Overview

overview

7

Static

static

3

Install IK...2).exe

windows10-ltsc_2021-x64

7

$PLUGINSDI...er.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...ls.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...em.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...ll.dll

windows10-ltsc_2021-x64

3

$PLUGINSDIR/app-64.7z

windows10-ltsc_2021-x64

1

IK Product...er.exe

windows10-ltsc_2021-x64

7

LICENSE.electron.txt

windows10-ltsc_2021-x64

1

LICENSES.c...m.html

windows10-ltsc_2021-x64

3

chrome_100...nt.pak

windows10-ltsc_2021-x64

3

chrome_200...nt.pak

windows10-ltsc_2021-x64

3

d3dcompiler_47.dll

windows10-ltsc_2021-x64

1

ffmpeg.dll

windows10-ltsc_2021-x64

1

libEGL.dll

windows10-ltsc_2021-x64

1

libGLESv2.dll

windows10-ltsc_2021-x64

1

resources/...al.pdf

windows10-ltsc_2021-x64

3

resources/...ol.exe

windows10-ltsc_2021-x64

1

resources/elevate.exe

windows10-ltsc_2021-x64

3

swiftshade...GL.dll

windows10-ltsc_2021-x64

1

swiftshade...v2.dll

windows10-ltsc_2021-x64

1

vk_swiftshader.dll

windows10-ltsc_2021-x64

1

vulkan-1.dll

windows10-ltsc_2021-x64

1

$PLUGINSDI...ec.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...ss.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...7z.dll

windows10-ltsc_2021-x64

3

$R0/Uninst...er.exe

windows10-ltsc_2021-x64

7

$PLUGINSDI...ls.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...em.dll

windows10-ltsc_2021-x64

3

$PLUGINSDIR/UAC.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...ll.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...ec.dll

windows10-ltsc_2021-x64

3

$PLUGINSDI...ss.dll

windows10-ltsc_2021-x64

3

Analysis

  • max time kernel
    42s
  • max time network
    40s
  • platform
    windows10-ltsc_2021_x64
  • resource
    win10ltsc2021-20260513-en
  • resource tags

    arch:x64arch:x86image:win10ltsc2021-20260513-enlocale:en-usos:windows10-ltsc_2021-x64systemwindows
  • submitted
    21/07/2026, 06:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Install IK Product Manager (v1.1.12).exe
  • Size 63.9MB
  • Sample260721-g211msgw7n
  • SHA256 183580ce39b6d8e83e7c67dad2003fc5d875d5a005efdfdfa248059b34f5d384
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryexecutionspywaretrojan

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 18 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 2 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of WriteProcessMemory 7 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Install IK Product Manager (v1.1.12).exe
    "C:\Users\Admin\AppData\Local\Temp\Install IK Product Manager (v1.1.12).exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1540
  • C:\Program Files\IK Multimedia\IK Product Manager\IK Product Manager.exe
    "C:\Program Files\IK Multimedia\IK Product Manager\IK Product Manager.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:1200
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /d /s /c "ver"
      2⤵
      • Executes a command shell one-liner
      PID:3844
    • C:\Program Files\IK Multimedia\IK Product Manager\IK Product Manager.exe
      "C:\Program Files\IK Multimedia\IK Product Manager\IK Product Manager.exe" --type=gpu-process --field-trial-handle=1668,2765072129190728449,3402305942378903781,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --gpu-preferences=MAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAQAAAAAAAAAAAAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAA= --mojo-platform-channel-handle=1676 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1160
    • C:\Program Files\IK Multimedia\IK Product Manager\IK Product Manager.exe
      "C:\Program Files\IK Multimedia\IK Product Manager\IK Product Manager.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1668,2765072129190728449,3402305942378903781,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=en-US --service-sandbox-type=network --ignore-certificate-errors --ignore-certificate-errors --mojo-platform-channel-handle=2008 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Modifies system certificate store
      • Suspicious behavior: EnumeratesProcesses
      PID:3860
    • C:\Program Files\IK Multimedia\IK Product Manager\IK Product Manager.exe
      "C:\Program Files\IK Multimedia\IK Product Manager\IK Product Manager.exe" --type=renderer --field-trial-handle=1668,2765072129190728449,3402305942378903781,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=en-US --app-path="C:\Program Files\IK Multimedia\IK Product Manager\resources\app.asar" --no-sandbox --no-zygote --background-color=#fff --enable-spellcheck --enable-websql --disable-electron-site-instance-overrides --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2264 /prefetch:1
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:1844
    • C:\Program Files\IK Multimedia\IK Product Manager\IK Product Manager.exe
      "C:\Program Files\IK Multimedia\IK Product Manager\IK Product Manager.exe" --type=renderer --field-trial-handle=1668,2765072129190728449,3402305942378903781,131072 --enable-features=WebComponentsV0Enabled --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess --lang=en-US --app-path="C:\Program Files\IK Multimedia\IK Product Manager\resources\app.asar" --node-integration --node-integration-in-worker --no-sandbox --no-zygote --background-color=#fff --enable-spellcheck --enable-websql --disable-electron-site-instance-overrides --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2392 /prefetch:1
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:4840
    • C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /d /s /c "ver"
      2⤵
      • Executes a command shell one-liner
      PID:2100

