Overview

overview

8

Static

static

3

SKlauncher...up.exe

windows10-2004-x64

7

SKlauncher...up.exe

windows11-ltsc_2024-x64

8

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows11-ltsc_2024-x64

8

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

8

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

8

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

8

LICENSES.c...m.html

windows10-2004-x64

3

LICENSES.c...m.html

windows11-ltsc_2024-x64

3

d3dcompiler_47.dll

windows10-2004-x64

1

dxcompiler.dll

windows10-2004-x64

1

dxil.dll

windows10-2004-x64

1

dxil.dll

windows11-ltsc_2024-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-ltsc_2024-x64

8

sklauncher.exe

windows10-2004-x64

7

vk_swiftshader.dll

windows10-2004-x64

1

vulkan-1.dll

windows10-2004-x64

1

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows11-ltsc_2024-x64

3

$R0/Uninst...er.exe

windows10-2004-x64

7

$R0/Uninst...er.exe

windows11-ltsc_2024-x64

8

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    901s
  • max time network
    556s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    17/10/2026, 16:17

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    SKlauncher-4.0.54-setup.exe
  • Size 122.0MB
  • Sample261017-trwpdshy2r
  • SHA256 8fe5168ecd41fcfba4d360998ab95ddef4655c3eadb47aa956ea0b1dc41854d4
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
adwaredefense_evasiondiscoveryexecutionpersistenceransomwarespywarestealer

Malware Config

Signatures

  • Boot or Logon Autostart Execution: Active Setup 2 TTPs 1 IoCs

    Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

    persistence
  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 20 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates connected drives 3 TTPs 2 IoCs

    Attempts to read the root path of hard drives other than the default C: drive.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Run Powershell to get system information.

    execution
  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

    defense_evasion
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks SCSI registry key(s) 3 TTPs 62 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Checks processor information in registry 2 TTPs 24 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Modifies Internet Explorer settings 1 TTPs 1 IoCs
    adwarespyware
  • Modifies registry class 38 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 59 IoCs
  • Suspicious use of SendNotifyMessage 48 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs
  • Uses Task Scheduler COM API 1 TTPs

    The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.

