6b3386e9a70abe4cf0c34b2a48413de87283a51f42c7fb20743c8df367777b01

Resubmissions

09/04/2024, 22:29

240409-2edl2seh5210

09/04/2024, 21:30

09/04/2024, 20:57

09/04/2024, 20:24

09/04/2024, 19:08

09/04/2024, 18:06

09/04/2024, 16:22

Analysis

max time kernel
604s
max time network
605s
platform
windows10-2004_x64
resource
win10v2004-20240226-en
resource tags

arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
submitted
09/04/2024, 19:08

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Battly-Launcher-Windows.exe
Size 183.1MB
Sample240409-xtargseg53
SHA256 6b3386e9a70abe4cf0c34b2a48413de87283a51f42c7fb20743c8df367777b01
MD5 80c42d0373e2fbf2bf54a0d1e428a612
SHA1 1b2061c326fa540b81f358858b13f4b3c79a96c7
SHA512 ca4505c222ffae07da7c99b534470450a12c89b068042bf4bbbaa80f0bc7df56e70cb5c62eb5a01e5693b7ff31b820c44f0b389660642bca6f137ee57658d0ef
SSDEEP 3145728:vJcuNt6i+X0MdTUPo+YFawtU4odz5zA436E7IkGl0BkChNw5+VTmms+B6Q87:BcuN7+QYFjmPz5zAJ0wahNw5+VTTs+BA
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1904519900-954640453-4250331663-1000\Control Panel\International\Geo\Nation	Battly Launcher.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1904519900-954640453-4250331663-1000\Control Panel\International\Geo\Nation	Battly Launcher.exe

Executes dropped EXE 6 IoCs

pid	Process
3380	Battly Launcher.exe
2488	Battly Launcher.exe
3788	Battly Launcher.exe
212	Battly Launcher.exe
2120	Battly Launcher.exe
432	Battly Launcher.exe

Loads dropped DLL 14 IoCs

pid	Process
2968	Battly-Launcher-Windows.exe
2968	Battly-Launcher-Windows.exe
2968	Battly-Launcher-Windows.exe
3380	Battly Launcher.exe
2488	Battly Launcher.exe
3788	Battly Launcher.exe
212	Battly Launcher.exe
2488	Battly Launcher.exe
2488	Battly Launcher.exe
2488	Battly Launcher.exe
2488	Battly Launcher.exe
2120	Battly Launcher.exe
432	Battly Launcher.exe
432	Battly Launcher.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\System32\DriverStore\FileRepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	Battly Launcher.exe
File created	\??\c:\windows\system32\driverstore\filerepository\display.inf_amd64_71aa85b0e2292a7a\display.PNF	Battly Launcher.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Suspicious behavior: EnumeratesProcesses 4 IoCs

pid	Process
432	Battly Launcher.exe
432	Battly Launcher.exe
432	Battly Launcher.exe
432	Battly Launcher.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe
Token: SeShutdownPrivilege	3380	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	3380	Battly Launcher.exe

Suspicious use of WriteProcessMemory 40 IoCs

description	pid	Process	procid_target
PID 2968 wrote to memory of 3380	2968	Battly-Launcher-Windows.exe	107
PID 2968 wrote to memory of 3380	2968	Battly-Launcher-Windows.exe	107
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 2488	3380	Battly Launcher.exe	108
PID 3380 wrote to memory of 3788	3380	Battly Launcher.exe	109
PID 3380 wrote to memory of 3788	3380	Battly Launcher.exe	109
PID 3380 wrote to memory of 212	3380	Battly Launcher.exe	110
PID 3380 wrote to memory of 212	3380	Battly Launcher.exe	110
PID 3380 wrote to memory of 2120	3380	Battly Launcher.exe	111
PID 3380 wrote to memory of 2120	3380	Battly Launcher.exe	111
PID 3380 wrote to memory of 432	3380	Battly Launcher.exe	113
PID 3380 wrote to memory of 432	3380	Battly Launcher.exe	113