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        3680f95b-09a2-42bd-b74f-c9d1830f5aff.tmp.node
        • Path C:\Users\Admin\AppData\Local\Temp\3680f95b-09a2-42bd-b74f-c9d1830f5aff.tmp.node
        • Size 1.5MB
        • SHA256 962c0058ee762a33bb0ce2861069b3cd5d2b838b52070e40634969d1087735c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        LICENSE.electron.txt
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 c44607a865e7a6db05552baa0ef71f9887d96acd00d123854b44996bc27c0e33
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSES.chromium.html
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\LICENSES.chromium.html
        • Size 4.5MB
        • SHA256 03f1d245e6a2facca9edbdaad108169e0765dd9101875bc2d123797994b9e80f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_100_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\chrome_100_percent.pak
        • Size 121KB
        • SHA256 5ae14147992a92548bcad76867dd88cdfcdb69d951c8720920cce6fb135e3189
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_200_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\chrome_200_percent.pak
        • Size 181KB
        • SHA256 dd8146b2ee289e4d54a4a0f1fd3b2f61b979c6a2baaba96a406d96c3f4fdb33b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dcompiler_47.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.3MB
        • SHA256 44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffmpeg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\ffmpeg.dll
        • Size 2.7MB
        • SHA256 c3696321555dc6a419ae3e1ebcc0efcfb1478f8c0b62f486a0c500eb87a04428
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icudtl.dat
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\icudtl.dat
        • Size 10.0MB
        • SHA256 8364e6c6bf5744357199de0de3f6ba30846ccda70288675b75059e6fd52241f3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libEGL.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\libEGL.dll
        • Size 438KB
        • SHA256 49ede4fcf943b53f4bccaa534f8ff26865596a94464dbce2346e9ed9c1554ebb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libGLESv2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\libGLESv2.dll
        • Size 7.3MB
        • SHA256 5e7ec884ac58b0db5383aa531900e9545026b48fae6c486d89247560a457600e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        am.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\am.pak
        • Size 142KB
        • SHA256 e9c78c2410d5c81e0cd5d122462e852143eea15ca69cd01b85322cede1e10806
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ar.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\ar.pak
        • Size 144KB
        • SHA256 1cdef40ba8343e7f826c2020906915efaac5e56f543cd2ed6ebf704882525d8c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bg.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\bg.pak
        • Size 154KB
        • SHA256 1bb8c5ce9215d42ba9ceec52f86fbff46df668ce48ff56bd1cbe96adadf4922c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\bn.pak
        • Size 203KB
        • SHA256 f7d704207cb3340f1ace2f2e5af031e816bb86e4bf3f665907d837d094bba37a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ca.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\ca.pak
        • Size 99KB
        • SHA256 14e99f4d94868a454f40ee8e0f62d056e0abb303caf6e184a9a61bdec18ac271
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cs.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\cs.pak
        • Size 101KB
        • SHA256 9651b8f3304c70d96dcca76cfffad90ce8afcab6231ffd8e4e9beade3d510841
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        da.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\da.pak
        • Size 92KB
        • SHA256 1d1a3e38ddf282969bca2a5d893b3db4a0aed10b53eab37bb2dad7d2d18c94de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        de.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\de.pak
        • Size 98KB
        • SHA256 e71f4320553f65cfd0356a4b30f3aec2eec7b4fd327866d528917b9909cfa761
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        el.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\el.pak
        • Size 172KB
        • SHA256 a3431d3ac720f871c33d7e522cf506b2fa8ea1872bac02a4b4b427a6d063af38
