Resubmissions

01/10/2026, 17:43

261001-waqsxsxsg1

01/10/2026, 17:06

261001-vmt6fa1cra7

Analysis

  • max time kernel
    152s
  • max time network
    160s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    01/10/2026, 17:06

General

  • Target
    VenoX_Game_Searcher_1.0.0.exe
  • Size 94.9MB
  • Sample261001-vmt6fa1cra
  • SHA256 4db9553d803285ff9a664d676944d78a6fb11656f89ab4dfd2bc1b35d47c1421
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 15 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\VenoX_Game_Searcher_1.0.0.exe
    "C:\Users\Admin\AppData\Local\Temp\VenoX_Game_Searcher_1.0.0.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3208
    • C:\Users\Admin\AppData\Local\Temp\3K6GaIypcWklS1JFesbEMYHKpFN\VenoX Game Searcher.exe
      "C:\Users\Admin\AppData\Local\Temp\3K6GaIypcWklS1JFesbEMYHKpFN\VenoX Game Searcher.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:3152
      • C:\Users\Admin\AppData\Local\Temp\3K6GaIypcWklS1JFesbEMYHKpFN\VenoX Game Searcher.exe
        "C:\Users\Admin\AppData\Local\Temp\3K6GaIypcWklS1JFesbEMYHKpFN\VenoX Game Searcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\venox-game-search" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1764,i,531347177207441757,15716213170331767612,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1756 /prefetch:2
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:3128
      • C:\Users\Admin\AppData\Local\Temp\3K6GaIypcWklS1JFesbEMYHKpFN\VenoX Game Searcher.exe
        "C:\Users\Admin\AppData\Local\Temp\3K6GaIypcWklS1JFesbEMYHKpFN\VenoX Game Searcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\venox-game-search" --field-trial-handle=2264,i,531347177207441757,15716213170331767612,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2260 /prefetch:11
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        PID:124
      • C:\Users\Admin\AppData\Local\Temp\3K6GaIypcWklS1JFesbEMYHKpFN\VenoX Game Searcher.exe
        "C:\Users\Admin\AppData\Local\Temp\3K6GaIypcWklS1JFesbEMYHKpFN\VenoX Game Searcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\venox-game-search" --app-path="C:\Users\Admin\AppData\Local\Temp\3K6GaIypcWklS1JFesbEMYHKpFN\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2556,i,531347177207441757,15716213170331767612,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:1
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4364
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /d /s /c ""C:\Users\Admin\AppData\Local\Temp\3K6GaIypcWklS1JFesbEMYHKpFN\resources\app.asar\src\main\assets\installers\LuaTools-win-Setup.exe" --silent"
        3⤵
        • Executes a command shell one-liner
        PID:1996
      • C:\Users\Admin\AppData\Local\Temp\3K6GaIypcWklS1JFesbEMYHKpFN\VenoX Game Searcher.exe
        "C:\Users\Admin\AppData\Local\Temp\3K6GaIypcWklS1JFesbEMYHKpFN\VenoX Game Searcher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\venox-game-search" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=3204,i,531347177207441757,15716213170331767612,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=3400 /prefetch:10
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        PID:5824

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        LICENSE.electron.txt

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH

        LICENSES.chromium.html

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\LICENSES.chromium.html
        • Size 8.7MB
        • SHA256 c6080d60736384a4a8fdd23404d59ae2d939e5124d80df89f8fd4e450bb9bd6f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_100_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\chrome_100_percent.pak
        • Size 148KB
        • SHA256 a659ee9eb38636f85f5336587c578fb29740d3effaff9b92852c8a210e92978c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        chrome_200_percent.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\chrome_200_percent.pak
        • Size 223KB
        • SHA256 2c1b3e4b8a0cf837ae0a390fca54f45d7d22418e040f1dfea979622383acced6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        d3dcompiler_47.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.7MB
        • SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ffmpeg.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\ffmpeg.dll
        • Size 2.8MB
        • SHA256 4fcdedbc68eae4b4cfe0eed275316fdf66c9d4a57a98d29a77d0e8f4149cfcbc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        icudtl.dat

