09b654ea96b53255bdeffe2a8d3b602c4358e7419158969eb00e397d7257a655

Analysis

max time kernel
150s
max time network
157s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260710-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
12/07/2026, 02:05

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
launcher_Setup.exe
Size 91.2MB
Sample260712-ch1tbaes5x
SHA256 09b654ea96b53255bdeffe2a8d3b602c4358e7419158969eb00e397d7257a655
MD5 30048673fd6c38a8fbe34ee5af656286
SHA1 5998e013f29254e7a7e242895c37922297ae09a1
SHA512 f5b426f33c124988b0e8141336f44dcb2d248e3788efbd5a6032dd3630cca586b9135131bc30558390a5f7225a598513b4b6e357a4646e932677303f35aee4c3
SSDEEP 1572864:by/5wbM7kVu1pURPYIdz4H0pnr0AUobTxKl+I0N1czPgMIOFLifSa1/T17ZqvpiW:bmw44wUOImC/TxiZ9jdFsl1/T1EBN
TLSH
T1452833512FEECE72F86A8CB8A3B6C5BA003AFDB181C4A4996D1C795514749C80CF5B7C
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery execution spyware stealer

Malware Config

Signatures

Command and Scripting Interpreter: PowerShell 1 TTPs 5 IoCs

Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

execution

PowerShell

T1059.001

pid	Process
472	powershell.exe
4872	powershell.exe
3408	powershell.exe
4148	powershell.exe
4360	powershell.exe

Executes dropped EXE 5 IoCs

pid	Process
2588	launcher.exe
1872	launcher.exe
6140	launcher.exe
2400	ChromeElevator.exe
4672	ChromeElevator.exe

Loads dropped DLL 13 IoCs

pid	Process
1348	launcher_Setup.exe
1348	launcher_Setup.exe
1348	launcher_Setup.exe
1348	launcher_Setup.exe
1348	launcher_Setup.exe
1348	launcher_Setup.exe
1348	launcher_Setup.exe
1348	launcher_Setup.exe
2588	launcher.exe
1872	launcher.exe
6140	launcher.exe
1872	launcher.exe
2588	launcher.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
1	ipinfo.io
3	ipinfo.io

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\launcher\resources\app.asar.unpacked\index.dat	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\af.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\pl.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\pt-PT.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\th.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\database.js	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\index.js	launcher_Setup.exe
File opened for modification	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\darwin\arm64	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3\sqlite3.c	launcher_Setup.exe
File created	C:\Program Files\launcher\resources.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\da.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\lv.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\ml.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\sv.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\am.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\es.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\fa.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\sqlite-error.js	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\nl.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\icudtl.dat	launcher_Setup.exe
File created	C:\Program Files\launcher\libGLESv2.dll	launcher_Setup.exe
File opened for modification	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\node-vm-detect	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\index.esm.js	launcher_Setup.exe
File opened for modification	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\linux\arm64	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\linux\arm64\vmDetect.node	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\en-US.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\hr.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\api\priv\SystemCore.dat	launcher_Setup.exe
File created	C:\Program Files\launcher\snapshot_blob.bin	launcher_Setup.exe
File opened for modification	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\win32	launcher_Setup.exe
File created	C:\Program Files\launcher\vulkan-1.dll	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\de.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\ko.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\mr.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\ru.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\sw.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\transaction.js	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\cli.js	launcher_Setup.exe
File opened for modification	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\node-vm-detect\dist	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\index.cjs	launcher_Setup.exe
File opened for modification	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\linux	launcher_Setup.exe
File created	C:\Program Files\launcher\d3dcompiler_47.dll	launcher_Setup.exe
File created	C:\Program Files\launcher\vk_swiftshader_icd.json	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\bn.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\sk.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\sr.pak	launcher_Setup.exe
File opened for modification	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\better-sqlite3\build	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3.gyp	launcher_Setup.exe
File opened for modification	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\better-sqlite3\src	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\lt.pak	launcher_Setup.exe
File opened for modification	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3	launcher_Setup.exe
File opened for modification	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\better-sqlite3\lib	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\en-GB.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\common.gypi	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\inspect.js	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\node-vm-detect\LICENSE	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\win32\x64\vmDetect.node	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\nb.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\hi.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\aggregate.js	launcher_Setup.exe
File created	C:\Program Files\launcher\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\win32\arm64\vmDetect.node	launcher_Setup.exe
File opened for modification	C:\Program Files\launcher\locales	launcher_Setup.exe
File created	C:\Program Files\launcher\chrome_200_percent.pak	launcher_Setup.exe
File created	C:\Program Files\launcher\locales\zh-CN.pak	launcher_Setup.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	launcher_Setup.exe

Checks processor information in registry 2 TTPs 24 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\ProcessorNameString	launcher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	launcher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5	launcher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6	launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	launcher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1	launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\~MHz	launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\ProcessorNameString	launcher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7	launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz	launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString	launcher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2	launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\ProcessorNameString	launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\~MHz	launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\ProcessorNameString	launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\~MHz	launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\~MHz	launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	launcher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3	launcher.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4	launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\ProcessorNameString	launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\~MHz	launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\ProcessorNameString	launcher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\~MHz	launcher.exe

Detects videocard installed 1 TTPs 1 IoCs

Uses WMIC.exe to determine videocard installed.

System Information Discovery

T1082

pid	Process
4928	WMIC.exe

Kills process with taskkill 7 IoCs

defense_evasion

pid	Process
3400	taskkill.exe
4652	taskkill.exe
5856	taskkill.exe
4820	taskkill.exe
5948	taskkill.exe
3676	taskkill.exe
1464	taskkill.exe

Suspicious behavior: EnumeratesProcesses 24 IoCs

pid	Process
1348	launcher_Setup.exe
1348	launcher_Setup.exe
1348	launcher_Setup.exe
1348	launcher_Setup.exe
1348	launcher_Setup.exe
1348	launcher_Setup.exe
472	powershell.exe
472	powershell.exe
4872	powershell.exe
4872	powershell.exe
4872	powershell.exe
3408	powershell.exe
3408	powershell.exe
3408	powershell.exe
4148	powershell.exe
4148	powershell.exe
4148	powershell.exe
4928	WMIC.exe
4928	WMIC.exe
4928	WMIC.exe
4928	WMIC.exe
4360	powershell.exe
4360	powershell.exe
4360	powershell.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeSecurityPrivilege	1348	launcher_Setup.exe
Token: SeDebugPrivilege	472	powershell.exe
Token: SeShutdownPrivilege	2588	launcher.exe
Token: SeCreatePagefilePrivilege	2588	launcher.exe
Token: SeIncreaseQuotaPrivilege	472	powershell.exe
Token: SeSecurityPrivilege	472	powershell.exe
Token: SeTakeOwnershipPrivilege	472	powershell.exe
Token: SeLoadDriverPrivilege	472	powershell.exe
Token: SeSystemProfilePrivilege	472	powershell.exe
Token: SeSystemtimePrivilege	472	powershell.exe
Token: SeProfSingleProcessPrivilege	472	powershell.exe
Token: SeIncBasePriorityPrivilege	472	powershell.exe
Token: SeCreatePagefilePrivilege	472	powershell.exe
Token: SeBackupPrivilege	472	powershell.exe
Token: SeRestorePrivilege	472	powershell.exe
Token: SeShutdownPrivilege	472	powershell.exe
Token: SeDebugPrivilege	472	powershell.exe
Token: SeSystemEnvironmentPrivilege	472	powershell.exe
Token: SeRemoteShutdownPrivilege	472	powershell.exe
Token: SeUndockPrivilege	472	powershell.exe
Token: SeManageVolumePrivilege	472	powershell.exe
Token: 33	472	powershell.exe
Token: 34	472	powershell.exe
Token: 35	472	powershell.exe
Token: 36	472	powershell.exe
Token: SeIncreaseQuotaPrivilege	472	powershell.exe
Token: SeSecurityPrivilege	472	powershell.exe
Token: SeTakeOwnershipPrivilege	472	powershell.exe
Token: SeLoadDriverPrivilege	472	powershell.exe
Token: SeSystemProfilePrivilege	472	powershell.exe
Token: SeSystemtimePrivilege	472	powershell.exe
Token: SeProfSingleProcessPrivilege	472	powershell.exe
Token: SeIncBasePriorityPrivilege	472	powershell.exe
Token: SeCreatePagefilePrivilege	472	powershell.exe
Token: SeBackupPrivilege	472	powershell.exe
Token: SeRestorePrivilege	472	powershell.exe
Token: SeShutdownPrivilege	472	powershell.exe
Token: SeDebugPrivilege	472	powershell.exe
Token: SeSystemEnvironmentPrivilege	472	powershell.exe
Token: SeRemoteShutdownPrivilege	472	powershell.exe
Token: SeUndockPrivilege	472	powershell.exe
Token: SeManageVolumePrivilege	472	powershell.exe
Token: 33	472	powershell.exe
Token: 34	472	powershell.exe
Token: 35	472	powershell.exe
Token: 36	472	powershell.exe
Token: SeShutdownPrivilege	2588	launcher.exe
Token: SeCreatePagefilePrivilege	2588	launcher.exe
Token: SeShutdownPrivilege	2588	launcher.exe
Token: SeCreatePagefilePrivilege	2588	launcher.exe
Token: SeShutdownPrivilege	2588	launcher.exe
Token: SeCreatePagefilePrivilege	2588	launcher.exe
Token: SeShutdownPrivilege	2588	launcher.exe
Token: SeCreatePagefilePrivilege	2588	launcher.exe
Token: SeShutdownPrivilege	2588	launcher.exe
Token: SeCreatePagefilePrivilege	2588	launcher.exe
Token: SeShutdownPrivilege	2588	launcher.exe
Token: SeCreatePagefilePrivilege	2588	launcher.exe
Token: SeShutdownPrivilege	2588	launcher.exe
Token: SeCreatePagefilePrivilege	2588	launcher.exe
Token: SeShutdownPrivilege	2588	launcher.exe
Token: SeCreatePagefilePrivilege	2588	launcher.exe
Token: SeShutdownPrivilege	2588	launcher.exe
Token: SeCreatePagefilePrivilege	2588	launcher.exe

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2588	launcher.exe
2588	launcher.exe

Suspicious use of WriteProcessMemory 32 IoCs

description	pid	Process	procid_target
PID 1348 wrote to memory of 2588	1348	launcher_Setup.exe	87
PID 2588 wrote to memory of 1872	2588	launcher.exe	89
PID 2588 wrote to memory of 6140	2588	launcher.exe	90
PID 2588 wrote to memory of 5432	2588	launcher.exe	91
PID 5432 wrote to memory of 472	5432	cmd.exe	93
PID 2588 wrote to memory of 2736	2588	launcher.exe	95
PID 2736 wrote to memory of 6068	2736	cmd.exe	97
PID 2588 wrote to memory of 5948	2588	launcher.exe	98
PID 2588 wrote to memory of 3676	2588	launcher.exe	99
PID 2588 wrote to memory of 1464	2588	launcher.exe	100
PID 2588 wrote to memory of 3400	2588	launcher.exe	101
PID 2588 wrote to memory of 4652	2588	launcher.exe	102
PID 2588 wrote to memory of 5856	2588	launcher.exe	103
PID 2588 wrote to memory of 4820	2588	launcher.exe	104
PID 2588 wrote to memory of 5444	2588	launcher.exe	106
PID 5444 wrote to memory of 4872	5444	cmd.exe	108
PID 2588 wrote to memory of 2400	2588	launcher.exe	109
PID 2400 wrote to memory of 2432	2400	ChromeElevator.exe	111
PID 2400 wrote to memory of 2432	2400	ChromeElevator.exe	111
PID 2588 wrote to memory of 4672	2588	launcher.exe	114
PID 4672 wrote to memory of 2592	4672	ChromeElevator.exe	116
PID 4672 wrote to memory of 2592	4672	ChromeElevator.exe	116
PID 2588 wrote to memory of 3532	2588	launcher.exe	117
PID 3532 wrote to memory of 3408	3532	cmd.exe	119
PID 2588 wrote to memory of 2356	2588	launcher.exe	120
PID 2356 wrote to memory of 4148	2356	cmd.exe	122
PID 2588 wrote to memory of 5876	2588	launcher.exe	123
PID 5876 wrote to memory of 4928	5876	cmd.exe	125
PID 2588 wrote to memory of 2564	2588	launcher.exe	126
PID 2564 wrote to memory of 4360	2564	cmd.exe	128
PID 2588 wrote to memory of 3900	2588	launcher.exe	129
PID 3900 wrote to memory of 1864	3900	cmd.exe	131