    persistence
  • Uses Volume Shadow Copy WMI provider

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

    ransomware

Processes

  • C:\Users\Admin\AppData\Local\Temp\SKlauncher-4.0.54-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\SKlauncher-4.0.54-setup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:6084
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -NonInteractive -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
      2⤵
      • Hide Artifacts: Ignore Process Interrupts
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2380
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -NonInteractive -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:4380
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -NoProfile -NonInteractive -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\sklauncher', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:4560
  • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
    "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe"
    1⤵
    • Executes dropped EXE
    • Reads the TCP/IP host and domain name from the registry
    • Checks processor information in registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:3784
    • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
      "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAAgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1736,i,13579886492116292350,6861388190913288713,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1740,i,3353613654031369290,9307356020704158659,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1732 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3208
    • C:\Windows\system32\reg.exe
      reg query "HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion" /v InstallationType
      2⤵
        PID:5708
      • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
        "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot,starship-icon --secure-schemes=starship-screenshot,starship-icon --bypasscsp-schemes=starship-screenshot,starship-icon --fetch-schemes=starship-screenshot,starship-icon --streaming-schemes=starship-screenshot,starship-icon --field-trial-handle=1736,i,13579886492116292350,6861388190913288713,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1740,i,3353613654031369290,9307356020704158659,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2024 /prefetch:11
        2⤵
        • Executes dropped EXE
        • Reads the TCP/IP host and domain name from the registry
        PID:2952
      • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
        "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --standard-schemes=starship-screenshot,starship-icon --secure-schemes=starship-screenshot,starship-icon --bypasscsp-schemes=starship-screenshot,starship-icon --fetch-schemes=starship-screenshot,starship-icon --streaming-schemes=starship-screenshot,starship-icon --app-user-model-id=pl.skmedix.sklauncher --app-path="C:\Users\Admin\AppData\Local\Programs\sklauncher\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1736,i,13579886492116292350,6861388190913288713,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1740,i,3353613654031369290,9307356020704158659,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2652 /prefetch:1
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4856
      • C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe
        "C:\Users\Admin\AppData\Local\Programs\sklauncher\sklauncher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=0 --gpu-device-id=0 --gpu-sub-system-id=0 --gpu-revision=0 --user-data-dir="C:\Users\Admin\AppData\Roaming\.sklauncher\bin" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAOAAAAAAAAAABAAAAAAAAAAAAAAAAAAAAQgAAAAAAAAAAAAAAAAAAABgAAAAAAAAAGAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=1736,i,13579886492116292350,6861388190913288713,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1740,i,3353613654031369290,9307356020704158659,4 --trace-process-track-uuid=3190708990997080739 --mojo-platform-channel-handle=3344 /prefetch:10
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        PID:1948
    • C:\Windows\system32\svchost.exe
      C:\Windows\system32\svchost.exe -k GPSvcGroup
      1⤵
        PID:5940
      • C:\Windows\system32\sihost.exe
        sihost.exe
        1⤵
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:2520
        • C:\Windows\explorer.exe
          explorer.exe /LOADSAVEDWINDOWS
          2⤵
          • Boot or Logon Autostart Execution: Active Setup
          • Enumerates connected drives
          • Checks SCSI registry key(s)
          • Modifies Internet Explorer settings
          • Modifies registry class
          • Suspicious behavior: EnumeratesProcesses
          • Suspicious use of FindShellTrayWindow
          • Suspicious use of SendNotifyMessage
          • Suspicious use of SetWindowsHookEx
          PID:1092
      • C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe
        "C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe" -ServerName:App.AppXywbrabmsek0gm3tkwpr5kwzbs55tkqay.mca
        1⤵
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        PID:5548
      • C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe
        "C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe" -ServerName:CortanaUI.AppXstmwaab17q5s3y22tp6apqz7a45vwv65.mca
        1⤵
        • Modifies registry class
        • Suspicious use of SetWindowsHookEx
        PID:5736
      • C:\Windows\System32\SecurityHealthHost.exe
        \\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
        1⤵
          PID:1356

