Overview

overview

7

Static

static

3

HypnoHotli...PC.exe

windows10-2004-x64

7

HypnoHotli...PC.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

Hypno Hotline.exe

windows10-2004-x64

7

LICENSES.c...m.html

windows10-2004-x64

3

LICENSES.c...m.html

windows11-ltsc_2024-x64

3

d3dcompiler_47.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-ltsc_2024-x64

3

vk_swiftshader.dll

windows10-2004-x64

1

vulkan-1.dll

windows10-2004-x64

1

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    150s
  • max time network
    116s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/07/2026, 10:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    HypnoHotline for PC.exe
  • Size 78.9MB
  • Sample260727-mt89ya1tes
  • SHA256 e89912a80b0a9ce4c8ba0cb2e6b3ea5a693570ebc7077fc08e5ce7b633fd143f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoverypersistence

Malware Config

Signatures

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 10 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 6 IoCs
  • Suspicious use of SendNotifyMessage 3 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\HypnoHotline for PC.exe
    "C:\Users\Admin\AppData\Local\Temp\HypnoHotline for PC.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:2324
    • C:\Users\Admin\AppData\Local\Temp\3Gui5GiDb5bE8yqeywUA9QfyVQa\Hypno Hotline.exe
      "C:\Users\Admin\AppData\Local\Temp\3Gui5GiDb5bE8yqeywUA9QfyVQa\Hypno Hotline.exe"
      2⤵
      • Executes dropped EXE
      • Adds Run key to start application
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of WriteProcessMemory
      PID:3728
      • C:\Users\Admin\AppData\Local\Temp\3Gui5GiDb5bE8yqeywUA9QfyVQa\Hypno Hotline.exe
        "C:\Users\Admin\AppData\Local\Temp\3Gui5GiDb5bE8yqeywUA9QfyVQa\Hypno Hotline.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\hypno-hotline-desktop" --gpu-preferences=UAAAAAAAAADgAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1700,i,7213474126606603632,5865932284919325364,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1696 /prefetch:2
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4896
      • C:\Users\Admin\AppData\Local\Temp\3Gui5GiDb5bE8yqeywUA9QfyVQa\Hypno Hotline.exe
        "C:\Users\Admin\AppData\Local\Temp\3Gui5GiDb5bE8yqeywUA9QfyVQa\Hypno Hotline.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\hypno-hotline-desktop" --field-trial-handle=1700,i,7213474126606603632,5865932284919325364,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2004 /prefetch:11
        3⤵
        • Executes dropped EXE
        PID:3220
      • C:\Users\Admin\AppData\Local\Temp\3Gui5GiDb5bE8yqeywUA9QfyVQa\Hypno Hotline.exe
        "C:\Users\Admin\AppData\Local\Temp\3Gui5GiDb5bE8yqeywUA9QfyVQa\Hypno Hotline.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\hypno-hotline-desktop" --app-user-model-id="electron.app.Hypno Hotline" --app-path="C:\Users\Admin\AppData\Local\Temp\3Gui5GiDb5bE8yqeywUA9QfyVQa\resources\app.asar" --no-sandbox --no-zygote --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1700,i,7213474126606603632,5865932284919325364,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:1
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:5064
      • C:\Users\Admin\AppData\Local\Temp\3Gui5GiDb5bE8yqeywUA9QfyVQa\Hypno Hotline.exe
        "C:\Users\Admin\AppData\Local\Temp\3Gui5GiDb5bE8yqeywUA9QfyVQa\Hypno Hotline.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\hypno-hotline-desktop" --gpu-preferences=UAAAAAAAAADoAAAEAAAAAAAAAAAAAAAAAABgAAEAAAAAAAAAAAAAAAAAAABCAAAAAAAAAAAAAAAAAAAAAAAAABAAAAAAAAAAEAAAAAAAAAAIAAAAAAAAAAgAAAAAAAAA --field-trial-handle=1700,i,7213474126606603632,5865932284919325364,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=SpareRendererForSitePerProcess,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2568 /prefetch:10
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        PID:5348
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:2136

