Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

10/06/2023, 23:35

230610-3ladmsgg7y 10

16/04/2023, 04:20

230416-ex772sae3v 7

Analysis

  • max time kernel
    17s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    10/06/2023, 23:35

General

  • Target

    DamnedSetup.exe

  • Size

    61.7MB

  • MD5

    aa2f460f18b6182077ccaef14e1a32e0

  • SHA1

    6df435e09112594190dbdd39eb8b138b8c04b52c

  • SHA256

    82f99623c166564ee2da03402eb0b6c282d9df66128a441a8d0237893343eae1

  • SHA512

    d5de3e2aa2674f6fb22d8b02817df2575019a988e0b45506ebd056863131bb1abc421ebe97b7e860b61e26e8a50d67adabde6f585f2737815c079e5711da4b92

  • SSDEEP

    786432:/avyqjtvARFf/Mrj5bWb/nQoa8uioaOfHnNFKVWkkbvSAgJDWq8+ugGe0Wl7:EtvetMtinHaBHNYV6vSAuZ8fgGe0Wl7

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DamnedSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\DamnedSetup.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    PID:1196
    • C:\Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\GalacticShooter.exe
      C:\Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\GalacticShooter.exe
      2⤵
        PID:2008

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\GalacticShooter.exe

      Filesize

      1.4MB

      MD5

      9cbd5cbe737f32acfc6dc0854205de0c

      SHA1

      9000945a6f1c938961fd705a2cbc33d4bcd28c12

      SHA256

      2c2bb3c21c16fae2d05b158750419cc2f1f81c995b5906c945f24c41f8dd1930

      SHA512

      dedb62183178bff548af99dac7473b7c3b2eb40b9197cc22fedca344ccbda5ec62474d465799517c0efbd2292becff15048590a02c11e9eb240e442d88451541

    • C:\Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\ffmpeg.dll

      Filesize

      1.4MB

      MD5

      6e419ef9d6949b4317e3455918ec5162

      SHA1

      f0f5eefb402d1ab6e1877ae59f34c1dfe4d0768a

      SHA256

      947285b81554f363d9cbdb447114a995a31f5601420fa33a3ce0b7a2a1e67845

      SHA512

      55167da8069d02c0c310e4b7e86967ac1472c18139799b4dc55aa7f6dbf38a03fe97b3af225d42abd7fc1a70803b032df3f7a2a119baea8b1aac52bee16d6775

    • C:\Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\icudtl.dat

      Filesize

      1024KB

      MD5

      c28f29a308fdeb3bb1d6b15b8864b29a

      SHA1

      8f0d73ae3e72b421611d43422074f38615a8e0a3

      SHA256

      43f06cb3f35b2b1a0f5c63fcecc7ca79b8bb080e2bd16770a3d1c679b984c1f8

      SHA512

      0c8994a18e24b75a16f1f584999382bf7f18c834a19419999461e23838e7f582779f41d9558b31adb6419baeca6a731bfabe32de7056e76b8ecaa5478776f881

    • C:\Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\v8_context_snapshot.bin

      Filesize

      709KB

      MD5

      dd0d4997dfab65b96aad66d035f6029c

      SHA1

      65faa1dbb7ccd902f1f1af544f6941234ff679d3

      SHA256

      f033fb86fa92df1be464de590aa312cc016bc5d6bea26672c896bf4d3f1261cd

      SHA512

      86b06bd0f91f50bd13b3af179f3f498f10a225d25ba5ca32258f75567e601c3f48f7a3fb436c3b0d2ba53cc9eaaa8f74c95b44458628b0ea716563694a3c7002

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\GalacticShooter.exe

      Filesize

      640KB

      MD5

      9fb338c3dcf860945b57569f588145db

      SHA1

      40fe570d0744a9e45f1b8b18db9d8687838dfaf8

      SHA256

      5368a6ead82565098bf2b3b53dc06c91296bcbcff49d6542c6b61bb8ab8a2d7f

      SHA512

      faffa3c37d665d81ca068e3cdd0f72a031b92c8b6f0a5795ebf38c2c9252c7f064b7a723ab6821b39af29a67bf536adb1a1362f63c77f68195698dbba6659317

