272f987e934fc1442bb9d04cce2e6602ccb78b1c3d47703e3b982f9ae46b42b4

Analysis

max time kernel
209s
max time network
190s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
06/07/2026, 03:51

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
freetube-0.24.1-beta-setup-x64.exe
Size 96.9MB
Sample260706-eellbshv5y
SHA256 272f987e934fc1442bb9d04cce2e6602ccb78b1c3d47703e3b982f9ae46b42b4
MD5 1c23914c875eb000577416f1d4e15386
SHA1 b8719beba2989b5be4c77bf113fe3398ddefbeb0
SHA512 25b533828c9f7b5ce08ed653abd11aae84c975237412f0ab053c9fa2c35ee2d26e6c88ab7d4d4c78ded7182c8fccfd6338d6a15de589bd1ae59aee48a8477175
SSDEEP 1572864:KiE8GNTaPanh/QK6+CZIsq5LlIT5csdu06ySah0rTADPbKarkSK+ZS:KitGQSniOsq5RUcodn6TAD2atTs
TLSH
T1FA2833B76380E6E3D05802B4A6272F9214B49D1F4ED0E5AD92EC752DF2F63C537C41AA
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution spyware stealer

Malware Config

Signatures

Checks computer location settings 2 TTPs 3 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\Control Panel\International\Geo\Nation	FreeTube.exe
Key value queried	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\Control Panel\International\Geo\Nation	FreeTube.exe
Key value queried	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000\Control Panel\International\Geo\Nation	FreeTube.exe

Executes dropped EXE 6 IoCs

pid	Process
2556	FreeTube.exe
3100	FreeTube.exe
4748	FreeTube.exe
1524	FreeTube.exe
4004	FreeTube.exe
3344	FreeTube.exe

Loads dropped DLL 24 IoCs

pid	Process
3232	freetube-0.24.1-beta-setup-x64.exe
3232	freetube-0.24.1-beta-setup-x64.exe
3232	freetube-0.24.1-beta-setup-x64.exe
3232	freetube-0.24.1-beta-setup-x64.exe
3232	freetube-0.24.1-beta-setup-x64.exe
3232	freetube-0.24.1-beta-setup-x64.exe
3232	freetube-0.24.1-beta-setup-x64.exe
3232	freetube-0.24.1-beta-setup-x64.exe
3232	freetube-0.24.1-beta-setup-x64.exe
3232	freetube-0.24.1-beta-setup-x64.exe
3232	freetube-0.24.1-beta-setup-x64.exe
3232	freetube-0.24.1-beta-setup-x64.exe
4748	FreeTube.exe
4748	FreeTube.exe
4748	FreeTube.exe
4748	FreeTube.exe
4748	FreeTube.exe
4748	FreeTube.exe
1524	FreeTube.exe
4004	FreeTube.exe
3344	FreeTube.exe
3344	FreeTube.exe
3344	FreeTube.exe
3344	FreeTube.exe

Reads ssh keys stored on the system 2 TTPs
Tries to access SSH used by SSH programs.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
1112	powershell.exe
636	powershell.exe

Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

Command interpreters often include specific commands/flags that ignore errors and other hangups.

defense_evasion

Ignore Process Interrupts

T1564.011

pid	Process
2220	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	freetube-0.24.1-beta-setup-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\freetube	FreeTube.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\freetube\URL Protocol	FreeTube.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\freetube\ = "URL:freetube"	FreeTube.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\freetube\shell\open\command	FreeTube.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\freetube\shell	FreeTube.exe
Key created	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\freetube\shell\open	FreeTube.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-876885714-46325919-1482798410-1000_Classes\freetube\shell\open\command\ = "\"C:\\Users\\Admin\\AppData\\Local\\Programs\\FreeTube\\FreeTube.exe\" \"%1\""	FreeTube.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2220	powershell.exe
2220	powershell.exe
1112	powershell.exe
1112	powershell.exe
3232	freetube-0.24.1-beta-setup-x64.exe
3232	freetube-0.24.1-beta-setup-x64.exe
636	powershell.exe
636	powershell.exe
3344	FreeTube.exe
3344	FreeTube.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	2220	powershell.exe
Token: SeDebugPrivilege	1112	powershell.exe
Token: SeDebugPrivilege	636	powershell.exe
Token: SeIncreaseQuotaPrivilege	636	powershell.exe
Token: SeSecurityPrivilege	636	powershell.exe
Token: SeTakeOwnershipPrivilege	636	powershell.exe
Token: SeLoadDriverPrivilege	636	powershell.exe
Token: SeSystemProfilePrivilege	636	powershell.exe
Token: SeSystemtimePrivilege	636	powershell.exe
Token: SeProfSingleProcessPrivilege	636	powershell.exe
Token: SeIncBasePriorityPrivilege	636	powershell.exe
Token: SeCreatePagefilePrivilege	636	powershell.exe
Token: SeBackupPrivilege	636	powershell.exe
Token: SeRestorePrivilege	636	powershell.exe
Token: SeShutdownPrivilege	636	powershell.exe
Token: SeDebugPrivilege	636	powershell.exe
Token: SeSystemEnvironmentPrivilege	636	powershell.exe
Token: SeRemoteShutdownPrivilege	636	powershell.exe
Token: SeUndockPrivilege	636	powershell.exe
Token: SeManageVolumePrivilege	636	powershell.exe
Token: 33	636	powershell.exe
Token: 34	636	powershell.exe
Token: 35	636	powershell.exe
Token: 36	636	powershell.exe
Token: SeSecurityPrivilege	3232	freetube-0.24.1-beta-setup-x64.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe
Token: SeCreatePagefilePrivilege	2556	FreeTube.exe
Token: SeShutdownPrivilege	2556	FreeTube.exe

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 3232 wrote to memory of 2220	3232	freetube-0.24.1-beta-setup-x64.exe	93
PID 3232 wrote to memory of 1112	3232	freetube-0.24.1-beta-setup-x64.exe	95
PID 3232 wrote to memory of 636	3232	freetube-0.24.1-beta-setup-x64.exe	97
PID 2556 wrote to memory of 3100	2556	FreeTube.exe	104
PID 2556 wrote to memory of 4748	2556	FreeTube.exe	105
PID 2556 wrote to memory of 4748	2556	FreeTube.exe	105
PID 2556 wrote to memory of 1524	2556	FreeTube.exe	106
PID 2556 wrote to memory of 1524	2556	FreeTube.exe	106
PID 2556 wrote to memory of 4004	2556	FreeTube.exe	107
PID 2556 wrote to memory of 4004	2556	FreeTube.exe	107
PID 2556 wrote to memory of 3344	2556	FreeTube.exe	108

C:\Users\Admin\AppData\Local\Temp\freetube-0.24.1-beta-setup-x64.exe
"C:\Users\Admin\AppData\Local\Temp\freetube-0.24.1-beta-setup-x64.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3232
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
  2⤵
  - Hide Artifacts: Ignore Process Interrupts
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:2220
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:1112
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\FreeTube', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:636

C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe
"C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2556
- C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe
  "C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\FreeTube" --standard-schemes=app --secure-schemes=app --fetch-schemes=app --field-trial-handle=2132,i,8213921047614910069,5007476755757080210,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2136,i,11182337283999721330,9718373178663534042,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2236 /prefetch:3
  2⤵
  - Executes dropped EXE
  PID:3100
- C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe
  "C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\FreeTube" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2132,i,8213921047614910069,5007476755757080210,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2136,i,11182337283999721330,9718373178663534042,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2128 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4748
- C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe
  "C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\FreeTube" --standard-schemes=app --secure-schemes=app --fetch-schemes=app --app-user-model-id=electron.app.FreeTube --app-path="C:\Users\Admin\AppData\Local\Programs\FreeTube\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1783309576029546 --launch-time-ticks=593657013 --field-trial-handle=2132,i,8213921047614910069,5007476755757080210,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2136,i,11182337283999721330,9718373178663534042,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3248 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1524
- C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe
  "C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\FreeTube" --standard-schemes=app --secure-schemes=app --fetch-schemes=app --app-user-model-id=electron.app.FreeTube --app-path="C:\Users\Admin\AppData\Local\Programs\FreeTube\resources\app.asar" --enable-sandbox --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --time-ticks-at-unix-epoch=-1783309576029546 --launch-time-ticks=601428079 --field-trial-handle=2132,i,8213921047614910069,5007476755757080210,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2136,i,11182337283999721330,9718373178663534042,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3532 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4004
- C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe
  "C:\Users\Admin\AppData\Local\Programs\FreeTube\FreeTube.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\FreeTube" --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=2132,i,8213921047614910069,5007476755757080210,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2136,i,11182337283999721330,9718373178663534042,4 --trace-process-track-uuid=3190708991934122588 --mojo-platform-channel-handle=3584 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:3344

