7ca7cce436ffb6d06b4abc26014f03a56f77c29d28c3b28dde7a97bd6847bc2e

Analysis

user interaction
yes
max time kernel
214s
max time network
302s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260709-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
07/09/2026, 16:14

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Buff Achievement Tracker - Installer.exe
Size 2.9MB
Sample260907-tp48rayvht
SHA256 7ca7cce436ffb6d06b4abc26014f03a56f77c29d28c3b28dde7a97bd6847bc2e
MD5 2034304df96b2a84252120a634351ee2
SHA1 94c9ecd435c4d9bfbb88c2e49c3634288cb5a9c2
SHA512 cd2b8086fc74988447d46c9832378aed3894db8840f4c67730d9a4964f2191cfd73403388863ce7511dbaec8eb9505ecfafbd692d01054192cfd27794825d4a4
SSDEEP 49152:R3tmlOCxE87vxpsrFpIvQV0aiF4hkssJYxXuGIw3UhsooAFhR8MbYHzcYxk0:RdmlOkPN+TIv6a4hTzxuGrkhsbc8MbYp
TLSH
T135D53371837CA177EB1295B1B9B486ABE157CC07932B4E6AFB84AC503405AD3734F839
MD5 SHA1 SHA512 SSDEEP TLSH

Score

6^/10

defense_evasion discovery persistence privilege_escalation ransomware trojan

Malware Config

Signatures

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-3986082593-3624157295-3514260330-1000\Software\Microsoft\Windows\CurrentVersion\Run\Overwolf = "C:\\Program Files (x86)\\Overwolf\\OverwolfLauncher.exe -overwolfsilent"	OWinstaller.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\RunOnce\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} = "\"C:\\ProgramData\\Package Cache\\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\\VC_redist.x64.exe\" /burn.runonce"	VC_redist.x64.exe

Downloads MZ/PE file 1 IoCs

flow	pid	Process
108	4828	OverwolfSetup.exe

Enumerates connected drives 3 TTPs 23 IoCs

Attempts to read the root path of hard drives other than the default C: drive.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
File opened (read-only)	\??\N:	msiexec.exe
File opened (read-only)	\??\S:	msiexec.exe
File opened (read-only)	\??\V:	msiexec.exe
File opened (read-only)	\??\Z:	msiexec.exe
File opened (read-only)	\??\I:	msiexec.exe
File opened (read-only)	\??\J:	msiexec.exe
File opened (read-only)	\??\P:	msiexec.exe
File opened (read-only)	\??\Q:	msiexec.exe
File opened (read-only)	\??\R:	msiexec.exe
File opened (read-only)	\??\W:	msiexec.exe
File opened (read-only)	\??\X:	msiexec.exe
File opened (read-only)	\??\Y:	msiexec.exe
File opened (read-only)	\??\D:	msiexec.exe
File opened (read-only)	\??\G:	msiexec.exe
File opened (read-only)	\??\H:	msiexec.exe
File opened (read-only)	\??\L:	msiexec.exe
File opened (read-only)	\??\O:	msiexec.exe
File opened (read-only)	\??\T:	msiexec.exe
File opened (read-only)	\??\B:	msiexec.exe
File opened (read-only)	\??\K:	msiexec.exe
File opened (read-only)	\??\U:	msiexec.exe
File opened (read-only)	\??\A:	msiexec.exe
File opened (read-only)	\??\M:	msiexec.exe

Looks up external IP address via web service 1 TTPs 3 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

discovery

Internet Connection Discovery

T1016.001

flow	ioc
233	icanhazip.com
234	api.ipify.org
236	ipinfo.io

Network Share Discovery 1 TTPs
Attempt to gather information on host network.
discovery

Network Share Discovery
T1135

Drops file in System32 directory 39 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\keyboard.inf_amd64_a1fe82a86eaecabd\keyboard.PNF	DxDiag.exe
File opened for modification	C:\Windows\system32\msvcp140.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_2.dll	msiexec.exe
File created	C:\Windows\System32\DriverStore\FileRepository\input.inf_amd64_6f9a6940085bc1e9\input.PNF	DxDiag.exe
File created	C:\Windows\System32\DriverStore\FileRepository\hdaudbus.inf_amd64_7c5144127b6ada21\hdaudbus.PNF	DxDiag.exe
File created	\??\c:\windows\system32\driverstore\filerepository\machine.inf_amd64_d807fc8146278f4c\machine.PNF	DxDiag.exe
File opened for modification	C:\Windows\system32\vcruntime140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vccorlib140.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcamp140.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140.dll	msiexec.exe
File created	\??\c:\windows\system32\driverstore\filerepository\usbport.inf_amd64_7a788f788529d024\usbport.PNF	DxDiag.exe
File created	\??\c:\windows\system32\driverstore\filerepository\hdaudbus.inf_amd64_7c5144127b6ada21\hdaudbus.PNF	DxDiag.exe
File created	C:\Windows\System32\DriverStore\FileRepository\mshdc.inf_amd64_f46cfa9aaf1c025c\mshdc.PNF	DxDiag.exe
File created	C:\Windows\System32\DriverStore\FileRepository\machine.inf_amd64_d807fc8146278f4c\machine.PNF	DxDiag.exe
File created	C:\Windows\system32\msvcp140_1.dll	msiexec.exe
File created	C:\Windows\system32\vcruntime140_threads.dll	msiexec.exe
File created	\??\c:\windows\system32\driverstore\filerepository\netrtl64.inf_amd64_e646b306d9138846\netrtl64.PNF	DxDiag.exe
File created	C:\Windows\system32\vcamp140.dll	msiexec.exe
File created	C:\Windows\system32\vcomp140.dll	msiexec.exe
File created	C:\Windows\system32\vcruntime140.dll	msiexec.exe
File created	C:\Windows\system32\concrt140.dll	msiexec.exe
File created	C:\Windows\System32\DriverStore\FileRepository\usbport.inf_amd64_7a788f788529d024\usbport.PNF	DxDiag.exe
File created	C:\Windows\System32\DriverStore\FileRepository\netrtl64.inf_amd64_e646b306d9138846\netrtl64.PNF	DxDiag.exe
File opened for modification	C:\Windows\system32\msvcp140_atomic_wait.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_codecvt_ids.dll	msiexec.exe
File opened for modification	C:\Windows\system32\vcomp140.dll	msiexec.exe
File created	C:\Windows\System32\DriverStore\FileRepository\msmouse.inf_amd64_097bbd709f0c4972\msmouse.PNF	DxDiag.exe
File created	\??\c:\windows\system32\driverstore\filerepository\mshdc.inf_amd64_f46cfa9aaf1c025c\mshdc.PNF	DxDiag.exe
File opened for modification	C:\Windows\system32\vcruntime140_1.dll	msiexec.exe
File opened for modification	C:\Windows\system32\msvcp140_2.dll	msiexec.exe
File opened for modification	C:\Windows\system32\concrt140.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_atomic_wait.dll	msiexec.exe
File created	C:\Windows\system32\msvcp140_codecvt_ids.dll	msiexec.exe
File created	C:\Windows\system32\vccorlib140.dll	msiexec.exe
File created	\??\c:\windows\system32\driverstore\filerepository\msmouse.inf_amd64_097bbd709f0c4972\msmouse.PNF	DxDiag.exe
File created	\??\c:\windows\system32\driverstore\filerepository\keyboard.inf_amd64_a1fe82a86eaecabd\keyboard.PNF	DxDiag.exe
File opened for modification	C:\Windows\system32\msvcp140_1.dll	msiexec.exe
File created	C:\Windows\system32\vcruntime140_1.dll	msiexec.exe
File created	\??\c:\windows\system32\driverstore\filerepository\input.inf_amd64_6f9a6940085bc1e9\input.PNF	DxDiag.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater\nsis7z64.dll	OverwolfUpdater.exe
File opened for modification	C:\Program Files (x86)\Overwolf\0.309.0.14\resources\default_extensions\game-events-provider.opk	OWinstaller.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\OverWolf.Client.Core.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\win32\D3DCompiler_43.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Licenses\commandlineparser.txt	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Licenses\DotNetZip\License.bzip2.txt	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\builtin_extensions\iighjfalpgednmflhnefmogncmaafgaddchbadgn\manifest.json	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\OpenMcdf.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\d3dcompiler_47.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\System.Threading.Tasks.Extensions.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\bin\api-ms-win-crt-environment-l1-1-0.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\bin\api-ms-win-crt-runtime-l1-1-0.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Locales\ko\OverWolf.Client.Core.resources.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\builtin_extensions\cmaoeodhdocfndbegdhigemkmcccnampbieccfak\Icon.png	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\builtin_extensions\lbelkhgffoedffcamifhhgglceiibjdddpbbgcnj\manifest.json	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\builtin_extensions\cikmooajmbkmclnjlcphoekbdoloeaaoojimoflf\manifest.json	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\builtin_extensions\gphodffjnplojfigjjffnbbpjpcpdpfiimfpfacl\Icon.ico	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\builtin_extensions\nmnhbcdlaikhhplofmnadgjhokliacnpcpmjbhbj\Icon.png	OverwolfSetup.exe
File opened for modification	C:\Program Files (x86)\Overwolf\0.309.0.14\win32\OWUtils.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Backup\OWUninstaller.exe.bak	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\System.Threading.Tasks.NET35.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\leveldb-sharp.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\System.Buffers.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\bin\api-ms-win-core-fibers-l1-1-0.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\bin\api-ms-win-core-sysinfo-l1-1-0.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\bin\vcruntime140.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\win32\OWClient.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Licenses\leveldb.license.txt	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Logitech\LogitechLedEnginesWrapper.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfCrashHandler.exe	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Overwolf.Login.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\d3dx11_43.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\default_extensions\support-widget.opk	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\builtin_extensions\jnabojaampcpfclojlbildognlnebnhfhibiielh\manifest.json	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\builtin_extensions\nhgemogbdkljmfkhmghfikljihjkdeogjiadmhmb\Icon.png	OverwolfSetup.exe
File opened for modification	C:\Program Files (x86)\Overwolf\0.309.0.14\OWLog.cfg	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\bin\api-ms-win-core-datetime-l1-1-0.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\D3DX9_43.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\win32\D3DCompiler_47.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\win32\OWAgent.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Licenses\Tweetinvi.license.txt	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\default_extensions\teamspeak\guild_skin.opk	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\builtin_extensions\nmnhbcdlaikhhplofmnadgjhokliacnpcpmjbhbj\Icon.ico	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\uninstaller\Files\js\commands.js	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\vk_swiftshader_icd.json	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\dxil.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\builtin_extensions\locaglkdehlbijgkcmejdmjbdhibknmknnkknfcf\Splash.png	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\uninstaller\Files\css\popup.css	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\uninstaller\Files\css\window-controls.css	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\uninstaller\Files\js\events.js	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\uninstaller\Files\js\finishedSlide.js	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\bin\api-ms-win-core-debug-l1-1-0.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\overwolf.ico	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Microsoft.Xaml.Behaviors.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\bin\api-ms-win-crt-stdio-l1-1-0.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\OWExplorerLauncher.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Locales\zh\OverWolf.Client.Core.resources.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\default_extensions\ow-obs.opk	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\Resources\builtin_extensions\lbelkhgffoedffcamifhhgglceiibjdddpbbgcnj\Icon.ico	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfCrashHandler.exe.config	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\bin\api-ms-win-core-interlocked-l1-1-0.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\bin\api-ms-win-core-string-l1-1-0.dll	OverwolfSetup.exe
File created	C:\Program Files (x86)\Overwolf\0.309.0.14\OWClientOOPO.dll	OverwolfSetup.exe

Drops file in Windows directory 64 IoCs

description	ioc	Process
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_74004981\crl-set	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-bg.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-hi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-mul-ethi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-nb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-nl.hyb	msedgewebview2.exe
File opened for modification	C:\Windows\Installer\e5c2dce.msi	msiexec.exe
File opened for modification	C:\Windows\Microsoft.NET\Framework64\v4.0.30319\ngen.log	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_74004981\manifest.fingerprint	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-be.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-bn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-te.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-cy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-sl.hyb	msedgewebview2.exe
File created	C:\Windows\Installer\SourceHash{43B0D101-A022-48F4-9D04-BA404CEB1D53}	msiexec.exe
File created	C:\Windows\SystemTemp\~DFD6B0A8D423A565ED.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-ru.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-tk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_131204376\manifest.json	msedgewebview2.exe
File opened for modification	C:\Windows\Installer\	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-cs.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-da.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-or.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-pa.hyb	msedgewebview2.exe
File created	C:\Windows\Installer\inprogressinstallinfo.ipi	msiexec.exe
File created	C:\Windows\Installer\e5c2de0.msi	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-af.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-en-gb.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-ml.hyb	msedgewebview2.exe
File opened for modification	C:\Windows\Installer\MSI3418.tmp	msiexec.exe
File opened for modification	C:\Windows\Installer\e5c2de1.msi	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_1948452639\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-de-ch-1901.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-et.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-fr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-la.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-mr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\_metadata\verified_contents.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-en-us.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-hu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-as.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-gl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-gu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-hy.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-it.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-und-ethi.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\~DFB8FA5DA5FF5F1A0F.TMP	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-hr.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-nn.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-uk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-ga.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-mn-cyrl.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-pt.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-sk.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-sv.hyb	msedgewebview2.exe
File created	C:\Windows\Installer\e5c2de1.msi	msiexec.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_74004981\manifest.json	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-es.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-ka.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-cu.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-lv.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-ta.hyb	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_131204376\Microsoft.CognitiveServices.Speech.core.dll	msedgewebview2.exe
File created	C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_1948452639\manifest.fingerprint	msedgewebview2.exe

Executes dropped EXE 17 IoCs

pid	Process
3032	OWinstaller.exe
4828	OverwolfSetup.exe
4168	OverwolfUpdater.exe
3412	OverwolfUpdater.exe
4344	OverwolfTSHelper.exe
4128	checkRedist.exe
4420	OverwolfUpdater.exe
200	vcredist.exe
6076	vcredist.exe
616	VC_redist.x64.exe
3852	OverwolfUpdater.exe
6996	OverwolfLauncher.exe
7036	OverwolfLauncher.exe
5876	Overwolf.exe
5732	VC_redist.x64.exe
3528	VC_redist.x64.exe
3740	VC_redist.x64.exe

Launches sc.exe 10 IoCs

Sc.exe is a Windows utlilty to control services on the system.

pid	Process
4456	sc.exe
1184	sc.exe
2396	sc.exe
1252	sc.exe
2536	sc.exe
4352	sc.exe
3940	sc.exe
2088	sc.exe
3000	sc.exe
3324	sc.exe

Loads dropped DLL 62 IoCs

pid	Process
3124	Buff Achievement Tracker - Installer.exe
3124	Buff Achievement Tracker - Installer.exe
3124	Buff Achievement Tracker - Installer.exe
3124	Buff Achievement Tracker - Installer.exe
3124	Buff Achievement Tracker - Installer.exe
3124	Buff Achievement Tracker - Installer.exe
3124	Buff Achievement Tracker - Installer.exe
3032	OWinstaller.exe
3032	OWinstaller.exe
3032	OWinstaller.exe
3032	OWinstaller.exe
3032	OWinstaller.exe
3032	OWinstaller.exe
4828	OverwolfSetup.exe
4828	OverwolfSetup.exe
4828	OverwolfSetup.exe
4828	OverwolfSetup.exe
4828	OverwolfSetup.exe
4828	OverwolfSetup.exe
4828	OverwolfSetup.exe
4828	OverwolfSetup.exe
4828	OverwolfSetup.exe
4828	OverwolfSetup.exe
4828	OverwolfSetup.exe
4828	OverwolfSetup.exe
4344	OverwolfTSHelper.exe
4828	OverwolfSetup.exe
4828	OverwolfSetup.exe
4828	OverwolfSetup.exe
4828	OverwolfSetup.exe
6076	vcredist.exe
5308	chrome.exe
5308	chrome.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217

Checks whether UAC is enabled 1 TTPs 1 IoCs

defense_evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	OWinstaller.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 8 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Buff Achievement Tracker - Installer.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vcredist.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	OverwolfSetup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	vcredist.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	VC_redist.x64.exe

System Time Discovery 1 TTPs 2 IoCs

Adversary may gather the system time and/or time zone settings from a local or remote system.

discovery

System Time Discovery

T1124

pid	Process
6012	chrome.exe
5252	OverwolfBrowser.exe

Checks SCSI registry key(s) 3 TTPs 11 IoCs

SCSI information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\SnapshotDataCache = 534e41505041525401000000700000008ec7416a0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CDROM&VEN_DADY&PROD_HL-DT-ST_DVD+-RW\4&215468A5&0&010000	DxDiag.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\CompatibleIDs	DxDiag.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\DISK&VEN_WDC&PROD_WDS100T2B0A\4&215468A5&0&000000	DxDiag.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\HardwareID	DxDiag.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\CompatibleIDs	DxDiag.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\CdRom&Ven_DADY&Prod_HL-DT-ST_DVD+-RW\4&215468a5&0&010000\HardwareID	DxDiag.exe
Key queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters	vssvc.exe
Key created	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr	vssvc.exe
Set value (data)	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Enum\SCSI\Disk&Ven_WDC&Prod_WDS100T2B0A\4&215468a5&0&000000\Device Parameters\Partmgr\PartitionTableCache = 0000000004000000cb7618cb91d4c6300000000000000000000000000000000000000000000000000000000000000000000000000000000000001071020000000000c0120000000000000000000000002701010000883801cb7618cb0000000000001071020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d0830200000000006025c501000000000000000000000700010000e84101cb7618cb000000000000d08302000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030a9c701000000000000050000000000000000000000070001000098d4e3cb7618cb00000000000030a9c7010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000030a9cc0100000000000005000000000000000000000007000100009854e6cb7618cb00000000000030a9cc01000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000	vssvc.exe

Enumerates system info in registry 2 TTPs 6 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedgewebview2.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedgewebview2.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies data under HKEY_USERS 14 IoCs

description	ioc	Process
Set value (int)	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry\TraceTimeLast = "134332715154147531"	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\27\52C64B7E	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\27	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\28	msiexec.exe
Key deleted	\REGISTRY\USER\.DEFAULT\SOFTWARE\CLASSES\LOCAL SETTINGS\MUICACHE\28	msiexec.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Classes\Local Settings\MuiCache\29	msiexec.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\TPM\Telemetry	chrome.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe

Modifies registry class 64 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A65B8071-3BFE-4213-9A5B-491DA4461CA7}\ProgID	DxDiag.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3961296B-2DFE-45BD-8752-AB5FF712CC96}\ProxyStubClsid32	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{EBABE429-FE8E-4E35-97CF-9D3ED707696A}	OverwolfTSHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14\Version = "14.44.35211"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DA35375C-A06A-49AC-9136-31B6C102646B}\Version\ = "1.0"	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B0957D9C-810B-4DE0-9C5E-48DB09C5B413}\LocalServer32	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{37AE4F6C-9435-4E72-8C72-8A619C8C469B}	OverwolfTSHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{81A2F1FA-CAA8-4393-B70F-6F245AF97DC1}\TypeLib\Version = "1.0"	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\SourceList\Media	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\SourceList\Media\1 = ";"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject.1\CLSID\ = "{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}"	DxDiag.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID	DxDiag.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}\VersionIndependentProgID\ = "DxDiag.DxDiagClassObject"	DxDiag.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3961296B-2DFE-45BD-8752-AB5FF712CC96}\ = "IClientListResult"	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3961296B-2DFE-45BD-8752-AB5FF712CC96}\TypeLib	OverwolfTSHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\VC,redist.x64,amd64,14.44,bundle\DisplayName = "Microsoft Visual C++ 2015-2022 Redistributable (x64) - 14.44.35211"	VC_redist.x64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Dependencies\Microsoft.VS.VC_RuntimeMinimumVSU_amd64,v14\DisplayName = "Microsoft Visual C++ 2022 X64 Minimum Runtime - 14.44.35211"	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}\ProgID	DxDiag.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\OPK_File	OverwolfSetup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B0957D9C-810B-4DE0-9C5E-48DB09C5B413}\Version\ = "1.0"	OverwolfTSHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{EBDBC573-E9B2-41EC-867D-172ADEBC9554}\TypeLib\ = "{F3219881-CE98-4C8C-A472-280BD9A7D247}"	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{81A2F1FA-CAA8-4393-B70F-6F245AF97DC1}\ProxyStubClsid32	OverwolfTSHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3961296B-2DFE-45BD-8752-AB5FF712CC96}\TypeLib\Version = "1.0"	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagProvider	DxDiag.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject.1	DxDiag.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{37AE4F6C-9435-4E72-8C72-8A619C8C469B}\ = "ITSServerInfo"	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A65B8071-3BFE-4213-9A5B-491DA4461CA7}\ProgID	DxDiag.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagProvider\CLSID	DxDiag.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B0957D9C-810B-4DE0-9C5E-48DB09C5B413}\LocalServer32\ServerExecutable = "C:\\Program Files (x86)\\Common Files\\Overwolf\\Teamspeak\\OverwolfTSHelper.exe"	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5EDBC3E0-49BB-4E0D-860F-80037D14E735}	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{EBDBC573-E9B2-41EC-867D-172ADEBC9554}	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{37AE4F6C-9435-4E72-8C72-8A619C8C469B}	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3961296B-2DFE-45BD-8752-AB5FF712CC96}	OverwolfTSHelper.exe
Key created	\REGISTRY\USER\S-1-5-21-3986082593-3624157295-3514260330-1000_Classes\overwolf\shell	Overwolf.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8800A266DCF6DD54E97A86760485EA5D	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject\ = "DxDiagClassObject Class"	DxDiag.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{EBDBC573-E9B2-41EC-867D-172ADEBC9554}\TypeLib	OverwolfTSHelper.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\AuthorizedLUAApp = "0"	msiexec.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}\ProgID\ = "DxDiag.DxDiagClassObject.1"	DxDiag.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagProvider\CurVer	DxDiag.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{EEB1CAE3-D0B2-446E-AEDE-727AA9089A1B}\ForceRemove	DxDiag.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B0957D9C-810B-4DE0-9C5E-48DB09C5B413}\TypeLib	OverwolfTSHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagProvider.1\ = "DxDiagProvider Class"	DxDiag.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5EDBC3E0-49BB-4E0D-860F-80037D14E735}\TypeLib	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{EBABE429-FE8E-4E35-97CF-9D3ED707696A}\ProxyStubClsid32	OverwolfTSHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagProvider\ = "DxDiagProvider Class"	DxDiag.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{CC7899F5-56C9-44F1-9611-080BFC180FD5}\LocalServer32	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B0957D9C-810B-4DE0-9C5E-48DB09C5B413}	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\TypeLib\{F3219881-CE98-4C8C-A472-280BD9A7D247}\1.0\0\win64	OverwolfTSHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\OPK_File\shell\edit\ = "Edit OPK_File"	OverwolfSetup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{37AE4F6C-9435-4E72-8C72-8A619C8C469B}\TypeLib\Version = "1.0"	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\101D0B34220A4F84D940AB04C4BED135\SourceList\Net	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject.1\CLSID	DxDiag.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A65B8071-3BFE-4213-9A5B-491DA4461CA7}\InprocServer32	DxDiag.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{DA35375C-A06A-49AC-9136-31B6C102646B}\Programmable	OverwolfTSHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{EBDBC573-E9B2-41EC-867D-172ADEBC9554}\TypeLib\ = "{F3219881-CE98-4C8C-A472-280BD9A7D247}"	OverwolfTSHelper.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{3961296B-2DFE-45BD-8752-AB5FF712CC96}\TypeLib\Version = "1.0"	OverwolfTSHelper.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8800A266DCF6DD54E97A86760485EA5D\SourceList\Media	msiexec.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject	DxDiag.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\DxDiag.DxDiagClassObject\CurVer	DxDiag.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{5EDBC3E0-49BB-4E0D-860F-80037D14E735}\Version	OverwolfTSHelper.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\Interface\{EBABE429-FE8E-4E35-97CF-9D3ED707696A}\TypeLib	OverwolfTSHelper.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Installer\Products\8800A266DCF6DD54E97A86760485EA5D\SourceList\Net	msiexec.exe

Script User-Agent 2 IoCs

Uses user-agent string associated with script host/environment.

description	flow	ioc
HTTP User-Agent header	167	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)
HTTP User-Agent header	166	Mozilla/4.0 (compatible; Win32; WinHttp.WinHttpRequest.5)

Suspicious behavior: EnumeratesProcesses 62 IoCs

pid	Process
3032	OWinstaller.exe
3288	DxDiag.exe
3288	DxDiag.exe
5912	msedgewebview2.exe
5912	msedgewebview2.exe
3032	OWinstaller.exe
3032	OWinstaller.exe
3032	OWinstaller.exe
4168	OverwolfUpdater.exe
4168	OverwolfUpdater.exe
4168	OverwolfUpdater.exe
3412	OverwolfUpdater.exe
3412	OverwolfUpdater.exe
3412	OverwolfUpdater.exe
4420	OverwolfUpdater.exe
4420	OverwolfUpdater.exe
4420	OverwolfUpdater.exe
4420	OverwolfUpdater.exe
4420	OverwolfUpdater.exe
4420	OverwolfUpdater.exe
3032	OWinstaller.exe
3032	OWinstaller.exe
3032	OWinstaller.exe
3852	OverwolfUpdater.exe
3852	OverwolfUpdater.exe
3852	OverwolfUpdater.exe
2652	chrome.exe
2652	chrome.exe
3852	OverwolfUpdater.exe
3852	OverwolfUpdater.exe
3852	OverwolfUpdater.exe
6996	OverwolfLauncher.exe
6996	OverwolfLauncher.exe
6996	OverwolfLauncher.exe
6996	OverwolfLauncher.exe
6996	OverwolfLauncher.exe
6996	OverwolfLauncher.exe
7036	OverwolfLauncher.exe
7036	OverwolfLauncher.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5004	msiexec.exe
5004	msiexec.exe
5004	msiexec.exe
5004	msiexec.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
5876	Overwolf.exe
7068	DxDiag.exe
7068	DxDiag.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 17 IoCs

pid	Process
1224	msedgewebview2.exe
1224	msedgewebview2.exe
1224	msedgewebview2.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	3032	OWinstaller.exe
Token: SeSecurityPrivilege	3032	OWinstaller.exe
Token: SeDebugPrivilege	4168	OverwolfUpdater.exe
Token: SeDebugPrivilege	3412	OverwolfUpdater.exe
Token: SeSecurityPrivilege	2536	sc.exe
Token: SeSecurityPrivilege	2536	sc.exe
Token: SeSecurityPrivilege	4352	sc.exe
Token: SeSecurityPrivilege	4352	sc.exe
Token: SeSecurityPrivilege	3940	sc.exe
Token: SeSecurityPrivilege	3940	sc.exe
Token: SeSecurityPrivilege	4456	sc.exe
Token: SeSecurityPrivilege	4456	sc.exe
Token: SeSecurityPrivilege	2088	sc.exe
Token: SeSecurityPrivilege	2088	sc.exe
Token: SeSecurityPrivilege	1184	sc.exe
Token: SeSecurityPrivilege	1184	sc.exe
Token: SeSecurityPrivilege	3000	sc.exe
Token: SeSecurityPrivilege	3000	sc.exe
Token: SeSecurityPrivilege	3324	sc.exe
Token: SeSecurityPrivilege	3324	sc.exe
Token: SeSecurityPrivilege	2396	sc.exe
Token: SeSecurityPrivilege	2396	sc.exe
Token: SeSecurityPrivilege	1252	sc.exe
Token: SeSecurityPrivilege	1252	sc.exe
Token: SeDebugPrivilege	4420	OverwolfUpdater.exe
Token: SeBackupPrivilege	2536	vssvc.exe
Token: SeRestorePrivilege	2536	vssvc.exe
Token: SeAuditPrivilege	2536	vssvc.exe
Token: SeDebugPrivilege	3852	OverwolfUpdater.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe
Token: SeCreatePagefilePrivilege	2652	chrome.exe
Token: SeShutdownPrivilege	2652	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe

Suspicious use of SendNotifyMessage 16 IoCs

pid	Process
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe
2652	chrome.exe

Suspicious use of SetWindowsHookEx 3 IoCs

pid	Process
3032	OWinstaller.exe
3288	DxDiag.exe
5004	msiexec.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 3124 wrote to memory of 3032	3124	Buff Achievement Tracker - Installer.exe	89
PID 3032 wrote to memory of 3288	3032	OWinstaller.exe	91
PID 3032 wrote to memory of 1224	3032	OWinstaller.exe	92
PID 1224 wrote to memory of 5448	1224	msedgewebview2.exe	93
PID 1224 wrote to memory of 2664	1224	msedgewebview2.exe	94
PID 1224 wrote to memory of 2664	1224	msedgewebview2.exe	94
PID 1224 wrote to memory of 2664	1224	msedgewebview2.exe	94
PID 1224 wrote to memory of 2664	1224	msedgewebview2.exe	94
PID 1224 wrote to memory of 4636	1224	msedgewebview2.exe	95
PID 1224 wrote to memory of 3832	1224	msedgewebview2.exe	96
PID 1224 wrote to memory of 3832	1224	msedgewebview2.exe	96
PID 1224 wrote to memory of 3832	1224	msedgewebview2.exe	96
PID 1224 wrote to memory of 4272	1224	msedgewebview2.exe	97
PID 1224 wrote to memory of 4272	1224	msedgewebview2.exe	97
PID 1224 wrote to memory of 4272	1224	msedgewebview2.exe	97
PID 1224 wrote to memory of 4272	1224	msedgewebview2.exe	97
PID 1224 wrote to memory of 4272	1224	msedgewebview2.exe	97
PID 1224 wrote to memory of 1188	1224	msedgewebview2.exe	99
PID 1224 wrote to memory of 1188	1224	msedgewebview2.exe	99
PID 1224 wrote to memory of 1188	1224	msedgewebview2.exe	99
PID 1224 wrote to memory of 1188	1224	msedgewebview2.exe	99
PID 1224 wrote to memory of 1188	1224	msedgewebview2.exe	99
PID 1224 wrote to memory of 4544	1224	msedgewebview2.exe	100
PID 1224 wrote to memory of 4544	1224	msedgewebview2.exe	100
PID 1224 wrote to memory of 4544	1224	msedgewebview2.exe	100
PID 1224 wrote to memory of 4544	1224	msedgewebview2.exe	100
PID 1224 wrote to memory of 4544	1224	msedgewebview2.exe	100
PID 1224 wrote to memory of 4456	1224	msedgewebview2.exe	105
PID 1224 wrote to memory of 4456	1224	msedgewebview2.exe	105
PID 1224 wrote to memory of 4456	1224	msedgewebview2.exe	105
PID 1224 wrote to memory of 4996	1224	msedgewebview2.exe	106
PID 1224 wrote to memory of 4996	1224	msedgewebview2.exe	106
PID 1224 wrote to memory of 4996	1224	msedgewebview2.exe	106
PID 1224 wrote to memory of 1732	1224	msedgewebview2.exe	108
PID 1224 wrote to memory of 1732	1224	msedgewebview2.exe	108
PID 1224 wrote to memory of 1732	1224	msedgewebview2.exe	108
PID 1224 wrote to memory of 5912	1224	msedgewebview2.exe	109
PID 1224 wrote to memory of 5028	1224	msedgewebview2.exe	110
PID 1224 wrote to memory of 5028	1224	msedgewebview2.exe	110
PID 1224 wrote to memory of 5028	1224	msedgewebview2.exe	110
PID 3032 wrote to memory of 4828	3032	OWinstaller.exe	112
PID 4828 wrote to memory of 4168	4828	OverwolfSetup.exe	113
PID 4828 wrote to memory of 3412	4828	OverwolfSetup.exe	115
PID 4828 wrote to memory of 4344	4828	OverwolfSetup.exe	116
PID 4828 wrote to memory of 4128	4828	OverwolfSetup.exe	117
PID 3412 wrote to memory of 2536	3412	OverwolfUpdater.exe	151
PID 3412 wrote to memory of 4352	3412	OverwolfUpdater.exe	125
PID 3412 wrote to memory of 3940	3412	OverwolfUpdater.exe	127
PID 3412 wrote to memory of 4456	3412	OverwolfUpdater.exe	129
PID 3412 wrote to memory of 2088	3412	OverwolfUpdater.exe	163
PID 3412 wrote to memory of 1184	3412	OverwolfUpdater.exe	133
PID 3412 wrote to memory of 3000	3412	OverwolfUpdater.exe	135
PID 3412 wrote to memory of 3324	3412	OverwolfUpdater.exe	137
PID 3412 wrote to memory of 2396	3412	OverwolfUpdater.exe	139
PID 3412 wrote to memory of 1252	3412	OverwolfUpdater.exe	156
PID 4828 wrote to memory of 200	4828	OverwolfSetup.exe	145
PID 200 wrote to memory of 6076	200	vcredist.exe	146
PID 6076 wrote to memory of 616	6076	vcredist.exe	148
PID 3032 wrote to memory of 2652	3032	OWinstaller.exe	153
PID 2652 wrote to memory of 5080	2652	chrome.exe	154
PID 4420 wrote to memory of 3852	4420	OverwolfUpdater.exe	155
PID 2652 wrote to memory of 5308	2652	chrome.exe	157
PID 2652 wrote to memory of 6012	2652	chrome.exe	158
PID 2652 wrote to memory of 5308	2652	chrome.exe	157

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Users\Admin\AppData\Local\Temp\Buff Achievement Tracker - Installer.exe
"C:\Users\Admin\AppData\Local\Temp\Buff Achievement Tracker - Installer.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3124
- C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe
  "C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe" Sel=1&Partner=3762&Extension=caboggillkkpgkiokbjmgldfkedbfnpkgadakcdl&Name=Buff%20Achievement%20Tracker&Thanks=https%3A%2F%2Fbuff.game%2Fthank-you-page%2F&UtmSource=google&Extra=3e9a4fc963c14e8c84589bc44bba2efa&Browser=chrome -partnerCustomizationLevel 0 --app-name="Buff" -exepath C:\Users\Admin\AppData\Local\Temp\Buff Achievement Tracker - Installer.exe
  2⤵
  - Adds Run key to start application
  - Drops file in Program Files directory
  - Executes dropped EXE
  - Loads dropped DLL
  - Checks whether UAC is enabled
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of SetWindowsHookEx
  - Suspicious use of WriteProcessMemory
  PID:3032
- - C:\Windows\System32\DxDiag.exe
    "C:\Windows\System32\DxDiag.exe" /xC:\Users\Admin\AppData\Local\Overwolf\Temp\DxDiagOutput.xml
    3⤵
    - Drops file in System32 directory
    - Checks SCSI registry key(s)
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of SetWindowsHookEx
    PID:3288
- - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=OWinstaller.exe --webview-exe-version=2.310.0.2 --user-data-dir="C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --force-device-scale-factor=1 --high-dpi-support=1 --mojo-named-platform-channel-pipe=3032.4876.17636329560971688511 /pfhostedapp:c76664028ace51ceaa1de2388a8bfc0517947e96
    3⤵
    - Drops file in Windows directory
    - Enumerates system info in registry
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of WriteProcessMemory
    PID:1224
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView /prefetch:4 /pfhostedapp:c76664028ace51ceaa1de2388a8bfc0517947e96 --monitor-self-annotation=ptype=crashpad-handler --database=C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ffd78805fd8,0x7ffd78805fe4,0x7ffd78805ff0
      4⤵
      PID:5448
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView" --webview-exe-name=OWinstaller.exe --webview-exe-version=2.310.0.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1756 --field-trial-handle=1760,i,2033951707801793673,5195055444820689743,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:c76664028ace51ceaa1de2388a8bfc0517947e96
      4⤵
      PID:2664
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView" --webview-exe-name=OWinstaller.exe --webview-exe-version=2.310.0.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2160 --field-trial-handle=1760,i,2033951707801793673,5195055444820689743,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:c76664028ace51ceaa1de2388a8bfc0517947e96
      4⤵
      PID:4636
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView" --webview-exe-name=OWinstaller.exe --webview-exe-version=2.310.0.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2492 --field-trial-handle=1760,i,2033951707801793673,5195055444820689743,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:c76664028ace51ceaa1de2388a8bfc0517947e96
      4⤵
      PID:3832
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView" --webview-exe-name=OWinstaller.exe --webview-exe-version=2.310.0.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --force-device-scale-factor=1 --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3424 --field-trial-handle=1760,i,2033951707801793673,5195055444820689743,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:c76664028ace51ceaa1de2388a8bfc0517947e96 /prefetch:1
      4⤵
      PID:4272
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView" --webview-exe-name=OWinstaller.exe --webview-exe-version=2.310.0.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --force-device-scale-factor=1 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3968 --field-trial-handle=1760,i,2033951707801793673,5195055444820689743,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:c76664028ace51ceaa1de2388a8bfc0517947e96 /prefetch:1
      4⤵
      PID:1188
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView" --webview-exe-name=OWinstaller.exe --webview-exe-version=2.310.0.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --force-device-scale-factor=1 --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3976 --field-trial-handle=1760,i,2033951707801793673,5195055444820689743,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:c76664028ace51ceaa1de2388a8bfc0517947e96 /prefetch:1
      4⤵
      PID:4544
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView" --webview-exe-name=OWinstaller.exe --webview-exe-version=2.310.0.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4568 --field-trial-handle=1760,i,2033951707801793673,5195055444820689743,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:c76664028ace51ceaa1de2388a8bfc0517947e96
      4⤵
      PID:4456
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --noerrdialogs --user-data-dir="C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView" --webview-exe-name=OWinstaller.exe --webview-exe-version=2.310.0.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4768 --field-trial-handle=1760,i,2033951707801793673,5195055444820689743,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:c76664028ace51ceaa1de2388a8bfc0517947e96
      4⤵
      PID:4996
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView" --webview-exe-name=OWinstaller.exe --webview-exe-version=2.310.0.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4568 --field-trial-handle=1760,i,2033951707801793673,5195055444820689743,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:c76664028ace51ceaa1de2388a8bfc0517947e96
      4⤵
      PID:1732
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --noerrdialogs --user-data-dir="C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView" --webview-exe-name=OWinstaller.exe --webview-exe-version=2.310.0.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=4936 --field-trial-handle=1760,i,2033951707801793673,5195055444820689743,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:c76664028ace51ceaa1de2388a8bfc0517947e96
      4⤵
      Suspicious behavior: EnumeratesProcesses
      PID:5912
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView" --webview-exe-name=OWinstaller.exe --webview-exe-version=2.310.0.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=5012 --field-trial-handle=1760,i,2033951707801793673,5195055444820689743,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:c76664028ace51ceaa1de2388a8bfc0517947e96
      4⤵
      PID:5028
  - - C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
      "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView" --webview-exe-name=OWinstaller.exe --webview-exe-version=2.310.0.2 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=4088 --field-trial-handle=1760,i,2033951707801793673,5195055444820689743,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:c76664028ace51ceaa1de2388a8bfc0517947e96
      4⤵
      PID:6724
- - C:\ProgramData\Overwolf\Setup\0.309.0.14\OverwolfSetup.exe
    "C:\ProgramData\Overwolf\Setup\0.309.0.14\OverwolfSetup.exe" /S "/TargetDir=C:\Program Files (x86)\Overwolf\" -ignoredotnet
    3⤵
    - Downloads MZ/PE file
    - Drops file in Program Files directory
    - Executes dropped EXE
    - Loads dropped DLL
    - System Location Discovery: System Language Discovery
    - Modifies registry class
    - Suspicious use of WriteProcessMemory
    PID:4828
  - - C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe
      "C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe" /UpdateFWRules "C:\Program Files (x86)\Overwolf\\0.309.0.14\OverwolfBrowser.exe"
      4⤵
      Drops file in Program Files directory
      Executes dropped EXE
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      PID:4168
  - - C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe
      "C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe" /Register
      4⤵
      Executes dropped EXE
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of WriteProcessMemory
      PID:3412
    - - C:\Windows\SYSTEM32\sc.exe
        
        "sc" sdshow OverwolfUpdater
        5⤵
        Launches sc.exe
        Suspicious use of AdjustPrivilegeToken
        
        PID:2536
    - - C:\Windows\SYSTEM32\sc.exe
        
        "sc" sdset OverwolfUpdater D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RPWPCR;;;S-1-5-18)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
        5⤵
        Launches sc.exe
        Suspicious use of AdjustPrivilegeToken
        
        PID:4352
    - - C:\Windows\SYSTEM32\sc.exe
        
        "sc" sdshow OverwolfUpdater
        5⤵
        Launches sc.exe
        Suspicious use of AdjustPrivilegeToken
        
        PID:3940
    - - C:\Windows\SYSTEM32\sc.exe
        
        "sc" sdset OverwolfUpdater D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RPWPCR;;;SY)(A;;RPWPCR;;;S-1-5-19)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
        5⤵
        Launches sc.exe
        Suspicious use of AdjustPrivilegeToken
        
        PID:4456
    - - C:\Windows\SYSTEM32\sc.exe
        
        "sc" sdshow OverwolfUpdater
        5⤵
        Launches sc.exe
        Suspicious use of AdjustPrivilegeToken
        
        PID:2088
    - - C:\Windows\SYSTEM32\sc.exe
        
        "sc" sdset OverwolfUpdater D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RPWPCR;;;SY)(A;;RPWPCR;;;LS)(A;;RPWPCR;;;S-1-5-20)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
        5⤵
        Launches sc.exe
        Suspicious use of AdjustPrivilegeToken
        
        PID:1184
    - - C:\Windows\SYSTEM32\sc.exe
        
        "sc" sdshow OverwolfUpdater
        5⤵
        Launches sc.exe
        Suspicious use of AdjustPrivilegeToken
        
        PID:3000
    - - C:\Windows\SYSTEM32\sc.exe
        
        "sc" sdset OverwolfUpdater D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RPWPCR;;;SY)(A;;RPWPCR;;;LS)(A;;RPWPCR;;;NS)(A;;RPWPCR;;;S-1-5-21-3986082593-3624157295-3514260330-1000)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
        5⤵
        Launches sc.exe
        Suspicious use of AdjustPrivilegeToken
        
        PID:3324
    - - C:\Windows\SYSTEM32\sc.exe
        
        "sc" sdshow OverwolfUpdater
        5⤵
        Launches sc.exe
        Suspicious use of AdjustPrivilegeToken
        
        PID:2396
    - - C:\Windows\SYSTEM32\sc.exe
        
        "sc" sdset OverwolfUpdater D:(A;;CCLCSWRPWPDTLOCRRC;;;SY)(A;;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;BA)(A;;CCLCSWLOCRRC;;;IU)(A;;CCLCSWLOCRRC;;;SU)(A;;RPWPCR;;;SY)(A;;RPWPCR;;;LS)(A;;RPWPCR;;;NS)(A;;RPWPCR;;;S-1-5-21-3986082593-3624157295-3514260330-1000)(A;;RPWPCR;;;S-1-1-0)S:(AU;FA;CCDCLCSWRPWPDTLOCRSDRCWDWO;;;WD)
        5⤵
        Launches sc.exe
        Suspicious use of AdjustPrivilegeToken
        
        PID:1252
  - - C:\Program Files (x86)\Common Files\Overwolf\Teamspeak\OverwolfTSHelper.exe
      "C:\Program Files (x86)\Common Files\Overwolf\Teamspeak\OverwolfTSHelper.exe" /RegServer
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      Modifies registry class
      PID:4344
  - - C:\ProgramData\Overwolf\Setup\checkRedist.exe
      "C:\ProgramData\Overwolf\Setup\checkRedist.exe"
      4⤵
      Executes dropped EXE
      PID:4128
  - - C:\ProgramData\Overwolf\Setup\vcredist.exe
      "C:\ProgramData\Overwolf\Setup\vcredist.exe" /q /norestart /repair
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      Suspicious use of WriteProcessMemory
      PID:200
    - - C:\Windows\Temp\{1462BEA3-C2CF-44C7-B8F8-EC56698A35FA}\.cr\vcredist.exe
        
        "C:\Windows\Temp\{1462BEA3-C2CF-44C7-B8F8-EC56698A35FA}\.cr\vcredist.exe" -burn.clean.room="C:\ProgramData\Overwolf\Setup\vcredist.exe" -burn.filehandle.attached=764 -burn.filehandle.self=768 /q /norestart /repair
        5⤵
        Executes dropped EXE
        Loads dropped DLL
        System Location Discovery: System Language Discovery
        Suspicious use of WriteProcessMemory
        
        PID:6076
      - C:\Windows\Temp\{0D9CCCDB-74E2-4A58-8572-C271CE98FE23}\.be\VC_redist.x64.exe
        
        "C:\Windows\Temp\{0D9CCCDB-74E2-4A58-8572-C271CE98FE23}\.be\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{C7BCAB7A-7ECD-47C6-8219-6B1EC1D8895E} {07423C96-2E93-499E-B389-ECBE03B44183} 6076
        6⤵
        Adds Run key to start application
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Modifies registry class
        
        PID:616
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://buff.game/thank-you-page/?muid=2c546d71-8b5c-44e9-85de-5db8771accf1&extensionId=caboggillkkpgkiokbjmgldfkedbfnpkgadakcdl"
    3⤵
    - Enumerates system info in registry
    - Modifies data under HKEY_USERS
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of WriteProcessMemory
    PID:2652
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=140.0.7339.81 --initial-client-data=0x128,0x12c,0x130,0x104,0x134,0x7ffd6f40c728,0x7ffd6f40c734,0x7ffd6f40c740
      4⤵
      PID:5080
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --no-pre-read-main-dll --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=1672,i,13314825276888588069,1662863151675052833,262144 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=2036 /prefetch:2
      4⤵
      Loads dropped DLL
      PID:5308
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --force-high-res-timeticks=disabled --metrics-shmem-handle=1492,i,7921236605348020254,5237475529484522169,524288 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=2188 /prefetch:11
      4⤵
      System Time Discovery
      PID:6012
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=2256,i,12297627730087121701,15548638783515021413,524288 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=3200 /prefetch:13
      4⤵
      PID:4668
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=3060,i,14873520598317167016,16896920471851407661,2097152 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=3252 /prefetch:1
      4⤵
      PID:2796
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=3064,i,2103015399605489379,2503830578425840333,2097152 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=3284 /prefetch:1
      4⤵
      PID:3016
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=4544,i,9046436670937807723,8299555476638374816,524288 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=4556 /prefetch:14
      4⤵
      PID:3648
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --metrics-shmem-handle=4696,i,16418094752193808595,16734836813180085039,2097152 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=4576 /prefetch:1
      4⤵
      PID:2088
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=9 --metrics-shmem-handle=4880,i,15186660883802146393,11353632686326037778,2097152 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=4868 /prefetch:1
      4⤵
      PID:6196
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --metrics-shmem-handle=4924,i,2961147936123251150,7720097379555092650,2097152 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=4944 /prefetch:1
      4⤵
      PID:6204
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=11 --metrics-shmem-handle=5448,i,2251909033630522658,301979743137182326,2097152 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=5444 /prefetch:1
      4⤵
      PID:6356
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5832,i,17093205954621910275,3297661664394108878,524288 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=5840 /prefetch:14
      4⤵
      PID:7104
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=6156,i,3668562335518807866,6476373001656182554,2097152 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=6168 /prefetch:1
      4⤵
      PID:6228
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=14 --metrics-shmem-handle=6200,i,5809684454438713319,655077889309199070,2097152 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=6212 /prefetch:1
      4⤵
      PID:5136
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=15 --metrics-shmem-handle=6156,i,2413837492635284931,9862753896600819996,2097152 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=6332 /prefetch:1
      4⤵
      PID:6256
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=16 --metrics-shmem-handle=6148,i,12512224552363473287,11278057958598072994,2097152 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=6200 /prefetch:1
      4⤵
      PID:6528
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --metrics-shmem-handle=6484,i,7542914165553644612,13763298335004552956,2097152 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=6720 /prefetch:1
      4⤵
      PID:6696
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=18 --metrics-shmem-handle=6592,i,4994880835122616168,17877436887131225153,2097152 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=6148 /prefetch:1
      4⤵
      PID:6828
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=19 --metrics-shmem-handle=7004,i,12372141002981018059,5533294810517102212,2097152 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=6484 /prefetch:1
      4⤵
      PID:6876
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=20 --metrics-shmem-handle=7140,i,2947379009339861568,9361575535694261522,2097152 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=6592 /prefetch:1
      4⤵
      PID:1252
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=7108,i,349683189187589714,570311410857940712,524288 --field-trial-handle=2044,i,13512166154986096095,17157307276630014464,262144 --variations-seed-version --mojo-platform-channel-handle=6708 /prefetch:14
      4⤵
      PID:6224

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:3152

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:5464

C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe
"C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe" /RunningFrom SCM
1⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4420
- C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe
  "C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe" /RunningFrom FromService /SelfLaunched
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:3852

C:\Windows\system32\vssvc.exe
C:\Windows\system32\vssvc.exe
1⤵
- Checks SCSI registry key(s)
- Suspicious use of AdjustPrivilegeToken
PID:2536

C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\140.0.7339.81\elevation_service.exe"
1⤵
PID:1252