C:\Users\Admin\AppData\Local\Temp\Battly-Launcher-Windows.exe
"C:\Users\Admin\AppData\Local\Temp\Battly-Launcher-Windows.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:2968
- C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\Battly Launcher.exe
  "C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\Battly Launcher.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:3380
- - C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\Battly Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\Battly Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Battly Launcher Installer" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1648 --field-trial-handle=1652,i,17497691517575129212,1517808759198689386,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:2
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:2488
- - C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\Battly Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\Battly Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Battly Launcher Installer" --mojo-platform-channel-handle=1748 --field-trial-handle=1652,i,17497691517575129212,1517808759198689386,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:3
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:3788
- - C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\Battly Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\Battly Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Battly Launcher Installer" --app-path="C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app" --no-sandbox --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2456 --field-trial-handle=1652,i,17497691517575129212,1517808759198689386,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:1
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    PID:212
- - C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\Battly Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\Battly Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Battly Launcher Installer" --mojo-platform-channel-handle=3060 --field-trial-handle=1652,i,17497691517575129212,1517808759198689386,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:3
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:2120
- - C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\Battly Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\Battly Launcher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\Battly Launcher Installer" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=3008 --field-trial-handle=1652,i,17497691517575129212,1517808759198689386,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Drops file in System32 directory
    - Suspicious behavior: EnumeratesProcesses
    PID:432

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=4092 --field-trial-handle=3136,i,3192284747741020952,1225278682167953346,262144 --variations-seed-version /prefetch:8
1⤵
PID:5024

C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
"C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3552 --field-trial-handle=3136,i,3192284747741020952,1225278682167953346,262144 --variations-seed-version /prefetch:8
1⤵
PID:4160

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Battly Launcher.exe

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\Battly Launcher.exe
Size 168.1MB
SHA256 e799120b79693d6467e75a1f3a47696b1c4dba12b66a0efc82d5e5ff779ed8f3
MD5 cf0daf7c7befec7beda4e24c7805c05c
SHA1 bb0644bc24081142c559e930e032720a80e88009
SHA512 82215a85b35770d9f74519df25569d3afd7d4a865937ddf52a6cbd92f084edd9c98d1b43b18082e5d0af2afc2537ebb76f8c157ba137243b6496fb5e4b3e8521
SSDEEP 1572864:SQqT4eFUirK1e2zSQ5Rcw/N5cae/bHhrPdacyodvcPSBoHESUlyAzl/:kBKRcAMyAzB
MD5 SHA1 SHA512 SSDEEP

Submit Download

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\chrome_100_percent.pak
Size 150KB
SHA256 49aff5690cb9b0f54f831351aa0f64416ba180a0c4891a859fa7294e81e9c8e3
MD5 b1bccf31fa5710207026d373edd96161
SHA1 ae7bb0c083aea838df1d78d61b54fb76c9a1182e
SHA512 134a13ad86f8bd20a1d2350236269fd39c306389a600556a82025d5e0d5adaab0709d59e9b7ee96e8e2d25b6df49fefea27cdccefe5fba9687abf92a9a941d91
SSDEEP 3072:AzwJCGIekwENgMBsFAXg6VKdL2o418Gb0+VRLf0ld0GY3cQ3ERVm2I:Azw1IekmMBdQXK18Gb0OV8ld0GecQ3Ey
MD5 SHA1 SHA512 SSDEEP

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\chrome_200_percent.pak
Size 229KB
SHA256 4d5b51f720f7d3146e131c54a6f75e4e826c61b2ff15c8955f6d6dd15bedf106
MD5 e02160c24b8077b36ff06dc05a9df057
SHA1 fc722e071ce9caf52ad9a463c90fc2319aa6c790
SHA512 1bf873b89b571974537b685cdb739f8ed148f710f6f24f0f362f8b6bb605996fcfec1501411f2cb2df374d5fdaf6e2daaada8cea68051e3c10a67030ea25929e
SSDEEP 6144:gDQYaSN6svydrI8jDQUgx5GMRejnbdZnVE6YoppO4:NfSN6svydZ6edhVELoXO4
MD5 SHA1 SHA512 SSDEEP

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\d3dcompiler_47.dll
Size 4.7MB
SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
MD5 2191e768cc2e19009dad20dc999135a3
SHA1 f49a46ba0e954e657aaed1c9019a53d194272b6a
SHA512 5adcb00162f284c16ec78016d301fc11559dd0a781ffbeff822db22efbed168b11d7e5586ea82388e9503b0c7d3740cf2a08e243877f5319202491c8a641c970
SSDEEP 49152:KCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvhiD0N+YEzI4og/RfzHLeHTRhFRNc:xG2QCwmHPnog/pzHAo/A6l
MD5 SHA1 SHA512 SSDEEP

