Overview

overview

7

Static

static

3

typeUp-Set....0.exe

windows10-2004-x64

7

typeUp-Set....0.exe

windows11-21h2-x64

7

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-21h2-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-21h2-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-21h2-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-21h2-x64

3

LICENSES.c...m.html

windows10-2004-x64

4

LICENSES.c...m.html

windows11-21h2-x64

4

d3dcompiler_47.dll

windows10-2004-x64

3

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-21h2-x64

3

resources/...ch.exe

windows10-2004-x64

7

resources/...ch.exe

windows11-21h2-x64

7

resources/...ce.ps1

windows10-2004-x64

3

resources/...ce.ps1

windows11-21h2-x64

3

typeUp.exe

windows10-2004-x64

7

typeUp.exe

windows11-21h2-x64

4

vk_swiftshader.dll

windows10-2004-x64

3

vk_swiftshader.dll

windows11-21h2-x64

3

vulkan-1.dll

windows10-2004-x64

3

vulkan-1.dll

windows11-21h2-x64

3

LICENSES.c...m.html

windows10-2004-x64

4

LICENSES.c...m.html

windows11-21h2-x64

4

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-21h2-x64

3

resources/...ch.exe

windows10-2004-x64

7

resources/...ch.exe

windows11-21h2-x64

7

resources/...ce.ps1

windows10-2004-x64

3

Analysis

  • max time kernel
    149s
  • max time network
    157s
  • platform
    windows11-21h2_x64
  • resource
    win11-20260513-en
  • resource tags

    arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
  • submitted
    04/06/2026, 12:29

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    typeUp-Setup-0.2.0.exe
  • Size 174.8MB
  • Sample260604-ppb5raex6s
  • SHA256 b3ce1e972ab9515ab3715b7336abed36955d09d049e765a068e94e182ce58111
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoverypyinstaller

Malware Config

Signatures

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 22 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Drops file in Windows directory 1 IoCs
  • Detects Pyinstaller 1 IoCs
    pyinstaller
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\typeUp-Setup-0.2.0.exe
    "C:\Users\Admin\AppData\Local\Temp\typeUp-Setup-0.2.0.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4896
  • C:\Program Files\typeUp\typeUp.exe
    "C:\Program Files\typeUp\typeUp.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Drops file in Windows directory
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4996
    • C:\Program Files\typeUp\typeUp.exe
      "C:\Program Files\typeUp\typeUp.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\typeUp" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1592 --field-trial-handle=1596,i,2875611073123123962,7206298406017516881,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:4432
    • C:\Program Files\typeUp\typeUp.exe
      "C:\Program Files\typeUp\typeUp.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\typeUp" --mojo-platform-channel-handle=1960 --field-trial-handle=1596,i,2875611073123123962,7206298406017516881,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:752
    • C:\Program Files\typeUp\typeUp.exe
      "C:\Program Files\typeUp\typeUp.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\typeUp" --app-path="C:\Program Files\typeUp\resources\app.asar" --enable-sandbox --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2288 --field-trial-handle=1596,i,2875611073123123962,7206298406017516881,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5296
    • C:\Program Files\typeUp\typeUp.exe
      "C:\Program Files\typeUp\typeUp.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.22000.1 --user-data-dir="C:\Users\Admin\AppData\Roaming\typeUp" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAABEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=2512 --field-trial-handle=1596,i,2875611073123123962,7206298406017516881,262144 --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:1084

