1c2d92a970c392e744075679363c85a95ab97a28a22ce6431fbaa206d9ac33e3

Analysis

max time kernel
25s
max time network
155s
platform
windows10-2004_x64
resource
win10v2004-20230220-en
resource tags

arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
submitted
31-03-2023 18:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Solar-Tweaks-Setup-4.3.3.exe
Size

60.3MB
MD5

ed4a1a4fc71c4cfd4ff37bfd00114b7b
SHA1

581a8f1c303c0d592083b4649dd1819e8394efee
SHA256

1c2d92a970c392e744075679363c85a95ab97a28a22ce6431fbaa206d9ac33e3
SHA512

8aa009204b3723af95a2d339f8405a6462c2b2f179f544db02a35bdf095c52ae74a2af128d2facd6ca114c5a0dd1ef50b0ae785917f7e1f0d5ba02b25f8f62d0
SSDEEP

1572864:aV1s9gPNzITDH7QDv2zFZJTCT6MR9L0T+woseEM:aV1sUUXcL2zfNwbnLddEM

Score

7^/10

discovery

Malware Config

Signatures

Executes dropped EXE 3 IoCs

Processes:

Solar Tweaks.exeSolar Tweaks.exeSolar Tweaks.exe

pid process

4616 Solar Tweaks.exe
3664 Solar Tweaks.exe
508 Solar Tweaks.exe

pid	process
4616	Solar Tweaks.exe
3664	Solar Tweaks.exe
508	Solar Tweaks.exe

Loads dropped DLL 10 IoCs

Processes:

Solar-Tweaks-Setup-4.3.3.exeSolar Tweaks.exeSolar Tweaks.exeSolar Tweaks.exe

pid	process
1656	Solar-Tweaks-Setup-4.3.3.exe
1656	Solar-Tweaks-Setup-4.3.3.exe
1656	Solar-Tweaks-Setup-4.3.3.exe
1656	Solar-Tweaks-Setup-4.3.3.exe
1656	Solar-Tweaks-Setup-4.3.3.exe
1656	Solar-Tweaks-Setup-4.3.3.exe
1656	Solar-Tweaks-Setup-4.3.3.exe
4616	Solar Tweaks.exe
3664	Solar Tweaks.exe
508	Solar Tweaks.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082
Enumerates processes with tasklist 1 TTPs 1 IoCs

Process Discovery
T1057

Processes:

tasklist.exe

pid process

3780 tasklist.exe
Suspicious behavior: EnumeratesProcesses 4 IoCs

Processes:

Solar-Tweaks-Setup-4.3.3.exetasklist.exe

pid process

1656 Solar-Tweaks-Setup-4.3.3.exe
1656 Solar-Tweaks-Setup-4.3.3.exe
3780 tasklist.exe
3780 tasklist.exe
Suspicious use of AdjustPrivilegeToken 2 IoCs

Processes:

tasklist.exeSolar-Tweaks-Setup-4.3.3.exe

description pid process

Token: SeDebugPrivilege 3780 tasklist.exe
Token: SeSecurityPrivilege 1656 Solar-Tweaks-Setup-4.3.3.exe

pid	process
3780	tasklist.exe

description	pid	process
Token: SeDebugPrivilege	3780	tasklist.exe
Token: SeSecurityPrivilege	1656	Solar-Tweaks-Setup-4.3.3.exe

Suspicious use of WriteProcessMemory 9 IoCs

Processes:

Solar-Tweaks-Setup-4.3.3.execmd.exe

description	pid	process	target process
PID 1656 wrote to memory of 4740	1656	Solar-Tweaks-Setup-4.3.3.exe	cmd.exe
PID 1656 wrote to memory of 4740	1656	Solar-Tweaks-Setup-4.3.3.exe	cmd.exe
PID 1656 wrote to memory of 4740	1656	Solar-Tweaks-Setup-4.3.3.exe	cmd.exe
PID 4740 wrote to memory of 3780	4740	cmd.exe	tasklist.exe
PID 4740 wrote to memory of 3780	4740	cmd.exe	tasklist.exe
PID 4740 wrote to memory of 3780	4740	cmd.exe	tasklist.exe
PID 4740 wrote to memory of 4412	4740	cmd.exe	find.exe
PID 4740 wrote to memory of 4412	4740	cmd.exe	find.exe
PID 4740 wrote to memory of 4412	4740	cmd.exe	find.exe

C:\Users\Admin\AppData\Local\Temp\Solar-Tweaks-Setup-4.3.3.exe
"C:\Users\Admin\AppData\Local\Temp\Solar-Tweaks-Setup-4.3.3.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:1656
- C:\Windows\SysWOW64\cmd.exe
  cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Solar Tweaks.exe" | find "Solar Tweaks.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:4740
- - C:\Windows\SysWOW64\tasklist.exe
    tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Solar Tweaks.exe"
    3⤵
    - Enumerates processes with tasklist
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:3780
- - C:\Windows\SysWOW64\find.exe
    find "Solar Tweaks.exe"
    3⤵
    PID:4412

