72d9b13247d9f9b59612f70a5c730cacbeea2a3c082a633ca64ddba708559d16

Analysis

max time kernel
902s
max time network
907s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
04/08/2026, 14:47

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
NewLauncher-2.0.9-windows-x64.exe
Size 101.2MB
Sample260804-r54aaashjb
SHA256 72d9b13247d9f9b59612f70a5c730cacbeea2a3c082a633ca64ddba708559d16
MD5 16e066fa76c191f5ce2a0a0a27ac1860
SHA1 fbd47e88c462410d6b0bf06c3d0e8943cfd81cee
SHA512 60e3a4cf18d741c9e553fdd243db84e4b50641c64ebc4ad20a9c370e99bd4e9a1dda64083c49bb5f1cc5145921991c0b3996d08ba259a8c62912da46a0352fea
SSDEEP 1572864:aic+fHfplkpKhXOZUVNBvmjl/UC894a7Y8ni+A5UsFoZRI83i13VPM2q96b:aicCttOyT+2xXE8BA5hecVDq9I
TLSH
T1923833F081A52C1FE658BBB35F3E8451F1E517EF2C06832F672857B8D1D40CB86AA466
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution spyware stealer

Malware Config

Signatures

Executes dropped EXE 5 IoCs

pid	Process
2368	NewLauncher.exe
2060	NewLauncher.exe
1008	NewLauncher.exe
1832	NewLauncher.exe
6012	NewLauncher.exe

Loads dropped DLL 24 IoCs

pid	Process
3260	NewLauncher-2.0.9-windows-x64.exe
3260	NewLauncher-2.0.9-windows-x64.exe
3260	NewLauncher-2.0.9-windows-x64.exe
3260	NewLauncher-2.0.9-windows-x64.exe
3260	NewLauncher-2.0.9-windows-x64.exe
3260	NewLauncher-2.0.9-windows-x64.exe
3260	NewLauncher-2.0.9-windows-x64.exe
3260	NewLauncher-2.0.9-windows-x64.exe
3260	NewLauncher-2.0.9-windows-x64.exe
3260	NewLauncher-2.0.9-windows-x64.exe
3260	NewLauncher-2.0.9-windows-x64.exe
3260	NewLauncher-2.0.9-windows-x64.exe
2368	NewLauncher.exe
2368	NewLauncher.exe
1008	NewLauncher.exe
1832	NewLauncher.exe
1008	NewLauncher.exe
1008	NewLauncher.exe
1008	NewLauncher.exe
1008	NewLauncher.exe
1008	NewLauncher.exe
6012	NewLauncher.exe
6012	NewLauncher.exe
6012	NewLauncher.exe

Reads ssh keys stored on the system 2 TTPs
Tries to access SSH used by SSH programs.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Contacts third-party web service commonly abused for C2 1 TTPs 2 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	raw.githubusercontent.com
12	raw.githubusercontent.com

Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

Run Powershell to get system information.

execution

PowerShell

T1059.001

pid	Process
4832	powershell.exe
3588	powershell.exe

Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

Command interpreters often include specific commands/flags that ignore errors and other hangups.

defense_evasion

Ignore Process Interrupts

T1564.011

pid	Process
2848	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	NewLauncher-2.0.9-windows-x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	powershell.exe

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	NewLauncher.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	NewLauncher.exe

Suspicious behavior: EnumeratesProcesses 10 IoCs

pid	Process
2848	powershell.exe
2848	powershell.exe
3588	powershell.exe
3588	powershell.exe
3260	NewLauncher-2.0.9-windows-x64.exe
3260	NewLauncher-2.0.9-windows-x64.exe
4832	powershell.exe
4832	powershell.exe
6012	NewLauncher.exe
6012	NewLauncher.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	2848	powershell.exe
Token: SeDebugPrivilege	3588	powershell.exe
Token: SeDebugPrivilege	4832	powershell.exe
Token: SeIncreaseQuotaPrivilege	4832	powershell.exe
Token: SeSecurityPrivilege	4832	powershell.exe
Token: SeTakeOwnershipPrivilege	4832	powershell.exe
Token: SeLoadDriverPrivilege	4832	powershell.exe
Token: SeSystemProfilePrivilege	4832	powershell.exe
Token: SeSystemtimePrivilege	4832	powershell.exe
Token: SeProfSingleProcessPrivilege	4832	powershell.exe
Token: SeIncBasePriorityPrivilege	4832	powershell.exe
Token: SeCreatePagefilePrivilege	4832	powershell.exe
Token: SeBackupPrivilege	4832	powershell.exe
Token: SeRestorePrivilege	4832	powershell.exe
Token: SeShutdownPrivilege	4832	powershell.exe
Token: SeDebugPrivilege	4832	powershell.exe
Token: SeSystemEnvironmentPrivilege	4832	powershell.exe
Token: SeRemoteShutdownPrivilege	4832	powershell.exe
Token: SeUndockPrivilege	4832	powershell.exe
Token: SeManageVolumePrivilege	4832	powershell.exe
Token: 33	4832	powershell.exe
Token: 34	4832	powershell.exe
Token: 35	4832	powershell.exe
Token: 36	4832	powershell.exe
Token: SeSecurityPrivilege	3260	NewLauncher-2.0.9-windows-x64.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe
Token: SeCreatePagefilePrivilege	2368	NewLauncher.exe
Token: SeShutdownPrivilege	2368	NewLauncher.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2368	NewLauncher.exe
2368	NewLauncher.exe
2368	NewLauncher.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
2368	NewLauncher.exe
2368	NewLauncher.exe
2368	NewLauncher.exe

Suspicious use of WriteProcessMemory 8 IoCs

description	pid	Process	procid_target
PID 3260 wrote to memory of 2848	3260	NewLauncher-2.0.9-windows-x64.exe	88
PID 3260 wrote to memory of 3588	3260	NewLauncher-2.0.9-windows-x64.exe	90
PID 3260 wrote to memory of 4832	3260	NewLauncher-2.0.9-windows-x64.exe	92
PID 2368 wrote to memory of 2060	2368	NewLauncher.exe	98
PID 2368 wrote to memory of 1008	2368	NewLauncher.exe	99
PID 2368 wrote to memory of 1008	2368	NewLauncher.exe	99
PID 2368 wrote to memory of 1832	2368	NewLauncher.exe	100
PID 2368 wrote to memory of 6012	2368	NewLauncher.exe	101

C:\Users\Admin\AppData\Local\Temp\NewLauncher-2.0.9-windows-x64.exe
"C:\Users\Admin\AppData\Local\Temp\NewLauncher-2.0.9-windows-x64.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3260
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
  2⤵
  - Hide Artifacts: Ignore Process Interrupts
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:2848
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:3588
- C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
  "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\NewLauncher', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - System Location Discovery: System Language Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:4832

C:\Users\Admin\AppData\Local\Programs\NewLauncher\NewLauncher.exe
"C:\Users\Admin\AppData\Local\Programs\NewLauncher\NewLauncher.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2368
- C:\Users\Admin\AppData\Local\Programs\NewLauncher\NewLauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\NewLauncher\NewLauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\NewLauncher" --field-trial-handle=1900,i,3373736136270560328,3523646292300256249,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1904,i,9821773397246473355,9835474388591582618,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1936 /prefetch:11
  2⤵
  - Executes dropped EXE
  PID:2060
- C:\Users\Admin\AppData\Local\Programs\NewLauncher\NewLauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\NewLauncher\NewLauncher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\NewLauncher" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1900,i,3373736136270560328,3523646292300256249,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1904,i,9821773397246473355,9835474388591582618,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1896 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1008
- C:\Users\Admin\AppData\Local\Programs\NewLauncher\NewLauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\NewLauncher\NewLauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\NewLauncher" --app-path="C:\Users\Admin\AppData\Local\Programs\NewLauncher\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1900,i,3373736136270560328,3523646292300256249,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1904,i,9821773397246473355,9835474388591582618,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3156 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1832
- C:\Users\Admin\AppData\Local\Programs\NewLauncher\NewLauncher.exe
  "C:\Users\Admin\AppData\Local\Programs\NewLauncher\NewLauncher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\NewLauncher" --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1900,i,3373736136270560328,3523646292300256249,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1904,i,9821773397246473355,9835474388591582618,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=4008 /prefetch:10
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:6012

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:2032

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:2176

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Persistence

Privilege Escalation

Defense Evasion

Hide Artifacts

T1564

Ignore Process Interrupts

T1564.011

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 17KB
SHA256 55e8c4c5a5673806d83e445eb37082a2a852b844bfb66893108d24cfb6939ff9
MD5 4103c5d325b56b2e2f97e8218d12e65f
SHA1 ea36699410557c524ca544eefdc5f105e3b1f02b
SHA512 c1fb4218ca5ae7887af1c7da557508bfe2d392ef01733eec7cf5c2fc4587ff1a54bce6e1c80851b0baeab248735a8638d9dba4be45bef9a550badb70b66a34f7
SSDEEP 384:e1eBaGH1iUOW14bWd+vBeLweCCF2PxMYaIAsF41d48W8+fd7uErbfkwg8hf9:OenVKWiq8pKZQ5gIAcCd48acIbf1gA9
TLSH
T1567287A9516F6DC7D89122B010D601E7FBA4E08CDF7551D8FE2BCA2B5C90BB74FA0520
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StartupProfileData-NonInteractive

Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
Size 16KB
SHA256 2cdf478e353b462c448e9e688d7bbca89b943b06d04dc005d97bc899aeb53417
MD5 3756b71acd107b7ebecf150136f1b4fa
SHA1 36cf1b106bffcef1ef5b311e218ec39c20f2aacf
SHA512 e9e0d5e8e338752b482cb586907484dd17f2fb547ec328271c0dff144ad6ded84e644822bddf700559101a26792703893dba8d2e9590c4b7e15c32e29490526f
SSDEEP 384:v1eB1nT1iBWiibK0fko0D+QOC3vytEPiUDzdC0AIACXF4NNAUd0qBDKV0N+IbWJR:tevZ6Wiibffkou+Uvn6UFC0AIAcWiUdC
TLSH
T16B72E769266F5DC7DCA121F410C1039AEBE8D0ADAB62519BF997CD2B5C01E7E8F600F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

__PSScriptPolicyTest_ksigymy5.m1t.ps1

Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ksigymy5.m1t.ps1
Size 60B
SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
MD5 d17fe0a3f47be24a6453e9ef58c94641
SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
TLSH
T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
MD5 SHA1 SHA512 TLSH

Submit Download

eb355ab0-15f1-4740-ab5a-ae1f190e8d32.tmp.ico

Path C:\Users\Admin\AppData\Local\Temp\eb355ab0-15f1-4740-ab5a-ae1f190e8d32.tmp.ico
Size 30KB
SHA256 db817faf38ca5898dea1ee59e867e2f74f6f1f61cee8fff0c110f32d28ea4036
MD5 fd98fb0a9318077a05adb4c240ef1d9d
SHA1 842d96f3f2903b296d9ef2caacbb336ed6fd04d3
SHA512 8f6ad05747ac9eb76d2128938ec1f2ba5dd3f4368f0bbc5b0608b7e16721e1fc6a6dfc57b36470ec762dd3df7e83ddd3d98ad9feabbfee02f5aa11e5adc3b148
SSDEEP 768:uOtX8916bZ6Lp744x1J/N+CZsyPqD3N3V9oPnOtwmDA8:uS891mMp744x1J/NhzP83SO6+H
TLSH
T11BD2F1184E6C4FD796066E2D44492AD12F26A3F3C153F732736F2DAEE159E4F2883602
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE.electron.txt

