Analysis

  • max time kernel
    91s
  • max time network
    129s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220812-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22-09-2022 07:30

General

  • Target

    d3b0c592c0e96bf445412e4ca27584eeebf2b7d9b2d77753a1a3de7baf92b67c.exe

  • Size

    16.1MB

  • MD5

    03c9fa663f7e2cd760521d6f10073a52

  • SHA1

    ef444302c600a32c282a1ac2ce075003f83daf37

  • SHA256

    d3b0c592c0e96bf445412e4ca27584eeebf2b7d9b2d77753a1a3de7baf92b67c

  • SHA512

    fe46628b4fb54fce44e24e65e3a48563d466954bce1fd6fab6848d2c097b0824414204fcf2f8de3bcf3456d7c01a26451f3630450ab4d9c98c6ebdd3af07171c

  • SSDEEP

    393216:lGJvKCd6CDdOp2y7EndImLuxUV6eofASfqykfDpjAClPjkdPy37H:kvKCu7IdImLuGV6LfA7/JjsPyr

Score
8/10

Malware Config

Signatures

  • Downloads MZ/PE file
  • Executes dropped EXE 2 IoCs
  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Loads dropped DLL 19 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 6 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\d3b0c592c0e96bf445412e4ca27584eeebf2b7d9b2d77753a1a3de7baf92b67c.exe
    "C:\Users\Admin\AppData\Local\Temp\d3b0c592c0e96bf445412e4ca27584eeebf2b7d9b2d77753a1a3de7baf92b67c.exe"
    1⤵
    • Drops file in Program Files directory
    • Suspicious use of SetWindowsHookEx
    • Suspicious use of WriteProcessMemory
    PID:3144
    • C:\Program Files (x86)\LBClient\Client.exe
      "C:\Program Files (x86)\LBClient\Client.exe"
      2⤵
      • Executes dropped EXE
      • Checks computer location settings
      • Loads dropped DLL
      • Drops file in Program Files directory
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:1600
      • C:\Program Files (x86)\LBClient\LUpdater.exe
        "C:\Program Files (x86)\LBClient\LUpdater.exe" -url=update.1771.com/files/UZH/Update.xml -e="C:\Program Files (x86)\LBClient\Client.exe" -st=2 -pid=1600
        3⤵
        • Executes dropped EXE
        • Drops file in Program Files directory
        PID:2560

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\LBClient\Client.exe

    Filesize

    669KB

    MD5

    799e64716d96621b09f6e30616dae797

    SHA1

    67d31df063908f86cc144f5ea3d99a4ed0d848e0

    SHA256

    20fad9683a52008a4738f668fb26e9d2eb7bb48675934cfa5547050b59eb5eb7

    SHA512

    60dbf3366fe77ceeba7a110e457987fa832bafb873f8448bbfe56f49c94a2130d6a5b88785c0836dcc9e88de63df875b7762754a0466650c152b4869b1be29d1

  • C:\Program Files (x86)\LBClient\Client.exe

    Filesize

    669KB

    MD5

    799e64716d96621b09f6e30616dae797

    SHA1

    67d31df063908f86cc144f5ea3d99a4ed0d848e0

    SHA256

    20fad9683a52008a4738f668fb26e9d2eb7bb48675934cfa5547050b59eb5eb7

    SHA512

    60dbf3366fe77ceeba7a110e457987fa832bafb873f8448bbfe56f49c94a2130d6a5b88785c0836dcc9e88de63df875b7762754a0466650c152b4869b1be29d1

  • C:\Program Files (x86)\LBClient\LUpdater.exe

    Filesize

    722KB

    MD5

    4983712e0d6d7761e8e4d839cb4e1869

    SHA1

    9c5b494dad2a4e26555d632768e659f7a75281a6

    SHA256

    823ec003583ae8c304d8f0f00693da3e53fd8a849d01bc36e96cb495064beec0

    SHA512

    7dd18d1a349ee75156eec8566dad199b3258e575a3dd83fcba12cd0d055ee5fc931dfe6933857d735da90a90ec553d45277521931dd2d563c65acd6e8b4a3479

  • C:\Program Files (x86)\LBClient\Netdll.dll

    Filesize

    1.6MB

    MD5

    cac8fd3dfa36522dad319238390dc40b

    SHA1

    f07ec4ee1af2322d5ba288359c926992f83d2e6a

    SHA256

    124508df82fc3f8f505c5d9fc45ab87d6673dd4ded32121c37c7a61a72be1b94

    SHA512

    d0fde248b6d27a6e62d65d51effa379ffb8f67b772ecaf118e0f7e2f31294816b6f05a103b97d9de9b09b0359c64a9f2b663301c4b2fbbae9287ae34ace34e4f

  • C:\Program Files (x86)\LBClient\QtCore4.dll

    Filesize

    2.4MB

    MD5

    93f6360e2c16a325519c789d7313328d

    SHA1

    779b99fe9937e8bf5d77085dafd3befd9a5747cb

    SHA256

    b8df017a45efdba237b56cb1f31b7ff6c8be6c00c4afb1e71a5c8a7516f0be5f

    SHA512

    418308b79834be4f57b132b2989c71e3b384d14cd2dd2701bd48a344f996ba94b96b07ae482aef88cd20528b07b44f33a27c344b75fe5b342e7923f26dad28ff