C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe
"C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe"
1⤵
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
PID:6996
- C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe
  -cs
  2⤵
  - Executes dropped EXE
  - Suspicious behavior: EnumeratesProcesses
  PID:7036
- C:\Program Files (x86)\Overwolf\Overwolf.exe
  "C:\Program Files (x86)\Overwolf\OverwolfLauncher.exe" -launchapp ojgnfnbjckbpfaciphphehonokbggjhpnnoafack
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  PID:5876
- - C:\Windows\System32\DxDiag.exe
    "C:\Windows\System32\DxDiag.exe" /xC:\Users\Admin\AppData\Local\Overwolf\Temp\DxDiagOutput.xml
    3⤵
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    PID:7068
- - C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe
    "C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe" --type=crashpad-handler --no-rate-limit --max-db-size=10 --max-db-age=5 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Overwolf\User Data\Crashpad" --url=http://localhost:54288/ --annotation=platform=win64 --annotation=product=Overwolf --annotation=version=0.309.0.14 --initial-client-data=0xeac,0xe94,0xeb0,0xea4,0xea0,0x7ffd7e504148,0x7ffd7e504154,0x7ffd7e504160
    3⤵
    PID:1184
- - C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe
    "C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe" --type=gpu-process --no-sandbox --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache" --locales-dir-path="C:\Program Files (x86)\Overwolf\0.309.0.14\Locales" --log-severity=disable --libcef-path="C:\Program Files (x86)\Overwolf\0.309.0.14\libcef.DLL" --remote-allow-origins=* --ow-domain=www.overwolf.com --ow-process-id=5876 --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4896,i,13013680741154133443,14800693842891780063,262144 --field-trial-handle=5648,i,17082682974218036536,13730359823418470577,262144 --enable-features=AudioVideoTracks,IdleDetection --disable-features=HeavyAdIntervention,HeavyAdPrivacyMitigations,LocalNetworkAccessChecks,PictureInPicture,ProcessSharingWithDefaultSiteInstances,SpareRendererForSitePerProcess,UseModernMediaControls,WinUseBrowserSpellChecker --variations-seed-version --trace-process-track-uuid=3190708988185955192 --enable-logging=handle --log-file=5652 --mojo-platform-channel-handle=5644 /prefetch:2
    3⤵
    PID:4112
- - C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe
    "C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" --no-pre-read-main-dll --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache" --locales-dir-path="C:\Program Files (x86)\Overwolf\0.309.0.14\Locales" --log-severity=disable --libcef-path="C:\Program Files (x86)\Overwolf\0.309.0.14\libcef.DLL" --remote-allow-origins=* --ow-domain=www.overwolf.com --ow-process-id=5876 --metrics-shmem-handle=5140,i,4920986122751723705,6360277591118690146,524288 --field-trial-handle=5648,i,17082682974218036536,13730359823418470577,262144 --enable-features=AudioVideoTracks,IdleDetection --disable-features=HeavyAdIntervention,HeavyAdPrivacyMitigations,LocalNetworkAccessChecks,PictureInPicture,ProcessSharingWithDefaultSiteInstances,SpareRendererForSitePerProcess,UseModernMediaControls,WinUseBrowserSpellChecker --variations-seed-version --trace-process-track-uuid=3190708989122997041 --enable-logging=handle --log-file=6072 --mojo-platform-channel-handle=6068 /prefetch:11
    3⤵
    - System Time Discovery
    PID:5252
- - C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe
    "C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --no-sandbox --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" --no-pre-read-main-dll --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache" --locales-dir-path="C:\Program Files (x86)\Overwolf\0.309.0.14\Locales" --log-severity=disable --libcef-path="C:\Program Files (x86)\Overwolf\0.309.0.14\libcef.DLL" --remote-allow-origins=* --ow-domain=www.overwolf.com --ow-process-id=5876 --metrics-shmem-handle=5224,i,17106467324019936990,1833993015626758760,524288 --field-trial-handle=5648,i,17082682974218036536,13730359823418470577,262144 --enable-features=AudioVideoTracks,IdleDetection --disable-features=HeavyAdIntervention,HeavyAdPrivacyMitigations,LocalNetworkAccessChecks,PictureInPicture,ProcessSharingWithDefaultSiteInstances,SpareRendererForSitePerProcess,UseModernMediaControls,WinUseBrowserSpellChecker --variations-seed-version --trace-process-track-uuid=3190708990060038890 --enable-logging=handle --log-file=6104 --mojo-platform-channel-handle=6080 /prefetch:13
    3⤵
    PID:3396
- - C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe
    "C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe" --type=ow-helper --command=Extract7Z --ow-process-id=5876 --file=C:\Users\Admin\AppData\Local\Overwolf\Temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\1.309.1-to-1.311.2.diff.7z --output-folder=C:\Users\Admin\AppData\Local\Overwolf\Temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff
    3⤵
    PID:1804
- - C:\Program Files (x86)\Overwolf\0.309.0.14\owver64.exe
    "C:\Program Files (x86)\Overwolf\0.309.0.14\owver64.exe" -apply "C:\Users\Admin\AppData\Local\Overwolf\Temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\app_uncompress.pkg" "C:\Users\Admin\AppData\Local\Overwolf\Temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\1.309.1-to-1.311.2.diff" "C:\Users\Admin\AppData\Local\Overwolf\Temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\uncompressed_newapp.pkg"
    3⤵
    PID:6976
- - C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe
    "C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache" --locales-dir-path="C:\Program Files (x86)\Overwolf\0.309.0.14\Locales" --log-severity=disable --libcef-path="C:\Program Files (x86)\Overwolf\0.309.0.14\libcef.DLL" --uncaught-exception-stack-size=20 --owapp="Overwolf Remote Configurations - index" --ow-enable-features=osr-software-rendering,use-override-ad-domain-as-referrer,cef-native-ua,use-www-domain,backup-cef-cache,extension-validation,read-opk-from-memory --uid=ppagiehdogdjlomggmoejfamedbjggdggnjbilhe --ow-allow-internal --ow-permissions=64 --remote-allow-origins=* --ow-domain=www.overwolf.com --enable-owc --uid=ppagiehdogdjlomggmoejfamedbjggdggnjbilhe --ow-process-id=5876 --no-sandbox --js-flags=--expose-gc --enable-blink-features=AudioVideoTracks --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --metrics-shmem-handle=8080,i,1632626941220225058,8775391302332180672,2097152 --field-trial-handle=5648,i,17082682974218036536,13730359823418470577,262144 --enable-features=AudioVideoTracks,IdleDetection --disable-features=HeavyAdIntervention,HeavyAdPrivacyMitigations,LocalNetworkAccessChecks,PictureInPicture,ProcessSharingWithDefaultSiteInstances,SpareRendererForSitePerProcess,UseModernMediaControls,WinUseBrowserSpellChecker --variations-seed-version --trace-process-track-uuid=3190708990997080739 --enable-logging=handle --log-file=8092 --mojo-platform-channel-handle=8088 /prefetch:1
    3⤵
    PID:4860
- - C:\Program Files (x86)\Common Files\Overwolf\0.309.0.14\OverwolfHelper.exe
    "C:\Program Files (x86)\Common Files\Overwolf\0.309.0.14\OverwolfHelper.exe" "path=C:\Program Files (x86)\Overwolf\0.309.0.14\win32\OWExplorerLauncher.dll pid=5876 gamelist=C:\Users\Admin\AppData\Local\Overwolf\Temp\gamelist.json"
    3⤵
    PID:4360
- - C:\Program Files (x86)\Common Files\Overwolf\0.309.0.14\OverwolfHelper64.exe
    "C:\Program Files (x86)\Common Files\Overwolf\0.309.0.14\OverwolfHelper64.exe" "path=C:\Program Files (x86)\Overwolf\0.309.0.14\OWExplorerLauncher.dll pid=5876 gamelist=C:\Users\Admin\AppData\Local\Overwolf\Temp\gamelist.json"
    3⤵
    PID:1876
- - C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe
    "C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" --force-high-res-timeticks=disabled --start-stack-profiler --user-data-dir="C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache" --locales-dir-path="C:\Program Files (x86)\Overwolf\0.309.0.14\Locales" --log-severity=disable --libcef-path="C:\Program Files (x86)\Overwolf\0.309.0.14\libcef.DLL" --uncaught-exception-stack-size=20 --owapp="BUFF - index" --ow-enable-features=osr-software-rendering,use-override-ad-domain-as-referrer,cef-native-ua,use-www-domain,backup-cef-cache,extension-validation,read-opk-from-memory --uid=caboggillkkpgkiokbjmgldfkedbfnpkgadakcdl --ow-permissions=666096 --remote-allow-origins=* --ow-domain=www.overwolf.com --enable-owc --uid=caboggillkkpgkiokbjmgldfkedbfnpkgadakcdl --ow-process-id=5876 --no-sandbox --js-flags=--expose-gc --disable-gpu-compositing --enable-blink-features=AudioVideoTracks --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --metrics-shmem-handle=8588,i,3613681439541789361,12478557413562162671,2097152 --field-trial-handle=5648,i,17082682974218036536,13730359823418470577,262144 --enable-features=AudioVideoTracks,IdleDetection --disable-features=HeavyAdIntervention,HeavyAdPrivacyMitigations,LocalNetworkAccessChecks,PictureInPicture,ProcessSharingWithDefaultSiteInstances,SpareRendererForSitePerProcess,UseModernMediaControls,WinUseBrowserSpellChecker --variations-seed-version --trace-process-track-uuid=3190708991934122588 --enable-logging=handle --log-file=8596 --mojo-platform-channel-handle=8540 /prefetch:1
    3⤵
    PID:1356
- - C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe
    "C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache" --locales-dir-path="C:\Program Files (x86)\Overwolf\0.309.0.14\Locales" --log-severity=disable --libcef-path="C:\Program Files (x86)\Overwolf\0.309.0.14\libcef.DLL" --uncaught-exception-stack-size=20 --owapp="Overwolf General GameEvents Provider - index.html" --ow-enable-features=osr-software-rendering,use-override-ad-domain-as-referrer,cef-native-ua,use-www-domain,backup-cef-cache,extension-validation,read-opk-from-memory --owtk=2044.18446744073187978290 --uid=ggfmakpbllghoepnmfelddbminamnbmfelbahfdp --ow-allow-internal --ow-permissions=272528 --remote-allow-origins=* --ow-domain=www.overwolf.com --enable-owc --uid=ggfmakpbllghoepnmfelddbminamnbmfelbahfdp --ow-process-id=5876 --no-sandbox --js-flags=--expose-gc --disable-gpu-compositing --enable-blink-features=AudioVideoTracks --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --metrics-shmem-handle=8856,i,4178071846160503750,14704908166416997159,2097152 --field-trial-handle=5648,i,17082682974218036536,13730359823418470577,262144 --enable-features=AudioVideoTracks,IdleDetection --disable-features=HeavyAdIntervention,HeavyAdPrivacyMitigations,LocalNetworkAccessChecks,PictureInPicture,ProcessSharingWithDefaultSiteInstances,SpareRendererForSitePerProcess,UseModernMediaControls,WinUseBrowserSpellChecker --variations-seed-version --trace-process-track-uuid=3190708992871164437 --enable-logging=handle --log-file=8872 --mojo-platform-channel-handle=8868 /prefetch:1
    3⤵
    PID:3276
- - C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe
    "C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --no-sandbox --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache" --locales-dir-path="C:\Program Files (x86)\Overwolf\0.309.0.14\Locales" --log-severity=disable --libcef-path="C:\Program Files (x86)\Overwolf\0.309.0.14\libcef.DLL" --remote-allow-origins=* --ow-domain=www.overwolf.com --ow-process-id=5876 --metrics-shmem-handle=8088,i,15098621118041620565,12218599342457354930,524288 --field-trial-handle=5648,i,17082682974218036536,13730359823418470577,262144 --enable-features=AudioVideoTracks,IdleDetection --disable-features=HeavyAdIntervention,HeavyAdPrivacyMitigations,LocalNetworkAccessChecks,PictureInPicture,ProcessSharingWithDefaultSiteInstances,SpareRendererForSitePerProcess,UseModernMediaControls,WinUseBrowserSpellChecker --variations-seed-version --trace-process-track-uuid=3190708997556373682 --enable-logging=handle --log-file=11164 --mojo-platform-channel-handle=11160 /prefetch:14
    3⤵
    PID:6236
- - C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe
    "C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe" --type=renderer --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache" --locales-dir-path="C:\Program Files (x86)\Overwolf\0.309.0.14\Locales" --log-severity=disable --libcef-path="C:\Program Files (x86)\Overwolf\0.309.0.14\libcef.DLL" --uncaught-exception-stack-size=20 --owapp="Overwolf Remote Configurations - index" --ow-enable-features=osr-software-rendering,use-override-ad-domain-as-referrer,cef-native-ua,use-www-domain,backup-cef-cache,extension-validation,read-opk-from-memory --uid=ppagiehdogdjlomggmoejfamedbjggdggnjbilhe --ow-allow-internal --ow-permissions=64 --remote-allow-origins=* --ow-domain=www.overwolf.com --enable-owc --uid=ppagiehdogdjlomggmoejfamedbjggdggnjbilhe --ow-process-id=5876 --no-sandbox --js-flags=--expose-gc --disable-gpu-compositing --enable-blink-features=AudioVideoTracks --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=13 --metrics-shmem-handle=11128,i,2244871855172790197,9166434495858412726,2097152 --field-trial-handle=5648,i,17082682974218036536,13730359823418470577,262144 --enable-features=AudioVideoTracks,IdleDetection --disable-features=HeavyAdIntervention,HeavyAdPrivacyMitigations,LocalNetworkAccessChecks,PictureInPicture,ProcessSharingWithDefaultSiteInstances,SpareRendererForSitePerProcess,UseModernMediaControls,WinUseBrowserSpellChecker --variations-seed-version --trace-process-track-uuid=3190708998493415531 --enable-logging=handle --log-file=11172 --mojo-platform-channel-handle=11168 /prefetch:1
    3⤵
    PID:6864
- - C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\ow-obs.exe
    "C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\ow-obs.exe" --channel=5876.1.8512
    3⤵
    PID:2408
  - - C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\obs-qsv-test.exe
      "C:/Users/Admin/AppData/Local/Overwolf/Extensions/ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb/270.0.25/obs/bin/64bit/obs-qsv-test.exe" 4d18 4dac
      4⤵
      PID:6976
  - - C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\win-capture\get-graphics-offsets64.exe
      "../../data/obs-plugins/win-capture/get-graphics-offsets64.exe"
      4⤵
      PID:3584
  - - C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\win-capture\get-graphics-offsets32.exe
      "../../data/obs-plugins/win-capture/get-graphics-offsets32.exe"
      4⤵
      PID:2000
- - C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe
    "C:\Program Files (x86)\Overwolf\0.309.0.14\OverwolfBrowser.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --no-sandbox --user-agent="Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/142.0.0.0 Safari/537.36" --force-high-res-timeticks=disabled --user-data-dir="C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache" --locales-dir-path="C:\Program Files (x86)\Overwolf\0.309.0.14\Locales" --log-severity=disable --libcef-path="C:\Program Files (x86)\Overwolf\0.309.0.14\libcef.DLL" --remote-allow-origins=* --ow-domain=www.overwolf.com --ow-process-id=5876 --metrics-shmem-handle=2112,i,12712347897962635506,2415841567660072998,524288 --field-trial-handle=5648,i,17082682974218036536,13730359823418470577,262144 --enable-features=AudioVideoTracks,IdleDetection --disable-features=HeavyAdIntervention,HeavyAdPrivacyMitigations,LocalNetworkAccessChecks,PictureInPicture,ProcessSharingWithDefaultSiteInstances,SpareRendererForSitePerProcess,UseModernMediaControls,WinUseBrowserSpellChecker --variations-seed-version --trace-process-track-uuid=3190708999430457380 --enable-logging=handle --log-file=6596 --mojo-platform-channel-handle=6600 /prefetch:14
    3⤵
    PID:252

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:7100

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:5028

C:\Windows\system32\srtasks.exe
C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
1⤵
PID:6792
- C:\Windows\System32\Conhost.exe
  \??\C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
  2⤵
  PID:6724

C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
"C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" /burn.runonce
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:5732
- C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
  "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260907171808.log"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:3528
- - C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
    "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -burn.filehandle.attached=564 -burn.filehandle.self=584 /quiet /norestart /burn.log.append "C:\Users\Admin\AppData\Local\Temp\dd_vcredist_amd64_20260907171808.log"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    PID:3740
  - - C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe
      "C:\ProgramData\Package Cache\{d8bbe9f9-7c5b-42c6-b715-9ee898a2e515}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{53041CF3-21A6-448D-B5B4-4C3FDC01E36B} {DEAA04C1-EF32-4644-8755-32774AA6DBD5} 3740
      4⤵
      PID:1712
    - - C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
        
        "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -uninstall -quiet -burn.related.upgrade -burn.ancestors={d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} -burn.filehandle.self=1016 -burn.embedded BurnPipe.{40C44D57-3EC2-4642-BE34-00098B2D2EBC} {B7924324-E287-407C-A16F-5963DB42614A} 1712
        5⤵
        
        PID:4532
      - C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
        
        "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.clean.room="C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -burn.filehandle.attached=560 -burn.filehandle.self=580 -uninstall -quiet -burn.related.upgrade -burn.ancestors={d8bbe9f9-7c5b-42c6-b715-9ee898a2e515} -burn.filehandle.self=1016 -burn.embedded BurnPipe.{40C44D57-3EC2-4642-BE34-00098B2D2EBC} {B7924324-E287-407C-A16F-5963DB42614A} 1712
        6⤵
        
        PID:5904
        
        C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe
        
        "C:\ProgramData\Package Cache\{57a73df6-4ba9-4c1d-bbbb-517289ff6c13}\VC_redist.x64.exe" -q -burn.elevated BurnPipe.{3C74090D-C1A4-497E-87F3-4871B346925C} {A7A5D021-8466-42A8-9DA1-B8F82C28C147} 5904
        7⤵
        
        PID:5844

C:\Windows\system32\msiexec.exe
C:\Windows\system32\msiexec.exe /V
1⤵
- Enumerates connected drives
- Drops file in System32 directory
- Drops file in Windows directory
- Modifies data under HKEY_USERS
- Modifies registry class
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
PID:5004

C:\Program Files (x86)\Common Files\Overwolf\Teamspeak\OverwolfTSHelper.exe
"C:\Program Files (x86)\Common Files\Overwolf\Teamspeak\OverwolfTSHelper.exe" -Embedding
1⤵
PID:6972

C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe
"C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe" /RunningFrom SCM
1⤵
PID:1920
- C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe
  "C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.exe" /RunningFrom FromService /SelfLaunched /OriginRunningFrom Overwolf
  2⤵
  PID:2716

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Browser Information Discovery

T1217

Network Share Discovery

T1135

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

System Time Discovery

T1124

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

e5c2dd3.rbs

Path C:\Config.Msi\e5c2dd3.rbs
Size 19KB
SHA256 acc8a85b573a286cb916846a886a70404b752bb35a477886796d79cd3b039112
MD5 af9e5fb3616b8003bf603cc6dbfb70a6
SHA1 6a73ca27584f3e4104a76080330b8a5cd29b151c
SHA512 c6dc5086f6bcf9191b82a117f304f9939c5a1fb1e048e976f07e39dd9591196d415e2bffd367f2528f2643b8f0eb10d9d5593a7e5803daf345dc7572beab8d13
SSDEEP 192:5MR+1kRx15dXcFUADIc1f+W+y4+ogPPoy7:5MR+6RxTeC81f/coV7
TLSH
T132920C42A680C9D2D8766B30CD631B657BB6DBD5A350438B40DC94308FA3BCA2F9D69D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5c2ddf.rbs

Path C:\Config.Msi\e5c2ddf.rbs
Size 19KB
SHA256 8561d03006f5d8020510528879c2045c826fd3c65333d9141ca1e017c9cd7349
MD5 ececaef03293d7eccff06c4d57e38e94
SHA1 78e1b0c0eca7801845988bceaba33e0846d2b017
SHA512 b8a7a8f3ee5a927776a1a19e6df803522ab1c1b98be9f8139acf58dc99c610c40c74e5e628c0935e44af5c095591b67b80f0d86c452d30be9f21dc487e1ceb9c
SSDEEP 384:5OOGnJXMjZ7Up+BFqiO6F1gJG0uJG0GoaOD8Lfv/8c3zMZxq+nNwzQ6R:5OOGnJXMjZ7Up+BFIVGFGx
TLSH
T11592CB026640C5E3D8A62B70DD4B67243BB5D7CAA355A38B41DCC1308FA77CA7F8D24A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5c2de6.rbs

Path C:\Config.Msi\e5c2de6.rbs
Size 21KB
SHA256 a43cf2717b5a82d796c38220fa543a813ca10fafc143957a45ea7aa715490c10
MD5 63d486e1e24554ac43e28e559c194cda
SHA1 4ba806cfb5c8b2a7500e932b92961653898d4089
SHA512 1157d15caffb49bd132ef7a188fabbf7bf893ef6d6679c71d53e8dbfee6332f0bcbb67f2fdd6c01bbc85be36efddc18767912edc0a87e3e700909b177e33c9f9
SSDEEP 384:rORVGRAnAKxNAUhUC7xJjrMNYPzIbSfUIYxUcHUleXhkP:r+MwAKhkmn
TLSH
T179A21F03768099E3D86227B0DD671BA47B72D7D99354434710ECD2388F633C72F5AA99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5c2df5.rbs

Path C:\Config.Msi\e5c2df5.rbs
Size 21KB
SHA256 f43dae1ea9d630ea2174ab5ed727f8ad1a3ab4ab225ff1edc6a294a38a28b7f8
MD5 4aace63591fa9806497f2df304fc011c
SHA1 1481e3686c83efb76874c763fdb4550260e50293
SHA512 03aafafc13ce89763e80bbee12a0d2aa8497f4b5b22b553a49dfd6abc29343a5214d5d52a18cb2a991898cfd6fb3c5140695887aa6330fbefcbd130fbbddf44c
SSDEEP 384:rrqvDIAZxEth/phSYjK4WbJGwazsalckU72eC6jJkE5KvJxUJxsr76c+0dWg:rsDIAZxEth/phSYujbJpTicyr76/0dP
TLSH
T10EA2FE42BA40D6D3D8A62B70CD975B2437B5D3DAA755434B00CC90348F937DA2F9AACB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OverwolfUpdater.InstallLog

Path C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.InstallLog
Size 317B
SHA256 b8dd46ab2b3696bc36511f1b0d3993f55bc27e86705ff2b92529cbb33a0ec835
MD5 9c92b33ff365f5eddd4ed192eff4c280
SHA1 0418f7d52a7461139120d74ef03fa483d9aac0a2
SHA512 ddbf7babe4d2477e3cbaab597f10841cd73ad6507ae5846eb249ad65a89a9143a9eb5995ad3ec7482c4f18f2330434bdafa5ab773bad19d001b3e85afd9a7db3
TLSH
T182E08C0059A682B83D2035D637833C01934A5FA43698043133D94B0EAFF2A19D6EC2F1
MD5 SHA1 SHA512 TLSH

Submit Download

OverwolfUpdater.InstallLog

Path C:\Program Files (x86)\Common Files\Overwolf\OverwolfUpdater.InstallLog
Size 792B
SHA256 ba63fe276348f949b32ae9e0d6e8265f5c764d035bf02db2504c2e9d30f7fae0
MD5 06a1d19de62ed0d2650a74124c686498
SHA1 4e1a825d5136eac37fb8af252d0361a910d0706f
SHA512 64b8a5f2ac0fa8f579a0436c8db329235f17907b99a98d3b438dc5f121a3067f6825f90dacec0ce4420422fe8a28624e1d0f58d1cbd68692c4bae50f629e3a32
TLSH
T1FC01D2004AA581B43D7131D737833C01534A5F682694043533D98B1E7FF2A1DD1EC6B1
MD5 SHA1 SHA512 TLSH

Submit Download

SetupInfo.ini

Path C:\ProgramData\Overwolf\Setup\SetupInfo.ini
Size 119B
SHA256 7bb393ed9d271215dc45676cd9f979f37f94c289a0f8b8f27ef516381024c800
MD5 aecc71b2359280155de7634ff64bd59d
SHA1 7f61a0069d81c1a10ecfea17615e1f5a082b4c76
SHA512 ed33cee75fbca3865ddd65b339ce486aebb7d6dc4599b5673f45e924f40739ddfb7e7820c21bb8762ad1145f5fe78039c1416ecb8442f9fed32ec4e1117153fc
TLSH
T18DB0924C4E43623496402B4981B72AE0427F2B9CA11D606C924B41CE83149C8B00A43A
MD5 SHA1 SHA512 TLSH

Submit Download

1ab7aa1b854459a7.v2

Path C:\ProgramData\obs-studio\shader-cache\1ab7aa1b854459a7.v2
Size 840B
SHA256 d913ce5b4ace04b97bb8f05bf49d777a5c231ce0737dd5a63bcd3215d8c63bd9
MD5 0b2301660cbb980468bf1b8b4eda87c7
SHA1 ef3c7bf64ca477dad586d5ca3aa16318b27f4e72
SHA512 b392bf58b9da599c8896f233c4a01e61e23546daef235d279b771a8849ea718a13b457b768b7196e3800ab82d24b946e066d334299142551bf3565d96673cf80
TLSH
T189012B0713856C3BCA3EB3718586174172BAD89442B687B7491994709C173D0AF43E5D
MD5 SHA1 SHA512 TLSH

Submit Download

4545d6ee7b176b7d.v2

Path C:\ProgramData\obs-studio\shader-cache\4545d6ee7b176b7d.v2
Size 964B
SHA256 b03ed79f9d040f865ac250b25a7a99ccebf244c5bb9d2bae4287f025bae8edc1
MD5 925008d85689f03f9c2c19b2a58864ef
SHA1 9707491fe67342b0428924976a5d4d4cca787fef
SHA512 097e0733c12a57d148ffbdc844f9444026fd13359a52d8fe73d172e8ac8479d4e23dc1a00be3b04f2880e2f094a7a322fcafc3ba00603ee7f89c586a75cf84fe
TLSH
T1F51146437B896EBBC91DA73149E20B0177BBE4B007E68F430B9950080DA93E08DA947C
MD5 SHA1 SHA512 TLSH

Submit Download

62281a72182c4ba6.v2

Path C:\ProgramData\obs-studio\shader-cache\62281a72182c4ba6.v2
Size 908B
SHA256 5e7044f39d34e7f45770264f93647c2701bed73c904f8f233dc5ea94870b4403
MD5 a09b098bf807333abd23734e543dc2e5
SHA1 972a560bbdcad956b41b96d5a5d98b74b3744aeb
SHA512 bfced55e2eeeff8f5393a84b23ca0bec0391411a1b649be153cc1563c1e736e3e124b502fb6df18c5bab5ccb9f6dbd6369cbb5251dd03acfce8078ee96d8eb05
TLSH
T1BD114C0A23459D3BC53E637089860301B2BFDCA553B787B7450A94208C173C0DF43B8D
MD5 SHA1 SHA512 TLSH

Submit Download

6a755cdc9e6092ae.v2

Path C:\ProgramData\obs-studio\shader-cache\6a755cdc9e6092ae.v2
Size 840B
SHA256 fccbe79d93005236718ff168a3ba2267d228b4f93cbc848a95eda3b8482b6697
MD5 a301b07b443e54d2763c6cdaf88ffcef
SHA1 f2da06b9dd608eb5786ad2fbbb42aa77f351c39e
SHA512 db51188f09eb3b13baeb726f80f06dbe36d1ae8c960aa75a7f88eedf42e67e286f3e7f33034fbe9a16c7cd339058dc4782e58467b0c033e94073bd326dcbebf9
TLSH
T1D101500313859D7BCA3EB37089871741B2BBD4544276C7B7490594204C173D0DF83E5E
MD5 SHA1 SHA512 TLSH

Submit Download

7a6e3fecabdd460d.v2

Path C:\ProgramData\obs-studio\shader-cache\7a6e3fecabdd460d.v2
Size 888B
SHA256 3b625049381ef7d97538364c28efbbde8e5eb28f010f077afa36ef5a74778333
MD5 b1695633020889910efc1cd4fb9b02a0
SHA1 09eb2ec232b08bb092fe2cfcee795ee57275f93f
SHA512 2b4be7f4c6c8182a119d440204505e1022d017d9199933a9162a35ad5b2092efee29be847caddaf7e73d310a320f69481381a4527a59a9847ded132fc42946bc
TLSH
T1BC112B037B856FBAC91D93384AD30F4277B7D4B146E48B134B9850040D993909D6482D
MD5 SHA1 SHA512 TLSH

Submit Download

7f0084f9c4106e16.v2

Path C:\ProgramData\obs-studio\shader-cache\7f0084f9c4106e16.v2
Size 1KB
SHA256 ea9109f443a204812899fc727c2e3e779a9114136db0afd729deec2e817a2db0
MD5 15d39c0e4271b5ccd51d06dd38ea848c
SHA1 beb07872ec6f978633df7a92ad12e239a41f0587
SHA512 16ab1fb86f5ac7dd412c1e3f87668a8ced4881a578739077ef74f68869e3be4d802fad72232aed270be0be25712de494473b2f883a94acccd1dfa7342a83bf7a
TLSH
T1A711490767866EBED69EAB3141D70F02B3B6D0B19BE34F034BA691040E993D0AD7402D
MD5 SHA1 SHA512 TLSH

Submit Download

8d390f4ad08d5c53.v2

Path C:\ProgramData\obs-studio\shader-cache\8d390f4ad08d5c53.v2
Size 936B
SHA256 442e3643bab4f98c14485a18e239d2580f18989831f9cadd19129e3df30789e2
MD5 edac8cc11ee6b2f4eedf0767d9bd1a25
SHA1 816ae2f8507a2dd7f87da5645e5a28f144811539
SHA512 666d64b4caa7229b888bbffc58db1995c791c8a6b1518fca195f466b6e5f6062f5928f897ed5ff14b02518df6fc078dd45662bbddb5d5805a6cf34d58e4026f5
TLSH
T15111F6477B85AEBED65C933489D30F1177B7C4B146E68F134BA850040DAD3908E6897D
MD5 SHA1 SHA512 TLSH

Submit Download

9ea4a251d7aa3c18.v2

Path C:\ProgramData\obs-studio\shader-cache\9ea4a251d7aa3c18.v2
Size 624B
SHA256 6c40664272501dab61c1507f87b612d40819510781d05971735443cef8ebc95f
MD5 e8f1aac1454a9411ecfd28bdf322b910
SHA1 12ca860dff45487c176212e2e4db4ced5112991e
SHA512 677dfc0140b6a75fbe9ae6e2c59dc0f305c8d5d7e34f858caad917893614c95c7eed8ddfb280d2f913117e3b02dc6613e369550ba38f97102fd6c4b197930254
TLSH
T1E3F068032B44BFBFD95E933446E20F41BBB7D8F04AA54B034BF951180CA43108E58A68
MD5 SHA1 SHA512 TLSH

Submit Download

cd9cfd09db70c3cd.v2

Path C:\ProgramData\obs-studio\shader-cache\cd9cfd09db70c3cd.v2
Size 960B
SHA256 c0d87fc26b604a942bb03b1349794cb397ababfb1a14eb09fd8ea1de5144aed2
MD5 a36fa067d5417109e7c2a79fa47109e8
SHA1 2cd916c1a5c0a21b021ebc424ab316be4cbcb499
SHA512 d826b76826b10f675fd40fc36ebf3aaa8b5b69c41090282b491a7ffa77b853db80a3473f6032bd1afe406e5272d671585a93d0bca29d7cf9029ab50a140cd1cb
TLSH
T17411F6437B85BFBAC95DA33599D70F0277F7C8F146EA8B134BA950080DA93D09E6846C
MD5 SHA1 SHA512 TLSH

Submit Download

CommandLine.dll

Path C:\ProgramData\temp\nsh4EC2.tmp\CommandLine.dll
Size 60KB
SHA256 569307401b949368527b128155b4e16b349803ec7d65c1052cc23c7b7a1336d8
MD5 210472e9e333d3329072c9ea3ef06326
SHA1 298c5473a79ab2c34d1ef05a75cbdd04905c822a
SHA512 c0f41486e8e7a8178322bd1fcd37fe645e4a23041e0aa84d3571b8031e2d1881029aeac1b4a554aa2f6a4f1b57d23a063872fcc72a04984fbaec2bfd12fd4b01
SSDEEP 1536:/Zj9JT17qpL/6ePMqBNzrstoJSkrjbgbwziM3hwW:/x9JT17WPMqBNWAkbwzibW
TLSH
T1C953292193EC472BD6FF0BB9B47462610BB5FF86B523E36E8D49A09A1853F4144613B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.Core.dll

Path C:\ProgramData\temp\nsh4EC2.tmp\Microsoft.Web.WebView2.Core.dll
Size 557KB
SHA256 11e88b2ca921e5c88f64567f11bd83cbc396c10365d40972f3359fcc7965d197
MD5 b037ca44fd19b8eedb6d5b9de3e48469
SHA1 1f328389c62cf673b3de97e1869c139d2543494e
SHA512 fa89ab3347fd57486cf3064ad164574f70e2c2b77c382785479bfd5ab50caa0881de3c2763a0932feac2faaf09479ef699a04ba202866dc7e92640246ba9598b
SSDEEP 12288:6CxswUBor35JrpQ322zy+uFKcDoRFNCMmeA+imQ269pRFZNIEJdIEY0lxEIPrEIE:6Cbmv
TLSH
T15BC4402123FD8A1AE6F63BB5A57407709BFAFC967979D39D0598251C0D72B408AE0333
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Microsoft.Web.WebView2.WinForms.dll

Path C:\ProgramData\temp\nsh4EC2.tmp\Microsoft.Web.WebView2.WinForms.dll
Size 37KB
SHA256 e4f695b72f99024e3ee5d5f26a367e664f4e120bd5d90aa87a8bc0509c365ec8
MD5 c7000faa6c6040188c8cd8ef28b6deda
SHA1 07a23c50092e5c1fd9c9df87e26b65df25d37b24
SHA512 eaee01031477454823974546055965df8d75c5115b25ab07b15ca608a20e8c21154ebb8c707a74213ebad04c2bf34a5f5563306e6da502235372c60672144022
SSDEEP 768:sijOv/1uokD/iyUdcIJtYZDgcEST3p4Jjrjh2jJFSUyauTv1JKia5/Zi/WGQK4uC:jOvZyUjJtYZDgcEST3p4JjrjaJFSUyaf
TLSH
T170036C0083AC8527E6EFAF78B5B481610A7A7E837A61D75D1C85F0EA0DB37E05914377
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Newtonsoft.Json.dll

Path C:\ProgramData\temp\nsh4EC2.tmp\Newtonsoft.Json.dll
Size 692KB
SHA256 7b44639cbfbc8ddac8c7a3de8ffa97a7460bebb0d54e9ff2e1ccdc3a742c2b13
MD5 98cbb64f074dc600b23a2ee1a0f46448
SHA1 c5e5ec666eeb51ec15d69d27685fe50148893e34
SHA512 eb9eabee5494f5eb1062a33cc605b66d051da6c6990860fe4fd20e5b137458277a636cf27c4f133012d7e0efaa5feb6f48f1e2f342008482c951a6d61feec147
SSDEEP 12288:p9BzaPm657wqehcZBLX+HK+kPJUQEKx07N0TCBGiBCjC0PDgM5j9FKjc3SH:p8m657w6ZBLmkitKqBCjC0PDgM5CH
TLSH
T1CEE44A0623F88F66D1AF2735B8305A1997F6F407A2B6EBCF6904D5B81D677608E00367
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OWInstaller.exe

Path C:\ProgramData\temp\nsh4EC2.tmp\OWInstaller.exe
Size 338KB
SHA256 b901583b47dc312b0bd034472576fcefa8a04d5f89c901541f917754c6a6f33f
MD5 250d98eaa8703a87297391316e261a78
SHA1 a27bce319147b97608bf66bc2687b5031a6d5fe1
SHA512 10aae07471c4d2e95bb3d4e7f2884f3412621e1f1f4718dbbf4ba464b87d26f0cd9133dac19e4aed528a6c7f0af240fb479372b1ce572e63acf31420b0a766bd
SSDEEP 6144:14IsWFbv6O0IOZ2/EvhJK4oTzs9bRKYoSYm9qkb5PBEcTXVYbq2EZkpli8cm:1iWFbTeTK4ovdYoS6kb5PBEcTXxzm
TLSH
T13D745A5523F98618F9BF4B39B9B259118FF6BA4768B7E78C0D80689D1A73740C890373
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

settings.dat

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 7870ec8df1a3c392840b297444e909403b9161a4f54b56285f4904b3b7eb0dc9
MD5 80a647a9014202c66e0cbb20e804d055
SHA1 9ff84d172f061b22cead7f54ee10b953aa64aeac
SHA512 46561acd088751277104617c2abc26a1091c2238b2fb43957e1bc5db943aa377fd7a52a89b2a58ae731f30ca8e037f3105a0425a57ac0d1327e7208afd8c5115
MD5 SHA1 SHA512

Submit Download

settings.dat

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Crashpad\settings.dat
Size 280B
SHA256 10994bda769410de051d7cf886519b8cf48a024d9112277440efebcc7c10a954
MD5 758deefe326c8d082daf21f7a365d463
SHA1 888c60edb32e5ef89562ec9bd22510b8dc969630
SHA512 092dc8a0212671dbfe3177261b09fedb2029202509f73e4f819c3da04969d91ff1e5aa7044d5ab95503525ae14050716ff489dc9b559fd01f9e888d81a45e909
TLSH
T1F6D0121732010238C0142173020361080541C10B80454040682CD72D1B1C4610D07881
MD5 SHA1 SHA512 TLSH

Submit Download

throttle_store.dat

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Crashpad\throttle_store.dat
Size 20B
SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
MD5 9e4e94633b73f4a7680240a0ffd6cd2c
SHA1 e68e02453ce22736169a56fdb59043d33668368f
SHA512 193011a756b2368956c71a9a3ae8bc9537d99f52218f124b2e64545eeb5227861d372639052b74d0dd956cb33ca72a9107e069f1ef332b9645044849d14af337
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 72B
SHA256 3e2ca3905f4b4c76b031b7f06bff96b752b8e583a0eb7f951151bb588960122d
MD5 35fa942727ad9dbc34f4c257afa633d3
SHA1 67c89f2101c0a6d347e9f48956f981e0f872c431
SHA512 9439c0995f940b079f9ea5b457afdb7acd3c562cff27d02ebe6620c12611e109184a3d9c3d770f19a9e9c7908dcd82f78c583ee4af50d75562747f0945b3003b
TLSH
T1F0A002110555074EC56003F816C51F4136309916771707665891A178CE743654756959
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
Size 96B
SHA256 a4121fead34db8fb3dd9db6bdd943292955dc1f4334b3989729733d917e6c7d4
MD5 58f99770eba5f041fd602fed480bc2a8
SHA1 e926c2e21f602c100a0631dba853ed4902dda4d1
SHA512 2b259942372496b3bafe3ac3d5206110351e2c53b2377b5078ef9d52c43d4688f5ed3aa5cf9ac7859c6391449bc3ad5e0d6370dbf21fbdde5045de8dc59192be
TLSH
T1DAB0125004B00219D540063001E08E102710B807130113F3408A805BC81C7404521C88
MD5 SHA1 SHA512 TLSH

Submit Download

the-real-index~RFe59c54a.TMP

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index~RFe59c54a.TMP
Size 48B
SHA256 3d72fec05f72888ef02fb297e7b2a032886783d44a9c4c5f04853e106d78a78a
MD5 636287f44ccfe609b4998e3f2e1e61f6
SHA1 26e357ef05c41c700b147fe4482999dd551608cd
SHA512 c301d98e32f79105ace09ef3dc439e35651f95d7bbd65765ee07c6cfcd02e64b17a71a3a6d3c2c44f890da925639db2220509f7ba45eae3812eb62aaa9ee4dfd
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Default\Extension Scripts\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 761e788928f8d0a4b3fcd80517d2d172754448d7964c1655f6e11534853b7bcd
MD5 655e9738edd47aac05132ec777bfd567
SHA1 7b1dbcb8686e978ed74766342dc3930647cb39a6
SHA512 46cce2b6f830e22532ecb8be060d1a036cacfb984ffd190fba6dc59885432ced18246fc6985638aeaa7097aa6307437edff298b61f6e16f9d2f7b7e01712b513
TLSH
T1B5218ABAC2E407BE9D5512F41B366927CE1D591B82283C5689F8AF9F23F11B0D30168F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Default\Network\Network Persistent State
Size 1KB
SHA256 5ea0e2054ebda55002ce7d4f21a861de1f904858384758cf4880c598318a5190
MD5 efc2ffa821abd0dee1cd6a974c4b3b37
SHA1 f248165907499dbebe4e011bd6322a8f7bf8c012
SHA512 611ccbfba118b4f45c9be6b2b95c47a50b33fd257e8c3f060d1ba50c633f11f020cf36b1a9e05ff127c09e5edf209f0d73e842a3f5a7a1828b390689e631da4d
TLSH
T1F6218ABAC2E407BE9D5512F41B366927CE1D591B82283C5689F8AF9F23F11B0D30168F
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State~RFe5a87bf.TMP

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Default\Network\Network Persistent State~RFe5a87bf.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
TLSH
T164A0026A99622D881B4A83902B18B547807B0445230982FDE43877A8415616D5C2C855
MD5 SHA1 SHA512 TLSH

Submit Download

SCT Auditing Pending Reports

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
Size 2B
SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
MD5 d751713988987e9331980363e24189ce
SHA1 97d170e1550eee4afc0af065b78cda302a97674c
SHA512 b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af
MD5 SHA1 SHA512

Submit Download

TransportSecurity

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Default\Network\TransportSecurity
Size 523B
SHA256 94738d2a2dc51f8873c528e9eae916f310c272a02e40ff42b53ef7e72cadbd66
MD5 effb2f3fe686165dfaf7745862d813d4
SHA1 25ca34473d4df2b120e14f705d7be5e697f11692
SHA512 e5327625d0d0f4dabcb5890746e21b5de194402e7b77b03cd5ddd31204d684de8312b7d707079ce2f7263c5008a8abfd636711e3bcd3d33f4197abf88e94c170
TLSH
T1E1F059A6427EA07B20381EB60EC87C014B7EFC344142ACE4DA5AC33C20911FB5B17472
MD5 SHA1 SHA512 TLSH

Submit Download

TransportSecurity~RFe5aed30.TMP

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Default\Network\TransportSecurity~RFe5aed30.TMP
Size 523B
SHA256 fb34ac48df4fc11323dbf9e917824b4c37121f392f52412d39e6078a227ed97a
MD5 91184a55de153dcd785c57901d7844e5
SHA1 cd87b3903ac3052d333383777fed5c64a749de63
SHA512 78b8f6f13b58afe66bfb22a918589cddf462ef38de68d3a4532783f8b8a22e1bcc1a3ba05f4284b9a63252cc6b1714d0887a75466ce1b50208d54f81430533cd
TLSH
T14FF059E642BAA03B203C5EB60D897C014BBEF8344152ACE4DE5EC23C20911FB5B260B1
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 acb645c5ef627e6319a8f704c7c0294e3a330b2f013691ae4a9bc95ea2f983bd
MD5 2b08eb932baf98558de4ead57fedea7e
SHA1 8148b14bc28b763959e51c8e37ae761f3960ecec
SHA512 5974e21a6f1eb242f6d1cc2e7ac050cdeb455d0c90265cb005c277a1b38b2ba08d8cc24bf0d97c07f9155c235c85cf22990431e476f40f0f85517468f27e1e8d
SSDEEP 96:stY/dPuMVG3lZb9ekqJo5h16ZdYs7/x+6MhmuecmjebK+gGF9I8XM1C7K:st8ludl63osYsV+FijNcg6K
TLSH
T1F6D1B8015E28697B8CC7E619FA36BB03E2F9A03275911E48EBF8451C05DB6DD630390B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Default\Preferences
Size 5KB
SHA256 ed833f1f397dde148d4d4049141b11502fd14b6b9aaf4069632dd7689855a7d8
MD5 7f67c69985b0268e12e46b65cbe39a16
SHA1 4d5d2161a6ccdcfa9d439add87b18976cf3a749b
SHA512 cbbbc2219aec665eac46a7d1c33c7d6812394f909843b0ebb86acc88762c7a8746f6274294c360678ed18fd8a901bad5090b137f384c63d9da2978eb1ec99ed8
SSDEEP 96:stY/dPuMO3lZb9ekUo5h16ZdYs7/x+6MhmuecmjebK+gGi28XM1C7K:st8luLl6xosYsV+FijNjG6K
TLSH
T19EC186015E68797B8CC6E619BA35BB03E2FAA03130D51D58E7F8452C09DB5DD2317D0B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Default\Preferences
Size 6KB
SHA256 3fef1109da4728912c6409209bfd69263403cb3b8762d2b1a4ca6e9b4b14294c
MD5 e01e7f41b2d9b29ea4a117f5b452e926
SHA1 a2c2210d7245dcbc6b615b1d323dd17affdefbce
SHA512 fe27cf199334b1b737397b0cfc79dd97cf4950c937505038af80bc2be57ffba6e8941ca70bb330c90e2d9729f86bdbde4f5d88bfb8c23845f6f33041af424891
SSDEEP 96:stY/dPuMVG3lZb9ekUo5h16ZdYs7/x+6MhmuecmjebK+gGFVJ28XM1C7K:st8ludl6xosYsV+FijNCJG6K
TLSH
T1CFD1A7025E28797B8CC7E619BA35BB03E2F9A03261D11E58E7F8461C05DB6DD231790B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

CURRENT

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\GraphiteDawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\GraphiteDawnCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\GraphiteDawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\GraphiteDawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Local State
Size 17KB
SHA256 35b0bcff1aa1d7746d152649d681467f306496567f1b66233341d1a3eea3eeba
MD5 d18bd241d03a77edafc97bdf7765710a
SHA1 fd7e5d93e60fe52ca5933c4d639bef515500ea29
SHA512 b58dc669f9de0d4382d4dbdba6caec9c9607534ca770e1418dff27f6a190df847cdcd1869cc6d42d9876419b8d19ffcaa364eb4ebd1b42f0431bc772154f5378
SSDEEP 384:j+aQikB+z/xvxjg/qhEFNloz+Xoh+BMwEWFO9zO:C/UxvxjgC+WabBJEnFO
TLSH
T102828E37D4A4AE23D9F3E6856A4A678BCBB594A295C51DE48EE81F0D07C32DD1342C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Local State
Size 17KB
SHA256 78ba981c60875c651ca62377384872a66b9c474dc5bcecfd2df0bdeac8b8ec08
MD5 802cf3cc5fad79aa54e86d3729a1b9d5
SHA1 5cc2cc9e4cca9db38b5961facccbf77cdff266e0
SHA512 b7e589752e1668f83d295dbc5a93c7c601cd225d2408e324eacc6f4ad9c97b6bd6ff28e86ee9b7b15b716846f816954372b243540854d016a8580a0e0534b334
SSDEEP 384:3+aQikB+z/xvxjg/qhEwNlod+Xoh+BMwEWFO9zO:G/UxvxjgC+b8bBJEnFO
TLSH
T182829E37D464AE23D9F3E6857A4A678BCBF594A295C51DE48EE81F0D07C32ED1342C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Local State
Size 17KB
SHA256 442af6e28728bd63a2158ec60a9d4895e4d68b149b895c05c22d9e8917787388
MD5 5736fc47bb00e896667ea7a112df6341
SHA1 adc8f7bfbae005c119cfe4535553bfd339c4db16
SHA512 4fa95e12fd6151163f6b7cd8c627341c1be1d15cd1c84e976282c81cdeb05e393bf02959b62c3798717ea24052b2e4240f103b9f8258ebf99e62953fbfe0a9be
SSDEEP 384:V+aQikB+z/xvxjg/qhEuyNloZ+Xoh+BMwEWFO9zO:g/UxvxjgC+uZYbBJEnFO
TLSH
T18A829E37D464AE23D9F3E6857A4A6B8BCBF594A295C51DE48EE81F0D07C32ED1342C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Local State
Size 2KB
SHA256 4e571b519dcd868167b8fa72dd5880864668d036805a9f646be07fc07b97f8c0
MD5 51f4c339c46cee0f7f9ca7fe3f905d1c
SHA1 85011c375cfd4c8d7736b9bb2fb62111d7617be1
SHA512 947f7545910000403c48472686d6c9d2d03db60b0159469d36160431b6e26f2b7184405d32b413165eb17ee56f979a1df760db97bb64dca9ed76397cbac5d8d0
TLSH
T12351A533B8646A37C6F29A54784B3F239E3790A29A632F1096DD0B1C01D729E1342C37
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Local State
Size 15KB
SHA256 1844fbc57d36c30562fd50f2b6dcfdfb5f884f5e6938043594d2e5db3456b433
MD5 48b93b2a4f3fe158ccc533da95e44a03
SHA1 cb4df54ac5d5f9cf8c9585802ab96bf5e903543a
SHA512 235d8b33d268ba38d6a3f3b5931695a82318dde941c4ef870f1bdaa84d5ee4a935f35355aae710086db677fe8087f8ce63192d4764977df23491e9fdfd1613c4
SSDEEP 384:U+aQikB+z/xvxjg/qhEwNBSoCqXCWFO9zO:z/UxvxjgC+gHynFO
TLSH
T10C729E3754B87E23D5F3FA447D491B4BCBB998A294C269B84AE94F0D07C72E80342812
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Local State
Size 3KB
SHA256 47d31c0b1e06bdf49c4865986d7bc4841cbf2ccc9f037d93a5ec89ffec771db7
MD5 93d890336ba05f9bf8e9aeba52464494
SHA1 70d505b047dd8a952b59a667baca91833647ca89
SHA512 c92d86b49d2133d480d53290af20e381ad3b6fffb4f3519ccc9c2bef5d5fab2814777eb7ffa40cbe28d6a51865a50708e14a77a0ffe461e9bd15e4eced0ac1e3
TLSH
T18161B637B9B4A9378AF29A14B8873F12BB668063E5963F54C6EC0F1C01D73991342C17
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe596dd3.TMP

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.WebView2\EBWebView\Local State~RFe596dd3.TMP
Size 1KB
SHA256 c03739d8509bde35a5105e858ff13ca91758588d2e946d7477ab247a805dc0ce
MD5 6d0a5e5262eaf72281e54fd239b1faba
SHA1 13f05a794010b8ea8e663e655f555d4f10c30782
SHA512 7b8459490dcdc41c9944bf28adffdc0740e5d0fa886a00209ec208346e5942777915364ca92c0d6e529ed5d6a80659a1b0889f19e53faf3a389aad44b097c846
TLSH
T1532184B3F4B45B32D9A27596214B7F136E3340AB81510E0452DECB2D12E618E8A27C33
MD5 SHA1 SHA512 TLSH

Submit Download

OWinstaller.exe.config

Path C:\ProgramData\temp\nsh4EC2.tmp\OWinstaller.exe.config
Size 632B
SHA256 272e4c5364193e73633caa3793e07509a349b79314ea01808b24fdb12c51b827
MD5 82d22e4e19e27e306317513b9bfa70ff
SHA1 ff3c7dd06b7fff9c12b1beaf0ca32517710ac161
SHA512 b0fb708f6bcab923f5b381b7f03b3220793eff69559e895d7cf0e33781358ec2159f9c8276bf8ba81302feda8721327d43607868de5caaa9015d7bb82060a0b9
TLSH
T1F9F0E11048C4FF268F3185A33B774814EF3883B7108C091C705E39AB0B271964317233
MD5 SHA1 SHA512 TLSH

Submit Download

OverWolf.Client.CommonUtils.dll

Path C:\ProgramData\temp\nsh4EC2.tmp\OverWolf.Client.CommonUtils.dll
Size 681KB
SHA256 936cef3f1fd444e4cdf934e04ec86b6877156cab6d5861c549b25f107f26d84d
MD5 31ffc5b8b56bd4889e20a4ad7d6fc973
SHA1 1692b55a11d7533697514c66d38af65e8ef38067
SHA512 15b5a9b8fe24265b13c5e5d0e629da81f33bf03909743eab840fe9b8a62dfd1b8a9b3da025747f369f6cbfc7a04ff4bbc8f231bfd831adbf5f45f8d4c70c9686
SSDEEP 12288:vIsx5RnuqfMcgYkB6b+tkeblqUOFgRhTZEc8Qt26Dj:nxXoh33TZiQ7Dj
TLSH
T15DE44A0233F88626E0BE5B39F8B01224577AF542A966DB4FB95C904C1FB37498D51BB3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SharpRaven.dll

Path C:\ProgramData\temp\nsh4EC2.tmp\SharpRaven.dll
Size 82KB
SHA256 776c6b0642f7a3f3f3ad3cc6bb5f1d528e90c6029b671d8f82b0320b185b92a7
MD5 271251960bf1d6a491803e15bd562e45
SHA1 1a305315dec8b44b4d80ef8c23452880b7e90380
SHA512 d5fe5c76f2074a05d32785945ee9f088fb4293786968a1c84389233d83e9bf0480d04d5fa9676c70fd0fed47213f434ec0e0cb2e38379f720919d680336aed4c
SSDEEP 1536:aa9qjviI1YjOrfRK9bvyyfpHbnzDwky7PndZ:aEuqI1lRKbvyyB7nly/
TLSH
T13C832B3123988728CF9D6734B078225A63B8625E3B31E6D6DB1C615E6F973C347212B7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WebView2Loader.dll

Path C:\ProgramData\temp\nsh4EC2.tmp\WebView2Loader.dll
Size 161KB
SHA256 465a7ddfb3a0da4c3965daf2ad6ac7548513f42329b58aebc337311c10ea0a6f
MD5 c5f0c46e91f354c58ecec864614157d7
SHA1 cb6f85c0b716b4fc3810deb3eb9053beb07e803c
SHA512 287756078aa08130907bd8601b957e9e006cef9f5c6765df25cfaa64ddd0fff7d92ffa11f10a00a4028687f3220efda8c64008dbcf205bedae5da296e3896e91
SSDEEP 3072:7evoTTlTRTyiuPThTNTKm81SbbMYSPLNsknZiZ2HZ5AaliiT88FEtJ57dXSvlCW:HTlTRTyiuPThTNTKmFQdhsknZiMHfEti
TLSH
T120F36C5B72E4407BE16B8274C9A34A11E77778110B60ABEF03A447791F237D4AE3EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\ProgramData\temp\nsh4EC2.tmp\app\_locales\en\messages.json
Size 11KB
SHA256 5c2fba2311105df5c8509ce61968e5f8fd8de607f52221e45c291d2de8411b3d
MD5 51a8fce92482f5024a70822d00ccda1c
SHA1 60d0e57bec8dd7c2778cb9ea0738aac7cf0f3452
SHA512 99890d40e615239029dd461bea44db583bcf8bfc7597de70fedb46bec6762ad166bc96e415183041dc3867a085588b282a22fdb752b72387cddbcd872436ba18
SSDEEP 192:+ANFsiqgFAy3IpCGtkb9yBj6j/pPPaqpMPy:2gFACIpCY29U0PSPy
TLSH
T17D424A09DDA1AE3B06B643293CA77615B362176F11505C1F3AF9104C0BA2EB3D9F7B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LatoLatin-Regular.woff

Path C:\ProgramData\temp\nsh4EC2.tmp\app\assets\fonts\lato\LatoLatin-Regular.woff
Size 70KB
SHA256 9c46f7929b08c87518aa7efbbf1601e485eeed829f149e3f01beb50120cdb3be
MD5 586ec8dc57c264cffafa044f8603e7bb
SHA1 1437242617ce9257b6de45315c11d10f8847b78d
SHA512 0d89a93b0fff118023b422ef25b54dc945e7f9324fbf8df4a1a867eac1cf1b47de09f118662cc429f0ae1d0b3d5a3abd7dfc81c817be80f1d01db3f0a6494d83
SSDEEP 768:4/h9yknndta1jUYKVkQn16+qb37ErIxaSwJxBSJu3UF5REHaMgVQQQQQQQ35SAED:4CGndtyjOkQn1lTrIx73yHaNCS4K
TLSH
T1DB63D0E17273768FA137D0B73212B279AD77561299D063038062F87D379F8632E8561B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Montserrat-Bold.woff

Path C:\ProgramData\temp\nsh4EC2.tmp\app\assets\fonts\montserrat\Montserrat-Bold.woff
Size 110KB
SHA256 df4e049d933a5be9949549581b205ec296b105589fa853cc51292adddff076d8
MD5 f20f5fc1c9c94e6017b42093b8e5ee58
SHA1 d875fdc36df142dc70d765c7f945a00b93bfd736
SHA512 4d340665668cf21853cd8b705c8fb97cf2f36ac0f51d0e565f2fe1cc48ea555c71a79a97b996fadf58436378f2cee3835ff85c0033a5de37ab99aeec08f4b090
SSDEEP 3072:V6fa1hptdfAnYiGjuUPPVgIt1gszRe+m+uKwRvG:Sa1hDhADIzP+It1gwRe+OhG
TLSH
T1A1B3121122B2C213875C78FC2AE9975373E2E55A80A8EDBBF356CFF542141ACCB57066
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Montserrat-Medium.woff

Path C:\ProgramData\temp\nsh4EC2.tmp\app\assets\fonts\montserrat\Montserrat-Medium.woff
Size 109KB
SHA256 ad8f52c4309164c9d7f32ce948eab5f447985a7143cd7dc7688861eea757108f
MD5 d84781735e74acd4f580568ae76c7912
SHA1 7e994ced9eefcb166f4a3d96f2a6119012d06d97
SHA512 306a2c8805d14761efb085fc47cb177146230b4704841088950c866445b43a91ed1f0e84f5bd4e2dd17652fc5455da5b202461fb40acf14e3ca00aaa036c25b9
SSDEEP 3072:K8CUHjSfEoasuqtXOa9j16/5PbiRVMD1PTG:dCUDAWqDooRVeG
TLSH
T139B312141DE63D1BC86DBA799BAAB3A093BE16D847B1D118F6F4D685413302D2CCB3D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon.ico

Path C:\ProgramData\temp\nsh4EC2.tmp\app\images\icon.ico
Size 21KB
SHA256 2d57121ff4e34cf983bc91b41fdb974883b41efe213bb149e3e81d7d4d10d41e
MD5 51e75bda8d67975d112b9e3676cfee94
SHA1 681691af738cd40573219a5cb53f0e898f8f81a9
SHA512 405a4d29e081ff0bffa081ae4f527ebf9c850fcebca9f1a75af05077289bbdb0dd34d1636734b456767df71e06c7d23ac5d5dd364d2f57e970f72aa476088195
SSDEEP 384:Qjk0rnJA4rnGC+wd6rhbDPYwAzi7oMme12Z:Qj1rnJA4rn0wd6dww9Cb
TLSH
T12CA27F510BAEFC97E2833439F636EE69E8878693D7D78931896DB03AB8441D0340717E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\ProgramData\temp\nsh4EC2.tmp\app\index.html
Size 27KB
SHA256 452154a082fd36b9ec8b5230bf4b6708c4715153e78fad120eb25828fa89381b
MD5 14c405b7892f466f89d16bb5b3ec68ca
SHA1 d7ba5ce2b5efd4bedc78c3c78eec5274df5b6898
SHA512 6795fe8c7072adf44ef990a12f9a840421622b2c0836a3590a7905e135d42be922f9db1070e09c1fd2f82f1c5d2ee09b4526e27e2454b04923e84d52afa49b68
SSDEEP 384:23JlhPshoRJ/seq06ItLglbyPasN1vnYogfZZ51Px+mppiq:2OhoX/seq06ItLglbyPa65nxq5xtoq
TLSH
T1D9C2D811DA36102CB237462AB5E2BA4E7024C117E6538A7FFA5C5635CBDB08B1E13BCC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\app.js
Size 24KB
SHA256 3261bdfdb5a5cb527491b2e5c23c04d4c1f4618abdb125d9c8cb197e6e4f0525
MD5 c55710210d80a89867b7c2e8f6b0051b
SHA1 53929d1bd6e81127b5fe7eb9f7f7db1d26e10b33
SHA512 a6b3b1da48bc845daa567d9fcb08c0ea5799b476aec9113153ae0da8e93cc60f0fd291279c890715f35f055c10b0dcf1bb21c537bff0d8ee4b69ebfc01cf6599
SSDEEP 768:0+ycDQYITdIb+eH3A4nzaYHhGifG3yRrH+K8T:0+yUQYcqbe1K8T
TLSH
T1A4B2858E967912789573633EAF1F4618FB32122F110596273AFD85814F7141282A7FFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

block_inputs.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\block_inputs.js
Size 789B
SHA256 f8dbd6793b35f7a26806f4dabad157aaafdf6d66fad094b50c77d60f223fd544
MD5 b5b52c92b90f4283a761cb8a40860c75
SHA1 7212e7e566795017e179e7b9c9bf223b0cdb9ec2
SHA512 16ad53ede5424ca1384e3caea25225589e9eec9e80e2d845948802db90fad222f709a7b651cd7601a34ba67a0627433f25764638fd542cbd4612871308e7b353
TLSH
T14301D2D864D3A87A597DA328536BE748F7391964905A1054F0DC8C64BAF003BC16EDFD
MD5 SHA1 SHA512 TLSH