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\ffmpeg.dll
Size 2.7MB
SHA256 450d5e6a11dc31dc6e1a7af472cd08b7e7a78976b1f0aa1c62055a0a720f5080
MD5 bf09deeeb497aeddaf6194e695776b8b
SHA1 e7d8719d6d0664b8746581b88eb03a486f588844
SHA512 38d3cac922634df85ddfd8d070b38cf4973bba8f37d3246453377f30165cc4377b4e67c4e0bca0ffe3c3fa0e024b23a31ec009e16d0ab3042593b5a6e164669f
SSDEEP 49152:2gUBJTIe17EwJvr3OXtgTyFBcCen6yfUvUUP/bkLmV:ZY1vreXOuFePUP/bay
MD5 SHA1 SHA512 SSDEEP

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\icudtl.dat
Size 10.2MB
SHA256 f5170aa2b388d23bebf98784dd488a9bcb741470384a6a9a8d7a2638d768defb
MD5 e0f1ad85c0933ecce2e003a2c59ae726
SHA1 a8539fc5a233558edfa264a34f7af6187c3f0d4f
SHA512 714ed5ae44dfa4812081b8de42401197c235a4fa05206597f4c7b4170dd37e8360cc75d176399b735c9aec200f5b7d5c81c07b9ab58cbca8dc08861c6814fb28
SSDEEP 196608:hpgPBhORiuQwCliXUxbblHa93Whli6Z86WOH:n8wkDliXUxbblHa93Whli6Z8I
MD5 SHA1 SHA512 SSDEEP

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\libEGL.dll
Size 467KB
SHA256 afef052c621f72ba986d917a9e090d23a13f4ab6bc09f158eeb73fd671b94219
MD5 3a5cbf0ce848ec30a2f8fe1760564515
SHA1 31bf9312cd1beaedaa91766e5cde13406d6ea219
SHA512 bd5713e1d22145b4cc52f4e46b464f443aad6f783a5793268e7d9dca969f27b70e706eecd54cb01be1c94256e6a95864c6b7e50027cef7fa870cdb16820ad602
SSDEEP 6144:FaEXc0Izd+rYvqNUMbh9L8OgKcG4BEFATaxlI/:/dIZ+rwqNUMbFL2BE6W8/
MD5 SHA1 SHA512 SSDEEP

Submit Download

libglesv2.dll

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\libglesv2.dll
Size 7.3MB
SHA256 3a39137dcee6cb6663ae9cca424b6b05cf56c0ad7e32fb72cb94549ea9dbcae8
MD5 c783045e4b7f00c847678d43a77367f7
SHA1 7f9192ce0b23ac93561aeec9d9c38daa3136c146
SHA512 64e6d4fc84f1217ceef05a22ad63a6618ffdc470b1faf4ad9e2d7bab59e9285527b9c5fd7ea4be673a08b9466434e3c098e839bf6955597e3d8aa0e80589f4a3
SSDEEP 98304:A99bSJY8juRSvODN1uVZ5U7NJhbXm3fP:Aeu8iEOx73hzCfP
MD5 SHA1 SHA512 SSDEEP

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\locales\en-US.pak
Size 440KB
SHA256 02b97817b6eebd7caeaaff750f6462abc68911c398ddf0571b7900ff9b4ea9a2
MD5 731c45f9f23957acc11b43d775758aaa
SHA1 12e66417a2dc0c5211ed67f026208ef02fcb40af
SHA512 1a008df585ef76d9cf4459fc3e617b8d4397e7078c77852712fc7cf4f304081bc5195243437e64074016b05a8cd671db93666042e59b959595ba854ceb330a81
SSDEEP 6144:UVmES/piHsJfca0w3jMMP9eD3D9faYLbcNx5uSbngP/eoQwB:UmzjZlMMY3DzA5uS+QwB
MD5 SHA1 SHA512 SSDEEP

