Overview

overview

8

Static

static

3

Jac-Code-Setup.exe

windows10-2004-x64

8

Jac-Code-Setup.exe

windows11-ltsc_2024-x64

6

Analysis

  • user interaction
    yes
  • max time kernel
    99s
  • max time network
    66s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20260911-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20260911-enlocale:en-usos:windows10-2004-x64systemwindows
  • submitted
    27/10/2026, 11:18

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Jac-Code-Setup.exe
  • Size 5.4MB
  • Sample261027-nerl1sttgx
  • SHA256 460317923277cfa8af4973027afed29979dddb55336d08dfd656326810ce8439
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
8/10
discoverypersistencespywarestealer

Malware Config

Signatures

  • Downloads MZ/PE file 1 IoCs
  • Checks computer location settings 2 TTPs 4 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 16 IoCs
  • Loads dropped DLL 13 IoCs
  • Reads ssh keys stored on the system 2 TTPs

    Tries to access SSH used by SSH programs.

    spywarestealer
  • Adds Run key to start application 2 TTPs 1 IoCs
    persistence
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Network Share Discovery 1 TTPs

    Attempt to gather information on host network.

    discovery
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 10 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • Checks processor information in registry 2 TTPs 4 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 15 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Jac-Code-Setup.exe
    "C:\Users\Admin\AppData\Local\Temp\Jac-Code-Setup.exe"
    1⤵
    • Downloads MZ/PE file
    • Reads the TCP/IP host and domain name from the registry
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1680
    • C:\Users\Admin\AppData\Local\Temp\jac-bootstrap-bbb10dabb358400588838b96eaeac583\verified-installer.exe
      "C:\Users\Admin\AppData\Local\Temp\jac-bootstrap-bbb10dabb358400588838b96eaeac583\verified-installer.exe" /S /DIR="C:\Users\Admin\AppData\Local\Programs\Jac Code" /DESKTOP=1 /STARTUP=1
      2⤵
      • Executes dropped EXE
      • Adds Run key to start application
      PID:4580
    • C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe
      "C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe" --home
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:3764
      • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\Jac Code.exe
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\Jac Code.exe" "--home"
        3⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Reads the TCP/IP host and domain name from the registry
        • Checks processor information in registry
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of WriteProcessMemory
        PID:3836
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\Jac Code.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\Jac Code.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --standard-schemes=jac-preview --secure-schemes=jac-preview --field-trial-handle=1656,i,15436133564062271172,17826722698273686012,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1660,i,13080687003529915755,17627132494825389746,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1780 /prefetch:3
          4⤵
          • Executes dropped EXE
          • Reads the TCP/IP host and domain name from the registry
          PID:1432
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\Jac Code.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\Jac Code.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1656,i,15436133564062271172,17826722698273686012,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1660,i,13080687003529915755,17627132494825389746,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1652 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3372
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\Jac Code.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\Jac Code.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --standard-schemes=jac-preview --secure-schemes=jac-preview --app-user-model-id=JacCode.Desktop --app-path="C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\app.asar" --enable-sandbox --video-capture-use-gpu-memory-buffer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --time-ticks-at-unix-epoch=-1793099399247601 --launch-time-ticks=606776912 --field-trial-handle=1656,i,15436133564062271172,17826722698273686012,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1660,i,13080687003529915755,17627132494825389746,4 --trace-process-track-uuid=3190708990060038890 --mojo-platform-channel-handle=3076 /prefetch:1
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4580
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\jac-engine.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\jac-engine.exe"
          4⤵
          • Checks computer location settings
          • Executes dropped EXE
          • Reads the TCP/IP host and domain name from the registry
          • Suspicious use of WriteProcessMemory
          PID:4628
          • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\JacDesktopLock.exe
            "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\JacDesktopLock.exe" transaction C:\Users\Admin\.local\share\jaccode
            5⤵
            • Executes dropped EXE
            PID:3056
          • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\JacAuth.exe
            "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\JacAuth.exe" transaction
            5⤵
            • Executes dropped EXE
            PID:1180
          • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\JacAuth.exe
            "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\JacAuth.exe" transaction
            5⤵
            • Executes dropped EXE
            PID:1696
          • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\JacAuth.exe
            "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\JacAuth.exe" mcp-config
            5⤵
            • Executes dropped EXE
            PID:1840
        • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\JacDesktopUpdate.exe
          "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\JacDesktopUpdate.exe" startup "C:\Users\Admin\AppData\Local\Programs\Jac Code" status
          4⤵
          • Executes dropped EXE
          PID:3276
  • C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe
    "C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe" --startup
    1⤵
    • Executes dropped EXE
    • Suspicious use of WriteProcessMemory
    PID:4380
    • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\Jac Code.exe
      "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\Jac Code.exe" "--startup"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • Checks processor information in registry
      • Suspicious use of WriteProcessMemory
      PID:512
      • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\Jac Code.exe
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\Jac Code.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --standard-schemes=jac-preview --secure-schemes=jac-preview --field-trial-handle=1664,i,7862685373087280532,11924159721064701892,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1668,i,4466177460804172786,1798981335923190051,4 --trace-process-track-uuid=3190708989122997041 --mojo-platform-channel-handle=1796 /prefetch:3
        3⤵
        • Executes dropped EXE
        PID:1472
      • C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\Jac Code.exe
        "C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\Jac Code.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Jac Code" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1664,i,7862685373087280532,11924159721064701892,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1668,i,4466177460804172786,1798981335923190051,4 --trace-process-track-uuid=3190708988185955192 --mojo-platform-channel-handle=1660 /prefetch:2
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:3720

