Analysis

  • user interaction
    yes
  • max time kernel
    150s
  • max time network
    145s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/08/2026, 21:21

General

  • Target
    SKlauncher-4.0.29-web-setup.exe
  • Size 838KB
  • Sample260830-z7aprazfpf
  • SHA256 62b2d500c04740285f9723071aa3dafc762246ba64205c98a10012748861a14b
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 11 IoCs
  • Loads dropped DLL 42 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 6 IoCs

    Using powershell.exe command.

  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 3 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 12 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Checks processor information in registry 2 TTPs 48 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 26 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 7 IoCs
  • Suspicious use of SendNotifyMessage 7 IoCs
  • Suspicious use of WriteProcessMemory 21 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\SKlauncher-4.0.29-web-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\SKlauncher-4.0.29-web-setup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4884
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
      2⤵
      • Hide Artifacts: Ignore Process Interrupts
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:1744
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:4988
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\sklauncher', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3876
  • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
    "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe"
    1⤵
    • Executes dropped EXE
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:1608
    • C:\Windows\system32\reg.exe
      reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v InstallationType
      2⤵
        PID:5888
      • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
        "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot --secure-schemes=starship-screenshot --bypasscsp-schemes=starship-screenshot --fetch-schemes=starship-screenshot --streaming-schemes=starship-screenshot --field-trial-handle=1892,i,3568611208769532244,4187637305751217196,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1908,i,1174853580564232842,9245838990957954789,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1936 /prefetch:11
        2⤵
        • Executes dropped EXE
        PID:3880
      • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
        "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1892,i,3568611208769532244,4187637305751217196,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1908,i,1174853580564232842,9245838990957954789,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1888 /prefetch:2
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1664
      • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
        "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot --secure-schemes=starship-screenshot --bypasscsp-schemes=starship-screenshot --fetch-schemes=starship-screenshot --streaming-schemes=starship-screenshot --app-user-model-id=pl.skmedix.sklauncher --app-path="C:\Users\Admin\AppData\Local\Programs\sklauncher\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1788124328786559 --launch-time-ticks=623477466 --field-trial-handle=1892,i,3568611208769532244,4187637305751217196,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1908,i,1174853580564232842,9245838990957954789,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2584 /prefetch:1
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1916
      • C:\Users\Admin\AppData\Local\sklauncher-updater\pending\SKlauncher-4.0.46-setup.exe
        C:\Users\Admin\AppData\Local\sklauncher-updater\pending\SKlauncher-4.0.46-setup.exe --updated --force-run
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:4940
        • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
          "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
          3⤵
          • Hide Artifacts: Ignore Process Interrupts
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          PID:3144
        • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
          "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
          3⤵
          • Command and Scripting Interpreter: PowerShell
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          PID:1100
        • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
          "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\sklauncher', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
          3⤵
          • Command and Scripting Interpreter: PowerShell
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          PID:5524
        • C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\old-uninstaller.exe
          "C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\old-uninstaller.exe" /S /KEEP_APP_DATA /currentuser --keep-shortcuts --updated _?=C:\Users\Admin\AppData\Local\Programs\sklauncher
          3⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of WriteProcessMemory
          PID:5304
          • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
            "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
            4⤵
            • Hide Artifacts: Ignore Process Interrupts
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:5516
          • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
            "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
            4⤵
            • Command and Scripting Interpreter: PowerShell
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:4544
          • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
            "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\sklauncher', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
            4⤵
            • Command and Scripting Interpreter: PowerShell
            • System Location Discovery: System Language Discovery
            • Suspicious behavior: EnumeratesProcesses
            PID:4684
    • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
      "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --updated
      1⤵
      • Executes dropped EXE
      • Checks processor information in registry
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:768
      • C:\Windows\system32\reg.exe
        reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v InstallationType
        2⤵
          PID:936
        • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
          "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1740,i,5230604327969277167,8779479035754535276,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1744,i,7029641158607334047,9569674201477759481,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1736 /prefetch:2
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3092
        • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
          "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot --secure-schemes=starship-screenshot --bypasscsp-schemes=starship-screenshot --fetch-schemes=starship-screenshot --streaming-schemes=starship-screenshot --field-trial-handle=1740,i,5230604327969277167,8779479035754535276,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1744,i,7029641158607334047,9569674201477759481,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1808 /prefetch:11
          2⤵
          • Executes dropped EXE
          PID:2576
        • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
          "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot --secure-schemes=starship-screenshot --bypasscsp-schemes=starship-screenshot --fetch-schemes=starship-screenshot --streaming-schemes=starship-screenshot --app-user-model-id=pl.skmedix.sklauncher --app-path="C:\Users\Admin\AppData\Local\Programs\sklauncher\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1740,i,5230604327969277167,8779479035754535276,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1744,i,7029641158607334047,9569674201477759481,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2724 /prefetch:1
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1824
        • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
          "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=0 --gpu-device-id=0 --gpu-sub-system-id=0 --gpu-revision=0 --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAQgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1740,i,5230604327969277167,8779479035754535276,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1744,i,7029641158607334047,9569674201477759481,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=2896 /prefetch:10
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:804

      Network

            MITRE ATT&CK Enterprise v16

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            StartupProfileData-NonInteractive

            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
            • Size 17KB
            • SHA256 e0823eeb521207d14a50436d99cb9b03152a97292a1ea83fe2f3bf29ab8f3df1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            StartupProfileData-NonInteractive

            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
            • Size 16KB
            • SHA256 fb572173b77067e59c61d26c79b8155b57a3f680ef61cf5704043b9dbaad57d8
            • MD5 SHA1 SHA512 SSDEEP TLSH

            StartupProfileData-NonInteractive

            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
            • Size 18KB
            • SHA256 bd93e3875f98f70ae4a67da09f5b5d630bd25e849c9e4caa4f7df33673bbbdb7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            StartupProfileData-NonInteractive

            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
            • Size 17KB
            • SHA256 15ad56dd82c3aa58decc7a47bd6388aec50aabff8c73cafab2f3fb8bdee3f541
            • MD5 SHA1 SHA512 SSDEEP TLSH

            StartupProfileData-NonInteractive

            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
            • Size 16KB
            • SHA256 b972bb3f559ed08a51769c9563b7ac72c9aa95e189e3eb855142dbddbee16819
            • MD5 SHA1 SHA512 SSDEEP TLSH

