Overview

overview

7

Static

static

3

AtomX-Manager.exe

windows10-2004-x64

7

AtomX-Manager.exe

windows11-21h2-x64

7

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-21h2-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-21h2-x64

3

AtomX-Manager.exe

windows10-2004-x64

7

AtomX-Manager.exe

windows11-21h2-x64

4

LICENSES.c...m.html

windows10-2004-x64

4

LICENSES.c...m.html

windows11-21h2-x64

4

d3dcompiler_47.dll

windows10-2004-x64

1

dxcompiler.dll

windows10-2004-x64

1

dxcompiler.dll

windows11-21h2-x64

1

dxil.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

ffmpeg.dll

windows11-21h2-x64

1

libEGL.dll

windows10-2004-x64

1

libEGL.dll

windows11-21h2-x64

1

libGLESv2.dll

windows10-2004-x64

1

libGLESv2.dll

windows11-21h2-x64

1

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-21h2-x64

3

vk_swiftshader.dll

windows10-2004-x64

1

vk_swiftshader.dll

windows11-21h2-x64

1

vulkan-1.dll

windows10-2004-x64

1

vulkan-1.dll

windows11-21h2-x64

1

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-21h2-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    149s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    24/05/2026, 17:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    AtomX-Manager.exe
  • Size 74.4MB
  • Sample260524-vrf5daft7z
  • SHA256 703fcc06730fadd79ed1bb000dada722335ddcddf5736a05690f1b29da619736
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 25 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\AtomX-Manager.exe
    "C:\Users\Admin\AppData\Local\Temp\AtomX-Manager.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1708
  • C:\Program Files\AtomX-Manager\AtomX-Manager.exe
    "C:\Program Files\AtomX-Manager\AtomX-Manager.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Drops file in Windows directory
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:656
    • C:\Program Files\AtomX-Manager\AtomX-Manager.exe
      "C:\Program Files\AtomX-Manager\AtomX-Manager.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\AtomX Manager" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1640 --field-trial-handle=1644,i,9673829212377667516,8603862531197165544,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3324
    • C:\Program Files\AtomX-Manager\AtomX-Manager.exe
      "C:\Program Files\AtomX-Manager\AtomX-Manager.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\AtomX Manager" --mojo-platform-channel-handle=2084 --field-trial-handle=1644,i,9673829212377667516,8603862531197165544,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:3484
    • C:\Program Files\AtomX-Manager\AtomX-Manager.exe
      "C:\Program Files\AtomX-Manager\AtomX-Manager.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\AtomX Manager" --app-user-model-id=com.electron --app-path="C:\Program Files\AtomX-Manager\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2280 --field-trial-handle=1644,i,9673829212377667516,8603862531197165544,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2128
    • C:\Program Files\AtomX-Manager\AtomX-Manager.exe
      "C:\Program Files\AtomX-Manager\AtomX-Manager.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\AtomX Manager" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAACEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2260 --field-trial-handle=1644,i,9673829212377667516,8603862531197165544,262144 --enable-features=kWebSQLAccess --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand --variations-seed-version /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:3384

