e4be7e1507a93787ec8d757265b82b24df72f96f3fde10ff8e6c2ea3537b4c22

Analysis

user interaction
yes
max time kernel
183s
max time network
215s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
27/10/2026, 16:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

Reason

Machine shutdown

General

Target
Clip.Studio.Paint.EX.5.1.5.x64.rar
Size 495.6MB
Sample261027-tlgy2set6x
SHA256 e4be7e1507a93787ec8d757265b82b24df72f96f3fde10ff8e6c2ea3537b4c22
MD5 3082544d99db8ac11cc423ff587f6160
SHA1 eb33b776d5301ed8532309e235626c023fe21800
SHA512 0f183faaa10e8208c4e2700ef38e64681e899e0695d52a9c01e380f8adc780167b9440762e5554c2db42b069bec48d59edb117f9cffe7d9fcb4f1c3d5380ad19
SSDEEP 12582912:q08ODsL2vawLeaLoYjIey0sPRV3fe3IMLXOBZctU+ydJa+bOfM/n/:B7DvvasGGVwPFFTlbOfM//
TLSH
T1C949334EA6E609D4E93C06B0E4ED3C5C42D7D008AD2E366C9DDA1EF64C4895B6F32736
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery persistence ransomware

Malware Config

Signatures

Executes dropped EXE 2 IoCs

pid	Process
4840	Update.exe
2384	Update.exe

Contacts third-party web service commonly abused for C2 1 TTPs 4 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
2	discord.com
31	discord.com
69	discord.com
72	discord.com

System Location Discovery: System Language Discovery 1 TTPs 6 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DiscordSetup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Update.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DllHost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DllHost.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	DiscordSetup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Update.exe

Modifies data under HKEY_USERS 11 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent	LogonUI.exe
Set value (data)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Explorer\Accent\AccentPalette = 99ebff004cc2ff000091f8000078d4000067c000003e9200001a6800f7630c00	LogonUI.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History	LogonUI.exe
Set value (int)	\REGISTRY\USER\.DEFAULT\Software\Microsoft\Windows\CurrentVersion\Themes\History\AutoColor = "0"	LogonUI.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	7zFM.exe
Key created	\REGISTRY\USER\S-1-5-21-461973139-3212354679-1508698038-1000_Classes\Local Settings	control.exe
Key created	\REGISTRY\USER\S-1-5-21-461973139-3212354679-1508698038-1000_Classes\Local Settings	control.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4448	chrome.exe
4448	chrome.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
5004	7zFM.exe

Suspicious use of AdjustPrivilegeToken 8 IoCs

description	pid	Process
Token: SeRestorePrivilege	5004	7zFM.exe
Token: 35	5004	7zFM.exe
Token: SeShutdownPrivilege	3620	control.exe
Token: SeCreatePagefilePrivilege	3620	control.exe
Token: SeSystemtimePrivilege	1124	rundll32.exe
Token: SeShutdownPrivilege	4324	control.exe
Token: SeCreatePagefilePrivilege	4324	control.exe
Token: SeSecurityPrivilege	5004	7zFM.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
5004	7zFM.exe
4840	Update.exe
2384	Update.exe
5004	7zFM.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4424	LogonUI.exe

Suspicious use of WriteProcessMemory 4 IoCs

description	pid	Process	procid_target
PID 3620 wrote to memory of 1124	3620	control.exe	112
PID 4324 wrote to memory of 3508	4324	control.exe	119
PID 4072 wrote to memory of 4840	4072	DiscordSetup.exe	132
PID 3532 wrote to memory of 2384	3532	DiscordSetup.exe	135

Uses Task Scheduler COM API 1 TTPs
The Task Scheduler COM API can be used to schedule applications to run on boot or at set times.
persistence

Query Registry
T1012
Uses Volume Shadow Copy WMI provider
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware
Uses Volume Shadow Copy service COM API
The Volume Shadow Copy service is used to manage backups/snapshots.
ransomware

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\Clip.Studio.Paint.EX.5.1.5.x64.rar"
1⤵
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:5004

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.ProcessorMetrics --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=5768,i,2861073288765551002,3855186694538560738,524288 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=5780 /prefetch:14
1⤵
PID:3332

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=9 --metrics-shmem-handle=5820,i,12311441745502084077,9602213514373945514,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=5856 /prefetch:1
1⤵
PID:3316

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=10 --metrics-shmem-handle=5832,i,12043037810256676740,13883824855992151195,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=5876 /prefetch:1
1⤵
PID:5572

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:4108

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:1300

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=11 --metrics-shmem-handle=6016,i,9421674474734165566,17344684255080539303,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=5892 /prefetch:1
1⤵
PID:5536

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=12 --metrics-shmem-handle=5356,i,7180414726229803085,16476268379183465382,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=5832 /prefetch:1
1⤵
PID:1240

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=13 --metrics-shmem-handle=5904,i,14543119481109933553,13834474056267507505,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=6072 /prefetch:1
1⤵
PID:5748

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=14 --metrics-shmem-handle=5312,i,16274835087877974275,11873530446688975102,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=5356 /prefetch:1
1⤵
PID:5212

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=15 --metrics-shmem-handle=6256,i,16649414154863854758,8505849719717876594,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:1
1⤵
PID:3124

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=16 --metrics-shmem-handle=6236,i,18038284433477682859,8175543610099648238,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:1
1⤵
PID:3876

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=17 --metrics-shmem-handle=5788,i,8032637993393022565,91121262495272275,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=5808 /prefetch:1
1⤵
PID:5112

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=18 --metrics-shmem-handle=6028,i,3633677802266164433,8515102020125914860,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=4752 /prefetch:1
1⤵
PID:2940

C:\Windows\system32\control.exe
"C:\Windows\system32\control.exe" /name Microsoft.DateAndTime
1⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:3620
- C:\Windows\System32\rundll32.exe
  "C:\Windows\System32\rundll32.exe" C:\Windows\System32\shell32.dll,Control_RunDLL C:\Windows\System32\timedate.cpl
  2⤵
  - Suspicious use of AdjustPrivilegeToken
  PID:1124

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
- System Location Discovery: System Language Discovery
PID:3136

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3284,i,7600336678458307917,14703571482852602133,524288 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=6248 /prefetch:14
1⤵
PID:2480

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3344,i,1099804710098630557,14741576048600612858,524288 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=6496 /prefetch:14
1⤵
PID:3848

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --message-loop-type-ui --force-high-res-timeticks=disabled --metrics-shmem-handle=3276,i,16634269873363386489,17304298967212540760,524288 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=6532 /prefetch:14
1⤵
PID:2776

C:\Windows\system32\control.exe
"C:\Windows\system32\control.exe" /name Microsoft.DateAndTime
1⤵
- Modifies registry class
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:4324
- C:\Windows\System32\rundll32.exe
  "C:\Windows\System32\rundll32.exe" C:\Windows\System32\shell32.dll,Control_RunDLL C:\Windows\System32\timedate.cpl
  2⤵
  PID:3508

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
- System Location Discovery: System Language Discovery
PID:2556

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=22 --metrics-shmem-handle=6504,i,13168814303374410785,268798901764541371,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=3352 /prefetch:1
1⤵
PID:2628

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=23 --metrics-shmem-handle=4728,i,6251664927740807895,3235743209661660726,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=3248 /prefetch:1
1⤵
PID:1476

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=6292,i,17846929684480488513,3928901886126748131,524288 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=5304 /prefetch:14
1⤵
PID:4764

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5220,i,40171363333512890,10543159025918159161,524288 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=4768 /prefetch:14
1⤵
PID:5804

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5360,i,10154080064152072380,14936491674584475598,524288 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=6052 /prefetch:14
1⤵
PID:6064

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --force-high-res-timeticks=disabled --metrics-shmem-handle=5836,i,13674543754188797899,8457910155827048773,524288 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=5088 /prefetch:14
1⤵
PID:1192

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=28 --metrics-shmem-handle=5876,i,16585614402227478298,3770393583047075893,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=5896 /prefetch:1
1⤵
PID:2896

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=29 --metrics-shmem-handle=5920,i,10892462496923015083,4125040886851891792,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=6124 /prefetch:9
1⤵
PID:2620

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=30 --metrics-shmem-handle=5792,i,9108960595980159128,8100296065061834539,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=3228 /prefetch:1
1⤵
PID:4432

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --enable-dinosaur-easter-egg-alt-images --force-high-res-timeticks=disabled --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=31 --metrics-shmem-handle=6300,i,12976003195447973898,1677226221796997671,2097152 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=6312 /prefetch:1
1⤵
PID:4788

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=quarantine.mojom.Quarantine --lang=en-US --service-sandbox-type=none --force-high-res-timeticks=disabled --metrics-shmem-handle=6256,i,3629017629130352014,2538536436350341675,524288 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=3408 /prefetch:14
1⤵
PID:2592

C:\Users\Admin\Downloads\DiscordSetup.exe
"C:\Users\Admin\Downloads\DiscordSetup.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:4072
- C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
  "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of FindShellTrayWindow
  PID:4840

C:\Program Files\Google\Chrome\Application\chrome.exe
"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --force-high-res-timeticks=disabled --gpu-preferences=SAAAAAAAAADoAAAIAAAAAAAAAAAAAGAAAQAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --metrics-shmem-handle=4912,i,4852074163342470130,3625825306911436110,262144 --field-trial-handle=2380,i,17695389954750272769,7127390007844162576,262144 --variations-seed-version --mojo-platform-channel-handle=4424 /prefetch:10
1⤵
- Suspicious behavior: EnumeratesProcesses
PID:4448

C:\Users\Admin\Downloads\DiscordSetup.exe
"C:\Users\Admin\Downloads\DiscordSetup.exe"
1⤵
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3532
- C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
  "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of FindShellTrayWindow
  PID:2384

C:\Windows\system32\LogonUI.exe
"LogonUI.exe" /flags:0x4 /state0:0xa39c0855 /state1:0x41c64e6d
1⤵
- Modifies data under HKEY_USERS
- Suspicious use of SetWindowsHookEx
PID:4424

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:4508

C:\Windows\System32\svchost.exe
C:\Windows\System32\svchost.exe -k CameraMonitor
1⤵
PID:3204

