Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    57s
  • max time network
    65s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    05/03/2023, 21:44

General

  • Target

    Chatterino.Installer.exe

  • Size

    42.8MB

  • MD5

    5336ce17d2a31bae379fc8863f3a4344

  • SHA1

    205cbb7a44456e12458ef17a9a39983f0d8e3fc9

  • SHA256

    26d8a2669d27e58a7623b583b1290547402c9a9a2c9fd1ecbcb3e8b08c4fccc2

  • SHA512

    6a9705eea2668f4651602410bd747beb50628acecf499d57a9a9ea08ba20632a873b0e151847964b19fe6fd53c9b308fad325c2db6f0737e8efab857b5bcd4dc

  • SSDEEP

    786432:rY3KxknxKPXgK0sujEEbs23Rf4a7SCNXZKM+WOkEg5MCuKOE+:1kCOsJ6s2BLWNWvEge3ZE+

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 26 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 4 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 5 IoCs
  • Suspicious use of WriteProcessMemory 11 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Chatterino.Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\Chatterino.Installer.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:912
    • C:\Users\Admin\AppData\Local\Temp\is-R2JU9.tmp\Chatterino.Installer.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-R2JU9.tmp\Chatterino.Installer.tmp" /SL5="$7011E,44028552,792576,C:\Users\Admin\AppData\Local\Temp\Chatterino.Installer.exe"
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of WriteProcessMemory
      PID:1316
      • C:\Users\Admin\AppData\Local\Programs\Chatterino\chatterino.exe
        "C:\Users\Admin\AppData\Local\Programs\Chatterino\chatterino.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: AddClipboardFormatListener
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of SetWindowsHookEx
        PID:868
  • C:\Windows\system32\AUDIODG.EXE
    C:\Windows\system32\AUDIODG.EXE 0x498
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:1112

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    61KB

    MD5

    e71c8443ae0bc2e282c73faead0a6dd3

    SHA1

    0c110c1b01e68edfacaeae64781a37b1995fa94b

    SHA256

    95b0a5acc5bf70d3abdfd091d0c9f9063aa4fde65bd34dbf16786082e1992e72

    SHA512

    b38458c7fa2825afb72794f374827403d5946b1132e136a0ce075dfd351277cf7d957c88dc8a1e4adc3bcae1fa8010dae3831e268e910d517691de24326391a6

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\Qt5Core.dll

    Filesize

    5.7MB

    MD5

    817520432a42efa345b2d97f5c24510e

    SHA1

    fea7b9c61569d7e76af5effd726b7ff6147961e5

    SHA256

    8d2ff4ce9096ddccc4f4cd62c2e41fc854cfd1b0d6e8d296645a7f5fd4ae565a

    SHA512

    8673b26ec5421fce8e23adf720de5690673bb4ce6116cb44ebcc61bbbef12c0ad286dfd675edbed5d8d000efd7609c81aae4533180cf4ec9cd5316e7028f7441

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\Qt5Gui.dll

    Filesize

    6.7MB

    MD5

    47307a1e2e9987ab422f09771d590ff1

    SHA1

    0dfc3a947e56c749a75f921f4a850a3dcbf04248

    SHA256

    5e7d2d41b8b92a880e83b8cc0ca173f5da61218604186196787ee1600956be1e

    SHA512

    21b1c133334c7ca7bbbe4f00a689c580ff80005749da1aa453cceb293f1ad99f459ca954f54e93b249d406aea038ad3d44d667899b73014f884afdbd9c461c14

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\Qt5Network.dll

    Filesize

    1.3MB

    MD5

    3569693d5bae82854de1d88f86c33184

    SHA1

    1a6084acfd2aa4d32cedfb7d9023f60eb14e1771

    SHA256

    4ef341ae9302e793878020f0740b09b0f31cb380408a697f75c69fdbd20fc7a1

    SHA512

    e5eff4a79e1bdae28a6ca0da116245a9919023560750fc4a087cdcd0ab969c2f0eeec63bbec2cd5222d6824a01dd27d2a8e6684a48202ea733f9bb2fab048b32

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\Qt5Svg.dll

    Filesize

    322KB

    MD5

    03761f923e52a7269a6e3a7452f6be93

    SHA1

    2ce53c424336bcc8047e10fa79ce9bce14059c50

    SHA256

    7348cfc6444438b8845fb3f59381227325d40ca2187d463e82fc7b8e93e38db5

    SHA512

    de0ff8ebffc62af279e239722e6eedd0b46bc213e21d0a687572bfb92ae1a1e4219322233224ca8b7211ffef52d26cb9fe171d175d2390e3b3e6710bbda010cb