        Network

              MITRE ATT&CK Enterprise v16

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              StartupProfileData-NonInteractive
              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
              • Size 17KB
              • SHA256 21e3addcce2a3b72030de7a9f93a3c7a84fd5aade956a4ca3c906440b7eec7a4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              StartupProfileData-NonInteractive
              • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
              • Size 16KB
              • SHA256 88fb64135d6bee57cc94e2fb434a1c7474840940d3f3c4637cfc310bdaac2d91
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              prep_Activatable Class_Hermes_perf.cache
              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
              • Size 599B
              • SHA256 b536a3dae9ea5c69081f0491eed829e3b57e32401fdf49a63031bcd6b20e6fdb
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              prep_Activatable Class_Hermes_perf.cache
              • Path C:\Users\Admin\AppData\Local\Packages\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\TempState\prep_Activatable Class_Hermes_perf.cache
              • Size 595B
              • SHA256 d4e60617c2afab8263febabe7f14f18595715078d71307a8cefe0707dae76dee
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              __PSScriptPolicyTest_ekh2cbym.vnk.psm1
              • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ekh2cbym.vnk.psm1
              • Size 60B
              • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              LICENSE.electron.txt
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\LICENSE.electron.txt
              • Size 1KB
              • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              LICENSES.chromium.html
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\LICENSES.chromium.html
              • Size 19.4MB
              • SHA256 c971fa90cb787337e9df73773f3b43cd5621f035e53cded439bd927b3b759e0c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              chrome_100_percent.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\chrome_100_percent.pak
              • Size 117KB
              • SHA256 d76fe8fa3a14cd73e4c858746e2ab2d2fa6f2df38a906fa5814b50a8a895fc96
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              chrome_200_percent.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\chrome_200_percent.pak
              • Size 192KB
              • SHA256 b74ad439f3d3762657f3ba533a6af3ac63315c838ed46519891366f43d834a0e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              d3dcompiler_47.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\d3dcompiler_47.dll
              • Size 4.5MB
              • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              dxcompiler.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\dxcompiler.dll
              • Size 24.4MB
              • SHA256 e00e2c37cb8924389a0363691e65a58e8ac2da9093f3db80dc8f7a5b89253fdd
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              dxil.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\dxil.dll
              • Size 1.4MB
              • SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ffmpeg.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\ffmpeg.dll
              • Size 2.9MB
              • SHA256 af461f247e8bd008eee24e9954be9a6aed6402c50d716e16fab2b8a774ed98fa
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              icudtl.dat
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\icudtl.dat
              • Size 10.4MB
              • SHA256 bd8c145abdf3f8383276ce01dfa4ae48709bef9fef1c0711eb7c3fab4f6eb7c2
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              libEGL.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\libEGL.dll
              • Size 457KB
              • SHA256 ca19e6fd75c9c1551dfdf0f5749f2e4dba73ea0d452de4ef5534e30a5558b34c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              libGLESv2.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\libGLESv2.dll
              • Size 7.7MB
              • SHA256 f2cf8f5477d6ee06e84e55b2e947871f709fbf0ea56dff22c73acb7743d0e0a1
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              af.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\af.pak
              • Size 599KB
              • SHA256 dcf39c3edbb6b0a625baee0263a9b426eadd1a6d1bfbf03a209501a18bc4b0e4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              am.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\am.pak
              • Size 971KB
              • SHA256 b1d444f2346105a6e15f9b14fc5653e1edaa2b435290fb8f1238347a4d4ca8f9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ar.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\ar.pak
              • Size 1.0MB
              • SHA256 0baa84907ae148d2fc772cdd6c62dbeedfcc45aa4bc67c9d7164906ff0c69247
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              bg.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\bg.pak
              • Size 1.1MB
              • SHA256 e4a5bea23a26a06af611a7cb518b22a1d53ec5df45a6322f0e264b99c7318441
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              bn.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\bn.pak
              • Size 1.4MB
              • SHA256 8e4aebe835b6b46f31c4a902e833d645cfe2990dcf354d1d3c5851e468b4c277
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ca.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\ca.pak
              • Size 676KB
              • SHA256 8a472eabdc3f30d94c56367d526f6d345ad65732827097aac747438f233a536f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              cs.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\cs.pak
              • Size 701KB
              • SHA256 5804ba5b76974b48b15922cf91c3e9dbbf549e2d88218dc767e4650520503135
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              da.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\da.pak
              • Size 629KB
              • SHA256 57f4637094de41122da569415c16c5524794bc90aa3af226da14703d04981db0
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              de.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\de.pak
              • Size 677KB
              • SHA256 4919ce127533d3cac698d837306161c00cf69ce30f9fa4b25b80fda171d78f89
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              el.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\el.pak
              • Size 1.2MB
              • SHA256 48d430dca8785ce24fc605851b2bb739164b8e5fb5588909329a82e58f6902d0
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              en-GB.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\en-GB.pak
              • Size 546KB
              • SHA256 7d3f5c381b1ec39bc57d6cee58f9bd69be9b36aa98ffca0b94e81f4df92e5388
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              en-US.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\en-US.pak
              • Size 552KB
              • SHA256 74404352908184e834397df60b238f23462e77d69ac4136b4f20af2db6191436
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              es-419.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\es-419.pak
              • Size 667KB
              • SHA256 cd173ec7abdc3609b8ea33764fa8e106147121ee2d262cf5aef22d50fd386fb9
