11c9d470187bab5a6176089d7d1a5dc99551ee9fb049b96cd7ca91312b3df8f4

Analysis

max time kernel
151s
max time network
168s
platform
windows10-2004_x64
resource
win10v2004-20241007-en
resource tags

arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
submitted
22/10/2024, 00:20

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Battly-Launcher-win.exe
Size 255.3MB
Sample241022-amx7waxepl
SHA256 11c9d470187bab5a6176089d7d1a5dc99551ee9fb049b96cd7ca91312b3df8f4
MD5 673b49b3ef5b6efc4254c29f3478bd93
SHA1 5e7d5b6e0a1c9b8ec64b3522d6ffdc27e18aed1f
SHA512 cce24c3cf88b01800ac6aafb78a146ca10e3c44db17ab9ab7a6152a66f369f68ea2a2ed4ab649001ae1aa9dd91017916b5520bbf914e6f43873e54631cad4d23
SSDEEP 6291456:a4roODYytuYUWT2/yWnG8QSOXDyCGQxGAOpuJp2gpJUaN6:a4PkCW3QSOXDAYFZJwgnUaN6
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000\Control Panel\International\Geo\Nation	Battly Launcher.exe
Key value queried	\REGISTRY\USER\S-1-5-21-3442511616-637977696-3186306149-1000\Control Panel\International\Geo\Nation	Battly Launcher.exe

Executes dropped EXE 5 IoCs

pid	Process
4996	Battly Launcher.exe
3560	Battly Launcher.exe
3024	Battly Launcher.exe
4920	Battly Launcher.exe
4088	Battly Launcher.exe

Loads dropped DLL 13 IoCs

pid	Process
3564	Battly-Launcher-win.exe
3564	Battly-Launcher-win.exe
3564	Battly-Launcher-win.exe
4996	Battly Launcher.exe
3560	Battly Launcher.exe
3560	Battly Launcher.exe
3560	Battly Launcher.exe
3560	Battly Launcher.exe
3560	Battly Launcher.exe
3024	Battly Launcher.exe
4920	Battly Launcher.exe
4088	Battly Launcher.exe
4088	Battly Launcher.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Battly-Launcher-win.exe

Suspicious behavior: EnumeratesProcesses 2 IoCs

pid	Process
4088	Battly Launcher.exe
4088	Battly Launcher.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe
Token: SeShutdownPrivilege	4996	Battly Launcher.exe
Token: SeCreatePagefilePrivilege	4996	Battly Launcher.exe

Suspicious use of WriteProcessMemory 38 IoCs

description	pid	Process	procid_target
PID 3564 wrote to memory of 4996	3564	Battly-Launcher-win.exe	91
PID 3564 wrote to memory of 4996	3564	Battly-Launcher-win.exe	91
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3560	4996	Battly Launcher.exe	92
PID 4996 wrote to memory of 3024	4996	Battly Launcher.exe	93
PID 4996 wrote to memory of 3024	4996	Battly Launcher.exe	93
PID 4996 wrote to memory of 4920	4996	Battly Launcher.exe	94
PID 4996 wrote to memory of 4920	4996	Battly Launcher.exe	94
PID 4996 wrote to memory of 4088	4996	Battly Launcher.exe	111
PID 4996 wrote to memory of 4088	4996	Battly Launcher.exe	111

C:\Users\Admin\AppData\Local\Temp\Battly-Launcher-win.exe
"C:\Users\Admin\AppData\Local\Temp\Battly-Launcher-win.exe"
1⤵
- Loads dropped DLL
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:3564
- C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\Battly Launcher.exe
  "C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\Battly Launcher.exe"
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of AdjustPrivilegeToken
  - Suspicious use of WriteProcessMemory
  PID:4996
- - C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\Battly Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\Battly Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Battly Launcher Installer" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1740,i,11534888909330933098,10227254590566827893,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1728 /prefetch:2
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:3560
- - C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\Battly Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\Battly Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Battly Launcher Installer" --field-trial-handle=2124,i,11534888909330933098,10227254590566827893,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2120 /prefetch:3
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    PID:3024
- - C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\Battly Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\Battly Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Battly Launcher Installer" --app-path="C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app" --no-sandbox --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=2548,i,11534888909330933098,10227254590566827893,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=2544 /prefetch:1
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    PID:4920
- - C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\Battly Launcher.exe
    "C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\Battly Launcher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=4318 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\Battly Launcher Installer" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAEAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=3324,i,11534888909330933098,10227254590566827893,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version --mojo-platform-channel-handle=1164 /prefetch:8
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Suspicious behavior: EnumeratesProcesses
    PID:4088

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

chrome_100_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\chrome_100_percent.pak
Size 148KB
SHA256 7dd5485def22a53c0635efdf8ae900f147ec8c8a22b9ed71c24668075dd605d3
MD5 cb4f128469cd84711ed1c9c02212c7a8
SHA1 8ae60303be80b74163d5c4132de4a465a1eafc52
SHA512 0f0febe4ee321eb09d6a841fe3460d1f5b657b449058653111e7d0f7a9f36620b3d30369e367235948529409a6ce0ce625aede0c61b60926dec4d2c308306277
SSDEEP 3072:iz8JCGIdkwTPaNkx0auKdL2o418Gb0+VRLf0ld0GY3cQ3ERVm2I:iz81Idk8aqT5K18Gb0OV8ld0GecQ3Er2
MD5 SHA1 SHA512 SSDEEP

