Overview

overview

5

Static

static

1

Atlassian ...on.exe

windows10-2004-x64

5

Atlassian ...on.exe

windows11-ltsc_2024-x64

4

Analysis

  • user interaction
    yes
  • max time kernel
    301s
  • max time network
    296s
  • platform
    windows11-ltsc_2024_x64
  • resource
    win11ltsc2024-20260911-en
  • resource tags

    arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
  • submitted
    27/10/2026, 21:09

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Atlassian Companion.exe
  • Size 145.8MB
  • Sample261027-zzphyafz8w
  • SHA256 ea23a1a5894e3614b53bfea94c437186515fb5a5b73835f817cc702b543f7d1f
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
4/10
discovery

Malware Config

Signatures

  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Executes dropped EXE 23 IoCs
  • Loads dropped DLL 13 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Reads the TCP/IP host and domain name from the registry 1 TTPs 16 IoCs

    The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

    discovery
  • System Location Discovery: System Language Discovery 1 TTPs 20 IoCs

    Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

    discovery
  • Checks processor information in registry 2 TTPs 10 IoCs

    Processor information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 20 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Atlassian Companion.exe
    "C:\Users\Admin\AppData\Local\Temp\Atlassian Companion.exe"
    1⤵
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:4088
    • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
      "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
      2⤵
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:3864
      • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Squirrel.exe
        "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
        3⤵
        • Executes dropped EXE
        PID:4336
      • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
        "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe" --squirrel-install 3.3.0
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • Checks processor information in registry
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4056
        • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\Update.exe
          C:\Users\Admin\AppData\Local\atlassian-desktop-companion\Update.exe "--createShortcut=Atlassian Companion.exe"
          4⤵
          • Executes dropped EXE
          PID:5224
        • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
          "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Atlassian Companion" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1936,i,2343325684891927173,12812120597085238583,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1940,i,7322420976199605691,16391983620173269963,4 --trace-process-track-uuid=1653604857 --mojo-platform-channel-handle=1932 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:1624
        • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
          "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Atlassian Companion" --field-trial-handle=1936,i,2343325684891927173,12812120597085238583,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1940,i,7322420976199605691,16391983620173269963,4 --trace-process-track-uuid=521694016 --mojo-platform-channel-handle=1972 /prefetch:11
          4⤵
          • Executes dropped EXE
          • Reads the TCP/IP host and domain name from the registry
          • System Location Discovery: System Language Discovery
          PID:2472
      • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
        "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe" --squirrel-firstrun
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Reads the TCP/IP host and domain name from the registry
        • System Location Discovery: System Language Discovery
        • Checks processor information in registry
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:2184
        • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\Update.exe
          C:\Users\Admin\AppData\Local\atlassian-desktop-companion\Update.exe --checkForUpdate https://update-nucleus.atlassian.com/Atlassian-Companion/291cb34fe2296e5fb82b83a04704c9b4/win32/ia32
          4⤵
          • Executes dropped EXE
          PID:6060
        • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
          "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Atlassian Companion" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1832,i,4797979527357914258,11484907523693054221,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1836,i,13883510230422797529,12265023240762480633,4 --trace-process-track-uuid=1653604857 --mojo-platform-channel-handle=1828 /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          PID:3516
        • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
          "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Atlassian Companion" --field-trial-handle=1832,i,4797979527357914258,11484907523693054221,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1836,i,13883510230422797529,12265023240762480633,4 --trace-process-track-uuid=521694016 --mojo-platform-channel-handle=1864 /prefetch:11
          4⤵
          • Executes dropped EXE
          • Reads the TCP/IP host and domain name from the registry
          • System Location Discovery: System Language Discovery
          PID:1072
        • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
