Resubmissions

13/11/2026, 12:44

261113-pyvcpaby5t7

13/11/2026, 12:22

261113-pj7dpsae367

Analysis

  • max time kernel
    153s
  • max time network
    183s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/11/2026, 12:22

General

  • Target
    Deskland-Setup.exe
  • Size 260.4MB
  • Sample261113-pj7dpsae36
  • SHA256 5f7b00728e6196d45337b1271f11e07ba7991f67cf941150a94d8d3ceba63248
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 4 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of WriteProcessMemory 21 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Deskland-Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Deskland-Setup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:1016
    • C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.exe
      "C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks whether UAC is enabled
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:2056
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=2056.3420.8915666271314747348 /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1
        3⤵
        • Enumerates system info in registry
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of WriteProcessMemory
        PID:5644
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView /prefetch:4 /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ff80c3b5fd8,0x7ff80c3b5fe4,0x7ff80c3b5ff0
          4⤵
            PID:1148
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1800 --field-trial-handle=1804,i,2034226800219828209,5037909073580051284,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1
            4⤵
              PID:5564
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2248 --field-trial-handle=1804,i,2034226800219828209,5037909073580051284,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1
              4⤵
                PID:2360
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2420 --field-trial-handle=1804,i,2034226800219828209,5037909073580051284,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1
                4⤵
                  PID:5876
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3436 --field-trial-handle=1804,i,2034226800219828209,5037909073580051284,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1 /prefetch:1
                  4⤵
                    PID:5064
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3780 --field-trial-handle=1804,i,2034226800219828209,5037909073580051284,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1 /prefetch:1
                    4⤵
                      PID:5880
              • C:\Windows\system32\svchost.exe
                C:\Windows\system32\svchost.exe -k GPSvcGroup
                1⤵
                  PID:4860

                Network

                      MITRE ATT&CK Enterprise v16

                      Replay Monitor

                      Loading Replay Monitor...

                      Downloads

                      19fdd0d0-2470-487f-8649-9669a65397c3.tmp

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\19fdd0d0-2470-487f-8649-9669a65397c3.tmp
                      • Size 4KB
                      • SHA256 dcc78c8d2258aea9dfef10025d7082bba27516f791d6effc9fb850461d52bbbe
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      85505ae4-8d58-4981-9912-8122174317b0.tmp

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\85505ae4-8d58-4981-9912-8122174317b0.tmp
                      • Size 16KB
                      • SHA256 5840f918cdf832a833445236eb67d52b104e3e29ffb73860ca0e1b01b127ea72
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      9f515f27-2bf7-4c04-b79d-f2086d9c332f.tmp

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\9f515f27-2bf7-4c04-b79d-f2086d9c332f.tmp
                      • Size 3KB
                      • SHA256 f344ff63c3eac6bda49d515f1b7f860a149af3b1808036f7a746a634dcf28a2f
                      • MD5 SHA1 SHA512 TLSH

                      settings.dat

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad\settings.dat
                      • Size 280B
                      • SHA256 7ffb122abc033b2f0c0a02c601f85f33f94486160d95ea33e053e797fbf7d49e
                      • MD5 SHA1 SHA512

                      settings.dat

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad\settings.dat
                      • Size 280B
                      • SHA256 e50c68b24c4de544b72e570152fb42d6c77b6d0be365e951e57c52985f7161d6
                      • MD5 SHA1 SHA512 TLSH

                      throttle_store.dat

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad\throttle_store.dat
                      • Size 20B
                      • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                      • MD5 SHA1 SHA512

                      1913e5c4-1bd9-408e-b15c-64fc88ac1f25.tmp

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\1913e5c4-1bd9-408e-b15c-64fc88ac1f25.tmp
                      • Size 6KB
                      • SHA256 afcd007eeeb317f63cef96b6afd05c015e5971ae497f6d850e657b05b3297fd7
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      temp-index

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
                      • Size 216B
                      • SHA256 eece69d29574ed8151e522e1348ac00970f8187d4532c607bfc97afe27129767
                      • MD5 SHA1 SHA512 TLSH

                      the-real-index

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                      • Size 48B
                      • SHA256 19643b6fdf8dded0c2c600cb800eeca660a17426e3897519d70ba95263335315
                      • MD5 SHA1 SHA512

