Analysis

  • user interaction
    yes
  • max time kernel
    149s
  • max time network
    155s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    04/08/2026, 00:45

General

  • Target
    Krypt-LARP-Setup-1.0.6.exe
  • Size 79.0MB
  • Sample260804-a39kvaac47
  • SHA256 f5a7de41449b26e9896305537ddc7778010ce067906c79be80e0cb5cdfe756b4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 10 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Network Service Discovery 1 TTPs 1 IoCs

    Attempt to gather information on host's network.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • System Time Discovery 1 TTPs 1 IoCs

    Adversary may gather the system time and/or time zone settings from a local or remote system.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
    "C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
    1⤵
      PID:1396
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1836,i,2424788394722062951,12046052916011813225,524288 --field-trial-handle=2100,i,9030409204949175414,10049513230008519577,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2184 /prefetch:3
      1⤵
      • System Time Discovery
      PID:3536
    • C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1700,i,5178809993778093876,4808071275186589655,262144 --field-trial-handle=2100,i,9030409204949175414,10049513230008519577,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2096 /prefetch:2
      1⤵
        PID:708
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2404,i,6382348685812488780,2726909962378264246,524288 --field-trial-handle=2100,i,9030409204949175414,10049513230008519577,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=2504 /prefetch:8
        1⤵
          PID:2380
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=6 --metrics-shmem-handle=3188,i,4706298965570378768,8833138616462799407,2097152 --field-trial-handle=2100,i,9030409204949175414,10049513230008519577,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3200 /prefetch:1
          1⤵
            PID:4620
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --metrics-shmem-handle=3216,i,4989906937276564018,856870788391194480,2097152 --field-trial-handle=2100,i,9030409204949175414,10049513230008519577,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=3240 /prefetch:1
            1⤵
              PID:5000
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=7 --metrics-shmem-handle=4312,i,2118868292553307588,16772008690408549244,2097152 --field-trial-handle=2100,i,9030409204949175414,10049513230008519577,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4320 /prefetch:2
              1⤵
                PID:2292
              • C:\Users\Admin\AppData\Local\Temp\Krypt-LARP-Setup-1.0.6.exe
                "C:\Users\Admin\AppData\Local\Temp\Krypt-LARP-Setup-1.0.6.exe"
                1⤵
                • Loads dropped DLL
                • Network Service Discovery
                • System Location Discovery: System Language Discovery
                • Suspicious behavior: EnumeratesProcesses
                • Suspicious use of AdjustPrivilegeToken
                PID:4952
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=8 --metrics-shmem-handle=4700,i,8143950561569014320,4374340124077912592,2097152 --field-trial-handle=2100,i,9030409204949175414,10049513230008519577,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=4628 /prefetch:1
                1⤵
                  PID:2296
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5476,i,13127953628182476454,15011648828866526089,524288 --field-trial-handle=2100,i,9030409204949175414,10049513230008519577,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5544 /prefetch:8
                  1⤵
                    PID:2992
                  • C:\Windows\system32\svchost.exe
                    C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
                    1⤵
                      PID:3508
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5824,i,17871800017711421531,17345760999425685274,524288 --field-trial-handle=2100,i,9030409204949175414,10049513230008519577,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5772 /prefetch:8
                      1⤵
                        PID:444
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5828,i,15552877712825216719,8648405050743211855,524288 --field-trial-handle=2100,i,9030409204949175414,10049513230008519577,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5584 /prefetch:8
                        1⤵
                          PID:3452
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=5840,i,14075180315712528638,10121906655782349196,524288 --field-trial-handle=2100,i,9030409204949175414,10049513230008519577,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=5852 /prefetch:8
                          1⤵
                            PID:2228
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=5788,i,15955088447076503442,5753971714406503589,262144 --field-trial-handle=2100,i,9030409204949175414,10049513230008519577,262144 --variations-seed-version=20260513-090056.789000-production --mojo-platform-channel-handle=1140 /prefetch:8
                            1⤵
                            • Suspicious behavior: EnumeratesProcesses
                            PID:224

                          Network

                                MITRE ATT&CK Enterprise v16

                                Replay Monitor

                                Loading Replay Monitor...