            StartupProfileData-NonInteractive

            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
            • Size 18KB
            • SHA256 47b2eeeab6b18f26eaa8a44f3357602177ef6279fc3c88bf6247e22bbe82a0da
            • MD5 SHA1 SHA512 SSDEEP TLSH

            StartupProfileData-NonInteractive

            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
            • Size 17KB
            • SHA256 f10c5b1273f581450f76263efcf0c9d17a55b62debd5089ad8a24754d366af59
            • MD5 SHA1 SHA512 SSDEEP TLSH

            StartupProfileData-NonInteractive

            • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
            • Size 16KB
            • SHA256 7625b9ddd169732c0b6632e9d9fb49600e68644afdc758b6f857cdbfb75198f3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            Uninstall sklauncher.exe

            • Path C:\Users\Admin\AppData\Local\Programs\sklauncher\Uninstall sklauncher.exe
            • Size 248KB
            • SHA256 2e8fc0d22f29cf1ad7bd9ee207a31afd6fbe6e271254bc6515a00520827e2c5e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            __PSScriptPolicyTest_crxvwii4.hd3.ps1

            • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_crxvwii4.hd3.ps1
            • Size 60B
            • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
            • MD5 SHA1 SHA512 TLSH

            chrome_100_percent.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\chrome_100_percent.pak
            • Size 117KB
            • SHA256 d76fe8fa3a14cd73e4c858746e2ab2d2fa6f2df38a906fa5814b50a8a895fc96
            • MD5 SHA1 SHA512 SSDEEP TLSH

            chrome_200_percent.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\chrome_200_percent.pak
            • Size 192KB
            • SHA256 b74ad439f3d3762657f3ba533a6af3ac63315c838ed46519891366f43d834a0e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            d3dcompiler_47.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\d3dcompiler_47.dll
            • Size 4.5MB
            • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dxcompiler.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\dxcompiler.dll
            • Size 24.4MB
            • SHA256 41004dbf82da5dd2f70c92defe2f0e0fce030daf85c072bd7922917ec90a6c28
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dxil.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\dxil.dll
            • Size 1.4MB
            • SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ffmpeg.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\ffmpeg.dll
            • Size 2.9MB
            • SHA256 d17c2a0ea5683ff02006676845b84ef2afe18b8f75a5fdcce2b364f85c37a34e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icudtl.dat

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\icudtl.dat
            • Size 10.4MB
            • SHA256 bd8c145abdf3f8383276ce01dfa4ae48709bef9fef1c0711eb7c3fab4f6eb7c2
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libEGL.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\libEGL.dll
            • Size 463KB
            • SHA256 7d6f4957a6c4d4cad4d717ebebbc9738acf4bfdf2d4ea1c0403d2c9a0661dc5d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libGLESv2.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\libGLESv2.dll
            • Size 7.7MB
            • SHA256 5d6c94812ca1f6dc414d6166da1ed95e4f072a151c7e16952b0fd9a450192d8b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            af.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\af.pak
            • Size 599KB
            • SHA256 dcf39c3edbb6b0a625baee0263a9b426eadd1a6d1bfbf03a209501a18bc4b0e4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            am.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\am.pak
            • Size 971KB
            • SHA256 b1d444f2346105a6e15f9b14fc5653e1edaa2b435290fb8f1238347a4d4ca8f9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ar.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\ar.pak
            • Size 1.0MB
            • SHA256 36f46452c3becb64e1034a6e69286cb5e91f98593c81511c79176f1cc560e159
            • MD5 SHA1 SHA512 SSDEEP TLSH

            bg.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\bg.pak
            • Size 1.1MB
            • SHA256 e4a5bea23a26a06af611a7cb518b22a1d53ec5df45a6322f0e264b99c7318441
            • MD5 SHA1 SHA512 SSDEEP TLSH

            bn.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\bn.pak
            • Size 1.4MB
            • SHA256 137cf9cdba13ea7286584c5cac05dd34c6394f89036e367aa032ffb34f17dcc9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ca.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\ca.pak
            • Size 676KB
            • SHA256 94b2082cc585cc7f0e18839664683d97b45f9c15d0b027ba789902100fb029aa
            • MD5 SHA1 SHA512 SSDEEP TLSH

            cs.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\cs.pak
            • Size 701KB
            • SHA256 5804ba5b76974b48b15922cf91c3e9dbbf549e2d88218dc767e4650520503135
            • MD5 SHA1 SHA512 SSDEEP TLSH

            da.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\da.pak
            • Size 629KB
            • SHA256 57f4637094de41122da569415c16c5524794bc90aa3af226da14703d04981db0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            de.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\de.pak
            • Size 677KB
            • SHA256 9b3218eebd6e5bfdfcc50436ff0cef02b92fb9454c4bc9f78093408651e325d4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            el.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\el.pak
            • Size 1.2MB
            • SHA256 a687e7166636cc78afb903429c7b62aed48fe4a1e20057d5dd192e7806721d52
            • MD5 SHA1 SHA512 SSDEEP TLSH

            en-GB.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\en-GB.pak
            • Size 546KB
            • SHA256 df40bcaed92ac89c6eb379a4053f9f44cd466f7e51268367f8d72e9508143a88
            • MD5 SHA1 SHA512 SSDEEP TLSH

            en-US.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\en-US.pak
            • Size 552KB
            • SHA256 74404352908184e834397df60b238f23462e77d69ac4136b4f20af2db6191436
            • MD5 SHA1 SHA512 SSDEEP TLSH

            es-419.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\es-419.pak
            • Size 667KB
            • SHA256 55a36991fa1e523fcdbc49e4227d66bb83d28bfdc7d08dcc659837d1beda3281
            • MD5 SHA1 SHA512 SSDEEP TLSH

            es.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\es.pak
            • Size 663KB
            • SHA256 9ff88eabacab95f8bbef9e95f63d3619fa8d640ec03523d80abb26243b059a65
            • MD5 SHA1 SHA512 SSDEEP TLSH

            et.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\et.pak
            • Size 605KB
            • SHA256 0292298736847491828465a3dcf04cf4a0d9bd63d4b1a9d183c7eeb389343d26
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fa.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\fa.pak
            • Size 1002KB
            • SHA256 59a08aad82255e6574e187cf39bfe2523dcbe5cc27421711ccc42c45ad00da4d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fi.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\fi.pak
            • Size 617KB
            • SHA256 0535e2acd4517ce8099aa0a4a3e562af37ca6a699faca1de3b348b8bfacf2a8b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fil.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\fil.pak
            • Size 698KB
            • SHA256 f9e86324deee168d160a51402588da9987646c8c5899b76b6255d7e3a46a7bb5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\fr.pak
            • Size 721KB
            • SHA256 c2c7639ebdd3f50779ded050ac94c24773bf5e348984ff7ce53f0b386b2eec27
            • MD5 SHA1 SHA512 SSDEEP TLSH

