Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

10/06/2023, 23:35 UTC

230610-3ladmsgg7y 10

16/04/2023, 04:20 UTC

230416-ex772sae3v 7

Analysis

  • max time kernel
    17s
  • platform
    windows7_x64
  • resource
    win7-20230220-en
  • resource tags

    arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
  • submitted
    10/06/2023, 23:35 UTC

General

  • Target

    DamnedSetup.exe

  • Size

    61.7MB

  • MD5

    aa2f460f18b6182077ccaef14e1a32e0

  • SHA1

    6df435e09112594190dbdd39eb8b138b8c04b52c

  • SHA256

    82f99623c166564ee2da03402eb0b6c282d9df66128a441a8d0237893343eae1

  • SHA512

    d5de3e2aa2674f6fb22d8b02817df2575019a988e0b45506ebd056863131bb1abc421ebe97b7e860b61e26e8a50d67adabde6f585f2737815c079e5711da4b92

  • SSDEEP

    786432:/avyqjtvARFf/Mrj5bWb/nQoa8uioaOfHnNFKVWkkbvSAgJDWq8+ugGe0Wl7:EtvetMtinHaBHNYV6vSAuZ8fgGe0Wl7

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 2 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of AdjustPrivilegeToken 1 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\DamnedSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\DamnedSetup.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of AdjustPrivilegeToken
    PID:1196
    • C:\Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\GalacticShooter.exe
      C:\Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\GalacticShooter.exe
      2⤵
        PID:2008

    Network

    MITRE ATT&CK Enterprise v6

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\GalacticShooter.exe

      Filesize

      1.4MB

      MD5

      9cbd5cbe737f32acfc6dc0854205de0c

      SHA1

      9000945a6f1c938961fd705a2cbc33d4bcd28c12

      SHA256

      2c2bb3c21c16fae2d05b158750419cc2f1f81c995b5906c945f24c41f8dd1930

      SHA512

      dedb62183178bff548af99dac7473b7c3b2eb40b9197cc22fedca344ccbda5ec62474d465799517c0efbd2292becff15048590a02c11e9eb240e442d88451541

    • C:\Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\ffmpeg.dll

      Filesize

      1.4MB

      MD5

      6e419ef9d6949b4317e3455918ec5162

      SHA1

      f0f5eefb402d1ab6e1877ae59f34c1dfe4d0768a

      SHA256

      947285b81554f363d9cbdb447114a995a31f5601420fa33a3ce0b7a2a1e67845

      SHA512

      55167da8069d02c0c310e4b7e86967ac1472c18139799b4dc55aa7f6dbf38a03fe97b3af225d42abd7fc1a70803b032df3f7a2a119baea8b1aac52bee16d6775

    • C:\Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\icudtl.dat

      Filesize

      1024KB

      MD5

      c28f29a308fdeb3bb1d6b15b8864b29a

      SHA1

      8f0d73ae3e72b421611d43422074f38615a8e0a3

      SHA256

      43f06cb3f35b2b1a0f5c63fcecc7ca79b8bb080e2bd16770a3d1c679b984c1f8

      SHA512

      0c8994a18e24b75a16f1f584999382bf7f18c834a19419999461e23838e7f582779f41d9558b31adb6419baeca6a731bfabe32de7056e76b8ecaa5478776f881

    • C:\Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\v8_context_snapshot.bin

      Filesize

      709KB

      MD5

      dd0d4997dfab65b96aad66d035f6029c

      SHA1

      65faa1dbb7ccd902f1f1af544f6941234ff679d3

      SHA256

      f033fb86fa92df1be464de590aa312cc016bc5d6bea26672c896bf4d3f1261cd

      SHA512

      86b06bd0f91f50bd13b3af179f3f498f10a225d25ba5ca32258f75567e601c3f48f7a3fb436c3b0d2ba53cc9eaaa8f74c95b44458628b0ea716563694a3c7002

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\GalacticShooter.exe

      Filesize

      640KB

      MD5

      9fb338c3dcf860945b57569f588145db

      SHA1

      40fe570d0744a9e45f1b8b18db9d8687838dfaf8

      SHA256

      5368a6ead82565098bf2b3b53dc06c91296bcbcff49d6542c6b61bb8ab8a2d7f

      SHA512

      faffa3c37d665d81ca068e3cdd0f72a031b92c8b6f0a5795ebf38c2c9252c7f064b7a723ab6821b39af29a67bf536adb1a1362f63c77f68195698dbba6659317

