Resubmissions

01-05-2022 09:04

220501-k11j9shefq 10

01-05-2022 08:46

220501-kps12shdhr 8

Analysis

  • max time kernel
    39s
  • max time network
    135s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220414-en
  • submitted
    01-05-2022 08:46

General

  • Target

    cristalix_updater-1.0.8-setup.exe

  • Size

    79.0MB

  • MD5

    992a47967462b1d3025239af460b42cb

  • SHA1

    b334dc686981f931976ecb4528806742ed9b40aa

  • SHA256

    3a8318628d0faf7f59bce86b16f2314c76baa3b051c347596b0062fff0038a0d

  • SHA512

    b612dff0b16d3f3b0d265f5658d28058baa390b2860a3d6067cfb134cda3e2c6fb12e7fac1bac72d3937b8e2b68cc188e617c0d17e5e8c8eab3b0a23bd262d50

Score
8/10

Malware Config

Signatures

  • Executes dropped EXE 13 IoCs
  • Checks computer location settings 2 TTPs 3 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL 22 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 45 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\cristalix_updater-1.0.8-setup.exe
    "C:\Users\Admin\AppData\Local\Temp\cristalix_updater-1.0.8-setup.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:3784
    • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
      "C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe" --install .
      2⤵
      • Executes dropped EXE
      • Checks computer location settings
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1616
      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Squirrel.exe
        "C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Squirrel.exe" --updateSelf=C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe
        3⤵
        • Executes dropped EXE
        PID:4744
      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
        "C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --squirrel-install 1.0.7
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of WriteProcessMemory
        PID:4692
        • C:\Users\Admin\AppData\Local\cristalix_updater\Update.exe
          C:\Users\Admin\AppData\Local\cristalix_updater\Update.exe --createShortcut Cristalix.exe
          4⤵
          • Executes dropped EXE
          PID:4944
        • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
          "C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\cristalix_updater" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1728 --field-trial-handle=1768,i,1236381915618457575,12114212728122949835,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:228
        • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
          "C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\cristalix_updater" --mojo-platform-channel-handle=1120 --field-trial-handle=1768,i,1236381915618457575,12114212728122949835,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:688
        • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
          "C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\cristalix_updater" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1084 --field-trial-handle=1768,i,1236381915618457575,12114212728122949835,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1100
      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
        "C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --squirrel-firstrun
        3⤵
        • Executes dropped EXE
        • Checks computer location settings
        • Loads dropped DLL
        • Suspicious use of AdjustPrivilegeToken
        PID:3232
        • C:\Users\Admin\AppData\Local\cristalix_updater\Update.exe
          C:\Users\Admin\AppData\Local\cristalix_updater\Update.exe --checkForUpdate https://storage.c7x.dev/rigb0s/launcher_updater/v1/release/win32
          4⤵
          • Executes dropped EXE
          • Suspicious use of AdjustPrivilegeToken
          PID:3968
        • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
          "C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\cristalix_updater" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1520 --field-trial-handle=1720,i,14553018414663607840,8601613002896934681,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2416
        • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
          "C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\cristalix_updater" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=disabled --mojo-platform-channel-handle=1820 --field-trial-handle=1720,i,14553018414663607840,8601613002896934681,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:920
        • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
          "C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\cristalix_updater" --app-user-model-id=com.squirrel.cristalix_updater.Cristalix --app-path="C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\resources\app.asar" --no-sandbox --no-zygote --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=4 --mojo-platform-channel-handle=2324 --field-trial-handle=1720,i,14553018414663607840,8601613002896934681,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
          4⤵
          • Executes dropped EXE
          • Checks computer location settings
          • Loads dropped DLL
          PID:1604
        • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe
          "C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\cristalix_updater" --mojo-platform-channel-handle=2100 --field-trial-handle=1720,i,14553018414663607840,8601613002896934681,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:4540
        • C:\Windows\SysWOW64\cmd.exe
          C:\Windows\system32\cmd.exe /d /s /c "C:\Users\Admin\.cristalix\.machine\corretto_jvm\bin\java-rmi.exe -jar C:\Users\Admin\.cristalix\.machine\CristalixLauncher.jar"
          4⤵
            PID:228
            • C:\Users\Admin\.cristalix\.machine\corretto_jvm\bin\java-rmi.exe
              C:\Users\Admin\.cristalix\.machine\corretto_jvm\bin\java-rmi.exe -jar C:\Users\Admin\.cristalix\.machine\CristalixLauncher.jar
              5⤵
                PID:3176

      Network

      MITRE ATT&CK Enterprise v6

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\.cristalix\.machine\corretto_jvm\bin\java-rmi.exe

