zloader | 3a8318628d0faf7f59bce86b16f2314c76baa3b051c347596b0062fff0038a0d

Resubmissions

01-05-2022 09:04

220501-k11j9shefq 10

01-05-2022 08:46

220501-kps12shdhr 8

Analysis

max time kernel
89s
max time network
246s
platform
windows7_x64
resource
win7-20220414-en
submitted
01-05-2022 09:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cristalix_updater-1.0.8-setup.exe
Size

79.0MB
MD5

992a47967462b1d3025239af460b42cb
SHA1

b334dc686981f931976ecb4528806742ed9b40aa
SHA256

3a8318628d0faf7f59bce86b16f2314c76baa3b051c347596b0062fff0038a0d
SHA512

b612dff0b16d3f3b0d265f5658d28058baa390b2860a3d6067cfb134cda3e2c6fb12e7fac1bac72d3937b8e2b68cc188e617c0d17e5e8c8eab3b0a23bd262d50

Score

10^/10

zloader botnet discovery trojan

Malware Config

Signatures

Zloader, Terdot, DELoader, ZeusSphinx
Zloader is a malware strain that was initially discovered back in August 2015.
trojan botnet zloader

Executes dropped EXE 10 IoCs

Processes:

Update.exeSquirrel.exeCristalix.exeUpdate.exeCristalix.exeCristalix.exeUpdate.exeCristalix.exeCristalix.exeCristalix.exe

pid	process
1656	Update.exe
964	Squirrel.exe
472	Cristalix.exe
816	Update.exe
1292	Cristalix.exe
1948	Cristalix.exe
1520	Update.exe
1288	Cristalix.exe
1264	Cristalix.exe
2016	Cristalix.exe

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

Cristalix.exeCristalix.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-1083475884-596052423-1669053738-1000\Control Panel\International\Geo\Nation	Cristalix.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1083475884-596052423-1669053738-1000\Control Panel\International\Geo\Nation	Cristalix.exe

Loads dropped DLL 26 IoCs

Processes:

cristalix_updater-1.0.8-setup.exeUpdate.exeCristalix.exeCristalix.exeUpdate.exeCristalix.exeCristalix.exeCristalix.exeCristalix.exe

pid	process
1960	cristalix_updater-1.0.8-setup.exe
1656	Update.exe
1656	Update.exe
1656	Update.exe
1656	Update.exe
1656	Update.exe
1656	Update.exe
472	Cristalix.exe
472	Cristalix.exe
1292	Cristalix.exe
816	Update.exe
816	Update.exe
816	Update.exe
816	Update.exe
1292	Cristalix.exe
1292	Cristalix.exe
1292	Cristalix.exe
1948	Cristalix.exe
1948	Cristalix.exe
1288	Cristalix.exe
1264	Cristalix.exe
2016	Cristalix.exe
1288	Cristalix.exe
1288	Cristalix.exe
1288	Cristalix.exe
1288	Cristalix.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082
Suspicious behavior: EnumeratesProcesses 2 IoCs

Processes:

Update.exe

pid process

1656 Update.exe
1656 Update.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

Processes:

Cristalix.exeCristalix.exeUpdate.exe

description	pid	process
Token: SeShutdownPrivilege	472	Cristalix.exe
Token: SeShutdownPrivilege	472	Cristalix.exe
Token: SeShutdownPrivilege	472	Cristalix.exe
Token: SeShutdownPrivilege	472	Cristalix.exe
Token: SeShutdownPrivilege	472	Cristalix.exe
Token: SeShutdownPrivilege	472	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeDebugPrivilege	1520	Update.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe
Token: SeShutdownPrivilege	1948	Cristalix.exe

Suspicious use of FindShellTrayWindow 1 IoCs

Processes:

Update.exe

pid process

1656 Update.exe

Suspicious use of WriteProcessMemory 64 IoCs

Processes:

