Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

05/02/2023, 00:08

230205-ae336afb85 10

Analysis

  • max time kernel
    42s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20220901-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20220901-enlocale:en-usos:windows10-2004-x64system
  • submitted
    05/02/2023, 00:08

General

  • Target

    Rave-x64-Setup-1.10.4.exe

  • Size

    88.0MB

  • MD5

    f7c54071522424266e73891253ea3a7f

  • SHA1

    7b71bd9c4773e8e9ed971fb5a0520a0fa7313338

  • SHA256

    bc1b1046026a172956963ec88c97b55e95dad361f05d17277108090c642a4873

  • SHA512

    97497609cc92ccb172a94619ae61ba3805a348a019a8ef727a2fa52d2d0c483dce3bbf686f5271ed5c0c13856452a34deb6915bbf6a92211a867b7c3855ac810

  • SSDEEP

    1572864:R4IvBhav0hbgL5ehquI/Ld54LEkoSeq3yZPznKXHJyL9k+udSNP0GMag6fRHGS:R4kjDgFIm/Ze6/JrnEw9k+u6P0GManxT

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 4 IoCs
  • Loads dropped DLL 17 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops desktop.ini file(s) 12 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Enumerates processes with tasklist 1 TTPs 1 IoCs
  • Modifies registry key 1 TTPs 2 IoCs
  • Suspicious behavior: EnumeratesProcesses 8 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of WriteProcessMemory 51 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Rave-x64-Setup-1.10.4.exe
    "C:\Users\Admin\AppData\Local\Temp\Rave-x64-Setup-1.10.4.exe"
    1⤵
    • Loads dropped DLL
    • Drops desktop.ini file(s)
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:4804
    • C:\Windows\SysWOW64\cmd.exe
      cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Rave.exe" | find "Rave.exe"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:648
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Rave.exe"
        3⤵
        • Enumerates processes with tasklist
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:580
      • C:\Windows\SysWOW64\find.exe
        find "Rave.exe"
        3⤵
          PID:828
    • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe
      "C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe"
      1⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:1980
      • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe
        C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\Rave /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\Rave\Crashpad --url=https://sentry.prod.wemesh.ca/api/2/minidump/?sentry_key=4aa8566424f24b9dbccd2605f4cd788f --annotation=_productName=Rave --annotation=_version=1.10.4 --annotation=plat=Win64 --annotation=prod=Electron "--annotation=sentry___initialScope={\"release\":\"Rave-win32-1.10.4\"}" --annotation=ver=20.1.4 --initial-client-data=0x4ec,0x4f0,0x4f4,0x4e4,0x4f8,0x7ff7cc9aca88,0x7ff7cc9aca98,0x7ff7cc9acaa8
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2904
      • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe
        "C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Rave" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1676 --field-trial-handle=1784,i,8555313507482504615,12479588018511992725,131072 --enable-features=CSSContainerQueries,ChromeWideEchoCancellation --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1640
      • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe
        "C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --ignore-certificate-errors=true --disable-quic=true --ignore-certificate-errors=true --user-data-dir="C:\Users\Admin\AppData\Roaming\Rave" --mojo-platform-channel-handle=2028 --field-trial-handle=1784,i,8555313507482504615,12479588018511992725,131072 --enable-features=CSSContainerQueries,ChromeWideEchoCancellation --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4376
      • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe
        "C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=utility --ignore-certificate-errors=true --disable-quic=true --ignore-certificate-errors=true --user-data-dir="C:\Users\Admin\AppData\Roaming\Rave" --mojo-platform-channel-handle=2652 --field-trial-handle=1784,i,8555313507482504615,12479588018511992725,131072 --enable-features=CSSContainerQueries,ChromeWideEchoCancellation --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
        2⤵
          PID:3996
        • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe
          "C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Rave" --app-user-model-id=Rave --app-path="C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app" --enable-sandbox --disable-background-timer-throttling --lang=en-US --device-scale-factor=1 --num-raster-threads=1 --renderer-client-id=5 --mojo-platform-channel-handle=2992 --field-trial-handle=1784,i,8555313507482504615,12479588018511992725,131072 --enable-features=CSSContainerQueries,ChromeWideEchoCancellation --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
          2⤵
            PID:4208
          • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe
            "C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --ignore-certificate-errors=true --disable-quic=true --ignore-certificate-errors=true --user-data-dir="C:\Users\Admin\AppData\Roaming\Rave" --mojo-platform-channel-handle=3372 --field-trial-handle=1784,i,8555313507482504615,12479588018511992725,131072 --enable-features=CSSContainerQueries,ChromeWideEchoCancellation --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
            2⤵
              PID:3368
            • C:\Windows\system32\reg.exe
              C:\Windows\system32\reg.exe QUERY HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Rave
              2⤵
              • Modifies registry key
              PID:1780
            • C:\Windows\system32\reg.exe
              C:\Windows\system32\reg.exe ADD HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v Rave /t REG_SZ /d "\"C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe\" --hidden" /f
              2⤵
              • Modifies registry key
              PID:1736
            • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe
              "C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --ignore-certificate-errors=true --disable-quic=true --ignore-certificate-errors=true --user-data-dir="C:\Users\Admin\AppData\Roaming\Rave" --mojo-platform-channel-handle=3908 --field-trial-handle=1784,i,8555313507482504615,12479588018511992725,131072 --enable-features=CSSContainerQueries,ChromeWideEchoCancellation --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
              2⤵
                PID:4280
              • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe
                "C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe" --type=utility --utility-sub-type=media.mojom.CdmServiceBroker --lang=en-US --service-sandbox-type=cdm --ignore-certificate-errors=true --disable-quic=true --ignore-certificate-errors=true --user-data-dir="C:\Users\Admin\AppData\Roaming\Rave" --mojo-platform-channel-handle=4012 --field-trial-handle=1784,i,8555313507482504615,12479588018511992725,131072 --enable-features=CSSContainerQueries,ChromeWideEchoCancellation --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                2⤵
                  PID:1828
              • C:\Windows\system32\AUDIODG.EXE
                C:\Windows\system32\AUDIODG.EXE 0x428 0x470
                1⤵
                  PID:1832

