d395af3c10e18c944cf8ade76a650623dc23e050eaf652ff31056c84077a013c

Analysis

max time kernel
91s
max time network
147s
platform
windows10-2004_x64
resource
win10v2004-20220812-en
resource tags

arch:x64arch:x86image:win10v2004-20220812-enlocale:en-usos:windows10-2004-x64system
submitted
23-12-2022 01:51

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

QTranslate.6.10.0.exe
Size

908KB
MD5

e23ffecb44c814aaa4708d56ab5b144b
SHA1

202311d615685e7baaa41dc149b5a76a69c05a0e
SHA256

d395af3c10e18c944cf8ade76a650623dc23e050eaf652ff31056c84077a013c
SHA512

4ae915fb4cb00e30a215ddd439c6e254fb49ce15c4d53000fb12a0cbf5f68820bc7dca6b840a620351060101c6995fd9429ea91f9682503f01ec001f213cfdc3
SSDEEP

24576:GYnrVnqxCGl2NN5SSbyE3dJfz7oHf2qj2HHmR:bnRqMzlPNJfzfHg

Score

8^/10

discovery

Malware Config

Signatures

Executes dropped EXE 1 IoCs

pid	Process
2212	QTranslate.exe

Loads dropped DLL 4 IoCs

pid	Process
2400	QTranslate.6.10.0.exe
2400	QTranslate.6.10.0.exe
2400	QTranslate.6.10.0.exe
2212	QTranslate.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files (x86)\QTranslate\Locales\Arabic\help.txt	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Arabic\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Chinese (Simplified)\help.txt	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Polish\help.txt	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Uyghur\help.txt	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Themes\Brackets.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\Naver\Service.ico	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Greek\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Plugins\History\Html.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Themes\Flat Dark.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\DeepL\Service.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Italian\help.txt	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Slovenian\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Themes\Metro.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Hungarian\help.txt	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Plugins\History\Csv.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\Reverso\Service.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Japanese\help.txt	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Portuguese (Europian)\help.txt	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Portuguese (Europian)\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\Naver\Service.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Chinese (Traditional)\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Indonesia\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Turkish\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Swedish\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\ImTranslator\Service.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\Oxford Learner Dictionary\Service.ico	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\Yandex\Service.ico	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\Yandex\Service.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Dutch\help.txt	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Hebrew\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Serbian\help.txt	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Ukrainian\help.txt	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\Common.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\French\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Russian\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Plugins\History\Txt.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\DeepL\Service.ico	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Polish\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Serbian\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\QTranslate.exe	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\Oxford Learner Dictionary\Service.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\Wikipedia\Service.ico	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\WordReference\Service.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Bulgarian\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Slovak\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Mongolian\help.txt	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Slovak\help.txt	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Themes\Holo Light.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\Babylon Dictionary\Service.ico	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\Google Translate\Service.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\Urban Dictionary\Service.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\youdao\Service.ico	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Swedish\help.txt	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\English\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Finnish\help.txt	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Plugins\History\Json.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Uninstall.exe	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\ABBYY Lingvo Live\Service.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\Baidu\Service.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Services\youdao\Service.js	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\German\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\Romanian\lang.json	QTranslate.6.10.0.exe
File created	C:\Program Files (x86)\QTranslate\Locales\French\help.txt	QTranslate.6.10.0.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Suspicious use of FindShellTrayWindow 2 IoCs

pid	Process
2212	QTranslate.exe
2212	QTranslate.exe

Suspicious use of SendNotifyMessage 2 IoCs

pid	Process
2212	QTranslate.exe
2212	QTranslate.exe

Suspicious use of WriteProcessMemory 3 IoCs

description	pid	Process	procid_target
PID 2400 wrote to memory of 2212	2400	QTranslate.6.10.0.exe	90
PID 2400 wrote to memory of 2212	2400	QTranslate.6.10.0.exe	90
PID 2400 wrote to memory of 2212	2400	QTranslate.6.10.0.exe	90

C:\Users\Admin\AppData\Local\Temp\QTranslate.6.10.0.exe
"C:\Users\Admin\AppData\Local\Temp\QTranslate.6.10.0.exe"
1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious use of WriteProcessMemory
PID:2400
- C:\Program Files (x86)\QTranslate\QTranslate.exe
  "C:\Program Files (x86)\QTranslate\QTranslate.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  PID:2212

