Overview
overview
7Static
static
3SKlauncher...up.exe
windows10-2004-x64
7SKlauncher...up.exe
windows11-ltsc_2024-x64
7$PLUGINSDIR/INetC.dll
windows10-2004-x64
3$PLUGINSDIR/INetC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...7z.dll
windows10-2004-x64
3$PLUGINSDI...7z.dll
windows11-ltsc_2024-x64
3$R0/Uninst...er.exe
windows10-2004-x64
7$R0/Uninst...er.exe
windows11-ltsc_2024-x64
7$PLUGINSDI...ls.dll
windows10-2004-x64
3$PLUGINSDI...ls.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...em.dll
windows10-2004-x64
3$PLUGINSDI...em.dll
windows11-ltsc_2024-x64
3$PLUGINSDIR/UAC.dll
windows10-2004-x64
3$PLUGINSDIR/UAC.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ll.dll
windows10-2004-x64
3$PLUGINSDI...ll.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...gs.dll
windows10-2004-x64
3$PLUGINSDI...gs.dll
windows11-ltsc_2024-x64
3$PLUGINSDI...ec.dll
windows10-2004-x64
3$PLUGINSDI...ec.dll
windows11-ltsc_2024-x64
3Analysis
- max time kernel
132s - max time network
153s - platform
windows11-ltsc_2024_x64 - resource
win11ltsc2024-20260710-en - resource tags
arch:x64arch:x86image:win11ltsc2024-20260710-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows - submitted
09/09/2026, 23:27
Static task
static1
Behavioral task
behavioral1
Sample
SKlauncher-4.0.29-web-setup.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral2
Sample
SKlauncher-4.0.29-web-setup.exe
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral3
Sample
$PLUGINSDIR/INetC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral4
Sample
$PLUGINSDIR/INetC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral5
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral6
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral7
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral8
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral9
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral10
Sample
$PLUGINSDIR/UAC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral11
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral12
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral13
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral14
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral15
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral16
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral17
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral18
Sample
$PLUGINSDIR/nsis7z.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral19
Sample
$R0/Uninstall sklauncher.exe
Resource
win10v2004-20260513-en
Behavioral task
behavioral20
Sample
$R0/Uninstall sklauncher.exe
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral21
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral22
Sample
$PLUGINSDIR/StdUtils.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral23
Sample
$PLUGINSDIR/System.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral24
Sample
$PLUGINSDIR/System.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral25
Sample
$PLUGINSDIR/UAC.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral26
Sample
$PLUGINSDIR/UAC.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral27
Sample
$PLUGINSDIR/WinShell.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral28
Sample
$PLUGINSDIR/WinShell.dll
Resource
win11ltsc2024-20260709-en
Behavioral task
behavioral29
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral30
Sample
$PLUGINSDIR/nsDialogs.dll
Resource
win11ltsc2024-20260710-en
Behavioral task
behavioral31
Sample
$PLUGINSDIR/nsExec.dll
Resource
win10v2004-20260513-en
Behavioral task
behavioral32
Sample
$PLUGINSDIR/nsExec.dll
Resource
win11ltsc2024-20260710-en
General
- Target SKlauncher-4.0.29-web-setup.exe
- Size 838KB
- Sample260909-3fl59asbjf
- SHA256 62b2d500c04740285f9723071aa3dafc762246ba64205c98a10012748861a14b
- MD5 764d9a795824ba7050a3e9921b1fb96a
- SHA1 a731a594336341a1dbad4b9c255ba2fa12b4cb75
- SHA512 dec2c696153c56e81092a0e07dd0f5d485f091172d98c2ac0acda1720cb65159b8b6ce21ca5d09547744736651aba9443813a23c6369d442922ae943f47e0415
- SSDEEP 12288:ogEUiUHkKwTLRKRMDPNKT1zH3ptaR1sDfOQSvJqFZ61Gv0ekHZ8QwGEM:o4iUEKwXMmDu173pG1szLSvJw/v8qQZ
- TLSH T105052300F7D4E417E5E66FBA22B55BEB58E42D4105A9870B2B8613DF3CF1E90DE2E241
- MD5 SHA1 SHA512 SSDEEP TLSH
Malware Config
Signatures
- Executes dropped EXE 4 IoCs
pid Process 4364 sklauncher.exe 3616 sklauncher.exe 2944 sklauncher.exe 2672 sklauncher.exe - Loads dropped DLL 15 IoCs
pid Process 5164 SKlauncher-4.0.29-web-setup.exe 5164 SKlauncher-4.0.29-web-setup.exe 5164 SKlauncher-4.0.29-web-setup.exe 5164 SKlauncher-4.0.29-web-setup.exe 5164 SKlauncher-4.0.29-web-setup.exe 5164 SKlauncher-4.0.29-web-setup.exe 5164 SKlauncher-4.0.29-web-setup.exe 5164 SKlauncher-4.0.29-web-setup.exe 5164 SKlauncher-4.0.29-web-setup.exe 5164 SKlauncher-4.0.29-web-setup.exe 5164 SKlauncher-4.0.29-web-setup.exe 5164 SKlauncher-4.0.29-web-setup.exe 5164 SKlauncher-4.0.29-web-setup.exe 3616 sklauncher.exe 3616 sklauncher.exe - Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
pid Process 4652 powershell.exe 1368 powershell.exe - Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs
Command interpreters often include specific commands/flags that ignore errors and other hangups.
pid Process 1072 powershell.exe - Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).
- System Location Discovery: System Language Discovery 1 TTPs 4 IoCs
Attempt gather information about the system language of a victim in order to infer the geographical location of that host.
description ioc Process Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language powershell.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language powershell.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language powershell.exe Key opened \REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language SKlauncher-4.0.29-web-setup.exe - Checks processor information in registry 2 TTPs 24 IoCs
Processor information is often read in order to detect sandboxing environments.
description ioc Process Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz sklauncher.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1 sklauncher.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3 sklauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\~MHz sklauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\3\ProcessorNameString sklauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\ProcessorNameString sklauncher.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5 sklauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString sklauncher.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2 sklauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\ProcessorNameString sklauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\~MHz sklauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6\ProcessorNameString sklauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\~MHz sklauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\~MHz sklauncher.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4 sklauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\5\~MHz sklauncher.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\6 sklauncher.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7 sklauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\1\ProcessorNameString sklauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\~MHz sklauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\2\ProcessorNameString sklauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\4\~MHz sklauncher.exe Key value queried \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\7\ProcessorNameString sklauncher.exe Key opened \REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0 sklauncher.exe - Modifies system certificate store 2 TTPs 2 IoCs
description ioc Process Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0 SKlauncher-4.0.29-web-setup.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1CBCA5DB2D52A7F693B674DE5F05A1D0C957DF0\Blob = 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 SKlauncher-4.0.29-web-setup.exe - Suspicious behavior: EnumeratesProcesses 8 IoCs
pid Process 1072 powershell.exe 1072 powershell.exe 4652 powershell.exe 4652 powershell.exe 5164 SKlauncher-4.0.29-web-setup.exe 5164 SKlauncher-4.0.29-web-setup.exe 1368 powershell.exe 1368 powershell.exe - Suspicious use of AdjustPrivilegeToken 25 IoCs
description pid Process Token: SeDebugPrivilege 1072 powershell.exe Token: SeDebugPrivilege 4652 powershell.exe Token: SeDebugPrivilege 1368 powershell.exe Token: SeIncreaseQuotaPrivilege 1368 powershell.exe Token: SeSecurityPrivilege 1368 powershell.exe Token: SeTakeOwnershipPrivilege 1368 powershell.exe Token: SeLoadDriverPrivilege 1368 powershell.exe Token: SeSystemProfilePrivilege 1368 powershell.exe Token: SeSystemtimePrivilege 1368 powershell.exe Token: SeProfSingleProcessPrivilege 1368 powershell.exe Token: SeIncBasePriorityPrivilege 1368 powershell.exe Token: SeCreatePagefilePrivilege 1368 powershell.exe Token: SeBackupPrivilege 1368 powershell.exe Token: SeRestorePrivilege 1368 powershell.exe Token: SeShutdownPrivilege 1368 powershell.exe Token: SeDebugPrivilege 1368 powershell.exe Token: SeSystemEnvironmentPrivilege 1368 powershell.exe Token: SeRemoteShutdownPrivilege 1368 powershell.exe Token: SeUndockPrivilege 1368 powershell.exe Token: SeManageVolumePrivilege 1368 powershell.exe Token: 33 1368 powershell.exe Token: 34 1368 powershell.exe Token: 35 1368 powershell.exe Token: 36 1368 powershell.exe Token: SeSecurityPrivilege 5164 SKlauncher-4.0.29-web-setup.exe - Suspicious use of FindShellTrayWindow 3 IoCs
pid Process 4364 sklauncher.exe 4364 sklauncher.exe 4364 sklauncher.exe - Suspicious use of SendNotifyMessage 3 IoCs
pid Process 4364 sklauncher.exe 4364 sklauncher.exe 4364 sklauncher.exe - Suspicious use of WriteProcessMemory 8 IoCs
description pid Process procid_target PID 5164 wrote to memory of 1072 5164 SKlauncher-4.0.29-web-setup.exe 89 PID 5164 wrote to memory of 4652 5164 SKlauncher-4.0.29-web-setup.exe 91 PID 5164 wrote to memory of 1368 5164 SKlauncher-4.0.29-web-setup.exe 93 PID 4364 wrote to memory of 5008 4364 sklauncher.exe 99 PID 4364 wrote to memory of 3616 4364 sklauncher.exe 101 PID 4364 wrote to memory of 3616 4364 sklauncher.exe 101 PID 4364 wrote to memory of 2944 4364 sklauncher.exe 102 PID 4364 wrote to memory of 2672 4364 sklauncher.exe 103
Processes
-
C:\Users\Admin\AppData\Local\Temp\SKlauncher-4.0.29-web-setup.exe"C:\Users\Admin\AppData\Local\Temp\SKlauncher-4.0.29-web-setup.exe"1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:5164 -
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"2⤵
- Hide Artifacts: Ignore Process Interrupts
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1072
-
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"2⤵
- Command and Scripting Interpreter: PowerShell
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:4652
-
-
C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe"C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\sklauncher', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"2⤵
- Command and Scripting Interpreter: PowerShell
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
PID:1368
-
-
C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe"C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe"1⤵
- Executes dropped EXE
- Checks processor information in registry
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4364 -
C:\Windows\system32\reg.exereg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v InstallationType2⤵PID:5008
-
-
C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe"C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1724,i,16270496608608586572,17421005685150475489,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1728,i,8316704763523026579,2718252475654207347,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1720 /prefetch:22⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3616
-
-
C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe"C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot --secure-schemes=starship-screenshot --bypasscsp-schemes=starship-screenshot --fetch-schemes=starship-screenshot --streaming-schemes=starship-screenshot --field-trial-handle=1724,i,16270496608608586572,17421005685150475489,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1728,i,8316704763523026579,2718252475654207347,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2000 /prefetch:112⤵
- Executes dropped EXE
PID:2944
-
-
C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe"C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot --secure-schemes=starship-screenshot --bypasscsp-schemes=starship-screenshot --fetch-schemes=starship-screenshot --streaming-schemes=starship-screenshot --app-user-model-id=pl.skmedix.sklauncher --app-path="C:\Users\Admin\AppData\Local\Programs\sklauncher\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1788996070267875 --launch-time-ticks=699012725 --field-trial-handle=1724,i,16270496608608586572,17421005685150475489,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1728,i,8316704763523026579,2718252475654207347,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2608 /prefetch:12⤵
- Executes dropped EXE
PID:2672
-
Network
MITRE ATT&CK Enterprise v16
Defense Evasion
Hide Artifacts
1Ignore Process Interrupts
1Modify Registry
1Subvert Trust Controls
1Install Root Certificate
1Replay Monitor
Loading Replay Monitor...