Submit Download

cmp.bundle.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\libs\cmp.bundle.js
Size 391KB
SHA256 039d5d4e442cc360b6f54923c53cba5432d80727b8d614a3ee99f7c70307bcae
MD5 48ccfc31db67a9e9d6decd5b18df96f3
SHA1 2086877b894bd0ddec2ae80dd853e47fcbdc638d
SHA512 e369682bbba708ea66797024bc2885e85a4e2b4ac6a4005cc648a7a81d8a4b1c3691c5484408bbd847c40ee80d12e72c5d9722950da020b284843c10d05d0963
SSDEEP 3072:iyUYM9z8F+GxPMqbOISP88WEAtvgnnhLCVJkNO7Z6BEFltnxKg8rq0gU:LrF+GxPQWEDLmkNO7Z6BAly
TLSH
T13D842B8D7991B0E617D722F1802F900BF33A6458784CC490B660D8F1ADF96AD927BF6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

notifications.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\models\notifications.js
Size 5KB
SHA256 c32495d55eed52f47dc7268eeccb90fb6bdc5686135ed089416c6bb8f703a578
MD5 911451f65b2503d23bc27c6a6aa6af72
SHA1 01d3654b23ef7f5adeb4097bd851e8c100a7b2ab
SHA512 06edaebb0bb2980a7b6d6baa31a9c0894a9bb5f14a91468ffb8f182d98f04bb811df2a4c37f0b56d612603528aa21f390eaa7cf885874ae770a24dce2f9b249c
SSDEEP 96:sOr8u1s9FHYYdfHsW/GZwzpJGf8mui+U8QrGjqTxoOxoYsdfHsW/GZwvpZGNjINU:sGu9GYl3rNQ8K+JQC+N5Rsl3rxeEYIo
TLSH
T1F5C1AB5F90BA00A7057293A819370342FA5753AF49408CAF737C5EB40F311A6B4E5EDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

analytics.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\utils\analytics.js
Size 5KB
SHA256 0a3b80a0263691f71e85ec681be87229e6325a7d173ff430bbf4eb7fa355476c
MD5 52b20797b4568fd9eaa065d676b7a344
SHA1 a14cb0b575f2a7d274a78093d74906351b603dfa
SHA512 f99786edcfc0220f1563617f40441f9b0ff02083be2c1847677b6533f7d1de16911227e349fe41e328800230bc2994b70db3ab79e4acef5fe07631e87aad0c5f
SSDEEP 96:LlYkmHqqVHlnZrJGvt+QP2EZc8kukLQsO2LT+gObNSPgPgzauV:AHqSGV+kC9zNObNSPvzaA
TLSH
T1A9C199292469719068B373B68F5B1518EBB116233144E9223BBE87415FF6D02C693FCC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

commands.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\utils\commands.js
Size 15KB
SHA256 160ca35f80aeae58f6723c37cdd3e52cbb4ef56e659fbe105a8edab1f0f35ace
MD5 ccfc18e42871f7eb701c54bc1833dcfc
SHA1 7da62247f4383148109c198aee1e26c21484104c
SHA512 f6a08520790106482faf6345ab534210f14e8b5629880f875af8f4210a3d1b7efb24e05dbeed895e2044034a6d535a4b4cc2dae34f5b15e7c4960806c2d0340a
SSDEEP 384:2Ur5Hs8cD+1uUPULQq06WCHp7GvvoWqEWOnvsUmd:2MwGUd
TLSH
T1C872EBAA68A721651933B73DDB9B0215FB33083B11465C147EED46917FF6402C2A6FDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cookies.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\utils\cookies.js
Size 1KB
SHA256 9d3cb3822e20d6f5157faa02dc69bdaef44576c3fb5523e00aa152107ce30287
MD5 6c60e675f8c8c68c0174b644d3a63a2a
SHA1 3635a3fe07ccc4a6f33a986ddb690522d0611abb
SHA512 1dc9ec7b139bcf37107ecd673c01e4fcc606332ea1645a4a1b4e5d95f817d4c99d5964cd3d941a6a526689341d9623b17b4efc002cdf4c73404299d52b1be452
TLSH
T17721E0087580D81EC5725739AE286778FD30992611C6D54DB88CA4F02F30C169DBE9FF
MD5 SHA1 SHA512 TLSH

Submit Download

modal-events-delegate.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\utils\modal-events-delegate.js
Size 1KB
SHA256 267661f932a2ea78d8c7a98cc03d1b18d7cb8132deb84636772ecd1fcfbe4857
MD5 117e4fdbdb0ecf211c8bd909efd337d1
SHA1 9f8684d856b7c95bdffb139217dfd89f41373187
SHA512 f474ee20b59d3d0c11f9f6aee6b6e2b66f7025beaec9841f88455e60533dc96cb4e27910be0dae92b0028c5578932b7f459fdb91d594ad010f72a3b3af6addb1
TLSH
T13C31D54D36FD173AE5B7172B5B2F5F8CAB72120B09054A26B2E69A804F354241196CFF
MD5 SHA1 SHA512 TLSH

Submit Download

strings-loader.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\utils\strings-loader.js
Size 5KB
SHA256 9b833f9e058ddb31ada44764449fe030f05e241dcefdef46886a74e30cd04ba5
MD5 8ac781fa72423fc5c4c21a8c4138b709
SHA1 50ad1d7f383d6801c57f916e46c1c17f79222725
SHA512 f78558488968b1151b189545294a0bb97131c0a4d5dc0fa61ef168d999151e0f12af271389aae985d129adacfc6bf610b0191fb912ffdf8e97283829e2802604
SSDEEP 96:FXS/WSBWlbBtDhWFTnTeWsNkEj1I/6Wfwk0lx416moPdXDKP8j8yZrME6:FXSuQwBBh0nTevNkEj1O6WGe0muXDK0W
TLSH
T132B1ED58289354118C32B764CD935264ED6A4917023996F3FDEEC2686FB149E82F8FEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

utils.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\utils\utils.js
Size 118B
SHA256 b4f0c48cbfeaf8141fd44b12031e3f0410cb0cdc313888ffdb14fdf1d2341246
MD5 a0952ebeab701c05c75710c33d725e7e
SHA1 1da8a2e889f1213d481ae3cd5571670c01e64adc
SHA512 5e5ae616d3fded7d2bf47a326242c4477ca3119fb52897bfb41de0be230ccbd6c3da2c00268b3973e9bf7b4f2886aba64fd9719b448662e4130ee66d87913389
TLSH
T1ADB01274B7AC73A2D315377AACBF6C1DF0375C368414B099B19034E19572D04519DCD4
MD5 SHA1 SHA512 TLSH

Submit Download

cri-controller.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\cri\cri-controller.js
Size 5KB
SHA256 8c8c3097f0b587d715e051f55894d73a0fb7b441024f47512fa340eb3f692152
MD5 344b079e423000460dbcc623d3dea42f
SHA1 6f7a6db5cdf0e4c511ae1ec8aa1f08dd9e79190c
SHA512 15358d30f96ba6ec330417896ccd5c837e71b1712357185d7d84e60e8e6c21af52eadc1fcf61f6ce9a79165fab94813370a5ef0b632742043355ae3eb7eb6856
SSDEEP 96:u6CeVFfOhETv5T6ToY/aq4bCWCtoQNxcGyUkeErscwn:u6jVtOyl2EY/aLmWCyQNxaUkrscwn
TLSH
T1BAC1DC9C7CF9866058B7277BCF160518E732420722426A2B7AFE83404FF5E404A16FAD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

template.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\cri\template.js
Size 1KB
SHA256 016ef6ba4ccb64f2cbdf63357d180f0d3a5f74857633556b311eff57be8d023b
MD5 2f82acef2d339db31fab5c73edf8af19
SHA1 d9138de6fe1320cd232fd6e1971fbbfdb9225bd6
SHA512 90311035970edf2c1d0175c9b718c731fad4f58ad5a0b43a2588e2e6132cc09deff1d49328174408c51fe3082d62612f7a2a6c25179ac474101468ab68c2abcd
TLSH
T188212E24441C90331B7B979BDA13276CE9519301D80B7D3871AE43A82BF3B828E62359
MD5 SHA1 SHA512 TLSH

Submit Download

cris-controller.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\cris\cris-controller.js
Size 9KB
SHA256 89924de5dece339a344ab2cda8e0dd4448719d3b9233d728921c553166765c7d
MD5 23602b0707b37ed7c1b5e3a14e17e0a3
SHA1 cd1859cabca965afb34cf44f9b69a5e76f782197
SHA512 0df7ba4063389dfd592495618600e99d5184179e4a9a79e678d0727a186ba3d921f314df861ae77038d5d8531cf5ac32f9bfcff87363d0b242f77157f3f8cd3f
SSDEEP 192:nCoyl2vxrZn2C7s+vK/H0mIvo99iXKapiaTkelwPMM0R9W:9yl2JV2C8/HOjgOkelGMRO
TLSH
T10422201998AD2A299A7773B5CF6A0508FB3142272944DB1A7CEDD3940FB940181B7FEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

template.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\cris\template.js
Size 480B
SHA256 c6c0799e027b5554e44e1c31262ef62b2879bdf1b862fae56615426f07f471d9
MD5 408961db547931d2427d96035dc7245c
SHA1 8a0330bf52f53cb1e82e36cd67723ebb29d7a6bf
SHA512 08d79c8f54cc9898956df5b4de8360a38d482ad19ce155e84a33843221a0242240c59c49ce0ef980e150fddce716557bee7071a6525ef438fdcde9bdacee95aa
TLSH
T1B5F02E114135CE20373F17BE93631B28F631D0024A82E634D5DB5790333B4E78A96769
MD5 SHA1 SHA512 TLSH

Submit Download

finish-with-recommended-app-controller.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\finish-with-recommended-app\finish-with-recommended-app-controller.js
Size 6KB
SHA256 ec775a786d8f0170c33e7d28df1f724aa1de26ff0aafbbf41c26dab864fda48e
MD5 8f0cff982886d07a530a1ceedba4bf2c
SHA1 6348b32708fb6f70225a3fdecdd616475a4bf8a3
SHA512 cc688485cfa0d3787496f8a65e222a38a5b46c0b3b41812b9e1246f0195bc6dfcdae1cd2c82a6f80620db91cd826a17fea5f31879c6ec7e3efb580ec71a4aca1
SSDEEP 192:otBaiFc1rnGDtjUnuYu7t7jt/Pv0+bnZ7uc:otBaiLZ++tHt/5nZ7t
TLSH
T1BBE1004C9E9E5168E53B733ACFAB4188F73502271540A617BCDDA7986FF0245026AFEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

template.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\finish-with-recommended-app\template.js
Size 1KB
SHA256 f2f955faf5dc90e9ad50815566aa42a693128f97f07d02c5c3a1dbac27f570c4
MD5 e3f895c48a2c99c3e8656c9093075286
SHA1 4d1c13a0f03ba903787b23f5f27563966cc08a31
SHA512 7c71787b7bc49e77923e178fbc38e2fe7e45283f257766020a21e25535ff095b7896406e612e254c46fef5af4a0fd2a4a9f5ecb0b33fab91261f01a3bad9a54a
TLSH
T1D1315859425F9A73173A468E9B670EAD3960DF02C8B00F11B5DF4784E3735888EA7318
MD5 SHA1 SHA512 TLSH

Submit Download

finish-controller.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\finish\finish-controller.js
Size 2KB
SHA256 c57d168e804e06f26709322e340076e576d405a72cee0b663176c6167785c3b3
MD5 b4e14fe186c7843fe1365b630a4a17b3
SHA1 86619b54889f3da9057a4937584df4acebf492fd
SHA512 bd0e5a72f6a6145c6177248351bb2ab2bbe7ff66d36dc7d022ab81d614eb39f2a0a3f4c267c3018202d17e175cfac5755138b6a05bd7f3c7b358dddb20635640
TLSH
T1C841AB4879FA43B66B753B3EDE290655F732422B0A0A867A3DDC92808FB1014039DFE4
MD5 SHA1 SHA512 TLSH

Submit Download

template.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\finish\template.js
Size 1KB
SHA256 cedc900131ac48e92bd931926946dc342a99de1b16757969b7416f8ba037fad7
MD5 6410e00eec2197f48a0d2ff66d0c07d2
SHA1 480c640d3849cc90fc881306322ea96e31c1207b
SHA512 302f2fa32afdc0d2e8729a91ce20d16427f2a6d56f97a84aa1785c3babaaeb080ff8d1ba400a0d1c3917646b1597e1800a36622f3ebdcf14979da6e3a76879f4
TLSH
T13221289D426B5B37073A469C52675E6D3C60DE00C9710E29B4D74780E37789D8EA630D
MD5 SHA1 SHA512 TLSH

Submit Download

main-controller.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\main\main-controller.js
Size 16KB
SHA256 2cc465c2bb45f3fcee61baf732b4c87cb50b4baa64864bf832475f45e2846113
MD5 3d497dfdfa6f36a812b4988a79bfa641
SHA1 d5c951daf21080e9ba18b05619252d5b3624d20e
SHA512 f500817f58c407c0fac8290d77b0a7e9c6d8198bd6bb126eaead92a892f0a1efa9a09ea953349c21d62a3067cb1bff00257bcee67c6bab49b782e9688b1241a8
SSDEEP 384:2Rp8ChTvzkzPZPb5yPQZ688wqUaftN23n:2RprTvzkzPJ5eQZ688wqJftK
TLSH
T171721C0879A8167895B7333FDF6B0649FB71102B45068A2A3DDDC2C40FB1811466AFFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

template.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\main\template.js
Size 3KB
SHA256 d827fab7a8ec31dd68bcd7e6725c01b7d72d1224fc0c1a136dac513cc7884d0d
MD5 694ea1756f2dace45053080494afbb70
SHA1 f503248779de58075f5a3ea9ba97a4838b95d1a7
SHA512 aae8397bbea463cbcff7a26efbc8be6e9697a65073fb566fbe0d32a68dd4e656f9ca70268a1faacd2b137cd7fdeee1a380f4b4126cb1ee2a6d2bcf07bf076029
TLSH
T1956131221065157267BA42DA56266E7AFE61E303C58B9F25B6EE13C007F3C42CDB760B
MD5 SHA1 SHA512 TLSH

Submit Download

modal-controller.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\modal\modal-controller.js
Size 2KB
SHA256 babc84f3a2bffe48bd239ead431bffaca0b572df7695a82fb1d0c4fa9040b722
MD5 4d83a2e0841cf28eb4ba69a11ec7bdab
SHA1 13536ee9fc29b3c53941b3157df53bb0ddac557e
SHA512 ecdf6f0a02415a9ebb7318cf486a2220e170871cc20c230fc12a8ae103f3740c90144d57bda00202a300a872d74a0b8700bb38ac1c423097992f30a3b3f72295
TLSH
T1FF51278A181A116595B7637FCF87019AFB73509B4A45421A3FCE8B011FB085093DFEE9
MD5 SHA1 SHA512 TLSH

Submit Download

privacy-controller.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\privacy\privacy-controller.js
Size 2KB
SHA256 06b2a07911bf80d3ef9979980a67010a2b20023ac9a38cae22fe70b739abde11
MD5 71f27207dcfd9aee4fbce9919e4bc924
SHA1 9e301b1670e82cbccd85df073d287f52d6d569d0
SHA512 1348c66bb4d2b2066d659305df0909f63862ee9b00e3eafc94d6df1893c55aa530a912b0e8a27b17a581b274dda1a78aa5f20dfb8c2e2d8106dc0776676b4ea3
TLSH
T14C5130AE607842701937773ADF2BA788FAB2412B9445CD163EBC9B411FB28154249FD9
MD5 SHA1 SHA512 TLSH

Submit Download

template.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\privacy\template.js
Size 655B
SHA256 95c459eae0edccdb94702aea603a097e461daa0e5f37dcd0e30de7df665433a8
MD5 cf8d2c26520d7c84e560dfa79e31dcd3
SHA1 716f2ec17480d5cc9c145bc147833fbfc39d36f0
SHA512 d466dcf7e86a4295857020feea281fc89f519f6bf1e79c3b5e1046d0745c9c9010377b1941e06c9a9b2c78a4173ed9909332d5d6c39b05f460e8a863086c895b
TLSH
T105F0C83C85A881211976C708CF12D625BE90C35B4D3F7C7671CF078357E7C01C921645
MD5 SHA1 SHA512 TLSH

Submit Download

progress-1-controller.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\progress\progress-1-controller.js
Size 1KB
SHA256 88059a936f49f1c4376bd047256b965540c4edd4e60331405c4f92986f6828de
MD5 78f88c896dad595ef062a00a3dccf3a5
SHA1 0a321088d119c7bf977a6ad2caca9f84cdbc4058
SHA512 169fbd73dd73dc09428ebceefec5b079651fdc88306377a988ad3f2b96c0ff356532cb408ac26c627f77783c811f309794e2f93eb4a2e6cfb04fdf7cbddab732
TLSH
T1A941EA4E282942792DB3AB799A7E2909FB32411B500AC5203CFDA1404F7092A449BFED
MD5 SHA1 SHA512 TLSH

Submit Download

template.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\progress\template.js
Size 242B
SHA256 a7128a08bca53dd919cab3e5cb4dab31ded7ae2dafc957209b9fdd23f3b944ab
MD5 92b145e6649ba0add3dee9a69d3fa91e
SHA1 4db1a45392ec973cc8a7eecf3a30a9a7ecc7a64d
SHA512 747a087dffdba5c92d9f4c8923615d388b9c4c79d3b71d3cb90487aa37c132290a4f5107eef3055c03eadcb9614e20d4655393dc9251fab7e0ee2438f0d95751
TLSH
T1DDD09742C2A082312B3A1F6EA3F32320BE2040040B2A7630E6FF1081232B003860DBC6
MD5 SHA1 SHA512 TLSH

Submit Download

settings-controller.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\settings\settings-controller.js
Size 9KB
SHA256 846b7dfdfac4c748589b33df2ae9a392b49b8010637b49cb880b9e000f0253a6
MD5 701c1f21f9969c50bcdd3211176a174f
SHA1 b213e1179a2a83d911a14677f10a0629170c35dc
SHA512 27d9dd9647fc1d692e8c935fc67f0ec1a6c34578c0b7848345bdb97b3e6458b96b7c72d894e3e3c7e753dfa8be48c7d2355225a0c2bee9b71f567a6e25ba621d
SSDEEP 192:5RFBjugWX8x2zLjiaPX/iXv1ijiJRWzHSQ9whrMk4Vo0MEKAmNN:5RFB6gWX8AiQPiOiJvsmD
TLSH
T1D3121C4EA96440364977577FCB678789FB72049B2402C92A7DECC9882FF08940396EE9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

template.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\settings\template.js
Size 4KB
SHA256 8014a7c919da249ba2f2196d9c9b62639d20851be426f3ffaef161cbe477c45f
MD5 28513de0830383a516028e4a6e7585a0
SHA1 d31fc3a6f4a3ce6c4afb82ff2342a1ed718809e5
SHA512 0f7321c2ae13145bb694368dae1b74e6fe20e6b09712da2178bc46e6aa65223ab84c38abbf0ed074c85b42dba1a238a5f3f8d1ae060a0af6df748c5befe11b61
SSDEEP 48:Zx8LQmDdbaoFRpm4+0A2AEeQmDdbaoFCpm4+0A2AW:wpm4+5nHym4+5nW
TLSH
T18891086384219412477680DA5B369F1EFB65CF0241E65E34B2FF6BCC978BC8156ABB0C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

template.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\welcome\template.js
Size 1KB
SHA256 42c546e9da748ef76fdab56b96fd511eb607617a9ba37b3dc420148b769d8acb
MD5 17f54fca6723b983875d940d931e0afb
SHA1 01774cd5cea36bd74c80a708d6f77567e8091024
SHA512 401df9a54cd14c19227d91bd08b4775a7b437644b4ca0d1d636d3e07b04591f9c5516e80040ae6a79ba400457d15e3d80aa148a63de870a64664fc5a02f7a038
TLSH
T12D31FF0AC55D81361533C3FAE28B5A5C7860AE40C9BDBC3439AF075967ABC00B933B70
MD5 SHA1 SHA512 TLSH

Submit Download

welcome-controller.js

Path C:\ProgramData\temp\nsh4EC2.tmp\app\js\windows\welcome\welcome-controller.js
Size 2KB
SHA256 50a9faf985750a344344657dffb6880dbad95d2f0a060d911224f2addc6995a9
MD5 163f58f27116d6fa6f82aa9512259fa5
SHA1 8ae067638d5c3889d12ff18d3725982bbb76dd91
SHA512 a8d14643dce70da2fa5b9d519bdb012a2d1567f857d24c4cdad0bd4b42eec65b04e76a2e876cba0e7a6c433ef316428b2dfea42edcbaae15d874ad38d7eaf6ad
TLSH
T14F41DD9DA9B583742A357B3EDF2A0748FB32922F0A19866D79CC52410F71014425AFF4
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\ProgramData\temp\nsh4EC2.tmp\app\manifest.json
Size 691B
SHA256 042f19540813a6af8a350d675a48feae549589fe8320e6f33ea8779bbec42a5e
MD5 5c8ea8f54317276d482ff5739b3f0eea
SHA1 803b03cc46c9dae0b5fcc78f8241c3e92b163b2e
SHA512 44bb2193a6cb2bd529d80bd199975fef23a0b53af89fb245cbd892d59b7b3ccbf3f62579da2faa7a157b5836905756ea23968d141ca38a746ed74d364872aa57
TLSH
T13C012819E8906DBB15393617A8F50700FB86433F02020F4B37BC500C4FB21591457E74
MD5 SHA1 SHA512 TLSH

Submit Download

log4net.dll

Path C:\ProgramData\temp\nsh4EC2.tmp\log4net.dll
Size 270KB
SHA256 ae9c8073c3357c490f5d1c64101362918357c568f6b9380a60b09a4a4c1ff309
MD5 f15c8a9e2876568b3910189b2d493706
SHA1 32634db97e7c1705286cb1ac5ce20bc4e0ec17af
SHA512 805cd0a70aba2f1cf66e557d51ad30d42b32fbafcfbc6685ec204bc69847619479f653f4f33a4e466055707880d982eb1574ddab8edfa3c641e51cda950e2a0e
SSDEEP 3072:F+8gmdoxSO7ZbQFroo7RVir/dtnK0sgdnogtHcU5qFG1RSGCkE9kKn7GCcaLoWnS:I1N8LLI/PK0scnodG1RS1T93caLQD
TLSH
T15044065477F84A19F2FF6BB8A475411587B6F946B87ED39E0A80A4FC2C33B1089117A3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

utils.dll

Path C:\ProgramData\temp\nsh4EC2.tmp\utils.dll
Size 58KB
SHA256 251ab3e2690562dcfcd510642607f206e6dcf626d06d94b74e1fa8297b1050a0
MD5 c6b46a5fcdccbf3aeff930b1e5b383d4
SHA1 6d5a8e08de862b283610bad2f6ce44936f439821
SHA512 97616475ef425421959489b650810b185488fcb02a1e90406b3014e948e66e5101df583815fd2be26d9c4d293a46b02ba4025426f743e682ed15d228f027f55c
SSDEEP 768:cmLFb5dc9LS+8dayUhaPxYkkLE53UEDNnxqWLb1pA26MbwYiPbAMxkEu:cmLFtd9+O0fkV7xpD6ww7Pbxy
TLSH
T1AD434B1172A0C433D5665A3069E8D6629E7E7C422BF480CB7FA9027E5FB13C16B78367
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx

Path C:\Users\Admin\AppData\Local\D3DSCache\d063b4a437b86dec\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.idx
Size 64KB
SHA256 a4d844ab882ea47c3ed2083e7a7cd861b948b506954f6ebe863f901e5c255809
MD5 c8349fe917ff1c063e960abcb42d6d31
SHA1 8500ec060cd01b7925b7fe923baf9733fee57be7
SHA512 ef3d2798d6144e9158248cb41b89baf8dbaf4a7eda2afd7d07da73346ee4f905811b3e8d93dd12898fe0b96d7f413f4a023e114e630e4015feb01c6b2cb95024
SSDEEP 3:QYxqK9lllGlll/l/lXp9ZjrPBY06ll0xeW1ZP:QYsK9ll0dPBY0OaD
TLSH
T1BD53244011D30317CC43077004DF07443F74130443530CD153105130CC5F70010711C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock

Path C:\Users\Admin\AppData\Local\D3DSCache\d063b4a437b86dec\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.lock
Size 4B
SHA256 7852fce59c67ddf1d6b8b997eaa1adfac004a9f3a91c37295de9223674011fba
MD5 f49655f856acb8884cc0ace29216f511
SHA1 cb0f1f87ec0455ec349aaa950c600475ac7b7b6b
SHA512 599e93d25b174524495ed29653052b3590133096404873318f05fd68f4c9a5c9a3b30574551141fbb73d7329d6be342699a17f3ae84554bab784776dfda2d5f8
MD5 SHA1 SHA512

Submit Download

F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val

Path C:\Users\Admin\AppData\Local\D3DSCache\d063b4a437b86dec\F4EB2D6C-ED2B-4BDD-AD9D-F913287E6768.val
Size 960B
SHA256 d8e7e4113472a0b046b88788dddbdf159f57ef4257c129b6101f694a53b7d780
MD5 ea94a3ff986dbbdb39d83dc140d26b64
SHA1 e8a5ba1f1709c80c0b39993f839617dfc66c5242
SHA512 e549021d4e7af54e95800883255feab8cf6d20cc4b866ec08a0fa4752f5de98aa45d32853eda9fb7310b0073b35f4144b529494fb416fbd4cd6dcbed53137903
TLSH
T1A6112B447BCF2CB4E37674394139E3101313F10244D3D34885D0C8624E23804D035FB5
MD5 SHA1 SHA512 TLSH

Submit Download

BookmarkMergedSurfaceOrdering

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\BookmarkMergedSurfaceOrdering
Size 6B
SHA256 4489f9e3e454748b3521eb214e0a5694d562cff3d9ff511cb456953c8f534c00
MD5 377d072e137022223a370760763420bb
SHA1 534e5f914ae99bf0a342a2f7a7e0724bd0d11ef7
SHA512 d1e37e45e8d603c46c9254d7295744104222b09340246c5e5f50d661d4688ccc2068adf1e0cd78599bcdcf475f8a0a6255dcd3e429812aa14cc2e2022309955c
MD5 SHA1 SHA512

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Code Cache\js\index-dir\the-real-index
Size 1KB
SHA256 8e0d559124db2033321d024f02878e26863c23a95e5963b887b2fe4214daa362
MD5 f8eb838e7d68312f6b9d89e128e45cc6
SHA1 a3164bd093c543e6e753fe00614b255ba3e5a20c
SHA512 a4140c15c9fdb2189ef1f12c358fde72b3c6b5545c55bbe0317a5be152874ad339935cceb8ca3da460362c1c213ca97658387b816fdc4b806bef6a9c24c32230
TLSH
T1DE21FDC8AAA9E67EEF90627031C16D0B713055432847FFB765B6F0B48992FC0A8C8200
MD5 SHA1 SHA512 TLSH

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\Network Persistent State
Size 5KB
SHA256 1db23f91f394a49e6428be0c11d613aa0913d81ddb1ab4f0afc8f76969afc5e3
MD5 c10340c86fa58b497d38142334d69584
SHA1 116300d589519b2642ae16c7ba93e1b3e287dd01
SHA512 2ab66f5e476203540d6e899b91de61b5ce481f4cf279815126c9fa121208b6727d81c990b00f42d420bde78197f1f5b9111515956f8f750df388a2c1c9fdef31
SSDEEP 96:DHAoaEId7bNziwnlcGn/dGVLnL3RmznyzYaBffVHbqlNrUAl:DHAoaEId7bNziwnlcGn/dGVLnL3Rmznp
TLSH
T1F7C158F7C3F4863D8A2191F49A156E1FDF5C5920835C796AC8E95E1793E38A2E200B4F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TransportSecurity

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Network\TransportSecurity
Size 1KB
SHA256 9f9a55e840292b3812f6ff87ba6745fc5e018483d24f3016c5b02b1f940db4ba
MD5 a769db4716ab00f53826e6a67027e986
SHA1 502bd553bddc31c5ae4bae8f5ca554cfec5c6966
SHA512 4a2389b00d3339ff56796480ca1e5aa39535b2c979c1a9abe4e9ed8ad963357ccace224a7daf7fe86458356123246f44086ef490f8497a56cd118a312d4bafae
TLSH
T193316F63E67EB497107D1CBB4D49BC062AB9FC35534258F5CE6B836CA0498F30B53416
MD5 SHA1 SHA512 TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 12KB
SHA256 5143f499163483f8de322d09174a5ef90abcbd8aeaf4211c089804be29062d2c
MD5 c22c5b5bc341591ae4d1cdeec0e37273
SHA1 407fe94ba2d3c9e1eb459194e63a4bb9c5e3ab4b
SHA512 69b5326e40131eaf963bf69b9a3ac8ab27d17c7edc49f390de28420a337dc0144440edd270bd6a6c923ae47f3590567308109dfd52f408e985661824ec36c09e
SSDEEP 192:pRcMPcItv76vAPRp2tg9ZHsb+WNfsFW5p08cex3BaD0lMSPyIsnAUge:pRcM0ING6XNbwE2p8ena1se
TLSH
T12D42C52EBD59693BADDBC21AF921BB53D7F6102221942E84E7FC892C15E75CC2217407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 11KB
SHA256 acb242eb64b56ff99d9ecb1f990738c95c66d5b9fd1d832d2424f65170214ce1
MD5 e97d327e109bae923acadb25c3f8946b
SHA1 b0d6ac486f4f69afd091d00227e4a6a9f8106f3b
SHA512 178216a8254255da4d845ac5a9a62d1e4ff7be6d1f52d48f90d045fb0c9efcd981dba4ff0df6ade99b94f3b2bb619be060295be81528c4a436ba51018f54a85e
SSDEEP 192:pRcMPcJv76vAPRp2tg9ZHsb+WNnFW5p0ea2O3BaD0lMbVyIsnAUgR:pRcM0JG6XNbwF2pw2Ea1dR
TLSH
T12232A52EB959793BADDBC22AF9217753D7F6103221942E84E7FC892C15E39CC2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Secure Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
Size 11KB
SHA256 a9cfec852b1c20e1372e72aeacc1e9eb8532789aaea4bdb8c68710b76ad9e7b1
MD5 79837e2cb6279dc9abababacf17f7ead
SHA1 280a46e22db44f3fd34e0e2e29ef30112a8dc16d
SHA512 770e5216793964fc3ea0b52d218331d93ae7677903836f6ef7746df16406345bd4180cfd85614d4d5142ccd3b20d08008eebbb79371f9b2ab888359366687aab
SSDEEP 192:ecv4K6WE7KxkXqK4I40pUZNCgVLHrKHfFKslEYUWXzKD/ls+ErUkKN91BWepdsrL:ZvjNE7KxkXqKf/pUZNCgVLH2HfgslGWf
TLSH
T15A32C72BA88E9A3B4FD8D50CDC167F8BADA5429372740D2493FF9D0403A578E114A5F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

the-real-index

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index
Size 120B
SHA256 0cfc439b91da44bfc795b4b0fe5850545beeaa6259dee161c065d5d57a5468ba
MD5 d2763fb279d10752c0ae11442b529a9f
SHA1 1235ddc2c481e30c4d735684510ff009f73abe9e
SHA512 0eb74a2241f09baeeb3e4b0c10cbc478ace4ce626ae742d3e517d8c7a3274c8cd83e648b0b9c5b6202dc4023506de22713941738e24bd837941091453dec85e5
TLSH
T1A2B01212C0865740C8404170390420441300CE2280044B47E3D0BAE6DC830F159B4610
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 5KB
SHA256 0ed1df04433e06e5342e9e97c2c4e3b3be8881e81122a6e1f087e35d591ad8f5
MD5 58ea9c55e0f9e4ee450fd768d193593b
SHA1 6ce8cddc5bfed79bca7dd3aaf15beb2376043606
SHA512 32fcb081898bcc748535401a87fa0fa2fcfec3ce78112df9616f53f9c62a1105f40399c84c32d6607da75a9c84f4f12e7a03b0d6075944b426571db95755ec82
SSDEEP 96:0C6ad+x7oIU1fXfBVWL+Sl8h4otop5My8D3B6vNGyvLXwqxwz/6+3RHz0j9Im+LF:0C9G7/qffTiU2Cxsgu5xE3RHzUu
TLSH
T118C12B71A47D2C3356F2E499F6122E53CFA561975610AF54FAEE0F0802EB0ED1382623
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 4KB
SHA256 2caaa5dd1c9c3834299ebc03cf75459776f71d3f335bfc5798fe905378bcd03e
MD5 0dd7d63504a4e2dc734ac9f9536ea561
SHA1 0da0e97dcead324d3d0eb3874d4e8bb7be5176c9
SHA512 831af65f38856ff2ed2a8c82bd5a8198d31e2861b13172945c9721fb9f0b3d222c02a1325374513e2afe4071f253731ca7af593496474b343469ff96e4d44d3c
SSDEEP 96:0C0d+x7oIU1fXfBVMLHRDotok5MydD3B6nGyvLlAHZbdOv4a:0C0G7/qffEDUDNxvcAHZbe
TLSH
T139A11A30A02D4C3759B2D489F6526A53DFB960A76920AF44EDDE1F0801FB1EC1343923
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 129KB
SHA256 84f218a761cefd04156fdf592c16abab963d392162ff905eecee99aaff321335
MD5 6171c69f2db48e534a8daaefe256d2e6
SHA1 e399d289752801819606dbef8a4026ca2190c680
SHA512 d1489d9ef43bc5ae3a0831d732c17242f95ca97daa46c9e0c2deac2ac20628008516ad939f9cf2b2f0d251c48dbbf690518dc0459b090ce8953026b7b62e04e5
SSDEEP 3072:zRIZxUqgfMBXcK+ggmD0SpflY2z56ovsaDqAk:zsSVMKKDgmYSpy2F6ozw
TLSH
T190D312F1CD6EFD4B0E36EEAB405A9D3FD7E0075725529534864D9D4E02BF58A02338A1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

f_000002

Path C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache\Default\Cache\Cache_Data\f_000002
Size 34KB
SHA256 bc568173ec266b6afab4409ce012c49334ad5de9a615ec3431de0ee997ce54ce
MD5 efcb79f5c1a13bdc61c4ef75b96f90cb
SHA1 eb6fade4c7b5451ada23d8965438300b295261b3
SHA512 eba4382dd5e8600ab27591ec1c7d00b9ba71ae8deab129799dbf18ba36442438709e874c766f57538e47ef58f700d122f8a199c2d5c93abab26ab491cebc1581
SSDEEP 768:86IGdMBgKYxzCQAPliIKnMrDfZ9DqvGcXKWcjhujV+:86ZdMBgHY1liIsarZsHKvYV+
TLSH
T1ADF2F1879AFD7080C3B2F5DE351A11C4CF559BF21A160A48B188493C3ACB7671F67AB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index

Path C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache\Default\Code Cache\wasm\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache\Default\Network\Network Persistent State
Size 6KB
SHA256 3caee0aea50124c05abf4fa83e96114e9a394166195ba15ab3d496206bc5f96f
MD5 c6cfbe8fb79724c3b337fe50108d779f
SHA1 bb547acc2fed53c945366505c21b0d4882e84981
SHA512 13a67dad6f728386e54d51a5e89f205fa9d944aed0c17fcdcfd66311a182493226028dacee194d8a77be7e785c98f186272058512fbc192eecea03165d667108
SSDEEP 192:DNPi+PwPGePrKPleZxPyP+RP2EP6HVPlPYPYPriPUiPnP9PwPtPrPrXPDPHPaNK:DNPoeejKwZxK2Rr8NQAepPFoVDTL/kK
TLSH
T1F8D1B1FACADC4F2CCA1262F59E143A1F8D69061843963C19D5E5DEFA53E2961E28070F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache\Default\Preferences
Size 9KB
SHA256 2283d88fedb6c530109f3ef3e78f00f5647d63644e705a43e88af27ad4e1f5f5
MD5 06c7137da14debd0cd205d9a46f7af13
SHA1 5815462ab990a29ec2c2e88f3b10d528ada03860
SHA512 536042bb72339db3d279cbb43a9bee2d6fea1b2cb33356cf262049f09ee41333ef6a4beeb9404938ee8181ee12f7aeea2c1f0a9faf0f7b8e9cf11dc08d1915c1
SSDEEP 192:zRO8jAjv7qUc19oHsb+WNmqu0z6yIsnDUg3:zRO8kby2wxum3
TLSH
T1EB22822EAA50757B9CCBD229FA257B53E3F22021B4D02E44D6F8893D16D79CD2227417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache\Default\Preferences
Size 10KB
SHA256 f22377e6295f6174b328c52d9e82f17c9e97013bfbc3beb4916dc72e9cd696da
MD5 8dd83e97696aa29706b46c2cfd40a081
SHA1 56363c67e3773fb1ab7e3a878be8966ac4724814
SHA512 d368f561f42e218f3362ea1b66ab8a701b41893b104a1e447564f98beb0c7da8a67cc6090c24593befe5c96ff5bc1ccd0f9cb1168adae1d8ac206337cee147e2
SSDEEP 192:zRO8jAjv7qUN19oHsb+WNmq5NJ6yIsnDUg3:zRO8kbB2wx5t3
TLSH
T17522822FA950757B9CCBD229FA257B63E3F22021A4D02E44D6FC893D16D7ACD2227407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache\Default\Preferences
Size 9KB
SHA256 44dbf03d678ba9fb73e676cb3c9e1442e46cdee8a77722b376b0944ce5327bc6
MD5 002298aff6a295390df280e3363429af
SHA1 9b49fff47ec8ab585f14f6d0cb88a81010afb2f7
SHA512 305f3e310681b1865d4d0545a0fc163e895da0ffe147ff366562b4b8918c15968374d20f9fea90c4b33d9726b21ed5d85dfa152e7283f7d2eb405e8891568e2b
SSDEEP 192:zRO8jAjv7qBc19oHsb+WNmqh46yIsnDUgl:zRO8kbF2wxOl
TLSH
T18D22822EAA60753B9CCBD229FA257763E3F72021B4D02E44D6F8893D16D79CD2227407
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Preferences~RFe5ccc50.TMP

Path C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache\Default\Preferences~RFe5ccc50.TMP
Size 7KB
SHA256 7342f3a69168d6d01ba0093b7350559ef5c98f8b405d95f6270a058b2089728f
MD5 e6a0a6173705bff94d35298a435ed71f
SHA1 3c93260a1877dae09f640ed872093f585632857f
SHA512 949f9d100d0abaff333ae4522211e0c86e68a26cbdba7d9c2247359c6999133670f57cb41d37c816ab7c112b1dbb7838b50d835217d54c53adaa4f8b4a1fd86e
SSDEEP 192:zRq8jlv7IRk19oHsb+WNmqF46yIsnDUg8:zRq8hH2wxK8
TLSH
T18CF1932EAD64653F9CC7E229EA223B42E3F6102175942D48D7FC892C29D7ACD2237417
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache\GraphiteDawnCache\data_1
Size 8KB
SHA256 35bb2f189c643dcf52ecf037603d104035ecdc490bf059b7736e58ef7d821a09
MD5 259e7ed5fb3c6c90533b963da5b2fc1b
SHA1 df90eabda434ca50828abb039b4f80b7f051ec77
SHA512 9d401053ac21a73863b461b0361df1a17850f42fd5fc7a77763a124aa33f2e9493fad018c78cdff63ca10f6710e53255ce891ad6ec56ec77d770c4630f274933
SSDEEP 3:MsEllllkXl:/M/6
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache\Local State
Size 2KB
SHA256 c98d298eef68d8db5a6ccbc598defc62598e141b9ce030104133c39420db0777
MD5 bf1c828e7cba5f9bfb0597d61868120e
SHA1 b7a20b1641611c3894e51fbd273813f935e61674
SHA512 d625102fdb41341c70bb35ea423d907bc8e001ace0c0f04ddf3deb46557de24d4ee9d7558a4869bde1911e1811e26b0aa7ea78fad8cf31956d51e7a194df8d4c
TLSH
T10851B63164A84D7385BBC994B9423B53CF752162E5606FD8E6EC0E2E06E76DC1343803
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache\Local State
Size 6KB
SHA256 15dac9760d7ae54864d38f5ddb204018c215d8181d8b4eee01c45bfae7bec986
MD5 d3fc371adae319cced028435fb670179
SHA1 298f7d5e3f3f74f421398e04dcc468e926d56a84
SHA512 a78fdb1a6ae7e29e25ca6446acb3ba1cb8b69abca55c97039e8b23c1dad6c5d87ea1b44b8071f5da6a96330ca61fc8260b807ff16dbf354a341808e4b4021cea
SSDEEP 96:IBbJ6TfXrMroC5Q5+DotoUTzgDJB6WqYv5V0x6EpKPuO2NCJl2Qsxny4a:GtOYroOzDUbePw4ajO2NuAXxA
TLSH
T1E5D1957AF787CBE3E8EF69841701B186EB50121556824EDC4CE54D9E0ADF9ED360281F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache\Local State
Size 2KB
SHA256 bcb2267f127730e91773324037cb4fee355f04cd6111a74cac407a24a8a6e064
MD5 3b9f381f1705c535a98744f3c94e7b38
SHA1 056ac5072492dc6582fbb1a1954fad6eec5a7998
SHA512 2893fb58dec8e3ae69edfe040a4bcdeb7e3671b594676a500dd768fa556a2c7cd4703f4ab7b0056dc6d3f5dfc665db09e9b922bf5b23ddb29bdc95c36b4fc23b
TLSH
T12251C73164A84D7384BBC99479023603CBB52166E5606FE8D6EC0E2E06EB6DC1303803
MD5 SHA1 SHA512 TLSH

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache\Local State
Size 2KB
SHA256 e706b2b4a9b54e7d02dfa0b46a82c9934f724e47c787be7bba5dd638762a457d
MD5 9da81ba64caf83c0d6f68f7c69b4aa4e
SHA1 63c348a64f5fe47d953792222d475c3050a75dfe
SHA512 0b8599d5da061cffa3852625f97fd689d0ebd8682d5f2651f11ddbc42e0f9f6aa19cc28cdc34213045a35ac6cea66c4c941b0965b590248fd6fd3076359f7812
TLSH
T14D51C73164A84D7384BBC99479023613CBB52166E5606FE8D6EC0E2E06EB6DC1303803
MD5 SHA1 SHA512 TLSH

Submit Download

Local State~RFe5c88cf.TMP

Path C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache\Local State~RFe5c88cf.TMP
Size 988B
SHA256 c097b4535f156b4ad0656ca76f56dbca59b20fd6a73da2da2e988525709b98d6
MD5 d88cb7e36c3ad41494f2a9f69edab0a0
SHA1 50695000b4c8a7f6cb4178bd8910331f210ae024
SHA512 7c84e8c722f70a4fdda57229ac4c578b7c9bbbfe938b9086896f93b5a2d4a1a2d718f52a0b1435741dcafdf35fc0db66ca24e643f2d955e0e0f8d0b2404ca1e3
TLSH
T1E5118870605C2BB2AD868BBD254133534E235172D4A00F9C67CD0E7706AB7DD6117C35
MD5 SHA1 SHA512 TLSH

Submit Download

49179bdc-aadf-4415-8915-9f7ffc6c2aa0.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\CefBrowserCache\extensions_crx_cache\49179bdc-aadf-4415-8915-9f7ffc6c2aa0.tmp
Size 13B
SHA256 2771d13c637c267132afff9db67537bef95708534b79ae8d954254c4e64e4e0f
MD5 2aa9e263ee3796d9ce358460a2451b4c
SHA1 7a55d937c0cd1f7543a12be730e4a78d0a14a545
SHA512 4909e73ffd1a777a9f102a8831f6ae5a9091084a2755707363251f39164bb65e22c318972ea59e7155976c6a626691dfa94539ee752f58e31aa16f4de5cdbccf
MD5 SHA1 SHA512

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\bebanicmemnmpcomjjlnjkeionhgkkdgfdocgdam\294.0.6\_metadata\verified_contents.json
Size 21KB
SHA256 86a9cfa74185b880bb219f3d04d8b6aa79e093922e01f86e2f6165c07f3e58d9
MD5 cbe5d4d09ff388a7264b2405f05ce3e1
SHA1 32175b9634e187c8cc03cf398404494bc38bd5e8
SHA512 1fc7bb646f93d9459089d579929522f0ba806cd7b9ff3eb91314fbb662f31f7dbd5d161efea8cd80431ffea58e1e0dfa3950a1f733e09a5dd801cbe4cf8fac60
SSDEEP 384:fCoRATIImvc9lv/svfsqXetqyFLvYk9b5BrRH:fCoFvcOfrzknf
TLSH
T152A2947CF0441C6B25E453BD7D2558844A09076B3A61F64A32683D8E6B8FD7E9032EFE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\bebanicmemnmpcomjjlnjkeionhgkkdgfdocgdam\294.0.6\manifest.json
Size 1KB
SHA256 fc62f221ff9a354742c7f18f8db6d86d03031e207b711bd771c09017adbb1189
MD5 b438266e3f27db5fc1280386ab9dd2f4
SHA1 d4f1730e2b5edf18d4bda8c7293cf903f3234b23
SHA512 457bc5ea3140bfeb3f26963dee36ff1f7fdf6f28d2789d5219d02a213911f8722dc56f445d22bd92e44c1cd0d72e2536f23e18c0d8ffb689c3150e6e9b55936f
TLSH
T1B141652AC5502DBB6536A3669DB66300FB29472F51014E0FBBBC605C5F722A76047FA4
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\bgahplehcohebablohmbilgjdnihhgfmfepkpgcj\308.0.1\_metadata\verified_contents.json
Size 1KB
SHA256 66b26cb58e22725004089e7e75ea122a20f8accc90c708f190776d4857c35766
MD5 31092623aa24af97ca65a389ca3eb216
SHA1 27c3a0f85c5a083c9ecc0a6b76ee9e21b8a69e48
SHA512 40175dfc711ac4877c6d9fd94448b82a60402b10eedbc0bc2386da4516df14f3eb782d9744349e61ab1d5e5bff7c62ffbac6059660494f9908ad113430c459dc
TLSH
T12031FE3CC0848C53B9CB26D92D7440519E6EB95BB8746C4822C979DC4E8F28EC67296A
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\bgahplehcohebablohmbilgjdnihhgfmfepkpgcj\308.0.1\manifest.json
Size 2KB
SHA256 f77818e7d32f11065086ece0a43f53d87f3a1a4e292d709e8f125c4e9a24ff8b
MD5 7b426f6881dbf55c7ef5b736fa1659c9
SHA1 983e3232ac9ccea673057461d64992da58dc60c0
SHA512 86aaebd86ec2ddc9bf916831d3701b7508b81c2418363bd539ac693b3076ea5beed2050dfe5cd2c5c29d96c820344ddff10d283d79e4baa91b2832a29984d8ce
TLSH
T1F251262ADC664CB2356DD51A08AE6281AF3978275C493D2C769C104D0F1D76F20F7BEA
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ecbhmmfmjonpojpbedhhhbjanafifbbcjofikdim\310.0.1\_metadata\verified_contents.json
Size 7KB
SHA256 5225a86fe554a7a8bb84776a58734388518724a65143d2df4f9041c771c0c528
MD5 46dbd26c9e2a58f18497afcc009abe37
SHA1 44d8646debaabd4e1ccc388f6129c374a2312beb
SHA512 b45be04cca891f8ba1d14b00d8523c8bef0405ca186ef7f485d62e72e3b2fc46bdc3172081278a561bc201b222c0b93f7c927d1b33caebbc532a57ba2aabdf4c
SSDEEP 96:L7BZTLHQEdFQ8MHVBgwUXDxd8AB8KcLgRynwA2U/prgBUwfPs91q36d:Lf/xQ8IgLX38H5x4BUYPsbR
TLSH
T19DF1512C849A8CA711ED3BCE5DC45D270CF40A0F0DA6E8E5A1241ADC2E9F26EE4577D7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ecbhmmfmjonpojpbedhhhbjanafifbbcjofikdim\310.0.1\manifest.json
Size 970B
SHA256 50e31d5460c864a3e7f7a4f4190ee21ce1d708f7b5586b7e4f6bded57b010c04
MD5 80674082aa91e78fba185a23873abaa1
SHA1 b50b3e20732d1fd3bb53f1a7884d428116f889a0
SHA512 01ffaddd2a7ae5d6caa528f1c5d1b2c8d3041eda3add25a59dc315cfd7b3f93902d0fb9297e11af779efa7c31814b95bc52f4c04405042882a850ce079ae96b0
TLSH
T1CE118C37C408AD170A79E3A96DF69A83F3791BAF20508C6B34BC145C4F76265108FBD9
MD5 SHA1 SHA512 TLSH

Submit Download

simple-io-plugin64.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ecbhmmfmjonpojpbedhhhbjanafifbbcjofikdim\310.0.1\plugins\simple-io-plugin64.dll
Size 34KB
SHA256 49f28b2cf43054a2b9383f88a79f0289b6b8957b021279626d1e1d376ccdc3f7
MD5 d4aa0df4cef1725417f40dd2e808953b
SHA1 3bab1352426d0358e16550efd412aa5645c96270
SHA512 6dcc72d32e6392478d6f76d8083ceddbe96549b7e4d846d50ee01a2eaf1c7d215c648b92962d4fc2b904398bd479f34dea2145ab373bd3d4ac90225a758eb6f6
SSDEEP 768:Y3tbUjg+CV9H4O6zTfLqrnuwTbgMlNERELS:Y3kTKYJuzuwTbdlNEmLS
TLSH
T16DF26B4977E94728E9EEC6F9F9B15E510330B6195433EF8E0CE9A0FD08637904A5139B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\geajlfbgmkaklkojofefpgnnjcceibhakfjhfefk\263.0.4\_metadata\verified_contents.json
Size 1KB
SHA256 69429d396bc4c8fcfa235a60df96f41c685b9d60c97d97541939868cf49b2c62
MD5 f3849a4f1da5bbd61d1bd111fece66bc
SHA1 bd60133a244a140a1a1d4cf07e1d3b21ec69da0e
SHA512 498e4aaa381260103a9ce371a0a0066ff039bedb2f9f2295fe8c71fe3a0fcfbd129c71d4b54248a7188a34dfe22ebfb30111a8fd0f5899a3807048517dcd118c
TLSH
T1AD217479E50D0F0B3CFA29BC2C6508405815594739D670646A327F8C4E6E53BC4653AE
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\geajlfbgmkaklkojofefpgnnjcceibhakfjhfefk\263.0.4\manifest.json
Size 1KB
SHA256 4ad55984b40c67ffb1db6c0aee4cc5095e0d436ebb2661cc781e5cfc8ff464a3
MD5 c0ddcfb46de3562ff278bbaffbee9ada
SHA1 0f4c4d6aebe5db72c4ce59514517dd11b548bf1d
SHA512 0cbaeb348ef2c228e92d7887aef73147081fc8b2c6109c5648bcf111a6d1a9dc7911a652826684fcb615d0609e9400940f40a6b23eb48310e3e1abb9e70d84c2
TLSH
T110216625D5302D731A9561A558FF2242AB34486FAC557D2C7A4C010C8F2E3BF29BE7E9
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\_metadata\verified_contents.json
Size 7KB
SHA256 52f2985d27d04286913fee1daf0bb73ea04a07f819e3248e972ffc628f320e79
MD5 8d5e0fe2b445361b3ae4e66179aa5ef8
SHA1 748ca575ccf95409af4444bb86cdfcfb2828f78f
SHA512 3e8a408205cb4ab84915b5aab11e6b37fddb7b7162825bf4f0a2ff2dbdcf99507d4068df7ff44d2a6baae3b60054ae9263b0742e237e213d2592653198f1c34e
SSDEEP 96:9BzWFF5mF22+7MIwVZwMQEHoQA2d8Erw+QkrlQlaYhGcyEyi70kai6w5jYyg3nec:bG5A3IwVF5oIyErw+7QUcuRo+eChqO
TLSH
T177F171AFD80D5E8720A4059A5C4D69F909CF1B936C86FC45A2A43A6C4F5893FF63380F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

21640-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\21640-goop-config.json
Size 3KB
SHA256 b80c45143591d80411eb88fc6fc7aec78c73fdec45970ec6cd616ff575d7f742
MD5 102284cd724db1fa63682f96f1256d10
SHA1 724953387f0f720232d85db56456e8fead2a411e
SHA512 be1aba26b82b56e71637dfc4d39e00b4a573087523cd81faae48ff3958c4f259e5ffb98c1e86a3fa55bafb5b6c7d6206c8dcf04c6fbaae268d958026f22adefd
TLSH
T18C714A2777BEB0BF05AE1787207EE1830DADC699E11058BAFC649C24E566C322177B19
MD5 SHA1 SHA512 TLSH

Submit Download

22328-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\22328-goop-config.json
Size 11KB
SHA256 e68022c9277d3dd9f108bc33e37bfc4efb2c7803e058df2d6fb9a38975625df9
MD5 fc95633901eaeda0d9ed5f461a547309
SHA1 3d70a74efbe5c538207e1f8aa06e22c45eb93f87
SHA512 56918669a7728ad2c6b60b90dcf4ab1db72a270c8ff9e9db70ba324251f846acde2ed82c79b1077f375e916c61b6b0100e77d8de6ee63f25e5e1e5019a0562b0
SSDEEP 96:qHlIvYgKa/BweY5owq6/5AeoAsbYtdxxTz43/xj55xcbzxcU6xcFlxM8CxMiAxme:ljUUqTzgR0+Awwq2wcUhwLrfK0
TLSH
T184325A27DA549D3B26B9915C2C5EA642F970036B90849E7739FC088C1F33D12D9CF76A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

22804-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\22804-goop-config.json
Size 2KB
SHA256 01ec002085f3fa5deadae11060829962250793d3fe9e62e1f5c3da0c9e8e3b97
MD5 9e54cbbd2681058e8451a3a2d1575f65
SHA1 64ac8e38e1143cef2a1414422ade28b43a99142f
SHA512 bd0162c08d1d87ef1cb0a28c65bdbffd67201ffa2096a2def67f852f34d6d2d2d7360f3e7973e71f4c99bc882e1a436f58b73594165b3eb458258dde15ce7a44
TLSH
T188515C3AE9617C3B02B687D92CA91242FE74435BA1404C5B39BC9C9C2F77C4251C6FA7
MD5 SHA1 SHA512 TLSH

Submit Download

22894-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\22894-goop-config.json
Size 6KB
SHA256 4e12774ce3350cb75124f14b42fbe66dc46156df564a49826e5ba8d5602f56fb
MD5 90d46f7fcce370822e288d421f121b13
SHA1 71cdc7bd14cde1101b59972300f530ddace43d5f
SHA512 f43a31f434ea64af26c8b349b5866ad97ae1aa637fe14fcea7c5eac40e54289c4886bee57dd4fdfea2754e56f91489635c431fd808618be896b5cd264f9aed95
SSDEEP 96:yvola/QzDYPbGnx/tlR9PJhhPDWFVtTWbaWBhYTWK1riWqytgWDEgYmKq1:NxFlRVJhrNiT5
TLSH
T11AE15B36D5B1BC3F05BB67AE6D6E5242FA60434F61814A0B397C888C1F3BD529086F6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

23478-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\23478-goop-config.json
Size 3KB
SHA256 e63c4a07e951f55f4a56421098798fd6efd96ef9c00f7d1ef6672950853299fc
MD5 e89144f7d713d8346d9f78e8a29e7e3f
SHA1 00f8eddb9336712a67d4a387a7aad83f50b015d7
SHA512 846e1c0dc0adcbea46e71f46131bd7e9a6872492dee81c775004cd764ac8c7b1efd170dbb428c258a21908b2881149e2615a68be8d67ba1cf731399e180ccfc2
TLSH
T13971293AD5252C3B81B653AA7EAA5141F971039BE1404C5B38FC6C9C5F7BE520187F2E
MD5 SHA1 SHA512 TLSH

Submit Download

23522-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\23522-goop-config.json
Size 2KB
SHA256 7b6b4745918568aec31f140f41ab5620df3e6da42d5f2920d40f15da870ac770
MD5 43be259accbfecdb36357af88c253677
SHA1 be3f15c46af7bbbfc831782084756607920759d2
SHA512 5aeabd47e5216dc63e0929da400774df0e553fea8eb3484196464e9f44cd82a248bd84204aec0877699bc8c1d107a3c9bc7a455f9bc6e7e2f215d94249c40a47
TLSH
T17251573EE5606C3B06B9436D297A2341FEA1034BA2504C6B34BC9C8C0F37D3224D6F9A
MD5 SHA1 SHA512 TLSH

Submit Download

23930-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\23930-goop-config.json
Size 3KB
SHA256 d5dffe90b7fd68c494ca5341e8be4414005f47241fc352ff8707b58ee6e8ca36
MD5 1e63f65958d2eb114f468f5f21e2dd82
SHA1 c559b4280cc47793e8db276b9e73689d4d8be44d
SHA512 b1cfdd2b16690a72515a3e1ea9e96d16e887d74497953c6255be48265e6afabfcac4d9be76fbe4ca58e6e1dd3626953bf4034f5c7716a3ff1c997a6e6af49689
TLSH
T1F751483AE9216C3701B557593DE92282FA74439FA1406C5F39BC5C9C1F37C2264C6F69
MD5 SHA1 SHA512 TLSH