                                Downloads

                                Network Persistent State

                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
                                • Size 2KB
                                • SHA256 cde813df7d804e66c51eae5e9e6174f212f3e5b2698287760268b8746fbb28eb
                                • MD5 SHA1 SHA512 TLSH

                                SCT Auditing Pending Reports

                                • Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\SCT Auditing Pending Reports
                                • Size 2B
                                • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                                • MD5 SHA1 SHA512

                                chrome_100_percent.pak

                                • Path C:\Users\Admin\AppData\Local\Programs\Krypt LARP\chrome_100_percent.pak
                                • Size 146KB
                                • SHA256 2fb9826a1b43c84c08f26c4b4556c6520f8f5eef8ab1c83011031eb2d83d6663
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                cs.pak

                                • Path C:\Users\Admin\AppData\Local\Programs\Krypt LARP\locales\cs.pak
                                • Size 558KB
                                • SHA256 21916011c2668389727c8970e1407b9c0806812effab9552106da963951d9f27
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                nl.pak

                                • Path C:\Users\Admin\AppData\Local\Programs\Krypt LARP\locales\nl.pak
                                • Size 503KB
                                • SHA256 4736b7ec56cb845c14795e6e4fa98ddaba47c75aecec86e931f61222dff45ad9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                package.json

                                • Path C:\Users\Admin\AppData\Local\Programs\Krypt LARP\resources\app.asar.unpacked\node_modules\discord-rpc\package.json
                                • Size 1KB
                                • SHA256 f19e6151b2a6bf39a2129f765dc8b98aa1b3283d61a01564dced317ca2b006de
                                • MD5 SHA1 SHA512 TLSH

                                krypt.ico

                                • Path C:\Users\Admin\AppData\Local\Programs\Krypt LARP\resources\app.asar.unpacked\resources\krypt.ico
                                • Size 17KB
                                • SHA256 953e1aded63de5c5b6aacb29049b89a32ae3b6da5fb2f44d116c90c6c3161994
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                LICENSE.electron.txt

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\LICENSE.electron.txt
                                • Size 1KB
                                • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
                                • MD5 SHA1 SHA512 TLSH

                                LICENSES.chromium.html

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\LICENSES.chromium.html
                                • Size 9.8MB
                                • SHA256 c4771c9158e31855293ee565db76c9b2c52f84c8a37eda4700cfb149a17fd7eb
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                chrome_200_percent.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\chrome_200_percent.pak
                                • Size 220KB
                                • SHA256 83d9243037b2f7e62d0fdfce19ca72e488c18e9691961e2d191e84fb3f2f7a5d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                d3dcompiler_47.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\d3dcompiler_47.dll
                                • Size 4.7MB
                                • SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ffmpeg.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\ffmpeg.dll
                                • Size 2.6MB
                                • SHA256 18b1f088c7a1261c5fedc46eec98f34e79655128110a6f6c0b9bf62be22dbc95
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                icudtl.dat