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\chrome_100_percent.pak
Size 117KB
SHA256 15a5bcb49a5c02d6a4e736e8dfa11dabb0bac0589641a4e25f0c06472ccaae6d
MD5 750913d55e87def9108e55728ba67d00
SHA1 a5944bc170d1f6c3223195c043134566471dae1d
SHA512 f5663ae3c775e2ec12dda6255afea99291673b8586048b131ca657a10be88cca61e298bb56797bcc34723fc8bf0a3dd966ad8b9f0e77747f963d8dada4f25edf
SSDEEP 3072:7lj4PisCv+/P9NebGz8LI1TwILjQBHe7YAP18RVC2I:7lcYWFUbGz8LI1TdjQBQCrC
TLSH
T1E9C3D0E773B0AD7DDA464BB743560070FCB31B2907C2160E4B9AE479652AB88D9C93D3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\chrome_200_percent.pak
Size 192KB
SHA256 b7acfb068fa681f4ecb8f782bd4e3926590076c61fd0de3de4a12dde227cf52b
MD5 d476c19d21b3c2861f08c1c82fffddcb
SHA1 6f61aab7b6fba4fed5a7c222bdb96aee11f23bd9
SHA512 36acefce9f4e6837609f801bb340380f8e3e0de3f01872ef1e9bfd769f61ec2804191b91cfd01d90fb874cc9f4e685de7f2d03c21cd7e0bc6c7d8907f41dc12a
SSDEEP 3072:y6FJ8LahaY7d6iN6uSwxohPQDQYaEjrvy/IwXJPpLjQBHe7YAP10uxR/TbIM0:y6IGQ+N6uSZQDQYakvyAk9jQBQNd4
TLSH
T1DE1401D323B4AD3DDA530BB3926600B0FD7A20291AB3511E569FED397925F8889C9343
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\d3dcompiler_47.dll
Size 4.5MB
SHA256 7b06a9669b48608ab576659f4f5ee4ec94c82e5b3109fa7290f5fbab84d544ec
MD5 6583aab336f41f4ca1ff9ec25f2978e1
SHA1 d4d4acea1bcf4a51b5f364e15f76f0952d62018c
SHA512 24e570a68baef0800c9bfdd45536b70c30358c6cc1e453e41895ecac23ca9ead5ce127788fe6500aa0480a29cc09b8bfde2218ee5b28c53c41f835ac860bb6c9
SSDEEP 49152:oMaW1H1ZcPsk9HOJLjJP73tSjPM2gjgpaIhR46LUbOWHHJdsCIdkTYoHjnTVylMf:rcPsguxj34bw+vD3Gmt3Ankw
TLSH
T18B269E56B7E850E9C1BBD138C687861BE7B1B80513305BDF02908769AF73BD16A3E724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

discord_wer.dll

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\discord_wer.dll
Size 440KB
SHA256 2671f9e1ecfb9e3785fefe2558d5101a7248bd6cae3d29219f4ca31b92c9033f
MD5 7d35ac7d2a817d2b16224c18b5cb375a
SHA1 1d1f1ff7f2ee499403886b5a7fe72a12f1d83105
SHA512 69788cd3bc60fd6e43f890366ba85f477ca597dea3e264974ff5584ecfd427c3d0af252ba86066f4eb7db38215a037d548514c4bb943975f652185160cabb43a
SSDEEP 6144:wKCNxSULPMiROmI+K/CiF6sqqvOBvDraVtWb8kr9IMkGssBe:wKCSULPxliF6sqqvOB7raWb8WiMk8g
TLSH
T1ACA49E14F7E448B8E077D1388A638647EF7278960B51E6DF03A492692F37BE41A3D325
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxcompiler.dll

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\dxcompiler.dll
Size 24.5MB
SHA256 e5da8922bc7896fa37a6231dfac36a07e91924a09b97deae51434ea72ae347ce
MD5 33f152988b077a3051556b2a61195fb3
SHA1 12b0d37fd6d19eee0c10f547f94efa8f6d733f01
SHA512 3f86e674996a26e13339003e48722be86c7b8e31c428ccc958ff778dd185b51a40c7cd50df2569f85c07a8f6a561486743d1880e1fb53699f9798a172fcecfe2
SSDEEP 393216:+EGiV1HsevmZ4wTNe5er829JGa14/Ov0XTL4:Z5mHd7YlXP4
TLSH
T1F7473A122646D49DC059C8B9C7678B26CA6C30E73FA7B9DBC0F451252B79EBC1B39234
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

dxil.dll

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\dxil.dll
Size 1.4MB
SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
MD5 c9a7241ce83437d54a82522aa0b54575
SHA1 acff69399c4f17c4f20f70560fb89a9163d2b486
SHA512 8ad8c77a2368e363ad16cc1f9b3a0e4ac15634722340bdebb0e4957e7e117faaf36db2d6e08cb49127849b64844a75ebdd7e19b3f8b7e1f4412fb0066dce1ad5
SSDEEP 24576:YcuJxAR7BBPp6UMPzbOXh9/duHdFnXIqpfya8PNCdbyKE5vl5eZiE1/0Wy4r8H/2:YsHMPzbOxBduHdSCde8ZF1/0Wy4oV6bX
TLSH
T109656D6B66A800B9D4BFD174CA438E1BE7B2B45503B0EB8F16F402A61F577B15A3E311
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\ffmpeg.dll
Size 2.3MB
SHA256 06b1fc183f13ec2f1e9ab3bc50bc9d52c81c0b5dba576cb394e677e61e133d21
MD5 2e6e66726c87955ce8060ab3f06f3dd8
SHA1 5e40ef07ceca1c9b98d1800e63eb3e02a99615ea
SHA512 5235f8b3fce91cd6418c6fb1ef780cbf415a147846521bfd135754320899921a711d7127e96c07124469614a43e23110eecbc54a90c4c1924c425f4e89611877
SSDEEP 24576:93nO+U8M0n3/LWwrmKJ8/nZOj5ncNBgb5JCx4E4G6D5VMuKL9sENdM041LF4euiR:KwrmE8w9cNW5JCx4W61yuUgLF4lM4s
TLSH
T1D7B5AE06F6D685EAC02AC134879B9613F33174464B607AEF23A007293F66FE05E7E765
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\icudtl.dat
Size 10.4MB
SHA256 67c332a252ae56e300213753784e4256b201a6bd5156db9eb87a6afda20215f2
MD5 1196a1913f893863f8e7f129e69d56aa
SHA1 664370d6d58c62fdea1d91e95027570ad529dad0
SHA512 995464abab0913704db7cdd12441ee098555ca0c15e06e12e770e3f1303958b3fd812e112494c6fcdf4bf10b4b12bfcc25dc3429cc0130382f04af318269307a
SSDEEP 98304:g/cBQYOo+ddly1/rQqQC1HiXUxO/RJk3IWhlYntjnd0p89T:g/cBhORok2HiXUxO/RJk3IWhlYntjdPT
TLSH
T1E4B62903A2FB4EC2F9FB9FB098F552779567BD49AE32805951042F3B1C333908665B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer.db

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\installer.db
Size 20KB
SHA256 fe9dab8c80812c0118935d38c11060690bba44410331301578b40545275950d9
MD5 71bd971cd538b157a8b7520c6d582d38
SHA1 707b552acbccb7bdd92daf4c95f9e0cf90dc377f
SHA512 88523df648c697f76fef3f3ee7b2eecb0ce00d5f350f135d7b3e448eb14c02f14891834771c1a5e24a535234ae00722a558d10447fec124164e79bb0c557a27e
SSDEEP 192:U+BLr4t667m010Sw9no2pt7dfd5Wo1QDRlRs:U+Bh5oq7dSVl
TLSH
T1159234BD21A515B3C3BA94FD6B4038764D3D930E1BBA8AC412F993E057E3B7C0D61629
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\libEGL.dll
Size 479KB
SHA256 fb44f67ee43f02597387013e5f3c39595b2b861efe17e24149400ec4e7ed8f08
MD5 2c145d407317a53dc3239d48562b7d6a
SHA1 a53ecade3de730f54d8dc2f3b31352f4e0636a7b
SHA512 2f5f91f479a2844cd9c665c1ec894fd0caa65892ae84e33aa42424cf42e1976c8010de8dcea7aafbcec9f1eb9fb00c891d3b8a727ca2b6773eb38e97e962b22a
SSDEEP 6144:Nn4LE8oVyVRsEN1FWgKpOAZxqm4IcnBcV1TKxfsbA7ZNRZC7h+2:SEd6RdWvbxqm4IcBk1OfsbivRZy
TLSH
T141A48C05B7E449B8E07AC138CA538647EB7178460B61F6DF03A0D2792F77BE45A7A321
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\libGLESv2.dll
Size 7.7MB
SHA256 fe2ecc31ecf1846b3c99e1a0f097c7734d9a47fa2f29a76ec1b4a2d113a5aa55
MD5 8741d145e39fc045c19acd8337f943c7
SHA1 5fdb0ad70c2dd713db3786087f87c3d08a0fd36b
SHA512 0dd2c96dbe2e1eb130b3a2f106fcad198d7fe591af30466107dcdbea38ff11596ee81afd1ad12d3da641762c6943ced88ef944f4a20a63034c7cd11b22a949e5
SSDEEP 49152:vOdTN3jDrsB+BZNFIIClqQOegjlGJ66at3mBObj7wavx6kiDAFa3VzZTeT4j4xWc:vKpjvZCCllsQs/jZ63BmN85ZERSP
TLSH
T1BA866C03F69681D9C05DE2788757A223FB34B8450724F6CF2AA457152F6ABF0AB3D724
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-TW.pak

