Overview

overview

7

Static

static

3

build-g73i...qe.exe

windows10-2004-x64

7

build-g73i...qe.exe

windows11-21h2-x64

7

$PLUGINSDI...er.dll

windows10-2004-x64

3

$PLUGINSDI...er.dll

windows11-21h2-x64

3

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

LICENSES.c...m.html

windows10-2004-x64

4

LICENSES.c...m.html

windows11-21h2-x64

4

Modern Metal Fish.exe

windows10-2004-x64

7

d3dcompiler_47.dll

windows10-2004-x64

1

dxcompiler.dll

windows10-2004-x64

1

dxil.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

resources/app.js

windows10-2004-x64

3

resources/app.js

windows11-21h2-x64

3

resources/...on.dll

windows10-2004-x64

1

resources/...on.dll

windows11-21h2-x64

1

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-21h2-x64

3

vk_swiftshader.dll

windows10-2004-x64

1

vulkan-1.dll

windows10-2004-x64

1

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-21h2-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows11-21h2-x64

3

$R0/Uninst...sh.exe

windows10-2004-x64

7

$R0/Uninst...sh.exe

windows11-21h2-x64

7

Analysis

  • max time kernel
    149s
  • max time network
    92s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260130-en
  • resource tags

    arch:x64arch:x86image:win11-20260130-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    18/04/2026, 17:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    build-g73il414qys5cqe.exe
  • Size 134.8MB
  • Sample260418-vxnreadv7p
  • SHA256 82cbd87053b517fdf074353cc2383f3cb2bb8018ff52a2063bbe4326cd99bdea
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryexecution

Malware Config

Signatures

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 11 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Using powershell.exe command.

    execution
  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

    defense_evasion
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 25 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\build-g73il414qys5cqe.exe
    "C:\Users\Admin\AppData\Local\Temp\build-g73il414qys5cqe.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:5140
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
      2⤵
      • Hide Artifacts: Ignore Process Interrupts
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3720
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:3396
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\modern-metal-fish', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2896
  • C:\Users\Admin\AppData\Local\Programs\modern-metal-fish\Modern Metal Fish.exe
    "C:\Users\Admin\AppData\Local\Programs\modern-metal-fish\Modern Metal Fish.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:3796
    • C:\Users\Admin\AppData\Local\Programs\modern-metal-fish\Modern Metal Fish.exe
      "C:\Users\Admin\AppData\Local\Programs\modern-metal-fish\Modern Metal Fish.exe" --type=gpu-process --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Roaming\modern-metal-fish" --gpu-preferences=SAAAAAAAAADgAQAEAAAAAAAAAAAAAGAAAAAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --use-gl=disabled --field-trial-handle=1616,i,10468018649686239404,6528191817572590525,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1620,i,1030230777790761446,13113891106918135881,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1612 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4272
    • C:\Users\Admin\AppData\Local\Programs\modern-metal-fish\Modern Metal Fish.exe
      "C:\Users\Admin\AppData\Local\Programs\modern-metal-fish\Modern Metal Fish.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Roaming\modern-metal-fish" --field-trial-handle=1616,i,10468018649686239404,6528191817572590525,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1620,i,1030230777790761446,13113891106918135881,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1784 /prefetch:11
      2⤵
      • Executes dropped EXE
      PID:2072

