Overview

overview

8

Static

static

3

Fortnite.E....4.exe

windows10-2004-x64

7

Fortnite.E....4.exe

windows11-ltsc_2024-x64

8

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

8

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

8

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

3

Fortnite E...er.exe

windows10-2004-x64

7

LICENSES.c...m.html

windows10-2004-x64

3

LICENSES.c...m.html

windows11-ltsc_2024-x64

4

d3dcompiler_47.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

owutility.dll

windows10-2004-x64

1

owutility.dll

windows11-ltsc_2024-x64

resources/app.js

windows10-2004-x64

3

resources/app.js

windows11-ltsc_2024-x64

3

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-ltsc_2024-x64

8

vk_swiftshader.dll

windows10-2004-x64

1

vulkan-1.dll

windows10-2004-x64

1

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows11-ltsc_2024-x64

3

$R0/Uninst...er.exe

windows10-2004-x64

7

$R0/Uninst...er.exe

windows11-ltsc_2024-x64

7

$PLUGINSDIR/INetC.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    156s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260629-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260629-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    03/07/2026, 10:23

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Fortnite.Events.Adapter-Setup-1.0.4.exe
  • Size 85.3MB
  • Sample260703-mesnmsft5w
  • SHA256 e54674f377b73f2bc46c2c62090fcffd7234bd1c1cb703705fd6ca5aef15d9fe
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwarediscoverypersistenceransomwarespyware

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Loads dropped DLL 7 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 38 IoCs
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 30 IoCs
  • Suspicious use of FindShellTrayWindow 53 IoCs
  • Suspicious use of SendNotifyMessage 40 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\Fortnite.Events.Adapter-Setup-1.0.4.exe
    "C:\Users\Admin\AppData\Local\Temp\Fortnite.Events.Adapter-Setup-1.0.4.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:5320
    • C:\Windows\SysWOW64\cmd.exe
      "C:\Windows\system32\cmd.exe" /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Fortnite Events Adapter.exe" /FO csv | "C:\Windows\system32\find.exe" "Fortnite Events Adapter.exe"
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:260
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Fortnite Events Adapter.exe" /FO csv
        3⤵
        • Enumerates processes with tasklist
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:5548
      • C:\Windows\SysWOW64\find.exe
        "C:\Windows\system32\find.exe" "Fortnite Events Adapter.exe"
        3⤵
        • System Location Discovery: System Language Discovery
        PID:3288
  • C:\Windows\system32\sihost.exe
    sihost.exe
    1⤵
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:1616
    • C:\Windows\explorer.exe
      explorer.exe /LOADSAVEDWINDOWS
      2⤵
      • Boot or Logon Autostart Execution: Active Setup
      • Enumerates connected drives
      • Checks SCSI registry key(s)
      • Modifies Internet Explorer settings
      • Modifies registry class
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      PID:5528
  • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
    "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2640
  • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
    "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
    1⤵
    • Modifies registry class
    • Suspicious use of SetWindowsHookEx
    PID:2348