C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe
"C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:4616
- C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe
  "C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=1936,13385985417887396740,2960504372949158142,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1984 /prefetch:2
  2⤵
  PID:1408
- C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe
  "C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1936,13385985417887396740,2960504372949158142,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=2332 /prefetch:8
  2⤵
  PID:3816
- C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe
  "C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe" --type=renderer --field-trial-handle=1936,13385985417887396740,2960504372949158142,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-path="C:\Users\Admin\AppData\Local\Programs\solartweaks\resources\app.asar" --no-sandbox --no-zygote --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=3 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2560 /prefetch:1
  2⤵
  PID:4692
- C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe
  "C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=1936,13385985417887396740,2960504372949158142,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2756 /prefetch:2
  2⤵
  PID:4628

C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe
"C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:3664
- C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe
  "C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=1720,7831442528317745719,12715433642884661575,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1728 /prefetch:2
  2⤵
  PID:4728
- C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe
  "C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe" --type=renderer --field-trial-handle=1720,7831442528317745719,12715433642884661575,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-path="C:\Users\Admin\AppData\Local\Programs\solartweaks\resources\app.asar" --no-sandbox --no-zygote --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=3 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2452 /prefetch:1
  2⤵
  PID:2956
- C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe
  "C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1720,7831442528317745719,12715433642884661575,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=2176 /prefetch:8
  2⤵
  PID:3000
- C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe
  "C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=1720,7831442528317745719,12715433642884661575,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2476 /prefetch:2
  2⤵
  PID:948

C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe
"C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
PID:508
- C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe
  "C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=2056,2133734387707760701,17422486265825896240,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=2068 /prefetch:2
  2⤵
  PID:5128
- C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe
  "C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe" --type=renderer --field-trial-handle=2056,2133734387707760701,17422486265825896240,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-path="C:\Users\Admin\AppData\Local\Programs\solartweaks\resources\app.asar" --no-sandbox --no-zygote --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=2 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2320 /prefetch:1
  2⤵
  PID:5280
- C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe
  "C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2056,2133734387707760701,17422486265825896240,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=2092 /prefetch:8
  2⤵
  PID:5272
- C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe
  "C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=2056,2133734387707760701,17422486265825896240,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --gpu-preferences=SAAAAAAAAADoAAAwAAAAAAAAAAAAAAAAAABgAAAQAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=3688 /prefetch:2
  2⤵
  PID:6140

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:4176

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5472

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2164

C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe
"C:\Windows\SystemApps\Microsoft.Windows.Search_cw5n1h2txyewy\SearchApp.exe" -ServerName:CortanaUI.AppX8z9r6jm96hw4bsbneegw0kyxx296wr9t.mca
1⤵
PID:4756

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\.lunarclient\solartweaks\logs\launcher-latest.log

Filesize
175B

MD5
efcfa2004407040dfe55e46c15a2f4be

SHA1
cc593901c781ba284f3f6950647e1e0fe130410d

SHA256
33c2b3d45b6558f112daa1ba0965d0c6e76d7a947e815337bd89de6f65ac635a

SHA512
2ed476775b9e66c70d9e65c3375223453302b5ab6171cb58206ba2c6782852055cb28013656307f7aced1886776f2dc7b1d27c2b4e29afe3499d54212748edff

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\D3DCompiler_47.dll

Filesize
4.3MB

MD5
7641e39b7da4077084d2afe7c31032e0

SHA1
2256644f69435ff2fee76deb04d918083960d1eb

SHA256
44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

SHA512
8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe

Filesize
130.1MB

MD5
340132256d957b9ec3357850f6eec33c

SHA1
5903ea416bb58d8b52964f8445309cc0769842bb

SHA256
befa6aa28a5bafbad17926b29318f13ab026bbb18010ba410b29374821adf08e

SHA512
03276db0c832f09abf8dab0d100d9c272f4623130a4b5d80de43f6ea099f6c486229e74db0d25a13857eaefb3133dba4f41d08c6aab7bdfd897a601c5cfdf68b

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe

Filesize
130.1MB

MD5
340132256d957b9ec3357850f6eec33c

SHA1
5903ea416bb58d8b52964f8445309cc0769842bb

SHA256
befa6aa28a5bafbad17926b29318f13ab026bbb18010ba410b29374821adf08e

SHA512
03276db0c832f09abf8dab0d100d9c272f4623130a4b5d80de43f6ea099f6c486229e74db0d25a13857eaefb3133dba4f41d08c6aab7bdfd897a601c5cfdf68b

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe

Filesize
130.1MB

MD5
340132256d957b9ec3357850f6eec33c

SHA1
5903ea416bb58d8b52964f8445309cc0769842bb

SHA256
befa6aa28a5bafbad17926b29318f13ab026bbb18010ba410b29374821adf08e

SHA512
03276db0c832f09abf8dab0d100d9c272f4623130a4b5d80de43f6ea099f6c486229e74db0d25a13857eaefb3133dba4f41d08c6aab7bdfd897a601c5cfdf68b