cristalix_updater-1.0.8-setup.exeUpdate.exeCristalix.exe

description	pid	process	target process
PID 1960 wrote to memory of 1656	1960	cristalix_updater-1.0.8-setup.exe	Update.exe
PID 1960 wrote to memory of 1656	1960	cristalix_updater-1.0.8-setup.exe	Update.exe
PID 1960 wrote to memory of 1656	1960	cristalix_updater-1.0.8-setup.exe	Update.exe
PID 1960 wrote to memory of 1656	1960	cristalix_updater-1.0.8-setup.exe	Update.exe
PID 1960 wrote to memory of 1656	1960	cristalix_updater-1.0.8-setup.exe	Update.exe
PID 1960 wrote to memory of 1656	1960	cristalix_updater-1.0.8-setup.exe	Update.exe
PID 1960 wrote to memory of 1656	1960	cristalix_updater-1.0.8-setup.exe	Update.exe
PID 1656 wrote to memory of 964	1656	Update.exe	Squirrel.exe
PID 1656 wrote to memory of 964	1656	Update.exe	Squirrel.exe
PID 1656 wrote to memory of 964	1656	Update.exe	Squirrel.exe
PID 1656 wrote to memory of 964	1656	Update.exe	Squirrel.exe
PID 1656 wrote to memory of 964	1656	Update.exe	Squirrel.exe
PID 1656 wrote to memory of 964	1656	Update.exe	Squirrel.exe
PID 1656 wrote to memory of 964	1656	Update.exe	Squirrel.exe
PID 1656 wrote to memory of 472	1656	Update.exe	Cristalix.exe
PID 1656 wrote to memory of 472	1656	Update.exe	Cristalix.exe
PID 1656 wrote to memory of 472	1656	Update.exe	Cristalix.exe
PID 1656 wrote to memory of 472	1656	Update.exe	Cristalix.exe
PID 472 wrote to memory of 816	472	Cristalix.exe	Update.exe
PID 472 wrote to memory of 816	472	Cristalix.exe	Update.exe
PID 472 wrote to memory of 816	472	Cristalix.exe	Update.exe
PID 472 wrote to memory of 816	472	Cristalix.exe	Update.exe
PID 472 wrote to memory of 816	472	Cristalix.exe	Update.exe
PID 472 wrote to memory of 816	472	Cristalix.exe	Update.exe
PID 472 wrote to memory of 816	472	Cristalix.exe	Update.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe
PID 472 wrote to memory of 1292	472	Cristalix.exe	Cristalix.exe

C:\Users\Admin\AppData\Local\Temp\cristalix_updater-1.0.8-setup.exe
"C:\Users\Admin\AppData\Local\Temp\cristalix_updater-1.0.8-setup.exe"
1⤵
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:1960

C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
"C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
2⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of FindShellTrayWindow
- Suspicious use of WriteProcessMemory
PID:1656

C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Squirrel.exe
"C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
3⤵
- Executes dropped EXE
PID:964

C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
"C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --squirrel-install 1.0.7
3⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:472

C:\Users\Admin\AppData\Local\cristalix_updater\Update.exe
C:\Users\Admin\AppData\Local\cristalix_updater\Update.exe --createShortcut Cristalix.exe
4⤵
- Executes dropped EXE
- Loads dropped DLL
PID:816

C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
"C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\cristalix_updater" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1084 --field-trial-handle=1152,i,12680316002665717810,8069463203593599487,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
4⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1292

C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
"C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --squirrel-firstrun
3⤵
- Executes dropped EXE
- Checks computer location settings
- Loads dropped DLL
- Suspicious use of AdjustPrivilegeToken
PID:1948

C:\Users\Admin\AppData\Local\cristalix_updater\Update.exe
C:\Users\Admin\AppData\Local\cristalix_updater\Update.exe --checkForUpdate https://storage.c7x.dev/rigb0s/launcher_updater/v1/release/win32
4⤵
- Executes dropped EXE
- Suspicious use of AdjustPrivilegeToken
PID:1520

C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
"C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\cristalix_updater" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=988 --field-trial-handle=1128,i,3052963807279274952,69051471292119149,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
4⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1288

C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
"C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\cristalix_updater" --app-user-model-id=com.squirrel.cristalix_updater.Cristalix --app-path="C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\resources\app.asar" --no-sandbox --no-zygote --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --mojo-platform-channel-handle=1384 --field-trial-handle=1128,i,3052963807279274952,69051471292119149,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
4⤵
- Executes dropped EXE
- Checks computer location settings
- Loads dropped DLL
PID:2016

C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
"C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\cristalix_updater" --mojo-platform-channel-handle=1264 --field-trial-handle=1128,i,3052963807279274952,69051471292119149,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
4⤵
- Executes dropped EXE
- Loads dropped DLL
PID:1264

C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
"C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\cristalix_updater" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=disabled --mojo-platform-channel-handle=1200 --field-trial-handle=1128,i,3052963807279274952,69051471292119149,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
4⤵
PID:1388

C:\Windows\SysWOW64\cmd.exe
C:\Windows\system32\cmd.exe /d /s /c "C:\Users\Admin\.cristalix\.machine\corretto_jvm\bin\java-rmi.exe -jar C:\Users\Admin\.cristalix\.machine\CristalixLauncher.jar"
4⤵
PID:436

C:\Users\Admin\.cristalix\.machine\corretto_jvm\bin\java-rmi.exe
C:\Users\Admin\.cristalix\.machine\corretto_jvm\bin\java-rmi.exe -jar C:\Users\Admin\.cristalix\.machine\CristalixLauncher.jar
5⤵
PID:1376

C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
"C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe"
1⤵
PID:1828

C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
"C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\cristalix_updater" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1004 --field-trial-handle=772,i,2906201727751671456,11581007796157232153,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
2⤵
PID:188

C:\Users\Admin\AppData\Local\cristalix_updater\Cristalix.exe
"C:\Users\Admin\AppData\Local\cristalix_updater\Cristalix.exe"
1⤵
PID:1792

C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
"C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe"
1⤵
PID:692

C:\Users\Admin\AppData\Local\cristalix_updater\Cristalix.exe
"C:\Users\Admin\AppData\Local\cristalix_updater\Cristalix.exe"
1⤵
PID:1396