                Network

                MITRE ATT&CK Enterprise v6

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\D3DCompiler_47.dll

                  Filesize

                  4.7MB

                  MD5

                  c4974c924b605bd322c4872d72de90d1

                  SHA1

                  20df9433eab24d3291696046646f493794b77cba

                  SHA256

                  71d766b4742ca9f7422bb2efc3dc03f2cee509a5a43d241e748cda7aaac24bf4

                  SHA512

                  3889648dbb4608ece9c68f1cd5b1601da5b795eade7910764dd4769090cdb209a39acf3986e6e7190745f3bc6b1477a52dfaccb96a7e799eafc0825e2c44a846

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe

                  Filesize

                  137.2MB

                  MD5

                  72245b5ae8d4b10bf9e23f236122c8c3

                  SHA1

                  41f2912e3e12de34d895550d348916f9924359c4

                  SHA256

                  39708e524ee14f9e71e8a324d241baa1711259ef79081ebd3c6225378a60dfa6

                  SHA512

                  8479e6b717776f5f0eb56b56d95467347a94bdb7f7f3279e21bd7c70f370d1fd8fab358ea4087450484906d1842b2238d1f5b20d85ceb3b9d6243b672b0a9bd2

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe

                  Filesize

                  136.5MB

                  MD5

                  a812146b7804bc9afa18608060cbac11

                  SHA1

                  23881313c7015f659055d7c56c45d2585844c3ef

                  SHA256

                  8f6ee441fa930e444c4650013c2be5db568869fa1e732eb7282442bb660c7ce1

                  SHA512

                  e9cf635bc7cf7a6c1daf4789745be9e90af7f86f8168c076b2b0ddb201ea4f2a42d9f3cb784546a8438e004f719079575512f1e51c670e1f394dc1f795a7235b

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe

                  Filesize

                  133.4MB

                  MD5

                  834f6eb239fd0396bdb05ab760af1256

                  SHA1

                  89ccfccd4df124b12d8dbc7130e3bcfb3bc763c4

                  SHA256

                  d26d0f8c1cae1902778e5f7c6917e77c88728c894b4dc808d2a0c7f3dd859bd1

                  SHA512

                  a84ab1c595c63819c5a674ca985d049ded160ca01450e6cc6dab6b86d6c1f269acffcf8b63373415049bfcbf5c1e527cadee30a54d117ecf9d46fc648e9c0e2b

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe

                  Filesize

                  135.0MB

                  MD5

                  34cf7783432f86fe868e41cc5fd4e9a7

                  SHA1

                  e2c2494e48a4934e8f34f90e4579f8a4ba43df75

                  SHA256

                  f7f5b50def8172957582a91834fef6ed744bf3d46c42a25737ab27b5ced47492

                  SHA512

                  406c12c7e1c0d81a1053b285841432036eac4d7be131fa2cfad5e2f829f2823fb2bba07cd5953626e0cd56cef99d90fd48a8653226257a7dd75ad3536e8a72ef

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe

                  Filesize

                  138.8MB

                  MD5

                  fe7435cbb914444a88e71c619747a581

                  SHA1

                  50e6b4577d8b5769b4c85dbe4eaff3eefcd1f7dd

                  SHA256

                  36dc255537d048850a0b8f7680e8f87431729d395a06a01dc8cbbf74c786f309

                  SHA512

                  cae5bc9ce6dc0601293eb6d09f96bbfe3393ee2ec7b0365b208f9b0203bc0cce593a79f8ff9e11677179fc3c3bb0c3d97cc6be61f778b21c53db56d4848c2a93

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe

                  Filesize

                  131.4MB

                  MD5

                  8bb1c30a3343919566933992f3a64c91

                  SHA1

                  c83e49b1e2d39135556d1ad3336e81356a95b13d

                  SHA256

                  9666027f74e10d2fc3def531b2d1bd59ba9304e455f2de1df942f8a5375151a3

                  SHA512

                  3489f2fd74568002625505e2a058dc0f579e116c3167ab7790021b4fe4ab65fb497fc7207f86718e1556d5e0bd9910e726aef8c6c3319bb24e8b9df542168b83

