Overview

overview

6

Static

static

1

7l_gta-v_l...up.exe

windows10-2004-x64

6

7l_gta-v_l...up.exe

windows11-ltsc_2024-x64

6

Analysis

  • max time kernel
    139s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260513-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260513-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    29/06/2026, 12:19

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    7l_gta-v_latest_setup.exe
  • Size 6.8MB
  • Sample260629-pg6dmac16x
  • SHA256 02a9a1a732f31277a7b36b8e054fb244a96b753ca25cf52a05f3d125a06f32ea
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
6/10
adwaredefense_evasiondiscoveryinstallerpersistenceprivilege_escalationspywaretrojan

Malware Config

Signatures

  • Modifies Windows Firewall 2 TTPs 4 IoCs
    defense_evasion
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 5 IoCs
  • Checks whether UAC is enabled 1 TTPs 2 IoCs
    defense_evasiontrojan
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Event Triggered Execution: Netsh Helper DLL 1 TTPs 12 IoCs

    Netsh.exe (also referred to as Netshell) is a command-line scripting utility used to interact with the network configuration of a system.

    persistenceprivilege_escalation
  • System Location Discovery: System Language Discovery 1 TTPs 9 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Inno Setup is an open-source installation builder for Windows applications. 6 IoCs

    Inno Setup installer

    installer
  • Delays execution with timeout.exe 1 IoCs
    defense_evasion
  • Enumerates system info in registry 2 TTPs 6 IoCs
  • Kills process with taskkill 3 IoCs
    defense_evasion
  • Modifies Internet Explorer settings 1 TTPs 4 IoCs
    adwarespyware
  • Modifies data under HKEY_USERS 2 IoCs
  • Modifies registry class 18 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 3 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 39 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\7l_gta-v_latest_setup.exe
    "C:\Users\Admin\AppData\Local\Temp\7l_gta-v_latest_setup.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2624
    • C:\Users\Admin\AppData\Local\Temp\is-C2J454T2L8.tmp\7l_gta-v_latest_setup.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-C2J454T2L8.tmp\7l_gta-v_latest_setup.tmp" /SL5="$601D8,4180496,1024512,C:\Users\Admin\AppData\Local\Temp\7l_gta-v_latest_setup.exe"
      2⤵
      • Checks computer location settings
      • Drops file in Program Files directory
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3032
      • C:\Windows\SYSTEM32\taskkill.exe
        "taskkill.exe" /f /im "Run_GTAV.exe"
        3⤵
        • Kills process with taskkill
        • Suspicious use of AdjustPrivilegeToken
        PID:548
      • C:\Program Files\GTA V\Run_GTAV.exe
        "C:\Program Files\GTA V\Run_GTAV.exe" - forceupdate installp2p
        3⤵
        • Checks computer location settings
        • Drops file in Program Files directory
        • Executes dropped EXE
        • Loads dropped DLL
        • Checks whether UAC is enabled
        • System Location Discovery: System Language Discovery
        • Modifies Internet Explorer settings
        • Modifies registry class
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:1056
        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Run_GTAV.exe --webview-exe-version=1.6.9 --user-data-dir="C:\Users\Admin\AppData\Local\7Launcher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=1056.2984.9048069661114532398
          4⤵
          • Enumerates system info in registry
          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
          • Suspicious use of WriteProcessMemory
          PID:3820
          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\7Launcher\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x15c,0x160,0x164,0x138,0x16c,0x7ffcec58b078,0x7ffcec58b084,0x7ffcec58b090
            5⤵
              PID:4608
            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\7Launcher\EBWebView" --webview-exe-name=Run_GTAV.exe --webview-exe-version=1.6.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1712,i,166325232168401581,15647826232828608045,262144 --variations-seed-version --mojo-platform-channel-handle=1744 /prefetch:2
              5⤵