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-GB.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\en-GB.pak
        • Size 82KB
        • SHA256 c4fdfa9c6f30ad657bf12ccb95f70542a0fade45d8490259a4507629f4b33299
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-US.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\en-US.pak
        • Size 83KB
        • SHA256 d1d3f892be16329c79f9a8ee8c5fa1c9fb46d17edfeb56a3d9407f9d7587a0de
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es-419.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\es-419.pak
        • Size 97KB
        • SHA256 64df687bbb37bcd92e609f7e3bf950ee5629b693ff8636607285f5753b1bdaae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\es.pak
        • Size 99KB
        • SHA256 eb22282dbf211f64142ef4dfac2c1d811d65decd617c4a3d1c892967dc72ac07
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        et.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\et.pak
        • Size 88KB
        • SHA256 b3baf825f9b237565260ba2935fe9acf2ae381e3bfc6fbf837dbfe6fb83314b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fa.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\fa.pak
        • Size 138KB
        • SHA256 8ea08e9874892edefcbdc55c393dc00fe451f3c7f29b57d7105377349eb4bfc4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\fi.pak
        • Size 91KB
        • SHA256 bfc24d41ea8e362bb1a18c11860d2217fc100b1a422cf54629c7d0c6640d5ed7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fil.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\fil.pak
        • Size 101KB
        • SHA256 75d473ffd351a828bd7854067ad986908efefdfb75800650587b8bef09f9ff2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\fr.pak
        • Size 107KB
        • SHA256 b387afb8c8ae3c3ce90728fb7eb39a39ec789c6e7bfe4dbd2b5d49e72434db1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\gu.pak
        • Size 194KB
        • SHA256 a49597e67fcf93448c89e07f9cc3519b3b1b77505bc30adf3f25c250718eec0c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        he.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\he.pak
        • Size 122KB
        • SHA256 7420e94f19bd61f33950e120f29c9783305f218d089f0a7d3ea3451655cdda1f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\hi.pak
        • Size 201KB
        • SHA256 acc53ca41a9a04a57c1f18fea58cc4329b8add0ded37f9f7d7a73584a910d6c9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\hr.pak
        • Size 96KB
        • SHA256 e55d011ac0cc50d33bf22d43a9c5a6b59f5c31bd2884789efee124929be9a7fa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\hu.pak
        • Size 103KB
        • SHA256 030cbf833a350946959afa0d2b699512c0b715ff7b38b613bcd16b15282b940a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        id.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\id.pak
        • Size 89KB
        • SHA256 d12d87d003bda037b411daab09d1698671f8284e4297ffc08b0558749df6495b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        it.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\it.pak
        • Size 96KB
        • SHA256 266f501703d3899000d5eb60d55ccc8f59f186e862a4a9a34910e81699ea289e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ja.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\ja.pak
        • Size 116KB
        • SHA256 4d0910d196b6b5652e3e5d677ddb048b8dae1ec974593484df2838093c96fed7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\kn.pak
        • Size 223KB
        • SHA256 f25c8b41249c8f54224702795644c80bb5a7eaaeb6f0af5b6a1048960a27c827
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ko.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\ko.pak
        • Size 98KB
        • SHA256 99addd110ae7ba9fb37daf5c32ad2815172840764da0c71d0304dc9562951d61
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lt.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\lt.pak
        • Size 105KB
        • SHA256 9124dc353864cf6570580ae3afa0a7f09f5e3d32a61e71a64ff4cf824ad4fb29
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\lv.pak
        • Size 104KB
        • SHA256 6861e9a4e8a9f2493f0103afa0f860c280478a64293a6de883ba9cb6a45776f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ml.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\ml.pak
        • Size 235KB
