Analysis

  • max time kernel
    153s
  • max time network
    155s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    13/11/2026, 12:25

General

  • Target
    Deskland-Setup.exe
  • Size 260.4MB
  • Sample261113-plxmaavy5k
  • SHA256 5f7b00728e6196d45337b1271f11e07ba7991f67cf941150a94d8d3ceba63248
  • MD5 SHA1 SHA512 SSDEEP TLSH

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 4 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Checks whether UAC is enabled 1 TTPs 1 IoCs
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 2 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of SendNotifyMessage 2 IoCs
  • Suspicious use of WriteProcessMemory 21 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Deskland-Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Deskland-Setup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2004
    • C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.exe
      "C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Checks whether UAC is enabled
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious behavior: GetForegroundWindowSpam
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:4968
      • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
        "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --enable-features=MojoIpcz --mojo-named-platform-channel-pipe=4968.468.9650381112993888581 /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1
        3⤵
        • Enumerates system info in registry
        • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
        • Suspicious use of WriteProcessMemory
        PID:4240
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView /prefetch:4 /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=122.0.6261.139 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=122.0.2365.106 --initial-client-data=0x184,0x188,0x18c,0x160,0x194,0x7ff9d7195fd8,0x7ff9d7195fe4,0x7ff9d7195ff0
          4⤵
            PID:1252
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=gpu-process --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1744 --field-trial-handle=1748,i,9741983816562337796,9490149200822091992,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:2 /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1
            4⤵
              PID:460
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2132 --field-trial-handle=1748,i,9741983816562337796,9490149200822091992,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:3 /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1
              4⤵
                PID:2284
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --mojo-platform-channel-handle=2448 --field-trial-handle=1748,i,9741983816562337796,9490149200822091992,262144 --enable-features=MojoIpcz --variations-seed-version /prefetch:8 /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1
                4⤵
                  PID:5304
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=3432 --field-trial-handle=1748,i,9741983816562337796,9490149200822091992,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1 /prefetch:1
                  4⤵
                    PID:5956
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\122.0.2365.106\msedgewebview2.exe" --type=renderer --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView" --webview-exe-name=Deskland.exe --webview-exe-version=0.1.33.0 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --edge-webview-custom-scheme --no-appcompat-clear --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --mojo-platform-channel-handle=2452 --field-trial-handle=1748,i,9741983816562337796,9490149200822091992,262144 --enable-features=MojoIpcz --variations-seed-version /pfhostedapp:7d6e67e68aaeec255874a5c7dc742a45c3ddffe1 /prefetch:1
                    4⤵
                      PID:3396

              Network

                    MITRE ATT&CK Enterprise v16

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    34d428c9-f46c-4b11-a9f0-5f238b27c33a.tmp

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\34d428c9-f46c-4b11-a9f0-5f238b27c33a.tmp
                    • Size 16KB
                    • SHA256 2cdbf272e7ed82e6126120867b3906c343dbe2ec4c3d25153798f4d1a083880d
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    3968cdff-97c6-40dd-bea3-0f50cfa26d15.tmp

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\3968cdff-97c6-40dd-bea3-0f50cfa26d15.tmp
                    • Size 3KB
                    • SHA256 25809228a619d34221ae50a38f2e2fb8932c8428040581964b5a35e3f19ff495
                    • MD5 SHA1 SHA512 TLSH

                    3aaafda3-62ec-44f2-a990-147247855468.tmp

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\3aaafda3-62ec-44f2-a990-147247855468.tmp
                    • Size 2KB
                    • SHA256 37dba445f8c143049c80ec5a8ce19ce7324a07a2b42aa9da28f0b0cd2b4e0d0b
                    • MD5 SHA1 SHA512 TLSH

                    7fb95876-8069-483a-a764-2760533b18be.tmp

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\7fb95876-8069-483a-a764-2760533b18be.tmp
                    • Size 3KB
                    • SHA256 3e165896b66d7f712b3a8b44359bf9216690e171d7b00bb7cea2d6adef873b4d
                    • MD5 SHA1 SHA512 TLSH

                    settings.dat

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad\settings.dat
                    • Size 280B
                    • SHA256 3bd7f0b491958d3927add65901cde3ce1a010762a35b4c8bd5d9e2c853da4d76
                    • MD5 SHA1 SHA512

                    settings.dat

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad\settings.dat
                    • Size 280B
                    • SHA256 ea1ef551b524494e6f8d4ea8e75bc8b1dd269f54ad9c7a6ddd875f78cbe11607
                    • MD5 SHA1 SHA512 TLSH