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe

Filesize
128.9MB

MD5
a4e169b7c7342add3cb8ac0f5d189265

SHA1
a4bac14b81803824e4840ab8be0df31413daf06f

SHA256
9eacf749d33bb5debefffaf998883fd6bdd724d6193bb1192e9c617a46c84685

SHA512
b104713c612c273ffc1f79fd780f38043b55d5337ec854066a980d2c25dcd5f19643b8e1ff4facadf7b24fde20bc75409828f23ea4921b827ef3a0a737091069

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe

Filesize
130.1MB

MD5
340132256d957b9ec3357850f6eec33c

SHA1
5903ea416bb58d8b52964f8445309cc0769842bb

SHA256
befa6aa28a5bafbad17926b29318f13ab026bbb18010ba410b29374821adf08e

SHA512
03276db0c832f09abf8dab0d100d9c272f4623130a4b5d80de43f6ea099f6c486229e74db0d25a13857eaefb3133dba4f41d08c6aab7bdfd897a601c5cfdf68b

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe

Filesize
130.1MB

MD5
340132256d957b9ec3357850f6eec33c

SHA1
5903ea416bb58d8b52964f8445309cc0769842bb

SHA256
befa6aa28a5bafbad17926b29318f13ab026bbb18010ba410b29374821adf08e

SHA512
03276db0c832f09abf8dab0d100d9c272f4623130a4b5d80de43f6ea099f6c486229e74db0d25a13857eaefb3133dba4f41d08c6aab7bdfd897a601c5cfdf68b

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe

Filesize
130.1MB

MD5
340132256d957b9ec3357850f6eec33c

SHA1
5903ea416bb58d8b52964f8445309cc0769842bb

SHA256
befa6aa28a5bafbad17926b29318f13ab026bbb18010ba410b29374821adf08e

SHA512
03276db0c832f09abf8dab0d100d9c272f4623130a4b5d80de43f6ea099f6c486229e74db0d25a13857eaefb3133dba4f41d08c6aab7bdfd897a601c5cfdf68b

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe

Filesize
130.1MB

MD5
340132256d957b9ec3357850f6eec33c

SHA1
5903ea416bb58d8b52964f8445309cc0769842bb

SHA256
befa6aa28a5bafbad17926b29318f13ab026bbb18010ba410b29374821adf08e

SHA512
03276db0c832f09abf8dab0d100d9c272f4623130a4b5d80de43f6ea099f6c486229e74db0d25a13857eaefb3133dba4f41d08c6aab7bdfd897a601c5cfdf68b

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe

Filesize
126.4MB

MD5
51b75868246bd21c19de1770c74bd1aa

SHA1
4f25317aa3092cc40975ac16b5fe076b1cbcb591

SHA256
b6e5b395590aadf47f1152fa0f052bcd6e0312ad29436acc2fa11d86f3b41d87

SHA512
7c7fc483fa2eca7afc5d634258c2a5e32b2e64191b60cdad152f4e6676766bec5afa7952925be2068055ff4cc6920ff729151a4a106d9b0568109df050cd6b51

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe

Filesize
130.1MB

MD5
340132256d957b9ec3357850f6eec33c

SHA1
5903ea416bb58d8b52964f8445309cc0769842bb

SHA256
befa6aa28a5bafbad17926b29318f13ab026bbb18010ba410b29374821adf08e

SHA512
03276db0c832f09abf8dab0d100d9c272f4623130a4b5d80de43f6ea099f6c486229e74db0d25a13857eaefb3133dba4f41d08c6aab7bdfd897a601c5cfdf68b

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe

Filesize
127.2MB

MD5
cff28f038c96d30e9908f1c92668bd87

SHA1
dbfe8562bd220e074e115eaeb5397a166355b925

SHA256
69feb9dfed8e79aa180aa3b22eb6234e1330a9569f99c5675da152259bcefdcb

SHA512
ff3fcc65f22b07ae94579968b75f31639c7f95a239dc4a443dd6cce61330669a0f79913f5e4bf379f2630930ac4bac357686b773608c9382386624774137402f

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe

Filesize
130.1MB

MD5
340132256d957b9ec3357850f6eec33c

SHA1
5903ea416bb58d8b52964f8445309cc0769842bb

SHA256
befa6aa28a5bafbad17926b29318f13ab026bbb18010ba410b29374821adf08e

SHA512
03276db0c832f09abf8dab0d100d9c272f4623130a4b5d80de43f6ea099f6c486229e74db0d25a13857eaefb3133dba4f41d08c6aab7bdfd897a601c5cfdf68b

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe

Filesize
130.1MB

MD5
340132256d957b9ec3357850f6eec33c

SHA1
5903ea416bb58d8b52964f8445309cc0769842bb

SHA256
befa6aa28a5bafbad17926b29318f13ab026bbb18010ba410b29374821adf08e

SHA512
03276db0c832f09abf8dab0d100d9c272f4623130a4b5d80de43f6ea099f6c486229e74db0d25a13857eaefb3133dba4f41d08c6aab7bdfd897a601c5cfdf68b