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\QTranslate\Locales\English\help.txt

Filesize
1KB

MD5
ee1693dc3f3b95ac2aa41700bc5a9d04

SHA1
e39b6e06d413061a2c7097d654e5d83eb3159cfa

SHA256
d9e1a14d212f306bd961fce4fecc864ab53ea12ff951b1e127d63c8eec1bd28a

SHA512
13c8206f8180b36a82e8ab6386e5fd4ee8b03217f4cdb3abf642bf307a86bb4cfbd8041ebe8519d1c4cba5fca8fd9b16dad4d3509e164ec8c061831082068c0e

Download Submit
C:\Program Files (x86)\QTranslate\Locales\English\lang.json

Filesize
8KB

MD5
e7480b9c092e917a56b56fa5d21921a0

SHA1
5de4c677704e09f9aab91926bc2c616540534fb0

SHA256
9868f91dcd940275f2aa32e9300671c4deda24078186186c4593c2c7dc357a4b

SHA512
615f73a48c0dbeffb1b0c62eb437b37fc7c57521a794343cfedc0fc668289eaa0a9ed2981e9f6fda215efe589d159150a7575a0b2001226ae2129cd31f595e44

Download Submit
C:\Program Files (x86)\QTranslate\QTranslate.exe

Filesize
1.4MB

MD5
a7c1278d831b9dd8261b55b82eaaffc0

SHA1
fe0be83f83c2b9b118b5232dc8d97b7524278a2d

SHA256
f35a3bc8e09e217130ff97efe85ba02bd86573b2e0796b003526604454338227

SHA512
a21d05b8b88bf4c8d789a88c01d8443e7f79306bf735ef5af8ad62de2f4ce00b15f5cf3995e1551215285a56465998c61d0b2a66e8bee88d2a2915a8003e4ca9

Download Submit
C:\Program Files (x86)\QTranslate\QTranslate.exe

Filesize
1.4MB

MD5
a7c1278d831b9dd8261b55b82eaaffc0

SHA1
fe0be83f83c2b9b118b5232dc8d97b7524278a2d

SHA256
f35a3bc8e09e217130ff97efe85ba02bd86573b2e0796b003526604454338227

SHA512
a21d05b8b88bf4c8d789a88c01d8443e7f79306bf735ef5af8ad62de2f4ce00b15f5cf3995e1551215285a56465998c61d0b2a66e8bee88d2a2915a8003e4ca9

Download Submit
C:\Program Files (x86)\QTranslate\Services\ABBYY Lingvo Live\Service.ico

Filesize
894B

MD5
199e649a59a9582a1efe8d50def9ccb2

SHA1
05d14b1e311b5bfb1bd8b227e0f648111315a535

SHA256
56d583d80adac1307b023e01e2b61fe06874511315e3618826dbc7694cd1a6ae

SHA512
91e137af8b456e8fa3491efad3cc2ab3ba8d169ad42ca94d7a1147f02986f79418ce416bcaa976fb7dce34db4f895b1d2e1342c5742b068e65ba2d7836df0f79

Download Submit
C:\Program Files (x86)\QTranslate\Services\ABBYY Lingvo Live\Service.js

Filesize
1KB

MD5
cad24ab28ff0a3050dd1b2f664562c4f

SHA1
8a0847956da3cd0c34e58dc2c08443dd27ac484b

SHA256
4c0ef8506ff322ce78a29488b90e04f3dd16e55a5bf93e5ddee0282f637d04e0

SHA512
4fe1f26ea2d8ec88f8ec12bca30d6ab1858650a958d6cd226a431d3a707f4c5e3822bb61df7cf5aaa29981503b8f7ff69feed354f980234bacd44fdd365a9806

Download Submit
C:\Program Files (x86)\QTranslate\Services\Babylon Dictionary\Service.ico

Filesize
1KB

MD5
e3128633e94a0c352375d0fffc497052

SHA1
84b6f05655dc490971a65efe4e5d58269004bab8

SHA256
47068c0e950f0ee240e38f2f0c3dcf305633b423d4d81fc522f5f2af8a6ac79b

SHA512
eb15114563df99bd6ce7b372f98171ef94bbce3cacf4169ee1ee3c22698dd4e50e3cd75e9d7dbb4eee34d32eaf82fdf3fddaaeada9574a583925d39bea8df1dc