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\LICENSE.electron.txt

      Filesize

      1KB

      MD5

      4d42118d35941e0f664dddbd83f633c5

      SHA1

      2b21ec5f20fe961d15f2b58efb1368e66d202e5c

      SHA256

      5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

      SHA512

      3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\LICENSES.chromium.html

      Filesize

      3.8MB

      MD5

      bb9d93973dc3d78b6fe4aeda432ed9ba

      SHA1

      d2349dba2e02db0d937cdaa9412b5e0c6a1f8939

      SHA256

      fb59c115b4020b83cd6cd1e7a00bc390f3f3145faaa365181eb0d6963bbb5122

      SHA512

      24d8fc08421ae3a8767c4439672af0e5d369035ab7e35608c8e8ca08ca8a6eba97f04e47e32f7eea65caca342214ca28c13733566df3997e7933931c087b0a22

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\chrome_100_percent.pak

      Filesize

      145KB

      MD5

      237ca1be894f5e09fd1ccb934229c33b

      SHA1

      f0dfcf6db1481315054efb690df282ffe53e9fa1

      SHA256

      f14362449e2a7c940c095eda9c41aad5f1e0b1a1b21d1dc911558291c0c36dd2

      SHA512

      1e52782db4a397e27ce92412192e4de6d7398effaf8c7acabc9c06a317c2f69ee5c35da1070eb94020ed89779344b957edb6b40f871b8a15f969ef787fbb2bca

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\chrome_200_percent.pak

      Filesize

      214KB

      MD5

      7059af03603f93898f66981feb737064

      SHA1

      668e41a728d2295a455e5e0f0a8d2fee1781c538

      SHA256

      04d699cfc36565fa9c06206ba1c0c51474612c8fe481c6fd1807197dc70661e6

      SHA512

      435329d58b56607a2097d82644be932c60727be4ae95bc2bcf10b747b7658918073319dfa1386b514d84090304a95fcf19d56827c4b196e4d348745565441544

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\d3dcompiler_47.dll

      Filesize

      4.3MB

      MD5

      7641e39b7da4077084d2afe7c31032e0

      SHA1

      2256644f69435ff2fee76deb04d918083960d1eb

      SHA256

      44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

      SHA512

      8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\ffmpeg.dll

      Filesize

      2.6MB

      MD5

      21647425561f9dfa567139d2c505f585

      SHA1

      efd5b3d6a21886c6467d28c73d20be0acb4591e9

      SHA256

      b827172262cea032be8303aae69a947a8d867006269bb8b2bc7e77619333c1b6

      SHA512

      c5316a6b2d77cf2c2949698f9cba92fe1ec57b2ac82d55fbbeffe71b4834ec06e83728a176f5089c91cc9544deda0667f39338f1e9d1a37db69bd8bad4af915a

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\icudtl.dat

      Filesize

      4.4MB

      MD5

      e2bf59d1bddb4afde223dedd190fe38f

      SHA1

      6b58e731b8098d71b19f15877620141a5a60b576

      SHA256

      2b997952f0e7f594265e87b6ea3d1ab54eb2385b37ec2fd21d4920efcc60ae34

      SHA512

      3af27443658807c0f62eaef18dec7870882404b2ffd0e729e37c4c03344b4a039829b09b06da5ea517dc722868a17d855caa633bd5a69399f1d7acaaf019f6c6

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\libEGL.dll

      Filesize

      437KB

      MD5

      91f11a9181583f75e2b29fcd9050c7f5

      SHA1

      fd90abc3048f3347435dfbd1075b8051ac6ffabc

      SHA256

      43a549ff51ce4ee20074999527b19fbf280a8caa7db0bde957704033b6f5b330

      SHA512

      925ac2a87e436219e22a924f615669cb166e8183d6e4dd0f00ed68c16faa3ffa10ab410106a7f81320f10205415bff9d10976f1dc0bb695b9293b80101e4ce8a

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\libGLESv2.dll

      Filesize

      4.1MB

      MD5

      27255aab3e6d8acecd3a086c231e4e9b

      SHA1

      60b513989285a6032330eabd08ed2b9df7370e90

      SHA256

      e07e11e8cd4aa59845d87ce53cd4beebcdd81e5df519b5d346a87f486404e028

      SHA512

      8655e2694bb7500a5a22337e0fa5ebbc56282d99931e1e0d81ecce29286e0c31bc734495806384aa9d2b8720599708ede514368bb18f73526a015299b87c1c9f