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\icudtl.dat
        • Size 10.0MB
        • SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libEGL.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\libEGL.dll
        • Size 481KB
        • SHA256 d9d2f5b5fae60a63523f92c07539dd93893ff7d9ffa41f0bb57caca4be9f2220
        • MD5 SHA1 SHA512 SSDEEP TLSH

        libGLESv2.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\libGLESv2.dll
        • Size 8.0MB
        • SHA256 4b4dcbc7bb19449ec89d2bf06e7b05af9352a4e6f97f4444183dc3080e6c0f1d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        af.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\af.pak
        • Size 520KB
        • SHA256 c56cb2841ee2e40fbdd6b7e293a1ce74bd10fd500465fcf99d1e07f8d69f8ce7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        am.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\am.pak
        • Size 840KB
        • SHA256 49a2095ad9ffac0b7ffaadba64d2c2b51a05e0695e21d1c428735485757bd11c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ar.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\ar.pak
        • Size 921KB
        • SHA256 817829ad75dbc7d59b5042d7f056fa2485f82d1ae2af50ed83fd89f86f3d58fc
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bg.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\bg.pak
        • Size 959KB
        • SHA256 f08de6909faf88465c28388aa03fdf08e165866a5a23c738ed33382275c4ec83
        • MD5 SHA1 SHA512 SSDEEP TLSH

        bn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\bn.pak
        • Size 1.2MB
        • SHA256 5a57265ebac6df683f0279684909755ad71ea70fea71c6ecc1810eac61d1cb3d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ca.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\ca.pak
        • Size 584KB
        • SHA256 bc2b7d6a769c69b27a81cc09a1babd4ccaf003fae32f8294a38e498f2c529c89
        • MD5 SHA1 SHA512 SSDEEP TLSH

        cs.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\cs.pak
        • Size 602KB
        • SHA256 db040e9f17d2792801c07a7bb3ac96c21d8189c98e9ab34210c5888b2ee53aa1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        da.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\da.pak
        • Size 545KB
        • SHA256 e32681cdd03db28eb360b1b4203c2988190b7b6f77679ca807cd95a1967ded04
        • MD5 SHA1 SHA512 SSDEEP TLSH

        de.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\de.pak
        • Size 582KB
        • SHA256 4f123245b062d71d56819ac1198d13a3d7953decd4491fca0fbd22c5e129c3bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        el.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\el.pak
        • Size 1.0MB
        • SHA256 b8707f2511c4ec5533077009771f3aa92b0fb5b395b13907f5860a9151b2431d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-GB.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\en-GB.pak
        • Size 474KB
        • SHA256 3bf7e7e02c40dac55ce9bd5b4789eaa99e57271b2d907a5ce2ca90b979a58c39
        • MD5 SHA1 SHA512 SSDEEP TLSH

        en-US.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\en-US.pak
        • Size 478KB
        • SHA256 75db989561e145d0d990c4918502316c77ce66b344d3dce4739e3a6db43fde82
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es-419.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\es-419.pak
        • Size 575KB
        • SHA256 4dedec1ac933c73773b1e54caab1c4d606d12f3788cbeef4d6a2a382138cc907
        • MD5 SHA1 SHA512 SSDEEP TLSH

        es.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\es.pak
        • Size 575KB
        • SHA256 a32221be9b65aead3fa779dc54e5ca483a7d73c4815e5c7c3b53711f560bd301
        • MD5 SHA1 SHA512 SSDEEP TLSH

        et.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\et.pak
        • Size 523KB
        • SHA256 a4d1fe9903641540b11e0d00e574a6665a1602ad81f6aae9a083ebd04bc768c7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fa.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\fa.pak
        • Size 855KB
        • SHA256 ef9e5b71063c26b1a5d512f5e14c3f7fe5a1925ff25ca799c51f8073c33bb90a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\fi.pak
        • Size 534KB
        • SHA256 93c49ec40accea8e1f4f9b7db68b9b818f8db0b7591cea67ae9bf663c1c57728
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fil.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\fil.pak
        • Size 604KB
        • SHA256 9b69d82f50c159d1ec5603ef45dc139143b4f05761f38f263a66fffedd28ff5e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        fr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\fr.pak
        • Size 622KB
        • SHA256 8bf019aed30d972883d5c29d3f44c8b0d8fc6425ab48ae3354d71e4762a0cf01
        • MD5 SHA1 SHA512 SSDEEP TLSH