Submit Download

chrome_200_percent.pak

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\chrome_200_percent.pak
Size 223KB
SHA256 2408969599d3953aae2fb36008e4d0711e30d0bc86fb4d03f8b0577d43c649fa
MD5 e9c1423fe5d139a4c88ba8b107573536
SHA1 46d3efe892044761f19844c4c4b8f9576f9ca43e
SHA512 abf8d4341c6de9c722168d0a9cf7d9bac5f491e1c9bedfe10b69096dcc2ef2cd08ff4d0e7c9b499c9d1f45fdb053eafc31add39d13c8287760f9304af0727bf4
SSDEEP 6144:3DQYajN6svyABnI86fTugx5GMRejnbdZnVE6YoppO4:cfjN6svyABOa6edhVELoXO4
MD5 SHA1 SHA512 SSDEEP

Submit Download

d3dcompiler_47.dll

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\d3dcompiler_47.dll
Size 4.7MB
SHA256 af7b99be1b8770c0e4d18e43b04e81d11bdeb667fa6b07ade7a88f4c5676bf9a
MD5 a7b7470c347f84365ffe1b2072b4f95c
SHA1 57a96f6fb326ba65b7f7016242132b3f9464c7a3
SHA512 83391a219631f750499fd9642d59ec80fb377c378997b302d10762e83325551bb97c1086b181fff0521b1ca933e518eab71a44a3578a23691f215ebb1dce463d
SSDEEP 49152:hCZnRO4XyM53Rkq4ypQqdoRpmruVNYvkaRwvdiD0N+YEzI4og/RfzHLeHTRhFRN1:oG2QCwmHjnog/pzHAo/Ayc
MD5 SHA1 SHA512 SSDEEP

Submit Download

ffmpeg.dll

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\ffmpeg.dll
Size 2.6MB
SHA256 e898ae4c95ee58d10d37cf10761073df66ff99f3c49d0eebc34d13398873ce0b
MD5 f01daa7b116223c02872328b4a8c47d1
SHA1 9455ee880568a874cf939d7e062e153babe3f81f
SHA512 eda19e29482fe1404824c692acdc48de3a9f2324b1d8f77a5fec7cf6675e00ea649c026a7211ca04745fe726f269f50c724e31dca8c836f8a3f0d48eb694873f
SSDEEP 49152:R1nRu1gjn93AXtsX7I8g4AScbz6Ox+pen6yfmb+ST1PqRrY7:RJsf83Sn6Ox+tP57
MD5 SHA1 SHA512 SSDEEP

Submit Download

icudtl.dat

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\icudtl.dat
Size 10.0MB
SHA256 9ae98c06cbb0ea43c5cd6b5725310c008c65e46072421a1118cb88e1de9a8b92
MD5 ffd67c1e24cb35dc109a24024b1ba7ec
SHA1 99f545bc396878c7a53e98a79017d9531af7c1f5
SHA512 e1a865e685d2d3bacd0916d4238a79462519d887feb273a251120bb6af2b4481d025f3b21ce9a1a95a49371a0aa3ecf072175ba756974e831dbfde1f0feaeb79
SSDEEP 196608:+SPBhORiYAXHiXUxY/iJ53IWhlVjEeIu2Y6U:++wkpHiXUxY/iJ53IWhlVjEeIZU
MD5 SHA1 SHA512 SSDEEP

Submit Download

libEGL.dll

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\libEGL.dll
Size 470KB
SHA256 829f2d35247947d991f9b41a9ae01dfc2eff4a786a1e85a301d41d856c43e564
MD5 6cf394bb056799d9284924d822d60745
SHA1 93c8450df3baa26f0b3649e091969ad3fec699f9
SHA512 75f4da750049b9aa6e80d771ba9fd3ca6e24dec7a9c91a0c95c4a913d55876a8d468186b2fd11ddc698135fdf2f8b0a003af3bc8047d256eaa86f3dd392ac266
SSDEEP 6144:Kmi12qlTgeUDsnkcM2nDl83BgENhYCqNvfY24M:Kmk2qxgeUDsNnDcgENhYRNvfU
MD5 SHA1 SHA512 SSDEEP

Submit Download

libGLESv2.dll

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\libGLESv2.dll
Size 7.7MB
SHA256 1c6dabd8c267916220d1a19335559c76ff2790820b54da677652937a8a6c6962
MD5 6a409d571dd94ac55c8cf8b57eeb51ec
SHA1 455d4e6b08a939d185a2ee0d101ff984fa9366da
SHA512 ba3a51dcb160c6db26271072007b7fbf8b811b29fb480f189c2854de90f796f29f347a18b40b1fa21f4b11115869cc0a270937eea753c44bf86ab749cfd7d99c
SSDEEP 98304:fPqhbsPD8TDyGDsTnI5mvmKGtS17QXC3O:fP4m8TDyluKGugmO
MD5 SHA1 SHA512 SSDEEP