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\locales\zh-TW.pak
Size 548KB
SHA256 949e1d86a3cdd9e5783b0501400b1ec012bf9fb5a50b8840d74fba49f2cc0b81
MD5 a55ee96a4aec2b89507f104db35867d4
SHA1 8bc6275da9072d4ebaf1a2385fa317ec918bc359
SHA512 775b6f867131a92008055c9a1a2be37bf16d7d64c1f6726f4a014743ce3f7e9a2b920f32bd7a3cb679ee59eb3b11a29667e65a97a3c77c46b8eae9f95665a9d0
SSDEEP 6144:Y5bNYcPuAciDMJ7+Y/DAYuVJoOk6a2EuoKxWXew7HLD5MfKaUmITq:Y5bxdICYlOPgKxWuw7HKC6
TLSH
T1A6C46CBA08FBDBEF0901F484B7CD523BBC8B386DDE773636FC8518981E69A5409A1145
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\resources.pak
Size 6.3MB
SHA256 7b8b64faa17efd335087ec63e58d89407416ea6c1a6e43dac65128f6667a2f42
MD5 872deeead69be5f868979b6b05e154a7
SHA1 df6b39bbeff786566fc5e00db2223434b0729902
SHA512 fe1bb318bcaf296d373402a332b6493e2da29521527c79bf95bd4f9afaa2f638105ad7e832e085def8eb0f1f07de0d278d7c9f4dbca97c1514c0f39244b0e742
SSDEEP 196608:rEBRHPfIXoDvuTjTMkriACmZnC3gEL34tVrW:gTvrPkrDntEoVrW
TLSH
T11C6633D276D2A80FCD9063BE45448F3A529CAF2565D1B1D308DD6158EDACB2C0BC4A7F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

app.asar

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\resources\app.asar
Size 3.5MB
SHA256 0025c02c7241045a12464309604ec4d5b8ec7ed2ce43cce05d5dacb8f253f672
MD5 6f8e89ee046329435f3bdac4c0b39010
SHA1 33aca27a6f11140820ddd4a173c132ac4d887e17
SHA512 512851b4417566ec257f08be854af053f3782fafb85349b91b8003412d571ffde133ee73ab562fc1631da3b59880174d58ba1594a73207c9264e96c41d1196a6
SSDEEP 98304:5Wky6hTiT6lO4mzh/a4izAkN2dx6sEOnA7:5vpwwzAkN2dx6sM
TLSH
T1FEF59EE5725269734FEB22EDE932554276B9C006B044607AFAACCECE15C8409B3B773D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

manifest.json

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\resources\bootstrap\manifest.json
Size 209B
SHA256 24f54f639bdbac648bb69b0019f73bfa757c27be52ea7bd05b8607008a119e08
MD5 6f05b2fb0090acd04b61f99a2937bd20
SHA1 1f6a30a080332bcb814023de47cacf5d425d657e
SHA512 e45ccf6e14eb7371aa51db0f024ba17e1dff17c59371bca39818f2c82b5e166d69a99024bdc887525270352c52b3745b4c06cc6bdd8f592cf7fe5d1c2d65c374
TLSH
T183D0C57B0451097936BE25770DA5504053EA4F8D95BF0D137FB3012D141F60B7192F6B
MD5 SHA1 SHA512 TLSH

Submit Download

build_info.json

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\resources\build_info.json
Size 175B
SHA256 5f2edfbc1c8d476d42df1ca32df98d551e40c0947181d26d1a5d65bb2d4d8e2e
MD5 7191ec5e900acafb3b52ca1772f430cf
SHA1 607ff274ce5052366ecbab0c95717ce9d4a58161
SHA512 abed8f8f67e5c039f2723d1ad1403bafcf23d6a89e38a1d9950379cee82b069111a0ac8a66b94b42a16d3c60c1b1d9e4c86a614a72ccc2f3e9669970cce59fc9
TLSH
T155C0806791441B3711F09FFBC25090A2B305EE8F01754D3D307F414D5361D745542F05
MD5 SHA1 SHA512 TLSH

Submit Download

snapshot_blob.bin

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\snapshot_blob.bin
Size 338KB
SHA256 f4944af4edad684f09da3ae7573dd3dfb85ba317092b4b3390c088c4b0d3da78
MD5 5d400fbfddc4f1e602e67c74b388b13f
SHA1 efd5263a8286045cf3f21ae8c5ff2294cd99a6fa
SHA512 8fbcb8abc5ffc7dc6dc0c157d9381c6305a3d657d384aab90e786a1e9db5d6511a930c806bd9474587ae34b68c90be7b13bef6a3743b5edb18064d1d8a000555
SSDEEP 3072:2POiXK+Ot+xbRt2FURJPGKKPipcCN7qSN4Od1sTChzDKBwdCqg1:2P5Xgt+HlqKKlu7pN4udhv3gT
TLSH
T11074E012F749CA26C8B639745EE58B943E24B2CD9D89AF173060437DB4796640E2F38F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

updater.node

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\updater.node
Size 4.3MB
SHA256 8b641bc5a4826eb9c78dd30328379ffa4c416f596ef7378acc62bbf5d2cc1e8e
MD5 11b1d5afb2a47e3f75f510b6afc5932b
SHA1 c18c4da21baffa09bf94c59e957a304f28a79799
SHA512 d01a930c57d8f2646a0e65e6e9d5c524788cdd02ddae66d0ae3b8d46c50f3e4392c208d342ea557b38d693936717e3c59bd3a46cc9e14b034bff12505efe0099
SSDEEP 49152:34KCsG72nl4l0N2538jxFyzppcI0U2FnBvZlejl3GmmkouaJdkGE4rHqURfV9thd:xs72e3wx8wKqxdDSUxV92yUhxe
TLSH
T190266C03FA9545A9C06EC178875B9237E7B2B8890B24B7DB17D44A213F53FA05B3D398
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

updater_launcher.exe

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\updater_launcher.exe
Size 626KB
SHA256 e3abb88e41c270f05e617e4d1d6666c18d10fd3e0b4895e200d716f1604999bd
MD5 01b6f361be5ea4ebd69e7e1f402e7cbe
SHA1 7fff94f77136ede498f8439192129261fed0c7b6
SHA512 2b58d966b3fa7ad7eeeae25dfbbb0341fac09410ae374dbbd105fc1f39471b863cd6646ca5a98f800ed392535344e70764b6cd4e261cff41b8658e20cdb9c8d5
SSDEEP 6144:2vjEfVVKNNV6PxpmJcUTZrb3ug2zWoSYQXdChNxF+cc8h3WWWWWW5PWWWWWWWWWk:21qycUt7lN9yNxFbhE4l
TLSH
T1F5D46D51BA49BFE9D066CD3C817585639D327C870B21ACEF12D432682F76AE71E39E10
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\v8_context_snapshot.bin
Size 704KB
SHA256 8370f0e919f5fda4315e3d5106b3423a2abf441ab730c05570eb43fadd7e2152
MD5 f3e34adb9e28b7ca8f07e28715d29b99
SHA1 e88622d56796ca93c2c51fda0a60d020f4e4f4ef
SHA512 40e6acaf6efe608c3bbc63102a5a0685045613702cda2ea2078be7e6a9eb041ff02258c2212b1afe3b95728bb7f94832fcace187fea114b6bdd31d579f112fd1
SSDEEP 6144:fRrQKX5Xst+HlXawuu7pN4udhvM2Ndgp2BsaXgHkmybvAdEpjyHZdhU4iPWlan:CW5XhucLjvM2NdOeH4dEUlURWYn
TLSH
T17AE48666FB06CE26C8657A7D8DD74B063A30B2DD9EC6EB077021937CB8786544D2E20D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\vk_swiftshader.dll
Size 5.3MB
SHA256 a723b0cbef36c4b080f4d7c87cdf57571fce5bec4f0dfc6c61ed3d53aedc2ee6
MD5 f24036a7c3b37c8a63bc9e6683bc7a45
SHA1 9711c6291718d49f9506218f4edbe0c30dc78dce
SHA512 1ece9e672981845f517b6563a56648352378f102b1de8dd2ba88821f5a08d122172974e124779dc2c76f4a13fa5e78635e2f72a73bc500341b508e02b27d5752
SSDEEP 49152:Qhlq+TFmCYOnuxJqV7NfLkRF+Ex7lofozm9YZsTvvCugPdp/NH8Tj+dI9I61BKD7:QhlqfEJhSph4BaMST
TLSH
T18E464903F29681D9C06DD6B9875FA623F631F8840B22B6DF56A00F192E65FE06B3D714
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vk_swiftshader_icd.json

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\vk_swiftshader_icd.json
Size 106B
SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
MD5 8642dd3a87e2de6e991fae08458e302b
SHA1 9c06735c31cec00600fd763a92f8112d085bd12a
SHA512 f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
TLSH
T1A6B01211430088B36062AF3C41811F468765411C36020D491040540E83BBDB6A102394
MD5 SHA1 SHA512 TLSH

Submit Download

vulkan-1.dll

Path C:\Users\Admin\AppData\Local\Discord\app-1.0.9265\lib\net45\vulkan-1.dll
Size 916KB
SHA256 e273090793865ffa02ffe88bfa0bd5063310685f9fc65c8e3e4ccdca4064268b
MD5 3200917057fd4fd3cb444d76dcf8be3c
SHA1 ee6f579fb612fdb00235b13cf0c6527d55a48b53
SHA512 7a5027b90a89f7dea5897c0324c5f211d8319693514d3c820c99c96eab7bcd622786b89da5555c9e241cb3baacd13f9c2dad9946908e78f22ca77923b1818125
SSDEEP 24576:GOsdvoHVC79FqYBw8nEHnTA6Z5WzcxDYsHkDE6g3P0zAk76oOH8j6wEVJ:xsdvoHQ7/n+nTA6Z5WzcxDYsHkDE6g3l
TLSH
T1D9157D22DA648A79DA76C074D8D68A03C9F074811322B9CF177817147F6AFF52B3DB29
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

RELEASES

Path C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
Size 81B
SHA256 a5cd20d3a56fed4326944059d9c45634ab61d600dd760d0fa977b41a482593ec
MD5 805a2a9b8806551faa1d09259ea0b0d9
SHA1 499a2dbf6cb38860599c7ca990e1124e7825a62d
SHA512 8533d5527c1d3bd99e5d3cda9f2a6ce3dc13e317ffa52614c32000256dd89d3f7e2c30498d99635994ede110f6fdd0af96655fc1e8950fb20318eb486b38ace9
TLSH
T10FA0123EC040694CDC83224A1C1746316110501001450650488E6E091C2E450460CF05
MD5 SHA1 SHA512 TLSH