  • C:\Program Files (x86)\LBClient\QtCore4.dll

    Filesize

    2.4MB

    MD5

    93f6360e2c16a325519c789d7313328d

    SHA1

    779b99fe9937e8bf5d77085dafd3befd9a5747cb

    SHA256

    b8df017a45efdba237b56cb1f31b7ff6c8be6c00c4afb1e71a5c8a7516f0be5f

    SHA512

    418308b79834be4f57b132b2989c71e3b384d14cd2dd2701bd48a344f996ba94b96b07ae482aef88cd20528b07b44f33a27c344b75fe5b342e7923f26dad28ff

  • C:\Program Files (x86)\LBClient\QtGui4.dll

    Filesize

    8.0MB

    MD5

    51608ab19c84cea54de0bfd77d5728f5

    SHA1

    daac27825c6dd83f41ff378afe0d55811cc62369

    SHA256

    23c0beac61e3e11b2a5b8c582b9b7865cc02ed20210e995ef90d8fa0c3ebdbcb

    SHA512

    427c2392e40857b2f1cdfccbc84f5e3e44a69797e3e1fbc41491000a124134c7e93228a9ea455c7da262e154c6fe1c9138b0fba8f5196df552a510ecb74a3a14

  • C:\Program Files (x86)\LBClient\QtGui4.dll

    Filesize

    8.0MB

    MD5

    51608ab19c84cea54de0bfd77d5728f5

    SHA1

    daac27825c6dd83f41ff378afe0d55811cc62369

    SHA256

    23c0beac61e3e11b2a5b8c582b9b7865cc02ed20210e995ef90d8fa0c3ebdbcb

    SHA512

    427c2392e40857b2f1cdfccbc84f5e3e44a69797e3e1fbc41491000a124134c7e93228a9ea455c7da262e154c6fe1c9138b0fba8f5196df552a510ecb74a3a14

  • C:\Program Files (x86)\LBClient\QtNetwork4.dll

    Filesize

    985KB

    MD5

    7163c163d7cdd81912d81f3374ca9ff1

    SHA1

    77080c953da0e499de2850c764ddb0b546084e39

    SHA256

    79a6c808ea5433320c85a95783de9b42aa6000178ea31e3c317fd65b7cc6cbd6

    SHA512

    ae6258c8e4b637b87ef50af9c7c47fde93e76118c76742e2eab3ae8f8fa007a7ca455fba6b653bfe627ba485754ed20925c6c9fd7f8e75a227363a89253d8027

  • C:\Program Files (x86)\LBClient\QtNetwork4.dll

    Filesize

    985KB

    MD5

    7163c163d7cdd81912d81f3374ca9ff1

    SHA1

    77080c953da0e499de2850c764ddb0b546084e39

    SHA256

    79a6c808ea5433320c85a95783de9b42aa6000178ea31e3c317fd65b7cc6cbd6

    SHA512

    ae6258c8e4b637b87ef50af9c7c47fde93e76118c76742e2eab3ae8f8fa007a7ca455fba6b653bfe627ba485754ed20925c6c9fd7f8e75a227363a89253d8027

  • C:\Program Files (x86)\LBClient\http_R.dll

    Filesize

    94KB

    MD5

    20804f74b08c156e0cb3fc4cfdd06900

    SHA1

    2bcfa3233a3d3ccbb3cc777365a6a6fde9dd53ce

    SHA256

    d1ff33e2c58e61889e7deaa2af75576cae7f9c217ad3ed0fc4861eb5ea6dc1ae

    SHA512

    a4a2444579b5dd6a28a3068273e40fb842bd8d11387de1422448ffe4903623260b2600b32f8e98b5ea641f8b9d4ce0b6850bdd943482b740acef2c1e90f2df14

  • C:\Program Files (x86)\LBClient\http_R.dll

    Filesize

    94KB

    MD5

    20804f74b08c156e0cb3fc4cfdd06900

    SHA1

    2bcfa3233a3d3ccbb3cc777365a6a6fde9dd53ce

    SHA256

    d1ff33e2c58e61889e7deaa2af75576cae7f9c217ad3ed0fc4861eb5ea6dc1ae

    SHA512

    a4a2444579b5dd6a28a3068273e40fb842bd8d11387de1422448ffe4903623260b2600b32f8e98b5ea641f8b9d4ce0b6850bdd943482b740acef2c1e90f2df14

  • C:\Program Files (x86)\LBClient\libcurl.dll

    Filesize

    468KB

    MD5

    ce12d298c55815b4005de4b1dc4ed3ca

    SHA1

    b7885bb62e91fe3eb1745c14bf485397a32826f3

    SHA256

    ab1d5bfded049747a06b52ab58c8af2e1b8d2457ce843f1512d64a194052f57f

    SHA512

    e75b431867088f334d85c848ca47fc2bf5f225226d74a6250740b6a411e663137539227967d8b9445e3f30655c92fc8cc02faf9c2bc5d1f47b30b79950275eca