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

powershell.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\powershell.exe.log
Size 2KB
SHA256 c03c91dd74498cc33a32d616fb3050ad954ed4f57e671e2e9651aedb7b128ff3
MD5 d30f23b777856a4a772cbe961f7b3343
SHA1 7b4f11fe65abb9620e0dbfeee619097a4648e70d
SHA512 64fa5e6ca5021734b620f79ded479d44ce30d4bd58ae9cdbee49fe1b251d6bd779a3b62708afafe90c37491259efc348d7fb2cb774d74668671c6295dca793d3
TLSH
T1E4415C303221B8D84D436F1315286ED5A3EF478AAFA89F5CB569231DCD2A45BD7221F3
MD5 SHA1 SHA512 TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 16KB
SHA256 ff5b9d48ffb122249782015a079b5907bac2abe06a0004c0f719b1374d0b4be9
MD5 ae8bdc310e4c23a8579dcb488874d63e
SHA1 378baa6e4d83f13f00774c5400953f0b89a5a133
SHA512 2439d4bdd86cbc28132f066047caa43db061524737dfc69b110127b407bde6ae242782bc181882a600d208cd8a6d32b4f006cdcfaeb8dc6b36486896b19ded50
SSDEEP 384:bsf+Fu9i+BOBDxK+bmJkvwgoEADThK6seY2cE/uv3KoZhX/hEGcj2m:AfCDwc74sADThNP7UKkJEGC
TLSH
T1BB72A49E610F26C3C4962378D11B095FE4F29ECD531A03D9BB1A9F3B4EACA5E543C189
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 16KB
SHA256 ad91f09847ffdfd7f0fe2430fe2520d3c9658c9f4d38808bd1630addd682d710
MD5 b16c26ba72b09cf097c8a82e92cb13e9
SHA1 711ca0bf25bc250a4ebeb58b5978e1ff797029c0
SHA512 3326929f0cfc6bfbf32208817fc36605e0daa6b043150bcba477298253aa953df4d1d3a605968ff3f6e3fa948beffe82011969f9553db5f48ab66ec145a5b352
SSDEEP 384:d6++n91Q7tVvo1BilHJkExo9o5sNY170ko6gfommEi+vm7dMt9dS:cHQBe14CZo5sNk0tFfji+YdMk
TLSH
T1A27208AD321F2297C5A123B4D02A47EFEDF08DCF930407DD66549A3B0ADEB6540A91F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Programs\FreeTube\chrome_100_percent.pak
Size 113KB
SHA256 34433fa04ddf5eb78b3b4e9c64a3af626e28641907ad7a6086614eb6a8f00a07
MD5 a8d9be85b9a9c2a1be1815b29cfde9ce
SHA1 9b8df5aebf541d063311ad4c2be1d23398f13a33
SHA512 37ad60e74c7e439f83b87ce61018619568914ee491289e3fb34234a0c4e3258c4986cd56e6e58652134058ab1f824a90499d4aed46e611937ec946d9a3b680ec
SSDEEP 3072:fnk4PisCv+/P9NebGz8LI1TwILjQBHe7YAP18RVC2I:fnZYWFUbGz8LI1TdjQBQCrC
TLSH
T1F8B3E0D773B0AD7DD6870BB783660070FCB31B2D06C2160A4A99E479652AF88D8D93D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Programs\FreeTube\d3dcompiler_47.dll
Size 4.5MB
SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
MD5 6ac6cc720fb6bbe5c0ed4e84ad2b3337
SHA1 8556531bd06691ce0f8b7d83814c867a420526a4
SHA512 216084dc2a84ca818d68d603968acc978c0b60bdbe0a3152cbfc400ec11a2b96e81d1698a15dbb7738974f4365a8feb109f2bca5b641b42acedeaeff1e2a342c
SSDEEP 49152:JSHvWaWTktEzfRriMsCL98dhdVhpHGC6GNCxJYrv9y5Eze+V7ZpdKMZzaWoUyxqJ:suktcrfNlTyj5byqSC
TLSH
T1FE268D5767E840E9C5BBD138D687831BEBB1B80413345BDF01508669AF73BE26A3E724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_ovss0u5m.fhf.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ovss0u5m.fhf.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.electron.txt