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          LICENSE.electron.txt
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\LICENSE.electron.txt
          • Size 1KB
          • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          LICENSES.chromium.html
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\LICENSES.chromium.html
          • Size 14.5MB
          • SHA256 c54df6af4da6dbe8199869b48d1a7c8c457bd96441d944377b83e173af2bb2f7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          chrome_100_percent.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\chrome_100_percent.pak
          • Size 143KB
          • SHA256 34353e0c595236b0e3d256618aa31afe270d6238ee3c251ab8e294203a7e34c5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          chrome_200_percent.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\chrome_200_percent.pak
          • Size 212KB
          • SHA256 ff54bda9cb24c2ce5825ec8d5c5b3217c2738b43c2882bc3d63638250dee37bf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          d3dcompiler_47.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\d3dcompiler_47.dll
          • Size 4.7MB
          • SHA256 289767b49dc8525bce262ea06fee4ef9fced2e131a55b25654ce871c1f0498b2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ffmpeg.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\ffmpeg.dll
          • Size 2.9MB
          • SHA256 9da80727db8bb2760ece1aa5dc2a2ce9920e1794bed6de0ae63ec21924349a8a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          icudtl.dat
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\icudtl.dat
          • Size 10.0MB
          • SHA256 a9f6072e858ea29cb66501847856d403c862f23d03cac2656d1e0fa2865fdc7b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libEGL.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\libEGL.dll
          • Size 481KB
          • SHA256 a6d315c7ea7c240f6c82afa57b39b96191a62d3f5a0d25982e8567395ecb4694
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libGLESv2.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\libGLESv2.dll
          • Size 7.6MB
          • SHA256 71cc200c14725793888932d63142bda9ca6b4d2988c7e16d44387351c56d68a8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          af.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\af.pak
          • Size 542KB
          • SHA256 9af54cd820c9dff86e2e167251b464432b41f717702734c5fffff7159c13a7be
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          am.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\am.pak
          • Size 880KB
          • SHA256 9d601f825508365f3725a3ab68548caaf4b792f664914343c498981417792c03
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ar.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\ar.pak
          • Size 968KB
          • SHA256 9233e05e70e79c3b91a56a00eee0bf4289289ee9f9ef1ba9ce510a701c027061
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          bg.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\bg.pak
          • Size 1004KB
          • SHA256 0b973e166258d659d3d42f65459aa75854f0719dccbb2c0917372cd53cf731af
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          bn.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\bn.pak
          • Size 1.3MB
          • SHA256 da3e84c471b5f7fd116aa72930a08323efca20d51b6d7a1f4311b8ca83a29e4a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ca.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\ca.pak
          • Size 611KB
          • SHA256 d6d6d1ae7401e232d7d585e8eb9f831bfda5b4a96d526eb03238e3fdbf3ad375
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cs.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\cs.pak
          • Size 630KB
          • SHA256 bef680833f0d26e2765310c41557c18cad117d74a937b4175f64d69d9b92a6c6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          da.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\da.pak
          • Size 569KB
          • SHA256 5b56da9368799e3d750c0a54bc13b7c3b112265bd9ddf299e7f4905d1fa1f5fb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          de.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\de.pak
          • Size 609KB
          • SHA256 c8866a7ce89c9c6ab4b89dc7bb076a2fc3f05a9736f4f69718afacbad684e443
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          el.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\el.pak
          • Size 1.1MB
          • SHA256 3981e2f0e074bc4791f1e3cd955a9eab2c38d2e2e142c64a9da0f95cb8ea4a35
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-GB.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\en-GB.pak
          • Size 494KB
          • SHA256 2367ffecbd1f804842ca258eb0a64270d82e8b82dc3fb3e8412b458b7d2050da
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-US.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\en-US.pak
          • Size 499KB
          • SHA256 2a2ebefac8c3569580434729ffd71598cf05ea36447b62a64d6f8aa26dac88e5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es-419.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\es-419.pak
          • Size 601KB
          • SHA256 025e72a5a74d4cf787fccb4b527cf8ad266eaf9153a3541fcb6d57d9ae2cd783
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\es.pak
          • Size 600KB
          • SHA256 b29dbd50a396424770eda58a5c124ecd185e219274a2cb3b1922e85e632bc811
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          et.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\et.pak
          • Size 546KB
          • SHA256 28eb00d9adc3efe9f2bd62337e3efc7e402ecc8740aab9f7036299ca995eeb02
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fa.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\fa.pak
          • Size 899KB
          • SHA256 abda7417aca41a7df7525f434d70f7ba1d39efa6b4744383cc0537fcc295859e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fi.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\fi.pak
