Overview

overview

7

Static

static

3

BUG-Clicker.exe

windows10-2004-x64

7

BUG-Clicker.exe

windows11-ltsc_2024-x64

7

$PLUGINSDI...em.dll

windows10-2004-x64

3

$PLUGINSDI...em.dll

windows11-ltsc_2024-x64

3

BUG-Clicker.exe

windows10-2004-x64

7

resources/elevate.exe

windows10-2004-x64

3

resources/elevate.exe

windows11-ltsc_2024-x64

3

Analysis

  • max time kernel
    56s
  • max time network
    21s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    24/10/2026, 17:21

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    BUG-Clicker.exe
  • Size 107.3MB
  • Sample261024-vxa6babs5z
  • SHA256 24b179fde26b8263401968e9deb4993b6b28356d20a465b410574f20c79d0e74
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
7/10
discoveryspywarestealer

Malware Config

Signatures

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 9 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

    spywarestealer
  • Drops file in Windows directory 3 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 4 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 1 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks processor information in registry 2 TTPs 2 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 4 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\BUG-Clicker.exe
    "C:\Users\Admin\AppData\Local\Temp\BUG-Clicker.exe"
    1⤵
    • Loads dropped DLL
    • System Location Discovery: System Language Discovery
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:5368
    • C:\Users\Admin\AppData\Local\Temp\3L8vAwmQeddoFa7gtYQZ3Hu45cY\BUG-Clicker.exe
      C:\Users\Admin\AppData\Local\Temp\3L8vAwmQeddoFa7gtYQZ3Hu45cY\BUG-Clicker.exe
      2⤵
      • Executes dropped EXE
      • Drops file in Windows directory
      • Reads the TCP/IP host and domain name from the registry
      • Checks processor information in registry
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1484
      • C:\Users\Admin\AppData\Local\Temp\3L8vAwmQeddoFa7gtYQZ3Hu45cY\BUG-Clicker.exe
        "C:\Users\Admin\AppData\Local\Temp\3L8vAwmQeddoFa7gtYQZ3Hu45cY\BUG-Clicker.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BUG Clicker 데이터" --field-trial-handle=2004,i,16877014563078716861,9454337778336990403,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=CalculateNativeWinOcclusion,DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2020,i,3336899264383612430,9267140741158799070,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=2084 /prefetch:11
        3⤵
        • Executes dropped EXE
        • Reads the TCP/IP host and domain name from the registry
        PID:4596
      • C:\Users\Admin\AppData\Local\Temp\3L8vAwmQeddoFa7gtYQZ3Hu45cY\BUG-Clicker.exe
        "C:\Users\Admin\AppData\Local\Temp\3L8vAwmQeddoFa7gtYQZ3Hu45cY\BUG-Clicker.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BUG Clicker 데이터" --app-path="C:\Users\Admin\AppData\Local\Temp\3L8vAwmQeddoFa7gtYQZ3Hu45cY\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --launch-time-ticks=627341185 --field-trial-handle=2004,i,16877014563078716861,9454337778336990403,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=CalculateNativeWinOcclusion,DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2020,i,3336899264383612430,9267140741158799070,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=2468 /prefetch:1
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2852
      • C:\Users\Admin\AppData\Local\Temp\3L8vAwmQeddoFa7gtYQZ3Hu45cY\BUG-Clicker.exe
        "C:\Users\Admin\AppData\Local\Temp\3L8vAwmQeddoFa7gtYQZ3Hu45cY\BUG-Clicker.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Temp\BUG Clicker 데이터" --gpu-preferences=WAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAQAAAAAAAAAADAAAAAAAAADgAAAAAAAAAAAAAAAAAAAACAAAAAAAAAAAAAAAAAAAAKAAAAAAAAAAoAAAAAAAAAAgAAAAAAAAAEAAAAAIAAAABAAAAAAAAAAgAAAAAAAAACAAAAAAAAAA= --field-trial-handle=2004,i,16877014563078716861,9454337778336990403,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=CalculateNativeWinOcclusion,DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=2020,i,3336899264383612430,9267140741158799070,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=2000 /prefetch:2
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4832

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        temp-index
        • Path C:\Users\Admin\AppData\Local\Temp\BUG Clicker 데이터\Code Cache\js\index-dir\temp-index
        • Size 48B
        • SHA256 9bfa38c4efb2b9a4670bc5ff34a2ef07813921cb17b1cafe9dfadd98a8d66985
        • MD5 SHA1 SHA512
        Submit Download

        CURRENT
        • Path C:\Users\Admin\AppData\Local\Temp\BUG Clicker 데이터\Local Storage\leveldb\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512
        Submit Download

