hxxps://skmedix[.]pl/downloads

Analysis

user interaction
yes
max time kernel
209s
max time network
211s
platform
windows10-2004_x64
resource
win10v2004-20260513-en
resource tags

arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
submitted
09/07/2026, 04:35

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
https://skmedix.pl/downloads
Sample260709-e73ejscw6k

Score

8^/10

defense_evasion discovery execution spyware stealer

Malware Config

Signatures

Downloads MZ/PE file 1 IoCs

flow	pid	Process
328	4620	msedge.exe

Checks computer location settings 2 TTPs 4 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation	sklauncher.exe
Key value queried	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation	sklauncher.exe
Key value queried	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation	sklauncher.exe
Key value queried	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000\Control Panel\International\Geo\Nation	sklauncher.exe

Executes dropped EXE 11 IoCs

pid	Process
5264	SKlauncher-4.0.29-web-setup.exe
3636	sklauncher.exe
4308	sklauncher.exe
5740	sklauncher.exe
4612	sklauncher.exe
4464	SKlauncher-4.0.31-setup.exe
5760	old-uninstaller.exe
5588	sklauncher.exe
4384	sklauncher.exe
3616	sklauncher.exe
4092	sklauncher.exe

Loads dropped DLL 39 IoCs

pid	Process
5264	SKlauncher-4.0.29-web-setup.exe
5264	SKlauncher-4.0.29-web-setup.exe
5264	SKlauncher-4.0.29-web-setup.exe
5264	SKlauncher-4.0.29-web-setup.exe
5264	SKlauncher-4.0.29-web-setup.exe
5264	SKlauncher-4.0.29-web-setup.exe
5264	SKlauncher-4.0.29-web-setup.exe
5264	SKlauncher-4.0.29-web-setup.exe
5264	SKlauncher-4.0.29-web-setup.exe
5264	SKlauncher-4.0.29-web-setup.exe
5264	SKlauncher-4.0.29-web-setup.exe
5264	SKlauncher-4.0.29-web-setup.exe
5264	SKlauncher-4.0.29-web-setup.exe
4308	sklauncher.exe
4308	sklauncher.exe
4308	sklauncher.exe
4308	sklauncher.exe
4308	sklauncher.exe
4308	sklauncher.exe
4612	sklauncher.exe
4464	SKlauncher-4.0.31-setup.exe
4464	SKlauncher-4.0.31-setup.exe
4464	SKlauncher-4.0.31-setup.exe
4464	SKlauncher-4.0.31-setup.exe
4464	SKlauncher-4.0.31-setup.exe
4464	SKlauncher-4.0.31-setup.exe
5760	old-uninstaller.exe
5760	old-uninstaller.exe
5760	old-uninstaller.exe
5760	old-uninstaller.exe
5760	old-uninstaller.exe
5760	old-uninstaller.exe
4464	SKlauncher-4.0.31-setup.exe
4384	sklauncher.exe
4384	sklauncher.exe
4384	sklauncher.exe
4384	sklauncher.exe
4384	sklauncher.exe
4092	sklauncher.exe

Reads ssh keys stored on the system 2 TTPs
Tries to access SSH used by SSH programs.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Command and Scripting Interpreter: PowerShell 1 TTPs 6 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
3420	powershell.exe
5880	powershell.exe
3112	powershell.exe
5448	powershell.exe
1732	powershell.exe
1396	powershell.exe

Hide Artifacts: Ignore Process Interrupts 1 TTPs 3 IoCs

Command interpreters often include specific commands/flags that ignore errors and other hangups.

defense_evasion

Ignore Process Interrupts

T1564.011

pid	Process
5836	powershell.exe
5380	powershell.exe
5692	powershell.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	old-uninstaller.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SKlauncher-4.0.29-web-setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	SKlauncher-4.0.31-setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe

System Time Discovery 1 TTPs 1 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
4620	msedge.exe

Checks processor information in registry 2 TTPs 50 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\VendorIdentifier	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\~MHz	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\~MHz	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\ProcessorNameString	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\~MHz	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\~MHz	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\ProcessorNameString	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\~MHz	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\ProcessorNameString	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\~MHz	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\ProcessorNameString	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\ProcessorNameString	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\ProcessorNameString	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\ProcessorNameString	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\ProcessorNameString	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\~MHz	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\~MHz	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\ProcessorNameString	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\~MHz	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\~MHz	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\ProcessorNameString	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\ProcessorNameString	sklauncher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\ProcessorNameString	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\~MHz	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	sklauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\~MHz	sklauncher.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe

Modifies data under HKEY_USERS 2 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	msedge.exe
Set value (int)	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134280453617228164"	msedge.exe

Modifies registry class 10 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\DisplayName = "Chrome Sandbox"	msedge.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Moniker = "cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe"	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe\Children	msedge.exe
Key created	\REGISTRY\MACHINE\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppModel\Deployment\Package\*\S-1-5-21-204488895-2999877624-296153668-1000\{0EF784A9-4BE4-4A4D-A2E3-46ECB8FC4725}	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902\Children	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\cr.sb.odmf5200eafd3ad904629cbb0f87a78a3c7211081fe	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\Instance\	msedge.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-204488895-2999877624-296153668-1000_Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Mappings\S-1-15-2-1760019844-2681172078-3872633735-798519778-3824819574-1684089895-1452983902	msedge.exe

Suspicious behavior: EnumeratesProcesses 35 IoCs

pid	Process
5692	powershell.exe
5692	powershell.exe
5692	powershell.exe
3420	powershell.exe
3420	powershell.exe
3420	powershell.exe
5264	SKlauncher-4.0.29-web-setup.exe
5264	SKlauncher-4.0.29-web-setup.exe
5448	powershell.exe
5448	powershell.exe
5448	powershell.exe
5836	powershell.exe
5836	powershell.exe
5836	powershell.exe
5880	powershell.exe
5880	powershell.exe
5880	powershell.exe
4464	SKlauncher-4.0.31-setup.exe
4464	SKlauncher-4.0.31-setup.exe
1732	powershell.exe
1732	powershell.exe
1732	powershell.exe
6012	msedge.exe
6012	msedge.exe
5380	powershell.exe
5380	powershell.exe
5380	powershell.exe
3112	powershell.exe
3112	powershell.exe
3112	powershell.exe
5760	old-uninstaller.exe
5760	old-uninstaller.exe
1396	powershell.exe
1396	powershell.exe
1396	powershell.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 14 IoCs

pid	Process
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	5692	powershell.exe
Token: SeDebugPrivilege	3420	powershell.exe
Token: SeDebugPrivilege	5448	powershell.exe
Token: SeIncreaseQuotaPrivilege	5448	powershell.exe
Token: SeSecurityPrivilege	5448	powershell.exe
Token: SeTakeOwnershipPrivilege	5448	powershell.exe
Token: SeLoadDriverPrivilege	5448	powershell.exe
Token: SeSystemProfilePrivilege	5448	powershell.exe
Token: SeSystemtimePrivilege	5448	powershell.exe
Token: SeProfSingleProcessPrivilege	5448	powershell.exe
Token: SeIncBasePriorityPrivilege	5448	powershell.exe
Token: SeCreatePagefilePrivilege	5448	powershell.exe
Token: SeBackupPrivilege	5448	powershell.exe
Token: SeRestorePrivilege	5448	powershell.exe
Token: SeShutdownPrivilege	5448	powershell.exe
Token: SeDebugPrivilege	5448	powershell.exe
Token: SeSystemEnvironmentPrivilege	5448	powershell.exe
Token: SeRemoteShutdownPrivilege	5448	powershell.exe
Token: SeUndockPrivilege	5448	powershell.exe
Token: SeManageVolumePrivilege	5448	powershell.exe
Token: 33	5448	powershell.exe
Token: 34	5448	powershell.exe
Token: 35	5448	powershell.exe
Token: 36	5448	powershell.exe
Token: SeSecurityPrivilege	5264	SKlauncher-4.0.29-web-setup.exe
Token: SeShutdownPrivilege	3636	sklauncher.exe
Token: SeCreatePagefilePrivilege	3636	sklauncher.exe
Token: SeShutdownPrivilege	3636	sklauncher.exe
Token: SeCreatePagefilePrivilege	3636	sklauncher.exe
Token: SeShutdownPrivilege	3636	sklauncher.exe
Token: SeCreatePagefilePrivilege	3636	sklauncher.exe
Token: SeShutdownPrivilege	3636	sklauncher.exe
Token: SeCreatePagefilePrivilege	3636	sklauncher.exe
Token: SeShutdownPrivilege	3636	sklauncher.exe
Token: SeCreatePagefilePrivilege	3636	sklauncher.exe
Token: SeShutdownPrivilege	3636	sklauncher.exe
Token: SeCreatePagefilePrivilege	3636	sklauncher.exe
Token: SeShutdownPrivilege	3636	sklauncher.exe
Token: SeCreatePagefilePrivilege	3636	sklauncher.exe
Token: SeShutdownPrivilege	3636	sklauncher.exe
Token: SeCreatePagefilePrivilege	3636	sklauncher.exe
Token: SeShutdownPrivilege	3636	sklauncher.exe
Token: SeCreatePagefilePrivilege	3636	sklauncher.exe
Token: SeShutdownPrivilege	3636	sklauncher.exe
Token: SeCreatePagefilePrivilege	3636	sklauncher.exe
Token: SeShutdownPrivilege	3636	sklauncher.exe
Token: SeCreatePagefilePrivilege	3636	sklauncher.exe
Token: SeShutdownPrivilege	3636	sklauncher.exe
Token: SeCreatePagefilePrivilege	3636	sklauncher.exe
Token: SeShutdownPrivilege	3636	sklauncher.exe
Token: SeCreatePagefilePrivilege	3636	sklauncher.exe
Token: SeShutdownPrivilege	3636	sklauncher.exe
Token: SeCreatePagefilePrivilege	3636	sklauncher.exe
Token: SeShutdownPrivilege	3636	sklauncher.exe
Token: SeCreatePagefilePrivilege	3636	sklauncher.exe
Token: SeDebugPrivilege	5836	powershell.exe
Token: SeDebugPrivilege	5880	powershell.exe
Token: SeDebugPrivilege	1732	powershell.exe
Token: SeIncreaseQuotaPrivilege	1732	powershell.exe
Token: SeSecurityPrivilege	1732	powershell.exe
Token: SeTakeOwnershipPrivilege	1732	powershell.exe
Token: SeLoadDriverPrivilege	1732	powershell.exe
Token: SeSystemProfilePrivilege	1732	powershell.exe
Token: SeSystemtimePrivilege	1732	powershell.exe

Suspicious use of FindShellTrayWindow 54 IoCs

pid	Process
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3636	sklauncher.exe
3636	sklauncher.exe
3636	sklauncher.exe
3636	sklauncher.exe
3636	sklauncher.exe
3636	sklauncher.exe
5588	sklauncher.exe
5588	sklauncher.exe
5588	sklauncher.exe
5588	sklauncher.exe
5588	sklauncher.exe
5588	sklauncher.exe

Suspicious use of SendNotifyMessage 49 IoCs

pid	Process
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3996	msedge.exe
3636	sklauncher.exe
3636	sklauncher.exe
3636	sklauncher.exe
3636	sklauncher.exe
3636	sklauncher.exe
3636	sklauncher.exe
3636	sklauncher.exe
3636	sklauncher.exe
5588	sklauncher.exe
5588	sklauncher.exe
5588	sklauncher.exe
5588	sklauncher.exe
5588	sklauncher.exe
5588	sklauncher.exe
5588	sklauncher.exe
5588	sklauncher.exe
5588	sklauncher.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3996 wrote to memory of 1028	3996	msedge.exe	87
PID 3996 wrote to memory of 4620	3996	msedge.exe	88
PID 3996 wrote to memory of 4380	3996	msedge.exe	89
PID 3996 wrote to memory of 4380	3996	msedge.exe	89
PID 3996 wrote to memory of 4380	3996	msedge.exe	89
PID 3996 wrote to memory of 4584	3996	msedge.exe	91
PID 3996 wrote to memory of 4584	3996	msedge.exe	91
PID 3996 wrote to memory of 4872	3996	msedge.exe	92
PID 3996 wrote to memory of 4872	3996	msedge.exe	92
PID 3996 wrote to memory of 4872	3996	msedge.exe	92
PID 3996 wrote to memory of 4904	3996	msedge.exe	93
PID 3996 wrote to memory of 4904	3996	msedge.exe	93
PID 3996 wrote to memory of 4904	3996	msedge.exe	93
PID 3996 wrote to memory of 3016	3996	msedge.exe	94
PID 3996 wrote to memory of 3016	3996	msedge.exe	94
PID 3996 wrote to memory of 3016	3996	msedge.exe	94
PID 3996 wrote to memory of 4540	3996	msedge.exe	95
PID 3996 wrote to memory of 4540	3996	msedge.exe	95
PID 3996 wrote to memory of 4540	3996	msedge.exe	95
PID 3996 wrote to memory of 636	3996	msedge.exe	99
PID 3996 wrote to memory of 636	3996	msedge.exe	99
PID 3996 wrote to memory of 3164	3996	msedge.exe	100
PID 3996 wrote to memory of 3164	3996	msedge.exe	100
PID 3996 wrote to memory of 3184	3996	msedge.exe	101
PID 3996 wrote to memory of 3184	3996	msedge.exe	101
PID 3996 wrote to memory of 3184	3996	msedge.exe	101
PID 3996 wrote to memory of 1288	3996	msedge.exe	102
PID 3996 wrote to memory of 1464	3996	msedge.exe	103
PID 3996 wrote to memory of 1288	3996	msedge.exe	102
PID 3996 wrote to memory of 1288	3996	msedge.exe	102
PID 3996 wrote to memory of 1464	3996	msedge.exe	103
PID 3996 wrote to memory of 1464	3996	msedge.exe	103
PID 3996 wrote to memory of 4956	3996	msedge.exe	104
PID 3996 wrote to memory of 4956	3996	msedge.exe	104
PID 3996 wrote to memory of 4956	3996	msedge.exe	104
PID 3996 wrote to memory of 1392	3996	msedge.exe	106
PID 3996 wrote to memory of 4912	3996	msedge.exe	107
PID 3996 wrote to memory of 4912	3996	msedge.exe	107
PID 3996 wrote to memory of 4912	3996	msedge.exe	107
PID 3996 wrote to memory of 5056	3996	msedge.exe	108
PID 3996 wrote to memory of 5056	3996	msedge.exe	108
PID 3996 wrote to memory of 5056	3996	msedge.exe	108
PID 3996 wrote to memory of 4984	3996	msedge.exe	109
PID 3996 wrote to memory of 4984	3996	msedge.exe	109
PID 3996 wrote to memory of 4984	3996	msedge.exe	109
PID 3996 wrote to memory of 3724	3996	msedge.exe	110
PID 3996 wrote to memory of 3724	3996	msedge.exe	110
PID 3996 wrote to memory of 3724	3996	msedge.exe	110
PID 3996 wrote to memory of 4288	3996	msedge.exe	111
PID 3996 wrote to memory of 4288	3996	msedge.exe	111
PID 3996 wrote to memory of 4280	3996	msedge.exe	112
PID 3996 wrote to memory of 4280	3996	msedge.exe	112
PID 3996 wrote to memory of 4280	3996	msedge.exe	112
PID 3996 wrote to memory of 464	3996	msedge.exe	113
PID 3996 wrote to memory of 392	3996	msedge.exe	117
PID 3996 wrote to memory of 4984	3996	msedge.exe	118
PID 3996 wrote to memory of 4860	3996	msedge.exe	119
PID 3996 wrote to memory of 5264	3996	msedge.exe	122
PID 5264 wrote to memory of 5692	5264	SKlauncher-4.0.29-web-setup.exe	126
PID 5264 wrote to memory of 3420	5264	SKlauncher-4.0.29-web-setup.exe	131
PID 5264 wrote to memory of 5448	5264	SKlauncher-4.0.29-web-setup.exe	133
PID 3996 wrote to memory of 6088	3996	msedge.exe	136
PID 3996 wrote to memory of 6088	3996	msedge.exe	136
PID 3636 wrote to memory of 3536	3636	sklauncher.exe	139

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --start-maximized --disable-default-apps --disable-component-update --simulate-outdated-no-au='Tue, 31 Dec 2099 23:59:59 GMT' --single-argument https://skmedix.pl/downloads
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3996
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=139.0.7258.155 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 --annotation=prod=Edge --annotation=ver=139.0.3405.125 --initial-client-data=0x238,0x23c,0x240,0x234,0x260,0x7ffd51a5c188,0x7ffd51a5c194,0x7ffd51a5c1a0
  2⤵
  PID:1028
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2008,i,14226248399711578467,3827007566680649811,524288 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=2416 /prefetch:3
  2⤵
  - Downloads MZ/PE file
  - System Time Discovery
  PID:4620
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=1892,i,2760302800481867458,2197115996716965180,262144 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=2296 /prefetch:2
  2⤵
  PID:4380
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=2524,i,1097562741450266743,13481064933675423483,524288 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=2652 /prefetch:8
  2⤵
  PID:4584
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --always-read-main-dll --metrics-shmem-handle=3484,i,14352591628455269637,5166470781108743711,2097152 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=3556 /prefetch:1
  2⤵
  PID:4872
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --always-read-main-dll --metrics-shmem-handle=3488,i,16151775706677533591,15969739783798496679,2097152 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=3608 /prefetch:1
  2⤵
  PID:4904
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --always-read-main-dll --metrics-shmem-handle=4236,i,5565677039311426490,7577974664764391070,2097152 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=4240 /prefetch:1
  2⤵
  PID:3016
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --extension-process --renderer-sub-type=extension --pdf-upsell-enabled --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --always-read-main-dll --metrics-shmem-handle=4260,i,5821728824082029488,6780481596963759935,2097152 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=4292 /prefetch:2
  2⤵
  PID:4540
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3828,i,16627588116667182867,2937803914008083414,524288 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=5184 /prefetch:8
  2⤵
  PID:636
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=entity_extraction_service.mojom.Extractor --lang=en-US --service-sandbox-type=entity_extraction --onnx-enabled-for-ee --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=3892,i,4699673384499241822,16939183835613712171,524288 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:3164
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --always-read-main-dll --metrics-shmem-handle=5712,i,2845219711542033562,2952729091394155144,2097152 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=5716 /prefetch:1
  2⤵
  PID:3184
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=12 --always-read-main-dll --metrics-shmem-handle=5876,i,91306540269310010,15659078501532102458,2097152 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=5928 /prefetch:1
  2⤵
  PID:1288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --always-read-main-dll --metrics-shmem-handle=5992,i,872582049023625905,1109212082308336182,2097152 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=5996 /prefetch:1
  2⤵
  PID:1464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --always-read-main-dll --metrics-shmem-handle=6352,i,12845561654814169935,12937906133156720052,2097152 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=6320 /prefetch:1
  2⤵
  PID:4956
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,16555373715659346580,8625505929812218846,524288 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8
  2⤵
  PID:2156
- C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\identity_helper.exe" --type=utility --utility-sub-type=winrt_app_id.mojom.WinrtAppIdService --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6372,i,16555373715659346580,8625505929812218846,524288 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=6544 /prefetch:8
  2⤵
  PID:1392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --always-read-main-dll --metrics-shmem-handle=6012,i,14306801947460416317,3158127129980647944,2097152 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=7416 /prefetch:1
  2⤵
  PID:4912
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --always-read-main-dll --metrics-shmem-handle=7120,i,6256811747588820634,6801003606481867316,2097152 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=5692 /prefetch:1
  2⤵
  PID:5056
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --always-read-main-dll --metrics-shmem-handle=7344,i,7968419686338596536,12103480428732308817,2097152 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=3460 /prefetch:1
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --always-read-main-dll --metrics-shmem-handle=4332,i,10772433673940120350,13742324375539658309,2097152 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=6616 /prefetch:1
  2⤵
  PID:3724
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_collections.mojom.CollectionsDataManager --lang=en-US --service-sandbox-type=collections --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5852,i,1387850201189700091,505551901871978156,524288 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=5112 /prefetch:8
  2⤵
  PID:4288
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --pdf-upsell-enabled --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --js-flags=--ms-user-locale= --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=21 --always-read-main-dll --metrics-shmem-handle=6284,i,1265158245446654501,18134559953705643966,2097152 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:1
  2⤵
  PID:4280
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=7856,i,16053593022487540731,3248672408835962728,524288 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=7848 /prefetch:8
  2⤵
  PID:464
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5008,i,7347580159777945666,5608270936773374579,524288 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=7276 /prefetch:8
  2⤵
  PID:392
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4936,i,1347025999264753383,899125469585491680,524288 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=7592 /prefetch:8
  2⤵
  PID:4984
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=4260,i,14150632648922554010,7822355875007753707,524288 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=7836 /prefetch:8
  2⤵
  PID:4860
- C:\Users\Admin\Downloads\SKlauncher-4.0.29-web-setup.exe
  "C:\Users\Admin\Downloads\SKlauncher-4.0.29-web-setup.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:5264
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
    3⤵
    - Hide Artifacts: Ignore Process Interrupts
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:5692
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:3420
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\sklauncher', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:5448
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=edge_search_indexer.mojom.SearchIndexerInterfaceBroker --lang=en-US --service-sandbox-type=search_indexer --message-loop-type-ui --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5796,i,16471823728267327494,9860933127798968977,524288 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=5212 /prefetch:8
  2⤵
  PID:6088
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --always-read-main-dll --metrics-shmem-handle=6844,i,2139156805310382664,8710648771965249984,262144 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=5560 /prefetch:8
  2⤵
  - Suspicious behavior: EnumeratesProcesses
  PID:6012
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5680,i,10236475140752944845,6391279027147850024,524288 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=5476 /prefetch:8
  2⤵
  PID:4536
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=6680,i,140214896788057743,6294217353562149673,524288 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=7864 /prefetch:8
  2⤵
  PID:3804
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=on_device_model.mojom.OnDeviceModelService --lang=en-US --service-sandbox-type=on_device_model_execution --force-high-res-timeticks=disabled --always-read-main-dll --metrics-shmem-handle=5300,i,4932254931503419164,17302946338805348292,524288 --field-trial-handle=2304,i,4424167945201751429,14021086058522875902,262144 --variations-seed-version --mojo-platform-channel-handle=5288 /prefetch:8
  2⤵
  PID:2776

C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\139.0.3405.125\elevation_service.exe"
1⤵
PID:3716

