Overview

overview

7

Static

static

3

MovieBox.exe

windows10-2004-x64

7

MovieBox.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

$PLUGINSDIR/UAC.dll

windows10-2004-x64

3

$PLUGINSDIR/UAC.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ll.dll

windows10-2004-x64

3

$PLUGINSDI...ll.dll

windows11-ltsc_2024-x64

3

LICENSES.c...m.html

windows10-2004-x64

3

LICENSES.c...m.html

windows11-ltsc_2024-x64

3

MovieBox.exe

windows10-2004-x64

7

d3dcompiler_47.dll

windows10-2004-x64

1

ffmpeg.dll

windows10-2004-x64

1

libEGL.dll

windows10-2004-x64

1

libGLESv2.dll

windows10-2004-x64

1

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-ltsc_2024-x64

3

vk_swiftshader.dll

windows10-2004-x64

1

vulkan-1.dll

windows10-2004-x64

1

$PLUGINSDI...gs.dll

windows10-2004-x64

3

$PLUGINSDI...gs.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...ec.dll

windows10-2004-x64

3

$PLUGINSDI...ec.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...7z.dll

windows10-2004-x64

3

$PLUGINSDI...7z.dll

windows11-ltsc_2024-x64

3

$R0/Uninst...ox.exe

windows10-2004-x64

7

$R0/Uninst...ox.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...ls.dll

windows10-2004-x64

3

$PLUGINSDI...ls.dll

windows11-ltsc_2024-x64

3

$PLUGINSDI...em.dll

windows10-2004-x64

3

Analysis

  • max time kernel
    151s
  • max time network
    162s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    30/09/2026, 12:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    MovieBox.exe
  • Size 85.2MB
  • Sample260930-pgt1laxajd
  • SHA256 49741dd7b7166a102ce6743e761cb6540ad16ad8e6108a068992df50b966a4cf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryspywarestealer

Malware Config

Signatures

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 15 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

    spywarestealer
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\MovieBox.exe
    "C:\Users\Admin\AppData\Local\Temp\MovieBox.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:3872
  • C:\Users\Admin\AppData\Local\Programs\MovieBox\MovieBox.exe
    "C:\Users\Admin\AppData\Local\Programs\MovieBox\MovieBox.exe"
    1⤵
    • Executes dropped EXE
    • Reads the TCP/IP host and domain name from the registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:3736
    • C:\Users\Admin\AppData\Local\Programs\MovieBox\MovieBox.exe
      "C:\Users\Admin\AppData\Local\Programs\MovieBox\MovieBox.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\moviebox-windows" --gpu-preferences=SAAAAAAAAADgAAAIAAAAAAAAAAAAAGAAAQAAAAAAAAAEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1752,i,15895202652342347320,17476667707549744020,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=1748 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2748
    • C:\Users\Admin\AppData\Local\Programs\MovieBox\MovieBox.exe
      "C:\Users\Admin\AppData\Local\Programs\MovieBox\MovieBox.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\moviebox-windows" --field-trial-handle=1752,i,15895202652342347320,17476667707549744020,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2264 /prefetch:11
      2⤵
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      PID:4848
    • C:\Users\Admin\AppData\Local\Programs\MovieBox\MovieBox.exe
      "C:\Users\Admin\AppData\Local\Programs\MovieBox\MovieBox.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\moviebox-windows" --app-path="C:\Users\Admin\AppData\Local\Programs\MovieBox\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --field-trial-handle=1752,i,15895202652342347320,17476667707549744020,262144 --enable-features=EnableTransparentHwndEnlargement,PdfUseShowSaveFilePicker --disable-features=ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation,WinDelaySpellcheckServiceInit --variations-seed-version --mojo-platform-channel-handle=2492 /prefetch:1
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2864