Network

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES
Filesize
87B

MD5
0a772f07cffa2629a97281662a01fde2

SHA1
f8733cded019579e4c8dd0df1f0e6cff8e05069d

SHA256
7922ea84dfee5b0b44f5cf7686fd57d0aec862f6ba894b27eb04b0c8b37371db

SHA512
efdc8f9f86a0bd5bc0f2b1b8144b5761b409e5a19457b80ef0b1a4577f416a68941e069cfabb0942c94f967aeb28af471928832c7338019780983b098989d2aa

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
Filesize
1.7MB

MD5
c5f6cda4976ae38cd9fba3d1e5ebd244

SHA1
2006c37f01d010963a4331c42e579b87a2d16039

SHA256
dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

SHA512
a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
Filesize
1.7MB

MD5
c5f6cda4976ae38cd9fba3d1e5ebd244

SHA1
2006c37f01d010963a4331c42e579b87a2d16039

SHA256
dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

SHA512
a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif
Filesize
36KB

MD5
f990f0a4129dc1dfafc9a564a06f4cd7

SHA1
89ed80b7f01fe76f062144dba81c63b8ab665186

SHA256
f3fdb765264ef30f3ae9c7f993e7afe84b97b7b5d0802c7c48770d2247d3d3c8

SHA512
812ee63be2825ced202a65a3fba03dc67c93636358fee09d0ccdabef65bd2e30a0ae5d2a77fd54aea2fe02bf7f781280e09a1a812b3085fda43abab70523038e

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\cristalix_updater-1.0.7-full.nupkg
Filesize
78.2MB

MD5
755de7a6b68dd06b1aa2165dcbeacfc7

SHA1
25e2c5821f579e1ac588e4a78f50f614f723f784

SHA256
019dc3fcabf509908d339b058d4300d010a9bb4891ba92630144a074f101b90f

SHA512
f028a77f1e83a005943fb20b78df87b88ade96983f9a6e61f08ab0ab198cb41f8c68d6e2be01930e7b5066feff8bb8e185e65dd41d5ebca55dd81ae5d74002c9

Download Submit
C:\Users\Admin\AppData\Local\SquirrelTemp\setupIcon.ico
Filesize
14KB

MD5
b6b1f4d602483023ebe1dfc3b57d49aa

SHA1
23c29b8277c2d3bf11e40d9d4cf61d6b73ea1595

SHA256
12977d5e1d4daecc7e855ff7ccf3a6c8b1382ed9c1a0729f05197ed10cc43214

SHA512
9d964d59a1f90b211009aa6c2ca65bd66e9989f42b1261706194804bd46f39d579a7165487386fc5939f000d5d18c42a4dfdd6e0bafc1a09902d61e3ec7c2a55

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\Cristalix.exe
Filesize
296KB

MD5
e4288cfe1e38c21cbd5a6104481c9bb6

SHA1
4e19208bb8fdbe915b4ee7f397bde1a8b0a7ce03

SHA256
7f02cacde5dd50b945ab80c60eed70c8a8f0117d25ba397b0421cd22dba943a0

SHA512
1c3d92f79b1a219a6780dc3ef3e260819fdea25f0cd5f86890e04d4227d0da076199bae8d501cd1305f115a84d707a7f7cb985a13d465d6949e1c0892df40fd6

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\SquirrelSetup.log
Filesize
1KB

MD5
fb793afb8a9dd32e11944ac64e071e75

SHA1
fe30a37c577245a15b590464b57bb7b5722ad3c2

SHA256
44e76aa9cf455475c66ccf50e400a2d471486cbbc6df127a1b30f697889bd4eb

SHA512
e06b72ca3f0bddcc88a7839b1e410a774b80d0121d350b1bf867a81df025bf6930214a68ef6886b841b00f440e8ef4c1f31ab96005ff86e8acf17c84161d6497

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\Update.exe
Filesize
1.7MB

MD5
c5f6cda4976ae38cd9fba3d1e5ebd244

SHA1
2006c37f01d010963a4331c42e579b87a2d16039

SHA256
dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

SHA512
a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\Update.exe
Filesize
1.7MB

MD5
c5f6cda4976ae38cd9fba3d1e5ebd244

SHA1
2006c37f01d010963a4331c42e579b87a2d16039

SHA256
dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

SHA512
a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\Update.exe
Filesize
1.7MB

MD5
c5f6cda4976ae38cd9fba3d1e5ebd244

SHA1
2006c37f01d010963a4331c42e579b87a2d16039

SHA256
dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

SHA512
a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
Filesize
103.1MB

MD5
941cf6dde89016e185bd3468ede4997d

SHA1
feeaf224540e3085e6c13c707a717cf475d9fced

SHA256
d521d25e3b8d16d05f4d90bab48b783e2e422974ccb3f3b2f96497934e4beb3b

SHA512
f58866d13bbc62715b0715fc1c304da94eb49ebe58f949068355916675ce8285bd7406008b62956244c028229b7b5b6464c5896aa183877a69bb6c9f5cf66d88