Download Submit
C:\Program Files (x86)\QTranslate\Services\Babylon Dictionary\Service.js

Filesize
1KB

MD5
474f5269eafcec35b00f232cff92dacd

SHA1
d729521ffdb4c9bed8e7d79e0f549ba36910e046

SHA256
f406c6fb359820dc24ba74c60ccbda85f191211320c3a62d2460a18e8220b900

SHA512
0efbef3c6742f2c5058b1cd8068fbd1e9a4de3032e3106347b33d429d4ebda994df2a1bbb7338d19eac26a36718ceb0964e7a42bf038b453f477af104e206338

Download Submit
C:\Program Files (x86)\QTranslate\Services\Babylon\Service.ico

Filesize
1KB

MD5
e3128633e94a0c352375d0fffc497052

SHA1
84b6f05655dc490971a65efe4e5d58269004bab8

SHA256
47068c0e950f0ee240e38f2f0c3dcf305633b423d4d81fc522f5f2af8a6ac79b

SHA512
eb15114563df99bd6ce7b372f98171ef94bbce3cacf4169ee1ee3c22698dd4e50e3cd75e9d7dbb4eee34d32eaf82fdf3fddaaeada9574a583925d39bea8df1dc

Download Submit
C:\Program Files (x86)\QTranslate\Services\Babylon\Service.js

Filesize
1KB

MD5
8595f4def5fb61f7d36eae11568df1b4

SHA1
b412e18c93ad25ab1ec3facd52d6ade1642cae81

SHA256
c12e825d73cbf78ce3be414a3bbbd2cdf7ff9bb4ae1fa2cda33c1bbf4947c324

SHA512
61b42b0d19c41b55ccd4fa5273ff7b90905d74550fa7afa00c62f96128758ef5fc5c7cd4bf6277f89f136e1d341319e3d9ce6520ecf8d8f65558be30349ff9b9

Download Submit
C:\Program Files (x86)\QTranslate\Services\Baidu\Service.ico

Filesize
1KB

MD5
5b4cc3021a48fcea2bf090284c96cdd8

SHA1
83e1039ce5f47a78d50e51bc517a557ca2d0b2a3

SHA256
1b58896134a1af56ec2ddbd4e1f68b64d31ebd3dc0351bc7fe5c17120833d5eb

SHA512
503c1d1a7b82f5903836d112ce833e7fcc76c12cfe0be8c4eeb84afc64610206d052fbfbd876808b1a74700d08f68913e25347a4b941afd55df2e1c95b2b73a4

Download Submit
C:\Program Files (x86)\QTranslate\Services\Baidu\Service.js

Filesize
3KB

MD5
f2925941bd95f5a98eccfe87741e8e0c

SHA1
6354c00a847cbbf4d100cbc65dbe6576b3b9b78b

SHA256
910dfe9adcd7994c1fe0f9f12fb24d598ee121e302e823f912c811b9a3bda92b

SHA512
52cf5e9c023b9dcfaed921b86892a6be301156b0bbea97f88f421458642ec4791eaf7ca329e9a28a7728cc990ab2a4b6cd7f7ba3b3f83ea6248340f6123f6c64

Download Submit
C:\Program Files (x86)\QTranslate\Services\Common.js

Filesize
6KB

MD5
ac2a7401c01685c15b626963c7415687

SHA1
8cee687c8dfc0526ef76cfaac212e22011650c28

SHA256
a03d677a8b3788b5d97b31a33874d96719dc25e0f53087883964d20a878f8b93

SHA512
43903aacf7f1122f70697f279c6689e778015505f7779e0f93aae686ffea77be6fea1d59d8aac3abfbcc5eb5025a454b3ebb9ef022fc3dbf12c4722e6e98ac9f

Download Submit
C:\Program Files (x86)\QTranslate\Services\DeepL\Service.ico

Filesize
1KB

MD5
d4654fea980660f5066fe65439b4f1c9

SHA1
cc0c8a23d0eceeb2d9d5284717cc6cbe167bdc20

SHA256
eda24cd69bce1571adf865471cf2251ddd727ae5e5a11840c403666778a21612

SHA512
5d4c26181763926e4c6d3cda5c70a24a0547698acf4c21061016aa80d9f97e09faf324e6b6ae08394406d7216295876c828fca1caf07cd8e844e095eeb9071da