        Filesize

        19KB

        MD5

        2627f1822c40aba6a9aafa280e64a348

        SHA1

        0e9d9e0d4d5100ceb3c42907d7663a99f0679667

        SHA256

        02fa1654027e895500784d5152e2b021bb11633ca308808f10dcdcfa69220815

        SHA512

        956ae7baff28c69dd09157a192a31bcb0f081dc1d72c262f89e6be11e862eaa8b703338327f05b2366ff8f5238a5328fc749896702025bd91c257fc27d6df987

      • C:\Users\Admin\AppData\Local\Microsoft\CLR_v4.0_32\UsageLogs\Update.exe.log

        Filesize

        1KB

        MD5

        6eb96c16eb677b6a8c1df381a0497a1a

        SHA1

        d4596baadc2d4bee89d57e1718ab30c0b7d563ec

        SHA256

        e96331392d474ca0fbc51036c7d55aa3a37aae6b074d50ebd106a277b0cb4097

        SHA512

        3d472d56ceb73a3df3f65eff6af088b3a81ab553153cbda925091500a6543cf83e84872f2bc81f218deddecd8f3c9868d784c2fe08ece95f915138becaecfb0b

      • C:\Users\Admin\AppData\Local\SquirrelTemp\RELEASES

        Filesize

        87B

        MD5

        0a772f07cffa2629a97281662a01fde2

        SHA1

        f8733cded019579e4c8dd0df1f0e6cff8e05069d

        SHA256

        7922ea84dfee5b0b44f5cf7686fd57d0aec862f6ba894b27eb04b0c8b37371db

        SHA512

        efdc8f9f86a0bd5bc0f2b1b8144b5761b409e5a19457b80ef0b1a4577f416a68941e069cfabb0942c94f967aeb28af471928832c7338019780983b098989d2aa

      • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe

        Filesize

        1.7MB

        MD5

        c5f6cda4976ae38cd9fba3d1e5ebd244

        SHA1

        2006c37f01d010963a4331c42e579b87a2d16039

        SHA256

        dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

        SHA512

        a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

      • C:\Users\Admin\AppData\Local\SquirrelTemp\Update.exe

        Filesize

        1.7MB

        MD5

        c5f6cda4976ae38cd9fba3d1e5ebd244

        SHA1

        2006c37f01d010963a4331c42e579b87a2d16039

        SHA256

        dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

        SHA512

        a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

      • C:\Users\Admin\AppData\Local\SquirrelTemp\background.gif

        Filesize

        36KB

        MD5

        f990f0a4129dc1dfafc9a564a06f4cd7

        SHA1

        89ed80b7f01fe76f062144dba81c63b8ab665186

        SHA256

        f3fdb765264ef30f3ae9c7f993e7afe84b97b7b5d0802c7c48770d2247d3d3c8

        SHA512

        812ee63be2825ced202a65a3fba03dc67c93636358fee09d0ccdabef65bd2e30a0ae5d2a77fd54aea2fe02bf7f781280e09a1a812b3085fda43abab70523038e

      • C:\Users\Admin\AppData\Local\SquirrelTemp\cristalix_updater-1.0.7-full.nupkg

        Filesize

        78.2MB

        MD5

        755de7a6b68dd06b1aa2165dcbeacfc7

        SHA1

        25e2c5821f579e1ac588e4a78f50f614f723f784

        SHA256

        019dc3fcabf509908d339b058d4300d010a9bb4891ba92630144a074f101b90f

        SHA512

        f028a77f1e83a005943fb20b78df87b88ade96983f9a6e61f08ab0ab198cb41f8c68d6e2be01930e7b5066feff8bb8e185e65dd41d5ebca55dd81ae5d74002c9

      • C:\Users\Admin\AppData\Local\SquirrelTemp\setupIcon.ico

        Filesize

        14KB

        MD5

        b6b1f4d602483023ebe1dfc3b57d49aa

        SHA1

        23c29b8277c2d3bf11e40d9d4cf61d6b73ea1595

        SHA256

        12977d5e1d4daecc7e855ff7ccf3a6c8b1382ed9c1a0729f05197ed10cc43214

        SHA512

        9d964d59a1f90b211009aa6c2ca65bd66e9989f42b1261706194804bd46f39d579a7165487386fc5939f000d5d18c42a4dfdd6e0bafc1a09902d61e3ec7c2a55

      • C:\Users\Admin\AppData\Local\cristalix_updater\Cristalix.exe

        Filesize

        296KB

        MD5

        e4288cfe1e38c21cbd5a6104481c9bb6

        SHA1

        4e19208bb8fdbe915b4ee7f397bde1a8b0a7ce03

        SHA256

        7f02cacde5dd50b945ab80c60eed70c8a8f0117d25ba397b0421cd22dba943a0

        SHA512

        1c3d92f79b1a219a6780dc3ef3e260819fdea25f0cd5f86890e04d4227d0da076199bae8d501cd1305f115a84d707a7f7cb985a13d465d6949e1c0892df40fd6