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              es.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\es.pak
              • Size 663KB
              • SHA256 9ff88eabacab95f8bbef9e95f63d3619fa8d640ec03523d80abb26243b059a65
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              et.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\et.pak
              • Size 605KB
              • SHA256 0292298736847491828465a3dcf04cf4a0d9bd63d4b1a9d183c7eeb389343d26
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              fa.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\fa.pak
              • Size 1002KB
              • SHA256 61323fafa841e5cb977e80d27b2c2746ab3eee7fdeec4e9312915d9e0c45b52e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              fi.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\fi.pak
              • Size 617KB
              • SHA256 0535e2acd4517ce8099aa0a4a3e562af37ca6a699faca1de3b348b8bfacf2a8b
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              fil.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\fil.pak
              • Size 698KB
              • SHA256 f9e86324deee168d160a51402588da9987646c8c5899b76b6255d7e3a46a7bb5
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              fr.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\fr.pak
              • Size 721KB
              • SHA256 843d7236fef5375ef08b9af9eb7e443ecafe0593deebc18a45ba5cf67a3a1f00
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              gu.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\gu.pak
              • Size 1.4MB
              • SHA256 34e4d54d66a0b0471542ee76c55cc9d3b27fcaf15cdf63c3d7e7b46cfdfb3f4f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              he.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\he.pak
              • Size 877KB
              • SHA256 75fbe196eda1791775243822da4e7f9737710f627b6ee27cc4c6d975865ea7cd
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              hi.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\hi.pak
              • Size 1.5MB
              • SHA256 7557c5d5b46c8ff4ebc159bbdf0477d28e4baa7c3bedcb947d59028301ff21e6
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              hr.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\hr.pak
              • Size 674KB
              • SHA256 9ef77921560c91e5d6e42df6504589b8b7efb84c9b5119ac51e9a10d8c83a089
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              hu.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\hu.pak
              • Size 721KB
              • SHA256 31e407f43bbd0cd0692755f961bb39d10af1f9f0af205455dd70fb4c7eeb85a5
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              id.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\id.pak
              • Size 598KB
              • SHA256 e7957c9c58f890b5d053ea50c5fcb4b66cbc3c47478c42a5962810cb15814249
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              it.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\it.pak
              • Size 653KB
              • SHA256 4b06d5f8a4f75b3122bc3f1c54af59eadf6117507758d4efbcb5f1f88f322e61
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ja.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\ja.pak
              • Size 796KB
              • SHA256 89178f1acd5af747dde41399ba0c1e229eb53e2800d4b15ea2d9f3358e69edd3
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              kn.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\kn.pak
              • Size 1.6MB
              • SHA256 9744dbadbb7c31cc6393a0682daf91045be270bab934dff7dbad79b76287616e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ko.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\ko.pak
              • Size 677KB
              • SHA256 fa24cc7d4089c81247ed9d5e81d8b67890a09a82ff6d450fe94a654374a2a46e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              lt.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\lt.pak
              • Size 734KB
              • SHA256 bc5d99751f1b252ed074bfc4bf6dc94321b3f785a0a0d4300209acae40220f74
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              lv.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\lv.pak
              • Size 731KB
              • SHA256 e91342ed84e1847968b40194250b4d76bbd2ea13133675b8b099dca45ee0f197
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ml.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\ml.pak
              • Size 1.6MB
              • SHA256 b813f87ec80ffb496413949ef7bc8208db6fb7ceaaf88145f160bf8abcfe2f01
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              mr.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\mr.pak
              • Size 1.3MB
              • SHA256 fa87d519a8545b2748c52ccd7704b320877b2d03385991ceabe75c2745200331
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ms.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\ms.pak
              • Size 629KB
              • SHA256 2ab44645c1ed7b68c9121ee0ab9cdf8c7b9d1721d131b08f258b8a85b8ed0af0
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              nb.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\nb.pak
              • Size 601KB
              • SHA256 8eaa23c418a3fafb9e85b5445e73fb2f5e13be1f033ff2487c4081148aaa2f4e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              nl.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\nl.pak
              • Size 627KB
              • SHA256 432dcf6ae7f418986244ed3c953aa36176fce7218de4e48158213389594e7dcd
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              pl.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\pl.pak
              • Size 700KB
              • SHA256 5e47475490d1514e3670c44f55a2061672c8e7f6219211b3d907bacbe5aa0a5c
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              pt-BR.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\pt-BR.pak
              • Size 657KB
              • SHA256 0be502c6b71b94ccd76b30a0b8ce3a816d7223ab1d4c0a81c150df0cf3fc43f5
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              pt-PT.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\pt-PT.pak
              • Size 661KB
              • SHA256 98daa1072e7c405e3f5e030bfe25ef1e12b31a96e0b1db245d6805a564390f75
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ro.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\ro.pak
              • Size 686KB
              • SHA256 da5c79d06ae972aa460724ef378f91bf4afda911b167a896963f6e0d4daf9aec
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ru.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\ru.pak
              • Size 1.1MB
              • SHA256 e4236ef1cad608c76dc1594645c345feb3459f8ccdcdf4ed2f5b33ba188dabeb
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              sk.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\sk.pak
              • Size 713KB
              • SHA256 ca41ac3e8b3352f1bdd66ce54afaddfaf86c1cebfd5bfa3e82a23bded674a83f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              sl.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\sl.pak
              • Size 682KB
              • SHA256 2bc385d457dc844794f9396458c4090e6233afec5a08b4a5a92e45ef31e07b78
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              sr.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\sr.pak
              • Size 1.0MB
