Analysis

  • user interaction
    yes
  • max time kernel
    34s
  • max time network
    50s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    20/08/2026, 16:49

General

  • Target
    CSR Launcher Setup 1.0.1.exe
  • Size 99.8MB
  • Sample260820-vbprksvsgz
  • SHA256 c1b93a36530396c8bfb7f57b4c87b676bcde4f8f73736a4e256006f0856a4060
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 11 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\CSR Launcher Setup 1.0.1.exe
    "C:\Users\Admin\AppData\Local\Temp\CSR Launcher Setup 1.0.1.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4500
  • C:\Program Files\CSR Launcher\CSR Launcher.exe
    "C:\Program Files\CSR Launcher\CSR Launcher.exe"
    1⤵
    • Executes dropped EXE
    PID:4544
    • C:\Program Files\CSR Launcher\CSR Launcher.exe
      "C:\Program Files\CSR Launcher\CSR Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\csr-launcher" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1984,i,12695902557050824931,7991985006703480724,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1988,i,11659049253406364599,8179441799178620456,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1980 /prefetch:2
      2⤵
        PID:3736
      • C:\Program Files\CSR Launcher\CSR Launcher.exe
        "C:\Program Files\CSR Launcher\CSR Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\csr-launcher" --field-trial-handle=1984,i,12695902557050824931,7991985006703480724,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1988,i,11659049253406364599,8179441799178620456,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2180 /prefetch:11
        2⤵
          PID:1720
        • C:\Program Files\CSR Launcher\CSR Launcher.exe
          "C:\Program Files\CSR Launcher\CSR Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\csr-launcher" --app-path="C:\Program Files\CSR Launcher\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1984,i,12695902557050824931,7991985006703480724,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1988,i,11659049253406364599,8179441799178620456,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2536 /prefetch:1
          2⤵
            PID:1100

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              dxcompiler.dll

              • Path C:\Program Files\CSR Launcher\dxcompiler.dll
              • Size 12.4MB
              • SHA256 aadd8905142183b8ac768ffe0e8dbf9911ea281579b633df35ef937a3c7caf4f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              LICENSE.electron.txt

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\LICENSE.electron.txt
              • Size 1KB
              • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
              • MD5 SHA1 SHA512 TLSH

              LICENSES.chromium.html

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\LICENSES.chromium.html
              • Size 19.4MB
              • SHA256 e3c8a6093358521d4512d68945e16338755e687619196e63948d46c9267537b6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              chrome_100_percent.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\chrome_100_percent.pak
              • Size 117KB
              • SHA256 15a5bcb49a5c02d6a4e736e8dfa11dabb0bac0589641a4e25f0c06472ccaae6d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              chrome_200_percent.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\chrome_200_percent.pak
              • Size 192KB
              • SHA256 b7acfb068fa681f4ecb8f782bd4e3926590076c61fd0de3de4a12dde227cf52b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              d3dcompiler_47.dll

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\d3dcompiler_47.dll
              • Size 4.5MB
              • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dxcompiler.dll

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\dxcompiler.dll
              • Size 24.4MB
              • SHA256 5be4721b8153a392428759f160fd282f28c6f1d81c541ba8db78cef04a04315b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              dxil.dll

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\dxil.dll
              • Size 1.4MB
              • SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ffmpeg.dll

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\ffmpeg.dll
              • Size 2.9MB
              • SHA256 fa5256dfdf155074121921c28e1e3a4dddfa25bfce837b117a1b95b3f3c33b91
              • MD5 SHA1 SHA512 SSDEEP TLSH

              gamestate_integration_csr_rpc.cfg

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\gamestate_integration_csr_rpc.cfg
              • Size 642B
              • SHA256 c86ae415381504e17f1707e3b60d444f94273778cf2fea76be4b58d4d9dc4d39
              • MD5 SHA1 SHA512 TLSH

              icudtl.dat

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\icudtl.dat
              • Size 10.4MB
              • SHA256 bd8c145abdf3f8383276ce01dfa4ae48709bef9fef1c0711eb7c3fab4f6eb7c2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              libEGL.dll