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\LICENSE.electron.txt
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\LICENSES.chromium.html
Size 18.6MB
SHA256 62e3b53be6bbbb2e7747b7a55c8b4f4a3cf38b95e0fff594737b3bfdac8cf373
MD5 0f6417e60719dfacf3524b61cca87e8d
SHA1 f2f4fa439dc120908a53965d8f292b00e51f7647
SHA512 1eff62954cf80b2ffaa1d676a9ee61c8da9488a327b458268f6efe94dfef5f6030ab11e9ad2df305de5a8bb05c4e2beb21e027a0a0c9ba3fc94a15ca9f85e5ed
SSDEEP 49152:nRWnjZ1pNUAwuTYp2bKvC6I3r8xsJQf8xFTDeQdt+lHx37DoB:i
TLSH
T1D617B56BBB49037316F242626B47A5CAF31EA13F375A1654309CC11C2B7B92483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\chrome_100_percent.pak
Size 113KB
SHA256 34433fa04ddf5eb78b3b4e9c64a3af626e28641907ad7a6086614eb6a8f00a07
MD5 a8d9be85b9a9c2a1be1815b29cfde9ce
SHA1 9b8df5aebf541d063311ad4c2be1d23398f13a33
SHA512 37ad60e74c7e439f83b87ce61018619568914ee491289e3fb34234a0c4e3258c4986cd56e6e58652134058ab1f824a90499d4aed46e611937ec946d9a3b680ec
SSDEEP 3072:fnk4PisCv+/P9NebGz8LI1TwILjQBHe7YAP18RVC2I:fnZYWFUbGz8LI1TdjQBQCrC
TLSH
T1F8B3E0D773B0AD7DD6870BB783660070FCB31B2D06C2160A4A99E479652AF88D8D93D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\chrome_200_percent.pak
Size 183KB
SHA256 581c8d53199c10512d31a340699f9ad269f8eea5fe6bc49e05c1bde98ee612aa
MD5 e0d4001307e8e8554810b27796ad636f
SHA1 be92e88b55ae85cc5118009af0fe32c9470c0dca
SHA512 762324239832fa1a531cc3da546df8627610a164c13d83f12b64c28e207273989fa7da0c4e96787ab0a5d09f5202ebc31895f09ad2fdbea4e6e70c0d2b4f51d1
SSDEEP 3072:jgJ8LahaY7d6iN6uSwxohPQDQYaEjrvy/IwXJPpLjQBHe7YAP10uxR/TbIM0:jxGQ+N6uSZQDQYakvyAk9jQBQNd4
TLSH
T1C704F2D723B8AE3DD9570B73926610E0FE7A20291EB3110E469F98397925F8CD9C9343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\d3dcompiler_47.dll
Size 4.5MB
SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
MD5 6ac6cc720fb6bbe5c0ed4e84ad2b3337
SHA1 8556531bd06691ce0f8b7d83814c867a420526a4
SHA512 216084dc2a84ca818d68d603968acc978c0b60bdbe0a3152cbfc400ec11a2b96e81d1698a15dbb7738974f4365a8feb109f2bca5b641b42acedeaeff1e2a342c
SSDEEP 49152:JSHvWaWTktEzfRriMsCL98dhdVhpHGC6GNCxJYrv9y5Eze+V7ZpdKMZzaWoUyxqJ:suktcrfNlTyj5byqSC
TLSH
T1FE268D5767E840E9C5BBD138D687831BEBB1B80413345BDF01508669AF73BE26A3E724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxcompiler.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\dxcompiler.dll
Size 24.5MB
SHA256 7a743a2af5b4cb59cec8c38e7fb544b87fb6547f215491634a577a03a4e83bd8
MD5 dcf7bc6b7aeac597a40b06a906efd791
SHA1 e0b1e1b4defa1700afff55a053bd861ee92ac43b
SHA512 41654c55f7df527bf61365b7be205aa749278dc0c9a0a2f0951942aa4e03e028c9d06caa041bc5653ff3193e2da0ed69352eb8b7c5a7a2f43eff6c611ff1f591
SSDEEP 393216:Y9tCn2P9zxhOMXtVz5icpXH5uVUi+zru:xGzPdrIVCC
TLSH
T13C473A122646D49CC059C879C7678B26CA6C30E73FA7B8EBC0F451252B79EBC5B39235
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\dxil.dll
Size 1.4MB
SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
MD5 f8f3501026df30556c34a9af9cb7af9c
SHA1 961d9012b6d79e2e3c28b310a80ba3ab36e2c559
SHA512 3631f8a3d48e8eea25091b93147d88f0e8a7539f2f242fe287d37f82fc4344528901e4cc48c93ebcf8691d2e11227a9b50f2b5ad45f2475c0119ad8b2d3661fd
SSDEEP 24576:zY+wATtbKYxy0y3ny6eBjNSGlVZyi27+V0IJNSD11J7R+j+v1acLUkJvS5Kao:8iTMYxy0Sy66Zh7Sh/cyvS5W
TLSH
T154657E1B229801B6D4BBD17CDA47CE0BE6B2B41503B09BCF12B406692F5BBF55A3E351
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\ffmpeg.dll
Size 3.0MB
SHA256 e7aec5ca86d80540ea30c5acdf0a13acb34d1d9dd0f9e78b36fb21776b711a1e
MD5 d16c22c2e0a5b20328e4b97d17eb1ec3
SHA1 c5bd4b1732e374c3d8d886957c89e01fc0d04f86
SHA512 c057fb776361decefd67ab0bcd6fdfc6e6c2e5721dbc4804607d31f5a76f840db2221ab3c2e74a239c6914be1937036fdf2d9b048456b000a6c5cb6620cf9672
SSDEEP 49152:TlyMFEi+bSxsTUs3mFNYisl199a6LKIbB7k6TNDNoJHaKyEC8bWa:TlyJGsQsU+is9dNoJAe
TLSH
T132E5AE02F6D651ECD019C074979B9313F631340A4F209AEB16909A263F6BFD87E7E768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\icudtl.dat
Size 10.3MB
SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
MD5 5bfd3eefca4b5ef2d1a869396390a7de
SHA1 c58567f7fe308ccd43f406b70aa8bf6fdbea4f3a
SHA512 4489a55fa0b47c8d1e9679032e036c7998f82efb4191b98900ae40cfc30a26b65290867527161c594c42fe7999b2314f8928a5d717d65d4eeedd4fdb0ed0f427
SSDEEP 196608:A6akBhOR8LE/dUHiXUxa/iJ53IWhls2E91Z0G:AqwKLBHiXUxa/iJ53IWhls2E6G
TLSH
T118B63903A2EB4EC6F9FB5F7498F562779527BD49AE32804A51043F3B1C333908664B66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\libEGL.dll
Size 510KB
SHA256 6edaea2de8f6bca40dc4cbb60a55be5ae93c2454a66474c3706953b5d1d73e26
MD5 a65b12fa968ed59208ac9a7f0d7305af
SHA1 e15a8e532677056fbac70e1c86e857131bea9474
SHA512 37d6e4340ea299dd6eaebaf95f55d8c752858c15fd123399036f58d010098f4846797ee3877fa6331adccb962ce98f20187aaa7358b2eb7b4a42570ec6fecda9
SSDEEP 6144:ZeQszxnw5uBqWh//UlBowkZDYJ6RSQmWYmkHGVGWFcsfAVMugP4CfaguL1iMg:JG/V/iZJOmW6GVGWFcsfAOugP4C410
TLSH
T185B47D15F3E84BA9D07AD1348A438642DB7174961F65F9EF02E052392F3BBF45A3A324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\libGLESv2.dll
Size 7.6MB
SHA256 49c2a50a3a43c10e258eee0d58e81be9d207ebeae206d603314f1ebc36d7567f
MD5 ab703fc065cead136704b1c2963c4039
SHA1 fac04af28e1cc55f65a01c33cb68d1a6226cda49
SHA512 3db650bed7c33720a1da60646d174aa025aa5bb84d475d18557729fcbf569b920a8700849558771fe363f7606759f395981551e1328d2744fc633167c03c9d87
SSDEEP 49152:lp3tZ2bk75+yjyLiQOnCtRmNdEHsQZl90dhM9FGgI53lt7w5YAzw/LMOO40YNDYL:zKbyLyLWw9q3zc5Zm5uThnjGk6pG
TLSH
T1AE867D03F68641D9C05DE2749B67A223FB34B8450724B7CF2AA457152F6AFE0AB3E714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\af.pak
Size 595KB
SHA256 973c21a2ccc0375a016b1ba0028cc3fb2cfa4e9ab82a52217fdff342ba43fbe5
MD5 3e3e1292aae4c6e733bda6a66ee397be
SHA1 c9130aa852dabb25020e225d1f92052434a0fcb9
SHA512 e7b5c0f61a23b34a3328d2f22f983119d514a554cfb18f18557f65ff9dc6c728205fb75e7c3b90e9564106852c627bb0f2c6d2df8608538680dcfff503b89923
SSDEEP 12288:CV0ISRPxgtRGt+2d5nPw3NtEKQNZ3GOZKv4H2JynPN+DgWALlzNozvnLImgU2CNS:hISRPutRGt+2d9Pw3NtEKQNZ3TKv4H2q
TLSH
T1F8D41B0AE781173D09B07697FB0845B7BB9CA26CC770B2BADDA982310566EFC11BD1D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\am.pak
Size 966KB
SHA256 ab591598cac20048c2b7a2d73eb4d1ca9054f9dda153eb51855935e969c7f54d
MD5 4344e3ecec9c26636a178e2cc4bff1e7
SHA1 f8b9c51bd19d054796d3b537e8532b48bbebc60c
SHA512 d5eba6a77d21f97330438a9b522df71ddc4b12c700797436d023fe812ff568bb0ccabd5f775423c2a98f37fe04967231eb414fbb6e8ef22d9a4e57345205e713
SSDEEP 24576:tG8TG1g9thTCKzyYtxPTtfjnX7TBzv8XqSBhiyPVABZpPzx:D
TLSH
T1D325AB547DF9F7570F8E8A1994320E4EA594AE4692803C38C35AE3FC2B2DF1B4DDA215
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\ar.pak
Size 1.0MB
SHA256 dacb642f184b6aa20d062eae55b49101c507d7378d60e53a014a2631c0bb20bd
MD5 1bdadc3edf2e5e83a8b40b90205c04f8
SHA1 8b07ca7498817e071e65c45fc9ccceae4db518dc
SHA512 1145fdb05099655387cf1f4b86bb347968eef5f1f8247ce829c92f9b816e85311e05390d5c16295c144504383c9f1a8071ff9971746a576fafb8511b833c1415
SSDEEP 12288:oy9tHFRGgBv9p7NNHHGCPXwjd/nAe3v4UCKvkb39SM8NjuE/YhGUK:oy9tHFg8Ep
TLSH
T11D357BE21B2984720B56DF0FD1E23668E872BD23DB4BFC3124934A2156D7513E78E678
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\bg.pak
Size 1.1MB
SHA256 e854a940ef467662ee733bcf5c5aac0f5aef8d006200af173b4f840ab9f6d3ff
MD5 ddc292a97a71fe6ce6d307de64ee5f51
SHA1 0780ef8b762f082e5e9ee34abd065e381ad151e6
SHA512 2b4223f9ef664f751d9567f8a772c96095ae14ea226b92914bf5bdc6b32f7f12c958fb63f09e3403549ff147caa5e1fb33c42eb7e4de01297ce459ce168a1cd4
SSDEEP 24576:AteiYwpWmldLYFg9zQkEC1UcVb6IM2Ql373ZJm8S3G2KjUfVDDMwh74u2VnJNIdR:AwiYwpWmldLYFp8UcVb6IM2Ql373ZJm9
TLSH
T1BF3535A15B9A68DF0101F45F98087E093CEB84FE3FE7879241652DBD39E10B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\bn.pak
Size 1.4MB
SHA256 2465ef35bd984ed78c1a0ffff00713facada7ca0d419104716eafb149187d9f8
MD5 955ffcacd9fef19f7f50dc838a5c4f0f
SHA1 b6e1afab21917eb770882afe01b285793a3c59d7
SHA512 52e2300d0b1806c9b306a87cbd981aaf946423bf607531ac0987329cf617eea76836fd0523189bf86ef8fe40a37c6bc9bd69bd2123b531e3ad05ab5ff0c06e92
SSDEEP 3072:eQazm6m/6oenpXhds6Vnfm0I24Oc9pjgEf/8UR+q9N1IfyjWBbNdQZ3kwfTv:2zm6S6Q6nfNvq9N2fyjWBbjw7
TLSH
T1CC65EE209C6E81B6A8C5CDC9434C6370C523AE9B9B65F74DDC17A14938ADC3C8CADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\ca.pak
Size 670KB
SHA256 7f9a90bc5821548acd42546604c18d525b3b00f87094739ab95b5683d08aa79c
MD5 3b7dc86893d97f8ddfa1e9d6c80fda68
SHA1 a56220a0b011545a480c516073eaee220af5411f
SHA512 9d893f67e71110f435fe0ac59ff3a7c2dbf249fa7e5910b0689afe7cd74623168d938cec27987fa275376baeb52b863bf2e84adf47f7364a32ffc971891c2380
SSDEEP 12288:L97hj3lCiGOwpQa825PsF4N3Mw2juwwPR9zejm0t3l7C7T2nLfUowTLX/fnWyFlH:p6NvLvE9p+MNe3GjUyUD
TLSH
T1A0E409239FC93B7704D2330AFB46C253A48CA9847B16D254F4AE1B1622CCADCD677AD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\cs.pak
Size 696KB
SHA256 94c119305964dd203e4335ef1676f373d56fad9e27ae6e11987d790b2b3f5a41
MD5 687624c23ca30d142594e70bd07b8466
SHA1 044960892c1db4ad93f0e1b86fa59ef82d6e588d
SHA512 46ea575796c4322e234509271ef61c3694ccbcc74b13e5f380a91901a27144034ef30685e5a93a2b4768a5620815b6202bd31b73da78dc935e14eb9dfec245ff
SSDEEP 6144:8O0v5YdPUtJd+uHrvl5An2R7gAQnTzW/5Z8OOwJSBxd8Qu:o5Y1UtVHjl5A2ByzW/5Z8OxJSm
TLSH
T130E4381EEEA36425484002487BBE4128BD5EC3140B6EE9BB7C8F9C912575B7E8FF4D58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\da.pak
Size 626KB
SHA256 f097260d271900ebb3a6a68e42e49005d3441026904462c3b306c87e21f2d640
MD5 a630eae43304c9d9b818b74a34ae1e7d
SHA1 700f650697cdee232a8bec53fd9cc8a4c2e8691e
SHA512 8aa32ca0968fdbfa678a07f8559db78d84f56b7a6948c8ecd705b01fa4535a52c510bfb5e0946a49b2e6b386e4c90bf22dfdbdad6b6c3c91a0772a1ebeaae2ab
SSDEEP 6144:ghOC7SR10xv7zVIcyQD5wnMXgRi/cLJsE/em5LjwlAMDJwxlOEbPaQSaKBDsjoff:ggwSz01iLP5pOA+DwcsZG
TLSH
T159D4494BDC9CB32FC9A94725F3118DA7DB6D543CC684264F64D8943A09CFDA092BE2C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\de.pak
Size 671KB
SHA256 1eec5b0a6d7a2888127c1a490d40497e2913460b96c4334815e278bc882802e9
MD5 faccb170c7f2f595eff63171b6ecabe2
SHA1 216ea80049a398bb8c8dfd73816645a62c5ebd7d
SHA512 221ddffba38e48d58d0f814ba90ee13a39ebd043c1dfdf59eab49e5a3ccc8bee92abce962499d04ea2b15c57740a1ef7e93c0b10cf73e286cbf6a7d452e1fb28
SSDEEP 12288:vfNa3amg3K7UpNgRaf3Is9hgn4cUR+tCgv:Erg3K7UpNgRaPt9SrCgv
TLSH
T127E40803ADDB625EC686B3617705CDB77B19E36FC342312B84EDD12B650B5B283AC522
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\el.pak
Size 1.2MB
SHA256 f9715c939e27d6da75c89866aac6de5fe9f25baef524d85db2fd812750cc43b1
MD5 1235b56c072385c4edfbe9ec5675b480
SHA1 e433ff546bbb72bc9ffa5ac89f6b21a671d2c6eb
SHA512 c93c3fb624bd11028bd08d914368b59a49cd5c6571e2a879cbd7b00722c9afa18561cd10fa8bfaa70a319e1173372dd4ec274d2e121d02c67ce0e52cb3857021
SSDEEP 24576:/HWFbrl05Yp9Ck2tCZu/xJXDsSeEEmKo+Jm7QJ2oSCgd0kBHciyjUHvQdQVoygJK:/HWFbrl05Yp9Ck2tCZu/xJXDsSeEEmKu
TLSH
T10545CFEFB4582DED8046950785D8B07C2BC66D6CE749CBD86229CB60BDFC0719A22D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\en-GB.pak
Size 542KB
SHA256 acefd35ede3e9dde3c91880bba726546cfb8e543712b7c7167b53867a0f155e7
MD5 8724e106f7874a84985b9e6bc83559ad
SHA1 ed13da8d451f2f1d82cc5995c889358974005c16
SHA512 f8530c7d3a8e3badc0053320822cb653eabc1847ae2c8c9bb86cc3f1f734184159a70c8a5351b6ca7a7a64d11ee1a4a9ff61fbe5eee6d687a2a828b87c820154
SSDEEP 6144:Z44sGi8hRjiSaxh+EpiFOFJeQMP9qQTpofaYH5WjoT0DdBckRPK:ZTi8hR+SaxhDzMgQTpMuDi
TLSH
T1A3C43C1FF744126A059312A2BB0AA562FF23D07CB35116663CBD811C33B6B6683777E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\en-US.pak
Size 548KB
SHA256 a02518efe75c630a1b5419af5ffdb1b16636b939139bccd7710e37f36ad9d55c
MD5 514fbace34b812d20cf9b2bcd2d7fe54
SHA1 2c0d961496efe4b8f8f2614a64aaf3e35d23f848
SHA512 eb915b16e3ee4382d2bb14393900d3f80f198fd029cd2c3faf066795ac29fb3dbd592fc0ff1a7203259eda205aae1ef7399a5aa9daea69971d41b1a9a8ef0e4a
