86d73fbbc9424deb83f7fd21c940e6af0f20a1fb9daca55bb9b86675663b4f2e

Analysis

max time kernel
151s
max time network
160s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
14/10/2026, 04:25

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
RaraAudioApp-setup.exe
Size 130.0MB
Sample261014-e17exsfw3y
SHA256 86d73fbbc9424deb83f7fd21c940e6af0f20a1fb9daca55bb9b86675663b4f2e
MD5 6877c0b549f9553a622a3b834948b995
SHA1 952d5da0e1f928eef37af6e22b9f0d33edee2c2c
SHA512 a3c3e4e2634d0429135947e2d43213ad91719b15f247234708536feec554bb32c9ecaa6642e1047de020393abfa91ac0d92672bf21f3c21e1f68c00c025036d0
SSDEEP 3145728:6eI+LCvX3jLfSSrfMd6KxEycbcJfKcRL57AN+KLo5vej2X/eESNhWo:M+LE/6iy7tLRL57g3s5vGK4Wo
TLSH
T12B583386D2DCD994CE6BC37C40F4527060E0227B7634496EA99F9FD285BE0D91B87BE0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

defense_evasion discovery execution persistence spyware stealer

Malware Config

Signatures

Reads ssh keys stored on the system 2 TTPs
Tries to access SSH used by SSH programs.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-461973139-3212354679-1508698038-1000\Software\Microsoft\Windows\CurrentVersion\Run\RaraAudio = "C:\\Users\\Admin\\AppData\\Local\\Programs\\RaraAudioApp\\Rara Audio.exe"	reg.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Executes dropped EXE 8 IoCs

pid	Process
2844	Rara Audio.exe
4952	Rara Audio.exe
1524	Rara Audio.exe
3172	Rara Audio.exe
1212	Rara Audio.exe
944	Rara Audio.exe
3908	Rara Audio.exe
3856	Rara Audio.exe

Loads dropped DLL 26 IoCs

pid	Process
1864	RaraAudioApp-setup.exe
1864	RaraAudioApp-setup.exe
1864	RaraAudioApp-setup.exe
1864	RaraAudioApp-setup.exe
1864	RaraAudioApp-setup.exe
1864	RaraAudioApp-setup.exe
1864	RaraAudioApp-setup.exe
1864	RaraAudioApp-setup.exe
2844	Rara Audio.exe
4952	Rara Audio.exe
4952	Rara Audio.exe
4952	Rara Audio.exe
4952	Rara Audio.exe
4952	Rara Audio.exe
4952	Rara Audio.exe
1212	Rara Audio.exe
1524	Rara Audio.exe
3908	Rara Audio.exe
3908	Rara Audio.exe
3908	Rara Audio.exe
3908	Rara Audio.exe
3908	Rara Audio.exe
3908	Rara Audio.exe
3856	Rara Audio.exe
3856	Rara Audio.exe
3856	Rara Audio.exe

Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

Using powershell.exe command.

execution

PowerShell

T1059.001

pid	Process
3704	powershell.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Executes a command shell one-liner 1 TTPs 1 IoCs

Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

execution

Windows Command Shell

T1059.003

pid	Process
2920	cmd.exe

Reads the TCP/IP host and domain name from the registry 1 TTPs 6 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Rara Audio.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Rara Audio.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Rara Audio.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Rara Audio.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Rara Audio.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Rara Audio.exe

System Location Discovery: System Language Discovery 1 TTPs 2 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	RaraAudioApp-setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	taskkill.exe

Checks processor information in registry 2 TTPs 4 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Rara Audio.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Rara Audio.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	Rara Audio.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	Rara Audio.exe

Kills process with taskkill 1 IoCs

defense_evasion

pid	Process
4376	taskkill.exe

Scheduled Task/Job: Scheduled Task 1 TTPs 1 IoCs

Schtasks is often used by malware for persistence or to perform post-infection execution.

persistence execution

Scheduled Task

T1053.005

pid	Process
5096	schtasks.exe

Suspicious behavior: EnumeratesProcesses 7 IoCs

pid	Process
1864	RaraAudioApp-setup.exe
1864	RaraAudioApp-setup.exe
3704	powershell.exe
3704	powershell.exe
3704	powershell.exe
3856	Rara Audio.exe
3856	Rara Audio.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	4376	taskkill.exe
Token: SeSecurityPrivilege	1864	RaraAudioApp-setup.exe
Token: SeDebugPrivilege	3704	powershell.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe
Token: SeCreatePagefilePrivilege	2844	Rara Audio.exe
Token: SeShutdownPrivilege	2844	Rara Audio.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2844	Rara Audio.exe
2844	Rara Audio.exe
2844	Rara Audio.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
2844	Rara Audio.exe
2844	Rara Audio.exe
2844	Rara Audio.exe

Suspicious use of WriteProcessMemory 15 IoCs

description	pid	Process	procid_target
PID 1864 wrote to memory of 4376	1864	RaraAudioApp-setup.exe	89
PID 2844 wrote to memory of 3704	2844	Rara Audio.exe	94
PID 2844 wrote to memory of 4952	2844	Rara Audio.exe	95
PID 2844 wrote to memory of 4952	2844	Rara Audio.exe	95
PID 2844 wrote to memory of 2920	2844	Rara Audio.exe	97
PID 2920 wrote to memory of 5876	2920	cmd.exe	99
PID 2844 wrote to memory of 5096	2844	Rara Audio.exe	100
PID 2844 wrote to memory of 2840	2844	Rara Audio.exe	102
PID 2844 wrote to memory of 3172	2844	Rara Audio.exe	106
PID 2844 wrote to memory of 1212	2844	Rara Audio.exe	107
PID 2844 wrote to memory of 1212	2844	Rara Audio.exe	107
PID 1524 wrote to memory of 3908	1524	Rara Audio.exe	108
PID 1524 wrote to memory of 944	1524	Rara Audio.exe	109
PID 1524 wrote to memory of 3908	1524	Rara Audio.exe	108
PID 2844 wrote to memory of 3856	2844	Rara Audio.exe	111

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012

C:\Users\Admin\AppData\Local\Temp\RaraAudioApp-setup.exe
"C:\Users\Admin\AppData\Local\Temp\RaraAudioApp-setup.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1864
- C:\Windows\SysWOW64\taskkill.exe
  taskkill.exe /F /T /IM "Rara Audio.exe"
  2⤵
  - System Location Discovery: System Language Discovery
  - Kills process with taskkill
  - Suspicious use of AdjustPrivilegeToken
  PID:4376

C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe
"C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:2844
- C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe
  C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe -NoProfile -NonInteractive -ExecutionPolicy Bypass -File C:\ProgramData\windows\RaraAudioApp\_spatial_audio_off_2844_1791952275390.ps1
  2⤵
  - Command and Scripting Interpreter: PowerShell
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:3704
- C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe
  "C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\RaraAudioApp" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1780,i,10188120997922538955,6563845793604426621,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1784,i,17785565788224704844,10950555324790003364,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1776 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:4952
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "RaraAudio" /t REG_SZ /d "C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe" /f"
  2⤵
  - Executes a command shell one-liner
  - Suspicious use of WriteProcessMemory
  PID:2920
- - C:\Windows\system32\reg.exe
    reg add "HKCU\Software\Microsoft\Windows\CurrentVersion\Run" /v "RaraAudio" /t REG_SZ /d "C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe" /f
    3⤵
    - Adds Run key to start application
    PID:5876
- C:\Windows\system32\schtasks.exe
  schtasks.exe /Create /TN RaraAudio /TR "\"C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe\"" /SC ONLOGON /RL HIGHEST /IT /F
  2⤵
  - Scheduled Task/Job: Scheduled Task
  PID:5096
- C:\Windows\system32\schtasks.exe
  schtasks.exe /Query /TN RaraAudio
  2⤵
  PID:2840
- C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe
  "C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\RaraAudioApp" --field-trial-handle=1780,i,10188120997922538955,6563845793604426621,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1784,i,17785565788224704844,10950555324790003364,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2200 /prefetch:11
  2⤵
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  PID:3172
- C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe
  "C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\RaraAudioApp" --app-user-model-id=com.raraaudio.app --app-path="C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1791951667768441 --launch-time-ticks=611014760 --field-trial-handle=1780,i,10188120997922538955,6563845793604426621,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1784,i,17785565788224704844,10950555324790003364,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2512 /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1212
- C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe
  "C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\RaraAudioApp" --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1780,i,10188120997922538955,6563845793604426621,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1784,i,17785565788224704844,10950555324790003364,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3156 /prefetch:10
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:3856

C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe
"C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- Checks processor information in registry
- Suspicious use of WriteProcessMemory
PID:1524
- C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe
  "C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\RaraAudioApp" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1856,i,875544962484983673,928107224252582751,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1860,i,2166822288439767917,3890634638285771429,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1852 /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3908
- C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe
  "C:\Users\Admin\AppData\Local\Programs\RaraAudioApp\Rara Audio.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\RaraAudioApp" --field-trial-handle=1856,i,875544962484983673,928107224252582751,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1860,i,2166822288439767917,3890634638285771429,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1900 /prefetch:11
  2⤵
  - Executes dropped EXE
  PID:944

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Command and Scripting Interpreter

T1059

PowerShell

T1059.001

Windows Command Shell

T1059.003

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Scheduled Task/Job

T1053

Scheduled Task

T1053.005

Defense Evasion

Modify Registry

T1112

Credential Access

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

_spatial_audio_off_2844_1791952275390.ps1

Path C:\ProgramData\windows\RaraAudioApp\_spatial_audio_off_2844_1791952275390.ps1
Size 3KB
SHA256 23cd9cafd4eacba617af96a49b04d02c8bde40e4fa13b8930f03e792e991ab6e
MD5 06cc4424782d7ba767c40133c5847c47
SHA1 837f71c43cd88e890ae3bb6e23d74bb9f47c8a63
SHA512 15fd2d848157ddca0f066bfdc455857c5dd968a7a64d42e2d4dd28c26b22c28cc9b6d1d16008dc50671f67816489cac03c060b0227afb317cb1de8ce97e596d6
TLSH
T12D71106679A7DC01444B6257C4FB61801F3175BB889C2015B9FE4582AF7ED22CB627CA
MD5 SHA1 SHA512 TLSH

Submit Download

config.txt

Path C:\ProgramData\windows\RaraAudioApp\config.txt
Size 882B
SHA256 a617833ba5372b5a00ec09ec9ed90854bb2cf53078363cd662db3d08bef2831e
MD5 a18cf462953bfc21801fd16a3e75ea78
SHA1 febce6ab0f615dd0cd58d09dd6c6361b69a9ef51
SHA512 65bef5dc0452a8b50714a035015ead160e2726ccc253385e0642ed6fb9d4a7aa6e13134a48cfadf126d8e558ff72dd8a3a0c31f6f26ff97934de0847b7bd8f85
TLSH
T13D11590C18028C79835B67CFCECA1A2595FD05E96F9C894CC99FCF0132DA3668A17342
MD5 SHA1 SHA512 TLSH