                PID:4404
              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\7Launcher\EBWebView" --webview-exe-name=Run_GTAV.exe --webview-exe-version=1.6.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2052,i,166325232168401581,15647826232828608045,262144 --variations-seed-version --mojo-platform-channel-handle=2064 /prefetch:3
                5⤵
                  PID:2496
                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\7Launcher\EBWebView" --webview-exe-name=Run_GTAV.exe --webview-exe-version=1.6.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2392,i,166325232168401581,15647826232828608045,262144 --variations-seed-version --mojo-platform-channel-handle=2404 /prefetch:8
                  5⤵
                    PID:2352
                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\7Launcher\EBWebView" --webview-exe-name=Run_GTAV.exe --webview-exe-version=1.6.9 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3676,i,166325232168401581,15647826232828608045,262144 --variations-seed-version --mojo-platform-channel-handle=3684 /prefetch:1
                    5⤵
                      PID:3984
                  • C:\Program Files\GTA V\upt.exe
                    "C:\Program Files\GTA V\upt.exe"
                    4⤵
                    • Executes dropped EXE
                    • System Location Discovery: System Language Discovery
                    • Suspicious use of WriteProcessMemory
                    PID:3308
                    • C:\Users\Admin\AppData\Local\Temp\is-OL7XD4ILY9.tmp\upt.tmp
                      "C:\Users\Admin\AppData\Local\Temp\is-OL7XD4ILY9.tmp\upt.tmp" /SL5="$401EA,4572399,1024512,C:\Program Files\GTA V\upt.exe"
                      5⤵
                      • Checks computer location settings
                      • Drops file in Program Files directory
                      • Executes dropped EXE
                      • System Location Discovery: System Language Discovery
                      • Suspicious behavior: EnumeratesProcesses
                      • Suspicious use of FindShellTrayWindow
                      • Suspicious use of WriteProcessMemory
                      PID:4868
                      • C:\Windows\system32\taskkill.exe
                        "taskkill.exe" /f /im "Run_GTAV.exe"
                        6⤵
                        • Kills process with taskkill
                        • Suspicious use of AdjustPrivilegeToken
                        PID:3180
                      • C:\Windows\system32\taskkill.exe
                        "taskkill.exe" /f /im "Run_GTAV.exe"
                        6⤵
                        • Kills process with taskkill
                        • Suspicious use of AdjustPrivilegeToken
                        PID:884
                      • C:\Program Files\GTA V\Run_GTAV.exe
                        "C:\Program Files\GTA V\Run_GTAV.exe"
                        6⤵
                        • Drops file in Program Files directory
                        • Executes dropped EXE
                        • Loads dropped DLL
                        • Checks whether UAC is enabled
                        • Modifies Internet Explorer settings
                        • Modifies registry class
                        • Suspicious use of FindShellTrayWindow
                        • Suspicious use of SetWindowsHookEx
                        • Suspicious use of WriteProcessMemory
                        PID:2960
                        • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                          "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --embedded-browser-webview=1 --webview-exe-name=Run_GTAV.exe --webview-exe-version=1.7.0.5 --user-data-dir="C:\Users\Admin\AppData\Local\7Launcher\EBWebView" --noerrdialogs --embedded-browser-webview-dpi-awareness=2 --mojo-named-platform-channel-pipe=2960.4132.12381065917996013047
                          7⤵
                          • Enumerates system info in registry
                          • Modifies data under HKEY_USERS
                          • Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
                          • Suspicious use of WriteProcessMemory
                          PID:3784