Submit Download

en-US.pak

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\locales\en-US.pak
Size 454KB
SHA256 41123d72bd8e289e85bd35227aabb4cc61fe1de02b5cd7a7834e5ec200bc2078
MD5 5c52a86b21633b55b383c20f16859b2f
SHA1 126585e68cb17f241351004e21c1d30e65de1cf6
SHA512 2a1b6a4becfb97d470cd7de74857edf2cc9cd4a77f377ccd9bf60c30539862ff1ac3ed6cc849632a3ed4ea0e5b92679f3cc5b4cb26cc7eaaa2bb2f4ae9974a6a
SSDEEP 6144:4U0NFUyUGhhA/4miMP9e2qDWfaYe1Vcg5xdxOng5H/thTwB:4jIy1hhYiM9qDvn5zxZTwB
MD5 SHA1 SHA512 SSDEEP

Submit Download

resources.pak

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources.pak
Size 5.3MB
SHA256 6acfa2312690c8a3e29182fe44097c84ae23ddab82efce3b52b7dac9d46f27db
MD5 63a32ba12c871dd49e037e0778346eb8
SHA1 fc1c486c8f35d4c0c6c3db9ad55fd287e18333f4
SHA512 866ae4238ef6391abc4b263a580bea0708a4ac0a074ceb97dbc3942fd3299f5bade45848e4facd6a6ec16724483d0c5b38c1a8d7283cf82d37c4d084bdee13ab
SSDEEP 98304:5N9bNj3xZRkPe04srtXK5EmXJfnimTVK5M/AyrwreSjujBrTAVD:tbNTxTk1rlK9VKckreSjuxTK
MD5 SHA1 SHA512 SSDEEP

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\node_modules\ejs-electron\index.js
Size 4KB
SHA256 4574224bdcf1a47aab456dbec7b485d7cb8bd62bea5295f85db622b3ebab0c1b
MD5 d441fba9399d196f943308f66d215d95
SHA1 76557f8a00782c3503b62784098b7832256c136b
SHA512 7f11d59d870c0ae386b6c0ae4a65b2ab49445ce8b36528323bb2a03a8a55611c8e71d2c7439f0a57c69fb7cfdc2d05fde59e535e0da36adf24947a131db18a0f
SSDEEP 96:Px5TgcV51Bi0BT/ddv6KEAHTD9MJ4ZVM2:PjrVfjPdPpk4Z1
MD5 SHA1 SHA512 SSDEEP

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\node_modules\ejs-electron\package.json
Size 367B
SHA256 c30372a8a6ef7a7cf021a48200d7ca770ca5ad68022e92c6d15bd27878dc326a
MD5 381be2da7b731d7e9f68c149ef521e46
SHA1 11f4eabe7d5c1236c02c9c6e1ef2e8f58226a2e3
SHA512 0595738800f268106a61f3526448bb1c89ed37db1950d00b7fc1f1d2874cfcd1bf7454b49d757614543caf756407d6594e2246f68d6916db51553c95e22c4f01
MD5 SHA1 SHA512

Submit Download

ejs.js

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\node_modules\ejs\lib\ejs.js
Size 26KB
SHA256 654f258d33a5885a5699215e36fce008f0e3aaa765676fe8fb232e33e8e99f80
MD5 edf0966f22f5f9fd70d37ff7fb471444
SHA1 34882abaf0af9442df7a875abfe34c43fbcb0e8e
SHA512 5c51bd9d214211494383206a6b85449ef25800c397aca41c3ba3ba4519419a7ba1e3a3d425f521dca34540df3b0bd8f7becb4c7973574d3f132a571d11844e78
SSDEEP 768:5hrmiaBpEtn+vviZLewv4ikIkuWk/h3AHTPfe:5hCNMtn6viZeq4itAHT+
MD5 SHA1 SHA512 SSDEEP

Submit Download

utils.js

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\node_modules\ejs\lib\utils.js
Size 6KB
SHA256 7c5d31f310884e33525c6f4def40871ff8d5a997547de4bb06814b5cd637815a
MD5 679d6a129fcf43fba138c8b75669193b
SHA1 c602b7bc9bb628709b0b62d1d00dfed154523bc9
SHA512 4b155b70459527356088d7afdd5ad9c7dfe3441928906537073e01d15ae95c3da16657464fd14c1b4022b30890b9eaaa8f74a2da5876730baf9b62104c10416e
SSDEEP 192:5/XHoDdyJHDTL9Y1WZizh/A2qRXXNrG6FUy:5/4YHDP9Y1WZiOPn
MD5 SHA1 SHA512 SSDEEP

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\node_modules\ejs\package.json
Size 749B
SHA256 1eeea145b1d15f7376fb65bd054faee60e39ad66dd832fde9329c7bd33e94f44
MD5 2a071926c9c41ef6b2ef7ca79defdc3e
SHA1 fa50b7f4c5aace90f1b0259b3c01895deb1d490a
SHA512 c03b8b00b991201a653799d9b5e182d57bba77e87b08e21b9f98b4c512e334984f6e5184770d8afa80acdd2c316be9763090e45932279995eab4544d9838c3de
MD5 SHA1 SHA512

