Resubmissions

13/11/2026, 12:44

261113-pyvcpaby5t7

13/11/2026, 12:22

261113-pj7dpsae367

Analysis

  • user interaction
    yes
  • max time kernel
    83s
  • max time network
    164s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    13/11/2026, 12:22

General

  • Target
    Deskland-Setup.exe
  • Size 260.4MB
  • Sample261113-pj7dpsae36
  • SHA256 5f7b00728e6196d45337b1271f11e07ba7991f67cf941150a94d8d3ceba63248
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 4 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 30 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Deskland-Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Deskland-Setup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: GetForegroundWindowSpam
    • Suspicious use of WriteProcessMemory
    PID:1620
    • C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.exe
      "C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks whether UAC is enabled
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:5004
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=5004.2080.180781930088052977
        3⤵
        • Enumerates system info in registry
        • Suspicious use of WriteProcessMemory
        PID:844
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffb7d87b078,0x7ffb7d87b084,0x7ffb7d87b090
          4⤵
            PID:1408
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1672,i,1106636117389988066,14297111287062418564,262144 --variations-seed-version --mojo-platform-channel-handle=1744 /prefetch:2
            4⤵
              PID:3216
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2052,i,1106636117389988066,14297111287062418564,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:3
              4⤵
                PID:3860
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1748,i,1106636117389988066,14297111287062418564,262144 --variations-seed-version --mojo-platform-channel-handle=2396 /prefetch:8
                4⤵
                  PID:1268
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3596,i,1106636117389988066,14297111287062418564,262144 --variations-seed-version --mojo-platform-channel-handle=3620 /prefetch:1
                  4⤵
                    PID:4204
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --disable-gpu-compositing --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3600,i,1106636117389988066,14297111287062418564,262144 --variations-seed-version --mojo-platform-channel-handle=4000 /prefetch:1
                    4⤵
                      PID:1560

              Network

                    MITRE ATT&CK Enterprise v16

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    11282f01-ef96-46f4-a123-9d4757ee221b.tmp

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\11282f01-ef96-46f4-a123-9d4757ee221b.tmp
                    • Size 4KB
                    • SHA256 09840ee133d59f15a89a4599553f31d7df64480e2ada4cd007a4dd54feaa8da5
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    648e4a0e-5d43-476d-90e3-86a97ed84a9b.tmp

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\648e4a0e-5d43-476d-90e3-86a97ed84a9b.tmp
                    • Size 1KB
                    • SHA256 c4470cfd02cb8911d4a678ac480df771d59a362c343121bdb711edae87e82fd2
                    • MD5 SHA1 SHA512 TLSH

                    91732de8-f0a1-47d4-a53d-90e26c97d5c5.tmp

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\91732de8-f0a1-47d4-a53d-90e26c97d5c5.tmp
                    • Size 2KB
                    • SHA256 171945421c46a365cad3607c0c822221a274abbba3113fde5077c71440a89db8
                    • MD5 SHA1 SHA512 TLSH

                    9c3c62aa-9f70-454f-849c-6d79744b4f26.tmp

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\9c3c62aa-9f70-454f-849c-6d79744b4f26.tmp
                    • Size 4KB
                    • SHA256 3f5e9360ccf0d348e45871f7fd4d1bad22a33a10353773b3a96fa122ca861331
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    settings.dat

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad\settings.dat
                    • Size 280B
                    • SHA256 e4d138099a7be4ac4117f83a33e08e4cd56e349cc652f9b5810ef11b317f05ff
                    • MD5 SHA1 SHA512

                    settings.dat

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad\settings.dat
                    • Size 280B
                    • SHA256 34bf52e3850a312c8a0dd9ea845276c07902e7107a7653a18a5d0a57432e45bd
                    • MD5 SHA1 SHA512 TLSH

                    throttle_store.dat

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad\throttle_store.dat
                    • Size 20B
                    • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                    • MD5 SHA1 SHA512

                    86b2a006-ca2f-42be-96be-6c20252184ec.tmp

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\86b2a006-ca2f-42be-96be-6c20252184ec.tmp
                    • Size 6KB
                    • SHA256 03ea3e329e0f508c7c4883d634426d07959fc2c10e10aa074a1b18b4b5a63b1b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    temp-index

