9395ca35b93062b1dbf32eb94adc4fa8ccd1bbad8f63aad36f9f2073e39d2d10

Analysis

user interaction
yes
max time kernel
1041s
max time network
1059s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
25/09/2026, 18:27

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
LuxorCollection_Setup.exe
Size 45.8MB
Sample260925-w32qwstdjb
SHA256 9395ca35b93062b1dbf32eb94adc4fa8ccd1bbad8f63aad36f9f2073e39d2d10
MD5 9dd4c9a955872c6b80eeeeb5930e656b
SHA1 2e6ee847bfaaa7d2162882878e2b47e0095c3c57
SHA512 92554363540d79f42ae5f32e6d712534dc772c9f9c13676597a27cdc1a9471d0ac5f3ac3f94af8ff5cb4f285a6bfde4de0286edaa5353fa21733ea409184a990
SSDEEP 786432:O5l6pBJFhEbCYFvH6XneM6Lj3HqHVgbuNX9Q4/W72EoA+5JxWoCdNXUkaJenLuvs:gUhEbHM8+HVgbB4p5CdNXUkdfx
TLSH
T195B733533E34414FE9577838160ED2B2AF32BD68862B1E7A5960BA63F0D17E0D46D7C8
MD5 SHA1 SHA512 SSDEEP TLSH

Score

7^/10

discovery installer upx

Malware Config

Signatures

ACProtect 1.3x - 1.4x DLL software 1 IoCs

Detects file using ACProtect software.

resource	yara_rule
behavioral1/files/0x000d00000001c58f-404.dat	acprotect

Executes dropped EXE 3 IoCs

pid	Process
3352	luxor2.exe
3388	luxor2.exe
2672	luxor2.exe

Loads dropped DLL 64 IoCs

pid	Process
5080	LuxorCollection_Setup.exe
5080	LuxorCollection_Setup.exe
5080	LuxorCollection_Setup.exe
5080	LuxorCollection_Setup.exe
5080	LuxorCollection_Setup.exe
5080	LuxorCollection_Setup.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3352	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
3388	luxor2.exe
2672	luxor2.exe
2672	luxor2.exe
2672	luxor2.exe
2672	luxor2.exe
2672	luxor2.exe
2672	luxor2.exe
2672	luxor2.exe
2672	luxor2.exe
2672	luxor2.exe
2672	luxor2.exe
2672	luxor2.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in System32 directory 2 IoCs

description	ioc	Process
File opened for modification	C:\Windows\system32\LogFiles\WMI\FaceTelManually.etl	svchost.exe
File opened for modification	C:\WINDOWS\SYSTEM32\WINBIODATABASE\51F39552-1075-4199-B513-0C10EA185DB0.DAT	svchost.exe

UPX packed file 6 IoCs

Detects executables packed with UPX/modified UPX open source packer.

upx

resource	yara_rule
behavioral1/files/0x000d00000001c58f-404.dat	upx
behavioral1/memory/3352-408-0x000000000B690000-0x000000000B7CD000-memory.dmp	upx
behavioral1/memory/3352-415-0x000000000B690000-0x000000000B7CD000-memory.dmp	upx
behavioral1/memory/3388-547-0x000000000B7A0000-0x000000000B8DD000-memory.dmp	upx
behavioral1/memory/3388-546-0x000000000B7A0000-0x000000000B8DD000-memory.dmp	upx
behavioral1/memory/3388-549-0x000000000B7A0000-0x000000000B8DD000-memory.dmp	upx