Submit Download

Mime.js

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\node_modules\mime\Mime.js
Size 2KB
SHA256 9482411a27e56e69e9ff5ae077b25f64c38768ae268ac07ab74a9896b582b6a9
MD5 5a77829e31fd521878c9484a90ff107a
SHA1 73efaff8e2e9adb871396c15c076dbf28757949a
SHA512 dc542b656f18818fc5caab6bebaf67f2f33691661196fd588eeba8bb8d1520ea61f76df314d407e0e23b405706889f0e73f0bc61871a36764d2c3564a44b1c35
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\node_modules\mime\index.js
Size 127B
SHA256 7b35e6b3b981b498b62860b99063916772a7a199125866d4593db952ba1c14b9
MD5 f18d3eb05bbc4d65415ee72c4b5d4dff
SHA1 e2d3efd8917c4ff9cbe668474891269d3fedcb37
SHA512 65316d6a06666e5acdb6fd293fcb737109a264fb6ed1174e7853f86b32d2b334fab3280d28535be21524fa15f86bc8f16b663461439d6bdf4ead0cba4b297eb5
MD5 SHA1 SHA512

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\node_modules\mime\package.json
Size 775B
SHA256 a1dccf7b9e97739c70cfe4a205babae71016a576f4385a8d66308978f21e0d19
MD5 41460dd956f1244d052cbe727cb6be27
SHA1 4982079e4fc60559ed7fa2c066bf71fc7b74d9b4
SHA512 4e273dcbe5b5bde34c1ba8c0bf35251037b058fe3eef5703e53027a53b9f6661db97411be2ae2e7b4353adf5d77bb389566a81258adb8f11cac679ee6450c978
MD5 SHA1 SHA512

Submit Download

other.js

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\node_modules\mime\types\other.js
Size 25KB
SHA256 ee0e65cdfde6e492be9c52e35bffcbe0e0fd9a5be1a18fbaa7cbbc7b9b406934
MD5 ce7fcb8480cc926c86d46e4b1fb6cc9d
SHA1 dbfc26ed679cce39b3ecb6bee5ef5968cea6408a
SHA512 c5c943a1722aa52c3f85f28189258ebb4e3ed025c98bfa0d7ce978de2587b10239c578d5d96fb63f85bd8ec16d7d156847268cc14421cb920832688984fc0cc9
SSDEEP 384:DDwq8XqM+/vGmvLDMWTkVVpwQ4KEXrxoEYlzzO73LnAWD5L4pMnmEGiohqZ:cXqZGqKEXrxoEYJO7B5L4pMtrZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

standard.js

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\node_modules\mime\types\standard.js
Size 9KB
SHA256 70aaa6f9c1b7caf38db2eff138406911368729b8dfb478fe70078e46ec1824bc
MD5 5119196e906ee770dfd3610bcfbd0587
SHA1 a21f9b1eba88b1af8d16231a5759ffb8108a645c
SHA512 30d30134c1044d36bf4ffd93cb0b6f003cb702a14b9e006bbc9a18a7e9e6915f18c22eb0b8bcfb5cae6cc15636726e0d8ab59189610550140ac90e51f45c324e
SSDEEP 192:DmiyyOhrQXbK/wWOI0ouK4MWZwfLMcbskpDmczLmuv2hL40kvS+v:DmiyLMc4kJzXbS+v
MD5 SHA1 SHA512 SSDEEP

Submit Download

package.json

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\package.json
Size 563B
SHA256 02791575610cfaf5fc43c9f7407dea0e76057bc84c9c1c2721bbc5b72ab25945
MD5 de1337e33055eb8f43e3293115273d9b
SHA1 e0c8a982bd2e34d8cfd0cd68aa1c2536bdee707d
SHA512 0bafd8f47e7e0eb3a36054459475865c4d5a74cd0c29a074c527848ed235f041e727a18c134b22689c47fafbd9da91cbe5870780bb24f3f29773ec9e36da9d26
MD5 SHA1 SHA512

Submit Download

ads.ejs

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\ads.ejs
Size 1KB
SHA256 828df948e8dd1e0fc2a88511fd1f59568a97fc2c3626152e574e5f31c89ff5e8
MD5 d7f2205fb3ea4fc29629fd16cc13e42e
SHA1 ac4addc19bdf3f56a2b2aa0b8e5a2b2d459b209f
SHA512 6ff7cbfb366642d6b1ce5ce15f335b27a8f500341bb059f6037d50409c071d9ef8a735c447a876bd986f4902e377a773b9e41e09d7d433b8365a5049a689bf3a
MD5 SHA1 SHA512

Submit Download

index.css

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\assets\css\index.css
Size 20KB
SHA256 b98435d7f5d4ade2d9b20c6c0c83c3a260d55f530e975182b6c22beb57d6fb17
MD5 d4d3b6b1b21e2bd47563d1d3e3d21319
SHA1 2ac2eb046e8cd5046083f1b830c75dd8e2a54705
SHA512 b7e55909935f76e37df0aa8aa371f41f701c31bf362b4dfdfa515808631565ed2eac26ad957e7515d557e58c1a7368677a64363871c67392ec11b6ba56a61aec
SSDEEP 192:zIPPOBM/UfNLh38L6wLLd949+cZaxYPrunqm0LJ4nqBDmwsNSflfBWG+ngBmi:UFUf7ML6hPrDz+KfBWtgt
MD5 SHA1 SHA512 SSDEEP