SSDEEP 6144:roemduy82EC+HNHfYOMg/jScMP9sQqblfaYQhp1B1OjRng98//Swf:snuy6rHfdZM6Qqbg0jSwf
TLSH
T1FDC44C1FF744122A05A352A27F0995A2FF32D06CA35112563CBD812C33B6B6693B77F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\es-419.pak
Size 661KB
SHA256 818f06880dc921662f0685d8f79d85f76ab7b5490deb7497208f307ba9c6d42e
MD5 75814485df69d75e3c3ea5b4ee17da81
SHA1 9a6a0d0de95843b169ae013b6ef77e876347c8e4
SHA512 854d03d8bf8f6805dfae685c44ae3ba16c4a965029ef207899b3c5551b96235cfce158143f534b699259952ed1b3ca75ec4ef03296a003f9f7d8db344878931a
SSDEEP 6144:X8fCJVWE2Ey4kooiw+NiHk06YvFQGo5cQ3uJwH5AoljsBjK:+22B4kGpFiIuJwAlJK
TLSH
T178E40922BAC81F6310E3A348B743D753E8D89545B408D29BE4EB976522CCF8CC967ED5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\es.pak
Size 658KB
SHA256 5228d6bbac5909cf285aceeac65c042462c6da99b957f03f5c4070763bcba583
MD5 c6940063c241980f51112510e9d66035
SHA1 9f9d6fafd40888ae8254fdefe6d2f7f08a42efc2
SHA512 a9d0e8a2295826e88ae84565226cb1c2dc0a72a898eb03902883ad07646c47932850074fd3d7d43ac6e192d3598c18cd9c6b857a06bf3c3c63e0fcfd4b27afe6
SSDEEP 6144:bpd4mArqvoCkRzvnD18hWbqgWsM+JcbNO/m18j5NLOJzMv+24/Zp6PZC9/:1dxxkFvIWbQ5NO+18j3CJwvZwZ9N
TLSH
T123E4F622AACC0F6350E39349B743D753E8949545B508D29BE8EF876622CCF8CC967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\et.pak
Size 601KB
SHA256 c7364bca48cec7994e40a3169d465d6af04a66becbadccff24c9fa74d9410cbb
MD5 659c00bbad715c4aa137021ec3289810
SHA1 7413fbed7b4541c6f7354aa954f5425af66f6879
SHA512 1b6e555b888d7e74e3b590ce298d22975ad2f31c732afb5cf69d00a3917285d7c57fe5e62c376e7a14f836778920d412d010f8399733df1b0fe5359f074dae5c
SSDEEP 6144:gtSIRXShgAEhtX3rbf91D5+OjFnyL0GnFacklk1s9bemPOTQysNg0davqloIC0LA:gP+gA4tX3rb/RjF0nFac05NeqlDCwqpr
TLSH
T1A0D44D42A27D771B242412F9E737E923DC9EE3D4B4000D9668974A1971EEFCC38B6B64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\fa.pak
Size 995KB
SHA256 d840449c2aa71835bfaa739156c5ad00c4d0709557e129e4c87ae8ca38c4d960
MD5 c207be392956eaa7e15881e9757843e0
SHA1 54bd74cde2d698d930606e14715001011e7cffd9
SHA512 65dbdd2ded33dfa2746c1e92514e74e06552086ddd81986f3064e8458756dd97b1997ad4efb9beb6e70eac9588c6f6c6a1e448d6cfa7dc9cd568dd937bc55896
SSDEEP 24576:TLB8u313uyqoz+so2+RmXnloTUoXtCfGk62Yhk826Bike8MX41OElUKgkI02mHad:z
TLSH
T16A25B1957AAC9AB15747CA0341E33834C773AF12D349FE40ACA1076609A5B139F5FA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\fi.pak
Size 612KB
SHA256 6b09e983a58aca1a3b4bdfe35f4c8d37a568feda3ed680e14b24395ba04d880c
MD5 36c5011059c1db746b5b3f104584875a
SHA1 7f64ea5e4c3c823b17a21b4a9edbd29dc435371c
SHA512 41c4f076fb664a05893974eb0e12aa0624ad9b73316bae85c8bd09fa0f4b93419e43282fb43bb8e1828b1b7a8ffabffa282ed1d3ff6063b9cc0480a78ad57d8b
SSDEEP 6144:oUZu6Pqx3q8x4oEPNG97b319cb8Y7FYmS0rZpAgL0WsTCaeOEmHHuaQQLMcpVH7J:PZGx3yVQf19iPhZRagcpVbIEprWaJQrG
TLSH
T1E5D45D915215C22237C4D29E7DB0903EF5E5E3DC8C284D9AE843C7D849EE9887DB276E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\fil.pak
Size 694KB
SHA256 c5335e3b4468ebafd55fdbe77553a3838bfb6a1fd5a5ed0396598a0e96e7792d
MD5 9c4842e71f85bd1e088ec8094a74157d
SHA1 98f9922e83f45493e4f06601e0c4ede952a97d96
SHA512 b538fc33d297b43b1f9de131bbb079513a3b27fec5bc7cfdb17a0de1f565a16097c65bffc378cdce14f1218fc82632e96904f92646ef2eb667ba04ed0eb2a0f1
SSDEEP 6144:mG1mzPicfR2Kq0lTEBaE7/y+DQGCOgwlP6t1ihDVzrCcVNvt/LaoVUA1+UO:mG1APz9lTsHvA
TLSH
T19DE4C616B7401748DBC352E56260682F6AE560B83F81786E0FFF269B7BE7CD4D270192
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\fr.pak
Size 716KB
SHA256 06acba3cbd3f4e7cca4fa2103c5d71e8f6de3a7530717b0c72b454bd670be503
MD5 2941b99b6a44155f804f95965bbc198e
SHA1 a1a40521b6f256fe434e759aeb016ee5ed6e0589
SHA512 562a3d06e4d0618e77edef4f2d27d2ed1ee86369e72185c83e19128bd09ce9e1d1d1d69b11fd6f6f8ec5423be585bb148862b2965e657fa467f2e36711d9341a
SSDEEP 12288:FkBhwYhYk9TZLlIb94S3bvZwi3x6QuargVam8VBezBoYKxQkZuYnYc8jw2waxFD3:uih9IV7T7y8
TLSH
T1B8F4E65FBAD431CB19C60277FB12D6A3DD348248F215E340D89F4296129A8ECD39F6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\gu.pak
Size 1.4MB
SHA256 897b9ed176073cd0e8a39004158a2ad9877bc69f79cf260e029937fc9c556f95
MD5 beda393f9206aa96411868328a29385d
SHA1 c02120730f55eef5d833dfbb2ac34f63863783fe
SHA512 c97468e0a444c77fde99a517e60b4cc12cd09b28f3c52e2233e15235ffda7a3e05486da72f368870278d6f43dc0213ac44f81d9f4ce00609ec2d22f373cdd581
SSDEEP 6144:ENqjvPnr8XS6RycVGevtS0+nsGEYsXCl1Dsyw:cqjHnrMycVws7YeCvsyw
TLSH
T1056507D0D7B9F07019DA9F7E819E512086695343D67E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\he.pak
Size 871KB
SHA256 b777e7ede2e0ba88186a1a6dcacbcc918e7983c2027922f92994f937a1f0327e
MD5 4aa77f318446cc5b9240eb96f4047184
SHA1 8780770bb3fc4da300f539439f2ad88add4ef161
SHA512 66395c8109ad0f7d0551df8a08b75256d8c17367fb1efcf5bcb7ef9014ee76019bc5017c3e2076106143f0ccbe01d9e4f4fc23c8294a8abf217f4c6f946b7ef8
SSDEEP 12288:DEy3hRxiKA7hJoliptjTmEM3r1y0DBAl1Wq+/8Xx4uNYA6EXTieQCaj2iv36ueA0:B7ii6d
TLSH
T1EF159AC4B2E452255131AAC39FA5FA286FF3CAB53CA27512CB14526CAC774F0BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\hi.pak
Size 1.5MB
SHA256 966845384bd7213dd03e87a80655cdcb2bb02d180e778fa0583e86edcdba73cc
MD5 1c552f74bd0200cfe9b89b4e29ffe027
SHA1 03f22568f332ed71a0d036b17a423fce3c145c34
SHA512 20f0d984bf5c0fcd0434d0a5a87a989b54cd99e822532bfed3e5c18c853378f7f83aeac2e49161177b53272929c6a604162e1fcb49409438d826b52987b902ed
SSDEEP 3072:hl7fVXstTIZT476+eh2FHWnSweYTF4V/B90ZV1d3uGlqvLWYJEdtDVesn1s4f4/B:FXst8ZM66ceOF0OT2Leddep
TLSH
T12165050CEBBEF3B55DEC3C8A32890D37D59D3674A3E5521348D5B3DB9844CB8146A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\hr.pak
Size 670KB
SHA256 30d7259b46052fa6735cab8a6d4cba682df021e68998a4b3723248a5b806eacd
MD5 8d4b31fd5e28cdf771388754d81220e7
SHA1 c6fc93b9803b67a587d7318937929a21628563de
SHA512 6124d329ac8b74912bd55859d43db780c1a0e9f1ec06d7bbe7a6f61a233d0ffa715e50465ee2b3ab4a0ba555bab2e2e6a6d34d8501c067c81651d3af3ecf413d
SSDEEP 6144:uXLn3LGbHADul6KynubBvNEMzDOwlf62lJ:uXLn3LeHYoesHOO3J
TLSH
T12FE42C7DBEF2570A0897F246EFAA43447DBE08DCE56497B7684F522E0003F4D6AB8149
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\hu.pak
Size 717KB
SHA256 3bf2106670f2a461ec3454d790bf94010079e4e683d24aabd4a19e8d89e333c9
MD5 08e0aa1dcdc91a398b6d4211b664131d
SHA1 d9d67b1316588919f4e0da02a7e9597fb8ee92fb
SHA512 311a7466d381f699ef09aacacc1d4d02d058ed19491f403c4b455f4b45ce4f5448538eb35aa47082f2cc5581f67af629276a26b2146de73927b2ae2009af60b0
SSDEEP 6144:QAf0aLsfPknCk7jdFTpr4HR8XlH2DQa4FA4jt+u8U5iT78gZ49JxCYhU7rvP5wsa:Q0LY8Ck7j9NAdU5i387g8Uc1
TLSH
T1ECF44CB793B69459BC6C178778643F15492E881BAB3B31FB2887846D34A178D0D83CDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\id.pak
Size 592KB
SHA256 4d003b8e85f4daea7c28c4f6854d46a62b32abe9973e6df764e2882b4472ea64
MD5 308494e6c5497ad237cfc14ef91e0138
SHA1 c7cc47f9d306d8cb1fbbf1dfa5ce314356f7305d
SHA512 76b7be69ab733019c8f8248e13ee72ac3b1ccca76c18951cbb1e6e867cce2c12b1ac32dda97c72a8a7e3fc6a091219e4d1b731a5088c7d7830ff4cf0e32096f2
SSDEEP 6144:FHrJ+MT9+aIUt+Ya/IrjpS9fJpfffXoTFjlFNzmBF/tu6KIN6aUWOBw9m/iTv8MS:FHrgQ9+3M+YRrjIDATFjlF1mn/v6ah4t
TLSH
T119D4E7632ECD310C494842D5F2CEA91E7CCE233BAF05B76E8E348F7055A67686716B94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\it.pak
Size 648KB
SHA256 3e241f9341c9593ecbe3a2a74a5249e8d737962741b51fe60143e3529470d716
MD5 e460491a42c43e783206d8b6752b111b
SHA1 8b3c483c4f9cdaa9a05a552be9959abd6f1f8d41
SHA512 f386285588d2905fa9011149c5115276418eae9f7ab787cc095331e9e084452b6b1334f1eecd92fa9b876e07c097c929df11207c9fc7f74e11165700f7a6158a
SSDEEP 6144:oX/XhgmikTb52NZzV62MxSfqBCfYs61Ztq/UhOKa1DTsLTcr/+qpzSj9f3wBY+48:oXJDK9v8iyTQhNn/GlwIy
TLSH
T139E40B36A9DA252519976359E611F085FB6EFCCCFA41721CC99B031C22CFE80E1ADB47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\ja.pak
Size 791KB
SHA256 03427863b47fcde8164855a13d01f09cfcf27bf9ea59d6abf74f2f7b255fb1ef
MD5 1b51db3da89b7dd40b2327199a42782d
SHA1 86488c8acec4ec8bd8bdfc0da43a2a87f433799e
SHA512 e6022e6e39f9bcbfb626dad59885ca27e35bd3eb5cf456eb8f1dd3fb22f48e047f8c1ff44c518bf0acc0008e44d9bc81fe058ea5fbc83719631ed544768e81c9
SSDEEP 6144:GA3oPlXP9+stQUXhcMa9ZdQ2pm/mJkHbZtyNBGisVW:GA3eXqU29ZdQ2U/Mk9YNBGs
TLSH
T13605307CE3C969369D6153A22C0E36E17506AC9BFCA2363A443DC074BD70BCEE515AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\kn.pak
Size 1.6MB
SHA256 1dc837117f2b3dc69fc36c1c199addc999d5fb5a131072680796accd25e33b8c
MD5 491e7925510c5b9abaff7267be7a4dcc
SHA1 3701222a3b33b4ffae2ae1efef366ad0617347dc
SHA512 e4ba2570c45a2105602c1b275c745ff432f2ac39a9959266413207e1263e9123e00395e6750f2171dd1eb4691fef435cfcb3d4c86c7aac186fec4ed2a31cc800
SSDEEP 12288:Jw+2K6z7h1HSKzoMUc8+FSy7EtPMm4vkyr2a:Jw+hzMJ
TLSH
T10175CD18ADBA7D301BD5006B24EC643ECFF16BE29CA907D2F4DDD7802C66C6A90865DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\ko.pak
Size 671KB
SHA256 e43762e4f3b00819c2c5570ed292a6d42e53bbb00220c3f76a6aa0d502a76060
MD5 9907a110879ab563aae64134e8594c7e
SHA1 c6fda18829f2b9ba4ac5a028bac6fc2333cbbdde
SHA512 39a9277222a165cade57f67cdf6875f6f238017e7bc6dffbec962caa09eedf77fe00fb19199051e648956466324e030a03fc7a28203c5f5fd6cea2ad9dad0603
SSDEEP 12288:SK0IAjguCylkcM1WNiPszcbifYj4ZGRyzDoIy1KsDCgCxnIJ/xESJGRG1KLhw1tz:kDgICzO3BLJ2
TLSH
T11EE4B5F23CDB63CD1193CD82AAF4FA198382D976F7530294ED44CE449E145D7488AABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\lt.pak
Size 729KB
SHA256 1cf37f7eafa0612186eebb76406767518f9b5dba12872bc3170b9a309c5050cd
MD5 7287bc96fef0dc02196bb1aaa5771091
SHA1 6f0548e231ed0b0a5e87490c5ddfd5565f4c4db7
SHA512 104dadf3dee1b222fafa4f16625a74cfbde06b3aed3fac88cc5b3a5e9d54f81cc78931e1574997185e5b576f8e49a70fbf2d549c40aaff7db1cf39b55841f580
SSDEEP 12288:IfA2o045Mq6LjAnlhIKcGbHH7xt2tJC6SWA:GNWMSc2b9tAJy
TLSH
T196F42C0069E3AEFB9A4467C981A4CA74DEFD5000A727BC61ED69C78BC43BF4525A0F35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\lv.pak
Size 726KB
SHA256 01913d9951959803c419816189ba5517568b1f36f70c539549713c4579105be9
MD5 7ebc8afa26e758e440af8ddf95e2c759
SHA1 487ac1b0bb9fe64e6a3f8cb9ca852c7e3f948b59
SHA512 79dffe449427d6f273a2540edffd6e64e926b64d195d9a242ebb53563f2d7c3cf1f2e49c782218bb716e1091b14efd84a0e47b1b0178de1969f699c132ab8d85
SSDEEP 12288:/jK3k/38skFAWUJmyF3FbrJAGcZTSQor+5s:bK3kPTkFAWUJmyF3FHJAGc9oa5s
TLSH
T12AF43A959EC68FAA4E918DCA7336D133A8CCD740FE07E112ED798B36510F52422B5EE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\ml.pak
Size 1.6MB
SHA256 98c8ecff32021c532167cbd7e60b714c6dd8e240a3527af141da9d3916ea7d4f
MD5 572481ee74bf2065d60373c28659a447
SHA1 09aeab1476a7bb9394cfa8927ff9a5279edc3cd8
SHA512 208ba01f356e2d0c5415cc4dd1a837dc2940c7d0425e272eb965eb67d50f963783c023ab549a0263a4774f6f158904d03246708c126bf3b78b93b56afa8bfeee
SSDEEP 24576:oGJs/oZAuuxyYl+9y9XBkx/9tNnkKfijHeBRJzXcF+v2AiyZ3laJRvo3O:M
TLSH
T155759D5BA036CD3B0FD102167B4E2FABCD5B9FD140AF668B5869B2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\mr.pak
Size 1.3MB
SHA256 962928ac0c648b426dbd5dc930528900935acca4b336be6cf3fd911e99ef400f
MD5 4e37c34907b35057a702ff531a6b650e
SHA1 1b52c0af028984e318d1a538b8827ad25379db60
SHA512 64a4d2a1041399b8e4ead39119741acbfe605b4e357556cd1e51213455727c9849d749f785b42438c47881a932864b7df885848e81a0f074b46717fd4632e998
SSDEEP 6144:fbH5nx+ljz14PMr5K0jpiWUZyS0pB+MPbiMmRsTN/:ji9B4E5lZ+MPbiMmmTN/
TLSH
T13355D24DF7BAF3685DACBC8E36540D3BD8FD21B1C3E9925648E1B3E74884CB401596A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\ms.pak
Size 624KB
SHA256 7b5ecc027a33e3123596cacfe6d4a8b33c8185c6d90d65aceb686aaaa234c5c0
MD5 24b9a41bd14ffac0b2a4dc0ac74eae1f
SHA1 6d14b4cf46b1e9ac55ae96580a0b718026b388b8
SHA512 1b3f6916edca84125d39c9d86b4775b6544d9ced96cb57ececc201fb31d37862c6d26d6504fe1ebb9e4f659a977a9350c553401e1e7511fa571840973e3712a8
SSDEEP 6144:HARDfYMoKjRqq5eZvAEyu9S1cW9t+Huqwp+k8LNkwnwAFDqlOt3Vct:KDfYlKjI9yNmHuqwpbbRlOc