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        prep_Activatable Class_Hermes_perf.cache
        • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
        • Size 599B
        • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSE.electron.txt
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSES.chromium.html
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\LICENSES.chromium.html
        • Size 14.6MB
        • SHA256 798583ab2464d3602a63a328c95aec829329a5253b3b2b9cea59979d38fb350a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_100_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\chrome_100_percent.pak
        • Size 163KB
        • SHA256 4474d496b4eb082073fb439133728eed72da35f4519505c1c246ef2b9552cf49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_200_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\chrome_200_percent.pak
        • Size 252KB
        • SHA256 3e815b1223026c0bdfffcee62a58885e0ccd99d77f0b950778d109832e38e9cc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dcompiler_47.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.7MB
        • SHA256 289767b49dc8525bce262ea06fee4ef9fced2e131a55b25654ce871c1f0498b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffmpeg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\ffmpeg.dll
        • Size 2.9MB
        • SHA256 a4da59a3456c37519acced8f9e8f075fe9343617c95bce91e565dd62a79a2d79
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icudtl.dat
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\icudtl.dat
        • Size 10.0MB
        • SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libEGL.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\libEGL.dll
        • Size 493KB
        • SHA256 1a6396aa1cabf234c1f67d853cd301fb92dffd56f5e3a50ae02b577673c985e2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libGLESv2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\libGLESv2.dll
        • Size 7.7MB
        • SHA256 f7c5024f15c8b0656c5f35ca2c660878324aba426e0a7038eb5702ce0e2f8976
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        af.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\af.pak
        • Size 546KB
        • SHA256 5f3f662f860d0f319027e68d4fb1e68933b2bc3d1beff05bbcfd13f490623bab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        am.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\am.pak
        • Size 886KB
        • SHA256 ca2e31cb035c8f48758c1181078edfce56127ee782198f8765cfd16b5163bf16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ar.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\ar.pak
        • Size 980KB
        • SHA256 a9bc6ec0e5d458468e0659e19641b52ca371f03daa92b84c63bab38e4ce3bdcd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bg.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\bg.pak
        • Size 1011KB
        • SHA256 5907a91c11524603f87bf474825d2f30562a89fd9a8e2595f2fb9003106e6201
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\bn.pak
        • Size 1.3MB
        • SHA256 0a88efecf87d216bbb081d3d26f8ac91656642ab52a66ff9d91ee8e61673d7c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ca.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\ca.pak
        • Size 615KB
        • SHA256 74c25c05829be034b1ae6469205f07830f9733e28989a3e500322493536f0279
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cs.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\cs.pak
        • Size 636KB
        • SHA256 efb45cc491a3df934aee0eef9eeb147643823784d696a53036ff9c9c2eefeb47
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        da.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\da.pak
        • Size 574KB
        • SHA256 6380dcf390f08fba53019aede4b5b26754eeaaf6968147780d8f085a9f8c2631
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        de.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\de.pak
        • Size 615KB
        • SHA256 ae28e9e71aaf424c0323f2949f7426405ccf7509a2568c93bfe29690a7302094
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        el.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\el.pak
        • Size 1.1MB
        • SHA256 5e5f96c79a23c8c2a00efc76918594fa3c13d93d75effe5ff7df4cf78d820396
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-GB.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\en-GB.pak
        • Size 498KB
        • SHA256 2565bfd2216dd922c6d099e276c9c098cbbc0bb65d089c191b253ba592e74cec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-US.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\en-US.pak
        • Size 503KB
        • SHA256 b9a2cccc13d7dac53210e37248dd70df32dbec43bd33d2c663c6290155fb751e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es-419.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\es-419.pak
        • Size 606KB
        • SHA256 6cee6e9e899e7ee46dfacfc21ef78533e1b98907570d82fd58f1065e1efb645e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\es.pak
        • Size 604KB
        • SHA256 cf47d64bad26d12f6f39f56c4cef093aaec2ee4a1f7b4e88f6b08d34034865bf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        et.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\et.pak
        • Size 551KB
        • SHA256 20c0c24314c9e49011220ab545441efdb49780d9966285e48c79a9512665b7d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fa.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\fa.pak
        • Size 907KB
        • SHA256 9f687b6e3ab82e33ac72f866c101558aa49923ac98ca6e49c0daf5d2220b130b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\fi.pak