Submit Download

icon.ico

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\assets\icon.ico
Size 11KB
SHA256 9a6b51f26c9efb993a02f67582477d9b524b029af5d6b1bea046840012dc110e
MD5 372b8e595552272d8980d7ce68a22a45
SHA1 3458abecc3172f86c0a42f889402a700964a7bdc
SHA512 bb712405ea0c0ec66add82abd04ca8f32e07bea7e4bbdcb2bce53a16caf8d9bf2a514ec8e647739e739f995931fc6d04d155e8b2f381fb93765024a4aebc1fa4
SSDEEP 192:5oE/UpLYcasZP5WUZ0iClTa8VhjO/wulukJ4M8JQTtDdtEDQ76nE/Vcb8VM8eQvP:j40cNZP5rqiClfhQwuUek6tDEsiockfP
MD5 SHA1 SHA512 SSDEEP

Submit Download

background.png

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\assets\images\background.png
Size 713KB
SHA256 62a7ec1cb750aa28bcfdc93cebf1521f8cdc352992938652527aacb79618e57c
MD5 54d3046d693ef7dc0e06a32ff629e7a1
SHA1 1d14c54f2db92c94e467dc3b3f6480fe737ed830
SHA512 b4e123d3bf4b21bdb1c73ab9374bad0e1090e5cfd0b758bebfd907d4f3736c9f4e87e73e693a85eed66bd0e1eee85fbcf1a152eeb83ea6f317e85022d67fca3d
SSDEEP 12288:U/xhayudk53PLRv6C4UxLj5UE8VYJXgf/FVxenbd+pf5TjXVmhgOAX7KOJreROM0:U7fudk5/dx4Ufhw33xg0fYgTrKOuOMHU
MD5 SHA1 SHA512 SSDEEP

Submit Download

de.png

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\assets\images\flags\de.png
Size 274B
SHA256 b9d2aced61236662459e3acaaeaf44ce7af28405847c9a54d42fa4ae344f045f
MD5 0c730750c8a99bc30cf20b83d235aea6
SHA1 8ea6cd3bbdaae43607b4882560c4e04ef8eeaf8d
SHA512 2fc3251378520052892b529b8c3638cbc3dd9c4ac471dc20382930c103c886826f05969400d7d1054b066cc81d00813ba86532b20be646aa8910efec9dfc6c23
MD5 SHA1 SHA512

Submit Download

en.png

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\assets\images\flags\en.png
Size 310B
SHA256 e423db68a40835ac299155e365864461e37115a96f996091d5af026103d753e2
MD5 c2de03c4d117d87763d4e1e5e28482db
SHA1 bfbecbfba4c5a871894c6784da913fa495a2aa3b
SHA512 628f47a91c2605a66dda06430f26d8685384136c0d04bc3146dd033462ef7def71c7d9ddd43cf3d07e892a400d089faed938a91317a94fce4febfd01183e1301
MD5 SHA1 SHA512

Submit Download

es.png

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\assets\images\flags\es.png
Size 370B
SHA256 c79f2cdfee1e6666b8180b7ee33d1f06bcffb113e602e8ec47b668d4db4f18d9
MD5 ff0df90a5a69c16ef24fab173a89ee4f
SHA1 02b14de1912f54b2b0630346c2cfe75a8da6d5b9
SHA512 4387449064aada45fba5e933304c5f931c29187acc025d291f1a758c6b2453085faa42693b2395fb08829b62187577988149514e133c2d4c58d6a2ed851f7ccc
MD5 SHA1 SHA512

Submit Download

fr.png

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\assets\images\flags\fr.png
Size 284B
SHA256 9914c4861965f03acbbc077509a8dbe76471a4b3c26eb3932427f9972236edb5
MD5 d03e36af77543804318d6a5e220724ea
SHA1 58f8df12d68e055019dce59a93afe17207d68bd8
SHA512 8b10141b6411d05c4f7f7a1e3139fb0e7a8223c470b5f6a2ab84e07c482d39a56820b3e3a867263321744e2d5272bf9fabc81bde61fbb7e79e2ef31a37cacc12
MD5 SHA1 SHA512

Submit Download

it.png

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\assets\images\flags\it.png
Size 279B
SHA256 7ed6102d8a617b6cc2f7fe101ce130b037bf4fe7cc41deb011430f8def81b14a
MD5 b9673fed0ded2c7a6a3e2572b60ebb5c
SHA1 b4c6de948d9d7fb396dee563804fb161dc541cbe
SHA512 0f5965e93a08ea0a4f2a38de0e9f4accef71dea85d56f07c771ca62a966ab2049d611b1749544343e4389cea203137cb037fa2b7bd420087acfd3ddec2fc52f8
MD5 SHA1 SHA512

Submit Download

pt.png

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\assets\images\flags\pt.png
Size 806B
SHA256 60d97aeb01ec6481d1c9f5be24082655c880a4ec947e42713168e3c36d6015b6
MD5 188d843e650bbcb429950217dfc0131f
SHA1 ec3a3cbab918dc69f797f96b718fc22e398771b0
SHA512 8b8aa9535194304633d229161377c73e0b13fb757a2661620a4ebb33d0bf6bc7d56fe2456a062e7ef9f6224fc2aabeaad9d472b83c96f2643e4e44b9e46015ea
MD5 SHA1 SHA512