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\Solar Tweaks.exe

Filesize
130.1MB

MD5
340132256d957b9ec3357850f6eec33c

SHA1
5903ea416bb58d8b52964f8445309cc0769842bb

SHA256
befa6aa28a5bafbad17926b29318f13ab026bbb18010ba410b29374821adf08e

SHA512
03276db0c832f09abf8dab0d100d9c272f4623130a4b5d80de43f6ea099f6c486229e74db0d25a13857eaefb3133dba4f41d08c6aab7bdfd897a601c5cfdf68b

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\chrome_100_percent.pak

Filesize
138KB

MD5
03aaa4f8525ba4b3e30d2a02cb40ab7a

SHA1
dd9ae5f8b56d317c71d0a0a738f5d4a320a02085

SHA256
c3f131faeefab4f506bf61c4b7752a6481f320429731d758ef5413a2f71441f7

SHA512
c89a1b89b669602ba7c8bf2c004755cac7320189603fecb4f4c5cf7a36db72da651c7b613607146f0c6da9eec5df412c7fba75475352192351c02aebdaa7d9a9

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\chrome_200_percent.pak

Filesize
202KB

MD5
7d4f330a5443eadf32e041c63e7e70ad

SHA1
26ce6fb98c0f28f508d7b88cf94a442b81e80c88

SHA256
b8704be578e7396ee3f2188d0c87d0ede5c5702e9bb8c841b5f8d458abf1356d

SHA512
f1b9b0dd7396863aa0feca06175b7f9ea0be4122351ecf0a0549ee4c34f85ac8c63cc927d7409a40b6e19fa91d2cb00a145616ba19f47045b2345bfbc2d4802d

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\d3dcompiler_47.dll

Filesize
4.3MB

MD5
7641e39b7da4077084d2afe7c31032e0

SHA1
2256644f69435ff2fee76deb04d918083960d1eb

SHA256
44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

SHA512
8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\d3dcompiler_47.dll

Filesize
4.3MB

MD5
7641e39b7da4077084d2afe7c31032e0

SHA1
2256644f69435ff2fee76deb04d918083960d1eb

SHA256
44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

SHA512
8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\ffmpeg.dll

Filesize
2.6MB

MD5
7c3c780de9ae5cc4abeccbd7cb6b367b

SHA1
bda27b3c0b1ec023e2a0a97099a84b10e04cb135

SHA256
39293258d5a2418841edb5ccf9ab3ad23064fb95e1ddfa7a3c6295a24c272a08

SHA512
80a79f827c3154461158ec6f466db0c2ecd9ce9ffd7728001644d4cf382721d09c0758f98f73d7fa548e4e220ffd2b8842303d67a43e79b9146e8b882853658c

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\ffmpeg.dll

Filesize
2.6MB

MD5
7c3c780de9ae5cc4abeccbd7cb6b367b

SHA1
bda27b3c0b1ec023e2a0a97099a84b10e04cb135

SHA256
39293258d5a2418841edb5ccf9ab3ad23064fb95e1ddfa7a3c6295a24c272a08

SHA512
80a79f827c3154461158ec6f466db0c2ecd9ce9ffd7728001644d4cf382721d09c0758f98f73d7fa548e4e220ffd2b8842303d67a43e79b9146e8b882853658c

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\ffmpeg.dll

Filesize
2.6MB

MD5
7c3c780de9ae5cc4abeccbd7cb6b367b

SHA1
bda27b3c0b1ec023e2a0a97099a84b10e04cb135

SHA256
39293258d5a2418841edb5ccf9ab3ad23064fb95e1ddfa7a3c6295a24c272a08

SHA512
80a79f827c3154461158ec6f466db0c2ecd9ce9ffd7728001644d4cf382721d09c0758f98f73d7fa548e4e220ffd2b8842303d67a43e79b9146e8b882853658c

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\ffmpeg.dll

Filesize
2.6MB

MD5
7c3c780de9ae5cc4abeccbd7cb6b367b

SHA1
bda27b3c0b1ec023e2a0a97099a84b10e04cb135

SHA256
39293258d5a2418841edb5ccf9ab3ad23064fb95e1ddfa7a3c6295a24c272a08

SHA512
80a79f827c3154461158ec6f466db0c2ecd9ce9ffd7728001644d4cf382721d09c0758f98f73d7fa548e4e220ffd2b8842303d67a43e79b9146e8b882853658c

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\ffmpeg.dll

Filesize
2.6MB

MD5
7c3c780de9ae5cc4abeccbd7cb6b367b

SHA1
bda27b3c0b1ec023e2a0a97099a84b10e04cb135

SHA256
39293258d5a2418841edb5ccf9ab3ad23064fb95e1ddfa7a3c6295a24c272a08

SHA512
80a79f827c3154461158ec6f466db0c2ecd9ce9ffd7728001644d4cf382721d09c0758f98f73d7fa548e4e220ffd2b8842303d67a43e79b9146e8b882853658c