Downloads
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
- Size 17KB
- SHA256 fc8995884868207e15488a40901a8b939499e807f30d815d021d118f5b4ae383
- MD5 1cfa33a92d76ec065d5e4e6145a26ba7
- SHA1 898e2d7896b5b5249a8aa0dae38fc82916b35c15
- SHA512 5d5a16512a0dbc1b6817632497a0613b36f1f0aacfbf5ffb08143aa74d0968492339687b2e245977c85b4e76eb6b3c48e67830421d175eb3d1e598924e1b52e0
- SSDEEP 384:k1eBaGH1iwGW14boVq+ZzTHO/+tQS4r2PnNIAsF41t48WQ+fd7eErbfkwY8hf9:wenVCWisV1u/+c6lIAcCt4QaMIbf1YA9
- TLSH T1577287A9516FADC7D89122B010D601E7FBE4E48CDF7551D8FE2BC92B5C90BB64FA0520
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
- Size 16KB
- SHA256 77676bfb9bb0a59b0672e6c05c5b09ee66b8981d03af870d74a33c1e6b9f4a54
- MD5 130278869e18481448b5edba54282e27
- SHA1 6d4367ce44b1a73b365a37b2372b5ed850cf402a
- SHA512 7b4ad9a2c416ab7b16cc987c42182905dafe497c8313cb2ddc5d48830432a875c528b11689ae6221a0596e09c9cc3559c832f12c1707096c9b64eee9990d4235
- SSDEEP 384:71eB1nT1iBIbaxB8JD+nJzhR2VWOEPiUDzdC0YIACXF4RDNA8KOmqBDKve+IbWJ1:5evZ6ImxByD+nVSUN6UFC0YIAc2i8KOc
- TLSH T1B272F72D26AB4D87ED5120F41081038AFBE8E496EB9151DBFA97CD2B1C45E7E9F600F4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_oo4pjut3.jbb.ps1
- Size 60B
- SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
- MD5 d17fe0a3f47be24a6453e9ef58c94641
- SHA1 6ab83620379fc69f80c0242105ddffd7d98d5d9d
- SHA512 5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82
- TLSH T177A02228CC303B200020C0080A000002C00B800C080C8C0220000A00B20B820002F080
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\LICENSE.electron.txt
- Size 1KB
- SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
- MD5 4d42118d35941e0f664dddbd83f633c5
- SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
- SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
- TLSH T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\LICENSES.chromium.html
- Size 18.6MB
- SHA256 62e3b53be6bbbb2e7747b7a55c8b4f4a3cf38b95e0fff594737b3bfdac8cf373
- MD5 0f6417e60719dfacf3524b61cca87e8d
- SHA1 f2f4fa439dc120908a53965d8f292b00e51f7647
- SHA512 1eff62954cf80b2ffaa1d676a9ee61c8da9488a327b458268f6efe94dfef5f6030ab11e9ad2df305de5a8bb05c4e2beb21e027a0a0c9ba3fc94a15ca9f85e5ed
- SSDEEP 49152:nRWnjZ1pNUAwuTYp2bKvC6I3r8xsJQf8xFTDeQdt+lHx37DoB:i
- TLSH T1D617B56BBB49037316F242626B47A5CAF31EA13F375A1654309CC11C2B7B92483FB69D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\chrome_100_percent.pak
- Size 113KB
- SHA256 34433fa04ddf5eb78b3b4e9c64a3af626e28641907ad7a6086614eb6a8f00a07
- MD5 a8d9be85b9a9c2a1be1815b29cfde9ce
- SHA1 9b8df5aebf541d063311ad4c2be1d23398f13a33
- SHA512 37ad60e74c7e439f83b87ce61018619568914ee491289e3fb34234a0c4e3258c4986cd56e6e58652134058ab1f824a90499d4aed46e611937ec946d9a3b680ec
- SSDEEP 3072:fnk4PisCv+/P9NebGz8LI1TwILjQBHe7YAP18RVC2I:fnZYWFUbGz8LI1TdjQBQCrC
- TLSH T1F8B3E0D773B0AD7DD6870BB783660070FCB31B2D06C2160A4A99E479652AF88D8D93D3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\chrome_200_percent.pak
- Size 183KB
- SHA256 581c8d53199c10512d31a340699f9ad269f8eea5fe6bc49e05c1bde98ee612aa
- MD5 e0d4001307e8e8554810b27796ad636f
- SHA1 be92e88b55ae85cc5118009af0fe32c9470c0dca
- SHA512 762324239832fa1a531cc3da546df8627610a164c13d83f12b64c28e207273989fa7da0c4e96787ab0a5d09f5202ebc31895f09ad2fdbea4e6e70c0d2b4f51d1
- SSDEEP 3072:jgJ8LahaY7d6iN6uSwxohPQDQYaEjrvy/IwXJPpLjQBHe7YAP10uxR/TbIM0:jxGQ+N6uSZQDQYakvyAk9jQBQNd4
- TLSH T1C704F2D723B8AE3DD9570B73926610E0FE7A20291EB3110E469F98397925F8CD9C9343
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\d3dcompiler_47.dll
- Size 4.5MB
- SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
- MD5 6ac6cc720fb6bbe5c0ed4e84ad2b3337
- SHA1 8556531bd06691ce0f8b7d83814c867a420526a4
- SHA512 216084dc2a84ca818d68d603968acc978c0b60bdbe0a3152cbfc400ec11a2b96e81d1698a15dbb7738974f4365a8feb109f2bca5b641b42acedeaeff1e2a342c
- SSDEEP 49152:JSHvWaWTktEzfRriMsCL98dhdVhpHGC6GNCxJYrv9y5Eze+V7ZpdKMZzaWoUyxqJ:suktcrfNlTyj5byqSC
- TLSH T1FE268D5767E840E9C5BBD138D687831BEBB1B80413345BDF01508669AF73BE26A3E724
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\dxcompiler.dll
- Size 24.5MB
- SHA256 d0bfe18b1fe15a2eb40f8955f3d1a7d54040e8c321158207803668e892727c2d
- MD5 cba1da732623a65bb9d793ea915e2cd6
- SHA1 0c789c1e4d15d25e15a7601104e3ce2c268d3aa8
- SHA512 15b296979abe3db765bab147ee85dabd2f2932454fb264251056d82f78d23c9f5893695a54ab3c59fe91d80e9b6dc5d535106815b09229392c4ca7d8e264cc77
- SSDEEP 393216:n9tCn2P9zxhOMXtVz5icpXH5uVUi+ziu:yGzPdrIVCD
- TLSH T147473A122646D49CC059C879C7678B26CA6C30E73FA7B8EBC0F451252B79EBC5B39235
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\dxil.dll
- Size 1.4MB
- SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
- MD5 f8f3501026df30556c34a9af9cb7af9c
- SHA1 961d9012b6d79e2e3c28b310a80ba3ab36e2c559
- SHA512 3631f8a3d48e8eea25091b93147d88f0e8a7539f2f242fe287d37f82fc4344528901e4cc48c93ebcf8691d2e11227a9b50f2b5ad45f2475c0119ad8b2d3661fd
- SSDEEP 24576:zY+wATtbKYxy0y3ny6eBjNSGlVZyi27+V0IJNSD11J7R+j+v1acLUkJvS5Kao:8iTMYxy0Sy66Zh7Sh/cyvS5W
- TLSH T154657E1B229801B6D4BBD17CDA47CE0BE6B2B41503B09BCF12B406692F5BBF55A3E351
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\ffmpeg.dll
- Size 3.0MB
- SHA256 33559a766ca7b5f0768145eeefa53b6fe2eb0d651629bdefd4786b4569a9aa84
- MD5 814a6c018d0c0a13a98318cdf3af8120
- SHA1 39c427dab39ca8ae6166bd128f2ff1a873050367
- SHA512 824657c7fb8dec60d51008f99d137d44bc779a57fbd9608a190700de2249c27edbc872ffafc9b5828cf268f36bf35b339eb911e4d28e94a865d0e52955fd4e07
- SSDEEP 49152:GlyMFEi+bSxsTUs3mFNYisl199a6LKIbB7k6TNDNoJHaKyEC8bWP:GlyJGsQsU+is9dNoJAe
- TLSH T1C6E5AE02F6D651ECD019C074979B9313F631340A4F209AEB16909A263F6BFD87E7E768
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\icudtl.dat
- Size 10.3MB
- SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
- MD5 5bfd3eefca4b5ef2d1a869396390a7de
- SHA1 c58567f7fe308ccd43f406b70aa8bf6fdbea4f3a
- SHA512 4489a55fa0b47c8d1e9679032e036c7998f82efb4191b98900ae40cfc30a26b65290867527161c594c42fe7999b2314f8928a5d717d65d4eeedd4fdb0ed0f427
- SSDEEP 196608:A6akBhOR8LE/dUHiXUxa/iJ53IWhls2E91Z0G:AqwKLBHiXUxa/iJ53IWhls2E6G
- TLSH T118B63903A2EB4EC6F9FB5F7498F562779527BD49AE32804A51043F3B1C333908664B66
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\libEGL.dll
- Size 510KB
- SHA256 ea6abea4b5520ee55d5bc7b2743855397f7d58906ec2d95bce0cd5cc41fd7eaf
- MD5 f973bddfcb124740d41f5fba3cec57c5
- SHA1 420cf01af9714eaa1d10859a470c757fcd2896f6
- SHA512 21eedea93c2d6bf99ef2268b901aab4998de5f58dbea87f688028bfaada267ebd06456c6cc2cffb520693d8af623198e26216e86f09e7c6994d0c9559bcb852a
- SSDEEP 6144:8eQszxnw5uBqWh//UlBowkZDYJ6RSQmWYmkHGVGWFcsfAVMugP4efaguL1iMg:6G/V/iZJOmW6GVGWFcsfAOugP4e410
- TLSH T15CB47D15F3E84BA9D07AD1348A438646DB7174921F65F9EF02E052392F3BBF45A3A324
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\libGLESv2.dll
- Size 7.6MB
- SHA256 276f69a4b413c7f78658591a8b1abeda9d19a5ecd7df9388fb3ff1181a5d5cf5
- MD5 fed2880db916552030d60bfc223e15ab
- SHA1 d14c579de329c078e2babab0cc460c5a59f2316d
- SHA512 de88f4bcc44e067abedd5b03f760748c141d7b68cdc9f1f0b2c3c66bb0d1ccc38ad40c4b8c3a0ec4616a9716dd571726c9fe523ed5cf9219827e25cf00533493
- SSDEEP 98304:CMl+TBKGaCkRN0tdArcDSsdKwtxxKnhxE8:Bl4cCkrJ
