Analysis

  • max time kernel
    57s
  • max time network
    160s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    13/04/2023, 21:18

General

  • Target

    hcleague-setup-0.1.5.exe

  • Size

    98.4MB

  • MD5

    f681d86f6afec19947101a79fc214d07

  • SHA1

    ee698956295c94d930595ec259cd3c7c2af07205

  • SHA256

    d0f90377fe5f029ecc4f5dcee8299910588f79d36197fa91609d30fe6755d1cd

  • SHA512

    77e0b7c77f7c219ffa99d7b0208b537347fc751cc5213eb68211abb7a45539098a2204695ed12a8ef073ecd91853551ef7cbd9e34db03facc2ad79ca9289be52

  • SSDEEP

    3145728:3jBnVx2snNLMqbfyOaxjBnVx2kgo6B48HxFv6GqeDPo:3fNLMqbPaxaow1Lv6Gqek

Score
7/10

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 2 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 5 IoCs
  • Loads dropped DLL 23 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Suspicious behavior: EnumeratesProcesses 6 IoCs
  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of WriteProcessMemory 50 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\hcleague-setup-0.1.5.exe
    "C:\Users\Admin\AppData\Local\Temp\hcleague-setup-0.1.5.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:1200
  • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe
    "C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe"
    1⤵
    • Executes dropped EXE
    • Loads dropped DLL
    • Suspicious use of FindShellTrayWindow
    • Suspicious use of WriteProcessMemory
    PID:1704
    • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe
      "C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe" --type=gpu-process --field-trial-handle=1040,16367089150821100728,6047073090110248848,131072 --enable-features=WebComponentsV0Enabled --disable-features=SpareRendererForSitePerProcess --gpu-preferences=KAAAAAAAAADgAAAwAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --mojo-platform-channel-handle=1048 --ignored=" --type=renderer " /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1924
    • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe
      "C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe" --type=gpu-process --field-trial-handle=1040,16367089150821100728,6047073090110248848,131072 --enable-features=WebComponentsV0Enabled --disable-features=SpareRendererForSitePerProcess --gpu-preferences=KAAAAAAAAADgAAAwAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --use-gl=swiftshader-webgl --mojo-platform-channel-handle=1048 --ignored=" --type=renderer " /prefetch:2
      2⤵
        PID:748
      • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe
        "C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe" --type=utility --field-trial-handle=1040,16367089150821100728,6047073090110248848,131072 --enable-features=WebComponentsV0Enabled --disable-features=SpareRendererForSitePerProcess --lang=en-US --service-sandbox-type=network --ignore-certificate-errors --ignore-certificate-errors --mojo-platform-channel-handle=1408 /prefetch:8
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        PID:884
      • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe
        "C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe" --type=renderer --field-trial-handle=1040,16367089150821100728,6047073090110248848,131072 --enable-features=WebComponentsV0Enabled --disable-features=SpareRendererForSitePerProcess --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\hcleague\resources\app.asar" --node-integration --no-sandbox --no-zygote --preload="C:\Users\Admin\AppData\Local\Programs\hcleague\resources\app.asar\src\renderer\preload-client.js" --enable-remote-module --background-color=#fff --enable-websql --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1380 /prefetch:1
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        PID:844
      • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe
        "C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe" --type=renderer --field-trial-handle=1040,16367089150821100728,6047073090110248848,131072 --enable-features=WebComponentsV0Enabled --disable-features=SpareRendererForSitePerProcess --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\hcleague\resources\app.asar" --no-sandbox --no-zygote --enable-remote-module --background-color=#fff --enable-websql --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1372 /prefetch:1
        2⤵
        • Checks computer location settings
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        PID:980
      • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe
        "C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe" --type=renderer --field-trial-handle=1040,16367089150821100728,6047073090110248848,131072 --enable-features=WebComponentsV0Enabled --disable-features=SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\hcleague\resources\app.asar" --node-integration --no-sandbox --no-zygote --preload="C:\Users\Admin\AppData\Local\Programs\hcleague\resources\app.asar\src\renderer\preload-client.js" --enable-remote-module --background-color=#fff --enable-websql --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=9 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=564 /prefetch:1
        2⤵
          PID:2284
        • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe
          "C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe" --type=renderer --field-trial-handle=1040,16367089150821100728,6047073090110248848,131072 --enable-features=WebComponentsV0Enabled --disable-features=SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\hcleague\resources\app.asar" --node-integration --enable-sandbox --preload="C:\Users\Admin\AppData\Local\Programs\hcleague\resources\app.asar\src\renderer\preload-client.js" --enable-remote-module --background-color=#fff --enable-websql --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=10 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1872 /prefetch:1
          2⤵
            PID:2452
          • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe
            "C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe" --type=renderer --field-trial-handle=1040,16367089150821100728,6047073090110248848,131072 --enable-features=WebComponentsV0Enabled --disable-features=SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\hcleague\resources\app.asar" --node-integration --no-sandbox --no-zygote --preload="C:\Users\Admin\AppData\Local\Programs\hcleague\resources\app.asar\src\renderer\preload-client.js" --enable-remote-module --background-color=#fff --enable-websql --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=11 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1868 /prefetch:1
            2⤵
              PID:2600
            • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe
              "C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe" --type=renderer --field-trial-handle=1040,16367089150821100728,6047073090110248848,131072 --enable-features=WebComponentsV0Enabled --disable-features=SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\hcleague\resources\app.asar" --node-integration --no-sandbox --no-zygote --preload="C:\Users\Admin\AppData\Local\Programs\hcleague\resources\app.asar\src\renderer\preload-client.js" --enable-remote-module --background-color=#fff --enable-websql --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=12 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1804 /prefetch:1
              2⤵
                PID:2852
              • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe
                "C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe" --type=renderer --field-trial-handle=1040,16367089150821100728,6047073090110248848,131072 --enable-features=WebComponentsV0Enabled --disable-features=SpareRendererForSitePerProcess --disable-gpu-compositing --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\hcleague\resources\app.asar" --node-integration --enable-sandbox --preload="C:\Users\Admin\AppData\Local\Programs\hcleague\resources\app.asar\src\renderer\preload-client.js" --enable-remote-module --background-color=#fff --enable-websql --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=13 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=516 /prefetch:1
                2⤵
                  PID:2928