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\icudtl.dat
                                • Size 10.2MB
                                • SHA256 7bf96c193befbf23514401f8f6568076450ade52dd1595b85e4dfcf3de5f6fb9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                libEGL.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\libEGL.dll
                                • Size 469KB
                                • SHA256 76efadca4ef6d2abe6ab3701b4071e04470eebfeed8d8d22c7252683bcbb37b1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                libGLESv2.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\libGLESv2.dll
                                • Size 7.6MB
                                • SHA256 150a02e43426a0886f023e88cd88454fb0e78696ea3881347a6256920c7a02ba
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                af.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\af.pak
                                • Size 481KB
                                • SHA256 716e296c2f663ad90cdde85c5134582fc2305e5ebe10649fc9653bea533500a6
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                am.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\am.pak
                                • Size 782KB
                                • SHA256 9cff5c4af5997b45fb2a384bd73560e56bcb7710149e1a7e3e172d64e6eda025
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ar.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\ar.pak
                                • Size 855KB
                                • SHA256 516584da5741e7bb49ba6a70c9cf2ac47ff190ca9c4f692c3a30bc03a4560f50
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                bg.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\bg.pak
                                • Size 892KB
                                • SHA256 d223e994ad1aa6e747507187f724cdede8c369d2e8e0def50c4a6c912dba3880
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                bn.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\bn.pak
                                • Size 1.1MB
                                • SHA256 1e49980f89360b395a70e844ccd0c43b3a34eab84461b1499e7621f757149e3e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ca.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\ca.pak
                                • Size 542KB
                                • SHA256 7e8b5bd0a7a9835f20130ed17fb68242d7eb277cfaa2be6407f08c8d0dfcd500
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                da.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\da.pak
                                • Size 505KB
                                • SHA256 10dfa841d08a3ab094f83e151fdc1edbd66bf8f2392f1511e325628e4e9c7a0d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                de.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\de.pak
                                • Size 539KB
                                • SHA256 400f965d457e958b063e60131d88eaacd74fdb6213ae14cf84c4b6b45809e04d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                el.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\el.pak
                                • Size 979KB
                                • SHA256 58ca76aa55e11a475c830ac89010d4431f455f531079c1e8a0943490b4dd8e4b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                en-GB.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\en-GB.pak
                                • Size 439KB
                                • SHA256 a672387f6fb84ade1b0c44c456ff1a19dcd464c4a9e65e439ca95a115455340f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                en-US.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\en-US.pak
                                • Size 443KB
                                • SHA256 95fd54494d992d46e72dad420ceee86e170527b94d77bfaaa2bfc01f83902795
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                es-419.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\es-419.pak
                                • Size 534KB
                                • SHA256 dba56ab390a959dc40cb79db195e4ed6b17d4009235063f738b9ebcf41c4b5cf
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                es.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\es.pak
                                • Size 534KB
                                • SHA256 ea54cbe126cdd85b2799ad9600b86ca98c994e69251344163037139296ecea7c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                et.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\et.pak
                                • Size 485KB
                                • SHA256 3610615dcac844cc9a64b843da606f4f8d29b1c945ecc19b288b54829d0e92e4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                fa.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\fa.pak
                                • Size 794KB
                                • SHA256 34d79e8a7fa478bf3b350412160a59249e87d31932d728f0167cee89aeff2bad
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                fi.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\fi.pak
                                • Size 495KB
                                • SHA256 01f9669cd2fa17965f882e2cd81c39fa2face2f13ba4f024c3799f1841111ffc
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                fil.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\fil.pak
                                • Size 559KB
                                • SHA256 3265ae5b6c16a09b1ec9ea53181de78df75e951c3ce28f33d4c483088a9ab37b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                fr.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\fr.pak
                                • Size 577KB
                                • SHA256 8a283001240c59a552945d0466e3118dc125fbc9f1a10bdea4ca4197460102ba
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                gu.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\gu.pak
                                • Size 1.1MB
                                • SHA256 74c62dca0b7a310aa593d1dcca8b0b0b382b052837e7cae6b87cf05b8b346b1b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                he.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\he.pak
                                • Size 696KB
                                • SHA256 25281efad59a66f310cabb92da67198451567da553f2c437e52388e8fd25b9a9
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                hi.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\hi.pak
                                • Size 1.2MB
                                • SHA256 4b5585a8cc1a21e2dfcbd0d33f6cea87b7a583b8690f0f3635bd74bb5cbd2ed0
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                hr.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\hr.pak
                                • Size 538KB
                                • SHA256 d1f8093b91663d061bc2fa20426e2c430d53b06fc605ac1b0b2279d446dc9317
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                hu.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\hu.pak
                                • Size 581KB
                                • SHA256 0a62d168c0f6d9d651dedb4e01be5b533b94e8617535cd70ad22717748fbbc64
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                id.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\id.pak
                                • Size 478KB
                                • SHA256 d9fc19e683240404a60d57037f24e1d8b20cfda4c8bcacfed577b86cd8988517
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                it.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\it.pak
                                • Size 527KB
                                • SHA256 f38e6b6d975f8148f46dbeda89563cf71bf07af98e9b79c1a8d158b5f8f1309f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ja.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\ja.pak