C:\Users\Admin\AppData\Local\Temp\launcher_Setup.exe
"C:\Users\Admin\AppData\Local\Temp\launcher_Setup.exe"
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1348
- C:\Program Files\launcher\launcher.exe
  "C:\Program Files\launcher\launcher.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks processor information in registry
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:2588
- - C:\Program Files\launcher\launcher.exe
    "C:\Program Files\launcher\launcher.exe" --type=gpu-process --disable-gpu-sandbox --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Roaming\chiloutvrmod" --gpu-preferences=UAAAAAAAAADgAQAMAAAAAAAAAAAAAAAAAABgAAAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=disabled --field-trial-handle=1760,i,14740987653000738284,8348088076998875049,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1752 /prefetch:2
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:1872
- - C:\Program Files\launcher\launcher.exe
    "C:\Program Files\launcher\launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Roaming\chiloutvrmod" --field-trial-handle=2016,i,14740987653000738284,8348088076998875049,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2008 /prefetch:11
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:6140
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -ExecutionPolicy Bypass -Command "Add-MpPreference -ExclusionPath 'C:\Program Files\launcher\launcher.exe' -Force; Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp' -Force""
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:5432
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -ExecutionPolicy Bypass -Command "Add-MpPreference -ExclusionPath 'C:\Program Files\launcher\launcher.exe' -Force; Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp' -Force"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:472
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "cscript //nologo //B "C:\Users\Admin\AppData\Local\Temp\system_check_1783822198843.vbs""
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2736
  - - C:\Windows\system32\cscript.exe
      cscript //nologo //B "C:\Users\Admin\AppData\Local\Temp\system_check_1783822198843.vbs"
      4⤵
      PID:6068
- - C:\Windows\system32\taskkill.exe
    taskkill /F /IM chrome.exe /T
    3⤵
    - Kills process with taskkill
    PID:5948
- - C:\Windows\system32\taskkill.exe
    taskkill /F /IM msedge.exe /T
    3⤵
    - Kills process with taskkill
    PID:3676
- - C:\Windows\system32\taskkill.exe
    taskkill /F /IM brave.exe /T
    3⤵
    - Kills process with taskkill
    PID:1464
- - C:\Windows\system32\taskkill.exe
    taskkill /F /IM opera.exe /T
    3⤵
    - Kills process with taskkill
    PID:3400
- - C:\Windows\system32\taskkill.exe
    taskkill /F /IM vivaldi.exe /T
    3⤵
    - Kills process with taskkill
    PID:4652
- - C:\Windows\system32\taskkill.exe
    taskkill /F /IM operagx.exe /T
    3⤵
    - Kills process with taskkill
    PID:5856
- - C:\Windows\system32\taskkill.exe
    taskkill /F /IM opera_crashreporter.exe /T
    3⤵
    - Kills process with taskkill
    PID:4820
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -ExecutionPolicy Bypass -Command "Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\elev_1783822202608' -Force; Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\elev_1783822202608\ChromeElevator.exe' -Force""
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:5444
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -ExecutionPolicy Bypass -Command "Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\elev_1783822202608' -Force; Add-MpPreference -ExclusionPath 'C:\Users\Admin\AppData\Local\Temp\elev_1783822202608\ChromeElevator.exe' -Force"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      PID:4872
- - C:\Users\Admin\AppData\Local\Temp\elev_1783822202608\ChromeElevator.exe
    C:\Users\Admin\AppData\Local\Temp\elev_1783822202608\ChromeElevator.exe chrome -o C:\Users\Admin\AppData\Local\Temp\elev_out_1783822202565
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:2400
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe"
      4⤵
      PID:2432
- - C:\Users\Admin\AppData\Local\Temp\elev_1783822202608\ChromeElevator.exe
    C:\Users\Admin\AppData\Local\Temp\elev_1783822202608\ChromeElevator.exe edge -o C:\Users\Admin\AppData\Local\Temp\elev_out_1783822202565
    3⤵
    - Executes dropped EXE
    - Suspicious use of WriteProcessMemory
    PID:4672
  - - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
      "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe"
      4⤵
      PID:2592
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\sys_debug_6eb10616.ps1""
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3532
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\sys_debug_6eb10616.ps1"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      PID:3408
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\sys_debug_6df9a408.ps1""
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2356
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -NoProfile -ExecutionPolicy Bypass -File "C:\Users\Admin\AppData\Local\Temp\sys_debug_6df9a408.ps1"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      PID:4148
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "wmic path win32_VideoController get name /value"
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:5876
  - - C:\Windows\System32\Wbem\WMIC.exe
      wmic path win32_VideoController get name /value
      4⤵
      Detects videocard installed
      Suspicious behavior: EnumeratesProcesses
      PID:4928
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "powershell -ExecutionPolicy Bypass -NoProfile -WindowStyle Hidden -Command "Add-Type -AssemblyName System.Windows.Forms,System.Drawing; $bounds = [System.Windows.Forms.Screen]::PrimaryScreen.Bounds; $bitmap = New-Object System.Drawing.Bitmap $bounds.Width, $bounds.Height; $graphics = [System.Drawing.Graphics]::FromImage($bitmap); $graphics.CopyFromScreen($bounds.X, $bounds.Y, 0, 0, $bounds.Size); $memoryStream = New-Object System.IO.MemoryStream; $bitmap.Save($memoryStream, [System.Drawing.Imaging.ImageFormat]::Png); $bytes = $memoryStream.ToArray(); [System.Console]::OpenStandardOutput().Write($bytes, 0, $bytes.Length); $bitmap.Dispose(); $graphics.Dispose(); $memoryStream.Dispose();""
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:2564
  - - C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
      powershell -ExecutionPolicy Bypass -NoProfile -WindowStyle Hidden -Command "Add-Type -AssemblyName System.Windows.Forms,System.Drawing; $bounds = [System.Windows.Forms.Screen]::PrimaryScreen.Bounds; $bitmap = New-Object System.Drawing.Bitmap $bounds.Width, $bounds.Height; $graphics = [System.Drawing.Graphics]::FromImage($bitmap); $graphics.CopyFromScreen($bounds.X, $bounds.Y, 0, 0, $bounds.Size); $memoryStream = New-Object System.IO.MemoryStream; $bitmap.Save($memoryStream, [System.Drawing.Imaging.ImageFormat]::Png); $bytes = $memoryStream.ToArray(); [System.Console]::OpenStandardOutput().Write($bytes, 0, $bytes.Length); $bitmap.Dispose(); $graphics.Dispose(); $memoryStream.Dispose();"
      4⤵
      Command and Scripting Interpreter: PowerShell
      Suspicious behavior: EnumeratesProcesses
      PID:4360
- - C:\Windows\system32\cmd.exe
    C:\Windows\system32\cmd.exe /d /s /c "reg query "HKCU\Software\Valve\Steam" /v SteamPath"
    3⤵
    - Suspicious use of WriteProcessMemory
    PID:3900
  - - C:\Windows\system32\reg.exe
      reg query "HKCU\Software\Valve\Steam" /v SteamPath
      4⤵
      PID:1864

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:4788

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:3140

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 1KB
SHA256 542dd0789f06af2d0f094199e3c9f06b6df5d5959d7d3fb1ec4bf9f13be0f229
MD5 97eb6479e55086fa0c0866106927d062
SHA1 3655918914138dc3ed6658d0a6b252a7a71a90c5
SHA512 6893e1c32b276d45cf030ac866c80be279e62c25022994cd67d6d35d97cd576220545c1feefcca84f5bd670c3e9113cdc679836633cf99a308aab3054981fd78
TLSH
T19A21AB33F3CC8664DC8A403A54DEAC1136B6C7D740DECEABAB84D118F42F298DEA1160
MD5 SHA1 SHA512 TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 1KB
SHA256 a976a31824c3a0cc2a6b0fd9ec6045c398d82990e5e96df2ad86ba09a9b05be5
MD5 66f9b690d4e5313231bc173ce7b2c029
SHA1 b0dbce2f97d8ca067ddde29c06272e56e38fa195
SHA512 8f0c4c220fc64928778bf68c853246126b44f40fcdc99aa2fdaa491797ce02783c8776fdd7bd3154544336f0466000a8b92c740ed0d0df75b8a6990da450650e
TLSH
T158216833B3DD8614C89A413A10CDAC1036B6C7DB41DECFAB7B84E655A43F699CE61160
MD5 SHA1 SHA512 TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 1KB
SHA256 cfaf0dfae4147698c2f251e2d209099621af1bd338efe826fcbded1d7e0603b7
MD5 41331e44e863affa1a3251baddd589c6
SHA1 840bf7ced2553fc122f9c9fa564f27e7199b00a0
SHA512 d6989af91af232fbb793826501ff47c6ebd7ed9389372bee576d3393a5f846cedd9b32afc46524440279deac1279a6941924b0b1532a85b15e2c1b29ad48ee20
TLSH
T178216837B3DD8624C89A413A10CDAC1036B6C7DB41DECFAB6B84E655A43F699CE61160
MD5 SHA1 SHA512 TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 1KB
SHA256 0778493d54f0ac62ae4f1f210481e241c743b2084de9961722471604229f179e
MD5 f7f7d92826f90e56f929d0584a26c321
SHA1 c611b6110d39da04b2a4b37a8d216681954e1120
SHA512 628a808252eb530591416a0685a16a682dcfc7a6de9d3d41bd49f0ad6b98aa667cf98d92c4286ac943093b1bed5dfa9dea627ca6e430e89228500871b0f3d891
TLSH
T1F221AF33F3CC8654DC4A407654CEAC1136B6CBD7409ECE9B6B84D154F42F288CEA11A0
MD5 SHA1 SHA512 TLSH

Submit Download

boot_main.txt

Path C:\Users\Admin\AppData\Local\Temp\@elwiesadoprivate_debug\boot_main.txt
Size 4KB
SHA256 aa2eac12790e3d51be04ab87e21ba1d6ff17ac68f3f7ef60160016f9d38f21f6
MD5 76ff35ca69d2af25e2574315b3256380
SHA1 b48b855197ce3f6af89acc79d74f185fbed901a0
SHA512 431b7c396f00ea10d39e782eecb1c3ba14842aa6418490728eda29e0a2ea73c052591b52b49673662ebf5248c1b574eec8168162976366aff15a111d5b836dae
SSDEEP 96:53GowrxuE1jPiZUYH11j181su8r+Jmm2g89E87KNA:53GoYB1OqYVDbT7Ky
TLSH
T18691621036CD705DD34AE4536210D0239F761A2FAB8C9A1117E64A4CBB488BBF3FE6A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

boot_runtime.txt

Path C:\Users\Admin\AppData\Local\Temp\@elwiesadoprivate_debug\boot_runtime.txt
Size 5KB
SHA256 a97caafbf2055888db3af93a05857b98d5a6d41b6418b4e2fb7fefae9fbea53c
MD5 b949d66064a0ce27b8e64e17d7334d14
SHA1 3952871ea194815306cb126d8e8c87fd130a7294
SHA512 b67581cfe25e6ef14674a6f48628113b6e9d2abdb6a926a0f7f868c7c5f9b34eeb5839fe0358882932f9946fe4fdf01fa9a88e5855feee7d71b1e6c12f20a05b
SSDEEP 48:lz21w2+j2CZ28ticO+3OtZO+3OtioZq+3OtjZq+3+U2E2K5C2Z2uyZ2GticZ2QWy:Wwl77E4N6NOUPXNoVoEeoEGNoNOl
TLSH
T11EB18B1D004982C6A37195025676932EB42B59372B9F1A02707DD72C2730EFE7BA7E67
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_vpjakbfd.gje.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_vpjakbfd.gje.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

ChromeElevator.exe

Path C:\Users\Admin\AppData\Local\Temp\elev_1783822202608\ChromeElevator.exe
Size 1.4MB
SHA256 e857298fd2f8d1c7d48780769433f33e7b3ceaae5ea5a74c13ce8c10bcc7b690
MD5 1d04536714bb22a3e909525a7dd627f0
SHA1 affc166fa1874ff3ec0e42646e008cec972b76ab
SHA512 ec2028983c8c5939545c572f13e1d24e730ca1601c6a8840769d1a6b28b8e12d7c9bd1850007ec0be8abc7c44e12bafcd64dc5b4c842155b75a70d8c71769166
SSDEEP 24576:+7JVbIr44BR1IVOe4waHbTkEFhA+b3XYXKXjAOY5MBmYBREkM2eU25gooYHJLUY:moj15e4w8xhACEKzs57Xci5NLd
TLSH
T14565020BA6A401F9D5F3C174CC42590ADB76F84A47A5EB4F03E449961F276B09E3FB22
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE.electron.txt