Network

        MITRE ATT&CK Enterprise v16

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        opencode.db
        • Path C:\Users\Admin\.local\share\jaccode\opencode.db
        • Size 4KB
        • SHA256 97e8d54f8a7255106f66cf1b213c4a4d7b558d21310b1c2bfedc3d0d526dddda
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        opencode.db-wal
        • Path C:\Users\Admin\.local\share\jaccode\opencode.db-wal
        • Size 253KB
        • SHA256 9f96e43a0af8f092c507d9bf5fd6cfad2c6b965d02a906b53786cb6ddeee121c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jac.exe.log
        • Path C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0\UsageLogs\jac.exe.log
        • Size 1KB
        • SHA256 28da357194e6cf73ced8ba39459786048059a8866cc7977667e6af6a5cd5cf46
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        .jac-current.xml
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\.jac-current.xml
        • Size 34B
        • SHA256 bdb23f925aef44c422bfe9ae6d792c786ddca999db15bde5c342a7ee50778744
        • MD5 SHA1 SHA512
        Submit Download

        .jac-install.xml
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\.jac-install.xml
        • Size 2KB
        • SHA256 f7ab74a4bbbd3dc2604efdf57165748b1dd833cb3812dc77441967e9851c4214
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        .jac-transaction.json
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\.jac-transaction.json
        • Size 2KB
        • SHA256 efa612ad0918aba0bf0a5cb0a42ba2dca700947451a5344bd66c032e005920bd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        GETTING-STARTED.txt
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\GETTING-STARTED.txt
        • Size 2KB
        • SHA256 98ad68f94aca24ca7c68274952f24c22456603e00480a6d2c46c5a4301b3c0f4
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Uninstall.exe
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\Uninstall.exe
        • Size 49KB
        • SHA256 10b3c1981b6d33e77ce8cebe98dfe27af2a714d3db72d95ce493576276b9289e
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jac.exe
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.exe
        • Size 29KB
        • SHA256 e8e31d120fc43e285c0e26476c401f5b7583b954727ca9d16aa6fb62611bdf76
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        jac.ico
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\jac.ico
        • Size 3KB
        • SHA256 0aa6b0cd0fc67bbbd3575af1409cd4e824c52d6c2f36ea7af5640582035c1629
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        DEPENDENCIES.json
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\DEPENDENCIES.json
        • Size 197KB
        • SHA256 31bc7b101cb4af57a0a6c94cc809dbf4cb9b40930a40c259100db3993e3567bd
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        NOTICE.txt
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\NOTICE.txt
        • Size 222B
        • SHA256 4b92f3c799b77b10104227f9e778063558cafcafd883d57de058b1a00d95b0d5
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        OpenCode-LICENSE.txt
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\OpenCode-LICENSE.txt
        • Size 1KB
        • SHA256 b5c625d157735f04e1b2b7ceccee849130b554bdb23cd58db55a38a257efbbdd
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        THIRD-PARTY-NOTICES.txt
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\THIRD-PARTY-NOTICES.txt
        • Size 5.3MB
        • SHA256 e9eee1733aadc53787e0f4c8e4c3a40b80b09b8513251a15b7b8d93e8151ce24
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        FFLATE-LICENSE.txt
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\attachments\FFLATE-LICENSE.txt
        • Size 1KB
        • SHA256 0a1df3a083d0c010560aa342e87959c8c1070e6fd54545741f083f22d0c8b551
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        PDFJS-LICENSE.txt
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\legal\attachments\PDFJS-LICENSE.txt
        • Size 9KB
        • SHA256 0d542e0c8804e39aa7f37eb00da5a762149dc682d7829451287e11b938e94594
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        LICENSE
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\LICENSE
        • Size 1KB
        • SHA256 5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        LICENSES.chromium.html
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\LICENSES.chromium.html
        • Size 19.4MB
        • SHA256 5d545ce8065079f38a82472ab93bd62fcdf73cd319f0771ef51c45c7e243f1d4
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_100_percent.pak
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\chrome_100_percent.pak
        • Size 117KB
        • SHA256 15a5bcb49a5c02d6a4e736e8dfa11dabb0bac0589641a4e25f0c06472ccaae6d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        chrome_200_percent.pak
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\chrome_200_percent.pak
        • Size 192KB
        • SHA256 b7acfb068fa681f4ecb8f782bd4e3926590076c61fd0de3de4a12dde227cf52b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        d3dcompiler_47.dll