            gu.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\gu.pak
            • Size 1.4MB
            • SHA256 34e4d54d66a0b0471542ee76c55cc9d3b27fcaf15cdf63c3d7e7b46cfdfb3f4f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            he.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\he.pak
            • Size 877KB
            • SHA256 f149893ec79d46937ccaaacefa2bea4179c79f45b4ddb4d215d7e7756b4101cd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hi.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\hi.pak
            • Size 1.5MB
            • SHA256 57432f987cd26251065245e62b9ec47c1a90bd6ab2f2c4227c3c9becca3994f6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\hr.pak
            • Size 674KB
            • SHA256 9ef77921560c91e5d6e42df6504589b8b7efb84c9b5119ac51e9a10d8c83a089
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hu.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\hu.pak
            • Size 721KB
            • SHA256 31e407f43bbd0cd0692755f961bb39d10af1f9f0af205455dd70fb4c7eeb85a5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            id.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\id.pak
            • Size 598KB
            • SHA256 e7957c9c58f890b5d053ea50c5fcb4b66cbc3c47478c42a5962810cb15814249
            • MD5 SHA1 SHA512 SSDEEP TLSH

            it.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\it.pak
            • Size 653KB
            • SHA256 88220058e902f05d7a2e61ec21667a5ca44c543ad0042fe530d698aa55836aa4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ja.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\ja.pak
            • Size 796KB
            • SHA256 916884da7606a990aceb82c0cd4b3480c054e5d0562684df40767310ba9d4dab
            • MD5 SHA1 SHA512 SSDEEP TLSH

            kn.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\kn.pak
            • Size 1.6MB
            • SHA256 9744dbadbb7c31cc6393a0682daf91045be270bab934dff7dbad79b76287616e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ko.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\ko.pak
            • Size 677KB
            • SHA256 ee01af13e4e4b804e48d7126a38a059e210c7f4fba0c37fd2dfa9ef4c106b9d3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            lt.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\lt.pak
            • Size 734KB
            • SHA256 bc5d99751f1b252ed074bfc4bf6dc94321b3f785a0a0d4300209acae40220f74
            • MD5 SHA1 SHA512 SSDEEP TLSH

            lv.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\lv.pak
            • Size 731KB
            • SHA256 4a47f56c40b16b261cb8bf29a0b16be9638a88b8a5df4d8bb1d13c39271e2b58
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ml.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\ml.pak
            • Size 1.6MB
            • SHA256 a45bcebcf69244bdbca6c0a4fe68c89430c6531e9d3cbddaa85758385b877934
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\mr.pak
            • Size 1.3MB
            • SHA256 fa87d519a8545b2748c52ccd7704b320877b2d03385991ceabe75c2745200331
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ms.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\ms.pak
            • Size 629KB
            • SHA256 2ab44645c1ed7b68c9121ee0ab9cdf8c7b9d1721d131b08f258b8a85b8ed0af0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nb.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\nb.pak
            • Size 601KB
            • SHA256 8eaa23c418a3fafb9e85b5445e73fb2f5e13be1f033ff2487c4081148aaa2f4e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nl.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\nl.pak
            • Size 627KB
            • SHA256 43a15f2dfda6ce1c908e9913eb02aba9602e3f24c6c96f7fed7852d61a1263f6
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pl.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\pl.pak
            • Size 700KB
            • SHA256 5e47475490d1514e3670c44f55a2061672c8e7f6219211b3d907bacbe5aa0a5c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pt-BR.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\pt-BR.pak
            • Size 657KB
            • SHA256 2c48cfad589795774dc2dbd5d7717f8695f3c02d85acc0076ad7a02666e60968
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pt-PT.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\pt-PT.pak
            • Size 661KB
            • SHA256 e613f2149cb23de02296e8524981d594cd1bac34360d83bc1682ff37eccc55c3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ro.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\ro.pak
            • Size 686KB
            • SHA256 909fadc1bb8b1bda780d182b823a98fd3b8f9fa362bffc95b3ebf2b270ad0698
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ru.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\ru.pak
            • Size 1.1MB
            • SHA256 b0977b6a115c6836189200423b44202c1329ff702b68ab9a72f996fe42c6ec81
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sk.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\sk.pak
            • Size 713KB
            • SHA256 9a2b0ed5cf2e1c8e1d18abc136af82867469a2503b76e3a9f848ee723b7a0102
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sl.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\sl.pak
            • Size 682KB
            • SHA256 2bc385d457dc844794f9396458c4090e6233afec5a08b4a5a92e45ef31e07b78
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\sr.pak
            • Size 1.0MB
            • SHA256 aa3a70c23a149e1ef9fea6db95d5cc0084a85477bd772f6d0629601f35f0e65e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sv.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\sv.pak
            • Size 609KB
            • SHA256 3af85c15ce3e76344404c37325a60932ce53763539c8cd8b3120424f709f73de
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sw.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\sw.pak
            • Size 645KB
            • SHA256 a806d782b21930ec6243b8e5b393e7fa970ce9d297e96b02e6596fa6ce6c8a86
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ta.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\ta.pak
            • Size 1.6MB
            • SHA256 516660683214c01341300fa8d15c7e39aecc38792b76fe74bdcc464024f4294f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            te.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\te.pak
            • Size 1.5MB
            • SHA256 24e355a0b67eb09e93ee8caffbe34246dad42e526e6bd4877149c5068ab03ed7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            th.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\th.pak
            • Size 1.3MB
            • SHA256 946b4a45a9d43b15359927f33307fc35f50d7e880f02890b07bdfd1160f2db59
            • MD5 SHA1 SHA512 SSDEEP TLSH

            tr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\tr.pak
            • Size 656KB
            • SHA256 37619e7084337a839d8ccf7915381cf9975d0ffc9451bd37d210bc7322645219
            • MD5 SHA1 SHA512 SSDEEP TLSH