        gu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\gu.pak
        • Size 1.2MB
        • SHA256 1adaaacf2f9ab872fb35932fd1ed3b005f370f0ec22b95b42039b4c58660675c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        he.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\he.pak
        • Size 751KB
        • SHA256 df1b83384ad42d4ca9f47aebc909baa8a6dde79fa1b0706023a279698e302e89
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\hi.pak
        • Size 1.3MB
        • SHA256 f73ccac3debba20fb225209805ff2383609853111f931e6b82095c1eb56a6ce4
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\hr.pak
        • Size 581KB
        • SHA256 630277358f658c9c39a775dee247f38ac0a0a618a5645260f445ac89d7ac7a46
        • MD5 SHA1 SHA512 SSDEEP TLSH

        hu.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\hu.pak
        • Size 625KB
        • SHA256 ec81ac981af0e962654ad4f65030064a6369dc2316cb1b10bb24b473808ad1e9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        id.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\id.pak
        • Size 516KB
        • SHA256 aeb815a3dc6ce3cd1edf2c158a3b16e9c8039af25752367bf13826516a295cb9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        it.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\it.pak
        • Size 567KB
        • SHA256 1b16b0af558629dd53e35d1b4bb7b18dc1d8cb5353a4261112d2cd3b0a4c55ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ja.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\ja.pak
        • Size 691KB
        • SHA256 b2afe7e5f6ebba31248ea00a157c9f5752cd6855194a0d122b3a6c90a1d9be83
        • MD5 SHA1 SHA512 SSDEEP TLSH

        kn.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\kn.pak
        • Size 1.4MB
        • SHA256 4e323def774ac53daf99d2075878456d8885c3380c7895ecf3ab10a2953d532a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ko.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\ko.pak
        • Size 585KB
        • SHA256 dc1d4b203674269f00aeb303f74e2948bc74e5956b1770acd2fbb517ad4274a2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lt.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\lt.pak
        • Size 629KB
        • SHA256 9fe73d75dd155d0bda60a638b8f8d48048d17fadfd2d746bac597e5ac3b7f6dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        lv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\lv.pak
        • Size 628KB
        • SHA256 5c74465b83cef9aae45a6b61499e79b745a91a6038fdd61a3321425056f77b5b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ml.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\ml.pak
        • Size 1.4MB
        • SHA256 67d9ae2dbfecdfddc4c23a206828010c6d42b8094477a03ce04b60a8d110eea2
        • MD5 SHA1 SHA512 SSDEEP TLSH

        mr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\mr.pak
        • Size 1.2MB
        • SHA256 7181c3bc7a369d2d0b8ae6c1cf8f160603ec56996d20b266833edc3acce4c78e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ms.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\ms.pak
        • Size 541KB
        • SHA256 6a3ced7828f0608297da29c99832a389ec9d0d03060ddb20304cd081be494adb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nb.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\nb.pak
        • Size 525KB
        • SHA256 697882ac2da78894e449cb1f75da43e7115c2481bbd2fee3bdaa425e82fc232c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\nl.pak
        • Size 543KB
        • SHA256 ac22005c476adbb7f3bcf0b17597a7a1595b83c4e6a8760d5553b630f0833305
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\pl.pak
        • Size 604KB
        • SHA256 e8a107b3568a289a6e60118e4b8e2f27338116dafcef078311bc16f0857b1f35
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-BR.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\pt-BR.pak
        • Size 567KB
        • SHA256 1c0d67a4259df36655aa97761e71e02bb0407e7bb1fe1319394e0916c7d76f7f
        • MD5 SHA1 SHA512 SSDEEP TLSH