Submit Download

setup-trace.log

Path C:\ProgramData\windows\RaraAudioApp\setup-trace.log
Size 1KB
SHA256 86f87fa44359db52fe20e5a60f75c671677e3b62b25ae2e748f1d0a12aebcff4
MD5 e51cfbc4e33d18f706565b8be96c8a08
SHA1 58a40636cb0d7cb44ecdc63166828959b92946df
SHA512 05fd8b765b9cd81423b0a6c22927878cd79d4c8f0ad035c2dfc16ce6efa48a03364de26c3fc019583361077a9603b1bb3e3aff3498ce5fda8900581320d93068
TLSH
T12031E1807605B8BD8DFD87C9C15C4D4027F1FDD4608D02A7AEFAE9292209E49316A686
MD5 SHA1 SHA512 TLSH

Submit Download

5767d3a6-53c2-4c07-81f2-08ccd69f3898.tmp.node

Path C:\Users\Admin\AppData\Local\Temp\5767d3a6-53c2-4c07-81f2-08ccd69f3898.tmp.node
Size 2.2MB
SHA256 31838fdc8f660392939cbcc30738005fd5e0a2749d47005abbc17cec5e4a25e4
MD5 2082b83dd60ede1b9f59921d6ed9d1b4
SHA1 e6f5b68f816a21a15777db5ed5fcf48c783a6427
SHA512 9f2d6137882d57864e234d2b1be4557baffe0a55c3b004559a4d79494561f91ce7287d40c19390e4646dc16cef676f2f3a0f3df13d8a5bd734f0e42086e22289
SSDEEP 24576:3iMprRUmicA9vqGT0592tMXm0P6DSGZN48sj34sPsecz6ugxt+kAlF72PAjxtj+S:3rprVzcWEi3AqsMNlbhW
TLSH
T11CB5BD064758C8E9D83EB022B417677AE56A221B483D52DF04F48D61082ABFD5DEFFC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

LICENSE.electron.txt

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\LICENSE.electron.txt
Size 1KB
SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
MD5 4d42118d35941e0f664dddbd83f633c5
SHA1 2b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA512 3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
TLSH
T1B511861E726453721C56136055766C84F12F725FBAAF2784246EF384233746CE5FF844
MD5 SHA1 SHA512 TLSH