                          • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                            "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Local\7Launcher\EBWebView /prefetch:4 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Crashpad --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=132.0.6834.160 "--annotation=exe=C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --annotation=plat=Win64 "--annotation=prod=Edge WebView2" --annotation=ver=132.0.2957.140 --initial-client-data=0x160,0x164,0x168,0x13c,0x170,0x7ffcec58b078,0x7ffcec58b084,0x7ffcec58b090
                            8⤵
                              PID:4292
                            • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                              "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=gpu-process --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\7Launcher\EBWebView" --webview-exe-name=Run_GTAV.exe --webview-exe-version=1.7.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --always-read-main-dll --field-trial-handle=1824,i,7709253230885389518,3267623947413212980,262144 --variations-seed-version --mojo-platform-channel-handle=1820 /prefetch:2
                              8⤵
                                PID:768
                              • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\7Launcher\EBWebView" --webview-exe-name=Run_GTAV.exe --webview-exe-version=1.7.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=1876,i,7709253230885389518,3267623947413212980,262144 --variations-seed-version --mojo-platform-channel-handle=2108 /prefetch:3
                                8⤵
                                  PID:1036
                                • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                  "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\7Launcher\EBWebView" --webview-exe-name=Run_GTAV.exe --webview-exe-version=1.7.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --always-read-main-dll --field-trial-handle=2012,i,7709253230885389518,3267623947413212980,262144 --variations-seed-version --mojo-platform-channel-handle=2320 /prefetch:8
                                  8⤵
                                    PID:4584
                                  • C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe
                                    "C:\Program Files (x86)\Microsoft\EdgeWebView\Application\132.0.2957.140\msedgewebview2.exe" --type=renderer --string-annotations --noerrdialogs --user-data-dir="C:\Users\Admin\AppData\Local\7Launcher\EBWebView" --webview-exe-name=Run_GTAV.exe --webview-exe-version=1.7.0.5 --embedded-browser-webview=1 --embedded-browser-webview-dpi-awareness=2 --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --js-flags="--harmony-weak-refs-with-cleanup-some --expose-gc --ms-user-locale=" --always-read-main-dll --field-trial-handle=3476,i,7709253230885389518,3267623947413212980,262144 --variations-seed-version --mojo-platform-channel-handle=3492 /prefetch:1
                                    8⤵
                                      PID:4284
                                  • C:\Program Files\GTA V\7launcher\tools\aria2\aria2c.exe
                                    "C:\Program Files\GTA V\7launcher\tools\aria2\aria2c.exe" --enable-rpc=true --rpc-listen-all=false --rpc-save-upload-metadata=false --pause=true --pause-metadata=true --summary-interval=0 --console-log-level=warn --rpc-listen-port=50614 --dir="C:\Users\Admin\AppData\Local\Temp\7launcher-aria-probe-05E03FAE-7F6F-4D71-97BB-A288D2AE944F\payload"
                                    7⤵
                                    • Executes dropped EXE
                                    • System Location Discovery: System Language Discovery
                                    PID:4872
                                  • C:\Program Files\GTA V\7launcher\tools\aria2\aria2c.exe
                                    "C:\Program Files\GTA V\7launcher\tools\aria2\aria2c.exe" "http://up.7launcher.com/torrents/gtav_latest.torrent" --follow-torrent=mem --human-readable=false --listen-port=10779 --dht-listen-port=10779 --continue=true --conf-path="C:\Program Files\GTA V\7launcher\tools\aria2\aria2.conf" --dir="C:\Program Files\GTA V\!Setup"