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\bg.pak

      Filesize

      209KB

      MD5

      7f3fe009d84dddf6a509ae33d95a7e7b

      SHA1

      667d804c714feab9d104db211a981357b2b8124f

      SHA256

      58bec94801d09157c852cfbc3ccd9916fafd1947fdc61c1453456bce5b054c4e

      SHA512

      92151d7589682c7078d9f9915eb6d14d350a13a126a000e4da29228649926282caf03cd996e68704f9e5dd0faf11750f7c4ee105e1655f9becbe0e267f7fc614

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\da.pak

      Filesize

      124KB

      MD5

      9fb8a421caf18588b494c3f34d8764c6

      SHA1

      201ac33074c76830893197ab9382ec84553f1794

      SHA256

      0997be868557f97f013242c066b192e574b4fa553d13f37f97a1de714b95a858

      SHA512

      59b2fd820f9bd45015444c85fcb55e04027836e62c6a9187e8ce0c2a9aea6e5e626b76627c9601f69e769d4ddd09f6a8ccc2dfdda6835e261b94a5af91d8bbf9

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\de.pak

      Filesize

      133KB

      MD5

      a4d8eecec2747ffb12551ab8e93fafdf

      SHA1

      59aa4c3a7179c46c7699d0d918dd92722a614def

      SHA256

      d67f95e2982e7debf67741b88ce054f5bb8356021a280e092227b77ec82e298f

      SHA512

      1de20fa8798d050966c99aa0590c7460a40b6ff41afc36645c1f4655a09f6070530adbd1d6fb5937d1fc9965c7aac932dbb06a0ff47f31bcb6d4717eaa81613e

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\es-419.pak

      Filesize

      131KB

      MD5

      10b1d1097987ea050a5791eceb5eabda

      SHA1

      c0812fbc16592a39cd1600196e62d0000b22bd73

      SHA256

      04b24396cc017e1dbb0bca7371d7cae10cad2350da661a8a035b572aa76cbd49

      SHA512

      f2a6767eae2d5eebff35f6b7d3a932ffd797fdfb48023c75b3c98b1ced5b3695ec12e642d68582da1aacac1c59b0d3a2f029c702d0df02d7b08430384d40e178

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\fil.pak

      Filesize

      137KB

      MD5

      9f3a970c8fed49ac50bddbf09dd9a950

      SHA1

      e8b986d42d4a79c513bf2da3d3314fbf55a2a960

      SHA256

      7a4c4822516f47cdbabc4b9ef45b710b057a056bc29d3a4a270a22e963e257d3

      SHA512

      4533a05b38e45f8cedffdecefb77ed9af44aba799f030a770b616ec7867fd0d7893de67528a611d1002d18e3ee7f8799944804e008ec8217cbf59e03a19139b5

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\id.pak

      Filesize

      118KB

      MD5

      e61a4d062cd61972a534a5e86e49c34d

      SHA1

      c19be8f744b956753ce40d91a34f0da02f699ffa

      SHA256

      d00c7ee5edeb1bd1493c49cf2d124ffdf47405d21d8d43c1a41c8749ce5c86a3

      SHA512

      7de4453b0793dde96503e762d4e9a77835ddbb1d75d35f012d24e8453a90ac85f87b0a62d95ad68393901a8ac3fcb147cf2b7bd468dffa62d959133528af15f9

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\nb.pak

      Filesize

      121KB

      MD5

      00f1a382f8f5e0950cb9ba4a4f3fd478

      SHA1

      bba2de6051bdd9b596f66312f2e2296c370e2d93

      SHA256

      e42e748f28e944f9a3a7fad19e686b856bc60b3e0128de94e6cd7619a7d24071

      SHA512

      2d8f502f51fcf066bf8c420ca2c86fe4ec6274ab0da5a5266293225910c9a0dfb6d5c529a9fd0da6ff4952bac385fce2885757de81a4db2d7f5c10cddd539c0e

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\sk.pak

      Filesize

      138KB

      MD5

      0b9599388dec973ffec68a5738a848f4

      SHA1

      0a0aaf4f9618cf867a1bf1e5bc6b8b21b46c4870

      SHA256

      e7038a23be62e4a476960b935a6c528aaefb781b28fdb7e24b3d830b5c02f10e

      SHA512

      5ee7aeaaf1be25ddc86694a16ca595872f2a9dcf1e48d0189d3a1eef425629abdc814ff32a8b288b468ab4f263953618c4363d033ef7aec2bae0072129dd1f9a