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\libEGL.dll
              • Size 467KB
              • SHA256 95a80c09f9901d7a0389f9da16861c9b8b133f25a4bb9c986c5c3090b65622e6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              libGLESv2.dll

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\libGLESv2.dll
              • Size 7.6MB
              • SHA256 bdd409acd8ba96317f030cc2be592bd19694e30000a231bff712d3aeb046be09
              • MD5 SHA1 SHA512 SSDEEP TLSH

              af.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\af.pak
              • Size 605KB
              • SHA256 d990f4ced39e31a1149d2a1842ce2504706885e6ab05957ee2f338c77d94c16b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              am.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\am.pak
              • Size 983KB
              • SHA256 8d3d5dfc64acfbb0c35036d74561d09ddf3b22058eeed0f8d26a2e9c0703248e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ar.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\ar.pak
              • Size 1.1MB
              • SHA256 295b944f5e032235abd83e7ed5a65ded77e37a0d7911935448a13753fbde0863
              • MD5 SHA1 SHA512 SSDEEP TLSH

              bg.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\bg.pak
              • Size 1.1MB
              • SHA256 2789212aac5f2133ed23c1f84623bc64eb4cfbd93aef7af751d1221e27a21daa
              • MD5 SHA1 SHA512 SSDEEP TLSH

              bn.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\bn.pak
              • Size 1.4MB
              • SHA256 e72b72977b40fb10472fe1a3fcffcda8b434bf52e2bb2da2935faa80da224812
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ca.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\ca.pak
              • Size 683KB
              • SHA256 49eda8c16449dbe7620f52c3354f6a5f0d14c98e9ffe4624b81465c141420172
              • MD5 SHA1 SHA512 SSDEEP TLSH

              cs.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\cs.pak
              • Size 709KB
              • SHA256 8386f70e830a565d0674014ae4ad385a61eb43d7e7b99d4d373d14388dfd32ce
              • MD5 SHA1 SHA512 SSDEEP TLSH

              da.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\da.pak
              • Size 637KB
              • SHA256 ff687bb6dc79bb638bca4f6a9226544a783209645922d323cf777b169690b25a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              de.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\de.pak
              • Size 684KB
              • SHA256 941c4d0ac3de30cdb5922e4bf1423354eca1148aacd3dd71499af3bba1fcea8f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              el.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\el.pak
              • Size 1.2MB
              • SHA256 3ee2e46a5a569e411ccf9d77ee4f356e1833bfccbaefcc5e71b7c1517206ab5f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              en-GB.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\en-GB.pak
              • Size 552KB
              • SHA256 aac3b4904d021d58d053bdea2d8056a219ecda1e341d87cb70070aea2cee418f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              en-US.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\en-US.pak
              • Size 558KB
              • SHA256 bce3ec06227dba2273c4ff12482cba37b709cc8bf5fd29c4380f9a07b92bf821
              • MD5 SHA1 SHA512 SSDEEP TLSH

              es-419.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\es-419.pak
              • Size 674KB
              • SHA256 a0b3cf210b1d1523a76dfee93372743bc1f881be733872d0d48e1b5c82d52fea
              • MD5 SHA1 SHA512 SSDEEP TLSH

              es.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\es.pak
              • Size 670KB
              • SHA256 940fb4b4b54dba60441fd52bdf3175e088c72fef7003a82988be25062a5266d6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              et.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\et.pak
              • Size 612KB
              • SHA256 ecc838878412cc9f28dda9efed2fc60b67315f5fdf64e912db33cee7571a5939
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fa.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\fa.pak
              • Size 1013KB
              • SHA256 5fa7790100ab1e84a0c9b45612943cca98783fb3973cb07a4c083037e0cfe9dd
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fi.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\fi.pak
              • Size 623KB
              • SHA256 18d904efd7d15a49ef3638c45a40b3aa604e5ec4b68e017ab3f568e6a8202fd4
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fil.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\fil.pak
              • Size 706KB
              • SHA256 4034bd7ef11f48d7d646aacb7006562f0f9caec888785a13c36e31b9724dd798
              • MD5 SHA1 SHA512 SSDEEP TLSH