                                    7⤵
                                    • Drops file in Program Files directory
                                    • Executes dropped EXE
                                    • System Location Discovery: System Language Discovery
                                    PID:2264
                                • C:\Windows\SysWOW64\cmd.exe
                                  C:\Windows\system32\cmd.exe /c ""C:\Program Files\GTA V\cleanup.bat" "
                                  6⤵
                                  • System Location Discovery: System Language Discovery
                                  • Suspicious use of WriteProcessMemory
                                  PID:4628
                                  • C:\Windows\SysWOW64\timeout.exe
                                    timeout /t 1 /nobreak
                                    7⤵
                                    • System Location Discovery: System Language Discovery
                                    • Delays execution with timeout.exe
                                    PID:2228
                          • C:\Windows\system32\cmd.exe
                            "cmd.exe" /c netsh advfirewall firewall add rule name="7Launcher P2P In" dir=in action=allow program="C:\Program Files\GTA V\7launcher\tools\aria2\aria2c.exe" description="7Launcher P2P In" enable=yes profile=any edge=yes interfacetype=any & netsh advfirewall firewall add rule name="7Launcher P2P Out" dir=out action=allow program="C:\Program Files\GTA V\7launcher\tools\aria2\aria2c.exe" description="7Launcher P2P Out" enable=yes profile=any interfacetype=any & netsh advfirewall firewall add rule name="7Launcher - GTA 5 In" dir=in action=allow program="C:\Program Files\GTA V\Run_GTAV.exe" description="7Launcher - GTA 5 In" enable=yes profile=any edge=yes interfacetype=any & netsh advfirewall firewall add rule name="7Launcher - GTA 5 Out" dir=out action=allow program="C:\Program Files\GTA V\Run_GTAV.exe" description="7Launcher - GTA 5 Out" enable=yes profile=any interfacetype=any
                            3⤵
                            • Suspicious use of WriteProcessMemory
                            PID:3024
                            • C:\Windows\system32\netsh.exe
                              netsh advfirewall firewall add rule name="7Launcher P2P In" dir=in action=allow program="C:\Program Files\GTA V\7launcher\tools\aria2\aria2c.exe" description="7Launcher P2P In" enable=yes profile=any edge=yes interfacetype=any
                              4⤵
                              • Modifies Windows Firewall
                              • Event Triggered Execution: Netsh Helper DLL
                              PID:2372
                            • C:\Windows\system32\netsh.exe
                              netsh advfirewall firewall add rule name="7Launcher P2P Out" dir=out action=allow program="C:\Program Files\GTA V\7launcher\tools\aria2\aria2c.exe" description="7Launcher P2P Out" enable=yes profile=any interfacetype=any
                              4⤵
                              • Modifies Windows Firewall
                              • Event Triggered Execution: Netsh Helper DLL
                              PID:4964
                            • C:\Windows\system32\netsh.exe
                              netsh advfirewall firewall add rule name="7Launcher - GTA 5 In" dir=in action=allow program="C:\Program Files\GTA V\Run_GTAV.exe" description="7Launcher - GTA 5 In" enable=yes profile=any edge=yes interfacetype=any
                              4⤵
                              • Modifies Windows Firewall
                              • Event Triggered Execution: Netsh Helper DLL
                              PID:4832
                            • C:\Windows\system32\netsh.exe
                              netsh advfirewall firewall add rule name="7Launcher - GTA 5 Out" dir=out action=allow program="C:\Program Files\GTA V\Run_GTAV.exe" description="7Launcher - GTA 5 Out" enable=yes profile=any interfacetype=any
                              4⤵
                              • Modifies Windows Firewall
                              • Event Triggered Execution: Netsh Helper DLL
                              PID:2348