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\Qt5Widgets.dll

    Filesize

    5.2MB

    MD5

    4cd1f8fdcd617932db131c3688845ea8

    SHA1

    b090ed884b07d2d98747141aefd25590b8b254f9

    SHA256

    3788c669d4b645e5a576de9fc77fca776bf516d43c89143dc2ca28291ba14358

    SHA512

    7d47d2661bf8fac937f0d168036652b7cfe0d749b571d9773a5446c512c58ee6bb081fec817181a90f4543ebc2367c7f8881ff7f80908aa48a7f6bb261f1d199

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\chatterino.exe

    Filesize

    7.1MB

    MD5

    1ef2178664b39ec79f95d2afd4cd05a1

    SHA1

    f5b55b60955177e511834afb195e9c00137c6fdf

    SHA256

    6f1fde72e195ca5717ad6671fbdb2030cf86d579f3fd2ae4a5a48785ce99e2a7

    SHA512

    8d4d7b97ee9dc334c6c6f216f9a321aa191cc45daf2b2a7dc1cd7dcded7e0ca0aaf1060ccce6e2e131577b8e4f620424fa6a9e685f5a3b96ef99dd1c6a6d7b3d

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\chatterino.exe

    Filesize

    7.1MB

    MD5

    1ef2178664b39ec79f95d2afd4cd05a1

    SHA1

    f5b55b60955177e511834afb195e9c00137c6fdf

    SHA256

    6f1fde72e195ca5717ad6671fbdb2030cf86d579f3fd2ae4a5a48785ce99e2a7

    SHA512

    8d4d7b97ee9dc334c6c6f216f9a321aa191cc45daf2b2a7dc1cd7dcded7e0ca0aaf1060ccce6e2e131577b8e4f620424fa6a9e685f5a3b96ef99dd1c6a6d7b3d

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\chatterino.exe

    Filesize

    7.1MB

    MD5

    1ef2178664b39ec79f95d2afd4cd05a1

    SHA1

    f5b55b60955177e511834afb195e9c00137c6fdf

    SHA256

    6f1fde72e195ca5717ad6671fbdb2030cf86d579f3fd2ae4a5a48785ce99e2a7

    SHA512

    8d4d7b97ee9dc334c6c6f216f9a321aa191cc45daf2b2a7dc1cd7dcded7e0ca0aaf1060ccce6e2e131577b8e4f620424fa6a9e685f5a3b96ef99dd1c6a6d7b3d

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\iconengines\qsvgicon.dll

    Filesize

    40KB

    MD5

    313f89994f3fea8f67a48ee13359f4ba

    SHA1

    8c7d4509a0caa1164cc9415f44735b885a2f3270

    SHA256

    42dde60befcf1d9f96b8366a9988626b97d7d0d829ebea32f756d6ecd9ea99a8

    SHA512

    06e5026f5db929f242104a503f0d501a9c1dc92973dd0e91d2daf5b277d190082de8d37ace7edf643c70aa98bb3d670defe04ce89b483da4f34e629f8ed5fecf

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qgif.dll

    Filesize

    38KB

    MD5

    52fd90e34fe8ded8e197b532bd622ef7

    SHA1

    834e280e00bae48a9e509a7dc909bea3169bdce2

    SHA256

    36174dd4c5f37c5f065c7a26e0ac65c4c3a41fdc0416882af856a23a5d03bb9d

    SHA512

    ef3fb3770808b3690c11a18316b0c1c56c80198c1b1910e8aa198df8281ba4e13dc9a6179bb93a379ad849304f6bb934f23e6bbd3d258b274cc31856de0fc12b

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qicns.dll

    Filesize

    43KB

    MD5

    ad84af4d585643ff94bfa6de672b3284

    SHA1

    5d2df51028fbeb7f6b52c02add702bc3fa781e08

    SHA256

    f4a229a082d16f80016f366156a2b951550f1e9df6d4177323bbedd92a429909

    SHA512

    b68d83a4a1928eb3390deb9340cb27b8a3eb221c2e0be86211ef318b4dd34b37531ca347c73cce79a640c5b06fbd325e10f8c37e0cee2581f22abfbff5cc0d55