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        tr.pak
        • Path C:\Program Files\typeUp\locales\tr.pak
        • Size 465KB
        • SHA256 3f4658b3811b36f5cad794e48e6507335abfe78b0bfa0c80d1ef9c5d7bb410d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        launch.exe
        • Path C:\Program Files\typeUp\resources\resources\dist\launch.exe
        • Size 14.9MB
        • SHA256 e18215c1b7f148a6ab65c4570cea8e9610eae44f2a76e7a236729c10bf4021e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        LICENSE.electron.txt
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSES.chromium.html
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\LICENSES.chromium.html
        • Size 8.4MB
        • SHA256 ee3b1ab8794c749673ce9bd2dd302f12d69f0a1a4adfe40a64247746cc311829
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_100_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\chrome_100_percent.pak
        • Size 132KB
        • SHA256 24d92bbeb63d06b01010fe230c1e3a31e667a159be7e570a8efe68f83ed9ad40
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_200_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\chrome_200_percent.pak
        • Size 191KB
        • SHA256 55d873a9f3ac69bbf6eb6940443df8331ebd7aa57138681d615f3b89902447e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dcompiler_47.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.7MB
        • SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffmpeg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\ffmpeg.dll
        • Size 2.7MB
        • SHA256 742c956f892ad0833a5b8c52d19aa69940bc15bedbb42890598df61b263f6fed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icudtl.dat
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\icudtl.dat
        • Size 10.1MB
        • SHA256 7c40c811d30d459dbf04a04c141b60eb4247cd58a008fb836605317df665748f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libEGL.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\libEGL.dll
        • Size 469KB
        • SHA256 d9773c57e821ef87891375d687c68c0be75222316a666e8c49640aad80f60959
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libGLESv2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\libGLESv2.dll
        • Size 7.1MB
        • SHA256 49ace76d838e02994a03354e557ae65a305d9c5c8441774fa174177451e26dc9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        af.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\af.pak
        • Size 425KB
        • SHA256 73a8401e6dc17c4daf86b42c65b81359348f7e6b4d62d8637138e747bb3ff0ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        am.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\am.pak
        • Size 693KB
        • SHA256 0b1d326be9dabcda8e37740017383f2d8f1bec7a8fdb1f11ebe538c3632453fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ar.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\ar.pak
        • Size 758KB
        • SHA256 c8d405127b032587e6ae6426a35cb766139bae26170ca08d811354486ab667f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bg.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\bg.pak
        • Size 788KB
        • SHA256 13d08d2c4972cd18bb8ea8a57587dad29684c2336f73282dd3284b0649377cf8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\bn.pak
        • Size 1019KB
        • SHA256 2dc26dee345271f4606650912b0b7b5df68f621f2920864e0e36c1d1b22459b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ca.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\ca.pak
        • Size 479KB
        • SHA256 7d911cda51564500dd7a6de43a1e347869427c035b15fa25cad0526be9e055b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cs.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\cs.pak
        • Size 494KB
        • SHA256 cc6ff937d1c9fec4634db4e2f6c0718d2606fe2d5d25addf1314e110c5b78772
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        da.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\da.pak
        • Size 446KB
        • SHA256 1a51de04cb205c708520f1b013447f1a89f0b1330dbce6d1e71cf355319d1108
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        de.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\de.pak
        • Size 477KB
        • SHA256 163ea4c2cf67edd0526a8e18d3810872e92a1d4e17b5cf4f04107fda5967b0c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        el.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\el.pak
        • Size 865KB
        • SHA256 f1fe39af50f4bfe9edcea3af6c132e87d464d7277fb491ed95d7189b3157d20d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-GB.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\en-GB.pak
        • Size 389KB
        • SHA256 91bdbf5f1f6bcbcaf16e47865f72ec97d72c74174fb929f089d14c00989f91f4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-US.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\en-US.pak
        • Size 391KB
        • SHA256 0364c73f320e441b03cb2afcaaca3ffbfac51a3559dcd0ff99a1accf82c7f762
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es-419.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\es-419.pak
        • Size 473KB
        • SHA256 536339d99dee6e8c01f018d4700ddd92ce063f765766a48073aeb256669680c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\es.pak
        • Size 473KB
        • SHA256 232f41ab5996c917687276e82c177de208b36e77aa834bb5d94d6a331f4180fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        et.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\et.pak
        • Size 428KB
        • SHA256 c465da80b14981bdbc687b7c37bf70d2bd4b8e03293c04ae5410f84c91ef980e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fa.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\fa.pak
        • Size 703KB
        • SHA256 33bdd6eb52f648d475306f35b6103500b864672cbf39cc0fbd8c4ac84c997dec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\fi.pak
        • Size 438KB
        • SHA256 8f3e8ec0fbb471b45db65a77dc1013e3363f387d3d0c6a458c90f371907d0085
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fil.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\fil.pak
        • Size 495KB
        • SHA256 b6ce37b1aeb4ca17a7f78ebc8f97c2807f588dfc4ad3e0639005c626b5c9b939
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\fr.pak
        • Size 513KB
        • SHA256 a69f52162f6081a06f835ede10818218df6e211f00d0ef24561e6221f4696e61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\gu.pak
        • Size 996KB
        • SHA256 bbb17268412fb3e13584ca4dc90a94f984177d3c97ee89af2a57324709f8ed1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        he.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\he.pak
        • Size 616KB
        • SHA256 bb06d364a91b8641724254822b2eec5d0675e262a4cbf93b92494f601807dbef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\hi.pak
        • Size 1.0MB
        • SHA256 0936587aa072339f8dc347506e5553159319a686010ca1912bed1d830e107c6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\hr.pak
        • Size 477KB
        • SHA256 07effa557c8bc822626c05a4d299296f88d3da0654248c326d796f7c2de3ec64
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\hu.pak
        • Size 513KB
        • SHA256 70d4a0724a2e0e80ec047e7683eec7715c0fb5f88795cc97a63e4c2ee2237800
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        id.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\id.pak
        • Size 421KB
        • SHA256 60409d8b785dd057e3495190b18e6d6d235d8313555341cba5f64327e3d8c3aa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        it.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\it.pak
        • Size 466KB
        • SHA256 20408c09d9447f44aa920f2529d231072db8bb9c0c8b8fafa2db733561eb6964
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ja.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\ja.pak
        • Size 570KB
        • SHA256 1a726c500b5b3efdbc7b9e6626765dcb8957005f9c072c09d1f517587d6b673a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\kn.pak