          • Size 557KB
          • SHA256 7403af71e1372a8e17f579d9db6fdea9cd8561305540d4cbed72f94d384088e1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fil.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\fil.pak
          • Size 631KB
          • SHA256 adcdc41e7427894f9bdaff0107a4fe4379e51a00cb7030ec5b70b2a919e6a5cd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\fr.pak
          • Size 650KB
          • SHA256 135daac08d70337891cad5449a0972641f8499a09388f91ea292d2c61c37906a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          gu.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\gu.pak
          • Size 1.3MB
          • SHA256 e81f79a67e5a75219c34a35b5fcead351c2c588205a171fd25e2813054526623
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          he.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\he.pak
          • Size 789KB
          • SHA256 f1e820af68b7eb21eb08f22e7e238b89e93bb5e61d8d1a682024f1cfb533809c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          hi.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\hi.pak
          • Size 1.3MB
          • SHA256 315c93ac0fc2d3372d4cf43c036dac0a91ab901027169f26437249e324593e6b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          hr.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\hr.pak
          • Size 608KB
          • SHA256 1a32574d37cf72b747709605e17e14ce1202bcfc282728254f20e976d75b5cf0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          hu.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\hu.pak
          • Size 653KB
          • SHA256 abefd371851d9bc9d14dce50dd068482e30154795aaf44d86d5182baca1eaf4f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          id.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\id.pak
          • Size 539KB
          • SHA256 0cf89ae8052f01a4b891d151985e3e18d50e52bcacee3a790b248ba9953c3a4b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          it.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\it.pak
          • Size 592KB
          • SHA256 2d29f3ca302d2ec4ae8d69a33d028999b3f3aceb61105d6a3752e6f7b9771447
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ja.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\ja.pak
          • Size 721KB
          • SHA256 ecf6fa046adbe72d0f426552882e2d996ba3719b3b34004210a58fe4f9f03e9f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          kn.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\kn.pak
          • Size 1.4MB
          • SHA256 676520981ece4915fc9985166ee8d9e2397686f5ab07fbd37548f3c4bc16cf3e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ko.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\ko.pak
          • Size 610KB
          • SHA256 0a9220b66f57332a6db684f1f34661c7d774f9cae4df6709b8b06bb063894a17
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          lt.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\lt.pak
          • Size 659KB
          • SHA256 cc1140a723e8a58d227b7f1a890805ac61c53b955711e19e0b41cc0a432d0483
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          lv.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\lv.pak
          • Size 657KB
          • SHA256 6ca0c36e14d0fd11da8c000c8ebd5cafff4c86faac1ba8242b89c56e42ac9dd4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ml.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\ml.pak
          • Size 1.5MB
          • SHA256 3c43edc7060b5860952a686897add542f78697c5c5c20bc663106d7d73c877eb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          mr.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\mr.pak
          • Size 1.2MB
          • SHA256 6724b057d002866a42b42a3ef50343f06a3610767c29e962fabfb49300b10c56
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ms.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\ms.pak
          • Size 566KB
          • SHA256 3173e02a2de0621533263f0364ca3ca633b0f1b9496826e4976b86deb306a45f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          nb.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\nb.pak
          • Size 546KB
          • SHA256 fd4bd459b68a89869bc1c95a6f3d41064d88fc1c0c11e043e42a18223a88d4ea
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          nl.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\nl.pak
          • Size 567KB
          • SHA256 72a15f01c50d161ee22f14ab4bcf6d9067aad0038bd514620ecbf03f1a3e5c6f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pl.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\pl.pak
          • Size 632KB
          • SHA256 16f6928022da4b865315d4b1b101e247f17e4bdccb334955bb4260999f392174
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pt-BR.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\pt-BR.pak
          • Size 593KB
          • SHA256 2d15ba6ab0fd876e874a67b3a501d51c8906987d34e538b2ca2d103d632d54cd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pt-PT.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\pt-PT.pak
          • Size 596KB
          • SHA256 8f64ab17821a2442723433eab30fa55f7efdf27b7c762c39aa6b68f214e743f2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ro.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\ro.pak
          • Size 618KB
          • SHA256 b535dfab86f6b2b093f2ee617556daddb4be27772bb72ef85f9a3ddfb7cdcc01
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ru.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\ru.pak
          • Size 1021KB
          • SHA256 9b94d54d9f6eec8c33b6eeec7d73b0f927c19ca648af5cee688b0a544b43c2f9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sk.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\sk.pak
          • Size 641KB
          • SHA256 e0babf276d1ed1048a0078d6aab2a2638a21046cbb9e9a6bb815e649dc9b9004