          "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.26100.1301 --user-data-dir="C:\Users\Admin\AppData\Local\Atlassian Companion" --gpu-preferences=SAAAAAAAAADoAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAEIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1832,i,4797979527357914258,11484907523693054221,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1836,i,13883510230422797529,12265023240762480633,4 --trace-process-track-uuid=3684750470 --mojo-platform-channel-handle=2584 /prefetch:10
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • System Location Discovery: System Language Discovery
          • Suspicious behavior: EnumeratesProcesses
          PID:3676
  • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\Atlassian Companion.exe
    "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\Atlassian Companion.exe"
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:880
    • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
      "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe"
      2⤵
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Checks processor information in registry
      • Suspicious use of WriteProcessMemory
      PID:4712
      • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
        "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Atlassian Companion" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1772,i,18424573244498471641,6473415798339886247,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1776,i,16921704407091216565,11749339802254463409,4 --trace-process-track-uuid=1653604857 --mojo-platform-channel-handle=1768 /prefetch:2
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:5492
      • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
        "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Atlassian Companion" --field-trial-handle=1772,i,18424573244498471641,6473415798339886247,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1776,i,16921704407091216565,11749339802254463409,4 --trace-process-track-uuid=521694016 --mojo-platform-channel-handle=1812 /prefetch:11
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:5388
  • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\Atlassian Companion.exe
    "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\Atlassian Companion.exe"
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:5064
    • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
      "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe"
      2⤵
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Checks processor information in registry
      • Suspicious use of WriteProcessMemory
      PID:4392
      • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
        "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Atlassian Companion" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1752,i,8257943155707680876,18276016278575927557,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1756,i,18263727121366325691,14556906137812459863,4 --trace-process-track-uuid=1653604857 --mojo-platform-channel-handle=1748 /prefetch:2
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:1132
      • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
        "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Atlassian Companion" --field-trial-handle=1752,i,8257943155707680876,18276016278575927557,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=1756,i,18263727121366325691,14556906137812459863,4 --trace-process-track-uuid=521694016 --mojo-platform-channel-handle=1816 /prefetch:11
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:4080
  • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\Atlassian Companion.exe
    "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\Atlassian Companion.exe"
    1⤵
    • Executes dropped EXE
    • System Location Discovery: System Language Discovery
    • Suspicious use of WriteProcessMemory
    PID:2412
    • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
      "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe"
      2⤵
      • Executes dropped EXE
      • Reads the TCP/IP host and domain name from the registry
      • System Location Discovery: System Language Discovery
      • Checks processor information in registry
      • Suspicious use of WriteProcessMemory
      PID:5856
      • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
        "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Local\Atlassian Companion" --gpu-preferences=SAAAAAAAAADgAAAEAAAAAAAAAAAAAGAAAQAAAAAAAAAAAAAAAAAAAAIAAAAAAAAAAAAAAAAAAAAQAAAAAAAAABAAAAAAAAAACAAAAAAAAAAIAAAAAAAAAA== --field-trial-handle=1008,i,11255871373149808525,5560783150321973743,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=996,i,5828470484761894367,10777117705230913556,4 --trace-process-track-uuid=1653604857 --mojo-platform-channel-handle=1012 /prefetch:2
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:4444
      • C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe
        "C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\Atlassian Companion.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Local\Atlassian Companion" --field-trial-handle=1008,i,11255871373149808525,5560783150321973743,262144 --enable-features=PdfUseShowSaveFilePicker --disable-features=DropInputEventsWhilePaintHolding,LocalNetworkAccessChecks,NetworkServiceSandbox,ScreenAIOCREnabled,SpareRendererForSitePerProcess,TraceSiteInstanceGetProcessCreation --variations-seed-version --pseudonymization-salt-handle=996,i,5828470484761894367,10777117705230913556,4 --trace-process-track-uuid=521694016 --mojo-platform-channel-handle=2188 /prefetch:11
        3⤵
        • Executes dropped EXE
        • System Location Discovery: System Language Discovery
        PID:3776
  • C:\Windows\system32\svchost.exe
    C:\Windows\system32\svchost.exe -k GPSvcGroup
    1⤵
      PID:6092