Submit Download

LICENSES.chromium.html

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\LICENSES.chromium.html
Size 18.6MB
SHA256 0883a9eb407906c12b334d89bc5fbc63bd1df9e0803c252cc8d23cb76b6d58f3
MD5 77f8e4617a7729e6168944c936960255
SHA1 caf00f45cfb12de3b9951d25e9d6b70ed79b8b5a
SHA512 f58e6cd7afee7dc77d562f027ab47c23999fafa87153c674faca646aa44e94469194bfadc94c2c09515ea42c179dd560aea1b5b9d1ad3f83455f163a0d69dc45
SSDEEP 49152:nRWnjZ1pNUAwuTYp2bKvC6Y3r8xsJQf8xFTDeQdt+lHx37DoB:y
TLSH
T1DF17B56BBB49037316F242626B47A5CAF31EA13F375A1654309CC11C2B7B92483FB69D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\chrome_100_percent.pak
Size 113KB
SHA256 34433fa04ddf5eb78b3b4e9c64a3af626e28641907ad7a6086614eb6a8f00a07
MD5 a8d9be85b9a9c2a1be1815b29cfde9ce
SHA1 9b8df5aebf541d063311ad4c2be1d23398f13a33
SHA512 37ad60e74c7e439f83b87ce61018619568914ee491289e3fb34234a0c4e3258c4986cd56e6e58652134058ab1f824a90499d4aed46e611937ec946d9a3b680ec
SSDEEP 3072:fnk4PisCv+/P9NebGz8LI1TwILjQBHe7YAP18RVC2I:fnZYWFUbGz8LI1TdjQBQCrC
TLSH
T1F8B3E0D773B0AD7DD6870BB783660070FCB31B2D06C2160A4A99E479652AF88D8D93D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\chrome_200_percent.pak
Size 183KB
SHA256 581c8d53199c10512d31a340699f9ad269f8eea5fe6bc49e05c1bde98ee612aa
MD5 e0d4001307e8e8554810b27796ad636f
SHA1 be92e88b55ae85cc5118009af0fe32c9470c0dca
SHA512 762324239832fa1a531cc3da546df8627610a164c13d83f12b64c28e207273989fa7da0c4e96787ab0a5d09f5202ebc31895f09ad2fdbea4e6e70c0d2b4f51d1
SSDEEP 3072:jgJ8LahaY7d6iN6uSwxohPQDQYaEjrvy/IwXJPpLjQBHe7YAP10uxR/TbIM0:jxGQ+N6uSZQDQYakvyAk9jQBQNd4
TLSH
T1C704F2D723B8AE3DD9570B73926610E0FE7A20291EB3110E469F98397925F8CD9C9343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\d3dcompiler_47.dll
Size 4.5MB
SHA256 406d876065b5a232945cef02e79b3755f8eb6301bd7b8dfca0d8f09e3bcb10d7
MD5 e418b4d1e5777661d61cf29e01685ac1
SHA1 2adcd5014a59e6a4f633f21eeed5db374650d837
SHA512 3f826bc0b343892a71ca2f7721efc834256d36f192e81e07a030bb6cb51ff3e026610f6440e434cf4b62c78150c9ba8507871dcacb5f47059654be49564896f6
SSDEEP 49152:gSHvWaWTktEzfRriMsCL98dhdVhpHGC6GNCxJYrv9y5Eze+V7ZpdKMZzaWoUyxqa:ruktcrfNlTyj5byqSJ
TLSH
T12F268D5767E840E9C5BBD138D687831BEBB1B80413345BDF01508669AF73BE26A3E724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxcompiler.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\dxcompiler.dll
Size 24.5MB
SHA256 e204a2c5a8f6a29bd4da12ec6cd5d754eeb3ef57e6a9c350ea10aa50fb95e041
MD5 8aec850ddcf925e03935f5485535f86e
SHA1 5ccab07ca947ef99e542c631afff7bda9cccd474
SHA512 799f87eb09944ff18edd73f437235b0fa2ce896b7f789fc913b51f017f232c35db190fcf4a90c5b3dea0d31557eb7d0e662e2eb34b02ccd775369687ac51fed0
SSDEEP 393216:x9tCn2P9zxhOMXtVz5icpXH5uVUi+ziuP:gGzPdrIVCDP
TLSH
T1B2473A122646D49CC059C879C7678B26CA6C30E73FA7B8EBC0F451252B79EBC5B39235
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\dxil.dll
Size 1.4MB
SHA256 f9383c29964d0cc77d32d872c22e6cc9b94680150e8bcb5e5805c2ac991a5f09
MD5 259347661841a1c09750663c67f5c4b7
SHA1 87769227778170544ff8731dcf41b67748277cfd
SHA512 fefc9b505464a494ce0100cb5962d554361d3cdb053112ad465795c7b727b53c9d411a26de57b20482c22f86be1701e2a4e9f328b9bf9ee9cc741322a5b7c86b
SSDEEP 24576:PY+wATtbKYxy0y3ny6eBjNSGlVZyi27+V0IJNSD11J7R+j+v1acLUkJvS5Kae:wiTMYxy0Sy66Zh7Sh/cyvS58
TLSH
T1E3657E1B229801B6D4BBD17CDA47CE0BE6B2B41503B09BCF12B406692F5BBF55A3E351
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\ffmpeg.dll
Size 3.0MB
SHA256 7e504ed81940f8ccb26ac739cba609bb40cf9055d0279356ce5dfc40d4bc88c5
MD5 7f7c7de607df58fe4cd11cfd16e92f6d
SHA1 b7372815ce22127671b5d158b5b553bd543507bb
SHA512 d0a23399cde3fdc83b1d983c93aee581732044c9fc352e0b734a4f8f4e1253aab4feb130216a5298b5622480503151824ab763a4451ea4b39e1c0e44249311a3
SSDEEP 49152:KlyMFEi+bSxsTUs3mFNYisl199a6LKIbB7k6TNDNoJHaKyEC8bW/1:KlyJGsQsU+is9dNoJAem
TLSH
T149E5AD02F2D651EDD019C034979B9313F631344A4F209AEB16909A263F6BFD87E7E768
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\icudtl.dat
Size 10.3MB
SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
MD5 5bfd3eefca4b5ef2d1a869396390a7de
SHA1 c58567f7fe308ccd43f406b70aa8bf6fdbea4f3a
SHA512 4489a55fa0b47c8d1e9679032e036c7998f82efb4191b98900ae40cfc30a26b65290867527161c594c42fe7999b2314f8928a5d717d65d4eeedd4fdb0ed0f427
SSDEEP 196608:A6akBhOR8LE/dUHiXUxa/iJ53IWhls2E91Z0G:AqwKLBHiXUxa/iJ53IWhls2E6G
TLSH
T118B63903A2EB4EC6F9FB5F7498F562779527BD49AE32804A51043F3B1C333908664B66
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\libEGL.dll
Size 525KB
SHA256 7ac958e9ed712ed13bf55ecaa530fb6054e00ef72d96693f1523943fe62e9162
MD5 1f31440af3253ad0ec8a04db6194a560
SHA1 135a4baffd2ae11b0521f139eabb96706f66f71a
SHA512 50096a86292387ce547521df689ff3eda5a5836197ead016219b9a6b38d844fa0ea3dce1e23fbb5d8cb61db3831680c53e0c73108c50edde2516a751b389c845
SSDEEP 6144:keQszxnw5uBqWh//UlBowkZDYJ6RSQmWYmkHGVGWFcsfAVMugP4gfaguL1iMgV:CG/V/iZJOmW6GVGWFcsfAOugP4g410
TLSH
T191B47D15F3E84BA9D07AD1348A438642EB7174961F65F9EF02E052352F3BBE45B3A324
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\libGLESv2.dll
Size 7.6MB
SHA256 7bd60e78e500963cdee7313a8961c78eae44e9a06271c96a2d56cdbe37902196
MD5 a2cb0a39b5ba23ed034adaee3bf57944
SHA1 715529c0ccbff927d159652a28e6e63296167963
SHA512 e0940d80850cf4a1a1e019f046653578e06b5e713132215e0b1808ecf9e1147319df969d6354893763485ee45891a4038f80b972b60337ab86dd1d544d25da5f
SSDEEP 49152:9MBGqMdyXZfYB69zGCEvgs2+QOV5vvl4m3nbIXRuaGrfW9OKQ7U90Ffv2rL/msZw:cGPyXyoPDrD0derjmq4H9iFVB0kxm8JU
TLSH
T1B6867C03F69641D9C05CE2789B67A223FA34B4550724B7CF2A9453162F6AFE0EB3E714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\af.pak
Size 596KB
SHA256 7bf59977f051c1ccb19cb8c48a8efd57922d088ad26cd51a85a671000c845a4e
MD5 0a95fc23b7a7e74189088ad0a8590875
SHA1 118c82d27a1d13776e37ef229e11cad30d7bb0f2
SHA512 7264d75250c98bd9b9086422c87800484d3658fef8cde3677a16d3d8c9398a85cf042b96da03881ff00500c17d7d84cab15426fc464443ab99468e3074ae6cba
SSDEEP 12288:VfaIq9BmRPxgtRGt+2d5nPw3NtEKQNZ3GOZKv4H2JynPN+DgWALlzNozvnLImgU+:JFq9YRPutRGt+2d9Pw3NtEKQNZ3TKv4B
TLSH
T140D41B0AE781173D09B07696FB0845B7FB9CA26CC770B2BADDA982310566DFC11BD1D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\am.pak
Size 966KB
SHA256 a387f4af550667980c7631532b5c8f50a20ecf2c2f45392a7e0bf23f8f6c91fc
MD5 f2f6eac3736bc92f92d00aeb8da1b847
SHA1 3579b89479ceb7c297ba15c044471eb700a2299b
SHA512 9c6ccdec8a5412b2c65804464a1c7532bd9c76f0cf3aec8ff45558e395431abd1ace149ca4e99830dd07431c322a8f68e768c3407e885cfde5ce3404404d790d
SSDEEP 24576:T6BeLyUTG1g9thTCKfyYtxPTtfjnX7TBzv8XqSBhiyPVABZpPQx:T+PH
TLSH
T18425AB547DF9F7570F8E8A1994320E4EA594AD4692803C38C35AE3FC2B2DF1B4DDA219
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\ar.pak
Size 1.0MB
SHA256 e8f4b9b64235893bbee95c8360c739e5ba09687072dd4b7d706cee9ae4032887
MD5 0c66aa7d25c9602b75dd709b87613b95
SHA1 bbd6b7c484118f4b601229b17000f71e1b3a00df
SHA512 60734fbac06ec1f74fd1f72d544a8051f86473593a980a6cdd4924190e1856965127c0ca184d766175457541395eb641a69af6cc1205acdbaeda159296651e25
SSDEEP 12288:1nZ3HDZGmBv9p7NNHHGCPXwjdb7Ae3v4UCKvkb3GSM8NjuE/YhG3q:zHDoxEA
TLSH
T17E358BE21B2984720B56DF0FD1E23668E872BD23DB4BFC3124934A2156D7513E78E678
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\bg.pak
Size 1.1MB
SHA256 da36ef0cde92b2021ff39b6c3341f4d2832c1129d13248aa371573812140db9a
MD5 06a20adf56e618ee61a6abccd937126b
SHA1 7c15932c946ac82d5e3633d46cd9330c7038dabb
SHA512 ac5241c9120652eea1ebc516fd330d15a0a77cc3fba5c62db2b59847fbbaa66022f04c83815f6e79da78c706e8eec7e3458e838587ef07b56ec06c899c693e65
SSDEEP 24576:fMrkmpWmldLYFg9zQkEC1UcVb6IM2Ql373ZJm8S3G2KjUfVDDMwh74u2VnJNIdky:fSpWmldLYFp8UcVb6IM2Ql373ZJm/3G8
TLSH
T1843535A15B9A68DF0101F45F98087E093CEB84FE3FE7879241652DBD39E10B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\bn.pak
Size 1.4MB
SHA256 4f246bc78ddfc2cc249ae99990470e2d470a13a2d7599ab8787400c4fd179cdc
MD5 6c5580282c738d26326f8848944534e1
SHA1 25a6bb7327c14a2d8fac979f44874b40aa39694d
SHA512 8e40eb5833cb1a9538e0f7037ddbb6988c97285fb6253fee59bc0d75ed4db3387396dfd822e5f7910aadbef5132939ae9463c50239aa0e4f436b25c504f35755
SSDEEP 3072:37qCtC6WuIjUrGHbC1AHPDqnSIHReYw24Oc9pjgEf/8UR+q9N1IfyjWBbNdQZ3k+:3H1p4bCpSFYXq9N2fyjWBbjwn
TLSH
T19965EF209C6E81B6A8C5CDC9434C6370C523AE9B9B65F74DDC17A14938ADC3C8CADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\ca.pak
Size 671KB
SHA256 b232cebcb102bf03c81286f1ec082e80d0e399d09d9251c3e574ef24fb15b68b
MD5 84661624b4c3be881266e6626298f40e
SHA1 25a98d2c399923cc4b7835520e5c37d4ba51b2e1
SHA512 d10e9a98d19cb35ee67993d9d902626c58cee12018a36e87a491fdd492d13c30302f5a2ae20c9609441084180bc7ad7acbf250e28a2e557a869d2b4d10767191
SSDEEP 12288:drkuMWeY7hj3lCiGOwpQa825PsF4N3Mw2juwwPR9zejm0t3l7C7T2nLfUowTLX/8:yuMo6NvLvE9p+MNe3GjUyUK
TLSH
T11FE4F8239FC93B7704D2330AFB46C253A48CA9847B16D254F4AE1B1622CCADCD677AD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\cs.pak
Size 697KB
SHA256 58b2d7c81430bec91ff72560acd604df82ff0090e2c4e3d1ce8cac2b69bc40e9
MD5 10bb2587458fbc7299c2fbad2f0f3f65
SHA1 0f7844d1b3179290163c9ed84d488b357b4fe99a
SHA512 000b61f7663069d32304dd607349353b9ade3132903ec0db5cddc75902e9303ed6028fb3e8d8c2d55f081ddfb4dfd7fae4fa0332735df3edf5fcc82d264bfdcc
SSDEEP 6144:ViB+aSVbVEdtuHrvl5An2R7gAQnTzWY5Z8OOwJSBxd8Qq:Vk8bV/Hjl5A2B4zWY5Z8OxJSy
TLSH
T1DDE4391EEEA36425484002487BBE4128BD5EC3140B6EE9AB7C8F9C912575B7E8FF4D58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\da.pak
Size 626KB
SHA256 66de87f60ce23d82457271b34da1baed85bf0f3f63b04d90610a20c4ebe66c23
MD5 d9ea0e47d70b2ce1867f98e3678641d6
SHA1 26549b17ef25707b3aa007f37093b7762e1a8ee3
SHA512 25ce5dbfcf70dd42a398878f095bfe7363e055d6eaf801423eacf48375ca7de828ea8fffc3abf7221f3b77fca0645b14e40cea93b756070dbb937d14725efe1e
SSDEEP 6144:Kls69lUrKDzVIcyQD5wnMXgRi/cCJsE/em5LzwlAMDJwxlOEbPaQSaKBDsjofs3i:d69naCP5ZOA+DwcsTG
TLSH
T169D4494BDC9CB32FD9A94725F3118DA7DB6D543CC684664F64D8943A09CBCA092FE2C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\de.pak
Size 672KB
SHA256 dadd0439167371607d9a82222f248f268d9e27669c1d87ca09d8751c07a90d01
MD5 87d19b826ef22dbf769105c9bd0d4e80
SHA1 e0593b7430aed5a14ad9d7dc1ca33150ad51676b
SHA512 b90d40bcd8e88de8c827ccf3ed41f5d2cc8ec2807f67974b80c3dac421637b1cc50368aacc07ae13472a0a3667b1261c18691ab6b9e9d541d8b0936bd043f047
SSDEEP 12288:xPSib0Mg3K7UpIgRaf3IJ9hgn4cUR+5Cgv:7b0Mg3K7UpIgRaPM9STCgv
TLSH
T1B0E40803ADDB625EC686B3617705CDB77B19E36FC346312B84EDD02B654B5B283AC422
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\el.pak
Size 1.2MB
SHA256 9a9db32904381a6eda169f56099313a494dae63f2795678449c4ad87cd3a69fb
MD5 ef455541e4d9053f54adf3e681a717fa
SHA1 bf295e6aa17fc75e8129c5b44ad84072369694f7
SHA512 5df3df197e5fdce91f2733a1a7b5ce34cc3831f24ee850bc3f991595629472f7e76d9b32620521dcf4a0b0d614ca359f20825c4703217857bb5e7945198cc7be
SSDEEP 24576:5n5RAHWFbrl05Yp9Ck2tCZu/xJXDsSeEEmKo+Jm7QJ2oSCgd0kBHciyjUHvQdQVS:5n7AHWFbrl05Yp9Ck2tCZu/xJXDsSeEA
TLSH
T1B445CFEFB4582DED8046950785D8B07C2BC66D6CE749CBD86229CB60BDFC0719A22D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\en-GB.pak
Size 543KB
SHA256 7bbcf19623b0a34524d75a3211d305d6b01150b3ecf2bff3b140189a13c29eb4
MD5 dc27da1c7a8e6128f10f767a93d9f59e
SHA1 8c674b0e92784635fe1df1f9f567565da8c5f3d7
SHA512 cd67c53203e7f0ea10182310f9a4ad76de7e9c1ba3e3fc8c5f6314a475912e0ccc827c39ae946d158d2ef92ee92287dddf9953e29e8bab51f0596dbc9b066dbb
SSDEEP 6144:QH/CgP2QAaWOgHShxh+EpiFOFJeQMP9qQTpofaYH5WjoT0DdBckRPZ:Qf1DgShxhDzMgQTpMuDh
TLSH
T101C43C1FF744126A059312A2BB0AA562FF23D07CB35112667CBD811C33B6B6683777E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\en-US.pak
Size 549KB
SHA256 446a0f711467b162cced38128932f712e4a53fe344a165110196c366fd3d87ea
MD5 0555742b1e5f91449a199b9c42c1eb3e
SHA1 2f7ecfa75faca014c06e435fc6d449072d47ac41
SHA512 6d5f20741c97933d7c2d7011b696632e056db182941483e6c5675ecaf2b18132abbc0397b2c703e79a878838db806766aab69b2c90f6fd1dce377623d5501af6
SSDEEP 6144:LOvSsWLA2zb+H4HfYOMg/jScMP9sQqblfaYQhp1B1OjRng98//Bwf:MAxJHfdZM6Qqbg0jBwf
TLSH
T1C7C44D1FF744112A05A352A2BF0995A2FF32D06CA35112563CBD812C33B6B6693B77F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\es-419.pak
Size 662KB
SHA256 337a0ef8be48fcf7d120026d8dd9970737604ad177df1709fefa5cca79c70079
MD5 8cdd77bd74d129d8de17a80a7f55ace6
SHA1 a5dd1efa4b17c5bb020463f90ff13032d0564115