Download Submit
C:\Program Files (x86)\QTranslate\Services\DeepL\Service.js

Filesize
2KB

MD5
1b361c3056bc6335220164f629ca5f70

SHA1
ed68551a4d08668c63f8bb1d27c022eb00482831

SHA256
0abf802669004dd0966a1939d065f17d733529d66d8f553c92d0c9febc56e78a

SHA512
fdb4e22870fa506be195640d82eff1ce18cca52ac3789844a51d42113eb83959a40d37e9b2d6a860afb891ab86a79bc48b24cc64c052fc82ce6de1b7b269b9cd

Download Submit
C:\Program Files (x86)\QTranslate\Services\Google Search\Service.ico

Filesize
1KB

MD5
1e7f652c531c17cc60bc6703458dc881

SHA1
fae5e9e4ef237af8c42e872bf341db462224ee0d

SHA256
e5efb0b5c0bc1e9e5b258fbd482709cb303ac7638e38b000c0887aeb3fd1a026

SHA512
375ba8fa3fc2806ce7c13e03a849049fbd20a7aba293d462ee3ccf6a8d7be33b621696b40dc299c332216ac384e3eaf32a96d1783baf248ff0368ba99d9f1e26

Download Submit
C:\Program Files (x86)\QTranslate\Services\Google Search\Service.js

Filesize
1KB

MD5
45472de5bc1b1910b8528afacc164636

SHA1
e2e8c32c8e2ab22e5740d9685c4095c727817524

SHA256
82885d093a2c8cbda4cea667304c6bcf25596dc9d800bb3030e726c2febdf0c3

SHA512
fe1fe3c98c98c5b72be5df83df35e3f06ee6aa8f4415a4b62a78a210d648e1273d212a9a33aa650c7211194f5294da062db8d285e62f49b11556469e679abe72

Download Submit
C:\Program Files (x86)\QTranslate\Services\Google Translate\Service.ico

Filesize
1KB

MD5
ca83b97f2111121426e5c537c4a4f508

SHA1
2cac73e7e466875ea60ff9f05a4c5f8711be28f7

SHA256
0845651091537dac8f0f09f5592120be8d3b449454eccabdbae4000767227548

SHA512
0c125d966716935cca489926af8c6bbc19d8e80b46c0786cbcfa8d5538372e41d71197b743db8570ac4a36c2be17e8f40be16c91fb9ea35ef31a03e618843c8f

Download Submit
C:\Program Files (x86)\QTranslate\Services\Google Translate\Service.js

Filesize
3KB

MD5
ced94b4f80b9add5abfe7e54400f1d70

SHA1
d7608cd5352c59ddea8d8fb3f74ec3c51c8b7872

SHA256
f3459f952a2f5a331b038df8de3816f5238e0db52a5abb8c3217b6eba4e53fce

SHA512
75376c5a3f10fcd9883951bb097d994706c6728066e8e931b111ecc13c1cce0541fda51097c09e31a53897d7fcac20f43f678cc00dd452b80ca6469da8578d13

Download Submit
C:\Program Files (x86)\QTranslate\Services\ImTranslator\Service.ico

Filesize
1KB

MD5
d723854c3700e43193a7c24f2680e68c

SHA1
7f5bd86dc9e4370907c5c68ac8dda17797f8818a

SHA256
627357769cd625d5ccafd3671c5bad2882b47ec3cb031ed6e2fd2b979dcd2b89

SHA512
6f60cb1c2206c7ee4ff98759cb483dc2824e474593de71e806631c17bb3ca3181f25e632478cdf95e0ac9a2af856cb57eb03df942c259ad67001d548a5452f78

Download Submit
C:\Program Files (x86)\QTranslate\Services\ImTranslator\Service.js

Filesize
1KB

MD5
f49657bf79681744f084ba50dde620d1

SHA1
1e18525c5f3d3c95539014e5de5fd6dc3cab5cff

SHA256
76a9612fe84bac2f8e58680e2768d12ace22f9189450235b44d5130ee24fcd42

SHA512
f9ffc8e1691d248b93c37a8d07e41533f867a4f280b69ecc7b644f654597988323b61f8306e4733e9b28ae0487b4fa0dc8f362555542136cf8d0e2cbb567d9c1