                                • Size 644KB
                                • SHA256 6df72da472ee171acc440c20a2a194a2a4af4839b6a88323c4654c50ff8b492b
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                kn.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\kn.pak
                                • Size 1.3MB
                                • SHA256 333725ea1045d44acf2c19efc765bffc38cc5cea6e9977fe583ad6e203442582
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ko.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\ko.pak
                                • Size 544KB
                                • SHA256 3ad0012db772293073acb05d24b8dfb26697d6cc5dd1612150df023dbc31b674
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                lt.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\lt.pak
                                • Size 583KB
                                • SHA256 946351ed2d74f247dea0f2742fc36d89225355480f0cec99d71599ccce3ea9e1
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                lv.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\lv.pak
                                • Size 582KB
                                • SHA256 1e6f9a40f4fa1206117063234399bd7c1e7d198cbf6c4ad633e5e18ad0929836
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ml.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\ml.pak
                                • Size 1.3MB
                                • SHA256 f2fb440eb0518dc695810fcb854b20b72aa47e5ffc75c803aacf05861d35a94f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                mr.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\mr.pak
                                • Size 1.1MB
                                • SHA256 a674db4e60152fc17a32d4b92add129adaebfc02a1a783a12653f984447c535e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ms.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\ms.pak
                                • Size 502KB
                                • SHA256 7707f79a2a4aec553e68af87802a0f19d3714a25311fb7b8afdc6ff4a5b6c5ff
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                nb.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\nb.pak
                                • Size 487KB
                                • SHA256 53b12866e7265661c0088b89653d2c1cb9220e1ec0ce0049f3095d53356b3f1c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                pl.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\pl.pak
                                • Size 560KB
                                • SHA256 2191f77aabe75522166a3325e2660395479633b936d5173d150120367ed501a4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                pt-BR.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\pt-BR.pak
                                • Size 527KB
                                • SHA256 1deee32edff320827dbfbe22aa42e83d8caf79f95f7cf18013424da7cdadb975
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                pt-PT.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\pt-PT.pak
                                • Size 530KB
                                • SHA256 fcd194e5caf36be4958c559acbde4f28a957083bf2aceac893f9e5c9e65d8a95
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ro.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\ro.pak
                                • Size 549KB
                                • SHA256 06c6486e8a42b447a55bd789bf2bc794354fa4be062139481e4612550f16c755
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ru.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\ru.pak
                                • Size 902KB
                                • SHA256 6e53b1b54bac43c07798ee6507bd05806fbd2146ac0f987a7f03aae3cf5d9985
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                sk.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\sk.pak
                                • Size 566KB
                                • SHA256 7a1db23a5b4f8e4c7cbc80a832f4f4c33fe29e31d4ae78a814bd8ca85620968f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                sl.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\sl.pak
                                • Size 544KB
                                • SHA256 7235e631afff75cad9d25b2e5a0e74696ea6b7f4b2a05753331bbd719a0699cb
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                sr.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\sr.pak
                                • Size 839KB
                                • SHA256 35e57d972a60e161f123a5783e67e250f5cae1f66a2c11b119c10b81c43bd03f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                sv.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\sv.pak
                                • Size 489KB
                                • SHA256 bcd070d70a4284fd3144bf37c5e56994ca3a69c8f65aa72a9231748b30210e00
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                sw.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\sw.pak
                                • Size 515KB
                                • SHA256 eb96ab83e2e08e811928742590178e97454863bc581dd8574d6a644fd3c6615a
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ta.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\ta.pak
                                • Size 1.3MB
                                • SHA256 e213c963248c93fcb4b88b1a45936dda28a5fe39cc0428a16556c6d737fc9940
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                te.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\te.pak
                                • Size 1.2MB
                                • SHA256 8dd7d206379445bd9afa4e01ab986c439cf70841d080fca6e152b453e94fcc49
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                th.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\th.pak
                                • Size 1.0MB
                                • SHA256 a4c2c305aa9d3df52d988c4da2bda398e8ee81d320e9da1de7d4d366e826dbc2
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                tr.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\tr.pak
                                • Size 527KB
                                • SHA256 f842b56ddc4145e4474c5cfc67893900b577c131a4b123cb16cfcad48ed0f338
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                uk.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\uk.pak
                                • Size 902KB
                                • SHA256 5dd2fcc64ef09be0775c2efe7e07dddfc18f5ba6059f878d0c22b9b0c2207cdc
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                ur.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\ur.pak
                                • Size 790KB
                                • SHA256 a0c752a805da7dd6608ad04625734f4d27cb75b682f51b2dc8ef08350cc7a2cc
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                vi.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\vi.pak
                                • Size 624KB
                                • SHA256 d7f676cf557d43db07b14a22b0b20ca761ced59285cadd75c07c68613486e909
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                zh-CN.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\zh-CN.pak
                                • Size 450KB
                                • SHA256 48e32f53d07cad6e6dc12040619f7021fa8f0b3254cc6945905b7c6748acb787
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                zh-TW.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\locales\zh-TW.pak
                                • Size 445KB
                                • SHA256 a8b11c74a0512fed29b11748181ef4b1de84dc99197c48d9eecf316aceb425fa
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                resources.pak