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
                    • Size 216B
                    • SHA256 167dcde54407583257d2f4c8cdab5aa915de8eeff7477fa63c3bd6adba58548b
                    • MD5 SHA1 SHA512 TLSH

                    temp-index

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
                    • Size 48B
                    • SHA256 8bb61515e6874ef9d8dbadbe4bef501b42d5aeac381e243636281e5af4506abb
                    • MD5 SHA1 SHA512

                    data_0

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\GPUCache\data_0
                    • Size 8KB
                    • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                    • MD5 SHA1 SHA512 SSDEEP

                    data_1

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\GPUCache\data_1
                    • Size 264KB
                    • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                    • MD5 SHA1 SHA512 SSDEEP

                    data_2

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\GPUCache\data_2
                    • Size 8KB
                    • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                    • MD5 SHA1 SHA512 SSDEEP

                    data_3

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\GPUCache\data_3
                    • Size 8KB
                    • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                    • MD5 SHA1 SHA512 SSDEEP

                    SCT Auditing Pending Reports

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
                    • Size 2B
                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                    • MD5 SHA1 SHA512

                    Preferences

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Preferences
                    • Size 6KB
                    • SHA256 e4ffedf6408609f8cc41fbeb988296ea4a33d6d3bb45647b809fb3b026d63e1e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    MANIFEST-000001

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
                    • Size 41B
                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                    • MD5 SHA1 SHA512

                    CURRENT

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Sync Data\LevelDB\CURRENT
                    • Size 16B
                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                    • MD5 SHA1 SHA512

                    aec76f08-0dde-45be-b0e3-9f05f59d1a77.tmp

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\aec76f08-0dde-45be-b0e3-9f05f59d1a77.tmp
                    • Size 6KB
                    • SHA256 87f537d99df1a970008043894816e716e8c60745766c811970c05035fe283f1e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Local State

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Local State
                    • Size 1KB
                    • SHA256 7f7516d3b782299394a46e74df7ebafc75e6ca89c06ad653ddc8a5d5f4f6bd3e
                    • MD5 SHA1 SHA512 TLSH

                    f3d2074d-e880-4b69-ad14-a797ac5b539f.tmp

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\f3d2074d-e880-4b69-ad14-a797ac5b539f.tmp
                    • Size 3KB
                    • SHA256 22d0a1b65010e8496bae40e8065ead8a7813ff1351912611ad290127ab3721ea
                    • MD5 SHA1 SHA512 TLSH

                    host.log

                    • Path C:\Users\Admin\AppData\Local\Deskland\host.log
                    • Size 2KB
                    • SHA256 9ad27064d40083faafef8dc91873a3b2960a00ce1d430c5321d0f3f23e6f9517
                    • MD5 SHA1 SHA512 TLSH

                    host.log

                    • Path C:\Users\Admin\AppData\Local\Deskland\host.log
                    • Size 3KB
                    • SHA256 2370d65866d11105f982fcc76b4df11dfdcb4eeb79f11e13763599e62fda996d
                    • MD5 SHA1 SHA512 TLSH

                    host.log

                    • Path C:\Users\Admin\AppData\Local\Deskland\host.log
                    • Size 4KB
                    • SHA256 12f80b65a93e0840bab2e70da12f7df2e9b9fdf5a81f46c0e1a3d455013d4093
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Uninstall.exe

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\Uninstall.exe
                    • Size 105KB
                    • SHA256 ce7df6fb236a12eb1cb77afae3181f9d8a99301667ff7f60189e9ca14dd304d7
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Deskland.exe

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.exe
                    • Size 211KB
                    • SHA256 b9a0f616c59262c6dd2a5c0c71b41891d00c237b71b156813202e80aaabec242
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Deskland.ico

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.ico
                    • Size 39KB
                    • SHA256 eaa4b308d2ac37d26edebfbce4e0664c9463084ec1911b5b953728622996ce1a
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Microsoft.Web.WebView2.Core.dll

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Microsoft.Web.WebView2.Core.dll
                    • Size 681KB
                    • SHA256 e6f54c8ce208e3797c427d01ad671b47cb25abc85604753d6ec2546d0ffef550
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Microsoft.Web.WebView2.WinForms.dll