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        LICENSE.electron.txt
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSES.chromium.html
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\LICENSES.chromium.html
        • Size 8.7MB
        • SHA256 000ae5775ffa701d57afe7ac3831b76799e8250a2d0c328d1785cba935aab38d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_100_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\chrome_100_percent.pak
        • Size 163KB
        • SHA256 b7805392bfce11118165e3a4e747ac0ca515e4e0ceadab356d685575f6aa45fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_200_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\chrome_200_percent.pak
        • Size 222KB
        • SHA256 fac820a98b746a04ce14ec40c7268d6a58819133972b538f9720a5363c862e32
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dcompiler_47.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.7MB
        • SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dxcompiler.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\dxcompiler.dll
        • Size 20.8MB
        • SHA256 a6bd2e1c117ece9a6085e3f11d0284a30f373f2899a3182686fd6bba2c084ba2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dxil.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\dxil.dll
        • Size 1.4MB
        • SHA256 47ffdbd85438891b7963408ea26151ba26ae1b303bbdab3a55f0f11056085893
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffmpeg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\ffmpeg.dll
        • Size 2.7MB
        • SHA256 be75fbaf98b0ccceed2eef0d5479a6dda6cd610176c3bfa297657f4e922a0e60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icudtl.dat
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\icudtl.dat
        • Size 10.2MB
        • SHA256 f5170aa2b388d23bebf98784dd488a9bcb741470384a6a9a8d7a2638d768defb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libEGL.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\libEGL.dll
        • Size 467KB
        • SHA256 c421e3544b668d6eb85cb65eede555c7ed735969b1e380bb896c8fc28e123956
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libGLESv2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\libGLESv2.dll
        • Size 7.4MB
        • SHA256 f5c0b1df4e2308373261b232537a4ee6ccdcc320e0c7fd391a6ed8cca624aa3f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        af.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\af.pak
        • Size 464KB
        • SHA256 57670eae6d1871e648ad6148125ee82d08575bec5b323459fc14c3831570774a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        am.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\am.pak
        • Size 756KB
        • SHA256 b05dcb8136751aee5eced680a5bad935e386bfce657dd283d3ec00ee722fd740
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ar.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\ar.pak
        • Size 829KB
        • SHA256 7b6d035dcf6cf17ed7dbf055eaa6d1b2cf39c1d18743a540622602c3462bc919
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bg.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\bg.pak
        • Size 861KB
        • SHA256 50e4f6b9c387adf4baba3377c61d99326cc3987928d8d60b88d1ac29352820ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\bn.pak
        • Size 1.1MB
        • SHA256 e6adcfb4f3b3bccd4a27edadc168b503c36551cd6b27fb24043efeb21f691ce5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ca.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\ca.pak
        • Size 524KB
        • SHA256 b4efc6026115b7fac9f6b9cd360dfdd570cb5a16faf38d549fcad2b80e5f1fd2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cs.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\cs.pak
        • Size 539KB
        • SHA256 1c9448ea3aefce1a7e1491e73af91af772d8b22d538676a2beab690558e668fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        da.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\da.pak
        • Size 487KB
        • SHA256 cb3a8c6656eeabb019d7ea2f0fd24a8a199b1b843b4ff6f28d2ccbf917b1fa8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        de.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\de.pak
        • Size 521KB
        • SHA256 a0a0ff4d65a2253f0cf7af2894e74df4e05e1fbb3489e647c1ecf2578d660f19
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        el.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\el.pak
        • Size 944KB
        • SHA256 6a06d1d6b566214f7c3b693052beec488f7aae5ceeca26781a5d66fade39388b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-GB.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\en-GB.pak
        • Size 424KB
        • SHA256 42080ecd3f551e53bd1542f1c7f6cc3c178fdad53765f0666e2a5ff6304db48b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-US.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\en-US.pak
        • Size 428KB
        • SHA256 0db4f65e527553b9e7bee395f774cc9447971bf0b86d1728856b6c15b88207bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es-419.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\es-419.pak
        • Size 515KB
        • SHA256 4caafeb7ca914904185c9d0d81abb801d71a91e330ba4c4d4e8efec62f5c4dfd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\es.pak
        • Size 515KB
        • SHA256 deb202b76059e82f074f731cd8201e7a9a1212c3bdbe5bd7667700e853c20b9a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        et.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\et.pak
        • Size 468KB
        • SHA256 9e45ac59e1b0b92e34f20bad3a49d77a249fe452a530566cde3fc2cbae943b0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fa.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\fa.pak
        • Size 767KB
        • SHA256 b1fab15e9af79610b3125c2af8df57446354f432366ede7bf12462acd86683f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\fi.pak
        • Size 478KB