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\LICENSE.electron.txt

      Filesize

      1KB

      MD5

      4d42118d35941e0f664dddbd83f633c5

      SHA1

      2b21ec5f20fe961d15f2b58efb1368e66d202e5c

      SHA256

      5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

      SHA512

      3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\LICENSES.chromium.html

      Filesize

      3.8MB

      MD5

      bb9d93973dc3d78b6fe4aeda432ed9ba

      SHA1

      d2349dba2e02db0d937cdaa9412b5e0c6a1f8939

      SHA256

      fb59c115b4020b83cd6cd1e7a00bc390f3f3145faaa365181eb0d6963bbb5122

      SHA512

      24d8fc08421ae3a8767c4439672af0e5d369035ab7e35608c8e8ca08ca8a6eba97f04e47e32f7eea65caca342214ca28c13733566df3997e7933931c087b0a22

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\chrome_100_percent.pak

      Filesize

      145KB

      MD5

      237ca1be894f5e09fd1ccb934229c33b

      SHA1

      f0dfcf6db1481315054efb690df282ffe53e9fa1

      SHA256

      f14362449e2a7c940c095eda9c41aad5f1e0b1a1b21d1dc911558291c0c36dd2

      SHA512

      1e52782db4a397e27ce92412192e4de6d7398effaf8c7acabc9c06a317c2f69ee5c35da1070eb94020ed89779344b957edb6b40f871b8a15f969ef787fbb2bca

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\chrome_200_percent.pak

      Filesize

      214KB

      MD5

      7059af03603f93898f66981feb737064

      SHA1

      668e41a728d2295a455e5e0f0a8d2fee1781c538

      SHA256

      04d699cfc36565fa9c06206ba1c0c51474612c8fe481c6fd1807197dc70661e6

      SHA512

      435329d58b56607a2097d82644be932c60727be4ae95bc2bcf10b747b7658918073319dfa1386b514d84090304a95fcf19d56827c4b196e4d348745565441544

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\d3dcompiler_47.dll

      Filesize

      4.3MB

      MD5

      7641e39b7da4077084d2afe7c31032e0

      SHA1

      2256644f69435ff2fee76deb04d918083960d1eb

      SHA256

      44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

      SHA512

      8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\ffmpeg.dll

      Filesize

      2.6MB

      MD5

      21647425561f9dfa567139d2c505f585

      SHA1

      efd5b3d6a21886c6467d28c73d20be0acb4591e9

      SHA256

      b827172262cea032be8303aae69a947a8d867006269bb8b2bc7e77619333c1b6

      SHA512

      c5316a6b2d77cf2c2949698f9cba92fe1ec57b2ac82d55fbbeffe71b4834ec06e83728a176f5089c91cc9544deda0667f39338f1e9d1a37db69bd8bad4af915a

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\icudtl.dat

      Filesize

      4.4MB

      MD5

      e2bf59d1bddb4afde223dedd190fe38f

      SHA1

      6b58e731b8098d71b19f15877620141a5a60b576

      SHA256

      2b997952f0e7f594265e87b6ea3d1ab54eb2385b37ec2fd21d4920efcc60ae34

      SHA512

      3af27443658807c0f62eaef18dec7870882404b2ffd0e729e37c4c03344b4a039829b09b06da5ea517dc722868a17d855caa633bd5a69399f1d7acaaf019f6c6

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\libEGL.dll

      Filesize

      437KB

      MD5

      91f11a9181583f75e2b29fcd9050c7f5

      SHA1

      fd90abc3048f3347435dfbd1075b8051ac6ffabc

      SHA256

      43a549ff51ce4ee20074999527b19fbf280a8caa7db0bde957704033b6f5b330

      SHA512

      925ac2a87e436219e22a924f615669cb166e8183d6e4dd0f00ed68c16faa3ffa10ab410106a7f81320f10205415bff9d10976f1dc0bb695b9293b80101e4ce8a

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\libGLESv2.dll

      Filesize

      4.1MB

      MD5

      27255aab3e6d8acecd3a086c231e4e9b

      SHA1

      60b513989285a6032330eabd08ed2b9df7370e90

      SHA256

      e07e11e8cd4aa59845d87ce53cd4beebcdd81e5df519b5d346a87f486404e028

      SHA512

      8655e2694bb7500a5a22337e0fa5ebbc56282d99931e1e0d81ecce29286e0c31bc734495806384aa9d2b8720599708ede514368bb18f73526a015299b87c1c9f