        • Size 562KB
        • SHA256 e8ee33a17b25b64ba25c55d688eabb90f49d8f3ca29daed0d54ef693bab9bca0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fil.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\fil.pak
        • Size 636KB
        • SHA256 5c2ec565f41cf4b2664054d52dfdf8db1782a13b97b5e227917941e7c5ae8887
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\fr.pak
        • Size 656KB
        • SHA256 a33c1812a95c46fd03317620211bf1f2212b6f089d2520df30ffb1c116de95b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\gu.pak
        • Size 1.3MB
        • SHA256 89ce115c7b2c5c4eba2640fcd5b11355224e1faaf3950d7a16de203db4b8ae08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        he.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\he.pak
        • Size 796KB
        • SHA256 e91cc42a2e369914e6bd3535b5c15bcc95334974b6a059c585b995ee92143df9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\hi.pak
        • Size 1.3MB
        • SHA256 b7b9c280c81b6e3ee3e5a8f7884602814740cf72983faaa57b43f6e369b240b9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\hr.pak
        • Size 613KB
        • SHA256 bb05be3c417bbda1662a5fbb0ad411e5016b5be59e28ce466be6294908c6c961
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\hu.pak
        • Size 658KB
        • SHA256 484a56e14cd1fdc0933f6c1b94a57af6f5fd774c729e100f10ff3406740d5184
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        id.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\id.pak
        • Size 543KB
        • SHA256 91cb6812b4e995189b1e2b61ae0565b92dac4ab3c34efd6e0920591dc005d82a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        it.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\it.pak
        • Size 596KB
        • SHA256 a71cbb5cc0336c0732e9781e6965b9080ff2f160be1696724da27d78b470262f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ja.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\ja.pak
        • Size 727KB
        • SHA256 30a10162ef5b90e31fe708e7de992622b659c13e5fc4b7c691142fb3d959cc7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\kn.pak
        • Size 1.4MB
        • SHA256 dfb1512aff3d9622b8f46be89d05d7927a74b984eb0213e84f27d248f75bcee4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ko.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\ko.pak
        • Size 615KB
        • SHA256 aa78a00d77318d70a356f83ee5e9a0cbd579a560f8b8ffd05f9959ecb965b6a2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lt.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\lt.pak
        • Size 666KB
        • SHA256 3e9afca6cb3cf70dce1c3b5a0becd2714aab49c9ceb5bbec39f313a063fb3d05
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\lv.pak
        • Size 664KB
        • SHA256 28115981e00562f3028fb55dc0ebf6d9d2bdf4735bb0d4d2d90aea589d24c822
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ml.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\ml.pak
        • Size 1.5MB
        • SHA256 3415158190b1d8880811a4f54a3998fb1f3f9f71ed913e1d3452f15f1495facf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\mr.pak
        • Size 1.2MB
        • SHA256 c0b1cdf0bba3e2762fc5afc89ac7d443f53f6c1079f40b7683ceedbe2ba58e65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ms.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\ms.pak
        • Size 571KB
        • SHA256 cd9a68fc1b1348b29e6c43adf5c94b9f6238146b8ec7d551e1e1997ae1773e8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nb.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\nb.pak
        • Size 551KB
        • SHA256 40277ff47002ca9e7a64c692c2e6b39667bae45ea3a411daaba16cb892e8dad0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\nl.pak
        • Size 572KB
        • SHA256 114a11236f70de85330ed374e9658a4dfd21721f7e7cee80e746451bc68a5250
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\pl.pak
        • Size 637KB
        • SHA256 d5179295319698755b51af402731a34b75b32b76b99ad92640319b65c4c52992
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-BR.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\pt-BR.pak
        • Size 597KB
        • SHA256 b111cb265d59d861c8dac2ec37733bbb2df6c923236c79d99452535215fef58b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-PT.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\pt-PT.pak
        • Size 601KB
        • SHA256 252ae86b97ed89e0cac7b9f581dbbae78e7041b28dd6b8be836048ea905dafd5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ro.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\ro.pak
        • Size 623KB
        • SHA256 5094807f7e9fa04fb9eeb451c09542587e48ec432dde00c13ed3135b72df2309
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ru.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\ru.pak
        • Size 1.0MB
        • SHA256 cc4307b19d0832b86cff809367f23346e9da41e3fc1155aa723b29542aea015b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\sk.pak
        • Size 647KB
        • SHA256 12b0f67bff228cf65c6f9f5a410c0758e4d52f0cdb9abbd4dd9ef828f99e07c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\sl.pak
        • Size 620KB
        • SHA256 bf4846b38adeae6794d2565faeee093e9ea77febe1c2db3ac18193cc1e0e8d2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\sr.pak
        • Size 956KB
        • SHA256 ae56d881a0f06647dbfe173f3cabedc734a8353d6183099c734570276f38e104
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\sv.pak
        • Size 555KB