SHA512 361834022eca29ef51dc324c71a265c5021e58c18191d9e3e3956a8a5d2d758d1ec7789129d329972f4af57c20f47017e6bbf5fa0c217836ca50d3cde50ed883
SSDEEP 6144:nsTn4Nem+KiHkr6YvFQGo5cQ3uJwH5AoljsBFK:sDUeFWYiIuJwAlzK
TLSH
T1DEE40922BAC81F5310E3A348B743D757E8D89145B408D29BE8EB976522CCF8CD967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\es.pak
Size 659KB
SHA256 b32a3073e0e749b8b1f0f3e082343a8ca192cf3b7244847387526a5cd8beef7f
MD5 b4e50b9a3db4f42081565b1d80c47092
SHA1 e92d363f1cfa6215694fc66e406db3bfa2bececd
SHA512 c910c8d306d133248d75a9f31888257bae0671c53fa24e4ab7443ce1f6dae3e150f20c65efc4cfdb0eb1db2cf66b504858d3cdf973a636a4aa6c5963d5681647
SSDEEP 6144:bQ10KCd6qHnzvnx18hWbqgWsM+JcbNE/m18jFNLOJzMv+24/ZV6PZC9/:cTCBv6WbQ5NE+18jLCJwvZwZBN
TLSH
T1FFE4F726AACC0F6310E39349B743D753E8D89545B508D25BE8EB876622CCF8CC967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\et.pak
Size 602KB
SHA256 740a4632aa00dbc07251c10cdef1480739069a6456fa9a642eef387fba935e09
MD5 34d0355cf1eb4d0f6a1945bbdd8854bd
SHA1 f3060777a364e2c3eaeb3792eaece19cfd57adf7
SHA512 f90ada80ab082f442239cbcd345bdbdc127f052986e12b1333bf2c1fd2731d37aaf6de494e9f0494cbe23f2a36e5a44363d74de2816d6eb9f89d7ffc5a02ffa9
SSDEEP 6144:GyBhI2yibCX9I3rOf91D5+OjFnyL0GnFacklk1s9bemPOTQysNg0davqloIC0Lqa:GyFuX9I3rO/RjF0nFac05NeqlDCwqEr
TLSH
T1A5D44D42A27D771B242412F9E737E923DC9EE3D4B4000D9668974A1971EEFCC38B6B64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\fa.pak
Size 996KB
SHA256 7d13dfa4bc6ea7ae996f0696eb328de26b35e1ec7e606fb0c4f8192d4bfcbaec
MD5 531764f5de01173765ba9493faa616a0
SHA1 955fcd775d11b6031b5a61e65320f125cdfaf315
SHA512 291e87cd702bf8b0e8e47a1eccfa1cd0db69a1d0c679ce984cf0014df4651e8c9a41a52c5cd86bebfcc7e79e89e23f72994ef3cf6a30b51b8d35944c65efa018
SSDEEP 24576:/87m8u313uyqoz+so2+RmXnloTUoXtCfGk62Yhk826Bike8MX41OElUKgkI02mH9:6
TLSH
T1BE25B1957AAC9AB15747CA0341E33834C773AF12D349FE40ACA1076609A5B139F5FA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\fi.pak
Size 612KB
SHA256 53cca3552a8bf4ccc516103cdf929b5f10ba1859ccebe644bb080082faff6878
MD5 8edc200d5b49279006932291ee921228
SHA1 cec52d84cdf97d19afa566488219aa3aeda0c361
SHA512 4f6b2269d0a7b921518d851755ca048a0d77338571e265b369e4a13d5f25cd7a1f93ba24d351c1cc9e2271436976b96d2cca56ee93a9a1ddf7358596d09f8fd8
SSDEEP 6144:Vcf9MSQWOU3RN19cb8S7FYmS0rZpAgL0WsTCaeOEmHHuaQQLMcpVH7IEprWa5L76:8ZN3319ivhZRagcpVbIEprWaJQ+G
TLSH
T192D45D915215C22237C8D29E79B0903EF5E5E3DC8C284D96E843C7D849EE9C87DB276E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\fil.pak
Size 695KB
SHA256 3503fbfa400b23a3019005a2f1d7a31d623b056889a66abcaeb1558ad4316924
MD5 a66e55153f63571bf1544a6ac6d28a9a
SHA1 82d250b56122d39ca073393a04b282fcffb2a4b9
SHA512 0f52dee2635ad29a975e1fc211215c7846c3e4bbf20a08b28628c6c7837b5dc8af7bed5a645bb5e60735441b2eddea9d1fab77fd2b275c846edbe39c88b46616
SSDEEP 6144:H06UlTXBaE7/y+DQGCOgwlP6t1ihDVzrCcVNvt/LaoVUA1KUO:DUlTjHvU
TLSH
T1DBE4C616B7401748DBC352E52260682F6AE560B83F81786E0FFF269B7BE7CD5D270192
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\fr.pak
Size 716KB
SHA256 a8db41476a1103bc5bfb617b150c6b6e2ca1eb24f534872c9c15e353649cd0bc
MD5 8aa09f7b489b39f0a68ab0cf63dfa023
SHA1 3998a3f55fb40c835eb5f77813dbb43ab4aaea36
SHA512 ac69e432135100d2d07fc91215b62a7af7add36a3bb8e0c90e84fd312227fe8886751e6d8c08135c1cb0e80ef9f7bafea387af69f9626a98b86f96f30e58b811
SSDEEP 12288:k9tQ9uKVTZLlIb94S3bvZwi3x6QuargVam8VBezB7YKxQkZuYnYc8jw2wyxFD1Xl:k9Wov9IV+T7yu
TLSH
T1FEF4E55FBAC435CB19C60277FB12D6A3DD348248F215E340D89F4296129A8ECD39F6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\gu.pak
Size 1.4MB
SHA256 947324c6aada6255df0c702114796436215f8012634a58b065b7ff3fc92162bd
MD5 f6332dd74128db0d2580ea5aae66a011
SHA1 74352949214e664692a3fe1d906336c268587108
SHA512 cb8fbdc660fda5400b71415eee95ce6c46ea51b60f683cede2bab606fa4f27ddf08b696e2565e9c83ebd080fc524ab73a516ed3ee9e02618bc0fe7442873e311
SSDEEP 3072:uCJIIeylcq4n4KEA0s21/QahNCLT0PPjAwREJKVMjNiT7llj63rAulfcSi5NnWsW:uCJFwnB21bS0CnsGEYsXCl1DsXw
TLSH
T1CC6507D0D3B9F07119DA9F7E819E512086695343D67E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\he.pak
Size 871KB
SHA256 d06fb5dc66cc104503a861d2e4e6ef53e9172549c862aadeddcc2b5bb856f25c
MD5 a96ff98519b7b058bbbebddb3c8b9a47
SHA1 cd0b91902bf7c3da9655469050c4e9f1b61a6e0a
SHA512 82cbb1e1b90ba53038886fb96a62ebc1ebe7a48985c5e1a27f1cdfbe4979f0e806f23b9a6f9534038163bcf6f8f12f36756925eedcba29ff71daca733c5ae4dd
SSDEEP 12288:utWHv9FhJoliptjTmEM3r1y0DBAl1Wq+/8Xx4uNYA6XXTieQCaj2iv36ueAs5AOK:utQ6I
TLSH
T1481599C4B2E552255131AAC39FA4FA286FF3CAB53CA27512CB14526CAC774F0BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\hi.pak
Size 1.5MB
SHA256 a775f5724ccbe9bdfeefc448b42e3b48402f81404d94dea4252bfb765a314b96
MD5 e7485b02d720f389e8c6d2f7367b758e
SHA1 8e87a60ca6fd6ac4c54050687260c33f778fe04a
SHA512 6241ba883926f9029b6eea6e520645fb274b8b40de9f7801ef8b65002e04fa8251b8f891772d016ab1804c45f81a32e189c746f33e155a0afbc2ea8368d44250
SSDEEP 3072:5ujmZ+6BzV/+Efm/Y8e81ueYTbnV/B90ZV1d3uGlqvLWYJEdtDVesn1s4f4/BtRM:sc+w2wsec3ObPOT2LeddeO
TLSH
T1BF65050CEBBEF3B55DEC3C8A32890D37D59D3674A3E5521348D5B3DB9844CB8146A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\hr.pak
Size 671KB
SHA256 84c6bd6ce5bcd81a89b0908f22576725128e27688f6578d13d8b2f0e7fa6335f
MD5 04b05ab84079cb5b1dd625aba3a1dbd6
SHA1 87d7e615b3e7d7f19dd6f044daf3d26af352365b
SHA512 5016459008c9554a8eebb48daf41e0c9909cab0ed34eee124eb26a4426857e3976db881cb8fdebd8a2cff69ff7dd16f3cefb9a1a1a74816397e263334a0765fb
SSDEEP 6144:gb/RWr8s5X4+aqyHADul6KynubBvNEMzDOwlf6PlJ:k/R25X4FjHYoesHOOkJ
TLSH
T173E42B7DBEF2570A0897F246EFAA43447DBE08DCE56597B7684F522E0003F4C6AB8149
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\hu.pak
Size 717KB
SHA256 cd1026c6596610617d8a313b899e9d2e2514d0cd1fbf97790f2c450309ede792
MD5 64422a57354aa394d94b562ea77dc059
SHA1 c4957f8c74c5c51975fda21505ea79e0e427fe6f
SHA512 8ec3648e6a8869bd47691afa131cfa482b84902be498dffe2898b34665af6a2d62a425147b2f6c3df0d26a4151c395fdd1ca4204f51dacaf48e3bf68f484a84e
SSDEEP 6144:gj0Q/ZLS5SH3dFTpr4HR8XlH2DQa4FA4jt+u8U5iT78gZ49JxCYhU7rvP5wsmk7l:rQ/hS5SH39NAdU5i387g8Ucu
TLSH
T1C7F44CB793B69459BC6C178778643F15592E881BAB3B31FB2883846D34A178D0D83CDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\id.pak
Size 592KB
SHA256 4de71f7c766db79412dcc1f5521c5f3e678cf343327cc31b0fc28472102e0247
MD5 3a442af03205c4675664ab3027877f9c
SHA1 f3053d4a9538721c2441a8f53cecc7602d378446
SHA512 d0efd8b9658a48d9889b94ffef00a34dd300c9e29603c1aa79e18d9abf4dcc80ea386ef616e7605fdb7cbd4a97fa0da0716d42cfc5d8a176b87d7fce689c635d
SSDEEP 6144:7Q7CuhxETiSge+Yr/IrjpS9fJpfffXoTFjlFNzmBF/tu6KIN6aUWOBw9m/iTv8MU:k7X2Vp+YcrjIDATFjlF1mn/v6ah4F
TLSH
T1CAD4D7632EC9310C494843D5F2CEA91E7CCE233BAF05B76E8E348F7055A67686716B94
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\it.pak
Size 648KB
SHA256 ac12cbbdeeea05f0cf90cc57df1f6ef299444b1f499157eef8aa089f73da25f9
MD5 1bac1301f33b94ed9d775fc795977af0
SHA1 47e15676ead4124ef4afa85e84e0cf462b088b94
SHA512 2304d45b2a1f7e0cbf57a75ecec6b2133ccb87c29d09ac7dcbffe93b5b54167efd7f5c4c7a7dd40c8f8a8a5a54f17d0e21f4da109b80a5938a50a0d0889ff186
SSDEEP 6144:8xS4w0QQTCOFshlmik+b52NZzV62MxSfqBCfYs61Ztq/UhOKa1DTs/Tcr/+qpzSv:8jBcZKnO8iw1Qhii/GlwIq
TLSH
T164E41B3AA5DA252519976359E611F085FB6AFCCCFA41721CC99B031C22CFE80F1ADB47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\ja.pak
Size 791KB
SHA256 c737584f4b525c4d17cc2a79f0318640a7a666c43ef7aa24753551d1b75d7d7f
MD5 9eb040410cb10d3eb82cf34685006ad8
SHA1 a54d5498bb6c31aae13492c534cc670041143f3c
SHA512 a70a9851f0b7e1caf551e87f7452960bf29988d65f14124ef474e342d8dd6e642420d68595a61e02437e252ddf6438d453ce00cebbb1a24ce8264375a0ae8bb8
SSDEEP 6144:EjSD0KT2Y+y+XtQUXhcMa9ZdQ2pm/mJkHbZtyNBGIsVW:omLRQqU29ZdQ2U/Mk9YNBGe
TLSH
T15505307CE3C969369D6153A22C0E36E17506AC9BFCA2363A443DC074BD70BCEE515AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\kn.pak
Size 1.6MB
SHA256 3eb9b3dda74b5e21abf7d7726cc2e682afd87141ee30a488e288695d48a5352e
MD5 99cee56504cfd771817eaf8b1cf93a1c
SHA1 ef725cc4681f97eb3bcdea5ee0d6aa2456e1ec12
SHA512 5b509ed1355b9c56f5de1153a3a7958f0ac001ad120a4121e096cbec7b588f0901310cc44bf6e7a59f3d7469d1e831ab2e69dd366003278fab46775fb31dfecd
SSDEEP 12288:fQ1VgdKLz7h1HSKzoEgc8+FSC7EtPMm4vkyr2c:fQ3kDMv
TLSH
T1AE75CD18ADBA7D301BD5006B24EC643ECFF16BE29CA907D2F4DDD7802C66C6A90865DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\ko.pak
Size 671KB
SHA256 bcc64be2004522a68a12dcfb6efb45f030d0badfe048220d2830b188e7f4135d
MD5 281aaa146d570ed1251fc0b427693fd7
SHA1 99d8cd5e93d16382763db3f5bf4f02befacd9ede
SHA512 6a44e86f8efbd5af75e38b31154eecd08e6dd3765955407952108e5148453e91c99adfe3f6d33059a27a156e8c54efd22d01ac1ebfc1254af381691069483319
SSDEEP 12288:kOZtQ/nguCyekcM1WNiPszcbifYj4ZGRyzDoIy1KsDRgCxrIJ/xESJGRG1KLhw1b:kkcfnIdOO3BLO2
TLSH
T14DE4B5F23CDB63CD1193CD82AAF4FA198382D976F7530294ED44CE449E145D7488AABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\lt.pak
Size 729KB
SHA256 a7eae3ba06229763b85b29eb64e011b992679952165bb7239a9ece1d441de4ab
MD5 70f7ccb1c8ac9b559454b647a225c5d5
SHA1 0102c0bd5fd3d242d27d8cb2248fb4b95ae0e6ef
SHA512 28b6b52a57e14a0cc3c4ec9bc3de438dd52b0ddc5285f5bc1aebb852a4f641ae89de65f6db05defa009d576d8758a8bcf9071f8df097fd7da8ee04b031498f82
SSDEEP 12288:1lsbT945Mq6LjAnlhIKcGbHH7xt2tJC6SBA:XsbQMSc2b9tAJx
TLSH
T19CF42C0069E3AEFB9A4467C981A4CA78DEFD50009767BC61EC69C78BC43BF4525A0F35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\lv.pak
Size 727KB
SHA256 8a4c31840217419f608b15eca1490bb4e83c5a896556a045f95af7f1390f5f8a
MD5 2195b89b308fc09f5c295ec035a2f060
SHA1 db5000d841d6dccac04507d36833d432e10cb179
SHA512 ff1a7b6f3cb6ccef6a111097db3234099ffc42daf0348deef61699ecdfbdae20f9929f2cf1ac5d3317bf9c7d6b21bb8ae0a55abe5c651d1d8653ee985eb84ebf
SSDEEP 12288:fy9qrPmkFAWUJmyFlFbrJAGcZTSQor+os:yqrOkFAWUJmyFlFHJAGc9oaos
TLSH
T1D3F43A959EC68FA94E918DCA7336D133A8CCD740FE07E112ED798B3A510F52422B5EE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\ml.pak
Size 1.6MB
SHA256 434221a29e71a6dfc6c14a5843713df51b2afe8cc3114cb9fedfbfdfc590ce4d
MD5 76f2d86483f579721d2ae144f73d1278
SHA1 68301264602f8839f73133345b124b74bfc7c58d
SHA512 41085ab6988ad2f396f5649dd06340f9bc95e0b33f7cb0fac2104b777df0258d5eead93ffa085fdf7480141451ef1322f39f882ad88301c6b8afcc7be74b34f0
SSDEEP 24576:cPps/oZAuuxyYl+9y9XBkx/9tNnkKfijHeBRJzXcF+v2AiyZ3laJRvo3G:cPm
TLSH
T1FB759D5BA036CD3B0FD102167B4E2FABCD5B9FD140AF668B5869B2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\mr.pak
Size 1.3MB
SHA256 ae12ff8ac009a4991d71363ff442abb3beaef772d08e72f4ccd685403a02f332
MD5 c7d7aa69f9f911f1a803cbb4fade74f9
SHA1 9582a55dbe4602f3b9d6c6903c3d52e1cd89f019
SHA512 eaa68342ab50aedbf5ea6064771a5c37ab88cd8327c636a186f4e7376544346061cb9b707a8485041ace702e8575cbd4b5a5756609c04a9f685b3fc8779fcc97
SSDEEP 6144:Rf/inO5K1KgjpiWUZyS0pB+MPbiMmRsTNW:RX1K15Z+MPbiMmmTNW
TLSH
T10665D14DF7BAF3685DACBC8E36540D3BD8FD21B1C3E9925648E1B3E74884CB401596A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\ms.pak
Size 624KB
SHA256 77912adf05407adf3dfd2b0eba269b1cb99d980dd0a16fae74dabea3a584a869
MD5 900637a3441afbc9f7e43be31a30eefc
SHA1 7d85e8c25f5ec9b8fca2856e0a0b964c6bd3ee24
SHA512 d84f1d81d4de347b80e1453b90072ee55408f1adba5b506219c615eed8d89fc107bd73e444e401ad52c6c9e729167e74d9235c0284ce3acddc2eb493cee49ed7
SSDEEP 6144:f7incrjAUqzueh8XsRfQZvAEyu9S1cW9t+Huqwp+k8LNkwnwAFDqlOt3Vcv:fWcTqzJhCsG9yNmHuqwpbbRlOW
TLSH
T17DD4B5569EDE3118085843D9D2DEA91B7CDD3332B705AF2B4DB08FB0026E7A53316B99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\nb.pak
Size 598KB
SHA256 81b5a935f83a49ef4faf7132876e500a6cd49909c1d2b45d4bf1336769874b86
MD5 8eb34d85aa5ff549ce7f68cf2e1bd089
SHA1 59be2c175a0014f4cc862139c326b5fb47355c51
SHA512 4a1139d2221689a9f3ae6a795b619408e6843dc2cea47fab1b0691a939ab3a1f9829a797c80ad497498fc2d68251da6212333bf12568cc9e0f21cc828b5fc1ad
SSDEEP 12288:ocZlVO7SfNQlsOU/Op7f3PfZLnkGJI5Br4fw49au:JVIMODpLnkGa5B0HR
TLSH
T1F5D4F883EE46B72EF6A443A4F518855B9B7D942CCE98199B54D8C23E0CC7EF052BE1C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\nl.pak
Size 623KB
SHA256 afc9e6696a40b0318ba96e786fe0b286c3ea9a2d548479c1fa43d96b1c137c62
MD5 c2628ff51aa4ee3b91a9df0f6e2d1958
SHA1 a20a4a319031d1f55a9c8afa353a8a5817beb9f4
SHA512 283e0442125437f3339b14aa1e0af3c70c669b74f3e15de2e4cbd4a885ae779a178f2860964c461887b9d9b65a014472969e244dd6f733a6ff75842fe3311646