      • C:\Users\Admin\AppData\Local\cristalix_updater\SquirrelSetup.log

        Filesize

        1KB

        MD5

        1b450a336ed054d27aa5d0f89bccd859

        SHA1

        68ae2718162d92da80c7ccdbe5cc0c96bf6808a4

        SHA256

        c283b58a453870753cf673daba1be5649e092676626d7e2e6bf94bd7a4472d56

        SHA512

        4742082d668497650dec674909c921309a8341e19e162c2b396b214548464824661ba5e5919eb9b141fad2762831109d40c4a4fb44e14af79e4eebbb89275d1d

      • C:\Users\Admin\AppData\Local\cristalix_updater\Update.exe

        Filesize

        1.7MB

        MD5

        c5f6cda4976ae38cd9fba3d1e5ebd244

        SHA1

        2006c37f01d010963a4331c42e579b87a2d16039

        SHA256

        dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

        SHA512

        a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

      • C:\Users\Admin\AppData\Local\cristalix_updater\Update.exe

        Filesize

        1.7MB

        MD5

        c5f6cda4976ae38cd9fba3d1e5ebd244

        SHA1

        2006c37f01d010963a4331c42e579b87a2d16039

        SHA256

        dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

        SHA512

        a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe

        Filesize

        122.5MB

        MD5

        03a6a89b0d05799f48310ed1ee9809ec

        SHA1

        5851c8cdccffc7834002a3f1d7a8c48059f13266

        SHA256

        64ab9fe412cfed9897fb86319ad901b5633a52c0874bb378c189522869e3b547

        SHA512

        c921f634cc0a2e05bd5a4a81e1a6e503e06a8d51b6670524fee15b2afba7a219ccd53b10e8738d943082112c284a77bae4373217f931d5fb55b78a1b23ca8f4d

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe

        Filesize

        122.5MB

        MD5

        03a6a89b0d05799f48310ed1ee9809ec

        SHA1

        5851c8cdccffc7834002a3f1d7a8c48059f13266

        SHA256

        64ab9fe412cfed9897fb86319ad901b5633a52c0874bb378c189522869e3b547

        SHA512

        c921f634cc0a2e05bd5a4a81e1a6e503e06a8d51b6670524fee15b2afba7a219ccd53b10e8738d943082112c284a77bae4373217f931d5fb55b78a1b23ca8f4d

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe

        Filesize

        122.5MB

        MD5

        03a6a89b0d05799f48310ed1ee9809ec

        SHA1

        5851c8cdccffc7834002a3f1d7a8c48059f13266

        SHA256

        64ab9fe412cfed9897fb86319ad901b5633a52c0874bb378c189522869e3b547

        SHA512

        c921f634cc0a2e05bd5a4a81e1a6e503e06a8d51b6670524fee15b2afba7a219ccd53b10e8738d943082112c284a77bae4373217f931d5fb55b78a1b23ca8f4d

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe

        Filesize

        122.5MB

        MD5

        03a6a89b0d05799f48310ed1ee9809ec

        SHA1

        5851c8cdccffc7834002a3f1d7a8c48059f13266

        SHA256

        64ab9fe412cfed9897fb86319ad901b5633a52c0874bb378c189522869e3b547

        SHA512

        c921f634cc0a2e05bd5a4a81e1a6e503e06a8d51b6670524fee15b2afba7a219ccd53b10e8738d943082112c284a77bae4373217f931d5fb55b78a1b23ca8f4d

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe

        Filesize

        122.5MB

        MD5

        03a6a89b0d05799f48310ed1ee9809ec

        SHA1

        5851c8cdccffc7834002a3f1d7a8c48059f13266

        SHA256

        64ab9fe412cfed9897fb86319ad901b5633a52c0874bb378c189522869e3b547

        SHA512

        c921f634cc0a2e05bd5a4a81e1a6e503e06a8d51b6670524fee15b2afba7a219ccd53b10e8738d943082112c284a77bae4373217f931d5fb55b78a1b23ca8f4d

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe

        Filesize

        122.5MB

        MD5

        03a6a89b0d05799f48310ed1ee9809ec

        SHA1

        5851c8cdccffc7834002a3f1d7a8c48059f13266

        SHA256

        64ab9fe412cfed9897fb86319ad901b5633a52c0874bb378c189522869e3b547

        SHA512

        c921f634cc0a2e05bd5a4a81e1a6e503e06a8d51b6670524fee15b2afba7a219ccd53b10e8738d943082112c284a77bae4373217f931d5fb55b78a1b23ca8f4d

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe

        Filesize

        122.5MB

        MD5

        03a6a89b0d05799f48310ed1ee9809ec

        SHA1

        5851c8cdccffc7834002a3f1d7a8c48059f13266

        SHA256

        64ab9fe412cfed9897fb86319ad901b5633a52c0874bb378c189522869e3b547

        SHA512

        c921f634cc0a2e05bd5a4a81e1a6e503e06a8d51b6670524fee15b2afba7a219ccd53b10e8738d943082112c284a77bae4373217f931d5fb55b78a1b23ca8f4d