        • SHA256 5e44c6ff9d4f432696c747fda111a7ad99df0b818254bbf251e578952ae06d36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sw.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\sw.pak
        • Size 586KB
        • SHA256 bd6ab24cd929d6809dca3ea0a5105cc567e9c9c2bf65f8814b480def6cf1992e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ta.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\ta.pak
        • Size 1.5MB
        • SHA256 ca560534ff3ca837cbcbbfc240af7dae12a82466bc16e99e7b79376cd102e342
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        te.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\te.pak
        • Size 1.4MB
        • SHA256 11a1d2d935b401bc9b24f158774310d73c31b1616bacc61a054c7ef4661618b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        th.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\th.pak
        • Size 1.2MB
        • SHA256 d8f5800cb99e227287bdbed8d807380185e20d166901917b6b58dedc5fdafbf6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\tr.pak
        • Size 597KB
        • SHA256 71b1b037ab44e6ed3f954b2c6318063d29e708dd87306c9051f1e48e43714322
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        uk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\uk.pak
        • Size 1.0MB
        • SHA256 fff206f5f631d0dda9579cf806cde4de5848a7474bb1ac2b1239ab967a8ca88c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ur.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\ur.pak
        • Size 898KB
        • SHA256 0f3cc59fd6c706ae8d84a0cc50301a4929ea1f0204ad5e48250f1a354d6613e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\vi.pak
        • Size 709KB
        • SHA256 f7df08dbb5ca133109ad809bdd89be82cc956a0518e6dee7e02fe4f65118d77d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-CN.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\zh-CN.pak
        • Size 508KB
        • SHA256 e27395a6c73ac592f05e0de00f4c17efe181a4900c1f649e69d3a21dbb87cde5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-TW.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\locales\zh-TW.pak
        • Size 503KB
        • SHA256 aee4d9c6230c5ae8257fecbccaba6b8668e5a34d6c44ef06e4574e12fed7fd8e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        owutility.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\owutility.dll
        • Size 2.8MB
        • SHA256 fd4492683f183b2a07b8e36da1cc405d61a15cde76fc68dfd9f10b2eadae1821
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resources.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\resources.pak
        • Size 5.8MB
        • SHA256 71b305ddcea5bbe169b1fc1b7b7c039431da46e6fbdf9abb1e55848582859491
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        app-update.yml
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\resources\app-update.yml
        • Size 121B
        • SHA256 b799bb6abfaeab5010eb28701fcafe7be22ecbd5b5a3de5c32b0d89ef4f4c145
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        app.asar
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\resources\app.asar
        • Size 507KB
        • SHA256 d26ceb0ebf497b3306a82ac4f849aa3b6fb890a590a49d6c000beb072f30d1b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevate.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        snapshot_blob.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\snapshot_blob.bin
        • Size 314KB
        • SHA256 f5799826224d193037fb019e793f4e3cb03c28d18d25948239bf45fb0e640171
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        v8_context_snapshot.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\v8_context_snapshot.bin
        • Size 683KB
        • SHA256 9537f5ad5847faf38a7030e0688b2b77d1582d196c034a9f2d5f19038f11b813
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\vk_swiftshader.dll
        • Size 5.3MB
        • SHA256 825a1e7830be36397b78eaf667839bff45f1a4dbd6142589ba5f2e2f54de798a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader_icd.json
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vulkan-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\7z-out\vulkan-1.dll
        • Size 900KB
        • SHA256 eb7a151e33dfaea1e8045c0265ececebda1c0e057ad82bf3fc7763ca68385705
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SpiderBanner.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\SpiderBanner.dll
        • Size 9KB
        • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StdUtils.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WinShell.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nsExec.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\nsExec.dll
        • Size 6KB
        • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsis7z.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsc55E7.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Fortnite Events Adapter.lnk
        • Path C:\Users\Admin\Desktop\Fortnite Events Adapter.lnk
        • Size 2KB
        • SHA256 d1a547b7f1ce105cff9167014dc011f92b8a3d75096139ef5416e830a21325aa
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/2640-515-0x000001B5801E0000-0x000001B5802E0000-memory.dmp
        Download

        memory/2640-525-0x000001B5850F0000-0x000001B585110000-memory.dmp
        Download

        memory/2640-563-0x000001B585800000-0x000001B585820000-memory.dmp
        Download

        memory/2640-526-0x000001B585400000-0x000001B585500000-memory.dmp
        Download

        memory/2640-544-0x000001B581F90000-0x000001B581FB0000-memory.dmp
        Download