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qico.dll

    Filesize

    37KB

    MD5

    a9abd4329ca364d4f430eddcb471be59

    SHA1

    c00a629419509929507a05aebb706562c837e337

    SHA256

    1982a635db9652304131c9c6ff9a693e70241600d2ef22b354962aa37997de0b

    SHA512

    004ea8ae07c1a18b0b461a069409e4061d90401c8555dd23dbf164a08e96732f7126305134bfaf8b65b0406315f218e05b5f0f00bedb840fb993d648ce996756

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qjpeg.dll

    Filesize

    411KB

    MD5

    16abcceb70ba20e73858e8f1912c05cd

    SHA1

    4b3a32b166ab5bbbee229790fdae9cbc84f936ba

    SHA256

    fb4e980cb5fafa8a4cd4239329aed93f7c32ed939c94b61fb2df657f3c6ad158

    SHA512

    3e5c83967bf31c9b7f1720059dd51aa4338e518b076b0461541c781b076135e9cb9cbceb13a8ec9217104517fbcc356bdd3ffaca7956d1c939e43988151f6273

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qsvg.dll

    Filesize

    31KB

    MD5

    c0de135782fa0235a0ea8e97898eaf2a

    SHA1

    fcf5fd99239bf4e0b17b128b0ebec144c7a17de2

    SHA256

    b3498f0a10ac4cb42cf7213db4944a34594ff36c78c50a0f249c9085d1b1ff39

    SHA512

    7bd5f90ccab3cf50c55eaf14f7ef21e05d3c893fa7ac9846c6ca98d6e6d177263ac5eb8a85a34501bcfca0da7f0b6c39769726f4090fca2231ee64869b81cf0b

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qtga.dll

    Filesize

    30KB

    MD5

    a913276fa25d2e6fd999940454c23093

    SHA1

    785b7bc7110218ec0e659c0e5ace9520aa451615

    SHA256

    5b641dec81aec1cf7ac0cce9fc067bb642fbd32da138a36e3bdac3bb5b36c37a

    SHA512

    cebe48e6e6c5cdf8fc339560751813b8de11d2471a3dab7d648df5b313d85735889d4e704e8eec0ad1084ab43be0ebdfbacd038aeac46d7a951efb3a7ce838eb

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qtiff.dll

    Filesize

    380KB

    MD5

    9c0acf12d3d25384868dcd81c787f382

    SHA1

    c6e877aba3fb3d2f21d86be300e753e23bb0b74e

    SHA256

    825174429ced6b3dab18115dbc6c9da07bf5248c86ec1bd5c0dcaeca93b4c22d

    SHA512

    45594fa3c5d7c4f26325927bb8d51b0b88e162e3f5e7b7f39a5d72437606383e9fdc8f83a77f814e45aff254914514ae52c1d840a6c7b98767f362ed3f4fc5bd

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qwbmp.dll

    Filesize

    29KB

    MD5

    68919381e3c64e956d05863339f5c68c

    SHA1

    ce0a2ad1f1a46b61cb298cec5aa0b25ff2c12992

    SHA256

    0f05969fb926a62a338782b32446ea3e28e4bfbffc0dbd25ed303fab3404abac

    SHA512

    6222a3818157f6bcd793291a6c0380ef8c6b93ecea2e0c9a767d9d9163461b541afaf8c6b21c5a020f01c95c6ee9b2b74b358ba18da120f520e87e24b20836aa

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qwebp.dll

    Filesize

    498KB

    MD5

    308e4565c3c5646f9abd77885b07358e

    SHA1

    71cb8047a9ef0cdb3ee27428726cacd063bb95b7

    SHA256

    6e37acd0d357871f92b7fde7206c904c734caa02f94544df646957df8c4987af

    SHA512

    ffaeecfae097d5e9d1186522bd8d29c95ce48b87583624eb6d0d52bd19e36db2860a557e19f0a05847458605a9a540c2a9899d53d36a6b7fd5bf0ad86af88124

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\libcrypto-1_1-x64.dll

    Filesize

    3.3MB

    MD5

    cfb9844b3b0690380bd2c1e1d9f31f3b

    SHA1

    cb17b3efc396d2ef6815be5ae2f637cde6d023df

    SHA256

    60858bb57ade152a047e9a822d6e8cff5cda17885e786792fe4ec620edd36d84

    SHA512

    7daf090a932de98e67294f943770e12f045a42a64dd73f6381d24e5e59698442d6fbc45c986ea694748b635944c5a88c5f6c8f0c5a8daa8d5e1b8d8e2fbbbeff