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\LICENSE.electron.txt
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\LICENSES.chromium.html
Size 18.6MB
SHA256 c1bc6cfdd6c5844720e5e6332698a6131f5402e77abf1fdb9646740d38065a65
MD5 68bebb0e4b93ed694e4493608a77f457
SHA1 da90f6238eb91d6369a45f075b7c31a26624f8f2
SHA512 cf8bd94f45ed137e383ebde6ffadec046609cf8c18e17d5017031a7ae9b3105c1883ebff1ac31d3389301608416c729c42d82d027c1782da1d96318b82623d5c
SSDEEP 49152:nRWnjZ1pNUAwuTYp2bKvC6I3r8xsJQf8xFTneQdt+lHx37DoB:Y
TLSH
T16C17B56BBB49037316F242626B47A5CAF31EA13F375A1654309CC11C2B7B92483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\chrome_200_percent.pak
Size 183KB
SHA256 581c8d53199c10512d31a340699f9ad269f8eea5fe6bc49e05c1bde98ee612aa
MD5 e0d4001307e8e8554810b27796ad636f
SHA1 be92e88b55ae85cc5118009af0fe32c9470c0dca
SHA512 762324239832fa1a531cc3da546df8627610a164c13d83f12b64c28e207273989fa7da0c4e96787ab0a5d09f5202ebc31895f09ad2fdbea4e6e70c0d2b4f51d1
SSDEEP 3072:jgJ8LahaY7d6iN6uSwxohPQDQYaEjrvy/IwXJPpLjQBHe7YAP10uxR/TbIM0:jxGQ+N6uSZQDQYakvyAk9jQBQNd4
TLSH
T1C704F2D723B8AE3DD9570B73926610E0FE7A20291EB3110E469F98397925F8CD9C9343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxcompiler.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\dxcompiler.dll
Size 24.5MB
SHA256 e2d701e4d24fe6d2ceeb26c19a136a10fcd9c777ceffc87f13526a4f3f2eb578
MD5 4d0aa27556fd988d069b6ba3fe2a57a1
SHA1 8598b84ad87c9ea8fa6e4ad1b6c4fc52c39eff34
SHA512 d58e6a0203067c5845b6736d5237d16d89c9fd347328b393b3f5a1d8da9295eef772d17dc09a60e172102fa738ae94a9563ab36413708c25fd1d9c915de789bd
SSDEEP 393216:+f832ZDKR02OyWjHPNJOf6FNOCDEbj51:E605Kqaj51
TLSH
T1F94729122646D49CC059C879C7678B26CA6C30E73FA7B8EBC0F451252B79EBC5B39235
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\dxil.dll
Size 1.4MB
SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
MD5 f8f3501026df30556c34a9af9cb7af9c
SHA1 961d9012b6d79e2e3c28b310a80ba3ab36e2c559
SHA512 3631f8a3d48e8eea25091b93147d88f0e8a7539f2f242fe287d37f82fc4344528901e4cc48c93ebcf8691d2e11227a9b50f2b5ad45f2475c0119ad8b2d3661fd
SSDEEP 24576:zY+wATtbKYxy0y3ny6eBjNSGlVZyi27+V0IJNSD11J7R+j+v1acLUkJvS5Kao:8iTMYxy0Sy66Zh7Sh/cyvS5W
TLSH
T154657E1B229801B6D4BBD17CDA47CE0BE6B2B41503B09BCF12B406692F5BBF55A3E351
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\ffmpeg.dll
Size 3.0MB
SHA256 2256d0112a047ec96e67b9f41fc8e7a692136f0db6a756ccfe4b525826c5f240
MD5 be19f2382eb5961f2bf6e4292189d9eb
SHA1 b4e76b5c5b90b6b37eb1c6b904bba40b12d62aca
SHA512 a0db3a269d9599c884e4e240b790ccbd537747fce12e789a49b38d12b5c261fcb557ad3de155856704b2c6650102c517ca7687bd9a226e2c496e65b4016a1d5a
SSDEEP 49152:29nm5ybP2iBaDCaTdZG42zS199auLKIbb7k6W1ZQNoJxbaH0UcWA:29nhvaWan12zH6NoJTV
TLSH
T187E59E02F6D651DDD019C03497AF9213F631380A4F205AEB16909A263F6BFD87D7E768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\icudtl.dat
Size 10.3MB
SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
MD5 5bfd3eefca4b5ef2d1a869396390a7de
SHA1 c58567f7fe308ccd43f406b70aa8bf6fdbea4f3a
SHA512 4489a55fa0b47c8d1e9679032e036c7998f82efb4191b98900ae40cfc30a26b65290867527161c594c42fe7999b2314f8928a5d717d65d4eeedd4fdb0ed0f427
SSDEEP 196608:A6akBhOR8LE/dUHiXUxa/iJ53IWhls2E91Z0G:AqwKLBHiXUxa/iJ53IWhls2E6G
TLSH
T118B63903A2EB4EC6F9FB5F7498F562779527BD49AE32804A51043F3B1C333908664B66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\libEGL.dll
Size 508KB
SHA256 4e9de12f01d96edbb627bb1f32e9b1dffb4aba5ee08cd77127a61ca56b58b1e3
MD5 fee8b0cfe56628b19cb86134a8ca0d27
SHA1 a0f96d3f6ef19609e84f13fb369e6239ab9b087c
SHA512 033f55ac27766555899d5009d89b9fec142cbfa35870ff3f63a232f44f1abfdc18f632372206d3cbb45d6acf8ca349578b96e62f05f4afb532d15d734940f5b3
SSDEEP 12288:Kb6323QqY5vPAZKac64JA+Fckug/8s1V:OdGDJA0cg8
TLSH
T1EEB48D15F3E94BA9D07AD1348A438646DB7174920B66F9EF02E052352F3BBF45B3A324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\libGLESv2.dll
Size 7.6MB
SHA256 ed2fa8efa72f780df205fb19dd12a39837209a8784a44adf01134052a018a499
MD5 44aec5f31dd0ae0a9565cebaf3c363a3
SHA1 5cbce68abfd8ec9915dc2c61ea7bb4f6f1601f80
SHA512 7466ee7316cc1beab30badc925d7396a742cf09d880a82c60cdcb6df5748cea754388e503879e01cb81084e1a0ad14d77860ca9b9eb03b4fb7916ec53f03f1a3
SSDEEP 98304:rFqKNtGICxkdiF4GVGbAgojmvC12zrt1:hq21iUoq6mt1
TLSH
T140867C03F68541D9C05DE2B49B67E223FA35B8450724B7CF2AA447162F6AFE0A73E714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\af.pak
Size 595KB
SHA256 35bf116b83d8451d46110963166b641ebee86fc74feb5c51a9a7547ea7867f4c
MD5 ca6a1c5f225ce4d60a4dd33e5cbfdc1d
SHA1 ecc74db0856108590c0e78904fa4b3441e61a5a4
SHA512 b5d921872645ed8d10a78b906110089a964b1787fe7df66e266cac2297471395dab5708950d1190a1d0eba4839fd96527a5d17d0441e51aca71d85b5427c02a6
SSDEEP 12288:59+1d5ARPxgtRGt+2dMnPw3NtEKQNZ3GOZKv4H2JynPN+DgWALlzNozvnLImgU2h:5OzARPutRGt+2dGPw3NtEKQNZ3TKv4H5
TLSH
T1B0D41B0AE781173D09B07696FB0845B7FB9CA26CC770B2BADDA982310566DFC11BD1D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\am.pak
Size 966KB
SHA256 b32b7633f420a7bf71b062425679530076cc08c747269314c0cad9da1b9a1ee8
MD5 a01bdd90c7975284d5c44151915eef37
SHA1 70bd056e4347b66fb6788c8995e0f64eb1df5344
SHA512 fd12b97d951a20fb8050be42c5ca3b917757fb11fd476d239c2c39278491f433bda0f5297a0bfdf31d52a568b46f6d7e51a2b17a66b48c6febb0910734dfe0fb
SSDEEP 24576:/ATTG1g9YhTCKzyYtxPTtfjnX7TBzv8XqSBhiyPVABZpPzx:/AQ
TLSH
T15D25AB547DF9F7570F8E8A1994320E4E95A4AE4692803C38C35AE3FC2B2DF1B4DDA215
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\ar.pak
Size 1.0MB
SHA256 a499c458b6d8986d97586a1185a26866ad28501f646e7e4931546853546671e5
MD5 e33d51f710ce473382625df41ff4c6f0
SHA1 0f73b2acd6065ea69174f59c965fb89d922338cf
SHA512 a3235b14c46d36842d607b0762044526fedef5dbfb376692ec552a9c38c68055b8ed52989acf83da0beecbc3d1e2c2979b1709bcdc1f8619b4967887b7573aff
SSDEEP 12288:O/qWFLZgBv9p7NNHHGCuXwjd/nA73v4UCKvkb39SM8NjuE/Yh+UK:OzPmER
TLSH
T10B357BE21B2984720B56DF0FD1E23668E872BD23DB4BFC3124934A2156D7513E78E678
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\bg.pak
Size 1.1MB
SHA256 67e1384c134be11ec09201444c90792f4081f5694d8eb685cf0fb0e0ea78192c
MD5 23ad928ac42b276fa50ec66e8ff48cf3
SHA1 ec5ec8c8af8e7b7e01d9e730b435e5a03aa7f3f3
SHA512 51976a6cddca16cee5cb61dafe2680f595379cbf9a97b263353fd790881a33713b2dd1fb8721e0254d58c0ca176fe349cf7ef2c4ff47ec6e435b874f74aa8b25
SSDEEP 24576:0M2t7UWmldLYFg9zQkEC1UcVb6IM2Ql373ZJm8S3G2KjUfVDDMwh74u2VnJNIdk8:r2t7UWmldLYFp8UcVb6IM2Ql373ZJm/F
TLSH
T1443535A15B9A68DF0101F45F98087E093CEB84FE3FE7879241652DBD39E10B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\bn.pak
Size 1.4MB
SHA256 e847f2446f66c8ff5b66cbcfba8a8bbc4f581be519a5b83325910cca8ffead86
MD5 ffe80b0c276bd03692d5613c6f7fb8a6
SHA1 c1677193578b48bc520f437752654e3cfd57feff
SHA512 bf6297bf1f8612534e485c7552dc14d5068623831703e8e0ed10eade4470556e728474a926ea8199bfe66663a2dff8e678c980d5a7f12575223c5d1b6637542d
SSDEEP 3072:Ec/OlYV7EHu395FnFI6ba324Oc9pjgEf/8URZq9N1IfyjWBbNdQZ3kwfTv:HSYV7jLF66GLq9N2fyjWBbjw7
TLSH
T14265EF209C6E81B6A8C5CDC9434C6370C5236E9B9B61F74DDC17A24938ADC7C8CADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\ca.pak
Size 670KB
SHA256 73de3ffbe20a96aaa8859485d4bfd791d7fa18c10bc8ce2e6ad004da7b5697b0
MD5 4e49dcb3aaf0456269ab91153ebceca2
SHA1 c19206b6b46c2222f5d0ebc9f0157d53e492d052
SHA512 584cbfe2f16979f77d92c384c3a8415a985bdaa0a1dee4ec5c742cabfc8a9ebf04fb5393e05f3172484e023713d2c47cfc206c8e7ea7e48954caabc661e0429e
SSDEEP 12288:onu3GgVGTP7hj3lCiGOwpQa825PsF4N3Mw2juwwPR9zejm0t3l7C7T2nLfULwTL5:Wu3VGn6NGLvE9p+MNe3GjUyUD
TLSH
T173E4F8239FC93B770493330AFB46C253A48CA9847B16D254F4AE1B1622CCADCD677AD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\cs.pak
Size 696KB
SHA256 ec24ea525752f6c7ad0a7b81488e04af018b6d5d3471778c39956700ef849e22
MD5 b56e8f51e29255835d4e1bf924472d6a
SHA1 2c11b05d807ce7c2ef97172bdc2aa614ab2cee98
SHA512 157598cea5253d1a40f93764014f02f7a7bd4f762eac7e44414b7419689fc8076303d51c6edafd951dfdb997b201136d86248911f588cb1b3358520b2e12a331
SSDEEP 6144:tV2WVwYKi5F/8704HcxoSdduHrvl5An2R7gAQnTzW/5Z8OOwJSBxd8Qu:tVAni/74ykHjl5A2ByzW/5Z8OxJSm
TLSH
T1A5E4391EEEA36425484002487BBE4128BD5EC3140B6EE9BB7C8F9C912575B7E8FF4D58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\da.pak
Size 626KB
SHA256 86f333280cc92a3fc12562d42bd076b3c4acaaa6513669aecb6e77ab69b6440e
MD5 d48ebbca1b0d2ea23b292e801ee7d187
SHA1 ed87128e410532f0131f6cf45f0fc70ffab55bcc
SHA512 8aeb90070457e46bf5b9c3c29a92875259033e18dbd7da0fb71227b69dd15fc2691fbf7a11f20d477b09e300e37999aec287d86b78dec77353659ecb0df0a095
SSDEEP 6144:6JRXmD5VdvZzVIcyQD5wnMXgRi/bkJsE/em5LjwlAMDJwxlOEbPaQSaKBDsjofsg:6rmHdjkP5pOA+DwcsZG