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\bg.pak

      Filesize

      209KB

      MD5

      7f3fe009d84dddf6a509ae33d95a7e7b

      SHA1

      667d804c714feab9d104db211a981357b2b8124f

      SHA256

      58bec94801d09157c852cfbc3ccd9916fafd1947fdc61c1453456bce5b054c4e

      SHA512

      92151d7589682c7078d9f9915eb6d14d350a13a126a000e4da29228649926282caf03cd996e68704f9e5dd0faf11750f7c4ee105e1655f9becbe0e267f7fc614

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\da.pak

      Filesize

      124KB

      MD5

      9fb8a421caf18588b494c3f34d8764c6

      SHA1

      201ac33074c76830893197ab9382ec84553f1794

      SHA256

      0997be868557f97f013242c066b192e574b4fa553d13f37f97a1de714b95a858

      SHA512

      59b2fd820f9bd45015444c85fcb55e04027836e62c6a9187e8ce0c2a9aea6e5e626b76627c9601f69e769d4ddd09f6a8ccc2dfdda6835e261b94a5af91d8bbf9

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\de.pak

      Filesize

      133KB

      MD5

      a4d8eecec2747ffb12551ab8e93fafdf

      SHA1

      59aa4c3a7179c46c7699d0d918dd92722a614def

      SHA256

      d67f95e2982e7debf67741b88ce054f5bb8356021a280e092227b77ec82e298f

      SHA512

      1de20fa8798d050966c99aa0590c7460a40b6ff41afc36645c1f4655a09f6070530adbd1d6fb5937d1fc9965c7aac932dbb06a0ff47f31bcb6d4717eaa81613e

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\es-419.pak

      Filesize

      131KB

      MD5

      10b1d1097987ea050a5791eceb5eabda

      SHA1

      c0812fbc16592a39cd1600196e62d0000b22bd73

      SHA256

      04b24396cc017e1dbb0bca7371d7cae10cad2350da661a8a035b572aa76cbd49

      SHA512

      f2a6767eae2d5eebff35f6b7d3a932ffd797fdfb48023c75b3c98b1ced5b3695ec12e642d68582da1aacac1c59b0d3a2f029c702d0df02d7b08430384d40e178

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\fil.pak

      Filesize

      137KB

      MD5

      9f3a970c8fed49ac50bddbf09dd9a950

      SHA1

      e8b986d42d4a79c513bf2da3d3314fbf55a2a960

      SHA256

      7a4c4822516f47cdbabc4b9ef45b710b057a056bc29d3a4a270a22e963e257d3

      SHA512

      4533a05b38e45f8cedffdecefb77ed9af44aba799f030a770b616ec7867fd0d7893de67528a611d1002d18e3ee7f8799944804e008ec8217cbf59e03a19139b5

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\id.pak

      Filesize

      118KB

      MD5

      e61a4d062cd61972a534a5e86e49c34d

      SHA1

      c19be8f744b956753ce40d91a34f0da02f699ffa

      SHA256

      d00c7ee5edeb1bd1493c49cf2d124ffdf47405d21d8d43c1a41c8749ce5c86a3

      SHA512

      7de4453b0793dde96503e762d4e9a77835ddbb1d75d35f012d24e8453a90ac85f87b0a62d95ad68393901a8ac3fcb147cf2b7bd468dffa62d959133528af15f9

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\nb.pak

      Filesize

      121KB

      MD5

      00f1a382f8f5e0950cb9ba4a4f3fd478

      SHA1

      bba2de6051bdd9b596f66312f2e2296c370e2d93

      SHA256

      e42e748f28e944f9a3a7fad19e686b856bc60b3e0128de94e6cd7619a7d24071

      SHA512

      2d8f502f51fcf066bf8c420ca2c86fe4ec6274ab0da5a5266293225910c9a0dfb6d5c529a9fd0da6ff4952bac385fce2885757de81a4db2d7f5c10cddd539c0e

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\sk.pak

      Filesize

      138KB

      MD5

      0b9599388dec973ffec68a5738a848f4

      SHA1

      0a0aaf4f9618cf867a1bf1e5bc6b8b21b46c4870

      SHA256

      e7038a23be62e4a476960b935a6c528aaefb781b28fdb7e24b3d830b5c02f10e

      SHA512

      5ee7aeaaf1be25ddc86694a16ca595872f2a9dcf1e48d0189d3a1eef425629abdc814ff32a8b288b468ab4f263953618c4363d033ef7aec2bae0072129dd1f9a