  • C:\Program Files (x86)\LBClient\libcurl.dll

    Filesize

    468KB

    MD5

    ce12d298c55815b4005de4b1dc4ed3ca

    SHA1

    b7885bb62e91fe3eb1745c14bf485397a32826f3

    SHA256

    ab1d5bfded049747a06b52ab58c8af2e1b8d2457ce843f1512d64a194052f57f

    SHA512

    e75b431867088f334d85c848ca47fc2bf5f225226d74a6250740b6a411e663137539227967d8b9445e3f30655c92fc8cc02faf9c2bc5d1f47b30b79950275eca

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qgif4.dll

    Filesize

    26KB

    MD5

    889868a11cc18e184b6e05140b7e5080

    SHA1

    bfdfdb0948325e23c9a60c4d808f41b485664ff8

    SHA256

    a5286237a74a9f566a0f786043d7af1d42f63e2284e1ba7eac7d818c58d16ee7

    SHA512

    77d0d1b921f58b2f1c7e3408d541ed581a1fa77a4e77fe680de1f29cfda3b6f5c61d743aedff8fda92ad77b5b97c97cadcf07c387b5f4dc69bb371a0e70e7d14

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qgif4.dll

    Filesize

    26KB

    MD5

    889868a11cc18e184b6e05140b7e5080

    SHA1

    bfdfdb0948325e23c9a60c4d808f41b485664ff8

    SHA256

    a5286237a74a9f566a0f786043d7af1d42f63e2284e1ba7eac7d818c58d16ee7

    SHA512

    77d0d1b921f58b2f1c7e3408d541ed581a1fa77a4e77fe680de1f29cfda3b6f5c61d743aedff8fda92ad77b5b97c97cadcf07c387b5f4dc69bb371a0e70e7d14

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qgif4.dll

    Filesize

    26KB

    MD5

    889868a11cc18e184b6e05140b7e5080

    SHA1

    bfdfdb0948325e23c9a60c4d808f41b485664ff8

    SHA256

    a5286237a74a9f566a0f786043d7af1d42f63e2284e1ba7eac7d818c58d16ee7

    SHA512

    77d0d1b921f58b2f1c7e3408d541ed581a1fa77a4e77fe680de1f29cfda3b6f5c61d743aedff8fda92ad77b5b97c97cadcf07c387b5f4dc69bb371a0e70e7d14

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qico4.dll

    Filesize

    28KB

    MD5

    4736e6b7c92edfa99f0a083b7cb6d888

    SHA1

    bad96009b1b6442b672227173f3f177fcdf0a130

    SHA256

    11b50b90b3a2f7d2515069f0e8478d0c74ed50248d897d87077e7d4443ed56fb

    SHA512

    1bda0f158ac8d782bbce41d666f43b649b2f36d764e4baac20f139d4f110a283d62036d5444229cd6fced571af5047e15f6a484e79b40fe9483a8de8f5b1a7b6

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qico4.dll

    Filesize

    28KB

    MD5

    4736e6b7c92edfa99f0a083b7cb6d888

    SHA1

    bad96009b1b6442b672227173f3f177fcdf0a130

    SHA256

    11b50b90b3a2f7d2515069f0e8478d0c74ed50248d897d87077e7d4443ed56fb

    SHA512

    1bda0f158ac8d782bbce41d666f43b649b2f36d764e4baac20f139d4f110a283d62036d5444229cd6fced571af5047e15f6a484e79b40fe9483a8de8f5b1a7b6

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qico4.dll

    Filesize

    28KB

    MD5

    4736e6b7c92edfa99f0a083b7cb6d888

    SHA1

    bad96009b1b6442b672227173f3f177fcdf0a130

    SHA256

    11b50b90b3a2f7d2515069f0e8478d0c74ed50248d897d87077e7d4443ed56fb

    SHA512

    1bda0f158ac8d782bbce41d666f43b649b2f36d764e4baac20f139d4f110a283d62036d5444229cd6fced571af5047e15f6a484e79b40fe9483a8de8f5b1a7b6

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qjpeg4.dll

    Filesize

    193KB

    MD5

    b2affa47f153ac63c170f9eb3393dcfa

    SHA1

    a57189331ecda6336ca2bb43285cc2951b320560

    SHA256

    d6d3a34f2000cc57a99122108adfd0ca66bca4a0ac454e3f91eadca33f28bcc3

    SHA512

    61a171431d8f88474d76cb68ab9c6f9d1e1421c0f68beaf2ebafa4b7c23cc125afde61194182027606c3954b096b68dcab462879be5a461af9192ec0ceb3c9e7

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qjpeg4.dll

    Filesize

    193KB

    MD5

    b2affa47f153ac63c170f9eb3393dcfa

    SHA1

    a57189331ecda6336ca2bb43285cc2951b320560

    SHA256

    d6d3a34f2000cc57a99122108adfd0ca66bca4a0ac454e3f91eadca33f28bcc3

    SHA512

    61a171431d8f88474d76cb68ab9c6f9d1e1421c0f68beaf2ebafa4b7c23cc125afde61194182027606c3954b096b68dcab462879be5a461af9192ec0ceb3c9e7