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources.pak
Size 5.0MB
SHA256 5d63acd4034f7771ca346d138d7478014abf1f3f4386d07fc025dbc2c2bc0bff
MD5 67bb5e75ceb8ced4c98cf0454933cb45
SHA1 c2b1c8c8d753318bc5ec18762c27512a5eb9f9cd
SHA512 fd213d59ebc625f6f8b20cc8fde1a22132ce827b81deaddb9ca7993fe0d9616de17e089def338d23c4b6bbd7d3a931ee73aa329325eaa17f8145a58fe11d8c38
SSDEEP 98304:cC+ks/PeeUfLix3zJ/3JKKSa+cgHprwrNl8dtSip6QaVaK2nguoM10mpmjy+0VxW:c1k035B5K3cQpkrNi/SQaVN2guJ10Le4
MD5 SHA1 SHA512 SSDEEP

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\node_modules\ejs-electron\index.js
Size 4KB
SHA256 4574224bdcf1a47aab456dbec7b485d7cb8bd62bea5295f85db622b3ebab0c1b
MD5 d441fba9399d196f943308f66d215d95
SHA1 76557f8a00782c3503b62784098b7832256c136b
SHA512 7f11d59d870c0ae386b6c0ae4a65b2ab49445ce8b36528323bb2a03a8a55611c8e71d2c7439f0a57c69fb7cfdc2d05fde59e535e0da36adf24947a131db18a0f
SSDEEP 96:Px5TgcV51Bi0BT/ddv6KEAHTD9MJ4ZVM2:PjrVfjPdPpk4Z1
MD5 SHA1 SHA512 SSDEEP

Submit Download

Mime.js

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\node_modules\ejs-electron\node_modules\mime\Mime.js
Size 2KB
SHA256 9482411a27e56e69e9ff5ae077b25f64c38768ae268ac07ab74a9896b582b6a9
MD5 5a77829e31fd521878c9484a90ff107a
SHA1 73efaff8e2e9adb871396c15c076dbf28757949a
SHA512 dc542b656f18818fc5caab6bebaf67f2f33691661196fd588eeba8bb8d1520ea61f76df314d407e0e23b405706889f0e73f0bc61871a36764d2c3564a44b1c35
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\node_modules\ejs-electron\node_modules\mime\index.js
Size 127B
SHA256 7b35e6b3b981b498b62860b99063916772a7a199125866d4593db952ba1c14b9
MD5 f18d3eb05bbc4d65415ee72c4b5d4dff
SHA1 e2d3efd8917c4ff9cbe668474891269d3fedcb37
SHA512 65316d6a06666e5acdb6fd293fcb737109a264fb6ed1174e7853f86b32d2b334fab3280d28535be21524fa15f86bc8f16b663461439d6bdf4ead0cba4b297eb5
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\node_modules\ejs-electron\node_modules\mime\package.json
Size 775B
SHA256 a1dccf7b9e97739c70cfe4a205babae71016a576f4385a8d66308978f21e0d19
MD5 41460dd956f1244d052cbe727cb6be27
SHA1 4982079e4fc60559ed7fa2c066bf71fc7b74d9b4
SHA512 4e273dcbe5b5bde34c1ba8c0bf35251037b058fe3eef5703e53027a53b9f6661db97411be2ae2e7b4353adf5d77bb389566a81258adb8f11cac679ee6450c978
MD5 SHA1 SHA512

Submit Download

other.js

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\node_modules\ejs-electron\node_modules\mime\types\other.js
Size 25KB
SHA256 ee0e65cdfde6e492be9c52e35bffcbe0e0fd9a5be1a18fbaa7cbbc7b9b406934
MD5 ce7fcb8480cc926c86d46e4b1fb6cc9d
SHA1 dbfc26ed679cce39b3ecb6bee5ef5968cea6408a
SHA512 c5c943a1722aa52c3f85f28189258ebb4e3ed025c98bfa0d7ce978de2587b10239c578d5d96fb63f85bd8ec16d7d156847268cc14421cb920832688984fc0cc9
SSDEEP 384:DDwq8XqM+/vGmvLDMWTkVVpwQ4KEXrxoEYlzzO73LnAWD5L4pMnmEGiohqZ:cXqZGqKEXrxoEYJO7B5L4pMtrZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

