Overview

overview

7

Static

static

3

ZonaLimite...up.exe

windows10-2004-x64

7

ZonaLimite...up.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/app-64.7z

windows10-2004-x64

1

$PLUGINSDIR/app-64.7z

windows11-ltsc_2024-x64

1

LICENSES.c...m.html

windows10-2004-x64

3

LICENSES.c...m.html

windows11-ltsc_2024-x64

3

Zona Limite Nodo.exe

windows10-2004-x64

7

d3dcompiler_47.dll

windows10-2004-x64

1

dxcompiler.dll

windows10-2004-x64

1

dxil.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-ltsc_2024-x64

3

vk_swiftshader.dll

windows10-2004-x64

1

vulkan-1.dll

windows10-2004-x64

1

$PLUGINSDI...rd.bmp

windows10-2004-x64

1

$PLUGINSDI...rd.bmp

windows11-ltsc_2024-x64

1

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    152s
  • max time network
    159s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    28/07/2026, 22:10

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ZonaLimite-Nodo-Setup.exe
  • Size 89.5MB
  • Sample260728-13kvlacb39
  • SHA256 562438827c3bc7ce5f213adb9c9ba03149e0ecab2c9e542f8a2ce3837410c3b3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
defense_evasiondiscoveryexecution

Malware Config

Signatures

  • Loads dropped DLL 12 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Command and Scripting Interpreter: PowerShell 1 TTPs 2 IoCs

    Using powershell.exe command.

    execution
  • Hide Artifacts: Ignore Process Interrupts 1 TTPs 1 IoCs

    Command interpreters often include specific commands/flags that ignore errors and other hangups.

    defense_evasion
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 25 IoCs
  • Suspicious use of WriteProcessMemory 3 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ZonaLimite-Nodo-Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\ZonaLimite-Nodo-Setup.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4204
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if (Get-Command Get-CimInstance -ErrorAction SilentlyContinue) { exit 0 } else { exit 1 }"
      2⤵
      • Hide Artifacts: Ignore Process Interrupts
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2480
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-ExecutionPolicy -Scope Process) -eq 'Restricted') { exit 1 } else { exit 0 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:2828
    • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
      "C:\Windows\system32\WindowsPowerShell\v1.0\powershell.exe" -C "if ((Get-CimInstance -ClassName Win32_Process | ? {$_.Path -and $_.Path.StartsWith('C:\Users\Admin\AppData\Local\Programs\Zona Limite Nodo', 'CurrentCultureIgnoreCase')}).Count -gt 0) { exit 0 } else { exit 1 }"
      2⤵
      • Command and Scripting Interpreter: PowerShell
      • System Location Discovery: System Language Discovery
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      PID:1348