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
Filesize
97.9MB

MD5
a012247c085a8fda1cf47ff1ff42df53

SHA1
c256cf4c67128a82df0384c3d008462195f0071f

SHA256
c6b90c5433299b7e5fdb04d4b13e0cff5bd0a5eeb98c719cc7cafdd955dc1951

SHA512
582e3b402335d68a4dfb45721f7f69fb595a1810de10a012ccbe1a1768dff405a345b450379c5943ad42d1dfd3ddeb2ea8ad58e0cccd17c3d904e0ef4e3ccb52

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
Filesize
103.9MB

MD5
4a861da04b71b877dd94a6b3c6e7d111

SHA1
843fc3a91ab6168a7c5211e759db1c373a1ffa22

SHA256
2f07b831e5399647888e2d77931278bb3137ae7632d23dd743fe4a39e8915937

SHA512
85c39e3ddaf19a1fe92f7c67c3defdcede0c463602553394b9a89d38a1914b00049427760a0ca46b2d24dc42acc12a9a212f9a92f49e476e581ad17fcf1da814

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
Filesize
91.8MB

MD5
be59f3162b2540dcae8b4d55d768ee48

SHA1
cc5cf4f7b8df74d210a312f8a87ea0f591664e63

SHA256
ead9f5029da394300e43e52be8eff3209431cef2a0229937a4d8a5f48dae549f

SHA512
5aa5c1d572e070fd008c3fd499a682afc3b5451c2ddbbf959aa189e25a554dd0c00756e10b2dd190d8b88049e67b3af787c32d3de147a22bebb9167fe471b870

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
Filesize
105.4MB

MD5
9cda7ebe6872fc36782e3e528dd3b311

SHA1
9e57e46da4a2ff66c224c3b4fe8d41dfb02086d3

SHA256
df0879d503b2f9f1d5b6ca495a5f7fcb0fb43411562dff21d807fae7478542a9

SHA512
1d560276174d7625ffe14932a704400af9ae322e76466929b8ba3115213bbcac7b29c042d62f935d3ecdecba0acbea7209c321ed8323aefec5117ec20a88de92

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
Filesize
102.2MB

MD5
4267224fd6a3659ee98ffcf62aff400e

SHA1
1bdb82687d5e0531cd12ab2b3b8bd327d33643c7

SHA256
c84c1a51604706adf9ea8e3b7938bfed9735f692226042bd79b10408aa282c42

SHA512
e76986be045abbafb88209db53a1655de8685c179c7689f0b0e078addfb3ff2666eb0750ef3596f43ce1de43f96a2ec2607b68de767263622f17d73c6f18e024

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
Filesize
122.5MB

MD5
03a6a89b0d05799f48310ed1ee9809ec

SHA1
5851c8cdccffc7834002a3f1d7a8c48059f13266

SHA256
64ab9fe412cfed9897fb86319ad901b5633a52c0874bb378c189522869e3b547

SHA512
c921f634cc0a2e05bd5a4a81e1a6e503e06a8d51b6670524fee15b2afba7a219ccd53b10e8738d943082112c284a77bae4373217f931d5fb55b78a1b23ca8f4d

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\D3DCompiler_47.dll
Filesize
3.5MB

MD5
2f2e363c9a9baa0a9626db374cc4e8a4

SHA1
17f405e81e5fce4c5a02ca049f7bd48b31674c8f

SHA256
2630f4188bd2ea5451ca61d83869bf7068a4f0440401c949a9feb9fb476e15df

SHA512
e668a5d1f5e6f821ebfa0913e201f0dfd8da2f96605701f8db18d14ea4fdeac73aeb9b4fe1f22eaeffcdd1c0f73a6701763727d5b09775666f82b678404e4924

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Squirrel.exe
Filesize
1.7MB

MD5
c5f6cda4976ae38cd9fba3d1e5ebd244

SHA1
2006c37f01d010963a4331c42e579b87a2d16039

SHA256
dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

SHA512
a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\chrome_100_percent.pak
Filesize
145KB

MD5
237ca1be894f5e09fd1ccb934229c33b

SHA1
f0dfcf6db1481315054efb690df282ffe53e9fa1

SHA256
f14362449e2a7c940c095eda9c41aad5f1e0b1a1b21d1dc911558291c0c36dd2

SHA512
1e52782db4a397e27ce92412192e4de6d7398effaf8c7acabc9c06a317c2f69ee5c35da1070eb94020ed89779344b957edb6b40f871b8a15f969ef787fbb2bca

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\chrome_200_percent.pak
Filesize
214KB

MD5
7059af03603f93898f66981feb737064

SHA1
668e41a728d2295a455e5e0f0a8d2fee1781c538

SHA256
04d699cfc36565fa9c06206ba1c0c51474612c8fe481c6fd1807197dc70661e6

SHA512
435329d58b56607a2097d82644be932c60727be4ae95bc2bcf10b747b7658918073319dfa1386b514d84090304a95fcf19d56827c4b196e4d348745565441544

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll
Filesize
2.5MB

MD5
d3ffc36ddd21357320e256314ba0bbed

SHA1
b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

SHA256
226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

SHA512
bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\icudtl.dat
Filesize
9.8MB