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\Rave.exe

                  Filesize

                  131.9MB

                  MD5

                  4d5abaeeeea7afc3b1ce54187e8093e9

                  SHA1

                  6fee4ef4c37da8f453a7140c35fa8fc864f266fa

                  SHA256

                  b0d75e6b9ef793e4ad54faed289d8f935b3e5b16c65e9c484672d5558c2e8125

                  SHA512

                  b0ab18131882d973d7b2de3179607e63485ad0aacf62377ac4cddf74834a364b8b57c78fc8cf5a9f141d4e64cacbae6c1dee5c286ca64ac5658ce19f9667986c

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\chrome_100_percent.pak

                  Filesize

                  126KB

                  MD5

                  5c7551a309e5a95bcaafa89e702d2950

                  SHA1

                  063111990f3bce8940f75ebec21b4ad542f7519f

                  SHA256

                  087ca17945ceaa073b2dfafc02272a7affd70786325d741b7d6cca4f47ee3078

                  SHA512

                  e625a51f9c4b38fa32600c47cac8a8d327655d6bafdfefd734150cd3cefde948dbaa4c1003a129abf73f8f40b580beeb361f8ba7e5c057d928d5b656a1f35781

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\chrome_200_percent.pak

                  Filesize

                  175KB

                  MD5

                  2845f6c02c5f88693e461811d0e7ec3f

                  SHA1

                  9e0ef04a853640cc59c66927e1db77c1aa828c76

                  SHA256

                  4152d1b1c57c1f55085b8c8dc7eb799c92c318bac2f6f0ca03236445f6dcc9f9

                  SHA512

                  c873b3f5e5bcabd18fa55fb8850a10f0ed15408a2923f874a6211c7498f6503073dee7c1ea5df2811b17b824884215bed89a085df6a75a21965c1fbbbf950839

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\d3dcompiler_47.dll

                  Filesize

                  4.7MB

                  MD5

                  c4974c924b605bd322c4872d72de90d1

                  SHA1

                  20df9433eab24d3291696046646f493794b77cba

                  SHA256

                  71d766b4742ca9f7422bb2efc3dc03f2cee509a5a43d241e748cda7aaac24bf4

                  SHA512

                  3889648dbb4608ece9c68f1cd5b1601da5b795eade7910764dd4769090cdb209a39acf3986e6e7190745f3bc6b1477a52dfaccb96a7e799eafc0825e2c44a846

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\ffmpeg.dll

                  Filesize

                  2.7MB

                  MD5

                  cfdbd5f42f4755c28cf155fed992564e

                  SHA1

                  ea131ab71542088c63532947f3f999fa263b59dd

                  SHA256

                  1a2d38cddc0f213c6b9f0803b8c927590f54d5687258be32380ce43f5a040677

                  SHA512

                  6a1116cc6d8b795376e7c5ce894cc848c533d88db991188983c9a4530e15500baf79b6e97d4c6cd28384ff156b2f6f36206a758ac3890e7bd590ac7a455a4367

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\ffmpeg.dll

                  Filesize

                  2.7MB

                  MD5

                  cfdbd5f42f4755c28cf155fed992564e

                  SHA1

                  ea131ab71542088c63532947f3f999fa263b59dd

                  SHA256

                  1a2d38cddc0f213c6b9f0803b8c927590f54d5687258be32380ce43f5a040677

                  SHA512

                  6a1116cc6d8b795376e7c5ce894cc848c533d88db991188983c9a4530e15500baf79b6e97d4c6cd28384ff156b2f6f36206a758ac3890e7bd590ac7a455a4367

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\ffmpeg.dll

                  Filesize

                  2.7MB

                  MD5

                  cfdbd5f42f4755c28cf155fed992564e

                  SHA1

                  ea131ab71542088c63532947f3f999fa263b59dd

                  SHA256

                  1a2d38cddc0f213c6b9f0803b8c927590f54d5687258be32380ce43f5a040677

                  SHA512

                  6a1116cc6d8b795376e7c5ce894cc848c533d88db991188983c9a4530e15500baf79b6e97d4c6cd28384ff156b2f6f36206a758ac3890e7bd590ac7a455a4367

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\ffmpeg.dll

                  Filesize

                  2.7MB

                  MD5

                  cfdbd5f42f4755c28cf155fed992564e

                  SHA1

                  ea131ab71542088c63532947f3f999fa263b59dd

                  SHA256

                  1a2d38cddc0f213c6b9f0803b8c927590f54d5687258be32380ce43f5a040677

                  SHA512

                  6a1116cc6d8b795376e7c5ce894cc848c533d88db991188983c9a4530e15500baf79b6e97d4c6cd28384ff156b2f6f36206a758ac3890e7bd590ac7a455a4367

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\ffmpeg.dll

                  Filesize

                  2.7MB

                  MD5

                  cfdbd5f42f4755c28cf155fed992564e

                  SHA1

                  ea131ab71542088c63532947f3f999fa263b59dd

                  SHA256

                  1a2d38cddc0f213c6b9f0803b8c927590f54d5687258be32380ce43f5a040677

                  SHA512

                  6a1116cc6d8b795376e7c5ce894cc848c533d88db991188983c9a4530e15500baf79b6e97d4c6cd28384ff156b2f6f36206a758ac3890e7bd590ac7a455a4367