              fr.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\fr.pak
              • Size 728KB
              • SHA256 3f67ef11ecc42bfc8a8f6d1cccc3bb505c028256801e26fd3f784dc0998a3762
              • MD5 SHA1 SHA512 SSDEEP TLSH

              gu.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\gu.pak
              • Size 1.4MB
              • SHA256 b207f2046791aa8150015ca78f9f76f2f6509953a00c5e89b155bb40e3a26474
              • MD5 SHA1 SHA512 SSDEEP TLSH

              he.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\he.pak
              • Size 887KB
              • SHA256 a8bcc73c8195b7f77ab4c4746bdc1f7970fb4431ab9a5b6495d1869521ec1312
              • MD5 SHA1 SHA512 SSDEEP TLSH

              hi.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\hi.pak
              • Size 1.5MB
              • SHA256 6e58e12bfc69547d03d61f23445bc996e1b09ed5e8599b00f553bf8d022a08b5
              • MD5 SHA1 SHA512 SSDEEP TLSH

              hr.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\hr.pak
              • Size 682KB
              • SHA256 6990ba056fcd1cac97ed5b48024be4ab366846a9c517d43a181cbb0eefa095d1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              hu.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\hu.pak
              • Size 729KB
              • SHA256 b83fc60c6d3ce3a04338ea16ba4627d6dfdf81f4373fe4921ac01c7c9558bcb6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              id.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\id.pak
              • Size 603KB
              • SHA256 a6ccb8c77ecd0db5c9d8d3b809937e627fffb136737ffeba65a9c09e6469a243
              • MD5 SHA1 SHA512 SSDEEP TLSH

              it.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\it.pak
              • Size 660KB
              • SHA256 666f811313f9bfd0f582816ff5c9fd693da6a3b4ec0e1d6af7cbbc100d8d7bd6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ja.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\ja.pak
              • Size 804KB
              • SHA256 babf93791e59b57c7b21e850e1bba68b07dedb2a7c5cb8afdbd1a1814527deea
              • MD5 SHA1 SHA512 SSDEEP TLSH

              kn.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\kn.pak
              • Size 1.6MB
              • SHA256 88af1f1770525fc5fa3a8f3e0f1ecb5fa5d68045795043d3bf3745059c86b962
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ko.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\ko.pak
              • Size 684KB
              • SHA256 37f167bdf1c7f0095e256dfdf1d5f40a92e29a350bc78a8fe048f364d5fdbd76
              • MD5 SHA1 SHA512 SSDEEP TLSH

              lt.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\lt.pak
              • Size 742KB
              • SHA256 0c755ce72d1b71e77d58ab014228458d8ce2b0c51a9b00769635c6609255c9f2
              • MD5 SHA1 SHA512 SSDEEP TLSH

              lv.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\lv.pak
              • Size 739KB
              • SHA256 911f922f6ab11d04c4913b04088619276994104979b2c5f132182953fabc24a9
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ml.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\ml.pak
              • Size 1.6MB
              • SHA256 8beb5df27b5a1b88d0f441518a807b2c6acd99a81820cd0249710ea12bc179d0
              • MD5 SHA1 SHA512 SSDEEP TLSH