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\ffmpeg.dll

Filesize
2.6MB

MD5
7c3c780de9ae5cc4abeccbd7cb6b367b

SHA1
bda27b3c0b1ec023e2a0a97099a84b10e04cb135

SHA256
39293258d5a2418841edb5ccf9ab3ad23064fb95e1ddfa7a3c6295a24c272a08

SHA512
80a79f827c3154461158ec6f466db0c2ecd9ce9ffd7728001644d4cf382721d09c0758f98f73d7fa548e4e220ffd2b8842303d67a43e79b9146e8b882853658c

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\ffmpeg.dll

Filesize
2.6MB

MD5
7c3c780de9ae5cc4abeccbd7cb6b367b

SHA1
bda27b3c0b1ec023e2a0a97099a84b10e04cb135

SHA256
39293258d5a2418841edb5ccf9ab3ad23064fb95e1ddfa7a3c6295a24c272a08

SHA512
80a79f827c3154461158ec6f466db0c2ecd9ce9ffd7728001644d4cf382721d09c0758f98f73d7fa548e4e220ffd2b8842303d67a43e79b9146e8b882853658c

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\ffmpeg.dll

Filesize
2.6MB

MD5
7c3c780de9ae5cc4abeccbd7cb6b367b

SHA1
bda27b3c0b1ec023e2a0a97099a84b10e04cb135

SHA256
39293258d5a2418841edb5ccf9ab3ad23064fb95e1ddfa7a3c6295a24c272a08

SHA512
80a79f827c3154461158ec6f466db0c2ecd9ce9ffd7728001644d4cf382721d09c0758f98f73d7fa548e4e220ffd2b8842303d67a43e79b9146e8b882853658c

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\ffmpeg.dll

Filesize
2.6MB

MD5
7c3c780de9ae5cc4abeccbd7cb6b367b

SHA1
bda27b3c0b1ec023e2a0a97099a84b10e04cb135

SHA256
39293258d5a2418841edb5ccf9ab3ad23064fb95e1ddfa7a3c6295a24c272a08

SHA512
80a79f827c3154461158ec6f466db0c2ecd9ce9ffd7728001644d4cf382721d09c0758f98f73d7fa548e4e220ffd2b8842303d67a43e79b9146e8b882853658c

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\ffmpeg.dll

Filesize
2.6MB

MD5
7c3c780de9ae5cc4abeccbd7cb6b367b

SHA1
bda27b3c0b1ec023e2a0a97099a84b10e04cb135

SHA256
39293258d5a2418841edb5ccf9ab3ad23064fb95e1ddfa7a3c6295a24c272a08

SHA512
80a79f827c3154461158ec6f466db0c2ecd9ce9ffd7728001644d4cf382721d09c0758f98f73d7fa548e4e220ffd2b8842303d67a43e79b9146e8b882853658c

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\ffmpeg.dll

Filesize
2.6MB

MD5
7c3c780de9ae5cc4abeccbd7cb6b367b

SHA1
bda27b3c0b1ec023e2a0a97099a84b10e04cb135

SHA256
39293258d5a2418841edb5ccf9ab3ad23064fb95e1ddfa7a3c6295a24c272a08

SHA512
80a79f827c3154461158ec6f466db0c2ecd9ce9ffd7728001644d4cf382721d09c0758f98f73d7fa548e4e220ffd2b8842303d67a43e79b9146e8b882853658c

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\ffmpeg.dll

Filesize
2.6MB

MD5
7c3c780de9ae5cc4abeccbd7cb6b367b

SHA1
bda27b3c0b1ec023e2a0a97099a84b10e04cb135

SHA256
39293258d5a2418841edb5ccf9ab3ad23064fb95e1ddfa7a3c6295a24c272a08

SHA512
80a79f827c3154461158ec6f466db0c2ecd9ce9ffd7728001644d4cf382721d09c0758f98f73d7fa548e4e220ffd2b8842303d67a43e79b9146e8b882853658c

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\icudtl.dat

Filesize
9.9MB

MD5
80a7528515595d8b0bf99a477a7eff0d

SHA1
fde9a195fc5a6a23ec82b8594f958cfcf3159437

SHA256
6e0b6b0d9e14c905f2278dbf25b7bb58cc0622b7680e3b6ff617a1d42348736b

SHA512
c8df47a00f7b2472d272a26b3600b7e82be7ca22526d6453901ff06370b3abb66328655868db9d4e0a11dcba02e3788cc4883261fd9a7d3e521577dde1b88459

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\locales\en-US.pak

Filesize
88KB

MD5
af5c77e1d94dc4f772cb641bd310bc87

SHA1
0ceeb456e2601e22d873250bcc713bab573f2247

SHA256
781ef5aa8dce072a3e7732f39a7e991c497c70bfaec2264369d0d790ab7660a4

SHA512
8c3217b7d9b529d00785c7a1b2417a3297c234dec8383709c89c7ff9296f8ed4e9e6184e4304838edc5b4da9c9c3fe329b792c462e48b7175250ea3ea3acc70c