Submit Download

24000-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\24000-goop-config.json
Size 2KB
SHA256 54246132e6c737cf31d084d0fa109effd8d5fd8dbfc4f3c5c5dea69dca7d1577
MD5 b5de186ff8811cad22e54d2617e2672d
SHA1 9ff5e9dfe73e74a13adcb167e3187cf46e43a8bc
SHA512 3f48728ba3e745ab613ad614474f8a9a8e2d73fc750f01fa66da9df0ec248df61e868c2aadf3922d89bbf6006972126160e60932788900a83cdb686feb42001f
TLSH
T15241193AEA212C3B01B9936E3EA92242FA64439F61404C5B78FC9C9C5F37C1255C6F59
MD5 SHA1 SHA512 TLSH

Submit Download

24110-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\24110-goop-config.json
Size 1KB
SHA256 e743f2f2ba451462a69141cb9691c6d516ca5bbbffd5506a34d8b7017382ba63
MD5 425ec43ee16fd4e824e8030b88bb760a
SHA1 ded294adead193de1d0a0ca2d38eb8de7b96d5b9
SHA512 d99844ef1c3c7ec30ac266d0502043d5aae2355a688e9dbcc3ed0fd3c9f62ce176a355050bcf36001fe0e1a54e117cdfd9d270ff3a6b76e79621aadfb6545a9b
TLSH
T16C21E63AE9223C3B05B9536E2CEA2242F975475B61504C2B38FC5D8C2F77C121585F69
MD5 SHA1 SHA512 TLSH

Submit Download

24300-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\24300-goop-config.json
Size 1KB
SHA256 a2321eb3109a7468a728b56dcc9b5e692fba123765e8fdd7d6047b12cac9cea8
MD5 e500f0be455ea87a31dfc73ffefc87cc
SHA1 779d607a69afa738cc751b95fea1496d3453c225
SHA512 8529ef007da49a4a9a7ffd5088702f1835eae201e8a37b1b45465d870b52e6371424668f1bde600db7f131634addb4bb845d6e1729b6754ac888fc1e7dcf1813
TLSH
T10A41163AE9617C3B01B9575E3DA52242FA74439FA1408C2B78BCAC9C5F37D0250C6F69
MD5 SHA1 SHA512 TLSH

Submit Download

24504-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\24504-goop-config.json
Size 3KB
SHA256 e76690030bde1ae12a2e1b14ef56b9c4859114a930f0b8abdf82ebce2379d865
MD5 fe8fffd3c8e516c4265937482a30393a
SHA1 d32c9a18905ddc9544a060aba193b9107d908aac
SHA512 e6d456f6326b60637cbece71323f873d1f54a70092a49bfbecfa2feb5b3e7ac53a79d4a605ffc4ff1153f690467a3b61df88e99ffdaab8807d49934baafe99b6
TLSH
T123814A3AE9216C3701B9935ABCA81143FA644B9FA1414C9B78BC5C9C2F37D2310C6F2D
MD5 SHA1 SHA512 TLSH

Submit Download

24548-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\24548-goop-config.json
Size 2KB
SHA256 26bf996f65967ce60fb81d702892c0854bb09c36881f56d74a1f0eb2eaf9f6d3
MD5 eab5607a63f05fdf4ae7df9e09e467d5
SHA1 87dd8e2a27f3f9e29256344f8257c3c07952e9a7
SHA512 14749e378cf3e2aca5ce4eecc1adb861972ee7caba8fcd2a1c4debd4dc1803f8e4a9f8a2e8567389c5f108b7318016ad29c9f7a18a71032ac73f641a3c3a35a2
TLSH
T15851283AE9716C3B01F9535A3DA92282FA64439FA2404C5B38BC9C9C6F37D1250C6F69
MD5 SHA1 SHA512 TLSH

Submit Download

25446-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\25446-goop-config.json
Size 4KB
SHA256 2b5b6f9cdcd32a8fa3232e8f675904bb531abc993abf75d1aa00f01563c1f9e0
MD5 28fd90c77fae8e74fb0652973a156f49
SHA1 a568decfd0657a3826a0d79153a480b278a593f1
SHA512 6079154b3f6ccf902b1f7a9107321b7cff537e58654a174d1a50cc4e5a6effec5d2781f6340151b651742830051c64f0a653878d9e4aa613f22a1fc5571bf3de
SSDEEP 96:avol/6X5jblrxpV6AXZoKjYINhKxTDoOi/KWJr0eB:CmVpZc
TLSH
T172913637DA62AC3B11BA935D7E691342FA64439F62400C2B74BC9C8C5F37D129186F69
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

25448-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\25448-goop-config.json
Size 3KB
SHA256 d86659d0d8a18661b29d3471882c7c976c3c7fd3cd5dd440d983e8ba8abf9eca
MD5 14bc851f6c3699a9d9e71dd9826ad4c9
SHA1 c76fca10647dc425bd5b2c498c177fa044e3e9a0
SHA512 8c8723d6ec65f17fcf17079896785fa2a18b94ea6cf3b28f2ce473cfcba9114e89aca3b64ba033cf793a84e170a3d9704e16a3769cf26eee94ab2e9d4df60869
TLSH
T113712636E961BC3F06FA57A92DA92282FE61438FA1404D1B38BC5C9C4F3BC1251C5F69
MD5 SHA1 SHA512 TLSH

Submit Download

25884-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\25884-goop-config.json
Size 1KB
SHA256 be34b889304b6990cd38c29e47fce183b89c517c65cc18c84ee66f53ac81bcc4
MD5 8103089a5552fe414fce1a5c441feb30
SHA1 b31e2075b2c75d1446ed55cf4198ba83e8eb4b4e
SHA512 1c2b2c7a678fbacb16bc9d47cf02a18a104ca71ef37db840a63b9c09c6b1bc81ff6143507952dc05cfea933ea340b02e3dd2b53ffbf152beba2d6527438e81d1
TLSH
T15021D527B7AEB0FF00E957473539E2430DACC29DA05568EEF8245C29E135C32207B719
MD5 SHA1 SHA512 TLSH

Submit Download

25918-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\25918-goop-config.json
Size 3KB
SHA256 49c6f1b3a135aef79417b8d6c304f731a5912b6adbd8311ce770ae51c9ea5dff
MD5 d9956f8c674f0b0493bf0ae1dc05e066
SHA1 dc23714d6497bbaf823ea0330bf9527b5cebffd5
SHA512 bc3d4bb36f34086ccf1ff76fd334e672df7ef58b5305ac0b56c049b0dcf5a29e6a37280e168b77fd0768a88ea02cb19269146a672455900c91e2c6b6df67e684
TLSH
T1A671283AE9216C3702B9935ABDA82143FA64479FA1414C5B78BCAC9C1F3BD1350C6F5D
MD5 SHA1 SHA512 TLSH

Submit Download

26462-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\26462-goop-config.json
Size 5KB
SHA256 b8152382913436a258a71fbcba78ed03431448e3d614238118a40dcddbb95c04
MD5 9dca5ffdb2350448e77e0c3d97563c86
SHA1 6b9dfa568d87450593f4fc86aa77cf7c4b931eb6
SHA512 73428ad0206d86ed26620a19aed251605256e3d376ce6870252d60503a28171474103afadd447387b54e9881ad25c0000f4e62775949ee79005b825bbb1b9008
SSDEEP 96:5vSliEQ4lMwkkOYM6IEjLPmJm71sOS1XER1i1R6yXRxyURveYGt:Ns1Z
TLSH
T1B8C12836E5606C3B06BA93992DBD1242FE60434BA2404D5B3CBC5C9C2F37D52A5C6F6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

27168-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\27168-goop-config.json
Size 3KB
SHA256 830942040ae13c0ef222311343d867ae568b62f44c23a11783bffc5e0f3eec55
MD5 3dbc5d8578b68f3479297bab13d32af4
SHA1 8be871c9e214e2acd757504b0d57bdfe6b9c6ee1
SHA512 f40e35a3ac9da6d59f1ba8402f01c5fd9be3621d612a630866e69b34b9079587b8332610ee5badea06019d949fdceda03a2b9a3171475f15eb1a6ec8ffd0b352
TLSH
T186518C36E521AC3B06BA97593CE92182FA71438FA2404D5B79BC5C9C1F37D6250C1F6A
MD5 SHA1 SHA512 TLSH

Submit Download

27860-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\27860-goop-config.json
Size 10KB
SHA256 8f06a56895ec1fa56a4a3c0521ef8912172d73f0e494f4e12da38cf59741dae4
MD5 5883facf3e5ec88768030049cb7d4ab6
SHA1 d13d7b7ae78ef7e2f7761c14de8e01e0f8b36a7e
SHA512 f697a7220008ced74117d679bb9c13b65d5203ce8aafd06a0b08e950d23862f288869fbacd510a1310943588542528226e9e1df09c7358e4b142054952518bb1
SSDEEP 192:7YACXrS0rNFOlVDl4q/jEo8GyENoSQiB4jRs:7N/jEo8GyENoS/B4jRs
TLSH
T164329C37D9749D3F1A79626D2D995602F9B0034B9080AD5B39FC048C2F37E22D9CAB6D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

4688-goop-config.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\goop\4688-goop-config.json
Size 4KB
SHA256 36e3de1822009ec784053c361ed81a1906a829b9b5ddc1aab2aff32703530249
MD5 4dc6dfb30e12bb0fe00b0d802a2ada33
SHA1 9bd1b9c4db89d6cbf10d994580a3f34ac7e00b8f
SHA512 c7d4b91ba3393badcc1e759f6073dcf34672dcd71b99221386da57099be2a6cb08fb585d636e40c1b6dfbca845ea1092cdc5e3a7b323f011974138e22c6999f2
SSDEEP 48:8VuGAqNrgnWmkEJbWX3qMWSGC8OJC3L8hCD0N84Cg4aQu8JqCQaxou8nQCv:hqNrqXkEJ6UJLOJOwhs0u4uvAMcQG
TLSH
T11491D13AD6256C3B057A537EBEAA9182F660438B61404C1F38FC589C1F37D925587F1E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\index.html
Size 182B
SHA256 bc31eb3eddae5542cad87b7431a3c3a5d420b96df6761b8fcc88caa63eadfdec
MD5 a1f5159b1a53185cf96a44e5ae34dba0
SHA1 d74243df68c4542a8169681fc6be3d29b726d10b
SHA512 6fd670b7ad91a73e531cb52aa51ae27d8d7d49598160e8a459ef1e9fbfd7ef3252216683a2381f04ed887480fe76cd6f305fc7d114960aa2b34774e97316df08
TLSH
T1DEC022A4883100084AC06F902AD7E34C58C64864288059003AC2307844C4A51884E180
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\index\index.js
Size 1.7MB
SHA256 1d8dafe0015c11c5c6864f006884f2ed786e9067ca7929dad2ab75b37f032b1a
MD5 805d17f3392b69811bf65a87d98824ef
SHA1 a4bea3d70514a6c13403620177d022c18b868412
SHA512 8fbc13b0a4cd5b01c2fa151bdce17c854fd6f193aa872f7b0edaae056fd21f6d618247a61bb79fd9d9f8a7edfa8df86dddf9223d0e9fd17fb8ef46da2c00cf12
SSDEEP 49152:tVAtta6hFDnVUKSn26n1RHPtIE6fS74QWSBzM8MqpdpVWaWIeyegIgIzuwQpLIzN:tTJZM8MqpdpVWaWIeyegIgIzuwQpoMTK
TLSH
T1EB855EAE7195F46107E605F5487B1002BB391E9AB00DE848F3ACDDED296848F6177F3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.js.LICENSE.txt

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\index\index.js.LICENSE.txt
Size 2KB
SHA256 9b77232b80bf66f5a900252278e5dc2e5203a8ebe0e1658120b8a84677a890ab
MD5 5364fa27e201d5c36fa922c40d5f6bd7
SHA1 13b8bf2b18a59d1bf1430640a6ec4053139a872e
SHA512 ef94ec6a52a551bca26d2d89a32b6b0b1caa26889fad1659d5b0678fbdc926c982270ae5d46c00fc4c8883680861ce94815e26214bc9200b276a1dd39577a70f
TLSH
T1A1515799BD801EB1367107293F1179C110AB9242340AF158345DF1D8D9AE27FD2FF150
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\manifest.json
Size 2KB
SHA256 e928b489c5847c32d58d80bb263b6c4605ae7782d829310ac0aacd9965c29aeb
MD5 a1be5cfb336452893358f1d14de47687
SHA1 4f0173553058a18bb55cc59bbbfca398d8ca704c
SHA512 72c0da029aa4ede9c91eb893c91b78a29dee589dce8d8cc998f9bf1e4aa29da34978ed394345fdcd8371aaf8dc6d3a0a4083f636595bea2025ae1e8f8ff2fd64
TLSH
T106515877CD0ADD831ABDE354286A5A87FA5A37EF20148C0B367C0C4D4F35A1221CBA86
MD5 SHA1 SHA512 TLSH

Submit Download

gep_2xko.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_2xko.dll
Size 893KB
SHA256 cdee20a55f3b941f785025201a81be01ab596f84147e1f8496a28524838d0364
MD5 c52218d3a827875d370946350b72f008
SHA1 659d0d9ecf321c28b5a0fb79c09fa837f2ed6792
SHA512 b9b37f0545d2850f10f595771ef2e8871bb8b72af6e7be5072649064a8e4688a4aea37c7a3e27c014520b8b4b4a12a8d6c7690bc2a2837f11213e55bdb8c7543
SSDEEP 12288:nsqV5CX4j2RVdsg+s/I3DZjb2yQFG5u5KuRc8vs9:nsqUegMs/CV+fG5ucufvy
TLSH
T1FA152A77EE5174B7E830503489D71767B67AB4819361C3CB16C8262A7E52BE02F3AF84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_apex.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_apex.dll
Size 1.1MB
SHA256 e9c10fe9efbd33a992f0cbc35d4a3a1ce5aa3988f01295a8f556f4fb363e1698
MD5 9afee8c063822346aa55b22431094886
SHA1 b158f706427ca43be9a3c8d1a43e4609bb35e902
SHA512 c4619200f032277cc19eeb8758b3c38076796f1f1e0be89afd454be1f965b5818970d828178d596723a7b33d153b14c1fbf530c9e49b08bd74b672399487d1c0
SSDEEP 12288:WIg+3eYkxugfnM9leIzi/plAooN+L8l3nb+yoCbyQFGAu5ZuoNcELdjW:WIgALkxug03H+Il3btzfGAuTucFha
TLSH
T1DB354B67E96065BAE87090388A930767F73B74914371C7CB6784262A5E57FE02F3AF40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_arknights.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_arknights.dll
Size 1.0MB
SHA256 3481ce97f2fcfa793b8d9960635e5b6f74cb636ddfaeb6c8d56f9f633bac9e61
MD5 c18e76a848db779e7d57c27a21be0231
SHA1 8858c950c979b35edc54cf11747582faf21a56e2
SHA512 6ed6b63c56941f1e4e7c8919e19ff196a26dabb262f97e7cabe3f5a9b93a01073ceb49219c72f67267b4d3d2e81c765a6df708a15c4c65710dcac9a6f223f3d5
SSDEEP 24576:tAkcK9MA029wGknVffjPq/IfGAfSutlhV:x9MA0mnkliUSudV
TLSH
T1D2355B67E95024BAE834903889931767F23BB481537187CB6794362A6F57FD02F3AF84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_bedrock.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_bedrock.dll
Size 1004KB
SHA256 284c6b0c6f286671a8c7543908c75753d291e0f47d8ae4343b7ab0a182c7e877
MD5 e8f03bb16959bc48f997da89aff2bf28
SHA1 2a4df00b091cf4f31b4803bf3b8679cddc55bfe9
SHA512 bbfe9f8dd02a88627ec4a813a390883465ec9716ec8eef55b8b0cb1810aeab827d22d2b7cc54622c7b5e50211e6eb2ec44630775656b56e5f688ab52e42cb1f6
SSDEEP 12288:e47gfZNv9KT+MbJ5lSqY4GWKNl5neSeLoCyQFG5u5xVu1mECwf:eSexkT+Ml+4kL5nYLXfG5u5u1mgf
TLSH
T1DD253B67ED5024B6E834903889B70767B67BB491937183DB1784262B6E53BD02F3BF84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_bg3.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_bg3.dll
Size 884KB
SHA256 9fc74064f2b24beecd6d43a38bee2636d26afbd1151b0d593eef6424ba14b986
MD5 40700aa2fa00ddb05f4411eeb30d171e
SHA1 58d346ab14954de0766c6cc5367f6d82ca298864
SHA512 d5a619ae7a3baf9edd893a7738371fd4590cf6fcb8bce8e7ebcdb0bd0fcaa9c30378fec077e1956edff0d32a5daa056e49354b5c1789724fa9bdc3eaa83e439e
SSDEEP 12288:XplzWO7Tl1qk95Bwyg7fzsqpbfyQFGuQ5Cuf5VRsbi:Xp7Tl1q0wyktfGuQ0uxVT
TLSH
T17F151AB3EE5174B7E830503489D71767B67BB4919361C3CB1688262A7E52BE02F36F84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_cs2ext.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_cs2ext.dll
Size 1003KB
SHA256 15c17b343fe664413686cab85162694d337e0bf6322d1261d0ae4da58cfb27d2
MD5 5008c45e2fceb1a18fb3873e9b946a7f
SHA1 aa5586cc51fc8f72f93c6854dbfa1876d8e3954e
SHA512 a463f814be2704a1f4479c0bf523a8a688caf99e5dc7fb61a6bad739439e8e411c5b2afbe4341fc8045d391cff374710af9391d03b2c63cebbb2784e1c9e8dc7
SSDEEP 12288:oaiZ4ivrvjk1MyJMTsHY726/fbuoTyQFGAf5VudJE7SgwuMlte:oaiyivrvBhsM26/ju6fGAfPuzE7Arlo
TLSH
T11E253A77E95164B6EC30903489B70767B67BB4819371878B1788263B6E53BE02F3AF44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_darkndarker.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_darkndarker.dll
Size 883KB
SHA256 15bd5a112ab29d9f739c08e084fb7a56e5f8b3a1bdb4ecac97df7478c3d85163
MD5 717920a4ab69972aea48c8347af32a1d
SHA1 610098e2059c84696d2579e1fcf176ed72e6d49a
SHA512 2c6af44d36f5ff4a128519376b4a8ad92e9b3c3022166ee63d990ae160f2524e55f2f0978a465091d28c29b3f79f461210bb0fceb2a71ea4a74d8148f9bbcf5f
SSDEEP 6144:LpSinXX0Gkq1YHCuqV235I2nEN/tbeoiiQymmbQYHgEQ1mAyQnPXBjg/8Jr70d5p:dgGdYHCPy+b3ifmbsyQFGAu5huvQxT8u
TLSH
T137152A73EE5174B7E83090348AD71767B67BB4919361C38B1688262A7E53BE02F36F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_deadlock.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_deadlock.dll
Size 2.2MB
SHA256 3890cd40b2b330d9c2c863ff29bc1962f52d6b4e6feef1e3ce7321414c684d44
MD5 7588588356163e7e35afb87415ed9efb
SHA1 05ceb2e896f5bf442978a4171d6e3413bc54f9ea
SHA512 05e2def66679d50ce2494b29858c0dbc37e684cc5fe77fe4a69c8d755c0e56b73214dc010c6454233dc458a9ea10af97acef65f7a2190d1c2bff875f9aa93690
SSDEEP 49152:fBJovHpsy4ypHimmvOMvlZs4jmVqy8YYR0YZntWlztpzuLN:UXZspF0XuL
TLSH
T1E4A507AEB99128F5D4609179C7CB6563A53E340002338EFB4A1E7655BC64ABC8F3BF05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_diablo.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_diablo.dll
Size 2.0MB
SHA256 293fb50347ace32427b64decc694d16d88aaf5cdb282a8c866ccf239fb032a03
MD5 adb7051e29740e756b694ef32125e631
SHA1 caf7fd88365f6b1a2d1b0c95ee11fc19c666277e
SHA512 3c0c6b78d31dc4e0b0a5cf1bc873446556058815150bea5e2e6ed3626c30f4ee66330a972650420ba1f13e88bbe5f382e6a09b90ffb62d3cda113c1bb9c9f530
SSDEEP 49152:leBpTw9Y9C4+V3DtvR28oPL8sPUe4sIjcpa0XrqtpLZ1fxNvHiVgguSj:TW/u
TLSH
T16CA53A5B694628BEE0790138CB0B2E93993E7045827277FF12641A5E1D74BB47F7EB04
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_diablo4.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_diablo4.dll
Size 1.1MB
SHA256 d502d6c1fe80a8b128f312483f7a7150200b8e6f74eeb398c177bf2e98c62585
MD5 1b74fb13fadada023f9208b93b68bd13
SHA1 c16b8a526a60ad9ff5a36f36e1a198c55b4ef94b
SHA512 f509d1b88de74869f12ae4cfc0b4f4b9a896421dccc2acb80861516fefe1a749aedb921b24cc9e7d5ee9c0fe4c2ab09fb9e7669ac393fd3b520c884763437b27
SSDEEP 24576:F5+4qKk+TT/jf6I5CN8ImvmgqQ7fGAuNuHJak:W4qKk+X/jCI53Og8NupF
TLSH
T19E355E6BF95169BAEC309034C9A71737B63BB08143328BEB17441619AE527F81F3AF54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_dota.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_dota.dll
Size 1.0MB
SHA256 b01c988556692b3035b622fc0640e31461b08c8fe1eade71c83ef8c03bd0919d
MD5 79bd2a8c0b780a32da3990a0bde90b14
SHA1 78e4afcc6f0f8708170b4cf800c5ec038c1d3c86
SHA512 76d5dd3d0602c63068d4cc56071b0a0ee833fcc44a0f0beae60e3b4f8a668c845e2af92a9bbdfb7dae9ec5284657ef4b3f6ea09c0397bfe341307d1832b437c7
SSDEEP 12288:aNRTtyjoyz5+fHXpaT08bq8dFJBR8R6zBoYyQFGAuiOXuXKOo8P1P:aNRioy5bXdnB9zBdfGAuBua8NP
TLSH
T1FD354B66FD5574B6EC30903889D70727B63AB481837197CBA644362A6E53FE02F3AF44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_finalxiv.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_finalxiv.dll
Size 808KB
SHA256 6469f89fa1e84d920707d7450807e553a2ed25afb39763b770e93bbc99f6fa6d
MD5 2f296671b7b84e349a580bfe6c79d2a7
SHA1 f456526fa147f15b28e6101fddc4a35844212afb
SHA512 443f301b36e1aca981ec348078cc7803f88c962f23192e0c64653156af4dbac6c833f946ecdeba59be2be3e50bbcd2ee6af3101df99b81379e30edddfc4a5653
SSDEEP 12288:Rx+AnJXXcuJyKRNjlEGr2xoCyQFGCR53XujrVixH:H+4X5yWN2GSxPfGCRFuvViR
TLSH
T13A052A77ED457877EC30503489A70767A63BF4919762838B2688262E5D63BD02F37F88
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_fortnite.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_fortnite.dll
Size 1.1MB
SHA256 d93f627d89f160d8ec8f7f934a7ada51a37b71ffb8293e0a0b9fce30762ca785
MD5 61bb52269e473a7f1086b4b96bd0dcf0
SHA1 8d046e090d1405bba45e3995a9bc53dc20d65e78
SHA512 6d7f5e0470de24f1838f36757277cafd05a1e43468b04c087c34e1e35e70697336f652ebb68aa5af02b7d9d08d2bea585a5e151ff29e54613f21ef8cee5719d5
SSDEEP 24576:66AfSWziNYI1ukmxBV0o9RfGkBMuoTZRvbdaI:j1F6znMuMdaI
TLSH
T144353A67E95024BAE83490388A970767F63B7481837187CB6784362A5F57FE02F3AF54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_genshinimpact.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_genshinimpact.dll
Size 898KB
SHA256 8def04a1a8b149c711366ec3aacc5d8ce3c86b02f842b87661eb7bcfc57aa8ef
MD5 439a0aea8ae8bc4110e7c819c946eccb
SHA1 0eb417eadea39c9a27a7ddeff3fccd7a832ece31
SHA512 2dc381d74c548962cdfd1b986cb88b7de7bbf13c706f9efcdf1b0489d7118bc9f9271304be494e9696b590a70abd0b0aa9a1f6d67b0206d3c77004aee9b33308
SSDEEP 12288:hMzDqhavn1lLXC0gBCp6XSEkoss+uyQFGCR53XulMUBQ:hMzmavfC1YpxEkOfGCRFul3Q
TLSH
T199152977ED5174B7EC30903889970767B67AB4819361C78B16C8362A7E52BE02F36F84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_leaguex64.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_leaguex64.dll
Size 1.3MB
SHA256 2575e22f0e56fa2ce9241550f37647a0e78e93fd084c9b0145c459443a64df2f
MD5 b8d1de591a4abb7542860cda9fdee190
SHA1 690ce7f8fc55353f84249a4eac83f6daee6e2c97
SHA512 7db3d2789287a29ffc7e295b77823a7df8af7a595d14e12a8b34c09cc062ad1b1fff08b949f9b1651b2c0b259b8450c0bcfac74705cf4d1903d1d699cb5e1730
SSDEEP 12288:LXaUAAJ4nNbFI4fTLPQzHEH2exSdxcoYCyQFGBu5LXu602Cfgc4vGfPFDqv:LX54rXPmEH21WFCfGBupu602CIlvGHEv
TLSH
T1ED555B5AED662076E8349038CA878B6FE63670554361D7CB1E8816AB5E137E01F3BFC1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_lolarena.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_lolarena.dll
Size 946KB
SHA256 b2aaeedce71511ebacb8ac1da3f477172e1139f6fc3c3fa1c7ad126b2c4120b4
MD5 296c6b7bca838982d1afe9c561177f81
SHA1 7e57b409659eedbcc6a87cd6c86940bb605cec65
SHA512 e44e24964d71b7652e6e5b4f2a3310408ada428247318472e24fab9542a619c2a682b257aa41b91d0cf63553cbb679a3526d29a7e57196eb4405d52d017dfdf6
SSDEEP 12288:ODDWx4GuOAKgLDt4XHNSbmNaoEcFyQFGkt5tDuTRzbQ:ODD7G64XNBo4fGktfulQ
TLSH
T194252A77ED6074B7EC30903489A71767B67BB4815362878B16C8263A5E53BD02F3AF84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_lostark.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_lostark.dll
Size 897KB
SHA256 8613d45359f4838aeeca6b11d6e0f294c2fa3228ee6f3990f4b63aae68b9dc0a
MD5 0287e03a079754fb87693091a9f37e04
SHA1 c08acbefe449d904dbccb3109e5d12745f1c49fa
SHA512 370854886c4ae15b5f1186c374c96c5764b8dacc5e5d9e24e6d1383caa515cb6f1fb781c6a70e29642ca4fb952da68b728233d1b9653591aed8653ae9777c610
SSDEEP 12288:M+ewtaa/LM+HFAKKcFbEyQFGqR5Mub/cAEg:M+e7aT/FAy6fGqRqujc+
TLSH
T12E152A67EE5064B7E830903889D71767B67BB4919361C3CB16C8262A7E53BE02F36F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_marvelrivals.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_marvelrivals.dll
Size 1.0MB
SHA256 fd8fd8146df34c5d3e75f19ada86b7857a73b16aaeac05cecd3547b790aa8911
MD5 2fa0c16d2832eb0bc3a1385f3576ad51
SHA1 73f6d3157dc7fe08cdf7d265386fe332bea41638
SHA512 d24b64daaa66c80b7d301345759a295cadbb619c08d7c6b8ea8bb180de9fac242c8857429d0dae560b563205cba3589df0d567ee3fa2b2d1e80144b3f59c9964
SSDEEP 12288:grBaT9nNqe9H1kZ7hR7FqJbY8rXd5mvBJoEyQFGAu5LujI+DFh:grBGnNJ9VkZ3FqJDjdIvTlfGAuBusUb
TLSH
T115354B63E95124BAE83491348A970767F73AB481837187CB6784362B5E57FE02F3AF50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_minecraft.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_minecraft.dll
Size 1.5MB
SHA256 d5584ff6384c9838df1bd10669e7167e575246b437fee691f62b2bb1b3f4c2d8
MD5 10e426cd64d64d498a1692ad80d8e8d4
SHA1 1b933759044fe5d299e626d90e5b5c033ece82b2
SHA512 daa9937abd964994a424f9499666f9a01bb5b7f73be6822a6987ab6b46d3bfdedda1c2eefbc8997881447f10049de1734bbf5f3be969e8ffb477ff2d9ed78c9a
SSDEEP 24576:Tn/QCbnxHY6As7QrQVYPbx9QfG5uMuGtNkcG1:7oWnJPt7Q3bxAMuUhY
TLSH
T10265E92EDBA4107AFC60F439DB82AA52D137FC52952D436B1E475B2ABE4E7435A31F00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_mtga.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_mtga.dll
Size 982KB
SHA256 da984803eb5020ce32386ee5440b9eaec0cda234abbce2c547f80676638f1951
MD5 e7d0946a0794d212bd20144978439245
SHA1 1c73cc5681abc53bfee6458a1a99643162d237a6
SHA512 55fa5588ec7b2f4a559666f0fcba2d86b6f0a1f98ad72e3f5552b3de64c343a784138e4e9a95d3cdc32205ec296f16e06c4ea41c4300d2b77a269ac6bef96e0a
SSDEEP 12288:6MktgJ52j+iKJ+wm7QBsmz8g5oDyQFGAuiOuDsGALCCemw:6Mkw2j6UwuQym4oCfGAuNunCQ
TLSH
T177254B77ED5164BAEC34903889B30767B67BB4818361879B1784263B5E53BE02F3AF44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_newworld.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_newworld.dll
Size 916KB
SHA256 507a7e32a7014425a5c14796a1d6c004b2d219bbe7ab7b049bb856465c30a585
MD5 afd5c159159c3da872b1c3164f5b25b7
SHA1 57dfd0b42ba8019dec9b76df3b90269957263b4c
SHA512 8fde525ad799cad4d387a4a771e71762d2e9931bd27dc88c5aa1c99ae63c81b96e23eb32f895c348f8e292a605cfa631ae45aa94dafb33c25fe43a5adcc80828
SSDEEP 12288:TXnF8NWMUBVwc2b5qF8xM8yby3yQFGut5RuTj6X+h0Jo:TXnXMUBVwcyy8xVfGutvuvQ+q
TLSH
T1FB151A73ED5174B6EC30903489A71767B67BB4919361838B16C8362A7E53BE02F3AF44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_overwatch2.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_overwatch2.dll
Size 1.3MB
SHA256 683bd16420561e6259a176ccd5f7f3a073bcb96f41e61095be7fe5fe1c6a79d1
MD5 c476e0e66ba93103f61f964d89a52f8c
SHA1 94396657a8aa280504783965aa2c80009010733a
SHA512 5406bd626cb4183e995619101abae51fcbd04d288f729130f32496106b3a3f85c5042ce7ba7f0da39a7259b426f95a97406e5064fddad2ff3d4331dfd083afbb
SSDEEP 12288:Tuy0wHjDddGfGPdL7JFRiM8YueQ3o4yQFGBuYuXuu13DZ:TuIH3d/JFQ7eQ39fGBu/uuB9
TLSH
T11055F862EDA1E16FF838C0B7C99B4A37B6377475533256D7824812362ED27902E3EB05
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_palworld.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_palworld.dll
Size 896KB
SHA256 be4708dfbc327554557b224f83cca2649be23176ef71649c790febf67780d6c0
MD5 56312828bdd98125e724be6312761359
SHA1 de268890ef0437b30a9a51f21814d032e5a87810
SHA512 711a30749f6be39f2a9d83896eae3f82881fefdf2c551338dd1758e8c731660406524e49ce162b5094ce58525a1daab812221227401704e1288e4f2dda9f6912
SSDEEP 12288:drOysC58M784xPIVFIwkbmkyQFG5u5fXuZNrHA3:drOye08PVFNmfG5uRuZFHA3
TLSH
T1FA1529B7ED5174B7E830903489971767B67BB4819361C38B16C8262A7E53BE02F3AF44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_pathofexile.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_pathofexile.dll
Size 937KB
SHA256 40cf3fe7c142a7be66613b6817fc893e5031755630db2ef55b200b3c1ff0e977
MD5 f96843d2f3bea08be544809d75c77971
SHA1 b3658dadab38b18ba612ac0e38cd13fb303ff5e5
SHA512 61491cb85ee88f644173a859a327e257828bbf300605fd95ff55b0bcf9466b22d9fb1f63f611a1f00df71a0f13e2dc6bb870062bee1955b7951aaadc565ea688
SSDEEP 24576:7voxNkBNYDo2VW+tSrLEx4fGCu1umxEi4:KF39w21uK4
TLSH
T168152967ED5164B7EC30903889A30767B67BB4919361878B16C8363A6E53BE02F37F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_poe2.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_poe2.dll
Size 958KB
SHA256 28cac37e76d783aa64d915651aeb8b7d8ab52597f0fa9e4abd261f7f7ae7d703
MD5 fa1b9e42507b498881f9f3ade7dc67cb
SHA1 53f038c5cbd178c3b79d9f570948a1516fa62da3
SHA512 08985e672ef5aa11ba21dca0386c1b9f2ca671d78772d6567403708446981cd81a5587607ec4b9f981b4f23159460db3275d9c12dccee20f4c536086b9a5edca
SSDEEP 12288:/cSK/frFXB5WTXhC0k/yCnT+OOsEo3yQFGAf56uwXZaxFv:/cSyrFrAk66TxOsE2fGAfwuWZ4v
TLSH
T1A2252A77ED5164B7EC30903889A70767B67BB481936187CB16C8263A5E53BE02F36F48
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_pubg.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_pubg.dll
Size 1.5MB
SHA256 bb7b5ca76d51888840ba4bc7509e0e7774e29f5c001aa0e7f315a31e8c5fd616
MD5 6ebf85d8f51a5c64840708bc5ed221db
SHA1 c63c5628cf1092ec018271fb5a9a40515daf94f3
SHA512 b77e1ca5e3d11060c80a916796bd9a366e8e576abf26d64e836bb05d0b562905b67ea87718776ca4ce5e3529ca9fec8294ea2b3f09d91e164a4238dbd7f5150c
SSDEEP 24576:YfrT3r+lFz0wZDKLy2TE4VFyKjqbEKW7SfGuW0uBZb:arbrQV0wZKT9Vtjqwl0unb
TLSH
T1CF656C67EA9020BAE8349238CA931767F6767441537197DB36CC1A2A5F53BE01F3AF40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_rainbowsixsiege.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_rainbowsixsiege.dll
Size 3.1MB
SHA256 a0af953067b38ce85a27a7be1c540a082da7a497be40de7fb3412699ee148046
MD5 71f0e19372cec746e8825ab3b1711d92
SHA1 3e83809e17de8203e8a37a927b1dcd72a5020340
SHA512 17dae7702522e02155f0c8334d2a1a6f49393d8b6054e195e8e49bb51aac9260c588353676c473b959a544661149a505fd2cb7aeb28eac94d112cdf705bf378b
SSDEEP 98304:ksxjidG10zz8qJNGOFezQYYj/3oE+JYrFjQw9H+2R89xT4G1i63NwFzZt/fj4zhJ:kAm44JNGOFeznYDoE+g59Hh89x/i6NwG
TLSH
T1ADE5A330AA93E0E5C92DC1319A564367F13617CB83B2734F35BD42F5AD913868A6BB4C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_rematch.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_rematch.dll
Size 862KB
SHA256 02a64c426eb9479f94759053831421225ade387a2acf4d161b9ec1ef5e545a4f
MD5 43f8eef5d532f48bb4cd8d19fd65ebef
SHA1 12d963127cad9ad4d3aecf7051c9ce4170e8db8e
SHA512 e588b31ff28d9988e76a2a9550d048443080d51a692b58fdd2d53bf3e5e2cf755b9ebe67bb51d38e7b74cf554d19a75879b86171a0f4eca35d225e3f040ab18b
SSDEEP 12288:Fjj4GOf1qLKbVtlbMeChzbWSyQFGu15VXu/Ys:Ff4LqEbMebSfGu1zu/Z
TLSH
T102152A77EE5174B7EC30913489D31767B63BB4919361C38B1648262A6E53BE02F3AF84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_rl.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_rl.dll
Size 1.1MB
SHA256 cb3ee61450a4d25740929df373dd9768094bd73260f1e8344906202e53cc7c52
MD5 1498e6ca10019a0b5eacafb61f8b1e3c
SHA1 53ac5b15ee18f84ac876009c69f0365273211790
SHA512 1b9a6b8b1bf4768df7de639b273f5e52ad4d347eefb19524d1223d62f1f4734e23cb7ccf204350523df26ca182f506d88283eadf069b0f6da647254e1521f612
SSDEEP 12288:vw333/p1mFX/IsUYtjeXzPb6WpdEfXo9PyQFGCu5zju6AJ6yb84U:vw333fm1LjUWWEfXgfGCu1u6d4U
TLSH
T1F4354A63ED6521BEE871903489930763B63BB48183718BDB6784252B5F96FE02F36F50
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_schedule.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_schedule.dll
Size 900KB
SHA256 4d25b47641c77f052c1cd73c14706133ebda1b7904176c8af4f9691f66c536b8
MD5 799d14e0a44249735804e8eacb506faf
SHA1 ca9cdc2dcdfd1f8a9e5e2908189bcd5eb08025fa
SHA512 7fdcfa6d6eb78545710b3c22946a30acad5f148f90e526a6be52ca468eaa0025c4881088897a8d0ee3a7cab6bc9d9fed0bd9d3c75a040a4ad56fd3b95d8897a8
SSDEEP 12288:lVa5b8IZAeTiVTtVXZbGxyQFGut5Ru0Gi8wz:lVa5puXTtBWfGutvu92z
TLSH
T1C81519B2EE5174B7EC30903489971767B67BB4919361C38B16C8263A7E52BE02F36F44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_sotf.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_sotf.dll
Size 912KB
SHA256 5c63d02b57226c0b3fff860f9013d4983960fe70b34c4369fe74f7a0abc6ab20
MD5 0d1c9e821980406e7050f5142d61702e
SHA1 6ed34bb5f334427ebe1b1c8b4b14e3c148835d47
SHA512 5ce20ec4fb16a7a62d9e8574c09a494e8be33c4bdf2a6a8ddae648f36512ba4e90e7b05bd1d4b0010ab98ab273fc37d5e6fea2be530cf6a8b280865a1ca74bb5
SSDEEP 12288:wee4wcTYFizjXMszIiibWyQFGAu5huiZG7wu:weeGUiXMsM6fGAuXuEG7T
TLSH
T1FD151AB6ED5074B7EC30503489A71767B67BB4919361838B16C8362A7E53BE02F3AF44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_subnautica2.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_subnautica2.dll
Size 939KB
SHA256 c5e515bb003d494e8bd8a83b19f93fa1b05db17ba8dfea6dc4096a4ea5cc9831
MD5 2d723db72f018c4b86883ad40ca4be36
SHA1 320a5ea5043e93eabc7c1a2c10a36c713bbd5119
SHA512 c6e398849d4d7d1aefe3bac65cc44aeabfc5c2a65594466271abf945bf63be615da03b00edd135f30b5c0752cec38356349aa2334d83a6761b9139505fbdaac7
SSDEEP 12288:jw5KMjg52EfUm6foAhRRtnnXuoyaPayQFGCu5uubEwBcyS8mG:jw5TK29m0PRTnn+CPafGCuQu4zyS8r
TLSH
T14E252A77ED5064B7EC30903889A71767B67BB4819361878B16C8362A5E53BE02F37F84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_supervive.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_supervive.dll
Size 912KB
SHA256 11c67f35676c60f6fb9fbf03120ec70d1097d6b275449bf050f4d439806583fa
MD5 b4b1d2aff5b7619085a07bf996275eac
SHA1 413e25958c385dc58014a6f89d9dfc4f6f4b9351
SHA512 c414b96ecded3b14275a12cfb3f8fa633e7918f805212da73f41991877ee25237889ea5fab9b04b28fb4c7439401db28778e1869dbbb3bdd082217d0b5dbf611
SSDEEP 12288:0jAJsIP6GdSOZHVtWbkLyQFGkt5t/uID8B:0jALP19HVvLfGktruID8
TLSH
T1F2151A76ED5164B7EC30903489971767B67BB4819361C3CB16C8262A7E53BE02F3AF84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_tarkov.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_tarkov.dll
Size 1.6MB
SHA256 b0b9f219797642e0c686188b6c3a47c57f45f773af19046bf8be8ccbd73713ea
MD5 f3f7d836c65b7efa7ec1a50c1a2db4fb
SHA1 3f96c5895b3e417ddc73cd833b14890c6f798129
SHA512 c9f9ad1875c623c19cdd5e0d2e9a9ae717a3ba1ac2337c6495950a630306b5e804337b6d4fa1ff60eb3357f6ea0cfbc0ef3ecc8a1b9845b0be8834509da77f36
SSDEEP 49152:uFQsG0Cj33HxVbfKZPApAAAvJU68JVbBuON5:fru
TLSH
T165754A2EA55A15BAE4386078C7D71663B93E30458233AABF1741252ABD417F8DF3EF40
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_tft.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_tft.dll
Size 1.1MB
SHA256 8bd91bc2d09f521d82a0611b843d13537be3cf0712b949ea89bbb5fc09422fc2
MD5 9b610cfb82aee2400531bc4138656e9f
SHA1 7f09da5462cb96c058b9a78da6076ced4c34666e
SHA512 e07f0bf923a2e4365b807a46f3f2fda2b15e4e10cc3f96f03e0581eaee3f4b58298868993846eeeb2f2b7fe147d0b28774455bea4c6a64cf1764af6992ac9937
SSDEEP 12288:cq2RmabYrP/eENGSmUbaJx5RZoVHyQFGCu5ztuR4rYD3/kH:ch3bY70S/mJLRZofGCuru7LkH
TLSH
T1AF355C73E95024BAE83490388A930767F73AB481537197CB6784262A5F57FE02F3AF54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_tftx64.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_tftx64.dll
Size 1.1MB
SHA256 fa568c402edabfac122df8895908f4176aa92fbcd9ce25ddac4a90a7529bdc62
MD5 cc839fcdfd0ff65c66691d0d2ef9fb2d
SHA1 0df8d76a4d2c84b41356071a271976a58951acfe
SHA512 3a81431844918e8f241fe6e23225e094b40ae2ea444ca829f2bf5b951d18331ba2083aa5bea0d01e57318f5c66f591fef42d9c605704198c6c9a1e632cf76d30
SSDEEP 12288:Ty9mwzZF6Kk5a7jai0cQVOL8DOrETFyAvypd3oeyQFGAu5XXuvp4YdsJgPz6AL:Ty9XZF6G7g886IxVKhjfGAuduh3Tm
TLSH
T1E8355C73EE5025BAE87090388AA31767F73A7481537187CB5784262A5F57BE02F3AF44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_valorant.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_valorant.dll
Size 1.2MB
SHA256 97ef85e205ac6643777a694f4d38eb292a44577bd0df71ea402cba038b55abcc
MD5 1e1d87a9d832939c4616346fa88de4de
SHA1 c5637ed120d46da7852a816f2b09b9e744fd2819
SHA512 2f07e3ec2a14da99285654bfc63d78aadb6b8a2236b68abab218dccfdd396dafd3e82eb3ab9387d6ea823015449b483bc7f791e15dd78cbb91367f5a96bf5020
SSDEEP 24576:lkYnSk/xKcTUM2Kh5AO5SnZKXJmcuMWNfGutPu87274a:ldSWxXl2KTAO5GZ4zqPu8i8
TLSH
T1E9455A77E95161BAE83891348A970B57F77B70424371C7DB1284163A6E53BE02F3AFA0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_warframeext.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_warframeext.dll
Size 993KB
SHA256 2d9bdb5fd1f987dfef2993b63ee2a281d89ed5383f5239cb95121391d97f4f8b
MD5 db4047ebdb1bd51406557783baabb75e
SHA1 04ffb55e83a5fcc9f6f215a69f2672683649c4ad
SHA512 9730b2ff35befc5e7cfb283c388073692a386e17cf39583a37238a2780da3c57edfada5f169901137abe78fb28405418b0794a113d7ddc98a34676ddb95461a2
SSDEEP 12288:a2T7U90NmQyrJ0LpqDJZfTflDqnLmo+yQFGqR5Mu+xaECPGCJFEm:aYo90pGbDJZrf16yffGqRquODYJFEm
TLSH
T120254B77ED5074B7EC30903889B74767B67AB4819361839B1688263B5E53BE02F3AF44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_windrose.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_windrose.dll
Size 885KB
SHA256 90d6bd2b5097432c48590a124f64f5fb8ff103de1b7f34ff26a0bcc4b658cad0
MD5 be1595ef4dcca9dbda1c3ffbb8e33b4b
SHA1 21fe1dc6e5e956a9c8113c1591de569fbf4f0b20
SHA512 10710e4ab19f03a548c94f4c36edbb95df380745808f0fb36b68c9420f0c0244a8992265a7f15bba24d9ecde674688f6c116de509820fa7b8e28ef51a232f507
SSDEEP 12288:esL+AJWMG5wSOw0Ual8pggUo4uyQFGut5RuqyFu/Dw:espxwJavgUkfGutvu6Dw
TLSH
T123152973EE5174B7EC30903489D31767B67BB4919361C78B1688262A7E52BE02F36F84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_wow.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_wow.dll
Size 1.0MB
SHA256 0f1a51926ad42cb689dd93ab76aab13b73db8f3e5fb13b27c35f977c6654abd1
MD5 7a708c1195cc93683c533e1a8be9f30c
SHA1 1e09334556655d554277fff69312f44c47570456
SHA512 e2daf5335d4533f1d22f678c34e40d6cf4a375e69993a7a2a1cb725014cb498dc78b370837456a184544e3d6e5c5f9bc9f07d18eef293c3965874ada04e79539
SSDEEP 12288:AoA2Or8swrfyN9//6JkVD0eaXQCOtmkMg0wI1thoYCyQFG5u5fXuPpq2YQ+u:AoAl8s+UIrXzamNxwch2fG5uRuPpqbj
TLSH
T161254B77ED5024B7E834903889A70767B67AB481437187CB5788362B6E53BE02F3AF54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gep_xfortnite.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\gep_xfortnite.dll
Size 1.1MB
SHA256 0123d409c3a656bdfb422412199b7b29f9b774a9005618c896f5b0b7c7c3f876
MD5 b64692394a98b866aa10de5827604770
SHA1 20ab184246490fb94e7fd50cdd35f117b8020a65
SHA512 1c6a46262a25d880d339cee0291a79434ef46aa81efeb2e634ee3bdd5b406f961d019dc5c80c42a2aedf05ba39133c31ce647a924cfe262bb5fd2d87b99d123d
SSDEEP 12288:OZog2C2ggEpJmDfFpt6S9+WU8l47UBh2SVXLov9yQFGu1RPuus8jWbZh7:OZd2ggEON6eU8CgBwcXL8fGu1xuHyGZ
TLSH
T1B3354A67E95024BAE83491388A970767F73B7481837187CB6784362A5E57FE02F3AF44
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libowgameevents64.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\64\libowgameevents64.dll
Size 222KB
SHA256 5fa48b4cacb3d1cfe185d274d7f1eeb6f20ebf0e3f5cc6d8a4c338ea13ada280
MD5 fe06dab0ccbf8fe6c2e50456d59bccac
SHA1 ee90a13ad19ba189af447929502f688e4e4c3b04
SHA512 b4d5a48562b46f3857911d1b23d6a34eab601acd9cd3b33a6744a4cf968b4a6fd91cce115dfd6cb2997eb99f159bf0c90bcee33c8bdc38a05047f759c7d797c2
SSDEEP 3072:XQdeIieBq6kbdyg1CM7DPo2DkTuN6tWCn0voFwFb+bul6Ygob61fNHd3:XueHp6kbdyggM7/DkTuN6osCbb5iQWfv
TLSH
T16E244A1A77A444B5EC678139CA938A46E2B278910B7097CF53A0437EDF2F3E1663D361
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GEPPlugin64.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\GEPPlugin64.dll
Size 305KB
SHA256 3c35074295888f07f75188e242c4c99fffdabbb5b4766e532c5c7217c8551a27
MD5 0ec18b13ce1699f46d9bac6f4b00a0a4
SHA1 70ec30e23b0bc21bf3b9c8fdbf233f1b5cc632c1
SHA512 3059f28d8f342f767bde3c98e9085dbc8bb22a42910c5846ddd10f901506f754cdd3d613ad04302c2f90b000d1d66dc0f3b62f7c48a98e43668b18b7514cb537
SSDEEP 6144:wWj2J8UDpaeCgx7rCCw8k6zvt2ToohPCvN:rg8UlaHgxiCw81xo
TLSH
T174647C1AB3A510B9E477913C89538A06E7F2B8160771D7EF03A0476A3F277D0693EB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

experimental-plugin.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\experimental-plugin.dll
Size 21KB
SHA256 ee15836d4eb25a8cf8883b74e3d992a0679dcb6aecfa11f2756e6e9442592202
MD5 26cf83a5bc6cf3d32191f4eb67a6bb07
SHA1 1d0213f39af4264aee15f4f393a6433768190cab
SHA512 3eaa8e6535206a064b0e44e03d93efb51e648447760f26abd6197daa4613173d5e01ed9d4b1f87b8eeb1f40180f177ac6b2ed772cdf2f36077e2e750ec4ae5b2
SSDEEP 384:cghlzNYstjFZoyfIYiPWDQySJIVE8E9VF0NyZV98:D7jLoygYiPr2EY
TLSH
T11CA29D02C7A40C22DF7F4A71B4E58E3557B9BB425950CAE71029C0554F667881FA73FE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

simple-io-plugin.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ggfmakpbllghoepnmfelddbminamnbmfelbahfdp\312.3.3\plugins\simple-io-plugin.dll
Size 58KB
SHA256 28272f5aae3fc9cfcd722cc1a76399cbd597641af7787abbd62ce959ddea7841
MD5 aa0276503b6b65e89ded00bbecf53a33
SHA1 86b4d68f3048c6383825b286cd81dc2b6b1e6f8d
SHA512 dadb71c777463daffc8706673abf0464e5efc739a8576cd1c9e1e80a1ab8261ded2f12e0b84bfe636481abb335390aef4decfcc276d229a5b25dd47586b0e44b
SSDEEP 768:QlmUgi8Y2oXVuYEqF8k9KAVfE0GLD79Gx8D+XEWOpRxccYiPtu5ALIxIz5:QlmUhO2PECtKLc8DMEWOpRxcc7PtGil
TLSH
T17E437E8167E80A17E9FF5AF8B8E0462107B2BA596422E7CE4DC9D0FD196378509603F7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\_metadata\verified_contents.json
Size 12KB
SHA256 7862c200fcf5393a048a83c30cd0b7af16476b627aad4a1ee4361bce26197d56
MD5 a9e4b65376d93bb70e6f1d0c0e3ca2e6
SHA1 f84b90cb5c7cad02506733d0f895b646195aed2d
SHA512 8d1ff99e4e2767403c21fd789b0bc4dcb2d69029ca4c9b3751ab37355e8789d1ba0fbfec62b1f6f68eaf2d84af67a0d74d2390964e33502dff2c3f00688397f3
SSDEEP 192:TelBu5d3mENbXXgHYxsd7NtOJdN5Ncn816DNRL:KlBe/q1jOJdN5NG816hRL
TLSH
T186428319E88E4C4759B4819568845C9B6CE99BC75C42B18A37C31FCE4B4F5AEE833B0F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\manifest.json
Size 558B
SHA256 791cfa0b4b01351012aae1b1738d2c21dc14feb4e4346685962eba258196f9ef
MD5 1cce77113578cdf719b942b1983c7bd1
SHA1 a3a7ef71c928368dd3df63d2f138d2462143c986
SHA512 a7af10aa2867957a07cedf1e70542cc8832ad67a791dee698f9cd97a4f87cfff4577016300d89a17e5f8ac0b29f5ed387b30334574a4967666d90332dd910e5b
TLSH
T157F02410C45459735D88935809EE5A4AA766591318147C2C3B1E207C9FAEB3FA1BF7FC
MD5 SHA1 SHA512 TLSH

Submit Download

avcodec-61.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\avcodec-61.dll
Size 33.8MB
SHA256 29805de39f308a8ee6bb9d5bb7b842011aa378beca0f930c72968196a03e6a41
MD5 5deea2ba31ee04284f87ff740cfe7508
SHA1 fce872581b1e5023a67c5bcd36578d0fbfe5fb49
SHA512 896ddeb1996f484ce332c2aed7e5cbb2140758b8d4a1941cd5b1c513e6e254d3cc1db43cb8e7da8cc182fde7f3025ac4fecef04212a616d8fcc06d5e13d2242e
SSDEEP 393216:GDQ/kDmR/iVWS2TiFcuxS/zz4n6F2z/Kr41:G+nwGX46941
TLSH
T1E077AF4AF2A311E4C76BC874827A9A13FA24346D43111BFB66D55A652F73BF05B3AF00
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avdevice-61.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\avdevice-61.dll
Size 83KB
SHA256 d83b8f118720edc556a22f6f8f84bccdca09bc92f502420154aa3be3ed34ccad
MD5 bbfac28327f414978eb51e8018db55f1
SHA1 2bec00c1c8f29ebc744d61855d9f36d1aa46c8be
SHA512 28d2029d08fc1eb814b6b9292cef37314485e9d6dcba74cee7d9de65cb35d88ebeda74710bbdd00e446577cf49b75f808570d0bae0555d616a4115be9fa745b7
SSDEEP 1536:uZxgLsJ2MlwiwN3olqEqNWpW3SpydB6JlL87PeUd:u8r3olDpKBulwiUd
TLSH
T16F836C07B2F5188DE522C139BAA65927F7B5F15E2700A3CF2364826D2F233D15E39329
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avfilter-10.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\avfilter-10.dll
Size 6.5MB
SHA256 4ada35b3c8cdb4a42e3a50b46fc20dfd8504f4478a9f37e20244a7c22db875a1
MD5 297ff4c632df3e3c1e3a4a78156bd6cf
SHA1 038a4bedaf69c0eaeefb69681a382f15c60e6fa2
SHA512 9577cd86a7b78f2ca6520d27f48a57b0364731e4add3cc4fc2f48a63234c88b2227eca2bef746ae870e07f9299a6086aedf4873293bbb16697b8ba75fab88181
SSDEEP 49152:SCLbUFK7Uczyt77jocG1fv/ge10GcCQtaMUZVPwv+YDETOpshGf5gEOZJe1SJLlj:dRYcz9NDnMU7gnsGhE5J0gB
TLSH
T16966F94922760786E018EEF522152543DE2073D233E19FF26FDC8A280F56BE6F971E95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avformat-61.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\avformat-61.dll
Size 2.3MB
SHA256 f4ed79bad86bb78a95e47aa9b10f57e619c97855c1acc4ee8d3ee972d73cb19a
MD5 cac2d59edcd4e7287bfc7ad63c082c7d
SHA1 34e7d5cd3f893c409e5c5e241807b57295368f02
SHA512 76bb59efec4c07861d2c18927f7a25f9a5bd0e4158c7f7e8de75378da12f9861248f646bc99fdf3312db9176eed34014f0c9cbae25de3b6879ed7285914f60a9
SSDEEP 49152:PNC+n7iwr/SI/CUTuKn7+axerGC3HrHahz52LmE1B8aTiAx3:PNC+ewO+buKnozLaVE11
TLSH
T19DB58D57B3B511E8C6ABC078864B5617FBF1B4591320ABFB06508B792F23BF5663A310
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avutil-59.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\avutil-59.dll
Size 900KB
SHA256 f0b3729632d09ae30fc6cd47aff0759240060167a0978f8ec400d7dafd4105cd
MD5 eb0dbf33033e7ea8cb1c0b1400d93f2f
SHA1 d3b2fe53e122a073297cdbedb3dca067c8e13fed
SHA512 e97f14ea059507526ed5b878f867daa3beee671fd4eb5a004be9b232b10ec1a7dbf59932a9fe8ccf5f56436d671ff868f2a188366a5e1eb87d7155cce83615ec
SSDEEP 12288:GT12J1UIopX3HuUs2IgkYTZx9oN7gKlfMJJ5Q+a208nPe9JU:GTwJ1UHZs2Xfr/KlfMv5i2H
TLSH
T1F9156D05D6D00466C8664434D7AB594AF2723453D750BBEF23E249683F27BE22CBBB36
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

concrt140.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\concrt140.dll
Size 315KB
SHA256 e2e4609c569c69f7b1686f6d0e81ce62187ac5df05e0247954500053b3c3de3f
MD5 8fc1c2f2ebb7e46df30ecd772622b0bc
SHA1 168be3b4545dc617b99d0598565a03c0366820e4
SHA512 6f3ec746ec10334692e930b515a37f3d5bd342ca60a49c4298924be933262d7d782de8a11d4f865a30a5aa22c5515059e3e39a92a61ae5fae53622ceaa7d5c4b
SSDEEP 6144:7uV4MxQCZKZ+dqA2xwNFMH5X9r69wB9RfRtOm+nWzgoH9e15Jl:CSaZKZLAYwNHwFR91zHmh
TLSH
T18C64398A3A140CE6E967D0398A53CA0BE7F2BD455352C3CB1364939E5F637D0D93A722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.exe