                      Network

                            MITRE ATT&CK Enterprise v16

                            Replay Monitor

                            Loading Replay Monitor...

                            Downloads

                            gtav_icon.ico
                            • Path C:\Program Files\GTA V\7launcher\gtav_icon.ico
                            • Size 181KB
                            • SHA256 f6b3858eae36a65344970329d9c52eb7dab075b2ce4b8cd863d4b64e52ac952e
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            .7launcher-write-probe-2960.tmp
                            • Path C:\Program Files\GTA V\7launcher\logs\.7launcher-write-probe-2960.tmp
                            • Size 24B
                            • SHA256 6591262c7b96c1d9d414cff9a3e93970ce9923d5b5e248605421ab9ec597440a
                            • MD5 SHA1 SHA512
                            Submit Download

                            7lcfg_gtav.ini
                            • Path C:\Program Files\GTA V\7lcfg_gtav.ini
                            • Size 38B
                            • SHA256 21d1504a9cc3a6c0ee2a01db1162f0914124d76b8fcff06197c96b095f24300e
                            • MD5 SHA1 SHA512
                            Submit Download

                            Run_GTAV.exe
                            • Path C:\Program Files\GTA V\Run_GTAV.exe
                            • Size 7.0MB
                            • SHA256 f8d806ff50ac04e83a4b9d9e3445d914463d57296df3144d0b6b66e9d4425155
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Run_GTAV.exe
                            • Path C:\Program Files\GTA V\Run_GTAV.exe
                            • Size 9.7MB
                            • SHA256 450fc26d0b618ad1be0322bd4917a45e14bfeba99c15b8d61271ebcffb617b0c
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            WebView2Loader.dll
                            • Path C:\Program Files\GTA V\WebView2Loader.dll
                            • Size 117KB
                            • SHA256 9873644f2668960d66e19d0c62f7812b1b3f35c1f53e8cd61edbb1be311666b0
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            WebView2Loader.dll
                            • Path C:\Program Files\GTA V\WebView2Loader.dll
                            • Size 159KB
                            • SHA256 12f7708910e1aac5cc9ac43603d122f1d2e770ae2651830a07ef8b3117f28c55
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            cleanup.bat
                            • Path C:\Program Files\GTA V\cleanup.bat
                            • Size 152B
                            • SHA256 5fe5f3d07791afd82510b4db1c174c781f5cc09bd75f38a2bf33d83bdbb8c019
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            inf.ini
                            • Path C:\Program Files\GTA V\inf.ini
                            • Size 3KB
                            • SHA256 e2f8df1e16b900f6befbaabc1bb62eed4ef6dc0ea4061a4db556b9f877df1482
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            socialclub_emu.ini
                            • Path C:\Program Files\GTA V\socialclub_emu.ini
                            • Size 30B
                            • SHA256 cb5a500d83665c2b1481b3520569280ee602fc754e66c5d6c43820984a4ee59b
                            • MD5 SHA1 SHA512
                            Submit Download

                            upt.exe
                            • Path C:\Program Files\GTA V\upt.exe
                            • Size 7.2MB
                            • SHA256 cd12eb2bf40d93643f602ffa20c8801e60f6f6a4792ca14641e853d8dd695579
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            settings.dat
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Crashpad\settings.dat
                            • Size 280B
                            • SHA256 2c0b1db68aaa4d39f475c2a50188c401e16d6fff2dd3fc98960585410cf6b0b0
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            settings.dat
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Crashpad\settings.dat
                            • Size 280B
                            • SHA256 3a1cd7acc432509c3d521b9ef9fec7710ea5ceb183dbabf101d690c918e62d52
                            • MD5 SHA1 SHA512
                            Submit Download

                            settings.dat
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Crashpad\settings.dat
                            • Size 280B
                            • SHA256 2ab43ac9e46a4860458d0f37c25abcd2e46d2b89dde4520523690af702797853
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            throttle_store.dat
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Crashpad\throttle_store.dat
                            • Size 20B
                            • SHA256 41c91a9c93d76295746a149dce7ebb3b9ee2cb551d84365fff108e59a61cc304
                            • MD5 SHA1 SHA512
                            Submit Download

                            data_0
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Cache\Cache_Data\data_0
                            • Size 44KB
                            • SHA256 468456974fd86b33647942820dce7284879acfab9e9e6eca008e1fdcf9006fb5
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_1
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Cache\Cache_Data\data_1
                            • Size 264KB
                            • SHA256 0ff81bfe8be0518d8f0d6ac60e1782d0c04745701c9ec549404fddf3e0604f8f
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Cache\Cache_Data\index
                            • Size 256KB
                            • SHA256 9b3f7e91cd1305dbc926d4e93ed3438a7c5592470529a989ae445ede9b58373e
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Code Cache\js\index-dir\the-real-index
                            • Size 120B
                            • SHA256 29e6dcc83070c71002abb80735b8509b205ffd2f560332fd3e2133b6591f1720
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            data_0
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\DawnWebGPUCache\data_0
                            • Size 8KB
                            • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_1
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\DawnWebGPUCache\data_1
                            • Size 264KB
                            • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_2
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\DawnWebGPUCache\data_2
                            • Size 8KB
                            • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            data_3
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\DawnWebGPUCache\data_3
                            • Size 8KB
                            • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            MANIFEST-000001
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Extension Rules\MANIFEST-000001
                            • Size 41B
                            • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
                            • MD5 SHA1 SHA512
                            Submit Download