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Amun Rising\Read_Me.htm	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Amun Rising\assets\button_moregames.spr	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\LUXOR - Mah Jong Uninstall.lnk	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\Luxor.exe	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\assets\button_moregames.jpg	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\LUXOR Uninstall.lnk	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR 2\platform.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\luxor.ini	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Amun Rising\assets\MJ.ico	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR 2\gfx.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR 2\locale\english.mjz	LuxorCollection_Setup.exe
File opened for modification	C:\Program Files (x86)\MumboJumbo\LUXOR 2\MumboJumbo.com.url	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\gfx2d_ogl.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR 2\LUXOR 2 Uninstall.lnk	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\Read_Me.htm	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\assets\splashscreen.jpg	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Amun Rising\gfx2d_dd7.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR 2\3rdparty.gvf	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR 2\assets\MJ.ico	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\ui2.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Amun Rising\data\data.mjz	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR 2\DSETUP.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\Read_Me.htm	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\Luxor Mahjong.exe	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\dsetup.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\fmod.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\snd3d.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Amun Rising\crash.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR 2\EULA.txt	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR 2\Read_Me.htm	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\assets\MJ.ico	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\assets\splashscreen.jpg	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\logger.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\assets\Thumbs.db	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR 2\file.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR 2\assets\Thumbs.db	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\crash.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\gfx2d_dd7.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\jpeg.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\gfx2d_dx8.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\data\data.mjz	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Amun Rising\snd3d.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Amun Rising\uninstall.exe	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR 2\snd3d.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR 2\assets\splashscreen.jpg	LuxorCollection_Setup.exe
File opened for modification	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\MumboJumbo.com.url	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR 2\fmodex.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\gfx2d.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\jpeg.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\data\english.mjz	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\gfx2d_dx8.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Amun Rising\Luxor AR.exe	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\core.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\snd3d_fmod.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\EULA.txt	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Amun Rising\ui2.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Amun Rising\luxorAR.ini	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR 2\luxor2.exe	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\file.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Mah Jong\mahjong.ini	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\snd3d_fmod.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR\assets\MJ.ico	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Amun Rising\snd3d_fmod.dll	LuxorCollection_Setup.exe
File created	C:\Program Files (x86)\MumboJumbo\LUXOR - Amun Rising\data\english.mjz	LuxorCollection_Setup.exe

Drops file in Windows directory 1 IoCs

description	ioc	Process
File opened for modification	C:\Windows\DirectX.log	luxor2.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	luxor2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	luxor2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	luxor2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	luxor2.exe

System Location Discovery: System Language Discovery 1 TTPs 4 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	LuxorCollection_Setup.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	luxor2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	luxor2.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	luxor2.exe

NSIS installer 2 IoCs

installer

resource	yara_rule
behavioral1/files/0x000d00000001c547-121.dat	nsis_installer_1
behavioral1/files/0x000d00000001c547-121.dat	nsis_installer_2

Checks processor information in registry 2 TTPs 2 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\Registry\Machine\HARDWARE\DESCRIPTION\System\CentralProcessor\0	svchost.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	svchost.exe

Modifies data under HKEY_USERS 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-19	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\Software\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe
Key created	\REGISTRY\USER\S-1-5-19\SOFTWARE\Microsoft\Cryptography\NGC\SoftLockoutVolatileKey	svchost.exe

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{d3162b92-9365-467a-956b-92703aca08af}\Instance\	luxor2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{d3162b92-9365-467a-956b-92703aca08af}\Instance\	luxor2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{d3162b92-9365-467a-956b-92703aca08af}\Instance\	luxor2.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeShutdownPrivilege	2440	svchost.exe

Suspicious use of SetWindowsHookEx 1 IoCs

pid	Process
4948	SecHealthUI.exe

C:\Users\Admin\AppData\Local\Temp\LuxorCollection_Setup.exe
"C:\Users\Admin\AppData\Local\Temp\LuxorCollection_Setup.exe"
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- System Location Discovery: System Language Discovery
PID:5080

C:\Program Files (x86)\MumboJumbo\LUXOR 2\luxor2.exe
"C:\Program Files (x86)\MumboJumbo\LUXOR 2\luxor2.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:3352

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k GPSvcGroup
1⤵
PID:1392

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {08728914-3F57-4D52-9E31-49DAECA5A80A} -Embedding
1⤵
PID:3444

C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.26100.1.0_x64__8wekyb3d8bbwe\SecHealthUI.exe
"C:\Program Files\WindowsApps\Microsoft.SecHealthUI_1000.26100.1.0_x64__8wekyb3d8bbwe\SecHealthUI.exe" -ServerName:SecHealthUI.AppX8tam42xc7v2czs3s1nt0nkxvfjtepzp9.mca
1⤵
- Suspicious use of SetWindowsHookEx
PID:4948

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s NPSMSvc
1⤵
PID:2304

C:\Windows\System32\SecurityHealthHost.exe
\\?\C:\Windows\System32\SecurityHealthHost.exe {E041C90B-68BA-42C9-991E-477B73A75C90} -Embedding
1⤵
PID:2268

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k WbioSvcGroup -s WbioSrvc
1⤵
- Drops file in System32 directory
- Checks processor information in registry
- Suspicious use of AdjustPrivilegeToken
PID:2440

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p -s NgcSvc
1⤵
PID:992

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p -s NgcCtnrSvc
1⤵
- Modifies data under HKEY_USERS
PID:4308