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\sl.pak

      Filesize

      132KB

      MD5

      3bf6c4aa2129b4b535637aa6727fb1e9

      SHA1

      569bcfab7176bb9833a02b5853bbbeb3165538cc

      SHA256

      cbff2dbb38d4d95fe7c811e0abdb0b92aad621e5c2c1eeda3c394dce5cf1d34f

      SHA512

      779ced23adc89af08f43531056b7195d253b7ea021439f73f0c9f9b49969153a2044e90acc0bda3c14d3b3e68f772f5cf8611f954b5b9cb0370d252a484ca36e

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\sr.pak

      Filesize

      198KB

      MD5

      9f9570670d844a1b14b256a7584665e8

      SHA1

      5b5cf46415662cc1ce4d93b876f4c45389aedfc2

      SHA256

      abcee52deb7382d84de334c3228711a62a7d21d9a2ce506385805eea0ed716f4

      SHA512

      d38fca2d639e32f5ef90dfaac04aef0ccfbcc409619acec6535b5401502b7141f6eb24f574db97a7abc550b8e35e93cbc62a4a0f7494c56537fb670f19e02f8e

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\sv.pak

      Filesize

      121KB

      MD5

      c0eb9dc359ead97302591d09a4d80c81

      SHA1

      5569c326861e80dd05aa49a74d77815364915af1

      SHA256

      b34e855f518a2041e4bbd7b5c269e35e7dfaa431fdd876fc0aac38b887e65aff

      SHA512

      b488831aa6219a246d0cdc370dc7b95fc07754702447964737eb53b9d5f64092e8873032bc40e8af9270388bb1b655b4f06d6de304b85b32fdd297959534d06d

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\sw.pak

      Filesize

      125KB

      MD5

      9cd6230b42f2f99d9580f7ef84508f9c

      SHA1

      4f9d82e3c39f2b0d3b0cc32733254aaf38e811b2

      SHA256

      fe18b3e9e275d7330706dd19f4af603a8ad899138374bfcba8e2c6764f94c190

      SHA512

      46a07a61ee7a70b4d261c16d2fef6f0e8a35caf371e33e05ca1dc3bdc7f3d304c1dbdb34ddba7b6bc573a6a58e170d9250cb1b6a4ad8ae6e255704416c022607

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\ta.pak

      Filesize

      306KB

      MD5

      afbb6f8a11ecb993e73a530e2682848c

      SHA1

      950d0fa6cd4338084b5ffa72eb49f79b07830466

      SHA256

      3d16a99568173ad5760bf195b047c8850e39ec8d308a94f6c81cf7ba733f6f5f

      SHA512

      74ee545cdce2e263bc33279325e0c72336575b36de7dfe145897964cde7eb57429cdff082ec5a06e7f46f75e9bc6d5c4cc3dca395745e990092cdac27e56f129

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\te.pak

      Filesize

      285KB

      MD5

      5f441de15ced6697594e8bc066297348

      SHA1

      33c64379ec7297404e8aa4a4ba5a7155cd69dc90

      SHA256

      4ab6fbf03177bd7ad0908318d5affd0cad142ec5e9ed560043e6b76e590ba995

      SHA512

      dac2982dd5e9337fc3443a87d5dcbbff46f0fefdf9e163624bba1acd1528f543c84e2a088a83a749543e7b764607c16f1ab1c6c4f9504eff48180a30681570f3

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\th.pak

      Filesize

      241KB

      MD5

      f0a3ce8609d1cea58d4d0dfc47d433f9

      SHA1

      9f0497e31ac881960c2b9ce3f75fac98d6ee300b

      SHA256

      31f31b2985c2ab430d373dd3d79821db0674edee163b4ae74dc362051ccc1491

      SHA512

      0a722fe6373f0f64a844a8bd79cff66707e158a908292db8f5ee883e4732fc55864b06554988836a07039befc4020cb837883851da0455f070bcb63df390d919

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\tr.pak

      Filesize

      128KB

      MD5

      fe23b2095b245ae359c449cf3ae2d4c4

      SHA1

      56af0705886551389dedb9ba1d9becc682321977

      SHA256

      48b76d081b4398c7af10be207751ef3bf67720700c35b17196a4aa0c94526208

      SHA512

      94b81f5469620bb7545f3ccda35845861e92ff7d29351a7f562ac861f718454d3d8dff324cfc904e484f5551d952bc338f24e284f585a714fffff5f3a5445f64