    Network

          MITRE ATT&CK Enterprise v16

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          Local State
          • Path C:\Users\Admin\AppData\Local\Atlassian Companion\Local State
          • Size 490B
          • SHA256 253f7ea324d33e0ae349c0a09bd71447e46ade5d1ab6631bb6f4b382861e520d
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          RELEASES
          • Path C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
          • Size 98B
          • SHA256 d54230078fc736a370077cbf63beeaa14ecff2db61fcef98af9086fd943b04bb
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          Update.exe
          • Path C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
          • Size 1.8MB
          • SHA256 0e94e02ba172394b2953d0bb1e4bebced5ad8b4cd5009fd73119d1409d9fff7b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          background.gif
          • Path C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif
          • Size 31KB
          • SHA256 aff8c71f6f567b17ae1f96221d471d62856a7aeb7df151497d8c1bc360cc2f31
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          setupIcon.ico
          • Path C:\Users\Admin\AppData\Local\SquirrelTemp\setupIcon.ico
          • Size 361KB
          • SHA256 7f9a750c6572a6747b12bb255be6c979cf20af02023f4840022044e649592630
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          Atlassian Companion.exe
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\Atlassian Companion.exe
          • Size 621KB
          • SHA256 d0f83b0c43583c48fd1f84f1ccb261486449dbf23ef6cfcb82d8c31a7d5f7f0d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          D3DCompiler_47.dll
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\D3DCompiler_47.dll
          • Size 4.0MB
          • SHA256 0ae6e52072857c3acfde53b98f56c3c6d9bd0e7b09f247ae7f40bfd451593c4c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          chrome_100_percent.pak
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\chrome_100_percent.pak
          • Size 117KB
          • SHA256 15a5bcb49a5c02d6a4e736e8dfa11dabb0bac0589641a4e25f0c06472ccaae6d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          chrome_200_percent.pak
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\chrome_200_percent.pak
          • Size 192KB
          • SHA256 b7acfb068fa681f4ecb8f782bd4e3926590076c61fd0de3de4a12dde227cf52b
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          icudtl.dat
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\icudtl.dat
          • Size 10.4MB
          • SHA256 bd8c145abdf3f8383276ce01dfa4ae48709bef9fef1c0711eb7c3fab4f6eb7c2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libEGL.dll
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\libEGL.dll
          • Size 398KB
          • SHA256 bb6fad98d4e39b4aed76018a259eacab69f184ef5c809c4d7b75d7c5a94ade65
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          libglesv2.dll
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\libglesv2.dll
          • Size 6.9MB
          • SHA256 4e9f0482148b8b79bcac83bbaa2de0ae688f0c4a0985f5dbdac623a79104663c
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          en-US.pak
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\locales\en-US.pak
          • Size 558KB
          • SHA256 bce3ec06227dba2273c4ff12482cba37b709cc8bf5fd29c4380f9a07b92bf821
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          resources.pak
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\resources.pak
          • Size 6.6MB
          • SHA256 b92a3508c9631066b013adb736684e63e7b9e82e5f4c8a005b243e8e6b2bb5d2
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          fileassociations.node
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\resources\app.asar.unpacked\node_modules\@atlassian\file-associations\build\Release\fileassociations.node
          • Size 140KB
          • SHA256 f6dc93a444e73b83bc1ddd24353df2da1cdcb50091f4d8041388e615e48931d5
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          index.js
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\resources\app.asar.unpacked\node_modules\@atlassian\file-associations\index.js
          • Size 1KB
          • SHA256 eb5501d5da56e433f64c11d94d48df999187f09870e14858158b2477491a7321
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          package.json
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\resources\app.asar.unpacked\node_modules\@atlassian\file-associations\node_modules\debug\package.json
          • Size 1KB
          • SHA256 ea8e33d63fe5f3a4c36609b6c3df8e2ef1f8b8ba2fc3a2e1e53cb27291f384af
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          common.js
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\resources\app.asar.unpacked\node_modules\@atlassian\file-associations\node_modules\debug\src\common.js
          • Size 6KB
          • SHA256 dbe83d2bb5837f3c4d7fe537b8004c585987270eceed5b06b8e078deb0ae214a
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          index.js
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\resources\app.asar.unpacked\node_modules\@atlassian\file-associations\node_modules\debug\src\index.js
          • Size 314B
          • SHA256 aa127ff1752b7d9c7415c5c7bb6994d9aa722b81bcbcab4bd48316b013d23bf3
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          node.js
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\resources\app.asar.unpacked\node_modules\@atlassian\file-associations\node_modules\debug\src\node.js
          • Size 4KB
          • SHA256 d7b26d7c92f8ea7794b77ce11f3c11cd18c9084df7c357e3c7025344fa28aac6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          package.json
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\resources\app.asar.unpacked\node_modules\@atlassian\file-associations\package.json
          • Size 1KB
          • SHA256 3e1f4a2aef2e2cc3925519f72560b31e983f87ed1d7c18a3e12f48fa12577279
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          index.win32.js
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\resources\app.asar.unpacked\node_modules\@atlassian\file-associations\src\index.win32.js
          • Size 2KB
          • SHA256 2b0b76ea813755ba341358e54cc667655fa363aac167f08369811111bd132255
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          applicationMetaIndex.js
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\resources\app.asar.unpacked\node_modules\@atlassian\file-associations\src\util\applicationMetaIndex.js
          • Size 203B
          • SHA256 8763a9bcdea2de688aaec59e2d538b4d003501efb6d5ee1d1b870b952e8e12ba
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          node.napi.node
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\resources\app.asar.unpacked\node_modules\leveldown\prebuilds\win32-ia32\node.napi.node
          • Size 415KB
          • SHA256 17d6904911cc217769b39f6bef05cae9bc13e946d835d4d846d6bb29e59b2384
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          companionConfig.json
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\resources\companionConfig.json
          • Size 157B
          • SHA256 703f112840b1395ca5305be40d9dfc528662b967616d408f0125a7b3b75fcc1a
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          squirrel.exe
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\squirrel.exe
          • Size 2.2MB
          • SHA256 a2ea04bfc8f8d6c6800c90645d6480225352c79f8202443fbfe822fd89cdcc82
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          v8_context_snapshot.bin
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\v8_context_snapshot.bin
          • Size 713KB
          • SHA256 ca1b4bd2e108ddc5b0e96e0c9649a2efe2d8f69ac06f9b2269b6138665837ca9
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          vk_swiftshader.dll
          • Path C:\Users\Admin\AppData\Local\atlassian-desktop-companion\app-3.3.0\vk_swiftshader.dll
          • Size 4.7MB
          • SHA256 b49dc257128daf7ed5d98842837f1a086962e3893009c9359f60e02e92333c6d
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          companion.log
          • Path C:\Users\Admin\AppData\Roaming\Atlassian Companion\companion.log
          • Size 2KB
          • SHA256 234bc863f2d111618c8e1db5587cef78467a57f3af105220ac57efb6d24bb748
          • MD5 SHA1 SHA512 TLSH
          Submit Download