Submit Download

opera_banner_es.png

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\assets\images\opera_banner_es.png
Size 460KB
SHA256 d624cb45b2d295fbbfd59d20c20a825fe73f5cd2b09d1e01f8da5aae1508aff4
MD5 71feb71eed2ab2a53ff3765f4a1e83de
SHA1 5dbd35ad7104691f4996311516504c844fdf23a8
SHA512 f30ec6e622106e05d02caec8f2464157348bf150b4c3cf33565e1bdd66c35dde542383c788b37c78c8a06876ece338dc65ecbd8f0020b1ae1bfe2e803150d78f
SSDEEP 6144:ng1LSaqpbjHDLkgov+uobqw2p7phpwhJ1Fap0BmuHtTzfSDEeU2V1wOQbFPGCIKD:g1L6DOv+uWH2p7pghEpcpSDqGfK
MD5 SHA1 SHA512 SSDEEP

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\assets\js\index.js
Size 5KB
SHA256 ff4df2a9eae4befc95296df52db6dcbefc021531fcffc95a20169de90c1c8a4c
MD5 dd4ea22741002d613fada2009f2336f5
SHA1 423a0e85dbb82376a53ee58badff5ef6bb00e27b
SHA512 04f60ff1f8902b9a8987f8ce4e7937edd2c67ea825cfadd0bc0a31f02e8f325c5b02fdaafce6a71e91fd8b0b74770ad9d1241e58bae702ec2ac1eac788ff6bbb
SSDEEP 96:S4QwEI5JK+Jxx97Sf32jiZRLzIU5pRpw2NZ2+fO2eLILip9i+a:LO2JvbvirLkieIfOfLILip9iN
MD5 SHA1 SHA512 SSDEEP

Submit Download

es.js

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\assets\js\langs\es.js
Size 3KB
SHA256 8cbbb4b269dc867163cf5074a0a45294fbb15c2ac202b15fde8b5e7b4a072c8b
MD5 2f9726975c05a7311bd7b49501451aee
SHA1 965d88cbdc991291d63971d04b95877791a02533
SHA512 93705c4645997551deffef3465c0e7a4a1e97517646e60f96626e6c446cb16ed3f250440841143649f9a3aeac57a41891349efb7978c081af4d83bcafed8b62d
MD5 SHA1 SHA512

Submit Download

eula.txt

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\assets\langs\es\eula.txt
Size 7KB
SHA256 497a11cbd607ed9151ee2225a8c3c47badb6fe1d725e24a4136e36b5f4785727
MD5 78476d457b18709eb0d2f03792b788b7
SHA1 59168e79a5d5d210bbc30e243de72a28eb76def0
SHA512 910551298049af3c4d11e0d9272b6cc468deab5da095ead979692a17eb84bdb063e931f38a88599acadf5b67aa369abd59a4a48f11a258657d2f815cb642163b
SSDEEP 192:dTrbmgdjOjWwjBMohJsuKRerDqYyEEkXnjHeI4ATQ1/P:JndqayWCJsuKReCR8CI4AGP
MD5 SHA1 SHA512 SSDEEP

Submit Download

eula.ejs

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\eula.ejs
Size 981B
SHA256 df0dc42c4ec4e3dbed33e6fd855e977f3bfb4cc2a49a8402ead53bfb9f544d6e
MD5 0887c927cc2ba0250bea889fd5d40660
SHA1 8ae1b01d3c501a15cfeade573a13b93c44ae34d5
SHA512 01dd4c0e622e95adc652fd06c8503864506cae7466d4114bd11938f69a5b97065ecedf2a9d516d485abaa33fc3442bcd9de46f6a00b0979c11b05951bf2183db
MD5 SHA1 SHA512

Submit Download

footer.ejs

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\footer.ejs
Size 4KB
SHA256 a2da2ca46128fdf7530a27ab8345986278cda1b78d7a075ec0fb11b66474fa8d
MD5 d6c4aec009f8a181f5f805169cbad491
SHA1 7a7263138772c78c8c4330a2ed6cfbd3092c8985
SHA512 d0a2d60113cdce329303f9657b741317e2f5b691d248fa2131b6668e07e7db9a5292ab734456681f335b71c732e003009631113cf14f218e13aaad7d4e8bb4d7
SSDEEP 96:psMI4kH53DYmJ+PV29YZKko4m722rKqiImsMSQLXvnWUd:TI485i+X3j4znWUd
MD5 SHA1 SHA512 SSDEEP

Submit Download

header.ejs

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\header.ejs
Size 38KB
SHA256 3cf434b126e4369ffb8e9f4d489daee1aad9f47828850386984b3c752cdc7042
MD5 eef60d35e9f75d3c7030d0574250e56f
SHA1 6d29148b90187fa1583652bc8799e65efa10f637
SHA512 529bf36dacd2fc808e63a8091a8aa92f5d3d39c23077bc72298bf052f1bdcd6fc05282608ce5337643d3c1a794bdde2b8d364f7deb0c4b7ae75810be3bdb165b
SSDEEP 768:Xkos/1jkos/1kQj9U38pO4MftndjyQj9U38pO4Mftndjh6:c/a/OQj+O9MftdjyQj+O9Mftdjh6
MD5 SHA1 SHA512 SSDEEP