        • SHA256 ff53d982a01e8dfe175e4af7aab512964fe5996ef6b13400c6634e4b01e3fbea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fil.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\fil.pak
        • Size 541KB
        • SHA256 ab107369d45e105a4cb4f2f6bc8da2a8c1b6c65d5e94a7ab3e703e619c083dae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\fr.pak
        • Size 559KB
        • SHA256 6b5ca494e7c70af18b4d112b3226cd29ab1729c376a4c72182a78a858f9bd70c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\gu.pak
        • Size 1.1MB
        • SHA256 716ea0433e19edb5113dc8a25ae67c2587bc17c7fb63a93ac473bdcef8f72d34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        he.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\he.pak
        • Size 672KB
        • SHA256 25c090842584905842dea419798774eb4c22ea5e6cfbce6021396c9b742edada
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\hi.pak
        • Size 1.1MB
        • SHA256 88a59d65c8f4ef05885a12c43ce28ed0be550835ea09982dc04b6a6f175e4ee2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\hr.pak
        • Size 521KB
        • SHA256 742b1483adf47b86d95296817b4874b63119a5885d396bcbfbe061c8fbf8056c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\hu.pak
        • Size 561KB
        • SHA256 75966f97ba3b4f4a3d089f65a6a23ca20dc767ce62848d01977e38a383edae08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        id.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\id.pak
        • Size 462KB
        • SHA256 23d2be475fc8e98422e160e50d9245f601749df24e5f09b352853e0a15985916
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        it.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\it.pak
        • Size 509KB
        • SHA256 528680be954b25ee0bb5bcd9830edb3974ff3e62779520ed4a24553273f4a81b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ja.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\ja.pak
        • Size 622KB
        • SHA256 0644ec929b7f7a4afde3ecbf07d6808d7493923d8c39f7d1c8082b97443bcff7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\kn.pak
        • Size 1.2MB
        • SHA256 8433e5fb1aa16d6f864171fbaf18f8a020c143d898b99f032081c486595adb50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ko.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\ko.pak
        • Size 526KB
        • SHA256 b53f396e0c2d16cb459c7b14025e76e0f675f1e3c814c822bd46c2e9dc8369e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lt.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\lt.pak
        • Size 564KB
        • SHA256 1bd385b780f3d13d41f8cf782a322e37be889aee273ffde3d8959e0ebcaabd0b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\lv.pak
        • Size 564KB
        • SHA256 91642c04de64f88a5c49b4eeaf5d627554e60d56fc40e7cd58cd2601b0d3dbf2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ml.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\ml.pak
        • Size 1.3MB
        • SHA256 83d187cd70048f4129fa65ba148c74a04a47ee1f14218e7c85b36fe83e87b5e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\mr.pak
        • Size 1.0MB
        • SHA256 3d10d4d40802285f4be0d7f5ebca43aef2645b66f5afc36cf4f11e9e06510776
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ms.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\ms.pak
        • Size 484KB
        • SHA256 f27b9f0cf0007d874d3065d17a53fcccd6c3be9bfa83b48219d43515c4884130
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nb.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\nb.pak
        • Size 471KB
        • SHA256 96747543d9b2dbfb4482d4c24d7818d366545b2476633ad4fec8cc958ab760d3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\nl.pak
        • Size 484KB
        • SHA256 ab326437ed144590f84e9b7c2c38f9de44f85c5afefc084fb80ea92b773fc2ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\pl.pak
        • Size 543KB
        • SHA256 7be59c235d1a195491d4721de7bbee3aaa8473afd949b19625d274d5d94d0cfd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-BR.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\pt-BR.pak
        • Size 511KB
        • SHA256 6c0e879b0747847fd5026cb78f3c3ce1b2bad548ae36ab5a5daee02145994bb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-PT.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\pt-PT.pak
        • Size 512KB
        • SHA256 2fbaf34f158207b1c96c390848323840b14ce41c536ae7ad5c5180b25bb3dab2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ro.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\ro.pak
        • Size 531KB
        • SHA256 82e69f505222125ea62f8e90d8030d82a1bd49871192cb4274a8fd9d0e03d577
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ru.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\ru.pak
        • Size 872KB
        • SHA256 4998112d51815df726e6b9cedb9e2a1ff53785385aeb02d6059cce613d0880d9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\sk.pak
        • Size 548KB
        • SHA256 214d1b4d9ba67f6ac350b75be4b7744ee6c48b7af66477b5d91ad9a634d68f0d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\sl.pak
        • Size 526KB
        • SHA256 f8a28ca2c19ae8d3dc798f659ef06e42ab442018ac5ae572f4ed0c9630ab7274
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\sr.pak
        • Size 811KB
        • SHA256 a2bc6b064ff1f7b15707f61bd76ddd9d889bd982c4182e9e74272d39c6235c85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\sv.pak
        • Size 473KB
        • SHA256 6cf1e6fdf971efe5df86bdbccc3b1bf019563d0187c718d6cd8a552d51ffc0f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sw.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\sw.pak
        • Size 498KB
        • SHA256 1949953d638f266ce74d84c020174c074780166b880e7c2ec38bc6047bbb8ecc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ta.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\ta.pak
        • Size 1.3MB
        • SHA256 6348cc2d385b9808fdf1b815914dbfb26f552da4d10f85b2613a5e6e9f95b8fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        te.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\te.pak