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\ffmpeg.exe
Size 437KB
SHA256 ab8a8e177085de7f8419270e676a9e3a3153fcf24a8231f43ebaa61eb771c202
MD5 22542c6b37b4e89afcaf09ffa5fd9431
SHA1 9d929a8dfa9e95d7a91792fc8025a4e2f8a18758
SHA512 c6a3ba51db812e66d64352b011f04cc65d59a21c691ef79deff7bca7809995940dcf5aee0dbe83c09609d75c67174f9dd2cc598b96a906810ea204c835aff550
SSDEEP 12288:96J6DXMs37cGfPKZxrsB36qEFVxxs3KQb7:90UMmHyVsBqqExxwP
TLSH
T1CD942807E29364ECC567C074979BA773FA31B82D0130BE6A1768D7342E62E50AA3DF15
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffprobe.exe

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\ffprobe.exe
Size 215KB
SHA256 7649adb420ccf079fcd5c29af0b3a355a19da004dc57690fc68bafc8a70ad6ba
MD5 d3bf71efa78ec52975607934985582be
SHA1 bb0da1526bb82c21ccf6214861144239f3f3bc58
SHA512 1c7a135189c37f05b6dc0abdd6259dea67d09e379324f1ff61d32a89ba6b77f07b43c24eb3b8dc22aecce011ae5c54fa12f2c62ae28fa141159cf55d36fcdf15
SSDEEP 3072:Ya7Ga1BWFRf/uA2u340SJbGd1zQAAGbtlvIKRIbyBWxoGsrp2OMxsJlYuIOlAzhC:rGa1IT3uYddhlyf67UkXYuIOkk
TLSH
T1FF244C17D1923CFCEA96C0785ADB9B63AA71B8354130FABF1A54CB385F02D44BB2D905
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libcurl.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\libcurl.dll
Size 577KB
SHA256 6fa98142cf9dd814f73bbcc2fa744de69b8b21ade73b304062dcd0c11d5e858c
MD5 c04fcb8638a8e83c81a2028a81a0c649
SHA1 d9f5a5d4f7b6ebe44ec1cd5c9818307d7d76e288
SHA512 8811625baec0d0326b93465425f34f1bb64ef9cbc9cf50798c0207e2d27e611fb690ce7f88e4d4d315d980fcb43f4b2731c287c5af37d07a6d7356ffa60469e8
SSDEEP 12288:K+Fm38AWRVYYqDWdE2CiRl0ebRCyoTTzsjgR33u4IOvuyEJ1ZX:nFmM7RVYLX2/R+dTTzsju33u4IO4
TLSH
T11DC48E56A3F416A5D167C13CC6538213E7B6B0542360A7DF17E4CABA2F23BE2673A350
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libobs-d3d11.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\libobs-d3d11.dll
Size 202KB
SHA256 ba70737fe9511825fcd87513c1c29bca1e6db7045313f1ca919d1fa8d16f0aa7
MD5 49695bbe68578d40bdd628a1ad34329b
SHA1 b6b6285e533ffe6fc98bfd8612983bafedb11392
SHA512 1102ed6416ec542de0fea99d82f4aa602520ca33514d579cf29ccba6065b0f5d70a786f8cbfae485a8c5ba2eab65ca11b2d30e0ead96f89e7a21a8632729b90a
SSDEEP 6144:xRH+Ymp2lY3VSesBKM0puIHl1kK5CDHK4k:3mpbVuWh
TLSH
T17E143A27767840A4C5B7D0798A969D17FBB27884031093CF1351873A2F67BE5BDBAB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libobs-opengl.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\libobs-opengl.dll
Size 242KB
SHA256 9976b25c6305c5a15aad39302c38156170b5b71d1a33424ae9bfef05259c274a
MD5 30958723b0e4429e995d1dbb4e76b8b1
SHA1 19f4600d10021307e9e31a343c149c39dcf2ff28
SHA512 282e419c9a7dffbff27dbd4005d1e8b28c6f5aa9f175ad3e0e7e117f87411578a5eae03c3c140c379c05c1a6c18d6e2201d86ae0968c8d74a9ff59027f9ca9a4
SSDEEP 6144:Q/8CQSpCes+WjuiNMX0uMpPp3NAbdAM6nSCTMH3d2kXiemFYz81yf5PqmHs:Q/8LSpiupkuMpPpO7Hs
TLSH
T172340965E29D5CBAD91F50319EE28CA78131B851326C83D33E9456061AFEB4271BCBCF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libobs-winrt.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\libobs-winrt.dll
Size 83KB
SHA256 e10fb28f7aaa517ad5c3eda13ce5b2e85211374d670eddad5bd5af60bce78ac7
MD5 b76d0c6c6a85002f53ba04da14a27baa
SHA1 61e451bc3c1062de1e881c58e7623dc7f216ac28
SHA512 cb6c7c44370a0bc673a7a435ba4a4ecadeabddf5c630f9c6ffdda1b1eb95cc3c8e43fa362b76cd8432c28dd8623c479c19397085f43b2428f28ed37438cadb3d
SSDEEP 1536:O3E21Es7uTCOFLXb51OXY+VA9aqwrOTRcVV+Af8ATnC7P5kj:4Euu+2LrfaeaqwrqhGC1K
TLSH
T118834C6AEA69916BD16AC874CC434916DF72B88587D0A7CF67114FDA0F22BE0DF3D600
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

librist.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\librist.dll
Size 222KB
SHA256 d9f12b72da6e1cfb65722a26c2ec6cb58daee52822fa7d19d4bf3292b5a8920a
MD5 3edb71e70f5b3284df54944de46da7b3
SHA1 3ae98dd656db8b44b59f7e2efe65a5723b343633
SHA512 fd2af664dac00c8a7442126f44d956d9ec688c42a41755b1ef64ee7cc7f7f14f734ffab5d39ed6924ae4f07caf1a92c9f0b675009bf6e8c6bfaf51e1c7a66d1e
SSDEEP 3072:jM7ty9n9DTNUGqyBtlRTJFEOVw7domXGXmJsqQLo2j8rIT0uI:j8Cn9VUGqA90CU+fUyI
TLSH
T153247C4BB2E00CF8D967C039CB93860BE7B278981324DBDB476086750B53AF7697A354
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libx264-164.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\libx264-164.dll
Size 2.1MB
SHA256 9169950c02a91bbe7f9ff46de6bf3ccdffff88cf610be2692f0df9e03b6874df
MD5 0a18c7b4681e4ed849311d1ac9b0c9c3
SHA1 2efbc02f973673a4506a4d1b4e2c1662fba0fadd
SHA512 5e6e13d03eb45655c66ff72a2f3d347661eb4b90af7d385375c7866dcb71f038e55a762aa88361673d7ba099b4c82815ca0061b9a0b6209c90f34971e3489d18
SSDEEP 49152:WPtYFjDPHYSZdAtCQH7fH84nb3fOv+1uE9:aXBf3fi+1uE9
TLSH
T1E7A58D5AE67611F9C767807CC92B9617F374301E03E05AF76AC086646F23BD13A3AB16
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\msvcp140.dll
Size 562KB
SHA256 9057d39b36b6c7d054865ee2bf9cde7a490fe3b01ec4e82514687e24f576269f
MD5 cfdf6eaf5328fecbdec268b7f9e21f3a
SHA1 100c8a08de6544b8554a542ad55af831f86565e7
SHA512 a81feb56ae3e4939abb21597f4f60429b704e04e6c20fac402a0518fe7b29606bf8824347a7570d98f3c44684c15bf6b520e350321bfc2a42ec5597989215782
SSDEEP 12288:N9W8APqgSqvJP85TAv/kLRNKjxDJN7e12QEKZm+jWodEEVx7/:NPW9ILRwjxD62QEKZm+jWodEEb7/
TLSH
T1ABC40823B74D05E0E195E3B8A1878306D7F1BC4A8312A3C792EAD69D2F577D1673B290
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_1.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\msvcp140_1.dll
Size 35KB
SHA256 a65249861238e1c18b84ae5d112617c438d83a76b67eddc170ad82dbc2338665
MD5 6dd04c14a17caae50d068fc89d7d01f0
SHA1 4d2d12d7a0139c8248f9f9266982562ed402b8da
SHA512 9c04f015728d0f57e7b91e888505a0a288064529bf72dfb1f2c5fc571db40c2cc118782b8544bebc4e26b8bd189667fe65d13289a4f347b2805ff5ec5b9646ae
SSDEEP 384:Hjh/2cARGLSxXvQ5m9/U09dSzWc15gWWjg1gSt+e3RxB+R9zPmDnzHRN7LSpR9zF:HlWRGF5mZU0PSVkg1HNRxw9z+3eD9zF
TLSH
T198F26C86A6288483ECA65D70C599EE833C3D73C25B5196DB5391F95C0DE33C2FA3462D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

msvcp140_2.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\msvcp140_2.dll
Size 261KB
SHA256 89e2e9a163165e20c540f9adea081e927ddfe4a556547b0f45f11586d4cce165
MD5 ddc38bb34de28e1f42b6dea9770d4d65
SHA1 6fc98e48f5e738c82279ed0f445ac1dd9c4d02a3
SHA512 f4b07d80be1e64f132dbc1ab2f29e4ca6b2cc589b348328937857ce9b578118497d6f39afebe49dd19e3665a8bab92e441721613d4ebe873254ad0bead6f446f
SSDEEP 6144:LLgFc7g9tEmUoGARVA9+VXgtF+hwvWY/q:ul9tbVA9+uF+0WV
TLSH
T13F441712B6192EBFC8E6A8B04539B516FC3A36414731C48A17C32D4DAF1BA537EE352D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-amf-test.exe

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\obs-amf-test.exe
Size 28KB
SHA256 38ec454e3f7b3dc86dd569266a1f7d6cd501843c00facd36c21c342c5479ce0e
MD5 01d41cb33beb43dc8dcca5e9bc2797cf
SHA1 dfdd0a603adb9c0e4fb0f38b48d02b8d71c45b26
SHA512 9e10885f14175943a6a9758b705aa6c59c15ed0c209d747069a95816aa838ffbcc25935207f20039b47f94fef6b529013a175b389e17b38220d648a2ec4fd8b7
SSDEEP 384:8iH6ynboGMXY/ktZg9W5uA5jH4UH1CmfnIYiPWl+y8RbmL4nNyk3:8iaqbS7TrHUYIYiPl5AL6
TLSH
T1B8D28D57AAE408EACC27C6348491D536D676F5424B0283CB7368461E0F527C53FBEB99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-nvenc-test.exe

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\obs-nvenc-test.exe
Size 89KB
SHA256 c95c825fb270cd53f8ba51871085a28d9c154e2dfb2255d7953b50dfeeea4bfa
MD5 7696086374f3306548d56910358cf545
SHA1 1e5af3af1a0bd609005b4065c9eaaea197f2e543
SHA512 081b2a50c0c2fd0f22b93cdd9c5c39e8fbf2ff7ebb5485fedc6c357e7179b9d8d080b3baf70e4b2e59175b9ac844972e3efb6eb8c69453eba5f97b06442c7029
SSDEEP 1536:SRCsC9eJyp+4q+lPvMzAzj7aYYeYfjeFQH7PZGE:S5Qp1zFOZ9GE
TLSH
T106937BAB766804E8E56BC03DCB92C917E373B411276193CF2350C25A0FA79D6BDBB250
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-qsv-test.exe

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\obs-qsv-test.exe
Size 289KB
SHA256 56b097fc71202eececb7074f196078a7a53a2b6d81539ac49ad81dd4f6cc1bb2
MD5 50c4261d9aff318440123d51020d88f2
SHA1 68c83c6eb176502196c3ee22c5737f27c541e25c
SHA512 d8bd518e3b963a6ca128a67eb99ece5a1fcfae3f41a07696b0f2e580c35ce157c45c0518cf1bec58413f8fcf57fc5b1539256f2ead62dd2da63fd7a91578838b
SSDEEP 6144:xd+0qsr2gtd+7e4r2XsLiFwSaoI1HzxZOJ48Od0j9:X+QlTaGCrRx4JEdE9
TLSH
T1A3546B2296580DFCDCBBE17CC6475407E6B2BC5703A1D2CF17A289622E576E17E3BA10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-scripting.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\obs-scripting.dll
Size 131KB
SHA256 b594fd9358543f66b79c4a0c4c7836afb887b52a92291f88642a7681f49afdd3
MD5 42a02ffa130fc4c4ce0415d8e9cbb4f8
SHA1 fbabb826c199c147a82ea104e088992d4c774667
SHA512 cc67fddc9b14930eecc408945a8b1a3fadf425d8da63bb19459618ba8456e503c0e84783911121b992131f0fdece25988fe1c24aa550bfd972a5879e85275360
SSDEEP 3072:xwYzpw12JJlZU1IT7s7apyOi/UJC19ro2v3BP2Q8s:xwYdw12P7U5k8/YC1Zo63l2i
TLSH
T106D3386677540058D637A678DAE25A0BD373B0481B20A7DF16A0C24A1F33FE67EBE744
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\obs.dll
Size 1.1MB
SHA256 d3df8a896d8e68c0cd25ca429abda94f789c6debac4bdcfbda912d55c114e99e
MD5 b52bbee226e0775e35416ef8fac5839f
SHA1 ba3bf1bc26cf50661c6945b0a8c44ada73f86213
SHA512 10e6e3351aa6e19de720d38e8d123fb8c26c8f81fafe043732848a2e29241ba65abd60e02c917b631c405b29c5412d5298d4c33480a410b478e606eacabcd421
SSDEEP 24576:VhyB/yWK6gkgOag6IspDvSX5iIkjX5vY66I6pk8Nw:VuyWK6ezNIspD6X5eX5vJEO
TLSH
T152459E6797A050A9D9ABC039D757A017CA72744023309BDF47A087382F63ED6277FB52
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ow-obs.exe

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\ow-obs.exe
Size 274KB
SHA256 856377f8e7e80273dbc043e922616fc16dccc735fb78c21f4086e0d6496deb90
MD5 c6502384a72b4d5eaafff776af80f92e
SHA1 f8f4c32e86efc8daa37677c3358f229c166cc430
SHA512 6c4334a7fc7246b0f36166e91f6e7087ddce6bac114904f2014ccd032988bfe364287a25b05ece448bc95328d7319409eb9a0e557d0e483ba46ed05abdb5b325
SSDEEP 6144:WMaLDudOJrHPUEpuw+4CAPPwxex7fqIttf46uJ/c+HtjhH4G:WpL8OdHPUiuw+4xfI6uy+HYG
TLSH
T16E545A5B372A0CE6EE6781788943C906DB73B8414381E7CF17A1C65A4F239E5BE3DA11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

owobs-ffmpeg-mux.exe

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\owobs-ffmpeg-mux.exe
Size 35KB
SHA256 014a066a9e3798035d03c01f89eb876d9a76fcbec50aef88f03c671a74a02b8f
MD5 9f74f15f9d9bfb76aad253e1fb2dbe95
SHA1 6aa5d9c10749790b2b172977d82a9b4c7d874bb8
SHA512 d140339f45121ec287caade2878ef94d63223be8280d815fc13ce429f1a76347e2650cbe854ed4ecc6870e5af8ba30e25dbcda55ed38b970070754d09ed3ac48
SSDEEP 384:LueVlfp3X2IhFX2LvdRGjTevceKqYfl1XlqoB7OZmkTzW+cI/IYiPWQaEOIy8Rb3:Luy3lruMqj5M1XH7OZtTasAYiP4e5ALm
TLSH
T1BCF29E67475408D8D8179030DAA1943FC375BAE127A0A3CF1365C6160F923E17FF97A9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

postproc-58.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\postproc-58.dll
Size 96KB
SHA256 ab30318f4fcc66fb77bfcbdd083a12f8dfcfb3adc8160c34b3f92f57cdec2f0d
MD5 e672379483b79b603865f99a8139e741
SHA1 49f1fa776b0c86eaca5cca787ac59e39e58b7278
SHA512 3af53eb49e878a77fbaa783592cbb4233453967edc4699a51247a82730429bb5ebec3227af481991a9b53513915370ea83a0f4642448809bb0b5fb1e9f44dc80
SSDEEP 3072:xq3NKGaa6a666TOmnh+fHcfwu6VllUB8TsTU:xq3xaa6a666T3nMfHcYu63l1f
TLSH
T166A37D43EBB6E8CDC112CAB0219F96B7F5E83C5441158236BBCE87252F75B815B29B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

srt.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\srt.dll
Size 667KB
SHA256 2cd7810dc1de64362a4d0274f253b1820b5d5be6d31d7c43db75cefa41c29e22
MD5 af21dd5a59c49e3f22d1fb84caa56d34
SHA1 4f0c20030376f610956042df829e4670bc8a5996
SHA512 5397405746ded27faf91994bf1f922e5116f71469771f1cd5fca2f4faacc9eaae6e3e9f981366bf03b2021e86b61a3abaa6e494271b1668578f8761691ab23b3
SSDEEP 12288:WlWoZEXSDbxkH4Ljqta9IfLSFClcH4t7iGL8DenkFw:WljZECDbxkKqQAL7Rt77oW
TLSH
T13AE47D6BF66012B8C17BD079CA434A23F7B1B4855370A6DF02E085A59F177E58E3BB60
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

swresample-5.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\swresample-5.dll
Size 131KB
SHA256 eb66f48ad00e7760e9ae0c1626ad42deb79bf2944ac51bb7dd6a903cf986f64e
MD5 a5a0b1ed9c1912b16e3f02c6dc2e03ae
SHA1 f6c9804b626e9d0a696c1a2c1f5d168a5bc6886c
SHA512 a49188e1cdc996ce0d2f1bb522d1c39143d0ed25dc56d5d82f75399a2e8e850bba649f9153d0efa46195224d8700b179efaa562edb52219cd986a26504554f64
SSDEEP 1536:QdsLRoyu3biAKlYxfMlXSbtAHW4ekSDOWBwTbpQamgNGCdunk7PE:t/YxfM0OWrkSDAWaBnwnkA
TLSH
T116D36C83B9A215ECCA96D474D17A7103EB6034B407956FFB1AC286361E27BC09E77B13
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

swscale-8.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\swscale-8.dll
Size 581KB
SHA256 600ce58f9dfbdea390170435478432c166182171b23889f2bd155c7f737e73e0
MD5 d076c75bc7d2c734d4892a7dba0d620a
SHA1 8fea8f10512beae6211c927a3a79f67e0aa4c5f0
SHA512 41896e280fcbe4c36ff60452d13e18ef69523ac490c21e848f659ccf436928c64c22c86a2fc2f2cda4f0edf7f000a827f12ab0e0d973108e649667954f16130e
SSDEEP 12288:cmmmh44L5N5fDCnmOWy0I4MOoQOEyHgbDcD9dvDNR:cmmmh44L5N5mnmOWyx4MOoQOHgQvDNR
TLSH
T16DC45BD2D25326EDDAAB847482F1D6167A54702203546EFBB784CA3AB623BD0773F305
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\vcruntime140.dll
Size 117KB
SHA256 da72e6677bd1bcd01c453c1998aaa19aeaf6659f4774cf6848409da8232a95b2
MD5 943fc74c2e39fe803d828ccfa7e62409
SHA1 4e55d591111316027ae4402dfdfcf8815d541727
SHA512 96e9f32e89aee6faea6e5a3edc411f467f13b35ee42dd6f071723daeba57f611dbd4ff2735be26bb94223b5ec4ee1dffedf8dc744b936c32a27d17b471e37dcf
SSDEEP 1536:R9TXF5YXWbj8qr51XlN+dULTCe1IGhKWyxLiyaXYaWEoecbdhUoTtHez9FazR:REnsvReGsWyxLizXFCecbd1Tt+i1
TLSH
T168C37C8572A002FBD17AC274C1A36A17FB75B94487A0A7CF03B58A660F53BE09E3D355
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vcruntime140_1.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\vcruntime140_1.dll
Size 48KB
SHA256 26e470b29bed3d873e0c328186e53f95e9edbfe0b0fd0cda44743a0b1a04a828
MD5 05052be2c36166ff9646d7d00bb7413f
SHA1 d8d7c4b322d76e3a7b591024c62f15934979fe40
SHA512 0460cc66d06df9a2941607473f3eccfd909f2adab53a3328fadcedd1b194b388eca738c2c6c2e193de33606925fbed1fe39efa160015128e93f5e3a03c62170d
SSDEEP 768:qzzO6ujT3MbR3v0Cz6SKLq83yN+iRxw9zv6JmEpw9zF:3q/o1j3c+iIzv6JmEp4zF
TLSH
T181236B9417784482D4AB99B0C0DBEF577D7CF6964750A28F0BA0D1981F237D0EB3D21A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

w32-pthreads.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\w32-pthreads.dll
Size 64KB
SHA256 cf7a85373fd09f0f3ff3f44802b4968f10dea8f7f95fb5f080fe6aad1d5df7ca
MD5 a3729c9edc0ad2e1a249776cbe0993bc
SHA1 3a9ee593a1fff8608444994a2a9b48f4bf720719
SHA512 01c7c22de7ad395393e4e601cd0a8e5be41828bd0a501279230a84e9b75ab3f8f75b0ca6af164b86c7a46bb97263f8765138ee3cf451db27bcce10e8fc4b313b
SSDEEP 1536:FGZ/54JWWwJzlVBf7xv5hHiH/p/mCN4f7PS:E5elw5Xv3iH/p+S4fu
TLSH
T189534B8B136C01F5FA738435C8A21292C273B41627616BCFD274C7562777BE6AA7A3C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zlib.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\bin\64bit\zlib.dll
Size 93KB
SHA256 48bb00bd776f0e28f4e2f42473e93f630c171e4fadddf9ce6a86987679535a84
MD5 8a48e99aa972511e4a48c1d124fc1be9
SHA1 bf2ea58264ab5bf80fde16b83cb3223e082e4ac7
SHA512 71aad8f5eefc311ec52787e20bbe550fcab75dbf9812a74415ae5989fab383e6a13032b3fb096739f8dc080f184155d2a32c0296c3c0762ade21c3883c844577
SSDEEP 1536:Qj5wKOX8Qdyti/U/pvXppXyByUpPjlKz8IOcIOO1ytlSpYEhIgu97Py:+qKOX8QMc4NXpBSLPjDSO1mwpYh92
TLSH
T177937CAA6AB011A6C9B34470E5D24AADD371701007E057DFA18C97AA1F13BD42F7A3FD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

area.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\area.effect
Size 5KB
SHA256 3bf632f2ab2056ccaf74c1f56a34cadd5b29812cdb7cf967bf3e53757540caa8
MD5 785d688f05038e46aeb21a7654cb8903
SHA1 2e671e028b4474fa9318bcb511c1a11bc614f993
SHA512 75441535d7567e848487d18512a27a09bed89039ddc536d6107f88cfb6dae45ce6bcd72cffaa86dce9759e7b29fab1150de5fcc337f1d4e081f7c68ac205b4eb
SSDEEP 96:kJRcKITNwmhp3c6Sn/s49fVTwmMFnfpcEEuUmIGigIGnzGGDpzowYcHGvIGGAKHX:kLythm6Sn/s49fVnMbf2GqGzGwdoGGQp
TLSH
T1F1C1348B146AE1BD8A52D0E7EE358E5697FCC6D00C611772BD1E837891F0885B12DBD8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bicubic_scale.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\bicubic_scale.effect
Size 5KB
SHA256 a962b315cd03c3149dedbfd128f5563cb6df669dde198a7632de76c86e93c055
MD5 b3f3272063c676ce5d1d957518240616
SHA1 1f66a8fa40845767dd62ab109b67d5e08df7ccfd
SHA512 511dc40224663b1044e1504f0e85217a01877cb145cd999d789fd8714b90dd73e3e884881e782715431fe7daa3f7e1cdad46c9f64cd1442482938d4324685864
SSDEEP 96:zJRcKScTf6bltApuW8wcaAQ+1Lkz7vjzdJgF7UCFd29:zLFDotYiaAQ+1La73dU77d8
TLSH
T1D2C174462816E12E0F5EE9A2CD3BCDCAD6B4C1D01DA01B60B89D015DF79E4A0F329FD6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bilinear_lowres_scale.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\bilinear_lowres_scale.effect
Size 2KB
SHA256 eebfd026de29e8ecf62d90ae9646ecdd55ff2731cbcc366b47b5353c85965fa0
MD5 686a4d87926136ca522b8d21af2f8a01
SHA1 047c745706346cbf6fc4619a3acad483fc63b352
SHA512 4e6ebd1f8a033727ed611b939dcb38f7286866bf04ee23090555fc23057088e402b6e8a42f6a386bfbfecc50dd1ddbb7d8919e53b405977ea4267220beb85883
TLSH
T1D451ACCF64B1B86A0F3657A19CB3C816EBB8C7D44EB21701BC0E5198F19A1957634BC8
MD5 SHA1 SHA512 TLSH

Submit Download

color.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\color.effect
Size 5KB
SHA256 cb4aa15cce66884070d3126818f63f2685e50335283a57c274a2c02d047e77f0
MD5 93a26759bd68e992c1729d388095e670
SHA1 bc731be72e0dc06bd80183a1975642e08654d1fb
SHA512 5c0373a52722757efd7bd1d36c2263375eb878365609b2d7a269afe929f14d38b0a458ecd180f02f26798116760af8a212a8d431ee7cde2511de6448f4e67926
SSDEEP 96:gVMq9fsLdxG43cBahGlTGEWH05vRbejZRXMj0Oz0dCxh0UpwW:gVMZ3ncBGGlTGsphe11MoOz0ah0USW
TLSH
T15BB1F1CCA1EB8C851F39B5309E310B9D94ADB6C6CD6712C2C0DD342934651DAE5DC6C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\default.effect
Size 5KB
SHA256 7f1de6e18f108ab9706077f72f209ffaf26d9e51f947c37c8a8a618a2e5ce2a3
MD5 2d76acd514828a49f49394eb4e92422c
SHA1 d7121f945ff06b91a32c40dd4c5d82ac7b5d958e
SHA512 2d516532fa425e04ec6bfdc0de2d9292b822ccb4bc843bbfc05d8edf600b2be82522bacffb069e5d2026a66f178ee0b3eb736c5e6e1b7e6a243949f1dddcbcbf
SSDEEP 96:LGc9O1rHr1jHx1GHnQfCtiCltCyztwR4Td1A1yd1I1ad1f1rlBjX3UeXzjtXdzlH:K8QrHZjHTGHQfCtiCltCyztwR47WwO4j
TLSH
T188B1790A68ABFD6D471A80511D36CC49E7F8C6E04CF22651AC0E67ED706899EF138B89
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_rect.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\default_rect.effect
Size 1KB
SHA256 45325b60c89c13faefd0533f34eea048ad7efb07c68ec5104f6b1f2ea44b615b
MD5 0d1b55a12d20a123351609c5b4a957ef
SHA1 55cbc9241c52abb2387f775d652bc4b9eb6bd790
SHA512 69a70fcf892544552450fb5014d4e82473ee1000ce33bada106baa19ca31584126d13d926dbc79a7e39b6de4d4c0801736c50da2fac65e3e186fde287c8660ef
TLSH
T18531C14574EBFD2D4B4945802E328C86A7D983F05CE52B50FC4E926D3064CABB524BC9
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_base.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\deinterlace_base.effect
Size 8KB
SHA256 9c1735216bc3268791f711f821c935a8de3fdea0559d4031658050f6ee38221f
MD5 ef282af1d942a0842536230dfe7aa939
SHA1 2ce6b2eec629b8b4dbda089186ff9ec5792928c0
SHA512 0da9af24a104a39e67c8345d53c4e4615f8491a128e8a48cfc5a7d80ca35c0b6b3d81636282feb832c0f3549557f02ad69d1d97361a11404a559138afef9e43d
SSDEEP 192:5TMjbLLnNsbKNpZm1m+tm1m+IiZNRYz8xNbNTNAtScuO0VPJNX0ALhVWB0/UbuUk:5TMjTZm1m+tm1m+IidYzXtScuO0VwAT
TLSH
T1EC121E4C21D2A5A407B0FF021D3FCC02E6A6EBD54EE9AF12F64D601E73591626571F8B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

deinterlace_blend.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\deinterlace_blend.effect
Size 1KB
SHA256 7cdd736089d0034b62facfe17ec71df6c347aedd729e75c80f3842d50facab9c
MD5 01bf119fcdafddf345da565bafdd06e1
SHA1 48b02c9e8aa112fa8e9b6629b3ff8e2a0c6bd506
SHA512 f2b15c7be657a08fdc15a36fd7837a0cd9899b0b1ac6dc751d07a717874e80cfc2c8ade1721dbdd54484db10b1091eb07f44d3ad8558e46e71a9671e313f77aa
TLSH
T16711424AB1A02A8045F29B3F3D61DE84F0C8B2713E42B514347CE2C98FA784FAC7AC01
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_blend_2x.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\deinterlace_blend_2x.effect
Size 1KB
SHA256 a3d8c06245411e3e7a9f1bf0e185848de8a542a16e42b7eecbf6ccdc4986445a
MD5 21a9537bff47c231d433cf09c680f65c
SHA1 8f90a94d92b33a3770efd6610e1094ac53f317a1
SHA512 77c5e5664a29e30a2b16e512499733a1c1849f00609ac1b073a060186a8c338e953492d9a84dfe3d11de8150b088949aeb9e6511c13cd9b1ed4c1504aa7ebcd7
TLSH
T1A711F34AA1A52A8055B29B7F3D61DD88F189B27539427514346CE2C58FA744B9C6AC01
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_discard.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\deinterlace_discard.effect
Size 1KB
SHA256 e3f8e4f257cb18815f4e25493d3e385c2a7cb3d940556dd9c5d662561f7d08e9
MD5 c26b523d396dd5883882d7b54128af61
SHA1 85c9ae53c1c8993520b43827604e5561faf7601e
SHA512 ca65e610fbd4a597787daf5a38b18857ad60ae09075b3f4ae140ed3381d32ff3a8f6b02e08d6ac0722c49f545effd97636127b87787d3e75dd2c19e4c43780a6
TLSH
T18F11204AA1902F8045B29B2A3D61DC84F18CB2713E43B514346CF2864F6784F587FC45
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_discard_2x.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\deinterlace_discard_2x.effect
Size 1KB
SHA256 a67fa144b413473506c05ea923adf62216d0ca9bcf2457861ed6987a58de8283
MD5 f8e1f912d566fe4cae81630c15a21e97
SHA1 28f79f18f661a00cfcc04ab82d03cb98ae58a3f4
SHA512 6aef7f2262ffc4b6e5377c3fff77f9d529dbf8db5066b261d0d0357e4a10ad5dfb1858f29ee12fc10bcf3cc276ceefffca645b4c8f79b8a084a6e0786bfe2c98
TLSH
T1D611204AA1922E8095B29B6A3D61DC88F18CB2713943B510346DF3868F6784B5C6FC45
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_linear.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\deinterlace_linear.effect
Size 1KB
SHA256 555e40cb29f9dc7cab478d55a1717468835dfdea7236d297f829c50ad366bd8d
MD5 eeafe68e0741d1433db2cfcef68e799b
SHA1 2d009b4cb1d4b7a6e98665a05c76a18c254b71df
SHA512 1df8a367bd5fc45656057867caf204270ddea0cc085cb1da83ea4082888b9bdc25acafd32fe66363a0bb2d27927dcc76ecaadb00c0add75d573747f02546a4b4
TLSH
T1591146C7B1502E8046F29B2A3D51DD84F0C8B172FD43A65434BDE1854FA748F587EC01
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_linear_2x.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\deinterlace_linear_2x.effect
Size 1KB
SHA256 3f8565706207a1bb0ca672444dc47525c6b7adc55c5a90a0bcb4044322d56a10
MD5 a12c68d93f328b25072c9e8cacffbc8c
SHA1 12d2236c7c7b503bd11e2f11beac9e08c19564a1
SHA512 39edd53113fc5cae5ad589f1c5c941e5d1bff453ca7c32d5ede323200e311394757c9f7029a4c837a1eddb9682ab3430f8d15b838259274766d3058977f9c136
TLSH
T1941146C7B1913E8056F29B6A3D61DD88F088B172BD43AA5034ADE3854FA748F5C7EC01
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_yadif.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\deinterlace_yadif.effect
Size 1KB
SHA256 e627a3007da2a896efdc38d6fa7be98a49446cc6b109d6ae0bb0f8f8a55e280d
MD5 9790dabef95b95400f108a5ac87e7b30
SHA1 7dea285c85e93ded86bda920f3bdbc2d90abba7a
SHA512 f448b998064326fd12ff833279e5a529f8b863e812b2dd3d6227defbfd767f08baea5f797dbab4ce7dbdcf751eca7de220465d3763bab9a905700c2710998433
TLSH
T16F11468A76503A8845F6AB2A3D51DC84F0C8B1713D426515347CE2894F6754F6C7AC01
MD5 SHA1 SHA512 TLSH

Submit Download

deinterlace_yadif_2x.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\deinterlace_yadif_2x.effect
Size 1KB
SHA256 ab376f38a814ed99c92133aabf430d9d7b52675bc5439813007a7c2aeac960ac
MD5 5bc03ee59e135b17966992c21b0071f9
SHA1 f56b29db8598bd3ab17e11e96de5cff36d44c02e
SHA512 ebcba54ddf648e410874a1d2cecfa5fb2d5296adbb5cc6f74fbfcedf97331211013e9f5839f30d54064e319761ec62ab887192a42a75663d271724ea58aba2ff
TLSH
T16311468A76913A8895F6AB6A3D61DC88F088B1713D436510746CE3894F6754F6C7EC01
MD5 SHA1 SHA512 TLSH

Submit Download

format_conversion.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\format_conversion.effect
Size 45KB
SHA256 a11dd9a6d6924bffe8eaaf52b31354f5714418332a046c8a1a922bc6ba5d5a07
MD5 c882bdbbf1a7f151a0d81dab44ef4b92
SHA1 8c5bba8dc8ea0a30d292a8ce93596b84d03f1ae4
SHA512 61d16f0f7ab3ac76638f8af02cc7f93c6ec2eb32a7f16162e3d74668960c50b23f5e0bb261e0cbc73097976e4838cef58313e4685ee6b05e8caaaddc70051fd6
SSDEEP 192:kOD2rJEoH+J5UJJol4+DGZAGw4fG9j9S9HSFkU3Lx4zP/OEy6xFOEy6xpPlPxP4p:BDEeJ5Uz00e44uGIhcH
TLSH
T14723100F2957A6DF0B461470BD338F8957E8C6D80BE59360782E90393626DACB6367C7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lanczos_scale.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\lanczos_scale.effect
Size 8KB
SHA256 1219f404147de1e0d97e489f7e05477b9ce08e0705b53dbbc3def036face9ec9
MD5 2cc2e19d23dc0622e05fe1e78b4e9d9b
SHA1 d98caa456e61f531916984da0ad051d5d557cace
SHA512 a6d89715daec637c15c9b446c32b2d4d663e73af4265ec046820550327a31a186f7d08b6dcd57def0f2bab7e5e765a772a50c88df7f28301a844d6c9255e2873
SSDEEP 192:DqVudEc/YhmsW2o3KQwQ186lNm6mA96iA8:0c
TLSH
T1480232962802601D0E49D4B1DC7E5EDA96B1C2D27CF08362B99E017E7796099F23CFED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

opaque.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\opaque.effect
Size 3KB
SHA256 ca56afb3ef6d174df1d5c7286eb5ceb98063d792b377285b6be0d9421c312bf8
MD5 c90ecf869c43f1fb11896d68354cbb5a
SHA1 f0f8dc233aba865683fc85f7980bb400a164e4d8
SHA512 030bf4eeb58b225937de65bf2cc0d785cb26c1797e3c553223d8a8a181bdcf0d9ec3d2d6c2e3fefb66ab8f6c5d812c5182bb020160e9b455659bf38b8889181c
TLSH
T16B51BA0B24DBFDAD479605806A364E1567FDC7E00DF63B11AC0EA6BC316999B6130BC9
MD5 SHA1 SHA512 TLSH

Submit Download

premultiplied_alpha.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\premultiplied_alpha.effect
Size 695B
SHA256 3e299b84421f31b1e088e1bdc2325a69917a85bf3eb3d8d0d8ec7fae93ec5600
MD5 668a729422a3ac810b10bb0c01345892
SHA1 7f06d78d061a95a5e47c61691bc6bb4f2c270d51
SHA512 57a7d93fbb12924699e585b96e4e4d1227ec2df417fb75d850ef741a0eda425c6b06289d954d212a137d379587287927c98bbda40b2b8728288a13b44a10a887
TLSH
T10F019E4574DBFD7D0F8916802A735852B7C843F05DD90F62B88DC6BC31A0CAAB5247CA
MD5 SHA1 SHA512 TLSH

Submit Download

repeat.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\repeat.effect
Size 661B
SHA256 cf0a3d164891bc27dd525c3d1530721697892cadd8773d7067dfcc40b1f53194
MD5 d367ada1fc6c904da486e2fe896c9607
SHA1 8f40ab623bb7ac66aa60ab51737036e72a118992
SHA512 e1376eeb68d772ce209b0a2111e5b1376ef684053849fce14b80966b66334bd517c144e42667f89648efe3c8ff9e410a0def71876705f3e928b0eecff45ba013
TLSH
T1CE014906B8DBFE6D0F89258066731812778C87E018EA1E617C8D856C35A5DA7B5207CA
MD5 SHA1 SHA512 TLSH

Submit Download

solid.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\libobs\solid.effect
Size 1KB
SHA256 8785767ddd87a2be6f7f29fb7c3c2fd71816b0cd120ce2535ceb0c3e575a49ab
MD5 b09944324d8104aeab63d078bf8485d3
SHA1 d42bd16c8cbb57bc3f851856d1a87082acd99c9a
SHA512 55c5909e8c054367453d4e398af053633ec303e2ced9832ded0c0b8c520cf30a485eb0411313af372e59a961904e2b65fc06c85aa04f7149cb01c8ed87caa490
TLSH
T16B315B5FA8D5FD2D1F8B69CD29A6094267C9B3E0159B0E15BC8D88283770DEFB10478A
MD5 SHA1 SHA512 TLSH

Submit Download

grayscale.cube

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\LUTs\grayscale.cube
Size 981KB
SHA256 2ac0e619ce4435bc7e892b5ca6c66029a3b67a1fc5273a4c10c439f827aa1687
MD5 4139340eb5a04bdb7796fb2c9e07f830
SHA1 48b25bdf250f8824d40d9c3028f92bf96b6483aa
SHA512 9bd4c069a2656b65dddb01e00265e001ca755e7a8c9cdcbe35596dd65aa93b17af137921c7e7b4ccb85327da0f7baa6f95b4b19734994b1b50e3311aa5b01ca2
SSDEEP 1536:wyvvgMQPPKRwL6sssSYppZppmFFGFFSGflR8B22TAA8QQJiiF3oog55w/PZsggun:vRbTBGflnF5euTt6qD1vfExgHA2Aa8Mz
TLSH
T1C225EAEAD24A55D93D0D68BCD83F26D5360FAABB1910F14432BCDE6EC326DEE4610D84
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

original.cube

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\LUTs\original.cube
Size 873B
SHA256 66c9e0a0d144dcb86bd2388120116c264f13937fabe8d14d0617b85407a26a15
MD5 5a40ab1cf77216cea7b1fec45ff9ed59
SHA1 2f82ee2560f036b236a09ddadb74d2dd00f496c3
SHA512 a9efbc37eb48a2f2a0771c8ef77a8f9b6361620eb9be15da4297c88574cbdd3c252904804b63af65c2d39a00174789a8ade4797fa70120bd5fb091a589296870
TLSH
T1F111E176D50A9CF73848752F9C3921F8346D54FACA52D9C028669D2EA323C7E4F02609
MD5 SHA1 SHA512 TLSH

Submit Download

blend_add_filter.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\blend_add_filter.effect
Size 1KB
SHA256 2bc6e2712e5dc1d2cf37a763419ffd30e91de3489c6fe0baf63d54bae834357d
MD5 43e526560bb8e3d9a2cbd467494136f0
SHA1 b96568beba42599c4a4e8ba4e30fdfa3832eac4a
SHA512 83e45d5afec3fafb3e9ddabbbd5fc6b50c0519e02af0e3cee516c23f68534678ca6890c72862ad14ed7e0df73cccfe206f89c66286c2e6777b962abf524119d9
TLSH
T1AD11AD4435E7E5DE0FAE56A23C33CD51A6808AD42EEA0B11BC5D51EC31A0B2DF5387C4
MD5 SHA1 SHA512 TLSH

Submit Download

blend_mul_filter.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\blend_mul_filter.effect
Size 1KB
SHA256 e077ed8e4d45e5badbe3e5e7cec1c97ce581da739464a4c241be8c09195f1b98
MD5 80064b509b9a47b38cf631f522f4ac2d
SHA1 3b79dea3895e46868d1953bdb77005a9d2ed9226
SHA512 00d6cc295df39a4c67c27fdf763ea562b94b220d5b7e14de5e32916c9610dc5cc7bc0d35e8801c076c4a4c663cce6a919f0e93eaea88006bb056eb8824730835
TLSH
T1CD21AD4435EAE59E0F9E56E23C33CD51A6808AD42EEA0B11BC9D51AC31A0B2DF5387C4
MD5 SHA1 SHA512 TLSH

Submit Download

blend_sub_filter.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\blend_sub_filter.effect
Size 1KB
SHA256 d7d81abe687c4d9b2c2a3184096c139f56b23fb875c523fb5c54452a40ff1ddf
MD5 0b34fda0758ae339b693afe264eeee2e
SHA1 27a34f250f872473e3c0d3836f6cf8a333c346ba
SHA512 ab3123df347df2b4ecdfe977267a0f57c85c2c7ece6fb286814e42eb1652f4b563d52f6f6ac66bd7d41c038e9e922d581a7b988563a368bb7e51a36fd3169f31
TLSH
T1FF21DD0435E7E59E0F9E56E27C33CD51A6808AD42EEE0F01BC5D51A931A0B2DF5387C1
MD5 SHA1 SHA512 TLSH

Submit Download

chroma_key_filter.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\chroma_key_filter.effect
Size 2KB
SHA256 0081d7b2014f8e91b339af6fbaf8ec7156465d5146a06b774386a9a25c957a86
MD5 aeabe82deb68911c8a39e4fa7bf24a25
SHA1 f00e005399fe1c05c13cb16f4d92d20c34709440
SHA512 1f1a21e6a3b996d437ad5d8a7b992937201d56d6436131211c31311954ac15fdab538c94a90c9f8c22d28c529cb18f32ee132bad538f59ecce7f4a38c7174001
TLSH
T196515346515BED4D2FCA75A6AC3395499AD2D9D40DE10303B2DD40E273A932EF03E3D2
MD5 SHA1 SHA512 TLSH

Submit Download

chroma_key_filter_v2.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\chroma_key_filter_v2.effect
Size 2KB
SHA256 2200dd7de752dc841a457fbdb6638665b855108e18c746223ab36013fc9ca927
MD5 21db335d17c1a00322831dc9ef3aeedd
SHA1 d55b06c2dda4c54f51071082668919d5a319fbb4
SHA512 c35c182153070b888c435287a05f53b91da361dee9ac5a854a35058a6b38da99b435c5135a962ff0539484495ba2350782ddb7fe4f9eb25f3bcff7eb9994f67b
TLSH
T13151518A61ABE94D2F9A74B2AC33CA4859C1C9C44DD30603E2CC50A631E536EF53A3D7
MD5 SHA1 SHA512 TLSH

Submit Download

color.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\color.effect
Size 3KB
SHA256 868404f54ec1c0b4771dee7a139a40baf2f9e5fffa43baf3fc8e60fcd03023a3
MD5 4acb6776b331a70950ed97371ecc5e63
SHA1 356bd8a1a32f99ed9ed443451a1373e3f2a5243a
SHA512 a5e483a85192db013aef81c2dda70a8ab8691140bad3b3b624a5ec8ae0e5ac215b4b02606712da825719086556ef11df5f41150138a70bc856adb23352dba126
TLSH
T1AA61EFCCA1E74C451F3D79309E311B9DD4ADB6C2CE2B26C1C0DD352938A51DAA5E85C3
MD5 SHA1 SHA512 TLSH

Submit Download

color_correction_filter.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\color_correction_filter.effect
Size 2KB
SHA256 8f631dec6e9ec1f6d0b6fa64485324e261c5433e49b436c87c7d3c63151fdbb8
MD5 c6d9ea863bd4ddb123784e5c87612d01
SHA1 8887fde7e36c4dc0d97f4d50eb5bec3a1141a156
SHA512 ac1e907719d72e194dee20017d467a64167f4de8e80ff57d6d3ef18243716eaa21e67e69b4625cad726f0063c55fee03cd69cd66c5bb6121df4d229b0345409c
TLSH
T1A04111889196FF7FCD8121857CF299E9B3B287F435E90791204D721D144DA77A1207D8
MD5 SHA1 SHA512 TLSH

Submit Download

color_grade_filter.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\color_grade_filter.effect
Size 4KB
SHA256 289f69df16e6d4cb8c561cee3a200e19289ebb35faf5056206a9430b009acb01
MD5 394a1ef716376a9c1fb9b86ac0758150
SHA1 75bd724d69135efc6d0d52be7384bf3340ba99c2
SHA512 778a1e443608979367ad727df03113934fa3b51244a35b6492d337c9c7563bb45b9d4e4fa44ae033dfa012f0fdd7742fa2b068869e3f740a22a729cc99f54e6d
SSDEEP 96:+1vdocK9c5ZxPd6+7vFuiw6Hv8uv6IvVuoPw6EPO64PO6eZCP46lWurvd5Hv9:+1vqTGl9jFv8iV/0qu2sY
TLSH
T127A19B5C34F2F50B8F6B5D5C2833CAD186BAE3E7C8928A91988C35B674A13CE75247C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

color_key_filter.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\color_key_filter.effect
Size 1KB
SHA256 faa8ac89e3c315171e95ba29aa151f13c6e065241e6d41d6e0c446f528957fc3
MD5 d44b34ba317f9ec0ec4ae95f802b73ab
SHA1 277e062ce0aa29d0a51c98aa4c81fb83465738f2
SHA512 0f2ab7f83d174ba958d56216a3ec959907cf25322b84d8b369febd1bd3b696fedbed509968320018602b0f9c6af498bc3c0b2c71281c4c12f77aa0e104387304
TLSH
T163218A4960F2E61E0FDB29A92C67DC55A7C2DAD40C560B43358DA0E8329572DE0393C6
MD5 SHA1 SHA512 TLSH

Submit Download

color_key_filter_v2.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\color_key_filter_v2.effect
Size 1KB
SHA256 bfc04f343609c0f2655a28b613733b746c1b2c2c34eeb27a32518adba65b81d6
MD5 1a911e7dbb194a32d6d1319aab8fb9bb
SHA1 1a2b3a24cce47e6122790a2b5fdc24ba5875f487
SHA512 47951a13b7c436a8c3243d0fae246501951cb6161ca2b7b1e60938aca5c56f4b717cbcc5df1cccae7b5b2d227fd84112f0ab0cd04bc66a5df6192f0500658272
TLSH
T15831DE8960F2E60D0FAB68A22C67CC08A6C1EAD48D570B0361CC64D872D536DF5383C6
MD5 SHA1 SHA512 TLSH

Submit Download

crop_filter.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\crop_filter.effect
Size 1KB
SHA256 f0b8f37222194ecad0001b6a71d6f1c2118eb585065985e902ee2a8d3af6ae98
MD5 c4419de1d23f5cbf22083c83ad27e0c9
SHA1 c34b10f6a7da1659d5f57f7885fb9ee412780489
SHA512 57fc4dd04024d46fae12bd2444e427c66fa1946114003b37fdc8c556e5eb0aed23989a9e57b7a69d54f3c8e28b272c1c86098b21c36107c1d5d77211ba79ee87
TLSH
T16D317B4628F6E96E8B3A85517C369D85EBF8CAD00DF50342884D31BDB5A9668F534FC0
MD5 SHA1 SHA512 TLSH

Submit Download

hdr_tonemap_filter.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\hdr_tonemap_filter.effect
Size 2KB
SHA256 42a48edac8b502d2e7fc1e3849cb3aa72ebf323a7b715d14c45fced2d491ce0d
MD5 e068bf11fb1c44da612c98e11f103bf9
SHA1 0cee2e4eaa9dfb0d9066d81a5a725f9f42b35d67
SHA512 76df92600642049affef6618243a9c35a42e3abd06f4f5b634c208e81f883fa19ee2b3f0e17d6f2ae25e8a076806c0c4184eef9d28b86c8fc209ba3b4cb3c6cb
TLSH
T16B41014624A5E4290FAEC9613C33CD85DAB8C5D00EB61751884E65FEF3A8558F53CFC8
MD5 SHA1 SHA512 TLSH

Submit Download

luma_key_filter.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\luma_key_filter.effect
Size 1KB
SHA256 0beab871e1fb770294870724fad75c7583fbe9031e3ea16c243b9dfae4e2fd29
MD5 ac16d97d7709669c85b160e5baf67072
SHA1 b9e9a5207c4cbd0b96395452812c52c4377f0631
SHA512 f5a49e68b9cee77247a23f8db3f4e1fe03fda47e564b1b6db64da39b77af51d2639b6e988aef9655dac37c21b7a252794c280701f7c842c4a388a51c55d7745d
TLSH
T17911DD8524FBDB4A0E9539A01DB28C92A3C087D85CA48752107DE4A5329031FE078BC6
MD5 SHA1 SHA512 TLSH

Submit Download

luma_key_filter_v2.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\luma_key_filter_v2.effect
Size 1KB
SHA256 3491cfc145fd158f4a1532b433760e28112c06c90d09199388206c91899ec786
MD5 ba6960a41ccdef9433749bb299f6c0aa
SHA1 e67bee07d29b408b0e1c3a1a567f81751762fbcc
SHA512 541f6800dafd762c982d10fdfea5905c38988423077c2fc19c15b1f2c4f1611811c218465197b1019f0eb37fccbaa30519d7c5e362880549e2227e7a9165f17b
TLSH
T1DC21008124FBDB4A0E9938B01C72CD92A7C087D41CB48792207DA4A931D031FE078BC6
MD5 SHA1 SHA512 TLSH

Submit Download

mask_alpha_filter.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\mask_alpha_filter.effect
Size 1KB
SHA256 194c7f7f2767286c71cb3eacd34609071ab0f9538dd5ef2d378cad204503876b
MD5 ddda504b5d6fa2b4c43ea99b88b48773
SHA1 7351f780887c631f8edcfa6bd3a31cbf883c712c
SHA512 10cd3969ad884aee8189c356694d8922b3891576393e34b9ab8769ec9f5e9be66ab1f51e1c323f6e94c4f948e1ebeb3a49ead8f1e984423a2af7f2878743e5db
TLSH
T18E11AD4425E7E59E0F9E56A22C33CC51A6808AD42D9A0B11BC5E51EC31A0A2DF5347C4
MD5 SHA1 SHA512 TLSH

Submit Download

mask_color_filter.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\mask_color_filter.effect
Size 1KB
SHA256 bc689a12e62d81f87e9cfecedc487cb34563e2d6988956a11a4fc529220777ce
MD5 7ed567e1d0d0d22693e3bdb36650ec91
SHA1 0e103fb5c5101324028ec4efbc389d9acdab9c4b
SHA512 64abd2eb73f536148280bd11e9f871ef3aaf886c406ff7535755bf08dd0f022340c55d55f37cd3d6c8f939ef2b809588052331f7ae7e9905342758ce52dea9ee
TLSH
T1A221BB4425EAE9DF0FAE55E22C33CC51A7808ED02DAA0B01FC9D51A831A0A2DF534BC4
MD5 SHA1 SHA512 TLSH

Submit Download

rtx_greenscreen.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\rtx_greenscreen.effect
Size 3KB
SHA256 4504ba84ad99e964d99bbf6f422295a764c37a9d220bdbe53d410f990d8fc503
MD5 ec7719f3d7953c63ea1a0b4115bc812b
SHA1 0466fbbf2e7df3077bf247c4f15a698085e064d2
SHA512 bb9ca44cffb5bdcb438c01d50e84c6344a6750d74c1df983106985543c77aa9f529d0b1c7fda3b83e44e36c69b03280b6ab8f73a33c6f681a8da7ba0e5ee15eb
TLSH
T16971E24628F6E8AD072E89913C33CD47E7B9C4D00DF517119C0A10AEF155AACF538BC5
MD5 SHA1 SHA512 TLSH

Submit Download

sharpness.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-filters\sharpness.effect
Size 1KB
SHA256 78cf19e7b0caeb506c08866818dd4677a074875c7c306110d67f20ece233ab28
MD5 fe8bdb3a1b3cb41fe2a62acc8a2f1367
SHA1 a0179230d27f231493e6e84317177acb05590769
SHA512 30dc13dcd5483294de60a4f9eb210f26c7d39040b97f596159ac8c14b1558e46eb502dd41efdf1c8bde0ed320ba044cef39321e67b60aa24137ac93b85e263f4
TLSH
T15341EB00A18EEB7F4F4F11D45836CC9977808BE48AE64B61385E53AC266985E66343CA
MD5 SHA1 SHA512 TLSH

Submit Download

fade_to_color_transition.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-transitions\fade_to_color_transition.effect
Size 1024B
SHA256 cd9bd2780286049ef56b7d65f16e01fca984a50a0296c9e10d24048c5a672365
MD5 83985f99e09f7b041e2468d94bf41f81
SHA1 b6ec0d3446506fd0f7f3fee7f94f8ea87640c129
SHA512 0d45095baa5a03603e069d1383fac068ceffbb0620e9236b5734641981dec60615ca28b4ae0a7aab3c4e68f0a073bc6188ccf3ed76be2eaa6ad18f4618cb0bd1
TLSH
T14F11ABCD70E7EA490F7627C56D31CE50A6A88BD5CCAA1902E4CD602836A039DF57CBC2
MD5 SHA1 SHA512 TLSH