C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
"C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe"
1⤵
- Checks computer location settings
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:3636
- C:\Windows\system32\reg.exe
  reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v InstallationType
  2⤵
  PID:3536
- C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1824,i,8636617682192128454,4551178968825348421,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1828,i,1246432870310612032,400376837382056341,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1820 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4308
- C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot --secure-schemes=starship-screenshot --bypasscsp-schemes=starship-screenshot --fetch-schemes=starship-screenshot --streaming-schemes=starship-screenshot --field-trial-handle=1824,i,8636617682192128454,4551178968825348421,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1828,i,1246432870310612032,400376837382056341,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2044 /prefetch:3
  2⤵
  - Executes dropped EXE
  PID:5740
- C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot --secure-schemes=starship-screenshot --bypasscsp-schemes=starship-screenshot --fetch-schemes=starship-screenshot --streaming-schemes=starship-screenshot --app-user-model-id=pl.skmedix.sklauncher --app-path="C:\Users\Admin\AppData\Local\Programs\sklauncher\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1824,i,8636617682192128454,4551178968825348421,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1828,i,1246432870310612032,400376837382056341,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2652 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4612
- C:\Users\Admin\AppData\Local\sklauncher-updater\pending\SKlauncher-4.0.31-setup.exe
  C:\Users\Admin\AppData\Local\sklauncher-updater\pending\SKlauncher-4.0.31-setup.exe --updated --force-run
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  PID:4464
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
    3⤵
    - Hide Artifacts: Ignore Process Interrupts
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:5836
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:5880
- - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
    "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\sklauncher', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
    3⤵
    - Command and Scripting Interpreter: PowerShell
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:1732
- - C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\old-uninstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\old-uninstaller.exe" /S /KEEP_APP_DATA /currentuser --keep-shortcuts --updated _?=C:\Users\Admin\AppData\Local\Programs\sklauncher
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Suspicious behavior: EnumeratesProcesses
    PID:5760
  - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
      4⤵
      Hide Artifacts: Ignore Process Interrupts
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      PID:5380
  - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
      4⤵
      Command and Scripting Interpreter: PowerShell
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      PID:3112
  - - C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\sklauncher', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
      4⤵
      Command and Scripting Interpreter: PowerShell
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      PID:1396

C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
"C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --updated
1⤵
- Checks computer location settings
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
PID:5588
- C:\Windows\system32\reg.exe
  reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v InstallationType
  2⤵
  PID:1732
- C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1872,i,17560769533089096725,10933523117675315190,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1880,i,9304009277916717655,12767929529710145003,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1840 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4384
- C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot --secure-schemes=starship-screenshot --bypasscsp-schemes=starship-screenshot --fetch-schemes=starship-screenshot --streaming-schemes=starship-screenshot --field-trial-handle=1872,i,17560769533089096725,10933523117675315190,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1880,i,9304009277916717655,12767929529710145003,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2072 /prefetch:3
  2⤵
  - Executes dropped EXE
  PID:3616
- C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot --secure-schemes=starship-screenshot --bypasscsp-schemes=starship-screenshot --fetch-schemes=starship-screenshot --streaming-schemes=starship-screenshot --app-user-model-id=pl.skmedix.sklauncher --app-path="C:\Users\Admin\AppData\Local\Programs\sklauncher\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1783571251423796 --launch-time-ticks=648927762 --field-trial-handle=1872,i,17560769533089096725,10933523117675315190,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1880,i,9304009277916717655,12767929529710145003,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2776 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4092

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Time Discovery

T1124

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

powershell.exe.log

Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\powershell.exe.log
Size 2KB
SHA256 c03c91dd74498cc33a32d616fb3050ad954ed4f57e671e2e9651aedb7b128ff3
MD5 d30f23b777856a4a772cbe961f7b3343
SHA1 7b4f11fe65abb9620e0dbfeee619097a4648e70d
SHA512 64fa5e6ca5021734b620f79ded479d44ce30d4bd58ae9cdbee49fe1b251d6bd779a3b62708afafe90c37491259efc348d7fb2cb774d74668671c6295dca793d3
TLSH
T1E4415C303221B8D84D436F1315286ED5A3EF478AAFA89F5CB569231DCD2A45BD7221F3
MD5 SHA1 SHA512 TLSH

Submit Download

blocklist

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Ad Blocking\blocklist
Size 105KB
SHA256 9420686d12b2cba6dc69896d607eadac629280a010e5358a4872ab9753f24ed7
MD5 8be6e81804d8b903ae07c11b2e53e3d9
SHA1 817c41cb00b05a8f2040323b93c6416b92dbc01b
SHA512 c2cfff48ebb312975aa2615d841d0badff185589ad3a3f5e8420c2ea0eb5dc0e5354d917cc43d57bec169a63d4fa21d66e91dc3e195592ece23d37fff7c04680
SSDEEP 1536:B/lv4EsQMNeQ9s5VwB34PsiaR+tjvYArQdW+Iuh57P7R:fwUQC5VwBIiElEd2K57P7R
TLSH
T1CDB3B931457E36BF26E93EE828CF1511B84F3912624895D4ABE1FE2C4845E68633CEF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 cd640af4b18734f838b65cd3f2b65e25dc669e7cc487a16f826240b353446af4
MD5 337b94f0014654439210355bd20e82dd
SHA1 26e4c8276331781253e2a807dd554b2ee3ad7e8e
SHA512 087107a51c83ccffad34c7d3f5423a0f231d30a9f78e9ed5db98eb770bada291f65c7b34d1e72284571b846a7acdf88b217ef4da25b7acff47964af1551b2e9b
TLSH
T1B6D012323B197041E71A8130E403C74017AE54B524864606A254C50D6DA90C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

settings.dat

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat
Size 280B
SHA256 85f865adbe5e58c0596a4db9b9daa509b8e2bd087dbcc9a01a5a095a266757bc
MD5 29ddc94c4e214fd03f664130dd36edfe
SHA1 10dfd57508ad6ef16445956dc1ee4d8c2bffc4e3
SHA512 fa7477f3f8068f41dae4965a930de8ad11b234c1ccfcd17a84fb2bfe4c289beebc19be8d058f75ed01b6dbe7304af8270da91d31316fc94360f4fa750ab203bd
TLSH
T13AD012323B597441E71A8130E403C74017AE54B524868706A254C50D6DAA0C592CB682
MD5 SHA1 SHA512 TLSH

Submit Download

LOG.old

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Asset Store\assets.db\LOG.old
Size 352B
SHA256 0dea07dcc1ff645aeeb4f2a72969e46b82f147773bdfa24e8ee860203630c4b6
MD5 63bb751773e466580c66514ef157be55
SHA1 9bbfc31eff41d8eac1a98f99b94db943ea2690ea
SHA512 951b35a47ae57e2fd5b2e20484b2cc35c0bd39a33914bc876ba9da23c4574031f671060f02555c3434692cedd46d2e023c3336a98bd2386c6c3606449e24ff20
TLSH
T1FCE0682C1F82C35443228247802B9A2471A03625FB4CD8C9334664DC1380026CBFACE0
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

f_0000da

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\Cache_Data\f_0000da
Size 838KB
SHA256 62b2d500c04740285f9723071aa3dafc762246ba64205c98a10012748861a14b
MD5 764d9a795824ba7050a3e9921b1fb96a
SHA1 a731a594336341a1dbad4b9c255ba2fa12b4cb75
SHA512 dec2c696153c56e81092a0e07dd0f5d485f091172d98c2ac0acda1720cb65159b8b6ce21ca5d09547744736651aba9443813a23c6369d442922ae943f47e0415
SSDEEP 12288:ogEUiUHkKwTLRKRMDPNKT1zH3ptaR1sDfOQSvJqFZ61Gv0ekHZ8QwGEM:o4iUEKwXMmDu173pG1szLSvJw/v8qQZ
TLSH
T105052300F7D4E417E5E66FBA22B55BEB58E42D4105A9870B2B8613DF3CF1E90DE2E241
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 6KB
SHA256 6f1061d0beb250faa18257d316487aef70c20ad7d724c660fbc9edb8b4f42b1d
MD5 eb672931ce946072da1c6606df08dc26
SHA1 24b2627e3bc77299ec9135e7d442923ec5330d41
SHA512 b6400c0212716895f77a62ad11b9b2483b659afc54efb77bef29724100c683196c00a04ae801e472c568a95ee944ad4f8f1df933c9d4eaf819934db608ad21e5
SSDEEP 96:MP4+tkYzQO5psFpr80isfpz9jmQNs8sbSAv2YvH46bgZLWcA:MV5pjKhzpTm8sWmHFwL0
TLSH
T133D12F3403AB10C2C76991B5FBC90A09B3714EDBFE57BE26C04FE5BEB8437981405886
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index~RFe58b0ec.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe58b0ec.TMP
Size 3KB
SHA256 6e66fe07ce786c6ae0a00b3bc1f560858445e064e730f209d5fb36e2adbda0fe
MD5 2721427e894e2b3a4ea7ad265a79e95b
SHA1 7b2cd2e3160494e12778b4d2e93fde254c9c8069
SHA512 d959e5d72d2ca7a5a313e9af812a1f2b159440a2c2bc932cf65c61985c02842e1b405e4b5768eff22ec540231677067ec4d001b91e8eb6f57c16173d1b64dfff
TLSH
T121812F35028E0091C75DA1B9FFC10300F772A2EBFF97AD76C492997C980375C8A0AC45
MD5 SHA1 SHA512 TLSH

Submit Download

SiteList-Enterprise.json

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\DualEngine\SiteList-Enterprise.json
Size 2B
SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
MD5 99914b932bd37a50b983c5e7c90ae93b
SHA1 bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA512 27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
MD5 SHA1 SHA512

Submit Download

Edge Profile.ico

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico
Size 70KB
SHA256 31a226211c491e1b0832d4cd3cf34d97165e24a7ce4ec655259cd188f3a2bd88
MD5 efe54a870e0f5ff28d7e00036b861065
SHA1 10663a71c9815382ca5a1689dfcebe737c557b1d
SHA512 4d7ed9d3e22a58f0e169c9200e351d3a938c82ab7920567f67bf29d33b28192329ea05657d1077aebaf2c2b5151eb50c84e5ab590733ff824389566d93381c01
SSDEEP 1536:fAlMWz7vLDtDSVlXXwpFlorgLUxF+nubjUDSlBczkF1D/u1:fvuWAUxFDbY+0zkjDG1
TLSH
T1DA639F406A6479E8E814CBF59C69B7D30B95CFDC51A252E831F4FE7AB681494C90CFC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

HubApps

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\HubApps
Size 106KB
SHA256 eb2fd7422436fff93f6be09df3294b26cdb7afd18e6aa94dcdc0f208db78b2ed
MD5 25dca813dd764f2197142ef84bc5ce66
SHA1 8d6aefb01ee9f6d1fb0cfd89326cfe35af53a53d
SHA512 a9c8cd547c874b7b69cbb3a0c8214f43837911e522db768dcd075d23d05acfd7122cf2bcad281ea745025e4fb67cc9061b79f9dc1288ac1a113bd0d961841d43
SSDEEP 1536:IfEEtnH74ohBGZqW3iPPDuVvpBI/SvtZsA62UYPq:BuHSRhPjU1
TLSH
T154B35226D6A54C6B01F16264EC794382F325436F9282A82F3B7C5D5C2FBD93A6502F7C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\Network Persistent State
Size 17KB
SHA256 a2d4803e269a466f7f82b614c6b3e8856c13f2092ea58d7f937b426754f2482c
MD5 ff5615016fd27c82d6b8374e9c99b97f
SHA1 3012b5d52c286ae3685af6fa1743facb29adac37
SHA512 056d5dc40cdb21bc4764c9e52e629e2d64bec149f3e4c20de4395b98e222763ad18259ffe9ac9307d09d108dde68c783294a7f59510cbec9d2ce1a4223d3648a
SSDEEP 384:DfVBX4euJRemXH2vKXyevmBexJa9mthwBgx3YfkkgFFgVDJG/Mvw15d0gAqRaCuS:8+AUyotWHQT9bpi
TLSH
T111826AFF83E4A63DCA5112F57A647D2BCD5D0D340B283C2799D8BE4A63E1432E21265E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 13KB
SHA256 23e5142998ecc2513202abbaa599c07a8d01ade61a19644b9e2615a2b505a465
MD5 2ba888d2980c5318c7fa0a44edab9c5f
SHA1 db3b6bf6397ed09c31b3032849872e00344a0f7d
SHA512 abab7a8bd25b1b7ecb4cfbd5a3ef201236ceca5f042c6a0b9ff555c6a097212ba8e20e61998dd667ba13f130d256808bbbacd420d9ae3bf2a61e0fa10c71ba77
SSDEEP 192:sxZJRnVyM/jK1Ml8Mk2W/fSsoKUCCIdpofDHW6+WNVKS/YzCKxNIgmJ:sxZJzM2W/fSsoFyQHb1/Ky
TLSH
T1DA52D8126E34597BCCCBD219FA46BB93D6F5042292901E44EEFC9A1C01E6BED230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 29a768cfecb09a26683513b139d71eee7c9139733a2664f1e1ea522c08dcdb4c
MD5 c0a0ff735746ed0e8e169e6d9270b344
SHA1 38615311fd37ed1afbc7fd8dacc4a1e20bc248df
SHA512 cb1d3e7b2657107738c922055f01ef6d0ed7a1610a7f55e9c98a140162ee50861dd0dbb0e3af21ae603aa4a20bbea4b6a0b4a0cd63edf80600c614903454cc35
SSDEEP 192:sxZJRnVyM/jK1Ml8UQaj2W/fSsAKbXCIdpyf1HW6+WNwFVIKS/YzlixNIg5zJ:sxZJzqS2W/fSsA27wHbIk/9j
TLSH
T12B62EA626D34597BCCDBD219F5567B93D6F5046292901E44AEFC8A0C01E6BED230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences
Size 14KB
SHA256 990d980349a90d89afb85c6d34963e96c478ff74fb4749e29973d4bd2aff9bec
MD5 096f650b45b17b435452d1db9ea81413
SHA1 6444572959b7da726539797540c2f1b9907b8e41
SHA512 2c01408638195a5225d2eec728aa79a413d87276eba2313892ea202dfcdd0f64956d83b810db7e87956d58e0b56c4bb014d9c262f3192fbaeb3b97922a28cf4f
SSDEEP 192:sxZJRnVyM/jK1Ml8Mj2W/fSsAKbXCIdpof1HW6+WNwFVIKS/YzvexNIg5zJ:sxZJzb2W/fSsA27mHbIk/nj
TLSH
T1AF52D9626E24597BCCDBD209FA467B93D6F5046293901E44EEFC8A1C01E6BED230781F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences
Size 30KB
SHA256 6d8d7e306a40e0d5d05a1c79c9dd31b43faba69d6d5965c2ecd5b9a6ead539a5
MD5 186f5ce0ae4dc7d10f9ceec0d21876f5
SHA1 fdc1b3fab38e330afa0b94ad19f16f854ee48e29
SHA512 4be8a39f21da95536f42f70e22eaeda35f1aa656ddbd25a70f5bb5f6b11a0c79c0ff5e1729d4d22fb449e5bbaa2bf39987f1733c38fb047bc8bb5a657bea0dba
SSDEEP 768:HCW7kf0Wvqina8F1+UoAYDCx9Tuqh0VfUC9xbog/OVX5LlWYSjsroIt0IYzQ:HCW7kf0Wvqinau1jaa5LA3j31zQ
TLSH
T11EE20B3B684CCB7E4F840E5CEC266F966ED801CB66988D5487FA884C03CB6EB51175DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sync_diagnostic.log

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Sync Data\Logs\sync_diagnostic.log
Size 4KB
SHA256 743321bd9fb0a7354d95c42058d00b404cf72f2be1abcb3a4139244751e7e9ff
MD5 b9efb5a3194af7859027bf1e794c712e
SHA1 81fdec866e7a95f1a0c48d92acbb2413070c5d42
SHA512 cf93436a791515a7260af1faa2d3bf714c5284aef544cce61c79267b7efc0bbc5df37282fa6ec678a2499b83afadd1208b9a2de8b24308da554ebe5e8f46d3d1
SSDEEP 96:KIbCKcba0K/qmOVGKmc2mTm8mZmNmbmRmRmtWmFmKmAgm1mtK4mMgmc:sELBtS3eyEkUN8piiK3gp
TLSH
T139915212743F4622387D2809A67685264E8272933568A4FF3BB900A21F77F524DFEDDD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

001e0882-156c-4726-8fd1-a6c5f083aaec.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Edge Cloud Config\001e0882-156c-4726-8fd1-a6c5f083aaec.tmp
Size 22KB
SHA256 d988156066b7fd22de278fbc96759d2caea6552094ffeb2ddd9307806059c5e4
MD5 f768bcb451a187c18099961c484eef8b
SHA1 99472c2d1918ea56c632734bc5c8a89ae6d2551c
SHA512 a4d78de6bcc1e940c466c41c31ee100235b32fef4cb3e7815a9c62dfae1eb3e4588d2c9e8597152ad7754527643c59ea8b811277ac58e4134a3dbf1507fe97bf
SSDEEP 384:90JOk/FY7A42lagbkDtCkQ7wDThH/64+hkmbA6BQpGMgSVlkFIum1z4tfLTvq/ue:WJOk/FY7/2lagbCtCkQ7wDlH/h+umbAJ
TLSH
T131A2B81DC81C7E3257CA2F7D6A2F9DB276DA30CA7080459A7E8CC54DD31B0AD56862BC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 ed26c6283147905b05be5398ebeb4a1671ca2eff10b6a5758503e8f0441a4f88
MD5 eaec7ad9f776afb042f626555d7bee0d
SHA1 88a9352457f13ae3137bb138fb710a960cbf5666
SHA512 26974edb0481bb2964876d18aa4479ce17cc226252485c08fcb71010ca327450fd556cffafbf37cc6cf1fa6afe994f91c6fb00f0e9b8013573a082d152354fed
SSDEEP 384:eatNn/s3n9SfsNnp+bD8p23dMjCEJrNyOObjI9G6w7z4Y:Lj+9UJEpk6hNy29Mj
TLSH
T1E5928E32AC355D778C929165F04B3A4B5FF4417797C52F84A6ECAF0C06EB7AC4316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 8d4b38d49c06aaff05084b2170724f3d6feb4f4db7bc29590a63f95bfc577dcd
MD5 026e825f839c688c10fc0b1e89ba3595
SHA1 81af8a027e09840fbddf6f3874578f35d86d92e4
SHA512 ff16e4e5cc943b687c273ef030fea158724844aed53f1b64e4140335edb4e533deeb63f437350f5dcfe1601b96f1d2390b4640cd829855f2e37b83ed447de487
SSDEEP 192:MONt64BAQmiUyU1tW5GBPKnn+FdGN9Q1aDzT8U6:MONt6eAP7WMdMRX8U6
TLSH
T175020935AC796C7B9EB2AE45F48637176FD8103BE6D46B54E6E82B0C01E764C2343827
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 27KB
SHA256 d5150f02300eaf5e7c5862faee3be6dc854dfd091dcf1d72c8ca41abd4bd50cb
MD5 9f7feb02eea364cf9062d37820c8dd6b
SHA1 9c99b427205e084c110d2d82baf4798fc9004018
SHA512 da98733b15bfd24db9c0b10484e0b5272051c6b996c8c77e35893802177f7e8a2fff08019c7a65d28fb0fb657ba54d2ecf4e7ae6575906e69d6768a19e95b99f
SSDEEP 384:VJiFqtNn/s3n9SQYsN58TUNTUlIlA+bW7p23dMjCEJrCyOObjI9G6w7z4Y:SFqj+9U8wgVkpk6hCy29Mj
TLSH
T1A2C228F258D7893AD96E5753B37E2D468EFCC167B6812A40B3D85A0CCD962BFC206811
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 19KB
SHA256 9d5df255a0e08080118965a702dde64e918ffd7b0926c410e350073a79c89a30
MD5 dc43bb9b57d2d87492316f366b0b2e9c
SHA1 269a096bd711c5be6d3c6f7de61b0f27b192a98f
SHA512 507bdd233087b0e4e4318f35393176c3982b09d85ff0a832e628b03934989df55c0f73cced585728e33e13ab723cde1514ae05431198510c320d4207f4e1626d
SSDEEP 384:9/tNn/s3n9SssNnA+bW8p23dMjCEJrNyOObjI9G6w7z4Y:1j+9f0Hpk6hNy29Mj
TLSH
T171929E326C355D378C92A195F04B3A4B9FF4417B97C52F84A6ECAF0C06DB7AC5316816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State
Size 8KB
SHA256 fb0ca2a9ac260bf39f0de481421a1210aa585f0590d507f277927d66c8c88c85
MD5 0983b6db69c364ceceb41e36c62cf01e
SHA1 6f9f2e89ce11d53d67f99a8ea39c395fea181d3e
SHA512 0a7cc92a594730519df83dcd92e883adcb335e3bd232acb1bf7d2becb3bb3b8e6cfb16fd83f93b4ce0dfadb4c18a8707d9d5e6d54315e41bb61e1c553eb2aafd
SSDEEP 192:4ONq64BHQmiUynto5GBPKnn+FdGN9Q8XFC1SJrOWwEqwU6:4ONq6ep0oMdMjCEJrMyU6
TLSH
T1BD121932AC75AC3B5DA2B591F48736435EE44137EBC96B90F6EC6B1C01EB65C2306816
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 134f215e8e5939384732943e87f58c0471ef5085b1b119b01e7229928955b2be
MD5 e8f83072c931c88dcbcc3d2556601f2c
SHA1 3113d16f308577501255c9c88bef191513aeedea
SHA512 74fcbd98778ae8baed624f4223aa4ab602332c9116eb3ae719f6d55e3312878d616201bd2d6bd2a9a1270dd4ab6823ed5ec81ea309c3e5b1a99376417b8ddd56
TLSH
T1C0E00241D100409EC134433000831F3029E14011127701144625026C2C7330027117C0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter
Size 392B
SHA256 f9e33a06e855e1133966171e86cd1db8fb4d82e1580e3b556f3c982758ad8f17
MD5 4f52c109ce77697a166b182aab7130c2
SHA1 e28db6343d1d0b5b9d4d33eab84297a31051c904
SHA512 e72490860441eaff1c93a47966ac440666585d50826ab936eb82f91a277a021df3fdf8a2bd83d1f7a7d0f5b9c61eb1095d893345a4558071057a7f2b066afa40
TLSH
T1D4E00243D30051AFC138433000831F302BF2803113A702164A36027C2C723002F21AC0
MD5 SHA1 SHA512 TLSH

Submit Download

RevisitationBloomfilter~RFe5850cb.TMP

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\RevisitationBloomfilter~RFe5850cb.TMP
Size 392B
SHA256 cea61607c3f5433f0aacb75cd9c7e13fc76a6561b50a206f6fef2c724909fd2b
MD5 fabba0739bdb0f90c22d04bbe689ca20
SHA1 ad9f7b8f4b8a731a12afdf5059897d62519fd8d7
SHA512 38f39f90ab06f1607c4b73c95d92202bd55cd4974b5fa74050658ec5eeeac6d3171cd45e2d7effd478ab25b5a11ae6b52394511f02566c465639f2c242e5704c
MD5 SHA1 SHA512

Submit Download

373a81ad-52c6-450e-8ef0-9a6d846622a2.tmp

Path C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\extensions_crx_cache\373a81ad-52c6-450e-8ef0-9a6d846622a2.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres

Path C:\Users\Admin\AppData\Local\Microsoft\TokenBroker\Cache\5a2a7058cf8d1e56c20e6b19a7c48eb2386d141b.tbres
Size 2KB
SHA256 04e14a2b56ee7f4e7c9bffe9217f34533072084d7519ffbc8d3fa71b30374f69
MD5 aae2c395d973e5c7fd5a0a830c6305c2
SHA1 30a4332ecbb6dcfd47e6783b223270c9049530cb
SHA512 6635d09ed95136f61746ba5c3d87ce06295fec10b57950a5731cbfe75fbc9eeb519f9e04d5dda6bcffe394599d22299d7d06f3d66f7885721e7bae3c23b6dd52
TLSH
T17841E769B6E91148B3776F16ABF6A8AD487FB9372F46D45E00050E4F0A26B40C971733
MD5 SHA1 SHA512 TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 16KB
SHA256 0b2e0ec356bc5062e80ad5b6c0606dd69d87c12111df3867a4fe795521fdc838
MD5 8b64d28654f432d1b841d2a9db641618
SHA1 6806ed1e2591b62607858af52be837d48c6289ee
SHA512 8ae4aec80a37e979f3685c5d46936a3e8cbf1a2e66115f4d077e88ea188677213b16418a4c9f7cbdc7f626e2853e0ec75340ac8a8f3d9b947a6c97e5ca9561ad
SSDEEP 384:Ssf+Fe9i+S/z10idJk+o9o2TVK6seY28E/uv3KoNhH/hEKcj2m:Pf6/ZDMjo2TVNPbUK45EKC
TLSH
T11072A4AE610F26C3C4961378D10B095FE4F29ECD531A07D9BB1A9F3B4EACA5E543C198
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 16KB
SHA256 7d597f2adc5ce466b4495f62c54a473ba0e35cbc0ed8f332a545e299739bec5b
MD5 e133143b1e849e10f23b76bd6a29541c
SHA1 e98fb3363f759454b4b2523ebc8de049d37028ea
SHA512 c4ec6ff68065122cf387ccf6287edcd2b66b38ab8a6f5125bb549f06873921227b06d347d7898258c9f9f13f1d20145e5209aa9034a73c02899394ccf976cc4b
SSDEEP 384:8sf++n910WSzlQYZa4k+o9odABNY1QwkoFf9aamezQdEdlKnS:5fH0WSbCjodABNfwtFf99UdEdX
TLSH
T15972F7AE221F229BC1E123F8D42747EFDAB14DCF430807DD6659993F09C976984A90F8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Programs\sklauncher\chrome_100_percent.pak
Size 113KB
SHA256 34433fa04ddf5eb78b3b4e9c64a3af626e28641907ad7a6086614eb6a8f00a07
MD5 a8d9be85b9a9c2a1be1815b29cfde9ce
SHA1 9b8df5aebf541d063311ad4c2be1d23398f13a33
SHA512 37ad60e74c7e439f83b87ce61018619568914ee491289e3fb34234a0c4e3258c4986cd56e6e58652134058ab1f824a90499d4aed46e611937ec946d9a3b680ec
SSDEEP 3072:fnk4PisCv+/P9NebGz8LI1TwILjQBHe7YAP18RVC2I:fnZYWFUbGz8LI1TdjQBQCrC
TLSH
T1F8B3E0D773B0AD7DD6870BB783660070FCB31B2D06C2160A4A99E479652AF88D8D93D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_zpg3sqdn.kti.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_zpg3sqdn.kti.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSE.electron.txt