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\ffmpeg.dll

                  Filesize

                  2.7MB

                  MD5

                  cfdbd5f42f4755c28cf155fed992564e

                  SHA1

                  ea131ab71542088c63532947f3f999fa263b59dd

                  SHA256

                  1a2d38cddc0f213c6b9f0803b8c927590f54d5687258be32380ce43f5a040677

                  SHA512

                  6a1116cc6d8b795376e7c5ce894cc848c533d88db991188983c9a4530e15500baf79b6e97d4c6cd28384ff156b2f6f36206a758ac3890e7bd590ac7a455a4367

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\ffmpeg.dll

                  Filesize

                  2.7MB

                  MD5

                  cfdbd5f42f4755c28cf155fed992564e

                  SHA1

                  ea131ab71542088c63532947f3f999fa263b59dd

                  SHA256

                  1a2d38cddc0f213c6b9f0803b8c927590f54d5687258be32380ce43f5a040677

                  SHA512

                  6a1116cc6d8b795376e7c5ce894cc848c533d88db991188983c9a4530e15500baf79b6e97d4c6cd28384ff156b2f6f36206a758ac3890e7bd590ac7a455a4367

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\icudtl.dat

                  Filesize

                  10.0MB

                  MD5

                  516f6b90d1539bd1eaeaa2fc32dadb92

                  SHA1

                  8017789bef98902cdc95c18e67b84378ddd293c0

                  SHA256

                  51edd31f6c5d298c662af320424b632172a31e3348cdbb201380636c95ded794

                  SHA512

                  db4b5fd7f8a0e0a331ffa7c574d011b059df8654cdc6ee4970f84fda20b88a3b8706f2605d91d19a6dd86d2702cc9542e026a054d28f85c51b676daa8d3f3bb0

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\libEGL.dll

                  Filesize

                  458KB

                  MD5

                  fad2d41eb0f90a839a2498f87f57bddc

                  SHA1

                  e8034d433f11dfeb472fefad85c34c3954f0360c

                  SHA256

                  6a5ee2e1b278687244f605ac49bb6c9d4f4b5f7b4c806c0a6d850267a8d7c65b

                  SHA512

                  9a14e38c8f707d74be5dea5435e173042083c50608acfe207eda79b139126c1791b1e8146152f0c01ba592e2d84124cae1238bec81506e18ed8666f0f4ddbf5f

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\libGLESv2.dll

                  Filesize

                  7.1MB

                  MD5

                  69bbaed59fd00552d69bcba67268e4fd

                  SHA1

                  e0abd410772c95b57f3400ef12477a5a6983391c

                  SHA256

                  a5f7f6a1e1135b7fa6debf7e41cd3ba78572b01f6b3b4f9e70acff6d4c0c6194

                  SHA512

                  b9e670f1c3977f0e05f5526f64b1ae9d64e842e1ef55d909cecf4d9732127182ff717cdcccdab1dae77a53039945ee269812773e1c6cbce171038c6187b84398

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\libegl.dll

                  Filesize

                  458KB

                  MD5

                  fad2d41eb0f90a839a2498f87f57bddc

                  SHA1

                  e8034d433f11dfeb472fefad85c34c3954f0360c

                  SHA256

                  6a5ee2e1b278687244f605ac49bb6c9d4f4b5f7b4c806c0a6d850267a8d7c65b

                  SHA512

                  9a14e38c8f707d74be5dea5435e173042083c50608acfe207eda79b139126c1791b1e8146152f0c01ba592e2d84124cae1238bec81506e18ed8666f0f4ddbf5f

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\libglesv2.dll

                  Filesize

                  7.1MB

                  MD5

                  69bbaed59fd00552d69bcba67268e4fd

                  SHA1

                  e0abd410772c95b57f3400ef12477a5a6983391c

                  SHA256

                  a5f7f6a1e1135b7fa6debf7e41cd3ba78572b01f6b3b4f9e70acff6d4c0c6194

                  SHA512

                  b9e670f1c3977f0e05f5526f64b1ae9d64e842e1ef55d909cecf4d9732127182ff717cdcccdab1dae77a53039945ee269812773e1c6cbce171038c6187b84398

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\locales\en-US.pak

                  Filesize

                  295KB

                  MD5

                  a2ed0e17819c287b824cae5c0ac03af7

                  SHA1

                  9694627f89cd65fbb511eacc6c785ab045525ff2

                  SHA256

                  c4a2c6a90945868a02ad14b3a994e94b123981d56190bd34cc3cb14f31f2270b

                  SHA512

                  a527351a1c61e6ed4e999c6549ec04b2096712644c4e1f28b48872c031c9f0a4bb118c0ceb40dc3a35315ddc7cf244e3c0c03d864a53d4a76f6dcf1b3889c109