              mr.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\mr.pak
              • Size 1.4MB
              • SHA256 1971da05e4868841c9d9f78be5e17ab09178af99b86a6c07df385015a0c9d9ef
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ms.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\ms.pak
              • Size 636KB
              • SHA256 b60c552a9ced5d0e1f4ed408f65a04068acad7d80db7cf88528fbebbcd337e23
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nb.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\nb.pak
              • Size 608KB
              • SHA256 cb50908b03c77263297e63ff75d4d3c58fb0cb491c69a8964239e787c762f52d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nl.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\nl.pak
              • Size 634KB
              • SHA256 b6a6cecceeb0097d5fd9628c684d53339f7871948655740e0f625bfedbf526ae
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pl.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\pl.pak
              • Size 708KB
              • SHA256 dee5b710ca72425cd4d1236ce260f8d68b41bfdfceaeb2f98c8e89217b24208f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pt-BR.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\pt-BR.pak
              • Size 664KB
              • SHA256 1b39ea90b1823d9dedb7ee5ad1269d712680b0d6c81ed387a25ce8a48fd9bb59
              • MD5 SHA1 SHA512 SSDEEP TLSH

              pt-PT.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\pt-PT.pak
              • Size 668KB
              • SHA256 266e49a497c6bf9e48502c7eb01aea1fa90260b6fb1609165ff50307a3d81b59
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ro.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\ro.pak
              • Size 693KB
              • SHA256 16b11fb73ea0c5d0336de453d3e2abd2de69b3e6c66dcd72bae318666525bb18
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ru.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\ru.pak
              • Size 1.1MB
              • SHA256 d8e86f2b2fb7232cde6fec3a927678a5923f5844f4e5d87bbe114f5dd717dac6
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sk.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\sk.pak
              • Size 720KB
              • SHA256 8c14d528efad4c75e09ce70719b0b3d1162954b4de4013112e014e2ac6a84d3d
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sl.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\sl.pak
              • Size 690KB
              • SHA256 1550f8df161a3484a6c7af9bc5321fae524e10d6853467afcb8749054a73e601
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sr.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\sr.pak
              • Size 1.0MB
              • SHA256 a76930f2c72e49dc3a2c9be7e7bce0f9da0c93de03b6e275521fa86da0d2d39c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sv.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\sv.pak
              • Size 615KB
              • SHA256 118cbf34d040c8946669f889393364070e88d3f0263f1b66ab4638b1f8f3c291
              • MD5 SHA1 SHA512 SSDEEP TLSH

              sw.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\sw.pak
              • Size 651KB
              • SHA256 f4e0e2f5b49d9d767884074cc3ee8d0dd83a986f7c1d2de236885998d7a53460
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ta.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\ta.pak
              • Size 1.6MB
              • SHA256 2c5f8aaf21c9a035f71d763cfa9a20886892fcde7cf71878168a9df0faa6d417
              • MD5 SHA1 SHA512 SSDEEP TLSH

              te.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\te.pak
              • Size 1.5MB
              • SHA256 e9e85c763b92b5a98e74290c3ff07e7953269ab6228a4cc343745229819d7f8f
              • MD5 SHA1 SHA512 SSDEEP TLSH

              th.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\th.pak
              • Size 1.3MB
              • SHA256 0684a30ec9e0fe9baeeb215840b6c6b4f04e11c9afbcf9d18687af9a685e0927
              • MD5 SHA1 SHA512 SSDEEP TLSH

              tr.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\tr.pak
              • Size 663KB
              • SHA256 7a42e54611e2633c9c999f121abf2ffbda37746237e01ce29dc650510af08b0c
              • MD5 SHA1 SHA512 SSDEEP TLSH

              uk.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\uk.pak
              • Size 1.1MB
              • SHA256 1fafb514e4380b430b19b9031b30249e93aaecd71109b125e5b6d99c2be60b43
              • MD5 SHA1 SHA512 SSDEEP TLSH