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\libssl-1_1-x64.dll

    Filesize

    667KB

    MD5

    4b96d2e98696628be13bfec565bc4d27

    SHA1

    0613f878bbf4c3d880abfcbb287402c8743bf04f

    SHA256

    a665332588c0fc919b9fa4af5e05b89dbc10114736e78f0757ee53049d246b05

    SHA512

    c924855ed2c5b1b807dffad8d1a55e9caed8cabea75c7419875853b48e3aec9036e3fbbf47b230e8614e29d7ac3eca251af996572397dc8136120531ba310879

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\platforms\qwindows.dll

    Filesize

    1.4MB

    MD5

    4931fcd0e86c4d4f83128dc74e01eaad

    SHA1

    ac1d0242d36896d4dda53b95812f11692e87d8df

    SHA256

    3333ba244c97264e3bd19db5953efa80a6e47aaced9d337ac3287ec718162b85

    SHA512

    0396bccda43856950afe4e7b16e0f95d4d48b87473dc90cf029e6ddfd0777e1192c307cfe424eae6fb61c1b479f0ba1ef1e4269a69c843311a37252cf817d84d

  • C:\Users\Admin\AppData\Local\Programs\Chatterino\styles\qwindowsvistastyle.dll

    Filesize

    140KB

    MD5

    53a85f51054b7d58d8ad7c36975acb96

    SHA1

    893a757ca01472a96fb913d436aa9f8cfb2a297f

    SHA256

    d9b21182952682fe7ba63af1df24e23ace592c35b3f31eceef9f0eabeb5881b9

    SHA512

    35957964213b41f1f21b860b03458404fbf11daf03d102fbea8c2b2f249050cefbb348edc3f22d8ecc3cb8abfdc44215c2dc9da029b4f93a7f40197bd0c16960

  • C:\Users\Admin\AppData\Local\Temp\TarB7A4.tmp

    Filesize

    161KB

    MD5

    be2bec6e8c5653136d3e72fe53c98aa3

    SHA1

    a8182d6db17c14671c3d5766c72e58d87c0810de

    SHA256

    1919aab2a820642490169bdc4e88bd1189e22f83e7498bf8ebdfb62ec7d843fd

    SHA512

    0d1424ccdf0d53faf3f4e13d534e12f22388648aa4c23edbc503801e3c96b7f73c7999b760b5bef4b5e9dd923dffe21a21889b1ce836dd428420bf0f4f5327ff

  • C:\Users\Admin\AppData\Local\Temp\is-R2JU9.tmp\Chatterino.Installer.tmp

    Filesize

    3.0MB

    MD5

    6b62646faf2f59b7c2c243af7c1ea902

    SHA1

    7f0bedfac295020695284625b786b42e10d089c5

    SHA256

    924721d3b4a6c19e218c94790c03ff498c9d0d0495018559b8dec9fc67c22fbd

    SHA512

    77dda5d7b6f62742ee7221eaa24f219cbf3ef58b3861f711653384cc126b2ad947a2ce386212a5a66e8f3291be857b7a9956f8014fa006532e1c82151dc547a9

  • C:\Users\Admin\AppData\Local\Temp\is-R2JU9.tmp\Chatterino.Installer.tmp

    Filesize

    3.0MB

    MD5

    6b62646faf2f59b7c2c243af7c1ea902

    SHA1

    7f0bedfac295020695284625b786b42e10d089c5

    SHA256

    924721d3b4a6c19e218c94790c03ff498c9d0d0495018559b8dec9fc67c22fbd

    SHA512

    77dda5d7b6f62742ee7221eaa24f219cbf3ef58b3861f711653384cc126b2ad947a2ce386212a5a66e8f3291be857b7a9956f8014fa006532e1c82151dc547a9

  • \Users\Admin\AppData\Local\Programs\Chatterino\Qt5Core.dll

    Filesize

    5.7MB

    MD5

    817520432a42efa345b2d97f5c24510e

    SHA1

    fea7b9c61569d7e76af5effd726b7ff6147961e5

    SHA256

    8d2ff4ce9096ddccc4f4cd62c2e41fc854cfd1b0d6e8d296645a7f5fd4ae565a

    SHA512

    8673b26ec5421fce8e23adf720de5690673bb4ce6116cb44ebcc61bbbef12c0ad286dfd675edbed5d8d000efd7609c81aae4533180cf4ec9cd5316e7028f7441