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qjpeg4.dll

    Filesize

    193KB

    MD5

    b2affa47f153ac63c170f9eb3393dcfa

    SHA1

    a57189331ecda6336ca2bb43285cc2951b320560

    SHA256

    d6d3a34f2000cc57a99122108adfd0ca66bca4a0ac454e3f91eadca33f28bcc3

    SHA512

    61a171431d8f88474d76cb68ab9c6f9d1e1421c0f68beaf2ebafa4b7c23cc125afde61194182027606c3954b096b68dcab462879be5a461af9192ec0ceb3c9e7

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qmng4.dll

    Filesize

    216KB

    MD5

    5c4bad69c0f7a2f9ee36846069d8ca6f

    SHA1

    964e61de236ca64c2b5a03b6c4a49becfd1065c4

    SHA256

    384273a2f9c88e6116ff4dc88880bef10fab25d5de4331b0d015dab2c30fe2dc

    SHA512

    99d5c1d39718a2e497b2d0966a48611059c3e0dbcc2dc45b6b2ce739034f8fc97f81e71fa8b3850468f551a84f687bb7b39e0bce7d60efd5208958897018c0f0

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qmng4.dll

    Filesize

    216KB

    MD5

    5c4bad69c0f7a2f9ee36846069d8ca6f

    SHA1

    964e61de236ca64c2b5a03b6c4a49becfd1065c4

    SHA256

    384273a2f9c88e6116ff4dc88880bef10fab25d5de4331b0d015dab2c30fe2dc

    SHA512

    99d5c1d39718a2e497b2d0966a48611059c3e0dbcc2dc45b6b2ce739034f8fc97f81e71fa8b3850468f551a84f687bb7b39e0bce7d60efd5208958897018c0f0

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qmng4.dll

    Filesize

    216KB

    MD5

    5c4bad69c0f7a2f9ee36846069d8ca6f

    SHA1

    964e61de236ca64c2b5a03b6c4a49becfd1065c4

    SHA256

    384273a2f9c88e6116ff4dc88880bef10fab25d5de4331b0d015dab2c30fe2dc

    SHA512

    99d5c1d39718a2e497b2d0966a48611059c3e0dbcc2dc45b6b2ce739034f8fc97f81e71fa8b3850468f551a84f687bb7b39e0bce7d60efd5208958897018c0f0

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qsvg4.dll

    Filesize

    22KB

    MD5

    41434dfee9edd9b8944bb64b007d9d0d

    SHA1

    1767ab8cb3504870a61ef995bff8a7c6a21d4fd4

    SHA256

    aa0ea4bf41f96c83200411dc3a106f4103042e777ce6e48ec0c00bc2467bb5c2

    SHA512

    fe19ac8110a9e09970424713b6b165097d1c3d6be47e9bfd155939576a4d1d65dc0b99b98279f434382e58f5d5b4c77e637cb89ecb2ae163a9db028b44c0d182

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qsvg4.dll

    Filesize

    22KB

    MD5

    41434dfee9edd9b8944bb64b007d9d0d

    SHA1

    1767ab8cb3504870a61ef995bff8a7c6a21d4fd4

    SHA256

    aa0ea4bf41f96c83200411dc3a106f4103042e777ce6e48ec0c00bc2467bb5c2

    SHA512

    fe19ac8110a9e09970424713b6b165097d1c3d6be47e9bfd155939576a4d1d65dc0b99b98279f434382e58f5d5b4c77e637cb89ecb2ae163a9db028b44c0d182

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qsvg4.dll

    Filesize

    22KB

    MD5

    41434dfee9edd9b8944bb64b007d9d0d

    SHA1

    1767ab8cb3504870a61ef995bff8a7c6a21d4fd4

    SHA256

    aa0ea4bf41f96c83200411dc3a106f4103042e777ce6e48ec0c00bc2467bb5c2

    SHA512

    fe19ac8110a9e09970424713b6b165097d1c3d6be47e9bfd155939576a4d1d65dc0b99b98279f434382e58f5d5b4c77e637cb89ecb2ae163a9db028b44c0d182

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qtga4.dll

    Filesize

    20KB

    MD5

    8a49d7e296daf0b88b194d80c3c8ef6d

    SHA1

    91b555368977dfe0c1d9d7be3c0bb5c5c4b17536

    SHA256

    bc29c01e4e67fab30d0ea79d401c33bded354ecd2e28539788c036cc0d795105

    SHA512

    adb4e12c95ed633d4131c339c02bec6b63a1bdf821dc9828e12b9c7ddd3e8d27fb319ebd2455cfa9f91326de6c7cebb8f6e6b2571db8248b7ac3f572fbc5afcc

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qtga4.dll

    Filesize

    20KB

    MD5

    8a49d7e296daf0b88b194d80c3c8ef6d

    SHA1

    91b555368977dfe0c1d9d7be3c0bb5c5c4b17536

    SHA256

    bc29c01e4e67fab30d0ea79d401c33bded354ecd2e28539788c036cc0d795105

    SHA512

    adb4e12c95ed633d4131c339c02bec6b63a1bdf821dc9828e12b9c7ddd3e8d27fb319ebd2455cfa9f91326de6c7cebb8f6e6b2571db8248b7ac3f572fbc5afcc