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\sl.pak

      Filesize

      132KB

      MD5

      3bf6c4aa2129b4b535637aa6727fb1e9

      SHA1

      569bcfab7176bb9833a02b5853bbbeb3165538cc

      SHA256

      cbff2dbb38d4d95fe7c811e0abdb0b92aad621e5c2c1eeda3c394dce5cf1d34f

      SHA512

      779ced23adc89af08f43531056b7195d253b7ea021439f73f0c9f9b49969153a2044e90acc0bda3c14d3b3e68f772f5cf8611f954b5b9cb0370d252a484ca36e

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\sr.pak

      Filesize

      198KB

      MD5

      9f9570670d844a1b14b256a7584665e8

      SHA1

      5b5cf46415662cc1ce4d93b876f4c45389aedfc2

      SHA256

      abcee52deb7382d84de334c3228711a62a7d21d9a2ce506385805eea0ed716f4

      SHA512

      d38fca2d639e32f5ef90dfaac04aef0ccfbcc409619acec6535b5401502b7141f6eb24f574db97a7abc550b8e35e93cbc62a4a0f7494c56537fb670f19e02f8e

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\sv.pak

      Filesize

      121KB

      MD5

      c0eb9dc359ead97302591d09a4d80c81

      SHA1

      5569c326861e80dd05aa49a74d77815364915af1

      SHA256

      b34e855f518a2041e4bbd7b5c269e35e7dfaa431fdd876fc0aac38b887e65aff

      SHA512

      b488831aa6219a246d0cdc370dc7b95fc07754702447964737eb53b9d5f64092e8873032bc40e8af9270388bb1b655b4f06d6de304b85b32fdd297959534d06d

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\sw.pak

      Filesize

      125KB

      MD5

      9cd6230b42f2f99d9580f7ef84508f9c

      SHA1

      4f9d82e3c39f2b0d3b0cc32733254aaf38e811b2

      SHA256

      fe18b3e9e275d7330706dd19f4af603a8ad899138374bfcba8e2c6764f94c190

      SHA512

      46a07a61ee7a70b4d261c16d2fef6f0e8a35caf371e33e05ca1dc3bdc7f3d304c1dbdb34ddba7b6bc573a6a58e170d9250cb1b6a4ad8ae6e255704416c022607

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\ta.pak

      Filesize

      306KB

      MD5

      afbb6f8a11ecb993e73a530e2682848c

      SHA1

      950d0fa6cd4338084b5ffa72eb49f79b07830466

      SHA256

      3d16a99568173ad5760bf195b047c8850e39ec8d308a94f6c81cf7ba733f6f5f

      SHA512

      74ee545cdce2e263bc33279325e0c72336575b36de7dfe145897964cde7eb57429cdff082ec5a06e7f46f75e9bc6d5c4cc3dca395745e990092cdac27e56f129

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\te.pak

      Filesize

      285KB

      MD5

      5f441de15ced6697594e8bc066297348

      SHA1

      33c64379ec7297404e8aa4a4ba5a7155cd69dc90

      SHA256

      4ab6fbf03177bd7ad0908318d5affd0cad142ec5e9ed560043e6b76e590ba995

      SHA512

      dac2982dd5e9337fc3443a87d5dcbbff46f0fefdf9e163624bba1acd1528f543c84e2a088a83a749543e7b764607c16f1ab1c6c4f9504eff48180a30681570f3

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\th.pak

      Filesize

      241KB

      MD5

      f0a3ce8609d1cea58d4d0dfc47d433f9

      SHA1

      9f0497e31ac881960c2b9ce3f75fac98d6ee300b

      SHA256

      31f31b2985c2ab430d373dd3d79821db0674edee163b4ae74dc362051ccc1491

      SHA512

      0a722fe6373f0f64a844a8bd79cff66707e158a908292db8f5ee883e4732fc55864b06554988836a07039befc4020cb837883851da0455f070bcb63df390d919

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\tr.pak

      Filesize

      128KB

      MD5

      fe23b2095b245ae359c449cf3ae2d4c4

      SHA1

      56af0705886551389dedb9ba1d9becc682321977

      SHA256

      48b76d081b4398c7af10be207751ef3bf67720700c35b17196a4aa0c94526208

      SHA512

      94b81f5469620bb7545f3ccda35845861e92ff7d29351a7f562ac861f718454d3d8dff324cfc904e484f5551d952bc338f24e284f585a714fffff5f3a5445f64