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources.pak
                                • Size 5.1MB
                                • SHA256 75e03df55d7d23c840c09288da270285f17d067cef8709252451c0a8aa1254f4
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                app-update.yml

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources\app-update.yml
                                • Size 113B
                                • SHA256 0037669590d54bd32ba824a3d51f463b24730933ebc9e887c173c2705888b647
                                • MD5 SHA1 SHA512 TLSH

                                app.asar

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources\app.asar
                                • Size 7.5MB
                                • SHA256 1b45d8372222bed627a3814f7abab68e78f2f7f2eb04db731a964f21fd825da3
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                .eslintrc.js

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources\app.asar.unpacked\node_modules\discord-rpc\.eslintrc.js
                                • Size 2KB
                                • SHA256 7002d9a81ab28e145de657890a69203643005155c0ae152492e770c7a13e8def
                                • MD5 SHA1 SHA512 TLSH

                                browser.js

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources\app.asar.unpacked\node_modules\discord-rpc\browser.js
                                • Size 47KB
                                • SHA256 6032495a2f445685607d08b0cadcd68c2809a5264d5baa41b76ad64b01e87c66
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                master.json

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources\app.asar.unpacked\node_modules\discord-rpc\docs-out\master.json
                                • Size 10KB
                                • SHA256 d4f2d299156e21536f7b741385dea5d5da29b71cf6527e1212d582baa94ee4c7
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                client.js

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources\app.asar.unpacked\node_modules\discord-rpc\src\client.js
                                • Size 18KB
                                • SHA256 eaff1c043bf0c996d7a53a578011e38a78e301e422490585907bdabddec2326f
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                constants.js

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources\app.asar.unpacked\node_modules\discord-rpc\src\constants.js
                                • Size 3KB
                                • SHA256 174db6e530abb29e1d2705cfbf43569e35f1972176e8c4ed405f8ee6e63dfd0b
                                • MD5 SHA1 SHA512 TLSH