Submit Download

SquirrelSetup.log

Path C:\Users\Admin\AppData\Local\SquirrelTemp\SquirrelSetup.log
Size 11KB
SHA256 ddbaf13f93435717cba1da737bfcf8005eb307e106b7f471821cead4f1a058fb
MD5 42994c3644a278acf527d3b9a6d3f9fc
SHA1 92eef6c15d872505b23d53e1d858e9ab7f1b261f
SHA512 567bffd1b9b6ada1fa2eb32d363829997882fd0c3a9b72806289ed024c5795f094b1eb2e2fbf90b89594c4d79fd46ac9c972dde80cd1e484e5359ffeab8a579b
SSDEEP 192:yGMgTAjt/DLxTAjOBAjvTAjt/DL+avtan/Y7TAjt/DL+avtabTAjOBAjC:6gTAR/DFTAyBATTAR/DNYn/Y7TAR/DNQ
TLSH
T14532036942DE91E220C7046B6B6A44C2D6F2DB08A4746F84F2E15113B7F309B47EFB97
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Update.exe

Path C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
Size 1.5MB
SHA256 f231f67c3f5deda7a3457939aa121a673dc6b12c782efe0d378f0641808c2ef9
MD5 5e63c01b989c7d0cfe47e41abc5b2438
SHA1 4d9949e32e7974450d9c4ebcb4941f5eb5c57497
SHA512 307acc9b529aa9399ed9f5580d4791628b8a37330cb61f164d7bcdd5caa32abe408841b527ed313cd2d0992ca3698ebd536b2bff552380e1d1f064fc881bfae8
SSDEEP 24576:UBJkrlr7AiOlwOpJeYOdTNK9RgIM/aR9Gl7MRHh:UBJkAlwO/X9GlmB
TLSH
T1B5753911B7E88A2BE4AE57BAB071016547F3E5866376F78F6A4CA1781FD37804C02367
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

SquirrelSetup.log

Path C:\Users\Admin\AppData\Local\Temp\SquirrelSetup.log
Size 67B
SHA256 9d21a1ecc5c75108e77e1da43a323fd496bd88a1a3926f140a8d039216754db7
MD5 b226fc53ef7c9647dc4afbce9c03dd61
SHA1 d07960ff351e5112c5ed83d6f496cf7f7f64b308
SHA512 56caf080c7286bbd0f964caaeb64838edccedca7a1a80ef3a11c053f4408046beac12f7e1f2077fd93a90d027a18e9051a6557d30c0a2f23c2de20f0c154de7a
TLSH
T15AA0023C17B200317E11030E58873AF1C3C030012180107830CF6554330F203105708F
MD5 SHA1 SHA512 TLSH

Submit Download

app.ico

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\app.ico
Size 278KB
SHA256 dfcea1bea8a924252d507d0316d8cf38efc61cf1314e47dca3eb723f47d5fe43
MD5 084f9bc0136f779f82bea88b5c38a358
SHA1 64f210b7888e5474c3aabcb602d895d58929b451
SHA512 65bccb3e1d4849b61c68716831578300b20dcaf1cbc155512edbc6d73dccbaf6e5495d4f95d089ee496f8e080057b7097a628cc104fa8eaad8da866891d9e3eb
SSDEEP 192:uz/QWppKvrIXANuBox26FIeSyyEh9Y1kM12wngfi3TjOueN3/R/l:E/QWppKvrIXANuBc6gq3TjOuevl
TLSH
T1D25444E56118FF0ACA31CFBC08B186526C79BD17A923640777453BCD0A77ADB5232D92
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

af.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\af.pak
Size 598KB
SHA256 2100568b2b41459d6daba7396f7a35bbaa136b03a99431044bf7a760d171db90
MD5 6a974bb6958a74988b44eecf25bfac9c
SHA1 f8c9c81018e49ca2052ea68ba2ad1b128a3aa901
SHA512 50c00fb6510d0862451cef84729e933a96487d76d8fca8c594da37668b20ff0975c1d261d0f451d57390345e8f5f2d46f9b3940234ee14c99199159a8cb14ace
SSDEEP 12288:97kXm3LtfxgtRGt+TkTnPxxNtEKY+53GmNAn4H2JyneNASgnALjcPfozvhdImgbM:FGYtfutRGt+Tk7PxxNtEKY+53pAn4H2/
TLSH
T1E8D41B0BEB90173D09B07696FA0845B7FB5C626CC770B6BADDA982310966DFC10BD1D8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

am.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\am.pak
Size 971KB
SHA256 1ae3470ab6793b83c859294d53c20cec5386faeb4e99cd64ffa087083e5e345e
MD5 99a07ddca48b04db7e9ee7eca8b281ab
SHA1 1d23837792f14f5b73ebb33fd3ed51d4ffa317a6
SHA512 27376389cdaca33d23fe3cf8415e9503f0d8f87748937f3f1cbe6d4c3f7ea65de7b8fcb7b251b745b3b68cda4077e288b2da6d02fc18aa251f173dee2d548646
SSDEEP 24576:/ABfC+TG1orqThTCKHyK6ax0hHfjnxWNT6zaA8XK65xi8bVbFtPzE:/UT
TLSH
T16425AB547EF9F7570F8E8A1994320E4E9594AE4692803C38C35AE3FC2B2DF1B4DDA215
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ar.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\ar.pak
Size 1.0MB
SHA256 90d76d29dc5c3796d6cfdac68ef40590c69df83d1397bfb38a2b2ab31034e50c
MD5 c69dfcfcaa96a652522f3d0d8fcd0b7c
SHA1 041aef40a864fc41904fe366ba40d1c9186b37fe
SHA512 fdf130651df1887eb45b4cb2b94e9dabc59b3b0300519659e051904998d542782e059cbfded00b428c25d89f492f4aa28979cba249bf99d44595336ef99064f2
SSDEEP 12288:lBBGop7mFo2GE5Hwjdfg7P3v4UobkbCQSDmNj1Eio79Ao:6ET
TLSH
T1E1357BE21B2984720B56DF0FD1E23668D872BD23EB4BFC3124934A2156D7513E78E678
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bg.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\bg.pak
Size 1.1MB
SHA256 bd1fc43acf0582553fea6abd84ae6ff8882eaa0c7eb3ffd5806664bbee5dc9bb
MD5 af103dbf1f89d1200657604e4e4ad36e
SHA1 53c18a66c019797f251b8464812c8a634fa1e04d
SHA512 577fd3769cfa67866be87bf3e8ccc0fed890050eb75fedb98715eb80566f3f63cba758782078919171835a38fce652f68ba2f4f4426d7cd6de544aa24c919aec
SSDEEP 24576:eFasKWulJLYAgCzQkEC2U5Vb6IqSsl373ZzmKH3p2KyUfVDrz0Z7+uOVnQxifknC:4KWulJLYAmFU5Vb6IqSsl373Zzm03p0M
TLSH
T1593525A15B9A68DF0101F45F98087E093CEB84FE3FE7879241652DBD39E10B487BA64D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

bn.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\bn.pak
Size 1.4MB
SHA256 9cefc0b1308bdc95266b150536168ab8b1b8eab75169a833f483f10e032db97b
MD5 c907d7f3de7a40cdf1b6b0eb5256afe0
SHA1 0f98f28a9a5913e92476086abf6cb9086165b096
SHA512 8f785155993777f7b1b9ff133560235a86804d60c6fb2d266a48d711d8702cd5ac0a2d6926ab7fe6a879c9b8ef25afb15f7aaa9becd794439787e21d56c8c0ab
SSDEEP 3072:bNu4oWA99Sa+EAi7Se5o1Ktq2XOUU9qygEfK8tRs3F+IHeBb59NQyjkwgEx/h1t:bYWAL+Xib50KtJF+IHeBbWwgmt
TLSH
T15865EF209C6E81B6A8C5CDC9434C6370C523AE9B9B65F74DDC17A24538ADC3C8CADDB9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ca.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\ca.pak
Size 674KB
SHA256 425d9ff88e8b33159810c3f5b2ceb280cb4a8ced94c3cfd594f7882e6a6047ad
MD5 d9258d85721f932b5fc1ed2088a937d5
SHA1 dae130367edbbed19e17f1bfde0d0574401896f6
SHA512 aa26fe3f86daf67e829ec998bb9fbe19f0601b188b8dbfa2a7d831b6f74276f460f96cf3e0282d8e7c0b20ae5f08e0e4963957724df3efb53502d343e08c0c61
SSDEEP 12288:wcwt+zrBW7hjzlCiG78lpGa8D5PsF4N3Mw2juwwPR9zejm0t3l7C7ThALDq9wTLa:rc+ReQf0LltFSIM0sD/orsd
TLSH
T17AE4F8239FC93B7704D2330AFB46C253A48CA9847A16D254F4AF1B1622CCADCD677AD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

cs.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\cs.pak
Size 699KB
SHA256 517d1dde23b69fddb454d6afada8642720c28ed7af93333dd2809b8d8f2000d4
MD5 3be6b9e8b788ee5294549b60ba113439
SHA1 e1b4cb140fa25c685554430ad172e070a8108716
SHA512 1f91e77c76cbbcb6a62522bc9773416c85617fd0727579fa9da7fe2c9c3b01a52df4486cd2adc5b3b8876ba9675bf1473304e6923a2005c12038f10fa382607d
SSDEEP 6144:Bt44dIEmuVSG15A+aIeAPxfzBGZ8OiJSBsD8Q5:Bt44ZVz15A+vnzBGZ8OiJS0
TLSH
T132E4391EEEA36425584002487FBE4128BD5EC3140B6EE9AB7C8F9C912575B7E8FF0D58
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

da.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\da.pak
Size 628KB
SHA256 cd72b0653c171a3bd5d4faf79d829729cff90eca087f8a38284b353616d3e704
MD5 b603e215b1d03ef60fbd64803cfe3cf3
SHA1 2c61a050f3b84e05d0dd2f913dde75764a42a64a
SHA512 27e1a26385cc98e0d45a1da89038cafbbeb6425f69d87503db0a4c833ec2fb6de05a3b945dc6f57091744013b04f30f0e01ff39383e91bf4ab64d7aa2c892045
SSDEEP 6144:3gzC9T7iJyFDO98W1JzVY2/QD5Qn+XgRVBaFLxE/eneCwlrqJwZBIEbPlkSpujmm:3Z9qEjWKFXe9IA4mjfsma
TLSH
T19ED4494BDC9CB32FD9A94725F311CDA7DB6D443CC684264F65D8943A09CBCA092BE2C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