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\uk.pak

      Filesize

      211KB

      MD5

      6027526062e6f51a7c99feebc9ae1947

      SHA1

      10d7346a8d6a4dadb48bf7720303ef39f76a564a

      SHA256

      5ddf9212cbc6696941547b2e57b02092517bff6e70529f2ee14d0f593610e14f

      SHA512

      52178a648747f3247e32183cdb36ecc9a6314b2befa91cae28d5110c479f5d1ff59ad2c802a75288c17650de5a2ebcf369e04e760259015ff855ff8299dd9f3d

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\vi.pak

      Filesize

      151KB

      MD5

      8d1de53ff78406c42fe554acc82b5983

      SHA1

      1b80f071914c9a2f071355973da7ff3d9508298b

      SHA256

      314ff8e069d132d43566143ffe0f5cebc990a015ac32ed550ac687a4ff78d56f

      SHA512

      d027a534f8ddac3c953d81ba635a8a3fe452e7295fb2aa7d8b9d5a718fff7cd619323e3914dd6a17eacecb0c6d6f5129c9e793b2925f65dabec83b9389db295d

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\zh-CN.pak

      Filesize

      112KB

      MD5

      b2e2087f9c688dc3ec45a55742bedb6a

      SHA1

      8efd0726b46fc67cda9fdc9989c707c23c7b031c

      SHA256

      2b255293f6c85abb09162c825aea120c3e695156eb952d26d1e5f505ba324b37

      SHA512

      2382b2b4d56831bd25d5a3535936d8a1039e00a287bd5af05628c1a6fc54715fc8ad68ad3f207d6e073a588a66d5fa181e124125e7d1f00a5de54ed658e5c33e

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\zh-TW.pak

      Filesize

      111KB

      MD5

      32f600c44c8a26fdf518faffbce56b71

      SHA1

      7481922abb60ee20f6faff9ae4dc4a55f6e6224e

      SHA256

      1710cea2eb84e4feed749e9e497d01e16b1b244d1a621d380226b8ae7cce07c6

      SHA512

      da145697ac8d7ce6e8cdf3f6e190c23f9791f4fdc2c1eed2dbc10e8c6377298c4d02df464752277cd7ec429297860ffe50e7b9de79632699dd2202b7324f55fe

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources.pak

      Filesize

      3.7MB

      MD5

      fbbe94703d6e239aaf13574a1bcc0964

      SHA1

      d8b2aaf633b0e35bc8bf79e89ba5c346d05a7cf6

      SHA256

      9fd35ede1c8158c80130a84618aaa26bf8654f17ec3082f31247f5502269f171

      SHA512

      b5e8447e3307d0bf6e68c4095ab9ba46563755c895fa27c7291e0f39f1687f0717957be63917f19283ad46014796181cc7c57cd227552ff00cdd675aee4db694

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar

      Filesize

      2.1MB

      MD5

      813672895f94fefb5940c927fa7ed1cd

      SHA1

      105f15789f60f4796b871c171d0fd9bb413af08f

      SHA256

      f4741ecc7d9bfbe4d78c4653c03199ed339ef96c743e8dfae3f92153d8868be7

      SHA512

      c9182c7de16ca0cbfbc339928848a06710333b40381e68d872089ce4d839009f9440c7bce0eff29e1349ee5af873ff64d432f0b90186ff8c47fe17982b302d94

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\.github\ISSUE_TEMPLATE\bug_report.md

      Filesize

      693B

      MD5

      d1d38ecc8b3a869312b3eedc6a376201

      SHA1

      4aa1d47ab0558e86f5a86629d0a1d99ba1af336d

      SHA256

      a25704529f0d5d89309743f5ca52189fdb16a770885c0dbe8edb3ea9d54a6a90

      SHA512

      cb77aea773f82e95fc593ae67b31caab164e101205eb68f6bce0103df9eaadc7c1d9dc6d0083ae6420e82027b21925c55593a7033ae9b4203e9970fff732c84f

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\.github\ISSUE_TEMPLATE\feature_request.md

      Filesize

      595B

      MD5

      174545e1d9daff8020525fdd1e020411

      SHA1

      f6867a2f0417fe89a0f2008730ee19dd38422021

      SHA256

      1f48c52f209a971b8e7eae4120144d28fcf8ee38a7778a7b4d8cf1ab356617d2

      SHA512

      b18005cfe7409fde541b934131c32c2eecdc4a8fd62cd558f274a25262c0e6b0b8fd27674ee55d6d4e4c435d49d580a077181fe8b15b095c39736b01ff4ee537