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\uk.pak

      Filesize

      211KB

      MD5

      6027526062e6f51a7c99feebc9ae1947

      SHA1

      10d7346a8d6a4dadb48bf7720303ef39f76a564a

      SHA256

      5ddf9212cbc6696941547b2e57b02092517bff6e70529f2ee14d0f593610e14f

      SHA512

      52178a648747f3247e32183cdb36ecc9a6314b2befa91cae28d5110c479f5d1ff59ad2c802a75288c17650de5a2ebcf369e04e760259015ff855ff8299dd9f3d

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\vi.pak

      Filesize

      151KB

      MD5

      8d1de53ff78406c42fe554acc82b5983

      SHA1

      1b80f071914c9a2f071355973da7ff3d9508298b

      SHA256

      314ff8e069d132d43566143ffe0f5cebc990a015ac32ed550ac687a4ff78d56f

      SHA512

      d027a534f8ddac3c953d81ba635a8a3fe452e7295fb2aa7d8b9d5a718fff7cd619323e3914dd6a17eacecb0c6d6f5129c9e793b2925f65dabec83b9389db295d

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\zh-CN.pak

      Filesize

      112KB

      MD5

      b2e2087f9c688dc3ec45a55742bedb6a

      SHA1

      8efd0726b46fc67cda9fdc9989c707c23c7b031c

      SHA256

      2b255293f6c85abb09162c825aea120c3e695156eb952d26d1e5f505ba324b37

      SHA512

      2382b2b4d56831bd25d5a3535936d8a1039e00a287bd5af05628c1a6fc54715fc8ad68ad3f207d6e073a588a66d5fa181e124125e7d1f00a5de54ed658e5c33e

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\locales\zh-TW.pak

      Filesize

      111KB

      MD5

      32f600c44c8a26fdf518faffbce56b71

      SHA1

      7481922abb60ee20f6faff9ae4dc4a55f6e6224e

      SHA256

      1710cea2eb84e4feed749e9e497d01e16b1b244d1a621d380226b8ae7cce07c6

      SHA512

      da145697ac8d7ce6e8cdf3f6e190c23f9791f4fdc2c1eed2dbc10e8c6377298c4d02df464752277cd7ec429297860ffe50e7b9de79632699dd2202b7324f55fe

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources.pak

      Filesize

      3.7MB

      MD5

      fbbe94703d6e239aaf13574a1bcc0964

      SHA1

      d8b2aaf633b0e35bc8bf79e89ba5c346d05a7cf6

      SHA256

      9fd35ede1c8158c80130a84618aaa26bf8654f17ec3082f31247f5502269f171

      SHA512

      b5e8447e3307d0bf6e68c4095ab9ba46563755c895fa27c7291e0f39f1687f0717957be63917f19283ad46014796181cc7c57cd227552ff00cdd675aee4db694

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar

      Filesize

      2.1MB

      MD5

      813672895f94fefb5940c927fa7ed1cd

      SHA1

      105f15789f60f4796b871c171d0fd9bb413af08f

      SHA256

      f4741ecc7d9bfbe4d78c4653c03199ed339ef96c743e8dfae3f92153d8868be7

      SHA512

      c9182c7de16ca0cbfbc339928848a06710333b40381e68d872089ce4d839009f9440c7bce0eff29e1349ee5af873ff64d432f0b90186ff8c47fe17982b302d94

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\.github\ISSUE_TEMPLATE\bug_report.md

      Filesize

      693B

      MD5

      d1d38ecc8b3a869312b3eedc6a376201

      SHA1

      4aa1d47ab0558e86f5a86629d0a1d99ba1af336d

      SHA256

      a25704529f0d5d89309743f5ca52189fdb16a770885c0dbe8edb3ea9d54a6a90

      SHA512

      cb77aea773f82e95fc593ae67b31caab164e101205eb68f6bce0103df9eaadc7c1d9dc6d0083ae6420e82027b21925c55593a7033ae9b4203e9970fff732c84f

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\.github\ISSUE_TEMPLATE\feature_request.md

      Filesize

      595B

      MD5

      174545e1d9daff8020525fdd1e020411

      SHA1

      f6867a2f0417fe89a0f2008730ee19dd38422021

      SHA256

      1f48c52f209a971b8e7eae4120144d28fcf8ee38a7778a7b4d8cf1ab356617d2

      SHA512

      b18005cfe7409fde541b934131c32c2eecdc4a8fd62cd558f274a25262c0e6b0b8fd27674ee55d6d4e4c435d49d580a077181fe8b15b095c39736b01ff4ee537