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Microsoft.Web.WebView2.WinForms.dll
                    • Size 37KB
                    • SHA256 cc3d2937c350a4f5e20399855bcab4fe695a395308feb2ed67394faa6a1ae849
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    WebView2Loader.dll

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\WebView2Loader.dll
                    • Size 159KB
                    • SHA256 c66e4a92fdc7a216118e43b7a5024ea2200e8c43f9310bf20d96a0084f82c5bc
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    maldives-coconut-palm-airy.png

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-airy.png
                    • Size 1.7MB
                    • SHA256 527cf4d2a9c21359b4340b6c70a8a9d25b6c708bb9bdf4556c5392325b31a12e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    maldives-coconut-palm-arch.png

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-arch.png
                    • Size 1.6MB
                    • SHA256 7172059c8458feba4f9b9084d521e9d84154091df2ab536d2e16c4a654ecb627
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    maldives-coconut-palm-curved.png

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-curved.png
                    • Size 1.9MB
                    • SHA256 f15fccb574e7e1e1026f8a08216f56eda00489cf824ceb0960c66fbe6ac0e076
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    maldives-coconut-palm-v2.png

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-v2.png
                    • Size 2.0MB
                    • SHA256 9c103d3b3fe5beb85ebb4c0c17fd0c6d3330bf56a3eb0c45db9f6534b754a5bf
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    maldives-coconut-palm-windswept.png

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-windswept.png
                    • Size 1.6MB
                    • SHA256 6cbebd49e7204800827a2ea798e89f9a203e7ee09281978c07ffe88943024c96
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    meadow-black-kitten.png

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\meadow-black-kitten.png
                    • Size 967KB
                    • SHA256 e554b2583c1c29f88737362fd748132e48ce518654a49284cd66d499de3b152b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    meadow-kite-boy-diagonal-run.png

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\meadow-kite-boy-diagonal-run.png
                    • Size 1.0MB
                    • SHA256 ac7c4290ebcdf465768d79ab66d98f1fa7c8e0ddaf83c5787d6830ee34d8d73e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    meadow-kite-boy-level-face.png

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\meadow-kite-boy-level-face.png
                    • Size 988KB
                    • SHA256 bb6194fcdf3320ea4836a841ca37a8327ccd26a4eb94e071e8f4c811bbeff12c
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    auth-ui.css

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\auth-ui.css
                    • Size 3KB
                    • SHA256 a989d840870f7854697cbd6228e0a38e9172e2994162286ff9cc611fd5e15780
                    • MD5 SHA1 SHA512 TLSH

                    auth-ui.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\auth-ui.js
                    • Size 17KB
                    • SHA256 403462e8825cddb15102468a33fcc3071b102505dadefeff72afd92ee6322bd0
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    beach-regions.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\beach-regions.js
                    • Size 1KB
                    • SHA256 39e6f5a4f4a2785c872720e2438d14547078356b88922e7eff01e35391021509
                    • MD5 SHA1 SHA512 TLSH

                    bug-report-image.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\bug-report-image.js
                    • Size 1KB
                    • SHA256 f7d0135f4dffbd0c61e489ad15f947a210975480c873ec5875df527486c41ca9
                    • MD5 SHA1 SHA512 TLSH

                    flat.html

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\flat.html
                    • Size 69KB
                    • SHA256 2de08114b5e90acecefcb45bfb403447714879e109368d640943e508c5b0aa81
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    en.json

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\i18n\en.json
                    • Size 30KB
                    • SHA256 34ab3f7475d3fd0af41c84dd1a01e14a3e847b82387803a12e4ce4727b86e457
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    zh-CN.json

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\i18n\zh-CN.json
                    • Size 18KB
                    • SHA256 c1de13c72c1ec1166a711e7d3e5f64209a93446b3b7e6d8aa231506def8892fd
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    maldives-palms.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\maldives-palms.js
                    • Size 9KB
                    • SHA256 ed2a33da1deea7d2dd23cd1377bee9a4751b87f8dfdef98aa1a116aa781d2d1c
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    meadow-cat.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\meadow-cat.js
                    • Size 4KB
                    • SHA256 ec40ff3f40da2dd2606d86aa8befbbf5a269be76415646f360e808417d9eb14c
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    meadow-shinchan.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\meadow-shinchan.js
                    • Size 28KB
                    • SHA256 29f84c237613f7f891b82820d40ca24b0b340890e3e78cbd9968c2caca2d9522
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    meadow.html

