Overview

overview

10

Static

static

10

GalacticShooter.exe

windows10-2004-x64

10

GalacticShooter.exe

windows11-21h2-x64

10

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

GalacticShooter.exe

windows10-2004-x64

10

GalacticShooter.exe

windows11-21h2-x64

10

LICENSES.c...m.html

windows10-2004-x64

4

LICENSES.c...m.html

windows11-21h2-x64

4

d3dcompiler_47.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

ffmpeg.dll

windows11-21h2-x64

1

libEGL.dll

windows10-2004-x64

1

libEGL.dll

windows11-21h2-x64

1

libGLESv2.dll

windows10-2004-x64

1

libGLESv2.dll

windows11-21h2-x64

1

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-21h2-x64

3

swiftshade...GL.dll

windows10-2004-x64

1

swiftshade...GL.dll

windows11-21h2-x64

1

swiftshade...v2.dll

windows10-2004-x64

1

swiftshade...v2.dll

windows11-21h2-x64

1

vk_swiftshader.dll

windows10-2004-x64

1

vk_swiftshader.dll

windows11-21h2-x64

1

vulkan-1.dll

windows10-2004-x64

1

vulkan-1.dll

windows11-21h2-x64

1

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows11-21h2-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    132s
  • platform
    windows11-21h2_x64
  • resource
    win11-20251015-en
  • resource tags

    arch:x64arch:x86image:win11-20251015-enlocale:en-usos:windows11-21h2-x64system
  • submitted
    02/12/2025, 23:20

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    GalacticShooter.exe
  • Size 61.8MB
  • Sample251202-3bkfvscm4y
  • SHA256 a2077125de69b773350e3d1875f71d5433d85bcaa4f1fccce75a59a78cfef668
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
discoveryepsilonspywarestealer

Malware Config

Signatures

  • Detects EpsilonStealer ASAR 1 IoCs
  • Epsilon Stealer

    Information stealer.

    stealerepsilon
  • Epsilon family
    epsilon
  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 16 IoCs
  • Reads user/profile data of web browsers 3 TTPs

    Infostealers often target stored browser data, which can include saved credentials etc.

    spywarestealer
  • Looks up external IP address via web service 2 IoCs

    Uses a legitimate IP lookup service to find the infected system's external IP.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\GalacticShooter.exe
    "C:\Users\Admin\AppData\Local\Temp\GalacticShooter.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:5664
    • C:\Users\Admin\AppData\Local\Temp\2OcB46IRbVtah4ccWieleL6owgA\GalacticShooter.exe
      C:\Users\Admin\AppData\Local\Temp\2OcB46IRbVtah4ccWieleL6owgA\GalacticShooter.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:5308
      • C:\Users\Admin\AppData\Local\Temp\2OcB46IRbVtah4ccWieleL6owgA\GalacticShooter.exe
        "C:\Users\Admin\AppData\Local\Temp\2OcB46IRbVtah4ccWieleL6owgA\GalacticShooter.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\GalacticShooter" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1700 --field-trial-handle=1840,i,11071862551758026408,2584283390464349118,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5472
      • C:\Users\Admin\AppData\Local\Temp\2OcB46IRbVtah4ccWieleL6owgA\GalacticShooter.exe
        "C:\Users\Admin\AppData\Local\Temp\2OcB46IRbVtah4ccWieleL6owgA\GalacticShooter.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\GalacticShooter" --mojo-platform-channel-handle=2080 --field-trial-handle=1840,i,11071862551758026408,2584283390464349118,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2776
      • C:\Users\Admin\AppData\Local\Temp\2OcB46IRbVtah4ccWieleL6owgA\GalacticShooter.exe
        "C:\Users\Admin\AppData\Local\Temp\2OcB46IRbVtah4ccWieleL6owgA\GalacticShooter.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\GalacticShooter" --app-path="C:\Users\Admin\AppData\Local\Temp\2OcB46IRbVtah4ccWieleL6owgA\resources\app.asar" --enable-sandbox --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2412 --field-trial-handle=1840,i,11071862551758026408,2584283390464349118,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:692
      • C:\Users\Admin\AppData\Local\Temp\2OcB46IRbVtah4ccWieleL6owgA\GalacticShooter.exe
        "C:\Users\Admin\AppData\Local\Temp\2OcB46IRbVtah4ccWieleL6owgA\GalacticShooter.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\GalacticShooter" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=740 --field-trial-handle=1840,i,11071862551758026408,2584283390464349118,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        PID:4484