                            History
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\History
                            • Size 184KB
                            • SHA256 7ac0739f534f89ae63c46cd41f0cffaf0335fe348933e3e3d660044351f2a746
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Cookies
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Network\Cookies
                            • Size 20KB
                            • SHA256 e87b3d155c7582d4c1d889308b58f84e8fe90a1581014b21b785d6694bd156cc
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Network Persistent State
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Network\Network Persistent State
                            • Size 223B
                            • SHA256 2302bc0d2ee31cd6fa1cb76945b7efc2e70b86c84de67ec209cb87a76dfebcf2
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            Network Persistent State~RFe5954cd.TMP
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Network\Network Persistent State~RFe5954cd.TMP
                            • Size 59B
                            • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            Reporting and NEL
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Network\Reporting and NEL
                            • Size 36KB
                            • SHA256 951ea521116baf347ce89b628eabc22479fb8e3edfb7597659db2174fbb59804
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            SCT Auditing Pending Reports
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Network\SCT Auditing Pending Reports
                            • Size 2B
                            • SHA256 4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945
                            • MD5 SHA1 SHA512
                            Submit Download

                            Sdch Dictionaries
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Network\Sdch Dictionaries
                            • Size 40B
                            • SHA256 6028bd681dbf11a0a58dde8a0cd884115c04caa59d080ba51bde1b086ce0079d
                            • MD5 SHA1 SHA512
                            Submit Download

                            TransportSecurity
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Network\TransportSecurity
                            • Size 355B
                            • SHA256 8817219692804ca7983676a6dcd3e8a46ba0eb5902a68949068c2b2ce4c67987
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            TransportSecurity
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Network\TransportSecurity
                            • Size 188B
                            • SHA256 d0f1d2d8673aec0c09cc7cb3168ee0a61d4410d9f0fda8b75253d6ed7b1f10bd
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            TransportSecurity~RFe5954cd.TMP
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Network\TransportSecurity~RFe5954cd.TMP
                            • Size 188B
                            • SHA256 94de02905b051037c2e89d0a7dae0386eb27fe152df981341e767a4e482276ab
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            Trust Tokens
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Network\Trust Tokens
                            • Size 36KB
                            • SHA256 19e1e0d60dc0a70455014fec98b5e4b73e93a80651600368745ab0d4a49c9529
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Preferences
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Preferences
                            • Size 6KB
                            • SHA256 aa8f3d8064a4fd2eea9adbed61d96f92b8591c9873a56cd1d8136adbfbe46397
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Preferences
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Preferences
                            • Size 6KB
                            • SHA256 580a4c5b872a68b0fd3a96cf8a7d4b583055962c283dded0de606a73dd476d7a
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Preferences~RFe595450.TMP
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Preferences~RFe595450.TMP
                            • Size 5KB
                            • SHA256 e0cff1b96552731ce6dd3c2ab024ec8bac827e948134f8d5f73fc57d54150072
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Secure Preferences
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Secure Preferences
                            • Size 6KB
                            • SHA256 407e8399ea65adf350eac8d1696790b4d8608af3185198da872f9ca033240711
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Shared Dictionary\cache\index
                            • Size 24B
                            • SHA256 fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
                            • MD5 SHA1 SHA512
                            Submit Download

                            the-real-index
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Shared Dictionary\cache\index-dir\the-real-index
                            • Size 48B
                            • SHA256 0bd1f1493a745fb84b277c3248077605fc21ff994c844d364c53dbd62dca5d30
                            • MD5 SHA1 SHA512
                            Submit Download