        LICENSE.electron.txt
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\LICENSE.electron.txt
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSES.chromium.html
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\LICENSES.chromium.html
        • Size 19.5MB
        • SHA256 7b328b8c7463ac9bfc7dc648c751533517c8441a0b5b21047d6c0b2620e60d70
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_100_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\chrome_100_percent.pak
        • Size 702KB
        • SHA256 ab7c4b7b6cb8832a31d44b95ec50ce52294f49422a3bdde4e21968eca2930cbe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_200_percent.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\chrome_200_percent.pak
        • Size 1.2MB
        • SHA256 30fa4a6e27c9ff2fb0f939f01158477e621a67d86e9ecb84cf11b3947db8eb9d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dcompiler_47.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\d3dcompiler_47.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dxcompiler.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\dxcompiler.dll
        • Size 24.6MB
        • SHA256 d3d1e235dd33811bc5073cc451510c5ef550ebacce74b4f4cbe1d164e9c84de6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dxil.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\dxil.dll
        • Size 1.4MB
        • SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffmpeg.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\ffmpeg.dll
        • Size 3.0MB
        • SHA256 45c9e035d19ad0764100e9e3fbeb552b00d95a4ea20597627f9a91c404e79363
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icudtl.dat
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\icudtl.dat
        • Size 10.4MB
        • SHA256 9f48c7f9c7c94d516a14870707e910ab94d75ae640ff6842c4af53276cd26ebe
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        af.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\af.pak
        • Size 621KB
        • SHA256 3017b141bd16e24190d810f0748612f0fd4352ca8553002b9a63a7f77f7154f8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        am.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\am.pak
        • Size 1005KB
        • SHA256 67b938d162bc75db067120bb8366b5bafd9a75fa99a0ca9ad4f46b47d1d37634
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ar.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\ar.pak
        • Size 1.1MB
        • SHA256 a6eb037da4ac7930a8661c8bf602deee090fc4409bf4db24db8aab65c89b1d06
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bg.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\bg.pak
        • Size 1.1MB
        • SHA256 2eb9c74c67e4b13b45a73061fa978738e335bc245da71bab0ea9b205fe91074e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        bn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\bn.pak
        • Size 1.4MB
        • SHA256 415621a5c0b1546e6e447d43b76414425a8703cc7681d637ec1f283ad0c787e7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ca.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\ca.pak
        • Size 700KB
        • SHA256 6f28297c1ccb628f534d65dade167ae559f83eace359acf47e48ff890b9409d5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        cs.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\cs.pak
        • Size 725KB
        • SHA256 799a789ce531991cb975425730db310f9a8fe74091eee568f3e65fcc7ef0cd57
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        da.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\da.pak
        • Size 650KB
        • SHA256 9a2cd25537a4818897481ba944981e8aee3d89c7ad37588d02f1deebff3f62d0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        de.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\de.pak
        • Size 701KB
        • SHA256 fcf63fd89e613a7ef69f16054b97b3493948e5c665aad180a91d3635256fb7d7
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        el.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\el.pak
        • Size 1.2MB
        • SHA256 37d2e1ef69fea9bdb1e0902cbc61a458baa9009fc3761029bd1c1882a7a0c9b2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-GB.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\en-GB.pak
        • Size 566KB
        • SHA256 01d9200a5daee1770f7147b166d25baa6a8dd72c138c3c526421e656dec789f5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-US.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\en-US.pak
        • Size 572KB
        • SHA256 23b271e8009bfa14783700cd0712b4ecaa5b8f2ea28a4d81ae1d7e05bc0c96b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es-419.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\es-419.pak
        • Size 691KB
        • SHA256 6ff6ea0a14da50cacc4b72ab8c8c7b49c8423abb64f6a3a7f1643d8c3c74e6e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        es.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\es.pak
        • Size 687KB
        • SHA256 4578e08033967a5062bfd3b1937e711df84571d444e4940b8ffe5366bce4e778
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        et.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\et.pak
        • Size 627KB
        • SHA256 dd1205eae606f12510e24ce39f301439c98b3293d766ca5839dc292a14d7973c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fa.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\fa.pak
        • Size 1.0MB
        • SHA256 f3675255feb8b054717be9e92e93289262f35e82f25f2f8de0d3ebf3865715af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\fi.pak
        • Size 639KB
        • SHA256 1f3123d7fb5c22a95b5250ea17450b665c3c6cd6a6dfd28bbdde15e1bf684a0e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fil.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\fil.pak
        • Size 724KB