              • SHA256 c3b4a5aba1e86ea0088e5c33002bb055ed567840b2859b277014be0a7283013e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              sv.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\sv.pak
              • Size 609KB
              • SHA256 3af85c15ce3e76344404c37325a60932ce53763539c8cd8b3120424f709f73de
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              sw.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\sw.pak
              • Size 645KB
              • SHA256 a806d782b21930ec6243b8e5b393e7fa970ce9d297e96b02e6596fa6ce6c8a86
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ta.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\ta.pak
              • Size 1.6MB
              • SHA256 516660683214c01341300fa8d15c7e39aecc38792b76fe74bdcc464024f4294f
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              te.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\te.pak
              • Size 1.5MB
              • SHA256 5439181ded31f8cc5dbcc1eed358753d4b7449ad29380baabe4cb893d8751a06
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              th.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\th.pak
              • Size 1.3MB
              • SHA256 946b4a45a9d43b15359927f33307fc35f50d7e880f02890b07bdfd1160f2db59
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              tr.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\tr.pak
              • Size 656KB
              • SHA256 98151ed08e518b76f33cf20926717e0d8e28d8e4eb111e0c6e33b95c8acaa99e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              uk.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\uk.pak
              • Size 1.1MB
              • SHA256 6cdfc2782df67c0b72962fc62d2c2eb8d93102255115dae093dde530e345c643
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              ur.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\ur.pak
              • Size 986KB
              • SHA256 d57cd219249e207d34c21a619935d0f0a7814a0ccdd36051a42400c60a599e47
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              vi.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\vi.pak
              • Size 781KB
              • SHA256 37f2c01a308ad8bb93d9525d81480880f97d54191dbe7c1c1e75aa9fcf009450
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              zh-CN.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\zh-CN.pak
              • Size 558KB
              • SHA256 e2c2d278e66e1cd806f707259fabf8fed43f0e2e04edb23e4808c46fb872d8d7
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              zh-TW.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\locales\zh-TW.pak
              • Size 551KB
              • SHA256 f4c2f92b0de0326377b7d441fab0fe7441ab3d09c188c530445c210a88377234
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              resources.pak
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\resources.pak
              • Size 6.9MB
              • SHA256 b88115979b34be771ce2547a550cc46cb11fa19882e02f54f84a5471fa94f9f3
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              app-update.yml
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\resources\app-update.yml
              • Size 172B
              • SHA256 ff275def080229bfc8a75a08b67c072cacdc7a538fb01104c3c2e6a89e741e5d
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              app.asar
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\resources\app.asar
              • Size 47.5MB
              • SHA256 0cbd6327b8b932c73d445e0c3b86860fe7b219d70dde25e5e395ff5e9f1be364
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              icon.png
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\resources\app.asar.unpacked\resources\icon.png
              • Size 132KB
              • SHA256 ceb2210260fc5846582030fac047cf70fa012beb080d1b4c8c1ad0e9d2fa9783
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              trayTemplate.png
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\resources\app.asar.unpacked\resources\tray\trayTemplate.png
              • Size 535B
              • SHA256 4618ef51f1bade1b1f3662a0a28ff63a9534944a567ee9f815285cf9866a48af
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              [email protected]
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\resources\app.asar.unpacked\resources\tray\[email protected]
              • Size 787B
              • SHA256 5b509bb2dc0ae257405e2c35dd62138f123decf424174b37e99c9bcece79af69
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              elevate.exe
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\resources\elevate.exe
              • Size 105KB
              • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              snapshot_blob.bin
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\snapshot_blob.bin
              • Size 356KB
              • SHA256 f625cd2ebfeb3e78afab97e0da108426eca24711c15995377d473b3dac9768df
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              v8_context_snapshot.bin
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\v8_context_snapshot.bin
              • Size 722KB
              • SHA256 4872a09b92ceb55ee3ebefbd6123652a75efa7d97f9ea3b41fcc2d5c8270a6f4
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              vk_swiftshader.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\vk_swiftshader.dll
              • Size 5.3MB
              • SHA256 be32093f330a57cc3bf31ae4e32c61ef0c6b751a9212d1d8507fe8394e2f2859
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              vk_swiftshader_icd.json
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\vk_swiftshader_icd.json
              • Size 106B
              • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              vulkan-1.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\7z-out\vulkan-1.dll
              • Size 902KB
              • SHA256 f7d669b9239cd7a460d609cb60c202dccac5253ffaf68131cc09c969fe59334a
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              SpiderBanner.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\SpiderBanner.dll
              • Size 9KB
              • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              StdUtils.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\StdUtils.dll
              • Size 100KB
              • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              System.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\System.dll
              • Size 12KB
              • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              WinShell.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\WinShell.dll
              • Size 3KB
              • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              nsExec.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\nsExec.dll
              • Size 6KB
              • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              nsis7z.dll
              • Path C:\Users\Admin\AppData\Local\Temp\nsh2D8A.tmp\nsis7z.dll
              • Size 424KB
              • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              data_0
              • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\GPUCache\data_0
              • Size 8KB
              • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
              • MD5 SHA1 SHA512 SSDEEP
              Submit Download