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        StartupProfileData-NonInteractive
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 17KB
        • SHA256 027d68a539807b656c09090261999b63af61a6b393e3dc45a3ea71c3c47d66a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StartupProfileData-NonInteractive
        • Path C:\Users\Admin\AppData\Local\Microsoft\Windows\PowerShell\StartupProfileData-NonInteractive
        • Size 16KB
        • SHA256 988e44c29406507073df11569551256209fa52dc98e6434f442be188c57a0f90
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        __PSScriptPolicyTest_ujpmvqrg.tnv.ps1
        • Path C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ujpmvqrg.tnv.ps1
        • Size 60B
        • SHA256 96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSE.electron.txt
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSES.chromium.html
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\LICENSES.chromium.html
        • Size 14.4MB
        • SHA256 f9c475876b01bb4d654b8f630f11219cc96198efe91d7f2602a97f0f3c86c3cb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_100_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\chrome_100_percent.pak
        • Size 112KB
        • SHA256 45d14a4278b1e152b363197401a5604aa5a3cee6512a6b52df978038fa521a0f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_200_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\chrome_200_percent.pak
        • Size 182KB
        • SHA256 aafc61b89748d17fcbc9fecd9844a77be2c584529a81714c98e0c4d453ea9496
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dcompiler_47.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.5MB
        • SHA256 c8e25abd3d45dfb55966a74613258c39b4a83ea2ac77f2f80903499f4d5c03f0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dxcompiler.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\dxcompiler.dll
        • Size 24.9MB
        • SHA256 17afc13607ffd6b7f8df79cb744c3e4deda388efcfe9faa43fec36c8971450cf
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dxil.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\dxil.dll
        • Size 1.4MB
        • SHA256 436f128f22050ae27323da61321a469de0678def7a4e6d86f9ccad4858724f0a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffmpeg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\ffmpeg.dll
        • Size 2.9MB
        • SHA256 254b008debcba0a3d4b728dd7fd256576ba2373a94bb4534a8f4b255f3f19532
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icudtl.dat
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\icudtl.dat
        • Size 10.0MB
        • SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libEGL.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\libEGL.dll
        • Size 492KB
        • SHA256 6b9f036b3f9fb96c1941a9871ec84b319be1b773de2ec2b0dc66855080d7e77d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libGLESv2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\libGLESv2.dll
        • Size 8.0MB
        • SHA256 083f5ee786a4f24c01085605deffa59e5b06811e6dc69cb07c75b406110f9cfd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        af.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\af.pak
        • Size 568KB
        • SHA256 ca253121434ef430661c30672e1097e6d238e42821585b700776b56977c05d97
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        am.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\am.pak
        • Size 921KB
        • SHA256 1f126a64a58ece296209d24c36ae416e3187996765027b1198ee01dead17394c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ar.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\ar.pak
        • Size 1016KB
        • SHA256 cf46d1687d01d8ba58512ea7082aedbaa14ff0e748eae295fbcdae464b271b77
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bg.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\bg.pak
        • Size 1.0MB
        • SHA256 f2a46c4ee04330ef49f6acc62c26ed7ec57dfe124aa386e08c5b582832c4000e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\bn.pak
        • Size 1.3MB
        • SHA256 b4ada9665be5c9d9fe4254bff291978dfb50c2b22a7149faf9b9c3f470f0d32f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ca.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\ca.pak
        • Size 640KB
        • SHA256 252c097b90fc3ba9096c519a6ab2e91b441f11cce65c7c47777542959dbf6c34
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cs.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\cs.pak
        • Size 663KB
        • SHA256 5e9385505f9507d4a57f7a5960ceb35b5fba92c662b53bda4e4dc0d63245059a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        da.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\da.pak
        • Size 598KB
        • SHA256 054849037db8f9672ab80606dd7163f25b18710ee7f777e7eeaa68d24447aee6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        de.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\de.pak
        • Size 640KB
        • SHA256 404975e6b3af1f4e40be3905da1850c3e87e29bd03d0866185ff85c06861ba68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        el.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\el.pak
        • Size 1.1MB
        • SHA256 dc27d24e9afd24124abca6dca1a362462851267902fe6493ff3165a1c5aab69f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-GB.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\en-GB.pak
        • Size 518KB
        • SHA256 ee6fc979d1fff0c1a4d6bca929691733665c5df7e7a43cc54f1165ea14cffa67