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\LICENSE.electron.txt
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\LICENSES.chromium.html
Size 18.6MB
SHA256 62e3b53be6bbbb2e7747b7a55c8b4f4a3cf38b95e0fff594737b3bfdac8cf373
MD5 0f6417e60719dfacf3524b61cca87e8d
SHA1 f2f4fa439dc120908a53965d8f292b00e51f7647
SHA512 1eff62954cf80b2ffaa1d676a9ee61c8da9488a327b458268f6efe94dfef5f6030ab11e9ad2df305de5a8bb05c4e2beb21e027a0a0c9ba3fc94a15ca9f85e5ed
SSDEEP 49152:nRWnjZ1pNUAwuTYp2bKvC6I3r8xsJQf8xFTDeQdt+lHx37DoB:i
TLSH
T1D617B56BBB49037316F242626B47A5CAF31EA13F375A1654309CC11C2B7B92483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\chrome_200_percent.pak
Size 183KB
SHA256 581c8d53199c10512d31a340699f9ad269f8eea5fe6bc49e05c1bde98ee612aa
MD5 e0d4001307e8e8554810b27796ad636f
SHA1 be92e88b55ae85cc5118009af0fe32c9470c0dca
SHA512 762324239832fa1a531cc3da546df8627610a164c13d83f12b64c28e207273989fa7da0c4e96787ab0a5d09f5202ebc31895f09ad2fdbea4e6e70c0d2b4f51d1
SSDEEP 3072:jgJ8LahaY7d6iN6uSwxohPQDQYaEjrvy/IwXJPpLjQBHe7YAP10uxR/TbIM0:jxGQ+N6uSZQDQYakvyAk9jQBQNd4
TLSH
T1C704F2D723B8AE3DD9570B73926610E0FE7A20291EB3110E469F98397925F8CD9C9343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\d3dcompiler_47.dll
Size 4.5MB
SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
MD5 6ac6cc720fb6bbe5c0ed4e84ad2b3337
SHA1 8556531bd06691ce0f8b7d83814c867a420526a4
SHA512 216084dc2a84ca818d68d603968acc978c0b60bdbe0a3152cbfc400ec11a2b96e81d1698a15dbb7738974f4365a8feb109f2bca5b641b42acedeaeff1e2a342c
SSDEEP 49152:JSHvWaWTktEzfRriMsCL98dhdVhpHGC6GNCxJYrv9y5Eze+V7ZpdKMZzaWoUyxqJ:suktcrfNlTyj5byqSC
TLSH
T1FE268D5767E840E9C5BBD138D687831BEBB1B80413345BDF01508669AF73BE26A3E724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxcompiler.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\dxcompiler.dll
Size 24.5MB
SHA256 d0bfe18b1fe15a2eb40f8955f3d1a7d54040e8c321158207803668e892727c2d
MD5 cba1da732623a65bb9d793ea915e2cd6
SHA1 0c789c1e4d15d25e15a7601104e3ce2c268d3aa8
SHA512 15b296979abe3db765bab147ee85dabd2f2932454fb264251056d82f78d23c9f5893695a54ab3c59fe91d80e9b6dc5d535106815b09229392c4ca7d8e264cc77
SSDEEP 393216:n9tCn2P9zxhOMXtVz5icpXH5uVUi+ziu:yGzPdrIVCD
TLSH
T147473A122646D49CC059C879C7678B26CA6C30E73FA7B8EBC0F451252B79EBC5B39235
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\dxil.dll
Size 1.4MB
SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
MD5 f8f3501026df30556c34a9af9cb7af9c
SHA1 961d9012b6d79e2e3c28b310a80ba3ab36e2c559
SHA512 3631f8a3d48e8eea25091b93147d88f0e8a7539f2f242fe287d37f82fc4344528901e4cc48c93ebcf8691d2e11227a9b50f2b5ad45f2475c0119ad8b2d3661fd
SSDEEP 24576:zY+wATtbKYxy0y3ny6eBjNSGlVZyi27+V0IJNSD11J7R+j+v1acLUkJvS5Kao:8iTMYxy0Sy66Zh7Sh/cyvS5W
TLSH
T154657E1B229801B6D4BBD17CDA47CE0BE6B2B41503B09BCF12B406692F5BBF55A3E351
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\ffmpeg.dll
Size 3.0MB
SHA256 33559a766ca7b5f0768145eeefa53b6fe2eb0d651629bdefd4786b4569a9aa84
MD5 814a6c018d0c0a13a98318cdf3af8120
SHA1 39c427dab39ca8ae6166bd128f2ff1a873050367
SHA512 824657c7fb8dec60d51008f99d137d44bc779a57fbd9608a190700de2249c27edbc872ffafc9b5828cf268f36bf35b339eb911e4d28e94a865d0e52955fd4e07
SSDEEP 49152:GlyMFEi+bSxsTUs3mFNYisl199a6LKIbB7k6TNDNoJHaKyEC8bWP:GlyJGsQsU+is9dNoJAe
TLSH
T1C6E5AE02F6D651ECD019C074979B9313F631340A4F209AEB16909A263F6BFD87E7E768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\icudtl.dat
Size 10.3MB
SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
MD5 5bfd3eefca4b5ef2d1a869396390a7de
SHA1 c58567f7fe308ccd43f406b70aa8bf6fdbea4f3a
SHA512 4489a55fa0b47c8d1e9679032e036c7998f82efb4191b98900ae40cfc30a26b65290867527161c594c42fe7999b2314f8928a5d717d65d4eeedd4fdb0ed0f427
SSDEEP 196608:A6akBhOR8LE/dUHiXUxa/iJ53IWhls2E91Z0G:AqwKLBHiXUxa/iJ53IWhls2E6G
TLSH
T118B63903A2EB4EC6F9FB5F7498F562779527BD49AE32804A51043F3B1C333908664B66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\libEGL.dll
Size 510KB
SHA256 ea6abea4b5520ee55d5bc7b2743855397f7d58906ec2d95bce0cd5cc41fd7eaf
MD5 f973bddfcb124740d41f5fba3cec57c5
SHA1 420cf01af9714eaa1d10859a470c757fcd2896f6
SHA512 21eedea93c2d6bf99ef2268b901aab4998de5f58dbea87f688028bfaada267ebd06456c6cc2cffb520693d8af623198e26216e86f09e7c6994d0c9559bcb852a
SSDEEP 6144:8eQszxnw5uBqWh//UlBowkZDYJ6RSQmWYmkHGVGWFcsfAVMugP4efaguL1iMg:6G/V/iZJOmW6GVGWFcsfAOugP4e410
TLSH
T15CB47D15F3E84BA9D07AD1348A438646DB7174921F65F9EF02E052392F3BBF45A3A324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\libGLESv2.dll
Size 7.6MB
SHA256 276f69a4b413c7f78658591a8b1abeda9d19a5ecd7df9388fb3ff1181a5d5cf5
MD5 fed2880db916552030d60bfc223e15ab
SHA1 d14c579de329c078e2babab0cc460c5a59f2316d
SHA512 de88f4bcc44e067abedd5b03f760748c141d7b68cdc9f1f0b2c3c66bb0d1ccc38ad40c4b8c3a0ec4616a9716dd571726c9fe523ed5cf9219827e25cf00533493
SSDEEP 98304:CMl+TBKGaCkRN0tdArcDSsdKwtxxKnhxE8:Bl4cCkrJ
TLSH
T196868C03F69641D9C05DE2749B67A223FA34B8550724B7CF2A9443162F6AFE0EB3E714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\af.pak
Size 596KB
SHA256 7bf59977f051c1ccb19cb8c48a8efd57922d088ad26cd51a85a671000c845a4e
MD5 0a95fc23b7a7e74189088ad0a8590875
SHA1 118c82d27a1d13776e37ef229e11cad30d7bb0f2
SHA512 7264d75250c98bd9b9086422c87800484d3658fef8cde3677a16d3d8c9398a85cf042b96da03881ff00500c17d7d84cab15426fc464443ab99468e3074ae6cba
SSDEEP 12288:VfaIq9BmRPxgtRGt+2d5nPw3NtEKQNZ3GOZKv4H2JynPN+DgWALlzNozvnLImgU+:JFq9YRPutRGt+2d9Pw3NtEKQNZ3TKv4B
TLSH
T140D41B0AE781173D09B07696FB0845B7FB9CA26CC770B2BADDA982310566DFC11BD1D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\am.pak
Size 966KB
SHA256 a387f4af550667980c7631532b5c8f50a20ecf2c2f45392a7e0bf23f8f6c91fc
MD5 f2f6eac3736bc92f92d00aeb8da1b847
SHA1 3579b89479ceb7c297ba15c044471eb700a2299b
SHA512 9c6ccdec8a5412b2c65804464a1c7532bd9c76f0cf3aec8ff45558e395431abd1ace149ca4e99830dd07431c322a8f68e768c3407e885cfde5ce3404404d790d
SSDEEP 24576:T6BeLyUTG1g9thTCKfyYtxPTtfjnX7TBzv8XqSBhiyPVABZpPQx:T+PH
TLSH
T18425AB547DF9F7570F8E8A1994320E4EA594AD4692803C38C35AE3FC2B2DF1B4DDA219
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\ar.pak
Size 1.0MB
SHA256 e8f4b9b64235893bbee95c8360c739e5ba09687072dd4b7d706cee9ae4032887
MD5 0c66aa7d25c9602b75dd709b87613b95
SHA1 bbd6b7c484118f4b601229b17000f71e1b3a00df
SHA512 60734fbac06ec1f74fd1f72d544a8051f86473593a980a6cdd4924190e1856965127c0ca184d766175457541395eb641a69af6cc1205acdbaeda159296651e25
SSDEEP 12288:1nZ3HDZGmBv9p7NNHHGCPXwjdb7Ae3v4UCKvkb3GSM8NjuE/YhG3q:zHDoxEA
TLSH
T17E358BE21B2984720B56DF0FD1E23668E872BD23DB4BFC3124934A2156D7513E78E678
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\bg.pak
Size 1.1MB
SHA256 da36ef0cde92b2021ff39b6c3341f4d2832c1129d13248aa371573812140db9a
MD5 06a20adf56e618ee61a6abccd937126b
SHA1 7c15932c946ac82d5e3633d46cd9330c7038dabb
SHA512 ac5241c9120652eea1ebc516fd330d15a0a77cc3fba5c62db2b59847fbbaa66022f04c83815f6e79da78c706e8eec7e3458e838587ef07b56ec06c899c693e65
SSDEEP 24576:fMrkmpWmldLYFg9zQkEC1UcVb6IM2Ql373ZJm8S3G2KjUfVDDMwh74u2VnJNIdky:fSpWmldLYFp8UcVb6IM2Ql373ZJm/3G8
TLSH
T1843535A15B9A68DF0101F45F98087E093CEB84FE3FE7879241652DBD39E10B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\bn.pak
Size 1.4MB
SHA256 4f246bc78ddfc2cc249ae99990470e2d470a13a2d7599ab8787400c4fd179cdc
MD5 6c5580282c738d26326f8848944534e1
SHA1 25a6bb7327c14a2d8fac979f44874b40aa39694d
SHA512 8e40eb5833cb1a9538e0f7037ddbb6988c97285fb6253fee59bc0d75ed4db3387396dfd822e5f7910aadbef5132939ae9463c50239aa0e4f436b25c504f35755
SSDEEP 3072:37qCtC6WuIjUrGHbC1AHPDqnSIHReYw24Oc9pjgEf/8UR+q9N1IfyjWBbNdQZ3k+:3H1p4bCpSFYXq9N2fyjWBbjwn
TLSH
T19965EF209C6E81B6A8C5CDC9434C6370C523AE9B9B65F74DDC17A14938ADC3C8CADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\ca.pak
Size 671KB
SHA256 b232cebcb102bf03c81286f1ec082e80d0e399d09d9251c3e574ef24fb15b68b
MD5 84661624b4c3be881266e6626298f40e
SHA1 25a98d2c399923cc4b7835520e5c37d4ba51b2e1
SHA512 d10e9a98d19cb35ee67993d9d902626c58cee12018a36e87a491fdd492d13c30302f5a2ae20c9609441084180bc7ad7acbf250e28a2e557a869d2b4d10767191
SSDEEP 12288:drkuMWeY7hj3lCiGOwpQa825PsF4N3Mw2juwwPR9zejm0t3l7C7T2nLfUowTLX/8:yuMo6NvLvE9p+MNe3GjUyUK
TLSH
T11FE4F8239FC93B7704D2330AFB46C253A48CA9847B16D254F4AE1B1622CCADCD677AD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\cs.pak
Size 697KB
SHA256 58b2d7c81430bec91ff72560acd604df82ff0090e2c4e3d1ce8cac2b69bc40e9
MD5 10bb2587458fbc7299c2fbad2f0f3f65
SHA1 0f7844d1b3179290163c9ed84d488b357b4fe99a
SHA512 000b61f7663069d32304dd607349353b9ade3132903ec0db5cddc75902e9303ed6028fb3e8d8c2d55f081ddfb4dfd7fae4fa0332735df3edf5fcc82d264bfdcc
SSDEEP 6144:ViB+aSVbVEdtuHrvl5An2R7gAQnTzWY5Z8OOwJSBxd8Qq:Vk8bV/Hjl5A2B4zWY5Z8OxJSy
TLSH
T1DDE4391EEEA36425484002487BBE4128BD5EC3140B6EE9AB7C8F9C912575B7E8FF4D58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\da.pak
Size 626KB
SHA256 66de87f60ce23d82457271b34da1baed85bf0f3f63b04d90610a20c4ebe66c23
MD5 d9ea0e47d70b2ce1867f98e3678641d6
SHA1 26549b17ef25707b3aa007f37093b7762e1a8ee3
SHA512 25ce5dbfcf70dd42a398878f095bfe7363e055d6eaf801423eacf48375ca7de828ea8fffc3abf7221f3b77fca0645b14e40cea93b756070dbb937d14725efe1e
SSDEEP 6144:Kls69lUrKDzVIcyQD5wnMXgRi/cCJsE/em5LzwlAMDJwxlOEbPaQSaKBDsjofs3i:d69naCP5ZOA+DwcsTG
TLSH
T169D4494BDC9CB32FD9A94725F3118DA7DB6D543CC684664F64D8943A09CBCA092FE2C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\de.pak
Size 672KB
SHA256 dadd0439167371607d9a82222f248f268d9e27669c1d87ca09d8751c07a90d01
MD5 87d19b826ef22dbf769105c9bd0d4e80
SHA1 e0593b7430aed5a14ad9d7dc1ca33150ad51676b
SHA512 b90d40bcd8e88de8c827ccf3ed41f5d2cc8ec2807f67974b80c3dac421637b1cc50368aacc07ae13472a0a3667b1261c18691ab6b9e9d541d8b0936bd043f047
SSDEEP 12288:xPSib0Mg3K7UpIgRaf3IJ9hgn4cUR+5Cgv:7b0Mg3K7UpIgRaPM9STCgv
TLSH
T1B0E40803ADDB625EC686B3617705CDB77B19E36FC346312B84EDD02B654B5B283AC422
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\el.pak
Size 1.2MB
SHA256 9a9db32904381a6eda169f56099313a494dae63f2795678449c4ad87cd3a69fb
MD5 ef455541e4d9053f54adf3e681a717fa
SHA1 bf295e6aa17fc75e8129c5b44ad84072369694f7
SHA512 5df3df197e5fdce91f2733a1a7b5ce34cc3831f24ee850bc3f991595629472f7e76d9b32620521dcf4a0b0d614ca359f20825c4703217857bb5e7945198cc7be
SSDEEP 24576:5n5RAHWFbrl05Yp9Ck2tCZu/xJXDsSeEEmKo+Jm7QJ2oSCgd0kBHciyjUHvQdQVS:5n7AHWFbrl05Yp9Ck2tCZu/xJXDsSeEA
TLSH
T1B445CFEFB4582DED8046950785D8B07C2BC66D6CE749CBD86229CB60BDFC0719A22D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\en-GB.pak
Size 543KB
SHA256 7bbcf19623b0a34524d75a3211d305d6b01150b3ecf2bff3b140189a13c29eb4
MD5 dc27da1c7a8e6128f10f767a93d9f59e
SHA1 8c674b0e92784635fe1df1f9f567565da8c5f3d7
SHA512 cd67c53203e7f0ea10182310f9a4ad76de7e9c1ba3e3fc8c5f6314a475912e0ccc827c39ae946d158d2ef92ee92287dddf9953e29e8bab51f0596dbc9b066dbb
SSDEEP 6144:QH/CgP2QAaWOgHShxh+EpiFOFJeQMP9qQTpofaYH5WjoT0DdBckRPZ:Qf1DgShxhDzMgQTpMuDh
TLSH
T101C43C1FF744126A059312A2BB0AA562FF23D07CB35112667CBD811C33B6B6683777E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\en-US.pak
Size 549KB
SHA256 446a0f711467b162cced38128932f712e4a53fe344a165110196c366fd3d87ea
MD5 0555742b1e5f91449a199b9c42c1eb3e
SHA1 2f7ecfa75faca014c06e435fc6d449072d47ac41
SHA512 6d5f20741c97933d7c2d7011b696632e056db182941483e6c5675ecaf2b18132abbc0397b2c703e79a878838db806766aab69b2c90f6fd1dce377623d5501af6
SSDEEP 6144:LOvSsWLA2zb+H4HfYOMg/jScMP9sQqblfaYQhp1B1OjRng98//Bwf:MAxJHfdZM6Qqbg0jBwf
TLSH
T1C7C44D1FF744112A05A352A2BF0995A2FF32D06CA35112563CBD812C33B6B6693B77F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\es-419.pak
Size 662KB
SHA256 337a0ef8be48fcf7d120026d8dd9970737604ad177df1709fefa5cca79c70079
MD5 8cdd77bd74d129d8de17a80a7f55ace6
SHA1 a5dd1efa4b17c5bb020463f90ff13032d0564115
SHA512 361834022eca29ef51dc324c71a265c5021e58c18191d9e3e3956a8a5d2d758d1ec7789129d329972f4af57c20f47017e6bbf5fa0c217836ca50d3cde50ed883
SSDEEP 6144:nsTn4Nem+KiHkr6YvFQGo5cQ3uJwH5AoljsBFK:sDUeFWYiIuJwAlzK
TLSH
T1DEE40922BAC81F5310E3A348B743D757E8D89145B408D29BE8EB976522CCF8CD967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\es.pak
Size 659KB
SHA256 b32a3073e0e749b8b1f0f3e082343a8ca192cf3b7244847387526a5cd8beef7f
MD5 b4e50b9a3db4f42081565b1d80c47092
SHA1 e92d363f1cfa6215694fc66e406db3bfa2bececd
SHA512 c910c8d306d133248d75a9f31888257bae0671c53fa24e4ab7443ce1f6dae3e150f20c65efc4cfdb0eb1db2cf66b504858d3cdf973a636a4aa6c5963d5681647
SSDEEP 6144:bQ10KCd6qHnzvnx18hWbqgWsM+JcbNE/m18jFNLOJzMv+24/ZV6PZC9/:cTCBv6WbQ5NE+18jLCJwvZwZBN
TLSH
T1FFE4F726AACC0F6310E39349B743D753E8D89545B508D25BE8EB876622CCF8CC967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\et.pak
Size 602KB
SHA256 740a4632aa00dbc07251c10cdef1480739069a6456fa9a642eef387fba935e09
MD5 34d0355cf1eb4d0f6a1945bbdd8854bd
SHA1 f3060777a364e2c3eaeb3792eaece19cfd57adf7
SHA512 f90ada80ab082f442239cbcd345bdbdc127f052986e12b1333bf2c1fd2731d37aaf6de494e9f0494cbe23f2a36e5a44363d74de2816d6eb9f89d7ffc5a02ffa9
SSDEEP 6144:GyBhI2yibCX9I3rOf91D5+OjFnyL0GnFacklk1s9bemPOTQysNg0davqloIC0Lqa:GyFuX9I3rO/RjF0nFac05NeqlDCwqEr
TLSH
T1A5D44D42A27D771B242412F9E737E923DC9EE3D4B4000D9668974A1971EEFCC38B6B64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\fa.pak
Size 996KB
SHA256 7d13dfa4bc6ea7ae996f0696eb328de26b35e1ec7e606fb0c4f8192d4bfcbaec
MD5 531764f5de01173765ba9493faa616a0
SHA1 955fcd775d11b6031b5a61e65320f125cdfaf315
SHA512 291e87cd702bf8b0e8e47a1eccfa1cd0db69a1d0c679ce984cf0014df4651e8c9a41a52c5cd86bebfcc7e79e89e23f72994ef3cf6a30b51b8d35944c65efa018
SSDEEP 24576:/87m8u313uyqoz+so2+RmXnloTUoXtCfGk62Yhk826Bike8MX41OElUKgkI02mH9:6
TLSH
T1BE25B1957AAC9AB15747CA0341E33834C773AF12D349FE40ACA1076609A5B139F5FA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\fi.pak
Size 612KB
SHA256 53cca3552a8bf4ccc516103cdf929b5f10ba1859ccebe644bb080082faff6878
MD5 8edc200d5b49279006932291ee921228
SHA1 cec52d84cdf97d19afa566488219aa3aeda0c361
SHA512 4f6b2269d0a7b921518d851755ca048a0d77338571e265b369e4a13d5f25cd7a1f93ba24d351c1cc9e2271436976b96d2cca56ee93a9a1ddf7358596d09f8fd8
SSDEEP 6144:Vcf9MSQWOU3RN19cb8S7FYmS0rZpAgL0WsTCaeOEmHHuaQQLMcpVH7IEprWa5L76:8ZN3319ivhZRagcpVbIEprWaJQ+G
TLSH
T192D45D915215C22237C8D29E79B0903EF5E5E3DC8C284D96E843C7D849EE9C87DB276E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\fil.pak
Size 695KB
SHA256 3503fbfa400b23a3019005a2f1d7a31d623b056889a66abcaeb1558ad4316924
MD5 a66e55153f63571bf1544a6ac6d28a9a
SHA1 82d250b56122d39ca073393a04b282fcffb2a4b9
SHA512 0f52dee2635ad29a975e1fc211215c7846c3e4bbf20a08b28628c6c7837b5dc8af7bed5a645bb5e60735441b2eddea9d1fab77fd2b275c846edbe39c88b46616
SSDEEP 6144:H06UlTXBaE7/y+DQGCOgwlP6t1ihDVzrCcVNvt/LaoVUA1KUO:DUlTjHvU
TLSH
T1DBE4C616B7401748DBC352E52260682F6AE560B83F81786E0FFF269B7BE7CD5D270192
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\fr.pak
Size 716KB
SHA256 a8db41476a1103bc5bfb617b150c6b6e2ca1eb24f534872c9c15e353649cd0bc
MD5 8aa09f7b489b39f0a68ab0cf63dfa023
SHA1 3998a3f55fb40c835eb5f77813dbb43ab4aaea36
SHA512 ac69e432135100d2d07fc91215b62a7af7add36a3bb8e0c90e84fd312227fe8886751e6d8c08135c1cb0e80ef9f7bafea387af69f9626a98b86f96f30e58b811
SSDEEP 12288:k9tQ9uKVTZLlIb94S3bvZwi3x6QuargVam8VBezB7YKxQkZuYnYc8jw2wyxFD1Xl:k9Wov9IV+T7yu
TLSH
T1FEF4E55FBAC435CB19C60277FB12D6A3DD348248F215E340D89F4296129A8ECD39F6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\gu.pak
Size 1.4MB
SHA256 947324c6aada6255df0c702114796436215f8012634a58b065b7ff3fc92162bd
MD5 f6332dd74128db0d2580ea5aae66a011
SHA1 74352949214e664692a3fe1d906336c268587108
SHA512 cb8fbdc660fda5400b71415eee95ce6c46ea51b60f683cede2bab606fa4f27ddf08b696e2565e9c83ebd080fc524ab73a516ed3ee9e02618bc0fe7442873e311
SSDEEP 3072:uCJIIeylcq4n4KEA0s21/QahNCLT0PPjAwREJKVMjNiT7llj63rAulfcSi5NnWsW:uCJFwnB21bS0CnsGEYsXCl1DsXw
TLSH
T1CC6507D0D3B9F07119DA9F7E819E512086695343D67E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\he.pak
Size 871KB
SHA256 d06fb5dc66cc104503a861d2e4e6ef53e9172549c862aadeddcc2b5bb856f25c
MD5 a96ff98519b7b058bbbebddb3c8b9a47
SHA1 cd0b91902bf7c3da9655469050c4e9f1b61a6e0a
SHA512 82cbb1e1b90ba53038886fb96a62ebc1ebe7a48985c5e1a27f1cdfbe4979f0e806f23b9a6f9534038163bcf6f8f12f36756925eedcba29ff71daca733c5ae4dd
SSDEEP 12288:utWHv9FhJoliptjTmEM3r1y0DBAl1Wq+/8Xx4uNYA6XXTieQCaj2iv36ueAs5AOK:utQ6I
TLSH
T1481599C4B2E552255131AAC39FA4FA286FF3CAB53CA27512CB14526CAC774F0BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\hi.pak
Size 1.5MB
SHA256 a775f5724ccbe9bdfeefc448b42e3b48402f81404d94dea4252bfb765a314b96
MD5 e7485b02d720f389e8c6d2f7367b758e
SHA1 8e87a60ca6fd6ac4c54050687260c33f778fe04a
SHA512 6241ba883926f9029b6eea6e520645fb274b8b40de9f7801ef8b65002e04fa8251b8f891772d016ab1804c45f81a32e189c746f33e155a0afbc2ea8368d44250
SSDEEP 3072:5ujmZ+6BzV/+Efm/Y8e81ueYTbnV/B90ZV1d3uGlqvLWYJEdtDVesn1s4f4/BtRM:sc+w2wsec3ObPOT2LeddeO
TLSH
T1BF65050CEBBEF3B55DEC3C8A32890D37D59D3674A3E5521348D5B3DB9844CB8146A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\hr.pak
Size 671KB
SHA256 84c6bd6ce5bcd81a89b0908f22576725128e27688f6578d13d8b2f0e7fa6335f
MD5 04b05ab84079cb5b1dd625aba3a1dbd6
SHA1 87d7e615b3e7d7f19dd6f044daf3d26af352365b
SHA512 5016459008c9554a8eebb48daf41e0c9909cab0ed34eee124eb26a4426857e3976db881cb8fdebd8a2cff69ff7dd16f3cefb9a1a1a74816397e263334a0765fb
SSDEEP 6144:gb/RWr8s5X4+aqyHADul6KynubBvNEMzDOwlf6PlJ:k/R25X4FjHYoesHOOkJ
TLSH
T173E42B7DBEF2570A0897F246EFAA43447DBE08DCE56597B7684F522E0003F4C6AB8149
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\hu.pak
Size 717KB
SHA256 cd1026c6596610617d8a313b899e9d2e2514d0cd1fbf97790f2c450309ede792
MD5 64422a57354aa394d94b562ea77dc059
SHA1 c4957f8c74c5c51975fda21505ea79e0e427fe6f
SHA512 8ec3648e6a8869bd47691afa131cfa482b84902be498dffe2898b34665af6a2d62a425147b2f6c3df0d26a4151c395fdd1ca4204f51dacaf48e3bf68f484a84e
SSDEEP 6144:gj0Q/ZLS5SH3dFTpr4HR8XlH2DQa4FA4jt+u8U5iT78gZ49JxCYhU7rvP5wsmk7l:rQ/hS5SH39NAdU5i387g8Ucu
TLSH
T1C7F44CB793B69459BC6C178778643F15592E881BAB3B31FB2883846D34A178D0D83CDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\id.pak
Size 592KB
SHA256 4de71f7c766db79412dcc1f5521c5f3e678cf343327cc31b0fc28472102e0247
MD5 3a442af03205c4675664ab3027877f9c
SHA1 f3053d4a9538721c2441a8f53cecc7602d378446
SHA512 d0efd8b9658a48d9889b94ffef00a34dd300c9e29603c1aa79e18d9abf4dcc80ea386ef616e7605fdb7cbd4a97fa0da0716d42cfc5d8a176b87d7fce689c635d
SSDEEP 6144:7Q7CuhxETiSge+Yr/IrjpS9fJpfffXoTFjlFNzmBF/tu6KIN6aUWOBw9m/iTv8MU:k7X2Vp+YcrjIDATFjlF1mn/v6ah4F
TLSH
T1CAD4D7632EC9310C494843D5F2CEA91E7CCE233BAF05B76E8E348F7055A67686716B94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\it.pak
Size 648KB
SHA256 ac12cbbdeeea05f0cf90cc57df1f6ef299444b1f499157eef8aa089f73da25f9
MD5 1bac1301f33b94ed9d775fc795977af0
SHA1 47e15676ead4124ef4afa85e84e0cf462b088b94
SHA512 2304d45b2a1f7e0cbf57a75ecec6b2133ccb87c29d09ac7dcbffe93b5b54167efd7f5c4c7a7dd40c8f8a8a5a54f17d0e21f4da109b80a5938a50a0d0889ff186
SSDEEP 6144:8xS4w0QQTCOFshlmik+b52NZzV62MxSfqBCfYs61Ztq/UhOKa1DTs/Tcr/+qpzSv:8jBcZKnO8iw1Qhii/GlwIq
TLSH
T164E41B3AA5DA252519976359E611F085FB6AFCCCFA41721CC99B031C22CFE80F1ADB47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\ja.pak
Size 791KB
SHA256 c737584f4b525c4d17cc2a79f0318640a7a666c43ef7aa24753551d1b75d7d7f
MD5 9eb040410cb10d3eb82cf34685006ad8
SHA1 a54d5498bb6c31aae13492c534cc670041143f3c
SHA512 a70a9851f0b7e1caf551e87f7452960bf29988d65f14124ef474e342d8dd6e642420d68595a61e02437e252ddf6438d453ce00cebbb1a24ce8264375a0ae8bb8
SSDEEP 6144:EjSD0KT2Y+y+XtQUXhcMa9ZdQ2pm/mJkHbZtyNBGIsVW:omLRQqU29ZdQ2U/Mk9YNBGe
TLSH
T15505307CE3C969369D6153A22C0E36E17506AC9BFCA2363A443DC074BD70BCEE515AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\kn.pak
Size 1.6MB
SHA256 3eb9b3dda74b5e21abf7d7726cc2e682afd87141ee30a488e288695d48a5352e
MD5 99cee56504cfd771817eaf8b1cf93a1c
SHA1 ef725cc4681f97eb3bcdea5ee0d6aa2456e1ec12
SHA512 5b509ed1355b9c56f5de1153a3a7958f0ac001ad120a4121e096cbec7b588f0901310cc44bf6e7a59f3d7469d1e831ab2e69dd366003278fab46775fb31dfecd
SSDEEP 12288:fQ1VgdKLz7h1HSKzoEgc8+FSC7EtPMm4vkyr2c:fQ3kDMv
TLSH
T1AE75CD18ADBA7D301BD5006B24EC643ECFF16BE29CA907D2F4DDD7802C66C6A90865DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\ko.pak
Size 671KB
SHA256 bcc64be2004522a68a12dcfb6efb45f030d0badfe048220d2830b188e7f4135d
MD5 281aaa146d570ed1251fc0b427693fd7
SHA1 99d8cd5e93d16382763db3f5bf4f02befacd9ede
SHA512 6a44e86f8efbd5af75e38b31154eecd08e6dd3765955407952108e5148453e91c99adfe3f6d33059a27a156e8c54efd22d01ac1ebfc1254af381691069483319
SSDEEP 12288:kOZtQ/nguCyekcM1WNiPszcbifYj4ZGRyzDoIy1KsDRgCxrIJ/xESJGRG1KLhw1b:kkcfnIdOO3BLO2
TLSH
T14DE4B5F23CDB63CD1193CD82AAF4FA198382D976F7530294ED44CE449E145D7488AABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\lt.pak
Size 729KB
SHA256 a7eae3ba06229763b85b29eb64e011b992679952165bb7239a9ece1d441de4ab
MD5 70f7ccb1c8ac9b559454b647a225c5d5
SHA1 0102c0bd5fd3d242d27d8cb2248fb4b95ae0e6ef
SHA512 28b6b52a57e14a0cc3c4ec9bc3de438dd52b0ddc5285f5bc1aebb852a4f641ae89de65f6db05defa009d576d8758a8bcf9071f8df097fd7da8ee04b031498f82
SSDEEP 12288:1lsbT945Mq6LjAnlhIKcGbHH7xt2tJC6SBA:XsbQMSc2b9tAJx
TLSH
T19CF42C0069E3AEFB9A4467C981A4CA78DEFD50009767BC61EC69C78BC43BF4525A0F35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\lv.pak
Size 727KB
SHA256 8a4c31840217419f608b15eca1490bb4e83c5a896556a045f95af7f1390f5f8a
MD5 2195b89b308fc09f5c295ec035a2f060
SHA1 db5000d841d6dccac04507d36833d432e10cb179
SHA512 ff1a7b6f3cb6ccef6a111097db3234099ffc42daf0348deef61699ecdfbdae20f9929f2cf1ac5d3317bf9c7d6b21bb8ae0a55abe5c651d1d8653ee985eb84ebf
SSDEEP 12288:fy9qrPmkFAWUJmyFlFbrJAGcZTSQor+os:yqrOkFAWUJmyFlFHJAGc9oaos
TLSH
T1D3F43A959EC68FA94E918DCA7336D133A8CCD740FE07E112ED798B3A510F52422B5EE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\ml.pak
Size 1.6MB
SHA256 434221a29e71a6dfc6c14a5843713df51b2afe8cc3114cb9fedfbfdfc590ce4d
MD5 76f2d86483f579721d2ae144f73d1278
SHA1 68301264602f8839f73133345b124b74bfc7c58d
SHA512 41085ab6988ad2f396f5649dd06340f9bc95e0b33f7cb0fac2104b777df0258d5eead93ffa085fdf7480141451ef1322f39f882ad88301c6b8afcc7be74b34f0
SSDEEP 24576:cPps/oZAuuxyYl+9y9XBkx/9tNnkKfijHeBRJzXcF+v2AiyZ3laJRvo3G:cPm
TLSH
T1FB759D5BA036CD3B0FD102167B4E2FABCD5B9FD140AF668B5869B2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\mr.pak
Size 1.3MB
SHA256 ae12ff8ac009a4991d71363ff442abb3beaef772d08e72f4ccd685403a02f332
MD5 c7d7aa69f9f911f1a803cbb4fade74f9
SHA1 9582a55dbe4602f3b9d6c6903c3d52e1cd89f019
SHA512 eaa68342ab50aedbf5ea6064771a5c37ab88cd8327c636a186f4e7376544346061cb9b707a8485041ace702e8575cbd4b5a5756609c04a9f685b3fc8779fcc97
SSDEEP 6144:Rf/inO5K1KgjpiWUZyS0pB+MPbiMmRsTNW:RX1K15Z+MPbiMmmTNW
TLSH
T10665D14DF7BAF3685DACBC8E36540D3BD8FD21B1C3E9925648E1B3E74884CB401596A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\ms.pak
Size 624KB
SHA256 77912adf05407adf3dfd2b0eba269b1cb99d980dd0a16fae74dabea3a584a869
MD5 900637a3441afbc9f7e43be31a30eefc
SHA1 7d85e8c25f5ec9b8fca2856e0a0b964c6bd3ee24
SHA512 d84f1d81d4de347b80e1453b90072ee55408f1adba5b506219c615eed8d89fc107bd73e444e401ad52c6c9e729167e74d9235c0284ce3acddc2eb493cee49ed7
SSDEEP 6144:f7incrjAUqzueh8XsRfQZvAEyu9S1cW9t+Huqwp+k8LNkwnwAFDqlOt3Vcv:fWcTqzJhCsG9yNmHuqwpbbRlOW
TLSH
T17DD4B5569EDE3118085843D9D2DEA91B7CDD3332B705AF2B4DB08FB0026E7A53316B99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\nb.pak
Size 598KB
SHA256 81b5a935f83a49ef4faf7132876e500a6cd49909c1d2b45d4bf1336769874b86
MD5 8eb34d85aa5ff549ce7f68cf2e1bd089
SHA1 59be2c175a0014f4cc862139c326b5fb47355c51
SHA512 4a1139d2221689a9f3ae6a795b619408e6843dc2cea47fab1b0691a939ab3a1f9829a797c80ad497498fc2d68251da6212333bf12568cc9e0f21cc828b5fc1ad
SSDEEP 12288:ocZlVO7SfNQlsOU/Op7f3PfZLnkGJI5Br4fw49au:JVIMODpLnkGa5B0HR
TLSH
T1F5D4F883EE46B72EF6A443A4F518855B9B7D942CCE98199B54D8C23E0CC7EF052BE1C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\nl.pak
Size 623KB
SHA256 afc9e6696a40b0318ba96e786fe0b286c3ea9a2d548479c1fa43d96b1c137c62
MD5 c2628ff51aa4ee3b91a9df0f6e2d1958
SHA1 a20a4a319031d1f55a9c8afa353a8a5817beb9f4
SHA512 283e0442125437f3339b14aa1e0af3c70c669b74f3e15de2e4cbd4a885ae779a178f2860964c461887b9d9b65a014472969e244dd6f733a6ff75842fe3311646
SSDEEP 12288:cYyOh9NzgqlbJWQusiURdqgwIzf7FNy65gqHgGSDTF:cEblbJWQusiUeIzf73y6KqHgGiR
TLSH
T1AFD4F907AC4E253E59C0A349FA098FBBBF2ED22CC26CE67D94DDD1341443F6891AD589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\pl.pak
Size 696KB
SHA256 f92f6bff33a975e189b78a4cf0e153e85743dda432347745ebf8f1b4ff51a99b
MD5 833780b94215f9ce32c35724c8cd433a
SHA1 5c6ae41a85dd10d48480f96e9a49d047a2786071
SHA512 e428f19759b6e88e06ec7913197e7c6f8849b280993ccf1ad0ce61d92d92415ae5819f88e8c0b352110034a2cef89d9c9936dcd52d89f26c88811e8de015e8f8
SSDEEP 12288:ma43m2VnK/owZwfQfuzSJabZpbn6fPPCUdUe3m/UevM/mE1QhrBajMol5/rT:FeHVc7K64vMH1QhUv
TLSH
T1C9E45C0E56E58A4E8CA008E6F6E70B7CACDDC808F108D35FE46F4526719B19EC9BE5D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\pt-BR.pak
Size 652KB
SHA256 d1aba0dbde99231d3096b7ef9ec62ed017c72804257de62ffb649d45cf234f9d
MD5 c4113071b2f5f681f5f67da835bc6a94
SHA1 e79b1944deb0f5de2841821414e8c3b522493a88
SHA512 5d32321684ed196730a64d6efbc4072abeb4f866bb38ff7284fab01e4de9ebcf4a65a4fe58be6fbf3687671ee566c2f63d2eb64d861d6d6f60518864dfd6e91c
SSDEEP 6144:kzerJK4F2WbuNBXBLEpPQHEyWAEIIr9dqsRUUf8n:kCr1F2W4bERUsRDfc
TLSH
T170E41C2A6ECA136605229350B70EEB47E5890745FE06DA87DCFF4F05A3CDE40D933AA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\pt-PT.pak
Size 656KB
SHA256 1326efcde830a8b29541c98fb51e3b5e5428d2a59e1b21a11a677317d08b2bbd
MD5 1dd9b726938cf1c514fae6e7f1857243
SHA1 210e2f56820cc5800498c76d2aedfc3c6c16e5f8
SHA512 ae7b7bef5ce73aa330ea3baa5e10cc73102f3e871ca4d7013b72f7c36a0876b17f91ec7b89a8f8ceef2dc222f5b3ce12f46cae410516ec351331e5d60cc7a2ce
SSDEEP 6144:Oc2BKdzn43xugTieJVJJxhuI9AyN55frKDn7t2leSR9J:d0Kz4/EDn7MeSRT
TLSH
T1E9E429296EDA132605135341B70ADB03FAC85655F80ACB87C9EF0B4272CDF94D6B7B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\ro.pak
Size 681KB
SHA256 7fd5b85509f67394eee48b07339c9a3a77fb1fb99b6204bae3209f9f0ffab3b1
MD5 619c48fd2e1320cf840dfd9db7595680
SHA1 9e97815bc223d7805f335adb209504857a7ceb1c
SHA512 62abc32152c161375a9986dd350940eb4efdb5c8b246c25f0995b03c4af446acbbb4ecf8e7b94bcb4854a46e0740fd4c260b12836a41e123686b96014f2309b4
SSDEEP 12288:H/INhX6pzClnInPBiqTL7uIQH5n9le/zf:H/ITXJ59la
TLSH
T102E42C23A1C41A972D5152A2F73A24D3E88E105DF641E2CDA4EEC97910CDDDBC52EECB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\ru.pak
Size 1.1MB
SHA256 23166d431d70048e248e3ff47732642cb1ab73f9516384e33ef3c1979574f2ff
MD5 68dba8cdda096e46a95ad54a881a2511
SHA1 34f59329db3af2fd40c8832e9c512cb6ae5de32d
SHA512 ee2fb972e357a3383b468220b7697d1af6d42d80e5b524b0589f74b69aa08eda146529538cd5fcc8c10e93dc9360bf6f57abbeef217b901fc8e7e7a140d1d1b8
SSDEEP 12288:znSNeJ1fQeRo4YeWspkzJ9sF+oa+ULZHo6HzW/oqSvgsGCZkE0dR3Q8NiGjhnYH+:znSNklFd8oX/
TLSH
T19E358860669E64DE1101F01BDD08BE0D3CEB45FE3FAAA35219A42D7F35F2024C67E65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\sk.pak
Size 708KB
SHA256 91037f2ecb636857b92a2729b7c116d8dd98082b068e4f78b0fdab06f27d2eb7
MD5 4515aa1557ede9054727f1903a32aea1
SHA1 2a0b1bbf8ebba75bf03b6ab0c973987a82c87c09
SHA512 f05107b6bde25094197d4cca47847b9893eef96de57e80e352517fc848da0680eabf0a85b801570b287ddafa7851fd79a8f15672ada3e863ac2a3deb1d79d242
SSDEEP 12288:OKeYc+T27pkzA8+mi+xdnaOY7VZ8pTjsxt9wF:Og0pkV+mYL/taF
TLSH
T1D1F45D3FDFE7181E8E8D0108FFAA7110FD6E8650864EB4A6944F364714E26EDCAB4E54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\sl.pak
Size 678KB
SHA256 321ab341e3225dddcac858448367d43677c20e739b2ccab52f8c86aa0727d868
MD5 c8b796082609ce19f54b51e159514e93
SHA1 5d9c961e0feb6b2c96a7ae07ef24402e714a743d
SHA512 188438e92ae501ff767dc7b582ec1c5ec07e896db8417a4cd19e3933cfa97b1f2b5fb1a68a165b5057f0ce8b837ecf81bd76e8da0d5ce36d09d2952716e68d21
SSDEEP 12288:eIyYXpvc7VcB2+RVWobUWH2nWOq9pwi/fzB7aql/ad:eIyYa7+WobnH2ni/fzB7W
TLSH
T146E42B397EA74E0F0C9AA2CEFEA606007FDC044CD256E6A1EC4F33795415A3827BD595
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\sr.pak
Size 1.0MB
SHA256 7b337dcad390a9f08c3bd1d27235898e588827fa8da8808f4bc7012011578ef0
MD5 43e781b3ed61cf95fa67ae5afadfd6e7
SHA1 e9f11f12488172918495d841d4acdedc0834ec9a
SHA512 cf458a74cbbbca27e0ccfa9242dd863a52cf3a0fd5e84e610f78b9b18ff7c921908fe98d824a3211b4061a63bcd0494b857e4aa8d2f3f74ea03af54cfc478190
SSDEEP 12288:C1+VkxNRL58I882S0dRsCt7i4O5JM9kpCQhW6CgxmIF379juz3/k/Q:ufXqICV3
TLSH
T1793556B19B9E64DB0501F41BD808BE493DAF41FE3FAB975211601DBD34E10B847BA29E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\sv.pak
Size 605KB
SHA256 f10b4db7184a14f28bfdad82597d2d43b4ec859ab6eab59a5c3891aa6070f3ed
MD5 d1018c51fdea57efa44f5ae01f749f3b
SHA1 f17ff0e7a902c7ac735ca4f51c4206ab7a21fc7e
SHA512 6602ab45ea2c3ea76127de42788640516bd0532e7154673dc9da76c2845e1636a7b77658aa52fb7b6fdafdc1e55719138f4a483d3c5830677c94ac6fbaca4e63
SSDEEP 6144:NlqVqEHIL7xbjCAq0C9Q95YVgyLIuxRxhVbFl14hLOVRFcz5RtGm1eqMlmFMCOSG:NlZL7MAqMT8xj4iYF6b
TLSH
T1D1D42C438A20F526FAB2530DB608115F0AEDE15CE7F2954EB8D9883DAD8BD5805FF247
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\sw.pak
Size 640KB
SHA256 726ba26363103920712874418cbfc23ce899c46ca8a6dc3ec9da0bf48355622b
MD5 289bec23992e6a40cdf54997ec0a4ca2
SHA1 dfdf31bc91d739a630ea7ea3cf11d30067e2509b
SHA512 77b35d56f847267df760359a5a3a803029658e109d7c579b639c7414171f78d1030797da693a63f639d72f5e914fbb87be0990272d46cce285f99ad55749c275
SSDEEP 12288:3pyq/5q27zyxGB2qHOCdYGIGw5dmedqNGjRdponi91GKL3hjinSLeRtFa/hwzliw:ZvxxVFPiZ3a
TLSH
T1E5D4D5629C71D0191233618603DDEF732BDCED5C692B2DA35A46BF0F218F48C56ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\ta.pak
Size 1.6MB
SHA256 fd8fe5c21a10e6542599e9148c8a30557c4d437b9606d6b29b685d474d89534d
MD5 1098c8ffa99cb7a8b40887167bca0cb2
SHA1 adb1d4afb72136dca61ff12a0b467b73ca76cf42
SHA512 6cef56e1fea90cd0dd5c2dcc5e30fbd6a656dfb29327c63f48f1555c423e7f0d74ff68997d29cf9b86473058a5c4d93455073b53d7ad60923f01a351efdaebd7
SSDEEP 3072:3cc1JjhiTktBIvRGPET5qstR9ztm1vYpiMy3M:3DJjhMktavRGPEtqstR9ztm1vYpiMy8
TLSH
T15D750CCE923EEE890F93288F0319536912986155C07BE3A67C766E1198ECC5DDF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\te.pak
Size 1.5MB
SHA256 28b85fa550df913e970fac8a599ec4963b1466e3b610350924518de107e41602
MD5 9639064c77e0ed97d5baf8e461078ccc
SHA1 2deb7d6b7cec1a259cffc4a598e9cefd0289639a
SHA512 574e0179c7d0d395bf1ff42b494a0f18ce8c96a52d29b8bc9f016243c6f15fef120abd314c123ff69eab4db824047c4d65ac21d5b65cec2860a9a9090a5c92e5
SSDEEP 12288:Ui8g87MZKNuywG6sSF602/NNgIC8ymoRRT5dbJy52CM1WOB63N3p1Fn1ghgaC/lS:CgMp1c3X
TLSH
T1007593023A6AD310DAE70273752CF66C49781B8161D6732C1EAFA357EB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\th.pak
Size 1.3MB
SHA256 cfd9e6651e9335fbc0483aed1098112234e973303bf7101d88e0518d3fb16ffe
MD5 a4226d17ebdc8991208931eb787ee959
SHA1 0284fc35f2bf7b0681b97c8ed8e2c076385db058
SHA512 41dfadb2104a5ae472008cef41959495b988fcce3387fee3024c17a87ef203b7810b515d00e687f284ce869459c86a1231643f994791aa3221a9053c036d8401
SSDEEP 12288:7rjnxQHhN9LyZYAozYL77SsGo6h5skJUseOPsO5eXwpbDFDS6Sud2mKHl7jjF12h:7rjxK5sm
TLSH
T18D554BB37247DDD479441B5B262A7789672DAE693F73F8E000C9215A73F071A8422EE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\tr.pak
Size 651KB
SHA256 4b047663f169169f3ccd33923782ae33348c37e5107314d3324f1850f3c5fb42
MD5 e5c069a7c9cf8d86e47e41f77bca3135
SHA1 e1d539023cf95e05d14578da585492057b5e59c9
SHA512 4846fbddaa3695a7db06d3936bcbca130ebb3144975b6e3a7a5a1616674c50230e2e6df11b3093203ea460c60c018702b5eb04d208a24d002fad9acbfb401e31
SSDEEP 12288:WhsOCAlzRw0007PIPHz6sgwhIfZFxAHON9X1i4S:WHCUztcUN9w4S
TLSH
T1A6E4F98178EF282CCBB9278BD6E94666F89F0766B331F4469B168636774535303E360C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\uk.pak
Size 1.1MB
SHA256 3ebafedd5f6005f56a2d7a500e59bcb435e58a6013c7e075b241a91ab1c605ed
MD5 013949d7315e32a9b3ae65c375b09093
SHA1 c9128f37bbcded91374a8b9689b6650ab675c814
SHA512 72a5dc7c65565df2201e0bf0db364ef5b96fc080f8b389f9613b9273a777fb7197c3131f567b2d90e4567ed8d9ff8998bfad902067ab24c21d20acc855e0f2de
SSDEEP 12288:e+9OUH+QKjb3IrkkkA5vyjRrsSr+UinRYX2ot81BUf8t1oNnHUA6QHBz8JP5yP+Q:a4E8I
TLSH
T1D745A9A19A9D58EF0105F05BE94C7A0D7CA741FE7FA6471625A43DBF38F20248A3C35A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\ur.pak
Size 981KB
SHA256 51c318f3df2673cb34d0df9235021dd1794073cddf59d14433620da1141ec650
MD5 c21c12157b4a5c275b47a93015f9369e
SHA1 97dcf69e26f0c4c03979e9f29f63f1c682e26761
SHA512 144210b5ad7fbfcf0c395bc8b895ab60d29061ef3f8ba0cf4a2e8cec7b08d4d98fecadee0385fa8056c130fd9441fa4f8e62b305c55ce7caab1214a3b13df6ab
SSDEEP 12288:KDGIilt5oiu8PC3zqtdQ+BR7yArubcvqmEhdGuOvedQYrGuYjwadcJKwUvuRco/d:2JFFGWr
TLSH
T16A2500D2E6B896B35A21D92780D33C34CB735F13D34AF281E96246C54E9A0135F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\vi.pak
Size 774KB
SHA256 45c351251b938ea6f46305f2c324e8144bdf7500e08d430f8280b7db9e2ce52d
MD5 68daa544930d57098084768941ed87c6
SHA1 dc49022a0befb220230791b62f17527568f5858e
SHA512 2755b83dea7437b9bc223b00dbb7fba41e2423378f3f39c7e7fcce2cf54e049e2e18986969fcb9f2b722a37a2755b772cdfd8be9d4c2c32ee19c3c068c6f114d
SSDEEP 24576:xSTOQ+c0JVG04Fvo/0E+tsjlIsicufpq1ljA:xSTG+siVk1ljA
TLSH
T110F4955216E0302680AC553EC6CE540D6FCAE42FF7C1CFE56FE4297876221A45F25BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\zh-CN.pak
Size 554KB
SHA256 78837eb8a17d34e371ed72b7c7d9262876592f409fc66b293461c5468386834c
MD5 adaa86862bf0f0bdb8510d55b2f9b3a5
SHA1 63e6b0fc331ef555510c65eceb894dcf7d4238c7
SHA512 1690b4c373ffe755816be408db907e86a8bf62936cc63d2013fe418d816e137a383de5142f2989b56f397fad5976231f8a120a8cec7b5edecd02c28db6564183
SSDEEP 12288:I9YLILBY4ps+zQnzpUJkQQVzcUZYfDMzsD/:g++zQnzpUJJQdcUZYfDMz4/
TLSH
T19EC48CA820F9BDEC044650E13729613D7C40B20BF667AF366ED248DD2AA6F9D0757E07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\locales\zh-TW.pak
Size 547KB
SHA256 fb77ff841f652f0ac8be02ce625559ae516c63081a45bde96f9277f241172eca
MD5 404b8be63620b2694d38535ae2afc7c6
SHA1 92f403aeeebdf1ba82c2ab8770f480c1a00e9780
SHA512 824ebc44e59b8738cba9e2ef176a360fdb9c8ee76d62460490368b3c62d829acb8dc695854c3fa018b577839d94bfee36ede4d302080f87cdbe09d3ccb748008
SSDEEP 6144:tAMdshi4b0PYIoBEagTuxVJm4DIa2sluXdAr58qo2HZD5SWWX2jXUm9Tu:i8O70wI5u84UNdAr59o2HnjjA
TLSH
T1BFC47DB618FBDBEF0901F484B7CD523ABC8B342DDD773636FC851C942E69A540AA2185
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\resources.pak
Size 6.5MB
SHA256 096373b7b5a9535b5ba60a37883d1d2010d28dafd90d4c819a902db09aef4ad1
MD5 204420168fdecf480d2eb1ca479c3877
SHA1 2b853205f5e2b8ea76f0beec2256f62bf6318347
SHA512 9e7992f0889de939b38642fb0991e9dfa8b7e8a74a5804a936b2e4146be29548c8a29ef16ca8cf14d256dcf3989e10e57780d8c531c422f2e1b594f9ade9106c
SSDEEP 196608:+mntWBRtfTL5QoCmkrB0QMguFBgt3m06Rw+K6:+mnkTtC9mkr4jFWBm0iw+/
TLSH
T1F76633D7B1346C1BC6C443BF8918463AA85C6B707D86D2D2189C722CDCAE64A6FC467F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-update.yml