- TLSH T196868C03F69641D9C05DE2749B67A223FA34B8550724B7CF2A9443162F6AFE0EB3E714
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\af.pak
- Size 596KB
- SHA256 7bf59977f051c1ccb19cb8c48a8efd57922d088ad26cd51a85a671000c845a4e
- MD5 0a95fc23b7a7e74189088ad0a8590875
- SHA1 118c82d27a1d13776e37ef229e11cad30d7bb0f2
- SHA512 7264d75250c98bd9b9086422c87800484d3658fef8cde3677a16d3d8c9398a85cf042b96da03881ff00500c17d7d84cab15426fc464443ab99468e3074ae6cba
- SSDEEP 12288:VfaIq9BmRPxgtRGt+2d5nPw3NtEKQNZ3GOZKv4H2JynPN+DgWALlzNozvnLImgU+:JFq9YRPutRGt+2d9Pw3NtEKQNZ3TKv4B
- TLSH T140D41B0AE781173D09B07696FB0845B7FB9CA26CC770B2BADDA982310566DFC11BD1D8
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\am.pak
- Size 966KB
- SHA256 a387f4af550667980c7631532b5c8f50a20ecf2c2f45392a7e0bf23f8f6c91fc
- MD5 f2f6eac3736bc92f92d00aeb8da1b847
- SHA1 3579b89479ceb7c297ba15c044471eb700a2299b
- SHA512 9c6ccdec8a5412b2c65804464a1c7532bd9c76f0cf3aec8ff45558e395431abd1ace149ca4e99830dd07431c322a8f68e768c3407e885cfde5ce3404404d790d
- SSDEEP 24576:T6BeLyUTG1g9thTCKfyYtxPTtfjnX7TBzv8XqSBhiyPVABZpPQx:T+PH
- TLSH T18425AB547DF9F7570F8E8A1994320E4EA594AD4692803C38C35AE3FC2B2DF1B4DDA219
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\ar.pak
- Size 1.0MB
- SHA256 e8f4b9b64235893bbee95c8360c739e5ba09687072dd4b7d706cee9ae4032887
- MD5 0c66aa7d25c9602b75dd709b87613b95
- SHA1 bbd6b7c484118f4b601229b17000f71e1b3a00df
- SHA512 60734fbac06ec1f74fd1f72d544a8051f86473593a980a6cdd4924190e1856965127c0ca184d766175457541395eb641a69af6cc1205acdbaeda159296651e25
- SSDEEP 12288:1nZ3HDZGmBv9p7NNHHGCPXwjdb7Ae3v4UCKvkb3GSM8NjuE/YhG3q:zHDoxEA
- TLSH T17E358BE21B2984720B56DF0FD1E23668E872BD23DB4BFC3124934A2156D7513E78E678
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\bg.pak
- Size 1.1MB
- SHA256 da36ef0cde92b2021ff39b6c3341f4d2832c1129d13248aa371573812140db9a
- MD5 06a20adf56e618ee61a6abccd937126b
- SHA1 7c15932c946ac82d5e3633d46cd9330c7038dabb
- SHA512 ac5241c9120652eea1ebc516fd330d15a0a77cc3fba5c62db2b59847fbbaa66022f04c83815f6e79da78c706e8eec7e3458e838587ef07b56ec06c899c693e65
- SSDEEP 24576:fMrkmpWmldLYFg9zQkEC1UcVb6IM2Ql373ZJm8S3G2KjUfVDDMwh74u2VnJNIdky:fSpWmldLYFp8UcVb6IM2Ql373ZJm/3G8
- TLSH T1843535A15B9A68DF0101F45F98087E093CEB84FE3FE7879241652DBD39E10B487BA64D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\bn.pak
- Size 1.4MB
- SHA256 4f246bc78ddfc2cc249ae99990470e2d470a13a2d7599ab8787400c4fd179cdc
- MD5 6c5580282c738d26326f8848944534e1
- SHA1 25a6bb7327c14a2d8fac979f44874b40aa39694d
- SHA512 8e40eb5833cb1a9538e0f7037ddbb6988c97285fb6253fee59bc0d75ed4db3387396dfd822e5f7910aadbef5132939ae9463c50239aa0e4f436b25c504f35755
- SSDEEP 3072:37qCtC6WuIjUrGHbC1AHPDqnSIHReYw24Oc9pjgEf/8UR+q9N1IfyjWBbNdQZ3k+:3H1p4bCpSFYXq9N2fyjWBbjwn
- TLSH T19965EF209C6E81B6A8C5CDC9434C6370C523AE9B9B65F74DDC17A14938ADC3C8CADDB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\ca.pak
- Size 671KB
- SHA256 b232cebcb102bf03c81286f1ec082e80d0e399d09d9251c3e574ef24fb15b68b
- MD5 84661624b4c3be881266e6626298f40e
- SHA1 25a98d2c399923cc4b7835520e5c37d4ba51b2e1
- SHA512 d10e9a98d19cb35ee67993d9d902626c58cee12018a36e87a491fdd492d13c30302f5a2ae20c9609441084180bc7ad7acbf250e28a2e557a869d2b4d10767191
- SSDEEP 12288:drkuMWeY7hj3lCiGOwpQa825PsF4N3Mw2juwwPR9zejm0t3l7C7T2nLfUowTLX/8:yuMo6NvLvE9p+MNe3GjUyUK
- TLSH T11FE4F8239FC93B7704D2330AFB46C253A48CA9847B16D254F4AE1B1622CCADCD677AD5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\cs.pak
- Size 697KB
- SHA256 58b2d7c81430bec91ff72560acd604df82ff0090e2c4e3d1ce8cac2b69bc40e9
- MD5 10bb2587458fbc7299c2fbad2f0f3f65
- SHA1 0f7844d1b3179290163c9ed84d488b357b4fe99a
- SHA512 000b61f7663069d32304dd607349353b9ade3132903ec0db5cddc75902e9303ed6028fb3e8d8c2d55f081ddfb4dfd7fae4fa0332735df3edf5fcc82d264bfdcc
- SSDEEP 6144:ViB+aSVbVEdtuHrvl5An2R7gAQnTzWY5Z8OOwJSBxd8Qq:Vk8bV/Hjl5A2B4zWY5Z8OxJSy
- TLSH T1DDE4391EEEA36425484002487BBE4128BD5EC3140B6EE9AB7C8F9C912575B7E8FF4D58
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\da.pak
- Size 626KB
- SHA256 66de87f60ce23d82457271b34da1baed85bf0f3f63b04d90610a20c4ebe66c23
- MD5 d9ea0e47d70b2ce1867f98e3678641d6
- SHA1 26549b17ef25707b3aa007f37093b7762e1a8ee3
- SHA512 25ce5dbfcf70dd42a398878f095bfe7363e055d6eaf801423eacf48375ca7de828ea8fffc3abf7221f3b77fca0645b14e40cea93b756070dbb937d14725efe1e
- SSDEEP 6144:Kls69lUrKDzVIcyQD5wnMXgRi/cCJsE/em5LzwlAMDJwxlOEbPaQSaKBDsjofs3i:d69naCP5ZOA+DwcsTG
- TLSH T169D4494BDC9CB32FD9A94725F3118DA7DB6D543CC684664F64D8943A09CBCA092FE2C2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\de.pak
- Size 672KB
- SHA256 dadd0439167371607d9a82222f248f268d9e27669c1d87ca09d8751c07a90d01
- MD5 87d19b826ef22dbf769105c9bd0d4e80
- SHA1 e0593b7430aed5a14ad9d7dc1ca33150ad51676b
- SHA512 b90d40bcd8e88de8c827ccf3ed41f5d2cc8ec2807f67974b80c3dac421637b1cc50368aacc07ae13472a0a3667b1261c18691ab6b9e9d541d8b0936bd043f047
- SSDEEP 12288:xPSib0Mg3K7UpIgRaf3IJ9hgn4cUR+5Cgv:7b0Mg3K7UpIgRaPM9STCgv
- TLSH T1B0E40803ADDB625EC686B3617705CDB77B19E36FC346312B84EDD02B654B5B283AC422
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\el.pak
- Size 1.2MB
- SHA256 9a9db32904381a6eda169f56099313a494dae63f2795678449c4ad87cd3a69fb
- MD5 ef455541e4d9053f54adf3e681a717fa
- SHA1 bf295e6aa17fc75e8129c5b44ad84072369694f7
- SHA512 5df3df197e5fdce91f2733a1a7b5ce34cc3831f24ee850bc3f991595629472f7e76d9b32620521dcf4a0b0d614ca359f20825c4703217857bb5e7945198cc7be
- SSDEEP 24576:5n5RAHWFbrl05Yp9Ck2tCZu/xJXDsSeEEmKo+Jm7QJ2oSCgd0kBHciyjUHvQdQVS:5n7AHWFbrl05Yp9Ck2tCZu/xJXDsSeEA
- TLSH T1B445CFEFB4582DED8046950785D8B07C2BC66D6CE749CBD86229CB60BDFC0719A22D1F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\en-GB.pak
- Size 543KB
- SHA256 7bbcf19623b0a34524d75a3211d305d6b01150b3ecf2bff3b140189a13c29eb4
- MD5 dc27da1c7a8e6128f10f767a93d9f59e
- SHA1 8c674b0e92784635fe1df1f9f567565da8c5f3d7
- SHA512 cd67c53203e7f0ea10182310f9a4ad76de7e9c1ba3e3fc8c5f6314a475912e0ccc827c39ae946d158d2ef92ee92287dddf9953e29e8bab51f0596dbc9b066dbb
- SSDEEP 6144:QH/CgP2QAaWOgHShxh+EpiFOFJeQMP9qQTpofaYH5WjoT0DdBckRPZ:Qf1DgShxhDzMgQTpMuDh
- TLSH T101C43C1FF744126A059312A2BB0AA562FF23D07CB35112667CBD811C33B6B6683777E6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\en-US.pak
- Size 549KB
- SHA256 446a0f711467b162cced38128932f712e4a53fe344a165110196c366fd3d87ea
- MD5 0555742b1e5f91449a199b9c42c1eb3e
- SHA1 2f7ecfa75faca014c06e435fc6d449072d47ac41
- SHA512 6d5f20741c97933d7c2d7011b696632e056db182941483e6c5675ecaf2b18132abbc0397b2c703e79a878838db806766aab69b2c90f6fd1dce377623d5501af6
- SSDEEP 6144:LOvSsWLA2zb+H4HfYOMg/jScMP9sQqblfaYQhp1B1OjRng98//Bwf:MAxJHfdZM6Qqbg0jBwf
- TLSH T1C7C44D1FF744112A05A352A2BF0995A2FF32D06CA35112563CBD812C33B6B6693B77F6
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\es-419.pak
- Size 662KB
- SHA256 337a0ef8be48fcf7d120026d8dd9970737604ad177df1709fefa5cca79c70079
- MD5 8cdd77bd74d129d8de17a80a7f55ace6
- SHA1 a5dd1efa4b17c5bb020463f90ff13032d0564115
- SHA512 361834022eca29ef51dc324c71a265c5021e58c18191d9e3e3956a8a5d2d758d1ec7789129d329972f4af57c20f47017e6bbf5fa0c217836ca50d3cde50ed883
- SSDEEP 6144:nsTn4Nem+KiHkr6YvFQGo5cQ3uJwH5AoljsBFK:sDUeFWYiIuJwAlzK