C:\Program Files (x86)\MumboJumbo\LUXOR 2\luxor2.exe
"C:\Program Files (x86)\MumboJumbo\LUXOR 2\luxor2.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Reads the TCP/IP host and domain name from the registry
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:3388

C:\Program Files (x86)\MumboJumbo\LUXOR 2\luxor2.exe
"C:\Program Files (x86)\MumboJumbo\LUXOR 2\luxor2.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Drops file in Windows directory
- System Location Discovery: System Language Discovery
- Modifies registry class
PID:2672

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

3rdparty.gvf

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\3rdparty.gvf
Size 247B
SHA256 c6ad4ebaae8a4ed31b97ea5c799d02eeeb22a8b51db0e761a36b813abb8d2652
MD5 2afdc917af072d93f46c32747355f573
SHA1 1dd1ca9563fb4fd289281fab740cce02d690716f
SHA512 b2ffc3b29010f84163723adfa0694527aa9158a41d6400bf1d59bce63d2106e679dd8e70f4cacab352b737bb68b19a8046453681eee399ff82b125c2d03f80a4
TLSH
T19CD0A788645D4A3146B9A062B8032001ED1A80849B1E2C68775D80960FBDED343F4D09
MD5 SHA1 SHA512 TLSH

Submit Download

DSETUP.dll

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\DSETUP.dll
Size 70KB
SHA256 b51ebb6723e848f14e761557c457e6364d253e71393ece7b0ff130a502b12f4a
MD5 40de6c7f8e5a7be04b4207f60f5ab6d7
SHA1 97d03f5aac2c78edc7f7d938e296963c6a0c862a
SHA512 d12073f2f7a7255de23c371b00e5474d15d7e40c3756a897019ee5447647446ac2b63babf7c78668f10bca403832241f627d7bf2d647cacebdef2e1e8dd7c653
SSDEEP 1536:XCMYLA6uhzACiyKpkiKJv48AxiaQIQXwVDV1SlUUTpWHoTybopeXobHGmJ5YLJTV:yMIA6uhzACiyKpkiKJfAPlgu1SqVbyGj
TLSH
T16B634B02FF208072DCC221FC254CA660A67FE5AD17B984D7970493D99EA27C5BA3D71B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

MumboJumbo.com.url

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\MumboJumbo.com.url
Size 52B
SHA256 d0597f6257b7f44edcc257c811d96dac6e520cbcca7ec09b65e96fdc45016c43
MD5 ac7dd50ca38db5fe7ef8bb5c3cdf52d9
SHA1 b23766fd640a50ba3159b310548688e2946c9649
SHA512 258380b993b199fecd4d2690e21e52ad735b9031126c06ba9701de6124bf0d5a82bc8b1cc5ffe1169b85aaea8d37ff5fa430e399b713582fd48582f58bdab6dd
TLSH
T10190024C5109C059C5028C0C6074C950981221D58052CCD895509E143CDF0C355C8308
MD5 SHA1 SHA512 TLSH

Submit Download

splashscreen.jpg

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\assets\splashscreen.jpg
Size 150KB
SHA256 af3cadcc2168a03e71a3320fec045ae7bc2cefba42b73cdf9a8e327e97ca02e0
MD5 f70de24b2167c74372c3f3b877cd2e8d
SHA1 af2c62e2b5cfb475b530b880c149dbb71a5a7121
SHA512 36cdf2ee3d9f3c5efb7f95893c64d23493a5fef671746185a55c5be0846d5e41861dc4f6dad53384725a8a975f4ace2ee9a600e1205e80a66f37b852984c844c
SSDEEP 3072:S323Ml0aRB1fGUXL7fI9IJf/pqQIbXY/KJUCE5Sbo01fV6ARcf4iSLk:El0qBUUPfYQfniiCkSbXtOf/
TLSH
T12CE312504225AC32C3DC7FB5DC7AC3A703114FAA2063145BB99CCE5B7B1A7A19E5E123
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

data.mjz

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\data.mjz
Size 19.1MB
SHA256 0765fbd26ef9450a65236375a00f191d0b64266c618b482b49b37433f5cd8365
MD5 6800e93790f043dd516416f506d8ab31
SHA1 1f6438dfe24d15c2bdcf0e6f44a1223b86c2d92b
SHA512 384fa8ad42a77207e01f25eb2c0bb654bf2ba2c30e526dc74d17d0714b99061865df4d938e0507ee54077157fbe23d0aa1a93ac775d9aae82363b93054f2e414
SSDEEP 393216:BjwP2Piprk0aOTs8ByqIrSR1mjRExP17Y80V+0D19:d07rk0aOUWnUE58+0D19
TLSH
T1E9170225AB51AEA1E9D622315CF6D786E332EE0AA5935B83B55C39033F70FC10D6D243
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