        • Size 1.1MB
        • SHA256 14b332541c2cce0835202372f8cc822aef30b3575b651c96219a88b8d1381648
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ko.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\ko.pak
        • Size 481KB
        • SHA256 507fc8d2a468456f2842b65a111fc0c74fe1f56d5f5ac0d6e743aef186b43b2f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lt.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\lt.pak
        • Size 519KB
        • SHA256 4a80792cb9a401ebfa7ec3212182b5024d651ca6a5ead8fc9809d0d3ad4803cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\lv.pak
        • Size 516KB
        • SHA256 113073cf60ae3d2bcf8a61df655762e34ba28e4b35b97de33c18e13f959d76ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ml.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\ml.pak
        • Size 1.2MB
        • SHA256 e1f97ce3011d9231f23fe033bdbb0905c173921b18402d362bfc35224ff67db7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\mr.pak
        • Size 976KB
        • SHA256 fcb7c4aeed28ae4d16fa7b82d9571165aab0fdd46eb65d3ab29007231630ccef
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ms.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\ms.pak
        • Size 442KB
        • SHA256 a9f9ae23a3bc2ac919c5b46d16b7e1f3bff73698d2626260196210e101d119c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nb.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\nb.pak
        • Size 431KB
        • SHA256 4f3babcbec0d138654ec59fd8ab5fd58da2273237a587928b9687928c7ca10ff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\nl.pak
        • Size 444KB
        • SHA256 3b9ed5ed0dd07d8fa67412a046ab085137542c156876dbfe6f83376571af91a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\pl.pak
        • Size 497KB
        • SHA256 7f1a8392fe3aff4e6bb4bacbc1f4b395f08ecafda9f81e36b41b77fb4ab0bc76
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-BR.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\pt-BR.pak
        • Size 468KB
        • SHA256 b32fe8f602ec9800d59806e097e369fd065d8fbf473da40fd29289493489930c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-PT.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\pt-PT.pak
        • Size 469KB
        • SHA256 1fadff356a7e89a8ff2af3ddf84f70fd0ce69525c7787f8adae10beed9d76d4e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ro.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\ro.pak
        • Size 486KB
        • SHA256 b7ba9435d82f6bedd7005b6e868ee86f0bb6c4d7b312fe5f5d4afbd440ad5b85
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ru.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\ru.pak
        • Size 797KB
        • SHA256 0d4d0b8052519848abd182c44dfbf444a77a0c6994965c4a3001f0a3a4d1459e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\sk.pak
        • Size 502KB
        • SHA256 ec15c82956ebddb7b246c78045ad414ed34ca97d890a915070e252c8715096b0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\sl.pak
        • Size 483KB
        • SHA256 fcd27a9f5cb4b4be373da7076a8232006ebe020999fdf90d20745f16cd7ef223
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\sr.pak
        • Size 745KB
        • SHA256 b4cf2d19b5e443b57ca9d1189880458a7cacfe1c8b231265557a3fb58f597617
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\sv.pak
        • Size 433KB
        • SHA256 90dc45426bc1302aa05261f136881ddf038272e9ac315297aa8e5dae2b31109b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sw.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\sw.pak
        • Size 456KB
        • SHA256 722c86bd857a93ae06ca0b7cfe2cc04237a7ed5a52586cab7246336c802abe37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ta.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\ta.pak
        • Size 1.2MB
        • SHA256 1dd55659ef21082b9d58bed50f387c0e1fc0f28d0ede52251b9ada25ed2a657f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        te.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\te.pak
        • Size 1.1MB
        • SHA256 3b476d2ce7c72c3a10170808020dc3f1a87309f9f725b08217c4716b28d10888
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        th.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\th.pak
        • Size 918KB
        • SHA256 56665860fe6577fbe00543a47a15e10eceae83458815f2989d179e42af07f81b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        uk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\uk.pak
        • Size 798KB
        • SHA256 ca20af5982ae706f5029467901d7d66f90b261f03c7d240d0d1ab2fca2b50a7b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ur.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\ur.pak
        • Size 696KB
        • SHA256 91318006c880e427417a2b2fff81fd451769a5536fa16d1dc185972137bc2d6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\vi.pak
        • Size 551KB
        • SHA256 e7319ca18eba379772954132493bbabb448d4e97d755b85360ed337216b48800
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-CN.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\zh-CN.pak
        • Size 398KB
        • SHA256 7f85b35938fadca91bfd8f92ca53613718e375ef010c340947dd27a4ff66594c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-TW.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\locales\zh-TW.pak
        • Size 394KB
        • SHA256 e42640f5309add2ea7fd5a4db503b93e479ef14807710a06d7e53a0f261da8e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resources.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\resources.pak
        • Size 5.2MB
        • SHA256 50dfd64b881b8ff256c7fc4d3743389e6e2f95cf6da453629557812ddc0f7004
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        app-update.yml
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\resources\app-update.yml
        • Size 101B
        • SHA256 258d28c2d79edb334180233725a849565bc64490e88771881fa1637fb72fb2ea
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        elevate.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FormatService.ps1
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\resources\resources\format\FormatService.ps1
        • Size 21KB
        • SHA256 c14276a8fc1f1f0925d506933a07ee271c2d1cb20675de41d5d911503cee42ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        snapshot_blob.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\snapshot_blob.bin
        • Size 262KB
        • SHA256 94aa518fc892ee9a0f1eb5fe35b60123ee61a5f848864b00519b96d8d5d9786d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        v8_context_snapshot.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\v8_context_snapshot.bin
        • Size 581KB
        • SHA256 ed559c6e81b6003b2057e5c1b0bdb5b28ca094b895ca86c69fe11c5c9e014f06
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\vk_swiftshader.dll
        • Size 4.9MB
        • SHA256 58e2b5ab33366550207ed8e1f420b24c94b19fbe8e753f5a6c038beb829533a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader_icd.json
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vulkan-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\7z-out\vulkan-1.dll
        • Size 917KB
        • SHA256 7fb87a7f0d50007dca64bf845d444fc66116a57edecdd8487c91d6879b578a0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StdUtils.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UAC.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\UAC.dll
        • Size 14KB
        • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WinShell.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nsDialogs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsProcess.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\nsProcess.dll
        • Size 4KB
        • SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsis7z.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsx3092.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        default.dic
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512
        Submit Download