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        powershell.exe.log
        • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\powershell.exe.log
        • Size 2KB
        • SHA256 56b3adbf18e46f82c8075f712785ea8e59e3125a90ce26b8b0d20687401340d6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        StartupProfileData-NonInteractive
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 16KB
        • SHA256 e8c6cf5ff2bf6346c21407525eef34c30a5a2649c0e31547baac34655cddfaad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StartupProfileData-NonInteractive
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 16KB
        • SHA256 3376c6ab194d98b1579f18507bfd8a66cbdae310731c412a2cb07ee422705263
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_100_percent.pak
        • Path C:\Users\Admin\AppData\Local\Programs\modern-metal-fish\chrome_100_percent.pak
        • Size 113KB
        • SHA256 34433fa04ddf5eb78b3b4e9c64a3af626e28641907ad7a6086614eb6a8f00a07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        __PSScriptPolicyTest_igstpi1m.vit.ps1
        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_igstpi1m.vit.ps1
        • Size 60B
        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSE.electron.txt
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSES.chromium.html
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\LICENSES.chromium.html
        • Size 18.6MB
        • SHA256 c1bc6cfdd6c5844720e5e6332698a6131f5402e77abf1fdb9646740d38065a65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_200_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\chrome_200_percent.pak
        • Size 183KB
        • SHA256 581c8d53199c10512d31a340699f9ad269f8eea5fe6bc49e05c1bde98ee612aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dcompiler_47.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.5MB
        • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dxcompiler.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\dxcompiler.dll
        • Size 24.5MB
        • SHA256 db72abfc0de76ff1504e240da07c1dfd8646ce46aa30df9bf4fb2258161f97d1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dxil.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\dxil.dll
        • Size 1.4MB
        • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffmpeg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\ffmpeg.dll
        • Size 3.0MB
        • SHA256 ced08d56da30dc9671c088870f8cd0820fb5b43d568be5588d9934b883cce43a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icudtl.dat
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\icudtl.dat
        • Size 10.3MB
        • SHA256 1cf67874b5a87a8363a86fb3f81e3cbbed54d389062dab8fb52308d5cf8c8612
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libEGL.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\libEGL.dll
        • Size 508KB
        • SHA256 f158a8da0e8b6c56bcdac67ed95446df6f984ed192d895a5c8040a43e8343bef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libGLESv2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\libGLESv2.dll
        • Size 7.6MB
        • SHA256 c3e413e81f52f64415481daf16232e18ae19caa6b0cf2768a02a0a51d3436b60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        af.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\af.pak
        • Size 595KB
        • SHA256 e91886ab2efa80ba17fb92ee8a6caacd4ed34ae8f16be9f7a43900f24c6af514
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        am.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\am.pak
        • Size 966KB
        • SHA256 0995da0a36c5bf89c56931acee91bf2c8cc4134fbee2bb662046e2f784397c3d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ar.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\ar.pak
        • Size 1.0MB
        • SHA256 01d9513381e17dae8697f6a04c2840956b814b104cbe3b8307e1a438e8967603
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bg.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\bg.pak
        • Size 1.1MB
        • SHA256 b2c5a13642446c60f580e2a526f63e46c0a14ea55d004b0cc0c0a31f2a2ece6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\bn.pak
        • Size 1.4MB
        • SHA256 e2b805f0b26d0dcb42eb8de7f726bcee4897342e035b128c03232b94232778f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ca.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\ca.pak
        • Size 670KB
        • SHA256 5c4adc1a394d6e985f089857c9c6f92d1832b2fdc4471140e543e277f07dec17
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cs.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\cs.pak
        • Size 696KB
        • SHA256 bf41c0e9ee98bceaf8d4cdd5982f42cd482f862cec5385ecc2afd911356ddb6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        da.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\da.pak
        • Size 626KB
        • SHA256 d53590736444cdd4bb4a31bad9236205451ce70fc9b5865c38264d77ac9bf0a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        de.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\de.pak
        • Size 671KB
        • SHA256 8554c585028234ddd70ef345c3a47b579c309b6e453d3e9ca673ba32b15f3841
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        el.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\el.pak
        • Size 1.2MB
        • SHA256 471570839cceb34a1db8f5b25fca6898194ba4784e82c8d72169885bb64a6216
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-GB.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\en-GB.pak