          companion.log
          • Path C:\Users\Admin\AppData\Roaming\Atlassian Companion\companion.log
          • Size 7KB
          • SHA256 851df6069a5ec5996a9b41faf600fb1f2aa56bbc92d3ce1986358395bf58cee6
          • MD5 SHA1 SHA512 SSDEEP TLSH
          Submit Download

          000002.dbtmp
          • Path C:\Users\Admin\AppData\Roaming\Atlassian Companion\settings.cache\000002.dbtmp
          • Size 16B
          • SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
          • MD5 SHA1 SHA512
          Submit Download

          CURRENT
          • Path C:\Users\Admin\AppData\Roaming\Atlassian Companion\settings.cache\CURRENT
          • Size 16B
          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
          • MD5 SHA1 SHA512
          Submit Download

          MANIFEST-000001
          • Path C:\Users\Admin\AppData\Roaming\Atlassian Companion\settings.cache\MANIFEST-000001
          • Size 41B
          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
          • MD5 SHA1 SHA512
          Submit Download

          memory/3676-246-0x0000000012400000-0x0000000012401000-memory.dmp
          Download

          memory/3676-237-0x0000000012400000-0x0000000012401000-memory.dmp
          Download

          memory/3676-235-0x0000000012400000-0x0000000012401000-memory.dmp
          Download

          memory/3676-245-0x0000000012400000-0x0000000012401000-memory.dmp
          Download

          memory/3676-244-0x0000000012400000-0x0000000012401000-memory.dmp
          Download

          memory/3676-243-0x0000000012400000-0x0000000012401000-memory.dmp
          Download

          memory/3676-242-0x0000000012400000-0x0000000012401000-memory.dmp
          Download

          memory/3676-241-0x0000000012400000-0x0000000012401000-memory.dmp
          Download

          memory/3864-10-0x0000000000910000-0x0000000000AE6000-memory.dmp
          Download

          memory/3864-141-0x0000000021A20000-0x0000000021A5E000-memory.dmp
          Download

          memory/3864-142-0x000000001C0F0000-0x000000001C0FE000-memory.dmp
          Download

          memory/4336-135-0x0000000000040000-0x0000000000270000-memory.dmp
          Download

          memory/5224-177-0x0000000002980000-0x00000000029A0000-memory.dmp
          Download