SSDEEP 12288:cYyOh9NzgqlbJWQusiURdqgwIzf7FNy65gqHgGSDTF:cEblbJWQusiUeIzf73y6KqHgGiR
TLSH
T1AFD4F907AC4E253E59C0A349FA098FBBBF2ED22CC26CE67D94DDD1341443F6891AD589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\pl.pak
Size 696KB
SHA256 f92f6bff33a975e189b78a4cf0e153e85743dda432347745ebf8f1b4ff51a99b
MD5 833780b94215f9ce32c35724c8cd433a
SHA1 5c6ae41a85dd10d48480f96e9a49d047a2786071
SHA512 e428f19759b6e88e06ec7913197e7c6f8849b280993ccf1ad0ce61d92d92415ae5819f88e8c0b352110034a2cef89d9c9936dcd52d89f26c88811e8de015e8f8
SSDEEP 12288:ma43m2VnK/owZwfQfuzSJabZpbn6fPPCUdUe3m/UevM/mE1QhrBajMol5/rT:FeHVc7K64vMH1QhUv
TLSH
T1C9E45C0E56E58A4E8CA008E6F6E70B7CACDDC808F108D35FE46F4526719B19EC9BE5D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\pt-BR.pak
Size 652KB
SHA256 d1aba0dbde99231d3096b7ef9ec62ed017c72804257de62ffb649d45cf234f9d
MD5 c4113071b2f5f681f5f67da835bc6a94
SHA1 e79b1944deb0f5de2841821414e8c3b522493a88
SHA512 5d32321684ed196730a64d6efbc4072abeb4f866bb38ff7284fab01e4de9ebcf4a65a4fe58be6fbf3687671ee566c2f63d2eb64d861d6d6f60518864dfd6e91c
SSDEEP 6144:kzerJK4F2WbuNBXBLEpPQHEyWAEIIr9dqsRUUf8n:kCr1F2W4bERUsRDfc
TLSH
T170E41C2A6ECA136605229350B70EEB47E5890745FE06DA87DCFF4F05A3CDE40D933AA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\pt-PT.pak
Size 656KB
SHA256 1326efcde830a8b29541c98fb51e3b5e5428d2a59e1b21a11a677317d08b2bbd
MD5 1dd9b726938cf1c514fae6e7f1857243
SHA1 210e2f56820cc5800498c76d2aedfc3c6c16e5f8
SHA512 ae7b7bef5ce73aa330ea3baa5e10cc73102f3e871ca4d7013b72f7c36a0876b17f91ec7b89a8f8ceef2dc222f5b3ce12f46cae410516ec351331e5d60cc7a2ce
SSDEEP 6144:Oc2BKdzn43xugTieJVJJxhuI9AyN55frKDn7t2leSR9J:d0Kz4/EDn7MeSRT
TLSH
T1E9E429296EDA132605135341B70ADB03FAC85655F80ACB87C9EF0B4272CDF94D6B7B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\ro.pak
Size 681KB
SHA256 7fd5b85509f67394eee48b07339c9a3a77fb1fb99b6204bae3209f9f0ffab3b1
MD5 619c48fd2e1320cf840dfd9db7595680
SHA1 9e97815bc223d7805f335adb209504857a7ceb1c
SHA512 62abc32152c161375a9986dd350940eb4efdb5c8b246c25f0995b03c4af446acbbb4ecf8e7b94bcb4854a46e0740fd4c260b12836a41e123686b96014f2309b4
SSDEEP 12288:H/INhX6pzClnInPBiqTL7uIQH5n9le/zf:H/ITXJ59la
TLSH
T102E42C23A1C41A972D5152A2F73A24D3E88E105DF641E2CDA4EEC97910CDDDBC52EECB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\ru.pak
Size 1.1MB
SHA256 23166d431d70048e248e3ff47732642cb1ab73f9516384e33ef3c1979574f2ff
MD5 68dba8cdda096e46a95ad54a881a2511
SHA1 34f59329db3af2fd40c8832e9c512cb6ae5de32d
SHA512 ee2fb972e357a3383b468220b7697d1af6d42d80e5b524b0589f74b69aa08eda146529538cd5fcc8c10e93dc9360bf6f57abbeef217b901fc8e7e7a140d1d1b8
SSDEEP 12288:znSNeJ1fQeRo4YeWspkzJ9sF+oa+ULZHo6HzW/oqSvgsGCZkE0dR3Q8NiGjhnYH+:znSNklFd8oX/
TLSH
T19E358860669E64DE1101F01BDD08BE0D3CEB45FE3FAAA35219A42D7F35F2024C67E65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\sk.pak
Size 708KB
SHA256 91037f2ecb636857b92a2729b7c116d8dd98082b068e4f78b0fdab06f27d2eb7
MD5 4515aa1557ede9054727f1903a32aea1
SHA1 2a0b1bbf8ebba75bf03b6ab0c973987a82c87c09
SHA512 f05107b6bde25094197d4cca47847b9893eef96de57e80e352517fc848da0680eabf0a85b801570b287ddafa7851fd79a8f15672ada3e863ac2a3deb1d79d242
SSDEEP 12288:OKeYc+T27pkzA8+mi+xdnaOY7VZ8pTjsxt9wF:Og0pkV+mYL/taF
TLSH
T1D1F45D3FDFE7181E8E8D0108FFAA7110FD6E8650864EB4A6944F364714E26EDCAB4E54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\sl.pak
Size 678KB
SHA256 321ab341e3225dddcac858448367d43677c20e739b2ccab52f8c86aa0727d868
MD5 c8b796082609ce19f54b51e159514e93
SHA1 5d9c961e0feb6b2c96a7ae07ef24402e714a743d
SHA512 188438e92ae501ff767dc7b582ec1c5ec07e896db8417a4cd19e3933cfa97b1f2b5fb1a68a165b5057f0ce8b837ecf81bd76e8da0d5ce36d09d2952716e68d21
SSDEEP 12288:eIyYXpvc7VcB2+RVWobUWH2nWOq9pwi/fzB7aql/ad:eIyYa7+WobnH2ni/fzB7W
TLSH
T146E42B397EA74E0F0C9AA2CEFEA606007FDC044CD256E6A1EC4F33795415A3827BD595
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\sr.pak
Size 1.0MB
SHA256 7b337dcad390a9f08c3bd1d27235898e588827fa8da8808f4bc7012011578ef0
MD5 43e781b3ed61cf95fa67ae5afadfd6e7
SHA1 e9f11f12488172918495d841d4acdedc0834ec9a
SHA512 cf458a74cbbbca27e0ccfa9242dd863a52cf3a0fd5e84e610f78b9b18ff7c921908fe98d824a3211b4061a63bcd0494b857e4aa8d2f3f74ea03af54cfc478190
SSDEEP 12288:C1+VkxNRL58I882S0dRsCt7i4O5JM9kpCQhW6CgxmIF379juz3/k/Q:ufXqICV3
TLSH
T1793556B19B9E64DB0501F41BD808BE493DAF41FE3FAB975211601DBD34E10B847BA29E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\sv.pak
Size 605KB
SHA256 f10b4db7184a14f28bfdad82597d2d43b4ec859ab6eab59a5c3891aa6070f3ed
MD5 d1018c51fdea57efa44f5ae01f749f3b
SHA1 f17ff0e7a902c7ac735ca4f51c4206ab7a21fc7e
SHA512 6602ab45ea2c3ea76127de42788640516bd0532e7154673dc9da76c2845e1636a7b77658aa52fb7b6fdafdc1e55719138f4a483d3c5830677c94ac6fbaca4e63
SSDEEP 6144:NlqVqEHIL7xbjCAq0C9Q95YVgyLIuxRxhVbFl14hLOVRFcz5RtGm1eqMlmFMCOSG:NlZL7MAqMT8xj4iYF6b
TLSH
T1D1D42C438A20F526FAB2530DB608115F0AEDE15CE7F2954EB8D9883DAD8BD5805FF247
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\sw.pak
Size 640KB
SHA256 726ba26363103920712874418cbfc23ce899c46ca8a6dc3ec9da0bf48355622b
MD5 289bec23992e6a40cdf54997ec0a4ca2
SHA1 dfdf31bc91d739a630ea7ea3cf11d30067e2509b
SHA512 77b35d56f847267df760359a5a3a803029658e109d7c579b639c7414171f78d1030797da693a63f639d72f5e914fbb87be0990272d46cce285f99ad55749c275
SSDEEP 12288:3pyq/5q27zyxGB2qHOCdYGIGw5dmedqNGjRdponi91GKL3hjinSLeRtFa/hwzliw:ZvxxVFPiZ3a
TLSH
T1E5D4D5629C71D0191233618603DDEF732BDCED5C692B2DA35A46BF0F218F48C56ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\ta.pak
Size 1.6MB
SHA256 fd8fe5c21a10e6542599e9148c8a30557c4d437b9606d6b29b685d474d89534d
MD5 1098c8ffa99cb7a8b40887167bca0cb2
SHA1 adb1d4afb72136dca61ff12a0b467b73ca76cf42
SHA512 6cef56e1fea90cd0dd5c2dcc5e30fbd6a656dfb29327c63f48f1555c423e7f0d74ff68997d29cf9b86473058a5c4d93455073b53d7ad60923f01a351efdaebd7
SSDEEP 3072:3cc1JjhiTktBIvRGPET5qstR9ztm1vYpiMy3M:3DJjhMktavRGPEtqstR9ztm1vYpiMy8
TLSH
T15D750CCE923EEE890F93288F0319536912986155C07BE3A67C766E1198ECC5DDF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\te.pak
Size 1.5MB
SHA256 28b85fa550df913e970fac8a599ec4963b1466e3b610350924518de107e41602
MD5 9639064c77e0ed97d5baf8e461078ccc
SHA1 2deb7d6b7cec1a259cffc4a598e9cefd0289639a
SHA512 574e0179c7d0d395bf1ff42b494a0f18ce8c96a52d29b8bc9f016243c6f15fef120abd314c123ff69eab4db824047c4d65ac21d5b65cec2860a9a9090a5c92e5
SSDEEP 12288:Ui8g87MZKNuywG6sSF602/NNgIC8ymoRRT5dbJy52CM1WOB63N3p1Fn1ghgaC/lS:CgMp1c3X
TLSH
T1007593023A6AD310DAE70273752CF66C49781B8161D6732C1EAFA357EB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\th.pak
Size 1.3MB
SHA256 cfd9e6651e9335fbc0483aed1098112234e973303bf7101d88e0518d3fb16ffe
MD5 a4226d17ebdc8991208931eb787ee959
SHA1 0284fc35f2bf7b0681b97c8ed8e2c076385db058
SHA512 41dfadb2104a5ae472008cef41959495b988fcce3387fee3024c17a87ef203b7810b515d00e687f284ce869459c86a1231643f994791aa3221a9053c036d8401
SSDEEP 12288:7rjnxQHhN9LyZYAozYL77SsGo6h5skJUseOPsO5eXwpbDFDS6Sud2mKHl7jjF12h:7rjxK5sm
TLSH
T18D554BB37247DDD479441B5B262A7789672DAE693F73F8E000C9215A73F071A8422EE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\tr.pak
Size 651KB
SHA256 4b047663f169169f3ccd33923782ae33348c37e5107314d3324f1850f3c5fb42
MD5 e5c069a7c9cf8d86e47e41f77bca3135
SHA1 e1d539023cf95e05d14578da585492057b5e59c9
SHA512 4846fbddaa3695a7db06d3936bcbca130ebb3144975b6e3a7a5a1616674c50230e2e6df11b3093203ea460c60c018702b5eb04d208a24d002fad9acbfb401e31
SSDEEP 12288:WhsOCAlzRw0007PIPHz6sgwhIfZFxAHON9X1i4S:WHCUztcUN9w4S
TLSH
T1A6E4F98178EF282CCBB9278BD6E94666F89F0766B331F4469B168636774535303E360C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\uk.pak
Size 1.1MB
SHA256 3ebafedd5f6005f56a2d7a500e59bcb435e58a6013c7e075b241a91ab1c605ed
MD5 013949d7315e32a9b3ae65c375b09093
SHA1 c9128f37bbcded91374a8b9689b6650ab675c814
SHA512 72a5dc7c65565df2201e0bf0db364ef5b96fc080f8b389f9613b9273a777fb7197c3131f567b2d90e4567ed8d9ff8998bfad902067ab24c21d20acc855e0f2de
SSDEEP 12288:e+9OUH+QKjb3IrkkkA5vyjRrsSr+UinRYX2ot81BUf8t1oNnHUA6QHBz8JP5yP+Q:a4E8I
TLSH
T1D745A9A19A9D58EF0105F05BE94C7A0D7CA741FE7FA6471625A43DBF38F20248A3C35A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\ur.pak
Size 981KB
SHA256 51c318f3df2673cb34d0df9235021dd1794073cddf59d14433620da1141ec650
MD5 c21c12157b4a5c275b47a93015f9369e
SHA1 97dcf69e26f0c4c03979e9f29f63f1c682e26761
SHA512 144210b5ad7fbfcf0c395bc8b895ab60d29061ef3f8ba0cf4a2e8cec7b08d4d98fecadee0385fa8056c130fd9441fa4f8e62b305c55ce7caab1214a3b13df6ab
SSDEEP 12288:KDGIilt5oiu8PC3zqtdQ+BR7yArubcvqmEhdGuOvedQYrGuYjwadcJKwUvuRco/d:2JFFGWr
TLSH
T16A2500D2E6B896B35A21D92780D33C34CB735F13D34AF281E96246C54E9A0135F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\vi.pak
Size 774KB
SHA256 45c351251b938ea6f46305f2c324e8144bdf7500e08d430f8280b7db9e2ce52d
MD5 68daa544930d57098084768941ed87c6
SHA1 dc49022a0befb220230791b62f17527568f5858e
SHA512 2755b83dea7437b9bc223b00dbb7fba41e2423378f3f39c7e7fcce2cf54e049e2e18986969fcb9f2b722a37a2755b772cdfd8be9d4c2c32ee19c3c068c6f114d
SSDEEP 24576:xSTOQ+c0JVG04Fvo/0E+tsjlIsicufpq1ljA:xSTG+siVk1ljA
TLSH
T110F4955216E0302680AC553EC6CE540D6FCAE42FF7C1CFE56FE4297876221A45F25BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\zh-CN.pak
Size 554KB
SHA256 78837eb8a17d34e371ed72b7c7d9262876592f409fc66b293461c5468386834c
MD5 adaa86862bf0f0bdb8510d55b2f9b3a5
SHA1 63e6b0fc331ef555510c65eceb894dcf7d4238c7
SHA512 1690b4c373ffe755816be408db907e86a8bf62936cc63d2013fe418d816e137a383de5142f2989b56f397fad5976231f8a120a8cec7b5edecd02c28db6564183
SSDEEP 12288:I9YLILBY4ps+zQnzpUJkQQVzcUZYfDMzsD/:g++zQnzpUJJQdcUZYfDMz4/
TLSH
T19EC48CA820F9BDEC044650E13729613D7C40B20BF667AF366ED248DD2AA6F9D0757E07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\locales\zh-TW.pak
Size 547KB
SHA256 fb77ff841f652f0ac8be02ce625559ae516c63081a45bde96f9277f241172eca
MD5 404b8be63620b2694d38535ae2afc7c6
SHA1 92f403aeeebdf1ba82c2ab8770f480c1a00e9780
SHA512 824ebc44e59b8738cba9e2ef176a360fdb9c8ee76d62460490368b3c62d829acb8dc695854c3fa018b577839d94bfee36ede4d302080f87cdbe09d3ccb748008
SSDEEP 6144:tAMdshi4b0PYIoBEagTuxVJm4DIa2sluXdAr58qo2HZD5SWWX2jXUm9Tu:i8O70wI5u84UNdAr59o2HnjjA
TLSH
T1BFC47DB618FBDBEF0901F484B7CD523ABC8B342DDD773636FC851C942E69A540AA2185
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\resources.pak
Size 6.5MB
SHA256 d3b5b0c43701dbac52e07085f152efa7418bc95b13a4a3667c6439b51d680e1e
MD5 384bda03edb522b886298606ef6d58ae
SHA1 1da930340547ff069579a86673483c31f4bfa354
SHA512 41517f83c03ca69be542bff4d2bac645dd0819b20b8483416b459d530f4d674418d43019d3b44606c752f8004d779ead0c3bcbe1bd22eec596378492e95383c7
SSDEEP 196608:PmNCBRtfTL5QoCmkrB0QMguFBgt3m06Rw+K6:PmoTtC9mkr4jFWBm0iw+/
TLSH
T1FD6633DB71342C1BC6C443BE4518463EA89C6F707E86D2E2145C7268DCAE64A6EC877F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GunshotSuppressorFrontOnlyTrained.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\resources\app.asar.unpacked\resources\apo-vst\GunshotSuppressorFrontOnlyTrained.dll
Size 242KB
SHA256 d6eea1ea7ccd78635618c9c9319677c4bf8e1b1cd933f7a968a79567c9f88cd1
MD5 886f43fd734dc37d23bb39c6f115c73a
SHA1 e2a13c7ed9b62ebf9866a1c91123372bf4b9719c
SHA512 5c40dfb43bcff7f7504d22aa95a5d0f1b618e667ee43b70b0c914a472b98e1bf157b3a0a56bc718c9d6d54853affa363ec843dc1d7012503fdc6e48ebf8b97d0
SSDEEP 3072:dtTxZw1hn8FvF+Ufjt9o+R4aTbbjSxZwJApL4azO3wrQce2VfbPDz:To8FvF+gocn7JAOcjPe+D
TLSH
T143346C06B5A00CADD9A2E2398DE70A31F77278815730D9EF0393C6565E2BBC1997BF11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GunshotSuppressorFrontOnlyTrained_r10.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\resources\app.asar.unpacked\resources\apo-vst\GunshotSuppressorFrontOnlyTrained_r10.dll
Size 242KB
SHA256 c0ae034dbb4da39a53ad99be3cae61fae69acbf7384d9638f4e1f5cd7eef5466
MD5 f45ace843f6d435a4d28ac8f4f4be1dd
SHA1 a7f4d5a9451837182fdacf60505e6f77160363b6
SHA512 8cdd54d7a9eac45bf5a075854f794946f9c7ca9995519acf50234aed2f36b009da0d586753ad916e9c5fc3772274b23c8b4aab321fce744f94ef8855d1334306
SSDEEP 3072:qtTxZw1hn8FvF+Ufjt9o+R4aTbbjSxZwJApL4azO3wrQce2VfbPcI:6o8FvF+gocn7JAOcjPe+7
TLSH
T1F6346C16B5900CADD9A2E2398DE70A31F77278815730D9EF03A3C6561E2BBC1997BF11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GunshotSuppressorFrontOnlyTrained_r10.dll.bak-20260511-123437