              data_1
              • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\GPUCache\data_1
              • Size 264KB
              • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
              • MD5 SHA1 SHA512 SSDEEP
              Submit Download

              data_2
              • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\GPUCache\data_2
              • Size 8KB
              • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
              • MD5 SHA1 SHA512 SSDEEP
              Submit Download

              data_3
              • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\GPUCache\data_3
              • Size 8KB
              • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
              • MD5 SHA1 SHA512 SSDEEP
              Submit Download

              CURRENT
              • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Local Storage\leveldb\CURRENT
              • Size 16B
              • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
              • MD5 SHA1 SHA512
              Submit Download

              81a78eee-31cc-4d40-b942-e9b2b84f73e3.tmp
              • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Network\81a78eee-31cc-4d40-b942-e9b2b84f73e3.tmp
              • Size 741B
              • SHA256 1179aeb7e5243a1f6c08212f3267c19ac95b8bff2705d502ed7345a0048bdf83
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              Network Persistent State
              • Path C:\Users\Admin\AppData\Roaming\.sklauncher\bin\Network\Network Persistent State
              • Size 59B
              • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              sklauncher_logs.txt
              • Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
              • Size 1KB
              • SHA256 faad566226710d5cb62b57957f15d9303286356924c673be06e8d48b6f8aabd3
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              sklauncher_logs.txt
              • Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
              • Size 1KB
              • SHA256 45b21458e21793ec365f619bcdb21fcf046e9c2a79b9a14bbc92f5eedecf71a6
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              sklauncher_logs.txt
              • Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
              • Size 3KB
              • SHA256 ae888229685ea36ec81a8e8a31cc29805b5e47a3246d9a6d1b80a113e547be6d
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              sklauncher_logs.txt
              • Path C:\Users\Admin\AppData\Roaming\.sklauncher\logs\sklauncher_logs.txt
              • Size 5KB
              • SHA256 5a22128b1ca84777162caf8254811a1518a2f1f4764c91e7c1f19c8e5871530d
              • MD5 SHA1 SHA512 SSDEEP TLSH
              Submit Download