Download Submit
C:\Program Files (x86)\QTranslate\Services\Microsoft Translator\Service.ico

Filesize
1KB

MD5
64ad26b9b9d8e4da8cd564fe4843e65f

SHA1
9d1d05134f36eba77ed18f725bc0ca2121fa2686

SHA256
e5dccc694e7f34daf334b3a48b68da450d5b34fe8a4e06842d864e99f400770a

SHA512
5f77bf6ec0d46c99e02a268e63587c9cd552b61fdb55ece3955b50cc470ec103b06b2360eda86bd49aa45458e1885f7a4e8256da7b47dc8b8b343bcef5cdcea1

Download Submit
C:\Program Files (x86)\QTranslate\Services\Microsoft Translator\Service.js

Filesize
3KB

MD5
65d6d347f8c2658944d414d68c81681f

SHA1
947d7691da1b3dcd61ac03b25b98c520396109df

SHA256
b1c12a050eda6d7f644b2cff83345a677c15a3374d1f84058b7bd534e7d8b009

SHA512
e24bb42543f30ff72e11714ee9791968db89c7fc20c654fd8db5f769e93a40ac15a5ae0984ca5d820880f9e925d56109fdf44e88695506e3153b214e06da5585

Download Submit
C:\Program Files (x86)\QTranslate\Services\Multitran\Service.ico

Filesize
1KB

MD5
0ec7718e4f8032d5a94530438d4909c0

SHA1
84e66fa70973a10865679349cf2c8b59cbfc701b

SHA256
89880ee50436f5bfcc98ddbdf9bd2b44388c5cce4a769ce90272b355a6357c71

SHA512
58f87f702b7dc8472dbbca6a4ca7fcf8cd93dc71deba671cd605983623f875d403d5173c3f125589d8d27ccb1b97a2630c4ca6c6aad1696e13cd48260bc4487d

Download Submit
C:\Program Files (x86)\QTranslate\Services\Multitran\Service.js

Filesize
1KB

MD5
41d0b0999bff2b1254899caaa7267293

SHA1
922c70b43680f73392f766b8e4426df12b4b78a7

SHA256
b9a6da58fe67c6f4b720e0573776150b74ccd81aaa7cddcbf3723a71698be771

SHA512
efcdbbc2b607f5e266bf37d6bd2a4f57ca79b7ad96f922022f54dc47fef0a3dbd2bc2e8002f11f091fff18dd297c9b189b74d9966f6f6025a17ae5c6cefa6146

Download Submit
C:\Program Files (x86)\QTranslate\Services\Naver\Service.ico

Filesize
1KB

MD5
6ff822a939f62a2de5146e7c537fc501

SHA1
b3d1cefaa52d52926f4dd8270be8cf1bb62d68b4

SHA256
7fa3eb3e35a6f119a9e483f9fb87b6f2704288c30a9b2a7f53d99159ace36ff8

SHA512
8a3ccc615de63936263c4e22bf9dd332964e2c87a29babfb0031be4e995b28fed6485a3cfc7e8918c5a0b07871c85e4acae4252a6615cf187c04fdc5d15ae3b5

Download Submit
C:\Program Files (x86)\QTranslate\Services\Naver\Service.js

Filesize
9KB

MD5
f606c31dda48fbca5985c31a931aeadd

SHA1
2097e43a60b1ac7eb57743b808765f9d6acf7111

SHA256
8eee5f6cb20217abb51dc21dd475680ca02ee05d4f7fa1e6a4c5f0e12cc40ac0

SHA512
a4b7ad2a013b1601e4a3eed6db6d934ff28420c87174084a63128c0e2eff2fb252e1288c33a532c5db6ea4a238048ae6ca8fa13aed22ac2abe25a36fef715af8

Download Submit
C:\Program Files (x86)\QTranslate\Services\Oxford Learner Dictionary\Service.ico