standard.js

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\node_modules\ejs-electron\node_modules\mime\types\standard.js
Size 9KB
SHA256 70aaa6f9c1b7caf38db2eff138406911368729b8dfb478fe70078e46ec1824bc
MD5 5119196e906ee770dfd3610bcfbd0587
SHA1 a21f9b1eba88b1af8d16231a5759ffb8108a645c
SHA512 30d30134c1044d36bf4ffd93cb0b6f003cb702a14b9e006bbc9a18a7e9e6915f18c22eb0b8bcfb5cae6cc15636726e0d8ab59189610550140ac90e51f45c324e
SSDEEP 192:DmiyyOhrQXbK/wWOI0ouK4MWZwfLMcbskpDmczLmuv2hL40kvS+v:DmiyLMc4kJzXbS+v
MD5 SHA1 SHA512 SSDEEP

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\node_modules\ejs-electron\package.json
Size 367B
SHA256 c30372a8a6ef7a7cf021a48200d7ca770ca5ad68022e92c6d15bd27878dc326a
MD5 381be2da7b731d7e9f68c149ef521e46
SHA1 11f4eabe7d5c1236c02c9c6e1ef2e8f58226a2e3
SHA512 0595738800f268106a61f3526448bb1c89ed37db1950d00b7fc1f1d2874cfcd1bf7454b49d757614543caf756407d6594e2246f68d6916db51553c95e22c4f01
MD5 SHA1 SHA512

Submit Download

ejs.js

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\node_modules\ejs\lib\ejs.js
Size 26KB
SHA256 9ff1cb7fb0a7dbd822e04d35e50560a199926cc323b5aa11f1e89556d7b89814
MD5 e7286ffae51527e51efadb4ce65d1dd8
SHA1 2170a351835c1ff3ef58faab251e3d5ce5dfe9d6
SHA512 5a551b8ae5dc38eb4893acb2876046ebe27ed3852777b7e832173bfba8d5470b08495232811a82edd0662634bc6351e51d7d3509c87663900ca122a15e1d50e7
SSDEEP 768:5hrmiaBpEtn+vviZLewvGikIkuWk/h3AHTPfc:5hCNMtn6viZeqGitAHT8
MD5 SHA1 SHA512 SSDEEP

Submit Download

utils.js

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\node_modules\ejs\lib\utils.js
Size 6KB
SHA256 d77d4660b6fd5131949906b67fa4456223c308bd13a88d7dadbd2e10e5e7ace4
MD5 c4ed9f400aaac2c0b2ebe7c7f5795b1d
SHA1 4e88b60293299d879774768f84cf38524c3d34c3
SHA512 100faa0f015ba8001eff8dc435174dde0af2d8717976448a3202272e7d0edde3d149f0a0acc6469f8d86fa0b15b79237cc1ffd5efb9456e0bbb625e6cfd53242
SSDEEP 192:5/XHoDdyJHDTL9Y1WZizh/A2qRXXNrG6FU5:5/4YHDP9Y1WZiOPw
MD5 SHA1 SHA512 SSDEEP

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\node_modules\ejs\package.json
Size 748B
SHA256 ba32b2005d817a23dc0e0b57c248b53b8b0316e8271fa433780750a954d56e69
MD5 c811f299cfedf923d32f6126894283b1
SHA1 4d25c24f5ff44f2963d08d74d474b03127c02ecf
SHA512 ce77756d8c128eff055923c6622f3b438a3eba87513fc6d962180b93762cb325c5b96c89e05e1df4a7ef227d35ad1de659d28c893742c5a1e8912b365b1a3fcb
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\package.json
Size 530B
SHA256 9f66eafe35c475aaba1157c877406f448273c6e4811a1ef2fce10aa0d5eee706
MD5 e102ea0d9f0e36be31e25b787c35ca2c
SHA1 022ea237f37e95570872a64ba6af1e2f63cb0dab
SHA512 426e0af432f24562e548bf53ea972636c494f0c5b840b9e6affbc40f32fdb9de3cde3c4fd83d9a221eae9832a42631b2b178a3d46f1b2a56d1a82978fe32fc51
MD5 SHA1 SHA512