                      CURRENT

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Extension Rules\CURRENT
                      • Size 16B
                      • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                      • MD5 SHA1 SHA512

                      MANIFEST-000001

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Extension Scripts\MANIFEST-000001
                      • Size 41B
                      • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                      • MD5 SHA1 SHA512

                      0afa1091-7f38-42bf-8760-68604a8f91a7.tmp

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Network\0afa1091-7f38-42bf-8760-68604a8f91a7.tmp
                      • Size 111B
                      • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                      • MD5 SHA1 SHA512 TLSH

                      Network Persistent State

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Network\Network Persistent State
                      • Size 59B
                      • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                      • MD5 SHA1 SHA512 TLSH

                      SCT Auditing Pending Reports

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
                      • Size 2B
                      • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                      • MD5 SHA1 SHA512

                      Preferences

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Preferences
                      • Size 5KB
                      • SHA256 ee65ee5007bde3ca63f4df056e208a20bd82f6c2c648cf2ae2fa1a13b5957573
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      c84b8fb3-efa6-4421-bf7d-673cb67539ab.tmp

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\c84b8fb3-efa6-4421-bf7d-673cb67539ab.tmp
                      • Size 6KB
                      • SHA256 e2abd64ad78f3f705d1f5a45f0c5874bc75ff3f3f45b9c881c7fdb8f1999dd05
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      data_0

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\GrShaderCache\data_0
                      • Size 8KB
                      • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                      • MD5 SHA1 SHA512 SSDEEP

                      data_1

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\GrShaderCache\data_1
                      • Size 264KB
                      • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                      • MD5 SHA1 SHA512 SSDEEP

                      data_2

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\GrShaderCache\data_2
                      • Size 8KB
                      • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                      • MD5 SHA1 SHA512 SSDEEP

                      data_3

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\GrShaderCache\data_3
                      • Size 8KB
                      • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                      • MD5 SHA1 SHA512 SSDEEP

                      Local State

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Local State
                      • Size 1KB
                      • SHA256 71f4276e35b45739bdbd3856b1e1ab3b9e79894bbd74f7880bd00484893b7a8a
                      • MD5 SHA1 SHA512 TLSH

                      a39aa38e-0b60-472f-b3c2-f4468cc2118e.tmp

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\a39aa38e-0b60-472f-b3c2-f4468cc2118e.tmp
                      • Size 3KB
                      • SHA256 4ff69c8a37a6382b42ca35377f940fccb7caad04797826170820ab2d078a2952
                      • MD5 SHA1 SHA512 TLSH

                      c251c255-dd3d-4623-976a-f5380fdb19e2.tmp

                      • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\c251c255-dd3d-4623-976a-f5380fdb19e2.tmp
                      • Size 2KB
                      • SHA256 f4f486e90cca52bc7fd2296fec718759ce15ab2d91010642dcaa8903ddc54ef9
                      • MD5 SHA1 SHA512 TLSH

                      host.log

                      • Path C:\Users\Admin\AppData\Local\Deskland\host.log
                      • Size 2KB
                      • SHA256 5d1b35700c7b011483a5b456837e61d9c6f1f3a8c6780034fc4514e30949a9a6
                      • MD5 SHA1 SHA512 TLSH

                      host.log

                      • Path C:\Users\Admin\AppData\Local\Deskland\host.log
                      • Size 3KB
                      • SHA256 42e57d5e9624e573eaf2640864078d2510c51313fd2cbfb3c68ed1cd53f80d01
                      • MD5 SHA1 SHA512 TLSH

                      Uninstall.exe

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\Uninstall.exe
                      • Size 105KB
                      • SHA256 ce7df6fb236a12eb1cb77afae3181f9d8a99301667ff7f60189e9ca14dd304d7
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      Deskland.exe

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.exe
                      • Size 211KB
                      • SHA256 b9a0f616c59262c6dd2a5c0c71b41891d00c237b71b156813202e80aaabec242
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      Deskland.ico

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.ico
                      • Size 39KB
                      • SHA256 eaa4b308d2ac37d26edebfbce4e0664c9463084ec1911b5b953728622996ce1a
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      Microsoft.Web.WebView2.Core.dll