engine.dll

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\engine.dll
Size 464KB
SHA256 6af3380bec488c3df182b4e6cbebcf35990af0fdb5affc1ef95c276ace9a91c7
MD5 bb8908b4f01c46f9ce22d89d1608a956
SHA1 9035697e014bddf22269e375ca8cb869e2caadf2
SHA512 408c1557b9ad48f856ce4f94d432da4a090c3c84433f9bf274a2618a5961e4bc9220d41d5e7a338a5cbcd08bd968fa46ebdc95df45210a00c8854dc5213ab5ec
SSDEEP 6144:8+ucHFZKYBhPGoFwfYjxBLz45XbQEVMwZR+MmE2pC9sxLf2sLC:+cHFZKYvPGoFwfYTn45XbV/+TEy1Xm
TLSH
T153A47D06E69758B4D94DA7BC56CE2F63A6F0C604532493D3DF71D8CB1AB22E029393C6
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

file.dll

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\file.dll
Size 72KB
SHA256 79f7e39f5c604e380e481b4e82d7acb30249d88e825c7da5d72e37ab8659edce
MD5 91edde9e339b41d978e293c62b140fff
SHA1 7b07f14dd35b678b6efa729e4fcea81c6118fa09
SHA512 5ce9d0fa62bd3eb6d2e516875e8501195545baa8c267373f41bd95efd8cdd1dca5095dd1da95c977603d554c067778d4f8560e09bd639ca3b6b936fd88c36813
SSDEEP 1536:pBnzPubTIeKuoiHzJgcSFjWOzezHLGQutRbsHYshb:pBnzPukveOzgrcaHYsh
TLSH
T12A738E1536E2C4F1D4C959BD29C94B125B3AB500CBF599C39F6B0A5EAF322D0F63A384
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fmodex.dll

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\fmodex.dll
Size 268KB
SHA256 1d511a9e568fa03963f931f1ecf36fa90bdde670f5eaed32c74feccfd3f5ccfb
MD5 0f5ec68ea1e8e5e436227d67b8fdb5a6
SHA1 4dcf039e53163d89403b34c05053c0ab662d1abd
SHA512 72b1da99241dd550bc93d68780947890208968a5675f11c7a9d120950e97058110310b933b209558e3149977f06b698c415f0932ac10eaeb26b42c4a66d44808
SSDEEP 6144:JzFFUFjEXkFrI51GFB6MCPfFqHxUE9aa88sVZP4d1eleN1/tEp2Bl:hUtEXKO1GFu3FqRUAZkAr
TLSH
T19544D075EB8CDECBE622D4312BDDA012561DA3FC6AA0B758DD9C117AD0622342F395CC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gfx.dll

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\gfx.dll
Size 116KB
SHA256 326725f6955907406674eb7c95e791cf8104d62ae0cc09976d21c3fc29ba5f8f
MD5 d6a1b182c39ae7c351bd0f6b0d0850ba
SHA1 d72875f9a5666fe5465681e213704557549921be
SHA512 97c3d4f6f7259b71b8066cb55521688d270cc67a9677a9950592c0f5ef8c861c2b3ae311e64bd8b0d1ef853fee6a5002fb284824f1abc089754348fb19a69317
SSDEEP 3072:RCNPmikzY49Emd2c1WO9plHlpp1sKhHK7:RCZmrV9bASWOxFrdhH
TLSH
T112C37C1375B240B0C1EBA27D09566F03AE3AE5624B744FC79B341C1DAAA13E55E3A3D2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

gfx_dx8.dll

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\gfx_dx8.dll
Size 184KB
SHA256 21bae128387f6393f70d42a6ee43d0a0534b2bbc633604d57941cd8c82e97003
MD5 a77fea27f476289ae87e5f1e27d014b9
SHA1 8a7531781e594ae6ca027e9992f6ebda4ad35a15
SHA512 1a44a23c58a09c0558f0fbba8ddcaab08505c250c69d617ff53fb8a385b019c8f2e5b4787b7339bb8d8f610bed844fd3c05aae739e12ba20555608e64e400f88
SSDEEP 3072:8LhdmAwAslGYBoJclrSx+AWqnQeewQeeXQeesQeeScQeefQeeg7Otk0u4kK4vsup:8LhdmAw7JzenQeewQeeXQeesQeeScQee
TLSH
T185049F1161F8A539C1E7027C049F1E6BBA7B4F0683D445C3AFB81AB77EB0AD911762C2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