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\.github\workflows\ci.yml

      Filesize

      635B

      MD5

      d1f842c537b6b450fcdded865831bca9

      SHA1

      6a95e32f6a599be8d03b33cac14f9dc776dbd44f

      SHA256

      72c6bf0a7a66c94d54e5792bdc808a6ba2107e692230cbcebf6decd46bbe11ca

      SHA512

      89caf43140242ffbad2d808eac44095a3f072a0441def37adf32e55209df27498b800d57028e51be4319de1a0ce3bb26dafc0ce0b218175605c91a107d1e6cff

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\.github\workflows\lint.yml

      Filesize

      606B

      MD5

      2659061b249572af5e432f2c070fac7f

      SHA1

      437c3a1f784bd2e4b403d8cb71e177e9f4d07015

      SHA256

      7cd6d0c254b0b431d1842ad1b12a9b633ab41d378073b935996de5c1aee79a6e

      SHA512

      f054b3e7e97d6cd07a533878ff9e0fe1a8ac08295ed0962c0d41bbafe30703a18be1a3723094c4cd22625857704b479a7232c3007656c297081e7a014e28bf7d

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\.github\workflows\release.yml

      Filesize

      549B

      MD5

      f6d0e9b28417057e6685b1789d91e225

      SHA1

      27f0d718d3557a12b925e23cb0b14b93b8a6ae6f

      SHA256

      c893be9e533bc188f9039a9e24623c620dab2bd863b419a44f93cd397a10af1f

      SHA512

      d298dffb5b5539e20ec4540bf96184f5e8f90a68b2b17127844cd5f02dcba48bb62a8ee68711416a2730c155dcce00b1fcea9211f73e0ac61d0cd562e547f2bd

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\index.js

      Filesize

      420B

      MD5

      394a6022c9e7aa401b3c992c4b92ea94

      SHA1

      cae58c8959c078b24484148a0d09da816d350699

      SHA256

      125c1a517628169f4e66e0e237d201be226afb5c704a684aee5155de69281685

      SHA512

      cbd75168e3054a8412eec7fc1415ad1906d8a3228a16a486674909bec0f3a8b177f02e4c9c3419598e13fb0676d87132e82ee1182549c69c6bcf59fb59aaf0ce

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\darwin\index.js

      Filesize

      5KB

      MD5

      78c9024198b8933ba47fd22220ccd12c

      SHA1

      ae8e968a89e954dd31b5c1827d8bc1ea632cbe83

      SHA256

      e364425fec6fb780c1fb00615014a0d5e39f65517848a12371b8934c5bb35e8d

      SHA512

      0e06a3b4684b7275491691329150fede20b253aeafeb3307fb19f88d1477533ac20b028a73f61d32deb41592414d95ac73c703ac016c8ceaea4739f2a008cc36

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\linux\index.js

      Filesize

      5KB

      MD5

      3b9999e65606270a0fe405aa1bb32fd1

      SHA1

      b090ad8054a7384c01203962e94776b9134f42e2

      SHA256

      f0cf780d0dea403121f30fcf11096c48a4a0dc2b0393d41ebbb664ff7c89ec3a

      SHA512

      0a09384372a32c723ac8e8324dd2f93d57467d2e8b53dbe3231ee37ccae9aaa5c91363be4366e8c2a5495f607ea96782c11363dab7097fcf27fe3645c403f141

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\utils.js

      Filesize

      1KB

      MD5

      a2f2486efffaa9be30b2ef58e24d49a1

      SHA1

      8ac5c529c227adaafbf43abd917a44b87c92ce46

      SHA256

      f1065090ce89b14c76d533d11040556759c58679c0eb89a1e59337d318e16a6c

      SHA512

      d1283a5663aa62b2262283b1a611e002602f869dcf006dd336d742272f14d98791c35a5c32af92884692a62fef0942e6c99d0646aadbd6582e418eb4497a4c66

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\app.manifest

      Filesize

      350B

      MD5

      8951565428aa6644f1505edb592ab38f

      SHA1

      9c4bee78e7338f4f8b2c8b6c0e187f43cfe88bf2

      SHA256

      8814db9e125d0c2b7489f8c7c3e95adf41f992d4397ed718bda8573cb8fb0e83

      SHA512

      7577bad37b67bf13a0d7f9b8b7d6c077ecdfb81a5bee94e06dc99e84cb20db2d568f74d1bb2cef906470b4f6859e00214beacca7d82e2b99126d27820bf3b8f5