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-US.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\en-US.pak
        • Size 524KB
        • SHA256 bfa782c9efae2c9cd2c0214dae1bbb3c259d4d4c38d920b06677b9c4cf4f813d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es-419.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\es-419.pak
        • Size 631KB
        • SHA256 2b728123b590c5570a46ec2da7d4e620cb81559629f933ee5d71386fa142e02b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\es.pak
        • Size 628KB
        • SHA256 4801312dd5d7e3d62db05b8fe326d982f3887c65ac9faa7621009853c0d3b0b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        et.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\et.pak
        • Size 573KB
        • SHA256 488a91b53d17ca8b52e25f143197875aef7dd50e1bd51bad749f559c17f52aec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fa.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\fa.pak
        • Size 946KB
        • SHA256 cfd05fb194e5c43c2c65e7803eca72fde4f5629e849cf2dbb8f6f62156485aba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\fi.pak
        • Size 584KB
        • SHA256 c04f5e2b7f30e8e350feefd6cc45f266dbeacf11837cc774c977bf76e9b403a7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fil.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\fil.pak
        • Size 662KB
        • SHA256 48884f90e800b0b0803ddaa0bbebbea1292bf8e1bb5ee8f035a79371bef7ac2b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\fr.pak
        • Size 682KB
        • SHA256 e311ebdf49828d313760453a01ad1335bac955b4b8b291accf038714c91ebc03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\gu.pak
        • Size 1.3MB
        • SHA256 11e4ab3cfa421ea0d4d0971b038a6e7a254094fa6dfe9b8f65fd1572f36bcabb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        he.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\he.pak
        • Size 829KB
        • SHA256 30409b7264418b9b9852b2419669bb8da6f489b58d4eeb1007b39d5cc978621d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\hi.pak
        • Size 1.4MB
        • SHA256 59ae1278d1b58da7c0a11e5a23bf69ea31c674aebbc24fcd537a84769efe9d69
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\hr.pak
        • Size 639KB
        • SHA256 36d9939cd9d89baae124fc930cc050e386df2b8fd0eda0fb48882a2929b94a76
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\hu.pak
        • Size 684KB
        • SHA256 501569c5e74285231b41d067e0ea28972ef0ab7b269886485cf1b42cd78cbd1d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        id.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\id.pak
        • Size 565KB
        • SHA256 09d4dd7cbe4eb1b7730a80a3a3cd0606139f4b9647b0a04b49314638680b0a31
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        it.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\it.pak
        • Size 619KB
        • SHA256 901a28a4cd0b1d545f0c2e4aa54914029adc03801859761db30c81947de63f92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ja.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\ja.pak
        • Size 754KB
        • SHA256 8250b4783dcc389fa96fdf79e8188e439ffe5fc01325f32ab8c322c4d27f20a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\kn.pak
        • Size 1.5MB
        • SHA256 847c5e6abcddf120b4dbc34e28dcd1c2e93f94ab1d6f016d0c1504a58cfd5b93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ko.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\ko.pak
        • Size 640KB
        • SHA256 b8ecd18ce8601686ef64129c77f5307d0c60656d27eede7a23b4f3947647b302
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lt.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\lt.pak
        • Size 694KB
        • SHA256 6d648211ff3a6801e049c9a3931afaf3007857b2872e55ae11e19849180d19da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\lv.pak
        • Size 692KB
        • SHA256 0c0663909339a1f4edf09355a67eea0fcfe821c78d4891604eee31695ce20b37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ml.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\ml.pak
        • Size 1.5MB
        • SHA256 2bc35d18af85b3c7004a6e1e02591f5db4430a2f334f5c4be3c0a0e04837d9ae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\mr.pak
        • Size 1.3MB
        • SHA256 5dee369e9366bfcc4fc95aec6c58b915933efd72c718d56802e35e8af5a880a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ms.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\ms.pak
        • Size 595KB
        • SHA256 5af99080b311e15a19f9988779a1cdd939a7fb9b98bf093fca324eeb58b39602
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nb.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\nb.pak
        • Size 572KB
        • SHA256 11e798ef612a1d22b90450c547998bf0b23ccc4ca5265f27f1924c8b09f22937
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\nl.pak
        • Size 594KB
        • SHA256 bf2a7d52d8c061b5f5543e7c4e20b4eac96e65e02a967752af873c3ec30034b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\pl.pak
        • Size 663KB
        • SHA256 7a464e196878d304c7358e7ea457e5d2a17e3065ab02f29b8402803c401d747f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-BR.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\pt-BR.pak
        • Size 621KB
        • SHA256 6cb59658b372d605c4dac61711b56abf5555ed69e7b9ab0916f9185af48e66ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-PT.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\pt-PT.pak
        • Size 625KB
        • SHA256 b727b377a6ccf25952189c59ef175c213dd1e29e896b6b5fdfacd024c711ac93