- TLSH T1DEE40922BAC81F5310E3A348B743D757E8D89145B408D29BE8EB976522CCF8CD967ED1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\es.pak
- Size 659KB
- SHA256 b32a3073e0e749b8b1f0f3e082343a8ca192cf3b7244847387526a5cd8beef7f
- MD5 b4e50b9a3db4f42081565b1d80c47092
- SHA1 e92d363f1cfa6215694fc66e406db3bfa2bececd
- SHA512 c910c8d306d133248d75a9f31888257bae0671c53fa24e4ab7443ce1f6dae3e150f20c65efc4cfdb0eb1db2cf66b504858d3cdf973a636a4aa6c5963d5681647
- SSDEEP 6144:bQ10KCd6qHnzvnx18hWbqgWsM+JcbNE/m18jFNLOJzMv+24/ZV6PZC9/:cTCBv6WbQ5NE+18jLCJwvZwZBN
- TLSH T1FFE4F726AACC0F6310E39349B743D753E8D89545B508D25BE8EB876622CCF8CC967ED1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\et.pak
- Size 602KB
- SHA256 740a4632aa00dbc07251c10cdef1480739069a6456fa9a642eef387fba935e09
- MD5 34d0355cf1eb4d0f6a1945bbdd8854bd
- SHA1 f3060777a364e2c3eaeb3792eaece19cfd57adf7
- SHA512 f90ada80ab082f442239cbcd345bdbdc127f052986e12b1333bf2c1fd2731d37aaf6de494e9f0494cbe23f2a36e5a44363d74de2816d6eb9f89d7ffc5a02ffa9
- SSDEEP 6144:GyBhI2yibCX9I3rOf91D5+OjFnyL0GnFacklk1s9bemPOTQysNg0davqloIC0Lqa:GyFuX9I3rO/RjF0nFac05NeqlDCwqEr
- TLSH T1A5D44D42A27D771B242412F9E737E923DC9EE3D4B4000D9668974A1971EEFCC38B6B64
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\fa.pak
- Size 996KB
- SHA256 7d13dfa4bc6ea7ae996f0696eb328de26b35e1ec7e606fb0c4f8192d4bfcbaec
- MD5 531764f5de01173765ba9493faa616a0
- SHA1 955fcd775d11b6031b5a61e65320f125cdfaf315
- SHA512 291e87cd702bf8b0e8e47a1eccfa1cd0db69a1d0c679ce984cf0014df4651e8c9a41a52c5cd86bebfcc7e79e89e23f72994ef3cf6a30b51b8d35944c65efa018
- SSDEEP 24576:/87m8u313uyqoz+so2+RmXnloTUoXtCfGk62Yhk826Bike8MX41OElUKgkI02mH9:6
- TLSH T1BE25B1957AAC9AB15747CA0341E33834C773AF12D349FE40ACA1076609A5B139F5FA3B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\fi.pak
- Size 612KB
- SHA256 53cca3552a8bf4ccc516103cdf929b5f10ba1859ccebe644bb080082faff6878
- MD5 8edc200d5b49279006932291ee921228
- SHA1 cec52d84cdf97d19afa566488219aa3aeda0c361
- SHA512 4f6b2269d0a7b921518d851755ca048a0d77338571e265b369e4a13d5f25cd7a1f93ba24d351c1cc9e2271436976b96d2cca56ee93a9a1ddf7358596d09f8fd8
- SSDEEP 6144:Vcf9MSQWOU3RN19cb8S7FYmS0rZpAgL0WsTCaeOEmHHuaQQLMcpVH7IEprWa5L76:8ZN3319ivhZRagcpVbIEprWaJQ+G
- TLSH T192D45D915215C22237C8D29E79B0903EF5E5E3DC8C284D96E843C7D849EE9C87DB276E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\fil.pak
- Size 695KB
- SHA256 3503fbfa400b23a3019005a2f1d7a31d623b056889a66abcaeb1558ad4316924
- MD5 a66e55153f63571bf1544a6ac6d28a9a
- SHA1 82d250b56122d39ca073393a04b282fcffb2a4b9
- SHA512 0f52dee2635ad29a975e1fc211215c7846c3e4bbf20a08b28628c6c7837b5dc8af7bed5a645bb5e60735441b2eddea9d1fab77fd2b275c846edbe39c88b46616
- SSDEEP 6144:H06UlTXBaE7/y+DQGCOgwlP6t1ihDVzrCcVNvt/LaoVUA1KUO:DUlTjHvU
- TLSH T1DBE4C616B7401748DBC352E52260682F6AE560B83F81786E0FFF269B7BE7CD5D270192
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\fr.pak
- Size 716KB
- SHA256 a8db41476a1103bc5bfb617b150c6b6e2ca1eb24f534872c9c15e353649cd0bc
- MD5 8aa09f7b489b39f0a68ab0cf63dfa023
- SHA1 3998a3f55fb40c835eb5f77813dbb43ab4aaea36
- SHA512 ac69e432135100d2d07fc91215b62a7af7add36a3bb8e0c90e84fd312227fe8886751e6d8c08135c1cb0e80ef9f7bafea387af69f9626a98b86f96f30e58b811
- SSDEEP 12288:k9tQ9uKVTZLlIb94S3bvZwi3x6QuargVam8VBezB7YKxQkZuYnYc8jw2wyxFD1Xl:k9Wov9IV+T7yu
- TLSH T1FEF4E55FBAC435CB19C60277FB12D6A3DD348248F215E340D89F4296129A8ECD39F6E9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\gu.pak
- Size 1.4MB
- SHA256 947324c6aada6255df0c702114796436215f8012634a58b065b7ff3fc92162bd
- MD5 f6332dd74128db0d2580ea5aae66a011
- SHA1 74352949214e664692a3fe1d906336c268587108
- SHA512 cb8fbdc660fda5400b71415eee95ce6c46ea51b60f683cede2bab606fa4f27ddf08b696e2565e9c83ebd080fc524ab73a516ed3ee9e02618bc0fe7442873e311
- SSDEEP 3072:uCJIIeylcq4n4KEA0s21/QahNCLT0PPjAwREJKVMjNiT7llj63rAulfcSi5NnWsW:uCJFwnB21bS0CnsGEYsXCl1DsXw
- TLSH T1CC6507D0D3B9F07119DA9F7E819E512086695343D67E230051CEEE898801DDF3EEEA9B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\he.pak
- Size 871KB
- SHA256 d06fb5dc66cc104503a861d2e4e6ef53e9172549c862aadeddcc2b5bb856f25c
- MD5 a96ff98519b7b058bbbebddb3c8b9a47
- SHA1 cd0b91902bf7c3da9655469050c4e9f1b61a6e0a
- SHA512 82cbb1e1b90ba53038886fb96a62ebc1ebe7a48985c5e1a27f1cdfbe4979f0e806f23b9a6f9534038163bcf6f8f12f36756925eedcba29ff71daca733c5ae4dd
- SSDEEP 12288:utWHv9FhJoliptjTmEM3r1y0DBAl1Wq+/8Xx4uNYA6XXTieQCaj2iv36ueAs5AOK:utQ6I
- TLSH T1481599C4B2E552255131AAC39FA4FA286FF3CAB53CA27512CB14526CAC774F0BE530B5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\hi.pak
- Size 1.5MB
- SHA256 a775f5724ccbe9bdfeefc448b42e3b48402f81404d94dea4252bfb765a314b96
- MD5 e7485b02d720f389e8c6d2f7367b758e
- SHA1 8e87a60ca6fd6ac4c54050687260c33f778fe04a
- SHA512 6241ba883926f9029b6eea6e520645fb274b8b40de9f7801ef8b65002e04fa8251b8f891772d016ab1804c45f81a32e189c746f33e155a0afbc2ea8368d44250
- SSDEEP 3072:5ujmZ+6BzV/+Efm/Y8e81ueYTbnV/B90ZV1d3uGlqvLWYJEdtDVesn1s4f4/BtRM:sc+w2wsec3ObPOT2LeddeO
- TLSH T1BF65050CEBBEF3B55DEC3C8A32890D37D59D3674A3E5521348D5B3DB9844CB8146A2A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\hr.pak
- Size 671KB
- SHA256 84c6bd6ce5bcd81a89b0908f22576725128e27688f6578d13d8b2f0e7fa6335f
- MD5 04b05ab84079cb5b1dd625aba3a1dbd6
- SHA1 87d7e615b3e7d7f19dd6f044daf3d26af352365b
- SHA512 5016459008c9554a8eebb48daf41e0c9909cab0ed34eee124eb26a4426857e3976db881cb8fdebd8a2cff69ff7dd16f3cefb9a1a1a74816397e263334a0765fb
- SSDEEP 6144:gb/RWr8s5X4+aqyHADul6KynubBvNEMzDOwlf6PlJ:k/R25X4FjHYoesHOOkJ
- TLSH T173E42B7DBEF2570A0897F246EFAA43447DBE08DCE56597B7684F522E0003F4C6AB8149
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\hu.pak
- Size 717KB
- SHA256 cd1026c6596610617d8a313b899e9d2e2514d0cd1fbf97790f2c450309ede792
- MD5 64422a57354aa394d94b562ea77dc059
- SHA1 c4957f8c74c5c51975fda21505ea79e0e427fe6f
- SHA512 8ec3648e6a8869bd47691afa131cfa482b84902be498dffe2898b34665af6a2d62a425147b2f6c3df0d26a4151c395fdd1ca4204f51dacaf48e3bf68f484a84e
- SSDEEP 6144:gj0Q/ZLS5SH3dFTpr4HR8XlH2DQa4FA4jt+u8U5iT78gZ49JxCYhU7rvP5wsmk7l:rQ/hS5SH39NAdU5i387g8Ucu
- TLSH T1C7F44CB793B69459BC6C178778643F15592E881BAB3B31FB2883846D34A178D0D83CDE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\id.pak
- Size 592KB
- SHA256 4de71f7c766db79412dcc1f5521c5f3e678cf343327cc31b0fc28472102e0247
- MD5 3a442af03205c4675664ab3027877f9c
- SHA1 f3053d4a9538721c2441a8f53cecc7602d378446
- SHA512 d0efd8b9658a48d9889b94ffef00a34dd300c9e29603c1aa79e18d9abf4dcc80ea386ef616e7605fdb7cbd4a97fa0da0716d42cfc5d8a176b87d7fce689c635d
- SSDEEP 6144:7Q7CuhxETiSge+Yr/IrjpS9fJpfffXoTFjlFNzmBF/tu6KIN6aUWOBw9m/iTv8MU:k7X2Vp+YcrjIDATFjlF1mn/v6ah4F
- TLSH T1CAD4D7632EC9310C494843D5F2CEA91E7CCE233BAF05B76E8E348F7055A67686716B94
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\it.pak
- Size 648KB
- SHA256 ac12cbbdeeea05f0cf90cc57df1f6ef299444b1f499157eef8aa089f73da25f9
- MD5 1bac1301f33b94ed9d775fc795977af0
- SHA1 47e15676ead4124ef4afa85e84e0cf462b088b94
- SHA512 2304d45b2a1f7e0cbf57a75ecec6b2133ccb87c29d09ac7dcbffe93b5b54167efd7f5c4c7a7dd40c8f8a8a5a54f17d0e21f4da109b80a5938a50a0d0889ff186
- SSDEEP 6144:8xS4w0QQTCOFshlmik+b52NZzV62MxSfqBCfYs61Ztq/UhOKa1DTs/Tcr/+qpzSv:8jBcZKnO8iw1Qhii/GlwIq