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\LICENSE.electron.txt
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\LICENSES.chromium.html
Size 9.0MB
SHA256 4bf4dd1a05ecba975c90d85117dea74b0e94114f882bb26a7e7d1029afe8fda8
MD5 c5de877a372447fdd303c1026fb432f2
SHA1 6fc0a751edacbe061e97248fa550691225891030
SHA512 b3079b18419ca854118e12e8d4681c9e66ae55fbb1f69cfb3ef6322a1c17557c0adbfab5ced030133af814d39483a2b5c7090ca3abb545e8808ffb6abe6b3ae6
SSDEEP 24576:G8QQf6Ox6j1newR6Xe1VmfQ6k6T6W6r656+eGj7dOp+:fGyeGd
TLSH
T16496A52F7B48037306C642627B8B65CAF21E903F3B561A54345CD1681F6BA2983FF6D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\chrome_100_percent.pak
Size 147KB
SHA256 14a6a393c60f62df9bc1036e98346cd557e0ae73e8c7552d163fa64da77804d7
MD5 3c72d78266a90ed10dc0b0da7fdc6790
SHA1 6690eb15b179c8790e13956527ebbf3d274eef9b
SHA512 b1babf1c37b566a5f0e5f84156f7ab59872690ba0bdd51850525f86769bfebc245f83988a3508945cf7617d73cd25e8469228974dd2c38415388b6a378552420
SSDEEP 3072:Mz8JCGIdkwTPa/XKjKkxP1L2o418Gb0+VRLf0ld0GY3cQ3ERVm2I:Mz81Idk8a4Kkx5K18Gb0OV8ld0GecQ35
TLSH
T126E3E1D7B3F4ED7DCAA756F7A2260071ECF3462C0A92124B178AD4352A66748DCC8783
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\chrome_200_percent.pak
Size 222KB
SHA256 20c93f2cfd69f3249cdfd46f317b37a9432ecc0de73323d24ecf65ce0f3c1bb6
MD5 3969308aae1dc1c2105bbd25901bcd01
SHA1 a32f3c8341944da75e3eed5ef30602a98ec75b48
SHA512 f81ed1890b46f7d9f6096b9ef5daab5b21788952efb5c4dcd6b8fd43e4673a91607c748f31434c84a180d943928d83928037058493e7e9b48c3de1fc8025df7f
SSDEEP 6144:HDQYajN6svyABnI86uKkxugx5GMRejnbdZnVE6YoppO4:sfjN6svyABTKkxa6edhVELoXO4
TLSH
T1F424F1C7A3F89D7DC9730AB3522601F1ECB211394AB6521F53DB9C357996AC988C9383
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\d3dcompiler_47.dll
Size 4.7MB
SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
MD5 a7b7470c347f84365ffe1b2072b4f95c
SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
TLSH
T13C367C5673EA40B9C1ABD178CE479213EBB1781403345BEB4190C669AF73BE16A3E734
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\ffmpeg.dll
Size 2.8MB
SHA256 34e3ef3a3ed2df4e0a4a813bbb37346b01e48df1a214dbd0dc1eb90d3e81e258
MD5 db8f2aa06935261f7ece45f8e4ec49b2
SHA1 e7dc10ee96c18cec2673360104fd8f0a0836f205
SHA512 434aac1f6757a8990ddaa2aa1d56422a47825782b6a9b18eeb94098034e92daaa724ac25ff3de648696d214cef6e6fffdd383801d75b1853f687b673ebd574af
SSDEEP 49152:9kzMF+in6Rjp84IEeOUmlyNTzk74y0V+X6CfTBPwN/4MT+fcu:9kXpCOUyy5Z96Q/Wk
TLSH
T1DBD5BF03E6CA50D9D029D071979F9223F631344A8F2567EF16905A213F6BFD82E3E729
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\icudtl.dat
Size 10.0MB
SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
MD5 ffd67c1e24cb35dc109a24024b1ba7ec
SHA1 99f545bc396878c7a53e98a79017d9531af7c1f5
SHA512 e1a865e685d2d3bacd0916d4238a79462519d887feb273a251120bb6af2b4481d025f3b21ce9a1a95a49371a0aa3ecf072175ba756974e831dbfde1f0feaeb79
SSDEEP 196608:+SPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2Y6U:++wkpHiXUxY/iJ53IWhlVjEeIZU
TLSH
T160B63807A2FB8DC6F9F76F30E8F452679567BD496E32805911042F3B1D332A08661BB6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\libEGL.dll
Size 473KB
SHA256 6e45cab21be31b359ad969d777731943791917bd4bf309178e4965047f321a94
MD5 0e98795fa2e9ab91b0d345734e03b3a3
SHA1 880ee2a480f9758c505483aaa1e53f0f9606bb3d
SHA512 cca9e34fe42e320066737de4a076cf1b08fc2bb7c4810f2de153d44a4b1da76315b3c32ff88afcd2b4b7946e286396e556a8e8a64ca108a16cd9ac2b329296a9
SSDEEP 6144:meoMqSwktU6O8J6AGrIKLD0Rv8KRWAwi+u7fSGSotZu:EMeAQ8JFGrIKLDW9W2+u7fSGSj
TLSH
T1B0A48D1177D444B9E06AD1708A574643EB76B4920B65FBDF02A092392F7BBF89B3D320
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\libGLESv2.dll
Size 8.0MB
SHA256 90a1a55d9c62ce328c803b25e6618ebeee16ef1167d269b69e4adee85ef0c0fb
MD5 c2cd58b2fae0e783f5432d2e2af46f33
SHA1 3cdc0914adfc39596fd0c77e8905c97f2f32e247
SHA512 24f3010b8668f7ea7e23b367a72796d2716c4872db79eab380c4d7e2722eaa73035f6b120c6f2521e73d2018a5c0d6dfc7d0bd994b41fb914b5c8308ed6400db
SSDEEP 98304:4sbPUQUHoQ5dKV0H4HrX7OBAK2dMNFR7VxVXC3OTq+:4sbP/UHoQ5AV++wAlMlVXmOf
TLSH
T180867C03F69640D9C01DD2B8975B9623FE3178990734B6CF269017292F77BE06BBAB14
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\af.pak
Size 509KB
SHA256 5bd93621de82965b8a7d425660d4afef8102d058e48e8b42e0a45ea2b32ab2fb
MD5 6484a2029d88dcf78a569e65f2987933
SHA1 9e9a6f609333d14ca692730055cbd8be56b98c32
SHA512 6ac6fd8cb28c0c41beb5fb6ab1352681833d0c85507a752866db1139b75b75c2572aa0768ca82513235514af064e26cbbf0d76dd6a6fe0d20eb309e9c9ff72ee
SSDEEP 12288:qFoen+o3LDVy4VGmxu/PS+H2JynCa5eIRVho0vMI5gX2FT+FXZ22h+2pslVtn5g5:qFv+o7DU4Vj8/PS+H2JynCa5eIRVho0m
TLSH
T1DAB41C06EB80273D09A076D6BA0845F7FB9CA26CD770B2B6DD9D82321966EFC017D1D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\am.pak
Size 822KB
SHA256 d759c21b9569163629f2443e69f274ffdb3b1417eaa2b72d1dacc9a31819dbf3
MD5 e429defda7e6297a72c0bc4e36aa3f5b
SHA1 c609b50a3108558891a6ba6ec55e4d08d28faea2
SHA512 e2933099d010932a5468bca06f8aa74f9d387d359be57a58a16886c4702cc7d445aa977dffb54b9d35d69517670a428f041561d198143b7df621c2a47a42c12a
SSDEEP 24576:EaqDTorJhTCQIymrxn7Kxjkexpz205C2gMRsVGq+XG/6Kx/Ppp:L5k
TLSH
T12C05BB547EF9F7570F8E8A19A4320E4EA594AD4652803C38C35AE3FC2B2DF1B4DDA215
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\ar.pak
Size 901KB
SHA256 3883cff8aacb76e0ee906eb27eb5e5437674bb9af85bce1087fb49667d0c47d1
MD5 27f7382231e5edd297fce25db6c212bc
SHA1 a12ac371d96a713302350b91e85ce647f6b77fa2
SHA512 34b43f75c6600905194e98645603dae0188d09c84d7d31586f8bfa92df14221a9cae8ea0876c1ec37a19f07d01bb3542f950a623a4ee5f9f0f71b62c73291e58
SSDEEP 12288:BjwXVBFE/T/RKOEZrpvPUoIm+kuESJ5TNphQ/fitCj:kU5tQh
TLSH
T15A158BE21B2984720B56DF0FD1E23668E872BD23EB4BFC3124934A2156D7513E78E674
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\bg.pak
Size 938KB
SHA256 c87083562fe57e1168aaed1f432e74372919c2008aa690ca6ce719f1787d9522
MD5 ac47647ebc503ce6f77e036b218fe3f0
SHA1 e956c1a99025b8b8d92f8de8869a97a8cefc8285
SHA512 d3bce66e1ecbb1c216942a79102cbcd264b8d946de3723ab1f26b3b8e299b9569a0fda833cf72eaeb12d9656b0d681e5bd89952fddc5d8e51efa059041a8b4f2
SSDEEP 24576:LqDWArCqrOJLYazQkEC/UTVbAUkp373ZS73AAKUyVDxzR4umpfd2Wd5pbuFZojQB:+lrCqrOJLYn+UTVbAUkp373ZQ3AgyVDh
TLSH
T10C1524A15B9A689F0101F45F98087E093CEB84FE3FE7879241652DBD39F10B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\bn.pak
Size 1.2MB
SHA256 09dc06e2f6fbf4089cad32a23151cdc8fd873c17def2e85eaad31353743aac70
MD5 6a454e70f4587d7d767e3cd914a0387f
SHA1 a238ab368326c312815b194a9b057dda2a20d6f3
SHA512 13204dfd132df04fad51b4e1a636de5f2b63267c394411fcee57ae81d34193946a08634270800d86a30717be78eef20ec821659dae367328b1c6cffdaf2b838e
SSDEEP 3072:nv35NhwKwc/XeYvHCkSc2e/RT+amfmB0xyoYy3wFm7BbYzIh+5NBrqL:v7hw9c/uYviv6oYSwFm7BbM57qL
TLSH
T17645DE209C6E91B2A8C5CDC9474C6370C5236E9B9B61F74DDC17A25938ADC3C8CADDB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\ca.pak
Size 571KB
SHA256 17db67b5c28354db5bfa08697fae29c3555728a6409a653e0f136216c2d05e6d
MD5 a7f88df4c6929843e3fd867aba68775b
SHA1 5c911c2f451ce38f5d505eeed3b3b27870559694
SHA512 0f93247a1f05ffc4aa51b185c4400f1e38507ec257930465daf61bbe25ac85aa44da609d74f8cd22134d247df3447e5e634b33ad29582ba31a805b7d3f9d2e4c
SSDEEP 12288:HHUTVot7D1DeCie2O3R45PqFuN3Mw2juwHzejm0t3lAkbKTenjRxwOwjcXR2lxQc:Ul47SR57hhMNU62B56AUa+
TLSH
T199C4E8239BCD3B7744D2320AFB46C217A48CA9847B06D254F4AF1B1622CCADCD677AD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\cs.pak
Size 589KB
SHA256 09483aa859d024639f5bd2325007b4d2a35ce339231e051a943e1f0eed1b3336
MD5 a13e490df259331b90d3f0eb7690dfb2
SHA1 9c8ebaa5eddaab4f1d962dc6196ac7ad5a532127
SHA512 392241b41167af66a71ecfc719feb8e3f35ec23f2f9d2bde9bf0447d6baa1096a654d02429261a95bedc3de1cace712528e611787cb86a5e6c988e2406df34bc
SSDEEP 6144:83udwrsAbJG1v6JuyUTNIAsZSmAcNO5c0CjAh/NOKbJSBf48Q0:8QdSARIAsMx5c0CjAh/NOeJST
TLSH
T18FD44A1EEEA26425488002887BBE4128BD1E83540B6FB9BB7C8F9C95217577ECFF4D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\da.pak
Size 533KB
SHA256 19d135158a35608e646299defa1647743132a9436c0411ccce2b595ef9738b45
MD5 d52825334984cf13c45f71c38bd07ec3
SHA1 f2ba6d65d15f50f1ae244581bf13747b2b2b1f26
SHA512 21922efbc307912e02daaf3ff66149e50d8fc05b2db2d0be0e3e7ea0fd420a9dd29a334e83df59f42f4168d2c04d4946bd4671a4495855884259e959ad87917d
SSDEEP 6144:OBawkwwfzVm05uE7ZY1seSjUwlQO/JwcgobwpPaHwn5N/6UdKHzjd42Fxw8:4awkwU7djwbv5N/NdSn
TLSH
T192C45A4BDC9C732F89A94764F3118EA7EB5D543CC684224F65D8943A09CFDA093BE2C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\de.pak
Size 569KB
SHA256 954451a308b8c451f080ab628f53a16e6638c201b4d79a094ac5f3ae263c50e2
MD5 62fec38cacd3786d15a6299947e36a34
SHA1 927aae72ca89c1d1b7f15ec5c3a2a9823cc615e3
SHA512 957d6ac274db6bf63c789a90dfc5c437db316eeb6e30ffaf4899faafdabb8738cf2ed54acc100d15c41398bbc9f3d546d497f29e4675db50a02e1003f61fb339
SSDEEP 6144:GwqiLKbc0Y5r3K7Up26YwgsaKa6mzdyO9BdTgAKOzct5IjO63BMpUhPMlIsCx3:lKer3K7UpPgsavbHYt5y/MpU/sCx3
TLSH
T193C41703ADDF625EC78273607305CDB77B19E36BC346312A88EDD12B654B5B283AD426
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\el.pak
Size 1.0MB
SHA256 627dfa327bd3971ae2f26048c247fcbeaa33b3301c3b78f72ec3f199a365ca2d
MD5 de1a605a023f9f70c167c0b5dfe3a3ab
SHA1 bfc7f3ad1782ba103227401cc40508be58a931bb
SHA512 2f8f3c40419761b6331927c0287b1e65067ae5815e6c4fba764d17a2a4d670a54a0db2b35108d5967067c40ab987e458b0e84af9a4ad851afdd6286758cd8265
SSDEEP 24576:BVwHcaFbu4FiYX9m3MDlrJXDsSlmiH63D2NpUyEjHm1mVT8y2IWYNQKlCt2rDQu8:gHcaFbu4FiYX9m3MDlrJXDsSlmiHaD2t
TLSH
T10825CFEFB4542DED8086950785D8F07C2BC62D6CE749CBD86629CB60BDF80718A22D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\en-GB.pak
Size 463KB
SHA256 811cc30238e961c852267a897c579d6cbebfb957fde9be662d23e4ad989ec894
MD5 f5e4073325dfebfd35aa09016108f480
SHA1 93919cb1a28ac0a4a77e966d6599fd832edafef8
SHA512 503bb198fbdad64c67df0a2a1a2730153758e58fdd3c0139bf7e89477b96cf7c8ecebb23184d48163e6e96d1dfca9646870aed77bb393a5355605efed49032eb
SSDEEP 6144:e/BeweES7Ve7adMUwzqNMP9eqQ3K8faYmfcmk59MxhBcRRpVA:IetJhMiNMtQ3KB+5ux8A
TLSH
T147A42C1FF7841269069311B27F09A662FF26D06CB35116663CBD802C33B676AC3776E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\en-US.pak
Size 467KB
SHA256 de60674fcae1e9395cb9a2a2987dfbd97defba59dcf7e5e61a452602e38179c0
MD5 45b984d76459ab58884ad190f54bd93b
SHA1 6c70aad992986beecd86aa35d04441d345b9beca
SHA512 57635aa89a30a0dbece3586ef4b92ef96003faa11c8f666b8bab6522f7c26d7d6431e08c6335d41aaf5e33844e5fb735a22ee7aa621956dab6fb6615ab54795d
SSDEEP 6144:5sNJk9kFTDBop3rfxnKF8HWMP9epQBDRfaYNr2B55Mxwngpt/hLFwB:AobfxnlWMaQBDBm5qx/FwB
TLSH
T1E0A43B1FF744126A069352A27F0995B2FF36D06CA35112563CBD802C33B6B66C3B76E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\es-419.pak
Size 562KB
SHA256 99d5177b232925a00917b191ac358d88cd8e9a3eed73ed456ac4a62928345b49
MD5 7c122de65f4203421225e792afd77fb9
SHA1 964edb32afbb973635397b66f36a42255f9e89cf
SHA512 fb8fb7d87500fb1ff2ab16a2c960428ab5d9548a17ae24aa313d8ea60b11a36478f86ff99bc45d29e0cf33e7a97ab9a99b05412337aa5f6a7a076c7df506f1f4
SSDEEP 6144:TeTY0pDeoFnPbDRpDYBcO5oi1A5za6aQ+lR51m:V04WprOE5zaI+7m
TLSH
T17BC4F822BAC81F5310E3A388B743D753E4989545B408C29BE8EB876562CCF8CD977ED5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\es.pak
Size 562KB
SHA256 d66d7ac73c09edc6dd00dcb1b414bb662de6b588c06621764eb2e212db80fe9e
MD5 3c4e61e751fd35dba90695f806011bfe
SHA1 c29105b94443f3fe8400eead098d8c53fb9b7dca
SHA512 de3fb60248914f470a6677de2769efa485151b2e5c7a9f972c829cf7ad1c61d4542e71dea3df132bbb5202daaac45a60b01965ca03d39179d7830a6604072e1c
SSDEEP 6144:DNvbzJTpoaw30n1Fl0fEgRNkpT+KeuiR5R9njm5JLf2Q9g/N6PZauu:JXoS0Fqp6uiRpnjm5Z2oghv
TLSH
T137C40722AACC1F6310A39389B743D753E4D89545B508D29BD8EF876612CCF8CC967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\et.pak
Size 511KB
SHA256 7b17cf34b75cbcf65476af00a0751f55f77ade6caa68513ab3629a5254742b9c
MD5 c4e47186acd7c727283b480ad18e6f33
SHA1 96ba904d1a82286692f16cdbe8c44e310e5adb92
SHA512 a105c16e26b43a2f983096e9a7a2065fb255d951e365716faea81d3c9fccac3b93197052eea0cbb61b51fbbce48f6ff062c5d87574b2f9a7d8638bbbed2b4da6
SSDEEP 6144:8OunMp9UWdLs9/8uq+p9fUL40tmFooSPT88trPSikntfLH5oM2CjiCKMxacfJPQc:5uMpRNG/PhQmFoX4fLH5oMYW
TLSH
T183B43B42A17D731B282412F9E737A963DC9EE7D8B4000D9668970A1971FEFCC38B6B54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\fa.pak
Size 836KB
SHA256 00a9c5e4915408b948667b7b5c5715fc3fc8e6d628210bf9a341a55e86b6dfd3
MD5 6e6eff8214f35735566b31d1754ed6b9
SHA1 bcd1fb9a6202d98ed0db195c3c9748d6175ff8b6
SHA512 4c95e42e65e287ddc62266d39ab580cb1d552756a1576477c2e0af3e6f7555e6bdae0fd1c3e2b3840630e73bdb7be4eb6bc630b19a4a4e1f7d268d1484484221
SSDEEP 24576:eDH08u313uyqoT+seqyRmX1loTUOmdAQifaQ2XxFMJGk62YhhdTiI5MX4qOoUtjV:/55X
TLSH
T1A705D3956AAC9AB16747CA0341D33834C773EF12D34DFE40ACA1076609A5B139F5EA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\fi.pak
Size 522KB
SHA256 c2e954d937baa4a8ad382d064d8c6b0ce2fc3375c576dde7b8f8adccb83e4bc5
MD5 1920bd8cf37dedd27bedf200f350e1aa
SHA1 4c39426f62b03091130704ba5e6c9bd5442a1921
SHA512 f42a61efe41b6f4e2eedb4690f48b876af4a9c08a596143c3e6b6e12f7e546fcf2cf7f42f3d1fb0072ee98496255811d11934465627096feab5792c76b9b6db5
SSDEEP 12288:C5Hs0LI19loPajaQ5lkgUtWnep0WaAvqYM:6Q5lTn1l
TLSH
T1FCB46D915219C22237C8D29E7DB0903EF5E5E3DCCC284D96E843CBD849E99887D7276E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\fil.pak
Size 590KB
SHA256 70e5b30013027e3406ee0a9953bb34e27229d3e0ff60758a7c53837336966833
MD5 f244bdb007787a98e41196e403a002fb
SHA1 95ba50906890d275674d254ec39880e642733f37
SHA512 8720503d85ec0f2ea6ff8127e7c40786d5ffe7545845c7d0795c4fd7b58044549c6f194f0f7e54c49a1b32a78b5594e5bc1637eb62d61927df081b5c4be14882
SSDEEP 6144:lFcF+oO8bCkUEmsynDQ1Jx0phwA6umx5vMq7proEuAlmdK:loO8xTx5N7V
TLSH
T105D4B615B7402748DBC352E51360682FA6E560B83F82786E0FBF269B7BE7CD5D270192
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\fr.pak
Size 609KB
SHA256 fae930c71e897b3a6275d526384e9a5ac62fedc562b76904dd108b55b26f1246
MD5 c4a35720d8c9397215cc73ebf096ca44
SHA1 fddfa670699437b1b7b86975734de0279ff442f0
SHA512 ac0b1a210a30719b58223894367d28e3f8ea1c29ab782181ad135df07174bcbab4274d73b6bcfa850b72f5dcb6b35332040018274fe7cd24f7331d7831a04e08
SSDEEP 12288:MuGwUHo87ZL1H43p9ZR6QuaMVqRZz14xlZsZCMYnY8R58g9sQzc7IPV8IxwSSWt5:fbYViO5+W
TLSH
T10FD4F76FADD431CB1AC612B7FB12D663DD348248F215E340D89F4295129A8ECC39F6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\gu.pak
Size 1.2MB
SHA256 391a825c8f33718bc87ba6d8407e7fbe951b0fe554d0db689a6762eed38f3006
MD5 0ae1b87656ad93fdf7077743964f25d0
SHA1 501e4abb0e046e80812140bc7ae4db8d316ad759
SHA512 196b92f0c7d51cbff1a8c298656559b2a5b00685fbcba1d44ab6a002abe28c07347400eb5c4cd3b790a7912009c430af52a38d695e49eab906d80b9a1f5a946c
SSDEEP 3072:1oXxpIkT/T2imKPo5zfpJ/rfoIwjAwREJKVMjNiT7llj63rFulPCaSi5NAWsWi/p:1OIiTHm6o5NJbgb6/5qwhr1lXR
TLSH
T13B4519D0D3B9F07119DA9F7E819E512086695343D67E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\he.pak
Size 734KB
SHA256 1325b70d40e5d5019276c50b4777451875f6dda15e9bb4e23df0de404a2bf76a
MD5 aab6517caad0afbad64ff1736ecd15d2
SHA1 33782592c0e22e54e91225dcb33a3b703c075ff3
SHA512 1497a5069015c37296ad71f6a37ad155f70d4cb06c4c63431382eaa18b2a12870511b7e754968009f5b200537202083cdd272401915a478284f22675127d7a8b
SSDEEP 12288:9XqylNaQm9hVzyD4ki2T2rnCkW9Wqu/5l2PX8ACeX+7eQCajp5Q6syU+ZHWO53N7:FqyNart5Y+j
TLSH
T1F7F49AC4B2D452255231AAC39FA4FA286FF3CAB53CA27512CB14526CAC774F4BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\hi.pak
Size 1.2MB
SHA256 92b057a1e57bef223a3fd8c4789c0b8b94825822a07c29b2e7c057853cc627ef
MD5 af21f47fa2fe383621a66adf29101fba
SHA1 85492bdf2ad120f2885053bd72b3091ea9d0f121
SHA512 f985a3bc72bcce3083c17fd968e6c9119d0abe281b24738a0829c77d6c172b71694960b2cb23ea6bfb7545bd045d31410e0f04accdae60362c44abcdcb710433
SSDEEP 3072:udTXlt9ui9DMN74LYYK7lWV/BB0ZV1dKu4lYvhOEOTByntDPtDlgpfgrs4fe/8K/:udblvui94ycYK7lD25RKbhcn
TLSH
T1D555060CEBBEF3B55DEC3C8A32890D37D59D3674A3E5525348D5B3DB9844CB8046A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\hr.pak
Size 567KB
SHA256 5df6daf8c34c3e74eea274c8d608b3a177f4d6070a3bfb481cec19ae853b58dc
MD5 512e38d6328c71a24b8a9e068d2a4db9
SHA1 66fdaae1696b4cce1e0ec0d13d346ca5ebd8bb37
SHA512 116f8cbcf0d59139d7b1d197bb2117d34b9579dc418c0c6f17d0b3ffd338836e5d5ce8f1439f792a08839e0a1079ed4afe4f85752c5aea22844a70cbfd551a25
SSDEEP 6144:ikTWSkiC1OhHU0qhw8ZhTE765e9YjPCjlK:ikjgdhw8PE25uYrUK
TLSH
T10EC42A7CBEB297090897A386EFA643447DBE08DCE52597B7784F532E0043F4D6AB8149
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\hu.pak
Size 611KB
SHA256 a09f07ffc112438f9e79b88907b7853de161bbb91a807af96f57d01339e365bf
MD5 ac4b7e349c25d9d2b29f2cbf2ef866e6
SHA1 d56fc6fb8f66a0b0a0883f572f8345b6ec2072be
SHA512 e70066da52cf2d6752e6e22465c9ff891bfcdb5d04c9f2b2cd052c5059e0229f86a188cf0cb3435b059f66d2e97912d8df33c7ef4b400b5e51e457fe4e84ecfc
SSDEEP 6144:2w6RVhkmyedqVRj9/Hd2DfAUAxekitpd5qK8FZ9plLcYNtDdK0djew6cTnjDi54W:23V7ndqVaAcd5qK8ZhD0qbm5HPyK
TLSH
T15CD44C779376905AB8AC17D378647F16592E481BDF3B26F72887886D30A078D0D83C9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\id.pak
Size 505KB
SHA256 8bd54bf3b8cd369b4a92804c160bd3d2b888cc0a716d910c7a324569777f4e95
MD5 5785c0a1142b99b41b6118e096e37e1f
SHA1 a2e8ed5ca1fec60ec811ae9cab74c1286467a4ba
SHA512 2a2a374f74c24cd1876859e4fca2525b5bc8e6d86f88212af1e13970cf4c5b52e7dac31911f6dcaa54c94c0829fff39a984f738813be68c3a80d30051b02249a