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Microsoft.Web.WebView2.Core.dll
                      • Size 681KB
                      • SHA256 e6f54c8ce208e3797c427d01ad671b47cb25abc85604753d6ec2546d0ffef550
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      Microsoft.Web.WebView2.WinForms.dll

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Microsoft.Web.WebView2.WinForms.dll
                      • Size 37KB
                      • SHA256 cc3d2937c350a4f5e20399855bcab4fe695a395308feb2ed67394faa6a1ae849
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      WebView2Loader.dll

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\WebView2Loader.dll
                      • Size 159KB
                      • SHA256 c66e4a92fdc7a216118e43b7a5024ea2200e8c43f9310bf20d96a0084f82c5bc
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      maldives-coconut-palm-airy.png

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-airy.png
                      • Size 1.7MB
                      • SHA256 527cf4d2a9c21359b4340b6c70a8a9d25b6c708bb9bdf4556c5392325b31a12e
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      maldives-coconut-palm-arch.png

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-arch.png
                      • Size 1.6MB
                      • SHA256 7172059c8458feba4f9b9084d521e9d84154091df2ab536d2e16c4a654ecb627
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      maldives-coconut-palm-curved.png

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-curved.png
                      • Size 1.9MB
                      • SHA256 f15fccb574e7e1e1026f8a08216f56eda00489cf824ceb0960c66fbe6ac0e076
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      maldives-coconut-palm-v2.png

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-v2.png
                      • Size 2.0MB
                      • SHA256 9c103d3b3fe5beb85ebb4c0c17fd0c6d3330bf56a3eb0c45db9f6534b754a5bf
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      maldives-coconut-palm-windswept.png

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-windswept.png
                      • Size 1.6MB
                      • SHA256 6cbebd49e7204800827a2ea798e89f9a203e7ee09281978c07ffe88943024c96
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      auth-ui.css

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\auth-ui.css
                      • Size 3KB
                      • SHA256 a989d840870f7854697cbd6228e0a38e9172e2994162286ff9cc611fd5e15780
                      • MD5 SHA1 SHA512 TLSH

                      auth-ui.js

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\auth-ui.js
                      • Size 17KB
                      • SHA256 403462e8825cddb15102468a33fcc3071b102505dadefeff72afd92ee6322bd0
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      beach-regions.js

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\beach-regions.js
                      • Size 1KB
                      • SHA256 39e6f5a4f4a2785c872720e2438d14547078356b88922e7eff01e35391021509
                      • MD5 SHA1 SHA512 TLSH

                      bug-report-image.js

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\bug-report-image.js
                      • Size 1KB
                      • SHA256 f7d0135f4dffbd0c61e489ad15f947a210975480c873ec5875df527486c41ca9
                      • MD5 SHA1 SHA512 TLSH

                      flat.html

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\flat.html
                      • Size 69KB
                      • SHA256 2de08114b5e90acecefcb45bfb403447714879e109368d640943e508c5b0aa81
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      en.json

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\i18n\en.json
                      • Size 30KB
                      • SHA256 34ab3f7475d3fd0af41c84dd1a01e14a3e847b82387803a12e4ce4727b86e457
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      zh-CN.json

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\i18n\zh-CN.json
                      • Size 18KB
                      • SHA256 c1de13c72c1ec1166a711e7d3e5f64209a93446b3b7e6d8aa231506def8892fd
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      maldives-palms.js

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\maldives-palms.js
                      • Size 9KB
                      • SHA256 ed2a33da1deea7d2dd23cd1377bee9a4751b87f8dfdef98aa1a116aa781d2d1c
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      preview-runtime.js

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\preview-runtime.js
                      • Size 1KB
                      • SHA256 e435aa03f901085096e2f85c1f277a90ebd612d0b4a00d06ce1ae8f8376d9121
                      • MD5 SHA1 SHA512 TLSH

                      render-diagnostics.js

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\render-diagnostics.js
                      • Size 7KB
                      • SHA256 f578a6eef2bf00cb9c37c332d9ef00e7f0216af5f90c7c3f7ef8f302c2bfc3ec
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      settings.html

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\settings.html
                      • Size 77KB
                      • SHA256 8bae20d2f9f20b5b0daf5973ad52985f13c0f26d2e23bef211d02450b337ac3b
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      share.js

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\share.js
                      • Size 30KB
                      • SHA256 f0145c86e29c33984caafacfeb8163546a1f76f46319d609fcac6b425abdce36
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      themes.json