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        chrome_100_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\2OcB46IRbVtah4ccWieleL6owgA\chrome_100_percent.pak
        • Size 145KB
        • SHA256 f14362449e2a7c940c095eda9c41aad5f1e0b1a1b21d1dc911558291c0c36dd2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        vk_swiftshader.dll
        • Path C:\Users\Admin\AppData\Local\Temp\2OcB46IRbVtah4ccWieleL6owgA\vk_swiftshader.dll
        • Size 4.4MB
        • SHA256 c64b87d7cebdaee8b779859059a6c63fb47c8102a4f7311d678895f87b825c59
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        2f50845c-41a4-4b56-812e-5c93c21ebe03.tmp.node
        • Path C:\Users\Admin\AppData\Local\Temp\2f50845c-41a4-4b56-812e-5c93c21ebe03.tmp.node
        • Size 2.6MB
        • SHA256 487cec14eea6646be0266a5767b53ed67b49b429036521ee13d0656365fcca20
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Web Data
        • Path C:\Users\Admin\AppData\Local\Temp\Web Data
        • Size 228KB
        • SHA256 257947aba31142bab41ca56915c2ef843c2a156c527dee5d1a07e1224e380aed
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Passwords.txt
        • Path C:\Users\Admin\AppData\Local\Temp\epsilon-Admin\Passwords.txt
        • Size 181B
        • SHA256 e9de116bb7d2a7986d299425e6fb8c400e1c663fed6576deab0751bca7b95f05
        • MD5 SHA1 SHA512
        Submit Download

        f2f3c555-cfb9-4bfe-8c8b-5a4d42ca1d82.tmp.node
        • Path C:\Users\Admin\AppData\Local\Temp\f2f3c555-cfb9-4bfe-8c8b-5a4d42ca1d82.tmp.node
        • Size 584KB
        • SHA256 1babcb74f6661cc0b9d620cabb19f56b729a8a930e77a4b36d71e11e20f7091a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        LICENSE.electron.txt
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512
        Submit Download