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe

        Filesize

        122.5MB

        MD5

        03a6a89b0d05799f48310ed1ee9809ec

        SHA1

        5851c8cdccffc7834002a3f1d7a8c48059f13266

        SHA256

        64ab9fe412cfed9897fb86319ad901b5633a52c0874bb378c189522869e3b547

        SHA512

        c921f634cc0a2e05bd5a4a81e1a6e503e06a8d51b6670524fee15b2afba7a219ccd53b10e8738d943082112c284a77bae4373217f931d5fb55b78a1b23ca8f4d

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe

        Filesize

        122.5MB

        MD5

        03a6a89b0d05799f48310ed1ee9809ec

        SHA1

        5851c8cdccffc7834002a3f1d7a8c48059f13266

        SHA256

        64ab9fe412cfed9897fb86319ad901b5633a52c0874bb378c189522869e3b547

        SHA512

        c921f634cc0a2e05bd5a4a81e1a6e503e06a8d51b6670524fee15b2afba7a219ccd53b10e8738d943082112c284a77bae4373217f931d5fb55b78a1b23ca8f4d

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Cristalix.exe

        Filesize

        122.5MB

        MD5

        03a6a89b0d05799f48310ed1ee9809ec

        SHA1

        5851c8cdccffc7834002a3f1d7a8c48059f13266

        SHA256

        64ab9fe412cfed9897fb86319ad901b5633a52c0874bb378c189522869e3b547

        SHA512

        c921f634cc0a2e05bd5a4a81e1a6e503e06a8d51b6670524fee15b2afba7a219ccd53b10e8738d943082112c284a77bae4373217f931d5fb55b78a1b23ca8f4d

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\D3DCompiler_47.dll

        Filesize

        3.5MB

        MD5

        2f2e363c9a9baa0a9626db374cc4e8a4

        SHA1

        17f405e81e5fce4c5a02ca049f7bd48b31674c8f

        SHA256

        2630f4188bd2ea5451ca61d83869bf7068a4f0440401c949a9feb9fb476e15df

        SHA512

        e668a5d1f5e6f821ebfa0913e201f0dfd8da2f96605701f8db18d14ea4fdeac73aeb9b4fe1f22eaeffcdd1c0f73a6701763727d5b09775666f82b678404e4924

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\Squirrel.exe

        Filesize

        1.7MB

        MD5

        c5f6cda4976ae38cd9fba3d1e5ebd244

        SHA1

        2006c37f01d010963a4331c42e579b87a2d16039

        SHA256

        dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

        SHA512

        a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\chrome_100_percent.pak

        Filesize

        145KB

        MD5

        237ca1be894f5e09fd1ccb934229c33b

        SHA1

        f0dfcf6db1481315054efb690df282ffe53e9fa1

        SHA256

        f14362449e2a7c940c095eda9c41aad5f1e0b1a1b21d1dc911558291c0c36dd2

        SHA512

        1e52782db4a397e27ce92412192e4de6d7398effaf8c7acabc9c06a317c2f69ee5c35da1070eb94020ed89779344b957edb6b40f871b8a15f969ef787fbb2bca

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\chrome_200_percent.pak

        Filesize

        214KB

        MD5

        7059af03603f93898f66981feb737064

        SHA1

        668e41a728d2295a455e5e0f0a8d2fee1781c538

        SHA256

        04d699cfc36565fa9c06206ba1c0c51474612c8fe481c6fd1807197dc70661e6

        SHA512

        435329d58b56607a2097d82644be932c60727be4ae95bc2bcf10b747b7658918073319dfa1386b514d84090304a95fcf19d56827c4b196e4d348745565441544

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\d3dcompiler_47.dll

        Filesize

        3.5MB

        MD5

        2f2e363c9a9baa0a9626db374cc4e8a4

        SHA1

        17f405e81e5fce4c5a02ca049f7bd48b31674c8f

        SHA256

        2630f4188bd2ea5451ca61d83869bf7068a4f0440401c949a9feb9fb476e15df

        SHA512

        e668a5d1f5e6f821ebfa0913e201f0dfd8da2f96605701f8db18d14ea4fdeac73aeb9b4fe1f22eaeffcdd1c0f73a6701763727d5b09775666f82b678404e4924

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\d3dcompiler_47.dll

        Filesize

        3.5MB

        MD5

        2f2e363c9a9baa0a9626db374cc4e8a4

        SHA1

        17f405e81e5fce4c5a02ca049f7bd48b31674c8f

        SHA256

        2630f4188bd2ea5451ca61d83869bf7068a4f0440401c949a9feb9fb476e15df

        SHA512

        e668a5d1f5e6f821ebfa0913e201f0dfd8da2f96605701f8db18d14ea4fdeac73aeb9b4fe1f22eaeffcdd1c0f73a6701763727d5b09775666f82b678404e4924