  • \Users\Admin\AppData\Local\Programs\Chatterino\Qt5Gui.dll

    Filesize

    6.7MB

    MD5

    47307a1e2e9987ab422f09771d590ff1

    SHA1

    0dfc3a947e56c749a75f921f4a850a3dcbf04248

    SHA256

    5e7d2d41b8b92a880e83b8cc0ca173f5da61218604186196787ee1600956be1e

    SHA512

    21b1c133334c7ca7bbbe4f00a689c580ff80005749da1aa453cceb293f1ad99f459ca954f54e93b249d406aea038ad3d44d667899b73014f884afdbd9c461c14

  • \Users\Admin\AppData\Local\Programs\Chatterino\Qt5Network.dll

    Filesize

    1.3MB

    MD5

    3569693d5bae82854de1d88f86c33184

    SHA1

    1a6084acfd2aa4d32cedfb7d9023f60eb14e1771

    SHA256

    4ef341ae9302e793878020f0740b09b0f31cb380408a697f75c69fdbd20fc7a1

    SHA512

    e5eff4a79e1bdae28a6ca0da116245a9919023560750fc4a087cdcd0ab969c2f0eeec63bbec2cd5222d6824a01dd27d2a8e6684a48202ea733f9bb2fab048b32

  • \Users\Admin\AppData\Local\Programs\Chatterino\Qt5Svg.dll

    Filesize

    322KB

    MD5

    03761f923e52a7269a6e3a7452f6be93

    SHA1

    2ce53c424336bcc8047e10fa79ce9bce14059c50

    SHA256

    7348cfc6444438b8845fb3f59381227325d40ca2187d463e82fc7b8e93e38db5

    SHA512

    de0ff8ebffc62af279e239722e6eedd0b46bc213e21d0a687572bfb92ae1a1e4219322233224ca8b7211ffef52d26cb9fe171d175d2390e3b3e6710bbda010cb

  • \Users\Admin\AppData\Local\Programs\Chatterino\Qt5Widgets.dll

    Filesize

    5.2MB

    MD5

    4cd1f8fdcd617932db131c3688845ea8

    SHA1

    b090ed884b07d2d98747141aefd25590b8b254f9

    SHA256

    3788c669d4b645e5a576de9fc77fca776bf516d43c89143dc2ca28291ba14358

    SHA512

    7d47d2661bf8fac937f0d168036652b7cfe0d749b571d9773a5446c512c58ee6bb081fec817181a90f4543ebc2367c7f8881ff7f80908aa48a7f6bb261f1d199

  • \Users\Admin\AppData\Local\Programs\Chatterino\chatterino.exe

    Filesize

    7.1MB

    MD5

    1ef2178664b39ec79f95d2afd4cd05a1

    SHA1

    f5b55b60955177e511834afb195e9c00137c6fdf

    SHA256

    6f1fde72e195ca5717ad6671fbdb2030cf86d579f3fd2ae4a5a48785ce99e2a7

    SHA512

    8d4d7b97ee9dc334c6c6f216f9a321aa191cc45daf2b2a7dc1cd7dcded7e0ca0aaf1060ccce6e2e131577b8e4f620424fa6a9e685f5a3b96ef99dd1c6a6d7b3d

  • \Users\Admin\AppData\Local\Programs\Chatterino\chatterino.exe

    Filesize

    7.1MB

    MD5

    1ef2178664b39ec79f95d2afd4cd05a1

    SHA1

    f5b55b60955177e511834afb195e9c00137c6fdf

    SHA256

    6f1fde72e195ca5717ad6671fbdb2030cf86d579f3fd2ae4a5a48785ce99e2a7

    SHA512

    8d4d7b97ee9dc334c6c6f216f9a321aa191cc45daf2b2a7dc1cd7dcded7e0ca0aaf1060ccce6e2e131577b8e4f620424fa6a9e685f5a3b96ef99dd1c6a6d7b3d

  • \Users\Admin\AppData\Local\Programs\Chatterino\chatterino.exe

    Filesize

    7.1MB

    MD5

    1ef2178664b39ec79f95d2afd4cd05a1

    SHA1

    f5b55b60955177e511834afb195e9c00137c6fdf

    SHA256

    6f1fde72e195ca5717ad6671fbdb2030cf86d579f3fd2ae4a5a48785ce99e2a7

    SHA512

    8d4d7b97ee9dc334c6c6f216f9a321aa191cc45daf2b2a7dc1cd7dcded7e0ca0aaf1060ccce6e2e131577b8e4f620424fa6a9e685f5a3b96ef99dd1c6a6d7b3d