              settings.json
              • Path C:\Users\Admin\AppData\Roaming\.sklauncher\settings.json
              • Size 1KB
              • SHA256 df1699693a280e7f14d5fc9f277f3f0095a4158d246f124e0d695c15f3d21ec7
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              settings.json.tmp
              • Path C:\Users\Admin\AppData\Roaming\.sklauncher\settings.json.tmp
              • Size 1KB
              • SHA256 293713358040c3e4583625d3d6d9a2270057a277e9982e64ccf20d8d11dc0558
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              settings.json.tmp
              • Path C:\Users\Admin\AppData\Roaming\.sklauncher\settings.json.tmp
              • Size 1KB
              • SHA256 8f834630fc246148ed03f49979dc81727254fcb4578ccbe3cdae7af595c6a0b2
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              default.acl
              • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.acl
              • Size 2B
              • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
              • MD5 SHA1 SHA512
              Submit Download

              SKlauncher 4.0.lnk
              • Path C:\Users\Admin\Desktop\SKlauncher 4.0.lnk
              • Size 2KB
              • SHA256 becfd826b60abc862fe5a03a20756cfeeab3644b2080c9b3905b16f64ff5c64f
              • MD5 SHA1 SHA512 TLSH
              Submit Download

              memory/1092-1005-0x000000000DE00000-0x000000000E67B000-memory.dmp
              Download

              memory/1092-1048-0x000000000DE00000-0x000000000E67B000-memory.dmp
              Download

              memory/1948-715-0x00000228064F0000-0x00000228064F1000-memory.dmp
              Download

              memory/1948-716-0x00000228064F0000-0x00000228064F1000-memory.dmp
              Download

              memory/1948-717-0x00000228064F0000-0x00000228064F1000-memory.dmp
              Download

              memory/1948-718-0x00000228064F0000-0x00000228064F1000-memory.dmp
              Download

              memory/1948-719-0x00000228064F0000-0x00000228064F1000-memory.dmp
              Download

              memory/1948-720-0x00000228064F0000-0x00000228064F1000-memory.dmp
              Download

              memory/2380-39-0x00000000078B0000-0x00000000078D0000-memory.dmp
              Download

              memory/2380-45-0x0000000007CA0000-0x0000000007CAA000-memory.dmp
              Download

              memory/2380-31-0x0000000006540000-0x000000000689B000-memory.dmp
              Download

              memory/2380-28-0x0000000006370000-0x00000000063D6000-memory.dmp
              Download

              memory/2380-27-0x0000000006300000-0x0000000006366000-memory.dmp
              Download

              memory/2380-26-0x00000000059E0000-0x0000000005A02000-memory.dmp
              Download

              memory/2380-25-0x00000000737D0000-0x0000000073F8C000-memory.dmp
              Download

              memory/2380-24-0x0000000005C40000-0x000000000628A000-memory.dmp
              Download

              memory/2380-23-0x00000000737D0000-0x0000000073F8C000-memory.dmp
              Download

              memory/2380-33-0x0000000006900000-0x000000000694C000-memory.dmp
              Download

              memory/2380-36-0x0000000070190000-0x00000000701DC000-memory.dmp
              Download

              memory/2380-35-0x00000000737D0000-0x0000000073F8C000-memory.dmp
              Download

              memory/2380-34-0x0000000007870000-0x00000000078A6000-memory.dmp
              Download

              memory/2380-21-0x00000000737E2000-0x00000000737E3000-memory.dmp
              Download

              memory/2380-22-0x00000000030C0000-0x00000000030F6000-memory.dmp
              Download

              memory/2380-50-0x00000000737D0000-0x0000000073F8C000-memory.dmp
              Download

              memory/2380-48-0x00000000702F0000-0x000000007064B000-memory.dmp
              Download