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\d3dcompiler_47.dll

        Filesize

        3.5MB

        MD5

        2f2e363c9a9baa0a9626db374cc4e8a4

        SHA1

        17f405e81e5fce4c5a02ca049f7bd48b31674c8f

        SHA256

        2630f4188bd2ea5451ca61d83869bf7068a4f0440401c949a9feb9fb476e15df

        SHA512

        e668a5d1f5e6f821ebfa0913e201f0dfd8da2f96605701f8db18d14ea4fdeac73aeb9b4fe1f22eaeffcdd1c0f73a6701763727d5b09775666f82b678404e4924

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll

        Filesize

        2.5MB

        MD5

        d3ffc36ddd21357320e256314ba0bbed

        SHA1

        b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

        SHA256

        226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

        SHA512

        bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll

        Filesize

        2.5MB

        MD5

        d3ffc36ddd21357320e256314ba0bbed

        SHA1

        b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

        SHA256

        226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

        SHA512

        bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll

        Filesize

        2.5MB

        MD5

        d3ffc36ddd21357320e256314ba0bbed

        SHA1

        b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

        SHA256

        226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

        SHA512

        bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll

        Filesize

        2.5MB

        MD5

        d3ffc36ddd21357320e256314ba0bbed

        SHA1

        b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

        SHA256

        226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

        SHA512

        bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll

        Filesize

        2.5MB

        MD5

        d3ffc36ddd21357320e256314ba0bbed

        SHA1

        b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

        SHA256

        226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

        SHA512

        bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll

        Filesize

        2.5MB

        MD5

        d3ffc36ddd21357320e256314ba0bbed

        SHA1

        b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

        SHA256

        226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

        SHA512

        bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll

        Filesize

        2.5MB

        MD5

        d3ffc36ddd21357320e256314ba0bbed

        SHA1

        b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

        SHA256

        226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

        SHA512

        bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll

        Filesize

        2.5MB

        MD5

        d3ffc36ddd21357320e256314ba0bbed

        SHA1

        b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

        SHA256

        226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

        SHA512

        bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll

        Filesize

        2.5MB

        MD5

        d3ffc36ddd21357320e256314ba0bbed

        SHA1

        b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

        SHA256

        226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

        SHA512

        bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\ffmpeg.dll

        Filesize

        2.5MB

        MD5

        d3ffc36ddd21357320e256314ba0bbed

        SHA1

        b0aa24771ccea0ffec089cd7aa5a6a2f2203c1f0

        SHA256

        226b591f952480fda136a0831800417339d5b5786d865278707fd57bc6e099da

        SHA512

        bf193b2244f18521e8fc548308a64b3018d0838c0664a7620c3c55a100032af8399ad8ba7a6b9d301bd01ac3bb72c8f2d32f516d8296829dbd710fdff8823b1a

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\icudtl.dat

        Filesize

        9.8MB

        MD5

        d866d68e4a3eae8cdbfd5fc7a9967d20

        SHA1

        42a5033597e4be36ccfa16d19890049ba0e25a56

        SHA256

        c61704cc9cf5797bf32301a2b3312158af3fe86eadc913d937031cf594760c2d

        SHA512

        4cc04e708b9c3d854147b097e44ff795f956b8a714ab61ddd5434119ade768eb4da4b28938a9477e4cb0d63106cce09fd1ec86f33af1c864f4ea599f8d999b97

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\libEGL.dll

        Filesize

        365KB

        MD5

        0387de184059e5aed5b19da1450a40ca

        SHA1

        75d7e35f4091595cfd68525b8300e33e0a2aed63

        SHA256

        cc3ffc27c7d079f20795c5e49d0dc9361eaa313c0dc1b8d8cb5b35248cd1d314

        SHA512

        371825236c4195bf07bdfd72ea09df8b5ae64587499a7f6a32a4ef8a645d17f42899903c7e5c7a502b2d7047a24c844950a97f65d4ce0ccf48bce00a762147e9

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\libEGL.dll

        Filesize

        365KB

        MD5

        0387de184059e5aed5b19da1450a40ca

        SHA1

        75d7e35f4091595cfd68525b8300e33e0a2aed63

        SHA256

        cc3ffc27c7d079f20795c5e49d0dc9361eaa313c0dc1b8d8cb5b35248cd1d314

        SHA512

        371825236c4195bf07bdfd72ea09df8b5ae64587499a7f6a32a4ef8a645d17f42899903c7e5c7a502b2d7047a24c844950a97f65d4ce0ccf48bce00a762147e9