de.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\de.pak
Size 675KB
SHA256 2e1be9735dfd847bc49573d8d2a42d353b14e615da0f7f705f432709d45265aa
MD5 52aeb27361384ea894b597696714f88e
SHA1 c8402e855607d1431119714f6f30a3111ba03dae
SHA512 cdc5001c803afc1c743ee4ec19e17e61495d7d41c0988b526a3b519bd5fe6916156a04fd361fe267b00a38921aa7e1793bcc16b4461b7b5bbc24dc5e839d2b78
SSDEEP 12288:4ux0DwfzTT3K7UpVdg1aP3r9AON/RBUwJuCgc:4+GKTT3K7UpVdg1a/r9/ACgc
TLSH
T1F5E40803ADDB625EC686B3617705CDB77B19E36FC342322B84EDD127650B5B283AD422
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

el.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\el.pak
Size 1.2MB
SHA256 28c12c567b5060d12124e60bd803c77cd75c0de7a48ce1992d623617e9ccca59
MD5 87f0188508be2ace7ef50714857e8a1f
SHA1 d7e1f63947344e6e62bfe2b30d6a7a5e616ab1b8
SHA512 599ae1e00b1ac01a01a1d45830e19fe71c39817d8bef502d2c0ed819f6e9b12adeb72dbf84c193516f21979d354771f19f697bdd88491e56c83b850228f2c03b
SSDEEP 24576:I7m18c0HWFbrlE5Yp9Ck2twZuwxJXDsSSEumUaR67ex2MSPgL00O5B/FCyjlHvAL:0c0HWFbrlE5Yp9Ck2twZuwxJXDsSSEue
TLSH
T1E345BFEFB4582DED8046950785D8B07C2BC66D6CE749CBD86229CB60BDFC0719A22D1F
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-GB.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\en-GB.pak
Size 544KB
SHA256 95133d35b5661cbdd8b15395c00512e66315d18d66f8b110c79f8361434b57ce
MD5 de1ebe45bdbd1d5e20fba8419c2d7239
SHA1 e6eabfb94b46dfae42eb0b244edbb13fe239fba8
SHA512 90d1f851275bce845cd5b7364dde970f41ac7de1c405d188e81f6c257e5ba7e483e9af03177f7361f0ecb77dd705fb7930cc6b4d239162026bdd44b8b2eb7c36
SSDEEP 6144:U3fYI0m5YICEZK35nBKzxhb5E43FzciefaMP9zQynlfaYHdJjxyYDmBcDRxP:SfKm5YIC8K5nBKzxhbQyMNQynNXDF
TLSH
T152C44D1FF744126A05A312A2BB0AA562FF23D07CB35112667CBD811C33B676683777E6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\en-US.pak
Size 550KB
SHA256 a46e37e61c7cdedf5d407f2be6440a895decb42f408ebc4f0cd0575026214ec6
MD5 5ae2ae804d645924629018eb3ca804a1
SHA1 d61cdc8f5ce36bee2e1dc2db68ff941e01dfd931
SHA512 492a7fb03429912ef0901c5c0471dd4d849155e9bfbfca7a6ea703b67fbdd5f31939c0ed1174a0eaecb37428295062060c08d74b56f7b77bda448023b94efd15
SSDEEP 6144:nryUXUBrjTlnRxjhrjJHfBLOFcGfIzUMP99QKJUfaYQrpqwvGjnngsZ/8twj:nryPZRDJHfBVAMTQKJVcjWwj
TLSH
T1F5C44C1FF744122A05A352A27F0995A2FF32D06CB35112563CBD812C33B6B6693B76F6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es-419.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\es-419.pak
Size 664KB
SHA256 36f80c4f320d89ab72ba36ff78e92590c90225acfde071ccc1288672dbbc3372
MD5 e9b7582139868fb55709b21b07852994
SHA1 d5a6b41c8dc1120607624bc27f156961d00e4ee9
SHA512 be1ee44994a7ab1bc352bba08bcf0631937a434f6646b7c8f75239eca10c6f574e68768538243432a7598b3ef8650c4c79cad05e07476f9b370c3f0a778871e3
SSDEEP 6144:Cbzw3YF54mFoO5GMYugboZNQMTkJXH5A4UJyp7:CXwe54mZUaXkJJAl07
TLSH
T1C9E40922BAC81F6310E3A349B743D757E4D89545B408D29BE8EB876522CCF8CC967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

es.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\es.pak
Size 661KB
SHA256 caa86224237d7d50a9a1a59f3ce561b12f7fd703e1d33814d97c405f2da1697c
MD5 43a1c90557fa264e2868627eb957ab49
SHA1 54ab75aee58cf97976973237cb29f6f1af5d2898
SHA512 af3f870a2950eccc674b10febceb88e1d1726c9730ada45b235f7251e7f723036310867c718edafbd94091ba389e64aef8a877fcc1984a153749673c4e1159dd
SSDEEP 6144:2/WQIdUpYJWC661VPRuogNBM+jjnAYwud8jz9MOJRev+nlTip6PZC+t:2/ByxIPQRu9prAYhd8jRxJkv+Zi9g
TLSH
T12EE4F726AACC0F6350E39349F743D753E8D49549B408D25BE8EB866622CCF8CC967ED1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

et.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\et.pak
Size 603KB
SHA256 3d99162bd0d48194926ee10e4aab7b03b6f112b59dc48405cc36266f96fc4e69
MD5 5263f6c22a0df772afbbef6a5aa55954
SHA1 565042f2dd558f981363cd21573af5eb8f45c189
SHA512 680f26d6eb176cd431e81b6532b0e3a405fba879971c8d0311e3b9a555ebd9ce68335d5666850b0cebe08aa03567ac77cf1f3baa4a7cd6f3c8d6ea5bb740aa0e
SSDEEP 6144:gP2OIqDW8SwtY93DL+cfFnyN0GnFajARvfDjkGmPOTQyXgXzqVOlvuC9n1qywXiK:gPEqDNt8jfF8nFajGTOl2C91qFP
TLSH
T112D44C42A27D771B142412F9E337E927DC9EE3D8B4000D9668974A1971EEFCC38B6B64
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fa.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\fa.pak
Size 1001KB
SHA256 863622bb29b37ad6adea5c594b3b6027536db9d1c59ba20ec8414c1d55120cda
MD5 085a2aecec6607a7b715359b8d197ba2
SHA1 59c3f1669d606fca78a7330c0e2d49ed15872ab7
SHA512 29c193e695e2f08cb9053893960c4f860ff916a48fbbf4d678d2f1fa43bab183b426c0c60f67550700918762a2fa9e286ae9e5cf7e8635a08233116d2c7cba30
SSDEEP 24576:h/HPgefZ8u313uyqoz+sn2isRmXnloTUoXtCfGk62Yhk826JfikW0MX4dOqlUrHd:hXL
TLSH
T11225A1957AAC9AB15747CA0341D33838C773EF12D349FE40ACA1076609A5B139B5FA3B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fi.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\fi.pak
Size 614KB
SHA256 80336876eeaa61f09ecffe76532b9161e6a2949f71b125a5ae2b7f4f1dd6b1fd
MD5 d9c0ceabb80789aa02213e890de15030
SHA1 cb5236fbc0333773f1a39f33e680e841b1eb2c7c
SHA512 f5c520aab4a4f4ca380c4e7b636232fe78cc04c3d739c54e14dac8363d40b2068e26160db13b54f7eb31d1ed3fc09ffb3c26a8767e19f615cac754ba2d949e5f
SSDEEP 6144:QSfG8FdfUusWuFo19cj80ar6NmSFrGkAgJmAjPVOEmHbeaqRpL77wvpVv7IJprWo:QwUwu+19C1a8GkaZvpVDIJprWa/Sm/
TLSH
T167D44E915215C32237C4D29E79B0903EF5E5E3DC8C284D9AE843C7D849EE9887DB276E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fil.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\fil.pak
Size 697KB
SHA256 d19215b25c7c89209839b60219743a8197f8615822e4c597aeb48550fbf559fc
MD5 519414a5813b50e1f192008dec908624
SHA1 392d3fb078f7de4b66fe1ad778b5d33bb2dee87d
SHA512 8792d05fcd12b7230723a4bdfd58402d2de64baf30b7d4c21d9f250dee98dbb2412694302774c779a56b2db52a078ec861095518ec0f11b2a5b09aa8d9a38930
SSDEEP 6144:9PQd1KUqiOgqiKb8yzDQjGXQ+Va3H/Vzy/H68v6/CUo8HA1SEW:ZQe7iOfPvk
TLSH
T10FE4C616B7401748DBC352E56260682F6AE560BC3F81786E0FFF268B7BA7CD5D270192
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fr.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\fr.pak
Size 719KB
SHA256 f18eb8d5d2fdd78093da92331f7a3ad30a4a9e9883367602af9a7fc901b840ac
MD5 b9fae813c9ed691804044b781f8a43be
SHA1 70d4bc8148652f737782d5d6be1a69426f8582b3
SHA512 d9bfaa29c80125d6fac1a8f9251ed6ba38b0a0193278c0b40b2e027df21ff4ae62e03a7cc95d8daf9e06c0f79aa1c338b7ddcb1ce54a4e89bc2d56c502fc854d
SSDEEP 12288:412wqcU7gNZLkW94S+bvZZiuK6QuargVCcm8N+bezEh0y4VoZuYnYw8jw2wW3S1e:bwqcavDVQYM6
TLSH
T1FAF4E75FBED431CB19C61267FB12D6A3DD348248F215E300D89F4296129A8ECD39F6E9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gu.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\gu.pak
Size 1.4MB
SHA256 93a0ca1d35a67eecccc5cf0ada57e633a53eb2e03b958a6764341ad2d9043c8f
MD5 0bcce4c1c3e3ef2aa6d67a5943deae1f
SHA1 8f732672fbdc05d6eff345456c07c5e5b0714339
SHA512 b53bed4452bfd7d287aa0872d22be059a3748d6adb9f803d080efd9d2565f04b819810643ff71ad2b1e57ad473318ba79eb76bbfd8e9e0ff9b4f2cd7c836aa30
SSDEEP 3072:Pj78gf32xMsjpSAGXo8Qs7sRPjAwREJKVMjNiT7llj63rAulfcSi5NnWsWi+/GQa:Pj7r8jpS/Xo8QPTsncfC71Wsy9
TLSH
T1EE6507D0D7B9F07019DA9F7E819E512086695343D67E230051CEEE898801DDF3EEEA9B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