        LICENSES.chromium.html
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\LICENSES.chromium.html
        • Size 5.3MB
        • SHA256 501f0b7ebf0be7ed8702d317332a0f8820af837c0a2a1d7645ba04352270e2b8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        chrome_200_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\chrome_200_percent.pak
        • Size 214KB
        • SHA256 04d699cfc36565fa9c06206ba1c0c51474612c8fe481c6fd1807197dc70661e6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        d3dcompiler_47.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.3MB
        • SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ffmpeg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\ffmpeg.dll
        • Size 2.6MB
        • SHA256 b827172262cea032be8303aae69a947a8d867006269bb8b2bc7e77619333c1b6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        icudtl.dat
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\icudtl.dat
        • Size 9.8MB
        • SHA256 c61704cc9cf5797bf32301a2b3312158af3fe86eadc913d937031cf594760c2d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libEGL.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\libEGL.dll
        • Size 437KB
        • SHA256 43a549ff51ce4ee20074999527b19fbf280a8caa7db0bde957704033b6f5b330
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libGLESv2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\libGLESv2.dll
        • Size 6.7MB
        • SHA256 b49922f98946952e96c03c468a4812e0b1e7a090f4e1f96489f48acc07eba1f8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        am.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\am.pak
        • Size 187KB
        • SHA256 e98f3437f6d451fb9fec33473abc9f07abf0794cd45d02ae1de48ccb9fc5c8b6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ar.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\ar.pak
        • Size 194KB
        • SHA256 f9d96af7d5ef9e0b4f4ef133a98a64b4398c7aef04e20688b523e6ea27c61f15
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        bg.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\bg.pak
        • Size 209KB
        • SHA256 58bec94801d09157c852cfbc3ccd9916fafd1947fdc61c1453456bce5b054c4e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        bn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\bn.pak
        • Size 268KB
        • SHA256 3250adece302934b9a78569d72ca70e596d91865455d5274ccf8d651ccac5350
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ca.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\ca.pak
        • Size 133KB
        • SHA256 d8a83a19f8c66742226538af9489b70c1439f6133591e29a353addd9089f67c6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        cs.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\cs.pak
        • Size 136KB
        • SHA256 30fd14794ee1088d37387f42e5d366f962fa9273eba8ccdd9b950646d2dd6172
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        da.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\da.pak
        • Size 124KB
        • SHA256 0997be868557f97f013242c066b192e574b4fa553d13f37f97a1de714b95a858
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        de.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\de.pak
        • Size 133KB
        • SHA256 d67f95e2982e7debf67741b88ce054f5bb8356021a280e092227b77ec82e298f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        el.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\el.pak
        • Size 229KB
        • SHA256 168fdc777570fa85c16ee7a701bef28fe6d7eb943a674ad8681a2f9fcedd2635
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        en-GB.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\en-GB.pak
        • Size 109KB
        • SHA256 fcbcdfb71363750a9e404a365a00f196c9ed4fe149532580f149811475b45636
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        en-US.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\en-US.pak
        • Size 110KB
        • SHA256 9f0c75c84381360677055d6197812c7a6c42dbfc6134eb8212d8a60ed1ca1601
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        es-419.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\es-419.pak
        • Size 131KB
        • SHA256 04b24396cc017e1dbb0bca7371d7cae10cad2350da661a8a035b572aa76cbd49
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        es.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\es.pak
        • Size 133KB
        • SHA256 665e93ca25de6050a4fbc1f343d67496d6e1e296dbbcc9edf3dab7bbcf1035db
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        et.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\et.pak
        • Size 120KB
        • SHA256 502ab41d852c69ea961df20b79480fd9d38f99bbad07a4d1b5e7143ba1f7bdc3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        fa.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\fa.pak
        • Size 186KB
        • SHA256 309cec5292ee0361d45796c2234cf40a064249da09108b1da75bf570963941a2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        fi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\fi.pak
        • Size 122KB
        • SHA256 9e1c20ecdbe9d15386ed493d0ac839612cc91a2284d5a97d9dc38ea2c90a3dc1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        fil.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\fil.pak
        • Size 137KB
        • SHA256 7a4c4822516f47cdbabc4b9ef45b710b057a056bc29d3a4a270a22e963e257d3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        fr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\fr.pak
        • Size 142KB
        • SHA256 5b9951426b8783b203b8ed44ebab916ca8af020b9e0a32f7249ed9021cce1c3c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        gu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\gu.pak
        • Size 259KB
        • SHA256 aa885cbbf8a13fb95405cc3dca6677545fd51e303a65897d14ed019955c040da
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        he.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\he.pak
        • Size 163KB
        • SHA256 45e428fe527bcc746039a9822db7f5df12fd651452209a8746182383c2c004ec
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        hi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\hi.pak
        • Size 267KB
        • SHA256 79fc8a24c93e19ed052ddc0f158e516198a10df7280265ccb769ee196a438cd7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        hr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\hr.pak
        • Size 130KB
        • SHA256 ad13bab195d7619c58494d592cb11c22dddcf3b2735804be60f951f87ddd734b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        hu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\hu.pak
        • Size 141KB
        • SHA256 d7c29c66d265129ede1019c708bd0a358d6b820366509845834752ec2ef705da
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        id.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\id.pak
        • Size 118KB
        • SHA256 d00c7ee5edeb1bd1493c49cf2d124ffdf47405d21d8d43c1a41c8749ce5c86a3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        it.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\it.pak
        • Size 131KB
        • SHA256 27c74ece0aa92e15d2f26628c4e132af03a6db5384e24504932c45912aba7268
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ja.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\ja.pak
        • Size 155KB
        • SHA256 c2bad3c397cc41210e1d5d1d04a7185f9287c670e285d30c66235f5807b39fcf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        kn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\kn.pak