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\d3dcompiler_47.dll
        • Size 4.5MB
        • SHA256 a05f99734f7c4822fefc12b367af21fd0976ed6608752fb1e1e80b6ece7ecbbb
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dxcompiler.dll
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\dxcompiler.dll
        • Size 24.5MB
        • SHA256 b25b6c8bc64c9ff17ed16e0d272bf0bd7b305f3e19f792a72c8145a6bf624584
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        dxil.dll
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\dxil.dll
        • Size 1.4MB
        • SHA256 77e039c905030a641e53658a008b74e90635a5ea9b6b79eabd0f2003bdfca59a
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        ffmpeg.dll
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\ffmpeg.dll
        • Size 2.9MB
        • SHA256 1b9d751721a40fc8fba2355172382d0e0c210e54c7f2862ebd8a6b6a093f832f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        icudtl.dat
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\icudtl.dat
        • Size 10.4MB
        • SHA256 bd8c145abdf3f8383276ce01dfa4ae48709bef9fef1c0711eb7c3fab4f6eb7c2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libEGL.dll
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\libEGL.dll
        • Size 467KB
        • SHA256 fa8cf715db0e2a7a0f20a2b583221e439c484390b400ec70ff5956ea70d55aae
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        libGLESv2.dll
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\libGLESv2.dll
        • Size 7.7MB
        • SHA256 b6548524109b605155fcccccac8836c3d29dde3f1f6337f67a2bfb7931b9e0a0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-GB.pak
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\locales\en-GB.pak
        • Size 552KB
        • SHA256 aac3b4904d021d58d053bdea2d8056a219ecda1e341d87cb70070aea2cee418f
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        en-US.pak
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\locales\en-US.pak
        • Size 558KB
        • SHA256 bce3ec06227dba2273c4ff12482cba37b709cc8bf5fd29c4380f9a07b92bf821
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        resources.pak
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources.pak
        • Size 6.6MB
        • SHA256 b92a3508c9631066b013adb736684e63e7b9e82e5f4c8a005b243e8e6b2bb5d2
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JacAttachmentGuard.exe
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\JacAttachmentGuard.exe
        • Size 6KB
        • SHA256 5c305dbe31ffeeeea321bc3ae6870a70662227ca477324ffa349dcc9eb6712c8
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JacAuth.exe.56d71d2d094944bda42212b80820b27f.tmp
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\JacAuth.exe.56d71d2d094944bda42212b80820b27f.tmp
        • Size 19KB
        • SHA256 8ef75c1d35ed40fc1f8e13ccb48c41d3390e5d13cc2a44561887d7149d0d61f9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JacDesktopLock.exe
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\JacDesktopLock.exe
        • Size 5KB
        • SHA256 06c826472913e12aace76ee1229b1b1243854734dabc80a8ee1719dd6f88ba78
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JacDesktopUpdate.exe
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\JacDesktopUpdate.exe
        • Size 43KB
        • SHA256 901ece9b4d4c6bb1dfb1e116af8805c39de86a49787e44c22e0560729ee25e76
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        JacProjectRun.exe
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\JacProjectRun.exe
        • Size 15KB
        • SHA256 b84796bb3d1b3417d3a28d1676e96c11ba3ffc6060ddffc6795c6e3b88bd17e9
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        app.asar
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\app.asar
        • Size 3.1MB
        • SHA256 e3229e3e8ce7f00d12b2f29514def40726b275888c08b491eef6b54b160e3ff6
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        client-integrity.json
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\resources\client-integrity.json
        • Size 6KB
        • SHA256 7a8eb4e57b869a0e0ebb687cd757aaf41be7e95a0c46d22743f4ab759c60577c
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        snapshot_blob.bin
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\snapshot_blob.bin
        • Size 338KB
        • SHA256 074571140666f561594889ccb6439bc30d21935f0c7157c0edd118223950bd7d
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        v8_context_snapshot.bin
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\v8_context_snapshot.bin
        • Size 704KB
        • SHA256 b0874ba2f21ccf59f8a3086168ad782834aeeabb4acb644a20744a1cbeb5bf59
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        version
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\version
        • Size 8B
        • SHA256 6fad46276bd050e3ddbd7d6a667f72755cccd29ce87b714c1d0e73f3fb6a0206
        • MD5 SHA1 SHA512
        Submit Download