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\resources.pak

Filesize
4.9MB

MD5
91f8a4b158df6967163ccbbe765e095a

SHA1
95db67f0a2352fd898f4a4cfdfc860f6a9c58c87

SHA256
a30b8269e588c6cc2cea5fd4685da3012fd10451edb59a283005116f8e033182

SHA512
6450d75d53f24d11e1c1e7e3cacfc57ee9dd09c00ca0dc2ff30f580b59a6b17e7ad7d96682195bd7d806b49068653538c77ca4200491560cecff128a0b012d92

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\resources\app.asar

Filesize
7.1MB

MD5
ffbcaf8661b84341601d8a0c75fb27c2

SHA1
47f107ace93bfa6f83929a8b23fede95973fd86e

SHA256
af87efd6abb9aa6868eb7a4eba16eaeef572911aedd872be452d1ee42f55ed67

SHA512
f9d691a823f344049d8858d509bf421b7743223fd3bef324aac94e3110e2f4aac8a2b80ababc7bb35c5e34948e1b5680678ad8513b5f4d19ed13d109c49e7129

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\swiftshader\libEGL.dll

Filesize
448KB

MD5
038a73114d439bfc94be4732b2794998

SHA1
4b7a9d52da1bd808af979cf5cfb146404494317a

SHA256
b1054e0dc2ab31a7cf3cd7f3dae07b1ec31acd42c157be13ce47ea870840f0cc

SHA512
8788e43de424e1d7a163d0b7f4d719c36bf8fdee9808d405aeb05993c446d4f2a595741cb4d98f5e9611cd16d09de9445bf72176a799f4189168bb8509b115ff

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\swiftshader\libEGL.dll

Filesize
448KB

MD5
038a73114d439bfc94be4732b2794998

SHA1
4b7a9d52da1bd808af979cf5cfb146404494317a

SHA256
b1054e0dc2ab31a7cf3cd7f3dae07b1ec31acd42c157be13ce47ea870840f0cc

SHA512
8788e43de424e1d7a163d0b7f4d719c36bf8fdee9808d405aeb05993c446d4f2a595741cb4d98f5e9611cd16d09de9445bf72176a799f4189168bb8509b115ff

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\swiftshader\libGLESv2.dll

Filesize
3.1MB

MD5
38ec86347b3e467c5868e35ab48f89f2

SHA1
4db17d065cc330b277a70f9fb8dff0c4b426f314

SHA256
2e10d308d0207835b07df3bb38bee88300aa57fcb214051e8654d29587257744

SHA512
2b2405ed51ea1d232f2d60072e4f57e70f36f1a8f9d0a935772bfb9a3be50c1d6136cee496fde9fb3dda1f0d2f1c643cb9f162e0b68828ff854645eb1e8216f4

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\swiftshader\libGLESv2.dll

Filesize
3.1MB

MD5
38ec86347b3e467c5868e35ab48f89f2

SHA1
4db17d065cc330b277a70f9fb8dff0c4b426f314

SHA256
2e10d308d0207835b07df3bb38bee88300aa57fcb214051e8654d29587257744

SHA512
2b2405ed51ea1d232f2d60072e4f57e70f36f1a8f9d0a935772bfb9a3be50c1d6136cee496fde9fb3dda1f0d2f1c643cb9f162e0b68828ff854645eb1e8216f4

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\swiftshader\libegl.dll

Filesize
448KB

MD5
038a73114d439bfc94be4732b2794998

SHA1
4b7a9d52da1bd808af979cf5cfb146404494317a

SHA256
b1054e0dc2ab31a7cf3cd7f3dae07b1ec31acd42c157be13ce47ea870840f0cc

SHA512
8788e43de424e1d7a163d0b7f4d719c36bf8fdee9808d405aeb05993c446d4f2a595741cb4d98f5e9611cd16d09de9445bf72176a799f4189168bb8509b115ff

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\swiftshader\libglesv2.dll

Filesize
3.1MB

MD5
38ec86347b3e467c5868e35ab48f89f2

SHA1
4db17d065cc330b277a70f9fb8dff0c4b426f314

SHA256
2e10d308d0207835b07df3bb38bee88300aa57fcb214051e8654d29587257744

SHA512
2b2405ed51ea1d232f2d60072e4f57e70f36f1a8f9d0a935772bfb9a3be50c1d6136cee496fde9fb3dda1f0d2f1c643cb9f162e0b68828ff854645eb1e8216f4

Download Submit
C:\Users\Admin\AppData\Local\Programs\solartweaks\v8_context_snapshot.bin

Filesize
161KB

MD5
e47426f88649c7f8e27b8a1516cc0137

SHA1
5452aadfddbc55d6c5c18b801087e39529859b12

SHA256
09686ad5bf03d95de7c251d204e60a8e3824bd6420bedddee80b2c6e5609fb26

SHA512
f9647a35ff273ca622b3db4aefb9aaf75075386c42a31e085f916fc82f3a18fed25b0e05dcc09e678ca419408f59f0c34fa5762e5f945db35f9c6f67b7b94bc0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj9744.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj9744.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj9744.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj9744.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj9744.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj9744.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj9744.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj9744.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsj9744.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.acl