              Network

              MITRE ATT&CK Enterprise v6

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

                Filesize

                342B

                MD5

                cbff090b81c4f0a63afe935d4f3e1f95

                SHA1

                bee672dafeb2bd84841a83d3c1ac6eb65e0f88ed

                SHA256

                ca1af14c3bba7b447c4bb6dd7a516ba9d4ccbd45916c7b2236e03f9415a7ccca

                SHA512

                e6deab70d7fdde5dcb330ba6961dfe90580345f4d767843e913d0c64fb300c53d359581057dfae07eaef7a08b09e420bbadf4f3fdab859e77158105a7fda74f6

              • C:\Users\Admin\AppData\Local\Programs\hcleague\D3DCompiler_47.dll

                Filesize

                4.3MB

                MD5

                fea40e5b591127ae3b065389d058a445

                SHA1

                621fa52fb488271c25c10c646d67e7ce5f42d4f8

                SHA256

                4b074a3976399dc735484f5d43d04b519b7bdee8ac719d9ab8ed6bd4e6be0345

                SHA512

                d2412b701d89e2762c72dd99a48283d601dd4311e3731d690cc2ab6cced20994fa67bf3fea4920291fc407cd946e20bdc85836e6786766a1b98a86febaa0e3d9

              • C:\Users\Admin\AppData\Local\Programs\hcleague\chrome_100_percent.pak

                Filesize

                175KB

                MD5

                3ff806f44723cee528a1aaee4d3a289e

                SHA1

                56830e7ff31f803077aed774fafebd4e6c5e6c90

                SHA256

                65cb11d090b32e0fb3c740a736c13c0a47cb1bcb265c084e3de5bb7474fb662f

                SHA512

                03dafb839308d644a9943ba66838536fbd1f606cafe392f90925ce51766b5e3a9064d60ca8463bacf7238258beded570d5a0007f3ce11c14f87b10faa2da2977

              • C:\Users\Admin\AppData\Local\Programs\hcleague\chrome_200_percent.pak

                Filesize

                312KB

                MD5

                bd66e8de6979dfe12cbaa29390d11a64

                SHA1

                967916eb7587f0163fbce50c7b4822d06e939d5a

                SHA256

                cd584f20aeed80fe5852d5d5656a12d25d9116d6b805ddbec3874d310925df2a

                SHA512

                f77bd5004d8da54e8588ffcf6962b3244b8e4a9f6310d31f0c7c44d913504577c9e3fb858078705c384649fbcf26223d8f98dd02778e259a8924028f2be3bc1c

              • C:\Users\Admin\AppData\Local\Programs\hcleague\ffmpeg.dll

                Filesize

                2.2MB

                MD5

                7a3135b35ec373e7d4090967d82728c4

                SHA1

                fe70b0de243007a50c261ff344e403b1354af2c4

                SHA256

                6877255ff35316554b10a52986d843fbe7bc6c6c6f0b4aa26363916d796185eb

                SHA512

                b979548c15c029f30580b7ff078311b86978d36a27cfce2c138f780530ba39ecbba754a23bde05f3949c0c1c008817070f84706f0b7e74d0d8d17e4155ad779a

              • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                95.2MB

                MD5

                bf3b12be9b54bb6ea45a25b50072b0b3

                SHA1

                eecd91b1fde560ba081e8a065f628a510a21970a

                SHA256

                5e175ba1b4a0f8f6e72274f55df5423577947e165a35bd1905630847bbc40602

                SHA512

                1a8160cb4325d3f4d57c308bfb05a823d95ae11221d23e7ca2ac82ae804e127d0dfbddeb7486875c9a5c7f9a93a2baf7f980537b57928a3abb0f1cc7233f3e29

              • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                67.8MB

                MD5

                3b1dab889a9b285cab54e9d6b9a87d51

                SHA1

                8fc465e6c76226017c3f6d8b1c317a71d13b9b60

                SHA256

                999cacdb87cdf2db0d1e94966d9740600cb663f8fc667a9ba43a29ed997a080e

                SHA512

                b3f9fec6444ec018bcdf7cc0279f61567e3f5a433d174e6afef7949ec28fc86d05377e25f51bb3f298bbf8227b1d296f4d38362ce3a3e37eed09d0a71120316f

              • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                63.8MB

                MD5

                f60c62f0a19d25a489d57ef37eebc1c7

                SHA1

                1244bdd4ff719a4d28c17bcc79806fdb433f05f8

                SHA256

                b761ad8a6a6c3fefe8e01d5a8787c4a7a4d5a7c37287081d66a30fdefd93c20b

                SHA512

                f48c1fcf74eb68dd527bbf00c2bbb0271c820ec44f8ec7d768fd06412e84056a80072676ef087e785186c33b1f093b6a82ad60a5c525900d8abcf438a9a4e613

              • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                31.6MB

                MD5

                0b9c205f3db8c1cd6d9b7e670b5de2ba

                SHA1

                ae915faf0c2257ac9d011b74eb7243015aef8be3

                SHA256

                ce30b185dbba02ef7071c0a479a7801bd0518c55291242cd3d75c2f03ae44443

                SHA512

                98d108261d1a2552ed5849c690f7b7750be31c3fc9590072f5faf92edd120bcdc892a6a1e9f7127da99d1dffeceec16b6be9e9a108218e96ebb30e9633ee426a

              • C:\Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                26.2MB

                MD5

                324fcac9ccefb963c47da484ef9a6aaf

                SHA1

                0aa097fecce2f2d06b104d34eec1fccd7af994f5

                SHA256

                f026b4b2190e46d70e742f2ea21ab2883afa72bf981ab42bfa300c03cec697d3

                SHA512

                5cd1ee140a591e543719518dd28479f44c9afc2e201718e5569dd1e1aaa8da02d1f5a71fc086f054129989be2f191babc1e12e8a6f471275b840961be072831d

              • C:\Users\Admin\AppData\Local\Programs\hcleague\icudtl.dat

                Filesize

                10.0MB

                MD5

                3f019441588332ac8b79a3a3901a5449

                SHA1

                c8930e95b78deef5b7730102acd39f03965d479a

                SHA256

                594637e10b8f5c97157413528f0cbf5bc65b4ab9e79f5fa34fe268092655ec57

                SHA512

                ee083ae5e93e70d5bbebe36ec482aa75c47d908df487a43db2b55ddd6b55c291606649175cf7907d6ab64fc81ead7275ec56e3193b631f8f78b10d2c775fd1a9

              • C:\Users\Admin\AppData\Local\Programs\hcleague\libegl.dll

                Filesize

                367KB

                MD5

                82747ef9d45de291a694c8348dcbfe07

                SHA1

                23e6cc2622937abf0083ba112eb314ef0c1e85cb

                SHA256

                b910cd8a177f10d347b776b426e05b8c1f78916db069d05a8e82e53e963c0e80

                SHA512

                b344640fe714705ef37dc0c994c9191e73580b0c36dcb59bd1b6dfb1b7d7d732d2175a4cc919c171c329420a2ceef7f52b8213125e8e65b57d8df5313022e15b

              • C:\Users\Admin\AppData\Local\Programs\hcleague\libglesv2.dll

                Filesize

                7.6MB

                MD5

                fa62e296a1ae53dd28dff4597b385389

                SHA1

                ced3d0818e7835fc484ac236e10df70f87394910

                SHA256

                19e1600e35a13deb931b095914f2dfa6447bb51f486a2735639ed00ed606d289

                SHA512

                3301f2ef5f154f6987c11b4f0216871c438d9f2df2879353edaf46dde79de53d891660631711d2790a012fb80788fa00c004dcd26d4443dd18df66823dcb60c0

              • C:\Users\Admin\AppData\Local\Programs\hcleague\locales\en-US.pak

                Filesize

                75KB

                MD5

                a2201115723fd61d1e68ab001e6cdca0

                SHA1

                a97073e22adf7b300e702e717743cd249e64b4fb

                SHA256

                3333cf1fb2b0c15ea819787ba672d2274f3136e6a8729f2e5d2796b740688183

                SHA512

                e68c451602a0c2cd47ee3652daf1d74d87e6e61ebda9166cbb182301f03118b72288968695f85a1bcdefb45e4753ba7187dd5159b6694952f33238af39d89479

              • C:\Users\Admin\AppData\Local\Programs\hcleague\resources.pak

                Filesize

                8.9MB

                MD5

                5118ebd39acde0236a71fad2880add8c

                SHA1

                1daa8e701f17a793c0e70f4b0aa36fbb376962ae

                SHA256

                e3386c5fd98dc711a70eae7a9f6bf3139de3e9a15e3a022d343a459b747c6471

                SHA512

                925ae1d8c643e4f3c20221ae850a171e6032d9e391cf07e5efab4a4a29e8f6640973a8f0dc97704df5263ed93dfd4c32650c656fbc9874c98ab87c6131fdcaa8