        • Size 292KB
        • SHA256 99c8c57a808c63088d3e7b83dcf7cf80fb2a648d678a7c9473f2b5cc0bef8152
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ko.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\ko.pak
        • Size 131KB
        • SHA256 5ba83651d941cb9f87b961f735d5bfb0e249878255129be1d8e8d6ba5d903d76
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        lt.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\lt.pak
        • Size 143KB
        • SHA256 fb5bb8aa591d3d8d7557fb296317c30db3c4d5c9f438fe0a43a94b974b9286a1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        lv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\lv.pak
        • Size 141KB
        • SHA256 f944e3dbbe9694ef7c111e1a0bf91f5b0229b7c3ca221f54c253276242c281f8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ml.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\ml.pak
        • Size 308KB
        • SHA256 2b5c12d6628b1835d5658085c04f9dcf0d792db603a034264e70d86f8d43e044
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        mr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\mr.pak
        • Size 254KB
        • SHA256 df72eacf4938f4912f5bae563dbe7e81a758a7e8ffd49f14502f6d0b5dab6f27
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ms.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\ms.pak
        • Size 122KB
        • SHA256 18c1cd2f95f5c029f308c53774f49e4b718bc94b78fc3029f95457bcc58281d7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        nb.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\nb.pak
        • Size 121KB
        • SHA256 e42e748f28e944f9a3a7fad19e686b856bc60b3e0128de94e6cd7619a7d24071
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        nl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\nl.pak
        • Size 125KB
        • SHA256 4d450b5659ea7bb907728e2b8f48d77a43dc18024e2a15e749f5a760d4144571
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\pl.pak
        • Size 136KB
        • SHA256 4174b220824334d04bad161309d342a647433fae7c353432e34eaf49ec8787cb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pt-BR.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\pt-BR.pak
        • Size 130KB
        • SHA256 9d93fdb7f9d0d7833ebef8ea7016f952301075e714a4918c6a3d5338fec08ffe
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        pt-PT.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\pt-PT.pak
        • Size 130KB
        • SHA256 f07d58c568707c6de882a19e260c9f97751bf750237fc0bf3556ba95995f5442
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ro.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\ro.pak
        • Size 133KB
        • SHA256 8da674abe460d1e2824a13338d29344bae2f092fd94082d71ee91389f8822d69
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ru.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\ru.pak
        • Size 208KB
        • SHA256 cf4d6fa2c4a8f828fb11d464f504ddbbff5abab9cc78cba326bb8eafcfcdf812
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\sk.pak
        • Size 138KB
        • SHA256 e7038a23be62e4a476960b935a6c528aaefb781b28fdb7e24b3d830b5c02f10e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\sl.pak
        • Size 132KB
        • SHA256 cbff2dbb38d4d95fe7c811e0abdb0b92aad621e5c2c1eeda3c394dce5cf1d34f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\sr.pak
        • Size 198KB
        • SHA256 abcee52deb7382d84de334c3228711a62a7d21d9a2ce506385805eea0ed716f4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\sv.pak
        • Size 121KB
        • SHA256 b34e855f518a2041e4bbd7b5c269e35e7dfaa431fdd876fc0aac38b887e65aff
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        sw.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\sw.pak
        • Size 125KB
        • SHA256 fe18b3e9e275d7330706dd19f4af603a8ad899138374bfcba8e2c6764f94c190
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ta.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\ta.pak
        • Size 306KB
        • SHA256 3d16a99568173ad5760bf195b047c8850e39ec8d308a94f6c81cf7ba733f6f5f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        te.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\te.pak
        • Size 285KB
        • SHA256 4ab6fbf03177bd7ad0908318d5affd0cad142ec5e9ed560043e6b76e590ba995
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        th.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\th.pak
        • Size 241KB
        • SHA256 31f31b2985c2ab430d373dd3d79821db0674edee163b4ae74dc362051ccc1491
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        tr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\tr.pak
        • Size 128KB
        • SHA256 48b76d081b4398c7af10be207751ef3bf67720700c35b17196a4aa0c94526208
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        uk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\uk.pak
        • Size 211KB
        • SHA256 5ddf9212cbc6696941547b2e57b02092517bff6e70529f2ee14d0f593610e14f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        vi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\vi.pak
        • Size 151KB
        • SHA256 314ff8e069d132d43566143ffe0f5cebc990a015ac32ed550ac687a4ff78d56f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        zh-CN.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\zh-CN.pak
        • Size 112KB
        • SHA256 2b255293f6c85abb09162c825aea120c3e695156eb952d26d1e5f505ba324b37
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        zh-TW.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\locales\zh-TW.pak
        • Size 111KB
        • SHA256 1710cea2eb84e4feed749e9e497d01e16b1b244d1a621d380226b8ae7cce07c6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        resources.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\resources.pak
        • Size 4.9MB
        • SHA256 dd0cdd9201c5966dcc8b3ac3f587fdb05cad09547e267e0d16b8b1a3cff14772
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        app.asar
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\resources\app.asar
        • Size 34.0MB
        • SHA256 d412feead6f92f8fa22540fe3e3fc99a01997386860e1283888a5f55b8af09c7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        elevate.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        snapshot_blob.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\snapshot_blob.bin
        • Size 395KB
        • SHA256 f25ddf52f68de295bf1cdbd4f7fc6aa9d8f882a16a2f97b4e08e322b6b90546e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libEGL.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\swiftshader\libEGL.dll
        • Size 449KB
        • SHA256 711cf342b3a008c9116f6138358a67007a29d281d09cf23d20a5e17aa503ee9b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        libGLESv2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\swiftshader\libGLESv2.dll
        • Size 3.0MB
        • SHA256 a97834a44a1e28b574c967f1cb93b97cd19e26616439133c11c9dda4b26d605b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        v8_context_snapshot.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\v8_context_snapshot.bin
        • Size 709KB
        • SHA256 f033fb86fa92df1be464de590aa312cc016bc5d6bea26672c896bf4d3f1261cd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        vk_swiftshader_icd.json
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512
        Submit Download