SSDEEP 6144:KNU4nGe83eEhx38gmO8jBYBkf+eVnjHFHTmiZI/u5C7pjOBsIn0iT8wHp:BGGdeEhx3F82BcVnjHFzm8IG5C7pWp
TLSH
T159B408632ECD300C594843D5B2DDAA1E7CCD233BAF05B76E8E348F7055A67682726B94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\it.pak
Size 554KB
SHA256 d881daf64575dab20072130995d602d21381ec4536b7c57d862b511fc7b34e63
MD5 4e6fb4c153c436faeadf56125b6d2ced
SHA1 bb50f6204e0b7c2d08845ebb46136e552a72c229
SHA512 b44b674e10e726e4eba3a4b0a6e22a14c0cedbabc41e8af42bf2ce0ee008ed944e54e0ee185b116971dd9e14f145c9365c949183cbd27d0c629d0fffeb28b202
SSDEEP 6144:jHeZxQ1ClwrdN/hTx991jY9NxvESIqRRxsO1ytKvWjRT9Tj+ia3bDxLUAqpzSw9D:j+7QPdNe0lZTG8/Pskfgm4s5pLI1W
TLSH
T197C42C3AA5D621151A976359E621B085FB6EFCCCFE417218C99B031C23CFE44E2ADB47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\ja.pak
Size 675KB
SHA256 c772f5030a7fa6437e8ec2161694566c8e22319b68c2a2d4777eea7b327f8142
MD5 26579ff78414768486706a010168661e
SHA1 e56243b75fc025bb75d75a6889b6627100c78bc8
SHA512 814984f571a79026b855efb435cbc7e6e24c67a60899cfde9f055375c1b3ba072f47483bb3e059ac3e9d3607ca76bbc4d4f9d97a25538c5de92b2d5a9b8bc22e
SSDEEP 3072:tO5HmTzjDuFR6pe4VhuLKOw7Ei/lwLhO3tcACd5XYSRL51aZEhyQ2ImkNuHvPkwm:YFR6pe49kgKoixaZLQ2ftXabt5z2vVVs
TLSH
T1A3E4407CE3C569369D6153A22C0E36E17606AC9FFCA23A36442DC074BD70BCEE515AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\kn.pak
Size 1.3MB
SHA256 29e2613bc55ebf10dc0e6318233aaac0b39428a3af0b1e0867805ba60194e88e
MD5 ab565e8d33e64bd5b2b33ee54e3ae644
SHA1 07fd172a4b28dc2eda3081befbf9f6a03d5130e0
SHA512 6698acdbfa8116e124512644de545b5b28fcece8e745122fb53bfb3a81f16dca128bd657c8b5808aaa4b7f055d10b2484c9c92bf425a3f3c82369b6220e0cbf0
SSDEEP 12288:APR7MrXUZiMdlzb4VMQOEoTQ6m0hY7Q593W24hjSEjR:AzizA51WR
TLSH
T1F855CD186DBA7D301BD5006B24EC643EDFF16BE29CAA07C2F4DDD7802C66C6A90865DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\ko.pak
Size 572KB
SHA256 6b32ceb4d71dc8fbebde2f4ca3a543dbc4963525345c9298e8daaa3279663340
MD5 d1ff388e387db1ce20d5f2d462e49981
SHA1 c5a5f2ea00be1d4d8a10960564deceaee958224c
SHA512 0dfd299a6c3a3aeafa1c50254a1a422f7247869cf99548b477802cb0d24cfc6c105172538a9c9f4651a82fb562c40c4757a7af8a34cec2fd969fbeed3e6ed521
SSDEEP 12288:PEw78zNYv7ANf/FTS0mIXRxMSAG0GlzRXhw8fIt8OQ4E3hstRbrCqYwH75Rag7j8:L83A5vK2oUa
TLSH
T14FC4D6F238DB23CD1193C982AEF4FA198382D976F7530294ED44CE44DE645D74886ABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\lt.pak
Size 615KB
SHA256 1334d488e5b1a8357cb480508c8f6ce2ad211a9997f347e9ed1b9f712c60f74d
MD5 24d1fc605857a53ee7a92e6003d032ad
SHA1 dc744cb97b47f26cf74ba9e52666cd6c21656456
SHA512 552b1458337403c697b5112e5486aefa50ad994ed8cc9e11bb12a91bf0de2be92e934debe8af1dc670e398464096c925542eb63009bdaba8ce348cd597281a22
SSDEEP 12288:9pa3G+S6MAMF2glccVOc354745CMjMK6SuM:q3GOMxmE3595JjMA
TLSH
T18FD43B0069E3AEFB9A4467C982E48A78DEFD50005737BC61EC69C79AC43BF4525A0F35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\lv.pak
Size 614KB
SHA256 2486f896cf18c55462835ad2f363866995cbb992d5d9d39239b569727afa58b0
MD5 5d5b4c71b5d3cb178511d2c7d7488d1c
SHA1 3bfbfaaf6ccc59e49649ed69a42fbf0d4151f887
SHA512 ccbab44c35da319eab4563ec15d4e612462074e6a99ab35a775531badc6160c5b379f8000420f57894be691da46b9579e48d1c0f57e6cedac350871b19da1c85
SSDEEP 6144:Qa6OdcQGWLW+ta28mZEN4mNLtVFFKbW0E14i4f/ZbOHu51b4BWFAqZTCO5CoCYJf:BXyQzrGPUBE0HcHu5xFAqZTP5bJhgB8
TLSH
T17DD42A559EC68FAA4D908DCB7327D123A8CCD740EE06E112ED7D4B3A650F52432B5EE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\ml.pak
Size 1.4MB
SHA256 3335642c3f0c852beb595889d8a86431001133cb8c14c45bba688b764008b1d0
MD5 af63dfcb2b13d55a37875fb74c30d1cc
SHA1 b3b45850a5a07d1561412882526d5b4ebda643dc
SHA512 73b8ea93e3e0c35b5792cda9e7044c86111b7229d5d83005bbc1efd13a2afcc06b48899a44d50710567234c5788ab8331aefc61f09ac65aaac13e8a0b86f2f93
SSDEEP 12288:FvvbhsMrrKWIcaWyygh4hxn9mMPIPFiKfpBP1zX13dqc9Cuz3ejha+5465MXAfGS:dbhtPpgQKfpBP1zXLRz3eb546WXAu3C
TLSH
T180659D5BA036CD3B0FD102167B4E2FABCD5B9F9140AF668B5869F2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\mr.pak
Size 1.1MB
SHA256 39b3080a83994129a5dd5222dce549640bf51de644da13f2769e836126b7b782
MD5 d9edbcd139a2dda14efb088dbb99d36f
SHA1 757434df97d64e25bbd2e7f9f456283807a49c0a
SHA512 0309a16c49920b45e2add8020c527350dc6613ffcd3ad3ad22694ba419396b583108698ee6dfcdc5c28cd2562c5bb1bf82f1313243a4fc969e1914599d3b8b5b
SSDEEP 6144:aK4MfL6X/05r9Bvw9acCsKZKJUPjSHro053mPnkj:3PL6X/CC9acCVZ1PjSHrJ53mPnkj
TLSH
T13E45C24DF77AF3685DACBC8E36580D3BD8FD21B1C3E9925648E1B3E74884CB401596A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\ms.pak
Size 529KB
SHA256 0615106f5c7adbeccd9bb1ea207c8bbdf5e917499e3860103a3fa60069b835b2
MD5 6f0d9ca4630b5ffe349247ccb3f34589
SHA1 ff9a079ada57344154741070ad85902d576476d9
SHA512 d63db7111f9f92bb18c908bc5a499bc918df54859dca5267e352fa9355968198bcfb42872d96a61c5e4355713ecd0c21aa72383e84bc3713d15526de613c3ae2
SSDEEP 6144:/LPFWCBDA6axAq2YemRl/B5VTUcjt95b3RSyGADBmvzt:5WC1MxH2sl/FL95V9Gv
TLSH
T140B4B6469EDE3118085843D9D2DD6A1B7CDD3332B705AB2B8DB08FB0166E7E53316B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\nb.pak
Size 513KB
SHA256 114ca3cf8ba38df9885e54feced2db9f25c789c12fbf41ded07e58ffeb7d852b
MD5 8788fd146d53925f54e127a2b99eed0d
SHA1 0e892f0ea357ada0e66a868dc908cee3a448c858
SHA512 45927030c080846ce3c533c84cf26ad93f15aed8070edc07f6e12d7a4b4aad3eff6d84cd0b998314635a1655e0c8836199e110ff7f86077f46caebbd268353db
SSDEEP 12288:xygOR9chol4u5Op7f1MHY+HVbE59KLbSAk7f7t:xY899+HVbE54LbP4R
TLSH
T1B5B40783EE86B72EF6A443A4F41885579B7D942CCE98199B54CCC63E18C7EF092BD1C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\nl.pak
Size 530KB
SHA256 f7577370e356b5d1868b0faee46a3030aad4d7a72ff068e8910972862f7e43be
MD5 fc2f845462d8fd201dd55a9bab0c13ac
SHA1 d07988fc8baaaa94cc70e0b3152f96944c8579b5
SHA512 7712854e94730be7973231a55379d51271969cb156bfb88c45497c1b1563f1c4817595397570a2236a43aaaf07db9de89bf3294d76b35952491d9461680e0f69
SSDEEP 12288:G7JXlbJ9WQusQUWFgY5smc2x5btfmzmkbqqn9/OTy:kRlbJ9WQusQUM5smc2x5bFmzmkbqqn9V
TLSH
T1C7C4F917A84E253E59C1A385F6094FBBBF2ED22CC36CE67D94DDC1341443FA882AD589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\pl.pak
Size 591KB
SHA256 4f12dccb61513bad8306c4f8865daf59d5f666c3540c81bb9c56ef52a972819f
MD5 b6fd1e076dd7b6027d27b09c86440513
SHA1 0a59a7168c7a5f96a4c675b8191c9581f6d61a28
SHA512 d5b77baaf891fbba7786bd67b280fb1289751f9535586a236660a8e573d6ea87b4aec8616076d9987659d4d08b58ef6111766efdef1c15eb5793bd7b000a86b7
SSDEEP 12288:+7Y+WoOB/kDqOXfQfuzSJY6HAubIoP/CUdse3m2UXMgm/1QhHsB51bT46ewy:+62DM31QhU5KF
TLSH
T11BD46C0D96E98A4E4DB008E6F2E70B7CACDCC808F109D35FE45F452A615B19ECABE5D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\pt-BR.pak
Size 555KB
SHA256 74f1be3440a80f55b028cb3c42f291fe41c1626267603d94f57fdececeda3358
MD5 b00063d518dc48d46182bb86a2676357
SHA1 850c6757ebf56758f4ad9452e394427903527889
SHA512 75459d63e98eda8b450576d9cc1931c0e11f208ddc0742b9962b5e63c47dba92b6cffe2ef8bc5fb288a2302303628dbc6b9b7837a61b50e9dad1d6df29a16345
SSDEEP 6144:ikRiNLcbEORKqqZdNBXBLQSL4yPN5hDXFmW1sRgMCrX:ihcbEORKnZb5ZXPsR9CT
TLSH
T10EC41B2A6DCA136605225350B74EEB43E5881745FE0ACA87DCEF4F05A3DDE40DA33BA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\pt-PT.pak
Size 558KB
SHA256 72d9a069944ccf2ac4a6ef44110a2e3e70e8aa550664bc70445947ff72847038
MD5 27c720e2920e684d908f6037a9d9efd7
SHA1 28384d13c87368cd4196c461b86315eaa91525f7
SHA512 136d22693d858e968651c50d3759796f15bdcf20d002a41e70939291398d30774c4677284d13d20332571e04b54653880fa03cc310c0ea18e33c2b5bb7c2ab00
SSDEEP 6144:higrtjhtJKr5QBieJVJJxh2D43RfZRI5ejB/9SRIh:higvseI5ejB1SRA
TLSH
T1AAC419286EDA136605135341B70ADB03FAC86645F90ACA87D9EF0B0672CDF84D776F62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\ro.pak
Size 579KB
SHA256 432c9424a471857301b724035c973ad009502a7dec2a9df95ccfa73fc46dd0f9
MD5 f9d153fc60c03ac552c775c79f862513
SHA1 7e3dc463ad9c4e2d3cea0e5af84aa6afefef086a
SHA512 3fa61ff461ad751e51270ffea575cd0a2c70691afb895de2860c45d3b77e669061d3fabc2fca47bf4b3e2dbd87b2cd150f2d827eb4a5466658fcb223c3a11d20
SSDEEP 6144:z+nmepgF/wMnXEvTpGKdjOoTxatgVSK0GFq584xUXqs2u2/t2E3:Cmepuw0XEv8KBOo9aoFJq58CUv2/p3
TLSH
T12DC43C13A1C82A97199152B2B73624D3E88E105DF641D2CDA4EEC97D10CDDDBC62EECB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\ru.pak
Size 952KB
SHA256 d9dd48e68d20de6d90f8ae074b4f0f94ad8a9a9fcf20fb86a9a2a41caa618ea5
MD5 19ee869997b40de66599e7dc8d4b8432
SHA1 d7e320dd0a46e1137a2792ed37eb937545544455
SHA512 be3899306e7fdc8de376e2bb92469c61040e3f6256301d04f60578f705ec8e69f2c58e7e01c98dce1a2295f786748f1aabe0d84fca5f1657860850eeb3c26bdf
SSDEEP 12288:OHKqmXdfQjRo4YSWPAY+zJ9ZF1WAavd/96HzW/yqSvDs/m1sXel+YHVeXN2hVO3Z:oKqmXdt5/3rb
TLSH
T10A258660669E64DE1101F01BDD08BE093CEB45FE3FABA35619A42D7F35F2024C63E65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\sk.pak
Size 598KB
SHA256 99ed2b13a2804a399a6f4bd5e5608221ffb5874229dea14c33ceb24d99dcbbea
MD5 93d13caf1d389a6489d911468af1df66
SHA1 e57c07f3a46518edd327166b31f443b20e419209
SHA512 4f449e4fe79393c228936c76f11088ec1cf0df887a9d3e6781e9bf4e5d5c41b9f7ebbc1c7f94e8b5b7527be8a3d1037453e7dbe3b585f84d0f83ea59da318476
SSDEEP 12288:1PFFojkpIh4di1i5JAY5Evvw3QXtWTjsxt90g:PFobciY5gwIPtCg
TLSH
T111D45D3FDFE6181E8E8D0148EFEA7110FDBE46508A4EB0A5D84F364714E26ED8A78D54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\sl.pak
Size 574KB
SHA256 d6a8d1e4539dc08fc4dd6ac5a048dc20047b6f202103e3782ce59e3f2d908696
MD5 acd74a626e4e41f0e5f3516790ffc410
SHA1 2becb9f0394e61459530cf7028caca2d5b77fd3e
SHA512 0e5d2ca27d1331e916f0a71546351fedbe060efa44726a41a117b3a8fef949604d30a194523a88421bb9740e1092bc288ab19a5eea326c8bdba70e4673a48b28
SSDEEP 12288:o0MGJ7P3cB2FXoFPy53rfpWJU1ui/fzxlqc:oVGJbXkPy53rfgi/fzx7
TLSH
T157C42C35BAAB9E0F0D9BA2CAFEA606007FDC044CD252A661FC4F337D5015A3827BD595
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\sr.pak
Size 884KB
SHA256 de79d880a33f7ba3e5cd8ae457321671582e8fe513eb4e6f5b9e257f6fd3581d
MD5 b4c168b797939706eeab8e590df41a87
SHA1 96aef6c5565c407c1b8558630829e8df34e00caf
SHA512 12d3c08f4d28f7bfb7bcafb3df6ceda91c371d58d6df819810df3a9c0db11c89378cad0a2c7b0c63b618c92d6db7f603ba043c28c494857ede5c6df1a9ba3905
SSDEEP 12288:u2uMrZb7M3KS7PISzNSzdV/Jui4til40b95YLEqu0xjHgV37n5Di/k/0:VuCCuv595guWp
TLSH
T15D1557A19B9E64DB0501F41BD808BE093DAF41FE3FAB975215601DBD34E10B887B939E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\sv.pak
Size 516KB
SHA256 298cadec1174abc1b918bce83b22a09835cf8dcba87a3438dbe114bbc0463bd9
MD5 409223e938df09ff042e51247591bc47
SHA1 19d98ed2b4e7f6eee3d07913e442c65195aedc5e
SHA512 208266b425d6813f6889d7abed9dfd549602fa26f21231beedf13f8b09f3b2f9ae33d709540a3bb5d637d299fc2976bdbcfc9c7d4671851519318ca7559f7bb4
SSDEEP 6144:wQ/ltJdLdItw1QdjT6shgjCCx//Gl9dB+4RFcz5RtGl5nYF4tkvMmSO5DE/xJa5z:1ttjLdYdjTaCUL50rF2MC
TLSH
T17BB42C438A10F526FB72134DB608115B0AEDE25CE7E2958EB8D9883DAD8BD5805FF347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\sw.pak
Size 543KB
SHA256 c39c3ada455757bfcaecc3d80652e79201d2264578d42d221c52d7c50a601b0e
MD5 40c6e45bbe6afb7e05bf476c9a9b0fa2
SHA1 3d9b166d7ee7eecd748ef5b5796105397fde437f
SHA512 112d77897a9676220bc825ecee6598f0ebbcd5618f7756fab651ab8d6990959bbb16f1f481397f365f4a202366f714d432d3976ffa3e6e787bc3e62f12262f5f
SSDEEP 12288:vslxH+oNrKJpdscpU5QmedqrCBfRdBFUQbQW47TxEaFqYJjNegarCgMje15Z1/hz:0lxHlFC15//B
TLSH
T167C4D6629871E1191233518603DCFF731BDCED5C2E2B29A35A46BF0F218F58857ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\ta.pak
Size 1.4MB
SHA256 c66ce9d65f8691cc431db79178e77bc615bc1f212b27a754d395e5c8adc0fe13
MD5 2401a2e74b1462715a3322101e76e1e4
SHA1 f3ba3ee37edb088faf069de6f83e92ca7426504b
SHA512 28505fbed2d8b665b623053ad4cecc8a7226071779ce50f735efdcf5fa472a5cc00e1a89ab6fcd46a5df11d14b32a7b2f9a99161ee2bf15e4396c6dd9018d629
SSDEEP 3072:cg2yHsU3/YSTDZkE0tJzjKGfd5k62sntRdRtm1vYpiMyf:nBHPL/eF5KGfd52sntRdRtm1vYpiMyf
TLSH
T11B650CCE923EEE890F93288F0319536912986155C47BE3A67C766E1198ECC5DCF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\te.pak
Size 1.3MB
SHA256 4d9ba6b2727f5f62d90dd45019c68137f3d55efc23a85f62b4fa52ece972a073
MD5 e9933a531c8c72a589de854195e9c45b
SHA1 ca9cabd1c81bdfffff5da404b7f2cda5a2fc5905
SHA512 444d751674d9c6a00d571f918582b46ac78fc4be78636c4a1caf9fb52bea63469f70fc8a0f57fdaccd79f12327583f24ab575890dad6d2613bd38d2f29ea0da1
SSDEEP 12288:bKQ1jr7McKNq0yRcJ7FgnC8ybtKRT52bNcW3pk8W9fhBp3p1FZCnATitlF2iJk78:GQ1j/e50UHVj
TLSH
T1EE5591023A6AD310DAE60273752CF66C49781B8161D6732C1EAFA357FB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\th.pak
Size 1.1MB
SHA256 77209d15decca546704f621bf4e8d9269c56add000c057c568d0fe977c447e21
MD5 aad565b6857b6acce9bd4d551c80308e
SHA1 fc4883a2ef32230f8fbc768e949a443f57217dfa
SHA512 eb75505f6fa302d68def6cab133c6b448f40a2a9e1f4c2910bf56f68388272c8515253143fdf69f0e1febcb9596980ad4f2be0a9b3b96ae229c7f6d5aed31fb6
SSDEEP 12288:EDtO4bQGN9LyZYAPTKznLCVsjU7ynaO1vuB5UzKdfL3fgj8uRU+wunRUdG4Lw+wz:EcT5hNC
TLSH
T127355BB37247DDD479441B5B262A7789673DAE693F73F8E00089215A73F071A8422EE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\tr.pak
Size 554KB
SHA256 df9220e39703440ea7c9d9b74796ab5196fdd0ce7b5953af8813567f39ff500f
MD5 f5ffed9e08e2456bec4f4304358f37a3
SHA1 7fa837edec8f65c80a9873a24f9040046ce1a69f
SHA512 473b831dbe75c08ccc4668920fde200abbb23a4145b255d56fbea41ac1f51e0c71801f8b194324b46c0319d4a86adb89084c7e6b86e3c5cf92de2f313ea9f3a9
SSDEEP 12288:cBr+XqaG9flVXHzNs7DQqZFwbyt+545MI8JX:GsoVq+54538JX
TLSH
T149C4FA8178EF281C8FB9278BD6E90666F89F0766F331F4469A1A9636774535303E360C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\uk.pak
Size 952KB
SHA256 b76695b9352440d27c0319f59cd66df2d8d76eb1162d5f78a8374748562ad210
MD5 1ac5ee33a091d5c44ea7b0c9dbcf01cd
SHA1 97eba903ca99c5764ac11fb075eb06fcfe7fffdf
SHA512 74c72262cdf2d9e02e91490d03c1801416851150a910221cb5cefc4ac5e7f888978d0ccb7583f98d7abd54695a97279b91a4bd466d1fa5a0d66db19212712278
SSDEEP 12288:7MHxyqFx4gaqwmsSr+rhqdgZ0ZYd0IniML5iB3IjsHAf+rTjuuKLNiXErqXYjgX:7MHwY45kr9
TLSH
T14D2599A19A9D58DF0106F05BE84C7A0D7DA741FE7FA6471625A43DBF38F20248A3C35A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\ur.pak
Size 831KB
SHA256 78799d1065fe84bc64c8c851d5457639172830516ee5c74f08e210973908770e
MD5 b105eed802ffaa71f4c5d802d286a6e2
SHA1 369a0042ccab4ccc1f629f0fa186c62e96feb12d
SHA512 94c08fbb7eec3398ff1a9082c558b5c6830122ff8cfeee03361783a777d0393dbd99a4d654e9d40ba941f798185c171a3b9232f696828aba2a7830453df22c77
SSDEEP 12288:cEYAPz7FC8PIARlaXd28NJry41cfP5k66EhTCkORvlpQYrlYVwadcJKwUku5co/u:cEDPvb55CPn
TLSH
T19F0510D2E6BC96B25A21D92780D33C34CB635F13D34BF285E52246C54E9A0139F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\vi.pak
Size 658KB
SHA256 55bbd8fed3330da92aee877fb18640cf7c6391d7a6c6bb5aa2d072b4800d3ac4
MD5 95daebfa784e7401c2261f4b3e85013a
SHA1 47e290ed5029f297054eeff67089d974fd3a6c6e
SHA512 fa84e9cd8ba8bd6ce1067ad90373433c8183ed70595fd73915f48823fdbdf9c1b581ab8f10fe738e1b4c7fb6986c62f965e2618b7044e7ce6b7ca0b6d34fe034
SSDEEP 12288:joKSvf1+c8ZoET9VwMNgFu088xY2GbfEj2Wx5a8hZ7cE8UO+mziKHrvacQ1h8:j0v9+c8JVDgo07xHss5a8T7RlO+wiKLp
TLSH
T1EFE4851216E1702680AC553EC6CD540E6FCAE42FF7C18FE56FF429747A221A45F21AAF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\zh-CN.pak
Size 473KB
SHA256 67e96bfc54394701cb91e112bb07b7b7042ce9f285db3332a19476af566444f6
MD5 780ad68339ccbdd2d0b3590fea4f0d0f
SHA1 c9fe2e935a5f43e90ac6d778d2c7f77209f6c2b4
SHA512 c77f4eb2639f6277404be4a0c70ae68626f119b4a47b8dabd86ed599c07bbde3bc5fb8eae2b2c36b5806def0d08fd9ba756c770f4ba365897368d4166170a35a
SSDEEP 6144:F+Fhet0dfThfYzhJxs7+56PCXTH61pH59zb/4krv7HpulM:F+bemJThQzh3L56PCXTHiH5Zr4krTT
TLSH
T158A48EA911E9BDEC014640E03B29617D7C40B20BF667AF766DD244DD2BA2FAD0717E0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\locales\zh-TW.pak
Size 468KB
SHA256 ed372b000597fce75c14edd18ccad1c99e2100be884b58a7e7498488163f2554
MD5 550e545b7a3a3ae0e5b73f127b09813c
SHA1 23592a5cce7a4791366653fdbebcb21b456b2651
SHA512 0e4b4851b0f73159ef0e205e9732eaf3e7aaddfb786327f81571b7f8304a13f26ef27fd901f19a6f4805834615b8b683637dab0f9cb551b3d9eb7b5bdd488412
SSDEEP 6144:/WIM+T9wfsQwTc9ti65JyF72/Yu/lVNt5+QznGhkUnKFieWTl:/WkT9wfEcLi5qNlVNt5+Qzn19S
TLSH
T1E4A46DA609FBDAEF0901F884B7CD523EBC8B746CDD377736FC4518942E7AA640A61049
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources.pak
Size 5.4MB
SHA256 1b57de129bdd967ada780cef37ece8f16a798368b1aa123f1097f389d20ee6cb
MD5 936e7c3d93bbdcfe61c8cb5a3c9e5a94
SHA1 680776e06283a9ac529990b0171b3711c2913774
SHA512 c9bb418af7d2b0eb28c4740397edeb4d4dac74b92398e307d4dcd1daed521e8351cf746bdb06abcb72067f79ef5d40d232418e1e852afa619c63066e0641d32c
SSDEEP 98304:knNlsliLKTPeIoXG13gkPOGuKJSml2rwrxySNYtu397pE2RSvc:wlGiLKT1gG1nuKJSmQkrxOwkvc
TLSH
T10646338EB7691D3BC8AD43BB48A8463316A9D9390660B857314CE0746F273DC5BC94BF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar
Size 40.4MB
SHA256 0a7ec75fab4a5aa8ed03999e9308c3aeeec37508f9b9f535697180dd2c18e5e8
MD5 7dc31b9bc3e98304428bd30870891eac
SHA1 2e13a591bb4000332a70e5922a4429f7c4a74ac9
SHA512 68522d6d2681dff8102ebc985e3df0a32ab654d29ac688e9386074bf286cd9208e5044de38280904a18665fac33f6993e046fe4ed4aedd183d85711c26f9a513
SSDEEP 98304:JJI1kB/16NVw2YH1zngmdxRUXI1kB/16NU7:DH1fUKU7
TLSH
T147973C3665F7D533F15721B70A9F4041BE20901B2858E944788CF3A4BF86F38A6F6EA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SystemCore.dat