              ur.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\ur.pak
              • Size 997KB
              • SHA256 0c1cfa61d9a9be6338b0a160b43ff362a982003053ae5be3b3ec867e78374d7b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              vi.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\vi.pak
              • Size 789KB
              • SHA256 3594ddfb89758a3d87d51bf90e676a5dd6107a6becd96c8840df6739cf268af1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              zh-CN.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\zh-CN.pak
              • Size 564KB
              • SHA256 2fcc82972ec5b9b3d1c7adbe7f5ccebbcec8f592383fd835c134a03e82bf8a24
              • MD5 SHA1 SHA512 SSDEEP TLSH

              zh-TW.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\locales\zh-TW.pak
              • Size 556KB
              • SHA256 8e831ed21bd21ce3610dc4b658aa337229c83dd6d7cef336923d69779d0365b1
              • MD5 SHA1 SHA512 SSDEEP TLSH

              resources.pak

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\resources.pak
              • Size 6.6MB
              • SHA256 51231c347431cacf879e667eab84b6ee7cdabd6560c35406ed231aa3eea86288
              • MD5 SHA1 SHA512 SSDEEP TLSH

              app.asar

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\resources\app.asar
              • Size 2.7MB
              • SHA256 ce557021ab354d3bba6b651c6e34d113a639b5182c6f56a113e030b0f7504244
              • MD5 SHA1 SHA512 SSDEEP TLSH

              elevate.exe

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\resources\elevate.exe
              • Size 105KB
              • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
              • MD5 SHA1 SHA512 SSDEEP TLSH

              snapshot_blob.bin

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\snapshot_blob.bin
              • Size 338KB
              • SHA256 fac8fa3a800a56892d18f6ddd9ec769ebfb95093faac0dead7a1b0bf0148b68b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              v8_context_snapshot.bin

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\v8_context_snapshot.bin
              • Size 704KB
              • SHA256 bc75f706ce64e25785b54f468caaed24c9a47d4997ce040fde3567007bdc566b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              vk_swiftshader.dll

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\vk_swiftshader.dll
              • Size 5.3MB
              • SHA256 b9605f10cd7da15812f5bd42b33afc79c30b49face83b265a9d340eb58b81c2a
              • MD5 SHA1 SHA512 SSDEEP TLSH

              vk_swiftshader_icd.json

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\vk_swiftshader_icd.json
              • Size 106B
              • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
              • MD5 SHA1 SHA512 TLSH

              vulkan-1.dll

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\7z-out\vulkan-1.dll
              • Size 904KB
              • SHA256 502d871769ce2c51fd619e46a4c14d4598b468b71b84d93ab978b6415fad9f8b
              • MD5 SHA1 SHA512 SSDEEP TLSH

              StdUtils.dll

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\StdUtils.dll
              • Size 100KB
              • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
              • MD5 SHA1 SHA512 SSDEEP TLSH

              System.dll

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\System.dll
              • Size 12KB
              • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
              • MD5 SHA1 SHA512 SSDEEP TLSH

              UAC.dll

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\UAC.dll
              • Size 14KB
              • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
              • MD5 SHA1 SHA512 SSDEEP TLSH

              WinShell.dll

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\WinShell.dll
              • Size 3KB
              • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
              • MD5 SHA1 SHA512 TLSH

              nsDialogs.dll

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\nsDialogs.dll
              • Size 9KB
              • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nsProcess.dll

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\nsProcess.dll
              • Size 4KB
              • SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
              • MD5 SHA1 SHA512 SSDEEP TLSH

              nsis7z.dll

              • Path C:\Users\Admin\AppData\Local\Temp\nst65B6.tmp\nsis7z.dll
              • Size 424KB
              • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
              • MD5 SHA1 SHA512 SSDEEP TLSH

              default.exc

              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
              • Size 2B
              • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
              • MD5 SHA1 SHA512

              memory/1100-485-0x00007FFE81390000-0x00007FFE81391000-memory.dmp

              memory/1100-484-0x00007FFE810F0000-0x00007FFE810F1000-memory.dmp