# RoadGrenadier/CorelDraw > The repository offers a "pre-activated" CorelDRAW installer for Windows x64, run via a PowerShell script downloaded from an external domain. It is not source code or an official distribution, but an obfuscated loader disguised as a software installer. - Magnitude: 5.2 out of 10 — Early signal - Stars: 200 total · +0 stars measured 2026-11-01, 00:45–02:07 UTC, ≈ 164 by evening - Star trust: star growth looks organic - Category: Security · Created: 2026-10-31 · Last push: 2026-10-31 - GitHub: https://github.com/RoadGrenadier/CorelDraw · Page: https://gitnova.dev/en/r/RoadGrenadier/CorelDraw ## Useful for - Check the repository for signs of a malicious loader before running - Study the PowerShell script obfuscation scheme for educational purposes ## Why it’s here - Star-counter measurements on 2026-11-01 (UTC), 00:45–02:07: 200 → 200 stars (+0). This is the change over that interval. - Estimated end-of-day forecast: about +164 stars, using observed gains and the previous day. - The repository is 1 day old and already has 200 stars. With less than two weeks of history, there's no usual pace to compare the spike against yet. - Top new repositories this week: #138. ## Star trust Star growth looks organic. Star-trust labels are heuristics based on the repository’s behavior, not a check of every stargazer. ## Numbers - Forks: 0 - Issues and pull requests: 0 - Watchers: 0 - Average over the last week: 182 per day - Usual pace: too little history (under two weeks) - Stars in the last hour (measured): 0 ## Stars per day, last 2 days (oldest → newest, today is partial) 2026-10-31 … 2026-11-01: 200, 0 ## Magnitude by day, last 2 days 10-31 0.0, 11-01 5.3 ## Spotted in now - Top new repositories this week: #138 ## Similar by description 1. **sidestonetrap/SonyVegas** — 5.2 · Early signal · Other · +0 stars measured 2026-11-01, 00:45–02:07 UTC, ≈ 164 by evening A repository that pretends to be a Sony Vegas Pro installer but actually instructs users to run an obfuscated PowerShell script downloaded from an unknown domain, with advice to disable antivirus protection. Full card: https://gitnova.dev/en/r/sidestonetrap/SonyVegas.md 2. **KnotSteersmanAtrium/Cellebrite-UFED** — 5.2 · Early signal · Security · +0 stars measured 2026-11-01, 00:45–02:06 UTC, ≈ 165 by evening A pre-activated standalone Windows installer for Cellebrite UFED 2026, distributed via a PowerShell download script for offline deployment. The README gives no real technical details about the tool itself. Full card: https://gitnova.dev/en/r/KnotSteersmanAtrium/Cellebrite-UFED.md 3. **HydraFinancial/Auslogics** — 5.2 · Early signal · Other · +0 stars measured 2026-11-01, 00:45–02:07 UTC, ≈ 164 by evening A repository offering a pre-activated standalone Windows installer for Auslogics utilities, distributed via a PowerShell script that downloads and runs remote code. It is aimed at users who want an offline, ready-to-run build without a… Full card: https://gitnova.dev/en/r/HydraFinancial/Auslogics.md --- Magnitude (0–10) measures how fast and how unusually interest in a repository is growing right now. It is not a quality score. Days are UTC. “So far today” is a fact; “expected by the end of the day” is a forecast. Summaries and use cases are written by an LLM (DeepSeek V4.1 Flash) from the README and may be inaccurate: verify specific claims (benchmarks, speed, hardware) in the repository itself. Data as of 2026-11-01 02:16 UTC, updated every 30 minutes.