            uk.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\uk.pak
            • Size 1.1MB
            • SHA256 6b58314224303e7338c44c2014259c56894bfffe22de46eca6cae1bff4edcfae
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ur.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\ur.pak
            • Size 986KB
            • SHA256 d57cd219249e207d34c21a619935d0f0a7814a0ccdd36051a42400c60a599e47
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vi.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\vi.pak
            • Size 781KB
            • SHA256 37f2c01a308ad8bb93d9525d81480880f97d54191dbe7c1c1e75aa9fcf009450
            • MD5 SHA1 SHA512 SSDEEP TLSH

            zh-CN.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\zh-CN.pak
            • Size 558KB
            • SHA256 0386ef8bf3ce4e24c604ee039273e452d12f8b1d6e5ac7e746995e8b39fab379
            • MD5 SHA1 SHA512 SSDEEP TLSH

            zh-TW.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\locales\zh-TW.pak
            • Size 551KB
            • SHA256 740c2da1eedff44b57d8700b6f81f1acf17e67bdf534220553b448da42f62b66
            • MD5 SHA1 SHA512 SSDEEP TLSH

            resources.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\resources.pak
            • Size 6.8MB
            • SHA256 77f82c006ca57145a385188e67f06c8a1136c0d86de10dc5889f0dbd6117b061
            • MD5 SHA1 SHA512 SSDEEP TLSH

            app.asar

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\resources\app.asar
            • Size 47.4MB
            • SHA256 73d89898c3e349ba10a1738f8f70e0cf66d7e66adb547d66d322e5f41ebc7b0e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            snapshot_blob.bin

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\snapshot_blob.bin
            • Size 356KB
            • SHA256 01e68a60b8838be376b202607defadaabdb61b5907dc6caf2cfaf8e915229532
            • MD5 SHA1 SHA512 SSDEEP TLSH

            v8_context_snapshot.bin

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\v8_context_snapshot.bin
            • Size 722KB
            • SHA256 8b01d2eb0fc5324e0ff3879a30efca0eb7f5dfe35f829721aebc98b0bffbb4c3
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vk_swiftshader.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\vk_swiftshader.dll
            • Size 5.2MB
            • SHA256 a0f117801db7c874cafca765aac0eddc4e07f422af5a38d6e673635ac5bb8a75
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vulkan-1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\7z-out\vulkan-1.dll
            • Size 908KB
            • SHA256 58349de6c50157aa78500d383910dbc7b40a8a4a022aff9cc3eeef8915c9b3ed
            • MD5 SHA1 SHA512 SSDEEP TLSH

            SpiderBanner.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsf6822.tmp\SpiderBanner.dll
            • Size 9KB
            • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
            • MD5 SHA1 SHA512 SSDEEP TLSH

            LICENSE.electron.txt

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\LICENSE.electron.txt
            • Size 1KB
            • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
            • MD5 SHA1 SHA512 TLSH

            LICENSES.chromium.html

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\LICENSES.chromium.html
            • Size 18.6MB
            • SHA256 62e3b53be6bbbb2e7747b7a55c8b4f4a3cf38b95e0fff594737b3bfdac8cf373
            • MD5 SHA1 SHA512 SSDEEP TLSH

            chrome_100_percent.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\chrome_100_percent.pak
            • Size 113KB
            • SHA256 34433fa04ddf5eb78b3b4e9c64a3af626e28641907ad7a6086614eb6a8f00a07
            • MD5 SHA1 SHA512 SSDEEP TLSH

            chrome_200_percent.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\chrome_200_percent.pak
            • Size 183KB
            • SHA256 581c8d53199c10512d31a340699f9ad269f8eea5fe6bc49e05c1bde98ee612aa
            • MD5 SHA1 SHA512 SSDEEP TLSH

            d3dcompiler_47.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\d3dcompiler_47.dll
            • Size 4.5MB
            • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dxcompiler.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\dxcompiler.dll
            • Size 24.5MB
            • SHA256 d0bfe18b1fe15a2eb40f8955f3d1a7d54040e8c321158207803668e892727c2d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            dxil.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\dxil.dll
            • Size 1.4MB
            • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ffmpeg.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\ffmpeg.dll
            • Size 3.0MB
            • SHA256 33559a766ca7b5f0768145eeefa53b6fe2eb0d651629bdefd4786b4569a9aa84
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icudtl.dat

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\icudtl.dat
            • Size 10.3MB
            • SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libEGL.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\libEGL.dll
            • Size 510KB
            • SHA256 ea6abea4b5520ee55d5bc7b2743855397f7d58906ec2d95bce0cd5cc41fd7eaf
            • MD5 SHA1 SHA512 SSDEEP TLSH

            libGLESv2.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\libGLESv2.dll
            • Size 7.6MB
            • SHA256 276f69a4b413c7f78658591a8b1abeda9d19a5ecd7df9388fb3ff1181a5d5cf5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            af.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\af.pak
            • Size 596KB
            • SHA256 7bf59977f051c1ccb19cb8c48a8efd57922d088ad26cd51a85a671000c845a4e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            am.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\am.pak
            • Size 966KB
            • SHA256 a387f4af550667980c7631532b5c8f50a20ecf2c2f45392a7e0bf23f8f6c91fc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ar.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\ar.pak
            • Size 1.0MB
            • SHA256 e8f4b9b64235893bbee95c8360c739e5ba09687072dd4b7d706cee9ae4032887
            • MD5 SHA1 SHA512 SSDEEP TLSH

            bg.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\bg.pak
            • Size 1.1MB
            • SHA256 da36ef0cde92b2021ff39b6c3341f4d2832c1129d13248aa371573812140db9a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            bn.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\bn.pak
            • Size 1.4MB
            • SHA256 4f246bc78ddfc2cc249ae99990470e2d470a13a2d7599ab8787400c4fd179cdc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ca.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\ca.pak
            • Size 671KB
            • SHA256 b232cebcb102bf03c81286f1ec082e80d0e399d09d9251c3e574ef24fb15b68b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            cs.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\cs.pak
            • Size 697KB
            • SHA256 58b2d7c81430bec91ff72560acd604df82ff0090e2c4e3d1ce8cac2b69bc40e9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            da.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\da.pak
            • Size 626KB
            • SHA256 66de87f60ce23d82457271b34da1baed85bf0f3f63b04d90610a20c4ebe66c23
            • MD5 SHA1 SHA512 SSDEEP TLSH

            de.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\de.pak
            • Size 672KB
            • SHA256 dadd0439167371607d9a82222f248f268d9e27669c1d87ca09d8751c07a90d01
            • MD5 SHA1 SHA512 SSDEEP TLSH