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\api\priv\SystemCore.dat
Size 1.4MB
SHA256 dae6675f14f34266d35a816c62ae174dc52ed2b04a4eface49a9e137d6b9c721
MD5 5c10c10169327ca3a7e1fb7419b8a524
SHA1 7093f871a7dcdbb0509d2d4fe38f09831bae84a9
SHA512 2df11ad3b1983d9226e5cbfe20cb8aab663d918c91483584c796dbe37d97265eafaa4b1d3430a900489d37039c7dbc86757b54804b1c47349954f95a74aa5fb5
SSDEEP 24576:46wobK6X1zzXMsRsr7GcFxms6xPNliMqQmIO/CL5vf1aXnlPjPf5XMcO2rh6XBoP:DzLZP+rA6j35XhO2rh6e
TLSH
T1DA65331B19D78242111A23DF683A62918B25AFBF6FE5CC89CD007963FF51CE1FE99601
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.dat

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\index.dat
Size 2.2MB
SHA256 50d794eb710052ed661c097e0e7258cbaa1f6034f00cbf85c72668a113bf1a17
MD5 82efaec2e08797e26b1b13ff19e3e7c2
SHA1 767b825bc328fc8d78d9937620626cadafa38757
SHA512 520e3b99c51776e8d41f130a8a66f0f5f075f14bb46ffed0c46cdc66285549dc530b14de3e4970592c5017df0e6e6832a2c25bcfc2885d65dd1b5bfcf5974538
SSDEEP 49152:toCqUp8Kg54xDkoAXobv1CJXAG5qiInEoujipbXhdKq+LAKzeBVY9SIDu:toYp8Kg54hIoT8Xh5EExSbXhdKHEKzeZ
TLSH
T1F7A533D9507B68D49F142C9F9C1157282B2D23A748B8FDC5DCB3D235CFB6A8B1A4170A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\LICENSE
Size 1KB
SHA256 09856b52897c91ab67e7456ef43067019f31dfd3b87fda72e655736b1ebdee55
MD5 daaa6378e66cac5c1de3eabc51c6020f
SHA1 af2953c8dc440c83d917e16ca36146363a283af0
SHA512 ab76e13a535d397ddd8e33caf39fcc9cbdc8b63cb8c5de70e4df328d4a85d19978b1da0a52bd795a2eb77a897ac2ede8aa2e65d17bf286e1eccfcd8ccbffcd4d
TLSH
T1FD11B91E73510B72189A13A055786CD9F23B715F7A5F2E84246DF341233B06CC1FB840
MD5 SHA1 SHA512 TLSH