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\resources\app.asar.unpacked\resources\apo-vst\GunshotSuppressorFrontOnlyTrained_r10.dll.bak-20260511-123437
Size 227KB
SHA256 f2d532658414c5b5efd0304712fa099c4fab32b0f982a8927230dab09d1a4136
MD5 37566015526bb0d5c1e0eff7f0c3c67b
SHA1 fee4e54c19c6b037428d8ded1f520050f5c3d086
SHA512 6956ae0ef022231248b7fe54d87265ceb9266790e0292da95caebb507d34aa3773aaaebb7a7f686eb485ac0d00c42891bdaaa3af31bb3694e9f84d2adb28488d
SSDEEP 3072:wtTxZw1hn8FvF+Ufjt9o+R4aTbbjSxZwJApL4azO3wrQce2VfbP:4o8FvF+gocn7JAOcjPe+
TLSH
T12A344A16B5910CACC9A2E2398DE70631F7B278415730D9EF03A3C6665E2BBC1997BF11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GunshotSuppressorFrontOnlyTrained_r10.dll.bak-20260514-005637

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\resources\app.asar.unpacked\resources\apo-vst\GunshotSuppressorFrontOnlyTrained_r10.dll.bak-20260514-005637
Size 228KB
SHA256 5572d4972941ddad6b1d867d90396f048863c271c7e3d4a3a0dd24de4d974e53
MD5 4cd833dd3f68b862f57acd7d471e3f4e
SHA1 811c27fe478e008636831a9ff72b05137ae857cb
SHA512 1acf287b619d004ef5f2be5548c6e93dba2343c017c2c8a60ef82190c66ff9734803c45659407ad4f218c44e5ced5e54e9495fdc7d194164851ab7673396535a
SSDEEP 3072:mrMOFxJ+tNHoffGgV8L7f0ECvKDDTTSdqSjkX4shL4azOHzQYysS2V0cv:u1ffGgVAC6vqjkX4dcIHyt1
TLSH
T1E3344A16B5A00CACC9A2E2398DE70631F77278405770E9EF03A3C6565E2BBD1997BF11
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RaraAmbienceFrequencyGuardV20.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\resources\app.asar.unpacked\resources\apo-vst\RaraAmbienceFrequencyGuardV20.dll
Size 236KB
SHA256 67d83280dd67b2a6b7493831f60f6b380192c839cf982d0831b0537eea1f3f86
MD5 778976792b435d01b4da1c05d6e99387
SHA1 68f1597bbd53721e8d495f9071408dcbec9778f4
SHA512 3d427bbf3003f871740fff12e5f29c5d00c13410cc5c544a99825aa9cef47e3ed18781e47a0b167ab0dff72fbeed228aff59afa06e95636bebb13128c9c066ec
SSDEEP 6144:yvkAZ/kgrli2mfDogzAnv8BjqZgjxyno5dBiF:B1q4nf0UVqAx+ojC
TLSH
T1BE347B4531A509BDD873A23989677506F6723C510330C6FB07E15A69AF2F7C1AEBBB20
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RaraLoudnessCompressorLabV8.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\resources\app.asar.unpacked\resources\apo-vst\RaraLoudnessCompressorLabV8.dll
Size 191KB
SHA256 2b584dbb0570136d2b73a8ee8099dfd210813c3b49e7cc6f98684430440f7453
MD5 7e4c42414092adeadea63b90466b1c0b
SHA1 14adfe04f7d0604d7ddef5135a56281640470cec
SHA512 e1be21a921dbbbe0ab2ce9b3255f60aa8f858ec5c106b7f15e57e48e20a049d4703324e890e8c16c3bf5d90b2d0a742916cc723b3a3614f30b9f2c8a67c351b7
SSDEEP 3072:CRSnFHrXSwrOQu9xDdUuklryhtoEgtw0m4azOsJcFL2V7Tj05:CgnFLXtaQ+UBrnEgzcOKTu
TLSH
T105147C4A76A504AAE973A634C5775A42F37278420770C6FF03A0477A9F2F7C19A3B760
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