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\libEGL.dll

        Filesize

        365KB

        MD5

        0387de184059e5aed5b19da1450a40ca

        SHA1

        75d7e35f4091595cfd68525b8300e33e0a2aed63

        SHA256

        cc3ffc27c7d079f20795c5e49d0dc9361eaa313c0dc1b8d8cb5b35248cd1d314

        SHA512

        371825236c4195bf07bdfd72ea09df8b5ae64587499a7f6a32a4ef8a645d17f42899903c7e5c7a502b2d7047a24c844950a97f65d4ce0ccf48bce00a762147e9

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\libGLESv2.dll

        Filesize

        6.0MB

        MD5

        690895b04139b3ba5b423bb54ee0ccb7

        SHA1

        74892cd69ddcd113e0726fcb581c99c3b75129fe

        SHA256

        4f40ffe4beaf8add8b349287439a2ed4cdd732b508c9812979091d09a7b20915

        SHA512

        eafd6b6c51890c7e49591e84b0ad98ec7aafb8333df5c2459317af1101bddd0bd50a86b4f2329ce7f5cf96716cd25bd0a503ea0df8d8d6f9cbfa77b0e1e78785

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\libGLESv2.dll

        Filesize

        6.0MB

        MD5

        690895b04139b3ba5b423bb54ee0ccb7

        SHA1

        74892cd69ddcd113e0726fcb581c99c3b75129fe

        SHA256

        4f40ffe4beaf8add8b349287439a2ed4cdd732b508c9812979091d09a7b20915

        SHA512

        eafd6b6c51890c7e49591e84b0ad98ec7aafb8333df5c2459317af1101bddd0bd50a86b4f2329ce7f5cf96716cd25bd0a503ea0df8d8d6f9cbfa77b0e1e78785

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\libGLESv2.dll

        Filesize

        6.0MB

        MD5

        690895b04139b3ba5b423bb54ee0ccb7

        SHA1

        74892cd69ddcd113e0726fcb581c99c3b75129fe

        SHA256

        4f40ffe4beaf8add8b349287439a2ed4cdd732b508c9812979091d09a7b20915

        SHA512

        eafd6b6c51890c7e49591e84b0ad98ec7aafb8333df5c2459317af1101bddd0bd50a86b4f2329ce7f5cf96716cd25bd0a503ea0df8d8d6f9cbfa77b0e1e78785

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\libegl.dll

        Filesize

        365KB

        MD5

        0387de184059e5aed5b19da1450a40ca

        SHA1

        75d7e35f4091595cfd68525b8300e33e0a2aed63

        SHA256

        cc3ffc27c7d079f20795c5e49d0dc9361eaa313c0dc1b8d8cb5b35248cd1d314

        SHA512

        371825236c4195bf07bdfd72ea09df8b5ae64587499a7f6a32a4ef8a645d17f42899903c7e5c7a502b2d7047a24c844950a97f65d4ce0ccf48bce00a762147e9

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\libglesv2.dll

        Filesize

        6.0MB

        MD5

        690895b04139b3ba5b423bb54ee0ccb7

        SHA1

        74892cd69ddcd113e0726fcb581c99c3b75129fe

        SHA256

        4f40ffe4beaf8add8b349287439a2ed4cdd732b508c9812979091d09a7b20915

        SHA512

        eafd6b6c51890c7e49591e84b0ad98ec7aafb8333df5c2459317af1101bddd0bd50a86b4f2329ce7f5cf96716cd25bd0a503ea0df8d8d6f9cbfa77b0e1e78785

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\locales\en-US.pak

        Filesize

        110KB

        MD5

        5cc884bf0ec1c702240173b35a421d1b

        SHA1

        19bdfb0b31dc4a75e7c135d1a8ef76f5f6cc3a31

        SHA256

        9f0c75c84381360677055d6197812c7a6c42dbfc6134eb8212d8a60ed1ca1601

        SHA512

        48772f50f6b0d846084a0cfb0d6433f2fbf73677b557b022d0d73d04790636c0c40ed873c32fd037013e943fb7c24816efdcde38429520895c00c2d85a17ea5c

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\resources.pak

        Filesize

        4.9MB

        MD5

        39933b34aac7271db1be82d4bd9f50e6

        SHA1

        959b95de58c4b362e6695130545de86a08ae7b62

        SHA256

        38bb20864e6bf51708caf55a886e79070adb416a55e8fb3ab7901e8a03cd1ad7

        SHA512

        3ec3877b4f1e3dd50a943e58271467de26b3d6fbdd49b5a229578f16ac5beaffc6e4d9ea69ba23abcd630dcb998fe2588fe210dd84d3473a459462e50655eff5

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\resources\app.asar

        Filesize

        5.6MB

        MD5

        a261f0a6f53189360a3bcb7f0c4b8f9a

        SHA1

        15153a90286104ad998a063edd499fbd84986aac

        SHA256

        9f4a6b1d7d61f16b1574d230f2e53051994f01cd86f06c455b7362346ebca1dd

        SHA512

        7472053be9d5128f8b8ec46131c5f609d20f64b181fb9986c1cecbf41643bae0e832622c9b867d8ec4f0b020a8d0aa43559452bb6a5dd3d2931b0613e4481333