- TLSH T164E41B3AA5DA252519976359E611F085FB6AFCCCFA41721CC99B031C22CFE80F1ADB47
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\ja.pak
- Size 791KB
- SHA256 c737584f4b525c4d17cc2a79f0318640a7a666c43ef7aa24753551d1b75d7d7f
- MD5 9eb040410cb10d3eb82cf34685006ad8
- SHA1 a54d5498bb6c31aae13492c534cc670041143f3c
- SHA512 a70a9851f0b7e1caf551e87f7452960bf29988d65f14124ef474e342d8dd6e642420d68595a61e02437e252ddf6438d453ce00cebbb1a24ce8264375a0ae8bb8
- SSDEEP 6144:EjSD0KT2Y+y+XtQUXhcMa9ZdQ2pm/mJkHbZtyNBGIsVW:omLRQqU29ZdQ2U/Mk9YNBGe
- TLSH T15505307CE3C969369D6153A22C0E36E17506AC9BFCA2363A443DC074BD70BCEE515AB4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\kn.pak
- Size 1.6MB
- SHA256 3eb9b3dda74b5e21abf7d7726cc2e682afd87141ee30a488e288695d48a5352e
- MD5 99cee56504cfd771817eaf8b1cf93a1c
- SHA1 ef725cc4681f97eb3bcdea5ee0d6aa2456e1ec12
- SHA512 5b509ed1355b9c56f5de1153a3a7958f0ac001ad120a4121e096cbec7b588f0901310cc44bf6e7a59f3d7469d1e831ab2e69dd366003278fab46775fb31dfecd
- SSDEEP 12288:fQ1VgdKLz7h1HSKzoEgc8+FSC7EtPMm4vkyr2c:fQ3kDMv
- TLSH T1AE75CD18ADBA7D301BD5006B24EC643ECFF16BE29CA907D2F4DDD7802C66C6A90865DD
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\ko.pak
- Size 671KB
- SHA256 bcc64be2004522a68a12dcfb6efb45f030d0badfe048220d2830b188e7f4135d
- MD5 281aaa146d570ed1251fc0b427693fd7
- SHA1 99d8cd5e93d16382763db3f5bf4f02befacd9ede
- SHA512 6a44e86f8efbd5af75e38b31154eecd08e6dd3765955407952108e5148453e91c99adfe3f6d33059a27a156e8c54efd22d01ac1ebfc1254af381691069483319
- SSDEEP 12288:kOZtQ/nguCyekcM1WNiPszcbifYj4ZGRyzDoIy1KsDRgCxrIJ/xESJGRG1KLhw1b:kkcfnIdOO3BLO2
- TLSH T14DE4B5F23CDB63CD1193CD82AAF4FA198382D976F7530294ED44CE449E145D7488AABE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\lt.pak
- Size 729KB
- SHA256 a7eae3ba06229763b85b29eb64e011b992679952165bb7239a9ece1d441de4ab
- MD5 70f7ccb1c8ac9b559454b647a225c5d5
- SHA1 0102c0bd5fd3d242d27d8cb2248fb4b95ae0e6ef
- SHA512 28b6b52a57e14a0cc3c4ec9bc3de438dd52b0ddc5285f5bc1aebb852a4f641ae89de65f6db05defa009d576d8758a8bcf9071f8df097fd7da8ee04b031498f82
- SSDEEP 12288:1lsbT945Mq6LjAnlhIKcGbHH7xt2tJC6SBA:XsbQMSc2b9tAJx
- TLSH T19CF42C0069E3AEFB9A4467C981A4CA78DEFD50009767BC61EC69C78BC43BF4525A0F35
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\lv.pak
- Size 727KB
- SHA256 8a4c31840217419f608b15eca1490bb4e83c5a896556a045f95af7f1390f5f8a
- MD5 2195b89b308fc09f5c295ec035a2f060
- SHA1 db5000d841d6dccac04507d36833d432e10cb179
- SHA512 ff1a7b6f3cb6ccef6a111097db3234099ffc42daf0348deef61699ecdfbdae20f9929f2cf1ac5d3317bf9c7d6b21bb8ae0a55abe5c651d1d8653ee985eb84ebf
- SSDEEP 12288:fy9qrPmkFAWUJmyFlFbrJAGcZTSQor+os:yqrOkFAWUJmyFlFHJAGc9oaos
- TLSH T1D3F43A959EC68FA94E918DCA7336D133A8CCD740FE07E112ED798B3A510F52422B5EE1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\ml.pak
- Size 1.6MB
- SHA256 434221a29e71a6dfc6c14a5843713df51b2afe8cc3114cb9fedfbfdfc590ce4d
- MD5 76f2d86483f579721d2ae144f73d1278
- SHA1 68301264602f8839f73133345b124b74bfc7c58d
- SHA512 41085ab6988ad2f396f5649dd06340f9bc95e0b33f7cb0fac2104b777df0258d5eead93ffa085fdf7480141451ef1322f39f882ad88301c6b8afcc7be74b34f0
- SSDEEP 24576:cPps/oZAuuxyYl+9y9XBkx/9tNnkKfijHeBRJzXcF+v2AiyZ3laJRvo3G:cPm
- TLSH T1FB759D5BA036CD3B0FD102167B4E2FABCD5B9FD140AF668B5869B2628C59F7D0C99031
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\mr.pak
- Size 1.3MB
- SHA256 ae12ff8ac009a4991d71363ff442abb3beaef772d08e72f4ccd685403a02f332
- MD5 c7d7aa69f9f911f1a803cbb4fade74f9
- SHA1 9582a55dbe4602f3b9d6c6903c3d52e1cd89f019
- SHA512 eaa68342ab50aedbf5ea6064771a5c37ab88cd8327c636a186f4e7376544346061cb9b707a8485041ace702e8575cbd4b5a5756609c04a9f685b3fc8779fcc97
- SSDEEP 6144:Rf/inO5K1KgjpiWUZyS0pB+MPbiMmRsTNW:RX1K15Z+MPbiMmmTNW
- TLSH T10665D14DF7BAF3685DACBC8E36540D3BD8FD21B1C3E9925648E1B3E74884CB401596A2
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\ms.pak
- Size 624KB
- SHA256 77912adf05407adf3dfd2b0eba269b1cb99d980dd0a16fae74dabea3a584a869
- MD5 900637a3441afbc9f7e43be31a30eefc
- SHA1 7d85e8c25f5ec9b8fca2856e0a0b964c6bd3ee24
- SHA512 d84f1d81d4de347b80e1453b90072ee55408f1adba5b506219c615eed8d89fc107bd73e444e401ad52c6c9e729167e74d9235c0284ce3acddc2eb493cee49ed7
- SSDEEP 6144:f7incrjAUqzueh8XsRfQZvAEyu9S1cW9t+Huqwp+k8LNkwnwAFDqlOt3Vcv:fWcTqzJhCsG9yNmHuqwpbbRlOW
- TLSH T17DD4B5569EDE3118085843D9D2DEA91B7CDD3332B705AF2B4DB08FB0026E7A53316B99
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\nb.pak
- Size 598KB
- SHA256 81b5a935f83a49ef4faf7132876e500a6cd49909c1d2b45d4bf1336769874b86
- MD5 8eb34d85aa5ff549ce7f68cf2e1bd089
- SHA1 59be2c175a0014f4cc862139c326b5fb47355c51
- SHA512 4a1139d2221689a9f3ae6a795b619408e6843dc2cea47fab1b0691a939ab3a1f9829a797c80ad497498fc2d68251da6212333bf12568cc9e0f21cc828b5fc1ad
- SSDEEP 12288:ocZlVO7SfNQlsOU/Op7f3PfZLnkGJI5Br4fw49au:JVIMODpLnkGa5B0HR
- TLSH T1F5D4F883EE46B72EF6A443A4F518855B9B7D942CCE98199B54D8C23E0CC7EF052BE1C1
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\nl.pak
- Size 623KB
- SHA256 afc9e6696a40b0318ba96e786fe0b286c3ea9a2d548479c1fa43d96b1c137c62
- MD5 c2628ff51aa4ee3b91a9df0f6e2d1958
- SHA1 a20a4a319031d1f55a9c8afa353a8a5817beb9f4
- SHA512 283e0442125437f3339b14aa1e0af3c70c669b74f3e15de2e4cbd4a885ae779a178f2860964c461887b9d9b65a014472969e244dd6f733a6ff75842fe3311646
- SSDEEP 12288:cYyOh9NzgqlbJWQusiURdqgwIzf7FNy65gqHgGSDTF:cEblbJWQusiUeIzf73y6KqHgGiR
- TLSH T1AFD4F907AC4E253E59C0A349FA098FBBBF2ED22CC26CE67D94DDD1341443F6891AD589
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\pl.pak
- Size 696KB
- SHA256 f92f6bff33a975e189b78a4cf0e153e85743dda432347745ebf8f1b4ff51a99b
- MD5 833780b94215f9ce32c35724c8cd433a
- SHA1 5c6ae41a85dd10d48480f96e9a49d047a2786071
- SHA512 e428f19759b6e88e06ec7913197e7c6f8849b280993ccf1ad0ce61d92d92415ae5819f88e8c0b352110034a2cef89d9c9936dcd52d89f26c88811e8de015e8f8
- SSDEEP 12288:ma43m2VnK/owZwfQfuzSJabZpbn6fPPCUdUe3m/UevM/mE1QhrBajMol5/rT:FeHVc7K64vMH1QhUv
- TLSH T1C9E45C0E56E58A4E8CA008E6F6E70B7CACDDC808F108D35FE46F4526719B19EC9BE5D4
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\pt-BR.pak
- Size 652KB
- SHA256 d1aba0dbde99231d3096b7ef9ec62ed017c72804257de62ffb649d45cf234f9d
- MD5 c4113071b2f5f681f5f67da835bc6a94
- SHA1 e79b1944deb0f5de2841821414e8c3b522493a88
- SHA512 5d32321684ed196730a64d6efbc4072abeb4f866bb38ff7284fab01e4de9ebcf4a65a4fe58be6fbf3687671ee566c2f63d2eb64d861d6d6f60518864dfd6e91c
- SSDEEP 6144:kzerJK4F2WbuNBXBLEpPQHEyWAEIIr9dqsRUUf8n:kCr1F2W4bERUsRDfc
- TLSH T170E41C2A6ECA136605229350B70EEB47E5890745FE06DA87DCFF4F05A3CDE40D933AA5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\pt-PT.pak
- Size 656KB
- SHA256 1326efcde830a8b29541c98fb51e3b5e5428d2a59e1b21a11a677317d08b2bbd
- MD5 1dd9b726938cf1c514fae6e7f1857243
- SHA1 210e2f56820cc5800498c76d2aedfc3c6c16e5f8
- SHA512 ae7b7bef5ce73aa330ea3baa5e10cc73102f3e871ca4d7013b72f7c36a0876b17f91ec7b89a8f8ceef2dc222f5b3ce12f46cae410516ec351331e5d60cc7a2ce
- SSDEEP 6144:Oc2BKdzn43xugTieJVJJxhuI9AyN55frKDn7t2leSR9J:d0Kz4/EDn7MeSRT
- TLSH T1E9E429296EDA132605135341B70ADB03FAC85655F80ACB87C9EF0B4272CDF94D6B7B62
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\ro.pak
- Size 681KB