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\meadow.html
                    • Size 63KB
                    • SHA256 2d0e4175cacaa9c287894f06ebf7dc6ea36d41ca4608a408b13a0036cd1744ab
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    preview-runtime.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\preview-runtime.js
                    • Size 1KB
                    • SHA256 e435aa03f901085096e2f85c1f277a90ebd612d0b4a00d06ce1ae8f8376d9121
                    • MD5 SHA1 SHA512 TLSH

                    render-diagnostics.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\render-diagnostics.js
                    • Size 7KB
                    • SHA256 f578a6eef2bf00cb9c37c332d9ef00e7f0216af5f90c7c3f7ef8f302c2bfc3ec
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    settings.html

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\settings.html
                    • Size 77KB
                    • SHA256 8bae20d2f9f20b5b0daf5973ad52985f13c0f26d2e23bef211d02450b337ac3b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    share.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\share.js
                    • Size 30KB
                    • SHA256 f0145c86e29c33984caafacfeb8163546a1f76f46319d609fcac6b425abdce36
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    themes.json

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\themes.json
                    • Size 66KB
                    • SHA256 d55d1dd4ca1abcde5812ce6574f58a2222aeedeca08856c59aa2a7c7b5e8090f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    thumbs-data.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs-data.js
                    • Size 818KB
                    • SHA256 3368bc499e2a4a8711e3c3b8bf375bf224dc81e67c753ac49a38fdbd92676797
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    beach.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\beach.webp
                    • Size 65KB
                    • SHA256 017578bc5c8701fe25258b29130534c3d6c826bf0bdac407d627b6a83459058e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    colorful city.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\colorful city.webp
                    • Size 83KB
                    • SHA256 501e0d3db353bcc86b95667d586fea0697ae827bb2413605b02e00587b249d16
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    forest.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\forest.webp
                    • Size 69KB
                    • SHA256 d70cf321e5a53b1c1bd26b58faebe0ec4f31fd4aa035a22b573aab0274f8aa3f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    hand draw city.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\hand draw city.webp
                    • Size 51KB
                    • SHA256 651f4911f803513b0a64fbd5ad2eeafee34ed5aad69e797d756eefcb97705050
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    lake.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\lake.webp
                    • Size 44KB
                    • SHA256 e22cfe9d6aa709c4605759d3d64a230806dad468d0c30d0ec55e3b60d7651637
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    lotus.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\lotus.webp
                    • Size 6KB
                    • SHA256 62f4aadd216123390ad4b76869815362f5eb5ca8fd42829fc7edf941e24772c6
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    maldives.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\maldives.webp
                    • Size 61KB
                    • SHA256 4ebfbc8e82c91376b9d52103961a466bde38ad2faeb19deff8baeb88e9b2f476
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    meadow.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\meadow.webp
                    • Size 42KB
                    • SHA256 5d36b1f2d4d59f6215298477d915a3b2e01a92c4f963be8ca7a4bbfa6bfea84d
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    nautical chart.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\nautical chart.webp
                    • Size 18KB
                    • SHA256 e8192416eff901efa8babafd964611597e4507371d4d4166d8b5abfbc16767c3
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ocean.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\ocean.webp
                    • Size 45KB
                    • SHA256 a503d4f275ab1bf3ad9d34d1ef84deefd95aff16e9ace0cfdf50125f208b3ffb
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    old map.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\old map.webp
                    • Size 48KB
                    • SHA256 92fa0e21717236bac1ffa02881028bf754aee98a5e9513000582f13c5c305af1
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    pink forest.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\pink forest.webp
                    • Size 65KB
                    • SHA256 56b5ef811735ece52a9b65ab9c3bd928700eb76a7c12ef6b5f91b32d01926c5f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    sky.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\sky.webp
                    • Size 11KB
                    • SHA256 d706a0326d80230ec1bca68b86fa0129493eaaf73d7823acdb9075fce86654cc
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    LangDLL.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\nsgECCE.tmp\LangDLL.dll
                    • Size 5KB
                    • SHA256 3c8b2629048c118e4fcf80188cbcdaad3a668270e49fd95d2809feccc98fe220
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    System.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\nsgECCE.tmp\System.dll
                    • Size 12KB
                    • SHA256 afe032f942e2ed0bf7494ec08ba813f5739fb522c640bde81d30ecaf9f894432
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    modern-wizard.bmp