        pt-PT.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\pt-PT.pak
        • Size 571KB
        • SHA256 9ebafb943bf20c66f8d9ca533633fdc63519e8ad38d78a3dd28b4457c38ba79d
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ro.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\ro.pak
        • Size 592KB
        • SHA256 cf59cd7c26cfe3d87ed2b3a2ef254c3a3667824bbf06cd591bfc9dbf2a83ab91
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ru.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\ru.pak
        • Size 972KB
        • SHA256 2d682d4a3ee1157085086c839cf55e500ec1d1674f66be7088eb25768a30c7a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\sk.pak
        • Size 611KB
        • SHA256 347196c447db2926f9e410905ff47fc0900ca97645e43236ba3b49f0550cfa24
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sl.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\sl.pak
        • Size 587KB
        • SHA256 e8b877b4830b3a1163618107342e55756efe494adcdc82d10d963ad900b9f572
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\sr.pak
        • Size 903KB
        • SHA256 6f3d0c4ea29880624f07f0f794a6ea1ef735255dc218a241be1557331ebc3c28
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sv.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\sv.pak
        • Size 528KB
        • SHA256 d6ad9726da354174df5eb7ea3ceba202df17936c5075a4b8e096de35f1abbe42
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sw.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\sw.pak
        • Size 557KB
        • SHA256 434879a83079fba562af9dac928ad2fcc1033e0a6a5a1f4822d36e710decdd2b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ta.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\ta.pak
        • Size 1.4MB
        • SHA256 0e1d7c0fa1eab312b42ff5e8978b7146d6cac313603fcaf101bef2eedc70313b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        te.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\te.pak
        • Size 1.3MB
        • SHA256 1faa8cb780908552f3ca0d2b0e20eb6aaa902cb5bd759c18ed1238beb0bb34dd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        th.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\th.pak
        • Size 1.1MB
        • SHA256 9210c77f0024c705018f5292b3021d3eca58bb290604b116e2d4e355b8ebfc59
        • MD5 SHA1 SHA512 SSDEEP TLSH

        tr.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\tr.pak
        • Size 567KB
        • SHA256 25d1667b691b5a950b8b42652f7763338cfd238b22d6bd35a5c38da8cb73a67a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        uk.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\uk.pak
        • Size 972KB
        • SHA256 017e34397fd52f4e42bb99ab1d7c4624055312a16d58da03aafffdcae770aecd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        ur.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\ur.pak
        • Size 850KB
        • SHA256 ace832351fb9392fc308730ff74e5063caefe9903c5a01d9083a3ddf2ba93755
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vi.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\vi.pak
        • Size 673KB
        • SHA256 536538d1704c7b23d3b21beddcd4669151de276d259a9ea7192132696e54e146
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-CN.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\zh-CN.pak
        • Size 484KB
        • SHA256 6446826e1e9f38f06ab85bf2abe05af88fa7fd5c636c2c74aa2b989c458b879b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        zh-TW.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\locales\zh-TW.pak
        • Size 479KB
        • SHA256 514d6a95fc7094ff00cb7700bca2b10191df866c18c551e1d2c07050ddee80bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        resources.pak

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources.pak
        • Size 5.5MB
        • SHA256 ffaeea94c6594d4e66fc523c218c161c58aee1f59b9cb006bbb45d9a49e3a6a1
        • MD5 SHA1 SHA512 SSDEEP TLSH

        app.asar

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar
        • Size 12.6MB
        • SHA256 b84159cb8244fbc90a1a0ac09c097e5d0159ea392ad64c8063c73138040ffd65
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LICENSE

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\LICENSE
        • Size 1KB
        • SHA256 09856b52897c91ab67e7456ef43067019f31dfd3b87fda72e655736b1ebdee55
        • MD5 SHA1 SHA512 TLSH

        better_sqlite3.node

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\build\Release\better_sqlite3.node
        • Size 1.6MB
        • SHA256 b66a0400ccfda4cc16479381d21f7426b82b9b88e0256061935a76cdaa766c03
        • MD5 SHA1 SHA512 SSDEEP TLSH

        common.gypi

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\common.gypi
        • Size 1KB
        • SHA256 e71a565cd7733e05efc3a2792b54e260126f03f490325aa2a201202acbbdb315
        • MD5 SHA1 SHA512 TLSH

        copy.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\copy.js
        • Size 897B
        • SHA256 05a2bd41dbd96e33e2fc6cf4bcbc722b4bc8c529813b882f92113d7dbbbece67
        • MD5 SHA1 SHA512 TLSH

        defines.gypi

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\defines.gypi
        • Size 1KB
        • SHA256 1ffa84b8af99780a293dcb7a9031c2dccc8b0d013aef434a35c283cc6c984f2e
        • MD5 SHA1 SHA512 TLSH

        download.sh

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\download.sh
        • Size 3KB
        • SHA256 5de8af6e9f41fc1b5f6d280cdc55d62c2a210faf722c7e529b6b3427be7c80a8
        • MD5 SHA1 SHA512 TLSH