TLSH
T126D44A4BDC9CB32FD9A94724F3118DA7DB6D543CC684664F64D8943A09CBCA092FE2C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\de.pak
Size 671KB
SHA256 21ad66dd9c44932d33235dd5616567258949821690a19abd06db9811124f891c
MD5 fdd9ff4ecc4ba33bbedabb8a0b33daf7
SHA1 1a3be4faa64c4e78fde452d1b68f973a7c4ab901
SHA512 9fd482c82d782ea01fce4938879e485b0b41f30a2522a35176327ce1c0ee71dc28410a44ebed575ed1f0c6d52579bdd8f7c3653b0185a43caaf6309b6c4431d7
SSDEEP 12288:bpE9los/Jg3K7UpWgRaj3cs98gn4cUR+tCgv:dE9+s/Jg3K7UpWgRaLp95rCgv
TLSH
T1D5E40803ADDB625ED686B3617705CDB77B19E36FC342312B84EDD02B650B5B283AC522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\el.pak
Size 1.2MB
SHA256 9de58f1e607a002407621688811da85fbfaa117a33bbd6b183c89ca48073e355
MD5 4e0508705f1d073f652849ad14b105dc
SHA1 709c5bbe11c36bf73b7fbc225fe42acf24f5e060
SHA512 f412f07113a06ea1c011c100cf6ce4ab09d51094b07d7af36bf6335de4921aa310afa2f3d428f06daf80bfc4624c5890b76dbddaedf7a4a2319d97959380b503
SSDEEP 24576:9RHWFbrl05Yp9Ck2tCZu/xJXDsSeEEmKo+Jm7QJ2oSCgd0LBHciyjUHvQdQVoyg0:9RHWFbrl05Yp9Ck2tCZu/xJXDsSeEEm+
TLSH
T1A045BFEFB4582DED8046950785D8B07C2BC66D6CE749CBD86229CB60BDFC0719A22D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\en-GB.pak
Size 542KB
SHA256 62e8c435f37897499248e280ecf114b4185a0d2ef24f8e706e2c7ace8e4e2324
MD5 4634b250b2aa9206af66579569b8f590
SHA1 2e114121a01258fff810c3abf0b0699772fdf65e
SHA512 6272c1e7108cc1f61299af9f3064efc6f83d37212ee7f0757736f1f5082ffbf33de77bf458ce0dd1bfe4b4ca0f92eb704c455c6745e0eb07cf2ef0b111d33439
SSDEEP 6144:7GDB2cKzh94edy9actlxh+EpzFOFJeQMP9qQTpofaYH5WjoT0DdBckRPK:7SXAvdy9fxhSzMgQTpMuDi
TLSH
T19DC43D1FF744126A059311A2BB0AA562FF23D07CB35112667CBD811C33B6766837B7E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\en-US.pak
Size 548KB
SHA256 658b0bb2581d4e195dcbae102a133f4755d8903b9ef266d3d54652a79af018ea
MD5 fea77c27a92e1c205a58450ffdec049a
SHA1 3c1f311c1c0262f5688328118a8dc29a58897178
SHA512 a8f1c3bbd3eca0505111378fd2b4f330802e9bf50c4bd9cc6be80dc51716e84a0d66639e7542e73743e580d79f4d4a7857f8e6a69b414e6495ee137af761cbb6
SSDEEP 6144:tGmOr/sy9HfYOMJ/jScMP9sQqblfaYQhp1B1OjRng98//Swf:5yHfyZM6Qqbg0jSwf
TLSH
T188C43C1FF744112A05A352A2BF0995A2FF32D06CA35112563CBD812C33B6B6693B77F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\es-419.pak
Size 661KB
SHA256 af7888ba7108b72ef6e22b7b729fea8ac9d71657047e7237cec499663e62436d
MD5 8cb3e7d866552ccd228d224e10d8561e
SHA1 d688d94604d908375be86bfddf2df2eb41fe2c8e
SHA512 4d385ddec24e79ced30bbdecff29df72d27db2ff2a7e708084cd930c0c36c95ae5f02a97eb6ffc60ae578281f26f62564acae59c1cf15947e8edfa42d7701a81
SSDEEP 6144:TBMSq2YeVFZSHiH506YvFQGo5cQ3uJwH5AovjsBjK:TBVYePcuFiIuJwAdJK
TLSH
T1FAE40822BAC81F6310E3A348B743D757E8D89545B408D29BE4EB976522CCF8CC967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\es.pak
Size 658KB
SHA256 113f8776bf3d68e5a83c8ef2fe323fbf9246f6bbc12e166d91d913b7dbe1c961
MD5 d636c5d705c7f5f3d34a4381aa26faf1
SHA1 e3205566c10494bdc64fe6cd1619701aebd46366
SHA512 3357555ed97c1bc62083668e28ae6e32c8ca6a6a41424403b2f2d8aba08d27d3f3fda420115fca863999711443393749150b2387c1a8841335e4ba79f3427f6b
SSDEEP 6144:WOYjsUZqOFzO182WbqgWsM+9cbNO/m18jKNLOJzMvX24/Zp6PZC9/:WMOxYWbQZNO+18jQCJwvGwZ9N
TLSH
T173E4F726AACC0F6350E39349B743D753E8D49545B408D29BE8EB876622CCF8CC967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\et.pak
Size 601KB
SHA256 5fa2452eed76359c20506c1ddfc4708d466070069422e887637916c637d7d059
MD5 0874b6d890c3e0d036770f0cc25b977d
SHA1 ce67a56b0200f5a5b514de325608f218b270dab9
SHA512 38c264ab545f38512b8517c515a0e3bbdac8ba020cebb286feee9b221a63d6e9396747f8f21c10822a42c1bdd89c71459cbada3a15a45f263e623d1b10eaa65d
SSDEEP 6144:EawQJQW1eeXQf91DU+OjFnyL0GnFacklk1s9bemPOTQysNg0UizavqloIC0LqouV:gRodQ/CjF0nFac05NYqlDCwqpr
TLSH
T139D44D42A27D771B142412F9E737E923DC9EE3D8B4000D9668974A1971EEFCC38B6B64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\fa.pak
Size 995KB
SHA256 b809d2de1ef0f4b26ef34e878c9fcec7f0e603a910d65c877907e16e38884163
MD5 632300dda3dc062440c842aa84871141
SHA1 37274dddfe0ee75bf4393e2ec6149b1e9e9211a0
SHA512 317128a48d82017af39cd44a680852771e28286ff6015f8b0c662b03a276d0e5fffe344e23f67a0df0daf87fdd91b38077c732663773808828603957ff0f61a8
SSDEEP 24576:j8u313uyqoz+sE2jRmXnloTUoXtCfGk62Yhk826Bike8MX41OElUKgkI02mHa+Bf:F
TLSH
T1F625A1956AAC9AB15747CA0341E33834C773EF12D349FE40ACA1076609A5B139F5FA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\fi.pak
Size 612KB
SHA256 7d0d39f97228c1ddf7228e44a509d116eb0556cd079f08aa95ac2449305e319a
MD5 906bd0a35cebc8155ea7910ffd942f73
SHA1 d6b11a8a36da1b5a59db8d385da25b91364fc50f
SHA512 7f6479951aef88bffe56033d52b7ed9668ded73d4c3fe423ac700803f3c6c2257e916b33847e06ff15845d47e8a5127e49a52bf2ec64bfee9ac13f831b63f69d
SSDEEP 6144:8QZqxdraRpBNu4Et19cb857FYmS0rZpAgL0WsTCaeOEmHHuaQQLMcpVH7IEprWap:NKdgp/Ot19iahZRagcpVbIEprWaJQrG
TLSH
T19DD45E915215C22237C4D29E7DB0903EF5E5E39CCC284D9AE843C7D849EE9887DB276E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\fil.pak
Size 694KB
SHA256 8954dabde6d7e7872cdb8e647deeff53d217148d201d3c1c78c517185db5f8ad
MD5 e41682befe7005102362caaa91c1e67e
SHA1 3ff8b3a6a62d46f370e23e3611b0903a5666513c
SHA512 56f56b008142e2539c8cbfa80f5b501354cc13eccfc63e64792475a367f8f8d62a2e9a1b87e82231c59d63cdbbc5e124f92d58099cd3afa2988caaed72299cfa
SSDEEP 6144:fdQisaMU11qbBaE78y+DQGCOgwlP6t1ihDVzrCcVNvt/LaoVUA1+UO:1nMU1EkHvA
TLSH
T1C4E4C616B7401748DBC352E56260682F6AE560B83F81786E0FFF269B7BE7CD4D270192
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\fr.pak
Size 716KB
SHA256 87776d3fa22f3fdb6f951cd6f62f11454bd311ca0e415faff22e09957b3b306d
MD5 fcfec9ca12f822e5484c440c523b17f7
SHA1 bfd14d06b504ea825a0f5414eed9c712dcce54c2
SHA512 034decd9ef3585c51939aa96122b531cc893fb98a766275e021ec53f27b1f20343cd554711bfabd68440dcd0f5aec36267ab951cfa73d4c99e2f92551dae3f6c
SSDEEP 12288:46Y7rVTZLlIb94S3bvZwi3x6QuargVam8VcezfoYKxQkZuYnYc8jw2waxFL1X46v:NY7rs9IV8T7y8
TLSH
T198F4E65FBAC431CB19C60277FB16D6A3DD348248F215E340D89F4296129A8ECD39F6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\gu.pak
Size 1.4MB
SHA256 f59dadc38ed3b6673279dc3e309d62f3083b9e89f4c6d03c3757812029ab7c0f
MD5 48d0f11d9b73ebfa7860a72223486184
SHA1 93f6fcbfe23e16bcbf1217aea6cf573f9da7034f
SHA512 ac18df4aeba077db3f4c58d1ac01cdeb287c0bcc1ffc1a36f79d29961c69c41e052f187b26be364d98c9838f45563aeea48374d12589fbf07a94042109b36225
SSDEEP 3072:fbH9CTotdHkh1Yt0xB5k0TeCa0PjAwREJKVMjNiT7llj63rAulfcSi5NnWsWi+/Z:b9hbkMtIk0qCazKsGEYsXCl1Dsyw
TLSH
T1656507D0D3B9F07119DA9F7E819E512086695343D67E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\he.pak
Size 871KB
SHA256 6e7506fc5816532f768287ab591983f20754310f2c091a35e780d34296da71f4
MD5 fa94682f427e72ab2165571fc620a69f
SHA1 9a5bfbe411099d715e4d54978a7289e804388a98
SHA512 e2e01972f7b951f956f73e758d105b7272bf0cf1842a26219675bf21b56fb0c669bca166adebbc443ec57f0361f69feb870312862da3df07cdefce9eff4709d8
SSDEEP 12288:77CAEiphJoliptoTmEM3r1y0fBAl1Wq+/8Xx4uNYA6EXTieQCaj2iv36ueAs5AO3:7DT6d
TLSH
T1591599C4B2E552255131AAC39FA4FA286FF3CAB53CA27512CB14526CAC774F0BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\hi.pak
Size 1.5MB
SHA256 7e5875389c730cd8c59db02bef63fe8e595182a315e4c21fdf18bf63cbd7a5b2
MD5 170ef8bcc2cb6ed681800391c586ee26
SHA1 e83a0df28baa11352497ef975bc54f9440fda970
SHA512 8c0285b521064aed37bc1647effd82551b873dc884e07c4c7377b574cac6398532d6bce13e4413871a7b71f105375dd19343fe5bb6c05a39a251d570ca82571d
SSDEEP 3072:Nn0m8s1geJvUo0raKpmcyk7ZV/B90ZV1d3uGlqvLWYJEdtDVesn1s4f4/BtROvmE:50m8sGEvHuQa7BhT4Leddep
TLSH
T1CF65050CEBBEF3B55DEC3C8A32890D37D59D3674A3E5521348D5B3DB9844CB8146A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\hr.pak
Size 670KB
SHA256 7720dd0928c07b8f1b095573184131a52eabaa453472158a127b778340cf044a
MD5 5d01fca77712fd57a5ecb7940cd6c144
SHA1 e846bb67bc431b0640397094820c5a3a66136458
SHA512 8c357ca5df8cd4b78a53bd66f79495a39e29dc0ed2eebab69f73316a0db7d95f9ca91166c64477b9b5a6dc2dac314f4809e27dbe796be56e81d8a47d089f2419
SSDEEP 6144:73ZUU1lPb4SrHstbVHqDuY6KynubBvNEMzDOwlf62lJ:7JN1Jb4SrMrH29esHOO3J
TLSH
T192E42B7DBDF2570A0897F24AEFAA43447DBE08DCE56597B7684F522E0003F4C6AB8149
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\hu.pak
Size 717KB
SHA256 c2b5368e94d000707ab20a971045b1750e441cc901c046f5dc6fa0430b67a298
MD5 e26c179198983ce324e78d6a8e3ba3d0
SHA1 c15e6c67b22fefbb40f1bd30df1a00b10c20828e
SHA512 207fd73cbaa571abe4d670647464187fc5cb5f8b13597768449ac73706b1b2def84bcb43b624ee2d006dc50e6123bf4efb05e4a9698200dc897e8e41a449aae3