                            db
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Shared Dictionary\db
                            • Size 44KB
                            • SHA256 f8e7cd835195e4eff7855d20676484ca75f7e7e4fe5b13164fc926b365e1dea0
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            CURRENT
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Site Characteristics Database\CURRENT
                            • Size 16B
                            • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
                            • MD5 SHA1 SHA512
                            Submit Download

                            LOG
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Site Characteristics Database\LOG
                            • Size 299B
                            • SHA256 79e6164d92000bc15df1cd31149421d777010d747dc35787ef047d03c3028f90
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            LOG
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Sync Data\LevelDB\LOG
                            • Size 273B
                            • SHA256 66ec89aef1960ee9cda6a697d0da0a84fc647deaa62335a88878d704ffd77dd0
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            Visited Links
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Default\Visited Links
                            • Size 128KB
                            • SHA256 95ab9cc283eef2b7874ab9829ee7b6c851529fc3a82d6fd43fef317f5206acdd
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            Last Version
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Last Version
                            • Size 14B
                            • SHA256 06205ebe5acf3073d12a4ac419377a3449e6d6b5fa7fa2b1c4201f007c4ddd91
                            • MD5 SHA1 SHA512
                            Submit Download

                            Local State
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Local State
                            • Size 2KB
                            • SHA256 d2bee0e236eddc4ebe825b816b8ff164fe2b6ff322ea3eba2bbd8fbb219d4232
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            Local State
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Local State
                            • Size 3KB
                            • SHA256 526f10de077b397c1af239dec0a23b2bbe7eb5985b24c719e661972a831879ef
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            Local State
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Local State
                            • Size 4KB
                            • SHA256 8de1486a7f8356267e986c6197e3c634a5b95b860909c8a5939cead7a9bc0ae7
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Local State
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Local State
                            • Size 4KB
                            • SHA256 fddd519a31a030ef95d607d5748c1a75b51a825a21e0389386c7d7c008342fd3
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Local State
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Local State
                            • Size 16KB
                            • SHA256 8447bddeb0711ab8bf7fb033d89e6859a031f4339e4b4f76dda22af927f9ad57
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Local State
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Local State
                            • Size 1KB
                            • SHA256 eb5d3f0ee4d62f3082a545909793169ffcd3f7acd98ca3e227818a2413972b81
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            Local State
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Local State
                            • Size 4KB
                            • SHA256 1830833ff397ba024483a1a074f6d7a27a50d0f1f797a17621eb673fde322d38
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Local State
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Local State
                            • Size 4KB
                            • SHA256 2d1fa51b6e824161e0697ef82e0ff4ada46c324e5dc63bdadac8cdb62c40a49b
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            Local State~RFe58d2cc.TMP
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Local State~RFe58d2cc.TMP
                            • Size 1KB
                            • SHA256 223085fbba4f4a9981c3d30d0e1860d012ed7ac2b7eef4b24e687118b0ab0698
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            data_1
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\ShaderCache\data_1
                            • Size 264KB
                            • SHA256 4f21bec5586575a143efd14f6a25ea4c6ff6a7fc8769b693abe80a3c57fa85b7
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            index
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\ShaderCache\index
                            • Size 256KB
                            • SHA256 ce6eb14f4137f073b8fc92a7a0c217630ce454d159e9a346d19d71dd0f5e12d8
                            • MD5 SHA1 SHA512 SSDEEP
                            Submit Download

                            Variations
                            • Path C:\Users\Admin\AppData\Local\7Launcher\EBWebView\Variations
                            • Size 86B
                            • SHA256 f7b24f2eb3d5eb0550527490395d2f61c3d2fe74bb9cb345197dad81b58b5fed
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            7l_gta-v_latest_setup.tmp
                            • Path C:\Users\Admin\AppData\Local\Temp\is-C2J454T2L8.tmp\7l_gta-v_latest_setup.tmp
                            • Size 4.3MB
                            • SHA256 71335542846b938314e224b2dd711b98bdd1ecfc9d2c3c17afa313e883264858
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            upt.tmp
                            • Path C:\Users\Admin\AppData\Local\Temp\is-OL7XD4ILY9.tmp\upt.tmp
                            • Size 4.3MB
                            • SHA256 448ed7a94aff6b6c605cedeed9cd16f75da9ccea5e928398d751226c3be290c2
                            • MD5 SHA1 SHA512 SSDEEP TLSH
                            Submit Download