              • C:\Users\Admin\AppData\Local\Programs\hcleague\resources\app-update.yml

                Filesize

                96B

                MD5

                a5ab37c2c93140d27bf924bbca387a98

                SHA1

                1d15f14a63da26029580864e24f78513f0d06fa3

                SHA256

                8c7dd73a50e6de7cc4b7941b85e9d321a0635d20d13c62b0783df1ae1aebb053

                SHA512

                4132f8cb88f8b385cfc87d3917ab75520b8434afb4e61c6e139a259657dda4fa8a6d0b8b46505252fc4e53df0a30018623bc11ee47bca4431e49771f1659a9d5

              • C:\Users\Admin\AppData\Local\Programs\hcleague\resources\app.asar

                Filesize

                19.4MB

                MD5

                110ccdf45a73526c8556566192e9aa8d

                SHA1

                39563fbc81da6f498635645c00bba5aca082ea7c

                SHA256

                11e03c4538db2a74444e482cb94b4a660200c98f5ba672e7b448ce0ec20de5d4

                SHA512

                5573795ae57217c465ce463f7009c70078d63fb0abc3fdee910a5f0fe2836c30324a6dd04b7c216e3ace69399bc9f2d2d970f6876bfb50777dbe22b212dd9144

              • C:\Users\Admin\AppData\Local\Programs\hcleague\swiftshader\libegl.dll

                Filesize

                392KB

                MD5

                f1cb951b601764ecb615752aa6a6eb5d

                SHA1

                985c16c5e71abe9d2eb0292ca1f911451c0e5ba8

                SHA256

                7d226ad9f213890b37714808ab8397bf71cced005ae746dba84cd009bf6bb600

                SHA512

                f439a218654f37b1dea0a44aa2c052b0f783b8de19302e86dc1799a99f25744060fe5b3e6b4d909ebe3d742ea50bada2d73e621d40a72e7a1c5805ae014002f6

              • C:\Users\Admin\AppData\Local\Programs\hcleague\swiftshader\libglesv2.dll

                Filesize

                3.6MB

                MD5

                6fe59c8fb550e7b94fdc8c252e7f408f

                SHA1

                dd141acd0d9631f853bafa7e11e0c5f12cc30fb7

                SHA256

                bc8886eb76aff294a6b0855c2c75e6ff675e24de1fdaa6294f89f64e4dad195a

                SHA512

                ab09359e2a654bab80f004ad694f96c533f92c34838886c82be38b6e955834c0f087a15e79f568ea9def7487bd6aee9b4270e3e20444e89945e15001a73106e1

              • C:\Users\Admin\AppData\Local\Programs\hcleague\v8_context_snapshot.bin

                Filesize

                607KB

                MD5

                adb5d101b2d980211c8a662debbca53c

                SHA1

                60b02ba2e857eabb71c5fb1b49b25b8ee0672a2f

                SHA256

                5dff1f430af6626356963cfe4bf149362fd3ecc9bbaf765fe3184b17f6ad007b

                SHA512

                96a7430fcb1c2f4a5d568614c69151ce6f6b1c23d75c7eedb5966b12369f6e8025ff728597077b627c3418195a9ab07464b1c735e29d3b6e438732bdd2b31b15

              • C:\Users\Admin\AppData\Local\Temp\Cab2F9B.tmp

                Filesize

                61KB

                MD5

                fc4666cbca561e864e7fdf883a9e6661

                SHA1

                2f8d6094c7a34bf12ea0bbf0d51ee9c5bb7939a5

                SHA256

                10f3deb6c452d749a7451b5d065f4c0449737e5ee8a44f4d15844b503141e65b

                SHA512

                c71f54b571e01f247f072be4bbebdf5d8410b67eb79a61e7e0d9853fe857ab9bd12f53e6af3394b935560178107291fc4be351b27deb388eba90ba949633d57d

              • C:\Users\Admin\AppData\Local\Temp\Cab324C.tmp

                Filesize

                61KB

                MD5

                e71c8443ae0bc2e282c73faead0a6dd3

                SHA1

                0c110c1b01e68edfacaeae64781a37b1995fa94b

                SHA256

                95b0a5acc5bf70d3abdfd091d0c9f9063aa4fde65bd34dbf16786082e1992e72

                SHA512

                b38458c7fa2825afb72794f374827403d5946b1132e136a0ce075dfd351277cf7d957c88dc8a1e4adc3bcae1fa8010dae3831e268e910d517691de24326391a6

              • C:\Users\Admin\AppData\Local\Temp\Tar33F6.tmp

                Filesize

                161KB

                MD5

                be2bec6e8c5653136d3e72fe53c98aa3

                SHA1

                a8182d6db17c14671c3d5766c72e58d87c0810de

                SHA256

                1919aab2a820642490169bdc4e88bd1189e22f83e7498bf8ebdfb62ec7d843fd

                SHA512

                0d1424ccdf0d53faf3f4e13d534e12f22388648aa4c23edbc503801e3c96b7f73c7999b760b5bef4b5e9dd923dffe21a21889b1ce836dd428420bf0f4f5327ff