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\squirrel.exe

        Filesize

        1.7MB

        MD5

        c5f6cda4976ae38cd9fba3d1e5ebd244

        SHA1

        2006c37f01d010963a4331c42e579b87a2d16039

        SHA256

        dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

        SHA512

        a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\v8_context_snapshot.bin

        Filesize

        592KB

        MD5

        74b5a5a3fe1bc0f54d065027db8f702b

        SHA1

        c279ab276ab96f6449c67e7abbeebf9f088b6b52

        SHA256

        d7d7b42c11b1301f9f8add3a5da03d948b8800164492b595c8df97b68657620e

        SHA512

        2362e93536f4f7edbfc2a518470d517f800bdc82baa90d91a8d0d2baba882ff8493c90c24e2508be51ebe1b420386cabda8c7aa7fbb16676703cd1475bd33f7e

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\vk_swiftshader.dll

        Filesize

        3.9MB

        MD5

        935c465318047ffcab2e687555de2f41

        SHA1

        fa9defbcc976ebbdaf1b36459912763661a6982c

        SHA256

        eaa3fb30cc2540258d2eaacf30cd130e67367f18a525fe2e0c2a3a49a4680f3b

        SHA512

        2429f387a2d6909acd9383102f73029a1a73619b49363304a7cfe32e19558cebbf4a21a74cb2f0e9afc57dd829cc08a460c41b20a88e4e3fdf7a5c24ce0cb9ad

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\vk_swiftshader.dll

        Filesize

        3.9MB

        MD5

        935c465318047ffcab2e687555de2f41

        SHA1

        fa9defbcc976ebbdaf1b36459912763661a6982c

        SHA256

        eaa3fb30cc2540258d2eaacf30cd130e67367f18a525fe2e0c2a3a49a4680f3b

        SHA512

        2429f387a2d6909acd9383102f73029a1a73619b49363304a7cfe32e19558cebbf4a21a74cb2f0e9afc57dd829cc08a460c41b20a88e4e3fdf7a5c24ce0cb9ad

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\vulkan-1.dll

        Filesize

        741KB

        MD5

        eeb339d04719e60ee8efd8830274ee76

        SHA1

        f49d308fd02cb7899930d449cfda176d2b2e5d1a

        SHA256

        6c3c0e85e75bd9b02ed304bdfdc6282297a9736ceae926e6fcae0b426d3d6620

        SHA512

        f19cca74edf6ae8c10dff0e6f2fbd61ec680411b3fffe5dc2bcfd94848a0ab997dc5d8f47412e7d516b8f334163fcd3714425219ea72ebcc2429589b2fbbdb07

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\vulkan-1.dll

        Filesize

        741KB

        MD5

        eeb339d04719e60ee8efd8830274ee76

        SHA1

        f49d308fd02cb7899930d449cfda176d2b2e5d1a

        SHA256

        6c3c0e85e75bd9b02ed304bdfdc6282297a9736ceae926e6fcae0b426d3d6620

        SHA512

        f19cca74edf6ae8c10dff0e6f2fbd61ec680411b3fffe5dc2bcfd94848a0ab997dc5d8f47412e7d516b8f334163fcd3714425219ea72ebcc2429589b2fbbdb07

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\vulkan-1.dll

        Filesize

        741KB

        MD5

        eeb339d04719e60ee8efd8830274ee76

        SHA1

        f49d308fd02cb7899930d449cfda176d2b2e5d1a

        SHA256

        6c3c0e85e75bd9b02ed304bdfdc6282297a9736ceae926e6fcae0b426d3d6620

        SHA512

        f19cca74edf6ae8c10dff0e6f2fbd61ec680411b3fffe5dc2bcfd94848a0ab997dc5d8f47412e7d516b8f334163fcd3714425219ea72ebcc2429589b2fbbdb07

      • C:\Users\Admin\AppData\Local\cristalix_updater\app-1.0.7\vulkan-1.dll

        Filesize

        741KB

        MD5

        eeb339d04719e60ee8efd8830274ee76

        SHA1

        f49d308fd02cb7899930d449cfda176d2b2e5d1a

        SHA256

        6c3c0e85e75bd9b02ed304bdfdc6282297a9736ceae926e6fcae0b426d3d6620

        SHA512

        f19cca74edf6ae8c10dff0e6f2fbd61ec680411b3fffe5dc2bcfd94848a0ab997dc5d8f47412e7d516b8f334163fcd3714425219ea72ebcc2429589b2fbbdb07