                            tmp723A.tmp
                            • Path C:\Users\Admin\AppData\Local\Temp\tmp723A.tmp
                            • Size 3KB
                            • SHA256 1231922eefb0353f35f8322bde6a823011d57138217054be81315beeb29d48d6
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            Grand Theft Auto V [7L].lnk
                            • Path C:\Users\Public\Desktop\Grand Theft Auto V [7L].lnk
                            • Size 1KB
                            • SHA256 44aecb5ba6c8072f0903841d8eed8a4ef27f2f96630c66e94e41e085e64332fd
                            • MD5 SHA1 SHA512 TLSH
                            Submit Download

                            memory/1056-271-0x0000000000400000-0x0000000000B26000-memory.dmp
                            Download

                            memory/1056-273-0x0000000000400000-0x0000000000B26000-memory.dmp
                            Download

                            memory/1056-411-0x0000000000400000-0x0000000000B26000-memory.dmp
                            Download

                            memory/1056-248-0x0000000000400000-0x0000000000B26000-memory.dmp
                            Download

                            memory/2264-692-0x0000000000AA0000-0x0000000001064000-memory.dmp
                            Download

                            memory/2352-141-0x00007FFD08C60000-0x00007FFD08C61000-memory.dmp
                            Download

                            memory/2352-265-0x000002400B190000-0x000002400B1C0000-memory.dmp
                            Download

                            memory/2352-142-0x00007FFD07E70000-0x00007FFD07E71000-memory.dmp
                            Download

                            memory/2624-0-0x0000000000740000-0x0000000000849000-memory.dmp
                            Download

                            memory/2624-7-0x0000000000740000-0x0000000000849000-memory.dmp
                            Download

                            memory/2624-85-0x0000000000740000-0x0000000000849000-memory.dmp
                            Download

                            memory/2960-690-0x0000000140000000-0x00000001409E1000-memory.dmp
                            Download

                            memory/2960-746-0x0000000140000000-0x00000001409E1000-memory.dmp
                            Download

                            memory/2960-727-0x0000000140000000-0x00000001409E1000-memory.dmp
                            Download

                            memory/2960-724-0x0000000140000000-0x00000001409E1000-memory.dmp
                            Download

                            memory/2960-706-0x0000000140000000-0x00000001409E1000-memory.dmp
                            Download

                            memory/3032-5-0x00000000014A0000-0x00000000014A1000-memory.dmp
                            Download

                            memory/3032-31-0x00000000004B0000-0x0000000000913000-memory.dmp
                            Download

                            memory/3032-9-0x00000000014A0000-0x00000000014A1000-memory.dmp
                            Download

                            memory/3032-8-0x00000000004B0000-0x0000000000913000-memory.dmp
                            Download

                            memory/3032-84-0x00000000004B0000-0x0000000000913000-memory.dmp
                            Download

                            memory/3032-11-0x00000000004B0000-0x0000000000913000-memory.dmp
                            Download

                            memory/3308-493-0x0000000000700000-0x0000000000809000-memory.dmp
                            Download

                            memory/3308-327-0x0000000000700000-0x0000000000809000-memory.dmp
                            Download

                            memory/3984-205-0x00007FFD08740000-0x00007FFD08741000-memory.dmp
                            Download

                            memory/4404-83-0x00007FFD08740000-0x00007FFD08741000-memory.dmp
                            Download

                            memory/4584-691-0x0000027402D30000-0x0000027402D60000-memory.dmp
                            Download

                            memory/4868-492-0x00000000002E0000-0x0000000000743000-memory.dmp
                            Download

                            memory/4872-685-0x0000000000AA0000-0x0000000001064000-memory.dmp
                            Download