img_jpg.DLL

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\img_jpg.DLL
Size 160KB
SHA256 3c6b02ccd6be8b896e17bf31613a1fe92765c89426ce32d1cf1f5c36a520f7f2
MD5 a9a0c606e357d2cd99c1fd00e1fb7070
SHA1 11f1bc941e5eb00d5c005454928d4cd0d7465750
SHA512 224960fc4f591b10fc6f1a31bdcaaaed3df0ada44c392470d9a7ce17d5f85032bdb03d2a101c7f22bd47df64d69f2a2761b6f74b6afa28bb43559513adca752d
SSDEEP 3072:OOfZ+qUugmhIMP369Cl+wRAqkv2yfRSRC3Ty6/3VVLTs:v2ugmhIMf7+wRAxv2y8RC3Tr/FV
TLSH
T1B3F38D81B28541F1C08A56B84187AF7B9F34A70203AFD6D3EB742E59DD227F2A935385
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

img_png.DLL

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\img_png.DLL
Size 164KB
SHA256 5b35d91fdfc0a90e634ca3934097f0d1a7cb5201556ab36554a03c41401f5f9d
MD5 9397a06c00038ccb423f55ad27581273
SHA1 2cc786092f138de13f312d90ca4dbc7325e7a534
SHA512 bb81112c6d4d9bfb82fa6d60737a14211f24a0f6b7c20717b00532027443312318591201edc48d23c8da45e031fec861cbfa1ff7be05cd0ceea5a35bcca481a1
SSDEEP 3072:am1FD6YkcZV/vFo+dihrDWQyhra2gfTBfCAAg0FuFXsIaan:aGZVS+di5DZqUfTBqAAOvj
TLSH
T1D7F3BF5372E3C5F2D4FE063C048A6F3A5A396A120379C9F36BD81E499D627D086393E5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

img_tga.DLL

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\img_tga.DLL
Size 44KB
SHA256 285ceb52f62aeda3908e1eec31cdc7e6c981aa3b907c87094733cfe82814c8d9
MD5 28f7c7949014646e671d63b7c58aa4ff
SHA1 9003cf391c0ed679810581c4f0d1127460e340b1
SHA512 7f01148a7aaaabe692c784ba455d4e0a98c507a1459d37e352121b7ebd6f72272646cdaf2c541444513941af10aa92ebb1ae27b4f7fcfcebbec8a62f21d940ca
SSDEEP 768:2qFQW09xcHFqRY2JVLEPyQxIZKAFl7Er:kWecHFqzJVLyy7K87
TLSH
T191136C11759280F3C5894A79559D8F026B7FA90047F085C76FBA6A5EEF232E0F63B342
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

english.mjz

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\locale\english.mjz
Size 122KB
SHA256 996d39adddc090f82a3b15c556db8921e218ba56fb3b2b054fac79990ffccc7c
MD5 e6f700413eb71bcab7a08b00ebea6233
SHA1 3d15fe1c828cf5f4bcc7e6d8215caa1172b7860a
SHA512 02f7c6334ffa6a01b444faa08981a438ddee28e9b94d5b1a7217483312e7459cbbdfbaa0d590296cffab11baa978427de3e29e78589d21afcecff36aa16f89eb
SSDEEP 3072:BzrKagpzYV5pPd5MCnAQf+KMRFlAEsqz4ZcG:hpNNIw8Fl4F
TLSH
T13EC3E0355B265E51DCC729335EA7CB9A83319E8292836B97BA5D3B063F76F900C34203
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

logger.dll

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\logger.dll
Size 68KB
SHA256 32c7644a43a6f508bb426f99f49df0252f885a4425c82bfc4ccb8c0d26fe2e0c
MD5 83bc6e3d58ecabe293b6612c14891dd9
SHA1 297273fdb74922f4b59c6cf3021b1ffcb0c8b846
SHA512 e1ac983fe4eae90370d6d6ad3a8338ebc002ee09a509cdf526d346d0c21e4c8dd7cf80f79c21772b8f044e87e108d7837ce927ff78249f224d4835eb1cba7b13
SSDEEP 1536:b2C8mnuCMGgIVIK2l/g+0IwLOwde7FXUsXdAN:b2CKLG7GfYe7FEsXdQ
TLSH
T1E6639D127691C9BAC04A813C6499871667BFEC1047F149C36FAC165EAF313E3BA3E346
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