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\resources\app-update.yml
Size 172B
SHA256 ff275def080229bfc8a75a08b67c072cacdc7a538fb01104c3c2e6a89e741e5d
MD5 e81065fd5f6794d7f6ebd7b7f54fa3b0
SHA1 0efabca6314fbc164dfaba5a85dd5e9fcd5d16fc
SHA512 832a6d3399a6890b7a8a6094939c7d1ffadf2a47b6fa78edcaf0a27386cfab6a8d3d4c4cbd665df39afe0289dfff3a0b7ca4ffdeaeec96e883708368308d5d16
TLSH
T13DC08CA0D611EA388231492CF49CB47100CE6860EA230170D8EC4688A80BA5DA9CA6CE
MD5 SHA1 SHA512 TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\resources\app.asar
Size 44.8MB
SHA256 8c6febbdf83461bd8b0a2ea5209423857d52b807c778f850e4a7960989cb2968
MD5 9ba0cc9b44afdf8fdd5b86ccdc5e3795
SHA1 98bdd7086f3bc392dd1ff7a0abfe4dcb3bc7b1e6
SHA512 8cefc2eef66031499751fc9b78648484f5af7a3aa57fe5b483569a08c23bb662ed353229ac990d32560cb7b010ba4c8bbac0ba4a3584c11d65b6e77323e5c0d9
SSDEEP 393216:rX7lnhTUjIvpnrMD5Ok2Kk7ixSPsrcQvTFkSlrMfNrag1z:rX7lnhTUjIeD5OsF3wQvTFNGZaqz
TLSH
T1FDA77C1126BB9127071F2EB716CE0002AE39906F790494947F5C86587B94F29F3FAFB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon.png

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\resources\app.asar.unpacked\resources\icon.png
Size 132KB
SHA256 ceb2210260fc5846582030fac047cf70fa012beb080d1b4c8c1ad0e9d2fa9783
MD5 27b2b2cc686e6c4871cabe03d14c3db2
SHA1 c96ea55b8755d0389fa092eb5761dbb43d883fe6
SHA512 38e07856a3300cb54ea50340a0fc973db09d357e600c75234c2c40ce0814e73aa6be4548105ee3b40417d4578ea42f5e95fc226887c5595194767131d53b5d80
SSDEEP 3072:7xaJbyNvsuUrt1J0NYRaHaROx52DIKYlI208k0Db+jek2/rv:9aJGFurtbP0jrlFk0mak4rv
TLSH
T1DED313E684C35EF0590256858EC9D07BDDBFA210193D99C0F8E4872089BFB1176EEAE5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

trayTemplate.png

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\resources\app.asar.unpacked\resources\tray\trayTemplate.png
Size 535B
SHA256 4618ef51f1bade1b1f3662a0a28ff63a9534944a567ee9f815285cf9866a48af
MD5 501aa372771c35c7fd42d50a4aeb352b
SHA1 b907716a586a58b42420022eccb738baf96e27b7
SHA512 05700e1e0bab50290daae05340c993614c910fc046983b47d778c25ef11f2ef6c6a20647eef05af227a1c11b9aeca24ae2560eb0a5d2b6e68567fef99d78ed60
TLSH
T1DEF0C0D29331F6F1E507231241103601DB3A3B1B17174E9A7A69F6950D08F8C5568F96
MD5 SHA1 SHA512 TLSH

Submit Download

[email protected]

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\resources\app.asar.unpacked\resources\tray\[email protected]
Size 787B
SHA256 5b509bb2dc0ae257405e2c35dd62138f123decf424174b37e99c9bcece79af69
MD5 8e94a08e3360ac8a83b100d70f1abaa8
SHA1 829a45d4f84576d50f440fd8781a9ad016fc54ca
SHA512 f1e555a1002c50de637c41842df96c1e4963b23cb8c5e0daf76f019648ad35a2aa07482a5ca288d32e4f71786f91d0110e468005a2b5d28be3b6c23e1f6ec866
TLSH
T1230125E1A5B3F994C8032EA2F9175340EC226E1F532D1D187E07E1CF4D18DAC91223D1
MD5 SHA1 SHA512 TLSH

Submit Download

elevate.exe

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\resources\elevate.exe
Size 105KB
SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
MD5 792b92c8ad13c46f27c7ced0810694df
SHA1 d8d449b92de20a57df722df46435ba4553ecc802
SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
TLSH
T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\snapshot_blob.bin
Size 333KB
SHA256 a578866594759d3c20b8fc40ca8f312c283a09113920ac14aea9c88ce0e8d9ba
MD5 f641d6add5dfcd2da930b4f44a92d845
SHA1 3cc91fddfe543f52a5d29fc18693503b460c1213
SHA512 025afb69a850ffb726e45161cd53b14f6938f3153f4db17b9c30513519f5a100a8a0add6ed103058f68a1d72273f2db24a46c835fd6dd0bfe718c6ae688a284b
SSDEEP 3072:WOiXKGWOt+xbRt2FIR8SKvbmTOH/opts3Iyiy2gsMvkdAhm6tfsa:W5XLt+Hlzk/ov7CLvBkisa
TLSH
T16674CE05F74ACB26C98A3A745DF983882E2071CD9D49B34B3549737E78BA2740D3A72D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\v8_context_snapshot.bin
Size 698KB
SHA256 ed5e979db2aef4a152758f2b9b7b06349a1d3d5dd687fdb96e2b3fb730a465e0
MD5 a119c66308517b41d07e0c070939d5d0
SHA1 e5ffb8afeb8914c4981d93f3727183aa451c6a88
SHA512 fb27910e77f0ec790c4c193c726d93be01ec080d9f4175194094c36b5107c71f53e9d2f9c6e65f0b2395353e34bb1a759c0f36b55f227221a97757d0e44c0bbe
SSDEEP 6144:G/V4XptgO5XKt+Hlzk/ov7Cx2NyuClVlxykismIdukcLKYNcPK:G8D5XoAvmx2NySkQIId/H
TLSH
T1C8E4A761FB0A8F3AC5453BBD8DE657463A30B18E9E87E24B7405633D78B96B04C3652C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\vk_swiftshader.dll
Size 5.4MB
SHA256 3738844133e89dc951e2167aac92e1491f34a385e54f36ad751ce604e5ee7964
MD5 35c734927fd23aa185cc46fba4545e65
SHA1 0a8cfc777f9cea5a7c41d0a3b14e2463d94d4f16
SHA512 d17e204b3ac834da4884bcb201bba536ab268ae60b107279de34d83d5236bf217ef5f0de4af067ec0ae1bd7cd6ff7b8a76f19d6c1fb2b6abcddfc2aeeb891060
SSDEEP 49152:Z+et2UcrN42sf0vTrWny2/Gh9qIHGZpVZSbiP1VFz2ZtIgrduZsgP/m9vqjfc2ch:ZJt2vI4gmlml3pCIn
TLSH
T174463803F28681E9C06DE5798B5FA623F631F8840B2276DF56A00F192E66FE0673D715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\7z-out\vulkan-1.dll
Size 932KB
SHA256 d8bd2d92c82fa28141fb911a7cacadd8dd7082b98258975727930ee571a43cb5
MD5 78d0ecc36f8fb1f93e827ba4e19cd65f
SHA1 02fcb7edd74ed4cf1612ccc8fa556c552e272761
SHA512 8db1cd7c1b3102f6daf000dce9c28560eed65ca9db9684112b8d26c9c53b956676cfa150f7de4d9ecee564d83705dd845edd8266e50bf5b609821cba73d1a548
SSDEEP 24576:VNpbzkO5J/Yv3kG4nolXqOZ6dSn6Z5WGc9DYsHQDb6g3P0zAk79oOHiY/jF:3pbwOvgv3kRUX1Z6dSn6Z5WGc9DYsHQM
TLSH
T1DC157E12DA544AA9D67AC074D9D28A0789B074821322B8DF12F817147F6FFF47B3DB26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

INetC.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\INetC.dll
Size 238KB
SHA256 ed04a4823f221e9197b8f3c3da1d6859ff5b176185bde2f1c923a442516c810a
MD5 38caa11a462b16538e0a3daeb2fc0eaf
SHA1 c22a190b83f4b6dc0d6a44b98eac1a89a78de55c
SHA512 777135e05e908ac26bfce0a9c425b57f7132c1cdb0969bbb6ef625748c868860602bacc633c61cab36d0375b94b6bcfbd8bd8c7fa781495ef7332e362f8d44d1
SSDEEP 3072:hD2ekNFXiQraqoDDfbrH6ZgxkzStPpwGxqeujXj5Bif/Pa0L:hD2vhaqoDfb6mxk2LqHXj3if/Pa
TLSH
T16334BF857F68D80BE65402F87A71CFBA1669EC206C21C203E7E1BE5F3D79B56AD01381
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UAC.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\UAC.dll
Size 14KB
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
TLSH
T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WinShell.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\WinShell.dll
Size 3KB
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
TLSH
T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
MD5 SHA1 SHA512 TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\nsDialogs.dll
Size 9KB
SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
TLSH
T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\nsExec.dll
Size 6KB
SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
MD5 ec0504e6b8a11d5aad43b296beeb84b2
SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
TLSH
T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nsk83B3.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\chrome_100_percent.pak
Size 117KB
SHA256 d76fe8fa3a14cd73e4c858746e2ab2d2fa6f2df38a906fa5814b50a8a895fc96
MD5 37c48e66c39832d32fa2e926ac503c4a
SHA1 2400135b49193c9786f1faa8d00169ce3d38ca98
SHA512 e1b631c3834fb84e96ab9fe44b12a8fa6c6b3c767e00a17ed8c3d8f8fbe7bc2dfe83fe33e7aca4f32439bdbad21d25af6b9e263d412922e40d09d4e421f12941
SSDEEP 3072:Kw4PisCv+/P9NebGz8LI1TwILjQBHe7YAP18RVC2I:UYWFUbGz8LI1TdjQBQCrC
TLSH
T19AC3E0E773B0AD7DCA464BB743560070FCB30B2D06C2170A4A9AE479652AF98D9D93D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\chrome_200_percent.pak
Size 192KB
SHA256 b74ad439f3d3762657f3ba533a6af3ac63315c838ed46519891366f43d834a0e
MD5 e6a75313c720a6ebe3182b4e1db48328
SHA1 d60a503cf4604c816d9146d7fe4041018d445888
SHA512 3c8699b998c53c0414933ba18e0cf561488b9e209523a9b4093b68d38393e9a6bc683cdffc32a8050be25b473153b71743acf9c33f070166f1e15f2a453e8eb4
SSDEEP 3072:+FJ8LahaY7d6iN6uSwxohPQDQYaEjrvy/IwXJPpLjQBHe7YAP10uxR/TbIM0:+IGQ+N6uSZQDQYakvyAk9jQBQNd4
TLSH
T1D01401D723B4AD3DDA530BB3A26710E0FD7A20291EB3514A569FD8397925E88C9CD343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\d3dcompiler_47.dll
Size 4.5MB
SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
MD5 19e527a35241c171d37dc1e6c530053c
SHA1 b1567bada7a27ab78e65da440f21809f50b9d34c
SHA512 23d38b55f5b17bf0228b16a85787d384da0a700190fc289281190272a0d2dd374be0f7f64d8b642836ccbe2351b72e9ef5c7e2b12d0a7495317e986fd5e3c886
SSDEEP 49152:c6ntbdeqBH287v7cavvL4e0OgcmeNHyxsBSoYHXahOO5uBcLr7mbpJ3E/V:cUdeqt737jFm5wd
TLSH
T143268D56A7E840E9D1BBD138DA87821BEBF1B80413349BDF015086599F73BD26A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxcompiler.dll