favicon.ico

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\resources\app.asar.unpacked\resources\favicon.ico
Size 17KB
SHA256 76886940cdc5d11bd0ced67c41a01504b8067326d52d38fabdd84681d6b3224e
MD5 1fd99c9ee1e33e886fe4afb431e3c13c
SHA1 2baa581f50659ea401e5b7de55d8c87e91f1eb15
SHA512 6142d5798aa693e7795893406a81e81c9cf4411928a03a573805a2a117a90a93003ce95a2f56df3d2dc927839cba026e2a066379d6f73e380a1e1f9501b1d7fe
SSDEEP 384:HIMK/i8kqGrCcyLLiGDcxS7eStuYGab+tWg597ofojHxPdz:oNirwLVDN8YB6Ug97ogjRR
TLSH
T15B72D01BFDD0698503072A85CE8CDDB60F9627491A9D2FA1DE0D90BAD037BA49F18339
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icon.png

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\resources\app.asar.unpacked\resources\icon.png
Size 1.9MB
SHA256 9ee0b015a9d2620a371b3984e8d2870c2c2df943ac7a9626b221a2ea13709a43
MD5 c1d77e81357e05b7eccb606db3ee413d
SHA1 934259fe3d0982ebc3cef7ebc8b3dea5278d9e37
SHA512 b8b3bf139629a0130870df907b36799966460bed2284714f83c9df35fd1801efc6c95418e7279b6f0e21aa4e7a5c690eaebc62d4de10e30fd221b8a0993cd6fd
SSDEEP 49152:iN07r54XJXZdokk+aOsENZnxDaHfIM2bE+5Q0s6zgs7cjt:Pr54Bk5EBDmx2bE+qq0s7cx
TLSH
T1779533C7C0EECACEF1401F11FBBF57D6AAA64CE48AC905446926C5814EACD97361E8D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Eclipse.zip

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\resources\app.asar.unpacked\resources\profiles\Eclipse.zip
Size 1.6MB
SHA256 7fc4ca048011f29bb5148a4fca655ff34080ee06192c4f2a0e096541c8b8fbba
MD5 ec47df6b463abee7fcd8132fd1ddb13d
SHA1 463c5f6e58fc7406772f082f73eed5f2fc2df38c
SHA512 99e097761b5881c31f2b9d9f266181141d54260fa423795d63a81fac2abab75d789976e8a66533c252473b43ae35f1af731d96218039ef2f2ed0c44fae8d5d34
SSDEEP 49152:ROnO2OQ2e61CR3weijWqCj7mcf7fNGRDN:Qn5OV5YR3tijK7Tf7f8RDN
TLSH
T1808533C4A74F5A77836FCE16F84A9CA64B447785DBC9266F4F231B2A2810C87C1C617B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Eclipse.zip.sha256

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\resources\app.asar.unpacked\resources\profiles\Eclipse.zip.sha256
Size 78B
SHA256 dff270ddd4324ebc48fe0d56bd007430f392442686d830db6f0cd8ab8a38d469
MD5 8d1f6c40583f02a66ae0a7b1e3b25528
SHA1 2ecb4f65108d9c6e20bddef3b9c6db7befa97057
SHA512 efb21d21df1262be7dd0c7b0e8b0cadc64fb412f240e65fc0bf29e4f4a71603abcf17612cde42f67e72e61118134ca6e3bfc8b5100e21a560f46c33462cb3b94
TLSH
T153A02232C30808A882F8CC80E32CF0A20083000EC030230A00E0000BEA0CE2BE883EA0
MD5 SHA1 SHA512 TLSH