TLSH
T12CD4B5579EDE3118085843D9D2DEA91B7CDD3332B705AB2B4DB08FB0126E7A53316B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\nb.pak
Size 598KB
SHA256 c4bfbb6dfa8c2f38caa27f77b58a5a373792284032d998f48469b2d8f050b084
MD5 0cf200bbeac0f691286dfef36e0639fb
SHA1 629ba0fada1a614acd859b1610e6a8b3fcf6ab71
SHA512 4e3ea53d5583e8a3f4a39d4f46544c3a0286a7d427d31e346785e2d2f35ed2d93dc43c12427d79d1809491aea2211e0c105cf3f57f1fb108a5cae649a16191d9
SSDEEP 12288:gRpUC5atNQlsOU/Op7f3PfZLnkGJI5Br4fw4Mau:0EVODpLnkGa5B0H+
TLSH
T19AD4F783EE46B72EF2A443A4F518855B9B7D943CCE98199B54D8C63E0CC7AF052BE1C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\nl.pak
Size 623KB
SHA256 1f9f8fdf67a93b571823fcdbf4f6c1132663a92bf199fcd8b3554a1404138182
MD5 3f05c2964d39d55d657c625cfc42ea3e
SHA1 7821a999f07d7934bb9622de3015b86e29686355
SHA512 8bbc2b2aae7023138860f466975bf654ae6198079eb71509f0e0c25044a3f4e51a272817bce8d4b7cbb1f67ef38b8e209c87992fa868a9297ea0f9ec81184c72
SSDEEP 12288:qxj+6zpPlbJWQusiURZqgwIzf7FNyh5gqHgGCDTF:q5xlbJWQusiUuIzf73yhKqHgGSR
TLSH
T11FD4F907AC4E293E59C1A349FA098FBBBF2ED22CC26CE67D94DDD1340443F68919D589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\pl.pak
Size 696KB
SHA256 1c328e8286098d6758aae4562ad0465094bf38477035475ea3b7ce9729c59518
MD5 ea9b25cb9f597728dc2524534dba5cfe
SHA1 64904900cd18897e08fc6246c670b490c311bd04
SHA512 ed857e618146faf2d0a4b58563e441c4b79cabaa10c55e3f54b6b46c4a8273c5d9e72556815829c9a2a9eb7101b0a449c902ca62f4dee08d14d7ac5d39bf59fc
SSDEEP 12288:+LW7BK/LwZwfQfuzSJabZpbn6fPPCUdUe3m/UevM/mE1QhrBajMol5/mT:/7KMK64vMH1QhUO
TLSH
T1CCE45B0E5AE58A4E8CA008E6F6E70B7CACDDC808F108D35FE45F4526719B19EC9BE5D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\pt-BR.pak
Size 652KB
SHA256 76af448316964d70f5ca6ea2d3d10dfdda055521d981c0342c8eb2df1aace27d
MD5 22bf075036917d7a33ba559012c5dd24
SHA1 3eae79569e7e2e015b8c769a5f9e4e0283965034
SHA512 e1cdac2ec5deacf05ff6e61b4fb883b59e6d79c7345efec37b1da813b442fc5a0c86f46a0a3e8eab9d03ce9eb998c7f4bf12922c5034ee10d1043cc2f12edf50
SSDEEP 6144:JiMLUAV3XJIZ1uNBXBLEpPQHEyWAEIIr9dqsRUUfvn:JiMP3ZkebERUsRDfv
TLSH
T1ADE42C2A6ECA136604229350B70EEB47E5890745FE06DA87DCFF4F45A3CDE40D933AA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\pt-PT.pak
Size 656KB
SHA256 8ecd368ebcf0c4cbd3decb1709c1e6cda9ebd75dc4c3d0869b86dcf959c15565
MD5 51333909ce46d0216e86998e4b9e1b21
SHA1 f6c7712bc70d96d89afd6f05b5b66c506d869a52
SHA512 97d963f3b30c91e33e9cfd436331b109c0095eee20fc885ffc66b4f1d998b93cd7ba6954a457cf557a926d7db574d63e1ca60239b907d1866021cb779ca20de2
SSDEEP 6144:nh7IsRZT5nz3xuETieJVJJxhuI9AyN55frKDn7t2leSR7J:BIsD9z9EDn7MeSRN
TLSH
T138E429296EDA136605135341770ADB03FAC86645F809CB87C9EF0B4672CDF94D2B7B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\ro.pak
Size 681KB
SHA256 bb8cb9b4b9708cba17c6a1b00d448c500ecb1658019fd2451868603c68251e92
MD5 cc0c857475180666617c34462d101071
SHA1 4493b059976efbe145f6b7255ea9ab8b13f1f3f0
SHA512 24fa2d28c8cac385868dd8d4ddc2f44c3750b30b473b59ecdad2119c50bbd07b9df908d143a49f905e098a931386d58608e57d3cbf3ef12adb0e42a43e1ba7ca
SSDEEP 6144:J2gSnUBR5lob65lGwV9InPBFNOAgPqiVVQL+ITGIfOYIQEm5tN4W2slra/rrsf:JvSUBvloolnInPBidTL7uIQH5n9le/0f
TLSH
T187E42C23A1C41A972D5152B2B73A24D3E88E105DF641E2CDA4EEC97910CDDDBC52EECB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\ru.pak
Size 1.1MB
SHA256 4f7ef4e041932011eabc4d2dc8f8544106f57ee62c023e6b6a9a3a3ac23a7cc2
MD5 4d282bdb5afa19d6176bda8977d56c6b
SHA1 8247b6141015b79ee0926c19e18bf5e590e563ab
SHA512 b5540b38e7236cb3e4e94b6485d61e8bfe8fc171d4ca2411c8f2adc2572f16d2d72e77a4c5de99852756d0e1e4eeaea57665fc5f74084c9409cfd54134e3ce30
SSDEEP 12288:fgwK0fQeRo4YeWspkzJ9sF+oa+ULZHo6HzW/oqSvgsGCZkE0dR3Q8NiGjhnYHgO3:MMFd8oXS
TLSH
T1DC358860669E64DE1101F01BDD08BE0D3CEB45FE3FAAA35219A42D7F35F2024C67E65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\sk.pak
Size 708KB
SHA256 9494cb93b7dd65cef73072d315c7c031005a3783594fdf43fe96d9e531f5cda7
MD5 90c1c29ff90bc8417205b89cb1429c30
SHA1 f86bad59aa31cccc213e875f481ccd30f9588c2c
SHA512 873df8dcbc934ce463e68c10d5a43d9cab5826e0fbe10838511b4073e75654f14d81f8fa4f7d6c969ea86e8d8aeb882b3eedf88fe4bf111b4e9ce2ebec5993ab
SSDEEP 12288:JFHgklaYo+T27UkzA8+mi+xdnaOY7VZ8pTjsxt9wf:HB0UkV+mYL/taf
TLSH
T172F44D3FDFE7181E8E8D0108FFEA7110FD6E8650864EB4A6944E364714E26EDCAB4E54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\sl.pak
Size 678KB
SHA256 b50824ca2479dc29b404a8e2c252a9a791f444ba10b839d09b684b52cbb7b4b4
MD5 83c7ee90b360294ea97c495df121397d
SHA1 7184b87b0c28baeddf60fd064397d678850fc22f
SHA512 57957931be37d33b618fb7f5b36869b88e1d18dda54afef7487734caf583249a8d2ce76103a582496546dc1c6680ebcf53ea85d58f3618a42e6763f63afe7eb0
SSDEEP 12288:kQavS9bwZ7JcB2+RVWobUWH2nWOq9pwi/fzBNaql/ad:kpK9+7qWobnH2ni/fzBNW
TLSH
T1F1E42C39BEA74E0F0C9AA2CEFEA606007FDC044CD256E6A1EC4F33795415A3827BD595
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\sr.pak
Size 1.0MB
SHA256 02224e36d8d12e79c22e573425b5e7b2505e1f68d8be4cebada710a9c0ebdb00
MD5 c5bf2097f3be1edf96ffd5e4caec3c07
SHA1 83ab5968ee3022c88e4a2700f98051279016d90d
SHA512 dcd1abd0961d7a81f606d7968ab8014e8584984c2ef52376dd1780c0ef7fbd62309180a088e8edfe8e052a914daae3a112cda8460b555a28563661c358f2a34c
SSDEEP 12288:hmE+i0+NHL58I882S0dRsCt7i4O5JM9kpCQhW6CgxmIF379juz3/k/i:8ZsBqICVz
TLSH
T1813556A19B9E64DB0501F41BD808BE493DAF41FE3FAB975211601DBD34E10B847BA39E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\sv.pak
Size 605KB
SHA256 ba098c7e48f588677686e8c4353432ef185ed4d659bd43d0b1bc76029b36aa30
MD5 5df1553aeec1ff4173f29047023a9caa
SHA1 d85e8a9d8dfe145af9b2104b795f4f40ef030e4d
SHA512 feca563d0c99e40d41b8cd5c5d895b85d006ac8af359e6b3773d64ed3185f18688f1071faa92e0651abd541e9e886cb07a36aaec9acb8a8f21ddf635e0d562df
SSDEEP 6144:qFyajTUxVCCQ95YVgyLIuxRxhVbFl14hLOVRFcz5RtGm1eqMlmFMCOSOHeldiytO:qFnXCyT8xj4iYF6f
TLSH
T13DD41C438A20F526FAB2530DB608115F0AEDE15CE7F2954EB8D9883DAD8BD5805FF247
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\sw.pak
Size 640KB
SHA256 c806d266dacc573c6f2a852bbba1cf1980063f08a803e6a0f5783c1418b4c16d
MD5 8f9184c54127837f1cb9429d9b8a868d
SHA1 b24ef9b3f7bf8433491ed37014890973feab9edc
SHA512 d01d0d3915a5e2fecc4b3b878ba91d6fab881fa0276bdc2a78bef1855d85ac3caa85a83f178512735cb2ec3fef346e5b8c1b8593faaa8b7122c6ca504b4c762b
SSDEEP 12288:Gw4BZ07zyxGB2qHOCdYGIGw59medqNGjRdponi91GKL3hjinSLeRtFa/hwzliPEc:Oy1FPiZ3V
TLSH
T12AD4D5629C71D0191233518603DDEF732BDCED5C6A2B2DA35A46BF0F218F48C56ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\ta.pak
Size 1.6MB
SHA256 cc82344df7ec4fefc02fc36f5d1af7286b27f4c267477bffbb0ac4f4fefab901
MD5 eb1d6f779c3b2faf293c643f83073549
SHA1 d0e8030356ee2f16adc94346c64fa60aeb983739
SHA512 7fd9e6ef6aa287ba7f13e92f398bbc0c7a76f307a70ec7d2745fdda83a1c7d1b80881f8cdcb29f2866ba3a2f8c2c8fcd1c47768c801a0c14acec6945eb80ce62
SSDEEP 6144:sEcdrUB3ktavRGPEtqstR9ztm1vYpiMyY:pcERGYqAtm1vYpiMyY
TLSH
T1D7750CCE923EEE890F93288F0319536912986155C07BE3A67C766E1198ECC5DDF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\te.pak
Size 1.5MB
SHA256 f354b638c25843ec70a625d98066d1e291d6567830a327a308262f7872739f43
MD5 4d42fb61a80a3d9babc673001021528b
SHA1 fed3771d00a6b9c78ca64f5453c0831b571af52d
SHA512 520a9740c4e98d68ed2c8c1e43eafb602ec7a9ac7a670ca09f95ea08f56aabd3c461ebe56a85422d79115c377abf016c5afd2813d18e27faf08c704a4821d89f
SSDEEP 12288:mtTx4wcqjT7MZKNuywG6sSF602/NNgIC8ymoRRT5dbJy52CM1WOB63N3p1Fn1ghI:mtTxcw2p1c3N
TLSH
T1817593023A6AD310DAE70273752CF66C49781B8161D6732C1EAFA357EB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\th.pak
Size 1.3MB
SHA256 72495fa1c87e6009499c3c478eb8ff1dc295e4fa8e1e97c915c4334cd48df45f
MD5 b331372a9bd1dcf40e01caa040cc130b
SHA1 480bad99c44d550771e5427e9b651c54cdf4f802
SHA512 16b78bf74ac888039098020c28d7f0e687fc06f22507e816fe31e027cc5425a55ee7c342d9844212dcf3f3e0b5574c66a0de0b807b65abedb2c0577de2018086
SSDEEP 12288:swl2ZAJbO7HAH5N9LyZYAozYL77SsGo6h5skJUseOPsO5eXwpbDFDS6Sud2mKHlS:Nl754e5s8
TLSH
T189554BB37247DDD479441B5B262A7789672DAE693F73F8E00089215A73F071A8422EF3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\tr.pak
Size 651KB
SHA256 d42ef3d1bfd531ef93d1e30e34d0c9a9fad37d08aa26fb61930d67ef31e5a471
MD5 3314b3d729c7e537771546dd33296d2b
SHA1 cd30752bcc0da9aaacd4bdd44dfeb4e12582b1d7
SHA512 a632d1087e048acff5591f4dcc8ae07ce7b07b317dcaf27df18da9224550aca34b29594b8298e6b750958a4f42031a0d2d91db77fe82097053a74e8a0934397c
SSDEEP 12288:o0zJ/f90007JIPHz6sgwhIfZFxAHON9X1i4G:o0zJoaUN9w4G
TLSH
T129E4FA817CEF282C8BB9278BD6E90666F89F0766B331F4469B169636774535303E360C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\uk.pak
Size 1.1MB
SHA256 2b3e02603e4d06b513b59db0d262971c8ec9e7f85233c6862f52e72bbc4e0afc
MD5 209ad70ac0aa81cf759a590f8417a1a7
SHA1 01e85720362a5bc391367ef3f549975cf0cc2673
SHA512 a6520bc4117cf89d019ef3cce8da3157e71fe414dae3e732dc9cc028e020db0e18eb3ffc70af60b2ba78aa878981837f7c3b23ef75635eff644c76048c47a45d
SSDEEP 12288:L33/6Uv9PUH+QKjb3IrkkkAbvyjRrsSr+UinRYX2ot81BUf8t1oNnHUA6QHBz8J+:D6w4E8k
TLSH
T12045A9A19A9D54EF0105F05BE94C7A0D7CA741FE7FA6871625A43DBF38F20248A3C35A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\ur.pak
Size 981KB
SHA256 0f5565df4484d9c0ed2f3033156e876aa8ff25406fb5a628ba12dc2588d5f7b9
MD5 96a22e75d9f2a6dc89c89799312b8ac4
SHA1 47f320d6d8edcfddc9ddce826915fa76561b3e7b
SHA512 66bf0211a04bcb676bbcd9ec23607727d307c589879b2e4ef9fe029042938111bb7d62c2d418920c220167a02704c567d9865cdd0a7e8073219c01afbfbb17b7
SSDEEP 12288:EWIMFeIuuFt5oiu8PC3zqtdQ+BR7yArubcvqmEhdGuOvedQYrGuYjwadcJKwUvuE:EZM1utFGWW
TLSH
T1322500D2E6B896B35A21D92780D33C34CB735F13D34AF281E96246C54E9A0135F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\vi.pak
Size 774KB
SHA256 b5ae891cb2c1b98e01b7b819946849b7f1530b2991584b74045766f566ab739a
MD5 7b1374495e6c7607d485774671fcd057
SHA1 586d4ef0dad80ac8f4f160e29349139dae0b71f9
SHA512 7731ef54f6185e897b242adbd90a72ae9e9182a341142d3cfdb83e143ecedf427ce41b067d55d34ab9260158602468c6aa6f5abc59c2410ea11f641f5f87ac28
SSDEEP 24576:Gqaq+c0JVp04Fvo/FE+tsjlIsicufpq1ljs:XvsiVk1ljs
TLSH
T125F4855216E0302680AC553EC6CE540D6FCAE42FF7C1CFE56FE4297876221A45F25BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\zh-CN.pak
Size 554KB
SHA256 d9ba93569044c34fdc3aea0a0be892e0b6eab8a71e3008bc854924bd5efcd19a
MD5 b4655c9927e55fb661138f2f92872587
SHA1 4cce4f180cc522b4c41efdb10683fe47000ecb13
SHA512 c345252767c4200b52cfc80477b3174df2595a3025cfd7b2cf5df7889e19a5dde541a9ebf7492cd35e41cf12be15f6a3e0016e9a7f92deea37d51eb55195ea85
SSDEEP 6144:by4kBgbShvXKNE+zRinx7dpUJkKfQDJ+C41fR6UUYfDM82ZsQnWgMVl+:byzPy++zQnzpUJkQQVRcUZYfDMzsDU
TLSH
T138C47CA820F9BDEC044650E13729613D7C40B24BF667AF356ED248DD2AA2FAD0757E07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\locales\zh-TW.pak
Size 547KB
SHA256 217b6776de0fc342d2ba3259aef9c5a6d9747f20942791be4e5fa16cb412b970
MD5 052959fd75f1859fe17d262c7b3efdc7
SHA1 a6aa1936175780b2bafe69399a32d6bdde3930e3
SHA512 93d7c0874eef34fcd7ecb772bd350115ff0114b90d025e1b646f0039a3639d69e41508a53b9672eb855e8a5cad7154a81b8b79687cc026b0adb4e3eab5c823b3
SSDEEP 6144:CgCxQTJYaPJCBLagTuxVJm4DIa2sluXdAr58qo2HZD5SWWX2jXUmFTu:C5x8WaAu84UNdAr59o2Hnjj4
TLSH
T19BC47CB60CFBDBEF0901F484B7CD523ABC8B382DDD777636FC8918941E69A540AA2145
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources.pak
Size 6.4MB
SHA256 741b7aebbec65ed7af754530e77b45ea4274e8f7c012c4396de789563a1183a5
MD5 2c43829c0a3d14b39faefb40d3db1c92
SHA1 c0a4afec5b4aaba80bd61e92e1806a5562fc318d
SHA512 c2dd9e9a26cda3ce112ecb714774bc33734c3c2d7ebcf72b248bfdbe96895d96d00817322ca5347edf92d54c1480ac3fa5037a1db368b8823522dc3e1dfec67f
SSDEEP 196608:2StRBRMfjp5QoCmkrB0QMguFBgt3m06Rw+Ki:2SvTMU9mkr4jFWBm0iw+h
TLSH
T1AC6633DBB1311C4FC58883FE8529417EA86CA7A1398951A2199C7128CC2E74F7FC967F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app-update.yml