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\dxcompiler.dll
Size 24.4MB
SHA256 1085707889573af5b32e7644d47a7c5f0809ed0818217d75f6eaedee37a2a767
MD5 2ddeafb52007a3be19f22077e3a7fcfd
SHA1 7bc3e8d3d0bff536d3b91289b9ccdd6fef2f88e2
SHA512 021f28bb38e17bebc4b81484b60c1a894dbb278e3b88c631f062b5a1260794d2aa588852f0288c8c62ffa7d0b8312a6783f1fcfe545a57df3128c0818c609ba4
SSDEEP 393216:q3rB/qi9bG5sQInN1HN8YMEBfc6uOCvo:0SoN9MWc6u1o
TLSH
T1B0473A122646D49CC099C879C7678B268A2C30E73FA7B9EFC0F451252B79DBC5B39235
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\dxil.dll
Size 1.4MB
SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
MD5 c9a7241ce83437d54a82522aa0b54575
SHA1 acff69399c4f17c4f20f70560fb89a9163d2b486
SHA512 8ad8c77a2368e363ad16cc1f9b3a0e4ac15634722340bdebb0e4957e7e117faaf36db2d6e08cb49127849b64844a75ebdd7e19b3f8b7e1f4412fb0066dce1ad5
SSDEEP 24576:YcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/2:YsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bX
TLSH
T109656D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\ffmpeg.dll
Size 2.9MB
SHA256 8b7cbc841fd42443cfa4011badb5cf6b9fb41a7a2c277ccbf8e0c321ae44af37
MD5 d417b751d8eb57c78a9d0813e0d4b77b
SHA1 2d4ab3f1898394e6067910c54e3287396bc55f0c
SHA512 205aa4e53f4b4461bec6cf8f9b528538c8baf283d1f701d656db1709f6addca577699400a8cbd6d2223b97a9321ec3bb09bd2369c3e29d89b32cece28ed02448
SSDEEP 49152:LhppXiAW075k/ZjSgbdzKKtBr4ZjB+JBlR9oMaLu1vj+Kd:LldVk/Zu+llaLu1v1
TLSH
T14BE5AE02F6D251EDD019C034979FA213F271780A4F20AAEF17A05A253F66FD86D7E768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\icudtl.dat
Size 10.4MB
SHA256 bd8c145abdf3f8383276ce01dfa4ae48709bef9fef1c0711eb7c3fab4f6eb7c2
MD5 0a7cbe8e902379fc03c5c6c7c08c7d3b
SHA1 18ff020331534d21f24d922d4da3c253668e44d8
SHA512 88b94c5d350c2022aa27481e3a5c6bc74dd13ed1f2157dec4219d9b847469f7191f6fdc7305f3d27533c69f146324da8fdefbd8acbd2081965e74e8926d1e9c9
SSDEEP 98304:1/cBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjndPj89o:1/cBhORok2HiXUxO/RJk3IWhlYntjdOo
TLSH
T180B62903A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\libEGL.dll
Size 463KB
SHA256 c459e2cf46578da98ba8955e94f29fde8001ba3f44197a3ec521a9c91b538e7c
MD5 829cb6ae36dafe9c34a5759854a1b1a0
SHA1 5fbb47b323b3ce28af1c207bd3de41fdf1bc9c88
SHA512 5c2f107cb70219b5325f1e6580a605d5625664b1dc92d61263661832f421a160684afa124955ff0c4de22a23cbe68022b16f9839c84aab5f15af4cb5ccaf1020
SSDEEP 12288:8PdPC2DvJ/pWfycv+1cbeMOOqOZCr9dLl9N:8PdP9tkre9OSL
TLSH
T1F4A48D15B3E549B9E07BD1348A178643EB71B4560B62FADF02A0D2393F77BE45A3A310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\libGLESv2.dll
Size 7.7MB
SHA256 39955886b88e2c2978c8472225430c497abf90b1fad906d7b3b6fdf581ce9ddf
MD5 8a80de690a776a235e8f9fb26c09842a
SHA1 01aca405228b479cb4f08c0bb71ec6ead3d8a4f3
SHA512 32cce9bbe08534b85c744d6dd9f11ff020cdf08abd1c7fbd2b8785c895765a42d337c62071ac1edbdb5334d9456bd19de348b98ae7e88a2ac42cec6fd6ccafea
SSDEEP 49152:ZXoDGosWTNp6jdQOQJAkPm9w03s2b/PnmfC1+lD5bSDtrmlieTeZ9DS3yZDn4THd:Z4y3j9vyaM8tMipnNc3XB15+oVfi
TLSH
T1DD867D03F69681D9C05DD2784B67A223FA34B8450724B6CF2AA457152F6AFF0EB3D724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\af.pak
Size 599KB
SHA256 e16a85aae42dd387971140f0bcea4ad9c25c5f1d06407e7e46cc549241db0d58
MD5 411d05115a910e8ea657d4cd5fbe565c
SHA1 d42e89a1f7cf6a6b4c584bb2255d25254de89a63
SHA512 a13987529ad4853364e34c6d1759fac4ce029bac5ac69008921e8f42c168b51acd049d744da81d7782818abdebae9da306cb9c55460a33352b169d3fb9a122c2
SSDEEP 12288:sFBSNPQ6tRGtAd9q+ZRwBgNYChF+plGnVbi4H2JynDNsmpiALjKrFozv2nImg02Y:80PftRGtAd9PZRwBgNYChF+plibi4H2h
TLSH
T141D41A0AEB91173D09A07697FB0845B7FB5DA26CC770B2BADDA982310966DFC10BD0D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\am.pak
Size 971KB
SHA256 03fa71456bbb5e88694a519adc8f8ec9ebfdaaf4ecd8f381343f15a1805e3afb
MD5 308ab1908d52d28abe8b24464fe87932
SHA1 589652c6631d35c75145e866bd4e1bd8807ba511
SHA512 f90aafd1f84cf5ef9cd9da8a5895a79e5c578fe79e0af0bea9a0e72f4f15d93ff89da12c3ccb94a6b0c9fc3f30777d738fd132da250b4f1f1401bad727feaa1a
SSDEEP 24576:DhJTx1X5t7hTCKPyaEVxsxHjnwvxehz+dIXV6sciy4VdeZtP9oPYOH+:Dho
TLSH
T126259A547EF9F7570F8E8A1994320E4E9594AE4652802C38C35AE3FC2B2DF1B4DDE219
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\ar.pak
Size 1.0MB
SHA256 e952c3a544f0b91cf26e91c8c7a763755cca9591aa915a9d3e63a6cf6daacf6a
MD5 b935c7b5d6dfd3d38f83e19aa54dc347
SHA1 a176593bac89f323633aae88bdc4582fb7cd9922
SHA512 c587ef4a945c0bff07a3b006b5d3129d83cb746c658bf3242c4c21ece44dca6f612fb34e5e091ee1f9842d4ce0393abe9409baaac30d67f30355651b42554b50
SSDEEP 12288:cwug4BndpLFB62Ga9mwj3o0oC5v4UGPEk82/SLZNj6EuDb6NPz:cwu2Er
TLSH
T151358BE21B2984720B56DF0FD1E23668E872BD23DB4BFC3124934A2156D7513E78E678
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\bg.pak
Size 1.1MB
SHA256 889c68ea8206027dcebd1835884eff52f53c59dfb00fa112c43a2fbb87083ce7
MD5 29b2a61caf2359cc199abd73b1e3b5e5
SHA1 f5544ae9be0a3a6109cbe799817488d56693bf97
SHA512 2da43202ac57258cad0711ef6e62dfbb724dc93569fc63c140bfa2e8f0b4dcb1e1c28a3329c87416ae20d549c8032aecb36172de917e09fc79c2cadc16a66524
SSDEEP 24576:CBZjpWclYLYAgCzQkECRUPVb6nNo7j373ZKmiv3p1K4UfVDNiJw74uOVnaJcuSMQ:YjpWclYLYAmUUPVb6nNo7j373ZKmy3pt
TLSH
T1C93525A15B9A689F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\bn.pak
Size 1.4MB
SHA256 1b3cb0d1ac1627b51b3a208f3f29864bf415bff3d1d0d5a8b84e7ae4ab2455b4
MD5 b7afebd1d2e061a3e4344b2d0399a39c
SHA1 01a8f4a891830e1d7386ff37aab124c76436c1a3
SHA512 1321225bce9bcb938baee4a395a614fe336b747b4991304a6a93ab3f13ce3873c25cd0963f3f031ea9ee6ff1b1544ec8dedd5823af9021620ba92f4a347c71ee
SSDEEP 3072:8ad9I5bJbm2k5vCXik1HJvIGB7AlUVOlm2COUzhZygYfj8tRq+vyQZWUBbXUOQS1:8a34i2I6/1pvLFAayQZWUBbFwdTM
TLSH
T1B965EF209C6E81B6A8C5CDC9434C6370C523AE9B9B61F74DDC17A15938ADC3C8CADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\ca.pak
Size 675KB
SHA256 5da35ba1fb3132d4725bb32d1b1c2a5703ac86effb7ef294470b73887e27b663
MD5 27cb284465711680b09e7661f512d779
SHA1 b3cd7d9c445cd5c04ef506e31a7be69c3f67dd28
SHA512 be518bddea2e9db8d4bf660c7e6fe2f8a2a4df1a6bf82e15033dd32064069941b342cf7c654af1baac727151f9af54804af15cb3ce0675e6c65653a9dc989b85
SSDEEP 12288:hszZex6C4L77IO4yCiX761pFa8H5PsFBN3Mw2juwwPR9zejm0t3l76FTZKmwCRYt:WzZ06CO0wlpLn618IM0ahfilziQ
TLSH
T1B4E4F7239BC93B7704D2330EFB46C257B48CA9847A16D254F4AE1B1622CCADCD673AD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\cs.pak
Size 701KB
SHA256 0d6a7d8bb08c1c6b8a4735fb364bf7b81b66797e48ea34ef06f78c9d87d15f26
MD5 4b488c0beb8ce3fb673d8c707e318f8d
SHA1 c017c430463eea4073c9f2d5a79b133c1cede2cd
SHA512 20a0d2447b5e338aa4a3b46868fc5f5112420ccaad7cb0d3430eca288af47742744062a0db5b295f869e421cff8c427cc8593514715bc10c3ba7c094f5305e34
SSDEEP 6144:u/GB0eic2GSTEXtFefunUW5A1SBJAxM0zBXiZ8OvJSBsx8QJ:u/GWVc2XTqnUW5A1AGzBXiZ8OvJSa
TLSH
T1A1E4492EEEA36425584002487FBE4128BD5EC3140B6EE5AB7CCF9D912575B7E8EF0D48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\da.pak
Size 629KB
SHA256 73e7ff20f472675b6fe5be87535563ea19fda72dddc64d5e0f068211dfee3703
MD5 d2271c586d905ca9741a81851aedaae9
SHA1 6c3ca3dbda2c5fa02098e6c3a720ffea560043a2
SHA512 5bb1dbed13ac82bddad3d96ab58976013010868010a71df522f7561b7addecdfa128999c2466c303620d35dccfa63198b319b69bd6f2cb97e9b2fa0431f3f745
SSDEEP 6144:X0QwYpnJJzVmF/QZ5LnhXGej9VZIE/9lxbuwlpqJw1obFwdSpI22VBqns/HTed41:vZRJhVxKd2j2sehQ
TLSH
T1C8D46B4BDD9C732FD9A94729F311CDA7EB6D543CC684264F64D8943A09CBC6092BE2C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\de.pak
Size 676KB
SHA256 99c50acbe4dca9edde03189ed793f8d6f000793f0938320a39370a11855544f4
MD5 91697335cee40e1f917c261efd6a5655
SHA1 1ed5cb348c7ea7ef152a6fb627d0466f12d7cd01
SHA512 971c35f43f449856f4337ef9efc462dd20fad4895e46bd6615fa1ed3ca3b778a3aeb38c0fee85c8bb9f89bde6a067e4c623099b249f432d0c027970e5666a50a
SSDEEP 6144:ntzJI3vPcGK+bsNU3K7UpRhJ8gPaF4OQwEUYe+VD9JOJAHVDxmzf1jTysUoYMRe2:tz3/U3K7UpRAgPaVhi9JOzbZ1UbyqC0O
TLSH
T123E40713AEDB625EC786B3657701CDB77B19E36FC342312B84DDD02B650B5B282AC522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\el.pak
Size 1.2MB
SHA256 e580ee2585ae5f5e9d3cc874c2f1b3773861db3493ae7c08d5c1a3bd4bacbc66
MD5 24ab23c4f5996aaabb3beea75373281f
SHA1 5b9303b174bc7e5b679dd39cb1001e0e7b4b92a8
SHA512 255b4b0b16c9ac83fb003b1fd114eef80745262dd9b4eb54666b6bdb42962fcf504030c9e2b0e93825c7162c5f8d1ab21ee2ab5fd0a4d910c5c46b912a3c7eb4
SSDEEP 24576:KP+vedSFbrxq539bk2t/ZucYzJXDsS4km7dq7z2HS5gLL0CxNAAyKGyjYHvydIV4:iUedSFbrxq539bk2t/ZucYzJXDsS4kmt
TLSH
T1B645CFEFB4582DED8046950785D8B07C2BC66D6CE749CBD86229CB60BDFC0719A22D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\en-GB.pak
Size 546KB
SHA256 bc3c6c433ad7fa76df796fd37d413889be6d2e2759d54680dc3549a0b1bd99f9
MD5 b7f6f29e7d3c44aa6950ef6f80bd8126
SHA1 f1e8e63339f19b4df3f33c34ea2c166227dde55b
SHA512 7975996789f309549dab02bf37b924fdbce8435ed21a98672c9e5182ed90f090441525777ddad698f0eb04fd275e0357e99b23f1ee5891970d6f95ce701935cf
SSDEEP 6144:Uu4orq78wgHJtqsOZxhLREtHZEso1+eMP9hhRbyfaY1KLOcyDtBcARp3:UuKKHJt/OZxhLzMHhRbRmD9
TLSH
T1F3C44D1FF744126A059311A2BB0AA5A2FF23D07CB35112667CBD811C33B6766C27B7E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\en-US.pak
Size 552KB
SHA256 39d605d22eb267d68ea4268d5e2a38a88ec0e2ed6dec23395a7da47f99c58184
MD5 6ca6befe394b0381fbe963e0306c4578
SHA1 349d8f49234ff59a51c061774001f9370440f0bd
SHA512 58de10a833c524a9fe2d9c1cbb74165c33d775340dcddeb15ffca802b6ce42da774b2eb693763c26b89c03bed8e77846d0f865fb78a3b9d0a583a5b4eff94377
SSDEEP 6144:bgfE5yjS94zmjiDHfJTO6fU3h4QMP9hhbRrfaY+M38SEqjangts/3hwj:bgfw2euHfJMMnhbRT3j0wj
TLSH
T1D6C43D1FF744122A059352A2BF0995A2FF32D06CA35112663CBD812C3377B66D2B76F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\es-419.pak
Size 666KB
SHA256 7a30d5e3ae178d15384cd7fff6aea467fa938c6261cab11fa870a3dff84e4df8
MD5 8ac18f490be8168c631241cfd79fe162
SHA1 345a0afdaaa997a8e9d580124582eb106fc5d2d2
SHA512 c27bd80220fdc245ed525491f0588486fbca71d50b60a42343649dd23d6c2b57baad167acd89766e9563a16dc046df689dc2d4c7d9d4dbde74703693087c04c5
SSDEEP 6144:H9XplNNTcqDLGYLEoZGGZvpOJU85AKNtIj6V:H9XplTFBnOJhAROV
TLSH
T15CE40926BAC81F6310E3A348B743D753E8D89545B408D29BE4EB876522CCF8CD967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\es.pak
Size 663KB
SHA256 7d92ead9e4168f52274e3729457adf50d896d0fde01aecd873d6e0122744f954
MD5 b29b68515c671d5dce2e645f4d3e6e2f
SHA1 42c439b2d239b8d58c8f0d780312333bd5549fd4
SHA512 6ffb83af86cd994fc4962635ad6b91e0555973e76756fa00f2cef8d66c20023ac323060e09ce13eb96f747b45e8ebe0ea197988cffbfdcc29422a28befe36cbe
SSDEEP 6144:HdBBpYzRqO8m1tgoh7g1Sv+5nf7hXQNj8jLkOhJkav+fE04U6PZCMd:HHYLhG1DhXej8jYAJXvcF4sy
TLSH
T1BFE4F626AACC1F6310E39349F743D753E8D49549B408D29BE8EB866621CCF8CC967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\et.pak
Size 605KB
SHA256 dad68aad8c36da532a58f018124d4182173b2589f6f8c44cdd3f7dbb5304ee68
MD5 be582abf409a25b9dfb4d0d44fc9b844
SHA1 89ae48fe5c4caee3677af7409642b1777dda20e0
SHA512 65935a931baa7b05dd9ad8c7933404076fa51068a4f8d04aed7ebe9c9e216ab73ba71c986d42e1d6c9623ec231028a7aa361e9c90a2fa77a43d15e670a05e89e
SSDEEP 6144:qyKP4qWF6dbOlcaBztDa+0HTwyW0unFaYX74zczkvmPOTQy8gXKxV1aXtCUQlqFN:3qGO8canOHTynFaYRv1adCU4qDP
TLSH
T144D43B42A27D771B242412F9E737E937DC9FD3D8B4000D9668964A1970EEF8C38B6B64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\fa.pak
Size 1002KB
SHA256 b88eb1d00a6bd70c969a44c57f2fce5760001d16713a43288595c2efd43c3247
MD5 3bf7904247fbf057e23a1b6291518ca0
SHA1 23d2a0adaa2393d235d08dd1fc4408e6770e476c
SHA512 ca50d70892665b788a10bf756428a8d2ce26d9324d997492924b39f69bb4b0197a4cef16c456f48df1563f76d2f7bf2759d492c19e4549521144c2517e21c303
SSDEEP 24576:zaN8u313uyqoz+sw2LsRmXnloThXtCfGk62Yha826JfiVi0MX44OqlUSkkI02CmP:zaH
TLSH
T15025B1956AAC9AB15747CA0341E33834C773EF12D349FE40ACB1076609A5B139B5FA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\fi.pak
Size 617KB
SHA256 cd1a5e8b30a1a0e8a35830174e66c89d21dde97614a93749eedabd3731516f0d
MD5 bd2d069ed4fc70f3fa122ba4038e6d28
SHA1 43df32ece57b9b1ad111b42ee78cf1fbe3eb1a24
SHA512 aa50818be14870db11e2f2bc82f3a5e844cfa3b5b8e32e95ebdfc4558bb3677d79df485e53f3291eb18e3f42d9c1a1ce98931167964dc80ec7d5afce21eb50c3
SSDEEP 6144:KMmpiNYFIO19cw8OX5FemSDjpgaBujPGOEmHNzXaujLr794pLvyIfp3WaSLfD+Ee:vlm193RXQAXao4pL6Ifp3WamZIR/
TLSH
T1B7D46E915215C32237C8D29E7DB0903EF5E5E39C8C284D96E843CBD849EE9887D7276E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\fil.pak
Size 698KB
SHA256 6c86424d7415a92456ebf6d7a17b1e4cfcfb25da833a4c5377c502c24e335ff8
MD5 d43bb8c55c49dcbb02171b9407b58718
SHA1 826f3e2501277afd2eb3dee0cb095bf95e22fb1d
SHA512 74740b4680a6ed107f2941c2a037e00420c88862d1015be7cd7b4ba9f18b066b568475d5ec5acc1b764e937ecc1e387b31395fc279e8502e74fe4d0250fd47ad
SSDEEP 6144:GXRnQgd3nGI/haDQ4rXSg+8l04pdIaOvzP3YoZHA1rIYW:eQgd3nQUvr
TLSH
T188E4C615B3402748DBC352E92260682F6AE564BC3F81786E4FFF26973BA7CD5D270582
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\fr.pak
Size 720KB
SHA256 92fdf24ee5cd7977dae8940c092f743683278432a7dd68a52a5c069f32f60d7a
MD5 d616bf97d7df878e040bb864571c096a
SHA1 9a2a8d5ef54f05ebdedec96512ed62017a8ce2e5
SHA512 b938268560801e4219ae0a9ebadda7a6d67189d299841980bb6a92c8925a3fde75855f79ecd1c7648453f3e82281d3413c84bc9487ec90987499765d14a0381f
SSDEEP 12288:J5Rjr7vwq7OZL/FW84VGbcZ+jGiu06Qua6gV58hZmvTeh0/3SJYnYm8jw2wDVN1t:xrIul6V887Bf
TLSH
T13DF4F76FB9C431CB19C602B7FB16D663DD348248F215E340D89F4296129A8ECD39F6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\gu.pak
Size 1.4MB
SHA256 dae744e959d1a536cd51e925f2aa80b7ba23f981a989368b9b6f87df03194627
MD5 0e078b59a2df5890946d37ac3a1efbc2
SHA1 1190e44e6b9f73c371fe34ea0154b64a308e0cff
SHA512 300a7e2df2937a80b85f7fa4bc09594f6d927e87b083a31936a6c4c6d91a25657e6d44efa160cca34f83df02e708ca7245496d44ba53bcd260374ba12e1d1149
SSDEEP 3072:dxAPPr64ZwyJfeCW6Lo9PjAwREJKVMjNiT7llj63rA8lDcSi5NnW0WbQoAzl/ELg:vAPPr6Ct5eiLyws/e1CL1KsoK
TLSH
T1456518D0D3B9F07119DA9F7E819E512086699343D57E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\he.pak
Size 877KB
SHA256 fc4011bf24266691363cfecd0a0c233f3197c9706bb0c5ede73cbc25a8f71e97
MD5 77157e513b3c9cfa81f4ecb6b885c22b
SHA1 96568e40d015ff803a5832168713e966c86785b1
SHA512 f73b6792d2d0c9e9dabd97767a92253069115e6fa0304c36c26bb095dff208dbe1ab441635f35cda78c27cde8c538d8c4949aedcdac079e2a164efdaecb401d8
SSDEEP 12288:CCqfwQzah/a1A2cOT4E2xu/rwZ03ZWq+/TBNgsIaQArrXRQeQCajvIzf6Wa/A5yR:tme67
TLSH
T1D61599C4B2E452255131A9C39FA9FA285FF3CAB53CA27512CB18526CAC774F0BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\hi.pak
Size 1.5MB
SHA256 0f78af66fa88302da0e1241175abe0291512c32521792adab5efd67c6196fca5
MD5 3e5018d339c48041b7ddbce8eb80d8aa
SHA1 6c119143ead949afc99573067582ced64cf67747
SHA512 7ce595bbed0ed442e3d0d23453ecd194b6e9bb72a56327fdbc067cb0890a3be87d8c73f5e9b48864c21c19dfda27bd5435bfed0bf3c5060f314bef464abf93a4
SSDEEP 3072:xvEvB3zOZwZQUod7xfg6T8opnIl8S9dtRV/B90ZV1dhuBlqvXoCDtDWepTnPs4fT:xsxPZor45SnG8SVj3D46SdE3W
TLSH
T1C065040CEBBEF3B55DEC3C8A32890D37D59D3674A3E5521348D5B3DB9844CB8146A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\hr.pak
Size 674KB
SHA256 24c82c47f0bd227e91a83a5d3f929ba5f557a0a262b3b7293f7941faa3b45941
MD5 8428ee4bc0ea8f9e36630dd7d1b2a421
SHA1 ab34ee3e7fa97f67267d630f63d3d002cc74d539
SHA512 1d87d7b89a60dc1d8d8e403f5f2d6e5ed78ef1020080a575e7f43d80ace2b88f87e66b0fda25abf03eaa52b018a8d41d338d1651abce8d35a58579218f78032c
SSDEEP 6144:uygHJQFNTr162niLRbMr+EnxXVOWuynptu:uyKmFZrw2iqtzO30u
TLSH
T139E42B7DBEF3570A0897B24AEFAA43547DBE08DCE56497B7684F522E0003F4C6AB4149
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\hu.pak
Size 720KB
SHA256 0bed3bc4d3258dbbcdfd4a2479c666d35aa2eb2794127c7135067f650bb50455
MD5 db5c9b275da267ac1503c827201eb9a2
SHA1 610301dbcb49011e5a9fac320e50b330eedbce36
SHA512 c70ef69c4aef5af45e1e5728bcb8bfa57897214df2a9d5f8dd681383210fdf4e6e85040f97c0eef1dfcabd1b9810b601db23d197055648a0ab2bec3ae6ba581c
SSDEEP 6144:WvGJQ8M2gAUZyrT6qUJHORxGXlH2N0l/gxAPIpau185n85Z49KadYhNTPQsMKcxq:WvSQ8MDAUxWAo85n83PEkwrWb
TLSH
T1BFF44BBB93769449BC6C179778643F16592E481BAB2B31FB2883846D34A178D0DC3CDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\id.pak
Size 597KB
SHA256 bb63434850472affa79247d4b79465b89fc4ebd290478015e88d04be55d4c276
MD5 962507562e2e0e7ef1c43100c5c4ccf9
SHA1 f9fadb5ca4840527cd698775d9df5fe74a2f6c58
SHA512 a542baf2aafbbe121862b54a77abeff68aae2d1efbb975282169692d29f9b708871367b185256185806a5a5c63d852b6668f225918450f6ede7a6ce658160116
SSDEEP 6144:0Z/W/FKiCP8KYDFO8Nk0D7MmVVgRffTTFjlFD0mBWVnN6FLr668WhB4Tm2iTvP/x:0Z/MaH0DLedTFjlFgmMVG66Zvp
TLSH
T1E7D4E8632ECD310C094842D5F2DEA91E7CCE233BAF05B76E8E348F7055A67686716B94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\it.pak
Size 653KB
SHA256 a4990034b1e74404b83e9578016ff7fd81468f62ecfde48bec4e3a05df782b40
MD5 df2908f8e2fb21ae599bb49a8464e192
SHA1 653e0b9901c46a2a2ef6b4c0e91cdd30f1b71737
SHA512 1379690c3538cc710cf6682b5a5a4f8f7fdfb5fd11052d3b162a0f57c1f0c1b013dd5173fa20dda2c63429aa519cfad7e1ee2c177b8b2ea90c8b17b62e4422d7
SSDEEP 6144:rItwtMDvNddZhTaikwO72NTaUcSbmCfEs61ltUVbjhOebaQcrCqpzSj9f3wXYBb1:rwwtov1ZhZ/8yEzfjaO285lLpQ
TLSH
T106E41C3AA9D6212559876359E611F085FBAEFCCCFA51721CC99B031C22CFE44F1ACA47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\ja.pak
Size 796KB
SHA256 61000f96276079f74db0fde6b8294324811f271fee2835917c42312ac9b7b0b5
MD5 109e56bd95b0d88c437caee4b8fa6cea
SHA1 1bcf7c4b3cad23a7e3a15e6537eccbde1263bfb5
SHA512 c3779957c2e282164e78f26e4dd15c2a5e93839b8b8d3f61f371001c045447d42261df1c30faa83d444a07d121ad0503f9f099ad3dcf67c25433767269679a9f
SSDEEP 6144:052AsydpHIQHM5SinZOQ2J/iDqQbtanKj9rsVJ:A2dGpHxHMlnZOQ2J/EqWCKj9K
TLSH
T178053F7CE3C969369D6153A22C4E36E17506AC5BFCA23A3A443DC074BD70BCEE415AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\kn.pak
Size 1.6MB
SHA256 41a2028199741a4827bc470772aead42276cf630aad61e344191d4708cff6bb0
MD5 c5309dbb3624ee5c0a4bf88ea3d89665
SHA1 34918b2660263f9ef5487b2e7d0a30819e65949e