        • SHA256 cc9fd4f2d44df646c6117465f820ad390efbc9cb64eb4ff898a50cdfef8f324c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\mr.pak
        • Size 191KB
        • SHA256 5f1ffe801f3701434a73d3ad3d04e9fcb6238f0f3b14e9325413910799954543
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ms.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\ms.pak
        • Size 91KB
        • SHA256 f4f6362d9963b7d244e29e85c7ecda552ff7756621f6efc9f3b6f12940896a81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nb.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\nb.pak
        • Size 90KB
        • SHA256 efc934122d4232276f9f2317e5906517bd91ec2a6d76995fe8aae04eff866a50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\nl.pak
        • Size 93KB
        • SHA256 4669c10a7fcc8a150a641e73320547ed1b966a92fe78041a860ce4892f79b0cd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\pl.pak
        • Size 101KB
        • SHA256 ce84676f37bf97078b3d087d913a874d3c092f76b729f43d3e9553d3c9754f03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-BR.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\pt-BR.pak
        • Size 96KB
        • SHA256 7cca8f6ee8b2a19c8ea53b3a2bb2af4ebbb2b8612caba87f581938e7d6aa9f18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-PT.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\pt-PT.pak
        • Size 97KB
        • SHA256 7f0b86e4f6391e48fd045c8b967a1ad33d9c54f5a6ceda98d800c254dd2ec059
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ro.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\ro.pak
        • Size 99KB
        • SHA256 60859215a025b95a1ac06333a66d14e1698b28ae31451c999e8adc072401a86a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ru.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\ru.pak
        • Size 157KB
        • SHA256 5c93984215f69bc6c7a1430fedbdc619ee6ccc9e491354e3541fdc8ed1947f8b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\sk.pak
        • Size 103KB
        • SHA256 4a09c8f22d1fe71cdfd0149599c59ec3059cd35f7dc8f33f22f967a237f7def1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\sl.pak
        • Size 98KB
        • SHA256 1ed9fc4abb8bef48e0fd5e10a107fb456dcb0c7a275bb789cb0728cfadfdcc42
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\sr.pak
        • Size 148KB
        • SHA256 362a50ec28da0af4c6b8e282ad64d45298b939a03883de22c5a33adfa919bc74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\sv.pak
        • Size 89KB
        • SHA256 cfe9ad173d516a3e1855f00f53fcb20a53ade93fef6256e909b0f0da12723cc2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sw.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\sw.pak
        • Size 91KB
        • SHA256 26fbb15e26f5a4c44bc0e86326fbff28686c771edd11bda6bfea178364299eaa
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ta.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\ta.pak
        • Size 230KB
        • SHA256 2363b6a8cce7868830915303dc2825351e7ea9dfd98568e448cd8b71c7ceef90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        te.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\te.pak
        • Size 213KB
        • SHA256 c9f427a4efa5d9835432e3a190e26d684c18c26e13fcda1b7e73d6a7527cfd4f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        th.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\th.pak
        • Size 183KB
        • SHA256 301966a229a09b37e5b2bf12c89522a33144c977411099b81502261c4ca554ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\tr.pak
        • Size 94KB
        • SHA256 81694a8258624f82dfbe0af43aa0ce5fdf1304c25a2f6735b972a2a29beb8e15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        uk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\uk.pak
        • Size 158KB
        • SHA256 27d3c996804b4f4c106f12becdaeeb1ce65df53abe12658574852ab7b6643bc1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\vi.pak
        • Size 111KB
        • SHA256 7f94586012c85732d23b05dbdde2c497326d5fcab87de83aafa3594b614dbd36
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-CN.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\zh-CN.pak
        • Size 83KB
        • SHA256 44a9dd0a830ce2feeb81523cce7fae8a0a553f05921b34d34c7826d50ac3a1b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-TW.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\locales\zh-TW.pak