        vk_swiftshader.dll
        • Path C:\Users\Admin\AppData\Local\Programs\Jac Code\versions\6.2.7\vk_swiftshader.dll
        • Size 5.3MB
        • SHA256 4bd642ea08bd933014cd5c44911c4422bd6f69c8569f494de79054536a6469e0
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        310cacee-7cfb-40d0-a5ee-8feb802c6a95.tmp
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\310cacee-7cfb-40d0-a5ee-8feb802c6a95.tmp
        • Size 490B
        • SHA256 4ec8fe867f176c44a10e13511490f5eec103f06389472d0919da4d5944b98a5e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        temp-index
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\Code Cache\wasm\index-dir\temp-index
        • Size 48B
        • SHA256 eca8891a48d2d43afe901adc5f75148d82941df8990b2571a1e9d1d2de3aa635
        • MD5 SHA1 SHA512
        Submit Download

        data_0
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\GPUCache\data_0
        • Size 8KB
        • SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        data_1
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\GPUCache\data_1
        • Size 264KB
        • SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        data_2
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\GPUCache\data_2
        • Size 8KB
        • SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        data_3
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\GPUCache\data_3
        • Size 8KB
        • SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Local State
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\Local State
        • Size 490B
        • SHA256 bbcd7de0caede002b7ff7fccc883ceee7d12eb7f008701488b9125ceac073cff
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        CURRENT
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\Local Storage\leveldb\CURRENT
        • Size 16B
        • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
        • MD5 SHA1 SHA512
        Submit Download

        .integrity-v6.key
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\backups-v6\.integrity-v6.key
        • Size 32B
        • SHA256 ce08c513b446bba342dba178c486aafd588d3b06595b4f4a81e19f22c4510674
        • MD5 SHA1 SHA512
        Submit Download

        database.sqlite
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\backups-v6\.pending-45f91958-cfbc-468e-bcd0-eb6cecd62c6e\database.sqlite
        • Size 192KB
        • SHA256 6787dca102bfa26ad1770d3966fe8c8a1b9efad155fd9b198d1a7a95b5265f5b
        • MD5 SHA1 SHA512 SSDEEP TLSH
        Submit Download