            el.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\el.pak
            • Size 1.2MB
            • SHA256 9a9db32904381a6eda169f56099313a494dae63f2795678449c4ad87cd3a69fb
            • MD5 SHA1 SHA512 SSDEEP TLSH

            en-GB.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\en-GB.pak
            • Size 543KB
            • SHA256 7bbcf19623b0a34524d75a3211d305d6b01150b3ecf2bff3b140189a13c29eb4
            • MD5 SHA1 SHA512 SSDEEP TLSH

            en-US.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\en-US.pak
            • Size 549KB
            • SHA256 446a0f711467b162cced38128932f712e4a53fe344a165110196c366fd3d87ea
            • MD5 SHA1 SHA512 SSDEEP TLSH

            es-419.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\es-419.pak
            • Size 662KB
            • SHA256 337a0ef8be48fcf7d120026d8dd9970737604ad177df1709fefa5cca79c70079
            • MD5 SHA1 SHA512 SSDEEP TLSH

            es.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\es.pak
            • Size 659KB
            • SHA256 b32a3073e0e749b8b1f0f3e082343a8ca192cf3b7244847387526a5cd8beef7f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            et.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\et.pak
            • Size 602KB
            • SHA256 740a4632aa00dbc07251c10cdef1480739069a6456fa9a642eef387fba935e09
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fa.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\fa.pak
            • Size 996KB
            • SHA256 7d13dfa4bc6ea7ae996f0696eb328de26b35e1ec7e606fb0c4f8192d4bfcbaec
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fi.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\fi.pak
            • Size 612KB
            • SHA256 53cca3552a8bf4ccc516103cdf929b5f10ba1859ccebe644bb080082faff6878
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fil.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\fil.pak
            • Size 695KB
            • SHA256 3503fbfa400b23a3019005a2f1d7a31d623b056889a66abcaeb1558ad4316924
            • MD5 SHA1 SHA512 SSDEEP TLSH

            fr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\fr.pak
            • Size 716KB
            • SHA256 a8db41476a1103bc5bfb617b150c6b6e2ca1eb24f534872c9c15e353649cd0bc
            • MD5 SHA1 SHA512 SSDEEP TLSH

            gu.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\gu.pak
            • Size 1.4MB
            • SHA256 947324c6aada6255df0c702114796436215f8012634a58b065b7ff3fc92162bd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            he.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\he.pak
            • Size 871KB
            • SHA256 d06fb5dc66cc104503a861d2e4e6ef53e9172549c862aadeddcc2b5bb856f25c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hi.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\hi.pak
            • Size 1.5MB
            • SHA256 a775f5724ccbe9bdfeefc448b42e3b48402f81404d94dea4252bfb765a314b96
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\hr.pak
            • Size 671KB
            • SHA256 84c6bd6ce5bcd81a89b0908f22576725128e27688f6578d13d8b2f0e7fa6335f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            hu.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\hu.pak
            • Size 717KB
            • SHA256 cd1026c6596610617d8a313b899e9d2e2514d0cd1fbf97790f2c450309ede792
            • MD5 SHA1 SHA512 SSDEEP TLSH

            id.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\id.pak
            • Size 592KB
            • SHA256 4de71f7c766db79412dcc1f5521c5f3e678cf343327cc31b0fc28472102e0247
            • MD5 SHA1 SHA512 SSDEEP TLSH

            it.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\it.pak
            • Size 648KB
            • SHA256 ac12cbbdeeea05f0cf90cc57df1f6ef299444b1f499157eef8aa089f73da25f9
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ja.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\ja.pak
            • Size 791KB
            • SHA256 c737584f4b525c4d17cc2a79f0318640a7a666c43ef7aa24753551d1b75d7d7f
            • MD5 SHA1 SHA512 SSDEEP TLSH

            kn.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\kn.pak
            • Size 1.6MB
            • SHA256 3eb9b3dda74b5e21abf7d7726cc2e682afd87141ee30a488e288695d48a5352e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ko.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\ko.pak
            • Size 671KB
            • SHA256 bcc64be2004522a68a12dcfb6efb45f030d0badfe048220d2830b188e7f4135d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            lt.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\lt.pak
            • Size 729KB
            • SHA256 a7eae3ba06229763b85b29eb64e011b992679952165bb7239a9ece1d441de4ab
            • MD5 SHA1 SHA512 SSDEEP TLSH

            lv.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\lv.pak
            • Size 727KB
            • SHA256 8a4c31840217419f608b15eca1490bb4e83c5a896556a045f95af7f1390f5f8a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ml.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\ml.pak
            • Size 1.6MB
            • SHA256 434221a29e71a6dfc6c14a5843713df51b2afe8cc3114cb9fedfbfdfc590ce4d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            mr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\mr.pak
            • Size 1.3MB
            • SHA256 ae12ff8ac009a4991d71363ff442abb3beaef772d08e72f4ccd685403a02f332
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ms.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\ms.pak
            • Size 624KB
            • SHA256 77912adf05407adf3dfd2b0eba269b1cb99d980dd0a16fae74dabea3a584a869
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nb.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\nb.pak
            • Size 598KB
            • SHA256 81b5a935f83a49ef4faf7132876e500a6cd49909c1d2b45d4bf1336769874b86
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nl.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\nl.pak
            • Size 623KB
            • SHA256 afc9e6696a40b0318ba96e786fe0b286c3ea9a2d548479c1fa43d96b1c137c62
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pl.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\pl.pak
            • Size 696KB
            • SHA256 f92f6bff33a975e189b78a4cf0e153e85743dda432347745ebf8f1b4ff51a99b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pt-BR.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\pt-BR.pak
            • Size 652KB
            • SHA256 d1aba0dbde99231d3096b7ef9ec62ed017c72804257de62ffb649d45cf234f9d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            pt-PT.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\pt-PT.pak
            • Size 656KB
            • SHA256 1326efcde830a8b29541c98fb51e3b5e5428d2a59e1b21a11a677317d08b2bbd
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ro.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\ro.pak
            • Size 681KB
            • SHA256 7fd5b85509f67394eee48b07339c9a3a77fb1fb99b6204bae3209f9f0ffab3b1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ru.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\ru.pak
            • Size 1.1MB
            • SHA256 23166d431d70048e248e3ff47732642cb1ab73f9516384e33ef3c1979574f2ff
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sk.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\sk.pak
            • Size 708KB
            • SHA256 91037f2ecb636857b92a2729b7c116d8dd98082b068e4f78b0fdab06f27d2eb7
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sl.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\sl.pak
            • Size 678KB
            • SHA256 321ab341e3225dddcac858448367d43677c20e739b2ccab52f8c86aa0727d868
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\sr.pak
            • Size 1.0MB
            • SHA256 7b337dcad390a9f08c3bd1d27235898e588827fa8da8808f4bc7012011578ef0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sv.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\sv.pak
            • Size 605KB
            • SHA256 f10b4db7184a14f28bfdad82597d2d43b4ec859ab6eab59a5c3891aa6070f3ed
            • MD5 SHA1 SHA512 SSDEEP TLSH