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.acl

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\2e7149cb-bdbb-4368-b204-df0eadaf31f6.tmp

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\Code Cache\js\index

Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\Code Cache\js\index-dir\the-real-index

Filesize
48B

MD5
3a0070cc0274c9b767ba9b3dfe95ab2d

SHA1
410b521259fc98b5b9d5d73cfa1530773f5f6760

SHA256
ca0a6ee4c90fd4ccc2fc4c836a8b0750da0fe87b5b29b78f0700e594288c5dc9

SHA512
3ed8c901950e27ff12c25d6038e0336a991068967719945fd7cd8572c1670479d5dcfba4b1e1f804dc07b00d3410f11b6f8e647365a57e18be879518e2d12175

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\Code Cache\wasm\index

Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\Code Cache\wasm\index-dir\the-real-index

Filesize
48B

MD5
3a0070cc0274c9b767ba9b3dfe95ab2d

SHA1
410b521259fc98b5b9d5d73cfa1530773f5f6760

SHA256
ca0a6ee4c90fd4ccc2fc4c836a8b0750da0fe87b5b29b78f0700e594288c5dc9

SHA512
3ed8c901950e27ff12c25d6038e0336a991068967719945fd7cd8572c1670479d5dcfba4b1e1f804dc07b00d3410f11b6f8e647365a57e18be879518e2d12175

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\Cookies

Filesize
20KB

MD5
7f20ce947282339c895303c49b3dfe93

SHA1
6ffc90a15813599bd8a24366ae9305130c965e0d

SHA256
88eea6964b1637fd157ce8e85a26de0a96849f112809c0705f6cace0f1b34706

SHA512
358cc24210bc4db01c9a8e11264206943094b4ab2f79a851f97a4bc4bcb72c053be727a54b20f58be9e185de35c5ddaa4cd02c079fd95716ee602ce0fb4fa183

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\GPUCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\GPUCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\GPUCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\GPUCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\GPUCache\index

Filesize
256KB

MD5
82b7d00a7a960395eb9ff4d222e53ec9

SHA1
4b29fad7da23e05d28ba091711f34c4a7e1dad51

SHA256
999ed1920e17a27448d8a1e8985998e1b4db5fd36e066f64486a3c843cff3c63

SHA512
49c472d800280e5e3f6bf4d1a0b8ba7745e32a9ff12224b04bf826ee9c7e1d5a125cf99dd8c66fda9b89fd6e884be132c6738afbfbcffb72d30d2d1a67036d51

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\Network Persistent State

Filesize
589B

MD5
269d361a20bbf47e14f739a529fedd4c

SHA1
c8b35ca2ad1a1e16eae38aa03631a3c41983a39b

SHA256
e9b8994c8b5e3b26c32afcda00aade9222f04161bf8e5295faa56a6ff85ff150

SHA512
6178a763bff2d26b76015630a0e7263b32c97c8f3412a3666e6030060aad64c770c1bf87f8e06d326bbf195d0de908f59a3693893c510ed229d2e7c0e3758597

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\Network Persistent State

Filesize
1KB

MD5
9236dfe4415dda4e2a19cb910d3bc1f7

SHA1
6f400606339e6fcc0ec495e775c794dd60b0ab92

SHA256
85b8f1d4a8ea47d59c2dbd262aea547a35a9705ef8857b6d5939cd6c5e6e6dda

SHA512
89e4f97a29d235e31d0f93a0cffa8b21df7de32020eabd3aa8483bd5e7840aa6f128912dce3dbd60610a463c288479df3c1fc178b30925ddff87425be494984c

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\Network Persistent State

Filesize
1KB

MD5
5e36403cbdaf52cd06bbf5b1f79cb750

SHA1
7d54d5d93041ccf4cdf9193a20e023fc5b7d0ca6

SHA256
2c9ac416f29971623f24d80fd06b1cf13931def022161de2c0137af94684b587

SHA512
cff8d7ceb82f96dd7391ef9a4378b80bb6cb17b27c1beb93bf42bb19e1b6cc6b9a0c830df1c68c248d244231ff0acf4812ff6e5370831bbdcb28f992d4146545

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\Preferences

Filesize
57B

MD5
58127c59cb9e1da127904c341d15372b

SHA1
62445484661d8036ce9788baeaba31d204e9a5fc

SHA256
be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de

SHA512
8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\TransportSecurity

Filesize
707B

MD5
5b2a437c210c7e0536426344d7a62386

SHA1
c54968086f7a219540ec27f96c9948f253848dd1

SHA256
f016e52a56935d0eccedcd5cb8d80bc404ee313f92a4754b373e80de0658eef3

SHA512
2218a579635813b6482094d0fa37491516796bc8fa95888782ec0188afc58d68d46caf04aa7f8b96dcf5f17a8f0977140659f8d30acc8fb8cc96d2944e8fb6da