SSDEEP 6144:YTa7bc4xQr/4aAdFTpr4HR8XlH2iQa4FA4jt+u8U5iT78gZ49JxCYhU7rvP5wsm/:Ye7Q4i/4aA9cAdU5i387g8Uc1
TLSH
T199F44CB793B6945ABC6C179778643F15491E881BAB3B31FB2883846D34A178D0D83CDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\id.pak
Size 592KB
SHA256 705d9d1f315d0573acc77569396b9dc21fca6a11885282e1df013feee1bac6cc
MD5 107b5bff7efd798015882bc65ebc8bea
SHA1 cc2e798fad36b68afca2327bcd30074916b13942
SHA512 98389d4d6d17dcef1921777a3d047f253fd467eb8a39525b159fbceebc859893db638b6c24f0fa06985266f0eb3c32ab0ac45109a9914f9f5ee0a4e9c71fcf36
SSDEEP 6144:g03cD2leJdEU/vrjvS9OJpfffXoTFjlFNzmBF/tu6KIN6aUWOBw9m/iTv8MyH/:1s2lEdDrj/DATFjlF1mn/v6ah4/
TLSH
T14DD4E7632ECD310C494842D5F2CEA91E7CCE233BAF05B76E8E348F7055A67686716B94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\it.pak
Size 648KB
SHA256 9da499f66f38f4e490ac15017c68cf15c2e447d81ab4006482285cd42201e3cf
MD5 2a6a6c2e563a9a6b6e70facfe37695e1
SHA1 c5cdf0c0da3288ab6d3b5ffca530d250be75e533
SHA512 5b4d1a6d1499bcaa3deccc716575621dbae22d19fd7977ff8c308d52ffefc9b6e6495fdd3fbe774ba0b02d33e59892ecd3e5f323c90eef40eb08ac7fcd90a7e4
SSDEEP 6144:vWzcSLDoxc1+OGmikTb52NZzV62MxSfqBCfYs61ZtR/UhOKa1DTsRTcr/+qpzSjQ:E3+ONxZv8i6TQhNn/GlkIy
TLSH
T1C3E41B36A9DA252519976359E611F085FB6AFCCCFA41721CC99B031C22CFE80F1ADB47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\ja.pak
Size 791KB
SHA256 c366b5cec74555d41e8e0a1455cd95ea5d9f98637bcb8c3c66bc51ef9983c591
MD5 6e3951f48c2a649f39e7664a636be30a
SHA1 192c0d6b38445c3ac9e6284f8040c2c3b25e3860
SHA512 2bb9dcecc19406fe0a2f84cad46f8858ed3ab3ddbc36069c48a57ffec435f13626b1bf11d68114389d990d6198b8464b4ce5c79e31a3fba4e7a871e1c4345b46
SSDEEP 6144:IhkIMz+o1tQUXIcMa9ZdQ2pm/mJkHbZtpNBGisVW:IhkNzT1qUd9ZdQ2U/Mk9jNBGs
TLSH
T1CF05407CE3C969369D6153A22C0E36E17506AC9BFCA2363A443DC074BD70BCEE515AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\kn.pak
Size 1.6MB
SHA256 9f30fcee918e8087d6bc994c69afa88e30a1d80fc8c692e72bc9e43c544552c5
MD5 ae211364fc4aa89b3a646a8e016d3a33
SHA1 18a163914c9db830e7d52b7bbfcd65904587a3b1
SHA512 431acb2acd7c04dbb33e60adda202a16a8881c344230513b2835bb9b5dee31b2d66be84c0a8cf71affdb828e702d2a64bfc0e22851466ffb8584596d433f09d4
SSDEEP 12288:JmKDWz7h1HSKzoMUc8+FSy7EtPMm4vkyr2a:48zMJ
TLSH
T1B075CD18ADBA7D301BD5106B24EC643ECFF16BE29CA907C2F4DDD7802C66C6A90865DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\ko.pak
Size 671KB
SHA256 da4fa0e2ae54040ea796523636055da4326d0fba549fe9ab77eff7b38e7c0f25
MD5 2c4ed19db9f9482641f2758b014a69ba
SHA1 06e64d98c3742eea63ee29adac252a6d112fdd21
SHA512 c93d6562be4fe5bbbf959186820085518561a5fb697a1a92765b8cf9e9f63328181b4b2b30c563b265c1f91ef946d2a7e4a717aa26dab621a525612301fbfc87
SSDEEP 12288:v69tJguCylkhM1WNiPszcbifYj4ZGRyzDoIy1KsDCgCxnIJ/xESJGRG1KLhw1tog:vAJxICzO3BLJ2
TLSH
T1C9E4B5F23CDB63CD1193CD82AAF4FA198382D976F7530294ED44CE449E245D74886ABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\lt.pak
Size 729KB
SHA256 f383cfbde7ddaa676d500c5c0e4b41f586e6523cfedd6e5074cba157d1b20ff3
MD5 913dc48dacacc19b880ddf93057152d3
SHA1 048d3310c655e10aad00e82921a191071c577273
SHA512 98549b3fe2c5fd4c1933c61e5d21e534205917b51cb5b930c9894333eca33b24ec82a423ab5d5927ec65aad8feb7130bf0c3592dbe17ad06ee7259d56e1fee9e
SSDEEP 12288:p/aRx/AZ45Mq6LoAnlhIKcGbHH7xt2tJC6SWA:6xlMlc2b9tAJy
TLSH
T1DCF42C0069E3AEFB9A4467C981A48E78DEFD50009727BC61ED69C78BC43BF4525A0F35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\lv.pak
Size 726KB
SHA256 c2b0b4155868bdd9629ce945edba598b609580a3febc0d1320b4ca5cfd3a959f
MD5 dee6b33268937c478baa907656aee0d9
SHA1 e53ea282d09989ae2aec621a3cec39e627057edc
SHA512 32c856fb92d217291c123f8050e5992e8bf6339d88ce34ff0509fd54af2109b4bdd28b4c7f70a4ae964563e992651b072f8253b29d7132acfb512f38580f5610
SSDEEP 12288:kBoi2gW6EkFAWbJmyF3FbrJAGcZTSQor+5s:Ti2gW6EkFAWbJmyF3FHJAGc9oa5s
TLSH
T160F43A959EC68FAA4E918DCA7336D133A8CCD740FE07E112ED798B36510F52422B5EE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\ml.pak
Size 1.6MB
SHA256 73476d6e2475c53f0e34cbb828c6040b87ed368aa7df54d93a10652362968438
MD5 a1842f3a12185f6cf1979a74678f8586
SHA1 205115f3f4263f8c7ee8e709c73b8b201990b50e
SHA512 315b85c3288c36ef7c0d53fa5daaf53b05f4447b049da319d63f9cc9424546c4f4d7d127197be59cfcf971078a608b7e6751e9ab4d0eb7d4565bfeb568123e99
SSDEEP 24576:FWJWmv/oZAuuxyYl+9y9XBkx/9tNnkKfijHeBRJzXcF+v2AiyZ3laJRvo3O:FWss
TLSH
T137759D5BA036CD3B0FD102167B4E2FABCD5B9FD140AF668B5869B2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\mr.pak
Size 1.3MB
SHA256 210b05badd582b3c1bcdffd40a5ae77ce0290fd5b8da88604242bea19ab31184
MD5 8e6a56f9734df950c366c655e75f0c25
SHA1 c160da7b3b9c83744d6e9c8d1081d9f734c04399
SHA512 dd3664e8cc59a771e6b87f1a9fd37f861ff8093b7b8dd7e228a954dcc1839c126e10c5335ef445845a0cd4e2d30612487c328fc254260b1bbcee39eac3d94660
SSDEEP 6144:CUap54a5ZRTnm2ACjQiWUZyS0pB+MPbiMmRsTN/:CUKrZ5AlZ+MPbiMmmTN/
TLSH
T14055D14DF7BAF3685DACBC8E36540D3BD8FD21B1C3E9925648E1B3E74884CB401596A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\ms.pak
Size 624KB
SHA256 a2eaf35c46fb34960f6867b19427c871e8f7e59baea5ad3e06d99b29824cb46a
MD5 55a871d3eb62002446a430c547c18139
SHA1 69e35bb30a3e2d4170a18561f22227765b7bf1a2
SHA512 690a0d973959d352e450821646194929c7738dc62c4b2c4f73b18b602f7f1235d1161dc0fff0b7d800bca9c21096b31eb470ccb477f09b105ceacf1e56bdbb13
SSDEEP 6144:6QDf+73GZ4AEyu9S1cW9t+Huqwp+k8LNkwnwAFDqlOt3Vct:6Q90yNmHuqwpbbRlOc
TLSH
T19FD4B5579EDE3118085843D9D2DEA91B7CDD3332B705AB2B4DB08FB0066E7A53316B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\nb.pak
Size 598KB
SHA256 06833d00a792c640fe4cce924bcd855b04e544cb8c8c6804dede3a106cbf9f25
MD5 e0543861fd70706cc8a577a92724af90
SHA1 2baff050e2416305bbfb459e4e501e4a443257e2
SHA512 ef3c67eb9cb2274cd993bae1df0c8a998a763e88e5ac221a749a916ed06efb6602dc4c64a36bb810ba29ab050dc2fd3965e71864ae424fd32877986d35bb71b9
SSDEEP 12288:uZi5T7CNNQlsOU/Op7f3PfZLnkGJI5Br4fw4Mau:uZid6ODpLnkGa5B0H+
TLSH
T137D4F783EE46B72EF2A443A4F518855B9B7D942CCE98199B54DCC63E0CC7AF052BE1C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\nl.pak
Size 623KB
SHA256 cad7960798432e33d4c3472d7cca29db688e0a6e4557ccc5634b56fa3c1184b3
MD5 b71d06ab22b15f336e53cd67a50c41b6
SHA1 57a3fa03b8ffc850191f7ca9b246404a34e2816b
SHA512 4f6e8e46ddfc28e18266b14ab5af13776ebf00c1648e137c2d059dc7682a13c90161e8d94ad6cb5280a3e64e817c46b8b16cb629b02e7ec801845894db409443
SSDEEP 12288:7i+4Rsj1WtlbJWQusiURiqgwIzf7FNyh5gqHgGCDTF:7irw1MlbJWQusiUZIzf73yhKqHgGSR
TLSH
T191D4F907AC4E293E59C1A349FA098FBBBF2ED22CC26CE67D94DDD1340443F68919D589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\pl.pak
Size 696KB
SHA256 2d07600479e32c3c233312872f54b4c33394d79357fc9182337271e961f409d6
MD5 51533cf0659186dee18fb2856206bfac
SHA1 2fa3279f11872d106e521c3505f1350b8680c932
SHA512 345d8834bd700503f8e3afe6a79c0da428c2d2dc12577fa57ddbfa6177ac73f5a2f0574eb913f433c3107b40897feab7a82fe8dfbc667f68f8267667a6649149
SSDEEP 12288:2dKpOGL3KQLwZwfQfuzSJabZpbn6fPPCUdUe3m/UevM/mE1QhrBajMol5/mT:DpOeDMK64vMH1QhUO
TLSH
T1BFE46B0E5AE58A4E8CA008E6F6E70B7CACDDC808F108D35FE46F4526719B19EC9BD5D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\pt-BR.pak
Size 652KB
SHA256 cf120bb9160da9b960f930dc784c62ce10b72ab3b785df2f3a174e91a79a1785
MD5 ca6f88d5553f2cf5ca3d0603beb74b54
SHA1 b60d5be947041cdebb7d16601fd45c679e93c41c
SHA512 37d12cd05e796d3be853c7e3ea189bd57b478103f8d89cb7fd23fe80d43dc1accc671750a00d1171b49f7451d5a290e18fbe366fbf57d733e0eda99c55710a03
SSDEEP 6144:KnNCo2zPbYDZ7Q7uNBXBLEpPQHEyWAEIIr9dqsRUUfvn:gC9bYNUYbERUsRDfv
TLSH
T138E41B2A6DCA136605229350B70EEB47E5890745FE0ADA87DCFF4F05A3CDE40D933AA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\pt-PT.pak
Size 655KB
SHA256 7c72d93fb87047b4d3c450751c6f6c1b974c57fee7efe2cbace420c6f5baa11c
MD5 83e100c160eb1260aeecff5c73c2f125
SHA1 72a054ae6a96cb4ea0c10016ab096445e54fd823
SHA512 7ce6ec4776daee127db94f1f3186a5a192e5522f3908994a45e0191751bd0e1bf7bba7871a0cf193c049382da0dfda7dbdc7d7e1d5432cf4a62fa959659e1edf
SSDEEP 6144:ZiEtms3rg2osE6T+3xujTieJVJJxhuI9AyN55frKDn7t2leSR7J:EEtvb6sE6T+yEDn7MeSRN
TLSH
T17DE429296EDA136605135341770ADB03FAC86645F80ACB87C9EF0B4672CDF94D2B7B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\ro.pak
Size 681KB
SHA256 9ede51d705907fa6234025462a564eab8c63552cfcba0ccf98d845ed98055e56
MD5 acffed2409c3790c42145bb5c684b1c4
SHA1 b3bb7636f94892b12e852bfad10031de857703d0
SHA512 bb0719454c657640a7a318e2207aa99bc86efc4d7506d26a87e173e0ce8a2dce7f43b615f722fcbf5fe2297fd9241feb217d4178af2406475bfa5456b813a619
SSDEEP 6144:gMG0JLDgqKF8mg1CwGwV9InPBFAOAgPqiVVQL+ITGIfOYIQEm5tN4W2slra/rrsf:VJTS8mHwnInPB1dTL7uIQH5n9le/0f
TLSH