Submit Download

ads.ejs

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\src\ads.ejs
Size 1KB
SHA256 213b9c67599b6c11cab64d5c9c2606eea16dafaceb028e93a5b9d4ad6c5c33b4
MD5 ee4146fab6611d7ba9d24e71d9b6363a
SHA1 0e0601beae6e65511660740b79fd18381601ba21
SHA512 9412dd10b99d79c10ba39e6e3fa027684b19f90361a65b25ebca1b9ccfc437fb303713ebf7e7be6906a4383302425c09a5cb3d0f446929f8d84ff8c462796fab
MD5 SHA1 SHA512

Submit Download

icon.ico

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\src\assets\icon.ico
Size 11KB
SHA256 9a6b51f26c9efb993a02f67582477d9b524b029af5d6b1bea046840012dc110e
MD5 372b8e595552272d8980d7ce68a22a45
SHA1 3458abecc3172f86c0a42f889402a700964a7bdc
SHA512 bb712405ea0c0ec66add82abd04ca8f32e07bea7e4bbdcb2bce53a16caf8d9bf2a514ec8e647739e739f995931fc6d04d155e8b2f381fb93765024a4aebc1fa4
SSDEEP 192:5oE/UpLYcasZP5WUZ0iClTa8VhjO/wulukJ4M8JQTtDdtEDQ76nE/Vcb8VM8eQvP:j40cNZP5rqiClfhQwuUek6tDEsiockfP
MD5 SHA1 SHA512 SSDEEP

Submit Download

index-it.js

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\src\assets\js\index-it.js
Size 31KB
SHA256 87d0a0737ce370ccde1a681b101543b80b01e39253f6ee7acddeff80138711b7
MD5 4e27261af95dc7367d1eb89d3f9a57ee
SHA1 3935dbd68a2194e6d1fa743efb0abda170a5168a
SHA512 ff008bb8bde2db084f88302b4b73ccd9382baf1a23747b786f11e7cca9da94a5adcbb102250afe0ab46e0712bbfa73a93f6b4e3033b90695bfdedb5bb77da1ce
SSDEEP 768:FBeznYq5DnYUvffnYnZH54UiD6YSj75zHVPEt:FEznYq5DnYUvffnYnZHFxX5BPEt
MD5 SHA1 SHA512 SSDEEP

Submit Download

eula.ejs

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\src\eula.ejs
Size 981B
SHA256 df0dc42c4ec4e3dbed33e6fd855e977f3bfb4cc2a49a8402ead53bfb9f544d6e
MD5 0887c927cc2ba0250bea889fd5d40660
SHA1 8ae1b01d3c501a15cfeade573a13b93c44ae34d5
SHA512 01dd4c0e622e95adc652fd06c8503864506cae7466d4114bd11938f69a5b97065ecedf2a9d516d485abaa33fc3442bcd9de46f6a00b0979c11b05951bf2183db
MD5 SHA1 SHA512

Submit Download

footer.ejs

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\src\footer.ejs
Size 4KB
SHA256 a2da2ca46128fdf7530a27ab8345986278cda1b78d7a075ec0fb11b66474fa8d
MD5 d6c4aec009f8a181f5f805169cbad491
SHA1 7a7263138772c78c8c4330a2ed6cfbd3092c8985
SHA512 d0a2d60113cdce329303f9657b741317e2f5b691d248fa2131b6668e07e7db9a5292ab734456681f335b71c732e003009631113cf14f218e13aaad7d4e8bb4d7
SSDEEP 96:psMI4kH53DYmJ+PV29YZKko4m722rKqiImsMSQLXvnWUd:TI485i+X3j4znWUd
MD5 SHA1 SHA512 SSDEEP

Submit Download

header.ejs

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\src\header.ejs
Size 38KB
SHA256 3cf434b126e4369ffb8e9f4d489daee1aad9f47828850386984b3c752cdc7042
MD5 eef60d35e9f75d3c7030d0574250e56f
SHA1 6d29148b90187fa1583652bc8799e65efa10f637
SHA512 529bf36dacd2fc808e63a8091a8aa92f5d3d39c23077bc72298bf052f1bdcd6fc05282608ce5337643d3c1a794bdde2b8d364f7deb0c4b7ae75810be3bdb165b
SSDEEP 768:Xkos/1jkos/1kQj9U38pO4MftndjyQj9U38pO4Mftndjh6:c/a/OQj+O9MftdjyQj+O9Mftdjh6
MD5 SHA1 SHA512 SSDEEP