Submit Download

FullCleanUninstall.ps1

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\resources\app.asar.unpacked\resources\scripts\FullCleanUninstall.ps1
Size 29KB
SHA256 d49554b79931ddf4ba39273df60a4aef670c3df04cecab6dc75c78591ba9fff8
MD5 192b5b9780ff44a84e305483445e7aa0
SHA1 6957629f7f28bc64c0e5aa3a4f97e7da10fa5027
SHA512 78493fcd691d319583a9b00443fde4ace6ec0759b04ac2d3a15ce356f675f6eb7b706f729c3af6793e2e53e95b7dd030403ffa4af3aeebf64b9b7fb4951f6ea3
SSDEEP 384:/7zRDdcWBSikDbDO0XvQVIc3LAcM8XqdCmZ/3hNU9Md+95+tIsbOBE2dxkLomRIg:DcQSikD3OyvYIcy8XqdCpNla2momRW2
TLSH
T19DD2F72AA780847165C7629638CA11066FAD446FD50D2B00BCEDD387EF5743E86BDBF4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

elevate.exe

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\resources\elevate.exe
Size 120KB
SHA256 5238cb4f7cfaa73de8e82c3cfcc9392b08e8e4fb121e91a08895f31ad8cbd8de
MD5 2ca164dcaa94a7475bfcbbf252dabc18
SHA1 26c93681306c1c41e322be694ce9506fd9d8b4b4
SHA512 1e9a87fa3bc52b03a50951b6c26b6f6c265b79d53ac715d90a1ac1cf8a31bd763772b7f293042d463d52e620d9f73031479c897379ac33501db0bf7f17767695
SSDEEP 3072:D5bLnrwQoRDtdMMgSXiFJWcIgUVCfRjV/GrWlxf:1PrwRhte1XsE1lx
TLSH
T17AC38D0274C0C072E5732A3555B4CAA15E7DFE721E759FAB2398127A4F602C09B2AF77
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\snapshot_blob.bin
Size 333KB
SHA256 b283c0860b4e316e10cff2ba9ea88771fbd173a64efedcf9711b249c0af64303
MD5 2f66065742c79a6292c34dcf81ad72a6
SHA1 b28d35afba459c194fe3fbe2a4c8ff6b0cc27a65
SHA512 75c9768cdfbd9aa5ca485a02941ee4b449df423ba4439ac9eae7395da01d7f56bfa75b204fd80e335b0f3a32003c2a4d3f922f31dfcab768268a6e7c8768b61d
SSDEEP 3072:GOiXKGWOt+xbRt2FIRCr5FPABOH/mpts3Iyiy2gsMvkdAhm6tfsa:G5XLt+Hl/k/mv7CLvBkisa
TLSH
T1D774CE05F74ACB26C98A3A745DF983882E2071CD9D49B34B3549737E78BA2740D3A72D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\v8_context_snapshot.bin
Size 698KB
SHA256 24998bd4fdb072daf8fff21608fc91a55d74b031b6d21c3bf949cc0c32a584aa
MD5 ce063c09a7d4bb23edf2a93cc613651d
SHA1 370529b74f491124be3782baa3e24558e8d25225
SHA512 8d1ce172c05921a47870e043091276d4bf91ee1ade562e0faf80d1be8fad8c827c912e9f7a300d24685b64c11cd5e6d5abb7f3da1cf59956c6f07ddec00dc927
SSDEEP 6144:U/V4XptgO5XKt+Hlzk/mv7Cx2NyuClVlxykismIdukcLKYNcPK:U8D5Xo+vmx2NySkQIId/H
TLSH
T1D6E4A761FB0A8F3AC5453BBD8DE657463A30B18E9E87E24B7405633D78B96B04C3652C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\vk_swiftshader.dll
Size 5.4MB
SHA256 0d52aa526f3d060e21b0336c3282ff1dfbd450cdc408e1bdeeffdb75ebe7daca
MD5 f7de2275dff55eba940f008c64a1bddb
SHA1 9103aa4fdcf9722dd6091ae6895af24cf8ba3e13
SHA512 352c248272ddb053529f9c52e4ab2944fca159f5897988d47147375141aee1ca60f6d75b2e2e9b26639995ca0944968036f2bc97874b47e5cbe398ba1fe079dd
SSDEEP 49152:C+et2UcrN42sf0vTrWny2/Gh9qIHGZpVZSbiP1VFz2ZtIgrduZsgP/m9vqjfc2cm:CJt2vI4gmlml3pCIn
TLSH
T11B464803F28681E9C06DE5798B5FA623F631F8840B2276DF56A00F192E66FE0673D715
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\7z-out\vulkan-1.dll
Size 947KB
SHA256 da08ea24d008d6a3bcc27bb0729d4ab1c9aad82c3c0e472fbdc010eee3d2eb90
MD5 c0e6280f7c6ee0c827a9c4af33ccd6ea
SHA1 86d26a692e5f681216b04c23f0ec07b13625deb7
SHA512 69e2f335eebb451d358d4af682b580e3864203b57c8aca7a01169e6cfab0cef1b0818a80010ccd3ffd234752b7943a436c851070018897b332fe81dd493fdd4f
SSDEEP 24576:oNpbzkO5J/Yv3kG4nolXqOZ6dSn6Z5WGc9DYsHQDb6g3P0zAk79oOHiYTjFJ:4pbwOvgv3kRUX1Z6dSn6Z5WGc9DYsHQ8
TLSH
T180258E12DA544AA9D67AC074D9D28A0789B074822322B8DF12F817147F6FFF47B3D726
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SpiderBanner.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\SpiderBanner.dll
Size 9KB
SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
MD5 17309e33b596ba3a5693b4d3e85cf8d7
SHA1 7d361836cf53df42021c7f2b148aec9458818c01
SHA512 1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298
SSDEEP 192:5lkE3uqRI1y7/xcfK4PRef6gQzJyY1rpKlVrw:5lkMBI1y7UKcef6XzJrpKY
TLSH
T1FF12D6861F9044F7E510607CA896B7EF93177B2AA382ADCBCE73849429115E32F79347
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
TLSH
T125A33B62A2FA9CF5E4E70B3D1469BB264CBB7B383431D93F2342054B8534586DA2D35B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
TLSH
T1BA428E12977049F2F1A0183C10A67F265FBEAE5C1BE445A39FE380867D652DF9436343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

WinShell.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\WinShell.dll
Size 3KB
SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
MD5 1cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA1 0b9519763be6625bd5abce175dcc59c96d100d4c
SHA512 7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
TLSH
T16A51365F13BED7A4C3071738A6FBDC85749B440012C659558BB2172ABF141E0BB3CD08
MD5 SHA1 SHA512 TLSH

Submit Download

nsExec.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\nsExec.dll
Size 6KB
SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
MD5 ec0504e6b8a11d5aad43b296beeb84b2
SHA1 91b5ce085130c8c7194d66b2439ec9e1c206497c
SHA512 3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
SSDEEP 96:YjHFiKaoggCtJzTlKXb0tbo68qD853Ns7GgmkNq3m+s:JbogRtJzTlNR8qD85uGgmkNr
TLSH
T173D109B836C20CF3D54E46743E22381713FEE4761B7502A18B976ED61D92AE2FE20781
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nsis7z.dll

Path C:\Users\Admin\AppData\Local\Temp\nse5991.tmp\nsis7z.dll
Size 424KB
SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
MD5 80e44ce4895304c6a3a831310fbf8cd0
SHA1 36bd49ae21c460be5753a904b4501f1abca53508
SHA512 c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
SSDEEP 6144:aUWQQ5O3fz0NG3ucDaEUTWfk+ZA0NrCL/k+uyoyBOX1okfW7w+Pfzqibckl:an5QEG39fPAkrE4yrBOXDfaNbck
TLSH
T1E9949E22B6D2C036C56E02309918F77921AEB3B1592DDB1B73985B6F7FB44C19E24B07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

default.exc

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

4b842703-3671-4274-a871-42aafdba8a36.tmp

Path C:\Users\Admin\AppData\Roaming\RaraAudioApp\4b842703-3671-4274-a871-42aafdba8a36.tmp
Size 490B
SHA256 05598c3cfa02957ab9a31f21c155d10a3fb0c0f9e5271c29c01c915a7c580b2b
MD5 27be6dc3b896934d4f6b88198098e94b
SHA1 1f60b10d671c4ee4355993f4090a173e637a3f3f
SHA512 3441677f040e193569d31041a409b0336d11ffe7473e817014eda5f47e28d29d2a67dbd81b5930f65cabda514cf9d589c7f00728a7e9723e7c5725aaa1beb298
TLSH
T120F09EF1ECE1A75557495AD5411A3B033E3536E39A54161871CC42161122A45271A8B1
MD5 SHA1 SHA512 TLSH

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\RaraAudioApp\GPUCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\RaraAudioApp\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\RaraAudioApp\GPUCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\RaraAudioApp\GPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Roaming\RaraAudioApp\Local State
Size 490B
SHA256 3a64d38bd6423257c105cfdc9b8bdf75b1234af8d7dfa4b1c11ec09fe557f105
MD5 92a094981688851a7e6833899a2966b3
SHA1 2fec024ab290c423c218e136ae01f473c2629f00
SHA512 37fbd63465fd712414fd8ccfdbba894962ef062effb7c886228f52463d5a7c6d6214c856f1b38efe6dfacbbb046ce5e01edae56532b061b5186a382e9b903250
TLSH
T1AAF09EB57CE1DB79278C0AAC052AB5030FBA55F71209C7C9358D021212B75AB6757C7A
MD5 SHA1 SHA512 TLSH

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\RaraAudioApp\Local Storage\leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Roaming\RaraAudioApp\Session Storage\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

memory/1212-622-0x00007FFF37140000-0x00007FFF37141000-memory.dmp

Download

memory/1212-623-0x00007FFF374F0000-0x00007FFF374F1000-memory.dmp

Download

memory/3704-597-0x00000276E8F70000-0x00000276E8F96000-memory.dmp

Download

memory/3704-594-0x00000276E8F10000-0x00000276E8F1A000-memory.dmp

Download

memory/3704-589-0x00000276E8ED0000-0x00000276E8EF2000-memory.dmp

Download

memory/3704-600-0x00000276EA7A0000-0x00000276EACC8000-memory.dmp

Download

memory/3704-599-0x00000276EA0A0000-0x00000276EA262000-memory.dmp

Download

memory/3704-593-0x00000276E8F00000-0x00000276E8F08000-memory.dmp

Download

memory/3856-745-0x000001684CDC0000-0x000001684CDC1000-memory.dmp

Download

memory/3856-747-0x000001684CDC0000-0x000001684CDC1000-memory.dmp

Download

memory/3856-756-0x000001684CDC0000-0x000001684CDC1000-memory.dmp

Download

memory/3856-755-0x000001684CDC0000-0x000001684CDC1000-memory.dmp

Download

memory/3856-753-0x000001684CDC0000-0x000001684CDC1000-memory.dmp

Download

memory/3856-752-0x000001684CDC0000-0x000001684CDC1000-memory.dmp

Download

memory/3856-754-0x000001684CDC0000-0x000001684CDC1000-memory.dmp

Download

memory/3856-751-0x000001684CDC0000-0x000001684CDC1000-memory.dmp

Download