        • Size 1.2MB
        • SHA256 09ab1ac2b69f868539d4f2e59dfea8c3c2f418a5455777e4c91d13c5ee55ab4c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        th.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\th.pak
        • Size 1003KB
        • SHA256 05efbe80e86282c83b83ee48adbd472c07c566f00e48d057c4824d310b8aabc9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\tr.pak
        • Size 509KB
        • SHA256 ec33033d23059660ab5b0d3c07e977e92bce91831a3cce562fae25b4c99890f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        uk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\uk.pak
        • Size 870KB
        • SHA256 efd0b7b8ca41f84f96ef4366ac52715b2126ddeb8f1c195e3aad62e3ff8b5636
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ur.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\ur.pak
        • Size 761KB
        • SHA256 2520ba8471c840aa075075524c4ad2bde10f43fa7a1b623aa14555180ecd30ef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\vi.pak
        • Size 602KB
        • SHA256 de6c6803a448ca6eefd59d2697f4c078fec09dee528db9e5479ee4644d39958d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-CN.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\zh-CN.pak
        • Size 435KB
        • SHA256 37ecde533c23e1a36877116ef1fce430580cc998748c29ca699cbb3e493229b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-TW.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\locales\zh-TW.pak
        • Size 430KB
        • SHA256 1bcfb95540fb203eee77f6d40329ae5573644f4c6db68518ad5f8222fb6ab4ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resources.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\resources.pak
        • Size 5.1MB
        • SHA256 6b192e10e461c1e5bf4ad1024f832f82f74b8491a455113a7dcccab45acd7168
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        app-update.yml
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\resources\app-update.yml
        • Size 98B
        • SHA256 11f65fc658cdafb4d7123bc4fc180afe52d97890776f141fb87b7a533ef8e362
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        app.asar
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\resources\app.asar
        • Size 6.7MB
        • SHA256 73b9ca8376711d6c22510f301fc46653da0cd6c6069694eadaeafe1318b6f1d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icon.png
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\resources\app.asar.unpacked\resources\icon.png
        • Size 248KB
        • SHA256 bfc1f2538073f8b8d9c9f78299594aead58f5a41b0ca8395ad79a6402f37f054
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        window-icon.ico
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\resources\app.asar.unpacked\resources\window-icon.ico
        • Size 31KB
        • SHA256 a8110d4b3fcf01f968245462bcdcac62eb99fe5c2e816467d04183fcca71cbf2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevate.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        snapshot_blob.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\snapshot_blob.bin
        • Size 270KB
        • SHA256 cf0fed7f66cafbbfcaaea3f1bd7f5ddc516fdb3152f0eaf9331bac467968d641
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        v8_context_snapshot.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\v8_context_snapshot.bin
        • Size 627KB
        • SHA256 f8eea7a9aac13273777adb2dcc1058372c0dfa01fa2366bdbc087a359f19c8df
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\vk_swiftshader.dll
        • Size 5.0MB
        • SHA256 3f695a3d4939e1e0cea964effe399e779863920f922c1dcf4074d007b5e0653b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader_icd.json
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vulkan-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\7z-out\vulkan-1.dll
        • Size 925KB
        • SHA256 988440c99a6e8726ecd5c49a4052a160d430985c34e03e8172278d7204fa4a07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StdUtils.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UAC.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\UAC.dll
        • Size 14KB
        • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WinShell.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nsDialogs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsis7z.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nstF3E.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        Network Persistent State
        • Path C:\Users\Admin\AppData\Roaming\AtomX Manager\Partitions\app\Network\Network Persistent State
        • Size 300B
        • SHA256 7cda78ee133ab6b91fa29df570083d72855aecd8da8c62b637ec1390cac88a9b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Network Persistent State~RFe596b62.TMP
        • Path C:\Users\Admin\AppData\Roaming\AtomX Manager\Partitions\app\Network\Network Persistent State~RFe596b62.TMP
        • Size 59B
        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        default.dic
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512
        Submit Download

        memory/3384-809-0x00000256596A0000-0x00000256596A1000-memory.dmp
        Download

        memory/3384-810-0x00000256596A0000-0x00000256596A1000-memory.dmp
        Download

        memory/3384-808-0x00000256596A0000-0x00000256596A1000-memory.dmp
        Download

        memory/3384-820-0x00000256596A0000-0x00000256596A1000-memory.dmp
        Download

        memory/3384-819-0x00000256596A0000-0x00000256596A1000-memory.dmp
        Download

        memory/3384-818-0x00000256596A0000-0x00000256596A1000-memory.dmp
        Download

        memory/3384-817-0x00000256596A0000-0x00000256596A1000-memory.dmp
        Download

        memory/3384-816-0x00000256596A0000-0x00000256596A1000-memory.dmp
        Download

        memory/3384-815-0x00000256596A0000-0x00000256596A1000-memory.dmp
        Download

        memory/3384-814-0x00000256596A0000-0x00000256596A1000-memory.dmp
        Download