              memory/2380-47-0x0000000007E70000-0x0000000007E94000-memory.dmp
              Download

              memory/2380-46-0x0000000007E40000-0x0000000007E6A000-memory.dmp
              Download

              memory/2380-32-0x00000000068C0000-0x00000000068DE000-memory.dmp
              Download

              memory/2380-40-0x00000000737D0000-0x0000000073F8C000-memory.dmp
              Download

              memory/2380-41-0x0000000007B80000-0x0000000007C23000-memory.dmp
              Download

              memory/2380-42-0x00000000737D0000-0x0000000073F8C000-memory.dmp
              Download

              memory/2380-43-0x00000000082B0000-0x000000000892C000-memory.dmp
              Download

              memory/2380-44-0x0000000007C30000-0x0000000007C4A000-memory.dmp
              Download

              memory/3208-709-0x000001DE639B0000-0x000001DE639B2000-memory.dmp
              Download

              memory/3208-695-0x000001DE63940000-0x000001DE63941000-memory.dmp
              Download

              memory/3208-711-0x000001DE639B0000-0x000001DE639B2000-memory.dmp
              Download

              memory/3208-708-0x000001DE639B0000-0x000001DE639B2000-memory.dmp
              Download

              memory/3208-707-0x000001DE639B0000-0x000001DE639B2000-memory.dmp
              Download

              memory/3208-706-0x000001DE639B0000-0x000001DE639B2000-memory.dmp
              Download

              memory/3208-704-0x000001DE639B0000-0x000001DE639B2000-memory.dmp
              Download

              memory/3208-703-0x000001DE639B0000-0x000001DE639B2000-memory.dmp
              Download

              memory/3208-701-0x000001DE639B0000-0x000001DE639B2000-memory.dmp
              Download

              memory/3208-700-0x000001DE639B0000-0x000001DE639B2000-memory.dmp
              Download

              memory/3208-702-0x000001DE639B0000-0x000001DE639B2000-memory.dmp
              Download

              memory/3208-705-0x000001DE639B0000-0x000001DE639B2000-memory.dmp
              Download

              memory/3208-697-0x000001DE639B0000-0x000001DE639B2000-memory.dmp
              Download

              memory/3208-699-0x000001DE639B0000-0x000001DE639B2000-memory.dmp
              Download

              memory/3208-691-0x000001DE63940000-0x000001DE63941000-memory.dmp
              Download

              memory/3208-710-0x000001DE639B0000-0x000001DE639B2000-memory.dmp
              Download

              memory/4380-55-0x00000000737D0000-0x0000000073F8C000-memory.dmp
              Download

              memory/4380-56-0x00000000737D0000-0x0000000073F8C000-memory.dmp
              Download

              memory/4380-61-0x0000000070190000-0x00000000701DC000-memory.dmp
              Download

              memory/4380-64-0x0000000007550000-0x00000000075E6000-memory.dmp
              Download

              memory/4380-65-0x00000000074C0000-0x00000000074D1000-memory.dmp
              Download

              memory/4380-67-0x00000000737D0000-0x0000000073F8C000-memory.dmp
              Download

              memory/4380-57-0x00000000737D0000-0x0000000073F8C000-memory.dmp
              Download

              memory/4560-79-0x0000000070340000-0x000000007069B000-memory.dmp
              Download

              memory/4560-74-0x0000000005890000-0x0000000005BEB000-memory.dmp
              Download

              memory/4560-76-0x0000000070190000-0x00000000701DC000-memory.dmp
              Download

              memory/5736-877-0x000001BB14680000-0x000001BB14780000-memory.dmp
              Download

              memory/5736-878-0x000001BB04340000-0x000001BB04360000-memory.dmp
              Download

              memory/5736-847-0x000001BB001E0000-0x000001BB002E0000-memory.dmp
              Download

              memory/5736-892-0x000001BB149D0000-0x000001BB149F0000-memory.dmp
              Download

              memory/5736-876-0x000001BB04220000-0x000001BB04240000-memory.dmp
              Download