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sl.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\sl.pak
          • Size 614KB
          • SHA256 0491d3086b5f38cddf505d8944e30892fb9f39445aa49352e5883933ff408fbc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sr.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\sr.pak
          • Size 948KB
          • SHA256 c8858ea4ff643495f2f6ed989ede43f5a004b4b397f726fc776ff1ce1a9c0393
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sv.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\sv.pak
          • Size 551KB
          • SHA256 1dfad20ec1b9111dc812b2caf6bb47dd757d7e38bd6bdd7814d32b16d0f60bbd
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sw.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\sw.pak
          • Size 581KB
          • SHA256 7306fa5c79d8c929d30672b4346b7599eb687b7d1ba0380dc89e300fe9991481
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ta.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\ta.pak
          • Size 1.5MB
          • SHA256 9f1288b32442c0130a606a392a40fa0be7c853e079d3ae956cf6d5fe06beeb61
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          te.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\te.pak
          • Size 1.4MB
          • SHA256 782e066b6f92b26b710841fee351f7bf925eb09387f322b67b655042f82db2b6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          th.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\th.pak
          • Size 1.1MB
          • SHA256 ea5376065fe5b3f6cdc16fa6eb05c3f0fbad89249f281a16702295790d3a1164
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tr.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\tr.pak
          • Size 592KB
          • SHA256 800a8d5e32d65009a28af6b53dbfad33468edf0ce28e8e268e97a15ab72ede61
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          uk.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\uk.pak
          • Size 1.0MB
          • SHA256 b175a0f1a457fc4b07843b72a92446d8d1807c7c8647a85277b5b3076002f1ec
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ur.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\ur.pak
          • Size 892KB
          • SHA256 76a8887bbce0160a65aa8859bc084d9286a189e4aa15f2f8f3a0d8cb1fdca780
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vi.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\vi.pak
          • Size 703KB
          • SHA256 be9334cb1c39f49e26686e464448519a59b4785ed48d28774556a22ff5e4024b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          zh-CN.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\zh-CN.pak
          • Size 504KB
          • SHA256 97c67c91e4986014c3acb6304fbc38371b896457ecb64bf232493cddeece0e1d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          zh-TW.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\locales\zh-TW.pak
          • Size 498KB
          • SHA256 76be4f089471f67a275dc5335441562c8a1ce7d924a1a3bc746d206792fd3faf
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          resources.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\resources.pak
          • Size 5.8MB
          • SHA256 d1d9992e4e28a3a6add0a2652194685cae481a3ba846a89a030199a5d0bdc04f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          elevate.exe
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\resources\elevate.exe
          • Size 105KB
          • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          icon.ico
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\resources\icon.ico
          • Size 158KB
          • SHA256 c2e700a317422caea37d20dee0bf0b4e54788bb6a31d6851a1220731022fb8aa
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          icon.png
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\resources\icon.png
          • Size 1.2MB
          • SHA256 12453b88409f367934b0a5680ed7aa197d17ab9991255b2bd67f939a3130b004
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          snapshot_blob.bin
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\snapshot_blob.bin
          • Size 328KB
          • SHA256 f0a6ce4b00a25b303d6de9094cd33cf915d9117e0ee0be05042d7835d47daeb7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          v8_context_snapshot.bin
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\v8_context_snapshot.bin
          • Size 695KB
          • SHA256 6370b1fba2ff33f9f279e9d308450bc8e06987bc6c0647d926ce70e8b5e76dd4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vk_swiftshader.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\vk_swiftshader.dll
          • Size 5.3MB
          • SHA256 d61ad23a0a6d3247db5bccc1e13d00be89ee6804cce17cf9dcb156705441fba4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vk_swiftshader_icd.json
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\vk_swiftshader_icd.json
          • Size 106B
          • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          vulkan-1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\7z-out\vulkan-1.dll
          • Size 886KB
          • SHA256 3871c971466dc0c38e69a857a1d572b5d94e12f54b12415335cb83638680d508
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          StdUtils.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\StdUtils.dll
          • Size 100KB
          • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\System.dll
          • Size 12KB
          • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          nsis7z.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nss1593.tmp\nsis7z.dll
          • Size 424KB
          • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          default.exc
          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
          • Size 2B
          • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
          • MD5 SHA1 SHA512
          Submit Download