- SHA256 7fd5b85509f67394eee48b07339c9a3a77fb1fb99b6204bae3209f9f0ffab3b1
- MD5 619c48fd2e1320cf840dfd9db7595680
- SHA1 9e97815bc223d7805f335adb209504857a7ceb1c
- SHA512 62abc32152c161375a9986dd350940eb4efdb5c8b246c25f0995b03c4af446acbbb4ecf8e7b94bcb4854a46e0740fd4c260b12836a41e123686b96014f2309b4
- SSDEEP 12288:H/INhX6pzClnInPBiqTL7uIQH5n9le/zf:H/ITXJ59la
- TLSH T102E42C23A1C41A972D5152A2F73A24D3E88E105DF641E2CDA4EEC97910CDDDBC52EECB
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\ru.pak
- Size 1.1MB
- SHA256 23166d431d70048e248e3ff47732642cb1ab73f9516384e33ef3c1979574f2ff
- MD5 68dba8cdda096e46a95ad54a881a2511
- SHA1 34f59329db3af2fd40c8832e9c512cb6ae5de32d
- SHA512 ee2fb972e357a3383b468220b7697d1af6d42d80e5b524b0589f74b69aa08eda146529538cd5fcc8c10e93dc9360bf6f57abbeef217b901fc8e7e7a140d1d1b8
- SSDEEP 12288:znSNeJ1fQeRo4YeWspkzJ9sF+oa+ULZHo6HzW/oqSvgsGCZkE0dR3Q8NiGjhnYH+:znSNklFd8oX/
- TLSH T19E358860669E64DE1101F01BDD08BE0D3CEB45FE3FAAA35219A42D7F35F2024C67E65A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\sk.pak
- Size 708KB
- SHA256 91037f2ecb636857b92a2729b7c116d8dd98082b068e4f78b0fdab06f27d2eb7
- MD5 4515aa1557ede9054727f1903a32aea1
- SHA1 2a0b1bbf8ebba75bf03b6ab0c973987a82c87c09
- SHA512 f05107b6bde25094197d4cca47847b9893eef96de57e80e352517fc848da0680eabf0a85b801570b287ddafa7851fd79a8f15672ada3e863ac2a3deb1d79d242
- SSDEEP 12288:OKeYc+T27pkzA8+mi+xdnaOY7VZ8pTjsxt9wF:Og0pkV+mYL/taF
- TLSH T1D1F45D3FDFE7181E8E8D0108FFAA7110FD6E8650864EB4A6944F364714E26EDCAB4E54
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\sl.pak
- Size 678KB
- SHA256 321ab341e3225dddcac858448367d43677c20e739b2ccab52f8c86aa0727d868
- MD5 c8b796082609ce19f54b51e159514e93
- SHA1 5d9c961e0feb6b2c96a7ae07ef24402e714a743d
- SHA512 188438e92ae501ff767dc7b582ec1c5ec07e896db8417a4cd19e3933cfa97b1f2b5fb1a68a165b5057f0ce8b837ecf81bd76e8da0d5ce36d09d2952716e68d21
- SSDEEP 12288:eIyYXpvc7VcB2+RVWobUWH2nWOq9pwi/fzB7aql/ad:eIyYa7+WobnH2ni/fzB7W
- TLSH T146E42B397EA74E0F0C9AA2CEFEA606007FDC044CD256E6A1EC4F33795415A3827BD595
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\sr.pak
- Size 1.0MB
- SHA256 7b337dcad390a9f08c3bd1d27235898e588827fa8da8808f4bc7012011578ef0
- MD5 43e781b3ed61cf95fa67ae5afadfd6e7
- SHA1 e9f11f12488172918495d841d4acdedc0834ec9a
- SHA512 cf458a74cbbbca27e0ccfa9242dd863a52cf3a0fd5e84e610f78b9b18ff7c921908fe98d824a3211b4061a63bcd0494b857e4aa8d2f3f74ea03af54cfc478190
- SSDEEP 12288:C1+VkxNRL58I882S0dRsCt7i4O5JM9kpCQhW6CgxmIF379juz3/k/Q:ufXqICV3
- TLSH T1793556B19B9E64DB0501F41BD808BE493DAF41FE3FAB975211601DBD34E10B847BA29E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\sv.pak
- Size 605KB
- SHA256 f10b4db7184a14f28bfdad82597d2d43b4ec859ab6eab59a5c3891aa6070f3ed
- MD5 d1018c51fdea57efa44f5ae01f749f3b
- SHA1 f17ff0e7a902c7ac735ca4f51c4206ab7a21fc7e
- SHA512 6602ab45ea2c3ea76127de42788640516bd0532e7154673dc9da76c2845e1636a7b77658aa52fb7b6fdafdc1e55719138f4a483d3c5830677c94ac6fbaca4e63
- SSDEEP 6144:NlqVqEHIL7xbjCAq0C9Q95YVgyLIuxRxhVbFl14hLOVRFcz5RtGm1eqMlmFMCOSG:NlZL7MAqMT8xj4iYF6b
- TLSH T1D1D42C438A20F526FAB2530DB608115F0AEDE15CE7F2954EB8D9883DAD8BD5805FF247
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\sw.pak
- Size 640KB
- SHA256 726ba26363103920712874418cbfc23ce899c46ca8a6dc3ec9da0bf48355622b
- MD5 289bec23992e6a40cdf54997ec0a4ca2
- SHA1 dfdf31bc91d739a630ea7ea3cf11d30067e2509b
- SHA512 77b35d56f847267df760359a5a3a803029658e109d7c579b639c7414171f78d1030797da693a63f639d72f5e914fbb87be0990272d46cce285f99ad55749c275
- SSDEEP 12288:3pyq/5q27zyxGB2qHOCdYGIGw5dmedqNGjRdponi91GKL3hjinSLeRtFa/hwzliw:ZvxxVFPiZ3a
- TLSH T1E5D4D5629C71D0191233618603DDEF732BDCED5C692B2DA35A46BF0F218F48C56ABE49
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\ta.pak
- Size 1.6MB
- SHA256 fd8fe5c21a10e6542599e9148c8a30557c4d437b9606d6b29b685d474d89534d
- MD5 1098c8ffa99cb7a8b40887167bca0cb2
- SHA1 adb1d4afb72136dca61ff12a0b467b73ca76cf42
- SHA512 6cef56e1fea90cd0dd5c2dcc5e30fbd6a656dfb29327c63f48f1555c423e7f0d74ff68997d29cf9b86473058a5c4d93455073b53d7ad60923f01a351efdaebd7
- SSDEEP 3072:3cc1JjhiTktBIvRGPET5qstR9ztm1vYpiMy3M:3DJjhMktavRGPEtqstR9ztm1vYpiMy8
- TLSH T15D750CCE923EEE890F93288F0319536912986155C07BE3A67C766E1198ECC5DDF3427E
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\te.pak
- Size 1.5MB
- SHA256 28b85fa550df913e970fac8a599ec4963b1466e3b610350924518de107e41602
- MD5 9639064c77e0ed97d5baf8e461078ccc
- SHA1 2deb7d6b7cec1a259cffc4a598e9cefd0289639a
- SHA512 574e0179c7d0d395bf1ff42b494a0f18ce8c96a52d29b8bc9f016243c6f15fef120abd314c123ff69eab4db824047c4d65ac21d5b65cec2860a9a9090a5c92e5
- SSDEEP 12288:Ui8g87MZKNuywG6sSF602/NNgIC8ymoRRT5dbJy52CM1WOB63N3p1Fn1ghgaC/lS:CgMp1c3X
- TLSH T1007593023A6AD310DAE70273752CF66C49781B8161D6732C1EAFA357EB87D7E0843676
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\th.pak
- Size 1.3MB
- SHA256 cfd9e6651e9335fbc0483aed1098112234e973303bf7101d88e0518d3fb16ffe
- MD5 a4226d17ebdc8991208931eb787ee959
- SHA1 0284fc35f2bf7b0681b97c8ed8e2c076385db058
- SHA512 41dfadb2104a5ae472008cef41959495b988fcce3387fee3024c17a87ef203b7810b515d00e687f284ce869459c86a1231643f994791aa3221a9053c036d8401
- SSDEEP 12288:7rjnxQHhN9LyZYAozYL77SsGo6h5skJUseOPsO5eXwpbDFDS6Sud2mKHl7jjF12h:7rjxK5sm
- TLSH T18D554BB37247DDD479441B5B262A7789672DAE693F73F8E000C9215A73F071A8422EE3
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\tr.pak
- Size 651KB
- SHA256 4b047663f169169f3ccd33923782ae33348c37e5107314d3324f1850f3c5fb42
- MD5 e5c069a7c9cf8d86e47e41f77bca3135
- SHA1 e1d539023cf95e05d14578da585492057b5e59c9
- SHA512 4846fbddaa3695a7db06d3936bcbca130ebb3144975b6e3a7a5a1616674c50230e2e6df11b3093203ea460c60c018702b5eb04d208a24d002fad9acbfb401e31
- SSDEEP 12288:WhsOCAlzRw0007PIPHz6sgwhIfZFxAHON9X1i4S:WHCUztcUN9w4S
- TLSH T1A6E4F98178EF282CCBB9278BD6E94666F89F0766B331F4469B168636774535303E360C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\uk.pak
- Size 1.1MB
- SHA256 3ebafedd5f6005f56a2d7a500e59bcb435e58a6013c7e075b241a91ab1c605ed
- MD5 013949d7315e32a9b3ae65c375b09093
- SHA1 c9128f37bbcded91374a8b9689b6650ab675c814
- SHA512 72a5dc7c65565df2201e0bf0db364ef5b96fc080f8b389f9613b9273a777fb7197c3131f567b2d90e4567ed8d9ff8998bfad902067ab24c21d20acc855e0f2de
- SSDEEP 12288:e+9OUH+QKjb3IrkkkA5vyjRrsSr+UinRYX2ot81BUf8t1oNnHUA6QHBz8JP5yP+Q:a4E8I
- TLSH T1D745A9A19A9D58EF0105F05BE94C7A0D7CA741FE7FA6471625A43DBF38F20248A3C35A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\ur.pak
- Size 981KB
- SHA256 51c318f3df2673cb34d0df9235021dd1794073cddf59d14433620da1141ec650
- MD5 c21c12157b4a5c275b47a93015f9369e
- SHA1 97dcf69e26f0c4c03979e9f29f63f1c682e26761
- SHA512 144210b5ad7fbfcf0c395bc8b895ab60d29061ef3f8ba0cf4a2e8cec7b08d4d98fecadee0385fa8056c130fd9441fa4f8e62b305c55ce7caab1214a3b13df6ab
- SSDEEP 12288:KDGIilt5oiu8PC3zqtdQ+BR7yArubcvqmEhdGuOvedQYrGuYjwadcJKwUvuRco/d:2JFFGWr
- TLSH T16A2500D2E6B896B35A21D92780D33C34CB735F13D34AF281E96246C54E9A0135F6DE3A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\vi.pak
- Size 774KB
- SHA256 45c351251b938ea6f46305f2c324e8144bdf7500e08d430f8280b7db9e2ce52d
- MD5 68daa544930d57098084768941ed87c6
- SHA1 dc49022a0befb220230791b62f17527568f5858e