              • C:\Users\Admin\AppData\Local\Temp\nsd2280.tmp\SpiderBanner.dll

                Filesize

                9KB

                MD5

                17309e33b596ba3a5693b4d3e85cf8d7

                SHA1

                7d361836cf53df42021c7f2b148aec9458818c01

                SHA256

                996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

                SHA512

                1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

              • C:\Users\Admin\AppData\Local\Temp\nsd2280.tmp\StdUtils.dll

                Filesize

                101KB

                MD5

                33b4e69e7835e18b9437623367dd1787

                SHA1

                53afa03edaf931abdc2d828e5a2c89ad573d926c

                SHA256

                72d38ef115e71fc73dc5978987c583fc8c6b50ff12e4a5d30649a4d164a8b6ae

                SHA512

                ca890e785d1a0a7e0b4a748416fba417826ae66b46e600f407d4e795b444612a8b830f579f2cf5b6e051bea800604f34f8801cc3daf05c8d29ad05bcda454a77

              • C:\Users\Admin\AppData\Local\Temp\nsd2280.tmp\System.dll

                Filesize

                11KB

                MD5

                75ed96254fbf894e42058062b4b4f0d1

                SHA1

                996503f1383b49021eb3427bc28d13b5bbd11977

                SHA256

                a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7

                SHA512

                58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4

              • C:\Users\Admin\AppData\Local\Temp\nsd2280.tmp\WinShell.dll

                Filesize

                3KB

                MD5

                1cc7c37b7e0c8cd8bf04b6cc283e1e56

                SHA1

                0b9519763be6625bd5abce175dcc59c96d100d4c

                SHA256

                9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                SHA512

                7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

              • C:\Users\Admin\AppData\Local\Temp\nsd2280.tmp\nsProcess.dll

                Filesize

                4KB

                MD5

                f0438a894f3a7e01a4aae8d1b5dd0289

                SHA1

                b058e3fcfb7b550041da16bf10d8837024c38bf6

                SHA256

                30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

                SHA512

                f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

              • C:\Users\Admin\AppData\Local\Temp\nsd2280.tmp\nsis7z.dll

                Filesize

                391KB

                MD5

                c6a070b3e68b292bb0efc9b26e85e9cc

                SHA1

                5a922b96eda6595a68fd0a9051236162ff2e2ada

                SHA256

                66ac8bd1f273a73e17a3f31d6add739d3cb0330a6417faeda11a9cae00b62d8b

                SHA512

                8eff8fc16f5bb574bd9483e3b217b67a8986e31497368c06fdaa3a1e93a40aee94a5b31729d01905157b0ae1e556a402f43cd29a4d30a0587e1ec334458a44e8

              • C:\Users\Admin\AppData\Roaming\hcleague\Code Cache\js\index-dir\the-real-index

                Filesize

                96B

                MD5

                752935479d4abc53d500d1df421b3678

                SHA1

                d03d18a97c3cb3e4fa27b67bda5590b77dca19a3

                SHA256

                10445fe99753b8912c1067ff1631d4c4e022d6a0db0b60fb66e43ee1735c6831

                SHA512

                ed2fc99a69802eeac2110e4e5e13ca425d11d506a1ccfde9ab2d197553ce6f4b5830cc3d7b99074ac350b782e9639aa0f494918477f19e300c987383ee7c3b81

              • C:\Users\Admin\AppData\Roaming\hcleague\Code Cache\js\index-dir\the-real-index

                Filesize

                144B

                MD5

                e433a73dae8b186cb234c9ae6b3220f7

                SHA1

                9b2d8ccab46fef228faf077b1829514728b4a0f1

                SHA256

                8aca1b55caea7fd027622b8293d69f8dd48aca45dddff35e265799e74c5deb3f

                SHA512

                e2f65292b9f6990d0ee0915ee6e39bd70ce7c6c57a99ec969568d75196c55982d3c901771ffa3bd4ff5bc9195533b0f4e10075a7e3f6d0f730a12eff89fde139

              • C:\Users\Admin\AppData\Roaming\hcleague\Dictionaries\en-US-8-0.bdic

                Filesize

                436KB

                MD5

                0af2c2ded404eafedc91003914dc1650

                SHA1

                1ffddb9c1958a872401e906928934a34529b7433

                SHA256

                1ed02f55bb7a2689704b7995f0f7953fbcf9bfc7ce7f7f178168fe58f3481575

                SHA512

                60294b1ec4bd71c328f0aebd2ddffc6d1acb24be783d939b35ec059053f407b8c2d1cb8b082d3479ac1a12b87aa62e0055695a43b205e0be2aa7da210ba41526