T111E42C23A1C41A972D5152B2F73A24D3E88E105DF641E28DA4EEC97910CDDDBC52EECB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\ru.pak
Size 1.1MB
SHA256 8128251d564b01d9d96f758baaca87185f3d4be898c6a27eb27ed0b69ad5129e
MD5 f816538ad0596c88d70f09d37f7a8bf8
SHA1 ad1fd7d8aee9da467b8a2bd6989ee0f117bb02b2
SHA512 a8612cf11f7fe9c1ab8553b0406c6b032409ef001671b7fee5b19c5c9da26ced9739284407743c51ec578193ac2922f0a30d9afaded4edfa9d87ebc0965af08e
SSDEEP 12288:lsBT7Nq1fwfQeRo4YeWspkzJ9sF+oa+ULZHo6HzW/oqSvgsGCZkE0dR3Q8NiGjhH:lsuhFd8oXS
TLSH
T181358860669E64DE1101F01BDD08BE0D3CEB45FE3FAAA35219A42D7F35F2024C67E65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\sk.pak
Size 708KB
SHA256 859ab9241e6da9efc96f38c5e2115b0539da9ac254a14b5350afc5e7b62b9f56
MD5 ad0b9078f632a50418d0c7324323103b
SHA1 b3cf81d7cda9350ff4162d47472d235511b12332
SHA512 37d1e075d3e4e21fec01e7b38282ab3f5aa5ff1d2a1e04e78d71f240bca24574f903399dbe75aa7bbf9722657b0c5f927829d3dca39c95531d680661bfa8c4e7
SSDEEP 12288:2uynxls+T27fayA8+mi+xdnaOY7VZ8pTjsxt9wf:2bxH0faS+mYL/taf
TLSH
T1E5F44D3FDFE7181E8E8D0108FFEA7110FD6E8650864EB4A6944E364714E26EDCAB4E54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\sl.pak
Size 678KB
SHA256 549e486755c31a5ecf2c9708bcd3d4dbc0f2a35e003726bdfd79a0c481e53af3
MD5 1979cba05eb7cae625ff6f8445f480b0
SHA1 ee0ffa923f193a35f2864462a93afc388efbeed7
SHA512 03a5d8ae87f85bdccc8bdf6e9a3ef56d2085d8b507cecddea49d369d0221807838ed662c768f81b1951a1ee8f6efaa09b9901591d276ec0d138410188f024681
SSDEEP 12288:yW+0rUl8SQJcB2+RVWobUWH2nWOq9pwi/fzBNaql/ad:J+RQqWobnH2ni/fzBNW
TLSH
T1C5E41B39BAA74E0F0C9AB28FFEA606007FDC044CD256E6A1EC4F33795415A3827BD595
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\sr.pak
Size 1.0MB
SHA256 5ee068f48ebb080f901decc016235797d0f5c66b5f9d7b5ae026b6f210de3248
MD5 008fc25adb5f55930b5ce8150c346da0
SHA1 5fd43e9f4b19030f3c85243942c2132cb546550c
SHA512 23fcbdb106987dc3dabdde4f0c1adad73f1ef9a799a77479cb9cc456ab288e08833838977265499fe2b2b53c135b8086bedba01d03cb4228cdca16b18d7ac2e3
SSDEEP 12288:W5i+KOKV86HL58I882S0dRsCt7i4O5JM9kpCQhW6CgxmIF379juz3/k/i:ei+KOK9BqICVz
TLSH
T10F3556A19B9E64DB0501F41BD808BE493DAF41FE3FAB975211601DBD34E10B847BA39E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\sv.pak
Size 605KB
SHA256 52f8d477c4b983614c8095e27f0513a99080409b76009d1e89f155bbc04dcff1
MD5 8ea08ff6b2f181d8fc027e94f9cd09c3
SHA1 0635594f69cef8b457a9684361b3e1f7eead0250
SHA512 e48efe5a3fe1f0a85e2ab99a08e6b22b829f5c01a76351a5fa4881ff82960f604fddd72ac1bcd04d2f8eff37c1bc2e5ea72636ec4cf6d3536b57b0da58befb44
SSDEEP 6144:87KSwwQLx8NDQ95YbgyLIxnRxhVbFl14hLOVRFcz5RtGm1eqMlmFM/OSOHeldiGg:K9wnW2T1nTPisF6f
TLSH
T139D41C434A20F526FBB2530DB608115B0AEDE25CE7F2954EB8D9883DAD8BD5805FF247
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\sw.pak
Size 640KB
SHA256 bf090212ea30662234b2cb0edf03a9c025afabd901c2f4599a4c556257ba5c67
MD5 62ea507c0b1ec4f28fcfef61fdd57eba
SHA1 c62aa3b85616eb600cb3c19fff9a3015a7e6430a
SHA512 580ece94da0f8fa676810be7e424a1dbefe1604ea13dfe16d60b6c747a823ef486f6c724cf4e9621e906ecb7964ab1e14668bd12b748b28beddda134bb104126
SSDEEP 12288:WNcC6B07zyxGB2q6OJdYGIpw59medqNGjRdponi91GKL3hjinSLeRtFa/hwzlijA:rEsFPiF3y
TLSH
T1C7D4D5629C71D0191233518603DDEF732BDCED5C6A2B2DA35A46BF0F218F48C56ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\ta.pak
Size 1.6MB
SHA256 e6136824b4e1862828e5b0aac50811b9076526d739386ae8f6042c7f2b560f24
MD5 fc9e51ef9d03b7d11b882de177198472
SHA1 88b50bff5c93b0b90787e196b42c1058bdd39408
SHA512 22abc2f417975fa6b90044548c9adb568c1afea45065903835cd2dd5423be64271ab940ded74194c6200306474953b743b5207f3e08551a866eae8f124b4c22f
SSDEEP 6144:mVk/U65i8yId6Ua2IkQavRGPEtqstR9ztm1vYpiMyY:F/UjINRGYqAtm1vYpiMyY
TLSH
T164750CCE923EEE890F93288F0319536912986155C07BE3A67C766E1198ECC5DDF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\te.pak
Size 1.5MB
SHA256 13318eb82b0302ccc3cfd130f32c1c1f0f6b7feea8f2d1173bd9a7f7aebcd1f7
MD5 7634ecf1d2ebb5c25f72b49b91086c78
SHA1 1272c70fbd0f7a10d3370a41cf9c8ba36b9298d2
SHA512 c9dcfecee82d30d97e49b7d29bfb70b6f02f84a62a63b425fffacb06c80db31e0d76c399b0f5ce03c33bf52a0f21c837f53acfc1041c92262031e0cca478d223
SSDEEP 12288:OGB2m7MZKNuywG6sSF602/NNgIC8ymoRRT5dbJy52CM1WOB63N3p1Fn1gh5aC/lp:mkp1c3N
TLSH
T1057593023A6AD310DAE70273752CF66C49781B8161D6732C1EAFA357EB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\th.pak
Size 1.3MB
SHA256 66d9fb5ab55db59675c38add303d3a0a665fd624051085a453990aea018759de
MD5 e026318dc2d9f1cd62f81f3e6e3ba92b
SHA1 bf38d56b2e7bfbd964b9561b85ea6cf2d5633f73
SHA512 695e9233e33fbe3b0ff7e6d5f78046377e123bceca8e6f8438175b2a197431a61f9f03e3bc78432e80de2803e2e110cadf98204145a1185accee963f4f57b646
SSDEEP 12288:fMoytYnN9LyZYAozYL75SsGoih5skJUseOPsO5eXwpbDFDS6Sud2mKHl7jj812sS:fXKdisX
TLSH
T18F554CB37247DDD479441B5B262A7789672DAE693F73F8E00089215A73F071A8432EE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\tr.pak
Size 651KB
SHA256 505892d8b565ab64e538b913f9fdbcde44fe0235e7657a3f7c87cbce07c28518
MD5 a16045768aac854f20b695360f22b850
SHA1 faee0d182477affec9d519744e55c3ef71622798
SHA512 25230b099c8f72219541b8261955681e2f1a8451645997c8679daffeac2c3905c5122c0fe78169c76768e9ab1d9f41d7fbbd50dde70f7de5ccb847ed19f4a1b2
SSDEEP 12288:V9i8rV7X0Z79IPHz6sgwhIfZFxAnuN9d1i4G:qMMOUN9W4G
TLSH
T158E4FA8178EF282CCBB9278BD6E94666F89F0766B331F4469B169636774534303E360C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\uk.pak
Size 1.1MB
SHA256 3b9d9b55685728411810d10d5ab6176889187dbe7f7919ad95da533945d0b565
MD5 414ea8e29e71a2456d908321d512cbee
SHA1 a9eedd2d2fdaf565c6b4756c0db13dc631d33bac
SHA512 75b536e4d701f040e0f4ee2923abd116e0767c02c38c84685c0c2287d7b93fa61be391f35588c2d1b33bd0dfabe712b2ed254e01eea0435a8ab955f1ff5b194d
SSDEEP 12288:CV8O8ihafP8UH+QKjb3Irkk3AbvyjRrsSr+UinRYX2ot81BUf8t1oNnHUA6QHBzN:W8O8q+4E8k
TLSH
T11D45A9A19A9D54EF0105F05BE94C7A0D7CA741FE7FA6871625A43DBF38F20248A3C35A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\ur.pak
Size 981KB
SHA256 2f11ad2c0dfef993439ee40a5af8cf74070ea974b3ad3aebbc334c0288e318b4
MD5 71f0dbdd4b44ee0214f8ca97503246ad
SHA1 f97d1018e14718c684f1c9699a7e2e1bdd9272f4
SHA512 dca238ff3824423756756d08fb7661e68a7d9fdba83d9b50029ef53062aebd725ff5ac3b612697fdcc0346d48f66324756b3dfeded80558004ea11cab0cdf3ac
SSDEEP 12288:ft6E5AAt5ofu8PC3zqtdQ+BR7yArubcvqmEhdGuOZedQYrGuYjwadcJKwUvuRcow:fJ5AEFGYW
TLSH
T1292500D2E6B896B35A21D92780D33C34CB735F13D34AF281E96246C54E9A0135F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\vi.pak
Size 774KB
SHA256 b9eafab05aaeae9f9e122cdc4ba7ebff85e0f71bf7da619b3463bfa966fe751a
MD5 7699e485cde7e28cb94da5c12220519e
SHA1 6241daaa7912221323e37ea96ad7c818ad4ee3d4
SHA512 9b6760fde54d8accf3eab9f25123996dbc3fd7958644d13bb6e35d3268b7dec06f44179b2127d98ebf54e2cf31c590e7a40ce29bab8f2ba88bafc40f15b5e6f2
SSDEEP 24576:Q8Nh+c0JVc04Fvo/YE+tsjlIsicufpq1ljz:RIusiVk1ljz
TLSH
T187F4855216E0302680AC553EC6CE540D6FCAE42FF7C1CFE56FE4297876221A45F25BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\zh-CN.pak
Size 554KB
SHA256 d2807985b7f397f704d50dc8f540976cfe5f91295bd85e28192a8592913ccc12
MD5 4e9e5060ef036fc0d0d57118d2921c50
SHA1 ab81a99916350f5fcd8f4bf28602082a107c90d6
SHA512 595221498cfbb4e6fc1baed200d99b41b5c374ec5c3d0491e779ad14feca74851f6e2c4de4f7febfbf1776e3333e60c6140865ad9a2d9701aafb6b8b76bfcdf0
SSDEEP 6144:p2rvOPIG+ndEFbaE+EGinx7dpUJkKfQDJ+CLJfR6UUYfDM82ZsQnWgMVl+:p2rvO+Er+ExnzpUJkQQVRNUZYfDMzsDU
TLSH
T14CC47CA820F9BDEC044650E13729613D7C40724BF667AF366ED248DD2AA2FAD0757E07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\locales\zh-TW.pak
Size 547KB
SHA256 05e1d10f1131071f3ea79dabeb1c756397c3232f49e5c14cc3c091f7d231a899
MD5 0b6cf95ef8e3422c5c5bcd1e2ef3fb86
SHA1 2e35e1dcbb2e656ee945ce68b11f93093bc204c0
SHA512 02bceb260760e6ae8cf5130a733fae6382201335674a05170ff49ebd24c33ab19c7a40450372d70b2285af728791475f9e13a4e6fa3a05cf8df9aa61dd114980
SSDEEP 6144:06H7qIVfJRFLrVm7agEuxVJm4DIa2sluXdAr5rqo2HZD5SWWX2jXUmFTu:0Sthu84UNdAr5mo2Hnjj4
TLSH
T14BC47DB60CFBDBEF0901F484B7CD522EBC8B342DDD777636FC8518941E6AA540AA2185
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\resources.pak
Size 6.4MB
SHA256 a89bcf21e419e3d2bdff25d930d98d3b866c11c596314ba6f830b22b7ef3807a
MD5 1331b3440fff795469b569da93dbb7fb
SHA1 3c2d28e5c51cab989fa3bd72b0f634563d72398f
SHA512 c34272f23d015b183018c4acb3e7b42b10afa19afc5617df94171877dfd3751c272d4618e225da40c545773d6c56bd1cd0958b0c3a1d496e5b634dfc7ce044e6
SSDEEP 196608:J2hBRyfbr5QoCmkrB0QMguFBgt3m06Rw+Ki:J2hTyK9mkr4jFWBm0iw+h
TLSH
T1846633DA72312C4FC58883BE4528417E786CA7A17D895192159C7228CC6E34F7FC9ABF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-update.yml