  • \Users\Admin\AppData\Local\Programs\Chatterino\chatterino.exe

    Filesize

    7.1MB

    MD5

    1ef2178664b39ec79f95d2afd4cd05a1

    SHA1

    f5b55b60955177e511834afb195e9c00137c6fdf

    SHA256

    6f1fde72e195ca5717ad6671fbdb2030cf86d579f3fd2ae4a5a48785ce99e2a7

    SHA512

    8d4d7b97ee9dc334c6c6f216f9a321aa191cc45daf2b2a7dc1cd7dcded7e0ca0aaf1060ccce6e2e131577b8e4f620424fa6a9e685f5a3b96ef99dd1c6a6d7b3d

  • \Users\Admin\AppData\Local\Programs\Chatterino\chatterino.exe

    Filesize

    7.1MB

    MD5

    1ef2178664b39ec79f95d2afd4cd05a1

    SHA1

    f5b55b60955177e511834afb195e9c00137c6fdf

    SHA256

    6f1fde72e195ca5717ad6671fbdb2030cf86d579f3fd2ae4a5a48785ce99e2a7

    SHA512

    8d4d7b97ee9dc334c6c6f216f9a321aa191cc45daf2b2a7dc1cd7dcded7e0ca0aaf1060ccce6e2e131577b8e4f620424fa6a9e685f5a3b96ef99dd1c6a6d7b3d

  • \Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qgif.dll

    Filesize

    38KB

    MD5

    52fd90e34fe8ded8e197b532bd622ef7

    SHA1

    834e280e00bae48a9e509a7dc909bea3169bdce2

    SHA256

    36174dd4c5f37c5f065c7a26e0ac65c4c3a41fdc0416882af856a23a5d03bb9d

    SHA512

    ef3fb3770808b3690c11a18316b0c1c56c80198c1b1910e8aa198df8281ba4e13dc9a6179bb93a379ad849304f6bb934f23e6bbd3d258b274cc31856de0fc12b

  • \Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qicns.dll

    Filesize

    43KB

    MD5

    ad84af4d585643ff94bfa6de672b3284

    SHA1

    5d2df51028fbeb7f6b52c02add702bc3fa781e08

    SHA256

    f4a229a082d16f80016f366156a2b951550f1e9df6d4177323bbedd92a429909

    SHA512

    b68d83a4a1928eb3390deb9340cb27b8a3eb221c2e0be86211ef318b4dd34b37531ca347c73cce79a640c5b06fbd325e10f8c37e0cee2581f22abfbff5cc0d55

  • \Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qico.dll

    Filesize

    37KB

    MD5

    a9abd4329ca364d4f430eddcb471be59

    SHA1

    c00a629419509929507a05aebb706562c837e337

    SHA256

    1982a635db9652304131c9c6ff9a693e70241600d2ef22b354962aa37997de0b

    SHA512

    004ea8ae07c1a18b0b461a069409e4061d90401c8555dd23dbf164a08e96732f7126305134bfaf8b65b0406315f218e05b5f0f00bedb840fb993d648ce996756

  • \Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qjpeg.dll

    Filesize

    411KB

    MD5

    16abcceb70ba20e73858e8f1912c05cd

    SHA1

    4b3a32b166ab5bbbee229790fdae9cbc84f936ba

    SHA256

    fb4e980cb5fafa8a4cd4239329aed93f7c32ed939c94b61fb2df657f3c6ad158

    SHA512

    3e5c83967bf31c9b7f1720059dd51aa4338e518b076b0461541c781b076135e9cb9cbceb13a8ec9217104517fbcc356bdd3ffaca7956d1c939e43988151f6273

  • \Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qsvg.dll

    Filesize

    31KB

    MD5

    c0de135782fa0235a0ea8e97898eaf2a

    SHA1

    fcf5fd99239bf4e0b17b128b0ebec144c7a17de2

    SHA256

    b3498f0a10ac4cb42cf7213db4944a34594ff36c78c50a0f249c9085d1b1ff39

    SHA512

    7bd5f90ccab3cf50c55eaf14f7ef21e05d3c893fa7ac9846c6ca98d6e6d177263ac5eb8a85a34501bcfca0da7f0b6c39769726f4090fca2231ee64869b81cf0b