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\TransportSecurity

Filesize
874B

MD5
83aeddbe7852d45803838ad336b73510

SHA1
96eeb9d9a74061fa0e93b1aee6be52cc968f633a

SHA256
89349bef555d6e7aaba9d008acb391002884b71b2d702a895575bc24ca0cf561

SHA512
5242e80d2f702c672a18a332bd9217deedc974b629ae6c380bcc165984b98059e9ba1bae8d7267487fdc114d7d3e76bea01e72329bc03c6dc58d9dd0a571bdb2

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\TransportSecurity

Filesize
874B

MD5
f0e2078ccb248d9148942e5216e25480

SHA1
420fe4ccdf36d550f15ccc6a8d8280e67cfabfcd

SHA256
bba73c5e70cfc80410976eee16be4f0e0700ad749c1a5d15ca85f4d91c3e7304

SHA512
801981a5535d2db49285a57f4c46e2e00cf0f7f4143d32d32c13baa402b640feb6baa6209f7fc03dbcc5bb996385c2c76e887b2fcda6ba6d6d2cf72f88be98ef

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\TransportSecurity

Filesize
372B

MD5
d09433720269aa7c52307a190e4c2fba

SHA1
0e7f447fbc88a4dff8ab16bf1110bcc107f90bc1

SHA256
754229398b812747e8e7ddc933c89b32d047263813b51af9863f844403324f13

SHA512
b11ee4aa4fca5351dd4c4a6e2d13870ce830c8e3908ecaba9b517da57139d8989792a23f934f68d9cded0d08ed421e85fa9fcc751c5e5586383ec8960b629573

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\TransportSecurity

Filesize
372B

MD5
2b68213f8604902f8043ba9148737ce3

SHA1
38fb38ee326932e9677f4e8795279cbf43a81d12

SHA256
9f79e11e594a17e957b57be56c9111a2dc62910401f324e7643e391226668491

SHA512
2b22bdc74461760da63860833947ac00757aa5189e6feef4fbc002e1878643f7435f1cb38b30ee1e2d2e8d60ae0e399915d2f4db601ca061aa57009e3c9fa0c7

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\TransportSecurity

Filesize
539B

MD5
bac8c2ee5db85730de5192a375009cfd

SHA1
d2390f648ac82a574cdd882249bebd92776024f9

SHA256
23894cf32c91fb4b3d98be562a5922ab8753caf0a8b085df2558b640f2f1d9b5

SHA512
b8f90a7c84c3801ff12ea258f55a639915c048091dfc9899c7cdde49ab27fc61331d186ec8c04148652c02a23567f764ff97b306ded1f698286c8504d89cc2a0

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\settings.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
C:\Users\Admin\AppData\Roaming\solartweaks\settings.json.4029572726

Filesize
603B

MD5
c23db53da00a63a64438189f22203868

SHA1
a5a3264744be1173a23dffa32652307152fefc36

SHA256
f9aab56e63a5f03207f83c17969585929558c09a2b173766882af8f03feb3920

SHA512
5d3d915d51f0792820cc3844654a13f95ba775767bf77a1b44d267819cdd7e5f4ffeb68bdcbda33c73de118f1d0328eb04318b27d646dc3d9cb8d6dbc12cedb0

Download Submit
memory/1408-366-0x00007FFFB3E10000-0x00007FFFB3E11000-memory.dmp

Filesize
4KB

Download
memory/1408-641-0x0000017867260000-0x000001786738A000-memory.dmp

Filesize
1.2MB

Download
memory/1408-541-0x0000017867260000-0x000001786738A000-memory.dmp

Filesize
1.2MB

Download
memory/1408-501-0x0000017867260000-0x000001786738A000-memory.dmp

Filesize
1.2MB

Download
memory/4728-642-0x00000257BAA70000-0x00000257BAB9A000-memory.dmp

Filesize
1.2MB

Download
memory/4728-542-0x00000257BAA70000-0x00000257BAB9A000-memory.dmp

Filesize
1.2MB

Download
memory/4728-512-0x00000257BAA70000-0x00000257BAB9A000-memory.dmp

Filesize
1.2MB

Download
memory/4756-713-0x0000022AB6B70000-0x0000022AB6B90000-memory.dmp

Filesize
128KB

Download
memory/4756-716-0x0000022AB6B30000-0x0000022AB6B50000-memory.dmp

Filesize
128KB

Download
memory/4756-718-0x0000022AB6F40000-0x0000022AB6F60000-memory.dmp

Filesize
128KB

Download
memory/5128-660-0x000002A093AE0000-0x000002A093C0A000-memory.dmp

Filesize
1.2MB

Download
memory/5128-513-0x000002A093AE0000-0x000002A093C0A000-memory.dmp

Filesize
1.2MB

Download
memory/5128-543-0x000002A093AE0000-0x000002A093C0A000-memory.dmp

Filesize
1.2MB

Download