Submit Download

better_sqlite3.node

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\better_sqlite3.node
Size 1.6MB
SHA256 7bbe7704e4b68ca6c2c54ddc80df52413b3d14500aefbf6ef6b05316e3ca42ef
MD5 745fe2cfbb931f36ddab018003bf02e4
SHA1 12681678b2a7496ff6e20007c7fb72ec6ea82a0c
SHA512 b44029e6fcba6ddf80c789d251f7958ad9d9d00ada94b970296da9235a106887f622e83ec5bb581e409bd954516fed62070ccbb45a38a0142814aef9ed2a45d9
SSDEEP 24576:uqmJw1chCzea1gMkcnNRqmSIg1eEIa7RtZBzd8duhmI9k7Ihie9t16cDiVPL:uqmzOeFMrSICe8RtZB587IKEZ8G
TLSH
T1EC858D47B2B900FCD46BC174861B660BE7B274051374A7EF56908AAA6F33FE1167E324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

common.gypi

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\common.gypi
Size 1KB
SHA256 e71a565cd7733e05efc3a2792b54e260126f03f490325aa2a201202acbbdb315
MD5 bc44eafb20590feef28f6382e0db7ea7
SHA1 db26781b95d0b3e5d97371b8be96d842f3e7c365
SHA512 c8bb9777d8ba552668cda8e21bd5b7dfd57077b1d944b3ff2ea36502d2f2883374824f0e01ac57f9ceb98c9dcdbec3cd8a6c6d0cb8c79bc627c0d20cd34f8f26
TLSH
T17B3187B404BB098FD0AB663F905E6448A52985A30D3C3F74B15D048D0FDD48E83BA1B8
MD5 SHA1 SHA512 TLSH

Submit Download

copy.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\copy.js
Size 897B
SHA256 05a2bd41dbd96e33e2fc6cf4bcbc722b4bc8c529813b882f92113d7dbbbece67
MD5 722c2b2dbeee143a14c7ba04edf8e3f7
SHA1 88321c5c15ed00c72570b28e8183b2440bbf6419
SHA512 0537a881c397d0bb0836ff74a881d650d59fc151f0e4ccb1c4f5a9fe84549dc9753b886b3e14534c551c167ff702fae71b58fe4fe90c78b43ef05a4cb2761855
TLSH
T11C115CCF4B4A2678E3F2B7C1EE21E94E046442E47A5A0824C0CC1DC139AB15A78C6DB6
MD5 SHA1 SHA512 TLSH

Submit Download

defines.gypi

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\defines.gypi
Size 1KB
SHA256 1ffa84b8af99780a293dcb7a9031c2dccc8b0d013aef434a35c283cc6c984f2e
MD5 524999771bd340108ce2231797e6eea8
SHA1 3363fb9d4780686c16b0c24fcff6909213fc56fb
SHA512 4b21116b1e0d3ca35c661538d564b392bf39eb4c3bfe3876c3fc935514404028ad1a7c517883fccd45d788743b3bc39f4aafa379b413162ac9e044d6efdff291
TLSH
T1F32167B51B575A0D36BA1417E43C450A7B84E2AB0F3730407050AA684FFC8FE08364BF
MD5 SHA1 SHA512 TLSH

Submit Download

download.sh

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\download.sh
Size 3KB
SHA256 5de8af6e9f41fc1b5f6d280cdc55d62c2a210faf722c7e529b6b3427be7c80a8
MD5 cf1d12194f2ffaadb8152502571c19a1
SHA1 68777900b2d533d72ae32ede40862a0db8196791
SHA512 8b20362f71c1ead34bb448d9acf31ccade3ead4c3fab326e7abc4617c0abb1a56a36eecc3218ad87e43af8289c8bf0280469c0e59dd1d0f6d5cc3246a6a1730c
TLSH
T1118160F7A789067D24C70069A12D62CABA23C32F8B7478485089566C0530AE45FBACFF
MD5 SHA1 SHA512 TLSH

Submit Download

1208.patch

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\patches\1208.patch
Size 597B
SHA256 5d1f22d69fee3551b70a7b7b9b14be43fcfd04dbc8683233667abfa75905011a
MD5 c26f21402ea045fee5214a2af12b8d25
SHA1 9adc0b47f388eaeb40685151ed8e67da4d3382ef
SHA512 3f149123d9000f1e3e285125ace919a25eeb776343c4336671a40b752aec513099976e3b0342faaf306997139d445050e456554dbe05a70fe3e775f57ca97750
TLSH
T198F0F68255F66B9371EDD170811B3DC643DA222CAAF3088E364C5BEF1F4D28D8759C96
MD5 SHA1 SHA512 TLSH

Submit Download

sqlite3.gyp

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3.gyp
Size 2KB
SHA256 a009b8f80cf0a944eacaf71a84e590504f353fbd8f8b341138d0c3094e372d18
MD5 ec4186a11866324c718f05aa7070de29
SHA1 78f251a963af25d039dcd82c38deb31723b04a88
SHA512 659279f346bdcea623d26c0619b088852137dd598677f3abf6798fa086292fac6d78b90071d116133162ffb5bf3c275220468727a8e2c8a3ed0ca3aad7dc037f
TLSH
T14F5142A8197F1309A5CA6A7FF95D82C20428A117CEBA3D35B88E44492FED1CC1233F74
MD5 SHA1 SHA512 TLSH

Submit Download

sqlite3.c

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3\sqlite3.c
Size 8.8MB
SHA256 e80215754ac6cfaefe272342efd581b6dbefdbdc21f96bd83fcb698bee9d36a5
MD5 694bb79442b3bddd29b659bce44fac89
SHA1 f2c16dba33d32b2524054c71f17d639c26c51fd6
SHA512 2208c16c7de4b988a5fd77cb309baf64f83644ec5bbc879ef9acad3df901ba3aa04196baa07d1ddb436e6db43218284ef000bc508c8c911a6ab23c66d994a5d4
SSDEEP 98304:KH1i9TMEMMn5kd0tP6bFZAM/jwD3PvNmeVoSbd5JPL0FDIoZGdViyukzpyUZTj9W:Oi4ytP63QDyl
TLSH
T135961AF53BC30E2760D38175A76F32D0A219C02F67B4D0947C5CA1382F58AA5967ABF9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sqlite3.h

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3\sqlite3.h
Size 643KB
SHA256 2198c66d4c59ae86421590c27fd53309ec14a595ae31c0c7143247444018a0bd
MD5 5b48759e7bd0f517936bd34132754405
SHA1 45b0cb08c957db5ee0864014df1a70779c267295
SHA512 5ac79126068dd2285033f9f24ac3b123052986415c0493801a04255e96414a126d782136f8e4b559575a32328d0090ae53bef3b97f4209d26536dda0a9794917
SSDEEP 6144:EYuxMvmZZS9CM+UdytxB0U7uYWeJOqmIXXKHBlGBdrUBB4VcbYdXifs7LdKwlYp8:taEIJKyrZ/TJOqta3GBqv4WOXSi
TLSH
T1FEE4B6B737032B3A20D341C1D16F53E49729E0ADAB715064BC5CC1682B25DA5A37BAFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sqlite3ext.h

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3\sqlite3ext.h
Size 37KB
SHA256 b184dd1586d935133d37ad76fa353faf0a1021ff2fdedeedcc3498fff74bbb94
MD5 f2686f8ac55c3975ac6b39238a2f3e8e
SHA1 b5f518e0f4ee9f67c064189b9f5bab832ebed375
SHA512 3784a9659f9c451ca26b764796996df39f257e92cde80d9b6409ba1e7879b17abbd7b2af294aa165530bd319a46ffd772b4fe064ca26df6abd7db03498b0dae4
SSDEEP 384:Tuz4G/SLqcMgCRmTgVYmLEjMhN0/kvINuYY04vFJzITx:TC4NH7jT4YmeM7nIYYYA9
TLSH
T10A0365D36B93005E74FBC541C19B20D14016EA33FEB3A7E4FE5DA8280F52665A0B65ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

test_extension.c

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\test_extension.c
Size 587B
SHA256 948af88dbf356835f5496c1a3d047fdbcc58f3717aa9bc94d0943d7de2b7cf5b
MD5 e5338de97cb9fffe3bafc7534c249be8
SHA1 9430bda15ed8d152f41f1ee83c096da50c80d00a
SHA512 f336c5bf5f2f93e13864e0f7b71034009592ebe3504f6bc4822983ba304cf71d1040ebb484e155c7b03c43f999908e8fbc25182681ef69edcb5169a94975c3df
TLSH
T119F0ACF2270F24E934DA8421C4BF90DDA220D11CEF30A459E84601C00E741AD003BE75
MD5 SHA1 SHA512 TLSH

Submit Download

database.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\database.js
Size 4KB
SHA256 50fe0b490f29174d961c4d1ae54f22973447ff1255fd710e785d201c0ebfb4d0
MD5 633100cb9dec3e4ae1c672c0b494fbfb
SHA1 185d7fd4070157aa1eb4ad0fc53c362ae649030e
SHA512 1ef6d19f98b38ac368ddeefa58d8f8a8e064e6402dd95d9b6e3b7a847c41cbd0f46dbb72646d27d01eb7b7f3200419c7ef8003b9ff53c9bfca76a71d22423a7c
SSDEEP 48:+FzYIUZFeVxWy3h9zxIEXMOK0ZHQZ27euTqQaqE8E+LC7yIGrhxtjFvcLd3s03Mb:ac1ZFjQBG1oQZi9qSvBBkLveomRz
TLSH
T1E9817384DBF5641247EB30D4A674A48D6234D27971AD08E0C8CBC3F531E50C9BBE3B66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\index.js
Size 110B
SHA256 82db11c4ee43a41d859988c5db42c3771dff565371f94bacbd1e4d8d6ceb47cd
MD5 26660b3078523a953ee252b4e86e1c8b
SHA1 f7c22bdc8183f6a9cb73a9b4a735a5bab7ca01b4
SHA512 d4f32ba712ff15e8b6a1634eee089057a4716318b90e932b95a1c1cd30945ba708e7e725316fc824107637d2e97a2a64193ae81c0a3d2484651f52122bace99f
TLSH
T16EB012CF1BF0B18F26A44184E9618493D8C2E466841A40208F05CFFFA484CC42FE2DE1
MD5 SHA1 SHA512 TLSH

Submit Download

aggregate.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\aggregate.js
Size 1KB
SHA256 e9f74eb919ec93fe089c95ddf25a98f1f631c80418fa34fb2346ca1bc29f1b82
MD5 25fdd950809b2b22d0ba6917fe014c35
SHA1 5555b3223918668b5bf244e892b1d6a258f0099a
SHA512 50516a2d2265513dd7ee727cf9cf21d118601a0ee2b9de61111c6f5fd8933915f3029ef6f764f7803cf5438725c6017002d7f58cc36988d97cc1bdb805dd42c1
TLSH
T142412121E2D2221605DB24E07097F909EA7ED720B54DB4F0C92EA7E910D1DCDE9E7A80
MD5 SHA1 SHA512 TLSH

Submit Download

backup.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\backup.js
Size 2KB
SHA256 ea29d34992bb02e006d0fdeda9675ac5d2bb227aaf57468decd997e9fc9c7dbf
MD5 69638dc10c19961a0c05350ae333d6a4
SHA1 5941988b67c6fa083358002ba36538f1e39ad03b
SHA512 495ecffdadbc8c9bb2e886f9f7a93668fa5b2192a0ba79a7e1a9d3c2640e0520e39f2d2c6f3a26b55c72ff882bff43ed6439c0ad7c7622461e6ccaf1ee8f119a
TLSH
T171413158F39E5169436734C04490E00EE93DD6B6313E09F1AC8953F022C66CDE9DBBC5
MD5 SHA1 SHA512 TLSH

Submit Download

function.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\function.js
Size 1KB
SHA256 f431d49303b8bbdc044b1f1b455bdad21fc9b74b007de0acb22f08f25b4febd3
MD5 1036ce624efbb9fbbb387fec25fd1bcb
SHA1 35395f7ef4c18b845582b9289bc802d87c9e3c11
SHA512 7d65a4bc5bf5c9b97dce021cdb8c888cf975ad24613b12b239db1e03a98dda89faf7b1b204c906f6dde5439d22414d9b4410554d01eea8fc121287ed8821f9a0
TLSH
T1E021C911F2A6214246DB24E0B0ABF909E97AD765B44C74F0C58B97FC40A1DCED8E3A81
MD5 SHA1 SHA512 TLSH