Filesize
1KB

MD5
3cd82b9e70c59989a33da1bf7ad74d7e

SHA1
6e1c80a83894c9a887876e5bf9fab95970d3b0c6

SHA256
ac0a0ba8f6c19fafb0038cfb46fd4bf7e60b3d2138194a212f22860748a45db3

SHA512
94f370a920cbeb2c7dc8dbb28c37d4ee7ec2fd419b43e1585ed4b0fa2e50d0714cfa0c3d7b121df2810db20fea0a1c2117aa0b3799a08585f539f1e45543bb6c

Download Submit
C:\Program Files (x86)\QTranslate\Services\Oxford Learner Dictionary\Service.js

Filesize
3KB

MD5
d254fb1e2c7c9e4095176f2cf12dc1d7

SHA1
059e7a81cabec29c2c0297a57008fbf0a6a05971

SHA256
60d291430ea098639b99d4d8f240f360a541f12b6ddd71c6589934465d9db906

SHA512
ad4c302f06afa31dd969b45e62981d1d8197e90f39f25aa12da6020eeb89365c9ec1bae4b9570062420792dcd714f22c639b259f3c23ae2f4a9ea6caa3459841

Download Submit
C:\Program Files (x86)\QTranslate\Services\Promt\Service.ico

Filesize
1KB

MD5
e223d7474d5569b7270ca1401973a9db

SHA1
84480098226fef56aadae62c30a527236675cad3

SHA256
4f0d1160b581b5454fb24b301e202f94c4c88affbfd29e935445529892d685d3

SHA512
4872be3a0e1dce9388aa9e4b7240b8ddf2507d5bc2ef98e76140fa118f6ec5523ceed40bc4bb32bd3f3a07d4fd7900a496f9939db3670083b82e8f77913f407b

Download Submit
C:\Program Files (x86)\QTranslate\Services\Promt\Service.js

Filesize
1KB

MD5
65a80ed57b73761c7977811d12506139

SHA1
004f28d0f8ab59130d1231120162e049cb1812bb

SHA256
1135da5bb2b118d98fc2e0243101c1dd5955215c67ef6810225d20b26c60da15

SHA512
beebffb696bd63ebd2072fcc7440d783472b2729bace3948a4c3a1328458fdb46bc4111762e354dfdf47d5b660fc8bb4cea6c0b781d39dd9092d90b0f6c1b812

Download Submit
C:\Program Files (x86)\QTranslate\Services\Reverso\Service.ico

Filesize
1KB

MD5
5508e9e2d91db0f8cf3dfeff0a71c075

SHA1
b87f23eb57b81afd96912eec06740829306f6a97

SHA256
e6ca90a09f5c4c1a239871823156a5c3ede870de497676ac0a8aed780387e765

SHA512
03c563d6bab82b3d8c839fd5d21af382f0c94a13c74aa7652af434bc33d956c7046a96fd9ae5832d8a7940eea817d8bd4b822dfc8f592b5134ed5c8c246dd0e3

Download Submit
C:\Program Files (x86)\QTranslate\Services\Reverso\Service.js

Filesize
1KB

MD5
1b32e9c45033b1c4fa3c58fdfe8abe67

SHA1
0c1a065079cfe35f3c39ec3ee20cb514ef9bca5f

SHA256
c9f069e3ddd8bb0b6870d764fafcb4457aa35796e1e8630766c06a7976be0897

SHA512
2b4cfb48f37462a2ad2b067015e844a0e594359ef2e5f57873814bc08b845120f0965fe8bdc06bfa0dbd236f8b7af0ed70f826d69ac042354a7430d9c6a3109e

Download Submit
C:\Program Files (x86)\QTranslate\Services\Urban Dictionary\Service.ico

Filesize
1KB

MD5
7c5abaf68ffd0cb59ca9a53443df6ac8

SHA1
1a121ddadae891c923a0e753514e4154cb11bc05

SHA256
f3facdd2a1edd363ef516d87ff40e270c7cbb346ec08dc3646fd5f07c911c6c0

SHA512
8d2e965da912120bedb09e81284a83d481a944049137aa36638d9a955adb6fc13df4c0b369ca164a7ae2a7d1504b0b93f4cefe9ce84bd68fd03fa0771fdf30bd

Download Submit
C:\Program Files (x86)\QTranslate\Services\Urban Dictionary\Service.js