                    throttle_store.dat

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Crashpad\throttle_store.dat
                    • Size 20B
                    • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                    • MD5 SHA1 SHA512

                    temp-index

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Code Cache\js\index-dir\temp-index
                    • Size 216B
                    • SHA256 bc90ab18622468678f1409e56d2fdce14e2ca880297547a4704abcf589bd6c89
                    • MD5 SHA1 SHA512 TLSH

                    the-real-index

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                    • Size 48B
                    • SHA256 51c18a803d4d5403dcd5efa528444b47cc14cd125052cbb60c35e2b7a5697bba
                    • MD5 SHA1 SHA512

                    1990e530-7027-4baf-abf3-5e34bb506a01.tmp

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Network\1990e530-7027-4baf-abf3-5e34bb506a01.tmp
                    • Size 111B
                    • SHA256 5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026
                    • MD5 SHA1 SHA512 TLSH

                    Network Persistent State

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Network\Network Persistent State
                    • Size 59B
                    • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                    • MD5 SHA1 SHA512 TLSH

                    SCT Auditing Pending Reports

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Network\SCT Auditing Pending Reports
                    • Size 2B
                    • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                    • MD5 SHA1 SHA512

                    CURRENT

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Site Characteristics Database\CURRENT
                    • Size 16B
                    • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                    • MD5 SHA1 SHA512

                    MANIFEST-000001

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\Site Characteristics Database\MANIFEST-000001
                    • Size 41B
                    • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                    • MD5 SHA1 SHA512

                    a34f5b01-64d1-4da5-8e28-0a61d4f6c05f.tmp

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\a34f5b01-64d1-4da5-8e28-0a61d4f6c05f.tmp
                    • Size 5KB
                    • SHA256 5578aa6cc49114e2f38e4e4f3b49473b96dd62320c6bb557a6133c70690578b2
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    aa7a51b7-9c92-4a29-984c-c6c0b287f03d.tmp

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Default\aa7a51b7-9c92-4a29-984c-c6c0b287f03d.tmp
                    • Size 6KB
                    • SHA256 97567ad720694fbefeda07ca4864ee8246a6b708fc92e6c9c7bc77d61294b1e2
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    data_0

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\GrShaderCache\data_0
                    • Size 8KB
                    • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                    • MD5 SHA1 SHA512 SSDEEP

                    data_1

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\GrShaderCache\data_1
                    • Size 264KB
                    • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                    • MD5 SHA1 SHA512 SSDEEP

                    data_2

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\GrShaderCache\data_2
                    • Size 8KB
                    • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                    • MD5 SHA1 SHA512 SSDEEP

                    data_3

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\GrShaderCache\data_3
                    • Size 8KB
                    • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                    • MD5 SHA1 SHA512 SSDEEP

                    Local State

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\Local State
                    • Size 1KB
                    • SHA256 33f2f48c98f6e3d0f88af42c7714e62b6daa06b52aed56098669d3e2f963ceed
                    • MD5 SHA1 SHA512 TLSH

                    d536946a-b500-4881-a9c3-5c92dc8a86dd.tmp

                    • Path C:\Users\Admin\AppData\Local\Deskland\WebView2\EBWebView\d536946a-b500-4881-a9c3-5c92dc8a86dd.tmp
                    • Size 4KB
                    • SHA256 56cfe4e44239f7714755677b8f58ee8765a2164eb89de86b88831affd9891888
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    host.log

                    • Path C:\Users\Admin\AppData\Local\Deskland\host.log
                    • Size 2KB
                    • SHA256 8f016e77751cdd45525251b7ba813623c7db3fdb6a4944ef4168f01f30cd8326
                    • MD5 SHA1 SHA512 TLSH

                    host.log

                    • Path C:\Users\Admin\AppData\Local\Deskland\host.log
                    • Size 3KB
                    • SHA256 5f84bcc0c380357bd99f6b7186651eaba13638ebcca99252fd772725c2f677d9
                    • MD5 SHA1 SHA512 TLSH

                    Uninstall.exe

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\Uninstall.exe
                    • Size 105KB
                    • SHA256 ce7df6fb236a12eb1cb77afae3181f9d8a99301667ff7f60189e9ca14dd304d7
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Deskland.exe

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.exe
                    • Size 211KB
                    • SHA256 b9a0f616c59262c6dd2a5c0c71b41891d00c237b71b156813202e80aaabec242
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Deskland.ico

