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        addon.iobj
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\Release\addon.iobj
                                                        • Size 527KB
                                                        • SHA256 14c13d2d24fd2a955f12666a293af94b3ef38460166de7bc1a4d2c19373566ab
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        addon.ipdb
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\Release\addon.ipdb
                                                        • Size 92KB
                                                        • SHA256 672e0a833f8c4c54749e895c6ba4b8dde3bf29f84f156ddd83743c685e544d77
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        addon.lib
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\Release\addon.lib
                                                        • Size 2KB
                                                        • SHA256 e7527e2ebdf05ab4c765cf6d28ea43e710f176049023c7efb15f7ccb25fb5221
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        addon.node
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\Release\addon.node
                                                        • Size 136KB
                                                        • SHA256 369679f3869d47d8e4cf8aa0c5d6138318633a103377eb651d81358dd4f53d68
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        addon.node.recipe
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\Release\obj\addon\addon.node.recipe
                                                        • Size 357B
                                                        • SHA256 13e3227d94a51846859ef6503ffe67d015e83f18a3c179abd3d653d41ef65376
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        CL.command.1.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\Release\obj\addon\addon.tlog\CL.command.1.tlog
                                                        • Size 17KB
                                                        • SHA256 f2454aed4de44e68d4c6b48ac0ed30d10347f02abc1c9eddbb7b0c67221d3e7d
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        CL.read.1.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\Release\obj\addon\addon.tlog\CL.read.1.tlog
                                                        • Size 54KB
                                                        • SHA256 f78ba7dfd9524953116332bb570a72a37f85a027cb6444fe58d57c8618fff316
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        CL.write.1.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\Release\obj\addon\addon.tlog\CL.write.1.tlog
                                                        • Size 2KB
                                                        • SHA256 7268111d33512fe8362c531076a4d3ad6be68245ad33e1ceb3ba5e989872b4c7
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Cl.items.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\Release\obj\addon\addon.tlog\Cl.items.tlog
                                                        • Size 1KB
                                                        • SHA256 5c99fac6fe7f1debb1d60b3317663c47db4cd5fdc0f70baa7f965f3cc6d7d580
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        addon.lastbuildstate
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\Release\obj\addon\addon.tlog\addon.lastbuildstate
                                                        • Size 227B
                                                        • SHA256 57542a271e538a466adb8b7b9a141c3c4a89573a16fdb3c7647fa85e2632e635
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        link.command.1.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\Release\obj\addon\addon.tlog\link.command.1.tlog
                                                        • Size 3KB
                                                        • SHA256 f040c3a2ad220ef511717845bf31dcbef338c82738cbb261df122211936e623d
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        link.read.1.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\Release\obj\addon\addon.tlog\link.read.1.tlog
                                                        • Size 6KB
                                                        • SHA256 db2ea814e8575451fbe74203d02a40f17c03243d86a3abe12d6a1611a17e8d98
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        link.secondary.1.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\Release\obj\addon\addon.tlog\link.secondary.1.tlog
                                                        • Size 1KB
                                                        • SHA256 bac5e77b2d1b19027e1a53d0866c8ea091572c8c14a658a565e9894f92de99cb
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        link.write.1.tlog
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\Release\obj\addon\addon.tlog\link.write.1.tlog
                                                        • Size 1KB
                                                        • SHA256 8c69c73995c3d2d2b8a39c6709ae6a9a6841a9badc2ce9848bc3c841c5ce9fb2
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        addon.vcxproj
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\addon.vcxproj
                                                        • Size 12KB
                                                        • SHA256 7a70d257538ac409b5c046196aa4ff780ac23fff65ea9b74b00c15e877d7aa69
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        addon.vcxproj.filters
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\build\addon.vcxproj.filters
                                                        • Size 3KB
                                                        • SHA256 4718740fae169a4905b83be64a5068887ceca5e8c4cfd3552eaba8110189344d
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        package.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\package.json
                                                        • Size 635B
                                                        • SHA256 d9855952a284ef0ed52a1d874d4ecaaedc4087f9175d28652315a3d972ffd3dc
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        addon.c
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\src\addon.c
                                                        • Size 248B
                                                        • SHA256 50076a0055a9a852efc84f10a25798089c42448c2e034f841b3e64a521d6f572
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        xxhash128_addon.c
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\src\xxhash128_addon.c
                                                        • Size 338B
                                                        • SHA256 78be4206397de7dfb561b9594874ea9a83bb3e505cd107492976021a68a22e46
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        xxhash32_addon.c
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\src\xxhash32_addon.c
                                                        • Size 297B
                                                        • SHA256 6058709d0c5f9ae3be2b21462a389f9fb05e7e41441271f9f53de0fbbae3cd0f
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        xxhash3_addon.c
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\src\xxhash3_addon.c
                                                        • Size 329B
                                                        • SHA256 287b99d695d8b1bd8ac435cb1b066a5c08e2706ee00988d078b8b69cc070fe07
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        xxhash64_addon.c
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\src\xxhash64_addon.c
                                                        • Size 297B
                                                        • SHA256 b7515e4af2c4d26d23684b1c0b1fac67cf885808ea00b23f0ed9bd736bfeedc4
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        xxhash_addon.h
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\src\xxhash_addon.h
                                                        • Size 19KB
                                                        • SHA256 a917e90002fa89bbdc23bde4a28b154746348392be16d92b352293a770b4f8f8
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        xxhash.h
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\xxHash\xxhash.h
                                                        • Size 247KB
                                                        • SHA256 be275e9db21a503c37f24683cdb4908f2370a3e35ab96e02c4ea73dc8e399c43