MD5
d866d68e4a3eae8cdbfd5fc7a9967d20

SHA1
42a5033597e4be36ccfa16d19890049ba0e25a56

SHA256
c61704cc9cf5797bf32301a2b3312158af3fe86eadc913d937031cf594760c2d

SHA512
4cc04e708b9c3d854147b097e44ff795f956b8a714ab61ddd5434119ade768eb4da4b28938a9477e4cb0d63106cce09fd1ec86f33af1c864f4ea599f8d999b97

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\libegl.dll
Filesize
365KB

MD5
0387de184059e5aed5b19da1450a40ca

SHA1
75d7e35f4091595cfd68525b8300e33e0a2aed63

SHA256
cc3ffc27c7d079f20795c5e49d0dc9361eaa313c0dc1b8d8cb5b35248cd1d314

SHA512
371825236c4195bf07bdfd72ea09df8b5ae64587499a7f6a32a4ef8a645d17f42899903c7e5c7a502b2d7047a24c844950a97f65d4ce0ccf48bce00a762147e9

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\libglesv2.dll
Filesize
6.0MB

MD5
690895b04139b3ba5b423bb54ee0ccb7

SHA1
74892cd69ddcd113e0726fcb581c99c3b75129fe

SHA256
4f40ffe4beaf8add8b349287439a2ed4cdd732b508c9812979091d09a7b20915

SHA512
eafd6b6c51890c7e49591e84b0ad98ec7aafb8333df5c2459317af1101bddd0bd50a86b4f2329ce7f5cf96716cd25bd0a503ea0df8d8d6f9cbfa77b0e1e78785

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\locales\en-US.pak
Filesize
110KB

MD5
5cc884bf0ec1c702240173b35a421d1b

SHA1
19bdfb0b31dc4a75e7c135d1a8ef76f5f6cc3a31

SHA256
9f0c75c84381360677055d6197812c7a6c42dbfc6134eb8212d8a60ed1ca1601

SHA512
48772f50f6b0d846084a0cfb0d6433f2fbf73677b557b022d0d73d04790636c0c40ed873c32fd037013e943fb7c24816efdcde38429520895c00c2d85a17ea5c

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\resources.pak
Filesize
4.9MB

MD5
39933b34aac7271db1be82d4bd9f50e6

SHA1
959b95de58c4b362e6695130545de86a08ae7b62

SHA256
38bb20864e6bf51708caf55a886e79070adb416a55e8fb3ab7901e8a03cd1ad7

SHA512
3ec3877b4f1e3dd50a943e58271467de26b3d6fbdd49b5a229578f16ac5beaffc6e4d9ea69ba23abcd630dcb998fe2588fe210dd84d3473a459462e50655eff5

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\resources\app.asar
Filesize
5.6MB

MD5
a261f0a6f53189360a3bcb7f0c4b8f9a

SHA1
15153a90286104ad998a063edd499fbd84986aac

SHA256
9f4a6b1d7d61f16b1574d230f2e53051994f01cd86f06c455b7362346ebca1dd

SHA512
7472053be9d5128f8b8ec46131c5f609d20f64b181fb9986c1cecbf41643bae0e832622c9b867d8ec4f0b020a8d0aa43559452bb6a5dd3d2931b0613e4481333

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\squirrel.exe
Filesize
1.7MB

MD5
c5f6cda4976ae38cd9fba3d1e5ebd244

SHA1
2006c37f01d010963a4331c42e579b87a2d16039

SHA256
dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

SHA512
a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\v8_context_snapshot.bin
Filesize
592KB

MD5
74b5a5a3fe1bc0f54d065027db8f702b

SHA1
c279ab276ab96f6449c67e7abbeebf9f088b6b52

SHA256
d7d7b42c11b1301f9f8add3a5da03d948b8800164492b595c8df97b68657620e

SHA512
2362e93536f4f7edbfc2a518470d517f800bdc82baa90d91a8d0d2baba882ff8493c90c24e2508be51ebe1b420386cabda8c7aa7fbb16676703cd1475bd33f7e

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\vulkan-1.dll
Filesize
741KB

MD5
eeb339d04719e60ee8efd8830274ee76

SHA1
f49d308fd02cb7899930d449cfda176d2b2e5d1a

SHA256
6c3c0e85e75bd9b02ed304bdfdc6282297a9736ceae926e6fcae0b426d3d6620

SHA512
f19cca74edf6ae8c10dff0e6f2fbd61ec680411b3fffe5dc2bcfd94848a0ab997dc5d8f47412e7d516b8f334163fcd3714425219ea72ebcc2429589b2fbbdb07

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\packages\RELEASES
Filesize
87B

MD5
0a772f07cffa2629a97281662a01fde2

SHA1
f8733cded019579e4c8dd0df1f0e6cff8e05069d

SHA256
7922ea84dfee5b0b44f5cf7686fd57d0aec862f6ba894b27eb04b0c8b37371db

SHA512
efdc8f9f86a0bd5bc0f2b1b8144b5761b409e5a19457b80ef0b1a4577f416a68941e069cfabb0942c94f967aeb28af471928832c7338019780983b098989d2aa