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qtga4.dll

    Filesize

    20KB

    MD5

    8a49d7e296daf0b88b194d80c3c8ef6d

    SHA1

    91b555368977dfe0c1d9d7be3c0bb5c5c4b17536

    SHA256

    bc29c01e4e67fab30d0ea79d401c33bded354ecd2e28539788c036cc0d795105

    SHA512

    adb4e12c95ed633d4131c339c02bec6b63a1bdf821dc9828e12b9c7ddd3e8d27fb319ebd2455cfa9f91326de6c7cebb8f6e6b2571db8248b7ac3f572fbc5afcc

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qtiff4.dll

    Filesize

    279KB

    MD5

    4766633a05a8150dcc1873135297c642

    SHA1

    e435c7b687c2b7ace9c63db275ccd4bf310361ef

    SHA256

    eeb75e51fc04a4391f19e85d971d7a640af652310dd59ca3f571ffec6e053db4

    SHA512

    ad34ede3da4b3cf609bcc5fbe57411efdaf45b8ed47d1562253dfa71a160b705cf638279560036467a1ca4b7d8823b86f76ea790da3c82622c2ec7dfb65a8d0d

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qtiff4.dll

    Filesize

    279KB

    MD5

    4766633a05a8150dcc1873135297c642

    SHA1

    e435c7b687c2b7ace9c63db275ccd4bf310361ef

    SHA256

    eeb75e51fc04a4391f19e85d971d7a640af652310dd59ca3f571ffec6e053db4

    SHA512

    ad34ede3da4b3cf609bcc5fbe57411efdaf45b8ed47d1562253dfa71a160b705cf638279560036467a1ca4b7d8823b86f76ea790da3c82622c2ec7dfb65a8d0d

  • C:\Program Files (x86)\LBClient\plugins\imageformats\qtiff4.dll

    Filesize

    279KB

    MD5

    4766633a05a8150dcc1873135297c642

    SHA1

    e435c7b687c2b7ace9c63db275ccd4bf310361ef

    SHA256

    eeb75e51fc04a4391f19e85d971d7a640af652310dd59ca3f571ffec6e053db4

    SHA512

    ad34ede3da4b3cf609bcc5fbe57411efdaf45b8ed47d1562253dfa71a160b705cf638279560036467a1ca4b7d8823b86f76ea790da3c82622c2ec7dfb65a8d0d

  • C:\Program Files (x86)\LBClient\res\loading.gif

    Filesize

    18KB

    MD5

    72156e78abfa394685c1565b864aec0f

    SHA1

    cad37521ef875914cd68bedc82562dd1cc8ec336

    SHA256

    21682260cfa0d51d0102f269436b0c30134dd0b63a38c457d43d41141f0754cb

    SHA512

    6c577edb1749a7902ea54d6bd23b5917e57f01276e3646ce3232ccf31e26696c80f615d1e3ba9504c833cc934af696c3c4cc9439394b7625f22be7145782ffa8

  • C:\Program Files (x86)\LBClient\res\qt_zh_CN.qm

    Filesize

    114KB

    MD5

    b229ee4a58b9c9e604431a43ca95a78a

    SHA1

    4c77cca52b0ec85a0c8e7bcdfa796695bd2066f9

    SHA256

    be0546ac5afec81595e4acd323d20dd31632a19623dcfbdba2e9374cec6be149

    SHA512

    2b2b108f11c60bf506b2204fd1c171a346d797a770eaaf2667325888911ecc3e2df8a68f2a31e35894a75fba944f41cca146fc03c5fa8a5d0cb3f0db26f8762b

  • C:\Program Files (x86)\LBClient\res\skin-b\default.qss

    Filesize

    9KB

    MD5

    97025e723f44791e03b1590e15c9a505

    SHA1

    a91f73d2b029a811b6bf7ca761e4f853fbf98fd0

    SHA256

    96e18ed6e12b7ab95a5d24ab2c78dd234f53fc9c7ee2156f67a7d45bda50166c

    SHA512

    73abc5cdc29a2d4b421cf9de6c408eeaca716a3d8c271b55b23883e6fa1fe984f4cf8fee7d998cbe9ab7b95d9bcc5eb417d7bd5c70556647c0e2012b42b1a79b

  • C:\Program Files (x86)\LBClient\res\skin-b\png\close_prompt.png

    Filesize

    1KB

    MD5

    d196d665fa521092257bc04a9f90a7f6

    SHA1

    21d02fc3f435fec3f0e6e5b65174010b7ce35942

    SHA256

    465a5f609cbfcecc663d52ea9257832e1108d43e71c383ad45f7d93adfbab1e5

    SHA512

    c8972ccd3f5051b04148121fe20ed5c660a6a7d610b5ae3a3fdf6ef059d6d745245daa2af55f1258ae95b6aefda9b3ebf0a5914657364e08cc4aaffc9e54798a