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        xxhash-addon.js
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\node_modules\xxhash-addon\xxhash-addon.js
                                                        • Size 187B
                                                        • SHA256 0083a2ec614a4fd2749e5349232c91d67c2b339063bedeb7201aa12e3ff28881
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Critical.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\resources\Critical.png
                                                        • Size 2KB
                                                        • SHA256 8bc2f6422e5e921fe095d5c5523d96aa4157d841aae300e56a8b8e7b32d7d9d2
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Download.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\resources\Download.png
                                                        • Size 2KB
                                                        • SHA256 332893ba5009a5b980f4683b01dee165958ab5cfce51c39ee7f2f5162c09edbc
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Notify.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\resources\Notify.png
                                                        • Size 895B
                                                        • SHA256 14f360872b26dc825df3b314fee83d6023d21b887fc08a086de4f5799f4f0fa7
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Warning.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\resources\Warning.png
                                                        • Size 2KB
                                                        • SHA256 d0ff9b7e75619ec6eb4c683474fd5446e072808c6657a6c166402e5cbfa3cd73
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        back.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\resources\back.png
                                                        • Size 621KB
                                                        • SHA256 6a0e6ee31b86669b238589fcdd0c798841e0306ab84718a450454dfd85237487
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        back.webp
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\resources\back.webp
                                                        • Size 356KB
                                                        • SHA256 c9d069b01fc5cc115263683d4a294d6a4a5ac8422265d3a5230ae8a2ed005dc2
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        background.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\resources\background.png
                                                        • Size 4.0MB
                                                        • SHA256 fbfc1178d543a96c1cc59c816d7264e79c7b80153e281f041121ddcd49e11d5f
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        front.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\resources\front.png
                                                        • Size 2.6MB
                                                        • SHA256 ee77d54fe7477a6371dda412fcb07f0609d51f55184ab37adfe9793eb7ae5dd7
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        icon.png
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\resources\icon.png
                                                        • Size 156KB
                                                        • SHA256 c051e059e9c7a1befcc0ef1a870959f762659b7a77aa2d77b982f8e2d136fb04
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        defender-exclude.bat
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\resources\sh\defender-exclude.bat
                                                        • Size 3KB
                                                        • SHA256 e4874ed2bfb3b7ae0af051e3a0212ea122bfd516aa345387d26ffa7b7649bb1f
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        version.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\app.asar.unpacked\resources\version.json
                                                        • Size 5KB
                                                        • SHA256 059b11eaf39d86feb1b077b4947f1b21b083adea894c2fa57b19563a2b554ba4
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        elevate.exe
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\resources\elevate.exe
                                                        • Size 105KB
                                                        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        snapshot_blob.bin
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\snapshot_blob.bin
                                                        • Size 302KB
                                                        • SHA256 22a46de643045805a3e588f9a18ebaa377f9fba3dee46b2d60f3ae300a09cc4e
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        v8_context_snapshot.bin
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\v8_context_snapshot.bin
                                                        • Size 646KB
                                                        • SHA256 a8bd22478c4f85afa836c89d3a7f52c606b17872fbbefce268b499bedede10ae
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        vk_swiftshader.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\vk_swiftshader.dll
                                                        • Size 5.2MB
                                                        • SHA256 7005598f9bb8559101458ddaac77e3a23f9876c0a1aaf7136a11f2d1d5173448
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        vk_swiftshader_icd.json
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\vk_swiftshader_icd.json
                                                        • Size 106B
                                                        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        vulkan-1.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\7z-out\vulkan-1.dll
                                                        • Size 938KB
                                                        • SHA256 45adc3dac19684ed3af159ae3914fbbf2426a879e5a4c1e678e3c9b451fab01a
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        SpiderBanner.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\SpiderBanner.dll
                                                        • Size 9KB
                                                        • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        StdUtils.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\StdUtils.dll
                                                        • Size 100KB
                                                        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        System.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\System.dll
                                                        • Size 12KB
                                                        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        WinShell.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\WinShell.dll
                                                        • Size 3KB
                                                        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        nsProcess.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\nsProcess.dll
                                                        • Size 4KB
                                                        • SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        nsis7z.dll
                                                        • Path C:\Users\Admin\AppData\Local\Temp\nsnFD48.tmp\nsis7z.dll
                                                        • Size 424KB
                                                        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        default.exc
                                                        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
                                                        • Size 2B
                                                        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        data_0
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\GPUCache\data_0
                                                        • Size 8KB
                                                        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                                                        • MD5 SHA1 SHA512 SSDEEP
                                                        Submit Download