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        LICENSE.electron.txt
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSES.chromium.html
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\LICENSES.chromium.html
        • Size 14.5MB
        • SHA256 a683de33a700d9b4989416e1cd394169154574e83773e009a71daf9dd8e1ab96
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_100_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\chrome_100_percent.pak
        • Size 163KB
        • SHA256 0d27d5591c72721ce399133e104114aa802caf3070814570ad205987a51a8ff7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_200_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\chrome_200_percent.pak
        • Size 252KB
        • SHA256 fa1fce57396b3e21776659e50fb1c12fd4c010c9f56f161be6f4437207d21241
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dcompiler_47.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.7MB
        • SHA256 289767b49dc8525bce262ea06fee4ef9fced2e131a55b25654ce871c1f0498b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffmpeg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\ffmpeg.dll
        • Size 2.9MB
        • SHA256 ab60ec9598ebfae39c9dc971448dc73ee614156fc12f19574dd96fb90d86df25
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icudtl.dat
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\icudtl.dat
        • Size 10.0MB
        • SHA256 5070de99fbd8a48378543511fb7a072f85bf36f94b4f4e1d420d54be1435d6f1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libEGL.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\libEGL.dll
        • Size 492KB
        • SHA256 0b4ccb907cc91daef0f421c223506881fa480a7cec6930297b4ccda071854f4d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libGLESv2.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\libGLESv2.dll
        • Size 7.7MB
        • SHA256 d88389779276e42efbcc79b5418a729f8f1506f8b32d5980addd06bdc7d37a2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        af.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\af.pak
        • Size 562KB
        • SHA256 7efae5393f523d0b23dd355e5cb165a14a4a5eb9d102f8fd7e1592fde0d81590
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        am.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\am.pak
        • Size 911KB
        • SHA256 108ac040ce13b53af88bc45f3e5b13086c1d435839dfdbabb19d6877d9daad96
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ar.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\ar.pak
        • Size 1007KB
        • SHA256 69a43e3592c8cabfe8fdef53c963bca7ee137e093d20f12767df89862c0eccd8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bg.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\bg.pak
        • Size 1.0MB
        • SHA256 f4e5ceabc00d8d66a100f78540d81762e67bcd7482df116ee2545507a45de25d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\bn.pak
        • Size 1.3MB
        • SHA256 66e568b1fbb31391786dcd2af632866894fd6a23bef0b408a59587a144bd0353
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ca.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\ca.pak
        • Size 633KB
        • SHA256 bdcc6f6404dc686148977e41330461e89d5739afcf123f03557239d93b911e03
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cs.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\cs.pak
        • Size 654KB
        • SHA256 56b0e1723259bcf6abdda080ece8877f4b1586b49d3c13ef8908619e2a118972
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        da.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\da.pak
        • Size 591KB
        • SHA256 c7a554e9644dda72071d7af1dcf077b783b52af926e99b507d79a664df4acc33
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        de.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\de.pak
        • Size 633KB
        • SHA256 de5422f48522a52248ba835d4e7ef860a734b54d2ee41c9a87cd73e7e947c318
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        el.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\el.pak
        • Size 1.1MB
        • SHA256 aa9b5d10422054e87bcd6068be5a2b085b8fd3ecb1d998eabe282a72c6520570
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-GB.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\en-GB.pak
        • Size 513KB
        • SHA256 e2eef21ab7b088c122b6990f66dd22ce0c7e1191c64e9ac8424435c3a6749cbe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-US.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\en-US.pak
        • Size 518KB
        • SHA256 3cd05f6512ed5d09076253dcdfd4ccc5eedfab44e1703cf3e015597dd31220c1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es-419.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\es-419.pak
        • Size 624KB
        • SHA256 3fb38e2a38ef336a407fe91813986522e89696bcf3d6f78c68d60c921f741db4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\es.pak
        • Size 622KB
        • SHA256 e381793151b6bb9e87e954d2ead53fac523dda92912d4d14ecf46885f86ce441
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        et.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\et.pak
        • Size 567KB
        • SHA256 19245d259d70ec459d210cc01eb6e6d05298073dead915e164aa7aedf3b873ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fa.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\fa.pak
        • Size 933KB
        • SHA256 bab2b590f945b1d864c38ebcc7167b74ba325b0ac7f3d611cd1728a53a5fb99a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\fi.pak
        • Size 578KB
        • SHA256 41137434ee1d2b1aa3603fc134e8cd52455731dfb3eec44bd7f3e36df57e4f15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fil.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\fil.pak
        • Size 655KB
        • SHA256 8a9e1a72a7d067654df9e4a761f5c06cfac267680e00c45d9d52a929b318b435
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\fr.pak
        • Size 674KB
        • SHA256 477771211fdff1fc9c8e002476e2440c1c14ce4ce69976a0993c99f2f5b47505
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\gu.pak
        • Size 1.3MB
        • SHA256 51635a11ad7349ae131927156c50f6935c38cb6628cd8d2f8a5fb6715f6140e8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        he.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\he.pak
        • Size 818KB
        • SHA256 0ecf199553289880d0fa590fcab56d2165e4e571de0b77970619a244cc0285f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\hi.pak
        • Size 1.4MB
        • SHA256 5197062239f1780dff514326ca5894c39e4e4e2b4bb2c6e73f619122db31630f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\hr.pak
        • Size 631KB
        • SHA256 ea68d33fd264a2a3cb0c78f7b92ac79af7cc1ca27fc50427ca100fc468ae40ec
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\hu.pak
        • Size 678KB
        • SHA256 91d754bd252cd411fcc3513e04513d5e4d8165f36eace12f88d84fd7e352e857
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        id.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\id.pak
        • Size 559KB
        • SHA256 e78831cb31a4d2ab77cbe47bcc5439be3bc7d66fba7799779d5ab3e1d004115f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        it.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\it.pak
        • Size 614KB
        • SHA256 c5feff891ed9a00cdd7e0349b187cc2d26248ae468f076a09099312e04b23c21
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ja.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\ja.pak
        • Size 747KB
        • SHA256 30ea0122899ef914ee799d92667af4ae54c18cdc6e5bb780719a3f6a5dfc6435
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\kn.pak
        • Size 1.5MB
        • SHA256 b00058366c4e2febd46df14debda4ef777ddfe2c004d08f528dd17eaf8d4c17e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ko.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\ko.pak