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources.pak

                  Filesize

                  5.1MB

                  MD5

                  a048f24972ed127e95494e718cb1c7a2

                  SHA1

                  1bd7d334b2ff723d4f042e22d4b6c607bd23173c

                  SHA256

                  49b654e7cd5e3a0465132f77151b309f3eb2e4a96467250cd0d392d3947c1a7f

                  SHA512

                  0465624a0032eaafaf1ea713a9a8c8b807dd86f4c3e25c8cc9376ad72cc450f3ab468a8c325b75bc2efe483f28074bb59aeae675fd5b3002ddf512b5cfdf63e5

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\app.html

                  Filesize

                  2KB

                  MD5

                  f58077097c0a2009f600d8693c6c75ce

                  SHA1

                  8fd187ec52fd61fe0b870a7763b703f3554bc9bd

                  SHA256

                  d3f28e9ef1108476b35d0e10ad2cb5f9d71a096217c8a640b31d860a9202c1e6

                  SHA512

                  05effaef88a15738df90b48c8fabde2057c46ff3ffb8d99f41cf6d1439d088c85d0a9341d0e5f000481278edfa7676a1c95b320ea17c144ded45588a2360d97d

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\dist\preload.js

                  Filesize

                  7KB

                  MD5

                  ae2e5aa788bda26f60bfc8a1a3b7ad4c

                  SHA1

                  bd73cb99710626327d61008040ae1906e2a416cb

                  SHA256

                  94a811ba92e11b325c04b31f256c72e2aa3ec0998c228aa59d27f098240b64b2

                  SHA512

                  01db3c9ae38ada2d1b6685d27ac359d544f5b7f1b6f59cc8f389d44c75157baf930e90088584a54131e19dd7e2eb9418763ddbb0a648070a0bf7a7ccc6aa49fc

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\dist\renderer.prod.js

                  Filesize

                  1.2MB

                  MD5

                  45f9b4351d052af9f0689c9bda29b24a

                  SHA1

                  6eb049333292334f40752cb2458ef4c71d8d456a

                  SHA256

                  89c10c3c464a51ebdbd68c3732fc5af8768157facb4754fc3baf31e6863d2bff

                  SHA512

                  2eee4cf2d04f825d4a4325cda3060b76740978e8809ed4680205352f11cbab80cd75aacb3b95031287e128b788fdfa9f67acf82570ab5c1fd48d4916010d7fb3

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\dist\renderer.style.css

                  Filesize

                  156KB

                  MD5

                  acd5cae80a76a6b67d9da80a7635bf3e

                  SHA1

                  1b6db7e558f3da01c881877bb4e19f2524db8f77

                  SHA256

                  114c6ffe63b18a94c102706499c12401f9b6222dcf834d91c2fe3407b210e9b5

                  SHA512

                  b3fad8dbbde825a34d5c2ab872ec881c49ea18e1dd3a5f57b307ee758c43ce23356131419478d17fdf0f0253fe1e5296b8f0f575cbb3435c44f025bee4ff5956

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\dist\vendor.style.css

                  Filesize

                  139KB

                  MD5

                  616b0313f9ca6530574b3b23dc68b429

                  SHA1

                  2efd2c25436a48db5dc6d9e50734cd3851ce60a5

                  SHA256

                  15047ae55b624fe76a9f9965b0c5db8e09c627b5672fb3a2599fd1a3395ae013

                  SHA512

                  e6b7c486e4f6bb2055a4be57f2827d1344539b61045dbc9db967d9a5e40205db42b9c74d3371ac5277a97b333a56e6f8388133693f5062f8da6bbcc497fa3d3f

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\main.prod.js

                  Filesize

                  5.3MB

                  MD5

                  caee6794b5dada2f9814fe4d3fec8042

                  SHA1

                  171882abd064f168da25196f5ecf9cdf3dd6f300

                  SHA256

                  bfadd85bcd5f1f20c6691e2b450ca7f388ecbd2ce932e7d8a3ff2c16d0bbbb74

                  SHA512

                  bc72e48fba04d4ebffddeff3da318f07eccb04db8ce67ce8ba13be1cd41cc86622c7a093fbfbc6cb6ef2ea94e1d538f7c7bf4a1e3ca610cc719ed463bf41285e

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\@seorii\win32-displayconfig\build\Release\win32_displayconfig.node

                  Filesize

                  651KB

                  MD5

                  6576527014240945450abdd3914d90e2

                  SHA1

                  4177ccb1b59294a0da0119a617f9f7202d16aadd

                  SHA256

                  99d2c0efa514714b531458a2e250778d17ed19d294ee7ec57387909a5d62115c

                  SHA512

                  ca2307a0ea960d3bb08efad72c1dad9f58b2548324a2febcdc012883a90b328d8fef2f81c9ae528d79d80081698daef57e2d68e6b7ba895e49e9eb5281f3b78b

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\@seorii\win32-displayconfig\build\Release\win32_displayconfig.node