  • C:\Program Files (x86)\LBClient\res\skin-b\png\close_prompt_hover.png

    Filesize

    1008B

    MD5

    08c3482c1e25f14f2322eb7a545252b1

    SHA1

    230b8fc7a08cf99f8d50ca0947c454e3efdd720e

    SHA256

    2870c99e83222d4c20bc11fd8058964015f542771434346bcdcd613cd4676da2

    SHA512

    bea44097009fdda59302d10781cc5870ff54a3efe0a60141d8dbffda7b3b4722c7660dd3d82efe4f3a350938172c9bf993415d50003efa0b9dbfc689edde40a8

  • C:\Program Files (x86)\LBClient\res\skin-b\png\count-down-bg.png

    Filesize

    3KB

    MD5

    403f0c432654447b81aa1ed23fc1ab5c

    SHA1

    0aadd56393b247ee91e54c89daa2087c99e83793

    SHA256

    ce8fcb78d6365e5a3ee789998d813d4b4d8a76d9f9b5d36972ed250227e39752

    SHA512

    75cad949e51492d777c5f0559d4d6d98c5a71b726795e39c10f285be7c3ebf39e92b55cc7f710eeb6016f93100710b7ab536fd2222b6e13b99d6f4d08d10605b

  • C:\Program Files (x86)\LBClient\res\skin-b\png\flag.png

    Filesize

    1KB

    MD5

    e46047d3460c8b516971678cbd0a7cfe

    SHA1

    564f186261f1922e0e911865af07bd8ac44b6673

    SHA256

    7c8dd1faae436f6451ad9c3a4522bde1c0cc84a306af36de30fcad47c9cf941c

    SHA512

    b011e6bb016c693517e17b98df0b7355a26a6ce40c2ca3e4007a38f490b56e3df90df13d2532b0e36e924e96c419ceb7a8c307c97f411ec5a811d2eb163220be

  • C:\Program Files (x86)\LBClient\res\skin-b\png\footer_button_bg.png

    Filesize

    1KB

    MD5

    e76b1fa2ca1c94dd3b3a927525c94131

    SHA1

    a4e13340350f3e552b9bb21d2e32cf6be19f9152

    SHA256

    b5256488b492ca7d7ff6564080c29cd92f93a3cf625f654d636bdf46f7b08761

    SHA512

    5ded7c49a67dd56f95f128ea6548748b3ed0f29e4ef8a22b0d36c35592f643698e83d887e213bde1d55da6599da7336a0caac218c34ee024e442d1c6a06a86c2

  • C:\Program Files (x86)\LBClient\res\skin-b\png\header_close.png

    Filesize

    14KB

    MD5

    230734092742a0980cf35d53605e1af7

    SHA1

    1978be4c2a5e44505e32219013f382e54188db1f

    SHA256

    aa88229e8b89a13cb4c25e7ffb929a7e21812579833e19211810c059221e70ed

    SHA512

    902a1057f24efdcbe250cb9f522f623a597ce0cf71d85017786e8c0200aef14c2372ad4db4a4fe210541fed50abf8b104f7541af72d19562694254a6aa529e02

  • C:\Program Files (x86)\LBClient\res\skin-b\png\header_close_hover.png

    Filesize

    14KB

    MD5

    0ba02f52613e2966b2f6c21f18f5d54a

    SHA1

    f6624d86cee2d9e17dccd6087feeb51174204712

    SHA256

    6dc6a65fd994fea2a35e7ba3a1465305e7907fbb0be7698b185deabe4bf00e89

    SHA512

    a812a9d1b62b6fb644b710c6080fb2b96fdebca24dcf3f0d560fa036e9c10e8c16b14c2e201b9304d6553d5b942b560e1f711f0ad8444923105138dd1457d677

  • C:\Program Files (x86)\LBClient\res\skin-b\png\header_minimize.png

    Filesize

    14KB

    MD5

    ea67d93ab57c907addb98fe46c1f15d9

    SHA1

    2822662d8c683d603fe84918aeaeedb27c5b19ba

    SHA256

    64cfdd347e28d233dbf820c5996c24d162b9471d317415cf0dee72263c7b4ce1

    SHA512

    57d4fa98988e88dd12a782754a0930c07287d48f25dab8d59185b831c906d8dbd819ffaf2ec433dbc061609871c0ffa453199e9a79b2a2314a44260079def648

  • C:\Program Files (x86)\LBClient\res\skin-b\png\header_minimize_hover.png

    Filesize

    14KB

    MD5

    963054cb5e1a2757e88dde9fd28218c1

    SHA1

    b6ad9e3adfcae8294c0d2e099f9006afa0f9ec87

    SHA256

    e7b31abb536e8630e4d008a19e4173db3eaa78df7d67bdb0f2777302ddc48483

    SHA512

    79dafa37802893dfd4784b1871f547dfeca7d416c7cea2cafac8e4bc1a8c6ca271b99e72d042ba73722950096919750803973741076b32420aa2b66243aa5225