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\index.js

      Filesize

      2KB

      MD5

      ab2229f48309619a42e98f617f5d26ee

      SHA1

      81671593ff9c5c85a09f23e5a7cce3a4c80c3a2f

      SHA256

      ed1a0f3e590bd553451ed06fd24a4d34407dd5fc63eb93787a53ea51d20827cc

      SHA512

      520f5f82100f2cf70d5f2c8406d83be30b8104197aa0a4dd1b45a9b6c1c15f2f3eab4e578db1c2fb41d2e2bbbe70a0f937cd6e8e3b6cd177f2444140df35db89

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\screenCapture_1.3.2.bat

      Filesize

      13KB

      MD5

      da0f40d84d72ae3e9324ad9a040a2e58

      SHA1

      4ca7f6f90fb67dce8470b67010aa19aa0fd6253f

      SHA256

      818350a4fb4146072a25f0467c5c99571c854d58bec30330e7db343bceca008b

      SHA512

      30b7d4921f39c2601d94a3e3bb0e3be79b4b7b505e52523d2562f2e2f32154d555a593df87a71cddb61b98403265f42e0d6705950b37a155dc1d64113c719fd9

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\screenCapture_1.3.2.exe

      Filesize

      12KB

      MD5

      befa2810b15d065c0095292f1dd4734b

      SHA1

      2f2a776c7a8a6f1b7d8efdaabe09f290385b24dd

      SHA256

      ab1ff81275c7b402863b9ccc599e0ee6e0e5c3c54e4f8d5ee49e8fc22a009a7a

      SHA512

      af98a54b2f62667ad689bff2290a341585b37cc1c314a877b342b67ae8e104db034c74b31b9c8413413b9fd1e2117bd648318cd1957128b78edde57e5155b906

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\package.json

      Filesize

      598B

      MD5

      e5df4e3b7058c914e5048223a6c79f1d

      SHA1

      ab75ebfcf8d669da6c0b54ad2e5f5d73a466cb1e

      SHA256

      101c15c05c78832bc02635e6e2252f1ed23367d22411b51518a1775ff6e972fc

      SHA512

      a316798409c568e5cdd07a34a838d0b9842f65c03ded19853678a30ea3024e9f649afa8b5d4093f5c0c811a33bf513ff1fe4aa33f60bad7553fbfa6584327b29

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\renovate.json

      Filesize

      103B

      MD5

      63823bf8be61361cbd13bf183e201bf1

      SHA1

      4658400152c61edee1555bb86cb6da13e2fe4401

      SHA256

      cba2cbd76811a1b8e808000d073d04f657aaf0551c73a805ca3a4b492f21bd47

      SHA512

      8703cca6f04da47e5376730cf993665f7db1fb854f8509c0b831f189bf4a4c396808eca7949123e334e42a407a6aa84cdad34e5bd1b00d0a4c30f07a80cc9a68

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\elevate.exe

      Filesize

      105KB

      MD5

      792b92c8ad13c46f27c7ced0810694df

      SHA1

      d8d449b92de20a57df722df46435ba4553ecc802

      SHA256

      9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

      SHA512

      6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\snapshot_blob.bin

      Filesize

      395KB

      MD5

      f14a9115edbcc4697515db49cdaf5b08

      SHA1

      9c43d69ba11a03278885dc7f285584278de9ca11

      SHA256

      f25ddf52f68de295bf1cdbd4f7fc6aa9d8f882a16a2f97b4e08e322b6b90546e

      SHA512

      3c646b258a2ba7cd3e1d878d3009d181302d790f324c4c2b10a9eeebbeab9c49ab43b15b3154ae99749410debb2f3ad8d121979ec11e44ad074e1f675cf05dc0

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\swiftshader\libEGL.dll

      Filesize

      449KB

      MD5

      29ae8bef0cf8b6a26f4bebc5a20900da

      SHA1

      515abe76943288d531b35c1b4c764d1dbdb281db

      SHA256

      711cf342b3a008c9116f6138358a67007a29d281d09cf23d20a5e17aa503ee9b

      SHA512

      99981e7074b580ace154c36d0aa1542dcdb979f36476b680ef19c3fd8a9126b5a808e6e1cf2224d20ba22c328b9a621c280c4ffa74638e358297809001d737ad