                  Filesize

                  651KB

                  MD5

                  6576527014240945450abdd3914d90e2

                  SHA1

                  4177ccb1b59294a0da0119a617f9f7202d16aadd

                  SHA256

                  99d2c0efa514714b531458a2e250778d17ed19d294ee7ec57387909a5d62115c

                  SHA512

                  ca2307a0ea960d3bb08efad72c1dad9f58b2548324a2febcdc012883a90b328d8fef2f81c9ae528d79d80081698daef57e2d68e6b7ba895e49e9eb5281f3b78b

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\@seorii\win32-displayconfig\index.js

                  Filesize

                  22KB

                  MD5

                  5e52277c6698f92b9142256171800b47

                  SHA1

                  dfb393767d364ca3a0f3f05ae23fbabbc04d861d

                  SHA256

                  c2d7e316504edb2f74ea8f7305d855f49d439eb9de835175443d1bbbf0b4d6c0

                  SHA512

                  9c1eb80e27ba236464f8d40086641d9dc8dd029c4ad04b9ce299731928545390e2c15684d0e3ec874ac43db55acb595cbe6f0d67a3d3a632b88413eceb8d0b3a

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\@seorii\win32-displayconfig\package.json

                  Filesize

                  784B

                  MD5

                  d2da20d197baeb0e0cda34800e0d8605

                  SHA1

                  0b411f36069ad93a37367049c2ba1eed4d601b34

                  SHA256

                  ff97663eb2c4ee16639428d8d575173edc492c083f7677329f78d7fbf8bd5243

                  SHA512

                  17eb65de0019b9e5772552c3d7a588c8ae5d9d9f20c1e52db4b6b1391e5bd9e1a4aa4066fa3bf7e64719b46d53f7f7bc9083a4e6256e7ac8befdb6cf1bf53515

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\bindings\bindings.js

                  Filesize

                  5KB

                  MD5

                  13c05ea1a2f638b707aa56eea958810c

                  SHA1

                  c93878e75a9f0545f73aa8d6fba3a761c4ceda36

                  SHA256

                  8e32a0d37f20bd6f7d5bdbf99d041aa27be47cbbe5172ac13ebf7380a10b3bf6

                  SHA512

                  f356619fa479c72086138eed34fbdcf501bb6f263249e5cf3b1069b2d6c120afc32d9b2ee89d9a41b2f516251c8bbf5d9913e78105961a989e136ac03146657f

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\bindings\package.json

                  Filesize

                  472B

                  MD5

                  3d9ef01a8ecc1b083ebe7e5c3c1204a1

                  SHA1

                  3bf472ce9597ed8132ed2558cda1244785ce236b

                  SHA256

                  cee937d6f0ef6b0c6cd0200cf70e868c36583bd9759da6fe34b38c2045f77e39

                  SHA512

                  d5fe46b7c4638c71a4f0ab67fe75d4c7f6c4a5ffaaec13a38c5c95456eac2078935824d62aa59d0374a77b19ed56ef2c1ebe3c40e230651ffd9cd986141eaeb8

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\electron-acrylic-window\dist\bindings.js

                  Filesize

                  312B

                  MD5

                  e7553f9c9538b3ba41f03064159e1076

                  SHA1

                  804eb4fa9f90f54d3714fcbabfb8a86d1bf02479

                  SHA256

                  cc3e61575dbf5c333fd62a69e1210e82d86298f4a35088d0ac75c46cdc711ceb

                  SHA512

                  61c12fd3631b69d4befbf57c64d51945e57adae578b1e159d620a180045cb39abf7581ad51f89da3ef1901c2df95542da744a4c74c88a9dedb98a7ce6ecdf838

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\electron-acrylic-window\dist\browserWindow.js

                  Filesize

                  14KB

                  MD5

                  6a7a120e4c3b878521af31af47574a57

                  SHA1

                  5888a8f13f46b21530b9f7a50bc06e0ce559cb2f

                  SHA256

                  12e7ee36a43ef33464c59e2f36e0435fac4aee9ef2f582d24768e9a92b7090a3

                  SHA512

                  2bca236a879ddcfec9c980960f4559204b5803d9412403084ef8d5ff0b74070c9906c8f374b666e9beef3896e5a8a3927480801c6fdccfcf6239e54071d03af4

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\electron-acrylic-window\dist\debug.js

                  Filesize

                  389B

                  MD5

                  3510488c487bbdfa524aead34f8056c0

                  SHA1

                  b695848bef628995cfe21d0bfa69b6003531d69f

                  SHA256

                  d5244e3974509f24b75abff64fc1c0cc305fc837214860b394dc923e08b267f6

                  SHA512

                  39a147643cdaf7e4f5ae3810111304e94731de861bc2dfdf72cf94df6a2d321fb05f6a05e8ebae9a27d8efea709c8b3553bc414c0c03d0ccd0116a77c34b0e29

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\electron-acrylic-window\dist\index.js

                  Filesize

                  514B

                  MD5

                  7b118d09626085e571dadea3bbff53d5

                  SHA1

                  96ea019f341eebfda6fd4c3711c76f18f1e98883

                  SHA256

                  ca4769c1addf5d8abcda1d1eeb204cab16630936670e704dd617cdeb88e641b0

                  SHA512

                  2866a253a90f6d1d22daf2a057a2daeede711236af59c890a02c17328c2f630b9c56ae4c9b691c2d145a5361ff8348aab58add3fd8e35c53bacd74263a23756f