Submit Download

index.ejs

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\src\index.ejs
Size 880B
SHA256 88b3b17146349c92955cc88bdd70ef1fa414bf624d771a0b8ed0d7f2d40d76cd
MD5 5cb43b3d3c087f4dfb7ef3604a39e757
SHA1 62796be76ccb921544aa6279dd0139b00450e24a
SHA512 b5247488c6dbd4f682d27884f3b516df00ad6725665f79c2d4ea76c1a54d318a31e32c6f96a11fafc382d36097e50f505e0cba904e13b4d45afa96544401eb81
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\src\index.js
Size 4KB
SHA256 79912a218664d36de8b3f1adc69b43b2ccb67bebe39a3d38666bbbf4173cd411
MD5 c5cc3d4ff4268a128ca55321b7ad4f70
SHA1 87a0ad54e6b73a40fd5cc7e801603aa50e4ea973
SHA512 f55a303b010129a6b342e62b9a9d4e32297d7648c3054ce40d26d939cc7ef776d42438ce78d93a4897f5a6679a1477d2590e152dc601d174e53fffe8010f0e1b
SSDEEP 48:083p97I8eD+SvMjBbd0I5iY2B8jed/oyvfniQm7DQ1HCqo93piQiVNjxJ9B1vXC:npxI8kITRqdgeniQwDQ1HCqoNpiHJNXC
MD5 SHA1 SHA512 SSDEEP

Submit Download

install-options.ejs

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\src\install-options.ejs
Size 3KB
SHA256 f8981d7e2001efe11511d6779675bcbead2fa27d6557a54dcb8492ea958a1454
MD5 877f16609a32c46ff5f8eab3648b1078
SHA1 5a3d5785704f016235b96fdbe04a9de69b48e203
SHA512 c6df43c91537d13d75e1b2e1b35fc2b452f7d62326f0074c24e975e18a47d31bade8a9e84514091bd537b8cb016c60e87920249cee73370188be045c628a30b0
MD5 SHA1 SHA512

Submit Download

language.ejs

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\src\language.ejs
Size 5KB
SHA256 9016b2792ecdd22276e1d1e4172b4e598478f5668b27beb005e2219d229f216c
MD5 3fbf51eb59e0f0b050f5abcd2fcd3dca
SHA1 90d676bc914c2bebf33464dd088952abbedd56f3
SHA512 c5e04500ebdd922d989594e3a0822fa9a9557d749e60af86ab1e309847342431a606f5e604538fa5d5666535bc68c4f5fbeeb4cdda9a832384505aac1ba2d998
SSDEEP 96:rI0XL+SMHnL1F8dmWIiuQiCui8HoiqmiW2iKC:E0QnL0X5uhCf8HZqXWHKC
MD5 SHA1 SHA512 SSDEEP

Submit Download

logs.ejs

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\src\logs.ejs
Size 1KB
SHA256 62e112e61b5c9c582f5a9aac790a9275be8a560d1edb93c3a6879330298e53fc
MD5 6fc7c3d8bac3259202cb981acf8b18b6
SHA1 f3963b01f9a2df4e9b0b989b4e7ea8f55198ddfa
SHA512 7d719b9698344ba99d3d860e28421bc7cfaf2e9d80cfc6da472413800900aa64f055add8269553e9838aa998df4d6575c6bf0091cf6263a6ea0c2537c36b5df0
MD5 SHA1 SHA512

Submit Download

path.ejs

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\resources\app\src\path.ejs
Size 2KB
SHA256 870496c864624ebce9da0b98ea830249897a2a2317f6a816751f0edb30aeb32b
MD5 21e1d48f90eb1017539741c7a74cf059
SHA1 7906534922134e26a5c59324aafad63e20bf10ba
SHA512 2cd3d44337c5e1b794a2233d25fef122a97910d7f7d32cb811c0fa3f84397dd4781e917ba3db0e024384439413925dd0ab73888d3d82119951b86192e807685b
MD5 SHA1 SHA512