- SHA512 2755b83dea7437b9bc223b00dbb7fba41e2423378f3f39c7e7fcce2cf54e049e2e18986969fcb9f2b722a37a2755b772cdfd8be9d4c2c32ee19c3c068c6f114d
- SSDEEP 24576:xSTOQ+c0JVG04Fvo/0E+tsjlIsicufpq1ljA:xSTG+siVk1ljA
- TLSH T110F4955216E0302680AC553EC6CE540D6FCAE42FF7C1CFE56FE4297876221A45F25BAE
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\zh-CN.pak
- Size 554KB
- SHA256 78837eb8a17d34e371ed72b7c7d9262876592f409fc66b293461c5468386834c
- MD5 adaa86862bf0f0bdb8510d55b2f9b3a5
- SHA1 63e6b0fc331ef555510c65eceb894dcf7d4238c7
- SHA512 1690b4c373ffe755816be408db907e86a8bf62936cc63d2013fe418d816e137a383de5142f2989b56f397fad5976231f8a120a8cec7b5edecd02c28db6564183
- SSDEEP 12288:I9YLILBY4ps+zQnzpUJkQQVzcUZYfDMzsD/:g++zQnzpUJJQdcUZYfDMz4/
- TLSH T19EC48CA820F9BDEC044650E13729613D7C40B20BF667AF366ED248DD2AA6F9D0757E07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\locales\zh-TW.pak
- Size 547KB
- SHA256 fb77ff841f652f0ac8be02ce625559ae516c63081a45bde96f9277f241172eca
- MD5 404b8be63620b2694d38535ae2afc7c6
- SHA1 92f403aeeebdf1ba82c2ab8770f480c1a00e9780
- SHA512 824ebc44e59b8738cba9e2ef176a360fdb9c8ee76d62460490368b3c62d829acb8dc695854c3fa018b577839d94bfee36ede4d302080f87cdbe09d3ccb748008
- SSDEEP 6144:tAMdshi4b0PYIoBEagTuxVJm4DIa2sluXdAr58qo2HZD5SWWX2jXUm9Tu:i8O70wI5u84UNdAr59o2HnjjA
- TLSH T1BFC47DB618FBDBEF0901F484B7CD523ABC8B342DDD773636FC851C942E69A540AA2185
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\resources.pak
- Size 6.5MB
- SHA256 096373b7b5a9535b5ba60a37883d1d2010d28dafd90d4c819a902db09aef4ad1
- MD5 204420168fdecf480d2eb1ca479c3877
- SHA1 2b853205f5e2b8ea76f0beec2256f62bf6318347
- SHA512 9e7992f0889de939b38642fb0991e9dfa8b7e8a74a5804a936b2e4146be29548c8a29ef16ca8cf14d256dcf3989e10e57780d8c531c422f2e1b594f9ade9106c
- SSDEEP 196608:+mntWBRtfTL5QoCmkrB0QMguFBgt3m06Rw+K6:+mnkTtC9mkr4jFWBm0iw+/
- TLSH T1F76633D7B1346C1BC6C443BF8918463AA85C6B707D86D2D2189C722CDCAE64A6FC467F
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\resources\app-update.yml
- Size 172B
- SHA256 ff275def080229bfc8a75a08b67c072cacdc7a538fb01104c3c2e6a89e741e5d
- MD5 e81065fd5f6794d7f6ebd7b7f54fa3b0
- SHA1 0efabca6314fbc164dfaba5a85dd5e9fcd5d16fc
- SHA512 832a6d3399a6890b7a8a6094939c7d1ffadf2a47b6fa78edcaf0a27386cfab6a8d3d4c4cbd665df39afe0289dfff3a0b7ca4ffdeaeec96e883708368308d5d16
- TLSH T13DC08CA0D611EA388231492CF49CB47100CE6860EA230170D8EC4688A80BA5DA9CA6CE
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\resources\app.asar
- Size 44.8MB
- SHA256 8c6febbdf83461bd8b0a2ea5209423857d52b807c778f850e4a7960989cb2968
- MD5 9ba0cc9b44afdf8fdd5b86ccdc5e3795
- SHA1 98bdd7086f3bc392dd1ff7a0abfe4dcb3bc7b1e6
- SHA512 8cefc2eef66031499751fc9b78648484f5af7a3aa57fe5b483569a08c23bb662ed353229ac990d32560cb7b010ba4c8bbac0ba4a3584c11d65b6e77323e5c0d9
- SSDEEP 393216:rX7lnhTUjIvpnrMD5Ok2Kk7ixSPsrcQvTFkSlrMfNrag1z:rX7lnhTUjIeD5OsF3wQvTFNGZaqz
- TLSH T1FDA77C1126BB9127071F2EB716CE0002AE39906F790494947F5C86587B94F29F3FAFB9
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\resources\app.asar.unpacked\resources\icon.png
- Size 132KB
- SHA256 ceb2210260fc5846582030fac047cf70fa012beb080d1b4c8c1ad0e9d2fa9783
- MD5 27b2b2cc686e6c4871cabe03d14c3db2
- SHA1 c96ea55b8755d0389fa092eb5761dbb43d883fe6
- SHA512 38e07856a3300cb54ea50340a0fc973db09d357e600c75234c2c40ce0814e73aa6be4548105ee3b40417d4578ea42f5e95fc226887c5595194767131d53b5d80
- SSDEEP 3072:7xaJbyNvsuUrt1J0NYRaHaROx52DIKYlI208k0Db+jek2/rv:9aJGFurtbP0jrlFk0mak4rv
- TLSH T1DED313E684C35EF0590256858EC9D07BDDBFA210193D99C0F8E4872089BFB1176EEAE5
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\resources\app.asar.unpacked\resources\tray\trayTemplate.png
- Size 535B
- SHA256 4618ef51f1bade1b1f3662a0a28ff63a9534944a567ee9f815285cf9866a48af
- MD5 501aa372771c35c7fd42d50a4aeb352b
- SHA1 b907716a586a58b42420022eccb738baf96e27b7
- SHA512 05700e1e0bab50290daae05340c993614c910fc046983b47d778c25ef11f2ef6c6a20647eef05af227a1c11b9aeca24ae2560eb0a5d2b6e68567fef99d78ed60
- TLSH T1DEF0C0D29331F6F1E507231241103601DB3A3B1B17174E9A7A69F6950D08F8C5568F96
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\resources\app.asar.unpacked\resources\tray\[email protected]
- Size 787B
- SHA256 5b509bb2dc0ae257405e2c35dd62138f123decf424174b37e99c9bcece79af69
- MD5 8e94a08e3360ac8a83b100d70f1abaa8
- SHA1 829a45d4f84576d50f440fd8781a9ad016fc54ca
- SHA512 f1e555a1002c50de637c41842df96c1e4963b23cb8c5e0daf76f019648ad35a2aa07482a5ca288d32e4f71786f91d0110e468005a2b5d28be3b6c23e1f6ec866
- TLSH T1230125E1A5B3F994C8032EA2F9175340EC226E1F532D1D187E07E1CF4D18DAC91223D1
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\resources\elevate.exe
- Size 105KB
- SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
- MD5 792b92c8ad13c46f27c7ced0810694df
- SHA1 d8d449b92de20a57df722df46435ba4553ecc802
- SHA512 6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
- SSDEEP 3072:1bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWl:1PrwRhte1XsE1l
- TLSH T1EBB37C1274C0C471E5732A361974CAB14AADFD700E759FAF6398127A4FA01D09A3AFB7
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\snapshot_blob.bin
- Size 333KB
- SHA256 a578866594759d3c20b8fc40ca8f312c283a09113920ac14aea9c88ce0e8d9ba
- MD5 f641d6add5dfcd2da930b4f44a92d845
- SHA1 3cc91fddfe543f52a5d29fc18693503b460c1213
- SHA512 025afb69a850ffb726e45161cd53b14f6938f3153f4db17b9c30513519f5a100a8a0add6ed103058f68a1d72273f2db24a46c835fd6dd0bfe718c6ae688a284b
- SSDEEP 3072:WOiXKGWOt+xbRt2FIR8SKvbmTOH/opts3Iyiy2gsMvkdAhm6tfsa:W5XLt+Hlzk/ov7CLvBkisa
- TLSH T16674CE05F74ACB26C98A3A745DF983882E2071CD9D49B34B3549737E78BA2740D3A72D
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\v8_context_snapshot.bin
- Size 698KB
- SHA256 ed5e979db2aef4a152758f2b9b7b06349a1d3d5dd687fdb96e2b3fb730a465e0
- MD5 a119c66308517b41d07e0c070939d5d0
- SHA1 e5ffb8afeb8914c4981d93f3727183aa451c6a88
- SHA512 fb27910e77f0ec790c4c193c726d93be01ec080d9f4175194094c36b5107c71f53e9d2f9c6e65f0b2395353e34bb1a759c0f36b55f227221a97757d0e44c0bbe
- SSDEEP 6144:G/V4XptgO5XKt+Hlzk/ov7Cx2NyuClVlxykismIdukcLKYNcPK:G8D5XoAvmx2NySkQIId/H
- TLSH T1C8E4A761FB0A8F3AC5453BBD8DE657463A30B18E9E87E24B7405633D78B96B04C3652C
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\vk_swiftshader.dll
- Size 5.4MB
- SHA256 3738844133e89dc951e2167aac92e1491f34a385e54f36ad751ce604e5ee7964
- MD5 35c734927fd23aa185cc46fba4545e65
- SHA1 0a8cfc777f9cea5a7c41d0a3b14e2463d94d4f16
- SHA512 d17e204b3ac834da4884bcb201bba536ab268ae60b107279de34d83d5236bf217ef5f0de4af067ec0ae1bd7cd6ff7b8a76f19d6c1fb2b6abcddfc2aeeb891060
- SSDEEP 49152:Z+et2UcrN42sf0vTrWny2/Gh9qIHGZpVZSbiP1VFz2ZtIgrduZsgP/m9vqjfc2ch:ZJt2vI4gmlml3pCIn
- TLSH T174463803F28681E9C06DE5798B5FA623F631F8840B2276DF56A00F192E66FE0673D715
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\vk_swiftshader_icd.json
- Size 106B
- SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
- MD5 8642dd3a87e2de6e991fae08458e302b
- SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
- SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
- TLSH T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\7z-out\vulkan-1.dll
- Size 932KB
- SHA256 d8bd2d92c82fa28141fb911a7cacadd8dd7082b98258975727930ee571a43cb5