he.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\he.pak
Size 875KB
SHA256 7206adb1a8e23411507626b8a79443e6a0eeab7148c5cec1f189e3cdafa700fb
MD5 0dd7f8e31df477c6dbd8068cec186388
SHA1 4c29cf0830c542d9595e5c65994edacafda3ff5d
SHA512 4a8aa8787e826cc6f76624ec662676108dc724a0bb9dc68cd4019c5ef6a0a4d3b0eca7c9482dfddc74b0d50f5744e599d0021e4fc0cdd3503a4f8a7df4afde5b
SSDEEP 12288:yhM2NNAhMPBBAoyTmXXUulrYyEQDAlCWq+/OrgucqeAwXkxeQCaj8TOi6jcAI50Q:yzk64
TLSH
T1E41599C4B2E452255131AAC39FA9FA285FF3CAB53CA27512CB14526CAC774F0BE530B5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hi.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\hi.pak
Size 1.5MB
SHA256 286f14980aae533b395b4649164c9c9de2a5752bb933f2e9e11dcd35f6699f86
MD5 76f27c35cc11cdf99c74792e0f6dddec
SHA1 03399969dbce36b2a2de69fdda288fb715180e19
SHA512 0a2d75934259345723e18742229bbe69766eaf22dece500bf7bbf27aa2570d37f973050c4271e9524157c1556c682baddb650ed33b77d710de9ae1c108160caf
SSDEEP 3072:xZ75WPLp/XO76bszkc8APkNwFsuV/B90ZV1dWuGlqv3oJEdtDVejnPs4f4/BtROS:n5W5R4IKPdN+g4RldWK
TLSH
T15465050CEBBEF3B55DEC3C8A32890D37D59D3674A3E5521348D5B3DB9844CB8146A2A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hr.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\hr.pak
Size 673KB
SHA256 c4a54d1aca433e26c2ca5f15a00bf1745e8542e0ed6c9bb5118e54e1de0c22b5
MD5 ec1acb31ebbb5527902f89c5a7366d20
SHA1 97a20ba71a4c9854588437622ef549adfd08a6d2
SHA512 23acafe126f2bf6d0b8e13d5aa542698660f6aade322b32d418c1ba4639e97a43d146819a78580e29694322972cef60c56092c4bd3369edb19269e437d154a14
SSDEEP 6144:ZfAXDCJ7T8prJMBna46TzKXbayYEVpOWOY2gkYu:sDCJ38pGadJWnOPKu
TLSH
T191E42B7DBDF3570A0897B24AEFAA43447DBE08DCE56597B7684F522E0003F4C6AB8149
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

hu.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\hu.pak
Size 720KB
SHA256 56439d4fc864d3f45dc4147a76cd868607f7f4b32e14255f55bdef3605ef9faf
MD5 f9b13977ad659b9d481bf0ac66071bdd
SHA1 83028cb8052f1ce950dbc2c6f3d34c3a882a632e
SHA512 aa7f6fe061aa23faa220c52144843c5299e4a1309cdb35d43c860aec35cc77968321f4eecc96b9bc96c14697cd747fb84f0bb6b98a037dca1b1c5ebdc0546d66
SSDEEP 6144:DZb60lfozSXPBksdnTpJ7yHlEx+XlH2sSaa0zA4ttAuSU5TT78bZ49JxTYhJbxJQ:lb60lwS3kJA9U5T38eQpGjyA
TLSH
T1D4F44BB793B6945AB86C178778643F15591E881BAB3B31FB2883846D34A178D0DC3CDE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

id.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\id.pak
Size 595KB
SHA256 8dad23e574e1bd4c7678e464e8a5d578fd3ac368a1d5838ac9076a643f62ad4d
MD5 55da2dbc56d387d829f65b8e49b46043
SHA1 c7a1f517c25d91b606d395690fc3befdee0be05d
SHA512 56d962349e22d9cfc5bb41dd98f376d87a990c1bffe1f1b4c3e790af32cb18b5052f799ff8273c7772a8147b4019d129d85a021cce9ec06a89ea78d96fad1356
SSDEEP 6144:zBy1KaFJXHQuhCNBL71y7W3GTFjlFKzmBH3TW6TxQ68jWOB1Qf2iTv87PHC:jaDH4BLEiGTFjlFCmp3I68RvC
TLSH
T108D4E7632ECD310C494842D5B2DEA91E7CCE233BAF05B76E8E348F7055A67686716BD0
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

it.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\it.pak
Size 651KB
SHA256 2477460b1aac96710ec9727d2dc5396a100e02d19f752b204ed43e546b1a18f5
MD5 8c86ed6bd4772dafd939fbe73d8698e6
SHA1 9e7ba4566132996c0621e9e47e1bf95e155a92e9
SHA512 763f48234773ae120fd9f68878f43b8db2744d25486886cee99b4d0a1afd18c1676cd6c6fa458fafe846caf6c3aa0be153de3fc857a49fcfbc179dbfbdb8710a
SSDEEP 6144:TASiPQ7ZNjkUpbBlnJ3ikJd52N5zVX2qlSfqBCfEs61ltM/whOea1xIkYMcrFqpS:TDiI7ZlkiBBGGu8dNYzHV+pGlPpv
TLSH
T1CDE41C3AA9D6252559876359E611F085FB6EFCCCFA41721CC99B031C22CFE80E1ADB47
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ja.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\ja.pak
Size 795KB
SHA256 b9cdd316ec91a12d8bdc833323aa7865b5c66ac95c250a1cbda7c6d51cd22f39
MD5 422a20a5733c4766408c86eaaf27556e
SHA1 595adb12729804cdbd35715c35e2328d946cfa08
SHA512 2d7e9727d3a67692ec5376b82d3e0ea194fc35dc569a3db7d3fdb12a3b15696d640241e979a37c2e24795129f90185802c2f7badb25b602e179ee22d1cc5867e
SSDEEP 6144:tEXXEYb+pZ51GheWEQH1oZJMxkZrQ2y6EDeMbfACGVQ38V9:uXXEYVheWtH1tkZrQ2y60e2dGVQ+
TLSH
T10D053F7CE3C569369D6153A22C4E36E17506AC9BFCA23A3A443DC074BD70BCEE415AB4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