            sw.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\sw.pak
            • Size 640KB
            • SHA256 726ba26363103920712874418cbfc23ce899c46ca8a6dc3ec9da0bf48355622b
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ta.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\ta.pak
            • Size 1.6MB
            • SHA256 fd8fe5c21a10e6542599e9148c8a30557c4d437b9606d6b29b685d474d89534d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            te.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\te.pak
            • Size 1.5MB
            • SHA256 28b85fa550df913e970fac8a599ec4963b1466e3b610350924518de107e41602
            • MD5 SHA1 SHA512 SSDEEP TLSH

            th.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\th.pak
            • Size 1.3MB
            • SHA256 cfd9e6651e9335fbc0483aed1098112234e973303bf7101d88e0518d3fb16ffe
            • MD5 SHA1 SHA512 SSDEEP TLSH

            tr.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\tr.pak
            • Size 651KB
            • SHA256 4b047663f169169f3ccd33923782ae33348c37e5107314d3324f1850f3c5fb42
            • MD5 SHA1 SHA512 SSDEEP TLSH

            uk.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\uk.pak
            • Size 1.1MB
            • SHA256 3ebafedd5f6005f56a2d7a500e59bcb435e58a6013c7e075b241a91ab1c605ed
            • MD5 SHA1 SHA512 SSDEEP TLSH

            ur.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\ur.pak
            • Size 981KB
            • SHA256 51c318f3df2673cb34d0df9235021dd1794073cddf59d14433620da1141ec650
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vi.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\vi.pak
            • Size 774KB
            • SHA256 45c351251b938ea6f46305f2c324e8144bdf7500e08d430f8280b7db9e2ce52d
            • MD5 SHA1 SHA512 SSDEEP TLSH

            zh-CN.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\zh-CN.pak
            • Size 554KB
            • SHA256 78837eb8a17d34e371ed72b7c7d9262876592f409fc66b293461c5468386834c
            • MD5 SHA1 SHA512 SSDEEP TLSH

            zh-TW.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\locales\zh-TW.pak
            • Size 547KB
            • SHA256 fb77ff841f652f0ac8be02ce625559ae516c63081a45bde96f9277f241172eca
            • MD5 SHA1 SHA512 SSDEEP TLSH

            resources.pak

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\resources.pak
            • Size 6.5MB
            • SHA256 096373b7b5a9535b5ba60a37883d1d2010d28dafd90d4c819a902db09aef4ad1
            • MD5 SHA1 SHA512 SSDEEP TLSH

            app-update.yml

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\resources\app-update.yml
            • Size 172B
            • SHA256 ff275def080229bfc8a75a08b67c072cacdc7a538fb01104c3c2e6a89e741e5d
            • MD5 SHA1 SHA512 TLSH

            app.asar

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\resources\app.asar
            • Size 44.8MB
            • SHA256 8c6febbdf83461bd8b0a2ea5209423857d52b807c778f850e4a7960989cb2968
            • MD5 SHA1 SHA512 SSDEEP TLSH

            icon.png

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\resources\app.asar.unpacked\resources\icon.png
            • Size 132KB
            • SHA256 ceb2210260fc5846582030fac047cf70fa012beb080d1b4c8c1ad0e9d2fa9783
            • MD5 SHA1 SHA512 SSDEEP TLSH

            trayTemplate.png

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\resources\app.asar.unpacked\resources\tray\trayTemplate.png
            • Size 535B
            • SHA256 4618ef51f1bade1b1f3662a0a28ff63a9534944a567ee9f815285cf9866a48af
            • MD5 SHA1 SHA512 TLSH
            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\resources\app.asar.unpacked\resources\tray\[email protected]
            • Size 787B
            • SHA256 5b509bb2dc0ae257405e2c35dd62138f123decf424174b37e99c9bcece79af69
            • MD5 SHA1 SHA512 TLSH

            elevate.exe

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\resources\elevate.exe
            • Size 105KB
            • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
            • MD5 SHA1 SHA512 SSDEEP TLSH

            snapshot_blob.bin

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\snapshot_blob.bin
            • Size 333KB
            • SHA256 a578866594759d3c20b8fc40ca8f312c283a09113920ac14aea9c88ce0e8d9ba
            • MD5 SHA1 SHA512 SSDEEP TLSH

            v8_context_snapshot.bin

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\v8_context_snapshot.bin
            • Size 698KB
            • SHA256 ed5e979db2aef4a152758f2b9b7b06349a1d3d5dd687fdb96e2b3fb730a465e0
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vk_swiftshader.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\vk_swiftshader.dll
            • Size 5.4MB
            • SHA256 3738844133e89dc951e2167aac92e1491f34a385e54f36ad751ce604e5ee7964
            • MD5 SHA1 SHA512 SSDEEP TLSH

            vk_swiftshader_icd.json

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\vk_swiftshader_icd.json
            • Size 106B
            • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
            • MD5 SHA1 SHA512 TLSH

            vulkan-1.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\7z-out\vulkan-1.dll
            • Size 932KB
            • SHA256 d8bd2d92c82fa28141fb911a7cacadd8dd7082b98258975727930ee571a43cb5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            INetC.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\INetC.dll
            • Size 238KB
            • SHA256 ed04a4823f221e9197b8f3c3da1d6859ff5b176185bde2f1c923a442516c810a
            • MD5 SHA1 SHA512 SSDEEP TLSH

            StdUtils.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\StdUtils.dll
            • Size 100KB
            • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
            • MD5 SHA1 SHA512 SSDEEP TLSH

            System.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\System.dll
            • Size 12KB
            • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
            • MD5 SHA1 SHA512 SSDEEP TLSH

            UAC.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\UAC.dll
            • Size 14KB
            • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
            • MD5 SHA1 SHA512 SSDEEP TLSH

            WinShell.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\WinShell.dll
            • Size 3KB
            • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
            • MD5 SHA1 SHA512 TLSH

            nsDialogs.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\nsDialogs.dll
            • Size 9KB
            • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nsExec.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\nsExec.dll
            • Size 6KB
            • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
            • MD5 SHA1 SHA512 SSDEEP TLSH

            nsis7z.dll

            • Path C:\Users\Admin\AppData\Local\Temp\nsw2C09.tmp\nsis7z.dll
            • Size 424KB
            • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
            • MD5 SHA1 SHA512 SSDEEP TLSH

            the-real-index

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Code Cache\js\index-dir\the-real-index
            • Size 48B
            • SHA256 08e230b79acaf555cdc5a4c515a53381f5ab4224d7fdabc36fd2e08fbf4f58db
            • MD5 SHA1 SHA512

            index

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Code Cache\wasm\index
            • Size 24B
            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
            • MD5 SHA1 SHA512

            data_1

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\DawnWebGPUCache\data_1
            • Size 264KB
            • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
            • MD5 SHA1 SHA512 SSDEEP

            data_0

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\GPUCache\data_0
            • Size 8KB
            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
            • MD5 SHA1 SHA512 SSDEEP

            data_2

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\GPUCache\data_2
            • Size 8KB
            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
            • MD5 SHA1 SHA512 SSDEEP

            data_3

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\GPUCache\data_3
            • Size 8KB
            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
            • MD5 SHA1 SHA512 SSDEEP

            Local State

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Local State
            • Size 490B
            • SHA256 36739b282ed5d79b44e9ed2159d8696e70d3b94a5f26848d873928c463fa5ae1
            • MD5 SHA1 SHA512 TLSH

            LOG

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Local Storage\leveldb\LOG
            • Size 263B
            • SHA256 8620643acb6fd20b007cc260d9858244cf2009b96fb948e9195bf9ce6cc36c0e
            • MD5 SHA1 SHA512 TLSH

            Network Persistent State

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Network\Network Persistent State
            • Size 194B
            • SHA256 5e2866d49acacb48c392510b2e540edb3041a6b110b5e4d7968a8608d7526c62
            • MD5 SHA1 SHA512 TLSH

            Network Persistent State~RFe5a66d9.TMP

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Network\Network Persistent State~RFe5a66d9.TMP
            • Size 59B
            • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
            • MD5 SHA1 SHA512 TLSH

            Preferences

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Preferences
            • Size 57B
            • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
            • MD5 SHA1 SHA512 TLSH

            Preferences~RFe5a424a.TMP

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Preferences~RFe5a424a.TMP
            • Size 93B
            • SHA256 529b6595a4727a6b2d6cc154ae51f426216c01fc7fda02de2460abfb3de118a4
            • MD5 SHA1 SHA512 TLSH

            CURRENT

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Session Storage\CURRENT
            • Size 16B
            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
            • MD5 SHA1 SHA512

            MANIFEST-000001

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Session Storage\MANIFEST-000001
            • Size 41B
            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
            • MD5 SHA1 SHA512

            electron-log-preload.js

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\electron-log-preload.js
            • Size 959B
            • SHA256 06e0feb5d0a1232d31d93b9f3fd356951abd92beda7e99acd5dbbcb5a11a873b
            • MD5 SHA1 SHA512 TLSH

            sklauncher_logs.txt

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
            • Size 1KB
            • SHA256 ebcdbfc13226deedb8d443b70ce681f43a52afb72a64807b7ecfc3e2e119abfc
            • MD5 SHA1 SHA512 TLSH

            sklauncher_logs.txt

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
            • Size 3KB
            • SHA256 52ef70495aa091cb7ebea2f24b8419a5539482c275d485a9198892d9c255dbe9
            • MD5 SHA1 SHA512 TLSH

            sklauncher_logs.txt

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
            • Size 3KB
            • SHA256 0ec195cc9ecbe4714703edd46af5afe8b294f56d4de9fa6998dc35c853ced0fe
            • MD5 SHA1 SHA512 TLSH

            sklauncher_logs.txt

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
            • Size 594B
            • SHA256 46d56ea3e06b11e0bf81cdfb6236a17ba790d1f947838daabe6e9f71e378a721
            • MD5 SHA1 SHA512 TLSH

            sklauncher_logs.txt

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
            • Size 2KB
            • SHA256 614e6e495a57f35e9342b903a48600281b288e09ca80ab726a7509633b689da0
            • MD5 SHA1 SHA512 TLSH

            sklauncher_logs.txt

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
            • Size 3KB
            • SHA256 648e288fa0c5b7c2b67b61bd78690e13c97fb90b6bf4825d323cb47d166201a5
            • MD5 SHA1 SHA512 TLSH

            sklauncher_logs.txt

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
            • Size 4KB
            • SHA256 f29a66cb17bad4a2ca02c45ca82946973df4af15356df1a3cae090c66f28faa5
            • MD5 SHA1 SHA512 SSDEEP TLSH

            settings.json

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\settings.json
            • Size 556B
            • SHA256 eb7c9fa166bd0c2d24294a205c5e7b87b9c5c1d167a1caa94e87ab29670b87ee
            • MD5 SHA1 SHA512 TLSH

            updater-state.json

            • Path C:\Users\Admin\AppData\Roaming\.sklauncher\updater-state.json
            • Size 274B
            • SHA256 22077a158967eaade5a0363b5f2fcae34702e3796591832d2e06ce7376ceeaa0
            • MD5 SHA1 SHA512 TLSH

            default.exc

            • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
            • Size 2B
            • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
            • MD5 SHA1 SHA512