                    • Path C:\Users\Admin\AppData\Local\Temp\nsgECCE.tmp\modern-wizard.bmp
                    • Size 25KB
                    • SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    nsDialogs.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\nsgECCE.tmp\nsDialogs.dll
                    • Size 9KB
                    • SHA256 9c76f4d53ceee2a471c936e0899688405e1009ce962d140e9acb49ed68d114cb
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    memory/1268-388-0x00007FFBA1660000-0x00007FFBA1661000-memory.dmp

                    memory/1268-387-0x00007FFBA1DC0000-0x00007FFBA1DC1000-memory.dmp

                    memory/3216-621-0x000001DC1F440000-0x000001DC1F442000-memory.dmp

                    memory/3216-642-0x000001DC1F420000-0x000001DC1F421000-memory.dmp

                    memory/3216-548-0x000001DC221F0000-0x000001DC221F2000-memory.dmp

                    memory/3216-550-0x000001DC22400000-0x000001DC22402000-memory.dmp

                    memory/3216-543-0x000001DC221E0000-0x000001DC221E2000-memory.dmp

                    memory/3216-542-0x000001DC221C0000-0x000001DC221C1000-memory.dmp

                    memory/3216-647-0x000001DC1F450000-0x000001DC1F451000-memory.dmp

                    memory/3216-540-0x000001DC221C0000-0x000001DC221C1000-memory.dmp

                    memory/3216-555-0x000001DC22130000-0x000001DC22132000-memory.dmp

                    memory/3216-537-0x000001DC22110000-0x000001DC22111000-memory.dmp

                    memory/3216-666-0x000001DC1FEC0000-0x000001DC1FEC1000-memory.dmp

                    memory/3216-545-0x000001DC22400000-0x000001DC22416000-memory.dmp

                    memory/3216-563-0x000001DC22190000-0x000001DC221A6000-memory.dmp

                    memory/3216-564-0x000001DC225F0000-0x000001DC2261B000-memory.dmp

                    memory/3216-667-0x000001DC1FED0000-0x000001DC1FED2000-memory.dmp

                    memory/3216-558-0x000001DC22160000-0x000001DC2218B000-memory.dmp

                    memory/3216-557-0x000001DC22140000-0x000001DC22156000-memory.dmp

                    memory/3216-331-0x00007FFBA3310000-0x00007FFBA3311000-memory.dmp

                    memory/3216-576-0x000001DC221C0000-0x000001DC221C2000-memory.dmp

                    memory/3216-574-0x000001DC22190000-0x000001DC22197000-memory.dmp

                    memory/3216-573-0x000001DC221B0000-0x000001DC221B4000-memory.dmp

                    memory/3216-571-0x000001DC221A0000-0x000001DC221A2000-memory.dmp

                    memory/3216-569-0x000001DC22120000-0x000001DC22124000-memory.dmp

                    memory/3216-568-0x000001DC22190000-0x000001DC22192000-memory.dmp

                    memory/3216-561-0x000001DC22140000-0x000001DC22142000-memory.dmp

                    memory/3216-669-0x000001DC1FEE0000-0x000001DC1FEF1000-memory.dmp

                    memory/3216-612-0x000001DC1F320000-0x000001DC1F322000-memory.dmp

                    memory/3216-616-0x000001DC1F330000-0x000001DC1F334000-memory.dmp

                    memory/3216-670-0x000001DC1FFC0000-0x000001DC1FFE1000-memory.dmp

                    memory/3216-663-0x000001DC1FEA0000-0x000001DC1FEAF000-memory.dmp

                    memory/3216-662-0x000001DC1FEC0000-0x000001DC1FEC8000-memory.dmp

                    memory/3216-660-0x000001DC1FEB0000-0x000001DC1FEB2000-memory.dmp

                    memory/3216-659-0x000001DC1FEA0000-0x000001DC1FEA1000-memory.dmp

                    memory/3216-658-0x000001DC1FE80000-0x000001DC1FE8F000-memory.dmp

                    memory/3216-657-0x000001DC1FEA0000-0x000001DC1FEA8000-memory.dmp