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ro.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\ro.pak
        • Size 648KB
        • SHA256 205ea8cc0b368426f06c533b636a2845e66e3f7932aa6a680645e79de15edff3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ru.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\ru.pak
        • Size 1.0MB
        • SHA256 54f1bc4ffc72547a655d4737d2c7260a71794dda56fbffd13e6e8cc313c5520c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\sk.pak
        • Size 675KB
        • SHA256 eb91fe27fd087433da4d21dc1c387a816bed0de3e6a140b4597caa90f4921fda
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\sl.pak
        • Size 646KB
        • SHA256 52426fb8fc82d1ed28797ccb62b7fe14f123cddf011f5d5875b076cdb0c33695
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\sr.pak
        • Size 993KB
        • SHA256 92dc15bac0e96ede33a7055994f3558605b3147b890ee0414314274216dbaf80
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\sv.pak
        • Size 577KB
        • SHA256 51f5cfc915aef54ffa11077d00021c99aac1c86f04076ba70f43608b11486199
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sw.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\sw.pak
        • Size 610KB
        • SHA256 e3bf553f18a0008dc5ac86e001a0ffb190f885260a7bf06feaf34822f0dde36a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ta.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\ta.pak
        • Size 1.5MB
        • SHA256 d3849b163ddca28155194a3b68583e115943d087a4d0bdb90ea815eff618cb73
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        te.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\te.pak
        • Size 1.4MB
        • SHA256 4038e8dda796e26e5101da4af24a2a9c212637fec1e7633458b821d38023751b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        th.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\th.pak
        • Size 1.2MB
        • SHA256 e4e627969668d8672cc5212b9b3a1f3c42fe0c5d90d15ee893ff0bce8cf7c2c3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\tr.pak
        • Size 621KB
        • SHA256 eafa2065b5dc4a3c95e5f0207fc31dc54f63aee65a8fe79925ac62a15161ee68
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        uk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\uk.pak
        • Size 1.1MB
        • SHA256 4b65c4e32609f29eebe8fefa25b0fa861c05cfb51131d5ba64e1878666a0bd24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ur.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\ur.pak
        • Size 933KB
        • SHA256 c0d81e0446bae6d62b496f5268222ad53fe5e6f7325c19bdb7685974967beb3b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\vi.pak
        • Size 737KB
        • SHA256 3db088338da5890b390d6bdc047bd038ef2b2f3d982c74f546784895dd0d9b18
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-CN.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\zh-CN.pak
        • Size 529KB
        • SHA256 e0eb2457c1edb82ab19f484e45d3e029ad0c5b5cc07d68a82faf6bab55f52e52
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-TW.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\locales\zh-TW.pak
        • Size 523KB
        • SHA256 a5847062b32872a9a9b77361aa1a1e7f8734f6547adaa62f312a78baf20ef5c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resources.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\resources.pak
        • Size 6.0MB
        • SHA256 40af4117b0bd35da141aa599255b879013bfda5968401feccb5c43cb372cdae6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        app.asar
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\resources\app.asar
        • Size 1.6MB
        • SHA256 8ab57eeaa2513170e3ef6c8d2e61e73eb3f08cd9eace996cdfc417581f1eec98
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevate.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        snapshot_blob.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\snapshot_blob.bin
        • Size 394KB
        • SHA256 eb484904e06c217beaafd2cd6847eb909225a5f0a4bf814cb1ec22653e6bd2e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        v8_context_snapshot.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\v8_context_snapshot.bin
        • Size 758KB
        • SHA256 1fa1cdd08423809344fe15fac2d9d1ec604cc3ea5af4b944d89a51b1e98c8665
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\vk_swiftshader.dll
        • Size 5.4MB
        • SHA256 a089801e624e1c6809f33f55b328b3ebce33d7cc6b80237541769dddf166c975
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader_icd.json
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vulkan-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\7z-out\vulkan-1.dll
        • Size 922KB
        • SHA256 781d6bad9dc2ad30ede89a89a056e5538fed8e3b1d25c669201233c02ab7c1a4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StdUtils.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UAC.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\UAC.dll
        • Size 14KB
        • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WinShell.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nsDialogs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsExec.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\nsExec.dll
        • Size 6KB
        • SHA256 5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsis7z.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsd63D2.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/1348-78-0x000000006FBC0000-0x000000006FF1B000-memory.dmp
        Download