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\v8_context_snapshot.bin
Size 663KB
SHA256 875515af4e7254458c17a98bed087fc609d45fbc8ebf60663e112c37204f6840
MD5 81870fb2f641c8b845e9c6d1a632f0b7
SHA1 fcd47d8d1232c189a1c4087bb03a015ce14c25ba
SHA512 7748c8fb6f356aa45023a56245c43c5171d0413617fb1ac6c75650be75bbe94bd5528e9aa83cd9df9a08af65540a76ab59bc866e5dcf0fa7284122f290bd45d3
SSDEEP 6144:L/h8ML2Zu/Bgu0+s9oCMz0nMGo/sPT5UcQD6QynHQx9x+zi8W8icW0K8w+E2Xxk8:LyMSZu/Bgu0A+LlBCTf3zM2ZkZilXLD8
MD5 SHA1 SHA512 SSDEEP

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\2eQ0CsStwAd5ChwrwC1YIjlREnY\vk_swiftshader.dll
Size 5.1MB
SHA256 08e34bc25653f9357a4ccf62966d698b7cc6265dc668046a28403ae5786132ee
MD5 0a071201e4dd76996e273c81533bfa74
SHA1 5c92c634027692c344a8e74eab8b4d5c3e049497
SHA512 b5de6548c5c743b6f119183fa06aaf67dcd4cdbc3542378ff87916b670ace1e2f4270f6dcaa4caabd01460c638bd02b565267e7bd9617ca92d72187d374bb7d6
SSDEEP 49152:+VZ+czjbPInepnfJxIlWY1ErtDlEYK1OiscZ2m0j4FfVw5V8bhg/Msm26jTmenM4:cZ+aDJkD01VKOOO
MD5 SHA1 SHA512 SSDEEP

Submit Download

BgImage.dll

Path C:\Users\Admin\AppData\Local\Temp\nsf93E4.tmp\BgImage.dll
Size 7KB
SHA256 e27efa5dfde875bd6b826fafb4c7698db6b6e30e68715a1c03eb018e3170fc04
MD5 487368e6fce9ab9c5ea053af0990c5ef
SHA1 b538e37c87d4b9a7645dcbbd9e93025a31849702
SHA512 bb3ed4c0d17a11365b72653112b48c8c63ab10590dda3dfd90aa453f0d64203000e4571c73998063352240e1671d14da5ee394439899aaa31054fa2e9b722ea7
SSDEEP 96:8efk1LFJaO1/radJEaYtv1Zs4lkL8y3A2EN8Cmy3uT24j7J3kWyy/:tcTJa2roqJyA2EN8diuTHje
MD5 SHA1 SHA512 SSDEEP

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsf93E4.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsf93E4.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
MD5 SHA1 SHA512 SSDEEP

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Battly Launcher Installer\Network\Network Persistent State
Size 300B
SHA256 666a97b3f00f8f973a59413ffa093dab6a441b7fc0808677321ed73adab220c1
MD5 0e1db893123f347abdabc9e9c13b4fb2
SHA1 6b0fd3fc7794b25b5b4dc6b6b8021074fb86ab97
SHA512 4c3046968a5676518c40436bba09d16068c85f5a26fbd18da888303f72fe28f0ba02daa4e5f71daa768ae005221f7152b3dce9fc32dd00b85ddbebb30186acc0
MD5 SHA1 SHA512

Submit Download

Network Persistent State~RFe5a4e60.TMP

Path C:\Users\Admin\AppData\Roaming\Battly Launcher Installer\Network\Network Persistent State~RFe5a4e60.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
MD5 SHA1 SHA512

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/432-532-0x000001D53E960000-0x000001D53E961000-memory.dmp

Download

memory/432-534-0x000001D53E960000-0x000001D53E961000-memory.dmp

Download

memory/432-533-0x000001D53E960000-0x000001D53E961000-memory.dmp

Download

memory/432-540-0x000001D53E960000-0x000001D53E961000-memory.dmp

Download

memory/432-539-0x000001D53E960000-0x000001D53E961000-memory.dmp

Download

memory/432-542-0x000001D53E960000-0x000001D53E961000-memory.dmp

Download

memory/432-541-0x000001D53E960000-0x000001D53E961000-memory.dmp

Download

memory/432-544-0x000001D53E960000-0x000001D53E961000-memory.dmp

Download

memory/432-543-0x000001D53E960000-0x000001D53E961000-memory.dmp

Download

memory/432-545-0x000001D53E960000-0x000001D53E961000-memory.dmp

Download