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\resources\app-update.yml
Size 89B
SHA256 5efdfe9d44398bcf110cc6745e9c4b4c82d1d7bbbd502e2a36cd3d5e36f92dd2
MD5 8ca148b439ae09ae3f1663e7234ee210
SHA1 72141d5df84ff5c758136042ed39011666d2bdba
SHA512 c355aa8be95f285e00e3b5aacc8508a67d9aedd3ebaa175a6f5906cfca6e5041be71e512bf6317393c845abcc7be183ff1df8f7c19be00ef278f65293cac71f4
TLSH
T1B6B012284500D222C3350C2034047CE430C810F392E9081872D5405480024504D540DD
MD5 SHA1 SHA512 TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\resources\app.asar
Size 4.1MB
SHA256 890d40052a9fd06822a8fb2a06716cc36ebc9b582bd2d3bc2a1acdc6bcb22072
MD5 ac28ddd124cb0d9e5297c28d512864a5
SHA1 d566e287d408083e67ad3e0a09e95f44311913b4
SHA512 b025140f758576a8803a040e4083ab1a56b2d931cf449f702c34682c63122873c980cb9b484c435e33c35e51d549f9dc280de41f73c933aef8855314c3305d65
SSDEEP 49152:dQJ6zLIIF574Md59rFUVnK6nxryWrL1YXHTOYKThjGLYzGhjqmMM3b9jM8tCsgqd:uuCr3VL4KZWcuMr4VpdnDVHP
TLSH
T16616AF907254B43683E760F614E61100B3389619B409C59DF1BCDEEA68ABDC673BBF78
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