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\packages\RELEASES
Filesize
87B

MD5
0a772f07cffa2629a97281662a01fde2

SHA1
f8733cded019579e4c8dd0df1f0e6cff8e05069d

SHA256
7922ea84dfee5b0b44f5cf7686fd57d0aec862f6ba894b27eb04b0c8b37371db

SHA512
efdc8f9f86a0bd5bc0f2b1b8144b5761b409e5a19457b80ef0b1a4577f416a68941e069cfabb0942c94f967aeb28af471928832c7338019780983b098989d2aa

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\packages\cristalix_updater-1.0.7-full.nupkg
Filesize
78.2MB

MD5
755de7a6b68dd06b1aa2165dcbeacfc7

SHA1
25e2c5821f579e1ac588e4a78f50f614f723f784

SHA256
019dc3fcabf509908d339b058d4300d010a9bb4891ba92630144a074f101b90f

SHA512
f028a77f1e83a005943fb20b78df87b88ade96983f9a6e61f08ab0ab198cb41f8c68d6e2be01930e7b5066feff8bb8e185e65dd41d5ebca55dd81ae5d74002c9

Download Submit
C:\Users\Admin\AppData\Local\cristalix_updater\update.exe
Filesize
1.7MB

MD5
c5f6cda4976ae38cd9fba3d1e5ebd244

SHA1
2006c37f01d010963a4331c42e579b87a2d16039

SHA256
dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

SHA512
a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

Download Submit
C:\Users\Admin\AppData\Roaming\cristalix_updater\Local State
Filesize
389B

MD5
b74b55dd006a6c4eb351540f34edeea5

SHA1
5947ed9395610475067a132a970fdcb33c11bbb7

SHA256
0fbf856f8d65b15e47a9c1c8b2fd87d5b6aede53a98aa892abea6d5d29b24856

SHA512
2501026968161b0ff2803a6b5d431b6cad222244df944a25c4f16fc30896aa0de9579a03002ea03e450e606c42a63174f503b15c4078485d487bae4b8e81d7c1

Download Submit
\Users\Admin\.cristalix\.machine\corretto_jvm\bin\java-rmi.exe
Filesize
19KB

MD5
2627f1822c40aba6a9aafa280e64a348

SHA1
0e9d9e0d4d5100ceb3c42907d7663a99f0679667

SHA256
02fa1654027e895500784d5152e2b021bb11633ca308808f10dcdcfa69220815

SHA512
956ae7baff28c69dd09157a192a31bcb0f081dc1d72c262f89e6be11e862eaa8b703338327f05b2366ff8f5238a5328fc749896702025bd91c257fc27d6df987

Download Submit
\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
Filesize
1.7MB

MD5
c5f6cda4976ae38cd9fba3d1e5ebd244

SHA1
2006c37f01d010963a4331c42e579b87a2d16039

SHA256
dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

SHA512
a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\Cristalix.exe
Filesize
296KB

MD5
e4288cfe1e38c21cbd5a6104481c9bb6

SHA1
4e19208bb8fdbe915b4ee7f397bde1a8b0a7ce03

SHA256
7f02cacde5dd50b945ab80c60eed70c8a8f0117d25ba397b0421cd22dba943a0

SHA512
1c3d92f79b1a219a6780dc3ef3e260819fdea25f0cd5f86890e04d4227d0da076199bae8d501cd1305f115a84d707a7f7cb985a13d465d6949e1c0892df40fd6

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\Cristalix.exe
Filesize
296KB

MD5
e4288cfe1e38c21cbd5a6104481c9bb6

SHA1
4e19208bb8fdbe915b4ee7f397bde1a8b0a7ce03

SHA256
7f02cacde5dd50b945ab80c60eed70c8a8f0117d25ba397b0421cd22dba943a0

SHA512
1c3d92f79b1a219a6780dc3ef3e260819fdea25f0cd5f86890e04d4227d0da076199bae8d501cd1305f115a84d707a7f7cb985a13d465d6949e1c0892df40fd6

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\Update.exe
Filesize
1.7MB

MD5
c5f6cda4976ae38cd9fba3d1e5ebd244

SHA1
2006c37f01d010963a4331c42e579b87a2d16039

SHA256
dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

SHA512
a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\Update.exe
Filesize
1.7MB

MD5
c5f6cda4976ae38cd9fba3d1e5ebd244

SHA1
2006c37f01d010963a4331c42e579b87a2d16039

SHA256
dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

SHA512
a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
Filesize
99.2MB

MD5
33affc5f863098389964b579e54e2394

SHA1
439629e9e7f515a83e7adca72fff966adc7ccbbe

SHA256
1d34e28019f65865e8b66a49752b8b535b765f855c3a8a2c3f78352bcf082628

SHA512
e13022f94c2b2dfd482cac6d32dedf1c50fbea37c0bc866d1e8a915eb948b4b4155e16ba15376716f50dbed3ab73b2825401ce91300c15a470a7e00f005188f7