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\themes.json
                      • Size 66KB
                      • SHA256 d55d1dd4ca1abcde5812ce6574f58a2222aeedeca08856c59aa2a7c7b5e8090f
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      thumbs-data.js

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs-data.js
                      • Size 818KB
                      • SHA256 3368bc499e2a4a8711e3c3b8bf375bf224dc81e67c753ac49a38fdbd92676797
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      beach.webp

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\beach.webp
                      • Size 65KB
                      • SHA256 017578bc5c8701fe25258b29130534c3d6c826bf0bdac407d627b6a83459058e
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      colorful city.webp

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\colorful city.webp
                      • Size 83KB
                      • SHA256 501e0d3db353bcc86b95667d586fea0697ae827bb2413605b02e00587b249d16
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      forest.webp

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\forest.webp
                      • Size 69KB
                      • SHA256 d70cf321e5a53b1c1bd26b58faebe0ec4f31fd4aa035a22b573aab0274f8aa3f
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      hand draw city.webp

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\hand draw city.webp
                      • Size 51KB
                      • SHA256 651f4911f803513b0a64fbd5ad2eeafee34ed5aad69e797d756eefcb97705050
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      lake.webp

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\lake.webp
                      • Size 44KB
                      • SHA256 e22cfe9d6aa709c4605759d3d64a230806dad468d0c30d0ec55e3b60d7651637
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      lotus.webp

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\lotus.webp
                      • Size 6KB
                      • SHA256 62f4aadd216123390ad4b76869815362f5eb5ca8fd42829fc7edf941e24772c6
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      maldives.webp

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\maldives.webp
                      • Size 61KB
                      • SHA256 4ebfbc8e82c91376b9d52103961a466bde38ad2faeb19deff8baeb88e9b2f476
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      meadow.webp

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\meadow.webp
                      • Size 42KB
                      • SHA256 5d36b1f2d4d59f6215298477d915a3b2e01a92c4f963be8ca7a4bbfa6bfea84d
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      nautical chart.webp

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\nautical chart.webp
                      • Size 18KB
                      • SHA256 e8192416eff901efa8babafd964611597e4507371d4d4166d8b5abfbc16767c3
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      ocean.webp

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\ocean.webp
                      • Size 45KB
                      • SHA256 a503d4f275ab1bf3ad9d34d1ef84deefd95aff16e9ace0cfdf50125f208b3ffb
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      old map.webp

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\old map.webp
                      • Size 48KB
                      • SHA256 92fa0e21717236bac1ffa02881028bf754aee98a5e9513000582f13c5c305af1
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      pink forest.webp

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\pink forest.webp
                      • Size 65KB
                      • SHA256 56b5ef811735ece52a9b65ab9c3bd928700eb76a7c12ef6b5f91b32d01926c5f
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      sky.webp

                      • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\sky.webp
                      • Size 11KB
                      • SHA256 d706a0326d80230ec1bca68b86fa0129493eaaf73d7823acdb9075fce86654cc
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      LangDLL.dll

                      • Path C:\Users\Admin\AppData\Local\Temp\nsi86B8.tmp\LangDLL.dll
                      • Size 5KB
                      • SHA256 3c8b2629048c118e4fcf80188cbcdaad3a668270e49fd95d2809feccc98fe220
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      System.dll

                      • Path C:\Users\Admin\AppData\Local\Temp\nsi86B8.tmp\System.dll
                      • Size 12KB
                      • SHA256 afe032f942e2ed0bf7494ec08ba813f5739fb522c640bde81d30ecaf9f894432
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      modern-wizard.bmp

                      • Path C:\Users\Admin\AppData\Local\Temp\nsi86B8.tmp\modern-wizard.bmp
                      • Size 25KB
                      • SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      nsDialogs.dll