        • SHA256 02e2c70d3d85b0deb677a9ae576ae3cf89e80774532cb3315c14f1e8ce64b310
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        fr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\fr.pak
        • Size 745KB
        • SHA256 4db43f1cfba1ed1d7dd347d58fbab0b8d6d89dd008a3b9d2436d8744e3363453
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        gu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\gu.pak
        • Size 1.4MB
        • SHA256 e86e8c240d4b6283abb03c49df9e8899607ef9def6d4933c7a541d63b5835271
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        he.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\he.pak
        • Size 906KB
        • SHA256 ddc1f304ab1f4489d19ae2b31e7f8e3ffb47dae439520159e8975422c65e4115
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\hi.pak
        • Size 1.5MB
        • SHA256 10a6f19c1982590e33476427dee8d4293b0707e25dc536d6394b5782ecc3b642
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\hr.pak
        • Size 698KB
        • SHA256 d46c64ae8af3562e37eb80438aa2bee228fafda251d58ba4d0991291f1c72aab
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        hu.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\hu.pak
        • Size 747KB
        • SHA256 0a46fc8d50f74effd1cfe1979e677df3de6fc47e6b551267303d93d57bd83f50
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        id.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\id.pak
        • Size 620KB
        • SHA256 f567569c42a25bb2dfc5c33e13aac558c0e2a1d5d4b969592bbd0841b36438db
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        it.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\it.pak
        • Size 677KB
        • SHA256 899be10e8f46f53d9bbe7cab827fc17b7c2bd7184e31791688016e2ca4df6622
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ja.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\ja.pak
        • Size 822KB
        • SHA256 9370c20a0612f5874dff2b015f31482e167eccf1b3c1d1a2efc1c2e38cefa88e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        kn.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\kn.pak
        • Size 1.6MB
        • SHA256 af5fed2130102ecc0c878059c88faed9d6db2e8b147fb5ae9e15e3fe69706c8a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ko.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\ko.pak
        • Size 701KB
        • SHA256 0f5bc49c4d35bfea1563db6eb77a074c65b39b49a916cb35a022ef96340338f2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lt.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\lt.pak
        • Size 759KB
        • SHA256 af969f4407c190dd01a426fa1244cb1ec7cdf2909d1c3ba5b87ff662ba567303
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        lv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\lv.pak
        • Size 756KB
        • SHA256 27e20dfa5585161ef8b641f628aefe6c88d9f9590ffedb647e0c9da1cacf219d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ml.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\ml.pak
        • Size 1.7MB
        • SHA256 b5606265910e45098a88e989202a550531f6d00333c6b112ed4c5cbc07b2ff6a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        mr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\mr.pak
        • Size 1.4MB
        • SHA256 8465d4077ed5414cbcb7d9bdb00d85e515a1a069703cdc1d4d67c9d6e5623fb0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ms.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\ms.pak
        • Size 652KB
        • SHA256 af7021a00befa586aa067ae3ccb339079e6f13ee0cab1621836f6abb608b6f2a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nb.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\nb.pak
        • Size 623KB
        • SHA256 d97a2b0cbe6adc99add2ed3ce0d15d0bb124b778086c466c126634d60ea72608
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\nl.pak
        • Size 649KB
        • SHA256 9d82c384fbb6480c7a6e721c6bcd1f2cd19665d848b056b5a2911504308ba037
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\pl.pak
        • Size 724KB
        • SHA256 8a0969fc743d3e2f5111387d53c0d79e8c1d9f68256ad6553b87fca2bcaa7e6e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-BR.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\pt-BR.pak
        • Size 680KB
        • SHA256 8272a84e2e6658dc4da17c6bd21995011fbaa6c328efafd24c4ebd4fe2e64916
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        pt-PT.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\pt-PT.pak
        • Size 684KB
        • SHA256 bdfa7264dddf70f936f1785737969559a577b51d1952c820a468c611d18b17ca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ro.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\ro.pak
        • Size 711KB
        • SHA256 1e6b5b0dac63a9e951daf523de310f6bd9e5c53e281f37706d41bd35d2a08bb5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ru.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\ru.pak
        • Size 1.1MB
        • SHA256 52a31a7ca057b8c76208620932120927a089502ddfb66c30de4324959f9e0075
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\sk.pak
        • Size 737KB
        • SHA256 a53551e8d251fa01305afe1d0d187144c56bfdffd5d1aa9f96a9350b96c0a252
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sl.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\sl.pak
        • Size 705KB
        • SHA256 e1371c8df577b979e3a515af34b0aaa3d07153c7a5c55d39a9b49a7ffe62d3d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\sr.pak
        • Size 1.1MB
        • SHA256 be4ce17afac24dffc1eb36609cb51e766e77097d6656b1008a2a825e59609cc1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sv.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\sv.pak
        • Size 631KB