  • \Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qtga.dll

    Filesize

    30KB

    MD5

    a913276fa25d2e6fd999940454c23093

    SHA1

    785b7bc7110218ec0e659c0e5ace9520aa451615

    SHA256

    5b641dec81aec1cf7ac0cce9fc067bb642fbd32da138a36e3bdac3bb5b36c37a

    SHA512

    cebe48e6e6c5cdf8fc339560751813b8de11d2471a3dab7d648df5b313d85735889d4e704e8eec0ad1084ab43be0ebdfbacd038aeac46d7a951efb3a7ce838eb

  • \Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qtiff.dll

    Filesize

    380KB

    MD5

    9c0acf12d3d25384868dcd81c787f382

    SHA1

    c6e877aba3fb3d2f21d86be300e753e23bb0b74e

    SHA256

    825174429ced6b3dab18115dbc6c9da07bf5248c86ec1bd5c0dcaeca93b4c22d

    SHA512

    45594fa3c5d7c4f26325927bb8d51b0b88e162e3f5e7b7f39a5d72437606383e9fdc8f83a77f814e45aff254914514ae52c1d840a6c7b98767f362ed3f4fc5bd

  • \Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qwbmp.dll

    Filesize

    29KB

    MD5

    68919381e3c64e956d05863339f5c68c

    SHA1

    ce0a2ad1f1a46b61cb298cec5aa0b25ff2c12992

    SHA256

    0f05969fb926a62a338782b32446ea3e28e4bfbffc0dbd25ed303fab3404abac

    SHA512

    6222a3818157f6bcd793291a6c0380ef8c6b93ecea2e0c9a767d9d9163461b541afaf8c6b21c5a020f01c95c6ee9b2b74b358ba18da120f520e87e24b20836aa

  • \Users\Admin\AppData\Local\Programs\Chatterino\imageformats\qwebp.dll

    Filesize

    498KB

    MD5

    308e4565c3c5646f9abd77885b07358e

    SHA1

    71cb8047a9ef0cdb3ee27428726cacd063bb95b7

    SHA256

    6e37acd0d357871f92b7fde7206c904c734caa02f94544df646957df8c4987af

    SHA512

    ffaeecfae097d5e9d1186522bd8d29c95ce48b87583624eb6d0d52bd19e36db2860a557e19f0a05847458605a9a540c2a9899d53d36a6b7fd5bf0ad86af88124

  • \Users\Admin\AppData\Local\Programs\Chatterino\libcrypto-1_1-x64.dll

    Filesize

    3.3MB

    MD5

    cfb9844b3b0690380bd2c1e1d9f31f3b

    SHA1

    cb17b3efc396d2ef6815be5ae2f637cde6d023df

    SHA256

    60858bb57ade152a047e9a822d6e8cff5cda17885e786792fe4ec620edd36d84

    SHA512

    7daf090a932de98e67294f943770e12f045a42a64dd73f6381d24e5e59698442d6fbc45c986ea694748b635944c5a88c5f6c8f0c5a8daa8d5e1b8d8e2fbbbeff

  • \Users\Admin\AppData\Local\Programs\Chatterino\libcrypto-1_1-x64.dll

    Filesize

    3.3MB

    MD5

    cfb9844b3b0690380bd2c1e1d9f31f3b

    SHA1

    cb17b3efc396d2ef6815be5ae2f637cde6d023df

    SHA256

    60858bb57ade152a047e9a822d6e8cff5cda17885e786792fe4ec620edd36d84

    SHA512

    7daf090a932de98e67294f943770e12f045a42a64dd73f6381d24e5e59698442d6fbc45c986ea694748b635944c5a88c5f6c8f0c5a8daa8d5e1b8d8e2fbbbeff

  • \Users\Admin\AppData\Local\Programs\Chatterino\libssl-1_1-x64.dll

    Filesize

    667KB

    MD5

    4b96d2e98696628be13bfec565bc4d27

    SHA1

    0613f878bbf4c3d880abfcbb287402c8743bf04f

    SHA256

    a665332588c0fc919b9fa4af5e05b89dbc10114736e78f0757ee53049d246b05

    SHA512

    c924855ed2c5b1b807dffad8d1a55e9caed8cabea75c7419875853b48e3aec9036e3fbbf47b230e8614e29d7ac3eca251af996572397dc8136120531ba310879