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app-update.yml
Size 92B
SHA256 142dbcda9ba86178d342850ee52ec418104175f1bdf2d6a24daa781d846808b9
MD5 85b7e0548f5b8b93d9fae2f84c5a517b
SHA1 21cd5737c859dd994603c210d70ddecdca6c9cff
SHA512 cb52a52b7d0496cc195df62033a48ff12dff9a2d879bdfbdbe5841d34262f4c68e2ab1bc8bb7477ae179f4736ea4eda5d89afc3ca906c29c8f15445d6eb35044
TLSH
T1BFB024104501C1F103F51F34355F1C7000CC0051F001453CCCF50415404F43C4C440CC
MD5 SHA1 SHA512 TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar
Size 33.7MB
SHA256 9da8b59b988131afe36c071b29326acb8643306e061a7de044c5a26add6a9731
MD5 b802ef9afc8126dbf26bad94e004dc0c
SHA1 d9a316b971621e63a5af66eb1cfe81749707022e
SHA512 3b0f9c821c20a133b2308db4d498fce6a5d04e22e6ffb4b498df9f0875b2407c8c1dfd4a6706433c46415856dcff0ca77d38807a2462f9b6b7c757afa25a7cad
SSDEEP 196608:dLYQ7TilnhBUnIXF6q4hOMAL5IZ+zFoFK:dNTilnhBUnIj
TLSH
T1B0772B6524F35522565362BB5B9F40427E34901B2D08E950798CC398AF89F3CB2FBFE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\LICENSE
Size 1KB
SHA256 9415b233c6c5a6fc3ac6977cde3530d149f45a61d86b2fd9611cbca4bf08f4e2
MD5 f6c414bcc4984dc9495adf4f8a8e76c9
SHA1 8c0563be623b8c40ad7cca0b9245d4d0c930c063
SHA512 023ea74e84b1ff671a5cd88ecd0ed578b9e52770ef7b0947bc909d5e0da2ee4181814a9734ebd8ad7848da3d594ee10d189d50cd9de11dab0cca502daa59fadd
TLSH
T1D811861E73510762189A13605678ACD5B23B715F7A5F2A88146DF341233A06CD1FB840
MD5 SHA1 SHA512 TLSH