                    memory/3216-655-0x000001DC1FE90000-0x000001DC1FE92000-memory.dmp

                    memory/3216-654-0x000001DC1FE80000-0x000001DC1FE81000-memory.dmp

                    memory/3216-671-0x000001DC1FEC0000-0x000001DC1FEC1000-memory.dmp

                    memory/3216-560-0x000001DC22120000-0x000001DC22121000-memory.dmp

                    memory/3216-546-0x000001DC22420000-0x000001DC2244B000-memory.dmp

                    memory/3216-541-0x000001DC221D0000-0x000001DC221D2000-memory.dmp

                    memory/3216-646-0x000001DC1F420000-0x000001DC1F42F000-memory.dmp

                    memory/3216-645-0x000001DC1F450000-0x000001DC1F458000-memory.dmp

                    memory/3216-643-0x000001DC1F430000-0x000001DC1F432000-memory.dmp

                    memory/3216-672-0x000001DC1FEE0000-0x000001DC1FEE2000-memory.dmp

                    memory/3216-673-0x000001DC1FEC0000-0x000001DC1FEC1000-memory.dmp

                    memory/3216-674-0x000001DC1FEF0000-0x000001DC1FEF2000-memory.dmp

                    memory/3216-675-0x000001DC1FEC0000-0x000001DC1FEC1000-memory.dmp

                    memory/3216-625-0x000001DC1F440000-0x000001DC1F447000-memory.dmp

                    memory/3216-676-0x000001DC1FFF0000-0x000001DC1FFF2000-memory.dmp

                    memory/3216-617-0x000001DC1F320000-0x000001DC1F327000-memory.dmp

                    memory/3216-678-0x000001DC21100000-0x000001DC21108000-memory.dmp

                    memory/3216-679-0x000001DC1FEC0000-0x000001DC1FED0000-memory.dmp

                    memory/3216-680-0x000001DC21100000-0x000001DC21101000-memory.dmp

                    memory/3216-624-0x000001DC1F450000-0x000001DC1F454000-memory.dmp

                    memory/3216-622-0x000001DC1F380000-0x000001DC1F384000-memory.dmp

                    memory/3216-554-0x000001DC22120000-0x000001DC22121000-memory.dmp

                    memory/3216-613-0x000001DC1F310000-0x000001DC1F314000-memory.dmp

                    memory/3216-683-0x000001DC21120000-0x000001DC21122000-memory.dmp

                    memory/3216-682-0x000001DC21100000-0x000001DC21101000-memory.dmp

                    memory/3216-681-0x000001DC21110000-0x000001DC21112000-memory.dmp

                    memory/4204-462-0x00007FFBA3310000-0x00007FFBA3311000-memory.dmp

                    memory/5004-627-0x000000001C300000-0x000000001C310000-memory.dmp

                    memory/5004-602-0x000000001C300000-0x000000001C310000-memory.dmp

                    memory/5004-619-0x000000001C300000-0x000000001C310000-memory.dmp

                    memory/5004-290-0x000000001F960000-0x000000001F986000-memory.dmp

                    memory/5004-288-0x000000001CE90000-0x000000001CF3E000-memory.dmp

                    memory/5004-289-0x00000000031E0000-0x00000000031EA000-memory.dmp

                    memory/5004-286-0x00000000031C0000-0x00000000031CE000-memory.dmp

                    memory/5004-626-0x000000001C300000-0x000000001C310000-memory.dmp

                    memory/5004-293-0x000000001C300000-0x000000001C310000-memory.dmp

                    memory/5004-296-0x000000001C300000-0x000000001C310000-memory.dmp

                    memory/5004-291-0x000000001C300000-0x000000001C310000-memory.dmp

                    memory/5004-279-0x0000000003320000-0x0000000003370000-memory.dmp

                    memory/5004-276-0x000000001D660000-0x000000001DB88000-memory.dmp

                    memory/5004-274-0x000000001CF60000-0x000000001D122000-memory.dmp

                    memory/5004-272-0x000000001C300000-0x000000001C310000-memory.dmp

                    memory/5004-264-0x0000000000710000-0x0000000000748000-memory.dmp