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\.github\workflows\ci.yml

      Filesize

      635B

      MD5

      d1f842c537b6b450fcdded865831bca9

      SHA1

      6a95e32f6a599be8d03b33cac14f9dc776dbd44f

      SHA256

      72c6bf0a7a66c94d54e5792bdc808a6ba2107e692230cbcebf6decd46bbe11ca

      SHA512

      89caf43140242ffbad2d808eac44095a3f072a0441def37adf32e55209df27498b800d57028e51be4319de1a0ce3bb26dafc0ce0b218175605c91a107d1e6cff

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\.github\workflows\lint.yml

      Filesize

      606B

      MD5

      2659061b249572af5e432f2c070fac7f

      SHA1

      437c3a1f784bd2e4b403d8cb71e177e9f4d07015

      SHA256

      7cd6d0c254b0b431d1842ad1b12a9b633ab41d378073b935996de5c1aee79a6e

      SHA512

      f054b3e7e97d6cd07a533878ff9e0fe1a8ac08295ed0962c0d41bbafe30703a18be1a3723094c4cd22625857704b479a7232c3007656c297081e7a014e28bf7d

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\.github\workflows\release.yml

      Filesize

      549B

      MD5

      f6d0e9b28417057e6685b1789d91e225

      SHA1

      27f0d718d3557a12b925e23cb0b14b93b8a6ae6f

      SHA256

      c893be9e533bc188f9039a9e24623c620dab2bd863b419a44f93cd397a10af1f

      SHA512

      d298dffb5b5539e20ec4540bf96184f5e8f90a68b2b17127844cd5f02dcba48bb62a8ee68711416a2730c155dcce00b1fcea9211f73e0ac61d0cd562e547f2bd

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\index.js

      Filesize

      420B

      MD5

      394a6022c9e7aa401b3c992c4b92ea94

      SHA1

      cae58c8959c078b24484148a0d09da816d350699

      SHA256

      125c1a517628169f4e66e0e237d201be226afb5c704a684aee5155de69281685

      SHA512

      cbd75168e3054a8412eec7fc1415ad1906d8a3228a16a486674909bec0f3a8b177f02e4c9c3419598e13fb0676d87132e82ee1182549c69c6bcf59fb59aaf0ce

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\darwin\index.js

      Filesize

      5KB

      MD5

      78c9024198b8933ba47fd22220ccd12c

      SHA1

      ae8e968a89e954dd31b5c1827d8bc1ea632cbe83

      SHA256

      e364425fec6fb780c1fb00615014a0d5e39f65517848a12371b8934c5bb35e8d

      SHA512

      0e06a3b4684b7275491691329150fede20b253aeafeb3307fb19f88d1477533ac20b028a73f61d32deb41592414d95ac73c703ac016c8ceaea4739f2a008cc36

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\linux\index.js

      Filesize

      5KB

      MD5

      3b9999e65606270a0fe405aa1bb32fd1

      SHA1

      b090ad8054a7384c01203962e94776b9134f42e2

      SHA256

      f0cf780d0dea403121f30fcf11096c48a4a0dc2b0393d41ebbb664ff7c89ec3a

      SHA512

      0a09384372a32c723ac8e8324dd2f93d57467d2e8b53dbe3231ee37ccae9aaa5c91363be4366e8c2a5495f607ea96782c11363dab7097fcf27fe3645c403f141

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\utils.js

      Filesize

      1KB

      MD5

      a2f2486efffaa9be30b2ef58e24d49a1

      SHA1

      8ac5c529c227adaafbf43abd917a44b87c92ce46

      SHA256

      f1065090ce89b14c76d533d11040556759c58679c0eb89a1e59337d318e16a6c

      SHA512

      d1283a5663aa62b2262283b1a611e002602f869dcf006dd336d742272f14d98791c35a5c32af92884692a62fef0942e6c99d0646aadbd6582e418eb4497a4c66

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\app.manifest

      Filesize

      350B

      MD5

      8951565428aa6644f1505edb592ab38f

      SHA1

      9c4bee78e7338f4f8b2c8b6c0e187f43cfe88bf2

      SHA256

      8814db9e125d0c2b7489f8c7c3e95adf41f992d4397ed718bda8573cb8fb0e83

      SHA512

      7577bad37b67bf13a0d7f9b8b7d6c077ecdfb81a5bee94e06dc99e84cb20db2d568f74d1bb2cef906470b4f6859e00214beacca7d82e2b99126d27820bf3b8f5