                                index.js

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources\app.asar.unpacked\node_modules\discord-rpc\src\index.js
                                • Size 166B
                                • SHA256 807f3c2a7d1b380cb73d423f325978a7b33b0730efc7e0885813bef0bc032713
                                • MD5 SHA1 SHA512 TLSH

                                index.js

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources\app.asar.unpacked\node_modules\discord-rpc\src\transports\index.js
                                • Size 99B
                                • SHA256 293dd7ea565428ac11311683763713b0b7f76e6ad2d1adfe91fe1b410494b678
                                • MD5 SHA1 SHA512 TLSH

                                ipc.js

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources\app.asar.unpacked\node_modules\discord-rpc\src\transports\ipc.js
                                • Size 3KB
                                • SHA256 00c165347303edb40a65340910c2157f79be4e5a9d3440cdef8db0e2e4891dcc
                                • MD5 SHA1 SHA512 TLSH

                                websocket.js

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources\app.asar.unpacked\node_modules\discord-rpc\src\transports\websocket.js
                                • Size 1KB
                                • SHA256 5b97b43cd54354dda86e7e813ae412c21a6d75d5797e36ad1d68cec5f19c04bd
                                • MD5 SHA1 SHA512 TLSH

                                util.js

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources\app.asar.unpacked\node_modules\discord-rpc\src\util.js
                                • Size 889B
                                • SHA256 c52042a1ac2ab16f7e318673b85f195e85f078b3056d0993b97bc92748696719
                                • MD5 SHA1 SHA512 TLSH

                                krypt.png

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources\app.asar.unpacked\resources\krypt.png
                                • Size 7KB
                                • SHA256 4cba696c0cd15757facea86705aada674d1cee8606565f255c0412e71d087007
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                allow-firewall.cmd

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources\app.asar.unpacked\tools\allow-firewall.cmd
                                • Size 1KB
                                • SHA256 9fe34384c088ec3fe4f935602859721ec4347094377d53418a3c28fb72d1be41
                                • MD5 SHA1 SHA512 TLSH

                                elevate.exe

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\resources\elevate.exe
                                • Size 105KB
                                • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                snapshot_blob.bin

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\snapshot_blob.bin
                                • Size 300KB
                                • SHA256 7f80294b63fb7cd63b43be498fcbe1e34bb05a8011cad9514c4eb9b29dfa5336
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                v8_context_snapshot.bin

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\v8_context_snapshot.bin
                                • Size 641KB
                                • SHA256 0b239cf5ab92a27cfa087b49e6dc943e0c674b62cea643cff2130e1c2f8db31c
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                vk_swiftshader.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\vk_swiftshader.dll
                                • Size 5.1MB
                                • SHA256 6ff65b7a5faf726cf747eca6d6504e885a70664e37dc5e38e0e0cc68bed3bf6d
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                vk_swiftshader_icd.json

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\vk_swiftshader_icd.json
                                • Size 106B
                                • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
                                • MD5 SHA1 SHA512 TLSH

                                vulkan-1.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\7z-out\vulkan-1.dll
                                • Size 935KB
                                • SHA256 715dca5af441dc220a61fb0f8e66600dc4f9f63ecc106fa43bc683098e00fff8
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                StdUtils.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\StdUtils.dll
                                • Size 100KB
                                • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                System.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\System.dll
                                • Size 12KB
                                • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                UAC.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\UAC.dll
                                • Size 14KB
                                • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                WinShell.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\WinShell.dll
                                • Size 3KB
                                • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
                                • MD5 SHA1 SHA512 TLSH

                                nsDialogs.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\nsDialogs.dll
                                • Size 9KB
                                • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                nsExec.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\nsExec.dll
                                • Size 6KB
                                • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
                                • MD5 SHA1 SHA512 SSDEEP TLSH

                                nsis7z.dll

                                • Path C:\Users\Admin\AppData\Local\Temp\nsp1058.tmp\nsis7z.dll
                                • Size 424KB
                                • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
                                • MD5 SHA1 SHA512 SSDEEP TLSH