        • Size 542KB
        • SHA256 9637257dd7a936906b5e2c71d345f49a00225addedc1afddc1a06d906571ff49
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-US.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\en-US.pak
        • Size 548KB
        • SHA256 a15a41f74f809ae908b95645565c34b151483a5c04a94265b44aee12fd413b55
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es-419.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\es-419.pak
        • Size 661KB
        • SHA256 5ce9c791402daf80babb909649863480e9500537b1a12a752bf669df1915dd8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\es.pak
        • Size 658KB
        • SHA256 68f0f80d95ff86941b60f82a72b9b994dca0603abc767a3036b0beedb50b29a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        et.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\et.pak
        • Size 601KB
        • SHA256 0b73460e50b8bbf3737160441571eba058ffd4ce358c268ed51be5555bf45ff0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fa.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\fa.pak
        • Size 995KB
        • SHA256 0efecdc9b5f248db99e104611d06308f7580e75b5d74c710a86eadd92204b7a8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\fi.pak
        • Size 612KB
        • SHA256 db3640df151dd53cd8b48290eef15d2c1278918a16ef9551fa9d29986674c4ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fil.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\fil.pak
        • Size 694KB
        • SHA256 e6cd03f12ac45e96ae6fb55fbc3396a4f3367239d73e134056cc376b728652f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\fr.pak
        • Size 715KB
        • SHA256 519d2c2c4edc344a74943db5849622dcc7d19efef9e2430d27426ed9ccca96e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\gu.pak
        • Size 1.4MB
        • SHA256 d2a0b34fdf156de47bccd69f5d942e934b15faf90468eb8a5836eeee6a827efe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        he.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\he.pak
        • Size 871KB
        • SHA256 d945e14fefc77034090da57844f5b7d731183c81595da4ba666b36dfc6f07adb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\hi.pak
        • Size 1.5MB
        • SHA256 51c5bb6ab0a12b6c1b7a7e5792ab3a60bd2a07180cf9534fe38f2c1c5bceebb6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\hr.pak
        • Size 670KB
        • SHA256 e67b335f840e54947890f177d7ef1f3073bf070823ac85f36e0380dc5ee72869
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\hu.pak
        • Size 716KB
        • SHA256 5facf6dc1970a5f743191d2f1e031b42c06c66477612473017690b40484a6dd5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        id.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\id.pak
        • Size 592KB
        • SHA256 b27bc5757f7df301d106c56f98965f52bcbb35185e328561c3b717485a966ada
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        it.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\it.pak
        • Size 649KB
        • SHA256 192e40f475a710c4d99bb44bc081a1031c18aa5db673b0e119a4a24539e3ea07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ja.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\ja.pak
        • Size 791KB
        • SHA256 e633be299fbdd0af03690a9ddbe3190075623b9e6a8e69179334107f1291c69d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\kn.pak
        • Size 1.6MB
        • SHA256 e66d9e990ff0132d5c523c9109d4bb5f9e91795e986cbc3c6f6210e278593e1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ko.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\ko.pak
        • Size 670KB
        • SHA256 3d9ce2997479783fb05f36757376d89a9650c4a175d5176c01380744e8e3034e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lt.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\lt.pak
        • Size 729KB
        • SHA256 8d6476da7e1cf535cc188c87516ba59f8ab59947ce483c71559841adc194fb16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\lv.pak
        • Size 726KB
        • SHA256 8605b0a2d4764ea046f5f59f240ed035efbe8635d3ce9e97ea9fa9e9a23c1450
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ml.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\ml.pak
        • Size 1.6MB
        • SHA256 0361761ec842b8d53cd088d906e32a65bc05d574945b5751397527efd6ba43c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\mr.pak
        • Size 1.3MB
        • SHA256 1f0ca08f7ab7603d49209317412a874157352858a8baa648ed1859ddb28c81ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ms.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\ms.pak
        • Size 624KB
        • SHA256 e7c902b27b903de61592e82b2a27688afb82553063cb28b6ec63e39257790c5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nb.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\nb.pak
        • Size 598KB
        • SHA256 e7fe21421e211fb1f84a810846cfe8c33e94e88764247f9f2023ffde812d21bc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\nl.pak
        • Size 623KB
        • SHA256 8e2b2b32861dd2efc143b0a0d075e6e38bc0d62ded2a2771d42deb6675e09305
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\pl.pak
        • Size 696KB
        • SHA256 20c71e146768f607c0a61335b80b26bb9f4acb5c1cc7060bdfa5b9c144b4827a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-BR.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\pt-BR.pak
        • Size 652KB
        • SHA256 21ed64cbdf74e46bf51e292f62208471c6fe20e1db45735a9c0c3b188f3b7576
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-PT.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\pt-PT.pak