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\index.js

      Filesize

      2KB

      MD5

      ab2229f48309619a42e98f617f5d26ee

      SHA1

      81671593ff9c5c85a09f23e5a7cce3a4c80c3a2f

      SHA256

      ed1a0f3e590bd553451ed06fd24a4d34407dd5fc63eb93787a53ea51d20827cc

      SHA512

      520f5f82100f2cf70d5f2c8406d83be30b8104197aa0a4dd1b45a9b6c1c15f2f3eab4e578db1c2fb41d2e2bbbe70a0f937cd6e8e3b6cd177f2444140df35db89

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\screenCapture_1.3.2.bat

      Filesize

      13KB

      MD5

      da0f40d84d72ae3e9324ad9a040a2e58

      SHA1

      4ca7f6f90fb67dce8470b67010aa19aa0fd6253f

      SHA256

      818350a4fb4146072a25f0467c5c99571c854d58bec30330e7db343bceca008b

      SHA512

      30b7d4921f39c2601d94a3e3bb0e3be79b4b7b505e52523d2562f2e2f32154d555a593df87a71cddb61b98403265f42e0d6705950b37a155dc1d64113c719fd9

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\lib\win32\screenCapture_1.3.2.exe

      Filesize

      12KB

      MD5

      befa2810b15d065c0095292f1dd4734b

      SHA1

      2f2a776c7a8a6f1b7d8efdaabe09f290385b24dd

      SHA256

      ab1ff81275c7b402863b9ccc599e0ee6e0e5c3c54e4f8d5ee49e8fc22a009a7a

      SHA512

      af98a54b2f62667ad689bff2290a341585b37cc1c314a877b342b67ae8e104db034c74b31b9c8413413b9fd1e2117bd648318cd1957128b78edde57e5155b906

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\package.json

      Filesize

      598B

      MD5

      e5df4e3b7058c914e5048223a6c79f1d

      SHA1

      ab75ebfcf8d669da6c0b54ad2e5f5d73a466cb1e

      SHA256

      101c15c05c78832bc02635e6e2252f1ed23367d22411b51518a1775ff6e972fc

      SHA512

      a316798409c568e5cdd07a34a838d0b9842f65c03ded19853678a30ea3024e9f649afa8b5d4093f5c0c811a33bf513ff1fe4aa33f60bad7553fbfa6584327b29

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\app.asar.unpacked\node_modules\screenshot-desktop\renovate.json

      Filesize

      103B

      MD5

      63823bf8be61361cbd13bf183e201bf1

      SHA1

      4658400152c61edee1555bb86cb6da13e2fe4401

      SHA256

      cba2cbd76811a1b8e808000d073d04f657aaf0551c73a805ca3a4b492f21bd47

      SHA512

      8703cca6f04da47e5376730cf993665f7db1fb854f8509c0b831f189bf4a4c396808eca7949123e334e42a407a6aa84cdad34e5bd1b00d0a4c30f07a80cc9a68

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\resources\elevate.exe

      Filesize

      105KB

      MD5

      792b92c8ad13c46f27c7ced0810694df

      SHA1

      d8d449b92de20a57df722df46435ba4553ecc802

      SHA256

      9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

      SHA512

      6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\snapshot_blob.bin

      Filesize

      395KB

      MD5

      f14a9115edbcc4697515db49cdaf5b08

      SHA1

      9c43d69ba11a03278885dc7f285584278de9ca11

      SHA256

      f25ddf52f68de295bf1cdbd4f7fc6aa9d8f882a16a2f97b4e08e322b6b90546e

      SHA512

      3c646b258a2ba7cd3e1d878d3009d181302d790f324c4c2b10a9eeebbeab9c49ab43b15b3154ae99749410debb2f3ad8d121979ec11e44ad074e1f675cf05dc0

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\swiftshader\libEGL.dll

      Filesize

      449KB

      MD5

      29ae8bef0cf8b6a26f4bebc5a20900da

      SHA1

      515abe76943288d531b35c1b4c764d1dbdb281db

      SHA256

      711cf342b3a008c9116f6138358a67007a29d281d09cf23d20a5e17aa503ee9b

      SHA512

      99981e7074b580ace154c36d0aa1542dcdb979f36476b680ef19c3fd8a9126b5a808e6e1cf2224d20ba22c328b9a621c280c4ffa74638e358297809001d737ad

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\swiftshader\libGLESv2.dll

      Filesize

      1.9MB

      MD5

      a326286e799a3245360d0b735401dbb6

      SHA1

      c87900dfd852af019c6f97935e6264229df8a8a5

      SHA256

      406a75a61a91b69ec2601a4307b8df297b9ecfd987548302cdf94cb6350389dd

      SHA512

      527f1b6b4d7241b125894f3eb310158c27b72d262a3a3ace68b3f020c4d3aadf2d17e663b45744553c7f45ba569b955d7c2e38577b43ce5f1ded55311834ec57