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Deskland.ico
                    • Size 39KB
                    • SHA256 eaa4b308d2ac37d26edebfbce4e0664c9463084ec1911b5b953728622996ce1a
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Microsoft.Web.WebView2.Core.dll

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Microsoft.Web.WebView2.Core.dll
                    • Size 681KB
                    • SHA256 e6f54c8ce208e3797c427d01ad671b47cb25abc85604753d6ec2546d0ffef550
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    Microsoft.Web.WebView2.WinForms.dll

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\Microsoft.Web.WebView2.WinForms.dll
                    • Size 37KB
                    • SHA256 cc3d2937c350a4f5e20399855bcab4fe695a395308feb2ed67394faa6a1ae849
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    WebView2Loader.dll

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\host\bin\WebView2Loader.dll
                    • Size 159KB
                    • SHA256 c66e4a92fdc7a216118e43b7a5024ea2200e8c43f9310bf20d96a0084f82c5bc
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    maldives-coconut-palm-airy.png

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-airy.png
                    • Size 1.7MB
                    • SHA256 527cf4d2a9c21359b4340b6c70a8a9d25b6c708bb9bdf4556c5392325b31a12e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    maldives-coconut-palm-arch.png

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-arch.png
                    • Size 1.6MB
                    • SHA256 7172059c8458feba4f9b9084d521e9d84154091df2ab536d2e16c4a654ecb627
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    maldives-coconut-palm-curved.png

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-curved.png
                    • Size 1.9MB
                    • SHA256 f15fccb574e7e1e1026f8a08216f56eda00489cf824ceb0960c66fbe6ac0e076
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    maldives-coconut-palm-v2.png

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-v2.png
                    • Size 2.0MB
                    • SHA256 9c103d3b3fe5beb85ebb4c0c17fd0c6d3330bf56a3eb0c45db9f6534b754a5bf
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    maldives-coconut-palm-windswept.png

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\assets\maldives-coconut-palm-windswept.png
                    • Size 1.6MB
                    • SHA256 6cbebd49e7204800827a2ea798e89f9a203e7ee09281978c07ffe88943024c96
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    auth-ui.css

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\auth-ui.css
                    • Size 3KB
                    • SHA256 a989d840870f7854697cbd6228e0a38e9172e2994162286ff9cc611fd5e15780
                    • MD5 SHA1 SHA512 TLSH

                    auth-ui.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\auth-ui.js
                    • Size 17KB
                    • SHA256 403462e8825cddb15102468a33fcc3071b102505dadefeff72afd92ee6322bd0
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    beach-regions.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\beach-regions.js
                    • Size 1KB
                    • SHA256 39e6f5a4f4a2785c872720e2438d14547078356b88922e7eff01e35391021509
                    • MD5 SHA1 SHA512 TLSH

                    bug-report-image.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\bug-report-image.js
                    • Size 1KB
                    • SHA256 f7d0135f4dffbd0c61e489ad15f947a210975480c873ec5875df527486c41ca9
                    • MD5 SHA1 SHA512 TLSH

                    flat.html

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\flat.html
                    • Size 69KB
                    • SHA256 2de08114b5e90acecefcb45bfb403447714879e109368d640943e508c5b0aa81
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    en.json

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\i18n\en.json
                    • Size 30KB
                    • SHA256 34ab3f7475d3fd0af41c84dd1a01e14a3e847b82387803a12e4ce4727b86e457
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    zh-CN.json

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\i18n\zh-CN.json
                    • Size 18KB
                    • SHA256 c1de13c72c1ec1166a711e7d3e5f64209a93446b3b7e6d8aa231506def8892fd
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    maldives-palms.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\maldives-palms.js
                    • Size 9KB
                    • SHA256 ed2a33da1deea7d2dd23cd1377bee9a4751b87f8dfdef98aa1a116aa781d2d1c
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    preview-runtime.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\preview-runtime.js
                    • Size 1KB
                    • SHA256 e435aa03f901085096e2f85c1f277a90ebd612d0b4a00d06ce1ae8f8376d9121
                    • MD5 SHA1 SHA512 TLSH

                    render-diagnostics.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\render-diagnostics.js
                    • Size 7KB
                    • SHA256 f578a6eef2bf00cb9c37c332d9ef00e7f0216af5f90c7c3f7ef8f302c2bfc3ec
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    settings.html