  • C:\Program Files (x86)\LBClient\res\skin-b\png\indext_bg.png

    Filesize

    355KB

    MD5

    2a2496e22a447477f36bbe1269f39e90

    SHA1

    f487c329c5a4fb657f2580ad5df078fb51273884

    SHA256

    8e7d06789b9a08e48d5e96dd2645fd79974114b72e0598b283547198338e410e

    SHA512

    b97f6efa46a9fef7b32dff2e4f29ed97f1e8e101598aa0e9955351299e68841534a866765b63757684f33e1836af6d3031231a45607944dd98c2cd4e0607a8b2

  • C:\Program Files (x86)\LBClient\res\skin-b\png\logo.png

    Filesize

    2KB

    MD5

    d81b04ba0817c92cf595bfc45b6a640d

    SHA1

    3e026df3f08bcd22de5b226a2bd45d64c3cd26d4

    SHA256

    66cf38a36f114ccddfc0ebaecaf22b7355b4cba135cc644041d26280f40945cb

    SHA512

    089ef4f450018a34c84871cc296d0a6ebbc15972904a88e1d0840b33549864d85a52dd3664e2af8a44937d212fa894e5848fe3b531c08c23b399fd12304272a9

  • C:\Program Files (x86)\LBClient\res\skin\default.qss

    Filesize

    8KB

    MD5

    03f7221133aa290176b52204cb68dae3

    SHA1

    a3630887c99bd39d1c5a5ee9e298fd3ca9f5e3c8

    SHA256

    bd43bb719634bc2d846a463c6c3ff22b960f7de87fd31686c17aa1861fa8d8e5

    SHA512

    a18b3faafe2efefe53c3727381614786b58a1f73b33e274cc381bd789759debd90a5f237b35c847e4b0623633f7847d7ab4bd15d0241587dcd42f7d704d26e5a

  • C:\Program Files (x86)\LBClient\res\skin\png\count-down-bg.png

    Filesize

    3KB

    MD5

    403f0c432654447b81aa1ed23fc1ab5c

    SHA1

    0aadd56393b247ee91e54c89daa2087c99e83793

    SHA256

    ce8fcb78d6365e5a3ee789998d813d4b4d8a76d9f9b5d36972ed250227e39752

    SHA512

    75cad949e51492d777c5f0559d4d6d98c5a71b726795e39c10f285be7c3ebf39e92b55cc7f710eeb6016f93100710b7ab536fd2222b6e13b99d6f4d08d10605b

  • C:\Program Files (x86)\LBClient\res\skin\png\flag.png

    Filesize

    1KB

    MD5

    dc97f6efd9f6151be4d88901f20d4bed

    SHA1

    70293bb05d90f1ee1cfe2e03ce48c86c51324054

    SHA256

    fd40cdf4c432420cc502d85d9b5ef49a4e8792cc6faf831250b80f221f63d6e6

    SHA512

    facc106a0300ee1f05c8d933281a71bdcc63c966968f03ec7e581281a213aab7aeea3db9581b4f929e1f034ed2418d2c5f9189c0f4968ad3ebf17115d5a33f95

  • C:\Program Files (x86)\LBClient\res\skin\png\footer_button_bg.png

    Filesize

    1KB

    MD5

    4d47d5b1054ee0293f8b49fb1e7c4223

    SHA1

    1d7f9f073e1d3e4269dcd9e9e5def3b8233d23aa

    SHA256

    fefd31048fb9e1a5bef3d0cbb4c4206bc8a8084aeddc70db71f2a678264dcfa8

    SHA512

    ab806f936c086f537eb9f5f773503b612b9c01253de01203c85979d916756996aa0a5319d51076004afcce44269526e48029e2f2be8d6cd5336da9f21fd99c4b

  • C:\Program Files (x86)\LBClient\res\skin\png\header_close.png

    Filesize

    14KB

    MD5

    230734092742a0980cf35d53605e1af7

    SHA1

    1978be4c2a5e44505e32219013f382e54188db1f

    SHA256

    aa88229e8b89a13cb4c25e7ffb929a7e21812579833e19211810c059221e70ed

    SHA512

    902a1057f24efdcbe250cb9f522f623a597ce0cf71d85017786e8c0200aef14c2372ad4db4a4fe210541fed50abf8b104f7541af72d19562694254a6aa529e02

  • C:\Program Files (x86)\LBClient\res\skin\png\header_close_hover.png

    Filesize

    14KB

    MD5

    0ba02f52613e2966b2f6c21f18f5d54a

    SHA1

    f6624d86cee2d9e17dccd6087feeb51174204712

    SHA256

    6dc6a65fd994fea2a35e7ba3a1465305e7907fbb0be7698b185deabe4bf00e89

    SHA512

    a812a9d1b62b6fb644b710c6080fb2b96fdebca24dcf3f0d560fa036e9c10e8c16b14c2e201b9304d6553d5b942b560e1f711f0ad8444923105138dd1457d677

  • C:\Program Files (x86)\LBClient\res\skin\png\header_minimize.png

    Filesize

    14KB

    MD5

    ea67d93ab57c907addb98fe46c1f15d9

    SHA1

    2822662d8c683d603fe84918aeaeedb27c5b19ba

    SHA256

    64cfdd347e28d233dbf820c5996c24d162b9471d317415cf0dee72263c7b4ce1

    SHA512

    57d4fa98988e88dd12a782754a0930c07287d48f25dab8d59185b831c906d8dbd819ffaf2ec433dbc061609871c0ffa453199e9a79b2a2314a44260079def648