kn.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\kn.pak
Size 1.6MB
SHA256 c37eaa86c8db47110fa2ab0f7f6a0113dd5a2976bdff23dbd7f5e5a8c4d3873f
MD5 cd8ee32e2bf1aeec8b049354ac77db2b
SHA1 b7f83451df5cff552dd64b8cea5a929599459bd8
SHA512 b9685cd7ee0f863deaeb03137ebc7845e54698ec97d8a4c6614827fb05da98ee10d125ce476eccba588dfc30fb3d7579444b4aab5df2e8c192c08c7b7b594c86
SSDEEP 12288:dFGXzDwQNSWJjQgYiwQvA+7K7zSyMViBGfl:OiMd
TLSH
T1A275CC18ADBA7D301BD5106B24EC643ECFF16BE29CA907C2F4DDD7802C66C6A90865DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ko.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\ko.pak
Size 676KB
SHA256 05ef82f47d7bccd91a62ed894f480d1444dba1f5304e0ee66951bff65be5fec3
MD5 364f21c45d64eea4eba7f184f326b118
SHA1 fdae651a0857da66ed57b3c3a7af2754634434cb
SHA512 eac8b80de726241619e0429b46c52652282e4f8ad61194143af2c521fda7aeed437d97adeafcd5f43cfb52876cd0aa51965789f25e184c7c6f34dbedb41d54a4
SSDEEP 12288:ZZexMxPQOguTbckmM1WNiPszcbifYj4ZGRyzDRIE1zHFQgC0lIJ/xESJGRG1KLhh:ZZexhIWIM8n3T9OR
TLSH
T182E4B5F23CDF63C91193CD82AAF4FA198382D976F7530294ED44CE449E145D7488AABE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lt.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\lt.pak
Size 732KB
SHA256 6e346a0f9d8e0a528f4f039bf5df7de0fa2df4e53547f4d9e22308cb4a95d618
MD5 e880d884db69f1c78072d6d5eec76fb6
SHA1 ed51869dc8d2289e3ccbf3ef42884f48ce23ba1d
SHA512 bc7ceed2dde8fe6a0fa8af398779f291ced3645dcbc6d3b99329cf72dd3b02083c37d830e15b2440a3a0b030691e93a2924214ab85838e9743b7f7829e15fa50
SSDEEP 12288:IYBXO40MQ/u3qhD78NfD0dRam7UXiU+6SpW:NMMkyKQpXJV
TLSH
T1F8F42C0069E3AEFB964467C981A48E78DEFD50009767BC61EC69C78BC43BF4625A0F35
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lv.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\lv.pak
Size 729KB
SHA256 f7081e19d027d161b28cff215557830ad325f16224d9ac006a8213930200dac4
MD5 c3d2e0667ac8fdf71b0fe129775ee944
SHA1 3db486caaf7e53ce68307ce8cffaea3aa30f75f1
SHA512 0a040109fb84bbeea2f56eacc32c96edf440eff3f6b9b6ef06c5c98015699d592ddc2dd8777dc9060f7d93f5a44d0c21917aa9148f5861dd359d9c30c7afe858
SSDEEP 12288:dwj5EI14VAWdx/759/toVyxm29c4TlyC1+oB:614VAWdx/759/tMyxm29cTCkoB
TLSH
T1E0F43A959EC68FAA4E904DCB7336D132A8CCD740FE07E112DD798B36560F52822B5EE1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ml.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\ml.pak
Size 1.6MB
SHA256 15402f844bd13bc0440168bd5c4b0cb9bd69da9f08029da8210b64824f4f84d0
MD5 75f9300d4611ebc92cc62de9a8070f18
SHA1 5e72b1a7bf4814ac7e147eb6b9003a3a71ed0567
SHA512 a20d3616dab8af3612c33fa64d83cd82bcc0db6e7e2276055bd43544bda38af316d1a040be60234a82fb10a40653dabae503932b95c5d25c349a43d49079a932
SSDEEP 24576:5JO4zR/oZAuuxyYl+9y9XBkx/9tYFrKfijHeBRJzXpn+v2fi+f3taDHtg3x:TOj
TLSH
T197859D5BA036CD3B0FD102167B4E2FABCD5B9FD140AF668B5869B2628C59F7D0C99031
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mr.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\mr.pak
Size 1.3MB
SHA256 c8401fc3779af5206686b47a0aaab6fc58189c9d2fa99f88feb0142973184212
MD5 c9687484357eee9273b4e20fe4ab5da0
SHA1 9d18c63abf0f4fd93c374e93c607c8bcf85c2ed4
SHA512 c6919d503bec568d03245c8091fc49049fdafbee134a8b6ca8cfffaa56e37378b084abbd9a3230a7ca51a45e528215e5be6fe44905c0d636d4305e85ae0a8a7e
SSDEEP 3072:ejY0PyAeKX9usaWdt6laER91iCh8DzrnTsyjUDrHEMPiWUVsZ2TRMcACwwF/yGRc:8ssPabl59CyiWUIsN0/U+frrz0m+1LEt
TLSH
T1E865D24DF7BAF3685DACBC8E36540D3BD8FD21B1C3E9925648E1B3E74884CB401596A2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ms.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\ms.pak
Size 627KB
SHA256 ba4a9fbf950106e6d07face833ee844583d17f38b5abb83a96f193d17131bbce
MD5 5e1297e4d92c6a69111853249fd83a8d
SHA1 15fda05398af6b133e17053134485fe17236e356
SHA512 1c7517773f86aa4059d5d8857bf533c6d7a99d7175c9c5b73f775a2ed7501aebdf1f94eda6416c245818027c9762289fddd8ee355ebfff95812687de34b302e7
SSDEEP 6144:tOh2R6aAX/UOP1dXvkSLoHuqwa3k8HN3wMDPGPUlw849m/:tU2R6ag/UGXCHuqwab1flw8
TLSH
T175D4B5579EDE3118085843D9E2DEA91B3CDD3332B705AF2B4DA08FB0066E7A53315B99
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nb.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\nb.pak
Size 599KB
SHA256 62facfbd2b646bdfdbe764c58e4b6d933d44e38dcb5f502f8e0960e58be4015d
MD5 4ff300175fb55f64aacbb9e5ecbf035a
SHA1 ee0a006fb0ec98267e8bb53298ca1aa158a4f969
SHA512 6aabfd59fa72e107741bdc50ceae7e0f15fa01ab12582b76e3f7f709ed8fae547443682b0c9be2cc4817d7b7374cab33384c51d333e1bf49b514271673b2aed8
SSDEEP 6144:Fyw+e+JD9OWeVb2Ql+Jnf3wYdghmhHwHn4c8bo5zB0AHLAkZt/pcP33:wlYWw2Ql+hvwYJHk4c8b8B0Ukg2P33
TLSH
T121D40883EE46B72AF2A44394F518855B9B7D943CCE98199B54D8C63E0CCBEF052BE1C1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

nl.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\nl.pak
Size 625KB
SHA256 3669881f760e6a6a5a2e6697ad3eb025a5486bd47fbd80ccbe9f1cbcfc6c699d
MD5 9e70edb02bfd0b79825201624e98181e
SHA1 f019bc9dd626686404b6da691a3eff9c5a5bb644
SHA512 a78d0bda585e9c60604bc561f8e7b7a9e2660cde3725ca6aff97a14e0a9337c99d1fb2eabd2b4d806b18dfa06890653d24cdedd3aaea1a4ea73c6d49390640ab
SSDEEP 12288:TbvY94SPKDLGtlbJWQuseUBW/gMSz/jFFyqb7qHgzm8J:HC4WKOtlbJWQuseUiSz/jvyqvqHgzmU
TLSH
T1B5D4F817AC4E653E59C0A349FA098FBBBF2EC22CC26CE67D94DDD1340443F6891AD589
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pl.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\pl.pak
Size 699KB
SHA256 7fb85535f773c834043d43973df2350ccfb5efb02273a1c70d21cd95baaa5c96
MD5 2d3518e24fff59d23eca06b0ec8a01ea
SHA1 28f151414d25d49d78bb67fe7be564f6d3dca8ec
SHA512 b7282fb4a8e3a5974c98b2645d68a8d808503690c2bafdf6f1a9341333bd0c38084b641fe752d8810024eed92f21efa1bf5def33822d682145954ccb9680bedb
SSDEEP 12288:0VvANavaMK4mZefQfuzSJabZ2bn6jP6CUdwe3m9UEpMSmG1Qh8wNRNuoliJUd:WvAomX6tpM81Qhi4
TLSH
T13CE45B0E9AE58A4E8CA008E5F6E71B7CACDDC808F108D35FE41F8526719B19EC9BD5D4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-BR.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\pt-BR.pak
Size 655KB
SHA256 ddf30e6a31a852acd6479145bc0806b0441fcec8571e3efd537ad8c2a8c06022
MD5 ff148b299186c6d5671ab71bbf7a1ec3
SHA1 bced5a0896e7f41fe98c3937aba0e16629028d91
SHA512 91672940e11a4f00c27b649eaf2e2c3ae06f48c362266c55a488bbb954eb94c40f9a133be664a94ff1a6f176675e8f934a0a332f9ed0c2bbe921a1e19f23c4f4
SSDEEP 6144:46z6/TdQP10H9hvNBXBL5OyoQ7yg+5EVL05Gr9WV:p27dfHbojE/98
TLSH
T1B6E42C2A6ECA136605229350B74EEB43E5C80645FE06DA87DCEF4F05A3DDE40D933BA5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

pt-PT.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\pt-PT.pak
Size 659KB
SHA256 b96f51c5228b0192cf7ec7dcfd0085e6892b8af5e9924c842cbcec8286bb73b5
MD5 84ef9f2a84f8ed5175c37fecf156e53a
SHA1 84c9cf8f3b6918648b387392a4ed89d2acfdf442
SHA512 1d5bd3400d7e7a37745aff6b4e7eb56e8dcb118d7ef4c191b845f6460bd93adb88687fbd7b7e6e505b2e058513994d554665955b8a2925c2c29e8f487f0ebd2a
SSDEEP 6144:ec5sjAJxHVNusBieJVJJxhTIMPNWWfwg3nbioMy:BbjH9x3nbj
TLSH
T141E42A296EDA137605135341770ADB03EAC86645F80ACB87C9EF0B4272CDF94D6B7B62
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ro.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\ro.pak
Size 684KB
SHA256 5177df0fcb4c33d316930f35973f4ceab278ab7d884c2635132529665731df14
MD5 2872c71905a661e4e83db1443373444a
SHA1 dcaad036012eeb261695465779c223d3f4fc63c2
SHA512 587c716249f1095120785601ecb369e238a29343a93f1bbc781202cb07b600581d7ac9cb07e1c17d54d793fce26ccee7afe4d91bd6a5da1c4450df4811a84e75
SSDEEP 6144:I5npzCS2CTbGwmGnfwT9o0PBusagvD+7rF1tNAGM3OVmdO547SW2SLQo/Mr/j:ITzJnXGhGngo0PBlbD+nBnmw5O7Ld/uj
TLSH
T10AE42C23A1C41A972D9152B2F73924D3E88E105DF641E2CDA4EEC97910CDDDB852EECB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ru.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\ru.pak
Size 1.1MB
SHA256 6b13fd0aca8d0519a54f4d98ad315c217a3cbfd5e6dee8682239470ea7bd83c9
MD5 78d9b90a86e8e5214338719b96008e04
SHA1 f39de22355b0f15ced8da54b7fe4e372507a792f
SHA512 39b3d30168e0f32175b26226ead0a7309d894d66518886300d3679a946a7e876a6f042c6ecb9ec0b2552f128765a9ac23cbc3443f5a7e1ef9cf572b6e0a12517
SSDEEP 12288:IqKYTWxLfQeRo4Yegsp2zJ9sF+oa+UlZHO6HzW/ZqSv4sqCz6kE0LR3Q8Nirh2Ym:IOWxwioB4
TLSH
T118358760669E64DE1101F01BDD08BE0D3CEB45FE3FAAA35219A42D7F35F2024C67E65A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sk.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\sk.pak
Size 711KB
SHA256 f3cf118814f5f1663a02640497b8bea6d9a77f6728261f3ac6b730b47756fdd5
MD5 10e6efd2f58606d1bd566b24445db4e2
SHA1 824228c2aeb1194b2c482282f930cfb8c97bc4e8
SHA512 699d01f72717e1b7de8c176458f0766ae6684b23a2d0c453f058b6fae721502f32e7694a53492435f9b9f89925f1910d685220b5d76b66210ce04e782c40bfa3
SSDEEP 12288:Wes1DpxvmEyowk74V2Af9+mipNW5njzYT8a9kTjsxt9w6:52DfN4VT+oYHxta6
TLSH
T11BF45D3FDBE7181E8E8D0148FFEA7110FD7E8650864EB0A6944E374714E26ED8AB4E54
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sl.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\sl.pak
Size 681KB
SHA256 5b04bb8455b8670aaf25fa1e91b93f9624515d28ccf235710db36033ff52ee12
MD5 9880040481c48e69998829790b738697
SHA1 0b9f101411661467e8b07518934ec4ac96a3c5e9
SHA512 5453058516fbbd3e211e60f9169d4bc6680325a16398d9c442c6d25b3868cbbcd36f9346ce663c848c631d5a993fd7e29e2cfcb97e8075a12c4476ea51babff7
SSDEEP 12288:AaQheMoLp/T8cB2By0dwInWHvwiNi/fzoepql/af:Aa+h8NTKdwIWHvJi/fzoe1
TLSH
T11EE42B397EA74E0F0C9AA2CFFEA606007FDC044CD256E6A1EC4F336A5415A3827BD595
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sr.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\sr.pak
Size 1.0MB
SHA256 e694ef7a5ca181d60f14d0ad3116d487ac57cdbba333720b2ced0dc92327b399
MD5 87b5832aeecf3852060f75ce05947e01
SHA1 71c3e3d4eac8194d715b61318e9979ffcb5b0b6a
SHA512 d9b764a3df2eacb7184807f8265ead459806bfdcdcc9948713fa9603331fdd5af869be75cedcd96d4cffb8e622fdc32f18e388e49411f6a8acdd3d9bf230742a
SSDEEP 12288:f9opL54noZMFI83SS0dRzCwPi4B/J1C5M6hKPCHxYVA37X3ue4/k/z:f9op+7aC+M
TLSH
T1F43546A19B9E64DB0501F41BD808BE493DAF41FE3FAB975211601DBD34E10B847BA39E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sv.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\sv.pak
Size 607KB
SHA256 de9f893b148851dd892499d3680a64e5861e9b5a521f4dcd29932a23332ca418
MD5 3792f640641251b61e1e0bfd4178a6a7
SHA1 ddc6b3f2c3530a762a82046bbb5a77554404bb21
SHA512 ea7011869cbf33a3b252ed9b0510fcefdf565ef7cfaacb78acda1ead4bad0d4993f7df019f1b8aa96422613a8a3e1af6db3c5fb728278dac6295b7ec3b95184a
SSDEEP 6144:g4wy/fB2NY5x7mNeiIU8Q8lUJIcpjwdux+xhLDlGswiLOVRFcz5RtGmqeqMWkSM0:gBy/dDKNeHS6cxQRipRf
TLSH
T1ADD40A438A20F526FA72530DB609015F0AEDE25CE7F2954EB8D9883DAD8BD5805FF247
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