luxor2.exe

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\luxor2.exe
Size 388KB
SHA256 7229eec1db0352b65d3a49da36398bce3a37691dd8bf5cc3d7a25882ba81e36b
MD5 4cca471d2e6589964c24a81a7e34fa69
SHA1 71ea1d7fdc9831ccda590339ece952411878d4de
SHA512 4b31ff1f6a4dd9235a722538308b221989e2c393409326dcc99ac767c0338927f0849db973549c2ca30ec6b9365bd9f5a657cdcbb384ace08e6e7fcb60ef4c88
SSDEEP 6144:bFnJKk5a51nbWUiHiL9B13lVWb+CcKmF451Ep4RCjtO97B+33Pr1:InHFtFpPcJB
TLSH
T197846D41FE6684F5C469627A9B8B9F3BC538BF84332816C367747A0E0DB03E49536798
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

platform.dll

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\platform.dll
Size 300KB
SHA256 2970f26e8737f57a99940fff382f990b11039797444552f9005882e935815cdf
MD5 4d3b33a3d21b61f1d19a507e349eaab7
SHA1 98cd813b14a2f4823895d99c121974e308c518d4
SHA512 45332f88129e40bf473cc1f41dc05706c875c0cf60eac573dd170145543e0f4f237c61e1f4edb2aeb3bd4e874551eeccd5df99e8f6181a4e0ff1e0b4d4c454f3
SSDEEP 6144:5ZBaxBww9v9UMZAmq024QxLTuYdcL8D25MS73uVltMvc9TBLV0nQPVtf:5ZBaxBww9v9UMZ/q0RQlTulY3S73WmvG
TLSH
T143649E2366E08AF9C9A6927515CA6712DF79F10417E2CFC38394EC159D212D12E3E3EE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snd3d.dll

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\snd3d.dll
Size 64KB
SHA256 df545c4cefa16ef72bdc5dad51de682214a6b500e4db0e2eb071835074cef596
MD5 9b3b02589326fb7058ba68a120412b36
SHA1 4d52b67c980c8875711b7f2d1627a6a3f33fe44d
SHA512 a9610b82fedbfd729f84eee9ff4bfd2f734afc155709b99bbe0d555d6a17aea86cbf1679a4d189243888cdb83d8aefc0801cc904f515a6498f5f14556b3f870d
SSDEEP 768:7sEMgV+49M1fRyiiJFU918FxvBJErVo3BSJxWS7gpHaBTDssRuIcD8g5sOuoGt:hMiFUz0jT3BSJJ7QWML8WswGt
TLSH
T12F536B12B9B241F1C586937935854B17AEBFE50113F481C35FA9252F9E313F0AB3A366
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

snd3d_fmod.DLL

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\snd3d_fmod.DLL
Size 72KB
SHA256 846e760af4022c96203fcaa4eb07c38799babe1e1c5100c5fa65d3de2a273392
MD5 046c7073599fb7ceba717236ff2bc9a5
SHA1 b29dc55a4710f8f7b317bc370d1017aa7340a30a
SHA512 d3e03eefb2073b6522dd73833c7afe08aab8e528ad01f40194927af3b96d93687f01e367960e472d310ba76a0c835fce2d5ec20bc3ff555104f69bfb02b5d944
SSDEEP 768:2MIAlzebyA4EquF9Bt71SG0Id0M5QaBaSuiLa7IPgjyjsTNHJvGApFLsTk+Y:25J4EPLgzId0M5+iLUIS3pvGArsTL
TLSH
T129737E12729251FAC15593353286B713AB3EBA6413F042C39F5C269EE9123E5B73B386
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

thread.dll

Path C:\Program Files (x86)\MumboJumbo\LUXOR 2\thread.dll
Size 40KB
SHA256 8544eeab2044b3f88198e42ef134bfe8bd34baa4f92f66d7e0c124760b9b3395
MD5 8718588ff2f1a16ffb59370192cd3aed
SHA1 f9021079ad000d06c6f5f4592780f2eb511189d3
SHA512 24cb29535fe60c05be2f2d14cc3fa0c8c985959cc1c99eb3a640373aa8309961948168a0bc881ac8406fdab86297a9a748310370cc0885989f796ce4e8845e15
SSDEEP 768:MLtkdgXNxruCXUDjLch4fDI60567uqL/:MLDXnuCXUDjL84NT7uq
TLSH
T1FE034B11785181B3C29E56B950989A06AB7BB80017F15183FFB917DEEE772D0FA3A307
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