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\electron-acrylic-window\dist\os.js

                  Filesize

                  1KB

                  MD5

                  9f725cd65714ab0218f88e80fcaef03a

                  SHA1

                  9e766e9af5101cab1c2eef96ef03f1b37d0e7fde

                  SHA256

                  4087f4e33d81807628e9bfbf6611ad7bb28022034f68b43bb82eeb7bada34be1

                  SHA512

                  7b2a67b1cbe8b8ad7dd6ea50824f0162b4fc4345d637dc86a43686f9835062584b02eb0bef6545e4a9596d845c93bd63b13be427f6c7cbae5818ea1d80a6f749

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\electron-acrylic-window\dist\vibrancy.js

                  Filesize

                  6KB

                  MD5

                  29c0dd2a8e7c9159b806a8dd5a2aba19

                  SHA1

                  85c0ce45e2a244f3beb28e687e134f08ae761092

                  SHA256

                  efd98eb112fd02a8456352e98c23b943d9dbbe68abfb911d0d7913dc9a0fe095

                  SHA512

                  6f317c59d92dc7df659585aad4d8faf78ec3dc98a1ff979e6fa39f6dcf2bb33fe663aca5caf5d174f681e3b42a6c0658bf05656b82017d11ffeaf98ce6d01c13

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\electron-acrylic-window\dist\win10refresh.js

                  Filesize

                  13KB

                  MD5

                  07f0e4c666cf9929a74b4c4c862b02ba

                  SHA1

                  68c83dce1cb1e75a472809df8ff0e11f8b326ece

                  SHA256

                  8d5c99342ab0b240343aeb151d61223824abac0f1c4d04c7b11deb6c3ccae638

                  SHA512

                  5e1ea317e7c238efdf9808649c46e68026d5be5671d8be5e4131f5a2d0dfe196961d20eac2842f65c216790e18a11eac3b1480662ac6a5ef515d337b49462e99

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\electron-acrylic-window\package.json

                  Filesize

                  1KB

                  MD5

                  b11d67c4b8e01238a37dc3c106078aee

                  SHA1

                  2cc6cafd1ad4091f1f65b791d1434416220cfaa4

                  SHA256

                  40e59028faabcfc46ba17c29ae03fa7b7473b5927b07c7aef84069fbc9dbaaec

                  SHA512

                  e7af1db88931024d45b389998f3424e202f9c6160d9efbf4bd4db9b452dac7b0b313b920ff32abb13f1a77b38fed42aaf931006290575e49221cec5ff74a8b1c

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\file-uri-to-path\index.js

                  Filesize

                  1KB

                  MD5

                  d98f7c699c54e0e90f408a44feb3188b

                  SHA1

                  0ffd660201ce0749053d108c53e5606b9da158d6

                  SHA256

                  e62293e871bdd5a7449ff3c7956c9536ec1d2ea7369461de77322b5256bb93e7

                  SHA512

                  7389081fbf3b16f0ad99f556337679be895e04930e36bfc8f99720e013f28b68bdd4579f11eb41dd4cc7a64a36ec26a6e6539d42d5888696f71e7d2d9c8784dc

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\node_modules\file-uri-to-path\package.json

                  Filesize

                  505B

                  MD5

                  eb504558c70bcbe85d5d1c57500c6d37

                  SHA1

                  8319e1ce676a7c41334d8e71165eec209e52a88b

                  SHA256

                  4f5e1422fe14c36ceed42f77b90cd53d2ef0506e866880f4704459a2b79a75fb

                  SHA512

                  411182c75c0f52c8d80230180d17d679f45ab7e634a6e4566eeafabc2b366bfd8b0dde59099860fc3dc6e23e0e42dc8173e0a10443c72045d8408f6b3107ea6c

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\resources\app\package.json

                  Filesize

                  605B

                  MD5

                  dfb2a22859d4432584d2660657abaa9c

                  SHA1

                  034e58004f6ee8b360cb5eb781506d7763628b7a

                  SHA256

                  af5fdaf4208f51a25145307a74d245086668ad825fddacd08d0cb455c169960e

                  SHA512

                  aea7b507cf720aff50e062cd389b7e7449b3847e9ef0215087d11d2633a1e35c0d3dece8fae576c7dd096c088484d641bb7ed19895e05882389d75b26594e23b

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\v8_context_snapshot.bin

                  Filesize

                  716KB

                  MD5

                  25727ffbdf9cc388e7cce38bbfbdb62a

                  SHA1

                  4dc875473b0916ecc602e6e0fc851e460f574be9

                  SHA256

                  83031cb1ea99bd520eeb4e29683077163ed4359769d84bb78d373475fb95b1cc

                  SHA512

                  439c1dfa8e98a0c9eb62269e4722fa8ebef06fe98149fcd95c5f0f516c07d82caa4975ea1dfe3ab1cf011ee5d29d2f67640f36bdc9cb5eee2cf16d50d4260bc7