Submit Download

fade_transition.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-transitions\fade_transition.effect
Size 1KB
SHA256 13441133e7b7729770b01be7cdae189d1eea3caee9ac78d96881e8785326f28e
MD5 83df4c60aafb5b124b080e3badf96517
SHA1 a6cc302caefc1c09baa92708482728880c558b6b
SHA512 e14ffd7f5e6fe423222794037257db3ee16ca21e5140fcbae1ce109b2cafc656ccff78cfd7dd8150a19faaa25f4daed4891a991017b5fe6f3fd5b0e5b551d54b
TLSH
T10C31048638F7E58D0F6612D05D338E41D7A4CBE9DD992641D48D502C70D0A5CF178BC6
MD5 SHA1 SHA512 TLSH

Submit Download

luma_wipe_transition.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-transitions\luma_wipe_transition.effect
Size 1KB
SHA256 b33431aa08f661a23be2d3808b485be8e774ba56a9c21e5c634d4b5af3b66090
MD5 49cceca9b9a260c59446efefb1c3001f
SHA1 5f05fd9337b7a9617212d2386865072db4513428
SHA512 c0b7638f90661831524008f8994d9a581de60786d9736da02162387d3ff2400e50d77720055e7784ff69bda211b63d11bbb09763001f674825b1289dd27f6aec
TLSH
T15721F041E4ADE65E0F0732D55931A881BBC48AE87DCA434270EEB17472F562FB0347C2
MD5 SHA1 SHA512 TLSH

Submit Download

slide_transition.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-transitions\slide_transition.effect
Size 957B
SHA256 c22ab38f807acf675dabbfb843d7759a50d14e0dbf0bb6a16ac471772c172226
MD5 f6690a9b39c79cd3c6fdac2e592dad84
SHA1 c2e612e79910a3f1132d39f3ed06fb619019d184
SHA512 e6f02351175142caaa13705f20499477f6876d49f8c82eb57bfef78ede7f214d5c10a45e608d6c6cde5120db638789eeb3385d3ab7f29bad7f6cedfe588f5cc7
TLSH
T1B2117A436197DE8E1E6A228058339D92A6E58BF4189EC612718C522C37E8137B7307E1
MD5 SHA1 SHA512 TLSH

Submit Download

stinger_matte_transition.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-transitions\stinger_matte_transition.effect
Size 1KB
SHA256 c9197e1d58a472a800ca9638832c4f1cec7e0226d92271d8b1762b63ea5b0b43
MD5 6a6b2619310b6a3514d69cd76c476711
SHA1 8116782eb1e875d1cd207a3be9ece434b864535a
SHA512 276087d86666e9251624f31725777bcd48b4dccb27017c3d021450b945efbb28e03e0cef16a549ea92037fa1eda955a10f2092b44c5457354831e7c6d1988712
TLSH
T1AB41DE87E4FB9D4E0F3B22C86D72C9419F448AD54E950B41E8ADE02C7195259B13DBC3
MD5 SHA1 SHA512 TLSH

Submit Download

swipe_transition.effect

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\obs-transitions\swipe_transition.effect
Size 886B
SHA256 64ca00994e376618057539b4505dce8a876423f5057f37fb5d92db4a79333253
MD5 36a140bf8ae6144310250a248da1ba4d
SHA1 b8b9366de9388b2e6e90878b36b27ced956a52f5
SHA512 5ff7b524491af94cb226d0e4a00d7a34e5eec95963f082a098f3be40715bfc712973491378bc5137f1ade79c4b701056a614a2063a18172dc6ef5e57cb1ea87d
TLSH
T13411EF4636A3E74D0E6A129148338C51A7948BE0A9D84A32B08C59A8B7F4235BD387D9
MD5 SHA1 SHA512 TLSH

Submit Download

get-graphics-offsets32.exe

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\win-capture\get-graphics-offsets32.exe
Size 123KB
SHA256 fe864e67673190e9aa00a6aed59b8bf0e62ebc4c1cdb162d9769ec444e4439f8
MD5 f66e2ad78a097f384bfc37525fef32c0
SHA1 81073753d98dbf4eaf0d8e57ca3663ab41d32168
SHA512 52a6cbfe31c0fbf2f3fa2078e2cc587d2754dd5c6423788ba0c2c284641d556108360ded179474b01953cf5b10a5e2fe384fed82edc4b723d11805fa93c77bc5
SSDEEP 3072:LtfBfycJdvRyUw41ec7PW4PMuRzTvOSJNIKPkz/+fN5tH2d:L/JRyq5PHNXnfN5tHq
TLSH
T1A7C38D02B5C1C472D5762D3114F0DAB25E7DF8300F609E9BB39816BA9F742C19A39E6B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

get-graphics-offsets64.exe

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\win-capture\get-graphics-offsets64.exe
Size 149KB
SHA256 f0038c3700b4a4cd290a585173de75a61eb3d31b62439db33e67ac8ba59fae18
MD5 c6822182e4e4266cc60fb400c30329ab
SHA1 d7362bc5ece87a6176db0789433ebd84ce6bf692
SHA512 2bc06810d3f4d87152d63159548a0f3b3144375700fd0f0df491962b950f1ccb8328eb40e2fcf8fedb2015dafde878f26886470526c6c89341d10f546aa2841f
SSDEEP 3072:VbvEjA1CzLVDe83nBNY5JPUvAS6esBTXsKxU:eA1mLj345JPUYGKS
TLSH
T17EE37D1B73A534F5E1B78238C8604A46EB72B87607609B9F03A447761F372D19E2FB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

inject-helper32.exe

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\win-capture\inject-helper32.exe
Size 99KB
SHA256 840a2190cef4ce335a23f673a669db2913adbae10f04e708e2553572da8878d0
MD5 e131637663f52060cac5dfce850b546d
SHA1 c323632d7fa8b249182591f9e564678e5ce6cc0b
SHA512 00cadbd512b63452e545e16dc33b930a27dc16e7fb4381327592e3e3db0eac6181271d74c7d1d791c8c33c7989fa7ea768297d7ff8cad9c7af77f73d6204ac65
SSDEEP 1536:K8FYoR9T7CU07We9yvNHyTZDudUBnmX0VrKSY1LNsWpFcd64XaPL1Y47PBlGw:RYqT+U07ayTZDcURm9SY068aPL1Dh
TLSH
T152A37C42B5D18871FA76193524A4C9B19E3EF9501FA09EEB334C067E4F302C19E75ABB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

inject-helper64.exe

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\win-capture\inject-helper64.exe
Size 483KB
SHA256 760f96a86c5ab2bae2be62175a6e231915da974a0957278931de8e2cc1826776
MD5 2ff6a7a9183925e5d641f27cccde3320
SHA1 17cda04a38d902156930cba8917fe7ad23959b74
SHA512 17a05ed250f4dd43994f607e01f4e11c51b2a6b97b2834889d0cb07d15971a29ca5b114d1ce331568424c726ee13cb08c1f32201c6d4c002304832880f59232d
SSDEEP 6144:pB+SxNUnXXUXjj7xjlNYcoj6bpeLHr6ArMmQiX4:pzcXixjlO4peLL6fmQH
TLSH
T18EB48D56B3A102F5E0B3D139CA558E85FAB2BC594720E74703E896B12F133925E7F326
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ow-graphics-hook32.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\win-capture\ow-graphics-hook32.dll
Size 208KB
SHA256 93d73ed10004083d8d6d080e25520aa0ef58603854c21df0d9b972fb179eaf2f
MD5 77b8c570cc1e193e5d7fb7f70622e29a
SHA1 c38882caca18fc5622938ab64296d384bbf4cde6
SHA512 1d2a4818c39fc7c7d389453dbbb8cc6e451a4a28bec3458c87b97fef37ca6c406b088282a8b2aefe96cde7f9f2012e94e857827f7aa0449d67098292424de91b
SSDEEP 6144:EfKW+BeHmBxMNdxOCfTktZOtJm4kNYrtprw/EUw2F6:EfKVgH5NdUCqO/dkNYrtprwMUw2F6
TLSH
T138249E00B080A13FC57F2B3855F7F7764AAD68240BA056CBA75748ADDE301C1AA7AF17
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ow-graphics-hook64.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\data\obs-plugins\win-capture\ow-graphics-hook64.dll
Size 259KB
SHA256 f6267e64559a8599f1f4db416f26eac6733eb275c1c0b4f65a7d68ba39e4ef42
MD5 e40e347498d37dd950f111e3315aaab7
SHA1 2d7c0cbc15f9d0c9ccfb7548874d5b467f6c8f7f
SHA512 abaa7705ea25f08bd3d3aec1f8a2d76258d0f133c3ca3f4aaf0a6f3f52d3aa50c9fec193b94dd0b79a00d068453c1571744864b66757a9cab92beeec525cfc0d
SSDEEP 6144:5IforRYbI9asWTBSZ1oIAOzIbkNYrtprw1GS9:5IforRl9ATBSZK+zIbkNYrtprw1l
TLSH
T126447B2C67A408B4EE37827485879A22E775B8A10724D7DF0761429DDF6B3E0ED3EB11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

coreaudio-encoder.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\obs-plugins\64bit\coreaudio-encoder.dll
Size 65KB
SHA256 2484298655ea66c0dddfb34413059d64076e27a6b20e2daa43952f6ef47f062f
MD5 8033e532afef7e3f3924221e6505fd6c
SHA1 a8afb9e5281356ac10e801692b64819098751124
SHA512 dcd0c89ce46d167f368d810506a9aa385b1c981d6878294fb44c4c74e2b155bcf19663678f4a63eba4dcf406ac3fc6160afb4e5ab61fa6bed31baedcb4aa4b30
SSDEEP 768:K/Lh7tZph71s/Zp358Y290K5agqa8kRSLnxFaWQOg5BYiPfU5ALV6:K/d7FmGYk0Gaba1SLn3aWQOg5B7PfF6
TLSH
T196630866CA25502FD35E9CB4E5025D06DF72BCA68BF196CF67800DE70B62AE46F78301
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

image-source.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\obs-plugins\64bit\image-source.dll
Size 59KB
SHA256 66fbdb56c7dce413b85a5f6bc782d52a19a4539cfa3115c7835b0ca3d7517556
MD5 2229b1b6addbae05214687bc136241d3
SHA1 8c52cb13d67482bcae606524713b476f215d077e
SHA512 83e010584ebbdf27b0ae22a1030b97a02990a65ec159a4a411a01316704b231ad6730979734220976c0e4c07b686b5bc4707873af3d4a87eedb8900df2b0cd91
SSDEEP 1536:TCBc/8eSbpTTRYDP6A0/FX5Wp489jI7P5:QgSNBYDD0Ncp4QsF
TLSH
T18F536B5F06944090EAAB8078E593AE43E2B2B00457D2C7CF9360C55E5F633D76A7AFE4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\obs-plugins\64bit\obs-ffmpeg.dll
Size 257KB
SHA256 8c1a45f80b2f8d4debbec5804cf088ef8dc0f2cc594b2971a47b3415295577c4
MD5 9e1e27b987bad7dd811ee7e1c868fc1d
SHA1 5dc5a7374b8dea4777160d0d15cf79588ff7fc43
SHA512 82acc3100f633bd410637c7199ca8355234e999ef09b9c7ada664402e79dc977dbb1d5429f0edcee2efd42de1b23dd6d6e8148a0f84fa4ba08f5736548598c9a
SSDEEP 3072:aRdW6YLa5gSWpROPt7Jx/1J/U9AnQN88PZmYv7FYuUkDzFahT:+dW6YmnWpAPl/1Vw8YvBYtkDzgd
TLSH
T1C5444A1B33A90C99EC77C039CA53CA1BD6B33C854310E6DF16A1C66A1F13AE57979B20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-filters.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\obs-plugins\64bit\obs-filters.dll
Size 297KB
SHA256 431710ecfbdb9caf1524ea27199e38b706070c6699cdda52961fa706c4976ff4
MD5 dd293a3bc68dca04b89c59af2b71f9c9
SHA1 88ceeabbfce0a6547931d10d98c57df6f3947dd9
SHA512 dfed44f1b73fb3eb4942590959801da2df3486fd2b83fdbf4a065e367e66e4b960e02472c14becae4860e54002781af6686a5f9010425b412155abc02173d589
SSDEEP 6144:sT/oap2uNSchcuSZUO6GX4m9V5CTRpKsV/881yDu:sT/oM4ESt6GX0UC3eu
TLSH
T1D6548C0AB2A64CD9E13B8479A157F81BF62334640350C6E743B4C5597F66BC07AFBB12
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-nvenc.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\obs-plugins\64bit\obs-nvenc.dll
Size 76KB
SHA256 a1d12cb51aa863af37cb8c91cb668b62a157a0a989815c23d16ab252c2f6bc86
MD5 15aff45c2040c438a43f200ffd7f34e5
SHA1 3c561876a7ac1f8b99b40c95939eeb8caac182b9
SHA512 e56d2687e9d993d9222208f3a980e9485a0e6b16ce3b02377db4d3d163deaecc1fed963c16e34413cd675e3b4a4265e555aa7aa06cffb04567222bef79e3c52d
SSDEEP 1536:s+eaF0WSJufjJ1PfCeNIs9pnRQ99vpp+7P2:s+e1WSEJdfp6sLnRYvpp+i
TLSH
T117735B76939440A9CD639874C2A65D2BF2F2F245138097CF47A6C22D4F167E2393EF29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-outputs.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\obs-plugins\64bit\obs-outputs.dll
Size 727KB
SHA256 9ba1c8620bb75802058e1c0aa77d04f91c2981caa8b5e8c02810710859c8916a
MD5 0444e28473de1ec9c7ed46cefbd45b8f
SHA1 977196c93f3f564ce1492247ca0917ecffa520ce
SHA512 8e15d95d1314a70e2baef92dddcb913fd26a98d902ba6a0307fb2c9d51fae3167dc56cbec1317b43357dcff0e001ef1ca094beda373403be1c495df038658c56
SSDEEP 12288:+5Cti9/bdOtNIxkV7pCLiRfetfYU7tFfGyV0:jgb6NIqxpCLK2fY+0
TLSH
T110F43B56B7E011A8C4568478DB66432BE7F674CD03B0E2FBD59B41662F53AB2CA7E300
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-qsv11.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\obs-plugins\64bit\obs-qsv11.dll
Size 331KB
SHA256 9c16844fece1caf49d9e0ac6af3ac8f39467f84853fa448c3306ec23f67120ea
MD5 96160e96cebdd83dbf637d7e3ed8fd1d
SHA1 29160b81aee80ab1a3364db4aa53b48b631bab2a
SHA512 1ff8b50a929e59bf495b78b86aa65d601ec8b351ce879acb099331e37541e9ff8650df233c16ff362784f6ea24459ec89b862db3855102c72e805901b194b91a
SSDEEP 6144:rIAZSj8WhSYBy7wOPyQgALEciGHHH34LAdSKE4:kQQuWbsdh
TLSH
T171748E27A75801B8D9BBE13CC6435807E7B6B85603A196CF17A289523F52BD17E3BB10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-transitions.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\obs-plugins\64bit\obs-transitions.dll
Size 48KB
SHA256 c65ef13531d696243712e8c5bd6bbffdb764161d46173d43462fe5d60986b3a6
MD5 8315e72631b508e4cc00e2a99dce47e6
SHA1 4697ee2946f6babdc5cfae588916782bd27122e6
SHA512 e25f20395c1c70e6d8da726f655f41589833a85667f1fe8803e32cfb6cb055cfa903fc0eee70b756382eda28abd7034b41caab24431ae5232ae56da101f32ae2
SSDEEP 768:+QgBzBsllXKtTu+dMlFcpMlwUE83iYiPn5AL61:LgBFsllAne6WlhEKi7PR
TLSH
T192236B1A673044C5D6BB8A38F1E26D0BEAB038904B91D7DF6390C19E9F533C1217AF96
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

obs-x264.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\obs-plugins\64bit\obs-x264.dll
Size 37KB
SHA256 324e77235f4d41bb938dfd6edfe6712e1ae8bd4443b9a5825aadc4364de8fda2
MD5 9657cf7ec7ac03ad6e9d30daaeb49972
SHA1 39796652985771632e20ff1b5421382c742140a0
SHA512 c1fbc2298828f72f3f5f41a145fff2bce7920d70f00b41704c37cb167c891900bba48d7084fa78c41617b0b3a6696e6f2ff121f34aa28d1cabfce467bb1397af
SSDEEP 384:0V79n9CSbDngc9EJYhQ0MFblBgQDtCYL36pnas5x/aUMalIYiPWZLy8RbmL4nNy4:0WF80FbntfL36has5xyzaSYiPu5AL+
TLSH
T1ED039EA6875408C9FC439838D1D36E27E670B4602BA1D6DF779AC21D0F627C0BA7CB95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

rtmp-services.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\obs-plugins\64bit\rtmp-services.dll
Size 67KB
SHA256 0a46e712c7b135881c3f61115e7036cfe978da82c241667f575fdc9a52fcb305
MD5 25bc924b24111c725074e22f80064b84
SHA1 ffbdf96e197e9abb31b8d78801fad9e19e0b436b
SHA512 92ae6c663fc4ae098d4d8777c1ca6fb2418a025afbcfdfab9dbea753a4226caf6e9ddecb680ef306fbf867c7a52670ce029190cf140ef6167f1700e313494968
SSDEEP 1536:a20cdR+XyTpeLAK0IEhOBaTBGGZXj7PPA:a2Z+iTc0RGSj7A
TLSH
T1AA639E8A57A400A9F977C13CD076AA17D6B27481235093CF53A0C3AD2F236E5A73EF95
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

win-capture.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\obs-plugins\64bit\win-capture.dll
Size 131KB
SHA256 b39196f52cf4d7a6c561a0a95630c95716312472c035912cbe03db26f1980fe2
MD5 b5283d14b9320ac693e1dd80d43ddd64
SHA1 004e55ae72017c1dda538cd0bef356c473edfae9
SHA512 d895cc3a330eee46b11ec61989021bf47b403312854d00159327eb5e9b7ea34b93f75c0aacdba510f946fc86a05db5ad6d3f25a6f6c2256a003b330d9af85731
SSDEEP 3072:/9pMsJpyqES2lLbrsiDAnylozdk1D0r6l:3PpFEZlLboiHwdk1DN
TLSH
T1D7D37B5B736400A9C9A7C07DD663A567CBB27480134483CF5690C6886F27AF2FE39F66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

win-dshow.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\obs-plugins\64bit\win-dshow.dll
Size 209KB
SHA256 0330f2cc3776143010447222f7829d0e230e5699d26633055b91e03744fefe88
MD5 f5171b593ace8bbbb8594c6b91a2fc90
SHA1 4dbf8f8a9c8f3fcd75ebf3222cf608eaf73a12fb
SHA512 dbde29aee41d164eacfc0d53db212c22e5312e3f1bc701cddaa873c3170d667539d06c28cefecf1b56c4d543c7ee586ea2048a91bb83180e933bed77423c3d30
SSDEEP 3072:KUAqSmxrmn9Q/X1JH9Dxj5BVCh6zS4daxRej5vSj:K/qSASKX1BxxVBVkeWRej5M
TLSH
T191243B27B5B81059E1AB91748E669905FAB37886077093CF23504ABE1F23FE47E3D721
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

win-wasapi.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\270.0.25\obs\obs-plugins\64bit\win-wasapi.dll
Size 79KB
SHA256 8a7235f7b535eb93f21f12b951928a648c6f497c585a9d13b702a4274f56fd54
MD5 258bcfe49aa098512293135c5beed4cd
SHA1 bbb83ff589d3ffcf3c1fda43e491bb923310a705
SHA512 e0f0c9503977609d6d3f0e82facec803d5b070f37cc183f3976e0bc83790293c4a01baee20fddd733095dca561840706767b99ecf3f46c524878f0e6b0df5710
SSDEEP 1536:7Pi9+foUXczqLEvXl2+tbocTjH7Yw3Ha3HfuOSDqIF1pO7Pg:FhXGr/EcTaIFHO8
TLSH
T11F836C6772684098D4379038CD979E23EB76B49A076183CF1B60932D0F13BD69E3DB61
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\_metadata\verified_contents.json
Size 5KB
SHA256 160e855ee6f848acea931c4189ddf36fcc4a3166bf5b136702e09aac93e6c154
MD5 5dc893455420b2d2c75c251e899073ce
SHA1 ec35d71f7bf11af97392137e0ebf9f76bd9edc73
SHA512 88306764a17de843e3cb39f971f71a02c8a23c888afb0c44379631a42743f1b02cc94f5605d90abd354d2c365abfbaa04b72fbf305a3a50f75da09735f6b2cd9
SSDEEP 96:mUv35dhNJFDKHuJMkCgV2nGfr/bhLJvrb4uzo:lpDFM0V2nGhxv4u0
TLSH
T1B7B1B364E1381ED74A9A706ADD2304805C6C071F3996F82CA735666C0FA8D8ECEB2C7D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

README.md

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\icons\README.md
Size 736B
SHA256 84d1af2c481bfb3f1a331a9822066b405d668662ce12ac016b37d15b1226561a
MD5 a5344d4cb179dbc2170b597548e71c2f
SHA1 f7020d00260e2043283e6b108b3211fbc41b8fee
SHA512 1b012b882082d3feff54b6b985de042ef4d65f363efb5b2be80d38673ae3a0be3ed62af2442d2b21296715ac33d71d250a4cfa1777d709e44327a02c2644f01e
TLSH
T1FB0199A20E4841B29FB0DA81524F9797FB0F7A1D6F6189013C6E002863A63E1D29F1ED
MD5 SHA1 SHA512 TLSH

Submit Download

ftue.webm

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\images\global\ftue.webm
Size 100KB
SHA256 44b4f86e6bac7fbd17edc126bbd8447b2808649fe51c6fa21b94ea294a761a92
MD5 9899ddb03682a9e9c25a590ea2b7cd97
SHA1 eb6e3f995a85991f1ac6ea751421582722365c68
SHA512 0267c87957fe40e9a272041a3c74a26f9a4c9bf8296ff4dab223688924e7b6d67fe19cfb70bd50b7dffdf54178d89a98f0b5425615f0da0e68c981bc37ca99dd
SSDEEP 1536:52+WgN+zW3IImUyWb933VEz62xQmDjdzQsS1tRSwJSR1mHj905y:yW3HyWAz6UfdQhJS05
TLSH
T181A39D22A712E65FF80CC33688C317259F2A4CA9D78D4F066FD19A558DE0B74FD898B1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

shield_animation.webm

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\legacy\react\assets\images\verification\shield_animation.webm
Size 175KB
SHA256 c7b8e926950d8cc1a60efdcdbbd63c35fc58d7391f533e8939539f4669ebc214
MD5 298e6441267bdb59f2b9d703ccd3c4c5
SHA1 93190ec9046cba1b3e087ab7946609a8a2398344
SHA512 b624addef4bbd40b50b19160f1521a096d1625ffb412a1aea80581f57ab672b2034c2d00ba6954e7f699ad981b4817fac6da24ec19b3295bd9d2d6b125e01021
SSDEEP 3072:v1ePLdGdeJscpil/i2GHWsDu0fO7kRf9AYWU1FaZA8hQS0kolAeg41EGJxdnhP3J:daGdOpilhGHo0fOgZ9Lf8hQSflv4VXdf
TLSH
T1F2042368E860170602C263A3D4D70B35E14A8B379A58D4998B1FDF3F463EB651AF7A43
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wolfeye.svg

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\legacy\react\assets\images\wolfeye.svg
Size 440B
SHA256 8940d9af3477236594b88be0fb48f08da640789b6f9cffb8fefb121cc7463fa3
MD5 699b6be1b0e3bca4c13ca6b1bf3397d4
SHA1 504cc24030674051e951593370d749af86f6389d
SHA512 2ce8ac6d3bab4bebe86803c8448a64b19f74e982fa840d0dcb2cb441eb6eb5c6e631daf4617136756c7d246c299e6085c16020fdf32f7535726f4162db5ad8d5
TLSH
T1CCF0A3DF73E4C657D01495932B153C6B3D2350F2B0854FD1D44C5918F545DA5DC251D4
MD5 SHA1 SHA512 TLSH

Submit Download

style.scss

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\legacy\react\assets\scss\style.scss
Size 2KB
SHA256 410febcccb900e896441bba18015d5ce09c31b30848081669a3ae1700d98e29e
MD5 625d3db45393b7212f8fe966708b629f
SHA1 211ad5cd80888576977c3c512d4cc0b119d58240
SHA512 2476f5c8492dceddb1c4c528ed57318d12482c41cf4054a8ed2db8c4c2b94a7bf2599e0002473ae582d414374d215c3d45a45047d1440667562c7aa972c7fe5a
TLSH
T1EB513160DBAB69037117487D33ABDB18277C8003260ECF2A7FFD6950EF91526965139D
MD5 SHA1 SHA512 TLSH

Submit Download

in-app-subs-main-window.scss

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\legacy\react\assets\scss\views\in-app-subs-main-window.scss
Size 547B
SHA256 5fc9d3c8beb3da6281d10e3c1fb25080324770e34ca4f342c791f6ac3e9d0019
MD5 b0a8a4dde38f656ff419b264e9c57482
SHA1 3c9900594d7c89a040ebaf963417ae52686bd179
SHA512 fadec0dd5cff9980f51a3307648bba91b7a25e24aa41762ae0116086b99879b31711130e236175e59daf30ed00b5ead2214af4d00eac534c0278c5fe26a8a2e9
TLSH
T1ECF081552B953111151BC1EC3EF25B0C417AE185DE2FC91D79E11345CFCA24AE4F27D1
MD5 SHA1 SHA512 TLSH

Submit Download

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\legacy\react\assets\scss\views\login-signup-form.scss
Size 21KB
SHA256 654d75c930d875fadb07c837945d51b050592de8ade76423c9b0ea9aa12b89ec
MD5 72e36bcaa53ebf37d6eedaa2b109d9bd
SHA1 df97698d5522ce5ea3d7a655c6ec29e6cce78ad3
SHA512 25b280ff08b28cb1293daa90294fc3039c5cc6111df3da9315060fd9272e528087ad3efeecb6cff0cfd1f996018a63f8285d67a527d73e581886de0e1b2f61d1
SSDEEP 384:AHP0iJXI8j7XXlvskk0xsVjXj6Ym+AzTM:AciJXI8j7XXlEkvxsVjXj5XAzTM
TLSH
T125A2D0AD9BA32442AC17A2B85BFB72091334C443AB1FCD6D7F9E6744CF412A458A1BD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mini-profile-view.scss

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\legacy\react\assets\scss\views\mini-profile-view.scss
Size 2KB
SHA256 6a703b25ba9353beac6a111933177fb34165b296ff2f24b66f6b7fa79e5018c3
MD5 1516a2663408ed39acf0e6cd9f58df0d
SHA1 acd979ddf25ecfd461d9a454727b3a064142c0cf
SHA512 b2a0c8943091fc3b7c8cb7b10eaea9a007e1a7f1bee78fd16e50bc948f4fceacaf84c2c79270981de5ec6f3024720d76d1acc528e77bf416d4ddb88d58715955
TLSH
T17751CC8ADBA710067807A5BC3FF766091335D047955ACD3C7FCD6348CF861986AA17CA
MD5 SHA1 SHA512 TLSH

Submit Download

subscription-window.scss

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\legacy\react\assets\scss\views\subscription-window.scss
Size 13KB
SHA256 2b6b5a7c6a1d506e796912961e0f8f678f117fdee118cb1e3790e30e4b45bb3d
MD5 1c6fe5f9d27af841ab25380596a6df09
SHA1 80d9ed8227a60d6fe69be4cbe0a6221098f762bf
SHA512 19d234f6f28339d4e0c2a4bcd52fe3f56b6b6993c44f4428295c5026047dff54059598f120f52ccb0c369ef462cb804f51cf22c614b9bf827d2b744edbf2c425
SSDEEP 192:13WxiSOaLSoFd4Qio165hJDpZa528RLkarmjCBlvuWfuWtnuWUPaKXHzZkl9TdG5:1DwFuDLNFqtkEqRf
TLSH
T1D852EE9EEBF315037907613D5BDAA2082271D883E60ECF2C3EDE6308DF515D969A17A0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verification-window.scss

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\legacy\react\assets\scss\views\verification-window.scss
Size 2KB
SHA256 aaf1167f4155731a2ba56700df4282f0be49f867904ee14a5742cb8f56c92935
MD5 20e42351b1c1222f36c13e1133801192
SHA1 a3d219cb517b561e48f913e4c78c403ea91ab221
SHA512 67a339738a4dd45f953a92d730f58231ea3822698cd455b2289400a14425f4b459c40294d093019801b9d23927fd340baf8eee752b0bd6bfe5efad37f20a082f
TLSH
T10F519E9A6AA311007907B17C2FEBB3191274C0879A5FCD6D3E8D6709CF821959AC2BD9
MD5 SHA1 SHA512 TLSH

Submit Download

gate_open.webm

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\legacy\react\assets\videos\gate_open.webm
Size 626KB
SHA256 2636fd70b89c2b2d9d93584cfde73dcc59e9bf35e086c1d63bae1640e9421dc5
MD5 c45510971fd9c32800ed1f2ced0f756c
SHA1 a4a44feaa81e47324b009a6c0df0694e08c7f71f
SHA512 b7738a70ae43ec012944a69fe0818d822dc391d0983b592557925ac946e7715ff504e742fcc2d7d9a088e9aa3f6bce20f475f9b45921d44273db83b7080d89c5
SSDEEP 12288:p7KBi5FE3FUv/PjL0mTmw/auK1SeY21KAVFtNwXF374VQfE4ZVXi0:FKwE3aL5+IeJLVjNwXFcGM4ZVS0
TLSH
T197D4232767D6FAC1C38B96372B1300C9C6D7D4AB9B49926D0D8F1C167C2973D824A6DC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gate_open_loop.webm

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\legacy\react\assets\videos\gate_open_loop.webm
Size 357KB
SHA256 be72862d54560665a83794d427c388c585dde74eff4601db1fcbf7ac1d95bd68
MD5 fb8e458136f7d223cd389373c24b7cfd
SHA1 5f023530d0c597d5d5d26bdb6ef162eb1d8896a7
SHA512 0af9d85507843014624724351204b99b845fc726efc721e81ba12d1e42f1ffd9b53ba72fb2dc41300bfc082913455efdc9942115a8f214bf392fda36793820b4
SSDEEP 6144:q8HZobecLjdSFOiY73BMEiTaC25RBTF4ynxNS6tmhxRzM7X8Bj0P/a91BJeRvrdG:qoSiOiY73mcCupnx3wxVwX8Bj0GcxW4q
TLSH
T151742225132C61E7E21228BE9242AE6A5B154D63D1AF453EA08FDF0FBD1437DD2D31AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

_fonts-login.scss

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\login\assets\scss\_fonts-login.scss
Size 887B
SHA256 439cabc60dc2333b98494bbf6ed0cc289c6562abaf6a51a087ffe172f2324a67
MD5 868701588995099b7415dda813b12a7f
SHA1 48dad8a5e4a4abb71034782316a2a61cec821e2b
SHA512 876dbf4417065cfd86f556163fc4a25dc6ec72ac5b77adcfa79f84fe73681fe1206eeff0f37c122d94fe063efb60d8b67f34461610eb635f80c298e69285683d
TLSH
T1CA118C106ACF790A66500C4B734F6F192E4D14263145C5BB7E6E1C94BCF293943A1B9D
MD5 SHA1 SHA512 TLSH

Submit Download

style-login.scss

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\login\assets\scss\style-login.scss
Size 858B
SHA256 d9d5f589538851b3966cb5bfd77cc8b81aa35ab447c42d5fe7ff82dab79d70c9
MD5 eff98bbc4c88917ee596acd73d3c55c6
SHA1 a5e322fb46cfb4ed44455edfadbc0e63d9eb3ed9
SHA512 387dc2ba2ddf26069a8f8146d05c10bbf709f21d039fb6d85b9d9e708af8ef15610b04cc94f919bca90d609bb1114fd5fe30bed275b7dd1771539b15193b28bb
TLSH
T1D11112B7F63C61331904048C905D1BF83729C8693B7ABF6998BD813057D4C39357A186
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\manifest.json
Size 1KB
SHA256 0bed6d29a32385fb998f5678309c7910861b306c69d41a442b55943004e8c99a
MD5 bb9e434393dc3e80b46a046e4f116e91
SHA1 19231d9448504e9398faebdee9769f75399472ff
SHA512 6e42840ba57b1988ba5c54e6a8e560764570a011de59300b1964bdf9995258b7d41c90c8296d46a9824fcfd87ad0ad2c086bea16e7f4850bfde4a7e1b9481876
TLSH
T11231781AC4684D336A95A19408BF2680F339495B4D40BD2C3B9C904C9F6D72FA1BF3ED
MD5 SHA1 SHA512 TLSH

Submit Download

downloader.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\plugins\downloader.dll
Size 30KB
SHA256 f7214443b45d0ef392e1289588f5a524d0cd0892873cf6205f670b20f983cc7a
MD5 84cef33c2f853d031a49b899a4582e43
SHA1 9eac181e543bfb78ccafaac09397f18705a056e8
SHA512 a32add27fef55e87146bd5b7cc9f57615875dc3c04ff99b26e75fc3663b04926773119e857f615428388e33f2d434522677bb40d390a5baedc1d52f060fe53ab
SSDEEP 768:Kk8G+MVaDqf6fxrgZZtV3+LgrM6PEZJXYic5ALi:t8G+Mcef6ZYZtV3QIEXX7
TLSH
T1C8D27D4B87C84A03DD2F4974F4E2C9138BB1F5966982D2CA26C9C0B55EA37111D9A3FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

simple-io-plugin.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ojgnfnbjckbpfaciphphehonokbggjhpnnoafack\307.0.20\plugins\simple-io-plugin.dll
Size 50KB
SHA256 a70140cea36efd5b9f9ee53d9f9cef9060b99d0156467bc8b67324faae6bc12e
MD5 dfd1f4d77d7c61a76883e6e679cffdeb
SHA1 4ea7f246e54c32684b0f8004df9cb2f84ff9b25c
SHA512 d4df341e0d349955bc6cf02fb5b0bbd2b11494f7e08ee604a7655c0e0cbba2fe26125015a16c60fbe3a90e7f874681388a749b5d53d3e58c7b2de8c8e433043c
SSDEEP 768:alMqTXAc1BzfhhTOibhuOekXGmJuxafGZrpx9ORvJgNYiPnxqmp2Em8:alTdfXquuIaafurpsvJgN7Pnnph
TLSH
T157337F055BE84807DAEE9EB9789145950BB1F959A832E3CF0DCED0EC09637844F603BB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\oldfhfbggeglgjgenidckaneodejpjkaggklojma\304.0.4\_metadata\verified_contents.json
Size 1KB
SHA256 cd8db95b1a0af13c478b39bd0c56e532db79cc70e01bd246c814011ef754504a
MD5 6bcf41211045a6f23d6e226965bb625b
SHA1 8bef7eb20cda9e0f169416d075fed1b0edceb41d
SHA512 f5a443cdcb01952cb7743b68250cc2d410d8a7fd27acde7bbc415e47bd67fdda33b32da45d70374a542bdf44b9de48eb932ce25248ebd70e2a56c015ddf51b1f
TLSH
T1F131547E84890C823BDB24EF6C622950DD6760078C612C4067E97ECD4D4F66AD332AEF
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\oldfhfbggeglgjgenidckaneodejpjkaggklojma\304.0.4\manifest.json
Size 2KB
SHA256 22c50595571bbb768733f826df9033b9ce209d632133d5588576baf6f3ecd432
MD5 9d72d3fcf81a6aa0a7732eded69e9ed0
SHA1 5192664bccbd7645f46e959d87467fbbf66adb2a
SHA512 120335814c8bb92782be7c367b4bf9c329839510de371bf4ff00100b221e496441bb6ef1a3bf42153f5f8d5e883ed65fbbd36327ae713356f9df08318f1428ef
TLSH
T1D151672EC4694CB329A6A06A4CBE2281A739455B5C457D2C779C144C0F2D72FB0FB7E9
MD5 SHA1 SHA512 TLSH

Submit Download

downloader.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\oldfhfbggeglgjgenidckaneodejpjkaggklojma\304.0.4\plugins\downloader.dll
Size 29KB
SHA256 7fe002a7472d01065ce24dfcf3223dd03accbd306b03c0451fb94bb9ff8e402f
MD5 919677ca15c19ffd9423f1eac7ffac75
SHA1 ee04b215fcb2918c8ec0a31eef5071897854f11d
SHA512 99bb655cc1ccbfb15754f3b5b8747c67af4f797ce328ea0f2733e23faae62185674abbaeaf1e5f098ea368638e3ab154ea5365f910b1338d693bbbbe9eafab98
SSDEEP 768:K8G+MImsBYF6Lx+LvBM60xqfsYiPnY2E+:K8G+MImiYoemfx+s7PnYI
TLSH
T1EDD29D46879C4D13CDAF4AB5F0A7C92387B0F1D259D1C7DA29CAC1A44A933111A563FF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sprite.svg

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\pmecpbelmicelkhhcdlonffhgoclgcdbfgmdfhag\294.2.0\Files\assets\svg\sprite.svg
Size 1KB
SHA256 6eea4bdc3b6532d20f2fc2683f7ca0985e78df25a4d9d9db8ac399aea60606cf
MD5 71df3fe2ce323484290c599ccf69938a
SHA1 11603d8bda3964b9ce7b5257b41129bef24cc5b3
SHA512 cd2e00fe1c6725d0d332f8c1c4681c77fc2df8871ceed3b7a3544ea89676d4bfbcd716dd055be196d1d5fb59c846372746b0dfb2c9b1b0146417a520f90cc0f0
TLSH
T1283174FAB6ED7F98A102F764952AA2B46A6704F89CB2C0C403B35D81D73300D84E5D86
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\pmecpbelmicelkhhcdlonffhgoclgcdbfgmdfhag\294.2.0\_metadata\verified_contents.json
Size 1KB
SHA256 b2152abb997b80b594f963bd6b411baf2bab022248058ffa3db3ead5f46adb3a
MD5 407421fb7d923e6cb27811494289685c
SHA1 813cd743674b227f45a296deb11abd3273b71deb
SHA512 5bac6969d92e1ff7c512f189cbe88765071a334aad43dfee9e1f5dba46242fcc9dfbfa61d57833fb1323b984cc190f2949be58175123b4456154f3ec2b78c08e
TLSH
T18031920DA0589CCB31A9704A5CB669408911C1B3A85B69292346E08D6FBCE3F7A159BD
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\pmecpbelmicelkhhcdlonffhgoclgcdbfgmdfhag\294.2.0\manifest.json
Size 729B
SHA256 2c5b719b842d695038ebda520abe5586f0665930b5353a94c983de65c2979b4c
MD5 0b1d601d0df848eaffde4bfcba948f79
SHA1 0adedc648cb09bce2804a5af15e8a688e7081913
SHA512 d692336706dfd1c63457ed7b340bdda11f885af133d11ff19a2537f603b5c10913036470674716763dbb0ad985f61f1cc791e1cb9c6d2a0a8e909bbba2414658
TLSH
T18501991CC8686C725A6055050CDE9901632499130C587C2CBB4E004C6F2D32FF1FFBE8
MD5 SHA1 SHA512 TLSH

Submit Download

IconMouseNormal.png

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe\1.309.1\IconMouseNormal.png
Size 4KB
SHA256 56228da45a2f9b7a08661748cd1af4b011a89297270e2a6c68fbdca4abbb4af9
MD5 013b32964c31cddfc2340004a8162cdf
SHA1 b8342b29dd27c347b75fc028fa7932cafaa185cc
SHA512 3f7e80df9f26f3c10566add4967a3eb40a81e4a9793cc813971e4b39081caf09c62b16e7b86c6d4db82cf3f45c72ff3dd2ffae132462bf4b357ff058c5b1ebfb
SSDEEP 96:C3mrc++SWuK4HX2BuyHpNZVBdQ70zBSiY7UIcEqIi:emr+Sm4jsvZVBmcIXbqIi
TLSH
T169B17DBB5617AB09CCE0DD92490D42317EB34E8695FDD64F13A79C048FA1AC84E569C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe\1.309.1\_metadata\verified_contents.json
Size 3KB
SHA256 d9608aead0e92e7ba4e5227672ef5a2e9343551845b6125eccedff95b3a6df75
MD5 2c202362e3f2f4807430ed89aa50c599
SHA1 36bd868ef97df71a874c8797d182a4977ab0c25d
SHA512 f88fdc3889e8737d2062ceec778c0b776b1b5606486d8ff588cd60d6321db1eff774a0dccb0f6a3b6db605ae905cb2a94ea5d636e697b707fdce61a319983ad6
TLSH
T1F861B5A8E4426E87295FA5EF4C5314C008668B5B7C9170483271A58C1F1D77FF6BB93E
MD5 SHA1 SHA512 TLSH

Submit Download

butils.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe\1.309.1\butils.dll
Size 192KB
SHA256 d0bdc76c739fc833c90cd74426447978eadda8fdb5ea43a6973cc7838fdaf362
MD5 408d6864e2e55611fc6e09bb862ec502
SHA1 8163f04f88e67f9cfd6f027d5d81294d196d0d03
SHA512 874e2b96510b32699850a0d1fd9ee5cceed36d4fd457e423109568b677b85915eef72f9823dad202dd2222c2c972b9b06a95b7def18914d0b024e71fdfe86aeb
SSDEEP 3072:bbL7wIf1UiymwZAossD3KenzkB98OWmxmkcLLoY46LrE/cmeM7:XL7l1OmQAossD3lA2ohkM/
TLSH
T1C4143B1B779540BFE8369078C9835A41F372740147709AFF03A04279AF6B7E5AE3AB51
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

features.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe\1.309.1\features.json
Size 25B
SHA256 c1c6bf69cfc4c70cde923e50db5b04f0f3391e3779151facc64682900d1f4cf3
MD5 6638ee54586b6b2eb0cced0dae9f03ad
SHA1 396cf136e60f512e07c23e1c996555aa13e4e294
SHA512 57dc59441d146ad069eaae2fa62b27cfcfc287ba724569752d2744ccada697b1dac1c0778ab72410f67e71cd20285fe4cff744fa747d69270216af1338d0de05
MD5 SHA1 SHA512

Submit Download

Lato-Bold.woff2

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe\1.309.1\files\assets\fonts\lato\Lato-Bold.woff2
Size 180KB
SHA256 ae88fc0d7a961832f809527d30bd3983a6866d42f66a56ade23f543681594db6
MD5 cccb897485813c7c256901dbca54ecf2
SHA1 a53ca00171f545b9d9d1ccefc210b6fe0fde1064
SHA512 19e7fae2a53cb2ba44a8a1a8b7ee600db1eeed78042ac7b1f9eda47bb4ee20efcd56671006729f68d81023e0dd7a9f3afc8090df1bd91ef14788d4639ceb0cb6
SSDEEP 3072:zuQoquPzvN2rappb/ZZF9NZ5Dv4C8OApEST101kuVS4xv/U1KN2UwQ/EtROIYCiH:zuaErPBf9b5hyEA01NVSanUKN2tQ/aRQ
TLSH
T136041232846AE589DC753DB0313C75A5E8F39F31532605C2EA78E40D62A77E7AE4884F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Lato-Regular.woff2

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe\1.309.1\files\assets\fonts\lato\Lato-Regular.woff2
Size 178KB
SHA256 983b0caf336e8542214fc17019a4fc5e0360864b92806ca14d55c1fc1c2c5a0f
MD5 bd03a2cc277bbbc338d464e679fe9942
SHA1 cbff48bce12e71565156bb331b0c9979746a5680
SHA512 a8fbc47aca9c6875fc54983439687323d8e8db4ca8f244ed3c77ca91893a23d3cfbd62857b1e6591f2bc570c47342eed1f4a6010e349ef1ac100045ef89cbfd0
SSDEEP 3072:a+zq/3zkl+ciohnxbjroiZ/XPHi8Mo/Oqh/J41RZ7E/Aur2mmxuN/y424XqtjiJy:aYq/IlDfcipXf9h/sTE9lwuN524Xq9i4
TLSH
T1C0041258A194DEE5FE761A3A03B7C540EA8E7AB041DBC6F6F0B994497E211210FCD5CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sprite.svg

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe\1.309.1\files\assets\sprite.svg
Size 2KB
SHA256 95a2c5867800c948b4122bd6b077b6d7157cc85cc9812d205ff7e6e497c43809
MD5 b1e3714793bae7a95b5fd40a09215849
SHA1 2f2d0dc968d1bc35107fd80ed13d9be7e37a8c0c
SHA512 67b6650f19271dfe2e490c22991d241e583545e1a9308322c6ced21f32df53e6bd4a7d170f34567407a19603967aee845f4e08fd86397fd16b439c789781e8e5
TLSH
T1A651DDB9D2D5B7C0F12A9391E1617DB03E5F34363BADD2A0D2505DA3E32101A1DCC894
MD5 SHA1 SHA512 TLSH

Submit Download

notification.scss

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe\1.309.1\files\notification\notification.scss
Size 7KB
SHA256 7ac7005e23b40096b076d58a6275e04b3031c9d66f114a7475dcb6fbd674fa24
MD5 57dca63220ef3edf7b2cd6a8d4dfd9e8
SHA1 dffbce068ecbc926bf3a2a68806d9e771b9f9ee3
SHA512 7cd1a58e7a554ca7d686cc2a6dc56eb9d723d2eed652a7bed7c9c5b023e4ed649b4c1fa4978362882d78242d865f4bb3b09dc10ed7096f94b4f6714f8e48424d
SSDEEP 96:weDkwXh8N1da9Rns24/wYrQ/Jv/2/5FWNUTjdsasAD:w+Xh8N1d6RnspVrQ/Jv+DWNUTjdsasAD
TLSH
T16CE12E89DE0121452633A77DEFE34305FB3254239B4356297FDC62458F711289AA2FEE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

notification.ts

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe\1.309.1\files\notification\notification.ts
Size 4KB
SHA256 8113259c62864d55e557bd6c1e723f7b0226045a3f6a57e81d051c9eb9e200e0
MD5 4ab4c1b7228a96d3aa849bebc9504174
SHA1 4490485d182a33c7a15c65d66476761312581bf9
SHA512 5a3dff28aea494dc297ef55ed7e1d62dfc14644308eb0e72942df083a81f5cae9f3006bdc43a9d9d392af86cfe71a3e37e087d5657543d20d4f15a730660fd30
SSDEEP 48:A1IDqFhfezpeLJDZoWoAfVt27mSnT6YKghQiHQkGv8GHPJhlThJJZJ/oU:A1I4cpeLJDeWbk9KEw78mJhl9pJAU
TLSH
T1E4911D47466A95709EF253AD8F032446FB27063B554A86093FFD429C0FB325192AEFEC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

general.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe\1.309.1\general.json
Size 2KB
SHA256 9600b1acf535519d21521c7319d95481b04a3fd266dbe7a329c0462bc39e867c
MD5 9a215b9c96614182b5327629450ad296
SHA1 8f0acc9b3b1a72cbdb13f5ede65fa8e382a516e2
SHA512 56a595c71ef3f0561be20bda558a14be085833858ee971d8e07ddb218342ebaba495fd13e1a839898dd7aa44d27c86344544d040efa8140e6faa2cf32a7c9e60
TLSH
T171416732C9A54D170D7005A96AAD1241F67C971F6600ECFA797D901C4F7E2B91058FDC
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe\1.309.1\manifest.json
Size 2KB
SHA256 f97f9f69867cc9ce4dbcb833eeb397d0640644e864a77ffb4250a5bb543c43be
MD5 60fac8c06960d7efa9ebbe9289e1eb19
SHA1 e5e82b2ccc6fd2ada56fae13f3f1e82ec3405e7d
SHA512 f22349b80bc111522299b1c5f67b6fd6bf48b6eb979cddb6dd6c0fe1a9b559c19191c53c57aaba412ad50ed70d73bdfbb5d058257313c482231b45d142301289
TLSH
T13041691BC4055DBB6D7AA36699BB5391FB26077F20414C1F7AFC144C0F32626708AFA5
MD5 SHA1 SHA512 TLSH

Submit Download

simple-io-plugin.dll

Path C:\Users\Admin\AppData\Local\Overwolf\Extensions\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe\1.309.1\plugins\simple-io-plugin.dll
Size 45KB
SHA256 eb715ffc70abf496495efbce9061f3cab56cfe0a4d9e51bece75bb2b9e344254
MD5 d8b86c89d68cebc8639179e71faed68f
SHA1 6504eb4377d9f5a17c2cd11ed6fef44c50075613
SHA512 0d2660ad5d2e4cc301f96bf099b3ede84778f424ea29a4675a8798036d36ade2bf1684fac5ea738db9c100f577cf03469bfe80ccc8430b9c8c1cfa496d6fba2f
SSDEEP 768:d2JmGFBLlofjdSfdh55rGZHgxQFbrdB4pjKGrYiP93hfq:dullNP5qCQFbrn4pjKGr7P93hfq
TLSH
T172236C4527E84866E9FEDFB5E0A656610B30B657A433D7CE0CCD94DE0AA37C40B2139B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

avatarLog.html.log

Path C:\Users\Admin\AppData\Local\Overwolf\Log\Apps\Buff Achievement Tracker\avatarLog.html.log
Size 2KB
SHA256 cb3501aa899e18c3a9fb3ddc48a020b13dcc3c0eafb0bbd8fdd56ae5d5f0809c
MD5 1926a7c4ec7b5afc80ef460c3168d31b
SHA1 bb9a5a4e0a766d0e42469e5d78df2c3fb9fbf0f7
SHA512 fb5c38be422bf1b36c11ec27655ec1e11f14c6784911ebdb0a9cc60b41b91369b855470979ad14736ff55e314a78be5e9349849336f2ef9c6f908c9725b5f20f
TLSH
T1DC512770D8DEAC979C9F080DAB300B9E7176BE29E136F90577151BAC594330A6366326
MD5 SHA1 SHA512 TLSH

Submit Download

main.html.log

Path C:\Users\Admin\AppData\Local\Overwolf\Log\Apps\Buff Achievement Tracker\main.html.log
Size 4KB
SHA256 86f20a777d068416a508b2ad0f7bb11fe94e47507c8e4e86abf9ae5516747b02
MD5 51cb780b1cf8777d23d5c4a1288aafa2
SHA1 753de973802c4d331907b5b32eb65d21344cdf65
SHA512 f625ee7efbe4b8eaaed41bfef3331c310c4d5ebd6b67f28b95b6f78346ab7860f612e022c858a34d628c4580ae44624cb8dfe99d994fa3e31837b0170425b66d
SSDEEP 96:CQMxzVC1g0/zzwZoDIeM5uH4aJ5Hr+HQ5Kavj6Za3syGWhfElg02pjg07p:CXx51ERM5y4N6GUKAp
TLSH
T11BA1E0A3506BFBD2AD664605D810470F1BF32EE56629F8DC63282B9701E3C0EF67C920
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

serializedLog.html.log

Path C:\Users\Admin\AppData\Local\Overwolf\Log\Apps\Buff Achievement Tracker\serializedLog.html.log
Size 4KB
SHA256 03bca493b2005546b3f35ec0dcbd828936e94c41b094fc3d81ccfffb00480b83
MD5 da38bb36b94318bf500bd845dda6da79
SHA1 f5ac2de70cb25f4f31697ddef28ae9ee57c6f1c2
SHA512 7c75ed803361adf9212b4f2d31a1a00f8c1ed4e654a0300d84b672dc2eaebf474337288577e5157977974156a50a482012a15b3c77b7acffc929ee36d70e8c9c
SSDEEP 48:2/Mk2HD/Cdt0qQu8M6/SOVM5t4aJYUHqULMpod7/syNVQOWt0qq8Mj:2/Mk2HbCT0/fBM5t4aJ2ULr/syNC0H
TLSH
T1E1A13663C84AA9F19C97485DFC300F5F61A63EADB229E41D7B1523AD40C7806B7BDA31
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

index.html.log

Path C:\Users\Admin\AppData\Local\Overwolf\Log\Apps\Overwolf Remote Configurations\index.html.log
Size 2KB
SHA256 685627004dd89dc026644dfab6136547ea300819cbe9a9b51b04a875d028689f
MD5 e77f69db9d508bc1b7861c854097f0a2
SHA1 1d1d8789c16c3160c265e3a72334b058af8bad48
SHA512 833bc27a530761cdf7800f4753f5b975cc4db9fcebe22a1f52e5bc344d869875dafbd90e7cd36457b396354bec41920a94de001d94fdc9925c967f4304ebcbdd
TLSH
T1FF5132326031DFD23E79A897D86A0F2D2BB3A545E3842950A11515CC459B38BFAFD43F
MD5 SHA1 SHA512 TLSH

Submit Download

index.html.log

Path C:\Users\Admin\AppData\Local\Overwolf\Log\Apps\Overwolf Remote Configurations\index.html.log
Size 4KB
SHA256 96fd967d65d317c59215c18049090891f44d4b8962370c8e44eb638cfe9708b4
MD5 a46b6bcff00880c8149447d57d0dc00d
SHA1 e15f5a9df28119591d9569bd3af525335cadcb0b
SHA512 c7cb57546012e0f62897dd788fb38ccd16a0b8747ca28b5069c211397058b3ef705858ba6085fbff84f7d53ca3c32235a591588f19e4dfbe750994860c4379e5
SSDEEP 96:T4bKlCEWUEWyQgOYqWuJTgYhPJJjuZomxHzEICadQnOo5ph:T43PtQlWOsQxwjHwICsQnOo5v
TLSH
T11CB1112161329F919F2AE497CC665F1D27B7F600E3D46624E21106CC449B34BBAAD93B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallerTrace_2026-09-07_17-15_3032.log

Path C:\Users\Admin\AppData\Local\Overwolf\Log\InstallerTrace_2026-09-07_17-15_3032.log
Size 1KB
SHA256 69bc27ba668f3a7ce34a36f446c602e7ae98a7d6f5783d20f4ba5191dc4b0de5
MD5 a4d19c2631c3ec2e9ccedab742614bd5
SHA1 75d18475030a4ca9af92fc527ec2c38082215058
SHA512 cee825fb86b0281ef451174596c31197420e2cdf0fc48eb05a8d205daa69a5e24d8847b62191f0c6106ca08132ecf0d7cdd6f5c91e79c1c2052a28815b72c9ed
TLSH
T1CF218A04225698F408560A0AB93CAC0E01B76F08A31FD060FBAA27C585A7325D7DCA36
MD5 SHA1 SHA512 TLSH

Submit Download

InstallerTrace_2026-09-07_17-15_3032.log

Path C:\Users\Admin\AppData\Local\Overwolf\Log\InstallerTrace_2026-09-07_17-15_3032.log
Size 5KB
SHA256 201b8d22b888d6392e2b320ea0f747bcc25fa76500809a140550490357630288
MD5 644808178b3302fcd08d6f1415962c13
SHA1 1055bcbad0723d9f0477590312c2654c95b6ed7d
SHA512 b75432f66215302d20c7e0db668774b504324804fdc912c1243303f822b2631c3f292a738f7b68e88d2be2b4f60740d4e2793ed527c5e701a66535e2cab17502
SSDEEP 96:TG5skAlJHRxGj+wsj+dj+Aj+DsszCGj+DswbFJIR5j+DsLrj+DsFj+DQ0/Xj+Dsc:6oJ3G3se5yb35trjqXdI
TLSH
T1D1B1EE01333D55F00963490FF91A9A2E06733EC9B31DD575FA5A3AC9013721AE6EDA3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