SHA512 4d08804c6d142b6b60e8f56b7cb79f0672c9339ffa5e95b3119838bd18999c5222a7e535d257ae69fd4729d817999d77d5dacf187827a0a829c8cfb7ee597c1d
SSDEEP 12288:vf0ICTDzVSBSWvaKgfLb4VVR7o7WR2Mn40WWF5J:w/MF
TLSH
T1CF75CD18ADBA7D311BD5006B24EC643ECFF16BE29CA907D2F4DDD7802C66C6A90825DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\ko.pak
Size 677KB
SHA256 2d77980cb8d944305ed6b2dd4413862e205bce2de4b3a1eedacfc91e1836999f
MD5 93dc2f69035c809474ba9ad8f38442bf
SHA1 a14e7f7031461732960ae5c79bbd951f8eb2cfea
SHA512 b97d588f74eb6fdbbd0a8d69dfe561a2831119edf129d2e7f23f194155e0b78046f02a8d45a38c03389ea45dfa011d33f24be2abefdd39d2c83d449b3e461ea1
SSDEEP 12288:3Q8XUOgcpb+kIM1WNiPszcbifYj4ZGRyrDrIF1gwWOXCcIJ/xESJGBG1KLhwFqe8:7kyGIv1CE3GhwZ
TLSH
T1BAE4B5F23CDF63C91193CD82AEF4FA198382D976B7530294ED44CE449E145D7488AABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\lt.pak
Size 734KB
SHA256 541b0f03ed863ac8bfdb2fba2c0ae03bc27802ba99b9863eb0a950b705bc4f61
MD5 270592a799d8e8c42a17060b220bae02
SHA1 df6bab1ece078010cf2666be465627eaeabca5b0
SHA512 fafded7db89153f046bfec3163c75e5167aef14e7b1b1ae9d4c7213582dbc02f0c086808318b5b0b05075e55fa11a21a358330d5d60494ce8fe4046b261b03cc
SSDEEP 6144:EYucsDtuGMGvOBq9dlKhvH0TFxMl5sAWQMW7dDAoxaO9uYE8NpMenF6Si2IOH:ZsBuGMGmBq97MCUl2AvMWmshNp96StH
TLSH
T1A5F42C0069E3AEFB9A4467C981A4CA74DEFD50009727BC61ED69C78BC43BF4625A0F35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\lv.pak
Size 731KB
SHA256 2743e698bd3c862750967709049af14152babd32052fb0ee7e9901fa5acc6d48
MD5 d0b49175b30a34aec999fa072b9a4f40
SHA1 8e6670571b67b86e3b2cb58cef12a63dd6be42f1
SHA512 488b134d530be2f9fbd17d0cd7f681db1a936f83afaaa1f16a178be4d1d1da875c37faeb3f837e52f6459806a6bfd157d191fc8499c78d1c132d9bba776a7f0f
SSDEEP 12288:7HNKczN9WUEaQhcGjA+rB4mnfchTeRtZ+tv:7tXzN9WUEaQhcGjAaB4mnfc+twtv
TLSH
T138F43A959AC68FAA4E904DCB7336D133A8CCD740EE07E112ED7D8B3A550F52422B5EE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\ml.pak
Size 1.6MB
SHA256 364e991b719876b6491bd678fa2b1303e69fca5014ea83e885ca6a5775cf1c42
MD5 515c8d4e03d306364fafb4b1d728f5c8
SHA1 cb931cf5b852e9cebe7dcdddadacbf47ceb6190a
SHA512 930222a16f757af637348942487c48583618adca5a2f57a72ae695062b8523207ad102e3033e0c0b2eb90ed0918d2e37b6db9da405b78ab1b0cdd849b3efd5d7
SSDEEP 24576:en8tgiEIL/oZAuuxyYl+9y9XBkx/etz25KfijHeBYJzXsD+v2riTD3QahWjW3y:Us
TLSH
T181859D57A436CD3B0FD002267B4E2FABCD5B9F9140AF668B5869F2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\mr.pak
Size 1.3MB
SHA256 a68fb1c2ee67eaf807186571278da7c78bc782ed06607e0c6822ac3c71cef9cd
MD5 5fd2d503a50f1e297a023caf33584126
SHA1 4de168303011a4e09c91cbf13e3bb751873db288
SHA512 74c742f8a0297bc19449897eb82c40edcea10a52efbf3d7b027fb9a6ed99fa9e30a4e11e780cfcdeef328d156fe0b4aaf51207b867bac9c873b767f7daefe9a5
SSDEEP 6144:c6alWu3F9axR2Rn6gghagv2iiWUT3maPIaKNCsS3mvycy6:cvJNRQCJwaKNCsS3mqcy6
TLSH
T1B765D24DF77AF3685DACBC8E36540D3BD8FD21B1C3E9925648E2B3E74884CB401596A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\ms.pak
Size 629KB
SHA256 0e73c1e883e1ed27b0f110d087480880f4f4369c01736ec616174dde24553b1b
MD5 7e9af99c256423fa361e308c40d3d988
SHA1 b32c79a7a9bb6da5dcd5b9573f1ee3abf3b44853
SHA512 19caebbbf4fe596968bb458cb5cb909bd8b7208aac9d1905d56760befb6afe096c15218852631bd0845ba6b69f6636e2285ad4bbb7b2f687c60e25887734ef6e
SSDEEP 6144:dpmBQMQCtE06SEhJHuqwvhx8cNL6l/nmJUlECCn9kk:Spg0SHuqwvDIXlE1
TLSH
T17DD4C6579EDE3118085843D9E2DEA91B3CDD3332B705AB2B4DB08FB0166E7A53315B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\nb.pak
Size 601KB
SHA256 b0597a6739575752dd29727c94c22449551f50f5bcaf7f83b49a536ebf1a28ad
MD5 69d088a1ff2ad430d1be0a5bed005cae
SHA1 9f3a6a3f344c4dcfd597b5d29c8b7cd8ec57c6bf
SHA512 261440b196b99b2a98bacd23b3307880723ffc36ca39d4a3bb41ee3fc60fef81290fb328ddb24d4f8281584ae80a0e4839355266dbb1e68de00a08a9ae3ac55c
SSDEEP 12288:2idTjCXshQpLJ/Op7fGQH4yDcc355Blxuj2GO3:2D5LX9yDccp5BbBx
TLSH
T110D40883EE86B72EF6A442A4F118855B9B7D943CCE98199B54C8D63E0CC7EF051BE1C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\nl.pak
Size 626KB
SHA256 6c05ab0a374d00b5c66788458ff7def7871fbf66cc1f629868529bfebb2911c1
MD5 7a37275ecc27af330dfb385d1fd34f13
SHA1 cedfffe587edd998e3085c55574e21ee9a0c7f84
SHA512 df9048e74933467f9d74d966ef428843e3ff10cbf886bc24c84a46a38a8b69790743bf5827df9609c64bc9ac0d5d4825fcbfdc8371e86fa453d666900f276bc7
SSDEEP 12288:dC+E3oleSlbJWQusgUe5Fg73+u9F8yRv9qH2GcJ:dLE3oleSlbJWQusgUV3+u9+yRFqH2G0
TLSH
T10FD4F907AC8E253E59C0A349FA098FBBBF1ED22CC26CE67D94EDD5341443F6841AD589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\pl.pak
Size 700KB
SHA256 b593df8af8325210acab036337f261e59c43140a8bb982587e7a73d65ac59c81
MD5 893b275d382e8612fa7619b2b8f8b93f
SHA1 215c5e7ecf714709dc09706b2c1e6f634e2aee92
SHA512 6189dc4706e7ac50e9b656f448eaf3d1350886663cfce340e6ab39cfeb87a184a29ccda51d2a5691fa4141f4f886768c03b1717753f87358073b0c23271626b2
SSDEEP 12288:DDANISKEG2tfQfuzSJQbZwbrfEPHCUdPe3m0UJRMAmo1QhlhNR6pol4WMd:DDUIgGLfQRMQ1Qh/w
TLSH
T15EE44B0E56E58A4E8CA008E6F6E70B7CACEDC808F508D35FE46F4526715B19FC9BE584
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\pt-BR.pak
Size 657KB
SHA256 a7401824b914d20565e6698d98851405820dcf2d639aec762b65bdae383cd94e
MD5 df9406204f5d755fb540cba99ba25e31
SHA1 9827c3d20f3a5860b21cdbeacbd2023cc9905411
SHA512 afdbb778fdcb89e93eb4babe19ce0d6e7348669ceedb5ad82c0a5de676e62a7cb988dac5bae5eb4d5b9837be361fa64d4c84c65680125b2c94a23f052a806793
SSDEEP 6144:44cmf7VDDy/3Jjg2RP21NBXBLE2aBTNyO3pETy7oGnsRoU1bb:1cM23zlBzEJWsR31P
TLSH
T193E42B2E6ECA136604225350774EEB47E5890645FE0ACA87DCEF4F06A3DDE40D933BA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\pt-PT.pak
Size 660KB
SHA256 3ed3bfbb85bd4aab260dd18e63b591dc777a5768110d96662e60559eac77bb4b
MD5 0cb9986905611dd948d638bdd709db95
SHA1 3a49661205c1947b124a149029e327c231ceb16b
SHA512 cdd7916353ba201773ce278fccc146dcd43cf5afc5de55e2b2895d9ab1ce1bebcee1ced5ec4416e670f83913908cffe8fa2eab0e52a8329ac1e4d58d2c1a04c9
SSDEEP 6144:84s3U/yE4ILsbFbQq22uJCieJVJJxhLw/5NXWf8YlnVwRYhSRhB:ZZ/yE4OsbF72JOlnV5hSRn
TLSH
T13EE4192C6EDA136605135341770ADB43EAC86645F80ACB87C9EF0B4272CDF94D6B7B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\ro.pak
Size 685KB
SHA256 e835583f8d95853fabebfea1c9ddd6a5569826d99ae2234a4e1dabc1fe483057
MD5 7d1bfb0f49ddbd730efdb618d5d1e576
SHA1 dcc28c1422dbcc3c8f5e2d19de6757014787dbeb
SHA512 d8bd661f1ff97809d0cb487e30adedcb9f8f4a39803facf6e93ef2ffdf4f78ca462c5ccbc96a08138060eb7c80d7627877d5c6ab6ee7d48fd06ece6f5ed6ab95
SSDEEP 6144:8trc50fIcVbtI5qIpanwM53WPBJfGgUyiirQkAarGycOBCdK5w3/s2osWL/FrMY:Uo0f9b2Xa153WPBFsyiwKcCE5eosY/OY
TLSH
T12EE43C23A1C81A972E5152B6B73924D3EC8E105DF640E28DA4DEC97910CDDDF852EECB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\ru.pak
Size 1.1MB
SHA256 6a098a4df1813c73c9f72da68bb7a956e889132d2ebdb536c2555dfa62d2c21d
MD5 0c4710c28bf1394fa26a1e82fb6b22af
SHA1 4ab783d67105d0d02cc64fbdf8352e5030567f1d
SHA512 30d7b1e985fa8652a4c4ee4bc40b7b2a8fd9f646f6ec1e30751b50e94c2f578dc291b35774a26b271b5bda8af7e339204c991fe5fac93b60a2d434918533c956
SSDEEP 12288:VfQeRo4Ye7sObzJ9sF8aTj+ZQF6HzW/ZqSvYsqCJKkEj/R3Q8N5X4hNYHnVO3j/5:dVo59
TLSH
T140357760669E64DE1101F01BDD08BE0D3CEB45FE3FAAA35219A42D7F35F2024C67E65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\sk.pak
Size 712KB
SHA256 86b15f91b88269066a8b9974472cd0e10bbba6985a37230ef98f2a4ca75111f3
MD5 18e83f5079d19f2937da8a689feeb691
SHA1 40844bf077948c7768f9a2369d3c20c5684b8b49
SHA512 a2bffeb33725ed931231812a58c9bfcbae37f6f3b9ce02840890469fba4659574185927ef07305f36469bc5e4441905ea98a155cfa02d433dc0ce8bbdfd6748d
SSDEEP 12288:3m8LTL+3HeQWAIfOBoiIJiSnsbYEXlJpTjsxt9wB:3mxOQXBTYIYtaB
TLSH
T1E5F45D7FDBE7181E8E8D0148FFEA7110FDAE8650864EB0A6944F364714E26EDC9B4E44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\sl.pak
Size 682KB
SHA256 6ad9e4479833aae833be42fd27c355d5f5106e35ec46d7358c8913ec86265ab0
MD5 9b4d841539551f1782e6cbf73c792fe1
SHA1 d76380fbc89092b80c9efb1975a19a6dfbc46284
SHA512 bdb5b0e27151ccf34c0446ade064c50cb3962d832fbf571e524a96209825ff7bbe4a4d838ef1e4fd551b227afe836213fa276b797c607d964ce74e898a35fee6
SSDEEP 12288:D3hxqhJ8rZcB2KDR4gSWHFxJi/fzxMJql/aA:txqr8rI4g9HBi/fzxM2
TLSH
T1D4E42B397AA79E0F0C9AB2CEFEA206107FDC044CD251E6A1FC4F336A5415A3827BD595
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\sr.pak
Size 1.0MB
SHA256 e8e42e99d233acf6906b52f5d1241ab13775d81b715fd2359558efb1fe3cbb5f
MD5 db6b9c16ff6fe2d3d0d79a3dfe3d15ea
SHA1 5300053b6cd13df2cf463ae4dd615a27ea679a46
SHA512 f77121c34b2af6971d4b375a4c3e1c838712c71ef0fb8bbf01b812c71d26131739f30803546521f5be70e6558eee7246b168847c349c779072902ae44aebca43
SSDEEP 12288:Kfp/AD8MtpmIMdoS0dRnCY1i4WFJKQpMsh1PCoxVfP37VuuJH/k/p:g6ojHCUa
TLSH
T1FC3556B19B9E64DB0501F41BD808BE4A3DAF41FE3FAB975211601DBD34E10B847B929E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\sv.pak
Size 609KB
SHA256 6370cc715d38e8cb519ae7891b779aca1470d9e3f893893f9badcf8052ea6def
MD5 fbe437304e8ee305feb997f0d3fc3dae
SHA1 1850991657b1d90e2c46f7e2e3a4592a66b26b42
SHA512 2d517035ecc1a0abaa0d638cb01d2eac219a15f6527381db02e3d1a9f4ff53a2d39a8d13ec8620436e1d33419a9223ed8996050b19bae25d5e990226103be6c0
SSDEEP 6144:HWbaCg/E9mV2FRgt0jf4Ywn1oFVFBwUxqxfQ9luSwcLkRRFczd5RtGmIe37Mgmag:HWLgc82jRbVXxJTi8kT
TLSH
T1A7D40B438A10F526FA72530DF608115B0AEDE25CE7F2958EB8D9883DAD8BD5805FF247
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\sw.pak
Size 644KB
SHA256 4364411b30c18975b70182a61b6d4f2866913633acaabc849b67807553cab0ca
MD5 6fc2db65a02ca0a42802bbf8768321ef
SHA1 694108c06be787765a48e32ac3825b31dc5f7d30
SHA512 ba6ebaec4462f380a24ef89cae7cde572e3b44b53e662e4d159f49c4c8bad43bd435a17b5a463673476bdc36129a687980b58bc2aa6f141cd336362087aebe16
SSDEEP 12288:OZArxGOuexGj2qjOWd9rGIqg5OmedqUBjRdpgaywd+cbiEpSLjGJFGSE47oib/4B:OSrxZXFCiqBl
TLSH
T125E4D6629C71D1191233518603DCFF732BDCED9C692B29935A46BF0F218F88C56ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\ta.pak
Size 1.6MB
SHA256 3e32e86952c9bbf35625f8842970cab653613894b8f6ae7a9130eb34334bdf32
MD5 0aa9933b34fc7825b68883bd85a5b872
SHA1 ad4dffd20ccb39d070e88c6fd8b8aa91a1a7c0a3
SHA512 288738c1d2c0ed029eb823926e6ae3e6a4cac6d30ad52b9836bbab6bd1af16208b0613a60746b54218c1a108b7bc9a27505aef8d7d2180d7afdc370fb153b181
SSDEEP 6144:yNLD6HVSek5rKGPGKqatRoHtm1vYpiMyB:oD8EKGpqdtm1vYpiMyB
TLSH
T1C2750BCE923EEE890F93288F0319536912986155C07BE3A67C766E1198ECC5DDF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\te.pak
Size 1.5MB
SHA256 cc83c58f09a7830829a8c4ad3deee97f87003ebe553844945b7800c9ea6f6666
MD5 29c46526d6312ef8b6423bd32a271c12
SHA1 642580303137c56dce6af36197e74dea1e4c8d1f
SHA512 ea38cbe5f9ba9d248063d1af3a371855af01d45dbe5e01f00eb49dc60d5388283ba52595409daaf02072df40480a59454cd76040e3dc275c4fec72c862d2c553
SSDEEP 12288:voqZXjx7MZKNby4cE1SF602ZLvgIC8ymoQRT51bD+52CMlRWmB6PS3p1Fqzh/IfV:ZZXjPwKkcXx
TLSH
T1957592023A6AD310DBE60273752CF66C49781B8161D6732C1EAFA357EB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\th.pak
Size 1.3MB
SHA256 a413ab6322a4d65e013c167426ed26ab0eeffce5dbcc349e3338bff061f369dc
MD5 caa319fc889023e0b8fae2d2e678873b
SHA1 9cba745ab0c5adde6edef37568ca3b2fc8562708
SHA512 66efa975a4fc66fde1c396b749281efc32c27dd2e4d64d2ffb19d45f0dc00b351a678cdcf194c3aab4753ceeb4184066b612b9737ab9356b5770666456561b19
SSDEEP 12288:+nQCvN9LyZYAbzALaBTs6ouhCQskJUsewPsO5eXwpbDFDS6Sud2mKHlJjMP3ysoz:FjsV
TLSH
T150554BB37247DDD479441B5B262A7789672DAE693F73F8E00089215A73F071A8422EF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\tr.pak
Size 656KB
SHA256 530a771c8d66c89aea81f094fc4cecf16ddc5e9eb617afa2edbc5250210ad20d
MD5 89de9c73b3dd7787cda6deaf8cb67d5c
SHA1 1fd254fa91201f327b755e02fd4c5d5f4d1b5522
SHA512 f2a64a8c2eb3ed0b2c83a22b56902cb4d93d49ae5f34e75df13b887f4ebd39b40796de3e66acf5ab3dbf6085f20bfeb4d3e334594befed2ff2beac437f8409f6
SSDEEP 12288:e5kjUhwX6EZWaQGHz6sgwhqlZFIgGaI9drH4k:e+jUhQYBI914k
TLSH
T1B1E4E98178EF282C8BB9278FD6E90666F89F0766B331F4469B168636774535703E360C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\uk.pak
Size 1.1MB
SHA256 fcf34b72b374f8f41cf630ee6e9a690d15673b0867e90f93268eede8364d4a88
MD5 f0dbfbfb84812c918855398836cd7269
SHA1 86c026aa4af639eb3d4fec7e55b49f78b30352a0
SHA512 d821cdb0d0c6e80d924a12702707322fc7c10b1dd8d86a2b85315dc3465b24d0215ec7b24dbb5a3d897fdc026c2bba55c869e1910e9ae7dbca5f2b1a2873c911
SSDEEP 12288:0yq+4ptx+1+QKjbjIrwk2zeRQUhuHsSr+UCnJSB88QxBCSOo5NndaA6QGqz8WuK0:h4pDY8Wg
TLSH
T1454599A19AAD54DF0105F05BE94C7A0D7DA740FE7FA6871625A43DBF38F20248A3C35A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\ur.pak
Size 986KB
SHA256 043af5d35bbfc218c295d97367e2d433faf2a141a98792e2cafaba16b4bc171c
MD5 f4e8908581af3f4be249a0c4ec0fef91
SHA1 ffb12634424814db67d77390e18a30203d71112a
SHA512 855d2e20868f3ce246804af084f66d294ae4e6f611efc66d26d0d2ea20d3d2b82d098426227345783440723608f63f0e0c5df484c6c8872809ffa71fa370f1eb
SSDEEP 12288:VwUQxuDDy8PLDLqtdQQS6daywpMfvTFgfAE88GDOJdeQYrjwYjwadcJKwUluEcow:VwwxGUH
TLSH
T1D42500D2A6BC96B35A21D92780D33C34CB735F13D34AF285E52246C54E9A0139F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\vi.pak
Size 780KB
SHA256 e00e36e809b15f7251895efc63f05da6246326984d261963eea87e5dbce15239
MD5 6093799a945642a1a70736b6aaffaa07
SHA1 54b0ae09603faa8bda3fbf44255b787b2fe1c079
SHA512 f8010daee093ad294098dbb53a70eedf0283c13baddaaf62a2b10b7e5f7c02b57952ad25d5730ad8fdc6209268845e9a7bab6ba17a00ea7ae1c1429ef78fd7a9
SSDEEP 24576:u/Glzt+cZCVP4PMqow2sEwmC6lrTiOGNoq1ljx7:ngnTipT1ljV
TLSH
T12405855216D0302680AC553EC5CE540D6FCAE42FF7C1CFE56FE429787A221A46F25BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\zh-CN.pak
Size 558KB
SHA256 27d412caf44e0d206eb8afa5e3f846988fab8f8358f0f84f5260e2c671c3b619
MD5 bc3f373c6baaaedee5228d35a6304c23
SHA1 433a43deac6c98e669f233d3d0847ae62fcf1500
SHA512 4a468ad81044cecaadcef0e0baa5bc1f0e11740986c6a5a83332bbda0cac53534f38c8c7e0459bbdc4975ab1bf53fcc0a467c21ac84a54192ef3d30f3e482c72
SSDEEP 6144:4rw+XDMMU6NxlnE7FOUwr4LJyl029CTSIloUaYZDMG2Cy1xK1blE:aw+ze6N3ngOUVLJylDseJvYZDMey3V
TLSH
T128C47DA510F9BDEC004A90E13729A13D7C40724BF62BAF366ED248ED1BA5F9D0757A07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\locales\zh-TW.pak
Size 550KB
SHA256 852c7930e92eeb8bcec75a92ebae9253eeed0662e7e7508aaf4b7315a268cc17
MD5 21db3d5b27fc6b4ea565b5f5b52954d0
SHA1 537f8eea33d4893809f4e810772d8302d211c29d
SHA512 e7c57b14ccc5bc78c3daf68a03f5c65ab7cc345a29f3072921f1df3cbb669adaa9972e07445a411c7e3908cff69d585990ba59b111538f197167d9c9ba8f3b6a
SSDEEP 6144:rgva9mLXdNvm0cCDBz6JxVaMX2BulaNJ++SLHtD14Mtt9aUmQhiDqTZ:rgvXbTvZsVLraNJRSLHd5n
TLSH
T18AC46CB60CFBDBEF0901F484B7C9923BBC8B386DDD377636FC4918941E69A5809A1145
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\resources.pak
Size 6.8MB
SHA256 c4a2da02b8c54c3604c2b753fe6953d6f789c5460d0b9a7e41661a4c59628238
MD5 98fff44c71f48bbac0b59333c5d7598e
SHA1 ac0767fafb85eb0fe88076764f43701e17a19dba
SHA512 3abe132751ca3187594609c66f806293438c34efaf3be4292624c44b2f152d0a7133d83c4b592625f822e9fd8d64a31cc3c87f371123414eb2e0dce33028f96f
SSDEEP 196608:FGltJVCBOfgf7T9x3GBkrR9NK+EHB3wBy3cGiklILmzuLz:0b7CoO9x2BkrC1cGlCqSH
TLSH
T1D87633D772D64C0BCE44537A051D8B36C25EEF2825E6719285CCA29DDCACB2D5F82C3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\resources\app.asar
Size 44.0MB
SHA256 eba2e476582261d292c3478ef69a177dc24bc0ddd9781cbc09593e897cc2724e
MD5 88ff3a4d936e96cf35f3ba79a583a0d5
SHA1 abf22b4bef0902602d3398dca5c6bb7cae575de2
SHA512 36315df65f33593d37e08d3107db6eae0b83874de7f9b2aacf2a38a61903e46b4bec4d3aa5eeedd22824790f6b072b00d853a02c98c88cae0bd8e89c8f236d32
SSDEEP 393216:+X7lnhTUjIvpnrMD5Ok2Kk7ixSPsrcVkS/rL60Zrag1a:+X7lnhTUjIeD5OsF3wVNyaaqa
TLSH
T118A77C1126BB91370B1F2EB716CE0042AE39906F790494947F5C82587B94F29F3E6FB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\snapshot_blob.bin
Size 356KB
SHA256 67b1473834c011a3b4e7b3c395694de4d417415b432141278d5dd6a9726905dc
MD5 e3ff96237ecd9b7a307bfffa77c9edba
SHA1 a59664bd9ba10d117a78c14802d6fd37d47da427
SHA512 58095ca5d2cebd6dcab702f73c94b335edd9eb691eba98ab16e51278eb219f42831dd651247c68bf0bbb8f920137c9ee61740629d0788a2bcf0bd54e435707f7
SSDEEP 3072:QiOt+xbRt2N4RuLHsmyEaUm1tqhwKP1WssEvYghouZoX9x6nokhFlRVjJJ:Ut+Hxns1mEvdVotlkhz7z
TLSH
T1F674CE12F709CE26C8B2267C8DF5CB942E34B18D9E99AA5B314443FDB4797640E2B34D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\v8_context_snapshot.bin
Size 722KB
SHA256 e2ecf544ace3397c1d167e71dc83a099e4d990af1d56b6844f260876027136c2
MD5 665c521c2f2e066e6ce73c1a2f61efe3
SHA1 7447a1be9cbc77ffbeb6b166689e69eb4af24921
SHA512 a2ec7c790a4657144aa452540706aa9ec611d7ffe8f0cc9952247a545deb21caffb7d367933ff0e0a03acba7623f9666534cdeb877f9f3a8440d9fd6c1fe6a6f
SSDEEP 6144:at+HxVkmEvdVotz2N6mXJp575pxLGTAz7Vqe9lCY15fFA0KMuuJe:SmOStz2N6mzLp3ge904ARvN
TLSH
T144F4B7B5F70B8E36C8B526BDCDE6DB463A34B18D8E86E507304257BC74B87744E26248
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\vk_swiftshader.dll
Size 5.2MB
SHA256 dc150d40c7ca24dc1d132990bdefa1168e3af5244e8c6e5e84a7d3f2ae20ead4
MD5 359fd81c0889714c61406ab616bb4671
SHA1 31d028960208b08a270fa97842d7f3c4afb8995a
SHA512 f4efc87d2dc37bf2f72e2af7e855612e1d3ea1a60f90521fdc34911197dbe3bc4f518f96c5397d0f87c3cebf40e9fe700883ad0b6aa2ea79581f5a3a05db2358
SSDEEP 49152:8Z8LrIVVMgjlR2tLwDfXKr+9UbQ0hPBkWGurGIqbDX6B/y85eJfXwGzuQctlELcz:8GIVPqrBwiyh0thdoYIaD
TLSH
T147463803F28681D9C06DD6B9875FA623F631F8844B2276DF56A00F192E6AFE0673D714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\7z-out\vulkan-1.dll
Size 908KB
SHA256 db1ca92ddd19d5e02cf336a781c3770a9cead750c4cab780898f174f41d598d1
MD5 e5b348d2bb53cb6fecd1114fdad9c9c7
SHA1 9bbd296358829b922816767d3b5452f576566e2a
SHA512 9a67b53a10c9af530a24f19c0e76e84c352edaa644bf59aa503fcdacf28c34f5683194e92c6cbcdc8e11df5aa108c34520fa78f70b7e14525c16dfd60ed23f58
SSDEEP 24576:SXIXgOa/C3B7xke6i9uY1sFSH6Z5WzcADYsHkDn6g3P0zAk76oOHQfWx:Yi1aq3BtkpfFSH6Z5WzcADYsHkDn6g3Q
TLSH
T188156D12DA64CA79D67A8074D8D14A0389F074821723BACF17B817147F6AFF42B7DB29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SpiderBanner.dll