        1208.patch

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\patches\1208.patch
        • Size 597B
        • SHA256 5d1f22d69fee3551b70a7b7b9b14be43fcfd04dbc8683233667abfa75905011a
        • MD5 SHA1 SHA512 TLSH

        sqlite3.gyp

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3.gyp
        • Size 2KB
        • SHA256 a009b8f80cf0a944eacaf71a84e590504f353fbd8f8b341138d0c3094e372d18
        • MD5 SHA1 SHA512 TLSH

        sqlite3.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3\sqlite3.c
        • Size 8.8MB
        • SHA256 e80215754ac6cfaefe272342efd581b6dbefdbdc21f96bd83fcb698bee9d36a5
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlite3.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3\sqlite3.h
        • Size 643KB
        • SHA256 2198c66d4c59ae86421590c27fd53309ec14a595ae31c0c7143247444018a0bd
        • MD5 SHA1 SHA512 SSDEEP TLSH

        sqlite3ext.h

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\sqlite3\sqlite3ext.h
        • Size 37KB
        • SHA256 b184dd1586d935133d37ad76fa353faf0a1021ff2fdedeedcc3498fff74bbb94
        • MD5 SHA1 SHA512 SSDEEP TLSH

        test_extension.c

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\deps\test_extension.c
        • Size 587B
        • SHA256 948af88dbf356835f5496c1a3d047fdbcc58f3717aa9bc94d0943d7de2b7cf5b
        • MD5 SHA1 SHA512 TLSH

        database.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\database.js
        • Size 4KB
        • SHA256 50fe0b490f29174d961c4d1ae54f22973447ff1255fd710e785d201c0ebfb4d0
        • MD5 SHA1 SHA512 SSDEEP TLSH

        index.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\index.js
        • Size 110B
        • SHA256 82db11c4ee43a41d859988c5db42c3771dff565371f94bacbd1e4d8d6ceb47cd
        • MD5 SHA1 SHA512 TLSH

        aggregate.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\aggregate.js
        • Size 1KB
        • SHA256 e9f74eb919ec93fe089c95ddf25a98f1f631c80418fa34fb2346ca1bc29f1b82
        • MD5 SHA1 SHA512 TLSH

        backup.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\backup.js
        • Size 2KB
        • SHA256 ea29d34992bb02e006d0fdeda9675ac5d2bb227aaf57468decd997e9fc9c7dbf
        • MD5 SHA1 SHA512 TLSH

        function.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\function.js
        • Size 1KB
        • SHA256 f431d49303b8bbdc044b1f1b455bdad21fc9b74b007de0acb22f08f25b4febd3
        • MD5 SHA1 SHA512 TLSH

        inspect.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\inspect.js
        • Size 174B
        • SHA256 4975a78daee850adee62ba98719d0f223819a0ec135a07c0e302994bd8dbff61
        • MD5 SHA1 SHA512 TLSH

        pragma.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\pragma.js
        • Size 536B
        • SHA256 8b1c54475bd4340b15e25c50d53d06308be65f8f919ecbe4aa9d285ca859ad5a
        • MD5 SHA1 SHA512 TLSH

        serialize.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\serialize.js
        • Size 625B
        • SHA256 7a10ee5c2735384b7f0c361811bc6d017db29f62b203fd3c68a35f667e2c2605
        • MD5 SHA1 SHA512 TLSH

        table.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\table.js
        • Size 6KB
        • SHA256 97c42d9ded1aa96c7d916b5b92f96b4e59581d50eaf629cd2c7afb78ff26a9ea
        • MD5 SHA1 SHA512 SSDEEP TLSH

        transaction.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\transaction.js
        • Size 2KB
        • SHA256 bc8624a3ef689d8f78e5669020ad121e17acbc93b1d5ee5afe26860b1084c66c
        • MD5 SHA1 SHA512 TLSH