        memory/1348-75-0x000000006FA30000-0x000000006FA7C000-memory.dmp
        Download

        memory/1348-73-0x0000000005850000-0x0000000005BAB000-memory.dmp
        Download

        memory/2480-27-0x0000000005790000-0x00000000057B2000-memory.dmp
        Download

        memory/2480-35-0x0000000007420000-0x0000000007456000-memory.dmp
        Download

        memory/2480-22-0x0000000073082000-0x0000000073083000-memory.dmp
        Download

        memory/2480-50-0x0000000073070000-0x000000007382C000-memory.dmp
        Download

        memory/2480-48-0x000000006FB90000-0x000000006FEEB000-memory.dmp
        Download

        memory/2480-47-0x0000000007A10000-0x0000000007A34000-memory.dmp
        Download

        memory/2480-46-0x00000000079E0000-0x0000000007A0A000-memory.dmp
        Download

        memory/2480-45-0x0000000007840000-0x000000000784A000-memory.dmp
        Download

        memory/2480-44-0x00000000077D0000-0x00000000077EA000-memory.dmp
        Download

        memory/2480-43-0x0000000007E50000-0x00000000084CC000-memory.dmp
        Download

        memory/2480-42-0x0000000073070000-0x000000007382C000-memory.dmp
        Download

        memory/2480-41-0x0000000007720000-0x00000000077C3000-memory.dmp
        Download

        memory/2480-40-0x0000000073070000-0x000000007382C000-memory.dmp
        Download

        memory/2480-39-0x0000000006A20000-0x0000000006A40000-memory.dmp
        Download

        memory/2480-36-0x000000006FA30000-0x000000006FA7C000-memory.dmp
        Download

        memory/2480-23-0x0000000002C10000-0x0000000002C46000-memory.dmp
        Download

        memory/2480-34-0x00000000064A0000-0x00000000064EC000-memory.dmp
        Download

        memory/2480-33-0x0000000006460000-0x000000000647E000-memory.dmp
        Download

        memory/2480-32-0x0000000005F90000-0x00000000062EB000-memory.dmp
        Download

        memory/2480-28-0x0000000005EB0000-0x0000000005F16000-memory.dmp
        Download

        memory/2480-29-0x0000000005F20000-0x0000000005F86000-memory.dmp
        Download

        memory/2480-24-0x0000000073070000-0x000000007382C000-memory.dmp
        Download

        memory/2480-26-0x0000000073070000-0x000000007382C000-memory.dmp
        Download

        memory/2480-25-0x00000000057F0000-0x0000000005E3A000-memory.dmp
        Download

        memory/2828-59-0x0000000005DE0000-0x000000000613B000-memory.dmp
        Download

        memory/2828-55-0x0000000073070000-0x000000007382C000-memory.dmp
        Download

        memory/2828-54-0x0000000073070000-0x000000007382C000-memory.dmp
        Download

        memory/2828-58-0x0000000073070000-0x000000007382C000-memory.dmp
        Download

        memory/2828-61-0x000000006FA30000-0x000000006FA7C000-memory.dmp
        Download

        memory/2828-64-0x0000000007950000-0x00000000079E6000-memory.dmp
        Download

        memory/2828-65-0x00000000078D0000-0x00000000078E1000-memory.dmp
        Download

        memory/2828-67-0x0000000073070000-0x000000007382C000-memory.dmp
        Download