Submit Download

index.ejs

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\index.ejs
Size 880B
SHA256 88b3b17146349c92955cc88bdd70ef1fa414bf624d771a0b8ed0d7f2d40d76cd
MD5 5cb43b3d3c087f4dfb7ef3604a39e757
SHA1 62796be76ccb921544aa6279dd0139b00450e24a
SHA512 b5247488c6dbd4f682d27884f3b516df00ad6725665f79c2d4ea76c1a54d318a31e32c6f96a11fafc382d36097e50f505e0cba904e13b4d45afa96544401eb81
MD5 SHA1 SHA512

Submit Download

index.js

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\index.js
Size 5KB
SHA256 0480aff7d01186736753d143fad21dbd4591d5ed1316355cbd7f344bd3b927d0
MD5 d9cdc62a2c83b93b50b8c385170acdff
SHA1 bf7abc69c31608f14ce7819b9840e7b2ce44e974
SHA512 6ddbcfa20126ebdf185f97fbc03424b8409c558e9b53506853d8e719596273a9789238822fc03b8332cd20d6df8bf942039330138404e52e946b07cc11aab328
SSDEEP 96:LpxI8ksTRqtomnCQ4TQtOPqoNpiHJTft/O5fi2jxI8kJ37VkykXA:LpOFsNpmC3TCHmxjOFJ3Jt8A
MD5 SHA1 SHA512 SSDEEP

Submit Download

install-options.ejs

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\install-options.ejs
Size 3KB
SHA256 f8981d7e2001efe11511d6779675bcbead2fa27d6557a54dcb8492ea958a1454
MD5 877f16609a32c46ff5f8eab3648b1078
SHA1 5a3d5785704f016235b96fdbe04a9de69b48e203
SHA512 c6df43c91537d13d75e1b2e1b35fc2b452f7d62326f0074c24e975e18a47d31bade8a9e84514091bd537b8cb016c60e87920249cee73370188be045c628a30b0
MD5 SHA1 SHA512

Submit Download

language.ejs

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\language.ejs
Size 5KB
SHA256 9016b2792ecdd22276e1d1e4172b4e598478f5668b27beb005e2219d229f216c
MD5 3fbf51eb59e0f0b050f5abcd2fcd3dca
SHA1 90d676bc914c2bebf33464dd088952abbedd56f3
SHA512 c5e04500ebdd922d989594e3a0822fa9a9557d749e60af86ab1e309847342431a606f5e604538fa5d5666535bc68c4f5fbeeb4cdda9a832384505aac1ba2d998
SSDEEP 96:rI0XL+SMHnL1F8dmWIiuQiCui8HoiqmiW2iKC:E0QnL0X5uhCf8HZqXWHKC
MD5 SHA1 SHA512 SSDEEP

Submit Download

logs.ejs

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\logs.ejs
Size 1KB
SHA256 62e112e61b5c9c582f5a9aac790a9275be8a560d1edb93c3a6879330298e53fc
MD5 6fc7c3d8bac3259202cb981acf8b18b6
SHA1 f3963b01f9a2df4e9b0b989b4e7ea8f55198ddfa
SHA512 7d719b9698344ba99d3d860e28421bc7cfaf2e9d80cfc6da472413800900aa64f055add8269553e9838aa998df4d6575c6bf0091cf6263a6ea0c2537c36b5df0
MD5 SHA1 SHA512

Submit Download

path.ejs

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\resources\app\src\path.ejs
Size 2KB
SHA256 870496c864624ebce9da0b98ea830249897a2a2317f6a816751f0edb30aeb32b
MD5 21e1d48f90eb1017539741c7a74cf059
SHA1 7906534922134e26a5c59324aafad63e20bf10ba
SHA512 2cd3d44337c5e1b794a2233d25fef122a97910d7f7d32cb811c0fa3f84397dd4781e917ba3db0e024384439413925dd0ab73888d3d82119951b86192e807685b
MD5 SHA1 SHA512

Submit Download

v8_context_snapshot.bin

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\v8_context_snapshot.bin
Size 646KB
SHA256 a8bd22478c4f85afa836c89d3a7f52c606b17872fbbefce268b499bedede10ae
MD5 a62fbbb671bf975ed46b42d9cf437bcd
SHA1 408b595b1dc6658533e0db1d35f509ab9ee70525
SHA512 87c934670df70afcced0ea5c73449a17ad27d5b6a25cedad9eb61634aaff8a42b713f578e861c2efbc77593793bba240a1495822b69c99a8ecaef64b07b6a62c
SSDEEP 12288:f97k1vtORkeGWFDjesZeLEY4QUH7zRpA8W:f97k1v42eGWFDjZ427/RpAB
MD5 SHA1 SHA512 SSDEEP

Submit Download

vk_swiftshader.dll

Path C:\Users\Admin\AppData\Local\Temp\2nTv7NaXqHtsbWYEkaU3bdyJVaY\vk_swiftshader.dll
Size 5.2MB
SHA256 10156e0980dc025e0087ee46f417816670c658e194df262ffd7a049a16d0b328
MD5 fd13b95b553d756f374334f06f68d0e9
SHA1 9f420c257f88087a95ce087ab2068a0aec14455a
SHA512 1ce57e04d2e073c1ada4e6daa1695903057028ea818e37b40a30125b404a7aa75f203558211062d6aa39c1745d8cfeb4521b69319277dd51735da917b226fff6
SSDEEP 49152:UgQpJ5yZBtfCp00oSO8hCsDsbJQk/tJ4q0nLhII1ytiT45z+WEjNHsRLf7OFJOMs:En5yZBXLxkf5FJIayx
MD5 SHA1 SHA512 SSDEEP