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\vk_swiftshader.dll

                  Filesize

                  4.6MB

                  MD5

                  11a3e0c61d881f52a987764d9098e0c0

                  SHA1

                  446275b8424d48da9abfd6b7325e65eefd668710

                  SHA256

                  f051032f3a923669591abce566b8a83798c520e4403785c550013b19b05ed362

                  SHA512

                  24a02f3b6d3a807774fe62f03204bd406adf60323c82caad7d3b28a479cc1f53c9b71cd8f0f6a19dd8f4c537aed0584d7c8d5a17764f5e4dcafb990a357fb5c9

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\vk_swiftshader.dll

                  Filesize

                  4.6MB

                  MD5

                  11a3e0c61d881f52a987764d9098e0c0

                  SHA1

                  446275b8424d48da9abfd6b7325e65eefd668710

                  SHA256

                  f051032f3a923669591abce566b8a83798c520e4403785c550013b19b05ed362

                  SHA512

                  24a02f3b6d3a807774fe62f03204bd406adf60323c82caad7d3b28a479cc1f53c9b71cd8f0f6a19dd8f4c537aed0584d7c8d5a17764f5e4dcafb990a357fb5c9

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\vk_swiftshader_icd.json

                  Filesize

                  106B

                  MD5

                  8642dd3a87e2de6e991fae08458e302b

                  SHA1

                  9c06735c31cec00600fd763a92f8112d085bd12a

                  SHA256

                  32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

                  SHA512

                  f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\vulkan-1.dll

                  Filesize

                  849KB

                  MD5

                  c002de503aa378f553b9e1b345402451

                  SHA1

                  5409719966e070444fad536b12ae6184c2df2bdc

                  SHA256

                  7b0befb159850337f15fce2f644af625cad8d6fc0b3d1abaa523da85c986aecf

                  SHA512

                  2f22554650835f4b4431e906542f7f7ae16a326e59169751ac4e67a3dc793288588a225a0f2da98938e2f7984d70efa17afb368098755690914cfb80c0bb8fd8

                • C:\Users\Admin\AppData\Local\Programs\rave-desktop\vulkan-1.dll

                  Filesize

                  849KB

                  MD5

                  c002de503aa378f553b9e1b345402451

                  SHA1

                  5409719966e070444fad536b12ae6184c2df2bdc

                  SHA256

                  7b0befb159850337f15fce2f644af625cad8d6fc0b3d1abaa523da85c986aecf

                  SHA512

                  2f22554650835f4b4431e906542f7f7ae16a326e59169751ac4e67a3dc793288588a225a0f2da98938e2f7984d70efa17afb368098755690914cfb80c0bb8fd8

                • C:\Users\Admin\AppData\Local\Temp\nszAD6C.tmp\SpiderBanner.dll

                  Filesize

                  9KB

                  MD5

                  17309e33b596ba3a5693b4d3e85cf8d7

                  SHA1

                  7d361836cf53df42021c7f2b148aec9458818c01

                  SHA256

                  996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

                  SHA512

                  1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

                • C:\Users\Admin\AppData\Local\Temp\nszAD6C.tmp\StdUtils.dll

                  Filesize

                  100KB

                  MD5

                  c6a6e03f77c313b267498515488c5740

                  SHA1

                  3d49fc2784b9450962ed6b82b46e9c3c957d7c15

                  SHA256

                  b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

                  SHA512

                  9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

                • C:\Users\Admin\AppData\Local\Temp\nszAD6C.tmp\System.dll

                  Filesize

                  12KB

                  MD5

                  0d7ad4f45dc6f5aa87f606d0331c6901

                  SHA1

                  48df0911f0484cbe2a8cdd5362140b63c41ee457

                  SHA256

                  3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

                  SHA512

                  c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

                • C:\Users\Admin\AppData\Local\Temp\nszAD6C.tmp\WinShell.dll

                  Filesize

                  3KB

                  MD5

                  1cc7c37b7e0c8cd8bf04b6cc283e1e56

                  SHA1

                  0b9519763be6625bd5abce175dcc59c96d100d4c

                  SHA256

                  9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                  SHA512

                  7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                • C:\Users\Admin\AppData\Local\Temp\nszAD6C.tmp\WinShell.dll

                  Filesize

                  3KB

                  MD5

                  1cc7c37b7e0c8cd8bf04b6cc283e1e56

                  SHA1

                  0b9519763be6625bd5abce175dcc59c96d100d4c

                  SHA256

                  9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                  SHA512

                  7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                • C:\Users\Admin\AppData\Local\Temp\nszAD6C.tmp\nsExec.dll

                  Filesize

                  6KB

                  MD5

                  ec0504e6b8a11d5aad43b296beeb84b2

                  SHA1

                  91b5ce085130c8c7194d66b2439ec9e1c206497c

                  SHA256

                  5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

                  SHA512

                  3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

                • C:\Users\Admin\AppData\Local\Temp\nszAD6C.tmp\nsis7z.dll

                  Filesize

                  424KB

                  MD5

                  80e44ce4895304c6a3a831310fbf8cd0

                  SHA1

                  36bd49ae21c460be5753a904b4501f1abca53508

                  SHA256

                  b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

                  SHA512

                  c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df