        vulkan-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\7z-out\vulkan-1.dll
        • Size 830KB
        • SHA256 6e8beb4e9da77313f40e75c4ffaeeaa522b6f054fd792631ec1efcf8248ca63b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        StdUtils.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        nsis7z.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsa3E7B.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Network Persistent State
        • Path C:\Users\Admin\AppData\Roaming\GalacticShooter\Network\Network Persistent State
        • Size 491B
        • SHA256 5a85b7caeef3dc9372227e23edb122bcff997e3b65cbad230e27c0311f39cadf
        • MD5 SHA1 SHA512
        Submit Download

        Network Persistent State~RFe637ab4.TMP
        • Path C:\Users\Admin\AppData\Roaming\GalacticShooter\Network\Network Persistent State~RFe637ab4.TMP
        • Size 59B
        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
        • MD5 SHA1 SHA512
        Submit Download

        default.dic
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512
        Submit Download

        memory/692-674-0x000002C608EF0000-0x000002C608FDA000-memory.dmp
        Download

        memory/692-574-0x00007FF9F0AB0000-0x00007FF9F0AB1000-memory.dmp
        Download

        memory/692-573-0x00007FF9F1900000-0x00007FF9F1901000-memory.dmp
        Download

        memory/692-673-0x000002C6087B0000-0x000002C60884E000-memory.dmp
        Download

        memory/4484-719-0x00000252E9320000-0x00000252E9321000-memory.dmp
        Download

        memory/4484-720-0x00000252E9320000-0x00000252E9321000-memory.dmp
        Download

        memory/4484-718-0x00000252E9320000-0x00000252E9321000-memory.dmp
        Download

        memory/4484-725-0x00000252E9320000-0x00000252E9321000-memory.dmp
        Download

        memory/4484-728-0x00000252E9320000-0x00000252E9321000-memory.dmp
        Download

        memory/4484-730-0x00000252E9320000-0x00000252E9321000-memory.dmp
        Download

        memory/4484-729-0x00000252E9320000-0x00000252E9321000-memory.dmp
        Download

        memory/4484-726-0x00000252E9320000-0x00000252E9321000-memory.dmp
        Download

        memory/4484-724-0x00000252E9320000-0x00000252E9321000-memory.dmp
        Download

        memory/4484-727-0x00000252E9320000-0x00000252E9321000-memory.dmp
        Download

        memory/5472-547-0x00007FF9F0C00000-0x00007FF9F0C01000-memory.dmp
        Download

        memory/5472-672-0x000001C866070000-0x000001C86615A000-memory.dmp
        Download