              • C:\Users\Admin\AppData\Roaming\hcleague\Local Storage\leveldb\CURRENT

                Filesize

                16B

                MD5

                46295cac801e5d4857d09837238a6394

                SHA1

                44e0fa1b517dbf802b18faf0785eeea6ac51594b

                SHA256

                0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                SHA512

                8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

              • C:\Users\Admin\AppData\Roaming\hcleague\Network Persistent State

                Filesize

                421B

                MD5

                90a19f5d1c85ea6a4e6f8a527164a991

                SHA1

                6439ba00f303c0d07e67eeb3fe072f4a5c0cdd32

                SHA256

                a729198e60267918a3820017e50e57da4563aacc637be513a184cab83788766d

                SHA512

                7aa5752f3014dae6d5275f558aa1c3ef3db58cce07887a5711f9a562e36329762f72d32a8e5706d02d381072adb77481fa2ca7d1ece9dbdc9f89e060e10eb9b5

              • \Users\Admin\AppData\Local\Programs\hcleague\d3dcompiler_47.dll

                Filesize

                4.3MB

                MD5

                fea40e5b591127ae3b065389d058a445

                SHA1

                621fa52fb488271c25c10c646d67e7ce5f42d4f8

                SHA256

                4b074a3976399dc735484f5d43d04b519b7bdee8ac719d9ab8ed6bd4e6be0345

                SHA512

                d2412b701d89e2762c72dd99a48283d601dd4311e3731d690cc2ab6cced20994fa67bf3fea4920291fc407cd946e20bdc85836e6786766a1b98a86febaa0e3d9

              • \Users\Admin\AppData\Local\Programs\hcleague\d3dcompiler_47.dll

                Filesize

                4.3MB

                MD5

                fea40e5b591127ae3b065389d058a445

                SHA1

                621fa52fb488271c25c10c646d67e7ce5f42d4f8

                SHA256

                4b074a3976399dc735484f5d43d04b519b7bdee8ac719d9ab8ed6bd4e6be0345

                SHA512

                d2412b701d89e2762c72dd99a48283d601dd4311e3731d690cc2ab6cced20994fa67bf3fea4920291fc407cd946e20bdc85836e6786766a1b98a86febaa0e3d9

              • \Users\Admin\AppData\Local\Programs\hcleague\ffmpeg.dll

                Filesize

                2.2MB

                MD5

                7a3135b35ec373e7d4090967d82728c4

                SHA1

                fe70b0de243007a50c261ff344e403b1354af2c4

                SHA256

                6877255ff35316554b10a52986d843fbe7bc6c6c6f0b4aa26363916d796185eb

                SHA512

                b979548c15c029f30580b7ff078311b86978d36a27cfce2c138f780530ba39ecbba754a23bde05f3949c0c1c008817070f84706f0b7e74d0d8d17e4155ad779a

              • \Users\Admin\AppData\Local\Programs\hcleague\ffmpeg.dll

                Filesize

                2.2MB

                MD5

                7a3135b35ec373e7d4090967d82728c4

                SHA1

                fe70b0de243007a50c261ff344e403b1354af2c4

                SHA256

                6877255ff35316554b10a52986d843fbe7bc6c6c6f0b4aa26363916d796185eb

                SHA512

                b979548c15c029f30580b7ff078311b86978d36a27cfce2c138f780530ba39ecbba754a23bde05f3949c0c1c008817070f84706f0b7e74d0d8d17e4155ad779a

              • \Users\Admin\AppData\Local\Programs\hcleague\ffmpeg.dll

                Filesize

                2.2MB

                MD5

                7a3135b35ec373e7d4090967d82728c4

                SHA1

                fe70b0de243007a50c261ff344e403b1354af2c4

                SHA256

                6877255ff35316554b10a52986d843fbe7bc6c6c6f0b4aa26363916d796185eb

                SHA512

                b979548c15c029f30580b7ff078311b86978d36a27cfce2c138f780530ba39ecbba754a23bde05f3949c0c1c008817070f84706f0b7e74d0d8d17e4155ad779a

              • \Users\Admin\AppData\Local\Programs\hcleague\ffmpeg.dll

                Filesize

                2.2MB

                MD5

                7a3135b35ec373e7d4090967d82728c4

                SHA1

                fe70b0de243007a50c261ff344e403b1354af2c4

                SHA256

                6877255ff35316554b10a52986d843fbe7bc6c6c6f0b4aa26363916d796185eb

                SHA512

                b979548c15c029f30580b7ff078311b86978d36a27cfce2c138f780530ba39ecbba754a23bde05f3949c0c1c008817070f84706f0b7e74d0d8d17e4155ad779a

              • \Users\Admin\AppData\Local\Programs\hcleague\ffmpeg.dll

                Filesize

                2.2MB

                MD5

                7a3135b35ec373e7d4090967d82728c4

                SHA1

                fe70b0de243007a50c261ff344e403b1354af2c4

                SHA256

                6877255ff35316554b10a52986d843fbe7bc6c6c6f0b4aa26363916d796185eb

                SHA512

                b979548c15c029f30580b7ff078311b86978d36a27cfce2c138f780530ba39ecbba754a23bde05f3949c0c1c008817070f84706f0b7e74d0d8d17e4155ad779a