uninstall.exe

Path C:\Program Files (x86)\MumboJumbo\LUXOR\uninstall.exe
Size 89KB
SHA256 03d2dde5d8d38c659212627bac3cc9da1daedb182fb9dfedae93d6eacaa64fbf
MD5 217df878593582c5ef5c21474184d957
SHA1 00814ac1a3d43f2a6e7aaa3c9321d3ee78b136c0
SHA512 6f1b6af6e6e239a5f2a64e79e45341b7f9f94977a8630a54eace29e27e693c1bb491c85bd481f3fbcefc3a07cc11c6a6a74278478d45070fc0d30efd6ffa63ee
SSDEEP 1536:fkbVPa75jAbamlLUeK/n0p4tmJyAwnFo7UcZSHAaecT6qa/E7KaEUNU:8bVPqMLS0WmJyVaDSCcGqC7abU
TLSH
T1B493AE1A37C3E86AC94505700AB3CBB9D376BF64293396972F507F6F7D311C2A906A42
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

InstallOptions.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv42FC.tmp\InstallOptions.dll
Size 14KB
SHA256 17e2f205af12d5a86638dc83c95fc69199c41af2fa6daeb1e91ec330f68c5372
MD5 f62d03fcb1473110e920a9bb2c701006
SHA1 c48444ef2daa60dcdf91f1645cd4ecd8e66545f7
SHA512 701d531d405d08054d53298141d5bbd56e74df7b22bcea5f9f0e5c4407421ea0ca9617aa84e740dc1dc44e6d14e58852c1ca2087213cc2319f2da44eaed0bc05
SSDEEP 192:g6JaVGQ+xI5EeuyvMmGpeWH2J5xprN+AxTxK72dwF7dBdcQOz:g6JaVh4I5rpPbTx+BdhO
TLSH
T1F1523951378888F3E792053EB45237079F9D5226B8929ED1CA331FC62D2B19E2FB1302
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

System.dll

Path C:\Users\Admin\AppData\Local\Temp\nsv42FC.tmp\System.dll
Size 10KB
SHA256 e67277ecc4f6c7beb3c7e586ce508677269db056c7541eacfecf6c719f559da6
MD5 0bbcbaee7b703ebd55cd8658a0e8dcd3
SHA1 6ed448b8b67cea36eb45bfbc67fed9a6da9623e4
SHA512 604c524bd00313f6411cc9878d5c9a1db77588049feeb5bb02c971df44f8becbd18d251cc20e551b878173eb2a78be61f31352769597c6334cffc0bc2326b008
SSDEEP 192:WO6dJA/ruAFEiUdWWE6hE5RYUdJfbub1azgMO:TKAFERdlxhGRYUzqZaz
TLSH
T16B226D5547A041F3DD60823C08973D276BA837148EA54EC3CF9314429E296A6BCBC336
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsv42FC.tmp\ioSpecial.ini
Size 715B
SHA256 871408f78b444e947f74c014a3cb7ac8d1955a413cc3a1809145aa11a8496485
MD5 8a6a81197070383a4bfb9204e73bd0da
SHA1 3f75fc3fa8cced6c93ad0efb395a5309f9fedeeb
SHA512 8d5cabb4d38c1c8fe3ebd1312cbd1d65e4deb8dc0e0f1dbce0832ee8b7adafe212c15320cdf07b973e1057051ca1b64d6632f1c15548b592ddd3887989dd79e6
TLSH
T12501F4C4945FA324046100A664ED37D147E02C3C4B213DF7F06289C6974DDD74AEADD7
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsv42FC.tmp\ioSpecial.ini
Size 577B
SHA256 780c83907ff2ad917ab5f80f65aa8d2e5cfdec2c07b41ae7be5d5fd5c4a57421
MD5 78b03f5e05bf16d760d6a9b724018d7e
SHA1 e85b9e4bdb25e4f376c4add3364e8a2f08dec221
SHA512 107a00e005ed0c48646b4b740228cb99018e36c43d55dbacfedc20081b5ca0017644cf90dfa672d4b1dd1986383f0b81adce9179b276b622e6cef9b4961f0a96
TLSH
T176F08B84910D136A4425415259EE77A103D01C38CB5A3BF1F1318DC7DB0AED6C8EAAC7
MD5 SHA1 SHA512 TLSH

