Overview

overview

7

Static

static

3

ledger-liv...1).exe

windows10-2004-x64

7

ledger-liv...1).exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/app-64.7z

windows10-2004-x64

1

$PLUGINSDIR/app-64.7z

windows11-ltsc_2024-x64

1

LICENSE.electron.txt

windows10-2004-x64

1

LICENSE.electron.txt

windows11-ltsc_2024-x64

1

chrome_100...nt.pak

windows10-2004-x64

3

chrome_100...nt.pak

windows11-ltsc_2024-x64

3

chrome_200...nt.pak

windows10-2004-x64

3

chrome_200...nt.pak

windows11-ltsc_2024-x64

3

icudtl.dat

windows10-2004-x64

3

icudtl.dat

windows11-ltsc_2024-x64

3

locales/af.pak

windows10-2004-x64

3

locales/af.pak

windows11-ltsc_2024-x64

3

locales/am.pak

windows10-2004-x64

3

locales/am.pak

windows11-ltsc_2024-x64

3

locales/ar.pak

windows10-2004-x64

3

locales/ar.pak

windows11-ltsc_2024-x64

3

locales/bg.pak

windows10-2004-x64

3

locales/bg.pak

windows11-ltsc_2024-x64

3

locales/bn.pak

windows10-2004-x64

3

locales/bn.pak

windows11-ltsc_2024-x64

3

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    151s
  • max time network
    163s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260709-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260709-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    02/08/2026, 04:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ledger-live-desktop-2.70.0-sha.92ace1745cc3a01484573a9d91ed0841fd770480-win-x64 (1).exe
  • Size 124.1MB
  • Sample260802-e9tkesdk61
  • SHA256 d38241aaa6308ef9f79ca6ba87b8f903fd4aa2f44307a45076d0c244fb5c544c
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discovery

Malware Config

Signatures

  • Executes dropped EXE 7 IoCs
  • Loads dropped DLL 27 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies registry class 11 IoCs
  • Suspicious behavior: EnumeratesProcesses 20 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 8 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\ledger-live-desktop-2.70.0-sha.92ace1745cc3a01484573a9d91ed0841fd770480-win-x64 (1).exe
    "C:\Users\Admin\AppData\Local\Temp\ledger-live-desktop-2.70.0-sha.92ace1745cc3a01484573a9d91ed0841fd770480-win-x64 (1).exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • System Location Discovery: System Language Discovery
    • Modifies registry class
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:4900
  • C:\Program Files\Ledger Live Beta\Ledger Live Beta.exe
    "C:\Program Files\Ledger Live Beta\Ledger Live Beta.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1148
    • C:\Program Files\Ledger Live Beta\Ledger Live Beta.exe
      "C:\Program Files\Ledger Live Beta\Ledger Live Beta.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Ledger Live Beta" --gpu-preferences=WAAAAAAAAADgAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=1648 --field-trial-handle=1652,i,11546312343562593578,16479088048923241991,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:6648
    • C:\Program Files\Ledger Live Beta\Ledger Live Beta.exe
      "C:\Program Files\Ledger Live Beta\Ledger Live Beta.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Ledger Live Beta" --mojo-platform-channel-handle=1912 --field-trial-handle=1652,i,11546312343562593578,16479088048923241991,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5912
    • C:\Program Files\Ledger Live Beta\Ledger Live Beta.exe
      "C:\Program Files\Ledger Live Beta\Ledger Live Beta.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Ledger Live Beta" --app-path="C:\Program Files\Ledger Live Beta\resources\app.asar" --enable-experimental-web-platform-features --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2692 --field-trial-handle=1652,i,11546312343562593578,16479088048923241991,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:984
    • C:\Program Files\Ledger Live Beta\Ledger Live Beta.exe
      "C:\Program Files\Ledger Live Beta\Ledger Live Beta.exe" "C:\Program Files\Ledger Live Beta\resources\app.asar\.webpack\main.bundle.js"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:7140
    • C:\Program Files\Ledger Live Beta\Ledger Live Beta.exe
      "C:\Program Files\Ledger Live Beta\Ledger Live Beta.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\Ledger Live Beta" --mojo-platform-channel-handle=3180 --field-trial-handle=1652,i,11546312343562593578,16479088048923241991,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:5132
    • C:\Program Files\Ledger Live Beta\Ledger Live Beta.exe
      "C:\Program Files\Ledger Live Beta\Ledger Live Beta.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\Ledger Live Beta" --gpu-preferences=WAAAAAAAAADoAAAMAAAAAAAAAAAAAAAAAABgAAAAAAA4AAAAAAAAAAAAAAAkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAAAAAAAAAAYAAAAAAAAAAgAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --mojo-platform-channel-handle=3164 --field-trial-handle=1652,i,11546312343562593578,16479088048923241991,262144 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:6272
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
    1⤵
      PID:6732

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          Ledger Live Beta.lnk
          • Path C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Ledger Live Beta.lnk
          • Size 1KB
          • SHA256 809f7e23317aa556480fd31db4c93eff7ee1978abb361e0712bfa5e32244c533
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          46e95320-67ba-435d-ae85-9afa3c8dca34.tmp.node
          • Path C:\Users\Admin\AppData\Local\Temp\46e95320-67ba-435d-ae85-9afa3c8dca34.tmp.node
          • Size 702KB
          • SHA256 e4541fb7b787cc401721d8568af7f721278ba9440ea33c2fd135e52ffc78b92c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          b96ca460-fb15-4d03-af7f-4edc7ca5394c.tmp.node
          • Path C:\Users\Admin\AppData\Local\Temp\b96ca460-fb15-4d03-af7f-4edc7ca5394c.tmp.node
          • Size 275KB
          • SHA256 f00d85eb45b70e6b4456d4916793162dcacac87a49678ea3dc376912bc7392bb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ff342925-cdcc-457f-8bf8-1cb584f29f27.tmp.node
          • Path C:\Users\Admin\AppData\Local\Temp\ff342925-cdcc-457f-8bf8-1cb584f29f27.tmp.node
          • Size 1.1MB
          • SHA256 a6e6d835cafa1fc93f4b6ef3595a4c2b8e54fb7c1ee416ed8e379ff5846e048e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          LICENSE.electron.txt
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\LICENSE.electron.txt
          • Size 1KB
          • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          LICENSES.chromium.html
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\LICENSES.chromium.html
          • Size 7.9MB
          • SHA256 6bb288835bc59b4550338d8034ef8fb9f05714e890ec08c327149c82142cb4ea
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          chrome_100_percent.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\chrome_100_percent.pak
          • Size 132KB
          • SHA256 99ca6947d97df212e45782bbd5d97bfb42112872e1c42bab4209ceedf66dc760
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          chrome_200_percent.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\chrome_200_percent.pak
          • Size 191KB
          • SHA256 cb4fd141a5c4d188a3ecb203e9d41a3afca648724160e212289adcac666fbff4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          d3dcompiler_47.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\d3dcompiler_47.dll
          • Size 4.7MB
          • SHA256 7353f25dc5cf84d09894e3e0461cef0e56799adbc617fce37620ca67240b547d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ffmpeg.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\ffmpeg.dll
          • Size 2.7MB
          • SHA256 5b59ea0a14b7046a142dfb4d45870c609d6d7fb4bff0471221430e6aad07814c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          icudtl.dat
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\icudtl.dat
          • Size 10.1MB
          • SHA256 ee3c8883effd90edfb0ff5b758c560cbca25d1598fcb55b80ef67e990dd19d41
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libEGL.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\libEGL.dll
          • Size 469KB
          • SHA256 a213e78577d5a49cc58e3c47664c9a8681ea45a7b5d49bba395f8445eca9b963
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libGLESv2.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\libGLESv2.dll
          • Size 7.1MB
          • SHA256 f5773168236c190fa8672ecf4a79e4b93bc36751b65631c1fb4e1ab981e3c681
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          af.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\af.pak
          • Size 381KB
          • SHA256 7bb75adef02d28819f1bd3b42fa46ed56d6dfbeae072341997b09b8c1f52d8dc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          am.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\am.pak
          • Size 619KB
          • SHA256 1974de0984976556288a4612d5f38fe0ff21e868bdd877ba5d5fde3bb4c9e36d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ar.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\ar.pak
          • Size 680KB
          • SHA256 da3294b3c8cd12000a4fc6610618a96b82d1ca67a764fb6387c7edb388b6c6fc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          bg.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\bg.pak
          • Size 706KB
          • SHA256 571e87f9c62cfea2a2303674f93ba879d9b899afce4dd7e47ddf5e6781b7d4a6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          bn.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\bn.pak
          • Size 911KB
          • SHA256 28e1441c4950a90717ebd0641b1f0b4a087cbddeac39edb2618b7d24fbf5a58d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ca.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\ca.pak
          • Size 430KB
          • SHA256 6cf25816859b95a5ba7b50578c14630105aa5c078338a4d67f15df0aab58233f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          cs.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\cs.pak
          • Size 441KB
          • SHA256 60cad724b1fd9820fa6ed7278b61e65a410255abb0335eec2e5195147e827939
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          da.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\da.pak
          • Size 400KB
          • SHA256 d4d8ce557a333310ff0f59d6225c41cbde396fccf0872605252425a917230894
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          de.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\de.pak
          • Size 427KB
          • SHA256 5883c8b60f43c5e12437eefa5d74dacf9c16e6187526df74a53f2eca9e6f3d62
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          el.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\el.pak
          • Size 774KB
          • SHA256 795baa943e85a4c4b425163c7a27f08fd02a825e41387e24330921bca2a4a35e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-GB.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\en-GB.pak
          • Size 348KB
          • SHA256 04820f38b261b4ae387b2a77ee6f5f1ddfabfe0d7fe7e61ab92d5e23823b29f0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-US.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\en-US.pak
          • Size 351KB
          • SHA256 69c1a2e1b30d83612decf1a8dd7b124a04f58e9f2465876726f02f7f7d5eb54a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es-419.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\es-419.pak
          • Size 425KB
          • SHA256 9b1e39d81df128a6cf0ea6336befe3336d8fea3872c750600cb382a8d44aa39a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          es.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\es.pak
          • Size 425KB
          • SHA256 591e454d9e530561540460448da5e346bd5a034fe5ba153b81284f820b914329
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          et.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\et.pak
          • Size 384KB
          • SHA256 41883af1e49cc180fb48e02659e75b0169d974d77373cf7bb2a4ea02dd654e26
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fa.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\fa.pak
          • Size 629KB
          • SHA256 89cb2e20ca3da9e670d5e56523c3159fc59cc451c00f568fe85dee71690e3649
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fi.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\fi.pak
          • Size 392KB
          • SHA256 052a72c9d6f2bb55f02fb1c5c4c68525a32b8cc9120c270d07d7b813d604f7dc
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fil.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\fil.pak
          • Size 442KB
          • SHA256 e8f03c2e9c88adb04648ef93f9ea3cff87641638ac97c9a6752b751e7f7a8a20
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fr.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\fr.pak
          • Size 459KB
          • SHA256 7d8b3dbb9792891088e60b26265cd7b4f044d3ec2130a95e249ef979b7b7b286
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          gu.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\gu.pak
          • Size 886KB
          • SHA256 0f0fee8a2f22f80a0c4a758e7f4fd90d40be4048dcab0d824135caa5e92efd5d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          he.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\he.pak
          • Size 549KB
          • SHA256 f7d753020bf136d4b878aab4f826c31dd283486aa509cd488326fdc25f77f80e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          hi.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\hi.pak
          • Size 928KB
          • SHA256 40cd407204bc8f9148014d459143a78c33d2c61a140f05091aa9c20817b22bc5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          hr.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\hr.pak
          • Size 428KB
          • SHA256 104192f0c9fa89c7b08cc53cee8e7de4d4779b9c19799e2296cfa73416546b92
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          hu.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\hu.pak
          • Size 460KB
          • SHA256 ca4b4c7c7be45ea0871abf7d5668ab948f712a02facdc1d6bbc189b1b3522446
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          id.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\id.pak
          • Size 377KB
          • SHA256 3201d504a7772113fbd4209de39ea16aa5a1d567827c51468bf50ecc92d1b616
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          it.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\it.pak
          • Size 417KB
          • SHA256 e4f9cf33c2dd8adb450029fd43f603b1e0730dd0ed66599afb0cff7d78fafb2e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ja.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\ja.pak
          • Size 509KB
          • SHA256 92df6a6db021b480f76b91249bede4102dac600b7a459fbf4446457af8c29081
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          kn.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\kn.pak
          • Size 1022KB
          • SHA256 9acc6bb86329a1606f9ecd6170b77f212a1b8ef85cedf65b2320eca715c4c6a8
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ko.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\ko.pak
          • Size 429KB
          • SHA256 70f9b65c9b554ac64b4e690c77bfc7a524c4c483cc063254bedeea20ee437d15
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          lt.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\lt.pak
          • Size 463KB
          • SHA256 3f380b4772aa391ae562318247b7d981d7ea128cb41657c25a9bfd1052e698c1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          lv.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\lv.pak
          • Size 461KB
          • SHA256 af1f3deb4bad0a8933ac9ba122557901061518a6bc41cbab129b3a1a17362bcb
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ml.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\ml.pak
          • Size 1.0MB
          • SHA256 6f203a64bc4766cce23ba6ff5756875b450e945e894afe471d998bd2ac71dbc0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          mr.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\mr.pak
          • Size 870KB
          • SHA256 d0d4352ecf8bf9592e810df2dc40e6ba162014a17826c6bfb1b8bd8db84075f3
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ms.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\ms.pak
          • Size 395KB
          • SHA256 163eb7ba5f0c61acb6443709c24e38ca6370a33f89a12e13d0a57c258a87ca16
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          nb.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\nb.pak
          • Size 386KB
          • SHA256 7a69a2bd54012986bad91b32f045d85555319efb9a9f817fefd8289a9ad23119
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          nl.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\nl.pak
          • Size 398KB
          • SHA256 71eba0a0280bf70a7cd596cad97ab4569217ae3278a046c6ba8dacd987a23df4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pl.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\pl.pak
          • Size 444KB
          • SHA256 2e9384816d17eb39240b0b26e93caa5bee232836dee6384f76a4c1ba98dfc734
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pt-BR.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\pt-BR.pak
          • Size 419KB
          • SHA256 faca8d85fb57806f3801160c297fa568df1d82c24f16ca487ee338e7aa3e4bf1
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          pt-PT.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\pt-PT.pak
          • Size 420KB
          • SHA256 1c90b118fb760f6acbcd000e908a390ef4687447ba72003cf42fd998b4d0e239
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ro.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\ro.pak
          • Size 434KB
          • SHA256 a322744798d3930738fecacfcdb5a474a4de656aeb363f2b2f11503e6333801b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ru.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\ru.pak
          • Size 711KB
          • SHA256 6d9fb7def13400d9fc49fa16a65f9dd8d68a3a49dbb5f8c6a984e6ebbb415384
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sk.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\sk.pak
          • Size 448KB
          • SHA256 4f5e6ef643fe4b26e6607d7ab529515b356badaa50ccaf9142fe6275eb57bf0d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sl.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\sl.pak
          • Size 433KB
          • SHA256 b36e1fe2405cc4b9f34587e30da2feadaa6f03124769b02f79333adacaddb49b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sr.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\sr.pak
          • Size 666KB
          • SHA256 f4b900d2925f823fdc1740f1156f9900c44ba6a6e12bc3690f0ab70ca7a84eda
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sv.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\sv.pak
          • Size 389KB
          • SHA256 110112c2f7ff5d3c8599036669d156e96ec19e70515fbba3bbcb2043ab994680
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          sw.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\sw.pak
          • Size 408KB
          • SHA256 bdd5f68349e39363558b3cfb6b0b7daeca53cbafc464009f32e96c9561fcc95d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ta.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\ta.pak
          • Size 1.0MB
          • SHA256 9cd624a97493282afed3b9b1e848b12639234fa54c04b22128169924f9c92777
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          te.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\te.pak
          • Size 973KB
          • SHA256 5fc26be9164230da66408e764006c77bc0769648392da36aa4eada7b570122d4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          th.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\th.pak
          • Size 817KB
          • SHA256 e1d9feef119988bd7d3800cc318eebc92e0d00b902558c073d634052a97434a4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          tr.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\tr.pak
          • Size 415KB
          • SHA256 2ccdab4226ed4dd1fbafc2f38cd24c27d985ef90cd45efc2bad75f46e383f2b0
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          uk.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\uk.pak
          • Size 711KB
          • SHA256 393298aaadc405de720aaa7ede4b16d3d57337160bc52ff0b66db5e1f7af5fd7
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          ur.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\ur.pak
          • Size 622KB
          • SHA256 710f92ec980615110dd4ee66900060e2fbbc14dd2c42dab006c690ab3c23d520
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vi.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\vi.pak
          • Size 492KB
          • SHA256 c95b2816a6bec4a75f8999bdcbff5466012458f0dad12d549d87d84c819cf028
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          zh-CN.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\zh-CN.pak
          • Size 357KB
          • SHA256 8143a221d68b5ae06b040bcd95677c2781021d006ad88241b3cbfe9985d3bc49
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          zh-TW.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\locales\zh-TW.pak
          • Size 353KB
          • SHA256 abd9e0b2299d4366834c65ef5508d7a0389ea0f4da36aed9199eb81adb702f42
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          resources.pak
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\resources.pak
          • Size 4.9MB
          • SHA256 27bda5c351affb61dddffee5ccacd9bbadaffce5217efc2c4e3e13bafdcea9b4
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          app-update.yml
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\resources\app-update.yml
          • Size 100B
          • SHA256 6bb139a359b5151e8a94afb0a237fb0f8f4d464ea1254f966371d2886ba21acf
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          elevate.exe
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\resources\elevate.exe
          • Size 105KB
          • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          snapshot_blob.bin
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\snapshot_blob.bin
          • Size 253KB
          • SHA256 f2b23a9d26bcc0c37bdf22b478e0e185c37effd71eb61c9ffee734c67a4f6b6a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          v8_context_snapshot.bin
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\v8_context_snapshot.bin
          • Size 564KB
          • SHA256 4d76eda777bf56f16df5d5f9f2fc5972f963ce89aaf43c58995a5ed3a29e764f
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vk_swiftshader.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\vk_swiftshader.dll
          • Size 5.0MB
          • SHA256 371fd2064d669a833d30129af855d6890d3a8e91382f9a9d8fb75f39fce74ace
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vk_swiftshader_icd.json
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\vk_swiftshader_icd.json
          • Size 106B
          • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          vulkan-1.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\7z-out\vulkan-1.dll
          • Size 910KB
          • SHA256 749a7e840894096fce59565c323d17ba3d6194540f7f139e23ab0bb53710f100
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          StdUtils.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\StdUtils.dll
          • Size 100KB
          • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          System.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\System.dll
          • Size 12KB
          • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          UAC.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\UAC.dll
          • Size 14KB
          • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          WinShell.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\WinShell.dll
          • Size 3KB
          • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          nsDialogs.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\nsDialogs.dll
          • Size 9KB
          • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          nsProcess.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\nsProcess.dll
          • Size 4KB
          • SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          nsis7z.dll
          • Path C:\Users\Admin\AppData\Local\Temp\nsrAD9C.tmp\nsis7z.dll
          • Size 424KB
          • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          35544cb7-7b03-4c19-9eba-384f410c9452.tmp
          • Path C:\Users\Admin\AppData\Roaming\Ledger Live Beta\35544cb7-7b03-4c19-9eba-384f410c9452.tmp
          • Size 57B
          • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          data_0
          • Path C:\Users\Admin\AppData\Roaming\Ledger Live Beta\Cache\Cache_Data\data_0
          • Size 8KB
          • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_1
          • Path C:\Users\Admin\AppData\Roaming\Ledger Live Beta\Cache\Cache_Data\data_1
          • Size 264KB
          • SHA256 902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_2
          • Path C:\Users\Admin\AppData\Roaming\Ledger Live Beta\Cache\Cache_Data\data_2
          • Size 8KB
          • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          data_3
          • Path C:\Users\Admin\AppData\Roaming\Ledger Live Beta\Cache\Cache_Data\data_3
          • Size 8KB
          • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          CURRENT
          • Path C:\Users\Admin\AppData\Roaming\Ledger Live Beta\IndexedDB\file__0.indexeddb.leveldb\CURRENT
          • Size 16B
          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
          • MD5 SHA1 SHA512
          Submit Download

          Network Persistent State
          • Path C:\Users\Admin\AppData\Roaming\Ledger Live Beta\Network\Network Persistent State
          • Size 1KB
          • SHA256 5b5fddba56eaa5cc5e9d59aab3f1b3eee8887f7d44aff082c857a913e18b8463
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Network Persistent State~RFe5b2900.TMP
          • Path C:\Users\Admin\AppData\Roaming\Ledger Live Beta\Network\Network Persistent State~RFe5b2900.TMP
          • Size 59B
          • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          TransportSecurity
          • Path C:\Users\Admin\AppData\Roaming\Ledger Live Beta\Network\TransportSecurity
          • Size 1KB
          • SHA256 10e0191e4e4dc23dda6e60a2348243aa17cab5abcec02e03907f818688f4487e
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          TransportSecurity~RFe5b4543.TMP
          • Path C:\Users\Admin\AppData\Roaming\Ledger Live Beta\Network\TransportSecurity~RFe5b4543.TMP
          • Size 1KB
          • SHA256 ec0b3545f0def6cad6013b72f966c681e1a59127ceb3930633a72ae446ab87bc
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          app.json
          • Path C:\Users\Admin\AppData\Roaming\Ledger Live Beta\app.json
          • Size 1KB
          • SHA256 30dac57b5cf820a16b094ea329788981264efe6850f4659c33b6de2d51b5653a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          app.json
          • Path C:\Users\Admin\AppData\Roaming\Ledger Live Beta\app.json
          • Size 11B
          • SHA256 7fb9d166d1a15bce0b9f085f3818946fd9297e4513a4a034a0ceb749292b4c0d
          • MD5 SHA1 SHA512
          Submit Download

          default.exc
          • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
          • Size 2B
          • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
          • MD5 SHA1 SHA512
          Submit Download

          memory/5132-626-0x00007FF9A4490000-0x00007FF9A4491000-memory.dmp
          Download

          memory/6272-694-0x0000014AA9DC0000-0x0000014AA9DC1000-memory.dmp
          Download

          memory/6272-705-0x0000014AA9DC0000-0x0000014AA9DC1000-memory.dmp
          Download

          memory/6272-704-0x0000014AA9DC0000-0x0000014AA9DC1000-memory.dmp
          Download

          memory/6272-703-0x0000014AA9DC0000-0x0000014AA9DC1000-memory.dmp
          Download

          memory/6272-702-0x0000014AA9DC0000-0x0000014AA9DC1000-memory.dmp
          Download

          memory/6272-701-0x0000014AA9DC0000-0x0000014AA9DC1000-memory.dmp
          Download

          memory/6272-700-0x0000014AA9DC0000-0x0000014AA9DC1000-memory.dmp
          Download

          memory/6272-696-0x0000014AA9DC0000-0x0000014AA9DC1000-memory.dmp
          Download