Submit Download

lzmajs

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\bin\lzmajs
Size 1KB
SHA256 f29aae866c7bb66e5424a730c473231c1329f6bb0636ad33945299a4c4957a50
MD5 cdea38e7d795ce6e8274bef89c773780
SHA1 7bf89bfcaac6964e4f551233f0daea7dc2f58930
SHA512 401068503e0cefa4bae0c524bafd903f83ce945170a5a28fa5b8f3004c9b1afd09db188e416a071011276c836a6a2dd75ca5d9397e7d24cd1715b6c46e1b71e9
TLSH
T1F941873006FEA06E422340B73BFFD45B59B5983B1145DE69F99CC5C24FC0191199AEFA
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\index.js
Size 13KB
SHA256 77d9568c9c5479953a4588875b9d5c4a06ce9f926f9fab96d7678e68a74e6985
MD5 ff2e30ea41c50e397cc5fb516d633d2b
SHA1 bfa32375a230e4c6b37d9dee9a94bd106af80bdf
SHA512 bbaa0d96fa3b546fe913d0988dbac54c8d963b4a79f8459c22cf27920e754977f471ccecc07bf9936bd34a3b65dfc6517ae5e126dc260d68347f71f3106bb51f
SSDEEP 192:4aBgo4Ls4gCGlqmPk4TPGwsVh6rLSvR50qjXryXN6gLo0OuLoC6lVlfuswTDo+Wo:eokBL4LSA6e6z9qrotsRdn
TLSH
T14652FF496DFB31624673B1754F9F9A0DB23DD017142CCE94B98C83E0AF905389AA6F64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

liblzma-build.sh

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\liblzma-build.sh
Size 138B
SHA256 ae56a4c3e521e37c5677e4d867e79ab46ac23b3f5682a7e2893497232a0326ce
MD5 cd2e20d9a8384d3090058e3428d6b327
SHA1 b3f90405a89eeb07ff6fc4243be8016ce2d6e1c3
SHA512 d39514e34aea97b3b03b966b76affc5fbb740799bf15219935d8995029a1fbeefb59d3a2a356ede3cbfce69ed0d775680dbff33493d2585a7ab29b84cbb70527
TLSH
T143C02BC1C07B00225B47021911463000CB148AE51A178A56C0C4C2E8C7251D9A61790D
MD5 SHA1 SHA512 TLSH

Submit Download

liblzma-config.sh

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\liblzma-config.sh
Size 733B
SHA256 100d04495f6b1804aef3983377d91509864758cf9aa7470d28a24b69f0bce116
MD5 e886188759f08df991ad8af4bbc333c1
SHA1 b9644330527cb91fc20e2d66a93c8380f71932ff
SHA512 b4b30187505941eb75d44bdb51d4bc9ee778034d0850c7253a38ca636a620c9c6ae8954e43515b57ef409adcb6a91976e4e92f49b466c6c38e7bd33a79340ce8
TLSH
T1CD019C17E456365B2E2CC6A273EE6893EA05AEC26F2C551FA0803A7873BF5075610C86
MD5 SHA1 SHA512 TLSH

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\package.json
Size 777B
SHA256 492448e7c5e26eada710d45c14a2d8eb5c6333eb39dbaff4631befaad37e0ed6
MD5 26d1fe454b2c4f81e114e798c706c8b1
SHA1 a97b9dfc25e5d7d13da483257c86ee04df440b0e
SHA512 5a60d5213a4ed341dcfdabca3e6f736908ce4ca1859dc049dc079f7f8d8a439f809de20b501907a7932199882988c261539172eb8539ac1aa4ad39a791e4791b
TLSH
T1BB014525CE74ADA31EE915C059BD0682A522C827885ABD0D33D2531D4A4E87B26FC5B9
MD5 SHA1 SHA512 TLSH

Submit Download

electron.napi.node

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-arm64\electron.napi.node
Size 227KB
SHA256 b322385eb19c1d0737144fbe2fef3c5d27b5e5531878f5a21700489785e51ac4
MD5 d9d08aab6b8f1725e7e79819b0ed52e6
SHA1 bc08e98564462675100b8c244e45b6dca7f504e0
SHA512 3abd4ffc4b04a0bb2c46a2f60901728587b116b0cd9aab15d77392cd70118f2d6f03abbb172d01e162596fc5a205a38003b3025d59587ea565c10b29d84b4eb0
SSDEEP 1536:v1C0Ui3WiUnwp8O+yctEf5yaXxIv9+noVf9CHJMKZNKO8rkz8Ka+eveQidqRFX66:vn0nO+yc6xyff9ZOekz8LeQi5kBo0QW
TLSH
T11834F8A5EF3CE802C8E9B2BE0D05435D620BF9624D21D3FB6EC5965ECDA13911E26707
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

node.napi.node

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-arm64\node.napi.node
Size 227KB
SHA256 7eb79b4ace336fc1f31923f7407d997d2676f95a5fab4a3dc4688be2ed659f1a
MD5 d4757cb9d3db465324fd6d209159c3e1
SHA1 d7e219800ffa8913b7ad75720ab9771a0cfe536d
SHA512 9564008c36fe2610224103c0300cd8616ccb5d1d92eccee20124369bdc2267fc9261de103c1be50d34328493d96f90195ce7ff3fd73b006f81efaddc0c5246fd
SSDEEP 1536:kMV8yurSTug6X+YIytNX1yQsdjesJyaXxIvIPegMwI0v4JMKZpKOz5Skz8KoTwNv:/MTOMtLsd6Gylr0fOzUkz8yNLokBo01
TLSH
T18234E8A5EF3CE802C8E9B2BE0D06435D620BF9624D21D3FB6EC5561EDDA13911E26707
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