        • SHA256 8bdff8855d23c739ece357f653c0a17bb36fe97577a5761912080d057ed341a5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        sw.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\sw.pak
        • Size 669KB
        • SHA256 312b225a81cc3cc15f13f80c45dd0e0bb3655d31873d2956861207e70c33c1dc
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ta.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\ta.pak
        • Size 1.7MB
        • SHA256 91fb1460711df108d8d435a378c8be1d1e80b0886c0158d8c6ae92f35812681b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        te.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\te.pak
        • Size 1.6MB
        • SHA256 fc8c2706c5dfd36e7af8e380a240e0f697cc5fe969b512092a2185896512c4af
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        th.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\th.pak
        • Size 1.3MB
        • SHA256 c1f4235c31bc05153230b0e55b7aabc9020d7460d5b0a025c386885e1e4bda3c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        tr.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\tr.pak
        • Size 681KB
        • SHA256 ae87bbd88ce0adfc2dc3c460736a7d0513472af62fc856caccc638dedfec9b4a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        uk.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\uk.pak
        • Size 1.2MB
        • SHA256 a6230520dac708a6235588f5d9e894fcc9b1391e18a70e3220e06ddf80f76688
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ur.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\ur.pak
        • Size 1023KB
        • SHA256 c218e21744df2ff0669a87d497d65d76333073577360d4c662c592de146bf82a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vi.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\vi.pak
        • Size 810KB
        • SHA256 42f3f0c4f645aedc66c12c74aee7256336a929798d736c56853daec91d44511a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-CN.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\zh-CN.pak
        • Size 578KB
        • SHA256 ba8ac4bf82b50728d907215d1993948457835bf2942a4d7266a3f8af5f51de15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        zh-TW.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\locales\zh-TW.pak
        • Size 570KB
        • SHA256 82739378d17ea73e57c8efae31994e0c8818ab2d0d12cb1f6b20d2f340b3229d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resources.pak
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\resources.pak
        • Size 11.9MB
        • SHA256 cdbcf9a043ddf01b0ac30d63c257131248406c3e4fe9eddc182ef6ef49a34dc5
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        app.asar
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\resources\app.asar
        • Size 5.3MB
        • SHA256 93b198ca21cc24a58453cc7ecee192fa1037d398820e4e8accf7bb33479a503c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        elevate.exe
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\resources\elevate.exe
        • Size 105KB
        • SHA256 9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        update.json
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\resources\update.json
        • Size 108B
        • SHA256 6014c69981b14f183413cb5a26e9588c4d6d921cabe92b00741dac7bc9c4efaa
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        snapshot_blob.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\snapshot_blob.bin
        • Size 360KB
        • SHA256 71985d35233bc9d298d333e1b2a9940b67f1cfd54abc1ba031667f189a044c15
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        v8_context_snapshot.bin
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\v8_context_snapshot.bin
        • Size 724KB
        • SHA256 390aea732e1d72311c7993ccf5d6f3367ca1a56acfd71f1169e1f4eb680d8c56
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\vk_swiftshader.dll
        • Size 5.3MB
        • SHA256 2108602059eb529119ed7eaf89f5de96f96b1b22c805fc6c49482cdf77de0e60
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        vk_swiftshader_icd.json
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\vk_swiftshader_icd.json
        • Size 106B
        • SHA256 32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        vulkan-1.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\7z-out\vulkan-1.dll
        • Size 917KB
        • SHA256 2de557a55b67211227f3bfb96a299c4096e446831300d05269c251f4da56e910
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        BgImage.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\BgImage.dll
        • Size 7KB
        • SHA256 e27efa5dfde875bd6b826fafb4c7698db6b6e30e68715a1c03eb018e3170fc04
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        StdUtils.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\StdUtils.dll
        • Size 100KB
        • SHA256 b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        System.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\System.dll
        • Size 12KB
        • SHA256 3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        nsis7z.dll
        • Path C:\Users\Admin\AppData\Local\Temp\nsk9C37.tmp\nsis7z.dll
        • Size 424KB
        • SHA256 b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        default.exc
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512
        Submit Download

        image.ico
        • Path C:\Windows\SystemTemp\scoped_dir1484_1023241652\image.ico
        • Size 7KB
        • SHA256 37795bb192c26df60b42f2e11dbb676401f6330a9f72848d3e8eb511912be7b1
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        memory/2852-446-0x00007FFB58B30000-0x00007FFB58B31000-memory.dmp
        Download

        memory/2852-447-0x00007FFB579D0000-0x00007FFB579D1000-memory.dmp
        Download