Submit Download

inspect.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\inspect.js
Size 174B
SHA256 4975a78daee850adee62ba98719d0f223819a0ec135a07c0e302994bd8dbff61
MD5 21784edff107eaec0e9ef7e66e83552b
SHA1 6b59caa4cc8a568a8ed3f184a075d66c68f17d08
SHA512 9bf6d36dbc01dbad11d5d01c0b662620bf6c0cebd85c0065882e8ec57e3304bc4d301add25bf57ea425a270f3ace6a44fcb958dcc8bf993f411eb81a5369adfa
TLSH
T125C0800973F1B465554F30D5955FD00451E5F0242CC450420D1DC684CD708697F3790F
MD5 SHA1 SHA512 TLSH

Submit Download

pragma.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\pragma.js
Size 536B
SHA256 8b1c54475bd4340b15e25c50d53d06308be65f8f919ecbe4aa9d285ca859ad5a
MD5 9354074a096ee1cf58905ca8dabfd60c
SHA1 63e6c02339c45c252ae3bb24267610a636117eb6
SHA512 32bdf8866d1c4e3db8a2ca65df2c1bd0d33c064d4cc526e264587cbf9c09ba7b97c8adc430a9dc019d9863e0e90b4318442ffb5cd08e0de52cdd4f081b5150b5
TLSH
T155F0C91602F245530BFF14C094E5F534F4B7C668B50E94F0D99E83FE41808DAEA83E95
MD5 SHA1 SHA512 TLSH

Submit Download

serialize.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\serialize.js
Size 625B
SHA256 7a10ee5c2735384b7f0c361811bc6d017db29f62b203fd3c68a35f667e2c2605
MD5 41cfeffe67a2975f68aeeaaed0bf384c
SHA1 321f3f817bc095c34b76d060d706ed2cc48f204d
SHA512 8a0ad9732b5a07866eee742b2e884e521111f213af9ae39ebd92fa029d88f087c43f8826672d1fac5c571d14b284f20ae25e12aa4058a7881d6fd5e93c0b0a0c
TLSH
T1F5F0783A3365564B0997A0C050E1B429E9B5D324312D68A0E989C3F511D48CEEAF7B9F
MD5 SHA1 SHA512 TLSH

Submit Download

table.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\table.js
Size 6KB
SHA256 97c42d9ded1aa96c7d916b5b92f96b4e59581d50eaf629cd2c7afb78ff26a9ea
MD5 43137a36158617045d106a2ff534edaa
SHA1 f365ee98f7e36d1bab09e58187d467dd5f73b6f3
SHA512 f4330d881ae76d41083d3ba9d0056697abd634638a9951a4ebe4044fb79eceff4da034d22d9ba2ad4cd1a208fb0ec1c47855da781d9c9dabc34979f6f7f9eff3
SSDEEP 96:bJx7JBAUU6VtWpzwukGy2K3rN6gYMNEXxulo+yrgrm+IttSXFJ:bJx7J25PUyKb0+UklovOQk1J
TLSH
T18BE12308A7E17A13404B7095BC58605EEDBC98B27C1C48F5B8DC45E92491CBEF9EAF26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

transaction.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\transaction.js
Size 2KB
SHA256 bc8624a3ef689d8f78e5669020ad121e17acbc93b1d5ee5afe26860b1084c66c
MD5 6b77badde74e5a5b854041134e62041d
SHA1 47f5883e26f1aedb2bc1557cef9dd21c26e0e0ef
SHA512 d5be3aed74a9c9a948afbf6f03c19e21ec6d5a86f5f277de85d9d7374136fab4cf68bca1a6e752e5d41ba6b48c00577ca26ebacabd5bec51491da28affb3719d
TLSH
T1EB514312F67ADE7063E23088FA0B630EF5299A49E03494B0E760EB4A3A958CD8117D53
MD5 SHA1 SHA512 TLSH

Submit Download

wrappers.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\wrappers.js
Size 1KB
SHA256 a150a6271d23f4e5f8953b129f370ff096c7cdc4b812afbf080a6cf4ab741bcf
MD5 9e2ba6058f66127065c27ea3e81b8e68
SHA1 92346423dab9536ca4afa50e7ef171843d5eba5d
SHA512 2b6644404fea27117b74f904bc608fa42e36e3b100f51010394ef917df7c48f40af018e5b06243d31d7ccba5ab05cb32541566e79775df482e09a107524d091d
TLSH
T187213A8A72E6F162D31530309DCFD184FCF9B861694C64BCE47497922DE007942DEDB8
MD5 SHA1 SHA512 TLSH

Submit Download

sqlite-error.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\sqlite-error.js
Size 717B
SHA256 2582d61c27680dead168543f392eb102be621dfbef282a4ca4c7c21aa5e7c75d
MD5 e1372372ca8f94dd66666d886a81f9b5
SHA1 437034e71dedf15013967b540db157cbe3eac3ef
SHA512 5bbfce635aa1b10b30f1703eded4256224500705e3b14c7cefcd522ad703596d15d6cfee7914dd70700827afd01a50d61bef1954d29b8788bf6347f96e9cd8d4
TLSH
T1660168C69F7099BB01E15884FC116806996C5678C021B5E4B6C8DD9F2DF0087CDA56A0
MD5 SHA1 SHA512 TLSH

Submit Download

util.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\util.js
Size 331B
SHA256 92b2e39e2151b43a2252e10b6d6de876ecaf0008336a4fa1dfe1317b20f1916f
MD5 a5d75fb36bedb4938a8b9dc6525fd515
SHA1 b5270aef455a7de04d31d19713ed7dfceb55fa06
SHA512 c181b25f5b991826159125a4f7af8ec0f8a7bbceba674121f144f401295670136daa64598d4e0f48cb8ea2849000ac8e7f59881220f6a30a4905ce9309db8067
TLSH
T1E6E0261BDAD2876511AB30862E8EE404DE6CD2A6746854F0682AB64970C84B4EA8B25A
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\package.json
Size 789B
SHA256 7de814561f018b0a493fbdaf7026cd4053937de66736be0175d1d0f7727ab4b4
MD5 c0b9546b1f095b473272539df6240627
SHA1 4441bbcebaf267726a3fb81a2844cb9e7f0f524d
SHA512 f9ad466c72a3483e894a0842fc60b72994b025ed1ff0a788e5c113ca95a51769fc322fe3e3b6456ddb1103397fac71b3667c7292f76d6248b9820cbfb6d50802
TLSH
T14A0128A0CA158EE32AD569D9B8A91042A2214C17DCA0FC0C7397466E8F4E5BF31BD63D
MD5 SHA1 SHA512 TLSH

Submit Download

better_sqlite3.cpp

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\better_sqlite3.cpp
Size 129KB
SHA256 551abc7d9feea0ad2acb97f33125c5e8800d6d84a1da4390512d08743f924b1e
MD5 6caaabdb1e8c9261038d16c817ef0110
SHA1 8f8fb3b991e68cda9e8cbc9724c835eb15a1655c
SHA512 1690975c07318e66593a697b92b5a9fdb61596f11419f66557087628931d521937ef97066f9a03e65024f5f0aed5ec89f414c617b39ea82010ed030047957418
SSDEEP 3072:xt4VPcvLXzBbPJpNdplB9RptQfN+/Ah+7LyrlOLmrw:UFfuA87LyrlOLmrw
TLSH
T1A4D3822777FB942A25AB8014FA3B1985EE05850723B4E918FD4ED0646FF1064E1FDBB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

better_sqlite3.hpp

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\better_sqlite3.hpp
Size 42KB
SHA256 689831cdf547d53b2156fa66088f04b89ed71173f4a832300230ff765879f6bf
MD5 cd686811e68b8b0bdac58c20b1c21e7f
SHA1 92a095466e9f8255844fd71f8fe08b89f2a3a592
SHA512 c449f8ccee3c118f87652a930ee189887768f091a750b6d81b4bc6810f37910a27fd3072820972fc078c688f49babffe77ceac04f3b9115350ea878e6f87372f
SSDEEP 768:T+446h2/MLHU6JPLhcpHImIZKRif7vx8NjxDXs0C:j46s/MLHU6JPWJn9Ix8NVjsl
TLSH
T10E133F0F77EDC4A0A9DE8816E82B3542ED01E24A60515354F7CED927AFC6245E1BFB30
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-vm-detect\LICENSE
Size 1KB
SHA256 773de8cc68a89212ad93589b3fe9abcdc64e573cec2c684af844dcc9e7646ef5
MD5 1b1672d69266b6e7207a0d56bd0a59e7
SHA1 bd501807f917973e25c4910e6dc5dfa0022ddf6b
SHA512 974b3d1e55192f3f9efb00e1c0db4f25bb54e682327e895a0db86ab00588779cfb2ba838cad1178a9de6fd28a71548896f67445b01938d7ff6f39f77155e7426
TLSH
T17A11421EB3910763189B13605578A8D5F23BB25B7A5F2A84246EF345233A06CD6FF844
MD5 SHA1 SHA512 TLSH

Submit Download

cli.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\cli.js
Size 40KB
SHA256 1e350f69922fae919608c966aaad02f3660851a1d6814bc74662e8568444180c
MD5 b1884ae4bdb81721c6cffb9d2e7b882a
SHA1 839c9aedeee1e0af3d0681d1cee1ebcc32b9f35c
SHA512 e35e84a36951c040642a6bee9b6ade9d47c4b576e40818185270531e348c9fef33d4afd085b8ace177ec846b307550912944a80d8964ee289074da92271f759f
SSDEEP 768:IVAZofJ6BTReJqCicLYuLB/uixiv65alukhp/bJ8N9g/5sMp0dx6UT6ehuCbMQyT:4AYJVqCicLYuLCnJG+ekgpqypNw
TLSH
T1F413B482B6EDA26303D2559158750203E376AF143608943FFA7DFDDB292CA46E673B70
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vmDetect.node

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\darwin\arm64\vmDetect.node
Size 161KB
SHA256 04b07f23c2aa2b1a3f19580deba5632fcbfa3c55404b465d4312b8e177e1d46d
MD5 0b0f32ae7b22cc093e435d1817676f57
SHA1 bfe8750e4231b727f9315b5b7fbb0c3053cea6f2
SHA512 bd159d6f1a54a9bd3d37ef53c09f25bb5bccd9d6b233cbe60d5c2b7eadeb75758f51930fc3d49a021b16d4a8a65ec3afdc1c299d110a7e551602b4481d0c856b
SSDEEP 3072:rMjaHN0kC7Gnru48HjDxjhDKl4bAErXerPUv9kBmOTC:rMWw7GrSHjVjlKl4Xv9kBmCC
TLSH
T157F34A63E36D6913D299B1BC0D4B431A932AFD225D30C3F7F9A1CE4C9DA12166E58723
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vmDetect.node

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\darwin\x64\vmDetect.node
Size 175KB
SHA256 9a661ba191c79ace197525e75191902fd9f62c508a0b4113eea282003ebcfe6a
MD5 567f0bc16862c7e290fb4d6f48ec4a97
SHA1 88c068a3e778354c66ff3e1bdeb0c1f7141559d0
SHA512 c40055d90423897c5d6852fa1edad2e6615a0882a73e1ed9ce27c78a2d72ee595795668862048b3adb6c6b974324fc5aa87a38d18ffc495817c45ad4aa6d8092
SSDEEP 3072:7QYvl01WCAl4QCirorHDlQEixFcgPb2oZcOn63gWkBD6Tt:3viw46orj2nCMb2oX6QWkBD2t
TLSH
T11C046C13DB5AB451C955C230AACF4327A316FC72AD385FB7A790DE5C1EB06A1AF0170A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.cjs

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\index.cjs
Size 1KB
SHA256 5eab9a38b20f28ad36d8872c8cd5b9f7045199ed0234523d13805179fd915afd
MD5 c7df9c0dba25f94ac8dc42ee98efd44e
SHA1 10a01f81b9bfd0488d0a8ce54610bd8ed81d41f5
SHA512 1472b21aa5dc5584b801c151faec8a44eb038792b9efbad2b7121b2f201350addd30a795cf883f7df41731a66861ea58870b078230cf81d4bc92b711fbe5a33f
TLSH
T19421892042EC6CFF724D85C5607D8402B8D7D5F41498E9C2724DCE26B1643C66A673E9
MD5 SHA1 SHA512 TLSH

Submit Download

index.esm.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\index.esm.js
Size 1KB
SHA256 a5a7de769c38039a77e77974848c8d43aa1ad461b96c73276f8f895f1affba2b
MD5 f8f10f3defde5e91cdbccb572e3fddd4
SHA1 9727e628a0a908e7022f572b4e45528764ae5d98
SHA512 c7822f9824f3ef64d93d5c49a92213c647347b8e5d1115189838ef98be9ce6a002edf8e910e8f3e0ba2bed94854a5ef3e28587ac2d36fde61b901fb11fc5d528
TLSH
T194218603D5FA1D3321B7C1AE1B0B901F7721A0871B88DE9A7C9C8B38DF8017895B129C
MD5 SHA1 SHA512 TLSH

Submit Download

vmDetect.node

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\linux\arm64\vmDetect.node
Size 314KB
SHA256 77847ca63d7e2aa4b4b2f000b52501d40a632ddecc2b09ab84fc49dbd55f6a89
MD5 fe0e1620437676bb71c567abff633d7b
SHA1 6f6c8738fa836460e6e7218ecd7c150fb2efd575
SHA512 9ed515b99f110b1097233f9fbcc266806a7335118938ff8e3ee223fa014142ee41d11aa69714e80b22b0ff84307c57fa01b387ac9db1b4606275fefb10a4c772
SSDEEP 6144:zAaAqqaL265I93d7GYwcc4agnZOfEpF1fl:qTok
TLSH
T13B642907F28DB837CC90B53D5D474237B92ABC2A7B2892B7F050CF0E9D426699539B91
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vmDetect.node

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\linux\x64\vmDetect.node
Size 288KB
SHA256 d0ce09a9e40ba569de66a6379d893cf5ea89854a795f820686d896f9257501c1
MD5 4d299a4d76be0a9a4f6cfcf318fd2718
SHA1 ec04959b91fcae06892e784aab14880f71dbec4e
SHA512 6972417833b94c90282f4d8e34cba16fed1d0f2469236988c7e6e7e22339abddcd1ccf116930545e40748b3d855640a037bfdc33db50cf652da3a7fd042d9e14
SSDEEP 3072:rWOAq6ylvaJX36ATu8uWYx/twLhIsea+2pQy2xRlQEFjHB6eddN5FjswM:dAq9aF6o2Mr+2pQdR2EjHBlLFjs
TLSH
T1C1543A1B7346EC74C8A1973469C752638563BCBBAE3C6677F2C1DE3D2D62880462A353
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

node-vm-detect-child.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\node-vm-detect-child.js
Size 967B
SHA256 ab0fd44abc02a37d3a7cdcd30d9172aeb81c425e112d88357a7d90415e0eccd8
MD5 045b45ed709f45a5b99b13f78e3dce64
SHA1 02d622721b4d4a54a81d4f48b96bb4683692628d
SHA512 6a80d4d22415c141ef98b0ed5e97cfabf917ec0c723df81252ca03c2d502e0e1471b3dc7ef0728a71cdac3c7f450cb25542905594ac2473ad9090f1222f1244b
TLSH
T1E3112524C1EE193A138CD8CEB0B88006E8E5A0D1355A95A1534DCF59FA60A49B9633DE
MD5 SHA1 SHA512 TLSH

Submit Download

vmDetect.node

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\win32\arm64\vmDetect.node
Size 338KB
SHA256 fa575d992a255ab04ed2d6dfead75e142dcf5da6f8dc46dd23aa2895f780e19a
MD5 e7f7f74768550b84ee4d9688444205e8
SHA1 be04d1c3b18a8cd4e582684905a7f72798c83b13
SHA512 809b78656a9b3b856ed71f9cb4ad86bc3e35ad73155031f7d99ae99f61f5d206ec6a5cf8d9c7d1fddf8827f5052482de60fa0639416a6bf285a113bb7aad885c
SSDEEP 6144:FGBYDNCXL/Ls72lW+qSEXvRk9Hy7DTkFg0i2ydRb:pNC7Ts72ZS7DTbt
TLSH
T166745AA0BA8D7C46E3C6D23CCD734951612FBD7DA834848E3157020EED7EFD489A5A62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vmDetect.node