electron.napi.node

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-x64\electron.napi.node
Size 434KB
SHA256 37713bcaf2468d4a60c94652dd2ed8801fff57f270650b2fee90428bc5ad290a
MD5 7ee8fd865c9bc4cf48a3ffaa31c5c83f
SHA1 c3b6eab72a5a365470b9c093917a072ea50f19ee
SHA512 a18d1bbdd3345090034dab3400cebf5aecbc080e6dc358d63dc448e2f20cab3aa95d967a3f3af013a6c7e8b957a5a7b79e68fdf3cc089c5a3d8b5837d222abbe
SSDEEP 6144:PIZDPb40mHBIYtFnUI5uyMLqVTQ0NYOBB8rZ25Ezf/nYvkBq/F:AZDD40mIp0NtkrZznK/F
TLSH
T161942AB29330C447E66AC47499AF4391A994F9760E20682B67C8EF1D7F77B600F1934B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

node.napi.node

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\darwin-x64\node.napi.node
Size 434KB
SHA256 5c77fb5f183ee197b110c76440b390d74aae7c35ab1ea48861308d8b62c22f65
MD5 001fbb6d0df309b30eb8d164dffe5b3d
SHA1 ebc50ac789a7d5541162365de2dc8fd45da01b5e
SHA512 46ef76780c0c0c2c1a1b524708f66fa2f53636cc46fcdbdc3aa572423beece14cb040d0e943739f1a32eb381689d72e06d38789b59ccce5f694cd64a9007fdac
SSDEEP 6144:OJ3wepZY9h8c1IYtFnUI5uyMLqVTQrNYO0BYrZ6+EzfdXYvkBy/7:OhwebY9h8/prNtprZOXS/7
TLSH
T1DB9429B29330D447E66AC47495AF4391A994F9760E20682B67C8EF2D7F77B600F0934B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

electron.napi.node

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\linux-arm64\electron.napi.node
Size 421KB
SHA256 99006146d3f02a3701a254dbf57d10175a2950fa7d85b4dee90b99c997d882da
MD5 5a8ff3c35b7d2d367d4b56f016650860
SHA1 43f00704db624630f2164d52e47e93d4430b764a
SHA512 753b32f63a2638b49123b49876c8f0e336aebcaed128b181b7555de4646a9f3e1e2419b7489de61888a5b18f40790507367206507ee52afe92d19abc78129721
SSDEEP 6144:MZMB4WEWGxBL/aJrxffqWCMFe4FQvYOBoSj9uf1iEENkC:MZeE9BMV3e4EtiG9uf1ik
TLSH
T1DD94F839E261D17DD04B947099DB4A0310B4B5F85A35200E3BCC9F6F2A77BA68B6D393
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

node.napi.node

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\linux-arm64\node.napi.node
Size 421KB
SHA256 9a03f9e38254ac721d042561b23842c944db243c3c30fb21f240a577a34c8cb8
MD5 c5ac962f6ef85085075bf5e761696f56
SHA1 0574d6d3914d86027d35c5a4bcd36c9f23f426fb
SHA512 64323a70a99aa2a018e5c4e43768a3c4b9897e8da4cd34a580cdb50d7657a54a3bf36ba4ddfa21f70a84b4800e788091a7c65ccce6ae58e18528c0b5118a1072
SSDEEP 6144:oB4oEWvydo2tHAufixrHJMv3XlhYOkoNr1iEEN56:cEKydog3TtD91i5
TLSH
T11B94F839E261D17DD04B947099DB4A4310B4B1F85A35200E3BCC9F6F2A77BA68B6D393
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

electron.napi.node

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-ia32\electron.napi.node
Size 619KB
SHA256 e73951d1d9f4155cadbeb530be14dd32e1abc4ad9332527507ede586ce41e095
MD5 8e7adb376ff87a10990f783562b06a4b
SHA1 924bcdf667dcb58767efc662068ffaea2f40e7f3
SHA512 6a18f6f71a55eacdd4dd415e3a39ff2fd551594d332921e5e68d717142ec75595a32dab7d40aa82b33dc33c27661e7382d622dea4173a1deb88fcfc976621e23
SSDEEP 6144:GaiFHaev+gFh4N7UUBSgaAng6PM+FMi83y9OMZMduqpLLDg3KF8:riF6xgAN4Fgbg6PMWM9uqp1F8
TLSH
T1F8D48E207894C2B2FDEA20FA01ECB637029DD4B0075496C756E81BFED6606C2BB37657
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

liblzma.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-ia32\liblzma.dll
Size 148KB
SHA256 37c4a4277ac066522402c71fd03bea5e8900fefd505ccf9b6399128c92182780
MD5 29e433f0ecf0cc28fad655baeff3d006
SHA1 9948f1638d3afddf346d901a04a9e5a83df5b9b4
SHA512 98bf4ceb9a04d50cdf64dad0fdd40e5fc61a2ffd7032aa4cefbcda0fa8dc33988902b5ecedf7f7ff5e32fde729dd8948f6561f38626d2140fa1f36ce7fae4e3c
SSDEEP 1536:pw/AmC0uspt8PwqmZMnDBQQP7J0MG5diyJg5401Tlqb97MruNGn9mNonE2w62:pIAG8wqxDt7J4PK5/Q1MH9mNojw62
TLSH
T11AE30884E9D7FAF1F6579D70D852BF3B85F05B028110C978D68C9BADE82B762241930B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

node.napi.node

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-ia32\node.napi.node
Size 619KB
SHA256 ab5e095b49f13ef86a3dc83f0c11b9bee1fef24a4cf0616b0015d0ebabd443e5
MD5 3a706e64b17cc01d142794436c95805a
SHA1 f1bb6751517c517681bab11e5c47a9a141e659c7
SHA512 f839493cf238c735b7937d361bf08cdc2ef3381ac88accc759096baf0c6063660ac9771d18de8c3af94b5b8abbb1fa079bd60824ec48996946fdbac6f5f92ac3
SSDEEP 6144:ZFjUvSYDEMcss+lN7UUa65u/XW4QxAiBbsp6qE+pKHVQiWuqpvKg3Kg:ZpUvfEMfN485eW445bsp6qhuqpmg
TLSH
T1D7D47D207884C2B2FDEA20FA16ACB677029DD4B0075496C756E80BFED6606C27B37757
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

electron.napi.node

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-x64\electron.napi.node
Size 797KB
SHA256 5c7dd24a625d806e37cca949e52ec348ef0054a902e8700f9fdb61cac44e4c9e
MD5 b872a2c94ff78af34eb7c14c71f7a784
SHA1 e8016fafa0a91176d56664d9218abbc286707411
SHA512 df93b9c2e8b118d3e01da7dd63af83e4bf0c36d835ee49167aa49b3a9459b6f21b0802feeb6ed52d7eefc0c1270128a7748487ead1bee82f2039745599a80262
SSDEEP 12288:BiHbpT41iFWTMg60IHCEqooN/vnbCzkEHN3YbmMxBIfOPB1zjetJR:Mu1i+MgPlrfetJ
TLSH
T1CE057D666BA816A1D0B7D13E89D78F56EAB1F804433467CB01D0459D2F13BF89A3F722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

liblzma.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-x64\liblzma.dll
Size 147KB
SHA256 fc7348418be392d5ecebd7b9f07c1ae5bc530260fef923801b140088eddce96e
MD5 2e91129e126d90edccef94ebf7abd6e1
SHA1 a8d221d3475216c11f4beaed8c9b9f33ccee32fc
SHA512 dbae0120c0b3709811fe9a738a4d66da4b47a1d09f0e5be373a77330d57fd87068963c76f294eac81723856dac500e3b824e7def828a1646fef611230d42898d
SSDEEP 3072:SLkFJu59WjUfFwgJEvCSYuw1flpY9mNoWPwx:fFJu5EjUfFxqvCj76YOWPw
TLSH
T101E3F756A292F4D9E767CC34CAA26F33E4F0781642206E29539CD73C2A6FFA1161D713
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

node.napi.node

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\prebuilds\win32-x64\node.napi.node
Size 796KB
SHA256 c738ba03c84330556184b07d4f9a94bb875807834f46c0b49ea42c8e45df714f
MD5 218fc90e5725a6a7ddfdd1edb760c12a
SHA1 2fd9c618e6105a81c1f812d55f405a947b61fe3b
SHA512 7d6d0cef3b33a092d9a8f37e2fa2f3ec44b843f4bc0d3415d832f3c183318cdfa3d05590d94c552a1ef322de2d67bcb24864c65f4fe43293891755b94bd8062a
SSDEEP 12288:7vWhpNRexpxqf8qFl9CfrumyKlAsppNDInGPpbn+JY2ef5HDek7hEDi:LKRexefIek7hE
TLSH
T16F057D662BA812A1D4B7D13DC9978F56EAB1F8144730A7CB01D0459D2F13BF89A3F722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

filter-array.cpp

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\filter-array.cpp
Size 1KB
SHA256 0cbca5a1c726cbb06e9f466727cdd2eeabf33588f9b54138eaf14f5e8eb1f988
MD5 8e23561dd14a502f4aeb34b7849b65c8
SHA1 53948762c109504e00f33397d0e321bcfa0a3ffc
SHA512 0b736a09d67058239401637c70777dbd9848465fc8396e8dc5797bea37080c23f301b06dd135fc5a9c6f41a5f673fba267f6da37ea8ca7525cdef4dcf560cc2b
TLSH
T19F31560A6867068530F301DD7E6B0848CA34D1076176D9B337CC4BC06F59254C75FB9E
MD5 SHA1 SHA512 TLSH

Submit Download

index-parser.cpp

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\index-parser.cpp
Size 15KB
SHA256 9fe709a77ab9073a903922a88f242f997985fb62e997e1c876685a67beac54cd
MD5 62f707e008a9e9656f6930705405501c
SHA1 e6cef294446b49cc31a0c60f3e7b50c2cea1e512
SHA512 b7333cc3ec85fe2245c18ef3f12d62daee5d28a7adfba5287718cafa5d14420db4cd6bde2c1a6fe5d5ff7b7274a36919771269192cda2913bb174f71cffc347d
SSDEEP 384:P1xt2a2ZRg2dAfWV+xPd4jcHZ5xoXk7nImQdjgcr1:eRFy5xY4nImQdjgQ1
TLSH
T1656276761E6E851B3D20312D190E4DA1B2FE5023B6D9CD01B959433C7AE603CD36FEAA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index-parser.h

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\index-parser.h
Size 7KB
SHA256 e3f9760df002dcf558888484cd4eea67b4812b9ea46411d4574e1f1270d7feeb
MD5 63d0a3834053264a1c4931f95d6d9593
SHA1 e5cacdabb9affb24978f355be2fe44d066f4d79a
SHA512 d21af5f4a91683761928b9a72534ccd151fe784cca10b1f962564eeda727186ee503c2d33b5baa351193d6eb715a639fcbd581a464d21644e9742dbb78f8f80d
SSDEEP 96:8ztgSX/OsO+Hlm+P1gwVR7DTZ4ZShMCtw619RM44o1YhUpSHre:6m+/dO+Fmy1g8PiSNw6//1OUpSHi
TLSH
T14EE1A6CABD991723002671BAABDC7994227E546C63B08885344EC038BF954B4D37FFE0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

liblzma-functions.cpp

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\liblzma-functions.cpp
Size 2KB
SHA256 0061d0cf1cafa5664e456d28156b26b864eb3db973e4d7d66c8e6a00951a5820
MD5 8149efe3570be84844b13d6e75fc7730
SHA1 d690d65617e9b306ea834ed4f474f1842961290d
SHA512 6501ad70ad90f3856e8fec7af9093204b3918a50b06beac740dc7117221fcd76bdddab36e5be389e1291cdbcbbde619b2ef2c14cc7942dde1c12da3abadfb494
TLSH
T12C41980148F6691A7971E0963AC3D874BD6CB42F351CEA44867E4F28EBE31A4E3A3146
MD5 SHA1 SHA512 TLSH

Submit Download

liblzma-node.hpp

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\liblzma-node.hpp
Size 7KB
SHA256 083be435288cabebb7e7d2663e06396327b5d9c58bc0a48ffa1e849aa4bc3998
MD5 072370882082895f5139689e86f49c00
SHA1 4d089c24f57f1db3968feb1bb58a9c25a8e04028
SHA512 8816ee2612b750b9319818c9fdc34090ca09580573280c89e52d5c2d3c6ec948ccd875cd8e7923ddd43736d65bb2e28d59bbb81c95f5b9cc5b1a0b229cead0dd
SSDEEP 192:f1v85n9D5d7uJv34EQ/cJTJpi2vSXdJZxa+iHY50JYqWPw3rne02a9hNf:f985n9D5d7uJv34L0Xpi8SB0CqWSNnR
TLSH
T18AE162029DF609A32D3341E7AF879181DC69A15F3644CD80B6BD8B946FD32E9E32F204
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lzma-stream.cpp