        • Size 634KB
        • SHA256 2f26d1e6f3f505d95c26dd0a4d61c2621d8109d871bdb30fdb4718b802f10d20
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lt.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\lt.pak
        • Size 684KB
        • SHA256 473fb2217995c4c4bafc23a9d418b3cd393604248ed19d06588e719519122c2e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\lv.pak
        • Size 683KB
        • SHA256 7b589f1bc446b15d315fcd81b446b47e15ec533043abe56b1d060ab4a727b56c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ml.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\ml.pak
        • Size 1.5MB
        • SHA256 9b874b08ffe56813efce14d03e840f948f6e0ac9fb5fdef1163098d0d7ddf91f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\mr.pak
        • Size 1.3MB
        • SHA256 ab04bcdd9287640b1ce017eec44b6701e44a2e050c51eb1c9859b6367759d848
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ms.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\ms.pak
        • Size 588KB
        • SHA256 7d408f4f45fcdb66efcaf7beae9cb07e0c42a26e237461500cfc4403cdc88690
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nb.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\nb.pak
        • Size 567KB
        • SHA256 b44a1be560c7138a4d2b6b08a93fa529192e54a2256dac2695c901019cc66bce
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\nl.pak
        • Size 588KB
        • SHA256 262bf074055e830d0e4d361ca24e74f0170cd55938236163d96c6b48929b6d26
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\pl.pak
        • Size 655KB
        • SHA256 4994a5ad97534bc91b73ad528abc1771628848005c950bbac279d5e2b3e03465
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-BR.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\pt-BR.pak
        • Size 615KB
        • SHA256 e90d7ca40487d8f5299c85f86b5f20f7188d94c3f0e8b5368495f9a73c29cd40
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-PT.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\pt-PT.pak
        • Size 619KB
        • SHA256 97b06698596cf084533ac7990ae73cd72b3b851927e0fc5747cd0cab4f681079
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ro.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\ro.pak
        • Size 641KB
        • SHA256 757990528d01554f5a1e476929ed3b4fd0bee20cbae07db442923cb477358d9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ru.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\ru.pak
        • Size 1.0MB
        • SHA256 7aaf8f96500bc8eb8883e46a10b84ebdc17ffdf34fe3d972cb3d69b29ed04776
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\sk.pak
        • Size 666KB
        • SHA256 1101256328b7dce3d388abfafa44e27ca416136187f366809ada6fabe1def449
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\sl.pak
        • Size 638KB
        • SHA256 eef2f7c2f3aa5572456274004104d0c79911834f002fa1fdcd5063b60a3225a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\sr.pak
        • Size 982KB
        • SHA256 9184460cb3dc15e5babf7d96c0816d4068e411a376dc7314e84c722761788538
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\sv.pak
        • Size 572KB
        • SHA256 bcc5a1a2405dd2cdb4adcdc0fd9236645de378ea179ea558b44908fdf708f93b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sw.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\sw.pak
        • Size 604KB
        • SHA256 dd7ec69741e67b471df0555096dcf3affe5a40f68753ccebae75d0cf11b07c60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ta.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\ta.pak
        • Size 1.5MB
        • SHA256 70a31eee3dc00ae51d9ae04945ad3db12de70f44a1fa913d88d599506e27c6b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        te.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\te.pak
        • Size 1.4MB
        • SHA256 1447c02054e3d9ea084311c86c010834b44d7b0863f515cc4b83ce43201787e6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        th.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\th.pak
        • Size 1.2MB
        • SHA256 426a8e74828089ffb36b6ed19462eb645e407ae0352906f7f08ee19a3a5eb97a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\tr.pak
        • Size 615KB
        • SHA256 62c8ace3604a27fab3455e5e86a74f4eaca0a80c1d25a6c24a9656d0e8c37ec5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        uk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\uk.pak
        • Size 1.0MB
        • SHA256 e8c4c4c982f28789f7e710ff7e941b37179966cdc6b9a480f60b03bef866886b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ur.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\ur.pak
        • Size 923KB
        • SHA256 7e8c8a47ab450c0165602160712d0430fc751c5703de655c0d543558e54c63fd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\vi.pak
        • Size 729KB
        • SHA256 6f898771f587d9c7742e3f4779eaa23fc0db554803701b698965a672dcdd6e04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-CN.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\zh-CN.pak
        • Size 523KB
        • SHA256 622f645c6b0a9cb8df6fc92c7a8e52ab2f5118a3f1b324d1910942ce34d180b8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-TW.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\locales\zh-TW.pak
        • Size 518KB
        • SHA256 da8923f485868aeb83f57a1b5991db7ae6474d2418e389d71512e3e5227367ee
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resources.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\resources.pak
        • Size 5.9MB
        • SHA256 ca47fceab76d2220a66dd5c55a444bbdb1f2300b1bd3b180693509327442b292
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        app.asar
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\resources\app.asar
        • Size 338KB
        • SHA256 d5f0ddf96b9100dcdccd94ea66a2dc275d4bfd1a3d1a6c52383ff072ecefc703
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevate.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        snapshot_blob.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\snapshot_blob.bin
        • Size 329KB
        • SHA256 9a10e7b6d4a4a19e9e825217b2eaab2e47df86fe85a70e74e6f660c89ddb0fb6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        v8_context_snapshot.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\v8_context_snapshot.bin
        • Size 695KB
        • SHA256 546db668f31be13f2a70cb2282f8073a88ad51be77eef468e1ad7a9450738da6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\vk_swiftshader.dll
        • Size 5.3MB
        • SHA256 1a257c6ff7a1da8051872bce11e8b313466e0571a1c40903f18e1898783060b5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader_icd.json
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vulkan-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\7z-out\vulkan-1.dll
        • Size 917KB
        • SHA256 35f307f8fe4258fc9a6be3e7cd9a16b723d92b3b32565590aad23bb6780427e1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StdUtils.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        UAC.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\UAC.dll
        • Size 14KB
        • SHA256 2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        WinShell.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\WinShell.dll
        • Size 3KB
        • SHA256 9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        nsDialogs.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\nsDialogs.dll
        • Size 9KB
        • SHA256 1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsis7z.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsr8738.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        default.exc
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512
        Submit Download