                      • Path C:\Users\Admin\AppData\Local\Temp\nsi86B8.tmp\nsDialogs.dll
                      • Size 9KB
                      • SHA256 9c76f4d53ceee2a471c936e0899688405e1009ce962d140e9acb49ed68d114cb
                      • MD5 SHA1 SHA512 SSDEEP TLSH

                      memory/2056-293-0x000000001C580000-0x000000001C62E000-memory.dmp

                      memory/2056-607-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-303-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-325-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-301-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-270-0x00007FF81275F000-0x00007FF812760000-memory.dmp

                      memory/2056-271-0x0000000000080000-0x00000000000B8000-memory.dmp

                      memory/2056-272-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-278-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-279-0x000000001C6B0000-0x000000001CBD8000-memory.dmp

                      memory/2056-276-0x000000001BFB0000-0x000000001C172000-memory.dmp

                      memory/2056-300-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-294-0x000000001BEF0000-0x000000001BEFA000-memory.dmp

                      memory/2056-295-0x000000001C630000-0x000000001C656000-memory.dmp

                      memory/2056-309-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-291-0x0000000002D20000-0x0000000002D2E000-memory.dmp

                      memory/2056-315-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-317-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-289-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-285-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-620-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-619-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-615-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-614-0x00007FF8125D0000-0x00007FF812F74000-memory.dmp

                      memory/2056-282-0x000000001BD50000-0x000000001BDA0000-memory.dmp

                      memory/5064-429-0x00007FF831960000-0x00007FF831961000-memory.dmp

                      memory/5564-589-0x000001DC77700000-0x000001DC77704000-memory.dmp

                      memory/5564-550-0x000001DC6FF80000-0x000001DC6FF81000-memory.dmp

                      memory/5564-563-0x000001DC77690000-0x000001DC77694000-memory.dmp

                      memory/5564-561-0x000001DC6FFF0000-0x000001DC6FFF2000-memory.dmp

                      memory/5564-559-0x000001DC6FF80000-0x000001DC6FF84000-memory.dmp

                      memory/5564-558-0x000001DC6FFE0000-0x000001DC6FFE2000-memory.dmp

                      memory/5564-573-0x000001DC776E0000-0x000001DC776E2000-memory.dmp

                      memory/5564-576-0x000001DC77710000-0x000001DC7773B000-memory.dmp

                      memory/5564-588-0x000001DC77740000-0x000001DC77742000-memory.dmp

                      memory/5564-582-0x000001DC776D0000-0x000001DC776D4000-memory.dmp

                      memory/5564-581-0x000001DC776F0000-0x000001DC776F2000-memory.dmp

                      memory/5564-585-0x000001DC776F0000-0x000001DC776F7000-memory.dmp

                      memory/5564-584-0x000001DC77700000-0x000001DC77704000-memory.dmp

                      memory/5564-592-0x000001DC77740000-0x000001DC77747000-memory.dmp

                      memory/5564-564-0x000001DC6FFE0000-0x000001DC6FFE7000-memory.dmp

                      memory/5564-591-0x000001DC77750000-0x000001DC77754000-memory.dmp

                      memory/5564-575-0x000001DC776F0000-0x000001DC77706000-memory.dmp

                      memory/5564-566-0x000001DC776A0000-0x000001DC776A2000-memory.dmp

                      memory/5564-515-0x000001DC6FEA0000-0x000001DC6FEA2000-memory.dmp

                      memory/5564-551-0x000001DC6FF90000-0x000001DC6FF92000-memory.dmp

                      memory/5564-555-0x000001DC6FFE0000-0x000001DC6FFF6000-memory.dmp

                      memory/5564-556-0x000001DC77660000-0x000001DC7768B000-memory.dmp

                      memory/5564-510-0x000001DC6FF70000-0x000001DC6FF71000-memory.dmp

                      memory/5564-512-0x000001DC6FE80000-0x000001DC6FE81000-memory.dmp

                      memory/5564-513-0x000001DC6FE90000-0x000001DC6FE92000-memory.dmp

                      memory/5564-514-0x000001DC6FE80000-0x000001DC6FE81000-memory.dmp

                      memory/5564-519-0x000001DC6FEB0000-0x000001DC6FEC6000-memory.dmp

                      memory/5564-520-0x000001DC6FED0000-0x000001DC6FEFB000-memory.dmp

                      memory/5564-522-0x000001DC6FEB0000-0x000001DC6FEB2000-memory.dmp

                      memory/5564-524-0x000001DC6FEC0000-0x000001DC6FEC2000-memory.dmp

                      memory/5564-572-0x000001DC776D0000-0x000001DC776D1000-memory.dmp

                      memory/5564-408-0x00007FF831960000-0x00007FF831961000-memory.dmp