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\settings.html
                    • Size 77KB
                    • SHA256 8bae20d2f9f20b5b0daf5973ad52985f13c0f26d2e23bef211d02450b337ac3b
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    share.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\share.js
                    • Size 30KB
                    • SHA256 f0145c86e29c33984caafacfeb8163546a1f76f46319d609fcac6b425abdce36
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    themes.json

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\themes.json
                    • Size 66KB
                    • SHA256 d55d1dd4ca1abcde5812ce6574f58a2222aeedeca08856c59aa2a7c7b5e8090f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    thumbs-data.js

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs-data.js
                    • Size 818KB
                    • SHA256 3368bc499e2a4a8711e3c3b8bf375bf224dc81e67c753ac49a38fdbd92676797
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    beach.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\beach.webp
                    • Size 65KB
                    • SHA256 017578bc5c8701fe25258b29130534c3d6c826bf0bdac407d627b6a83459058e
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    colorful city.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\colorful city.webp
                    • Size 83KB
                    • SHA256 501e0d3db353bcc86b95667d586fea0697ae827bb2413605b02e00587b249d16
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    forest.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\forest.webp
                    • Size 69KB
                    • SHA256 d70cf321e5a53b1c1bd26b58faebe0ec4f31fd4aa035a22b573aab0274f8aa3f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    hand draw city.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\hand draw city.webp
                    • Size 51KB
                    • SHA256 651f4911f803513b0a64fbd5ad2eeafee34ed5aad69e797d756eefcb97705050
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    lake.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\lake.webp
                    • Size 44KB
                    • SHA256 e22cfe9d6aa709c4605759d3d64a230806dad468d0c30d0ec55e3b60d7651637
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    lotus.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\lotus.webp
                    • Size 6KB
                    • SHA256 62f4aadd216123390ad4b76869815362f5eb5ca8fd42829fc7edf941e24772c6
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    maldives.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\maldives.webp
                    • Size 61KB
                    • SHA256 4ebfbc8e82c91376b9d52103961a466bde38ad2faeb19deff8baeb88e9b2f476
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    meadow.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\meadow.webp
                    • Size 42KB
                    • SHA256 5d36b1f2d4d59f6215298477d915a3b2e01a92c4f963be8ca7a4bbfa6bfea84d
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    nautical chart.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\nautical chart.webp
                    • Size 18KB
                    • SHA256 e8192416eff901efa8babafd964611597e4507371d4d4166d8b5abfbc16767c3
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    ocean.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\ocean.webp
                    • Size 45KB
                    • SHA256 a503d4f275ab1bf3ad9d34d1ef84deefd95aff16e9ace0cfdf50125f208b3ffb
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    old map.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\old map.webp
                    • Size 48KB
                    • SHA256 92fa0e21717236bac1ffa02881028bf754aee98a5e9513000582f13c5c305af1
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    pink forest.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\pink forest.webp
                    • Size 65KB
                    • SHA256 56b5ef811735ece52a9b65ab9c3bd928700eb76a7c12ef6b5f91b32d01926c5f
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    sky.webp

                    • Path C:\Users\Admin\AppData\Local\Programs\Deskland\prototype\thumbs\sky.webp
                    • Size 11KB
                    • SHA256 d706a0326d80230ec1bca68b86fa0129493eaaf73d7823acdb9075fce86654cc
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    LangDLL.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\nsc541E.tmp\LangDLL.dll
                    • Size 5KB
                    • SHA256 3c8b2629048c118e4fcf80188cbcdaad3a668270e49fd95d2809feccc98fe220
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    System.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\nsc541E.tmp\System.dll
                    • Size 12KB
                    • SHA256 afe032f942e2ed0bf7494ec08ba813f5739fb522c640bde81d30ecaf9f894432
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    modern-wizard.bmp

                    • Path C:\Users\Admin\AppData\Local\Temp\nsc541E.tmp\modern-wizard.bmp
                    • Size 25KB
                    • SHA256 3ad2dc318056d0a2024af1804ea741146cfc18cc404649a44610cbf8b2056cf2
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    nsDialogs.dll