              • \Users\Admin\AppData\Local\Programs\hcleague\ffmpeg.dll

                Filesize

                2.2MB

                MD5

                7a3135b35ec373e7d4090967d82728c4

                SHA1

                fe70b0de243007a50c261ff344e403b1354af2c4

                SHA256

                6877255ff35316554b10a52986d843fbe7bc6c6c6f0b4aa26363916d796185eb

                SHA512

                b979548c15c029f30580b7ff078311b86978d36a27cfce2c138f780530ba39ecbba754a23bde05f3949c0c1c008817070f84706f0b7e74d0d8d17e4155ad779a

              • \Users\Admin\AppData\Local\Programs\hcleague\ffmpeg.dll

                Filesize

                2.2MB

                MD5

                7a3135b35ec373e7d4090967d82728c4

                SHA1

                fe70b0de243007a50c261ff344e403b1354af2c4

                SHA256

                6877255ff35316554b10a52986d843fbe7bc6c6c6f0b4aa26363916d796185eb

                SHA512

                b979548c15c029f30580b7ff078311b86978d36a27cfce2c138f780530ba39ecbba754a23bde05f3949c0c1c008817070f84706f0b7e74d0d8d17e4155ad779a

              • \Users\Admin\AppData\Local\Programs\hcleague\ffmpeg.dll

                Filesize

                2.2MB

                MD5

                7a3135b35ec373e7d4090967d82728c4

                SHA1

                fe70b0de243007a50c261ff344e403b1354af2c4

                SHA256

                6877255ff35316554b10a52986d843fbe7bc6c6c6f0b4aa26363916d796185eb

                SHA512

                b979548c15c029f30580b7ff078311b86978d36a27cfce2c138f780530ba39ecbba754a23bde05f3949c0c1c008817070f84706f0b7e74d0d8d17e4155ad779a

              • \Users\Admin\AppData\Local\Programs\hcleague\ffmpeg.dll

                Filesize

                2.2MB

                MD5

                7a3135b35ec373e7d4090967d82728c4

                SHA1

                fe70b0de243007a50c261ff344e403b1354af2c4

                SHA256

                6877255ff35316554b10a52986d843fbe7bc6c6c6f0b4aa26363916d796185eb

                SHA512

                b979548c15c029f30580b7ff078311b86978d36a27cfce2c138f780530ba39ecbba754a23bde05f3949c0c1c008817070f84706f0b7e74d0d8d17e4155ad779a

              • \Users\Admin\AppData\Local\Programs\hcleague\ffmpeg.dll

                Filesize

                2.2MB

                MD5

                7a3135b35ec373e7d4090967d82728c4

                SHA1

                fe70b0de243007a50c261ff344e403b1354af2c4

                SHA256

                6877255ff35316554b10a52986d843fbe7bc6c6c6f0b4aa26363916d796185eb

                SHA512

                b979548c15c029f30580b7ff078311b86978d36a27cfce2c138f780530ba39ecbba754a23bde05f3949c0c1c008817070f84706f0b7e74d0d8d17e4155ad779a

              • \Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • \Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • \Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • \Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • \Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • \Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • \Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • \Users\Admin\AppData\Local\Programs\hcleague\hcleague.exe

                Filesize

                99.5MB

                MD5

                288d0aee9c4eb0feec0fead4368e7a12

                SHA1

                3b017dd8af14febabad4f2949ec599053e8db4ad

                SHA256

                f92c9f11450b6fafdc3cce0a8e965b41273c4b4ee2a59a72b7fd287668d17f37

                SHA512

                a84b1bd9f79e9ebc789844b44a8b14a2aea8ee35193653e311de31e9afb152d427aca3dbf2786fcadb12159e46c8dc5d25304f10d236133e26c70f66f2db8110

              • \Users\Admin\AppData\Local\Programs\hcleague\libEGL.dll

                Filesize

                367KB

                MD5

                82747ef9d45de291a694c8348dcbfe07

                SHA1

                23e6cc2622937abf0083ba112eb314ef0c1e85cb

                SHA256

                b910cd8a177f10d347b776b426e05b8c1f78916db069d05a8e82e53e963c0e80

                SHA512

                b344640fe714705ef37dc0c994c9191e73580b0c36dcb59bd1b6dfb1b7d7d732d2175a4cc919c171c329420a2ceef7f52b8213125e8e65b57d8df5313022e15b

              • \Users\Admin\AppData\Local\Programs\hcleague\libGLESv2.dll

                Filesize

                7.6MB

                MD5

                fa62e296a1ae53dd28dff4597b385389

                SHA1

                ced3d0818e7835fc484ac236e10df70f87394910

                SHA256

                19e1600e35a13deb931b095914f2dfa6447bb51f486a2735639ed00ed606d289

                SHA512

                3301f2ef5f154f6987c11b4f0216871c438d9f2df2879353edaf46dde79de53d891660631711d2790a012fb80788fa00c004dcd26d4443dd18df66823dcb60c0