OWLog.cfg

Path C:\Users\Admin\AppData\Local\Overwolf\Log\OWLog.cfg
Size 18KB
SHA256 47ac331a2332aa6c5b01d815a4ed129d8ec0dc7aa827d722beafae6dbb2fcc19
MD5 3c6986b6ec36c09d073bc6cbdc3157fb
SHA1 4469c83c2eff3fed8b9ccde8bce15b9df841562c
SHA512 c3e908ad958b76d4043d97ed80d10b51dd686067bf06bedc5b513918a1471cb917ee645d0531023345ecf155c61ebeb5f8ce17960142b43932fd580f8814dd3d
SSDEEP 384:7pS1v3Nb4vckb6mN9OmPDr4h/q9J4xNLQ/CygPolnhAvccchJC2:bN9OZhXNLQ/Cf2
TLSH
T10782D53A27F91508B6B3AE806EB4C4719A27B9D20A3DD12D119D104DC6F3E41ADE1FB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Trace_2026-09-07_17-18_5876.log

Path C:\Users\Admin\AppData\Local\Overwolf\Log\Trace_2026-09-07_17-18_5876.log
Size 4KB
SHA256 32b595480a98f48d588da6caf7993d62c28af25b369ce7401c2ab8dd6d85c439
MD5 1502f901efcf7154c1b7263edfd68524
SHA1 ce73ffa0364e795f5b1d6d9beea59e2bfcf44d6f
SHA512 009343354bb69f7e499c48489fd3c7d8ed56ec80c2ee7b5070ff91bb8299ebeb4bc27531fbd7e499d5e18fc978b48250e12048a4a1ac226a9a344752fac899d1
SSDEEP 48:6AvgEeg6u68jDmF0GXGDcQgx7Jrqge/25Mw6nB3vQNKbg2ebGD/lWH2I7eg:lvPE8O95zrqge/25MHYRdGgzyg
TLSH
T1FE91B551AE3140CD0D0AC82BE5A96A1E86F37E48FB38B578F6178AC847E7205C7ED461
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon.ico

Path C:\Users\Admin\AppData\Local\Overwolf\PackagesCache\ncfplpkmiejjaklknfnkgcpapnhkggmlcppckhcb\icon.ico
Size 8KB
SHA256 0fc45e8f998a90ea5b8cf362901e0398c5e93d5e15cec95eba1c4564478b6618
MD5 7f3e812dc2c6ba16e0e105f8a66cf676
SHA1 3c43f9fbe269cca43ff6a5c989dddd6b1bccc80c
SHA512 5fb8a13385f70ac5427d65c8207a896a42322f66431c59302eb1451e2d0fc83fba4a772b1191e6e5907376a06f9e7257397670be824300adb065f65b4395c2a7
SSDEEP 192:nIXS/eJjKRdtOlHoR8Fc49j3R4lbqxvXt0/TsYlQQ/:n+jOZR8K49j3izP
TLSH
T108029EFFAB08D9F9AD0A026421BB04609DEF79CFD9335498ED0CE9384457DCB9D06201
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.opk

Path C:\Users\Admin\AppData\Local\Overwolf\PackagesCache\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe\1.311.2\app.opk
Size 553KB
SHA256 cb7bf2791502ab5425ce70a051037bbfec49acd56da25b682925f0ca97c45567
MD5 a16d8bc938e4f4d2860c49d21cba8726
SHA1 15d6ef58c9e0c15fb5e9a3c0c67974b2a936d2ae
SHA512 90df518f1204cdd8450cf27a38af772086e7b87005493da6c7356f99f78521c2ddff190a402b2a815b4bb58125b7dd961a661835c36e69281974f97213c25a75
SSDEEP 12288:aiGNoda4qeBx0Qa9NoQ/eRpZnD9zSSyZOnuE53W5D4KDFxW:aiGac4Rx0h/C3BSXZOuE538ZW
TLSH
T10EC4235ED5279104CD8A773FA6A71005C8BBCA142070EF17E4BA9118ED9A3714B63EEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon.ico

Path C:\Users\Admin\AppData\Local\Overwolf\PackagesCache\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe\icon.ico
Size 9KB
SHA256 5daa3f654d4578651bee5744a682b946c292146385eda33e0c49962ee2307753
MD5 14c0c793526961c4275c7c0bc06aa5cc
SHA1 8f7e12b5e6d8d9e9418786ca23672a6aaff759aa
SHA512 d6b0419afe94caacb98dfbaceb311726c50e16321156fddada922c8b74d0b2dc87e85dcb221456f1c7cec3f2212fddd38c9f8fd938f304cdb98c4ce31115fbea
SSDEEP 192:wIjcmuujYmw5xN4jDj6gGfX5HA2nPj1QgXHtCzBjRwxEaz74/pA:pjcmVXw5DqGgoHthQg3tg5RUmpA
TLSH
T1AF22AEBB06E7CC9E4D2D6A24A172013F64F627EA07E5760D3432E8190D2CDDC45DABA6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SettingsPageBasic.xml

Path C:\Users\Admin\AppData\Local\Overwolf\Settings\SettingsPageBasic.xml
Size 752B
SHA256 c85fdd25abfc387c243890f0e343b42a24803cff87e3e4da492ca09022e0270b
MD5 5268ddc49f6f0f0fde6d42940f63e016
SHA1 621d4f862e9761bda639c8a6229bd8c3afeb3e53
SHA512 7340324f523a81dab25084f987df416c9fb810eddeb6769c75370da0b9be9f0a1295df071cf49b66ad72f9cfd33d5246ff965607c6a07633d34de14f7d487315
TLSH
T14C01D1593ED3FD2A09B21D65B539BD50EE30D61230358CE5F3E4231B2A67176194B33A
MD5 SHA1 SHA512 TLSH

Submit Download

SettingsPageBasic.xml

Path C:\Users\Admin\AppData\Local\Overwolf\Settings\SettingsPageBasic.xml
Size 807B
SHA256 3f4174013ee7d35263f8a5c367dabdd723a17a42a9db009e731bcd541c40592d
MD5 e9b6992aae3d83161dbbde47e25bba5e
SHA1 824c91bf8f8f9ad300231a34a66f655ab4908789
SHA512 8045c0b96e78cbf721672fe3f20227b420ea45859b48bd84287c94dbd421bda144ec2d2b4a12b1cb2743a6a9acd9f45fa1dce992d8d65d223d8ef39d0c1d438c
TLSH
T134014F597ED2F92809B60D3A753AB990DF20A60B24344C95F3F5430B3F671AA1863779
MD5 SHA1 SHA512 TLSH

Submit Download

SettingsPageGeneral.xml

Path C:\Users\Admin\AppData\Local\Overwolf\Settings\SettingsPageGeneral.xml
Size 957B
SHA256 f797f47cf5aabd9426b9f4f37d887bff3aa3c93502055f91035b27978e342264
MD5 b0b3f587de7a100cfa6d03fe92f85931
SHA1 634ad375a8eb424e1624d9a44f6a4a5a21040be5
SHA512 060adbcb4b1860a146ccf0dd61c28ec5e6fd7a1c0397d65b589a6313ba4f4216aad9de9e5004064d4a6f24b8cc52def3968594e534f5cb1784b9111d99da2ec1
TLSH
T19411A11D3ED6FD241870886AB23A7840DD60460B64310CD4F3F5130B3EAB0AE9997B3A
MD5 SHA1 SHA512 TLSH

Submit Download

SettingsPageGeneral.xml

Path C:\Users\Admin\AppData\Local\Overwolf\Settings\SettingsPageGeneral.xml
Size 2KB
SHA256 4c205e7b4bda45e9cf4001fa4cbc74f3bda5da4b7aedd4dbae06a6a4c4850b7b
MD5 26432e6b192c294155f51dcb4dd611b5
SHA1 4e309cf07f0ea2c0034e812e7955d0f9028db5f3
SHA512 682f7b0b1e6b56f35d9a6e0d625476653bd8d310c2185e5ac65d50c33ef1a33b71c634de6b832c29047fe3dc40a0cdd427496cfc96f19f2b87acc7060ce9ccb9
TLSH
T19B511C093AD7FA1805704855BA363965DE20425F24320CE4FBE913077F7B1BE54ABB3A
MD5 SHA1 SHA512 TLSH

Submit Download

SettingsPageGeneral.xml

Path C:\Users\Admin\AppData\Local\Overwolf\Settings\SettingsPageGeneral.xml
Size 2KB
SHA256 61784a7c63bf554cb5a1ee43d9bf5c2c6b00ca65b79171bdf1233955394bb061
MD5 f27c2cc778bf1b287660f56eaac2ce4d
SHA1 cf87a18ecebfb326f27707ca204c3e921fc60463
SHA512 ee38314dfdafe81aac71734f122f785d74dbaab3703e08fe5340260a43b11fe6b23dc93fc23560324bfe087c958817d9168088224768b9ad70a99bb9a1e7374b
TLSH
T18C5128093ECBFA1805744819AA367565DE20425F24321CE0FBE913077F7B1BA0597B36
MD5 SHA1 SHA512 TLSH

Submit Download

SettingsPageGeneral.xml

Path C:\Users\Admin\AppData\Local\Overwolf\Settings\SettingsPageGeneral.xml
Size 2KB
SHA256 5f9d50beff643819b11a36d015962e559c48a3a313404c79d1ffa9ef66e52f1e
MD5 f3512e3228b7b63a9e1dccd998e6cbd2
SHA1 bfb48ed87de7540aa506f20219feb06dda78d1d6
SHA512 a5c5bc2fc046c8c870156a753aa56fb7e44a67d3919ee02fa72f05ca19d49c83599fe409d2ed0dbd3657b033836d047b796dd04115666aa8e5c2d25092f87783
TLSH
T13D5107093ECBEA2805754815EF367565DE20429F243218E0FBED13076F7B1BA159BB36
MD5 SHA1 SHA512 TLSH

Submit Download

SettingsPageGeneral.xml

Path C:\Users\Admin\AppData\Local\Overwolf\Settings\SettingsPageGeneral.xml
Size 2KB
SHA256 5ae391fc2c3d9fb86fdd56b037bb7aadce67e6a5039499bcc76d0ed353fd52af
MD5 eb577e248328506121eba079bb14601f
SHA1 8dd3c2e40d233b6a6f0d525918ef705cb50af9bd
SHA512 adf358232cb26c625fce493af3938dff21387edc02fd785be8c47fdccea8e2f7bccc39c936dfd00f3e7fd5b5928c3f9787ec79b7e25d4538578d611f4c3b8d97
TLSH
T13651F7093ECBFA2805754815EF367565DE20429F243218E0FBED13076F7B1AA159BB36
MD5 SHA1 SHA512 TLSH

Submit Download

SettingsPageGeneral.xml

Path C:\Users\Admin\AppData\Local\Overwolf\Settings\SettingsPageGeneral.xml
Size 3KB
SHA256 2ac8ff5243754f0a262a66a7632ae3551f45d21df96f684d2e290d154f223aad
MD5 1b9b14c484d2c9d58bf4c7960bd255f4
SHA1 5406c3c4b558cb3ffcbb3bccd752e5510fb34272
SHA512 22e724a43066e9c55f6410f1db6c42a64a333c402d5b005f76a53e23ab30a84c74aafe99192c68c0949c0080ecc4e641257d946bc47e408265bbcc6c10d31afc
TLSH
T19D71160A3ECBA61415754419EF653565CE2042AF243218F0FBED12076F7B6BA099BF3A
MD5 SHA1 SHA512 TLSH

Submit Download

SettingsPageGeneral.xml

Path C:\Users\Admin\AppData\Local\Overwolf\Settings\SettingsPageGeneral.xml
Size 3KB
SHA256 65c1b73b3c7ed9570f347ad7ee52206a01b984430ace1715b388e987617749d9
MD5 0459321e23a4b5f1eab0f0e25e37025d
SHA1 68724454180e546fee5321177b7968305dd285b8
SHA512 f59ad18996bd9940976788c306478ae0a23762aaeeda83311f496a2f8a263c3744c6dde3b539dd14bdbc0959847a252aad023be6ef30f629d7c9161b3841df6f
TLSH
T11B71280A39CBA61505754419EF663565CE2042AF243218F0FBDD12076F7B6BB099BF3A
MD5 SHA1 SHA512 TLSH

Submit Download

SettingsPageGeneral.xml

Path C:\Users\Admin\AppData\Local\Overwolf\Settings\SettingsPageGeneral.xml
Size 3KB
SHA256 93c503c5bbdac768eae44095899c7355518b2c91b7e8041ea6f37af02dd27fe1
MD5 f71fc7340e285bc3c910e14c30fe63da
SHA1 98b5061844b906aafe85b256cb34fab493434c63
SHA512 e91636bc75c62b674ea43d699726b90b302f61873551fb61e35acd677623d9207f0ecf3e743958838db71ea8c2ad1af0349c84ec6d07fae04397e5fc2f960658
TLSH
T1F981380A39CBA61505754419EF663565CE2042AF243318F0FBED12076F7A6BB059BF3A
MD5 SHA1 SHA512 TLSH

Submit Download

SettingsPageGeneral.xml

Path C:\Users\Admin\AppData\Local\Overwolf\Settings\SettingsPageGeneral.xml
Size 3KB
SHA256 84d86b2b133def8e25fcedbcc9158e09c7374d64b02f958e9dab1bf8fa42c90d
MD5 a348c38ecac2e7c2b0ee3a8bff66a729
SHA1 19fafc2bea6f0a59ee3ebaec42a2f23f86aeff8e
SHA512 35feb97b867f250ddd27c99c6b0b23f3de74fbd3a2b6e672fb9de47b81bc3e437a1f62e71c1728a85cba5839d9e790b8647fb64b6721054512b2792e789c7e82
TLSH
T1948159063DCBA61505754419EF653565CE2042AF243328F0FBED12072F7A6BA059BF3A
MD5 SHA1 SHA512 TLSH

Submit Download

SettingsPageGeneral.xml

Path C:\Users\Admin\AppData\Local\Overwolf\Settings\SettingsPageGeneral.xml
Size 4KB
SHA256 082998984d58f261fde89b440d32b1247b3adeb8c8a4df8714532040a52e530b
MD5 4b55593252da6f3456081d35d6704c58
SHA1 b4d89da4e042e5ef0f75c5991b06f28f746213f5
SHA512 c8abddf79610307024c82e5b3bf5f73524c4a06bc14187eb67bbfb80e1fb17351a6a2f4319abe18753410e80dc602be785ca9a04a8148dd635e622960cb08993
SSDEEP 48:cE1eM2+mG3hmBE2+JJFNdoUotWNMOEotWNMYZF3M4VASL83JN6IghJ+2s2:1MM2t20S2OJFHoUo+EoIZF3VASAByJ5x
TLSH
T1BA91290A3DCBA61505754419EF363565CE2042AF243218F0FBED12076F7B6BA199BF3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SettingsPageGeneral.xml

Path C:\Users\Admin\AppData\Local\Overwolf\Settings\SettingsPageGeneral.xml
Size 7KB
SHA256 3bd3c63ff05a28c72872b007de6b9765c2bf7bfc2aa19e62538cfba61bf7d96a
MD5 cfb2a72b2dd25255eb095f0a15899aa7
SHA1 895da9ea13d2f486615a3c8d10d04ac86172049a
SHA512 5c0c72ee1720fd9034ff9d88fd3363742f067b1ffa6b3b511025ea7c0180571e6823df48e0fe108ac3b6115c379cf1bd9cb46fb08dc8e2348301ecd0adb8acf0
SSDEEP 96:1MM2t20Sx2OJFHoK9Ma9ePM39thpN3FvjbUo+EoIZF3VASAByJ5VMO50BHBJeBJI:kDUGwNGotoJSAFZiu
TLSH
T106F186197EC6ED210A700824AA76B424DD3041AF253698F0F7FD26076F7F6690977B3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

000002.dbtmp

Path C:\Users\Admin\AppData\Local\Overwolf\Settings\settings.db\000002.dbtmp
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

no-apps-icon.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\assets\svg\no-apps-icon.svg
Size 2KB
SHA256 b5e22029b0670f559f75c1f9dbfad0a4b23b9a433440f8623ad55f9de144c858
MD5 b819d22ae521ed2455cee95532392129
SHA1 13a744f7f2c8bc925d15077d96fe87e2bf68501a
SHA512 54e463e38d0f42223039f5a13afe7d17c2e419d5eae2b49788f3091ba038100958f97f67cb991f1b9f3c230860aada054f844b588ef08b64b00a0596f24cecaf
TLSH
T1594145A971AC8507C624C36D97AD78F13162D0D972048F80F54C7B1BBA922CF9E23B55
MD5 SHA1 SHA512 TLSH

Submit Download

SoundCheck_Drop.mp3

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\audio\SoundCheck_Drop.mp3
Size 11KB
SHA256 cf6605cab126dd51b95d6a1b59eb2cfa6b684284a960c3c94ecf01a60bb725e5
MD5 ca78ae9934029ce610b06f2ead10f059
SHA1 d2ac2c100755fc9634eba383c8f8e048f7114b2b
SHA512 0838cfcc3bcaf9c0e43fa1d659252ec7389839af71a5876cad803881625fb22c7e7f6a3d9102fe425380005d83a577d164c4db8a7f56a8c5866ecae06abceebb
SSDEEP 192:fKFyHbuKUMaxrRHArRM6I3XnUIhnNyGuVw1TleETCajRx:SFZKUMGrRAMVU+NyGuVwZcELjRx
TLSH
T13432AE9A178B38AEFA6B503C40ECD586CC813007815992D6F3CF9B01857F66A2709B1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SoundCheck_PewPew.mp3

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\audio\SoundCheck_PewPew.mp3
Size 19KB
SHA256 f0231f227852b016e0a635b552d3c40cb13832f96e49e22d26dc4f361a9f617b
MD5 90d359dc23d89422706d89022e60a051
SHA1 765651cd442316acdaa8c457790c3833b3aac665
SHA512 93c9890707bf1454822ef57fe994d00d82912f072cff2500a7aac7c8137185286f4c7a789e8658935aa4cd9954da873812910df6f8222102e8e318d7e7af73bb
SSDEEP 384:2MOy5Bh8/1dVqT+QX5oR6YptIPxUAYa1UY0JlbXb9KaxVM7+otf:21qc6YpuPYa2dKaxVMpp
TLSH
T1C192AF31E2D265C0E80DAFB5B1C6D1164D772583EB426C1C35DF2C81DFA2A79482EC9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

montserrat-500.woff2

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\fonts\montserrat\montserrat-500.woff2
Size 18KB
SHA256 0aabcea59f54b9ea215b79f429c8a37e68b83fdf5488204e11b87aada8dde514
MD5 3fbaa6504d46b66c2a2313375c417538
SHA1 9cd85bfd0bb294e0382240976c93e06bfe208d8c
SHA512 5cf0dc91c1c39d52fedb642c047d07830a9595f743142a16bb8dd2be72d87d616fa1bde76300866828f3a410b11e2a6515a6bab3425cd39f1a1d75e8906ecf4f
SSDEEP 384:Xd+OZw6ODwXcymdEbH3UcRKELAtKgo5UXWAy:Xd+OL9syrLhgyUm1
TLSH
T1F382D0F60709746CB4B48BBC3E5EAA64EC40B4DC2C86EBA135D2D10EBA57816D89F41D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

montserrat-600.woff2

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\fonts\montserrat\montserrat-600.woff2
Size 18KB
SHA256 8adb87ca2ec37af37dfb66aacc7f841b279b0420299491f5371225a4dc8fb3ba
MD5 5c43ef701a5404b9ac81708cd6f6e979
SHA1 14ef8bf8fb3c47dccc93caf17f573c82c1487220
SHA512 f3597a3ea4ed5b09d0e24ae460e83c211184b7c6726e84ff8a3ba314ea9c00a962f885489eaa869710909a7cc088e3a0a0530bfcfa3a7ebc66ac2b798067a716
SSDEEP 384:z6HehbYYSO8enw0F91sEg/LJt5lKWQ+Oj8cMhI7hXN:zeedSp8w491sE4tjfUMhCxN
TLSH
T15782E063CE993B7764B71B7625D810780F3F4B1F2E8B619580666783C2DDF2CA5A9103
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

montserrat-700.woff2

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\fonts\montserrat\montserrat-700.woff2
Size 18KB
SHA256 1c162da32d36f79b447183d7c9d7b3888c2e4d44abf36c63550898f8f32bcb88
MD5 0c556945fe4b5494525a777fb7f0f07a
SHA1 e5b4095f775e18852b1611ab24f69e308aa4bed8
SHA512 73181e0be0c629b04bbc78bfd434d45bab3775686d52d46946ff70c83a5a21118f56e9de2edf21e5e4f4c22f61970325ee62cf808153682453770d776ef8e7cd
SSDEEP 384:h3yaUVmOJdKFBuhtQuhtvfJEnNthgHmLcH6EmLMVYueMFo3mrHaxs7vNR:h3z6Jwuh+uhtZEVuHhtiueyoS6E
TLSH
T1F382D0A345870D81C16F6FF5CADC77812A4F8392B44F9AA1434F2689C69696A1F363C3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

montserrat-900.woff2

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\fonts\montserrat\montserrat-900.woff2
Size 17KB
SHA256 bf2664ac712a67e024d989d18f818136d1a422c0bd5507571dc347a497ad9b61
MD5 cf103e811944ed4dc16c5ca0f3a74c7e
SHA1 7b63013982b22c17675b4376d118873d5fd46dad
SHA512 9915637739f3163ed27509e9a55eca8fe3aa7e0ae1b404c48dbe5c65288332ab47d9718fb024de36c12422ebd8cfd51a63bd3f42c0a4433bd083630807f5ac97
SSDEEP 384:4jUkeqZpfeMt+Xf+qUnNu1x/vbVlj/Qf+DMeyQY+3SEZ:/kVpfeMkXfhUn6/vhl/JMaY+3SEZ
TLSH
T14D82C082E04657A4F38581377EC3FA799D162CB5021CBEBEE006DADDC70496A67036AC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

montserrat-regular.woff2

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\fonts\montserrat\montserrat-regular.woff2
Size 18KB
SHA256 1c9c85d0b73b7321eb8ed22e0b6bcd577478dd5f99d1379a5d4cea10884033ac
MD5 74795056a2358804684c7e9d0479f484
SHA1 7030f4f33183b8de843e82eedb9cb6a6cdd107c3
SHA512 0716739470ec0e3ce8a2af369ad76db7ee61ab7e3efb4b342b2f2aeac2ccea47e875e4f8ec057683b3f0d21847c4a9b30f93ba5abf961cc4caa985cd764dd4c1
SSDEEP 384:1uQgDgNORqqmht5Yr+okuF7o3xkCwlBia3cqnBWnJRr6t7MN52rJ+F1WyQJ:k38NWqqmht27OFcBvlW3OM/Dg
TLSH
T14582E158CE015226EFF1DA6CECE811AAF6F51DE31C20091D8F7A1E9B1B3413666BE174
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default_flag.png

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\icons\default_flag.png
Size 299B
SHA256 68c9a18766b23c557f9bb30c21ac81f01bab64024567581a8eb2f817c7b5da69
MD5 56f3ec9e9f8a27b0de56ed50c61e81b0
SHA1 c1b3bda0f3e082ed763a9eac2a284ba021c460d3
SHA512 80d4fc01ac44c4df58aa3a3cf6e5e484b4e8dc0ca2a06005d56e74ade22cda7c67bdd0508e4e347471e531c7048e1c69363d10fe628c19bcb2310ef198145fbc
TLSH
T1D0E07D82E3652938F1514C30930B06B89012C79808DE2079D03E6D653D14706D69A7A0
MD5 SHA1 SHA512 TLSH

Submit Download

search.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\icons\search.svg
Size 575B
SHA256 64cf2af95ab93620809bf28aae59f4cb34f1bf5085c4f0cba0e807662285863c
MD5 853167ea051e4d7b7d3c5bb535e4af10
SHA1 af08a9687b4cb31b87b5ec8dd81fde6ffcb10a5d
SHA512 f25f746710f976669397a7076ec37b3597cff98b587c56637b04f529cbce8584001dd8ef026f36e0e126caac402469fc412d5711f191e5ad88f1fc1248d94acd
TLSH
T119F04CEABA9C4594E547C370D52CEA97FA6238361E5901490700FD15B7446376C4DA05
MD5 SHA1 SHA512 TLSH

Submit Download

dev.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\about\dev.svg
Size 439B
SHA256 f8ce99796db40a621e456044393ab4ce7d3a2c52c5d7ccea65756d574534d4f9
MD5 a5e633ecdb1206ad4e7d0365d07226c0
SHA1 82d09c4ada1e305ea9fd5494dd0d7089643a940a
SHA512 90743cb765005f5521bccc45834d84c98e9e4770eaf7c88b2055a46edc067ae3a7c58d868589663ad4b828a7c9ac3e876bc6e076acd2b41c2ca8b0b7937a1a04
TLSH
T12EF02BC742CDE5848E29FB0BA93FFD35013373DF3A1884CBAA51210171250B2981B5DC
MD5 SHA1 SHA512 TLSH

Submit Download

overwolf-text.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\about\overwolf-text.svg
Size 3KB
SHA256 67ef351a623d2713fa18aba65e9d7b283da94214045640ea8eee726e05340a36
MD5 e59005e337f47c678ae12677c0096dc7
SHA1 ef9c85cbcdaae33ff3c3eeff38066059cf1f6b51
SHA512 fcea8c2562de37cc46f478965e035cd944f07bf50738ae6849c0b465c55966221fa4dbd018cba4d9739c63e791eb487de786d0b62911ab5b51bc1aabcaa6d0c8
TLSH
T1AB5154EC4A95C6D0B945ABB8D92FE8F26B3714A2BEC840D493602D4B35550B85D8CC97
MD5 SHA1 SHA512 TLSH

Submit Download

avatar-placeholder.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\avatar-placeholder.svg
Size 1KB
SHA256 bbdc8f6bad55fefcb64103b24f7efdd0eff0cdbfeebb3dc7783baea4b448903f
MD5 9340f02d3701217ad316d991ea7824f8
SHA1 7ba65d97d430e53bcbd16387ce738901f548629f
SHA512 be2693d6427b25a344242fc65ce235bf967e4fb1a1519a5351abc54ccc037b0fbb2ecdafc655dde615fa4176a9e7ddcab55774036b5814230be84585285adfda
TLSH
T18F210FEC3BE94310F100B6ED4311A4B4BCA168DA67A2895DD2A92853D58140C1CD89EF
MD5 SHA1 SHA512 TLSH

Submit Download

error.webp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\error.webp
Size 4KB
SHA256 74432e29d31c1123c22a4389d852325b2d961467450b775c885e10531ff10014
MD5 185b81b14a44f06d3d3f47cc630f3b34
SHA1 615faea96eb66f2a6ee7943e8fd270cf401620c9
SHA512 b138d87171e34de44df86900d961629c34726fac3fc18acecd27aca0e05ee47c052513f497832b3aecc5d85351745b0a3b7c0a7667fce501514538bc476cd1f2
SSDEEP 96:rtT5fP5IWJk67kNkGCY8s3kzRfk/BR7jqZSoi9USzd7GdvoryYh/S:rt959yi/GCY8s3kFfk3jq0D9/Vmwr5ha
TLSH
T1C5A19ED7E3B092A7FF9036B38420A440836A6ED5496D5F45AF62F0025C0DAE6477C96E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chinese.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\language-flags\chinese.svg
Size 1KB
SHA256 138f20019a4f04e5d4053700f2e24406ad4ebd3ee0a9e0af49f310aa2f2c64a2
MD5 a4d85fa5d847c502f2a17e7023782b94
SHA1 4720792eed49cea9dbaa316462c641388af5d05f
SHA512 e309a4139c10527f52d2a7d3917c4966add696f70864468c490da6e58dcb147c69c6ebee6a52c1f113039079e3bdc53413fada097827b5fa5a0678315bdb6efd
TLSH
T12821E4EDFA9899C09906CF31E52D9466017778F5AFE90AD75081B18277A20961D3FD04
MD5 SHA1 SHA512 TLSH

Submit Download

english.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\language-flags\english.svg
Size 423B
SHA256 8cf362f33e9d8be5b41666c5dc553505086c85a0703454311309d6fda32e8d6d
MD5 7469953c5995fd7b2763a71613a4d716
SHA1 f383e46bd08dd1e70863a3ea817859fe8b0b90d6
SHA512 35bfd20cccc4554881f148418d924f1e4516dd3bfdf4bcf4d23b98416b67cefcf19a77ca70671ed5f891cd7ecc65b523be0f6c587b23f2929bdce119ff889b1b
TLSH
T11CE065E4B6588809CA5A977A931C6EDB61A3F0C5D6590084F9803127BD456D7BC3162D
MD5 SHA1 SHA512 TLSH

Submit Download

french.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\language-flags\french.svg
Size 346B
SHA256 6187c92dbec696343d12848d60738d9c8b5ccc325ebee124e0fd0f0c55d23f9f
MD5 2c750c521430c29ec52dd59ada9f6603
SHA1 d647f38214cdc14bc204afab3eef331d11d3996f
SHA512 a0252e8cc96949e552249443f5b14d54d8059cd595ff288538871c1cdb4fca259e636b2ffecbc91ce9abc61b467e3171cebbd82808c4f09de106ce032642b1d2
TLSH
T156E020586548CC1CCE055F6CC5DD5D5E1197F1C68A0D01ABFF42707BA864DCBAC6922D
MD5 SHA1 SHA512 TLSH

Submit Download

german.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\language-flags\german.svg
Size 256B
SHA256 02e7ee9d13553e642eed8cd0d56bcf6701cbe4b44bf795a71cd8931a1b37017f
MD5 52db455587bab08c63ddb0a397246b88
SHA1 a8cbce576c467439b6187c0d296e8b2d6371aa6d
SHA512 37fd2a9d3dc83b82cee7a8d4d40b5b7059aca9ef621aa768d0b967246db845976e11ab19589ae819fa4e3c8d474e4340ca121955ae9837c89e69b38c0eed5858
TLSH
T1B2D05BF992549C08D70657A6921CAC965056E1C6CB490D45F58071377449AC7BC3422D
MD5 SHA1 SHA512 TLSH

Submit Download

italian.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\language-flags\italian.svg
Size 346B
SHA256 18aecd2a2285a5e6b95bf90d01db9725ced7758f9c6340ca9942f47440d8f3d5
MD5 4d4f2cba32fa0bbc2788b80134513e85
SHA1 37e7b28de2272b131e61d0a48f1b5a8ffe13143f
SHA512 07e5fbcfb385f4d821bbaba70611daf7e9d3798ba63d78e80c8de9a9162ef84538bc5bcee38b70a8f153ef53a38dd7769fbda92a84166a515ca0294d19cee7c1
TLSH
T126E068186548CC1CCE055F6CC6DC5C4E1183E0CA8A0D00AAFB82706BB864DCBAC2922D
MD5 SHA1 SHA512 TLSH

Submit Download

japanese.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\language-flags\japanese.svg
Size 234B
SHA256 4238010b3149b6758932173af259c77e1534861df407babcfe6c250fc0a2756a
MD5 716624d59cc4992434231deeeaa42209
SHA1 fe1e4b6dcab3fa941eb8f3e06227a3209757173e
SHA512 ee75376fa46d0a6e9d44d708f0747451dfd03fe513a66c5d323662c2ae1641eb894598aaaecd183e2415d0176e5e4e6f1b7499606d5dd7302ab0bdfd5fa18587
TLSH
T1FDD097B8606CCC088F04852CC0AF28D66397E2C3C68E01A7FA81B02BB414BCB3C1533C
MD5 SHA1 SHA512 TLSH

Submit Download

korean.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\language-flags\korean.svg
Size 1KB
SHA256 e6a762be6466788fce31747d3bb202943585beb18fa73391c05fbc6025059791
MD5 ed3f2fb14902aaae670c21e77dd33488
SHA1 497d8c1ec15f97840ce4f82488fe71ca59555c5d
SHA512 9f3ec2139f10f1b623680374b892ecc93bc37c52235baebb03e888a1b6ac2e0aa31aeff85683f47bb10df3ee8dd90937934db06377863f659916487dbecec94f
TLSH
T1BE2161E5954CDBD09B40C7768E0D7CF2172B6EFA754E1184A844B10370992EAAD5C944
MD5 SHA1 SHA512 TLSH

Submit Download

polish.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\language-flags\polish.svg
Size 203B
SHA256 3d41580fed42f7de180adaa404fb3b68704bfaec3151914f3f011e143c283080
MD5 1e09dcdb6ff7de740523e99998885496
SHA1 f8015339ef97657ce95e6cfde4f39bd55383317e
SHA512 d2b511f2019f545d1f05104c6e4d9081a7f37879cbeea0cfb5ab785718259930e482923f9a44ad92bf4de56d468d98ee94cf732adb33cd2915d4b485fdccc89c
TLSH
T160D022F8A2488C1CDB15577E821C6C97909BE1CADB8A0456FA80713B7008AC3BC3123C
MD5 SHA1 SHA512 TLSH

Submit Download

portuguese.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\language-flags\portuguese.svg
Size 627B
SHA256 2c489d5d394fbfb2186fbc1af489057ea3ff3799eccf86b4ad484e47322130fb
MD5 24a11e227af33b57edd42723cd7d8458
SHA1 da38497a75b5acbec3deb6cb8b94e2f19011de78
SHA512 a6740cbc3bc83b9548a328baaec91f84225c7124607f6757853674d46b404158f58c3948f0b3c28e5dedf584c0f23f25127c9087a556a6b7a1998c4d7fa909a1
TLSH
T109F002F6B84CC480C60443E4C82965B350FE5CFEFB86029AA6507196B3461C7F8A9BA8
MD5 SHA1 SHA512 TLSH

Submit Download

russian.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\language-flags\russian.svg
Size 256B
SHA256 bafa87f5901fd19dea8dd35fcb55fbb69586324b3910d5041629946ff01ae2d4
MD5 d2c41bbda425732701fc8b3f183112d0
SHA1 11df7c5e84f23b2862cc1f5abb9d51dea4c37446
SHA512 74cc300bf735de877520794984c9739756375654a5ac364c886a5b1dceb6674f29dd09ae5ab5e44d955ebfefeda1850d1ea45121511ca663e80632ae31365dd7
TLSH
T160D02BF492488C0CDB1517A9810C6C979096E1C2CB4E0406F980713774096C3BC3023C
MD5 SHA1 SHA512 TLSH

Submit Download

spanish.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\language-flags\spanish.svg
Size 354B
SHA256 76852752e7067c2d6f3c2e80b60e94b93cbd2128daad643e1dd065410d391340
MD5 0087cc51d85462af180359a02e3426be
SHA1 5a25e0535148110a175de663812fa4caf8d01d3f
SHA512 efcd6aa93dacaf7e28e148b4e04f1cff2f1e5ca1e48fff4b01e7450efe3b7d9923c7e808a1b71c38c8c130718ae1d2edbea2d8fec14ec0838f9c84d701717039
TLSH
T157E0D8E66208A834C7176766930C599351DED0C68B8944CAF881716BB4096E3BC3551C
MD5 SHA1 SHA512 TLSH

Submit Download

turkish.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\language-flags\turkish.svg
Size 699B
SHA256 8378ed0fa025a2508f35e88652d7746067402e55be0c90b490cadcc1f955e693
MD5 41576abc38eedb93043250e27d9c4d64
SHA1 1c7de49001c838d57f02d1392dc01188327ed737
SHA512 8962a5d8a04c07b695ea5ed26869879c6d4d8eec5f876c423e77e9c50b8eaf8246d84e2bdd1cdb6cb11f3054cbb70741cc54b168cd739da376c8a62fccdd83dc
TLSH
T1CF0188FD5E883BC08F46038DC718955712FF64B57E8C52477344F14671491D5E90BE04
MD5 SHA1 SHA512 TLSH

Submit Download

vietnamese.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\language-flags\vietnamese.svg
Size 335B
SHA256 9ed951c7cce6c59e1c4d26dec56de78382fd02c5f6999b4ab7a2f0cb4c1bffdf
MD5 a65d8cd2ca9409add4cdad9012aba9a9
SHA1 5a6133b522efc24b4a10b780ebc7e78e2409c1f9
SHA512 43c9d2946437c2445c5d1e9c45df6e070a717b2a6c3284823aaf4c0a71cccc5ade8022c5042c376f5bcd5006ec54456e9d1cc1d2c97e18427fdfeaac6fb1acb0
TLSH
T19AE020E5D1A84D4819155768D56C347911F7F1D7664C0882F580708372206D65D5E11C
MD5 SHA1 SHA512 TLSH

Submit Download

more-info.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\more-info.svg
Size 1KB
SHA256 5a0cb893c18d09c1ccfef0423b1f36b31bcf20fd07ca49555741bcb264ea22c8
MD5 ee485b32f65ba93e4197153b4ac1d8a7
SHA1 553fd7eef370235439d74b9671a12f6e7f72e805
SHA512 9285d80a48fd8a0bb19a58f9f17f6165fafb5da0a1f25befa6c260641ae8b288b15b258512fa4f9d26588fc9e166b5bb7902f71eae6ecffba26f4c5700512cbf
TLSH
T1523141F990DCEAC0A602A331D93C8A96A35E38B977E90E1D4274BDE491401B58C98CCC
MD5 SHA1 SHA512 TLSH

Submit Download

no-apps-icon.webp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\no-apps-icon.webp
Size 2KB
SHA256 42d07f8ab12da5f41d6895bb5835413a257b5ed9a1cd4919f79d8a3fbc10cb73
MD5 4f408f032a001ea08648d2c3b9ee6058
SHA1 e82e62d8489cdf9b10158ad7d0a2bc57ceb7ecee
SHA512 3e5435a116b434621bd75c920b4a59190402d2477af8068092dec50e4a32f41303c6bdccb76da8c1f39be06e029ecdf89fa660e1f16fc13030f15c1cb764dffe
TLSH
T178514DE6224BA16DC10DC8BE11A1E5E46D6B02ACF25B3A3DC4B659E6952B0943D13C24
MD5 SHA1 SHA512 TLSH

Submit Download

no-capture-apps.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\no-capture-apps.svg
Size 1KB
SHA256 08de010d3c5f2982e32c06fb88b2e17c8ac25bff9ea8c45cb9f36d09716a41c1
MD5 e3ae2f1c7a0730525c752076a1799aa7
SHA1 8583f66e388e929df41daafdd7f16285457cf26b
SHA512 e763fc6c81a2831a3ff524bbc900ce81ae458e8b31a75094c8d8a794431d800b40721a7f81e0a360ffa3fb11a92a070885e035a3f4ca1d3e49a80437c76bcc3c
TLSH
T106410FDC9B4C8C69CBC0D3B5979E39D1515BC8DBB8008384A291763B380F6B6AE94FD1
MD5 SHA1 SHA512 TLSH

Submit Download

no-capture-apps.webp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\no-capture-apps.webp
Size 6KB
SHA256 98de81015023297ea3a7baea265cd8432aa8d7ab6662724876684ef532b82a45
MD5 e1893eca747069e6489e248dbe39533f
SHA1 9065fc24fe1fbec29d8d2bee44e4ac998d1332d6
SHA512 38b2c15be26ba72cb4f8aa73b021692548253a8e7d831c45c6af19e74349a500c25f4fd8b080fda07e90d15d77e220c6f45563e4130bded5025a9828db11b63c
SSDEEP 96:+cVWbL2KXlT84T6tQ1JNiBonD/eFaRKyhwJE9b9G8D42GnY1BNKZTlFdpL6KOWqq:wbvXlT8bQxH6DyjAs8nJPFd/Sc
TLSH
T162D19E6495007432FE906E7ED824C385A9A5A33426F228F99853329276A93FA7046BE0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

no-games.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\no-games.svg
Size 4KB
SHA256 b4719855e82d9a113319e62f147a6ddd7d238843eb7172797e74a777fc190402
MD5 f20d0dcb3457b3a4da199a3994e38489
SHA1 8e402f7e50e086f5c893b1ef2c9ad859fd943841
SHA512 c79ff936237708375857a8a7522eef25fa879b0b6f4c480e6eb16c460309628473876e7897c756d1366db04154ad4a104cbba1e7816ae1f0eea6fec4fea1ef3f
SSDEEP 96:I/MpLnf/zuK12q4Dxf4FkjAGJ8XRLwiqi74D9JseA5lhzRthX4h00oh7an+YfQGo:Iwnrcq4Dxf4FkjAG2X99qi74D9JseA59
TLSH
T1879162C8A3DC82E68C119393E77D3173302FE1DE61818D52F6317626209B1E9CE5B9C4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

no-games.webp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\no-games.webp
Size 4KB
SHA256 57e968dce8f37911fbabf7c2e1466b2ece3563852b8d265a82460a6d4dca0dba
MD5 3a22c2d67c4442b695625cffdbc2211c
SHA1 a26d48d4c5758b4330757498df13d623dbcac414
SHA512 0749a452a31dccd685ef7963f4ebe808749276972e2d17674cc15a6333f548ac554322717413efc02a839b7b321b20720db7115c0ea6b2178a6ab516eac0c829
SSDEEP 96:nN+NNBTbpoGyedAORh260Zs1tLjbr9Zlh+jpX0G8VgssDB+Okl:NSU0AOLhtLjP9Ng0G8Vg8
TLSH
T172A19FFB496D98C3214AAE15FC38D3123B552302580AC79685FB1E5D2E9F46D33C4E34
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

no-results.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\no-results.svg
Size 4KB
SHA256 923770c97ebd3f14d6ef73fc4fb9dcd1a915d0538e6743ae182aefbff6c3c0f1
MD5 936543659a2ce08e299c2e186ecf2cac
SHA1 cfe2bbf84f0a9b862212917aa1131402e54fb4eb
SHA512 538c4cd66e59985ccb4a36f5fb9a284a7301efa881203b6a56766694d32d714ea394beb5097acf613f13dc0602ee170d658e1329369b4a316ab1ef069e9ccf90
SSDEEP 96:gZvlFmclNAoQCLPTFV0mMLLpIGUa4qSuo+SVCy30nNEgZoB2D0:gZv+ENAoQ4rwmCLpj4qNo+SVn30nS4o
TLSH
T17D91C6FC67A887E1CA5294D2B76F25A6A427E1CC27418738F314BD0B641A5AE9C237C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

no-results.webp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\no-results.webp
Size 4KB
SHA256 d6cfae60ef98c784270c95d7653ac74303371c25c422a12ce295108413ab2d3d
MD5 c26c5de989577b0b1d3371e8a4c2db8b
SHA1 8430740d4f473545487787d82d2d75876398e627
SHA512 8ce6324b65089d45f9074528fe801bd4d6f4e02a0fe6729ea29a9532b79cb9aa4f0ef5cbb8cd80647945db320ca47d3d1c2067f694d0c6986e9b7c2757331189
SSDEEP 96:Py5A+chukVDWTK5EsStOwLVanUjIyX15oEQnHagPmwSIPooQoi:PyS+chdcTuEbUm4nByF5oHLmwSIWoi
TLSH
T15AA16D6D149B1FA68B082E73652A74BEB62D9807C6745916F2F9F0A3D35CFB77080270
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

no-subs.webp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\no-subs.webp
Size 6KB
SHA256 700f9b21815e028ecc0da4c78f5d9bbb9afd6bc51698db6303dfbd700e050c72
MD5 9fdbc4d5fa91d8e378256cf435200014
SHA1 d9ee4fa23bca1260968e96c5ea3f7a37cd55d397
SHA512 2cfb3c8fc7e75f84be8b45cf431526c5b7731cf3e4ea6cc1f72309a3f3b42662a71cbd75ec068780993b5d71907b38f1218ee1daf854246fc234d3ea7c9a51ae
SSDEEP 192:UE+YEFG1Egm0SB+3oW3bPLcZkhlRVsz7pbQOICs4eY:UfcugmwoErIyYJZ
TLSH
T19ED1BF67463AC61498FBFD32150BC41EDE37015D0BB499E34D6E7C217EC7958EA2580A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

owlogo.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\owlogo.svg
Size 1KB
SHA256 74e4c84d80b5302e1ef445a31f75834e63c12f38fcd7ba718d01cbd9ef1b8ead
MD5 f41a59bec700652513e941b9fbb8a6ac
SHA1 a1b89c94b9b7e639fdb639eba4be06b88d8a41d3
SHA512 f4e12a7302568076241615be7e3d0d11db27798bcad2571dbb6ebf68ceecd7efe74b4ef94d210ce45c03ce999eaa3d5381c3cec1c4b88f0093f38a3403b6ccdd
TLSH
T17E2144F21AD8B7E4C64ECB80DD2E4571748B2CBD6B98A7A1C2002784D714099D4CBCC4
MD5 SHA1 SHA512 TLSH

Submit Download

permission.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\permission.svg
Size 214B
SHA256 fc208b5be72b50d28f39563978a6cbc5308603297b242c0a7304aa3922e31e6c
MD5 7be5fd2bed516961daf92c0dfdb51446
SHA1 43149eeb237d5b6fbc475e75a5bcb602ffeb2afe
SHA512 506cb57dfd13c4f0e5499d52cf5e0b1a68e7693bc55ac1590522fa71df7e990a3aabf98146c757b3c8ea12dfd0ba2275a037d8ba0a078c77bbb530466d27eea1
TLSH
T145D0A7A853041C2CA31242E0E3183160E2BA10A342582144E4512136E20A1AE287B7E8
MD5 SHA1 SHA512 TLSH

Submit Download

screen-light-leg.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\screen-light-leg.svg
Size 517B
SHA256 7b1a22698156210b4dee50598f760bbb6a10b658198cec3b04d765a94d1931e5
MD5 db61930ab50564ee0ef9a0ea12b22450
SHA1 a59f2a6f1a33c77ae2a0c062beffb03e03b79bf0
SHA512 a21c0fc07e6d45dc56e00a42812fa46d25fe8c0d74af59e466a5b0aa0d3652a4c3932c5531483dfcceeaeba3c019e858741969c706e78d0d05345c871e81d7f8
TLSH
T1D4F0C0DAB20CD0990909473A973D85D3703BA0DE6C545614F284303FA0036D76C902FA
MD5 SHA1 SHA512 TLSH

Submit Download

screen.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\screen.svg
Size 499B
SHA256 990a18d8ac3687c4f593fffe443439e3c0a8ef476f6ae27cbad00821e965a44c
MD5 8adcf74e3f81ee4e883a58e14ed11f6b
SHA1 443e37f64d14079eb661a42016084235fb1701ef
SHA512 b78b7c2a16fbf5f4beea3370321cd2e8ed506dfa4d5dae10ad98570be9141dac64dfb20ccc7fdf288b44f5258022fdd1dc9d7ec8bbc6aa39601b79d414ada46c
TLSH
T1D6F059DAB208C99D0A49877A962C94C27026A0DDBC849E14B289302FA0132E76C902F6
MD5 SHA1 SHA512 TLSH

Submit Download

sprite.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\sprite.svg
Size 16KB
SHA256 4f16a02a3bc5bfc2311b69341a03c87a01d5e81b5c51041b3030dc8e5cee80c0
MD5 30f9fb95ae51141a58874f659377a555
SHA1 6f83d6c10e8b5129be28a73864d484e360a58e9a
SHA512 930272fbb15f4025c2a2d315ccdf26a8ea6fbb600038a8e164d8f8f833f417117435e8349b44d7ae274c47f666b08d1873b3edcd913087b49b1294827b2bb052
SSDEEP 384:1JYKagztyGNBQTM9ig0vOf8ZsRh83rZN2sWw3:EytFbAEG
TLSH
T1C07296F6AAE4B3C0A503C7F5DB3AB5D5362B387F7A9AC6446250AF6657340244C8FD80
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

subscription-bubblicon.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\subscription-bubblicon.svg
Size 618B
SHA256 e66dfaeb2a60e1bb2255bc2aa44f050fbeda964cec81c55b19d504919fbe44ee
MD5 5bdc76f4aa8042ed4206403fec548f9d
SHA1 501757aebfbabd0b0b3ed0bf35d6710d0720e570
SHA512 12d49d4af92327d8cc218d059f9488ed2ad17dd02077f906ef1f6d701c54ac5abb46c881b5da8e525c90420f6ae81445709cc19795d97b23770d3e8abc881b3e
TLSH
T130F0ACEA74DD97C04304DB58F1369071A23E31518BFA9789A190E654F94315F68CCDDC
MD5 SHA1 SHA512 TLSH

Submit Download

triangle-arrow.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\3a19a5d541e34e9cae509704bf805164\dist\main\assets\svg\triangle-arrow.svg
Size 158B
SHA256 e3feaac804254f1034c34b3dbecfcfa6c1205ad123abc2683d02c0c95e672ba6
MD5 49cc3911fb8516a614a71ae7d1c4e003
SHA1 fa30a2a2e7a2d48ec26984ba8621889581be0324
SHA512 592cde903960eee7325dabe856992af186881c1ef78341315ee743de1b7a9f2b09ef140c90894f0a7996813def00cabe4a8e81563397712120d773cd5781ead6
TLSH
T151C08C7A608E8F15C604A23067A8246744A2C0C381CE14A6C6883123FC864D72CADAAC
MD5 SHA1 SHA512 TLSH

Submit Download

tokens.css

Path C:\Users\Admin\AppData\Local\Overwolf\temp\88fc0ab61ff144638a81de6523d64ade\dist\main\css\tokens.css
Size 13KB
SHA256 2ddc66ca57430507f71fc37aa5b961aa1758d0d8f8094320e60c75054f0c22e0
MD5 e845684f8380b5c024e598faeb29d1a5
SHA1 13345e64cb635f4cdeb785c7950f5a2041aa11e0
SHA512 efa789ef69b179e5f765df62a575b6009e166d7ae3eeada1374454c13cbc55eccd684d84fbf23895bb637045f10633bb70af3aadc56374eced0afbdbe87fd283
SSDEEP 192:f25HUAqzvP0AgbdfC7OVvCQf+F+r7QdaodaqGFDuC:u2gAgbdf3VvCQf6+rGhGFDuC
TLSH
T17C52A081F910E0BA793F967F33DBC9057AAAB502A942CF497F8244055C9C3FF88D2655
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

support_taskbar_icon.png

Path C:\Users\Admin\AppData\Local\Overwolf\temp\88fc0ab61ff144638a81de6523d64ade\support_taskbar_icon.png
Size 3KB
SHA256 262fa6633368873a4f9596b37a9f861c3bf5a522e4eb2f768a268428ca5d6ef9
MD5 86a222fd6321f96f143999203c0fbf06
SHA1 1778b7cc6e16b4ab7d6523fbcc0b17aa6972e182
SHA512 ed4fb14893d6eb0f10c745f64374594b6530416a5c8475135a0d533e80149ee7b22fa43bc8fbce92b57d56b422610a9c49ec43347577e026326788ce20ef6a46
TLSH
T17D612B2F2202ACE6F03B43F0D9D17BD6CB044A1ADAF7DD791064393BD89AC805B14489
MD5 SHA1 SHA512 TLSH

Submit Download

IconMouseOver.png

Path C:\Users\Admin\AppData\Local\Overwolf\temp\8d9b36eee6254eda82ce6aa30b2af8e8\IconMouseOver.png
Size 5KB
SHA256 0c2dd3623ed7652d5db956004e7663a5b5329c17055650d241c068462a8435f9
MD5 5d0d91d41a82040c4826fd57ae5ce791
SHA1 fde2dfaf8a606c5cea11cae74cb5d87af3d99f7e
SHA512 9bda1534ea958a909b85fc2eb290dd82bfe775f81099a222661e53724c570f8dcbcccc2ad334d6af7d0fab7915b328d02539f722960f4ccea611235b0fe51f92
SSDEEP 96:C3mVDMCCubH7DDap7yWKHTIJqGj7OYvGaoZP3MT28L3aOuCHOHK0qVt8:emV4PubbiNyWKHT+qml+aOeaFCO4W
TLSH
T125B17D7C43470D24D25611FD59BE9DECC4EBD428F24D0A1DDDE8CB907C46CD68A82C06
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

launcher_icon2.ico

Path C:\Users\Admin\AppData\Local\Overwolf\temp\93ce5c6c-ca6f-4434-bffa-b35219dfd7fc\launcher_icon2.ico
Size 3KB
SHA256 b2289c0afc3644e53b117877fde66b66192c025adbca614d4c37ea557feb1d68
MD5 cb40470c55476c8882871a63df6393e8
SHA1 4129db65881022ec877d1f2993fb7e763afb60aa
SHA512 eec21c3f84aa5b3f9faf11414a87beb209e84f59c08042475ec6989487127e294bde3b1afde35010446e271f7eeab0baead4c5db3e7db53a9dae5f53af84f5f5
TLSH
T116716DE543EB9003C232A177D25EB0F5DC5A6D6F9472A015FD49E244877069BC02EC67
MD5 SHA1 SHA512 TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Overwolf\temp\93ce5c6c-ca6f-4434-bffa-b35219dfd7fc\manifest.json
Size 20KB
SHA256 7bdd296628c21ee131058a899c1d699aede7b08d5ae6ea856c6ee49ee12ee0c7
MD5 e05147d19d99450e4254366120ce0d73
SHA1 924aa8ff98a1716b07399f802f14130bacb4fb50
SHA512 31fb00d30bac99c0dde4024d33c0c707592fd9a3a3babe0c25676266b1097a6f2f03ce73558738b351293b2eb924b1f7382e980258e0f41e8fc1d1ea9f40e57d
SSDEEP 192:RTWvn9FNF8F0F/FuF5FL7VmI7l/rGpGof+tif4j:+n7LksNWf9lsfY
TLSH
T18DA24819C1741CB63131A42A4DFE61856A39804B4F1A3E3CBB8C904D5F5EB6E70BB7E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

IconMouseOver.png

Path C:\Users\Admin\AppData\Local\Overwolf\temp\9c0c2902be144cd0a62d8e2b16dd7713\icons\IconMouseOver.png
Size 3KB
SHA256 fbb1a772cbcd04d6f877684936fdcc7b09b18a9ffdf6dc359cdbae0edf9ceb41
MD5 0337ca45d398210b571462e0bf2d798d
SHA1 1220fcfdde1c126ca80865967cb04a17fe13ebc6
SHA512 1996a0f83574f0bcd97f24a7f2dc7e557c3cebb29ea7d843aa6b5c1a2beb1b21720222491a3c3c83d4bc38fbe638ea5c09fc716b7acde2706570ef5a9f27173d
TLSH
T1B3813B4432155B0842BB5CB8C8B4525B9BBDC31AC9B159C5CE94303C98738439F876DE
MD5 SHA1 SHA512 TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Overwolf\temp\9c0c2902be144cd0a62d8e2b16dd7713\locales\en\messages.json
Size 6KB
SHA256 4ae01441e22db55ef4faebf01c5b40375f1271e1182b1825fd0a85e7a363da4f
MD5 7cf39268dbf4ee4c1791f869cac4f497
SHA1 edce1937e7d7cb3951fb3f0d5e8284be37eac78d
SHA512 a954dae686a04313d6d54384b9564280adf4f11d5eb478565b83c16fc1b670eac26cc209fa4707d8869834adb6986f2e8c56ace3b8ef9b5ef5246f07cea4bd2d
SSDEEP 192:XrUrk1vOuWZvusJdo29aUC75lGuZ9NV9syPgVaiEaY9bP1pegFiR:7u2OuWZPf9aUC75lXRiy9b5m
TLSH
T1D0D1942C554509BB0CE281A238437A517B598D3F4740384E57FB061C266EE7B3AF7BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Overwolf\temp\9c0c2902be144cd0a62d8e2b16dd7713\locales\pt\messages.json
Size 6KB
SHA256 8e2e1125b80f174ea62a6aec3613679f5dc707e1b3d98c535ea954868b47a6ff
MD5 12e34a246c89348abe3344641bf7dbdf
SHA1 c294aa99773a8f3cbde7499b4b5eb9ea0ed2f54b
SHA512 5a37b0908943440b8384a2c3bc894ef17586bccb96b44027d5aad0d2afa4bbf1ab50dfd883d0c9c596ae1884e7b2c38617bbb5222c57c1ea4b8c3602c25b1b9c
SSDEEP 192:aAhjzpyFjr1BKdoW9aUC75QGuZ9NV9sNr93VazaPvOR/MZR7RTo6:3hZK1U9aUC75QUiyORqZ1
TLSH
T1D9E162280A8515B718F243A238073A4277459E3B4B407D0E57FB064D26EE9B779F7B2E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LatoLatin-Bold.woff2