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\swiftshader\libGLESv2.dll

      Filesize

      1.9MB

      MD5

      a326286e799a3245360d0b735401dbb6

      SHA1

      c87900dfd852af019c6f97935e6264229df8a8a5

      SHA256

      406a75a61a91b69ec2601a4307b8df297b9ecfd987548302cdf94cb6350389dd

      SHA512

      527f1b6b4d7241b125894f3eb310158c27b72d262a3a3ace68b3f020c4d3aadf2d17e663b45744553c7f45ba569b955d7c2e38577b43ce5f1ded55311834ec57

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\v8_context_snapshot.bin

      Filesize

      709KB

      MD5

      dd0d4997dfab65b96aad66d035f6029c

      SHA1

      65faa1dbb7ccd902f1f1af544f6941234ff679d3

      SHA256

      f033fb86fa92df1be464de590aa312cc016bc5d6bea26672c896bf4d3f1261cd

      SHA512

      86b06bd0f91f50bd13b3af179f3f498f10a225d25ba5ca32258f75567e601c3f48f7a3fb436c3b0d2ba53cc9eaaa8f74c95b44458628b0ea716563694a3c7002

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\vk_swiftshader.dll

      Filesize

      3.6MB

      MD5

      df00c91d5e3645e0bdeee78f5172d2a6

      SHA1

      f58e1599204bcdbe100909f1a15599021e5aa289

      SHA256

      0cdb0782cb5242c45b53e4df8db6fd28fa90a3e17ad431b049745ea29b760c18

      SHA512

      00a97bcbdc3b2b17cf2086f6d5e1ec82049a260db956a21b0e0356e035216f4c91e04cca97a0eba30c89e9180dd9d42e6403e322b1cf582bef76579c60109a97

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\vk_swiftshader_icd.json

      Filesize

      106B

      MD5

      8642dd3a87e2de6e991fae08458e302b

      SHA1

      9c06735c31cec00600fd763a92f8112d085bd12a

      SHA256

      32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

      SHA512

      f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\vulkan-1.dll

      Filesize

      830KB

      MD5

      4783d34314ef4feb241f4fdf36499521

      SHA1

      89296d6ac36cd005045db7307bf31005d0cf29a7

      SHA256

      6e8beb4e9da77313f40e75c4ffaeeaa522b6f054fd792631ec1efcf8248ca63b

      SHA512

      7ef1b0e89590b4af20f182bed9d82d5175d1c8c675fc3d05dc0eb2f834052124c877135fc68b2988683cf35e8b25870e45f7c126349d28125c021c8eeb4998ac

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\StdUtils.dll

      Filesize

      100KB

      MD5

      c6a6e03f77c313b267498515488c5740

      SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

      SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

      SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • \Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\GalacticShooter.exe

      Filesize

      1.7MB

      MD5

      facd821751337c02addf2b9cd336ecda

      SHA1

      243f0ba4d0309cd76e0dfa6891fd03a5409cd25f

      SHA256

      d9072284101df118462fbc47f7c230048a1604e63982632acc8c7594b0dfb7b7

      SHA512

      024b9d1346e321a17214d60dced4b2fcf8e2cadbaeb2005c4cd226ac42b98e41e0866a73e18bd74ada6c07df74e326ee1e3ce40ea0030ac9c23a3bc6c1aa68a5

    • \Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\ffmpeg.dll

      Filesize

      1.4MB

      MD5

      311d35bc5f2a9a3e0136513e2f1c995a

      SHA1

      f212dc75c932e63161fe6694a2ee2a44e13f34df

      SHA256

      1799ef65aa7fb2ca385ddc1e2ff9750dfe456da78b3b000fa64ef713fe1d71b5

      SHA512

      e6b7001d103ba329b2d17e7ad53d03c20b23bf77e4e5c9f8647a1ea4d0c321c306655ffc7153caf6db8cf546e32d377f80368652921bcf77d2778c2b5dbc8508

    • \Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\StdUtils.dll

      Filesize

      100KB

      MD5

      c6a6e03f77c313b267498515488c5740

      SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

      SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

      SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • \Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\System.dll

      Filesize

      12KB

      MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

      SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

      SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

      SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • \Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\nsis7z.dll

      Filesize

      424KB

      MD5

      80e44ce4895304c6a3a831310fbf8cd0

      SHA1

      36bd49ae21c460be5753a904b4501f1abca53508

      SHA256

      b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

      SHA512

      c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df