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\v8_context_snapshot.bin

      Filesize

      709KB

      MD5

      dd0d4997dfab65b96aad66d035f6029c

      SHA1

      65faa1dbb7ccd902f1f1af544f6941234ff679d3

      SHA256

      f033fb86fa92df1be464de590aa312cc016bc5d6bea26672c896bf4d3f1261cd

      SHA512

      86b06bd0f91f50bd13b3af179f3f498f10a225d25ba5ca32258f75567e601c3f48f7a3fb436c3b0d2ba53cc9eaaa8f74c95b44458628b0ea716563694a3c7002

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\vk_swiftshader.dll

      Filesize

      3.6MB

      MD5

      df00c91d5e3645e0bdeee78f5172d2a6

      SHA1

      f58e1599204bcdbe100909f1a15599021e5aa289

      SHA256

      0cdb0782cb5242c45b53e4df8db6fd28fa90a3e17ad431b049745ea29b760c18

      SHA512

      00a97bcbdc3b2b17cf2086f6d5e1ec82049a260db956a21b0e0356e035216f4c91e04cca97a0eba30c89e9180dd9d42e6403e322b1cf582bef76579c60109a97

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\vk_swiftshader_icd.json

      Filesize

      106B

      MD5

      8642dd3a87e2de6e991fae08458e302b

      SHA1

      9c06735c31cec00600fd763a92f8112d085bd12a

      SHA256

      32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

      SHA512

      f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\7z-out\vulkan-1.dll

      Filesize

      830KB

      MD5

      4783d34314ef4feb241f4fdf36499521

      SHA1

      89296d6ac36cd005045db7307bf31005d0cf29a7

      SHA256

      6e8beb4e9da77313f40e75c4ffaeeaa522b6f054fd792631ec1efcf8248ca63b

      SHA512

      7ef1b0e89590b4af20f182bed9d82d5175d1c8c675fc3d05dc0eb2f834052124c877135fc68b2988683cf35e8b25870e45f7c126349d28125c021c8eeb4998ac

    • C:\Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\StdUtils.dll

      Filesize

      100KB

      MD5

      c6a6e03f77c313b267498515488c5740

      SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

      SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

      SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • \Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\GalacticShooter.exe

      Filesize

      1.7MB

      MD5

      facd821751337c02addf2b9cd336ecda

      SHA1

      243f0ba4d0309cd76e0dfa6891fd03a5409cd25f

      SHA256

      d9072284101df118462fbc47f7c230048a1604e63982632acc8c7594b0dfb7b7

      SHA512

      024b9d1346e321a17214d60dced4b2fcf8e2cadbaeb2005c4cd226ac42b98e41e0866a73e18bd74ada6c07df74e326ee1e3ce40ea0030ac9c23a3bc6c1aa68a5

    • \Users\Admin\AppData\Local\Temp\2KgUTBTKXBuaYjl5hgOvg5rlScH\ffmpeg.dll

      Filesize

      1.4MB

      MD5

      311d35bc5f2a9a3e0136513e2f1c995a

      SHA1

      f212dc75c932e63161fe6694a2ee2a44e13f34df

      SHA256

      1799ef65aa7fb2ca385ddc1e2ff9750dfe456da78b3b000fa64ef713fe1d71b5

      SHA512

      e6b7001d103ba329b2d17e7ad53d03c20b23bf77e4e5c9f8647a1ea4d0c321c306655ffc7153caf6db8cf546e32d377f80368652921bcf77d2778c2b5dbc8508

    • \Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\StdUtils.dll

      Filesize

      100KB

      MD5

      c6a6e03f77c313b267498515488c5740

      SHA1

      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

      SHA256

      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

      SHA512

      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

    • \Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\System.dll

      Filesize

      12KB

      MD5

      0d7ad4f45dc6f5aa87f606d0331c6901

      SHA1

      48df0911f0484cbe2a8cdd5362140b63c41ee457

      SHA256

      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

      SHA512

      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

    • \Users\Admin\AppData\Local\Temp\nsd7ADC.tmp\nsis7z.dll

      Filesize

      424KB

      MD5

      80e44ce4895304c6a3a831310fbf8cd0

      SHA1

      36bd49ae21c460be5753a904b4501f1abca53508

      SHA256

      b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

      SHA512

      c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.