  • \Users\Admin\AppData\Local\Programs\Chatterino\libssl-1_1-x64.dll

    Filesize

    667KB

    MD5

    4b96d2e98696628be13bfec565bc4d27

    SHA1

    0613f878bbf4c3d880abfcbb287402c8743bf04f

    SHA256

    a665332588c0fc919b9fa4af5e05b89dbc10114736e78f0757ee53049d246b05

    SHA512

    c924855ed2c5b1b807dffad8d1a55e9caed8cabea75c7419875853b48e3aec9036e3fbbf47b230e8614e29d7ac3eca251af996572397dc8136120531ba310879

  • \Users\Admin\AppData\Local\Programs\Chatterino\platforms\qwindows.dll

    Filesize

    1.4MB

    MD5

    4931fcd0e86c4d4f83128dc74e01eaad

    SHA1

    ac1d0242d36896d4dda53b95812f11692e87d8df

    SHA256

    3333ba244c97264e3bd19db5953efa80a6e47aaced9d337ac3287ec718162b85

    SHA512

    0396bccda43856950afe4e7b16e0f95d4d48b87473dc90cf029e6ddfd0777e1192c307cfe424eae6fb61c1b479f0ba1ef1e4269a69c843311a37252cf817d84d

  • \Users\Admin\AppData\Local\Programs\Chatterino\styles\qwindowsvistastyle.dll

    Filesize

    140KB

    MD5

    53a85f51054b7d58d8ad7c36975acb96

    SHA1

    893a757ca01472a96fb913d436aa9f8cfb2a297f

    SHA256

    d9b21182952682fe7ba63af1df24e23ace592c35b3f31eceef9f0eabeb5881b9

    SHA512

    35957964213b41f1f21b860b03458404fbf11daf03d102fbea8c2b2f249050cefbb348edc3f22d8ecc3cb8abfdc44215c2dc9da029b4f93a7f40197bd0c16960

  • \Users\Admin\AppData\Local\Temp\is-R2JU9.tmp\Chatterino.Installer.tmp

    Filesize

    3.0MB

    MD5

    6b62646faf2f59b7c2c243af7c1ea902

    SHA1

    7f0bedfac295020695284625b786b42e10d089c5

    SHA256

    924721d3b4a6c19e218c94790c03ff498c9d0d0495018559b8dec9fc67c22fbd

    SHA512

    77dda5d7b6f62742ee7221eaa24f219cbf3ef58b3861f711653384cc126b2ad947a2ce386212a5a66e8f3291be857b7a9956f8014fa006532e1c82151dc547a9

  • memory/868-280-0x0000000000170000-0x000000000017A000-memory.dmp

    Filesize

    40KB

  • memory/868-228-0x0000000000140000-0x0000000000150000-memory.dmp

    Filesize

    64KB

  • memory/868-190-0x000007FEF5E30000-0x000007FEF6371000-memory.dmp

    Filesize

    5.3MB

  • memory/868-281-0x0000000000170000-0x000000000017A000-memory.dmp

    Filesize

    40KB

  • memory/868-236-0x0000000000170000-0x000000000017A000-memory.dmp

    Filesize

    40KB

  • memory/868-279-0x0000000000140000-0x0000000000150000-memory.dmp

    Filesize

    64KB

  • memory/868-197-0x000000013FC80000-0x00000001403AB000-memory.dmp

    Filesize

    7.2MB

  • memory/868-237-0x0000000000170000-0x000000000017A000-memory.dmp

    Filesize

    40KB

  • memory/912-54-0x0000000000400000-0x00000000004CF000-memory.dmp

    Filesize

    828KB

  • memory/912-229-0x0000000000400000-0x00000000004CF000-memory.dmp

    Filesize

    828KB

  • memory/912-64-0x0000000000400000-0x00000000004CF000-memory.dmp

    Filesize

    828KB

  • memory/1316-82-0x0000000000400000-0x0000000000709000-memory.dmp

    Filesize

    3.0MB

  • memory/1316-62-0x00000000035F0000-0x00000000035F1000-memory.dmp

    Filesize

    4KB

  • memory/1316-61-0x00000000001D0000-0x00000000001D1000-memory.dmp

    Filesize

    4KB

  • memory/1316-176-0x00000000001D0000-0x00000000001D1000-memory.dmp

    Filesize

    4KB

  • memory/1316-177-0x00000000035F0000-0x00000000035F1000-memory.dmp

    Filesize

    4KB

  • memory/1316-199-0x0000000000400000-0x0000000000709000-memory.dmp

    Filesize

    3.0MB

  • memory/1316-188-0x0000000000400000-0x0000000000709000-memory.dmp

    Filesize

    3.0MB