Filesize
1KB

MD5
481d624af4e24b02e0471074a33c528c

SHA1
fb562682e9f3d87183b01f8bc1d019ea023cc5ca

SHA256
270440849c25582e8b100697f06cd463b1ecdb6bb6d2df45568b10d7965a472b

SHA512
2d93c9f661378a5d8cf7367f3d34a6313649cd013c1d18bd79092d7f4feccbe75c9e42a2fcfb6e53c549b7ccc38eb80bbdf93062de87dd1a13ed47beeaa12fca

Download Submit
C:\Program Files (x86)\QTranslate\Services\Wikipedia\Service.ico

Filesize
318B

MD5
d04712159fabf20d31fc905b9bda350c

SHA1
77e6b14f04c0baf7f5199462d50b1b20672d0072

SHA256
5d53ef1866a08cc29011f5f2a9ce99bbf37cf42e80de7f0e8cc30d13337e8187

SHA512
4bf864a0ed81c138908860aeafcc7c7f6bf53228e36246afa9a1f56024ce7a6e351bcbf39d9fca2a94646ce6a6e262fa4fb1ef2eaf24bde1af5cfa4e1a299348

Download Submit
C:\Program Files (x86)\QTranslate\Services\Wikipedia\Service.js

Filesize
1KB

MD5
ae801090df854a4bdd6997bfaecae62c

SHA1
0b024aeb1d2596f7b7edf03e00f5a5aa029f3664

SHA256
b2dd1f2f396698e0ddf91e23e247c2f7062056e132ded0575814818a4a188658

SHA512
fa29c62048492312986a5ddca34c99be5505ac73dc17725e9d12e5f1938c5b93c39ef0870aa750a1306f4dc45fb8119d7997253d47c481bd1cd873b061ac5e40

Download Submit
C:\Program Files (x86)\QTranslate\Services\WordReference\Service.ico

Filesize
1KB

MD5
497ce15e2f788dde188ada259c0bf561

SHA1
c1fbcf581a23cebf97419f14b6d59776698f49c1

SHA256
f4c536a641d6be3b51bdb8bf40aca0822a947f54f3999ec59189a71391c47bfc

SHA512
bec7b059c20f0b10d0c26cf8a354eebee12ae9ae87554202b73f9dccadf08eb6bc37a97adddf0ec11f50293897be5416e95b6e10036217a6fb4b956976cd28a4

Download Submit
C:\Program Files (x86)\QTranslate\Services\WordReference\Service.js

Filesize
1KB

MD5
73430960c8d7c7a1398324ebcc402a2e

SHA1
69df3571ad096a8f443eedd01f726c7b8ac5ff4b

SHA256
2ada261c54f054a0971a03e7f085933a3df0ffdacc545ac31970330718f054ef

SHA512
92e897eeb1787e56a438be1cc5255ebca89d3bcf3a333825e284f1fcf37f4a99cdc7c8eec816172f1700d7ccc795febeeb36a95e9f3a67ef0794b998982fa147

Download Submit
C:\Program Files (x86)\QTranslate\Services\Yandex\Service.ico

Filesize
1KB

MD5
bbb23859c3d9d1ab9f028c9e9fd7aa1d

SHA1
cdc54261e0dd0d4a59ed58d9ed8763d3174e2b3b

SHA256
97c29ac266b4f89e34180cdfe43b6f3385789ea21f03ed38832742d77a540fbe

SHA512
5fb31a3ec37ae6c628859d5a8b51826cce2a8d86924f9848b8f4238ee005614478085ec608073a1cd403fa8393bee89d6d061c8f0cc43e6e72b73631a4648a70

Download Submit
C:\Program Files (x86)\QTranslate\Services\Yandex\Service.js

Filesize
4KB

MD5
8f5f1c0233dc8006b0b7e439985a7c5a

SHA1
7cc89c7730ac6d26c52cd2118ee67133f203ccc8

SHA256
93136ba152bf334b2dd84ca2434ef01565383fa6131918cfa652a9e1c4b9d206

SHA512
f33ef7a24dc5a1433d0a3cb8511e0f35cd4afd4678bd7a2a3ea635b4d70019a8921877246ca4ae2d4d57995ea12fa75cd1c8252f7ae7855196b4cea1f6026058