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
Filesize
112.6MB

MD5
1de4ea4905e08cfa19186260790f618e

SHA1
795a7d95b564cd39aa12ca74541481c52e2ab048

SHA256
bc696ee4f64e28ebde96112c65128b4d6134c07640ce6956f2c80f6731f45ee6

SHA512
f7bedc14d1a84f8296576989bb843dd8c6efa97cdb467348d62c32eec6b6010cdc9c03a99752b38d07f031c4037fa9c885e38306f59e46a4e8c216eece39d87c

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
Filesize
122.5MB

MD5
03a6a89b0d05799f48310ed1ee9809ec

SHA1
5851c8cdccffc7834002a3f1d7a8c48059f13266

SHA256
64ab9fe412cfed9897fb86319ad901b5633a52c0874bb378c189522869e3b547

SHA512
c921f634cc0a2e05bd5a4a81e1a6e503e06a8d51b6670524fee15b2afba7a219ccd53b10e8738d943082112c284a77bae4373217f931d5fb55b78a1b23ca8f4d

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
Filesize
122.5MB

MD5
03a6a89b0d05799f48310ed1ee9809ec

SHA1
5851c8cdccffc7834002a3f1d7a8c48059f13266

SHA256
64ab9fe412cfed9897fb86319ad901b5633a52c0874bb378c189522869e3b547

SHA512
c921f634cc0a2e05bd5a4a81e1a6e503e06a8d51b6670524fee15b2afba7a219ccd53b10e8738d943082112c284a77bae4373217f931d5fb55b78a1b23ca8f4d

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
Filesize
122.5MB

MD5
03a6a89b0d05799f48310ed1ee9809ec

SHA1
5851c8cdccffc7834002a3f1d7a8c48059f13266

SHA256
64ab9fe412cfed9897fb86319ad901b5633a52c0874bb378c189522869e3b547

SHA512
c921f634cc0a2e05bd5a4a81e1a6e503e06a8d51b6670524fee15b2afba7a219ccd53b10e8738d943082112c284a77bae4373217f931d5fb55b78a1b23ca8f4d

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\d3dcompiler_47.dll
Filesize
3.5MB

MD5
2f2e363c9a9baa0a9626db374cc4e8a4

SHA1
17f405e81e5fce4c5a02ca049f7bd48b31674c8f

SHA256
2630f4188bd2ea5451ca61d83869bf7068a4f0440401c949a9feb9fb476e15df

SHA512
e668a5d1f5e6f821ebfa0913e201f0dfd8da2f96605701f8db18d14ea4fdeac73aeb9b4fe1f22eaeffcdd1c0f73a6701763727d5b09775666f82b678404e4924

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\d3dcompiler_47.dll
Filesize
3.5MB

MD5
2f2e363c9a9baa0a9626db374cc4e8a4

SHA1
17f405e81e5fce4c5a02ca049f7bd48b31674c8f

SHA256
2630f4188bd2ea5451ca61d83869bf7068a4f0440401c949a9feb9fb476e15df

SHA512
e668a5d1f5e6f821ebfa0913e201f0dfd8da2f96605701f8db18d14ea4fdeac73aeb9b4fe1f22eaeffcdd1c0f73a6701763727d5b09775666f82b678404e4924

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll
Filesize
2.5MB

MD5
d3ffc36ddd21357320e256314ba0bbed

SHA1
b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

SHA256
226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

SHA512
bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll
Filesize
2.5MB

MD5
d3ffc36ddd21357320e256314ba0bbed

SHA1
b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

SHA256
226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

SHA512
bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll
Filesize
2.5MB

MD5
d3ffc36ddd21357320e256314ba0bbed

SHA1
b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

SHA256
226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

SHA512
bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll
Filesize
2.5MB

MD5
d3ffc36ddd21357320e256314ba0bbed

SHA1
b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

SHA256
226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

SHA512
bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll
Filesize
2.5MB

MD5
d3ffc36ddd21357320e256314ba0bbed

SHA1
b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

SHA256
226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

SHA512
bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll
Filesize
2.5MB

MD5
d3ffc36ddd21357320e256314ba0bbed

SHA1
b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

SHA256
226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

SHA512
bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\libEGL.dll
Filesize
365KB

MD5
0387de184059e5aed5b19da1450a40ca

SHA1
75d7e35f4091595cfd68525b8300e33e0a2aed63

SHA256
cc3ffc27c7d079f20795c5e49d0dc9361eaa313c0dc1b8d8cb5b35248cd1d314

SHA512
371825236c4195bf07bdfd72ea09df8b5ae64587499a7f6a32a4ef8a645d17f42899903c7e5c7a502b2d7047a24c844950a97f65d4ce0ccf48bce00a762147e9

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\libEGL.dll
Filesize
365KB

MD5
0387de184059e5aed5b19da1450a40ca

SHA1
75d7e35f4091595cfd68525b8300e33e0a2aed63

SHA256
cc3ffc27c7d079f20795c5e49d0dc9361eaa313c0dc1b8d8cb5b35248cd1d314

SHA512
371825236c4195bf07bdfd72ea09df8b5ae64587499a7f6a32a4ef8a645d17f42899903c7e5c7a502b2d7047a24c844950a97f65d4ce0ccf48bce00a762147e9