        the-real-index
        • Path C:\Users\Admin\AppData\Roaming\moviebox-windows\Code Cache\js\index-dir\the-real-index
        • Size 432B
        • SHA256 216b271d560acc6ebdc7b1fdd301423db9afd0dd126fe1f0d869aa34fd88d8aa
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        the-real-index~RFe5a9116.TMP
        • Path C:\Users\Admin\AppData\Roaming\moviebox-windows\Code Cache\js\index-dir\the-real-index~RFe5a9116.TMP
        • Size 48B
        • SHA256 0c0a8b5615f262bd25b59dae62b23e3513dda8f2277a85bb97eea53134b33f73
        • MD5 SHA1 SHA512
        Submit Download

        Network Persistent State
        • Path C:\Users\Admin\AppData\Roaming\moviebox-windows\Network\Network Persistent State
        • Size 59B
        • SHA256 226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Network Persistent State
        • Path C:\Users\Admin\AppData\Roaming\moviebox-windows\Network\Network Persistent State
        • Size 2KB
        • SHA256 b699f737af811541043e530336e929001e762c2fc186204ccf335c1baa87f1fa
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Network Persistent State~RFe5a66f9.TMP
        • Path C:\Users\Admin\AppData\Roaming\moviebox-windows\Network\Network Persistent State~RFe5a66f9.TMP
        • Size 59B
        • SHA256 c257f929cff0e4380bf08d9f36f310753f7b1ccb5cb2ab811b52760dd8cb9572
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        CURRENT
        • Path C:\Users\Admin\AppData\Roaming\moviebox-windows\Session Storage\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512
        Submit Download

        memory/2864-445-0x00007FFCB7C50000-0x00007FFCB7C51000-memory.dmp
        Download

        memory/2864-444-0x00007FFCB7EA0000-0x00007FFCB7EA1000-memory.dmp
        Download