                                                        data_1
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\GPUCache\data_1
                                                        • Size 264KB
                                                        • SHA256 3b72104f5df1c19d9a6f31afa54459a989988ff8d680710482014e63c5226f97
                                                        • MD5 SHA1 SHA512 SSDEEP TLSH
                                                        Submit Download

                                                        data_2
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\GPUCache\data_2
                                                        • Size 8KB
                                                        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                                                        • MD5 SHA1 SHA512 SSDEEP
                                                        Submit Download

                                                        data_3
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\GPUCache\data_3
                                                        • Size 8KB
                                                        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                                                        • MD5 SHA1 SHA512 SSDEEP
                                                        Submit Download

                                                        MANIFEST-000001
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\Local Storage\leveldb\MANIFEST-000001
                                                        • Size 41B
                                                        • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        Network Persistent State
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\Network\Network Persistent State
                                                        • Size 862B
                                                        • SHA256 80dfce465dd827239b5d9878778373b6ddae01dfd0be8b0758807941f982e14d
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Network Persistent State
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\Network\Network Persistent State
                                                        • Size 862B
                                                        • SHA256 86dc6191bbaecae1ed391fc5ab31670939c818f513ddaf09a303b50c43ffde94
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Network Persistent State~RFe5a6b7d.TMP
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\Network\Network Persistent State~RFe5a6b7d.TMP
                                                        • Size 59B
                                                        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        TransportSecurity
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\Network\TransportSecurity
                                                        • Size 188B
                                                        • SHA256 502b9de7188c37c7b010a6951eb9b405cf0918e6ca5f6ccd160ad8f701d23c3b
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        TransportSecurity
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\Network\TransportSecurity
                                                        • Size 188B
                                                        • SHA256 b2acc3374f9df3ea0621a92e2c40cb4ffb0805824ce4bbc864c06ab61fbf3793
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        TransportSecurity~RFe59bd7a.TMP
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\Network\TransportSecurity~RFe59bd7a.TMP
                                                        • Size 188B
                                                        • SHA256 d8f81c4d807399df9f3da4cd5bd601a369dda812830f377e113b3f8daa1c3534
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        Preferences
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\Preferences
                                                        • Size 57B
                                                        • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        CURRENT
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\Session Storage\CURRENT
                                                        • Size 16B
                                                        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        settings.json
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\settings.json
                                                        • Size 2B
                                                        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        settings.json
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\settings.json
                                                        • Size 15B
                                                        • SHA256 5d5adafbf1bd4fd35ffc63dc42b284e10d714a63a78ab350ae61213ba6ac1263
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        settings.json.1850467301
                                                        • Path C:\Users\Admin\AppData\Roaming\stalcube-launcher\settings.json.1850467301
                                                        • Size 41B
                                                        • SHA256 f8c4a613d35cf3cff4a13ee2433561022b79fdbc4c35486ec3a5850ac8c70a32
                                                        • MD5 SHA1 SHA512
                                                        Submit Download