        • Size 655KB
        • SHA256 78068ad5447b9994873519e9a2e221f37d87a92528bf591229753679367562a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ro.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\ro.pak
        • Size 680KB
        • SHA256 39ba021557ddd98a693340cbbeac77f69641635b72ac6f427d4183c466e280f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ru.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\ru.pak
        • Size 1.1MB
        • SHA256 1ed59f0b501d213ef40073a60a0ce27ddc6fdc01a65d6873fd2f7c51e80d02e4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\sk.pak
        • Size 708KB
        • SHA256 1065e8d31a48d8e36c7dc2f4c70b1692a4618894e637092bf9aade7af82de033
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\sl.pak
        • Size 678KB
        • SHA256 254f626f3daf5d6f8278b87d59a6bc259dc5bc9c192a2875ea25607f915a03ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\sr.pak
        • Size 1.0MB
        • SHA256 383dca885a8e40efe87f713464207199f30dc933ddacf21f61a2b1e89ca944d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\sv.pak
        • Size 605KB
        • SHA256 8844d78e1f2932fc230a59f2b8698a432ba26060b251281e10f8e98020b125d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sw.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\sw.pak
        • Size 640KB
        • SHA256 bf86b4b75b827223632badfecdc8689497873c14b209c07fde825968d9f9d1c0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ta.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\ta.pak
        • Size 1.6MB
        • SHA256 0d630b4c27f0b8eb971381275ed9f64508420140b22070bb31581976a2ebfd11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        te.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\te.pak
        • Size 1.5MB
        • SHA256 64a9888abb8bbecefe23a2195b555e1f8d9fd8435351b63c595a926dd123142c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        th.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\th.pak
        • Size 1.3MB
        • SHA256 12e6592199914b67c29cca512ea826e8eb478cca62bc67d336a94c72fb78e4b4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\tr.pak
        • Size 651KB
        • SHA256 1093a6f7c31f94641830902bfe1027145a42a3847ed8af0869f12cfa2db48587
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        uk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\uk.pak
        • Size 1.1MB
        • SHA256 d7a3dcd2b95dbf0809d47b61005ce5fdfb4417514ecfad543f4cd9b746bfc962
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ur.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\ur.pak
        • Size 980KB
        • SHA256 ba94f43cf5fa31982d1a559262dfc13d34ad028e2d23dc5a11813f1645842ae2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\vi.pak
        • Size 774KB
        • SHA256 90ac2cd4502f502edf5b9cce089763df623a608849bc381efb3a3c20801341f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-CN.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\zh-CN.pak
        • Size 554KB
        • SHA256 da523b8e933ca98f571fe3ac398a53d362445410b3469288d43553d65d1bce3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-TW.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\locales\zh-TW.pak
        • Size 547KB
        • SHA256 2ac36905c94b7d4fba0b3cc3841f14dbf5ba08766eecdd787b45ea736d1e0dcb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resources.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\resources.pak
        • Size 6.4MB
        • SHA256 302671ba7bf6d6352773d34de852793027d389c4afde1db0977e1b76e39d5938
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        app.asar
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\resources\app.asar
        • Size 6.4MB
        • SHA256 c39d63a7f1c6e2173ba475fb1f2a1e3940199652c5df0599dfd34f04fdbf88d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevate.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        snapshot_blob.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\snapshot_blob.bin
        • Size 333KB
        • SHA256 c6ea347fb4987014688f3b07ccf051ff21a81e30fa595aeb3e105cfb4ad27288
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        v8_context_snapshot.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\v8_context_snapshot.bin
        • Size 698KB
        • SHA256 ef9f068c5a1494a02acff29f7c7cdde1a2d10d4ac46ca15b735124e8b48ddace
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\vk_swiftshader.dll
        • Size 5.4MB
        • SHA256 b200865044493fb316dc3d49bc23d559fbedae74c99f7b0cdc1ab8daeb31e4c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader_icd.json
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vulkan-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\7z-out\vulkan-1.dll
        • Size 930KB
        • SHA256 1bdcb5d3a2bad797dd3d35ffdf789be9fbcde24622853f9a112c7147f3d51a3e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SpiderBanner.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\SpiderBanner.dll
        • Size 9KB
        • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StdUtils.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsExec.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\nsExec.dll
        • Size 6KB
        • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsis7z.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv3A36.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2896-101-0x0000000005050000-0x00000000050B4000-memory.dmp
        Download