sw.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\sw.pak
Size 641KB
SHA256 752d64ac8dc88b8a2cca46581be63e0e00d38fdd84ab4aa19ab4608c0b77f174
MD5 5527eeb58157a70a01b80c455db780a0
SHA1 2420f90d3f3bd050e199a3172aa60a8f956b47f0
SHA512 d8f27ab3c6a4dead1c402940df67fd0ff001d0e5dcf6c99d39da7e5b32cc272d0813af0fe9e98a82d3ba1c4c9f2406db23bd579a2d728c4d228e0f819535d682
SSDEEP 12288:IAMELFi7byxGH2qDOKd9zGI/d5NmedqNGjRdpiayX1jt3hFinSLshYFaKo2z9i9e:nMsFeoFtiF8v
TLSH
T104D4C5629CB1D0191232918603DDFF732BDCED5C692B2D935A46BF0F218F48C56ABE49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ta.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\ta.pak
Size 1.6MB
SHA256 5249b77fb12d21d9bf9eaa52bc85d7f303563238d243ac3607bcc989477599f7
MD5 887d5a5af311f34903a8a48790360a9b
SHA1 34f1fa043e8536b7632360aefbbea47a1103efe5
SHA512 13229041facdd5ec9e26c6a3f254540e8f55468c7c080a6d9b4913b44b598a2d87ac5ad9855fec70236eacee7650103fd438e5bb01e5fcb8235b6557128084b0
SSDEEP 6144:HXouU61OpYzrkwG9GPtHq2tRAqtm1vYpiMyF:3J4pYe9GpqUtm1vYpiMyF
TLSH
T16E750CCE923EEE890F93288F0319536912986155C07BE3A67C766E1198ECC5DDF3427E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

te.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\te.pak
Size 1.5MB
SHA256 df3070805e4e87b7a2992c8bf8c606c4a28b1bf7db50ec02f3e35d8accfdb4dd
MD5 29dcae442360b85c47637d07d6e48481
SHA1 7c803a25cd3e542449d5ebcb4f1cac403a7b1f98
SHA512 06d721faa9753775e5f6976e9ceef8b78c23f4a68119861df43648f35f5d8c799c061e4d67074bf6183e7b1d5189fa93c6fb111b0b1c51673004672498eb74fb
SSDEEP 12288:iFnEtrS7MZKN/ywG6USF602/LDgIC8ymoQRT5qbDM52CMYRWOB6ym3p1FW1OhEaT:In1qscI
TLSH
T1E97592023A6AD310DAE70273752CF66C49781B8161D6732C1EAFA357EB87D7E0843676
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

th.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\th.pak
Size 1.3MB
SHA256 22339af91f387cbc403c328a6c81290aa9350955a8674f3da95ac01e3ffbb5c6
MD5 a75fda72204f5a573fa7e095f91abad4
SHA1 34751fb99c6260111df759bdbd3e35198ebe479f
SHA512 19bae17b1c362becf68dc9d85abb716fe513621e72dafef426985128a30716b72268c6360da831360726a0276750cbcde3e55d244716e96d9ba56e9ac1dcde25
SSDEEP 12288:ryFpJdvEN9LyZYAhzYL6Lys6o6hCQskJUseOPsO5eXwpbDFDS6Sud2mKHlojghvu:uFpfMwsB
TLSH
T1EE554BB37247DDD479441B5B262A7789672DAE693F73F8E000C9215A73F071A8422EE3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

tr.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\tr.pak
Size 655KB
SHA256 a46eb341e68458b06c9baabac0e182a2f8a91487ab2055a1773b33e43e388ea8
MD5 001e35099809272f1f5a32dfc8b33e10
SHA1 17f9971a7237e8750306074c9b36d88b0e88aff4
SHA512 99e61ee10906d58e8677b1957d18b77e588779801253cd7f9d6379bf00ab722de9953b602496e6501b1173d11a665558243a8f24c2eb0f25f36a16d96461ae60
SSDEEP 12288:ncB0ZhsA6g9o1gVCk6Hz6sgwhqfZFGMnMi9Qp84Fs:cBghsv9Hi934Fs
TLSH
T1C1E4FA8178EF682C8BB9278BD6E90665F8DF0766B331F4469B1A8636774535303E360C
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uk.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\uk.pak
Size 1.1MB
SHA256 c7127267544b2bdeedcbfd3a9edd541ecd36b07c695335dbd71413dfe0bedcb4
MD5 81cb2beae9721d80ed3c7856c3397ae9
SHA1 12944a0b24877d52dd8b079d9649581daf14664b
SHA512 930e20eeb568792fa7e7d2b2865958a6d2e28d3ae128595a8a04ac39faa6785fba28fccc7c0b4231dc8a4279adbe53d84896f391a897fdba8a968f10008d626d
SSDEEP 12288:MiWHWw2R+CTPdMlH+QKjbCI5wkO16UgBRrsSr+UmnS+B+b7CBPSleXjNnEUA6QzC:s2R/48Pe
TLSH
T19345A9A1AAAD54DF0105F05BE94C7A0D7DA701FE7FA6471625A43DBF38F20248A3C35A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ur.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\ur.pak
Size 985KB
SHA256 1c7e26fb04f2d0c1ad1f9e894e445fe7171bf24281764274dc8695a01ae7a6ff
MD5 381d0ed82fca8aac3873053d6200c7bb
SHA1 71879bd5c6c1a16e8f370115a4d33dfde0be48e4
SHA512 90b5b247b6853ea2bf1c6b090b9734e397d538217847ba4fdba386186639da9e6d2c97d98c395fafb4734b947f3145316a9092ae586a9ad15b70475035369351
SSDEEP 12288:uVw06YoPL8P5yzqtdQdMnyygj4B898qsE8dGZOv56QYr4ENjwadcJKwUluGco/9+:D02sGfG
TLSH
T1652500D2E6B896B34A21D92780D33C34CB735F13D34AF285E96246C54E9A0135F6DE3A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

vi.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\vi.pak
Size 779KB
SHA256 ab4582f4d36f1911ca98d881789d975ff34bc4928e9eac48cd4e288140b7ed5c
MD5 f02440df20799208f9499736c38ec18e
SHA1 c9bb12f2c021cbf488d5c366b75e1e313b6fba1e
SHA512 af972934b79062d2fd810669904755dda684e96492f9c7af25a34809cbd562cc03904bacbe854c99a7f301ecdec13e6e705dc72c62eea49cad528cdd3cb390cf
SSDEEP 24576:8qmSx2+ce5VM01MNoVCE7v8JlftiZw2oq1ljt:IuctizT1ljt
TLSH
T1DE05955216E1302680AC553EC6CE540D6FCAE42FF7C1CFE56FE4297476221A46F21BAE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

zh-CN.pak

Path C:\Users\Admin\AppData\Local\tmp4kyg31pm.15t\app-1.0.9265\lib\net45\locales\zh-CN.pak
Size 556KB
SHA256 a24fc19b5e6df7c5383b50fc1dede96f3bea7cf81c07f52fca2a9bb278a53d2f
MD5 d6f92771916f7dbc0dffeb977603a2a9
SHA1 aa75091994a437dc30fd40c615bfd468d2d99a6e
SHA512 6b2aac39017a4cd07153fbd81e52618602dd46ab424d9b653df230eba44746693b4cd28b980e6207bd366e6083873e8ebcd243de6c6e65aee0bcbbaa07c72dc1
SSDEEP 12288:PdX6cw9ng+qQnBpUcZwotuUm1YoDMtH0H:Cng+qQnBpUcSocUm1YoDMtUH
TLSH
T160C47CA920F9BDEC004A50E13729613D7C40720BF667AF366ED248DD2AA6F9D0757E07
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/4840-115-0x00000000095F0000-0x000000000962E000-memory.dmp

Download

memory/4840-118-0x00000000095C0000-0x00000000095CE000-memory.dmp

Download

memory/4840-86-0x0000000008D50000-0x0000000008D58000-memory.dmp

Download

memory/4840-11-0x0000000000CE0000-0x0000000000E6A000-memory.dmp

Download

Analysis

Sharing

Errors

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads