Overview

overview

9

Static

static

3

2026-09-11...at.exe

windows10-2004-x64

9

2026-09-11...at.exe

windows11-ltsc_2024-x64

9

Analysis

  • max time kernel
    151s
  • max time network
    161s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    12/09/2026, 11:22

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    2026-09-11_383acf2797b7920b44af316ceef9ff8f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
  • Size 87.0MB
  • Sample260912-ngsl4aah35
  • SHA256 31742b61d9936f36a878c6e2960d0a3233749e70a38ca3b1e27e7bab6d105366
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
9/10
defense_evasiondiscoveryexecutionspywaretrojan

Malware Config

Signatures

  • Detects Windows exceutables bypassing UAC using CMSTP COM interfaces. MITRE (T1218.003) 1 IoCs
  • Downloads MZ/PE file 2 IoCs
  • Executes dropped EXE 11 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Executes a command shell one-liner 1 TTPs 1 IoCs

    Execution of a cmd.exe one-liner (/c "close" or /k "keep") is a common script/loader stage.

    execution
  • System Location Discovery: System Language Discovery 1 TTPs 13 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Modifies registry class 1 IoCs
  • Modifies system certificate store 2 TTPs 5 IoCs
    defense_evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 4 IoCs
  • Suspicious use of SendNotifyMessage 4 IoCs
  • Suspicious use of WriteProcessMemory 16 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\2026-09-11_383acf2797b7920b44af316ceef9ff8f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
    "C:\Users\Admin\AppData\Local\Temp\2026-09-11_383acf2797b7920b44af316ceef9ff8f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4208
    • C:\Users\Admin\AppData\Local\Temp\2026-09-11_383acf2797b7920b44af316ceef9ff8f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe
      "C:\Users\Admin\AppData\Local\Temp\2026-09-11_383acf2797b7920b44af316ceef9ff8f_blankgrabber_glassworm_icedid_luca-stealer_njrat.exe"
      2⤵
      • Downloads MZ/PE file
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:3112
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /c "ver"
        3⤵
        • Executes a command shell one-liner
        PID:1296
      • C:\Users\Admin\Downloads\1\宁波游戏大厅HD_0.3.1.exe
        C:\Users\Admin\Downloads\1\宁波游戏大厅HD_0.3.1.exe
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Drops file in Program Files directory
        • System Location Discovery: System Language Discovery
        • Modifies registry class
        • Suspicious use of AdjustPrivilegeToken
        PID:4548
      • C:\Users\Admin\Downloads\BDSubWiz.exe
        C:\Users\Admin\Downloads\BDSubWiz.exe
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • System Location Discovery: System Language Discovery
        PID:4272
  • C:\Users\Default\AppData\Local\Microsoft\Office\OMCku\Vjafwi.exe
    C:\Users\Default\AppData\Local\Microsoft\Office\OMCku\Vjafwi.exe -svc
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2440
    • C:\Windows\SysWOW64\svchost.exe
      C:\Windows\SysWOW64\svchost.exe -k netsvcs
      2⤵
      • System Location Discovery: System Language Discovery
      • Suspicious use of WriteProcessMemory
      PID:5736
      • C:\Windows\SysWOW64\dllhost.exe
        "C:\Windows\SysWOW64\dllhost.exe" -ks
        3⤵
        • System Location Discovery: System Language Discovery
        PID:4312
  • C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe
    "C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Modifies system certificate store
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of SendNotifyMessage
    • Suspicious use of WriteProcessMemory
    PID:2404
    • C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe
      "C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\nbgame_pclobby" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1660 --field-trial-handle=1732,i,4684933807525763423,3950859440865914807,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:1648
    • C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe
      "C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe" --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\nbgame_pclobby /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\nbgame_pclobby\Crashpad --url=https://f.a.k/e --annotation=_productName=nbgame_pclobby --annotation=_version=0.3.1 --annotation=plat=Win32 --annotation=prod=Electron --annotation=ver=22.3.27 --initial-client-data=0x7b8,0x7c0,0x7c4,0x660,0x7c8,0x892ed38,0x892ed48,0x892ed54
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:5720
    • C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe
      "C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\nbgame_pclobby" --standard-schemes --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=2144 --field-trial-handle=1732,i,4684933807525763423,3950859440865914807,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:916
    • C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe
      "C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\nbgame_pclobby" --standard-schemes --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --app-user-model-id=baison.nbgame.pclobby --app-path="C:\Program Files (x86)\nbgame_pclobby\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2608 --field-trial-handle=1732,i,4684933807525763423,3950859440865914807,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • System Location Discovery: System Language Discovery
      PID:1436
    • C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe
      "C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --user-data-dir="C:\Users\Admin\AppData\Roaming\nbgame_pclobby" --standard-schemes --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=3336 --field-trial-handle=1732,i,4684933807525763423,3950859440865914807,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:1588
    • C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe
      "C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\nbgame_pclobby" --standard-schemes --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --app-user-model-id=baison.nbgame.pclobby --app-path="C:\Program Files (x86)\nbgame_pclobby\resources\app.asar" --enable-sandbox --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3680 --field-trial-handle=1732,i,4684933807525763423,3950859440865914807,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:3840
    • C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe
      "C:\Program Files (x86)\nbgame_pclobby\宁波游戏大厅HD.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Roaming\nbgame_pclobby" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=3944 --field-trial-handle=1732,i,4684933807525763423,3950859440865914807,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
      2⤵
      • Executes dropped EXE
      • System Location Discovery: System Language Discovery
      PID:5256

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        VCRUNTIME140.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\VCRUNTIME140.dll
        • Size 95KB
        • SHA256 9d2b40f0395cc5d1b4d5ea17b84970c29971d448c37104676db577586d4ad1b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _bz2.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\_bz2.pyd
        • Size 81KB
        • SHA256 62173a8fadd4bf4dd71ab89ea718754aa31620244372f0c5bbbae102e641a60e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _ctypes.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\_ctypes.pyd
        • Size 120KB
        • SHA256 1ea3dd3df393fa9b27bf6595be4ac859064cd8ef9908a12378a6021bba1cb177
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        _lzma.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\_lzma.pyd
        • Size 154KB
        • SHA256 60793c8592193cfbd00fd3e5263be4315d650ba4f9e4fda9c45a10642fd998be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-console-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-console-l1-1-0.dll
        • Size 19KB
        • SHA256 0052515763a1a31d2527a2eb2523fb7b88d8e55c4e4da5ef352b565476bf21e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-datetime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-datetime-l1-1-0.dll
        • Size 18KB
        • SHA256 cc6c2fdf1c34fa82036165b111f91220bcf7e43aab79dfb284f982f0590bebb1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-debug-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-debug-l1-1-0.dll
        • Size 18KB
        • SHA256 f9aaaabf78feb39a1d8e971f5ce047d1c4a896a80409b800f1f7112cdce420ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-errorhandling-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-errorhandling-l1-1-0.dll
        • Size 18KB
        • SHA256 a0aa340274d4bb46b6d9547d647ab7dc16c229577bbab836e6a4f3307f310332
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-fibers-l1-1-0.dll
        • Size 22KB
        • SHA256 15c1b7ff3e8b27909e764a4b2690bc2e47aea09be9384c239230daecc637d5ad
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-fibers-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-fibers-l1-1-1.dll
        • Size 22KB
        • SHA256 de5abcb5cfcaba53ce90fd807b18d5bd8b92f037215917edb271ef40fffe4db7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-file-l1-1-0.dll
        • Size 22KB
        • SHA256 05b478718540a6f410a3ad859f7d5e56c223d6786eacc7e9bc80264f587fd0c7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-file-l1-2-0.dll
        • Size 18KB
        • SHA256 6878d8168d5cc159efe58f14e5ba10310d99b53ab8495521e54c966994dac50b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-file-l2-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-file-l2-1-0.dll
        • Size 18KB
        • SHA256 b74aefd6fa638be3f415165c8109121a2093597421101abc312ee7ffa1130278
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-handle-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-handle-l1-1-0.dll
        • Size 18KB
        • SHA256 550b4f5ba95108b01a24f05496576a4e73642334a10dde61b09846e0efb9f260
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-heap-l1-1-0.dll
        • Size 19KB
        • SHA256 eca63fc5c873ce8b36c507e2b9a88caaea9617c84669886b15f6bc38bd0024c6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-interlocked-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-interlocked-l1-1-0.dll
        • Size 18KB
        • SHA256 2f2f9660f4ffa814f465676d5b9cb9bb70d0b7c5fc5eb14c34cfe94a50883b21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-libraryloader-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-libraryloader-l1-1-0.dll
        • Size 19KB
        • SHA256 2f9c3b077da02c587964a59e9c4e2f383ff8357229eab4b4f04814df94d78ff0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-localization-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-localization-l1-2-0.dll
        • Size 21KB
        • SHA256 6ed17fb3ca5156b39fbc1ef7d1eefa95e739857607de4cd8d41cecfcd1350705
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-memory-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-memory-l1-1-0.dll
        • Size 19KB
        • SHA256 76a3aa52d49dd0d8e0451f4045f4d8ba05d2332d0db2a39408b85cd2e43b84a3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-namedpipe-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-namedpipe-l1-1-0.dll
        • Size 18KB
        • SHA256 b1b2595494072a52f1fc44586debf52312eab1a245a7a16185d7b1af37b159a6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processenvironment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-processenvironment-l1-1-0.dll
        • Size 19KB
        • SHA256 bf11319eb6be15633e47ab8f247d1acc9a9ecdf37181fc0ddfe9388ab82ac90a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-processthreads-l1-1-0.dll
        • Size 20KB
        • SHA256 7646eba0c683fc3e1b00f0b3b2b5912621b2016a6ceb7d53181cd1c3fa64785a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-processthreads-l1-1-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-processthreads-l1-1-1.dll
        • Size 19KB
        • SHA256 4de821884cbef4182b29d8c33cfe13e43e130ad58ee1281679e8d40a2edcb8ea
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-profile-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-profile-l1-1-0.dll
        • Size 18KB
        • SHA256 4ca44ede30b46f1f23905cecfa27f0edb26ee960dba10f9bf8002d79ed77c3e5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-rtlsupport-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-rtlsupport-l1-1-0.dll
        • Size 19KB
        • SHA256 09b7f0a7f68a12602e7f4dbd5a7f1cdfb3e93fd54326884e48f36e2e200acce9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-string-l1-1-0.dll
        • Size 18KB
        • SHA256 3eda46e395fad6ec222ab44188d6a46a468b0fd4aff28252938f4e6a9a3e3893
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-synch-l1-1-0.dll
        • Size 20KB
        • SHA256 83c1df33df30df48ab161a5a1d6c3cb4bdaebff330ee6e81e871afe3990d7a65
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-synch-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-synch-l1-2-0.dll
        • Size 19KB
        • SHA256 e000c6685719c2b07355c1eddbfdae7c6794aa6c0ac883d34af33dfc8bf40779
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-sysinfo-l1-1-0.dll
        • Size 19KB
        • SHA256 f5bf492fe568eb57d2e7111b1c3927f1ee897b5a1109bc68ebe011a2dfdef2fe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-sysinfo-l1-2-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-sysinfo-l1-2-0.dll
        • Size 22KB
        • SHA256 177a59cc44d25784cf90bfe7b5ba9f3f2b368c17da59e45c27fa4249fa7a1c5c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-timezone-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-timezone-l1-1-0.dll
        • Size 18KB
        • SHA256 630466fd77ac7009c947a8370a0d0c20652169824c54ddcb8c05e8df45e23197
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-core-util-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-core-util-l1-1-0.dll
        • Size 18KB
        • SHA256 187d47ebcc1e96abe635f23c92d2c63fc8cd741fcb03fe2dd5fc3054cb3d6d92
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-conio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-crt-conio-l1-1-0.dll
        • Size 19KB
        • SHA256 91f4db05c69c58ecb2493e30acc5297043c41b1ce6db50cee4e2922cd4bcd7f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-convert-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-crt-convert-l1-1-0.dll
        • Size 22KB
        • SHA256 e64fbac3491b4693e79a3f7b0db1d788f93608d3fc82133edf25a868c80d2153
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-environment-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-crt-environment-l1-1-0.dll
        • Size 19KB
        • SHA256 dd054e4de84144c2130fa8d28d563252a7c4089a58872e49d63bc43c9a1a3cb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-filesystem-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-crt-filesystem-l1-1-0.dll
        • Size 20KB
        • SHA256 966a7f15bfb2e0ff7888d583638ebd675d8f46b264194cf332f78140b7c129e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-heap-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-crt-heap-l1-1-0.dll
        • Size 19KB
        • SHA256 742bb9bf4c232f84ad8008af4af8eda7a1ec3eb76f05d9d7ebb95f6a5cabd2d8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-locale-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-crt-locale-l1-1-0.dll
        • Size 19KB
        • SHA256 25905676b543c4f05e9dae135f929c03a57686a6941ce59be2b3450521feb943
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-math-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-crt-math-l1-1-0.dll
        • Size 27KB
        • SHA256 08e34f12de24e89379a0533f21a23ce6fecbea05d4062796d4ffd4adc3012316
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-process-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-crt-process-l1-1-0.dll
        • Size 19KB
        • SHA256 c68a61c260454c0aeb051ddb2bed52cbca44b96d50046017cbc351b41f225dc0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-runtime-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-crt-runtime-l1-1-0.dll
        • Size 23KB
        • SHA256 4c787ff8d40bb803e75fe6218fec36a672cfa6cfc7f6e80e68a7eb0b77a10e5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-stdio-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-crt-stdio-l1-1-0.dll
        • Size 24KB
        • SHA256 c7919be431ce2fa1906ff9eeb19e4cb19a30a4680107ef8737ce894654b21a5a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-string-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-crt-string-l1-1-0.dll
        • Size 24KB
        • SHA256 92f72f495a6897f7d7cf2c2064b2b65f6b4fbd4f30911a534a5cd0de73395ebe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-time-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-crt-time-l1-1-0.dll
        • Size 21KB
        • SHA256 46cb7b3a9f8aac5adcdbe23494e458f3195adf4b8ed1c71f2d934ddde651e57e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        api-ms-win-crt-utility-l1-1-0.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\api-ms-win-crt-utility-l1-1-0.dll
        • Size 19KB
        • SHA256 111f6dd2e7247071a33d75bf98d521a8d09c4071f90483a82e6ed9af69bb52c4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        base_library.zip
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\base_library.zip
        • Size 859KB
        • SHA256 39a54fae19990212e847b1580ca5fdcdbdde3b9d4ce8f012287ec12020ccc9ab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libcrypto-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\libcrypto-1_1.dll
        • Size 3.3MB
        • SHA256 9b7b4a0ad212095a8c2e35c71694d8a1764cd72a829e8e17c8afe3a55f147939
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libffi-7.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\libffi-7.dll
        • Size 32KB
        • SHA256 f60dd9f2fcbd495674dfc1555effb710eb081fc7d4cae5fa58c438ab50405081
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libssl-1_1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\libssl-1_1.dll
        • Size 688KB
        • SHA256 d74ce01319ae6f54483a19375524aa39d9f5fd91f06cf7df238ca25e043130fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pyexpat.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\pyexpat.pyd
        • Size 194KB
        • SHA256 4a2d59993bce76790c6d923af81bf404f8e2cb73552e320113663b14cf78748c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python3.DLL
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\python3.DLL
        • Size 64KB
        • SHA256 dc909eb798a23ba8ee9f8e3f307d97755bc0d2dc0cb342cedae81fbbad32a8a9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        python310.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\python310.dll
        • Size 4.3MB
        • SHA256 14b06796f288bc6599e458fb23a944ab0c843e9868058f02a91d4606533505ed
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        select.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\select.pyd
        • Size 29KB
        • SHA256 db85f2f94d4994283e1055057372594538ae11020389d966e45607413851d9e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ucrtbase.dll
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\ucrtbase.dll
        • Size 1.3MB
        • SHA256 5e7709a6b71bb818260b6f05c5bb3b6ca0c3ca9bc2f58c6242c1cd9d826d0079
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        unicodedata.pyd
        • Path C:\Users\Admin\AppData\Local\Temp\_MEI42082\unicodedata.pyd
        • Size 1.1MB
        • SHA256 1fb2d66c056f69e8bbdd8c6c910e72697874dae680264f8fb4b4df19af98aa2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        LICENSE.electron.txt
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSES.chromium.html
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\LICENSES.chromium.html
        • Size 6.5MB
        • SHA256 9f3f2b4d9bbd3113486839eca85de119fab766450cdca08a4574b80748885708
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_100_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\chrome_100_percent.pak
        • Size 126KB
        • SHA256 9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_200_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\chrome_200_percent.pak
        • Size 175KB
        • SHA256 1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dcompiler_47.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\d3dcompiler_47.dll
        • Size 3.9MB
        • SHA256 827d12e4ed62520b663078bbf26f95dfd106526e66048cf75b5c9612b2fb7ce6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffmpeg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\ffmpeg.dll
        • Size 2.4MB
        • SHA256 02a6d001e6dd944738e09b720e49dcb1272cb782b870e5ae319d4600bc192225
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icudtl.dat
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\icudtl.dat
        • Size 10.0MB
        • SHA256 97b978a19edd4746e9a44d9a44bb4bc519e127a203c247837ec0922f573449e3
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libEGL.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\libEGL.dll
        • Size 375KB
        • SHA256 961aff31cab097ebb973a32140c4f87c415734412771cf1fdfe24ddc675b54c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libGLESv2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\libGLESv2.dll
        • Size 6.4MB
        • SHA256 e6ab5fc601d0d230c989d2f481b37c259a0a1fffb7fb841b7099a5e966f0088a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        af.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\af.pak
        • Size 340KB
        • SHA256 d63222c4a20fa9741f5262634cf9751f22fbb4fcd9d3138d7c8d49e0efb57fba
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        am.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\am.pak
        • Size 551KB
        • SHA256 55357baf28716a73f79ac9a6af1ae63972eb79f93c415715518027fc5c528504
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ar.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\ar.pak
        • Size 602KB
        • SHA256 e34d5cabaed4634c672591074057c12947bc9e728004228a9e75f87829f4a48a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bg.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\bg.pak
        • Size 631KB
        • SHA256 fc4a59ea60d04b224765be4916090e97ed8ddda6b136a92a3827ed0fcc64bb0e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\bn.pak
        • Size 812KB
        • SHA256 e325d936cd97c3f9ddfca2d87caefb8b6e7465ffa31d0386ae2456b18f7a92da
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ca.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\ca.pak
        • Size 384KB
        • SHA256 e1d6b5fd0bc411f2895eaaa1409916f5ffe39a5c6bd1bafe8af7ce33da5be17d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cs.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\cs.pak
        • Size 393KB
        • SHA256 936466784a55b965d23b016bc49377655bc5d281d012c8369c0809c961e05c74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        da.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\da.pak
        • Size 356KB
        • SHA256 1b0793b1cbeb6a56ff1e64523c37ba753457320aa29f9718022caa07b4981d8f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        de.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\de.pak
        • Size 381KB
        • SHA256 e0f632ce324951002c80e019dd0169be9f6b0640533fa434cd6ca80f28a1d3f7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        el.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\el.pak
        • Size 691KB
        • SHA256 92403b6160e38746597d4dd7f64d64cf19e30b5e7862901263c39679187b2c91
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-GB.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\en-GB.pak
        • Size 310KB
        • SHA256 463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-US.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\en-US.pak
        • Size 313KB
        • SHA256 bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es-419.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\es-419.pak
        • Size 380KB
        • SHA256 5aff3762747a6e8c6df9f2a3b470bf231b44163006b17ce87e2a03694be27b81
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\es.pak
        • Size 380KB
        • SHA256 267e7b6376e7e5ab806b16fde93bbbcd961bf0c3a7b3a2cabccab37faa9a1d16
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        et.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\et.pak
        • Size 342KB
        • SHA256 d984aee4d18ca24a88846b1b6e0294d373733430f30bb4f1b97bc7d50d512c2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fa.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\fa.pak
        • Size 557KB
        • SHA256 221bbbde078d135f6daca4978a31cc6a82f8f46536467ebc9a0cd322c58a7785
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\fi.pak
        • Size 351KB
        • SHA256 5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fil.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\fil.pak
        • Size 394KB
        • SHA256 4cd3fa70487e894400ad29e3bfbfba3e1c5edd799aab12c62c3aff3c2580ce5e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\fr.pak
        • Size 410KB
        • SHA256 1f6bc09499ee37456968a28b67b81bbf5b9df4f0c6035a388242d2037a3b65a1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\gu.pak
        • Size 787KB
        • SHA256 c36a20730d5f2b91cb61b5b2a5912db2ea5a328a9b8abe0fca0af300446d3c20
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        he.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\he.pak
        • Size 488KB
        • SHA256 875712bb852c698f677c0c74e088f62d31adb2bce65648fc390607aad8705c45
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\hi.pak
        • Size 821KB
        • SHA256 1e9623c7407ae8b8a88df3f69a47ae8117f74c4dcb56897bb794a9c38ee5805b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\hr.pak
        • Size 381KB
        • SHA256 3d7685163c5eb6a11e745ff934312b8681c5f85dfa8d9ea701e9dcaee1e7a285
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\hu.pak
        • Size 411KB
        • SHA256 3ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        id.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\id.pak
        • Size 336KB
        • SHA256 9210c4c4c33e7ceb5f70005a92a4fd36ca4facdd41701fdc1d2ce638db8adf22
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        it.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\it.pak
        • Size 373KB
        • SHA256 c0dc0a4a87f7bb054a30eb1174c3228ea2014bd94668a7d22995b99c4937d817
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ja.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\ja.pak
        • Size 456KB
        • SHA256 3accfd9a1833ddeedb2082fb94101beb59b555c60f42e3070e9e04a372eba84a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\kn.pak
        • Size 910KB
        • SHA256 90b2df3338468e84e2cf2f2f67597cba5c3ceb5dba9c59ebd072ec15a70ce741
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ko.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\ko.pak
        • Size 383KB
        • SHA256 b04c1b91cab31054be70cb851dc6716065545445801045daceb96eeee4d2334a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lt.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\lt.pak
        • Size 412KB
        • SHA256 9200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\lv.pak
        • Size 410KB
        • SHA256 b5a31cbfcb40ad8d911de1618c4eb7e8cc67b97eb8878220f15d40eb014d8ac8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ml.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\ml.pak
        • Size 948KB
        • SHA256 61a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\mr.pak
        • Size 772KB
        • SHA256 481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ms.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\ms.pak
        • Size 351KB
        • SHA256 fe58cc4f62fc31e32c1fb9a0893a5483391ab6a91b1c92ed4a5e3103a962da7a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nb.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\nb.pak
        • Size 344KB
        • SHA256 d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\nl.pak
        • Size 356KB
        • SHA256 55413d5eddb3300e0ae0fa5d79d26fdf1e5a12922d7018c8054b1faa9d660301
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\pl.pak
        • Size 396KB
        • SHA256 53b59486361b11512fb90f15065104b15ee2322bb7804f859cde2f2ecf9581fb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-BR.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\pt-BR.pak
        • Size 374KB
        • SHA256 c9ec3822044365457b8736348cf95a8e39bdfe3ed36267449bf3ed739accef2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-PT.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\pt-PT.pak
        • Size 376KB
        • SHA256 c89170385b3afb2ec89fbd61b8470ac718713c7296441c8430f173dac218e74b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ro.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\ro.pak
        • Size 387KB
        • SHA256 7247470057a936d03bfa2a8776508ab66aa1040c41a4eb8f79c1e93551c74bb8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ru.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\ru.pak
        • Size 634KB
        • SHA256 b4223b56ec88235819a427d60bb937eb3984076523f02a018f57819e0429bea9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\sk.pak
        • Size 399KB
        • SHA256 75f179897cad221ca6e36b47f53cead7f3fb4159ee196f1d10a5181b84e1b5b7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\sl.pak
        • Size 385KB
        • SHA256 6002c129a56558832e9bd260c427c0bd2e1566e0aea3ad999f89c8e479534f9b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\sr.pak
        • Size 595KB
        • SHA256 524acc64e70918a77cda43fd9b27a727645b28ad2d4cce16b327105101c8bbeb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\sv.pak
        • Size 347KB
        • SHA256 3420a1fbcca5bf8c2d65d6dcb0db78b03f95f7f2fc56479a0de6e3312333ce6f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sw.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\sw.pak
        • Size 365KB
        • SHA256 690027c4a31c4aea00b7d1b32ec6cd3fa50b1eac412ae273ab15e72eb485dd6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ta.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\ta.pak
        • Size 936KB
        • SHA256 7e818deedd50a533851bbf08e056bf2ad8d45f442a1a61d9b48e66804ea848db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        te.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\te.pak
        • Size 869KB
        • SHA256 d839531c4ff4a2885c993e0d358f78667215b0950c77a06ef01a6acff9221c5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        th.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\th.pak
        • Size 731KB
        • SHA256 cd80bf232f2f128a3d411f52c8039987559dbc1055f746eed6e0e8478b116dc1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\tr.pak
        • Size 371KB
        • SHA256 b22fc7b75c52cc142f201d5cf107d17c1b173a494a6add022127f559fb46bcb0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        uk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\uk.pak
        • Size 634KB
        • SHA256 28ea88f19b2c34699d535ca0c691449b7e4001c12e8aed8d04b2078916e88a37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ur.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\ur.pak
        • Size 552KB
        • SHA256 4c7affdcc324cd791d10e235da809ce7501e8005be64340b6e8bf5595647a707
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\vi.pak
        • Size 439KB
        • SHA256 b75694e390bd2e20780b3bc72f6e1473ba45d7537c27642a7d888dfd3bb6c3bb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-CN.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\zh-CN.pak
        • Size 319KB
        • SHA256 a7ac9fda6f4cd189b75fdadc4b70cd0d369a09b66eaeb5d032678cb97ffc98f6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-TW.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\locales\zh-TW.pak
        • Size 316KB
        • SHA256 c5061ec00bd969f76f3c0c6ff15ddacafed7491260bd8ced78118691ba57bdff
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resources.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\resources.pak
        • Size 5.1MB
        • SHA256 4f29587bcd952de1dbc0b98df0aa506bd9fcf447e6a7258c5eb7e9eb780e6d6c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        app-update.yml
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\resources\app-update.yml
        • Size 164B
        • SHA256 100e5eea95d6d919dd0f33af6c2b44a468ec2801204c4b10a00c0af136d3cabb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        index.js
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\resources\app.asar.unpacked\node_modules\ps-list\index.js
        • Size 4KB
        • SHA256 fb267dc224440784ece7cac39c0143d79420a206ac8054d5cec1bc702a885a9c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        license
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\resources\app.asar.unpacked\node_modules\ps-list\license
        • Size 1KB
        • SHA256 48da2f39e100d4085767e94966b43f4fa95ff6a0698fba57ed460914e35f94a0
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        package.json
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\resources\app.asar.unpacked\node_modules\ps-list\package.json
        • Size 522B
        • SHA256 6784a7400f302ef6ea92423c0542ebb4babbe8f42c3d9ab857243f58a962f2ad
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        fastlist-0.3.0-x64.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\resources\app.asar.unpacked\node_modules\ps-list\vendor\fastlist-0.3.0-x64.exe
        • Size 276KB
        • SHA256 30daafd80300430f33c1bad18bc09488515b7ddafe74625f8865f74985ec47e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fastlist-0.3.0-x86.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\resources\app.asar.unpacked\node_modules\ps-list\vendor\fastlist-0.3.0-x86.exe
        • Size 221KB
        • SHA256 0bb746591f8727ba7f67560a702b42889d0da40e58a741b1371a9b1fd8fd80be
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevate.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\resources\elevate.exe
        • Size 116KB
        • SHA256 8da35644d1f13bee7ba11c0100bf028863128a641559454dfe1914563a8bff62
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        snapshot_blob.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\snapshot_blob.bin
        • Size 292KB
        • SHA256 3121f179e50d7825795caa68e722e996f794e17240ad6ea0aa94bd065e05aa13
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        v8_context_snapshot.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\v8_context_snapshot.bin
        • Size 585KB
        • SHA256 4f72c7b625b64d38f819a970cfff5921ff4080e27de84b00b9a7cf8be15277c5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\vk_swiftshader.dll
        • Size 4.3MB
        • SHA256 01742049534047b956328b9a0ca57f720e957edb684a6a0d70acc992e2b684fc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader_icd.json
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vulkan-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\7z-out\vulkan-1.dll
        • Size 774KB
        • SHA256 84c7f070e59f3b0bce2d32d4f2e6c7e03fb5d30f82a99c4edd8a251c9a3c0e74
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StdUtils.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WinShell.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nsProcess.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsv4BA.tmp\nsProcess.dll
        • Size 4KB
        • SHA256 30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        default.exc
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512
        Submit Download

        the-real-index
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\Code Cache\js\index-dir\the-real-index
        • Size 48B
        • SHA256 e5736ee00f425ca0fb71ac1aebd7885802246d0ef40daeb2e6e62c2dc2ac4e2a
        • MD5 SHA1 SHA512
        Submit Download

        the-real-index
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\Code Cache\js\index-dir\the-real-index
        • Size 240B
        • SHA256 a56fb256f8b499bfab968197d126c3c042774697c4937d8607380d0ae44076ca
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        data_1
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\DawnCache\data_1
        • Size 264KB
        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        data_0
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\GPUCache\data_0
        • Size 8KB
        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        data_2
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\GPUCache\data_2
        • Size 8KB
        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        data_3
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\GPUCache\data_3
        • Size 8KB
        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Network Persistent State
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\Network\Network Persistent State
        • Size 842B
        • SHA256 f6ede8c2495b513f47125bb8687eaea4a8a18694a8a09bc0f3b0a3db8e6f48b1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Network Persistent State
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\Network\Network Persistent State
        • Size 59B
        • SHA256 c257f929cff0e4380bf08d9f36f310753f7b1ccb5cb2ab811b52760dd8cb9572
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Network Persistent State~RFe59f582.TMP
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\Network\Network Persistent State~RFe59f582.TMP
        • Size 59B
        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        TransportSecurity
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\Network\TransportSecurity
        • Size 203B
        • SHA256 b516753c29b760d4907ec5beef059f0e5b45a23fa6d62844369281b4786250f1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        TransportSecurity
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\Network\TransportSecurity
        • Size 203B
        • SHA256 f234d840cfe77dc9f963477e37296cf0df60105b6a86cd1338a76e662319eb8d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        TransportSecurity
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\Network\TransportSecurity
        • Size 371B
        • SHA256 730abf868b24632ef1ebed8cec5632a0eda2280d4ca608e323dc037d8c2d3ef1
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        TransportSecurity~RFe59b27d.TMP
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\Network\TransportSecurity~RFe59b27d.TMP
        • Size 203B
        • SHA256 c5e4d3308dbfb5434c1ed252d0b3200aa88d57724cbe122c11d6a4d93a71488b
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        CURRENT
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\Session Storage\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512
        Submit Download

        config.json
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\config.json
        • Size 32B
        • SHA256 c8dc1f5a00f14dc7a8d4068d54f69042df3a780d64345fc157515d7d73ac8543
        • MD5 SHA1 SHA512
        Submit Download

        fb655fad-a612-4c75-91b7-0f4499953aaf.tmp
        • Path C:\Users\Admin\AppData\Roaming\nbgame_pclobby\fb655fad-a612-4c75-91b7-0f4499953aaf.tmp
        • Size 57B
        • SHA256 be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/4272-373-0x0000000002780000-0x00000000028CC000-memory.dmp
        Download

        memory/4272-420-0x0000000000790000-0x0000000000876000-memory.dmp
        Download

        memory/4272-380-0x0000000010000000-0x00000000100FC000-memory.dmp
        Download

        memory/4272-421-0x0000000073610000-0x0000000073627000-memory.dmp
        Download

        memory/5256-1125-0x000000000EEB0000-0x000000000EEB1000-memory.dmp
        Download

        memory/5256-1123-0x000000000EEB0000-0x000000000EEB1000-memory.dmp
        Download

        memory/5256-1129-0x000000000EEB0000-0x000000000EEB1000-memory.dmp
        Download

        memory/5256-1130-0x000000000EEB0000-0x000000000EEB1000-memory.dmp
        Download

        memory/5256-1132-0x000000000EEB0000-0x000000000EEB1000-memory.dmp
        Download

        memory/5256-1131-0x000000000EEB0000-0x000000000EEB1000-memory.dmp
        Download

        memory/5256-1133-0x000000000EEB0000-0x000000000EEB1000-memory.dmp
        Download

        memory/5256-1134-0x000000000EEB0000-0x000000000EEB1000-memory.dmp
        Download