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\lzma-stream.cpp
Size 10KB
SHA256 62a94542647f30332b4c9d4b26092980a46e056b15037c68a6ad2463beb378d8
MD5 21991cda30fe580c6565f24c466bd655
SHA1 c9f9d17cc6416785fa1ea269348e8c7d0192430f
SHA512 e627939079bf4b84c3e9c88c28c8bcc8367aa192b1eca8197e5e4483fe7ab361b019084989997aaf76f61c4b7f38fe6d49e51c79ced22efd510a9ba628c6c58e
SSDEEP 192:zvAWIjWIubZTQD7kJ5QXkSN5mQv5dWe+elsxyBqqiNVaH3VAQRXq0i452ywD/eY9:zvHzkQhxp2uQRXqOEyFS2vOAL0mRLRkr
TLSH
T18632861188F6182B3536B07D4FC7D159265A2033B50ECF423A4EC7646FAE1A4F3BC29A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

module.cpp

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\module.cpp
Size 5KB
SHA256 952f0fe5f1e6421a91f5cfc5f1556d8f88af6072676bed71691c2d1dfe8bbd33
MD5 4c0b5026d5ad68ffa3066a750d2a15df
SHA1 2729919652da9287b9e953e87d1c199a43974dad
SHA512 a59faa2709968cdd45a6fd90da6895a131ca2b12fcf5f773c04d0036b12e52384dd0c018fab8859f3479ed3ad124d07d0a8eef24118ae87b1ba0c2a87b731e52
SSDEEP 96:u9d8sn3I0rRXcul+EMU5tbmLxvYvqaogPkzh4qxbiBYWtSpIQz:u9d8snVXE
TLSH
T117B11D1358781BE426F3206E338F95CF5691154FA6B1A91C42A32F51FF8BB2C6D972C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mt-options.cpp

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\mt-options.cpp
Size 793B
SHA256 955fef2460387cab4f96a45bc03a110bf82e062d1b6f62c524cd037a9835857c
MD5 d0db0166396a8028ec415f5bb0a38414
SHA1 a535ce118a7beca7f82f4eb6d5ede65bc6229a08
SHA512 019da332d4eeb394e6dfa7a19f584af7b7a086b5c5cf9c7f3f20b530e578cbe1b6947d0165b12ea7fbfa7438ea14f2ebac64e73e53355ee81b65b13c0cc590e7
TLSH
T154016D2C04FEA4D3B03228D4AF83002C156EAC866394D547E7FDA5E47F97AB8F64A416
MD5 SHA1 SHA512 TLSH

Submit Download

util.cpp

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\app.asar.unpacked\node_modules\lzma-native\src\util.cpp
Size 4KB
SHA256 88a6913de83d47fb45ae173d7b61c2545d65cf19707ceaedbc0385bb1ea0301e
MD5 0ddbb6832b2a2e881f9ab537b158c1ba
SHA1 760cac4a71bc91b3217d71148acfc6864140a79a
SHA512 fd617cbb7e5b7d511eb7836e6b3a4a505ed61c0e80441788f4b3aeb3e00447b0d655737571821050e3a1329758bb785855c2ca19e98b5c0e4fc15d3615314624
SSDEEP 96:SNriVvMvWgvjTWETdZPsHVOfOWfA1YcZEF2sNpm19gdO9gdfge:xGTWgZuVOG6AJZEF2sm19gdO9gdfB
TLSH
T1AC915010B9730D602AE2447E328B6E86F0A8759216B49F5473CC06ACBFAD96DC6B64C5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

elevate.exe

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\resources\elevate.exe
Size 105KB
SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
MD5 792b92c8ad13c46f27c7ced0810694df
SHA1 d8d449b92de20a57df722df46435ba4553ecc802
SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
TLSH
T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\snapshot_blob.bin
Size 333KB
SHA256 ed719d078977be84118c45420df70a0cc46dd32ae326559c9e6d9a909aeda099
MD5 bdf62e77c29398d4f5e12b3f439ce820
SHA1 7afc4f7c4fca20f9be86f90be9d536d34f295f68
SHA512 c4f0c977cec39c297a32c20da620133c9a01a6de6a83bd3ae79fc9699e568f6010e6c6d6e223a2a4a94577e3ffc3985823430a3f5fb3fb1bb61d3e013a8ae520
SSDEEP 3072:4OiXKGWOt+xbRt2FIR8SKvbmTCW/8pts3IyihOgsMvkdAhm6tfsa:45XLt+Hlzx/8v7LLvBkisa
TLSH
T16374CE05F74ACB26C98A3A745DF983882E2071CD9D49B34B3549737E78BA2740D3A72D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\v8_context_snapshot.bin
Size 698KB
SHA256 c321440b5b893fabf4cb983c46c325e6b1959536b7c98a3f1f0200df8ad61a33
MD5 6e8d12753ebc5b5936175f4e27161596
SHA1 ae99854477eadd9bb153f1d7475eb50b28c465b9
SHA512 7ba52fa8ebbc8f3067d7218d5bab657d93b18d5c6e7324e82b97ac77ec47db376685b047a4d73109888946316f369fee3190936a3c27fefe5cc625c696847f34
SSDEEP 6144:V/V4XptgO5XKt+Hlzx/8v7Lx2NyuClVlxykismIdukcLKYNcPK:V8D5XlEvXx2NySkQIId/H
TLSH
T1ECE4A761FB0A8F3AC5453BBD8DE657463A30B18E9E87E24B7405633D78B96B04C3652C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\vk_swiftshader.dll
Size 5.4MB
SHA256 d50b5ed41356b540e1f1d3525837effd4045220cb4efbfc2b913fd7d7edd0999
MD5 3007dd886e26b72242062241cbc44433
SHA1 f6983d1db8933923b3b175cd074881d6ac395190
SHA512 2e1c0594cdf42c72b8e411b528dd6b2614df035670703598a438ef4960022c738f15a08dbca8c5f5d1dfcda54e078d0d47c554e785fdc8e269bfe3e827df1a3f
SSDEEP 49152:4+et2UcrN42sf0vTrWny2/Gh9qIHGZpVZSbiP1VFz2ZtIgrduZsgP/m9vqjfc2c7:4Jt2vI4gmlml3pCIn
TLSH
T1DE463803F28681E9C06DE5798B5FA623F631F8840B2276DF56A00F192E66FE0673D715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\7z-out\vulkan-1.dll
Size 932KB
SHA256 35b0d20574fd7f4c8b959e4789cd75950a37cc6106119f89210d086e7f15b47e
MD5 ea97e3c4fcfa72d6cbea16f651d52464
SHA1 553589c7cabba29adbd3d4ac38c71d52427c2d6f
SHA512 e5e091b20169b60b3a2a7f5fbc250e181788e9a87b17640691756bab70a817a55c2c028455c84099ac4202d24e9acf98e7da113db6d8b91f0f35d554274733c5
SSDEEP 24576:UNpbzkO5J/Yv3kG4nolXqOZ6dSn6Z5WGc9DYsHQDb6g3P0zAk79oOHiYOjF:kpbwOvgv3kRUX1Z6dSn6Z5WGc9DYsHQ1
TLSH
T1F0158E12DA544AA9D67AC074D9D28A0789B074821322B8DF12F817147F6FFF47B3DB26
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UAC.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\UAC.dll
Size 14KB
SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
MD5 adb29e6b186daa765dc750128649b63d
SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
TLSH
T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WinShell.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\WinShell.dll
Size 3KB
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
TLSH
T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
MD5 SHA1 SHA512 TLSH

Submit Download

nsDialogs.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\nsDialogs.dll
Size 9KB
SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
TLSH
T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\nsExec.dll
Size 6KB
SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
MD5 ec0504e6b8a11d5aad43b296beeb84b2
SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
TLSH
T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nseBFBD.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

Preferences

Path C:\Users\Admin\AppData\Roaming\NewLauncher\Preferences
Size 93B
SHA256 529b6595a4727a6b2d6cc154ae51f426216c01fc7fda02de2460abfb3de118a4
MD5 322f01bb491180333c338526d93f115a
SHA1 554d5e43d5e46774b8f2a6b3682243a289927754
SHA512 69f8e980f44b1465cee8c0485598fa00be163db0fe88598e45ab2f817f9bea36a2b70dbb9d25d5214174ea9c198b9641bb3d5a86c18b1a4ea4493c00e2e95eb2
TLSH
T103B01253B810A0324B1B09E5000BC94F2CBE00340E475A0510D4F39D492DD4D088702B
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\NewLauncher\Session Storage\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

memory/2368-830-0x0000000063CC0000-0x0000000063CEC000-memory.dmp

Download

memory/2848-51-0x0000000007940000-0x000000000794A000-memory.dmp

Download

memory/2848-53-0x0000000007B20000-0x0000000007B44000-memory.dmp

Download

memory/2848-28-0x0000000003050000-0x0000000003086000-memory.dmp

Download

memory/2848-29-0x0000000072D20000-0x00000000734DC000-memory.dmp

Download

memory/2848-30-0x00000000058C0000-0x0000000005F0A000-memory.dmp

Download

memory/2848-31-0x0000000072D20000-0x00000000734DC000-memory.dmp

Download

memory/2848-32-0x0000000005860000-0x0000000005882000-memory.dmp

Download

memory/2848-34-0x0000000005FF0000-0x0000000006056000-memory.dmp

Download

memory/2848-33-0x0000000005F80000-0x0000000005FE6000-memory.dmp

Download

memory/2848-37-0x0000000006060000-0x00000000063BB000-memory.dmp

Download

memory/2848-38-0x0000000006540000-0x000000000655E000-memory.dmp

Download

memory/2848-39-0x0000000006580000-0x00000000065CC000-memory.dmp

Download

memory/2848-40-0x0000000006B20000-0x0000000006B56000-memory.dmp

Download

memory/2848-41-0x000000006F6E0000-0x000000006F72C000-memory.dmp

Download

memory/2848-44-0x0000000007520000-0x0000000007540000-memory.dmp

Download

memory/2848-45-0x0000000072D20000-0x00000000734DC000-memory.dmp

Download

memory/2848-46-0x0000000007800000-0x00000000078A3000-memory.dmp

Download

memory/2848-47-0x0000000072D20000-0x00000000734DC000-memory.dmp

Download

memory/2848-50-0x0000000072D20000-0x00000000734DC000-memory.dmp

Download

memory/2848-49-0x00000000078B0000-0x00000000078CA000-memory.dmp

Download

memory/2848-48-0x0000000007F30000-0x00000000085AC000-memory.dmp

Download

memory/2848-27-0x0000000072D32000-0x0000000072D33000-memory.dmp

Download

memory/2848-52-0x0000000007AF0000-0x0000000007B1A000-memory.dmp

Download

memory/2848-54-0x000000006F8C0000-0x000000006FC1B000-memory.dmp

Download

memory/2848-56-0x0000000072D20000-0x00000000734DC000-memory.dmp

Download

memory/3588-61-0x0000000072D20000-0x00000000734DC000-memory.dmp

Download

memory/3588-62-0x0000000072D20000-0x00000000734DC000-memory.dmp

Download

memory/3588-63-0x0000000072D20000-0x00000000734DC000-memory.dmp

Download

memory/3588-66-0x00000000059E0000-0x0000000005D3B000-memory.dmp

Download

memory/3588-68-0x000000006F6E0000-0x000000006F72C000-memory.dmp

Download

memory/3588-71-0x0000000007580000-0x0000000007616000-memory.dmp

Download

memory/3588-72-0x0000000007510000-0x0000000007521000-memory.dmp

Download

memory/3588-74-0x0000000072D20000-0x00000000734DC000-memory.dmp

Download

memory/4832-82-0x000000006F6E0000-0x000000006F72C000-memory.dmp

Download

memory/4832-85-0x000000006F8F0000-0x000000006FC4B000-memory.dmp

Download

memory/6012-875-0x000001BEAE3A0000-0x000001BEAE3A1000-memory.dmp

Download

memory/6012-873-0x000001BEAE3A0000-0x000001BEAE3A1000-memory.dmp

Download

memory/6012-881-0x000001BEAE3A0000-0x000001BEAE3A1000-memory.dmp

Download

memory/6012-884-0x000001BEAE3A0000-0x000001BEAE3A1000-memory.dmp

Download

memory/6012-883-0x000001BEAE3A0000-0x000001BEAE3A1000-memory.dmp

Download

memory/6012-882-0x000001BEAE3A0000-0x000001BEAE3A1000-memory.dmp

Download

memory/6012-880-0x000001BEAE3A0000-0x000001BEAE3A1000-memory.dmp

Download

memory/6012-879-0x000001BEAE3A0000-0x000001BEAE3A1000-memory.dmp

Download