Submit Download

BgImage.dll

Path C:\Users\Admin\AppData\Local\Temp\nsqE001.tmp\BgImage.dll
Size 7KB
SHA256 e27efa5dfde875bd6b826fafb4c7698db6b6e30e68715a1c03eb018e3170fc04
MD5 487368e6fce9ab9c5ea053af0990c5ef
SHA1 b538e37c87d4b9a7645dcbbd9e93025a31849702
SHA512 bb3ed4c0d17a11365b72653112b48c8c63ab10590dda3dfd90aa453f0d64203000e4571c73998063352240e1671d14da5ee394439899aaa31054fa2e9b722ea7
SSDEEP 96:8efk1LFJaO1/radJEaYtv1Zs4lkL8y3A2EN8Cmy3uT24j7J3kWyy/:tcTJa2roqJyA2EN8diuTHje
MD5 SHA1 SHA512 SSDEEP

Submit Download

StdUtils.dll

Path C:\Users\Admin\AppData\Local\Temp\nsqE001.tmp\StdUtils.dll
Size 100KB
SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
MD5 c6a6e03f77c313b267498515488c5740
SHA1 3d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA512 9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
SSDEEP 3072:WNuZmJ9TDP3ahD2TF7Rq9cJNPhF9vyHf:WNuZ81zaAFHhF9v
MD5 SHA1 SHA512 SSDEEP

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsqE001.tmp\System.dll
Size 12KB
SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
MD5 0d7ad4f45dc6f5aa87f606d0331c6901
SHA1 48df0911f0484cbe2a8cdd5362140b63c41ee457
SHA512 c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
SSDEEP 192:1enY0LWelt70elWjvfstJcVtwtYbjnIOg5AaDnbC7ypXhtIj:18PJlt70esj0Mt9vn6ay6
MD5 SHA1 SHA512 SSDEEP

Submit Download

index

Path C:\Users\Admin\AppData\Roaming\Battly Launcher Installer\Code Cache\js\index
Size 24B
SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
MD5 54cb446f628b2ea4a5bce5769910512e
SHA1 c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA512 8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
MD5 SHA1 SHA512

Submit Download

data_0

Path C:\Users\Admin\AppData\Roaming\Battly Launcher Installer\DawnGraphiteCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_1

Path C:\Users\Admin\AppData\Roaming\Battly Launcher Installer\DawnGraphiteCache\data_1
Size 264KB
SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
MD5 d0d388f3865d0523e451d6ba0be34cc4
SHA1 8571c6a52aacc2747c048e3419e5657b74612995
SHA512 376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17
SSDEEP 3:MsEllllkEthXllkl2:/M/xT02
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Roaming\Battly Launcher Installer\DawnGraphiteCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Roaming\Battly Launcher Installer\DawnWebGPUCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Roaming\Battly Launcher Installer\Local Storage\leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

Network Persistent State

Path C:\Users\Admin\AppData\Roaming\Battly Launcher Installer\Network\Network Persistent State
Size 773B
SHA256 ebd2e50b405cf54a3bd9490fee3d25725dc9e939860f0c4fe9a45360604a61f7
MD5 bba766dffbdb1938b70609f6e642b9d6
SHA1 e92819fbc8c253b395bfb14e6a15bb013f95510e
SHA512 717cd230306990050264abaa46d6a8c9b1fd2fc6bd774f38a8107809972345896ba516c327916b01c18c6ef9085823978e92c452350bb22ca5ff1a395b33de44
MD5 SHA1 SHA512

Submit Download

Network Persistent State~RFe591284.TMP

Path C:\Users\Admin\AppData\Roaming\Battly Launcher Installer\Network\Network Persistent State~RFe591284.TMP
Size 59B
SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
MD5 2800881c775077e1c4b6e06bf4676de4
SHA1 2873631068c8b3b9495638c865915be822442c8b
SHA512 e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
MD5 SHA1 SHA512

Submit Download

default.dic

Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
Size 2B
SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
MD5 f3b25701fe362ec84616a93a45ce9998
SHA1 d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA512 98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
MD5 SHA1 SHA512

Submit Download

memory/4088-631-0x0000021FBE8F0000-0x0000021FBE8F1000-memory.dmp

Download

memory/4088-632-0x0000021FBE8F0000-0x0000021FBE8F1000-memory.dmp

Download

memory/4088-626-0x0000021FBE8F0000-0x0000021FBE8F1000-memory.dmp

Download

memory/4088-630-0x0000021FBE8F0000-0x0000021FBE8F1000-memory.dmp

Download

memory/4088-629-0x0000021FBE8F0000-0x0000021FBE8F1000-memory.dmp

Download

memory/4088-628-0x0000021FBE8F0000-0x0000021FBE8F1000-memory.dmp

Download

memory/4088-627-0x0000021FBE8F0000-0x0000021FBE8F1000-memory.dmp

Download

memory/4088-622-0x0000021FBE8F0000-0x0000021FBE8F1000-memory.dmp

Download

memory/4088-621-0x0000021FBE8F0000-0x0000021FBE8F1000-memory.dmp

Download

memory/4088-620-0x0000021FBE8F0000-0x0000021FBE8F1000-memory.dmp

Download