Download Submit
C:\Program Files (x86)\QTranslate\Services\youdao\Service.ico

Filesize
1KB

MD5
88fdc9739107c647a51896b49e9969db

SHA1
f4b91cb7c5379830a17d7b02d44ad599d112af09

SHA256
0c2364c71226fa91ab1a77685014223df665bfd5221737b1eed35adfa64b27b7

SHA512
f176c6233d547ef93258b6ed2c766f091a68a2f4cf284f57ec5abaa58ed7ffe6457955ae76c8db95f293c5fdcdda73d1a042fb5a33a53bf50b0db34171153404

Download Submit
C:\Program Files (x86)\QTranslate\Services\youdao\Service.js

Filesize
3KB

MD5
d233bc35c2c4bee502268955c8568654

SHA1
46e53b9db2e1112ead8b0072a7d0771ed2be80d1

SHA256
6b2ee411798c6f20b3e39226cab6676a89fe6a63ec80c8e68535b0285b136bd6

SHA512
ac86025b1e2cc8e8457ccee486a7915a29651dcc397501133989afe128d45846dd6f261becba9861deaa7b4cea7c669abf75dbbb65cac5f7f2639ca9e6605c1e

Download Submit
C:\Program Files (x86)\QTranslate\bass.dll

Filesize
125KB

MD5
c5b3059004e2c7631915ec044f4e6c63

SHA1
dbcdc0aba1d9cf3396ba8ae00bb3671c85047fb2

SHA256
3cd00f456f51829eda119e0e133acc1e45a5930d61fc335a2e9aa688a836a24d

SHA512
3ed914fbfa4ff78fe98ade848e79c3e1e3b66eae83159b45725bf946f2b3cb9d4f805f719901928d9b52c20bc121b0552645fa6aba11ac0fcd5ade672f14f5ee

Download Submit
C:\Program Files (x86)\QTranslate\bass.dll

Filesize
125KB

MD5
c5b3059004e2c7631915ec044f4e6c63

SHA1
dbcdc0aba1d9cf3396ba8ae00bb3671c85047fb2

SHA256
3cd00f456f51829eda119e0e133acc1e45a5930d61fc335a2e9aa688a836a24d

SHA512
3ed914fbfa4ff78fe98ade848e79c3e1e3b66eae83159b45725bf946f2b3cb9d4f805f719901928d9b52c20bc121b0552645fa6aba11ac0fcd5ade672f14f5ee

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsq6410.tmp\System.dll

Filesize
12KB

MD5
cff85c549d536f651d4fb8387f1976f2

SHA1
d41ce3a5ff609df9cf5c7e207d3b59bf8a48530e

SHA256
8dc562cda7217a3a52db898243de3e2ed68b80e62ddcb8619545ed0b4e7f65a8

SHA512
531d6328daf3b86d85556016d299798fa06fefc81604185108a342d000e203094c8c12226a12bd6e1f89b0db501fb66f827b610d460b933bd4ab936ac2fd8a88

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsq6410.tmp\UserInfo.dll

Filesize
4KB

MD5
2f69afa9d17a5245ec9b5bb03d56f63c

SHA1
e0a133222136b3d4783e965513a690c23826aec9

SHA256
e54989d2b83e7282d0bec56b098635146aab5d5a283f1f89486816851ef885a0

SHA512
bfd4af50e41ebc56e30355c722c2a55540a5bbddb68f1522ef7aabfe4f5f2a20e87fa9677ee3cdb3c0bf5bd3988b89d1224d32c9f23342a16e46c542d8dc0926

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsq6410.tmp\nsDialogs.dll

Filesize
9KB

MD5
6c3f8c94d0727894d706940a8a980543

SHA1
0d1bcad901be377f38d579aafc0c41c0ef8dcefd

SHA256
56b96add1978b1abba286f7f8982b0efbe007d4a48b3ded6a4d408e01d753fe2

SHA512
2094f0e4bb7c806a5ff27f83a1d572a5512d979eefda3345baff27d2c89e828f68466d08c3ca250da11b01fc0407a21743037c25e94fbe688566dd7deaebd355

Download Submit
memory/2212-140-0x0000000073C30000-0x0000000073C87000-memory.dmp

Filesize
348KB

Download
memory/2212-183-0x0000000002F20000-0x0000000002F3C000-memory.dmp

Filesize
112KB

Download
memory/2212-185-0x0000000002F20000-0x0000000002F3C000-memory.dmp

Filesize
112KB

Download