        manifest.json
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\backups-v6\.pending-45f91958-cfbc-468e-bcd0-eb6cecd62c6e\manifest.json
        • Size 1KB
        • SHA256 205dd8428de910db3d427cde57eeeb29d777c8bf48fdd30b2a2dacedf26f183d
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        queue.json
        • Path C:\Users\Admin\AppData\Roaming\Jac Code\queue-v6\queue.json
        • Size 38B
        • SHA256 6b6401b3841d14091235e8e71a5f7e767b3198be6f3662576a618cd4d296f732
        • MD5 SHA1 SHA512
        Submit Download

        default.dic
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic
        • Size 2B
        • SHA256 b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
        • MD5 SHA1 SHA512
        Submit Download

        Jac Code F9078B.lnk
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jac Code F9078B.lnk
        • Size 2KB
        • SHA256 1992f8b3ba50ba739b5f108cc94666889200969af2e57d649b6f384ab72211fb
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Jac Code F9078B.lnk~RFe594637.TMP
        • Path C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Jac Code F9078B.lnk~RFe594637.TMP
        • Size 2KB
        • SHA256 f23d7a9968e740ac27c8dd727417e7e8eddb44f81c36fde9b53f392ffbb82b55
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        Jac Code F9078B.lnk
        • Path C:\Users\Admin\Desktop\Jac Code F9078B.lnk
        • Size 2KB
        • SHA256 ac68cf67f349a2dd38304eb14179a4272100fb959627d156d66acb60a5f20116
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        ~ac Code F9078B.tmp
        • Path C:\Users\Admin\Desktop\~ac Code F9078B.tmp
        • Size 2KB
        • SHA256 ba4735dd6d97d54695c7becd26874c82a71e80bdb47f09d083cad0bbdd98b17e
        • MD5 SHA1 SHA512 TLSH
        Submit Download

        memory/1180-501-0x0000000000250000-0x000000000025A000-memory.dmp
        Download

        memory/1180-505-0x0000000002D30000-0x0000000002D80000-memory.dmp
        Download

        memory/1680-4-0x000000001C460000-0x000000001C470000-memory.dmp
        Download

        memory/1680-0-0x0000000000380000-0x00000000008EC000-memory.dmp
        Download

        memory/1680-3-0x000000001C290000-0x000000001C344000-memory.dmp
        Download

        memory/1680-5-0x000000001C460000-0x000000001C470000-memory.dmp
        Download

        memory/1680-1-0x000000001C460000-0x000000001C470000-memory.dmp
        Download

        memory/1680-2-0x000000001C470000-0x000000001C91C000-memory.dmp
        Download

        memory/1680-18-0x0000000022ED0000-0x0000000022EF2000-memory.dmp
        Download

        memory/1680-20-0x000000001C460000-0x000000001C470000-memory.dmp
        Download

        memory/1680-21-0x000000001C460000-0x000000001C470000-memory.dmp
        Download

        memory/1680-22-0x000000001C460000-0x000000001C470000-memory.dmp
        Download

        memory/3056-498-0x0000000000360000-0x0000000000366000-memory.dmp
        Download

        memory/3276-511-0x0000000000A60000-0x0000000000A6E000-memory.dmp
        Download

        memory/3764-327-0x00000000005C0000-0x00000000005CA000-memory.dmp
        Download

        memory/4580-27-0x0000000000320000-0x0000000001320000-memory.dmp
        Download

        memory/4580-28-0x000000000EDD0000-0x000000000EDE0000-memory.dmp
        Download

        memory/4580-29-0x0000000028BA0000-0x0000000028D62000-memory.dmp
        Download

        memory/4580-30-0x000000000CAE0000-0x000000000CAF2000-memory.dmp
        Download

        memory/4580-31-0x000000006A660000-0x000000006AB88000-memory.dmp
        Download

        memory/4580-429-0x00007FF9DE8B0000-0x00007FF9DE8B1000-memory.dmp
        Download

        memory/4580-430-0x00007FF9DE070000-0x00007FF9DE071000-memory.dmp
        Download

        memory/4580-278-0x000000000EDD0000-0x000000000EDE0000-memory.dmp
        Download