- MD5 78d0ecc36f8fb1f93e827ba4e19cd65f
- SHA1 02fcb7edd74ed4cf1612ccc8fa556c552e272761
- SHA512 8db1cd7c1b3102f6daf000dce9c28560eed65ca9db9684112b8d26c9c53b956676cfa150f7de4d9ecee564d83705dd845edd8266e50bf5b609821cba73d1a548
- SSDEEP 24576:VNpbzkO5J/Yv3kG4nolXqOZ6dSn6Z5WGc9DYsHQDb6g3P0zAk79oOHiY/jF:3pbwOvgv3kRUX1Z6dSn6Z5WGc9DYsHQM
- TLSH T1DC157E12DA544AA9D67AC074D9D28A0789B074821322B8DF12F817147F6FFF47B3DB26
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\INetC.dll
- Size 238KB
- SHA256 ed04a4823f221e9197b8f3c3da1d6859ff5b176185bde2f1c923a442516c810a
- MD5 38caa11a462b16538e0a3daeb2fc0eaf
- SHA1 c22a190b83f4b6dc0d6a44b98eac1a89a78de55c
- SHA512 777135e05e908ac26bfce0a9c425b57f7132c1cdb0969bbb6ef625748c868860602bacc633c61cab36d0375b94b6bcfbd8bd8c7fa781495ef7332e362f8d44d1
- SSDEEP 3072:hD2ekNFXiQraqoDDfbrH6ZgxkzStPpwGxqeujXj5Bif/Pa0L:hD2vhaqoDfb6mxk2LqHXj3if/Pa
- TLSH T16334BF857F68D80BE65402F87A71CFBA1669EC206C21C203E7E1BE5F3D79B56AD01381
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\StdUtils.dll
- Size 100KB
- SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
- MD5 c6a6e03f77c313b267498515488c5740
- SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
- SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
- SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
- TLSH T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\System.dll
- Size 12KB
- SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
- MD5 0d7ad4f45dc6f5aa87f606d0331c6901
- SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
- SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
- SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
- TLSH T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\UAC.dll
- Size 14KB
- SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
- MD5 adb29e6b186daa765dc750128649b63d
- SHA1 160cbdc4cb0ac2c142d361df138c537aa7e708c9
- SHA512 b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
- SSDEEP 192:DiF6v2imI36Op/tGZGfWxdyWHD0I53vLl7WVl8e04IpDlPjs:DGVY6ClGoWxXH75T1WVl83lLs
- TLSH T10F623AAA62E847BEE2221636B96723130BFDB5203DA1D01F4D531E596C30BE3953D61A
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\WinShell.dll
- Size 3KB
- SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
- MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
- SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
- SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
- TLSH T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\nsDialogs.dll
- Size 9KB
- SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
- MD5 466179e1c8ee8a1ff5e4427dbb6c4a01
- SHA1 eb607467009074278e4bd50c7eab400e95ae48f7
- SHA512 7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
- SSDEEP 192:olsHeylO012En8pqHtcE0PuAgkOyvIFc:oATI0d8pUP0WAgkBvIFc
- TLSH T1D0120892E6E450B3C5D6133F35AE2B2DCBBD5329B0922C0087738E4979795B66E38347
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\nsExec.dll
- Size 6KB
- SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
- MD5 ec0504e6b8a11d5aad43b296beeb84b2
- SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
- SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
- SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
- TLSH T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Local\Temp\nsj3484.tmp\nsis7z.dll
- Size 424KB
- SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
- MD5 80e44ce4895304c6a3a831310fbf8cd0
- SHA1 36bd49ae21c460be5753a904b4501f1abca53508
- SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
- SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
- TLSH T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Preferences
- Size 57B
- SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
- MD5 58127c59cb9e1da127904c341d15372b
- SHA1 62445484661d8036ce9788baeaba31d204e9a5fc
- SHA512 8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a
- TLSH T101900297652634755E1F1D65400B889B5CF905704E0B5E0641D032969A2A45D088705F
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Preferences~RFe5b5cd2.TMP
- Size 93B
- SHA256 529b6595a4727a6b2d6cc154ae51f426216c01fc7fda02de2460abfb3de118a4
- MD5 322f01bb491180333c338526d93f115a
- SHA1 554d5e43d5e46774b8f2a6b3682243a289927754
- SHA512 69f8e980f44b1465cee8c0485598fa00be163db0fe88598e45ab2f817f9bea36a2b70dbb9d25d5214174ea9c198b9641bb3d5a86c18b1a4ea4493c00e2e95eb2
- TLSH T103B01253B810A0324B1B09E5000BC94F2CBE00340E475A0510D4F39D492DD4D088702B
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\electron-log-preload.js
- Size 959B
- SHA256 06e0feb5d0a1232d31d93b9f3fd356951abd92beda7e99acd5dbbcb5a11a873b
- MD5 ff34ca2218b25f31db6bfea091457d4a
- SHA1 435e51f1c5b08a245026a952837fe3a83228d0f9
- SHA512 c7996cfd8cdd3065ae4e48d8360a8e52e87a5fa9197f81c3265ad083562aad005e20787385d64a82fd28546a84033d966586889e2aaf25c346e9014b84cbdd00
- TLSH T1B2111078A4EF0C770155502D69D625056FFA8755243DF1963B0D82AF3FB8C613A0771D
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
- Size 1KB
- SHA256 30bf39a7ef746072f744969f75a691889a286e227657a409e6b24d7537799711
- MD5 6610bfaf77e9d9b7272e5cf18123067d
- SHA1 92ef4b64ec068b2d77c5a49e947c1889bda1ad8b
- SHA512 78d6b5561ba33f1237f9f6c2e76b7bf4dad9387d331070547f4469a294b48e9b2e3bfa1c3a4fd282efbd9cab61da021b20f1d1dba30d8314889dc24fb159608e
- TLSH T1F7110C3025F86ABB35220351EA925F9E343423736FD0DA10330D4948EB00C7ACFC92A8
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
- Size 3KB
- SHA256 e4609a024322d5aa899a9a7fd2f52f32f04261c17f9dc92338dc3190181cd933
- MD5 4076f54f5359609c579b2f0e67b84b9d
- SHA1 33daec7a7c369006dbd155c770138d60f68b0309
- SHA512 e188f32c3d0e411e79054a5b7f52c3b272d91018cd39e3dec6360e95d8cf9347e4dd789c35046f40f3989dab58b3e7371f4ca8fabdf4a74d1344df8861fc43ce
- TLSH T16961D12028F86ABB35620305EA526F8D343137276FC0DA14335D090CFB15C6ADF8AAA9
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
- Size 4KB
- SHA256 4fab1b54d8c79f522535f944cb56d6150d9cfa6610d26f147a60004db644e7a8
- MD5 10ab76e90ef5a4d5ac710c8b0eec32dc
- SHA1 d8a819967147f388d7d14aa77f84fbc9f46a3a23
- SHA512 68c542ce9a400c84eece828fa10145a48ea05736eff11e44b623f5300e313e543366cca43b35f2b6871f0c4fed70a791f617950d1345148e72bf1186d30e5037
- SSDEEP 96:o5ktPE4QEykazNJ60DPqLwmGWk6ZxP63n:zcSyJNovGWQn
- TLSH T11EA1882018F86ABF35360215EA766F8D307137276FC4DB14332D090CBB05C6AEEDAA59
- MD5 SHA1 SHA512 SSDEEP TLSH
- Path C:\Users\Admin\AppData\Roaming\.sklauncher\settings.json
- Size 556B
- SHA256 f7c7f85909114b23fc9e2707d10787576a2f52dcdcd63a8ef17c371c13172eac
- MD5 03495d32d8b93e9151786b57347362cd
- SHA1 80b196ccfb9007aa0254ec3083bfcadac4a86793
- SHA512 993e5bf13a36072e6a7eae8fb00510a6631f2fba3c31cdf1b46cb3aff1dae615e4d98c844c69e49fa945ef62154fc19adeb1f43d0c6eaf73aefb934a99d58fbe
- TLSH T13DF090A1A99132BD16E6926C9D9DD01387344D0D004C7C3895A3284C350F37171F3ED2
- MD5 SHA1 SHA512 TLSH
- Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
- Size 2B
- SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
- MD5 f3b25701fe362ec84616a93a45ce9998
- SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
- SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
- MD5 SHA1 SHA512