        • Size 83KB
        • SHA256 268041a1a95dd540cf7e92a01802b65df8c8d1c80726007da1bb8a9cba6e5414
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resources.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\resources.pak
        • Size 4.8MB
        • SHA256 dd4de24e13282fd3fab3b4d24c5eea555d7554ff10c02b0f439f5e8ce4e9f75d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        IK Product Manager User Manual.pdf
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\resources\IK Product Manager User Manual.pdf
        • Size 3.2MB
        • SHA256 1577bc41dafb3c1422462c0d97269f494830f2dc8be510bd6e76c90dc3c6ecf6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SubscriptionTool.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\resources\SubscriptionTool.exe
        • Size 1.4MB
        • SHA256 3d6dae4d8751c0f2da960b1dd0cb8068f6722c3219d1113100134c065278a157
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        app.asar
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\resources\app.asar
        • Size 46.6MB
        • SHA256 c94faedb49d0e138b25445279f823ab7f4784d3c7fb06ac709d6ef9dbc65db1e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevate.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        snapshot_blob.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\snapshot_blob.bin
        • Size 50KB
        • SHA256 e1d670b18b93f9c1f64789b3f2e65d6e0b42c311799b302f2b4b03b5aa18ee88
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libEGL.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\swiftshader\libEGL.dll
        • Size 460KB
        • SHA256 c96be936247ac69771264d25f6726b564548f06dc27fb811bc0bd9b29e9772a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libGLESv2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\swiftshader\libGLESv2.dll
        • Size 3.1MB
        • SHA256 976b8cdcf53c0b5c4ad95319ad66c0cf6f3ec6d8b9c5e4da5fc458b9971366ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        v8_context_snapshot.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\v8_context_snapshot.bin
        • Size 168KB
        • SHA256 59170b40e9acae9f4a524f6f5e690adae82b8ae2f90549d8e3339f8567cfadbc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\vk_swiftshader.dll
        • Size 4.3MB
        • SHA256 003d1f7f5fc4b5d8a09e8807729d2a987e02fb33385e38ecdfe4e00d8775898a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader_icd.json
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vulkan-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\7z-out\vulkan-1.dll
        • Size 715KB
        • SHA256 c572457eeb6353e37f7f61f3a3ece9262fda23be7397b93224a7f0d42f670ac0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        SpiderBanner.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\SpiderBanner.dll
        • Size 9KB
        • SHA256 996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StdUtils.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WinShell.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nsProcess.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\nsProcess.dll
        • Size 4KB
        • SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsis7z.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsj27C8.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        the-real-index
        • Path C:\Users\Admin\AppData\Roaming\IK Product Manager\Code Cache\js\index-dir\the-real-index
        • Size 48B
        • SHA256 38e93ca4181eac0e7722256a96be1f769a73941c14bca298ad16d6acb76e506a
        • MD5 SHA1 SHA512
        Submit Download

        the-real-index
        • Path C:\Users\Admin\AppData\Roaming\IK Product Manager\Code Cache\js\index-dir\the-real-index
        • Size 216B
        • SHA256 a99014d90daf03e7f86a2bc087e12cd3f71eb770324e072b8ca366806f5240bd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        CURRENT
        • Path C:\Users\Admin\AppData\Roaming\IK Product Manager\Session Storage\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512
        Submit Download

        default.dic
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512
        Submit Download

        memory/1160-428-0x00007FFBD6DB0000-0x00007FFBD6DB1000-memory.dmp
        Download