            memory/804-1566-0x000001A0E2D10000-0x000001A0E2D11000-memory.dmp

            memory/804-1567-0x000001A0E2D10000-0x000001A0E2D11000-memory.dmp

            memory/804-1569-0x000001A0E2D10000-0x000001A0E2D11000-memory.dmp

            memory/804-1570-0x000001A0E2D10000-0x000001A0E2D11000-memory.dmp

            memory/804-1571-0x000001A0E2D10000-0x000001A0E2D11000-memory.dmp

            memory/804-1568-0x000001A0E2D10000-0x000001A0E2D11000-memory.dmp

            memory/1100-904-0x0000000005D00000-0x000000000605B000-memory.dmp

            memory/1100-906-0x00000000701B0000-0x00000000701FC000-memory.dmp

            memory/1100-909-0x0000000007700000-0x0000000007711000-memory.dmp

            memory/1744-29-0x0000000073330000-0x0000000073AEC000-memory.dmp

            memory/1744-32-0x0000000006030000-0x0000000006096000-memory.dmp

            memory/1744-53-0x000000006FEA0000-0x00000000701FB000-memory.dmp

            memory/1744-52-0x0000000007CC0000-0x0000000007CE4000-memory.dmp

            memory/1744-51-0x0000000007C90000-0x0000000007CBA000-memory.dmp

            memory/1744-50-0x0000000007AF0000-0x0000000007AFA000-memory.dmp

            memory/1744-55-0x0000000073330000-0x0000000073AEC000-memory.dmp

            memory/1744-27-0x0000000073342000-0x0000000073343000-memory.dmp

            memory/1744-28-0x0000000005230000-0x0000000005266000-memory.dmp

            memory/1744-30-0x0000000005970000-0x0000000005FBA000-memory.dmp

            memory/1744-31-0x0000000005940000-0x0000000005962000-memory.dmp

            memory/1744-34-0x00000000060A0000-0x0000000006106000-memory.dmp

            memory/1744-49-0x0000000007A80000-0x0000000007A9A000-memory.dmp

            memory/1744-48-0x0000000008100000-0x000000000877C000-memory.dmp

            memory/1744-47-0x0000000073330000-0x0000000073AEC000-memory.dmp

            memory/1744-46-0x00000000079D0000-0x0000000007A73000-memory.dmp

            memory/1744-45-0x0000000006CF0000-0x0000000006D10000-memory.dmp

            memory/1744-42-0x000000006FCF0000-0x000000006FD3C000-memory.dmp

            memory/1744-41-0x0000000073330000-0x0000000073AEC000-memory.dmp

            memory/1744-40-0x00000000076D0000-0x0000000007706000-memory.dmp

            memory/1744-39-0x0000000006760000-0x00000000067AC000-memory.dmp

            memory/1744-38-0x0000000006700000-0x000000000671E000-memory.dmp

            memory/1744-37-0x0000000006210000-0x000000000656B000-memory.dmp

            memory/1744-33-0x0000000073330000-0x0000000073AEC000-memory.dmp

            memory/3092-1558-0x000001E2850F0000-0x000001E2850F2000-memory.dmp

            memory/3092-1550-0x000001E2850F0000-0x000001E2850F2000-memory.dmp

            memory/3092-1561-0x000001E2850F0000-0x000001E2850F2000-memory.dmp

            memory/3092-1560-0x000001E2850F0000-0x000001E2850F2000-memory.dmp

            memory/3092-1542-0x000001E285080000-0x000001E285081000-memory.dmp

            memory/3092-1546-0x000001E285080000-0x000001E285081000-memory.dmp

            memory/3092-1559-0x000001E2850F0000-0x000001E2850F2000-memory.dmp

            memory/3092-1557-0x000001E2850F0000-0x000001E2850F2000-memory.dmp

            memory/3092-1552-0x000001E2850F0000-0x000001E2850F2000-memory.dmp

            memory/3092-1556-0x000001E2850F0000-0x000001E2850F2000-memory.dmp

            memory/3092-1548-0x000001E2850F0000-0x000001E2850F2000-memory.dmp

            memory/3092-1562-0x000001E2850F0000-0x000001E2850F2000-memory.dmp

            memory/3092-1555-0x000001E2850F0000-0x000001E2850F2000-memory.dmp

            memory/3092-1551-0x000001E2850F0000-0x000001E2850F2000-memory.dmp

            memory/3092-1553-0x000001E2850F0000-0x000001E2850F2000-memory.dmp

            memory/3092-1554-0x000001E2850F0000-0x000001E2850F2000-memory.dmp

            memory/3144-892-0x00000000701B0000-0x00000000701FC000-memory.dmp

            memory/3144-896-0x0000000070410000-0x000000007076B000-memory.dmp

            memory/3144-887-0x0000000006090000-0x00000000063EB000-memory.dmp

            memory/3144-895-0x00000000078A0000-0x0000000007943000-memory.dmp

            memory/3144-891-0x0000000006C10000-0x0000000006C5C000-memory.dmp

            memory/3876-85-0x000000006FE50000-0x00000000701AB000-memory.dmp

            memory/3876-82-0x000000006FCF0000-0x000000006FD3C000-memory.dmp

            memory/3876-80-0x0000000006090000-0x00000000063EB000-memory.dmp

            memory/4544-957-0x0000000007270000-0x0000000007281000-memory.dmp

            memory/4544-954-0x000000006FB40000-0x000000006FB8C000-memory.dmp

            memory/4684-978-0x000000006FC80000-0x000000006FFDB000-memory.dmp

            memory/4684-974-0x000000006FB20000-0x000000006FB6C000-memory.dmp

            memory/4684-977-0x0000000007870000-0x0000000007913000-memory.dmp

            memory/4684-973-0x0000000006900000-0x000000000694C000-memory.dmp

            memory/4684-971-0x0000000006160000-0x00000000064BB000-memory.dmp

            memory/4988-67-0x000000006FCF0000-0x000000006FD3C000-memory.dmp

            memory/4988-70-0x00000000073B0000-0x0000000007446000-memory.dmp

            memory/4988-62-0x0000000073330000-0x0000000073AEC000-memory.dmp

            memory/4988-63-0x0000000005800000-0x0000000005B5B000-memory.dmp

            memory/4988-60-0x0000000073330000-0x0000000073AEC000-memory.dmp

            memory/4988-73-0x0000000073330000-0x0000000073AEC000-memory.dmp

            memory/4988-61-0x0000000073330000-0x0000000073AEC000-memory.dmp

            memory/4988-71-0x0000000007310000-0x0000000007321000-memory.dmp

            memory/5516-945-0x000000006FCA0000-0x000000006FFFB000-memory.dmp

            memory/5516-944-0x0000000007770000-0x0000000007813000-memory.dmp

            memory/5516-941-0x000000006FB40000-0x000000006FB8C000-memory.dmp

            memory/5516-940-0x0000000006A40000-0x0000000006A8C000-memory.dmp

            memory/5516-938-0x0000000006070000-0x00000000063CB000-memory.dmp

            memory/5524-922-0x00000000703B0000-0x000000007070B000-memory.dmp

            memory/5524-917-0x0000000005F90000-0x00000000062EB000-memory.dmp

            memory/5524-919-0x00000000701B0000-0x00000000701FC000-memory.dmp