Path C:\Users\Admin\AppData\Local\Overwolf\temp\9c0c2902be144cd0a62d8e2b16dd7713\login\assets\fonts\LatoLatin-Bold.woff2
Size 43KB
SHA256 276401632a998400be8a5895038f4f72d3760d3c3d6aaf3cf445d109cb9d1540
MD5 3ff66ada9b57d10c17e415222486ec21
SHA1 fc52f2accc3a8c132794cb7f873d052484c0bafc
SHA512 3c0a4d62acaf81c3299cfe5a48cf711055eb6fac1ffb785dddb9af4001c432c2854ba627f7944bf47107d8900d758e059445b091ae960f84e60336030e111fa0
SSDEEP 768:m7s1nq4OJ5yHz3lLtCdPGBgIFyFdyQNk0WP+D7RjafbBXYZNKJ:YsU4OJy3lBCdPggIEyQ20WWl2bt2sJ
TLSH
T1A513E032BA3DD8D1F5B33230122A65758C441F21CC419DAC779A2D5EA9E605A87D85EC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LatoLatin-Light.woff2

Path C:\Users\Admin\AppData\Local\Overwolf\temp\9c0c2902be144cd0a62d8e2b16dd7713\login\assets\fonts\LatoLatin-Light.woff2
Size 42KB
SHA256 e7f20acf99d6377102667d2c890598d84aa2a16df257ac87d324f0abdf467c2b
MD5 c425d3f33c7cfa180fd670619665f6fe
SHA1 050177171b38e7b08da2d707c60187f0cf2da63b
SHA512 b78c49efe6399e2d1077f50db88e3538f10c993109c199ddb2918728d2484ccfc58bf161f9e0fa90cd77f379d93ce0e1b349e6a755690d67d9fab17bf995c4fe
SSDEEP 768:Z4xZJSguQGpSO85ENNI2eepfRzRRgV3C+cdpt+X4pQHYci0r:qZJSIFO854I2eerRGyptWHj
TLSH
T138130102322A5202D686D4FE6A121D28CED8BB39F909DDC463BD72D117DBB118BCDE1C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LatoLatin-Medium.woff2

Path C:\Users\Admin\AppData\Local\Overwolf\temp\9c0c2902be144cd0a62d8e2b16dd7713\login\assets\fonts\LatoLatin-Medium.woff2
Size 42KB
SHA256 60593ef08991381d651875bc78e259b2b66938e1b66175a445a7fefdb46e3d78
MD5 ba687a5dc3dbbc777acb2eb404870278
SHA1 944b38f9c7883df6d16eda00d5deb81813465ffb
SHA512 c0b206c9988dd5b52d6b8c9d4767bfa11f3cd49f20565135ea7227144204c947b3c5f09b50dfae5e447a32b0d694770f8bd7419bfba47bc2ba5e85df3220c161
SSDEEP 768:1dWqd3t8+5h3KyVPNi0wZsW+9/0Lhkqj6srdrjiuFEVE4OnkCd0VXmRnSXxomZFa:fdd8+5h3XSrZN+ZQhkqlprjivCaCdki9
TLSH
T11A13F1D70F84D92FFB4238B862FA728CE3799964142FF4E9A6AC6645B35781907C4D01
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LatoLatin-Regular.woff2

Path C:\Users\Admin\AppData\Local\Overwolf\temp\9c0c2902be144cd0a62d8e2b16dd7713\login\assets\fonts\LatoLatin-Regular.woff2
Size 42KB
SHA256 ddd4ef7f97f4361b60841d59753218a57134b0f99f5b46a9612234f1c2733ab0
MD5 3cd36578026d6c12eddf9a5c671a251d
SHA1 5702cb2005766b9cfc3b2affd73d1bfe3f4f6c1e
SHA512 e4b67cb8e9e25418b36dd7289d746ad9e3bec5a73b67e67c07b002e96beceb77a98af9754a5a75212c661d16fddf5dbd5128b69b8cbca26b226b3b3c8f87e0a3
SSDEEP 768:fZUsgJ/49eItWMcSIhZnQPO9Ge6XMdOZFKqZTANWEJAh7nSf5zyXxZI+RTLb:fZ+t49eItWtSitQPqI/dZTAIqKnqyBjt
TLSH
T19213020B5838F988C153F93672AF21E580D37D6107A4ABF24FEBB48944E6E4C69C7749
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sprite.svg

Path C:\Users\Admin\AppData\Local\Overwolf\temp\9c0c2902be144cd0a62d8e2b16dd7713\login\assets\images\sprite.svg
Size 7KB
SHA256 e34f6a0fe097d5a56240b9fdd1edfd7569ada47c5c60165d0d283cfa6d357ae5
MD5 b67e9a163572b944ebc3c0ddc7d6d4cc
SHA1 e8531833b19c37debd945311046761641fd8f7da
SHA512 78d3509d74e558ce815b5da6c025899c35266d6516b4e90b07ba2f315d758e697515a522ff6eb2de2a0015b78ff9a11a6ff385ed83d163300824c2de1253e7df
SSDEEP 96:SuLGbseg3IbXLxLlO48Sx72PcLQbrKe/QzWBOlkGLpmYexau/Git/rl9KSpqvIze:5LDeVb5c08brK0OlZETOA/CSHfwiQ
TLSH
T12EF1B7FA82E867D041035F66A126A07A397F15FB3F81C344A1A98B947F6A185CDDACC4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

colors.scss

Path C:\Users\Admin\AppData\Local\Overwolf\temp\9c0c2902be144cd0a62d8e2b16dd7713\login\assets\scss\colors.scss
Size 909B
SHA256 2201ddcec47c09a58e75458688deb2ee30d262419cb3d8ebcf71e7065e576f45
MD5 cea0f17cb78c3a6cc4428297cf65afa2
SHA1 7772099781e623e23575dc56c170a6c2a0c8c3c1
SHA512 02eb5ed4bc629b5d7d2a542418ce93295ae4ac49e5917592c058ae398d39933a333e46b6042a4600aaffdc10bfda352abcc5b6ef2d82529be0fa76df58b475ed
TLSH
T156110E9FF1B58D0B2697513C48A8F42E47C8084A76BB0B5EF013E30D354018394340DB
MD5 SHA1 SHA512 TLSH

Submit Download

error-view.scss

Path C:\Users\Admin\AppData\Local\Overwolf\temp\9c0c2902be144cd0a62d8e2b16dd7713\login\assets\scss\views\error-view.scss
Size 1KB
SHA256 82a2f7b31b898cbdf7966da3831468243230fc07d1068ed7618dd55149d846b9
MD5 e4ba6b2fba690b41226138943b92d5c3
SHA1 73b8e515f5e01ddd2392d57a989b0c176abd514f
SHA512 cf396be2f0a06448e10a7dc9792748a0e0291dbf7a513c3500585e517e2f9804cdeed079b0ad8b518ceaf02191e501d3fda4a96c182265ec6da0f54d1f68ce94
TLSH
T1BA11BD99CF5312017407E4B83BA557146321D443960FCE393EDD7249CFC51A559AB3D8
MD5 SHA1 SHA512 TLSH

Submit Download

notification.js.LICENSE.txt

Path C:\Users\Admin\AppData\Local\Overwolf\temp\abd4002fae5843f59f4b311772f0b46a\dist\notification\notification.js.LICENSE.txt
Size 1KB
SHA256 fd576a5c1ff67e4e84cb1599b078a1aeae16f2dfd8e560d63f04fe0b1b19a443
MD5 019f93842be5d3989f8b7430bfac701e
SHA1 62c70112211ed87b7268f9a87a585ff8348e7e2d
SHA512 223d01d502c5494ac7262a1e7ea545b05f6be4d45e97c6569c51564ad9aa9c55ca595171876162774a803f81561f5f24d531f971f17704bec0d7003bfb46c503
TLSH
T1DD3156ED75515DA366905B723C3578CA619DB157680EEB582864F1C0C73F10E95FF060
MD5 SHA1 SHA512 TLSH

Submit Download

icon.png

Path C:\Users\Admin\AppData\Local\Overwolf\temp\f24db958b8ff4ea78dffaf31b944b1a0\icon.png
Size 3KB
SHA256 eb2f18e8da95f08f32713ed002538a95e902a3c21edb01eeead5eab17b584b0c
MD5 737e181b9443ed8201b6c24c71a211c1
SHA1 8c210bf2296bff76c6b01d7c2f89270efeec597d
SHA512 fd12b0b547b0764f4565e9329ed0b11222e6c53b4e8e0ce02d3dae8f7ba6f3b49316b8cbb772ae36950f069861d829341e9f275981afb7bc417519c3ed0f5249
TLSH
T1E3814BE52115AC062CF6C05AA5FE0321B7DBBE8BD4660B02E0B1B8BD012AC5FD1D8635
MD5 SHA1 SHA512 TLSH

Submit Download

verified_contents.json

Path C:\Users\Admin\AppData\Local\Overwolf\temp\f80ef418127141f2b0affc9ae07b9a3c\_metadata\verified_contents.json
Size 3KB
SHA256 628d9190ce95f75b60346149a060eea0f85cf067f07ae25ac591c33c9f70faa2
MD5 536f564aeac2631a09709f41bd8bad63
SHA1 75f675d121ac381378adca99b73f7a1404517c79
SHA512 2d8c028245f7d8367339f5a85ab96ce528c6475a11b7a7337026f02485ed123d9d3262dd7236c7c5e6ab11384f982a8e6a3fe09bf22eec5a9b29b6e15e28554a
TLSH
T1C261C698E0014DC7286EA5AF4C93649008268B6B7D91704837B2B24C1F2D72EF6BB47F
MD5 SHA1 SHA512 TLSH

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Overwolf\temp\f80ef418127141f2b0affc9ae07b9a3c\files\index\index.js
Size 133KB
SHA256 3b338c296042ead789c7e0be77623e984cfa1190e8f3b9657bc5d58fdc3ba1d8
MD5 3f1f99f1685b2c1aee68cbb394e67962
SHA1 be2a0bc4880e0b06f5937e091d2b4977fca7c2bf
SHA512 46a93ec5e11cfb510216e78e8c3619efd00724b9ad21e351ea8c75a6fc3fb5c4d2bf5f12390b76414be7cc24f53e67fb2c93461942c588093399cd9cb321488a
SSDEEP 1536:6VaQgkV29lIlv7hCA2GGDWjw0QDmktFx2/aggcAykKWlqZiBPbSaogDZgDD:99+d36bK8m/
TLSH
T187D3FB893274A4B507E711F1842F0007E3399474691890A4F779E8E6ED6A78E72BFFB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

notification.js

Path C:\Users\Admin\AppData\Local\Overwolf\temp\f80ef418127141f2b0affc9ae07b9a3c\files\notification\notification.js
Size 67KB
SHA256 b8a5684aa9e92b89a9a994edcac828f38a86fd7b80214ad2f9358a54c67d7c94
MD5 5d7081ed55ed731afa660b43527a3479
SHA1 d7e983f3e129b1ec176ad701c35a32590a4e0e7a
SHA512 97cd77d497ff2b8b52227cde9662cc397ee8604f18781aa76650afa3d6b005843392b0393a593ec217c566241a46581a428f243adcd8f027c98a3f02060f7b38
SSDEEP 768:q5/qijYFWRdAugu0Qb3EM0EYs/gFu3LHP6arf6a13Ph0rAMS6GIkpsx/MrpYqDMr:q285x0QLh0EYs/IuboA6JMr+chJW5
TLSH
T14A63E89AB2BDB07243D374A8143F250AB37F566DA42D801CB252E4E93C7D90A5633F79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Overwolf\temp\f80ef418127141f2b0affc9ae07b9a3c\manifest.json
Size 2KB
SHA256 f0af6e749d3f55929c4bad680f4bf6c5a13441b30ac6480a167a302ec2ad013c
MD5 ddb15750237f94d5bd3cd87714affac1
SHA1 d9b0820d18a2f3221b76df8a17020ac0708dd194
SHA512 e63d04f41344a2f822fb070262f12c6a92d956c090aa751818e4ff607eaf286df2b5c4eae144659976bb5d6667f4aa683ec9931f0e6f24347866e520fb222f1f
TLSH
T13E41781AC4055DBB6D7AA36699BA5391FB26077F20514C1F3AFC144C0F32622708AFA5
MD5 SHA1 SHA512 TLSH

Submit Download

DotNetZip-414htzi2.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\DotNetZip-414htzi2.tmp
Size 375B
SHA256 d0e1fcf5f70d6308fcdefdfe53eb6baa7e9d6a538660e13406c627613cf79ca3
MD5 a7faf66dc346edea4255e52640928451
SHA1 a771c940dc4e9df30ead0b1c0af3c79ceefc9c87
SHA512 20ef148921d89e67034de377fc27cf86f8044317a30049a4ab528afcdb4ac840016d66f14a0e5ce82e7bd43ae20689e359cc3d35e4d4c68f6d861c2ff816a9f1
TLSH
T17AE02077E5102D171DB043654C7F1202DB4B5B6394E55D05F67D011C4B736871046F1D
MD5 SHA1 SHA512 TLSH

Submit Download

DotNetZip-e42bytyi.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\DotNetZip-e42bytyi.tmp
Size 594B
SHA256 42ec70c06c081173419da10e547407429a5cac61e26b8266351f89999bdcf27c
MD5 dda64ec4bc16d730783fe15fdddbfa0c
SHA1 5f0cd0d832758ca8c43342268fbccddf95c4a7a2
SHA512 7a01143d76bc098c65b42b83fc0e59674c38d431652a519043ded1c2281fc57a8936fbb2153507c525c409536114ac1115f1696de573a06e32461cb3536a3f01
TLSH
T17EF02437878511B903F086A43D290B5B7A9B0F0FCBBAAC5330B7805A27459B6A50DB0A
MD5 SHA1 SHA512 TLSH

Submit Download

DotNetZip-h50vye2k.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\DotNetZip-h50vye2k.tmp
Size 11KB
SHA256 4a0e23029b497644e8b8d248e2308955aa0cc5de5424528915edaf67848b0dd1
MD5 3ecc69dfd594eae95a4a954c686696d1
SHA1 fc3c0aba4440c0c3d4377bbd274828a2b92c4f21
SHA512 5da4cad3c1dfdfed343a132680459660dfee57222daaca7aa66c1423a6e4f938aea4533427cd8625cd78acb445dc25d3cc0bff2e4fa3268def81c17f06c58e78
SSDEEP 192:7NavAwWFgyaeaiirD737H8lWQJAE74U7vXhNWsC2dp/y2wnOgHnrD737H8bxv3NW:7NavAwWF6eaiirD737clWQJAE74U7vhm
TLSH
T16B320097B64C42CB62C8CBAAAA34D6D10A6CF038D0489CFDB7DD786CC8E4A137075716
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DotNetZip-lnhdxb1c.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\DotNetZip-lnhdxb1c.tmp
Size 227B
SHA256 3f08e5e02e376441ab63c37151967603954410027df403c337d8127a522b1cea
MD5 ca8d47f477301ad793f637971d6dd0d5
SHA1 60a308a7699ee5007cd7dafaa834124d7b9ee7bb
SHA512 d2eaded3d6557941e6328a88430a714613530c80891fc7ccf75192a11ef4e056d1c67e0eee31c55f9aa9c6e3dac9a7ebf7259d8e84b1b6e95cd7a168669a1370
TLSH
T131D0A963B39CB98722D03F485038A6C0285CC438628D18A93C28162489A40A22476BA4
MD5 SHA1 SHA512 TLSH

Submit Download

DotNetZip-nh2mkdmx.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\DotNetZip-nh2mkdmx.tmp
Size 6KB
SHA256 ab5cbef7fe7b3a3787c155a444c44e049ac5e2f06103af1bd4b25ba3f91c9b6c
MD5 056408886764e31a2c6aeff10f110660
SHA1 148c7b9f27beffca86057529f86a08b59f3e3c20
SHA512 d20d5f3fef06bb20a6c9c7f0a8ad9da0c894f0a64767d52ef0ebf285d216046cb92ac2adebbf21894ce8316331049a414a74b119ee432222b6ed7280d9e72a34
SSDEEP 96:8p98lUxNZosKyAqXEYImzXzP3NG7V1f9j:8H8BqU4zXYV1fR
TLSH
T1DED11AC3E0199E99647608A173B1CE74F23CC76F12B140A7B27B309F6F71AB956CA512
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DotNetZip-nuujgjem.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\DotNetZip-nuujgjem.tmp
Size 292B
SHA256 f56c2504a1c2384aa09aef8f7fc18c4630d1fb6d809f7031c4982be4596eed32
MD5 f19465e555a36b6b11263b5c86550468
SHA1 11a0e1b4d1b05d0dda08028c87a558d6ca791150
SHA512 7d4a9407676dedb4a0d97b60267d1d1d99886f3a9a77c50e5bc5749dd41f2de46639ed567916b664de31ac42848f293e73e14bcf224b67d51101fae9f1ef3e42
TLSH
T1CBE09207314F9686B45210C1E1B0DAE2DD1AE43C40698CFEFEFFBE06030B98E12C6561
MD5 SHA1 SHA512 TLSH

Submit Download

DotNetZip-pahdruyb.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\DotNetZip-pahdruyb.tmp
Size 3KB
SHA256 5cb56032748c72ab590ca5e41bb428f5c29f2aff1c0057b6c5f1d78e89ba2380
MD5 7bd38a1cc8515764363e62cd569bd18d
SHA1 0457b71593443bff8d378436adba493228e8466f
SHA512 76fd376710acf41b8361821a3d2174324644c2fdda60cacf362f0b8f9c2c9228ae73e5e690c86fa1ea133b9482a5fc5613b1af105730fc6d6937c243688993f8
TLSH
T1FC813757730CA0EB42E8ABCAA438EFCE151DE0BC82BD14FEF80BE164C998520607D755
MD5 SHA1 SHA512 TLSH

Submit Download

DotNetZip-tr24xqlw.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\DotNetZip-tr24xqlw.tmp
Size 210B
SHA256 fe6671e8713701f6b9b6d7de3903a53fbfa3adab5d46d58a764d61d70cf4a216
MD5 91160a31b76fcbd80add1d6fb01d11e6
SHA1 7f0baff7958823de35c94aea7f2487d6bc09b87c
SHA512 d646d29f2c4f4a50a7d2da08fcf440cc8ceff1821a0dadff029677daeaa35b65db9ebc14f1045dd4d84f3831e3f93eaae6c43b15f7b5ed0e7abff0e861c120a7
TLSH
T117D01216490840118629E5752018A00C5494A27B74D9F5E1D5EFC55E1286DD8FCE2BBA
MD5 SHA1 SHA512 TLSH

Submit Download

DotNetZip-axmoli2l.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\files\DotNetZip-axmoli2l.tmp
Size 4KB
SHA256 b6ad3801b11bdc27507793c8e36b435b03f663937265d5e299ae7e9f1a101420
MD5 f437fb885a36c5b8d0c81f0078474be8
SHA1 ab2a831be95debb69876dc769bb9a72e298a625e
SHA512 f67613197f3b59b9ea59654f9b6f8b6226a449c1d1b63d3d132ef3f752e016d522a65ea073839a2a9147050fee59cca98fe7cd1c2959b05aa008ce2b121b5702
SSDEEP 96:YmUelxdgCorVTVnYpM5gVMSVi+QS3nRdO+bkz3ug0LqVU:JlxdgCorVTVnYW5gVM0i+X3O+bkz3V0t
TLSH
T1E9810DA90CBB14654079D6B89B033535EA1AD66B2910C588BBFC82106FB77D0D26FFDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DotNetZip-cgch53d0.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\files\DotNetZip-cgch53d0.tmp
Size 1KB
SHA256 a60e04cbc82c0f15d26a6f3fd046656997075c62f885025a5bbb87d0f4995be1
MD5 43532b4c0f2552b9cb79e3a2ec6fda60
SHA1 d94b4cde4117b9d912180f26d839a729c096a2a1
SHA512 e28f6af232bd2ad4a0acf65e837dcab0f990ddcf57f4b06c9a9141ff0fb67513dd362eb206927e75be098da2ad5aaecfecdf4b086e13892051030a7c7d2ff38e
TLSH
T19911245E7C8AD99984105AD0C4B3F118821DE228E3A1CCA5B2FD54BB3B8CBDC5C5AAC4
MD5 SHA1 SHA512 TLSH

Submit Download

DotNetZip-d5fb5d2u.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\files\DotNetZip-d5fb5d2u.tmp
Size 2KB
SHA256 0abb7973b2cd23038718b3aa5f18da71ec020198732f4165d91bcda0cad2409b
MD5 a3717af14c62969853bad241985ae223
SHA1 af92f744e9ee6e595baa78efa2bbbb2f5f080021
SHA512 86bd38fced8b5adf1585006e31f72ae947a277cdc21f5a7dc9e8577f714c3b92180cff41d6f2444cf337115bf99daa98ffa2c753e0a7d203e559d26c4d2dde0b
TLSH
T1F2417E50248510BAA9728277CF624106E3199E3BD01EE6713ABD811F2FBD315D1E6FBC
MD5 SHA1 SHA512 TLSH

Submit Download

DotNetZip-evcsvsyz.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\files\DotNetZip-evcsvsyz.tmp
Size 1KB
SHA256 f0b88920e09a1317181f18d7edd07eab3665118a8b062517d4ccc0f04a16753d
MD5 4f30b99c9b2419bf117b40148270494d
SHA1 7eb3217b7e6f24c37fa57ccb7cc5ef3ae9fe3d5c
SHA512 905c9122d84f12f658d8ae0c0de19b2fc11b9cb7921f0c157b210e865f2dd535ebc7965377ec0262dfe41702fa461873085961ee37dfb5caee4cdaa24d84ad47
TLSH
T14931CDAB0C4E611404B6F775FF82600BF705A46371189051BEEC56580FB3D29A3DCEAC
MD5 SHA1 SHA512 TLSH

Submit Download

DotNetZip-hfq5p34m.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\files\DotNetZip-hfq5p34m.tmp
Size 988B
SHA256 3a390d905e957b274917729425ab67551128c451ef97b8485ba7600f731869c3
MD5 dd5adf453f2ead58fe5b408997cf76e2
SHA1 470de9ebcad98738b05ea13d009acd035ac93867
SHA512 6fc09e81a23ac45e6226f8cee6c7de8e0610127cff17aadc276dc81aaf3838c6aceb89c639b846afa152f155572cdd5cb7a6d0cebf7987733a123d72286f2b3c
TLSH
T1E7114999284B20A9913293B48F63590BE3020E23D011F5547DAEE25A6FB5311D5A5FBC
MD5 SHA1 SHA512 TLSH

Submit Download

DotNetZip-syndvmn1.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\files\DotNetZip-syndvmn1.tmp
Size 1KB
SHA256 bb3b9a607a6cf4e0ff6fcb9602b5e37b7b23d2d7b57144d6b67e44eb845aae5f
MD5 9eb6ca6a3ac4708a50b4f3e67a8af6cf
SHA1 ceabd538eac5fa12ca2f3af614dc5c1623cf4ffd
SHA512 c6a0aa81a91fc1dd9efa5167bc10051bade19049f357b0689270d70094374ff7f4490515385162c1d6ee7c98cbf5a2cfd27b615a3f760bd67458963e88055c90
TLSH
T1893149CD288B266986359BBCCF5A421AF7120C33E006E550F8DD961D6FB2250D1E5FED
MD5 SHA1 SHA512 TLSH

Submit Download

DotNetZip-zshhnyio.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\files\DotNetZip-zshhnyio.tmp
Size 1KB
SHA256 0e8e267529f758e5fc45a7349f0203ce308fb68dfabb8737f044463e3fc70104
MD5 97945f3e87a1dd912f7e56638f602bc2
SHA1 8f5f57d6f609f2ba2f1d639ab4ea7136c5286b9d
SHA512 32e9c44d466400ff047ebecf161c7d0067bba22c897ad8b5e1aeeac971948afa27803f532b1321ce31fcae0597f554d289711fc54b16261c4cb3aad0b94a3291
TLSH
T18C31388D2C4F245A8536A379CF52810AF7021E239016E59078DD85157FB1355D1E5FAC
MD5 SHA1 SHA512 TLSH

Submit Download

DotNetZip-3mmdel5c.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\files\index\DotNetZip-3mmdel5c.tmp
Size 127KB
SHA256 092db1777077ba7fd14478de1be54591017b31ccc37c55ba72a1f9088328071d
MD5 53d84c6fb6569643b9d6e3fdb03befc9
SHA1 f4b2bb669151100611db431da1db058b2f1d3307
SHA512 faa63c8c78f8a4eb7afc7f5e80ca23ff8001334a06eeb4d5c7e87f1ebaf5ec96c0b007bbc449c944e45349d5097ab770d8dc329df44d9fd35a4278e967edd2ef
SSDEEP 1536:6xaQgkK29QIlv7hIA2GSDWjw0XXDmktNim/aggcAykKWlqZiBPbSZU:O9NdxbQz
TLSH
T161D3FB893274E4B507E711F1842F010BE3399474691840A4B779E8E6ED6A78E72BFFB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DotNetZip-5s1xt14z.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\files\notification\DotNetZip-5s1xt14z.tmp
Size 6KB
SHA256 b3201505950b92474ce0627d4dd7aef19a1f6c2726c72025cf5ffef852598224
MD5 a7f38f11ce6c9fdf4adaacc27051555b
SHA1 87330ca72a7d108ed6222ea788bf8363b1b0fe42
SHA512 2d8e4ede4088b7e8c3491aedcc98ba6c3f33a0b17d9214f02cdba1952b6cba78aa6d35887e5092aa78196312be47501f0d69b82c165cca6d241f10dd57314cd1
SSDEEP 96:+ENWg1AuDsmAt7dS7CnmQVZ4+ZK72uFougg/t/WF1hANespst58F:n1zArpnmveK72CorglK1hANespst5o
TLSH
T191D10087860122457B73837AEB93C210FB324467D713A0293BDE52998FB5205AA17FDB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DotNetZip-jarzavkw.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\files\notification\DotNetZip-jarzavkw.tmp
Size 1KB
SHA256 26390ed2b02993ec93a12d30ab777e59d2781784fb9373ca0b0108be4268b759
MD5 a63639f88d64ee5d21c5f9e6b40807d8
SHA1 7e09fec504cfe7a249d8e0cd28b5553ac7a72873
SHA512 05021be4f89aa06e247972321bed084ccf0e90eb00548158465f985fb6ee3d75aabccc9c401742916efc948f98a7d0bdf857161cdbf87b48764e510a7459a3eb
TLSH
T19B31059E44C15BA613B240A2D713F695FF438017C6275910B6FEA3972FF3E0A854F456
MD5 SHA1 SHA512 TLSH

Submit Download

DotNetZip-orpducck.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\files\notification\DotNetZip-orpducck.tmp
Size 67KB
SHA256 3a7d7323a78d41ca9c489340ddcc4f197a0532dee99d3528353432a4c88feb61
MD5 37908fa379103954bb2ac445fff576c7
SHA1 7d0c62ca535b7c357745b7865f734e3241546b67
SHA512 3a114a825af846adbb6da22c602cc46dd9e43c29c4e96fc655b620f5f45111e5e1a3a779493f5f2f8e5bf0c8a2cb9870ff95194283222f746decd643148e1d92
SSDEEP 768:qKMWqijYkGRdAugu0Qb3EM0EYs/gFu3LHP6arf6a13Ph0rAMS6GIkpsx/MrpYqD2:qB35x0QLh0EYs/IuboA6JMr+chJW5
TLSH
T16863E89AB2BDB07243D374A8143F250AB37F566DA42D801CB252E4E93C7D90A5633F79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

DotNetZip-jgc2bov4.tmp

Path C:\Users\Admin\AppData\Local\Overwolf\temp\ppagiehdogdjlomggmoejfamedbjggdggnjbilhe_diff\y20wmgqx.yij\files\utils\DotNetZip-jgc2bov4.tmp
Size 2KB
SHA256 d60268caf5d27a923f3f29a10ca7d572a42c2451dca3f562021cfe17d44a1542
MD5 1e7b5eb53d40f9339c0fd69caa1f6634
SHA1 b651c19b9c8526e73d55a3f5c93b95d0266946ce
SHA512 6404a5c064531bfc82bdb851ea70f64bbb188a6670cd7a8f1bb8c6011cc9e747445871a3ca259536fad9a23c43d92effbd425135ce828d4ffbc92feacd0ae409
TLSH
T1585144462C8A7019C5B3FB78DF11808AFF0A85BB16488604BDBE64543F772D063EDD98
MD5 SHA1 SHA512 TLSH

Submit Download

INetC.dll

Path C:\Users\Admin\AppData\Local\Temp\nsrFA5A.tmp\INetC.dll
Size 34KB
SHA256 0ecf8b76a413726d2a9c10213ad6e406211330e9e79cfde5024968eedc64a750
MD5 87050902acf23fa5aa6d6aa61703db97
SHA1 d5555e17151540095a8681cd892b79bce8246832
SHA512 d75d3fc84a61887ee63bad3e5e38f6df32446fd5c17bedce3edca785030b723b13134b09a9bbbbaca86d5ea07405b8c4afd524cc156a8c1d78f044a22dee9eab
SSDEEP 384:5v1j9e9dEs+rN+qFLAjNXT37vYnOrvFhSL+ZwcSyekzANZBJbIYiPWMirgAM+o/o:51AvEs3HBLzYn29vYhkYiPoEAMxkE1e
TLSH
T1E6F22A9247E51A4AEBB29F3075B4EB3649BBBC525C61C8CF5237528D0672342EA34337
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsrFA5A.tmp\System.dll
Size 21KB
SHA256 4dbc79d2b1c7987cc64bb5d014db81bb5108bdd6d8bf3a5f820fac1ded62be33
MD5 51bd16a2ea23ae1e7a92cedc6785c82e
SHA1 a9fbaeb9a695b9f2ba8a3ed8f0d95d2bf6a3d36c
SHA512 66ffc18b2daf6c4cba01aef0e4af2f006a51aa218eab0f21dc66e47eea0389d2b1748ef0e30d2ec9f0123fd7f38ed3aee964dd6bde5779aaee19ebf55369af79
SSDEEP 384:ASUmlw9T7DmnI5+N273FPlIYiPWfPJsaAM+o/8E9VF0NySk/bF:ASYTrINE3cYiPmvAMxkEt/Z
TLSH
T197A28DA246509CB1EC468D7074C8AB3B5B3866476AD0CAD3A3A7C0419F543C77FBC2B6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

UserInfo.dll

Path C:\Users\Admin\AppData\Local\Temp\nsrFA5A.tmp\UserInfo.dll
Size 14KB
SHA256 a27dc3069793535cb64123c27dca8748983d133c8fa5aaddee8cdbc83f16986d
MD5 1dd4ca0f4a94155f8d46ec95a20ada4a
SHA1 5869f0d89e5422c5c4ad411e0a6a8d5b2321ff81
SHA512 f4914edc0357af44ed2855d5807c99c8168b305e6b7904dc865771ad0ee90756038612fe69c67b459c468396d1d39875395b1c8ec69e6da559fb92859204763e
SSDEEP 192:9xvcecVMIYiYF8tO7zhjjWvp9A5K+o/y2sE9jBF0Ny+aiQE7:kruIYiPWhjjWvHAM+o/8E9VF0Nyp6
TLSH
T1C2624BB386A45C15DC0B8E7135C8997B9EB0FB922AD081D7621BC1814B84787BFED2B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uac.dll

Path C:\Users\Admin\AppData\Local\Temp\nsrFA5A.tmp\uac.dll
Size 24KB
SHA256 10a0e8cf46038ab3b2c3cf5dce407b9a043a631cbde9a5c8bcf0a54b2566c010
MD5 861f7e800bb28f68927e65719869409c
SHA1 a12bfcd2b9950e758ead281a9afbf1895bf10539
SHA512 f2bf24a0da69bbe4b4a0f0b1bfc5af175a66b8bcc4f5cc379ed0b89166fa9ffe1e16206b41fca7260ac7f8b86f8695b76f016bb371d7642aa71e61e29a3976eb
SSDEEP 384:5GVY6ClGoWxXH75T1WVl83lLsFIYiPWc+6AM+o/8E9VF0NyOk:tBWxXH9TYqlAyYiPjAMxkEH
TLSH
T14BB27DE682980E6AEA235D3175D563335FF8B6502DE0C1DF161786448B607D3BB3C27A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx83C4.tmp\nsExec.dll
Size 6KB
SHA256 8459feb67b7eb0caaaed607e0f36c8d4979abf1bad87e7f1c7c2b97c73174d6d
MD5 143e45d5929ba564ba0c3a0773be76e6
SHA1 c7e108ad681dd19afc646a43f7ce757388653f57
SHA512 1114403b9af202396ffe32610e1160313ff22c488f87b4a8f771d14fda02a954af7beacad5655143dafdf0af9a76b2a0d5c121ef57819e0567c367578482f003
SSDEEP 96:T7fhZwXd8KgEbAa9PweF1WxD8ZLMJGgmkN238:0N8KgWAuLWxD8ZAGgmkN
TLSH
T1F8D1D6BA76C20DF3D54D96702F36381703BDD4A61B610261CBD35AEA1EA2AD2FE24741
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsisunz.dll

Path C:\Users\Admin\AppData\Local\Temp\nsx83C4.tmp\nsisunz.dll
Size 94KB
SHA256 be461d66c6f0dd1298b6b381c6abb492a264b3b94b4ab307c8714537113fb59f
MD5 b6b206157dc73d830e8383e53d6dc901
SHA1 de73fa2a07e809b400f0970621f1d5ec576e3335
SHA512 bdde2d15e01c733f51b6ae4c32ee7e02a00ebb50e14db096652ce030210b38c7e2192e3fbe847f5f3f86549537e8c3e1ad4c572bcd9f980588d81fe250921f56
SSDEEP 1536:JPmnCuZs9reYWvAHvXhxQdJeY3tMCo9NTJwd6aimHr5jr5T51NT/K3h4m:JPmnCuZs9KoPX6rA9Nl2Rrt51h/1m
TLSH
T17D939D107A90C177C4A7947E1055D7314B7BB6216BB99DC7BB984ABB4F203C0AB3A34E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

e5c2de0.msi

Path C:\Windows\Installer\e5c2de0.msi
Size 208KB
SHA256 fe5af8f2efc9bbdd2c23f22f2d3daf480a4047acf3b1edc6ecda81147c1ec14f
MD5 23626831f9a05572c6ebd133e5ffc4b0
SHA1 ad044cdf938a5532aa270c6bc687db95d803fe10
SHA512 1b45ea55e7278ec61f0689b70794f371d56eb2787c22106ebec38d17f1670441a853849460249d08380053bc8b2fae0285845b47ad62670029639d5de5ace10c
SSDEEP 3072:o9laht5Xel69YGnfxC2WB/bEPcefrKROjibDPxriTA:+laZeKFxCnBheIdlu
TLSH
T1A3249E12B5808033DAFE1A311578DB615F3D7E608F54899B6364B6AC1E717C08F3AAB7
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hyph-bn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-bn.hyb
Size 703B
SHA256 c2784e33158a807135850f7125a7eaabe472b3cfc7afb82c74f02da69ea250fe
MD5 8961fdd3db036dd43002659a4e4a7365
SHA1 7b2fa321d50d5417e6c8d48145e86d15b7ff8321
SHA512 531ecec11d296a1ab3faeb2c7ac619da9d80c1054a2ccee8a5a0cd996346fea2a2fee159ac5a8d79b46a764a2aa8e542d6a79d86b3d7dda461e41b19c9bebe92
TLSH
T13001E1B0B7014F4BC635EDB0117A4A6D9664C43553BE051D84B1F9634F19714E70A8A8
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-mr.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-mr.hyb
Size 687B
SHA256 f4df224d459fd111698dd5a13613c5bbf0ed11f04278d60230d028010eac0c42
MD5 0807cf29fc4c5d7d87c1689eb2e0baaa
SHA1 d0914fb069469d47a36d339ca70164253fccf022
SHA512 5324fd47c94f5804bfa1aa6df952949915896a3fc77dccaed0eeffeafe995ce087faef035aecea6b4c864a16ad32de00055f55260af974f2c41afff14dce00f3
TLSH
T14801E178BE13888BC6784DB1054115AA0320F90EF296021B4262B13ACB18FD61C95484
MD5 SHA1 SHA512 TLSH

Submit Download

hyph-nn.hyb

Path C:\Windows\SystemTemp\chrome_Unpacker_BeginUnzipping1224_537079581\hyph-nn.hyb
Size 141KB
SHA256 5bcbb58eaf65f13f6d039244d942f37c127344e3a0a2e6c32d08236945132809
MD5 f2d8fe158d5361fc1d4b794a7255835a
SHA1 6c8744fa70651f629ed887cb76b6bc1bed304af9
SHA512 946f4e41be624458b5e842a6241d43cd40369b2e0abc2cacf67d892b5f3d8a863a0e37e8120e11375b0bacb4651eedb8d324271d9a0c37527d4d54dd4905afab
SSDEEP 3072:pPTHXHEm69FrOP8d4hRLiinKL4Qshbv2fuOQXCxj+60EoM8WC5zgY:p73HEUP8dsiinTThjy90VKY
TLSH
T1C1E319F3A3394AC29420A8A4DF593B7E4044FA944D80E197B5EC2038E667CBC76D579F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logo.png

Path C:\Windows\Temp\{0D9CCCDB-74E2-4A58-8572-C271CE98FE23}\.ba\logo.png
Size 1KB
SHA256 335a256d4779ec5dcf283d007fb56fd8211bbcaf47dcd70fe60ded6a112744ef
MD5 d6bd210f227442b3362493d046cea233
SHA1 ff286ac8370fc655aea0ef35e9cf0bfcb6d698de
SHA512 464aaab9e08de610ad34b97d4076e92dc04c2cdc6669f60bfc50f0f9ce5d71c31b8943bd84cee1a04fb9ab5bbed3442bd41d9cb21a0dd170ea97c463e1ce2b5b
TLSH
T1CF312CF34748B7A7D30581351471819AD242FFD8F9CE291E35CD5307664018115C75CF
MD5 SHA1 SHA512 TLSH

Submit Download

VC_redist.x64.exe

Path C:\Windows\Temp\{0D9CCCDB-74E2-4A58-8572-C271CE98FE23}\.be\VC_redist.x64.exe
Size 670KB
SHA256 568c9ba533624084ea18f7a562b4aa2249ed4e41281524a061a0d0b1008cf6bd
MD5 bc9c8a6a42e8d3ea18f8da78d5031820
SHA1 07812a4b945364d04627363e46ab38de188281b3
SHA512 b583f41b8f9cbb2b04e4c7403b54241bf4c51caefdb0bbe9184202dc615f599b496d65f6d36984b75f9b9003289c0c13066dc1e6eb294f9139248595114b4f73
SSDEEP 12288:n3mgqnIZuYfCYqFet4CovkM7x61nE4rfDDIcbMZ3Mya:n3WnIZuMCxezot7MhbfDBMZ8ya
TLSH
T10DE49E32A5604033F7F10573B928A6303E7CE3282B51C9A9D7D4AD1D7EB4892A7F7256
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

license.rtf

Path C:\Windows\Temp\{3E018AFD-A256-461C-A5AC-F665F2B3487C}\.ba\license.rtf
Size 9KB
SHA256 8099dc3cf9502c335da829e5c755948a12e3e6de490eb492a99deb673d883d8b
MD5 04b33f0a9081c10e85d0e495a1294f83
SHA1 1efe2fb2d014a731b752672745f9ffecdd716412
SHA512 d1dbed00df921169dd61501e2a3e95e6d7807348b188be9dd8fc63423501e4d848ece19ac466c3cacfccc6084e0eb2f457dc957990f6f511df10fd426e432685
SSDEEP 192:H8kZ1UVDWkiWZTIsp/4hghFF1Qf4lCfnEtHixEGx736wHqItfSpOtJ32:cM1RWZMi/zzlOnjt5HLoa2
TLSH
T13F12A7A8234783D103D213D7055294C1B71F0BF6AE7AF95C34E4D53826E2E6CB6B91E8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thm.wxl

Path C:\Windows\Temp\{3E018AFD-A256-461C-A5AC-F665F2B3487C}\.ba\thm.wxl
Size 2KB
SHA256 70400f181d00e1769774ff36bcd8b1ab5fbc431418067d31b876d18cc04ef4ce
MD5 fbfcbc4dacc566a3c426f43ce10907b6
SHA1 63c45f9a771161740e100faf710f30eed017d723
SHA512 063fb6685ee8d2fa57863a74d66a83c819fe848ba3072b6e7d1b4fe397a9b24a1037183bb2fda776033c0936be83888a6456aae947e240521e2ab75d984ee35e
TLSH
T11F519B6778CF639028335125EAD2966A6920C5DC923F2DF1FC4A914B838D522A373F57
MD5 SHA1 SHA512 TLSH

Submit Download

thm.xml

Path C:\Windows\Temp\{3E018AFD-A256-461C-A5AC-F665F2B3487C}\.ba\thm.xml
Size 8KB
SHA256 f13bae0ec08c91b4a315bb2d86ee48fade597e7a5440dce6f751f98a3a4d6916
MD5 f62729c6d2540015e072514226c121c7
SHA1 c1e189d693f41ac2eafcc363f7890fc0fea6979c
SHA512 cbbfbfa7e013a2b85b78d71d32fdf65323534816978e7544ca6cea5286a0f6e8e7e5ffc4c538200211f11b94373d5658732d5d8aa1d01f9ccfdbf20f154f1471
SSDEEP 96:8L2HdQG+3VzHfz96zYFGaPSWXdhRAmImlqFQKFBiUxn7Ke5A82rkO/pWk3nswP:ZHAzZ/3
TLSH
T1D30259B546DDB801D232FB1166E231D27F126971C0C46E59F90C2AFB5FE1140A8B72BD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

wixstdba.dll

Path C:\Windows\Temp\{7876EDB7-EFB1-4D15-A9DE-3F28F0B375B4}\.ba\wixstdba.dll
Size 215KB
SHA256 e921f69b9fb4b5ad4691809d06896c5f1d655ab75e0ce94a372319c243c56d4e
MD5 f68f43f809840328f4e993a54b0d5e62
SHA1 01da48ce6c81df4835b4c2eca7e1d447be893d39
SHA512 a7a799ecf1784fb5e8cd7191bf78b510ff5b07db07363388d7b32ed21f4fddc09e34d1160113395f728c0f4e57d13768a0350dbdb207d9224337d2153dc791e1
SSDEEP 6144:K6EZdi6e93SuDeTKZxQfsRy26BqbUHYJe:K62i6eNSYeuZ2sRDK
TLSH
T15E24AF12B5D0907AEBFB19305939E5216DBDBA210FA0C9CE5348AD2B2E705C1DB36737
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/252-8321-0x0000022D67000000-0x0000022D68000000-memory.dmp

Download

memory/1184-3517-0x000001FE4FD40000-0x000001FE4FD78000-memory.dmp

Download

memory/1184-4702-0x000001FE6C1B0000-0x000001FE6D1B0000-memory.dmp

Download

memory/1356-7686-0x0000020E2E000000-0x0000020E2F000000-memory.dmp

Download

memory/1356-7655-0x0000020E91370000-0x0000020E9139C000-memory.dmp

Download

memory/1356-7656-0x0000020E913A0000-0x0000020E913EA000-memory.dmp

Download

memory/2664-285-0x00007FFDA0960000-0x00007FFDA0961000-memory.dmp

Download

memory/3032-180-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp

Download

memory/3032-1462-0x000002002E4D0000-0x000002002E54A000-memory.dmp

Download

memory/3032-159-0x00000200148E0000-0x0000020014926000-memory.dmp

Download

memory/3032-170-0x0000020014930000-0x0000020014948000-memory.dmp

Download

memory/3032-147-0x00007FFD7EA0F000-0x00007FFD7EA10000-memory.dmp

Download

memory/3032-544-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp

Download

memory/3032-173-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp

Download

memory/3032-543-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp

Download

memory/3032-174-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp

Download

memory/3032-176-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp

Download

memory/3032-542-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp

Download

memory/3032-156-0x0000020014820000-0x0000020014834000-memory.dmp

Download

memory/3032-157-0x000002002F180000-0x000002002F6A8000-memory.dmp

Download

memory/3032-177-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp

Download

memory/3032-178-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp

Download

memory/3032-179-0x000002002ED60000-0x000002002EE10000-memory.dmp

Download

memory/3032-155-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp

Download

memory/3032-153-0x00000200162D0000-0x000002001637C000-memory.dmp

Download

memory/3032-148-0x0000020014360000-0x00000200143B6000-memory.dmp

Download

memory/3032-181-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp

Download

memory/3032-202-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp

Download

memory/3032-207-0x000002002F150000-0x000002002F172000-memory.dmp

Download

memory/3032-203-0x000002002F940000-0x000002002F9D0000-memory.dmp

Download

memory/3032-210-0x000002002F130000-0x000002002F13E000-memory.dmp

Download

memory/3032-2865-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp

Download

memory/3032-150-0x00007FFD7E880000-0x00007FFD7F224000-memory.dmp

Download

memory/3032-2563-0x000002002E450000-0x000002002E474000-memory.dmp

Download

memory/3276-7697-0x0000024150000000-0x0000024151000000-memory.dmp

Download

memory/3288-399-0x00000247BD6C0000-0x00000247BD6C1000-memory.dmp

Download

memory/3288-401-0x00000247BD6C0000-0x00000247BD6C1000-memory.dmp

Download

memory/3288-397-0x00000247BD6C0000-0x00000247BD6C1000-memory.dmp

Download

memory/3288-400-0x00000247BD6C0000-0x00000247BD6C1000-memory.dmp

Download

memory/3288-392-0x00000247BD6C0000-0x00000247BD6C1000-memory.dmp

Download

memory/3288-390-0x00000247BD6C0000-0x00000247BD6C1000-memory.dmp

Download

memory/3288-398-0x00000247BD6C0000-0x00000247BD6C1000-memory.dmp

Download

memory/3288-396-0x00000247BD6C0000-0x00000247BD6C1000-memory.dmp

Download

memory/3396-5229-0x000002119B2B0000-0x000002119C2B0000-memory.dmp

Download

memory/3412-1411-0x00000257205A0000-0x00000257205B2000-memory.dmp

Download

memory/3412-1441-0x0000025738D30000-0x0000025738D64000-memory.dmp

Download

memory/3412-1412-0x0000025738CD0000-0x0000025738D0C000-memory.dmp

Download

memory/3852-2347-0x00000197ACF50000-0x00000197ACFD0000-memory.dmp

Download

memory/4112-5227-0x0000029746000000-0x0000029747000000-memory.dmp

Download

memory/4168-1354-0x0000026250330000-0x000002625057C000-memory.dmp

Download

memory/4272-318-0x00007FFDA0960000-0x00007FFDA0961000-memory.dmp

Download

memory/4456-610-0x00007FFDA07A0000-0x00007FFDA07A1000-memory.dmp

Download

memory/4456-611-0x00007FFDA0110000-0x00007FFDA0111000-memory.dmp

Download

memory/4532-3373-0x00000000007B0000-0x0000000000827000-memory.dmp

Download

memory/4828-1304-0x0000000005660000-0x000000000567D000-memory.dmp

Download

memory/4860-7336-0x0000024350AA0000-0x0000024350C62000-memory.dmp

Download

memory/4860-7682-0x0000024340000000-0x0000024341000000-memory.dmp

Download

memory/5252-5228-0x0000019FBE000000-0x0000019FBF000000-memory.dmp

Download

memory/5844-3359-0x00000000007B0000-0x0000000000827000-memory.dmp

Download

memory/5876-3569-0x00007FFDA0970000-0x00007FFDA0975000-memory.dmp

Download

memory/5876-7553-0x0000000026BE0000-0x0000000026BF0000-memory.dmp

Download

memory/5876-4303-0x000000002AB00000-0x000000002BB00000-memory.dmp

Download

memory/5876-6849-0x000000004F780000-0x000000004F78A000-memory.dmp

Download

memory/5876-6667-0x0000000057C90000-0x0000000057CA6000-memory.dmp

Download

memory/5876-3255-0x0000000023D80000-0x0000000023DDE000-memory.dmp

Download

memory/5876-6657-0x0000000055680000-0x00000000556BE000-memory.dmp

Download

memory/5876-6658-0x0000000055550000-0x000000005555E000-memory.dmp

Download

memory/5876-3566-0x00007FFD9F060000-0x00007FFD9F065000-memory.dmp

Download

memory/5876-6864-0x000000004F790000-0x000000004F798000-memory.dmp

Download

memory/5876-3571-0x00007FFDA0990000-0x00007FFDA0995000-memory.dmp

Download

memory/5876-3573-0x00007FFDA09B0000-0x00007FFDA09B5000-memory.dmp

Download

memory/5876-3575-0x00007FFDA09D0000-0x00007FFDA09D5000-memory.dmp

Download

memory/5876-3577-0x00007FFDA0AA0000-0x00007FFDA0AA5000-memory.dmp

Download

memory/5876-3579-0x00007FFDA0AC0000-0x00007FFDA0AC5000-memory.dmp

Download

memory/5876-3581-0x00007FFDA0AE0000-0x00007FFDA0AE5000-memory.dmp

Download

memory/5876-3583-0x00007FFDA0B00000-0x00007FFDA0B05000-memory.dmp

Download

memory/5876-3567-0x00007FFDA1480000-0x00007FFDA1485000-memory.dmp

Download

memory/5876-3565-0x00007FFDA1470000-0x00007FFDA1475000-memory.dmp

Download

memory/5876-7389-0x000000004F820000-0x000000004F82E000-memory.dmp

Download

memory/5876-3465-0x00000000288E0000-0x00000000289D2000-memory.dmp

Download

memory/5876-3463-0x00000000287D0000-0x00000000287DE000-memory.dmp

Download

memory/5876-3462-0x00000000287C0000-0x00000000287CA000-memory.dmp

Download

memory/5876-3461-0x00000000287A0000-0x00000000287A8000-memory.dmp

Download

memory/5876-6656-0x00000000508E0000-0x00000000508E8000-memory.dmp

Download

memory/5876-3080-0x000000001DE60000-0x000000001DE70000-memory.dmp

Download

memory/5876-3090-0x0000000021F70000-0x0000000021F7A000-memory.dmp

Download

memory/5876-2799-0x00007FFDA1420000-0x00007FFDA1425000-memory.dmp

Download

memory/5876-2806-0x00007FFD9F050000-0x00007FFD9F052000-memory.dmp

Download

memory/5876-7319-0x0000000057C80000-0x0000000057C8A000-memory.dmp

Download

memory/5876-2810-0x00007FFDA1450000-0x00007FFDA1455000-memory.dmp

Download

memory/5876-2808-0x00007FFD9F040000-0x00007FFD9F045000-memory.dmp

Download

memory/5876-2811-0x00007FF7E18B0000-0x00007FF7E18C4000-memory.dmp

Download

memory/5876-2866-0x000000001DDB0000-0x000000001DE5A000-memory.dmp

Download

memory/5876-2869-0x00000000046F0000-0x0000000004828000-memory.dmp

Download

memory/5876-2904-0x0000000004830000-0x000000000489A000-memory.dmp

Download

memory/5876-2905-0x00000000046E0000-0x00000000046EA000-memory.dmp

Download

memory/5876-3585-0x00007FFDA0C00000-0x00007FFDA0C05000-memory.dmp

Download

memory/5876-2907-0x00000000048A0000-0x00000000048AA000-memory.dmp

Download

memory/5876-2988-0x00000000048C0000-0x00000000048C8000-memory.dmp

Download

memory/5876-3587-0x00007FFDA0C20000-0x00007FFDA0C25000-memory.dmp

Download

memory/5876-3081-0x0000000021FB0000-0x0000000021FF4000-memory.dmp

Download

memory/5876-7564-0x0000000026BE0000-0x0000000026BE8000-memory.dmp

Download

memory/5876-7582-0x0000000026C30000-0x0000000026C3A000-memory.dmp

Download

memory/5876-7583-0x0000000058DA0000-0x0000000058DF4000-memory.dmp

Download

memory/5876-7627-0x0000000026C30000-0x0000000026C38000-memory.dmp

Download

memory/5876-7647-0x0000000026F40000-0x0000000026F5E000-memory.dmp

Download

memory/5876-3030-0x0000000023DF0000-0x000000002455E000-memory.dmp

Download

memory/5876-3031-0x00000000046C0000-0x00000000046D2000-memory.dmp

Download

memory/5876-3589-0x00007FFDA0C40000-0x00007FFDA0C45000-memory.dmp

Download

memory/5876-3032-0x00000000046A0000-0x00000000046A8000-memory.dmp

Download

memory/5876-3033-0x0000000004910000-0x000000000494C000-memory.dmp

Download

memory/5876-3078-0x0000000004990000-0x0000000004998000-memory.dmp

Download

memory/5876-3591-0x00007FFDA0C60000-0x00007FFDA0C65000-memory.dmp

Download

memory/5876-3061-0x000000001DD00000-0x000000001DD44000-memory.dmp

Download

memory/5876-7684-0x0000000058D40000-0x0000000058D80000-memory.dmp

Download

memory/5876-3062-0x000000001DD50000-0x000000001DD86000-memory.dmp

Download

memory/5876-3063-0x00000000048F0000-0x00000000048FC000-memory.dmp

Download

memory/5876-7698-0x0000000026F40000-0x0000000026F48000-memory.dmp

Download

memory/5876-3074-0x000000001DEA0000-0x000000001DEDC000-memory.dmp

Download

memory/5876-7708-0x00000000586A0000-0x00000000586B2000-memory.dmp

Download

memory/5876-7710-0x000000004F8E0000-0x000000004F8EA000-memory.dmp

Download

memory/5876-7709-0x0000000058710000-0x0000000058756000-memory.dmp

Download

memory/5876-3593-0x00007FFDA0120000-0x00007FFDA0125000-memory.dmp

Download

memory/5876-3733-0x0000000050830000-0x0000000050858000-memory.dmp

Download

memory/5876-3077-0x000000001DD90000-0x000000001DDA2000-memory.dmp

Download

memory/5876-3079-0x000000001DE80000-0x000000001DE94000-memory.dmp

Download

memory/5904-3372-0x00000000007B0000-0x0000000000827000-memory.dmp

Download

memory/5912-701-0x0000021893610000-0x0000021893611000-memory.dmp

Download

memory/5912-707-0x0000021893610000-0x0000021893611000-memory.dmp

Download

memory/5912-708-0x0000021893610000-0x0000021893611000-memory.dmp

Download

memory/5912-709-0x0000021893610000-0x0000021893611000-memory.dmp

Download

memory/5912-705-0x0000021893610000-0x0000021893611000-memory.dmp

Download

memory/5912-706-0x0000021893610000-0x0000021893611000-memory.dmp

Download

memory/5912-699-0x0000021893610000-0x0000021893611000-memory.dmp

Download

memory/6236-7926-0x0000019180000000-0x0000019181000000-memory.dmp

Download

memory/6864-7972-0x000002BF44100000-0x000002BF45100000-memory.dmp

Download

memory/7068-3381-0x00000253A6AE0000-0x00000253A6AE1000-memory.dmp

Download

memory/7068-3378-0x00000253A6AE0000-0x00000253A6AE1000-memory.dmp

Download

memory/7068-3379-0x00000253A6AE0000-0x00000253A6AE1000-memory.dmp

Download

memory/7068-3380-0x00000253A6AE0000-0x00000253A6AE1000-memory.dmp

Download

memory/7068-3369-0x00000253A6AE0000-0x00000253A6AE1000-memory.dmp

Download

memory/7068-3371-0x00000253A6AE0000-0x00000253A6AE1000-memory.dmp

Download

memory/7068-3382-0x00000253A6AE0000-0x00000253A6AE1000-memory.dmp

Download