        wrappers.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\methods\wrappers.js
        • Size 1KB
        • SHA256 a150a6271d23f4e5f8953b129f370ff096c7cdc4b812afbf080a6cf4ab741bcf
        • MD5 SHA1 SHA512 TLSH

        sqlite-error.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\sqlite-error.js
        • Size 717B
        • SHA256 2582d61c27680dead168543f392eb102be621dfbef282a4ca4c7c21aa5e7c75d
        • MD5 SHA1 SHA512 TLSH

        util.js

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\lib\util.js
        • Size 331B
        • SHA256 92b2e39e2151b43a2252e10b6d6de876ecaf0008336a4fa1dfe1317b20f1916f
        • MD5 SHA1 SHA512 TLSH

        package.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\package.json
        • Size 789B
        • SHA256 7de814561f018b0a493fbdaf7026cd4053937de66736be0175d1d0f7727ab4b4
        • MD5 SHA1 SHA512 TLSH

        better_sqlite3.cpp

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\better_sqlite3.cpp
        • Size 129KB
        • SHA256 551abc7d9feea0ad2acb97f33125c5e8800d6d84a1da4390512d08743f924b1e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        better_sqlite3.hpp

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\node_modules\better-sqlite3\src\better_sqlite3.hpp
        • Size 42KB
        • SHA256 689831cdf547d53b2156fa66088f04b89ed71173f4a832300230ff765879f6bf
        • MD5 SHA1 SHA512 SSDEEP TLSH

        steamclient64.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\src\main\assets\emulators\goldberg\steamclient64.dll
        • Size 21.5MB
        • SHA256 319051c75609187f6d320b3df2d0da4eadbed72b4188144ff06fe6eff30a90d3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        README.generate_interfaces.md

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\src\main\assets\emulators\goldberg\tools\generate_interfaces\README.generate_interfaces.md
        • Size 717B
        • SHA256 93f737ea5a4db8e8627571f48e0447b566bc7ffa113e9166c5fc8c5973b54d15
        • MD5 SHA1 SHA512 TLSH

        generate_interfaces_x64.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\src\main\assets\emulators\goldberg\tools\generate_interfaces\generate_interfaces_x64.exe
        • Size 283KB
        • SHA256 c77153a1a1112196a3d25f6a4c3ab8f7b85a30a732022383f91aefd1ed3173f3
        • MD5 SHA1 SHA512 SSDEEP TLSH

        generate_interfaces_x86.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\src\main\assets\emulators\goldberg\tools\generate_interfaces\generate_interfaces_x86.exe
        • Size 234KB
        • SHA256 93c50cda2d740b7c379cd74b41a26b897ebc847cab6f80aa0460ce255713945a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        steam_api64.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\src\main\assets\emulators\goldberg\x64\steam_api64.dll
        • Size 10.9MB
        • SHA256 70d9826a402d3a78b0c07e9f7ea7c6832468a1113013f31ea570fccaa5445ea9
        • MD5 SHA1 SHA512 SSDEEP TLSH

        steam_api.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\src\main\assets\emulators\goldberg\x86\steam_api.dll
        • Size 8.8MB
        • SHA256 cae4372bceda997d6c73cebc1c14eb27d39b74a7999d8f28384bdfd8d746a79c
        • MD5 SHA1 SHA512 SSDEEP TLSH

        LuaTools-win-Setup.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\app.asar.unpacked\src\main\assets\installers\LuaTools-win-Setup.exe
        • Size 11.3MB
        • SHA256 9a52511f3041a58f366faff3376a3579799b91e357d8717ffd28d72d8417d3cb
        • MD5 SHA1 SHA512 SSDEEP TLSH

        elevate.exe

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH

        snapshot_blob.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\snapshot_blob.bin
        • Size 309KB
        • SHA256 397bfb1c55eb98bc8c1e1ba1155e24efc105c155def665c678ac3a135f4bbcc7
        • MD5 SHA1 SHA512 SSDEEP TLSH

        v8_context_snapshot.bin

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\v8_context_snapshot.bin
        • Size 671KB
        • SHA256 e8fac5817d9b33ae78b0bd2863750047cbbda211bc28342d0cbea97a07656757
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\vk_swiftshader.dll
        • Size 5.3MB
        • SHA256 409a0fa76f055a87ae70434414586d144502beb25fa3004866ee70abd9a8547e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        vk_swiftshader_icd.json