Path C:\Users\Admin\AppData\Local\Temp\nskC115.tmp\SpiderBanner.dll
Size 9KB
SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
MD5 17309e33b596ba3a5693b4d3e85cf8d7
SHA1 7d361836cf53df42021c7f2b148aec9458818c01
SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
TLSH
T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

32.json

Path C:\Users\Admin\AppData\Roaming\.sklauncher\assets\indexes\32.json
Size 572KB
SHA256 52f579c1db7009c612900ec972fbb09da26a1dfcfc54ba82728f0bfc74f25b84
MD5 2f7aa0d3e3907fa34648a6d68515feef
SHA1 49da57a9512de46382d2fe4b68af047fea7a16f9
SHA512 c9bca6335d4d5b194ac034446430b6e3e08cb29ef649610a1ad2a1b1703e8ac2f08be1af9e4fb06ee0c15324f68537fd56619b3140aba672642d405303ffed48
SSDEEP 12288:+7IdY9PYi1zA2KNI2uQX0y8mBqmCsSM/m8XIB7w+nAMMwvtAOxOzNtHe1mwU8kUk:D7jtq6C1lZpBN8
TLSH
T1A2C4DF96DEDF37A7F809DD65B57F0A039320C21B9304C78DA66DB342A5899DF2012BB1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\DawnGraphiteCache\index
Size 256KB
SHA256 3e5c2ca35385b83789371dfaf87bc000389a6609b984098c5fbade8ed9f1e61b
MD5 7ea24d0aee4bb8553f60328522994b7f
SHA1 a601f7a1a5ec4d589f3f80c886755c4f39ab2b1b
SHA512 5012c4c44dbd443d4085941eb2baf7bf3054b4d60acce479c7e57e1d394a89c98d5540faf23305d2779940ca9fbf41e5a67fd18c4658c06006091c50c82fe753
SSDEEP 3:LstlNllkll/lxM:LsX3lEtq
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Network\Network Persistent State
Size 194B
SHA256 5e2866d49acacb48c392510b2e540edb3041a6b110b5e4d7968a8608d7526c62
MD5 40e69ad15d747a8cdf7d48e1703f640e
SHA1 8e568fc81fcca59af1eb818de1908b9bffd82caa
SHA512 24cb46155e6b640c93e649635877d4672bc70b2c19292043b72ebbcc07a2899eae7765b946c00ea7ed8edbc43937cd06e9d73d38f73780f69e3154b6d2999b51
TLSH
T14EC022AA823028FE03C183E409287E53C7FE0012031C8EA79228376983A306D040088B
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe59c039.TMP

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Network\Network Persistent State~RFe59c039.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Preferences
Size 57B
SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
MD5 58127c59cb9e1da127904c341d15372b
SHA1 62445484661d8036ce9788baeaba31d204e9a5fc
SHA512 8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a
TLSH
T101900297652634755E1F1D65400B889B5CF905704E0B5E0641D032969A2A45D088705F
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences~RFe59b58b.TMP

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Preferences~RFe59b58b.TMP
Size 93B
SHA256 529b6595a4727a6b2d6cc154ae51f426216c01fc7fda02de2460abfb3de118a4
MD5 322f01bb491180333c338526d93f115a
SHA1 554d5e43d5e46774b8f2a6b3682243a289927754
SHA512 69f8e980f44b1465cee8c0485598fa00be163db0fe88598e45ab2f817f9bea36a2b70dbb9d25d5214174ea9c198b9641bb3d5a86c18b1a4ea4493c00e2e95eb2
TLSH
T103B01253B810A0324B1B09E5000BC94F2CBE00340E475A0510D4F39D492DD4D088702B
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Session Storage\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Session Storage\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

sklauncher_logs.txt

Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
Size 1KB
SHA256 31e892e8e419d2e8778140e8c8d11ddea8485e2771e302ddb99db4bbedb9e06e
MD5 392bb3d712e520bae625c859878109ee
SHA1 7d657e90ea797767157cae2366a58639658b5662
SHA512 5f6e9dad2c49405696f824560741f23216ea61c793e85cad46969d0e0a3ff93fc91896a22d31a6da6dfa7d4e8ca4ee944094b26a58d85952a2b8e48a59cf2d01
TLSH
T19711526469685AFF22225316DAA75C7C6C786D7B1F90EC20371C17086710CB3EEDD6E8
MD5 SHA1 SHA512 TLSH

Submit Download

sklauncher_logs.txt

Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
Size 4KB
SHA256 0c7952f403bff193c3424fb74c865af434df2ce528f8ba1fa65e32494bd1e0a1
MD5 e50ef8293f8eea04e09b8b515aaf4ad1
SHA1 2f309b768cc3c754181d7dd75f9c5fbfc1dff2b3
SHA512 2aebdc25c4ec41c60620bccf4c00a7667dcb2d8e78b0bfe537b5c91b39266b94218cb5588a9bbcc6c83edc621cccb4f0ef8a87478715318277cfa0eec13faf7d
SSDEEP 96:oS9UstZzFjJN4is7ttN4tmXwt7uPsyMNJ9EOBG3Oc60DlaqCThdzpwtlJgOr64GA:Ji0dFlN7s7zN4tmXwtKUy+9EOBG3OcNX
TLSH
T1A9B199881CA8A6BF6622831AE9AB5C5CE8B569375FC09914331C060C7707CA7FDDEDC5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sklauncher_logs.txt

Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
Size 1KB
SHA256 5af44e97cf37427d6fbb089ffb3f975777a73edf8331a828c66c3dbee8d2e544
MD5 b0133ff8f59303d99fe1022080c9c4d9
SHA1 c0d009879a5f773a48bbcdbc2a975bc41849ee59
SHA512 796b069deafceb4dd733eb62f8590eed0b51f523a5c60090c3abb1fbbc202f473b8195cea9dc5ff3157f57fe1d3c06b379c1dca73c833e3d0b0d38191a2d314e
TLSH
T16311031019786ABFF62A934696A74C8CB5716A735F91E815330E431CA300CB7CEDE5C4
MD5 SHA1 SHA512 TLSH

Submit Download

sklauncher_logs.txt

Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
Size 2KB
SHA256 1040a61898393656eeb7a53fe5a7f0ca0383e8ad46424365f542b2c807f09d14
MD5 e531ba63b63c8adb8869a6b9b045e2b8
SHA1 4bd94b8f008956e32598bde51591ece535f3152a
SHA512 38b77c5a19f9c3f6ffd0af0bdb56e691c5aa287526949eed98c86c8333f6b1018d4bce0be881101f8495a5aa37802eee1aa90be16b02d0576d2fb780f86beb38
TLSH
T133510A100DB82ABBF655830AE6AB4C8CB4B06A370FC5E814375D421CA715CB7DAEF8C4
MD5 SHA1 SHA512 TLSH

Submit Download

sklauncher_logs.txt

Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
Size 3KB
SHA256 f20904dee8b25a79297437ca17bf4a346a58a715fd9ebd214ce71ccc59d27f49
MD5 ecc07410be0501ad4b68c26cbafbade4
SHA1 62a9109079deed071774ebc24c733becebf8b763
SHA512 359f22996b4a42039c9a5d1f51c94e8b0bebb0147ee2869060ba7cb87567e569283216f68cc42b5f4486b0b3ea6f54167ec7342aab366244d2cfcf5e325d6626
TLSH
T1AB71F8100EB829BBE656830AEA6B5C8DB0B16A370FC5E914375D421C6311CB7DAEF9C4
MD5 SHA1 SHA512 TLSH

Submit Download

sklauncher_logs.txt

Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
Size 4KB
SHA256 0a69b20dcf1c80a320d2ad15c6e9b6dd79bc8e6310e513d177f1cc7998e76906
MD5 9efa74df31519325cee49c65f3ed263f
SHA1 9d5b578093d0d4a1f8d6494e1ca5f0d53201b051
SHA512 5a4f88864322e7ea969df32db92602300997615b12e79e5996bb99fa5724ef3a01e6fafa6e6009a67099198d63de73692b9410ccb080a564d1c3c9f26179f393
SSDEEP 96:oSGCGr8f5JT4i21HtlwtSxCZxu+smuNJIF5AziL165XDlSrcJGOa68UM71SyGo:JGxIfHT721NlwtSxCZYdmMIF5AziL1s8
TLSH
T18F914B510DB8297FA656830AF66B5C9DB0B1AA330F85E904335E021C6305DB7DAEF9C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ASSEMBLY_EXCEPTION

Path C:\Users\Admin\AppData\Roaming\.sklauncher\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.datatransfer\ASSEMBLY_EXCEPTION
Size 43B
SHA256 7901499314e881a978d80a31970f0daec92d4995f3305e31fb53c38d9cc6ec3b
MD5 bd468da51b15a9f09778545b00265f34
SHA1 c80e4bab46e34d02826eab226a4441d0970f2aba
SHA512 2c1d43c3e17bb2fca24a77bea3d2b3954a47da92e0cdd0738509bffcdbe2935c11764cd5af50439061638bba8b8d59da29e97ea7404ea605f7575fc13395ca93
MD5 SHA1 SHA512

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Roaming\.sklauncher\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.datatransfer\LICENSE
Size 32B
SHA256 d60635c89c9f352ae1e66ef414344f290f5b5f7ce5c23d9633d41fde0909df80
MD5 663f71c746cc2002aa53b066b06c88ab
SHA1 12976a6c2b227cbac58969c1455444596c894656
SHA512 507b7d09d3bcd9a24f0b4eeda67167595ac6ad37cd19fb31cd8f5ce8466826840c582cb5dc012a4bd51b55e01bb551e207e9da9e0d51948e89f962ba09606aab
MD5 SHA1 SHA512

Submit Download

ADDITIONAL_LICENSE_INFO.tmp

Path C:\Users\Admin\AppData\Roaming\.sklauncher\runtime\java-runtime-epsilon\windows-x64\java-runtime-epsilon\legal\java.instrument\ADDITIONAL_LICENSE_INFO.tmp
Size 48B
SHA256 d255311b0a181e243de326d111502a8b1dc7277b534a295a8340ab5230e74c83
MD5 512f151af02b6bd258428b784b457531
SHA1 84d2102ad171863db04e7ee22a259d1f6c5de4a5
SHA512 1a305bc333c7c2055a334dc67734db587fd6fda457b46c8df8f17ded0a8982e3830970bee75cc17274aa0a4082f32792b5dbff88410fa43cc61b55c1dce4c129
MD5 SHA1 SHA512

Submit Download

settings.json

Path C:\Users\Admin\AppData\Roaming\.sklauncher\settings.json
Size 556B
SHA256 676aa797f9b01eb99850461b89f54ab4959744f65b07726b73b8daa1adc8b392
MD5 f79ef7b574d3978c1a32ebd28249aaed
SHA1 d789b242185c10e336d6b33e6e4604c4a0787efc
SHA512 481255a4998e5713e45d4925a59f9a9b63b554d81704ee64e2df864a2bc05a70207352ba68508301046145b5069be58e49ed9931205fa56565382a27760f3181
TLSH
T134F0BE61E9A122BD1BD2926CDEADC0238B348D4D008D3C38A5A3284C340F37A36F3ED1
MD5 SHA1 SHA512 TLSH

Submit Download

settings.json

Path C:\Users\Admin\AppData\Roaming\.sklauncher\settings.json
Size 555B
SHA256 095e782503ecf7933f013060d35c4ec5942265fdc79143c3dd93c094c157fd5a
MD5 3b1e5803863fa5251c51172ea33dfbb5
SHA1 c0b0436edb6c6cb4c3255333db0522fb836fc59e
SHA512 1500d151375220c0b033b6852624094df645a84e4ebc44f98c8ca4cc8609a5ae4f609e0d7e867afab28acad42220f4cbc5431df4b02b764196e76181051b17bc
TLSH
T13AF0BE61A9A122BD1BE2926C9EADC0138B348D4D008D3C38A5A3284C340F37A36F3ED1
MD5 SHA1 SHA512 TLSH

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/1396-1882-0x0000000006D90000-0x0000000006DDC000-memory.dmp

Download

memory/1396-1883-0x0000000070040000-0x000000007008C000-memory.dmp

Download

memory/1396-1891-0x0000000007A90000-0x0000000007B33000-memory.dmp

Download

memory/1396-1892-0x00000000701C0000-0x0000000070514000-memory.dmp

Download

memory/1732-1802-0x0000000070160000-0x00000000701AC000-memory.dmp

Download

memory/1732-1801-0x0000000005800000-0x0000000005B54000-memory.dmp

Download

memory/1732-1810-0x00000000708E0000-0x0000000070C34000-memory.dmp

Download

memory/3112-1857-0x0000000070060000-0x00000000700AC000-memory.dmp

Download

memory/3112-1856-0x0000000005900000-0x0000000005C54000-memory.dmp

Download

memory/3112-1865-0x0000000007300000-0x0000000007311000-memory.dmp

Download

memory/3420-685-0x0000000007C60000-0x0000000007C71000-memory.dmp

Download

memory/3420-684-0x0000000007CF0000-0x0000000007D86000-memory.dmp

Download

memory/3420-676-0x0000000070120000-0x000000007016C000-memory.dmp

Download

memory/3420-674-0x0000000006250000-0x00000000065A4000-memory.dmp

Download

memory/4308-1670-0x000002B3404F0000-0x000002B34097D000-memory.dmp

Download

memory/5380-1835-0x0000000070060000-0x00000000700AC000-memory.dmp

Download

memory/5380-1826-0x0000000006040000-0x0000000006394000-memory.dmp

Download

memory/5380-1844-0x00000000705B0000-0x0000000070904000-memory.dmp

Download

memory/5380-1834-0x0000000006CB0000-0x0000000006CFC000-memory.dmp

Download

memory/5380-1843-0x0000000007960000-0x0000000007A03000-memory.dmp

Download

memory/5448-716-0x00000000708A0000-0x0000000070BF4000-memory.dmp

Download

memory/5448-691-0x0000000005A40000-0x0000000005D94000-memory.dmp

Download

memory/5448-700-0x0000000070120000-0x000000007016C000-memory.dmp

Download

memory/5692-657-0x0000000006FC0000-0x0000000006FEA000-memory.dmp

Download

memory/5692-644-0x0000000070120000-0x000000007016C000-memory.dmp

Download

memory/5692-624-0x0000000005AC0000-0x0000000005B0C000-memory.dmp

Download

memory/5692-623-0x0000000005A80000-0x0000000005A9E000-memory.dmp

Download

memory/5692-622-0x0000000005480000-0x00000000057D4000-memory.dmp

Download

memory/5692-614-0x0000000005410000-0x0000000005476000-memory.dmp

Download

memory/5692-613-0x00000000053A0000-0x0000000005406000-memory.dmp

Download

memory/5692-612-0x0000000004BF0000-0x0000000004C12000-memory.dmp

Download

memory/5692-611-0x0000000004C80000-0x00000000052A8000-memory.dmp

Download

memory/5692-610-0x00000000044D0000-0x0000000004506000-memory.dmp

Download

memory/5692-652-0x0000000006C50000-0x0000000006C6E000-memory.dmp

Download

memory/5692-653-0x0000000006C80000-0x0000000006D23000-memory.dmp

Download

memory/5692-643-0x0000000006070000-0x00000000060A2000-memory.dmp

Download

memory/5692-654-0x0000000007420000-0x0000000007A9A000-memory.dmp

Download

memory/5692-655-0x0000000006DD0000-0x0000000006DEA000-memory.dmp

Download

memory/5692-656-0x0000000006E40000-0x0000000006E4A000-memory.dmp

Download

memory/5692-658-0x0000000006FF0000-0x0000000007014000-memory.dmp

Download

memory/5692-659-0x0000000070860000-0x0000000070BB4000-memory.dmp

Download

memory/5836-1770-0x00000000702C0000-0x0000000070614000-memory.dmp

Download

memory/5836-1762-0x0000000070160000-0x00000000701AC000-memory.dmp

Download

memory/5836-1761-0x00000000067A0000-0x00000000067EC000-memory.dmp

Download

memory/5836-1760-0x0000000005D10000-0x0000000006064000-memory.dmp

Download

memory/5880-1782-0x0000000070160000-0x00000000701AC000-memory.dmp

Download