                                                        STALCUBE Launcher.lnk
                                                        • Path C:\Users\Public\Desktop\STALCUBE Launcher.lnk
                                                        • Size 1KB
                                                        • SHA256 5753b1f9af49784b246c92dfa38f10721d4271998b6c09c452e55cf19bd67ea9
                                                        • MD5 SHA1 SHA512 TLSH
                                                        Submit Download

                                                        memory/2884-1421-0x0000000015C90000-0x0000000015D29000-memory.dmp
                                                        Download

                                                        memory/2884-1351-0x0000000015C90000-0x0000000015D29000-memory.dmp
                                                        Download

                                                        memory/2884-1346-0x0000000015C90000-0x0000000015D29000-memory.dmp
                                                        Download

                                                        memory/2884-1345-0x0000000015C90000-0x0000000015D29000-memory.dmp
                                                        Download

                                                        memory/2884-1347-0x0000000015C90000-0x0000000015D29000-memory.dmp
                                                        Download

                                                        memory/2884-1590-0x0000000015C90000-0x0000000015D29000-memory.dmp
                                                        Download

                                                        memory/2884-1343-0x0000000015C90000-0x0000000015D29000-memory.dmp
                                                        Download

                                                        memory/2884-1349-0x0000000015C90000-0x0000000015D29000-memory.dmp
                                                        Download

                                                        memory/2884-1477-0x0000000015C90000-0x0000000015D29000-memory.dmp
                                                        Download

                                                        memory/3372-1144-0x00000125801E0000-0x00000125802E0000-memory.dmp
                                                        Download

                                                        memory/3372-1191-0x0000012595780000-0x00000125957A0000-memory.dmp
                                                        Download

                                                        memory/3372-1166-0x0000012585200000-0x0000012585220000-memory.dmp
                                                        Download

                                                        memory/3372-1145-0x00000125801E0000-0x00000125802E0000-memory.dmp
                                                        Download

                                                        memory/3372-1146-0x00000125801E0000-0x00000125802E0000-memory.dmp
                                                        Download

                                                        memory/3372-1154-0x00000125853E0000-0x00000125854E0000-memory.dmp
                                                        Download

                                                        memory/3372-1152-0x0000012581FA0000-0x0000012581FC0000-memory.dmp
                                                        Download

                                                        memory/4304-992-0x00000195AE5F0000-0x00000195AE614000-memory.dmp
                                                        Download

                                                        memory/4304-972-0x00000195AE380000-0x00000195AE39E000-memory.dmp
                                                        Download

                                                        memory/4304-939-0x00000195ADF40000-0x00000195ADF62000-memory.dmp
                                                        Download

                                                        memory/4304-968-0x00000195AE3B0000-0x00000195AE3F8000-memory.dmp
                                                        Download

                                                        memory/4304-991-0x00000195AE5F0000-0x00000195AE61A000-memory.dmp
                                                        Download

                                                        memory/4304-988-0x00000195AE370000-0x00000195AE37A000-memory.dmp
                                                        Download

                                                        memory/4304-973-0x00000195AE500000-0x00000195AE5B2000-memory.dmp
                                                        Download

                                                        memory/5748-1334-0x000001F992460000-0x000001F992461000-memory.dmp
                                                        Download

                                                        memory/5748-1336-0x000001F992460000-0x000001F992461000-memory.dmp
                                                        Download

                                                        memory/5748-1335-0x000001F992460000-0x000001F992461000-memory.dmp
                                                        Download

                                                        memory/5748-1337-0x000001F992460000-0x000001F992461000-memory.dmp
                                                        Download

                                                        memory/5748-1338-0x000001F992460000-0x000001F992461000-memory.dmp
                                                        Download

                                                        memory/5748-1339-0x000001F992460000-0x000001F992461000-memory.dmp
                                                        Download

                                                        memory/5748-1328-0x000001F992460000-0x000001F992461000-memory.dmp
                                                        Download

                                                        memory/5748-1330-0x000001F992460000-0x000001F992461000-memory.dmp
                                                        Download