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH

        vulkan-1.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\7z-out\vulkan-1.dll
        • Size 874KB
        • SHA256 f6c99137c3d6af45bc2262815867d6d37f5dcb0552caffc90cd77fb6561b7491
        • MD5 SHA1 SHA512 SSDEEP TLSH

        StdUtils.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH

        System.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH

        nsis7z.dll

        • Path C:\Users\Admin\AppData\Local\Temp\nsy3139.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH

        default.exc

        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512

        f_000009

        • Path C:\Users\Admin\AppData\Roaming\venox-game-search\Cache\Cache_Data\f_000009
        • Size 51KB
        • SHA256 810403b93c72eadcd261aa4693845846274459d1be205ad25974faf4d638251b
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_000015

        • Path C:\Users\Admin\AppData\Roaming\venox-game-search\Cache\Cache_Data\f_000015
        • Size 65KB
        • SHA256 29f5164b56224a0a963982fb61bf493eef02fd8670f247c5079413e20c2b301a
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_000016

        • Path C:\Users\Admin\AppData\Roaming\venox-game-search\Cache\Cache_Data\f_000016
        • Size 162KB
        • SHA256 8ff1e03b0015ae9053dbc1a78427f2ce85faba3c72548aa7224d30ada969cae6
        • MD5 SHA1 SHA512 SSDEEP TLSH

        f_000017

        • Path C:\Users\Admin\AppData\Roaming\venox-game-search\Cache\Cache_Data\f_000017
        • Size 73KB
        • SHA256 dca421eec883f8225a339a3be4eea7c0f4a9bcc6a4958bc5cb47a670a3689034
        • MD5 SHA1 SHA512 SSDEEP TLSH

        data_0

        • Path C:\Users\Admin\AppData\Roaming\venox-game-search\GPUCache\data_0
        • Size 8KB
        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
        • MD5 SHA1 SHA512 SSDEEP

        data_1

        • Path C:\Users\Admin\AppData\Roaming\venox-game-search\GPUCache\data_1
        • Size 264KB
        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
        • MD5 SHA1 SHA512 SSDEEP

        data_2

        • Path C:\Users\Admin\AppData\Roaming\venox-game-search\GPUCache\data_2
        • Size 8KB
        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
        • MD5 SHA1 SHA512 SSDEEP

        data_3

        • Path C:\Users\Admin\AppData\Roaming\venox-game-search\GPUCache\data_3
        • Size 8KB
        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
        • MD5 SHA1 SHA512 SSDEEP

        CURRENT

        • Path C:\Users\Admin\AppData\Roaming\venox-game-search\Local Storage\leveldb\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512

        2aade71b-4f46-4ccc-a235-12656f3f8a21.tmp

        • Path C:\Users\Admin\AppData\Roaming\venox-game-search\Network\2aade71b-4f46-4ccc-a235-12656f3f8a21.tmp
        • Size 1KB
        • SHA256 3aa9edb8032d027ddb4241629092f9adef3b2b60aa580c53618c8a5b57f3684a
        • MD5 SHA1 SHA512 TLSH

        Network Persistent State

        • Path C:\Users\Admin\AppData\Roaming\venox-game-search\Network\Network Persistent State
        • Size 59B
        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
        • MD5 SHA1 SHA512 TLSH

        memory/5824-755-0x00000283C6C60000-0x00000283C6C61000-memory.dmp

        memory/5824-756-0x00000283C6C60000-0x00000283C6C61000-memory.dmp

        memory/5824-758-0x00000283C6C60000-0x00000283C6C61000-memory.dmp

        memory/5824-759-0x00000283C6C60000-0x00000283C6C61000-memory.dmp

        memory/5824-760-0x00000283C6C60000-0x00000283C6C61000-memory.dmp

        memory/5824-757-0x00000283C6C60000-0x00000283C6C61000-memory.dmp

        memory/5824-751-0x00000283C6C60000-0x00000283C6C61000-memory.dmp

        memory/5824-749-0x00000283C6C60000-0x00000283C6C61000-memory.dmp