        data_0
        • Path C:\Users\Admin\AppData\Roaming\typeUp\DawnCache\data_0
        • Size 8KB
        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        data_1
        • Path C:\Users\Admin\AppData\Roaming\typeUp\DawnCache\data_1
        • Size 264KB
        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        data_2
        • Path C:\Users\Admin\AppData\Roaming\typeUp\DawnCache\data_2
        • Size 8KB
        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        data_3
        • Path C:\Users\Admin\AppData\Roaming\typeUp\DawnCache\data_3
        • Size 8KB
        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Network Persistent State
        • Path C:\Users\Admin\AppData\Roaming\typeUp\Network\Network Persistent State
        • Size 300B
        • SHA256 d81e18b2d11d84e204e381eb4210e92b5c2c679568d825b2e17b1ef8dcbb2228
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Network Persistent State~RFe59a8f8.TMP
        • Path C:\Users\Admin\AppData\Roaming\typeUp\Network\Network Persistent State~RFe59a8f8.TMP
        • Size 59B
        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Preferences
        • Path C:\Users\Admin\AppData\Roaming\typeUp\Preferences
        • Size 57B
        • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Preferences~RFe58a9c8.TMP
        • Path C:\Users\Admin\AppData\Roaming\typeUp\Preferences~RFe58a9c8.TMP
        • Size 86B
        • SHA256 8029940de92ae596278912bbbd6387d65f4e849d3c136287a1233f525d189c67
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/1084-816-0x000002324DB20000-0x000002324DB21000-memory.dmp
        Download

        memory/1084-815-0x000002324DB20000-0x000002324DB21000-memory.dmp
        Download

        memory/1084-814-0x000002324DB20000-0x000002324DB21000-memory.dmp
        Download

        memory/1084-826-0x000002324DB20000-0x000002324DB21000-memory.dmp
        Download

        memory/1084-825-0x000002324DB20000-0x000002324DB21000-memory.dmp
        Download

        memory/1084-824-0x000002324DB20000-0x000002324DB21000-memory.dmp
        Download

        memory/1084-823-0x000002324DB20000-0x000002324DB21000-memory.dmp
        Download

        memory/1084-822-0x000002324DB20000-0x000002324DB21000-memory.dmp
        Download

        memory/1084-821-0x000002324DB20000-0x000002324DB21000-memory.dmp
        Download

        memory/1084-820-0x000002324DB20000-0x000002324DB21000-memory.dmp
        Download

        memory/5296-747-0x00007FFA1CC40000-0x00007FFA1CC41000-memory.dmp
        Download

        memory/5296-748-0x00007FFA1CA70000-0x00007FFA1CA71000-memory.dmp
        Download