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-vm-detect\dist\win32\x64\vmDetect.node
Size 433KB
SHA256 312a270b60642ef1d309a94d7169c92490770c41a1299a6ae2d91ee20bbd1780
MD5 e0c2dcdbbaf748760c3260cb1db6dee1
SHA1 6580174ee4b5c8725268a7c4e3833ad9a1fb42e5
SHA512 49bdb0aed78a1cc56fdccf4f29d4d1083263319cf837a0c46b6e8ffc5753986cf23464e961038ab208dd7d1353f319a5386ddb0b5cc61f7de9f18495ac9613c8
SSDEEP 6144:yuGRsWHBpngkK8m1fjFTD674+vSCj11hK7W21s8FQf/KaEB7E3960o2qWa:IRxfgimxFAQsxf/Kz7s96DP
TLSH
T190948D69F6E500B9D1BBC238CD934902E67378590770EADB57A089E56F33BE0523E742
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\node_modules\node-vm-detect\package.json
Size 978B
SHA256 0f26b9d66bd6f76fc85db9cec20d0c71e3f94436b869c1aed61b37d6cd6ba628
MD5 abaf27851af9161af8664270703097e6
SHA1 4a20bbf8454aee98de6401de931861182d956d4a
SHA512 0873e66596caa885b5ecb4a91dbeadb08cecee915bddca874c2c047dc6a77f6858d2aad33718fb4c33607d88d0a35c4baa54dad45f7725866ddd40b1ecd6df32
TLSH
T109112739CD54ADA307D906C99C29568264301C0B4964F808B7E3536C8F9C7AF22FD6BE
MD5 SHA1 SHA512 TLSH

Submit Download

stealth_loader.js

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\app.asar.unpacked\stealth_loader.js
Size 3KB
SHA256 5e23f6d5cd2fe7b983d6eff6effc9db8758e92ad2d841668883d564326d907b1
MD5 4946fe18fe0c8dda8b76aeff9f828acd
SHA1 849e362ab96d36448e528ed1235c19500c4f7678
SHA512 70e221559e90255140434270af9049005b14d2675810d1d5401bf964851346a637c98b58325337b8d358d2fd903ea51d9840b7f9a57399d7f6a1e1929b760a42
TLSH
T1E5518406AEFA21B0A97B70979BBF6010A4F8C5536344C501F44EF7481FF97688B289E1
MD5 SHA1 SHA512 TLSH

Submit Download

elevate.exe

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\resources\elevate.exe
Size 105KB
SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
MD5 792b92c8ad13c46f27c7ced0810694df
SHA1 d8d449b92de20a57df722df46435ba4553ecc802
SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
TLSH
T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\snapshot_blob.bin
Size 306KB
SHA256 318c99695b76079bc82378d5bf38dc9f8bc2d28fe4fbb487a1eda03170af233e
MD5 41a4e7070733f20097218576f6484fa9
SHA1 495a36f4d85946a8e95d8f0ba85c8b2a400e1670
SHA512 e644a726d26d887305018f337c91db8d7f207f3a9d75e71f531cd58e62fbeb0a4b2ffe6d14b4e16c8b791ca05d249573ea04964df46f597bd295eb17c2b493df
SSDEEP 3072:DgC8/wQXLwqHMp2ubdJbhlsN2CZz6ZU7A9Z9lYu1dVkoBzpLDTA:DgC8Xwqexre4awnG6s
TLSH
T16864FB05F7A0CB1EEB156A709DF8DF9A3235B2DE5E06AA0B32C5432D3979A340E0574D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\v8_context_snapshot.bin
Size 650KB
SHA256 8ac45d2ee2705bab53e3ff9564936455301ff722c3b0af0680fabb83d3c27bae
MD5 c3048304913b58e1f8e0df23f15bc864
SHA1 241013fabc2e905dbcd8f02af4d008676db421b6
SHA512 a9a1e2b3af0fee8eafede606594b4f934ee4f0c34ed288b6366897cd42042a1ce3fa9d55029f9a87e6e692ae7f7d5e83d007bcb8e6bd685d84ef0df0fdffa9e1
SSDEEP 6144:KBUhye6gCsgwqexre4awBTGWDgH1Q1dhgXFUhxRg/4RpZqCaBygPEkknFmJA:KBUhye6gCoLGWD9q1xNCaBVEznFmJA
TLSH
T16BE4C767F394DF2AE7C95E70AEF7DB923234B089AE0A651B3196532D3179B240F4424C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\vk_swiftshader.dll
Size 5.2MB
SHA256 4c27819615b1561fef94520bd0d3a9f3497d6e8ceba28cf4a9e1cac94d899185
MD5 56659b3a4a5f98c80a838dee6e64dd39
SHA1 008a0d458cc38aed69375937d811748f9aba820d
SHA512 42ef82e197b6968f84d23c22c6be41cca46f9eb45319b289bbac9ccfd1be39ef68469451bd50a5a43541c61da925d02e693e54a03d218179183ead44ece65c65
SSDEEP 49152:pCG+XVpyPu0yb8pKePr1Avp4xC2JcLjX72xqiO9+O2Qx7D2ljQok9JxsUxBAJgsG:HiyPuvSlQlNxXV54FA
TLSH
T109462803F2858099F05DD1B9875BA622F632BC801B72B6DF52A01F192E77FE06B39715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\7z-out\vulkan-1.dll
Size 874KB
SHA256 7be20f5cce153661ea5a23a37344894e4d67253639e565a28925f055aa6b3be8
MD5 2a11439a7537640565a36694fba005c7
SHA1 fdee5f030a5adbcf1ca548b60a7d495d0f27394e
SHA512 9e4deca9e3fa0e3d2828b2c0d8c0b6c1f093768c7cee3163b870bc0c53c457f1fe35ef28b64f80a9c8a0d3bf3f9d91738364bcb8f748ee11ce0780f19070a4f7
SSDEEP 24576:svBtBPY5xbcAl7iAP7u6Z5W1DYsHq6g3P0zAk7/BoxzKDz:sZA+AdH7u6Z5W1DYsHq6g3P0zAk7+
TLSH
T17E156C22A6A4866DD47A9034C9C24603C9F274921326F9CF03A45718BF6BFF47B7DB25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WinShell.dll

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\WinShell.dll
Size 3KB
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
TLSH
T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
MD5 SHA1 SHA512 TLSH

Submit Download

nsProcess.dll

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\nsProcess.dll
Size 4KB
SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
MD5 f0438a894f3a7e01a4aae8d1b5dd0289
SHA1 b058e3fcfb7b550041da16bf10d8837024c38bf6
SHA512 f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7
SSDEEP 48:Sz4joMeH+Iwdf8Rom/L+rOnnk5/OCnXeAdbdOAa4GPI+CJ87eILzlq7gthwIsEQW:64c/eFdfS/SSnkxNa4G+ueqPuCtGsj
TLSH
T11191D87597D804B1C197093276620A672FBD843603A7651FE7836E962ED0EFBE874321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nst6218.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sys_debug_6df9a408.ps1

Path C:\Users\Admin\AppData\Local\Temp\sys_debug_6df9a408.ps1
Size 711B
SHA256 8503dbc3f575107f88886e23b17bee6775febd917ca6726c5cfdbb6ce34e0b9f
MD5 e96d1e1ab36b1470ac923f8601da14d2
SHA1 61347f0ceff22f4f811b7bc60f0cb9be9fac5963
SHA512 ce4a47d6ff1fdbc635d6170ebb6071c5c7f3f9c7031d1665156cfb68bdbaad468e04716b686e114c5f1032c7bfe9bbd48ee0d73cf1f20ceb9b0803f3dfec568d
TLSH
T1E901657011F02B9704D01207201BC45D9F75832B2BA06C84F7C04847F248A4DD62666D
MD5 SHA1 SHA512 TLSH

Submit Download

sys_debug_6eb10616.ps1

Path C:\Users\Admin\AppData\Local\Temp\sys_debug_6eb10616.ps1
Size 707B
SHA256 266ecf19173ca87c8571384b41bd94e13c28f6dcf799d0635695863d794e4d8b
MD5 1fdb3c10d685f62e511fce57bb5e0ef9
SHA1 7d136cae16a3c622abc854a9086990166e996a97
SHA512 22059132edcba2edcc905fb80d14cb2733fc7ff2ad5ac764283daaf3e1c98afc945d56e1d2f7ed0489152de83932f11f0c754a5c5c5c6cf5db403ad18a7f2129
TLSH
T10501C03115F19D8C05D22765105EC8297DB8C30B6299AC44F7C0359AE38D58DCB7675F
MD5 SHA1 SHA512 TLSH

Submit Download

system_check_1783822198843.vbs

Path C:\Users\Admin\AppData\Local\Temp\system_check_1783822198843.vbs
Size 233B
SHA256 9e24f5f81cac17d844c25f6d7dcf13b924f97150acb05b733509a57497fceb29
MD5 fd7a3c0ef60f299c98ae8ecfae8223fb
SHA1 01b17cab67101d1300309cf494a16e3ea0f82880
SHA512 2aff38e196322fe9eef07318430dc8e1fa70394330f42265c109cba3f27f67d19934b91007fa069daebd8f495cc435543eec246bbefdf332b15d21457260cf04
TLSH
T1E0D0A722DDD8C465159C52E292E58D1C9B29CA94725BDC5B8F9290CF720E171CB7421F
MD5 SHA1 SHA512 TLSH

Submit Download

7g199w92ox8.zip

Path C:\Users\Admin\AppData\Local\f8fddd559ca62f92\7g199w92ox8.zip
Size 4KB
SHA256 41a7e45fe386e18fb4103a79c33926e6be9ba593b733818fab69e333b72463b2
MD5 72593acb12848f531750437376bfe45f
SHA1 acd37b2333c6f68dc3c64f299848c96776a6abfa
SHA512 e6693cef63cb1992206b833861e850b6fac9c2632517dc383b0bc9e4f4fd7cd08e89d1b2a5a2522797c96443fda42ed04831255ca65fafc9d55d2aecc369f753
SSDEEP 48:9N4wCPw8H5SUiH/Wzd4+E7/z5ICrn8tDjjXujsn4+WjZsvKf4VHp+QJlSSCAn/TF:swoZd+ifc87ysvtQQiZA5Ay
TLSH
T1BA9198A9329886F6E865D373E1901A0B25C9E64FC357F41F95C221AD95332A3DB02B53
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

All CreditCards.txt

Path C:\Users\Admin\AppData\Local\f8fddd559ca62f92\All CreditCards.txt
Size 52B
SHA256 cdc94d0ff0d871d27b41c97a0d3b9efab43dadf336a76c9eafd6002ac9e2e2cc
MD5 eac0eed4b0db3855bf9a24434a8ced20
SHA1 7e7a4763f275fc65fec810a855c25c1643790204
SHA512 e03bc29aee6adbb094c7af51cdb0a1f9c712c9ce813e15a6119d9b6b4f459584a083bf777836c27f5fe5cdadcb18d41fd830feb21584a9ddb9643d73e8fd7f03
MD5 SHA1 SHA512

Submit Download

Firefox Beta (00wjakap.default-release).txt

Path C:\Users\Admin\AppData\Local\f8fddd559ca62f92\browser_data\cookies\Firefox Beta (00wjakap.default-release).txt
Size 29B
SHA256 d95cc9b596565532beaaacf8d8b00f3d5e9adcbc8c784a982ee6e96df9966e80
MD5 01bd65929767a79e75f04282fcbc35a8
SHA1 dc2a2b9e36179a52f363babb3486c9f772e837c0
SHA512 2fc72ec0857955087f2c116efb6fc2af0bdb61759afa31236271cfd1da1d5a287d5ff6c981da2a90cddb1bf458ff680814a8c3d3807ecf9b8126875422ed301c
MD5 SHA1 SHA512

Submit Download

All History.txt

Path C:\Users\Admin\AppData\Local\f8fddd559ca62f92\browser_data\history\All History.txt
Size 570B
SHA256 6d4f943bab7df95546e73883dbb0e8128cc5d9bb8e34a9f51141b27ce9cda924
MD5 5e73ca3e020a767563b953ebf427b997
SHA1 ffb0396e0c06b659c4dbe5b8e2f290f3cf036fed
SHA512 c10fd2ad18614607be375fdfec58c7248df15f0b0141facff82825d3cf6269acb495bf14156ee19b836241427680eec3a4c7463537ebc94611a6e4bcb4b8acf5
TLSH
T109F0E582FD888AF51904D57299154AF7F6A4D94D5796B12C83CD00C1131A37F4ACFBE6
MD5 SHA1 SHA512 TLSH

Submit Download

All History.txt

Path C:\Users\Admin\AppData\Local\f8fddd559ca62f92\browser_data\history\All History.txt
Size 248B
SHA256 66deaf601e4b0b746c95298b94276d6420a2d7ec52d17295ebbae7b5fa97bcae
MD5 95a48083f856621d34f12bb45ee606f9
SHA1 415a94e6f5eb34c4e740460fc182c5fe8cec750d
SHA512 9c2aa9293580ac511cc288958177adcfca25f3dd4d53dd569ac000f01375ca7712704cdcc1d41384b50b167435f37c828f93fc8138d43fbbe0842f3972e0533a
TLSH
T14BD0C000EC2488E7011DC0303903539DED3A6B0FCA81303013C71284A01B37321CE7F2
MD5 SHA1 SHA512 TLSH

Submit Download

Microsoft Edge (Default).txt

Path C:\Users\Admin\AppData\Local\f8fddd559ca62f92\browser_data\history\Microsoft Edge (Default).txt
Size 151B
SHA256 fa7a79aa5075b8e0982ff53184040fd4f832c3cad95cf048274a522a863d7e60
MD5 c9c8407985b78571f1dc6cf27721e88d
SHA1 26c3f14d2fa58cbf203535d384e673ff3c5f0535
SHA512 3cc7c40d01bffafc47cbf8c4d197a35243949607005aa4c9094c5791b34770c46cb49d204b185bcc1793c82650947c17ac75d6c62ff67621126ba6c387da566b
TLSH
T12BC02200CF3008C3222FC230B203A288C30EF02F8A0B00002BC02002F00A33200CF8F2
MD5 SHA1 SHA512 TLSH

Submit Download

default.acl

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.acl
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\chiloutvrmod\Network\Network Persistent State
Size 111B
SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
MD5 285252a2f6327d41eab203dc2f402c67
SHA1 acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6
SHA512 11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d
TLSH
T136B01269E4517CFF074A83A41928F453C3FF0047421C8ABEEA3873AD42A21BD0C28C47
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5b7c8f.TMP

Path C:\Users\Admin\AppData\Roaming\chiloutvrmod\Network\Network Persistent State~RFe5b7c8f.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

memory/472-845-0x000002836DB00000-0x000002836DB22000-memory.dmp

Download

memory/472-850-0x000002836DB90000-0x000002836DB9A000-memory.dmp

Download

memory/472-849-0x000002836DDC0000-0x000002836DE72000-memory.dmp

Download

memory/472-848-0x000002836DDA0000-0x000002836DDBE000-memory.dmp

Download

memory/3408-928-0x000001BBB5BB0000-0x000001BBB5C00000-memory.dmp

Download

memory/4872-892-0x00000234ED180000-0x00000234ED232000-memory.dmp

Download