              • \Users\Admin\AppData\Local\Programs\hcleague\swiftshader\libEGL.dll

                Filesize

                392KB

                MD5

                f1cb951b601764ecb615752aa6a6eb5d

                SHA1

                985c16c5e71abe9d2eb0292ca1f911451c0e5ba8

                SHA256

                7d226ad9f213890b37714808ab8397bf71cced005ae746dba84cd009bf6bb600

                SHA512

                f439a218654f37b1dea0a44aa2c052b0f783b8de19302e86dc1799a99f25744060fe5b3e6b4d909ebe3d742ea50bada2d73e621d40a72e7a1c5805ae014002f6

              • \Users\Admin\AppData\Local\Programs\hcleague\swiftshader\libGLESv2.dll

                Filesize

                3.6MB

                MD5

                6fe59c8fb550e7b94fdc8c252e7f408f

                SHA1

                dd141acd0d9631f853bafa7e11e0c5f12cc30fb7

                SHA256

                bc8886eb76aff294a6b0855c2c75e6ff675e24de1fdaa6294f89f64e4dad195a

                SHA512

                ab09359e2a654bab80f004ad694f96c533f92c34838886c82be38b6e955834c0f087a15e79f568ea9def7487bd6aee9b4270e3e20444e89945e15001a73106e1

              • \Users\Admin\AppData\Local\Temp\nsd2280.tmp\SpiderBanner.dll

                Filesize

                9KB

                MD5

                17309e33b596ba3a5693b4d3e85cf8d7

                SHA1

                7d361836cf53df42021c7f2b148aec9458818c01

                SHA256

                996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

                SHA512

                1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

              • \Users\Admin\AppData\Local\Temp\nsd2280.tmp\StdUtils.dll

                Filesize

                101KB

                MD5

                33b4e69e7835e18b9437623367dd1787

                SHA1

                53afa03edaf931abdc2d828e5a2c89ad573d926c

                SHA256

                72d38ef115e71fc73dc5978987c583fc8c6b50ff12e4a5d30649a4d164a8b6ae

                SHA512

                ca890e785d1a0a7e0b4a748416fba417826ae66b46e600f407d4e795b444612a8b830f579f2cf5b6e051bea800604f34f8801cc3daf05c8d29ad05bcda454a77

              • \Users\Admin\AppData\Local\Temp\nsd2280.tmp\System.dll

                Filesize

                11KB

                MD5

                75ed96254fbf894e42058062b4b4f0d1

                SHA1

                996503f1383b49021eb3427bc28d13b5bbd11977

                SHA256

                a632d74332b3f08f834c732a103dafeb09a540823a2217ca7f49159755e8f1d7

                SHA512

                58174896db81d481947b8745dafe3a02c150f3938bb4543256e8cce1145154e016d481df9fe68dac6d48407c62cbe20753320ebd5fe5e84806d07ce78e0eb0c4

              • \Users\Admin\AppData\Local\Temp\nsd2280.tmp\WinShell.dll

                Filesize

                3KB

                MD5

                1cc7c37b7e0c8cd8bf04b6cc283e1e56

                SHA1

                0b9519763be6625bd5abce175dcc59c96d100d4c

                SHA256

                9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                SHA512

                7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

              • \Users\Admin\AppData\Local\Temp\nsd2280.tmp\WinShell.dll

                Filesize

                3KB

                MD5

                1cc7c37b7e0c8cd8bf04b6cc283e1e56

                SHA1

                0b9519763be6625bd5abce175dcc59c96d100d4c

                SHA256

                9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                SHA512

                7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

              • \Users\Admin\AppData\Local\Temp\nsd2280.tmp\nsProcess.dll

                Filesize

                4KB

                MD5

                f0438a894f3a7e01a4aae8d1b5dd0289

                SHA1

                b058e3fcfb7b550041da16bf10d8837024c38bf6

                SHA256

                30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

                SHA512

                f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

              • \Users\Admin\AppData\Local\Temp\nsd2280.tmp\nsis7z.dll

                Filesize

                391KB

                MD5

                c6a070b3e68b292bb0efc9b26e85e9cc

                SHA1

                5a922b96eda6595a68fd0a9051236162ff2e2ada

                SHA256

                66ac8bd1f273a73e17a3f31d6add739d3cb0330a6417faeda11a9cae00b62d8b

                SHA512

                8eff8fc16f5bb574bd9483e3b217b67a8986e31497368c06fdaa3a1e93a40aee94a5b31729d01905157b0ae1e556a402f43cd29a4d30a0587e1ec334458a44e8

              • memory/1200-258-0x00000000027C0000-0x00000000027C2000-memory.dmp

                Filesize

                8KB

              • memory/1704-315-0x0000000001D50000-0x0000000001D51000-memory.dmp

                Filesize

                4KB

              • memory/1924-292-0x0000000000060000-0x0000000000061000-memory.dmp

                Filesize

                4KB

              • memory/1924-336-0x0000000077C00000-0x0000000077C01000-memory.dmp

                Filesize

                4KB