Submit Download

ioSpecial.ini

Path C:\Users\Admin\AppData\Local\Temp\nsv42FC.tmp\ioSpecial.ini
Size 754B
SHA256 cf066a4321265fcd93b782019e4e3922e7a8a61b3388a3af06a1a1c129fdefd9
MD5 bc7133b1621364c7f6179408595973c4
SHA1 49df261edb84da419f2d93d19a68c4e4f74a32e1
SHA512 e07b186bf1a0c9bcf0860b6eae6c12dcc776ab91a1fa2d8ea76393f748ddd1004f92b4d47efa9be899e80a233fc0203c132ba4c98f2cabd95bba33327f25b49b
TLSH
T18501D0C4841F9364442100D614EE37A153E02C3C8B153DF2F0228887534DDD78AEEDDB
MD5 SHA1 SHA512 TLSH

Submit Download

memory/2672-531-0x0000000000850000-0x0000000000866000-memory.dmp

Download

memory/2672-534-0x00000000025E0000-0x000000000285E000-memory.dmp

Download

memory/2672-529-0x0000000000830000-0x0000000000841000-memory.dmp

Download

memory/2672-530-0x0000000000870000-0x000000000088F000-memory.dmp

Download

memory/2672-535-0x00000000008B0000-0x00000000008BB000-memory.dmp

Download

memory/3352-390-0x000000000B580000-0x000000000B58C000-memory.dmp

Download

memory/3352-366-0x0000000002770000-0x00000000029EE000-memory.dmp

Download

memory/3352-398-0x000000000B5F0000-0x000000000B61A000-memory.dmp

Download

memory/3352-402-0x000000000B620000-0x000000000B633000-memory.dmp

Download

memory/3352-386-0x000000000B500000-0x000000000B530000-memory.dmp

Download

memory/3352-407-0x000000000B690000-0x000000000B7CD000-memory.dmp

Download

memory/3352-408-0x000000000B690000-0x000000000B7CD000-memory.dmp

Download

memory/3352-356-0x0000000000610000-0x000000000062F000-memory.dmp

Download

memory/3352-359-0x0000000000890000-0x00000000008A3000-memory.dmp

Download

memory/3352-415-0x000000000B690000-0x000000000B7CD000-memory.dmp

Download

memory/3352-394-0x000000000B5C0000-0x000000000B5EA000-memory.dmp

Download

memory/3352-377-0x00000000008F0000-0x00000000008FB000-memory.dmp

Download

memory/3352-375-0x00000000008D0000-0x00000000008E5000-memory.dmp

Download

memory/3352-363-0x0000000000910000-0x000000000095F000-memory.dmp

Download

memory/3352-361-0x00000000008B0000-0x00000000008C6000-memory.dmp

Download

memory/3388-518-0x00000000005C0000-0x00000000005D1000-memory.dmp

Download

memory/3388-526-0x0000000002980000-0x0000000002995000-memory.dmp

Download

memory/3388-527-0x000000000B290000-0x000000000B2C0000-memory.dmp

Download

memory/3388-519-0x00000000005F0000-0x000000000060F000-memory.dmp

Download

memory/3388-523-0x0000000002700000-0x000000000297E000-memory.dmp

Download

memory/3388-522-0x00000000026E0000-0x00000000026F6000-memory.dmp

Download

memory/3388-524-0x0000000000610000-0x000000000061B000-memory.dmp

Download

memory/3388-521-0x00000000026C0000-0x00000000026D3000-memory.dmp

Download

memory/3388-541-0x000000000B480000-0x000000000B48C000-memory.dmp

Download

memory/3388-542-0x000000000B4C0000-0x000000000B4EA000-memory.dmp

Download

memory/3388-543-0x000000000B4F0000-0x000000000B51A000-memory.dmp

Download

memory/3388-544-0x000000000B520000-0x000000000B533000-memory.dmp

Download

memory/3388-547-0x000000000B7A0000-0x000000000B8DD000-memory.dmp

Download

memory/3388-546-0x000000000B7A0000-0x000000000B8DD000-memory.dmp

Download

memory/3388-549-0x000000000B7A0000-0x000000000B8DD000-memory.dmp

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v16

Replay Monitor

Loading Replay Monitor...

Downloads