elevate.exe

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\resources\elevate.exe
Size 105KB
SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
MD5 792b92c8ad13c46f27c7ced0810694df
SHA1 d8d449b92de20a57df722df46435ba4553ecc802
SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
TLSH
T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\snapshot_blob.bin
Size 333KB
SHA256 ad0788d20ffda9dac3a04bb79b66f1cb85b9667f69fbf147752d26259bb5e725
MD5 b9fbebac6995eeff6c7770bd3690b36d
SHA1 0b4f8a52566c0505234a54f8ede5bcbf8b9bfdc9
SHA512 df2fcb7c83a9ec9f970015e6d98e85563eafbfdd03c94f5de3698c85d02a3c3569441dd8232b8efd5b738a4a65f45fc1ef4cbd15cd6d0423ac14d60e251afc21
SSDEEP 3072:5OiXKGWOt+xbRt2FIRJ25PC1F2+4PbHIYLyikagMMvkdAhm6tfsa:55XLt+HlLV4Pf7QrvBkisa
TLSH
T1EF74CE05F74ACB26C98A3A745DF983882E2071CD9D49B34B3549737E78BA2740D3A72D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\v8_context_snapshot.bin
Size 698KB
SHA256 49a57d20f07680e16238acd8cf60dbcf2b345ca9ab5b2a26626f2ce1bfdf2fc4
MD5 9537ef7a27762d5585a203a1046f3d26
SHA1 9328978106674f106a2a66a225e1f54f5e000935
SHA512 e91f1e364f9c1ba1d25e48869352f9c59c2cae2d7c77bd3b3608fae07d268ba18350bc5614f89ae53915b098fbebfe3b9c6948f5346cc84c711d693abb42078b
SSDEEP 6144:P/V4XptgO5XKt+HlzV4Pf7QR2NyuClVlxykismIdukcLKYNcPK:P8D5XRYfER2NySkQIId/H
TLSH
T1CAE4A761FB0A8F3AC5453BBD8DE657463A30B18E9E87E24B7405633D78B96B04C3652C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\vk_swiftshader.dll
Size 5.4MB
SHA256 bb23e739886eb9a969a52cec70d00eb5a07d3aa9c0acd212ad609b8016a36097
MD5 576e04d848fcedb8f6b73e2860ef32eb
SHA1 322326063e099646318c444a0ce7e8dc3d6f7fbd
SHA512 a31af543035457407d3e6ca24a5856fbed1053c3bf2e14896e3a1b999f5619372cb0fe8fab036b4ece01602a84692eb3beca1a3c73839db5fb1acf4fc24282dd
SSDEEP 49152:hNGehsXGzYgFwdR2XQOIsW9ddwc1H+Slh0tOaW314yy0HXgPUB8Hl4UKxgzc8Wox:hNVhsXrnIE3B836FY731f
TLSH
T148463803F28681E9C06DE579875FA623F631F8850B2276DF56A00F192E66FE0A73D714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\7z-out\vulkan-1.dll
Size 930KB
SHA256 ca5de625ce8c5db5bc8ae7cb0ce55b80c2fa8713a84911245dba97a47bb7d5a9
MD5 05aafa656a7c12e531c01816914c8d4d
SHA1 55d1fb6ec1f93279400207ea4c90d2d99de6eff6
SHA512 22c1f8f5ae65d83f79b4bab19f5db59119d59e110700b14108c16154288f40638312ac483315862c36e11c9d7c3b12b670f66a37a225bec179b2e080d7e45aa3
SSDEEP 24576:xdOyfTj1swXhUFLySp7OkXKqX6Z5WGc9DYsHQDb6g3P0zAk79oOHiYJ:zOyfTZsweFLySJ7XKqX6Z5WGc9DYsHQE
TLSH
T1CB158E12DA544AA9D67AC074D8D28A0789B074821322B9DF13B817147F6FFF47B3DB26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UAC.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\UAC.dll
Size 14KB
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
TLSH
T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WinShell.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\WinShell.dll
Size 3KB
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
TLSH
T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
MD5 SHA1 SHA512 TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\nsDialogs.dll
Size 9KB
SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
TLSH
T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\nsExec.dll
Size 6KB
SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
MD5 ec0504e6b8a11d5aad43b296beeb84b2
SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
TLSH
T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nsgC753.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\FreeTube\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\FreeTube\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\FreeTube\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\FreeTube\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\FreeTube\Network\Network Persistent State
Size 264B
SHA256 d8004af780b888f061ab71a0df38e43e6662e12ee04b80a1297066cfcf71c8cb
MD5 0de38c22b0acd7557a49fdc9735313f9
SHA1 8d46562f26ff02f0eb35ca5f328b01eda7e6f0fa
SHA512 20e7754ec5f8d9bcef0441dbaa29a5271cc26f4169cf3140123d78d1d996be216b9ef6e24afdd9ccd543dad9ba77c57aae97f74e40abb356847f01a29d4070a3
TLSH
T1A4D02BF6433018FE471593F00D18BE13C6FF0005130C9C5685A47B194B72479444054B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a955c.TMP

Path C:\Users\Admin\AppData\Roaming\FreeTube\Network\Network Persistent State~RFe5a955c.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\FreeTube\Session Storage\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/636-105-0x00000000700E0000-0x0000000070434000-memory.dmp

Download

memory/636-97-0x000000006FF80000-0x000000006FFCC000-memory.dmp

Download

memory/636-95-0x0000000005A00000-0x0000000005D54000-memory.dmp

Download

memory/1112-82-0x0000000007760000-0x00000000077F6000-memory.dmp

Download

memory/1112-65-0x0000000004CD0000-0x0000000004CE0000-memory.dmp

Download

memory/1112-83-0x00000000076D0000-0x00000000076E1000-memory.dmp

Download

memory/1112-74-0x000000006FF80000-0x000000006FFCC000-memory.dmp

Download

memory/1112-64-0x0000000004CD0000-0x0000000004CE0000-memory.dmp

Download

memory/1524-905-0x000002748F230000-0x000002748F260000-memory.dmp

Download

memory/1524-803-0x00007FF8AD010000-0x00007FF8AD011000-memory.dmp

Download

memory/1524-804-0x00007FF8AD4B0000-0x00007FF8AD4B1000-memory.dmp

Download

memory/2220-24-0x0000000002C70000-0x0000000002C80000-memory.dmp

Download

memory/2220-40-0x0000000006820000-0x0000000006852000-memory.dmp

Download

memory/2220-22-0x0000000002C70000-0x0000000002C80000-memory.dmp

Download

memory/2220-54-0x0000000007610000-0x000000000761A000-memory.dmp

Download

memory/2220-55-0x0000000007790000-0x00000000077BA000-memory.dmp

Download

memory/2220-56-0x00000000077C0000-0x00000000077E4000-memory.dmp

Download

memory/2220-57-0x0000000070700000-0x0000000070A54000-memory.dmp

Download

memory/2220-53-0x00000000075A0000-0x00000000075BA000-memory.dmp

Download

memory/2220-52-0x0000000007BF0000-0x000000000826A000-memory.dmp

Download

memory/2220-51-0x0000000007470000-0x0000000007513000-memory.dmp

Download

memory/2220-37-0x0000000006260000-0x000000000627E000-memory.dmp

Download

memory/2220-50-0x0000000006860000-0x000000000687E000-memory.dmp

Download

memory/2220-38-0x00000000062F0000-0x000000000633C000-memory.dmp

Download

memory/2220-41-0x000000006FF80000-0x000000006FFCC000-memory.dmp

Download

memory/2220-47-0x0000000002C70000-0x0000000002C80000-memory.dmp

Download

memory/2220-39-0x000000007F800000-0x000000007F810000-memory.dmp

Download

memory/2220-25-0x0000000005360000-0x0000000005988000-memory.dmp

Download

memory/2220-26-0x00000000052B0000-0x00000000052D2000-memory.dmp

Download

memory/2220-27-0x0000000005B80000-0x0000000005BE6000-memory.dmp

Download

memory/2220-23-0x0000000002C80000-0x0000000002CB6000-memory.dmp

Download

memory/2220-36-0x0000000005C60000-0x0000000005FB4000-memory.dmp

Download

memory/2220-28-0x0000000005BF0000-0x0000000005C56000-memory.dmp

Download

memory/3344-966-0x0000023B99E90000-0x0000023B99E91000-memory.dmp

Download

memory/3344-962-0x0000023B99E90000-0x0000023B99E91000-memory.dmp

Download

memory/3344-967-0x0000023B9A9E0000-0x0000023B9C265000-memory.dmp

Download

memory/3344-956-0x0000023B99E90000-0x0000023B99E91000-memory.dmp

Download

memory/3344-955-0x0000023B99E90000-0x0000023B99E91000-memory.dmp

Download

memory/3344-954-0x0000023B99E90000-0x0000023B99E91000-memory.dmp

Download

memory/3344-960-0x0000023B99E90000-0x0000023B99E91000-memory.dmp

Download

memory/3344-964-0x0000023B99E90000-0x0000023B99E91000-memory.dmp

Download

memory/3344-961-0x0000023B99E90000-0x0000023B99E91000-memory.dmp

Download

memory/3344-963-0x0000023B99E90000-0x0000023B99E91000-memory.dmp

Download

memory/3344-965-0x0000023B99E90000-0x0000023B99E91000-memory.dmp

Download

memory/4004-906-0x000001D5649E0000-0x000001D564A10000-memory.dmp

Download

memory/4748-910-0x0000024384D70000-0x00000243865F5000-memory.dmp

Download

memory/4748-904-0x0000024384D70000-0x00000243865F5000-memory.dmp

Download

memory/4748-972-0x0000024384D70000-0x00000243865F5000-memory.dmp

Download