        memory/2896-99-0x0000000070BF0000-0x0000000070F47000-memory.dmp
        Download

        memory/2896-92-0x0000000070A70000-0x0000000070ABC000-memory.dmp
        Download

        memory/3396-79-0x0000000007E70000-0x0000000007E81000-memory.dmp
        Download

        memory/3396-69-0x0000000006330000-0x0000000006687000-memory.dmp
        Download

        memory/3396-61-0x0000000005590000-0x00000000055A0000-memory.dmp
        Download

        memory/3396-62-0x0000000005590000-0x00000000055A0000-memory.dmp
        Download

        memory/3396-71-0x0000000070A70000-0x0000000070ABC000-memory.dmp
        Download

        memory/3396-78-0x0000000007F00000-0x0000000007F96000-memory.dmp
        Download

        memory/3396-81-0x00000000032F0000-0x0000000003354000-memory.dmp
        Download

        memory/3720-49-0x0000000007570000-0x000000000758A000-memory.dmp
        Download

        memory/3720-33-0x0000000006200000-0x000000000621E000-memory.dmp
        Download

        memory/3720-50-0x00000000075F0000-0x00000000075FA000-memory.dmp
        Download

        memory/3720-52-0x00000000077B0000-0x00000000077D4000-memory.dmp
        Download

        memory/3720-48-0x0000000007BF0000-0x000000000826A000-memory.dmp
        Download

        memory/3720-47-0x00000000074C0000-0x0000000007564000-memory.dmp
        Download

        memory/3720-46-0x00000000067E0000-0x00000000067FE000-memory.dmp
        Download

        memory/3720-38-0x0000000004E80000-0x0000000004E90000-memory.dmp
        Download

        memory/3720-39-0x0000000004E80000-0x0000000004E90000-memory.dmp
        Download

        memory/3720-37-0x0000000070A70000-0x0000000070ABC000-memory.dmp
        Download

        memory/3720-36-0x00000000071D0000-0x0000000007204000-memory.dmp
        Download

        memory/3720-35-0x000000007F610000-0x000000007F620000-memory.dmp
        Download

        memory/3720-34-0x0000000006740000-0x000000000678C000-memory.dmp
        Download

        memory/3720-51-0x0000000007780000-0x00000000077AA000-memory.dmp
        Download

        memory/3720-32-0x0000000005E20000-0x0000000006177000-memory.dmp
        Download

        memory/3720-25-0x0000000005D00000-0x0000000005D66000-memory.dmp
        Download

        memory/3720-24-0x0000000005C20000-0x0000000005C86000-memory.dmp
        Download

        memory/3720-23-0x0000000005480000-0x00000000054A2000-memory.dmp
        Download

        memory/3720-22-0x00000000054C0000-0x0000000005AEA000-memory.dmp
        Download

        memory/3720-21-0x0000000004E80000-0x0000000004E90000-memory.dmp
        Download

        memory/3720-20-0x0000000004D60000-0x0000000004D96000-memory.dmp
        Download

        memory/3720-19-0x0000000004E80000-0x0000000004E90000-memory.dmp
        Download

        memory/3720-53-0x0000000070BD0000-0x0000000070F27000-memory.dmp
        Download

        memory/3720-56-0x0000000004CB0000-0x0000000004D14000-memory.dmp
        Download

        memory/5140-240-0x0000000002430000-0x0000000002494000-memory.dmp
        Download

        memory/5140-735-0x0000000002430000-0x0000000002494000-memory.dmp
        Download