          data_1
          • Path C:\Users\Admin\AppData\Roaming\hypno-hotline-desktop\DawnWebGPUCache\data_1
          • Size 264KB
          • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_0
          • Path C:\Users\Admin\AppData\Roaming\hypno-hotline-desktop\GPUCache\data_0
          • Size 8KB
          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_2
          • Path C:\Users\Admin\AppData\Roaming\hypno-hotline-desktop\GPUCache\data_2
          • Size 8KB
          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_3
          • Path C:\Users\Admin\AppData\Roaming\hypno-hotline-desktop\GPUCache\data_3
          • Size 8KB
          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          Network Persistent State
          • Path C:\Users\Admin\AppData\Roaming\hypno-hotline-desktop\Network\Network Persistent State
          • Size 305B
          • SHA256 53964b8b257fd364b1489dab9049e8f46704b6500c453db2cd7ab86358d9f355
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Network Persistent State~RFe5a6bcb.TMP
          • Path C:\Users\Admin\AppData\Roaming\hypno-hotline-desktop\Network\Network Persistent State~RFe5a6bcb.TMP
          • Size 59B
          • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          CURRENT
          • Path C:\Users\Admin\AppData\Roaming\hypno-hotline-desktop\Session Storage\CURRENT
          • Size 16B
          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
          • MD5 SHA1 SHA512
          Submit Download

          memory/3728-504-0x000001AE6AA50000-0x000001AE6AA5D000-memory.dmp
          Download

          memory/5348-533-0x0000027687C70000-0x0000027687C71000-memory.dmp
          Download

          memory/5348-531-0x0000027687C70000-0x0000027687C71000-memory.dmp
          Download

          memory/5348-538-0x0000027687C70000-0x0000027687C71000-memory.dmp
          Download

          memory/5348-542-0x0000027687C70000-0x0000027687C71000-memory.dmp
          Download

          memory/5348-541-0x0000027687C70000-0x0000027687C71000-memory.dmp
          Download

          memory/5348-540-0x0000027687C70000-0x0000027687C71000-memory.dmp
          Download

          memory/5348-539-0x0000027687C70000-0x0000027687C71000-memory.dmp
          Download

          memory/5348-537-0x0000027687C70000-0x0000027687C71000-memory.dmp
          Download