      • C:\Users\Admin\AppData\Local\cristalix_updater\packages\RELEASES

        Filesize

        87B

        MD5

        0a772f07cffa2629a97281662a01fde2

        SHA1

        f8733cded019579e4c8dd0df1f0e6cff8e05069d

        SHA256

        7922ea84dfee5b0b44f5cf7686fd57d0aec862f6ba894b27eb04b0c8b37371db

        SHA512

        efdc8f9f86a0bd5bc0f2b1b8144b5761b409e5a19457b80ef0b1a4577f416a68941e069cfabb0942c94f967aeb28af471928832c7338019780983b098989d2aa

      • C:\Users\Admin\AppData\Local\cristalix_updater\packages\RELEASES

        Filesize

        87B

        MD5

        0a772f07cffa2629a97281662a01fde2

        SHA1

        f8733cded019579e4c8dd0df1f0e6cff8e05069d

        SHA256

        7922ea84dfee5b0b44f5cf7686fd57d0aec862f6ba894b27eb04b0c8b37371db

        SHA512

        efdc8f9f86a0bd5bc0f2b1b8144b5761b409e5a19457b80ef0b1a4577f416a68941e069cfabb0942c94f967aeb28af471928832c7338019780983b098989d2aa

      • C:\Users\Admin\AppData\Local\cristalix_updater\packages\cristalix_updater-1.0.7-full.nupkg

        Filesize

        78.2MB

        MD5

        755de7a6b68dd06b1aa2165dcbeacfc7

        SHA1

        25e2c5821f579e1ac588e4a78f50f614f723f784

        SHA256

        019dc3fcabf509908d339b058d4300d010a9bb4891ba92630144a074f101b90f

        SHA512

        f028a77f1e83a005943fb20b78df87b88ade96983f9a6e61f08ab0ab198cb41f8c68d6e2be01930e7b5066feff8bb8e185e65dd41d5ebca55dd81ae5d74002c9

      • C:\Users\Admin\AppData\Local\cristalix_updater\update.exe

        Filesize

        1.7MB

        MD5

        c5f6cda4976ae38cd9fba3d1e5ebd244

        SHA1

        2006c37f01d010963a4331c42e579b87a2d16039

        SHA256

        dae7bd888b715b8e215482bc5ea6f028ded32a3ad88bf4acb6431d2a62ffe3f4

        SHA512

        a1a7529b0ceb3df471e803eac1d9256c009a9c8252884f64a28a59d59753c75e1bff726a35af02db5bdf20a2d194850bfdbed163722b09465ca32d10d059524d

      • C:\Users\Admin\AppData\Roaming\cristalix_updater\Local State

        Filesize

        389B

        MD5

        13cde9620b642f925cf4337a4883b252

        SHA1

        c638f2ec8301b36a94363735e60011667e9cba9d

        SHA256

        8f70373c21114450f9edbe41c0827dd8aa7857c8170380ff865aac13d11adde5

        SHA512

        6995c3274513dd1929b7fb821191e75aed1ca6cc46e8ae92abb380f860be66cc95f2fa1608f767f24c755a6711ba890e521b11a6a87a4299df5e66379c21670c

      • memory/228-161-0x0000000000000000-mapping.dmp

      • memory/228-220-0x0000000000000000-mapping.dmp

      • memory/688-175-0x0000000000000000-mapping.dmp

      • memory/920-214-0x0000000000000000-mapping.dmp

      • memory/1100-179-0x0000000000000000-mapping.dmp

      • memory/1604-208-0x0000000000000000-mapping.dmp

      • memory/1616-130-0x0000000000000000-mapping.dmp

      • memory/1616-133-0x0000000000DE0000-0x0000000000FA4000-memory.dmp

        Filesize

        1.8MB

      • memory/1616-190-0x00000000068B0000-0x0000000006942000-memory.dmp

        Filesize

        584KB

      • memory/1616-139-0x000000000ABD0000-0x000000000ABDE000-memory.dmp

        Filesize

        56KB

      • memory/1616-138-0x000000000ABF0000-0x000000000AC28000-memory.dmp

        Filesize

        224KB

      • memory/2416-194-0x0000000000000000-mapping.dmp

      • memory/3176-231-0x00000264C45C0000-0x00000264C55C0000-memory.dmp

        Filesize

        16.0MB

      • memory/3176-221-0x0000000000000000-mapping.dmp

      • memory/3232-187-0x0000000000000000-mapping.dmp

      • memory/3968-212-0x0000000006510000-0x0000000006A3C000-memory.dmp

        Filesize

        5.2MB

      • memory/3968-193-0x0000000000000000-mapping.dmp

      • memory/4540-201-0x0000000000000000-mapping.dmp

      • memory/4692-143-0x0000000000000000-mapping.dmp

      • memory/4744-140-0x0000000000000000-mapping.dmp

      • memory/4944-151-0x0000000000000000-mapping.dmp

      • memory/4944-155-0x0000000005700000-0x0000000005720000-memory.dmp

        Filesize

        128KB