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\libGLESv2.dll
Filesize
6.0MB

MD5
690895b04139b3ba5b423bb54ee0ccb7

SHA1
74892cd69ddcd113e0726fcb581c99c3b75129fe

SHA256
4f40ffe4beaf8add8b349287439a2ed4cdd732b508c9812979091d09a7b20915

SHA512
eafd6b6c51890c7e49591e84b0ad98ec7aafb8333df5c2459317af1101bddd0bd50a86b4f2329ce7f5cf96716cd25bd0a503ea0df8d8d6f9cbfa77b0e1e78785

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\libGLESv2.dll
Filesize
6.0MB

MD5
690895b04139b3ba5b423bb54ee0ccb7

SHA1
74892cd69ddcd113e0726fcb581c99c3b75129fe

SHA256
4f40ffe4beaf8add8b349287439a2ed4cdd732b508c9812979091d09a7b20915

SHA512
eafd6b6c51890c7e49591e84b0ad98ec7aafb8333df5c2459317af1101bddd0bd50a86b4f2329ce7f5cf96716cd25bd0a503ea0df8d8d6f9cbfa77b0e1e78785

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\squirrel.exe
Filesize
1.7MB

MD5
c5f6cda4976ae38cd9fba3d1e5ebd244

SHA1
2006c37f01d010963a4331c42e579b87a2d16039

SHA256
dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

SHA512
a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\squirrel.exe
Filesize
1.7MB

MD5
c5f6cda4976ae38cd9fba3d1e5ebd244

SHA1
2006c37f01d010963a4331c42e579b87a2d16039

SHA256
dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

SHA512
a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\squirrel.exe
Filesize
1.7MB

MD5
c5f6cda4976ae38cd9fba3d1e5ebd244

SHA1
2006c37f01d010963a4331c42e579b87a2d16039

SHA256
dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

SHA512
a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

Download Submit
\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\vulkan-1.dll
Filesize
741KB

MD5
eeb339d04719e60ee8efd8830274ee76

SHA1
f49d308fd02cb7899930d449cfda176d2b2e5d1a

SHA256
6c3c0e85e75bd9b02ed304bdfdc6282297a9736ceae926e6fcae0b426d3d6620

SHA512
f19cca74edf6ae8c10dff0e6f2fbd61ec680411b3fffe5dc2bcfd94848a0ab997dc5d8f47412e7d516b8f334163fcd3714425219ea72ebcc2429589b2fbbdb07

Download Submit
memory/436-209-0x0000000000000000-mapping.dmp

Download
memory/472-75-0x0000000000000000-mapping.dmp

Download
memory/692-241-0x0000000000000000-mapping.dmp

Download
memory/816-88-0x00000000002F0000-0x00000000004B4000-memory.dmp

Filesize
1.8MB

Download
memory/816-86-0x0000000000000000-mapping.dmp

Download
memory/964-68-0x0000000000FE0000-0x00000000011A4000-memory.dmp

Filesize
1.8MB

Download
memory/964-65-0x0000000000000000-mapping.dmp

Download
memory/1264-188-0x0000000000000000-mapping.dmp

Download
memory/1288-186-0x0000000000000000-mapping.dmp

Download
memory/1292-125-0x0000000000000000-mapping.dmp

Download
memory/1376-212-0x000007FEFB871000-0x000007FEFB873000-memory.dmp

Filesize
8KB

Download
memory/1376-227-0x0000000002350000-0x0000000003350000-memory.dmp

Filesize
16.0MB

Download
memory/1376-251-0x0000000002350000-0x0000000003350000-memory.dmp

Filesize
16.0MB

Download
memory/1376-247-0x0000000002350000-0x0000000003350000-memory.dmp

Filesize
16.0MB

Download
memory/1376-243-0x0000000002350000-0x0000000003350000-memory.dmp

Filesize
16.0MB

Download
memory/1376-211-0x0000000000000000-mapping.dmp

Download
memory/1376-240-0x0000000002350000-0x0000000003350000-memory.dmp

Filesize
16.0MB

Download
memory/1376-234-0x0000000002350000-0x0000000003350000-memory.dmp

Filesize
16.0MB

Download
memory/1376-215-0x0000000002350000-0x0000000003350000-memory.dmp

Filesize
16.0MB

Download
memory/1520-157-0x0000000001280000-0x0000000001444000-memory.dmp

Filesize
1.8MB

Download
memory/1520-153-0x0000000000000000-mapping.dmp

Download
memory/1656-59-0x0000000001340000-0x0000000001504000-memory.dmp

Filesize
1.8MB

Download
memory/1656-56-0x0000000000000000-mapping.dmp

Download
memory/1828-229-0x0000000000000000-mapping.dmp

Download
memory/1948-143-0x0000000000000000-mapping.dmp

Download
memory/1960-54-0x0000000075A61000-0x0000000075A63000-memory.dmp

Filesize
8KB

Download
memory/2016-191-0x0000000000000000-mapping.dmp

Download