                    • Path C:\Users\Admin\AppData\Local\Temp\nsc541E.tmp\nsDialogs.dll
                    • Size 9KB
                    • SHA256 9c76f4d53ceee2a471c936e0899688405e1009ce962d140e9acb49ed68d114cb
                    • MD5 SHA1 SHA512 SSDEEP TLSH

                    memory/460-517-0x000001C5924D0000-0x000001C5924D2000-memory.dmp

                    memory/460-609-0x000001C591EC0000-0x000001C591EC2000-memory.dmp

                    memory/460-643-0x000001C589E80000-0x000001C589F29000-memory.dmp

                    memory/460-514-0x000001C5925A0000-0x000001C5925A1000-memory.dmp

                    memory/460-516-0x000001C5924C0000-0x000001C5924C1000-memory.dmp

                    memory/460-518-0x000001C5924C0000-0x000001C5924C1000-memory.dmp

                    memory/460-519-0x000001C5924E0000-0x000001C5924E2000-memory.dmp

                    memory/460-610-0x000001C591EB0000-0x000001C591EB4000-memory.dmp

                    memory/460-612-0x000001C591ED0000-0x000001C591ED4000-memory.dmp

                    memory/460-613-0x000001C591EC0000-0x000001C591EC7000-memory.dmp

                    memory/460-602-0x000001C591EA0000-0x000001C591EA2000-memory.dmp

                    memory/460-603-0x000001C591E90000-0x000001C591E94000-memory.dmp

                    memory/460-605-0x000001C591EB0000-0x000001C591EB4000-memory.dmp

                    memory/460-606-0x000001C591EA0000-0x000001C591EA7000-memory.dmp

                    memory/460-570-0x000001C5926C0000-0x000001C5926C4000-memory.dmp

                    memory/460-574-0x000001C592FC0000-0x000001C592FC4000-memory.dmp

                    memory/460-419-0x00007FF9FDD20000-0x00007FF9FDD21000-memory.dmp

                    memory/460-575-0x000001C592F70000-0x000001C592F77000-memory.dmp

                    memory/460-595-0x000001C589E80000-0x000001C589F29000-memory.dmp

                    memory/460-544-0x000001C5924F0000-0x000001C5924F2000-memory.dmp

                    memory/460-542-0x000001C592510000-0x000001C59253B000-memory.dmp

                    memory/460-541-0x000001C5924F0000-0x000001C592506000-memory.dmp

                    memory/460-546-0x000001C592500000-0x000001C592502000-memory.dmp

                    memory/460-564-0x000001C592F60000-0x000001C592F62000-memory.dmp

                    memory/460-563-0x000001C5926C0000-0x000001C5926C1000-memory.dmp

                    memory/460-557-0x000001C592F80000-0x000001C592FAB000-memory.dmp

                    memory/460-556-0x000001C592F60000-0x000001C592F76000-memory.dmp

                    memory/460-552-0x000001C5926D0000-0x000001C5926D2000-memory.dmp

                    memory/460-551-0x000001C5926C0000-0x000001C5926C1000-memory.dmp

                    memory/460-567-0x000001C592FD0000-0x000001C592FFB000-memory.dmp

                    memory/460-566-0x000001C592FB0000-0x000001C592FC6000-memory.dmp

                    memory/460-569-0x000001C592F70000-0x000001C592F72000-memory.dmp

                    memory/460-578-0x000001C599CE0000-0x000001C599CE2000-memory.dmp

                    memory/460-572-0x000001C592FB0000-0x000001C592FB2000-memory.dmp

                    memory/3396-597-0x0000016035F20000-0x0000016035FC9000-memory.dmp

                    memory/4968-283-0x000000001C910000-0x000000001C960000-memory.dmp

                    memory/4968-326-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-297-0x000000001C970000-0x000000001C97A000-memory.dmp

                    memory/4968-298-0x000000001CC50000-0x000000001CC76000-memory.dmp

                    memory/4968-296-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-295-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-288-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-309-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-607-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-294-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-293-0x000000001D2A0000-0x000000001D34E000-memory.dmp

                    memory/4968-276-0x000000001CCD0000-0x000000001CE92000-memory.dmp

                    memory/4968-291-0x000000001C8C0000-0x000000001C8CE000-memory.dmp

                    memory/4968-279-0x000000001D3D0000-0x000000001D8F8000-memory.dmp

                    memory/4968-316-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-618-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-313-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-622-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-623-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-617-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-278-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-274-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-281-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-325-0x00007FF9DC050000-0x00007FF9DC9F4000-memory.dmp

                    memory/4968-271-0x0000000000D50000-0x0000000000D88000-memory.dmp

                    memory/4968-270-0x00007FF9DC1DF000-0x00007FF9DC1E0000-memory.dmp

                    memory/5956-655-0x0000016E57420000-0x0000016E574C9000-memory.dmp

                    memory/5956-596-0x0000016E57420000-0x0000016E574C9000-memory.dmp

                    memory/5956-429-0x00007FF9FDD20000-0x00007FF9FDD21000-memory.dmp