  • C:\Program Files (x86)\LBClient\res\skin\png\header_minimize_hover.png

    Filesize

    14KB

    MD5

    963054cb5e1a2757e88dde9fd28218c1

    SHA1

    b6ad9e3adfcae8294c0d2e099f9006afa0f9ec87

    SHA256

    e7b31abb536e8630e4d008a19e4173db3eaa78df7d67bdb0f2777302ddc48483

    SHA512

    79dafa37802893dfd4784b1871f547dfeca7d416c7cea2cafac8e4bc1a8c6ca271b99e72d042ba73722950096919750803973741076b32420aa2b66243aa5225

  • C:\Program Files (x86)\LBClient\res\skin\png\indext_bg.png

    Filesize

    419KB

    MD5

    5bcc314b6f2b5964cd8547448a525afc

    SHA1

    035cf501123d6cfe93b874112c5f88fdb555e947

    SHA256

    fe453b9a3bb06852784f907bf54006178e150d5eaf77a41b1ac9e586d3a9ed0c

    SHA512

    eb0072bb299d7ddc397f033961d47ef2163c0df34fb25325b89fc61ae04b9e42658d5c3b936e05573b88c763c7708da9516295a69953d6905ce61978f34a3ed0

  • C:\Program Files (x86)\LBClient\res\skin\png\logo.png

    Filesize

    2KB

    MD5

    d81b04ba0817c92cf595bfc45b6a640d

    SHA1

    3e026df3f08bcd22de5b226a2bd45d64c3cd26d4

    SHA256

    66cf38a36f114ccddfc0ebaecaf22b7355b4cba135cc644041d26280f40945cb

    SHA512

    089ef4f450018a34c84871cc296d0a6ebbc15972904a88e1d0840b33549864d85a52dd3664e2af8a44937d212fa894e5848fe3b531c08c23b399fd12304272a9

  • C:\Program Files (x86)\LBClient\res\skin\png\prompt_bg.png

    Filesize

    1KB

    MD5

    f308b36742be54cfe882e80b3ba05fe2

    SHA1

    2592a49f35593d25ded899454c7c08dfeee5fc80

    SHA256

    26b2bbf36c23b04a9e9cd72963e5b0d7ad75408bc4b422629b0a4ce91d175ece

    SHA512

    a06d82219f64851182304d5f57102c02ed565f6b0e82247624ea23de4ad539ccd4244d1d0dde5e8df0cab05f45f749687d4514cbc98fb51e4fe247bff9361e90

  • C:\Program Files (x86)\LBClient\res\skin\png\start_button.png

    Filesize

    19KB

    MD5

    fb7593dbf2e9a8094860491619f10bd6

    SHA1

    c8a99c04e2765cab6975dd185aa2118ae1fbaa23

    SHA256

    360d1514bf332d3bc664160c44c3c453d7c7e77237f7ecf440a5aafb4c049859

    SHA512

    25b0510264ff3a8293b58c9c35ed23323c0935b2d9495911b20560a2d72fe0e90df7badc8b1464bae28a81f0359918135b52adb4497ac59440858d1264e62d4c

  • C:\Program Files (x86)\LBClient\res\skin\png\start_button_begin.png

    Filesize

    5KB

    MD5

    17bd1794b570a2a80a49f405b5aecf28

    SHA1

    088c66b2ea3f59b1523d4b808ee178791c71cc5b

    SHA256

    808411d8a57b8576a22b87f5a5e631510cf242ef6c85c4913bd707514d26560e

    SHA512

    6acbf6f8aec0e79c28cf7eedce53c08ec50eb433a1d6f6869d7c6c4e670d2adfeb29d386b4b015196de242633c022bc5f3d4548126a392217391bb581b94eb94

  • C:\Program Files (x86)\LBClient\res\skin\png\unlock_button.png

    Filesize

    3KB

    MD5

    1f1ddef60d272e8f3501184b229e3c08

    SHA1

    e3abe9adbfb62437f8cdb7f948aec8838dd88a3c

    SHA256

    3b47e50c6216fd6272b7e0c50aa259bb24de277fb50b4d29b895c4588f01f20b

    SHA512

    3d49e8a58749d18d1b99bfbddc8a025eaca34c652a23b520d064653309d857589060bd3b803e16a4c6492fbc73be7c370e9e60f58b42bd66fafcc61b5c5bdf0f

  • C:\Program Files (x86)\LBClient\res\skin\png\unlock_button_hover.png

    Filesize

    3KB

    MD5

    ff539c1e4b0a0165006e8325c8423556

    SHA1

    f5d3038621f8def70270dd0f61df09f573e53458

    SHA256

    aded21ceb612b7dc9bf4cd972770512d5ae0134915bb4fc2a29f0e122ed48753

    SHA512

    ccf7827874a7a777aabe7af4ed6569185076f77f0057156764f2f4aef9b20820d9eb1c1c1d2d3f4777a1cfcd03085ec45368550a0a608b0c36495d2ba9d96d0d