Analysis

  • max time kernel
    142s
  • max time network
    144s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230220-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11-06-2023 04:25

General

  • Target

    tmp.exe

  • Size

    1.6MB

  • MD5

    1da4190b940fc3d6b6b2b84624d07285

  • SHA1

    bafe8d0ea71a6318fda753be17f95e6347dc0bfe

  • SHA256

    61204d845ced88e5abdaf07c187a972ee9ee1b6c665f934f77495ea2384b757d

  • SHA512

    10c8c69c6b1311ff15821af6e182924cc576b61d8a77974de8ca3c06418497527a23e8f4309abdb89b9ab8ff9aa46fdffc7e7838b56c3e378e6b62fbb306a8bb

  • SSDEEP

    49152:WtknFrg/rI1X3Y3gERJjOhR9fglfxA5vb2Gp4+B:W6nFQ42gERJjyUxANjpf

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 25 IoCs
  • Loads dropped DLL 45 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in System32 directory 1 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Modifies registry class 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\tmp.exe
    "C:\Users\Admin\AppData\Local\Temp\tmp.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:676
    • C:\Users\Admin\AppData\Local\Temp\GLB837D.tmp
      C:\Users\Admin\AppData\Local\Temp\GLB837D.tmp 4736 C:\Users\Admin\AppData\Local\Temp\tmp.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Drops file in System32 directory
      • Drops file in Program Files directory
      • Modifies registry class
      • Suspicious use of WriteProcessMemory
      PID:5084
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\chameleon.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        PID:3108
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\corteai.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:3516
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortjava.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:3976
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_control.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        PID:4312
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_dxs.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:448
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_imagers.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:520
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_js2.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4596
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_native.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        PID:776
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_res.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        PID:3908
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_support.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        PID:2904
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_transport.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        PID:1084
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\dsound_renderer.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1012
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\Engine.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        PID:4592
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\MovieImager.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2152
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\MovieTextureRenderer.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:2940
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\Rob.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4164
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\RSoft32.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4772
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\Shelley3.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        PID:3196
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\DXSelector.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4800
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\RevancheDX5.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4732
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\RevancheDX7.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1884
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\RevancheOGL.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:4764
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\\3DViewServiceAdapter.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        PID:3696
      • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp
        "C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp" C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\\PGVRMLSaver.dll
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Modifies registry class
        PID:3540

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\DXSelector.dll

    Filesize

    9KB

    MD5

    25404b372f1398baccd09e102ca6d838

    SHA1

    a9547fdaf386201a3016d08b4dcdd392a0ac15d5

    SHA256

    5deadd0acbef33f8bccb0c2a188f09387126fb498a703e11c6a26ad39ffbf41b

    SHA512

    320eb1ff25a4a2e2c3e5b70a5b33ad26e636e28af74c7fa50f60c0cad51f3541a96414fd86af17a9d42349c68aaba2cf33962dd091fac525d598184d7da08258

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\Engine.dll

    Filesize

    543KB

    MD5

    9f9e96a16ed79d18986d7e07246b7103

    SHA1

    14b9aac3639ca4e128194b11b6cdd32d7cf1ca68

    SHA256

    9183d348149f6a803870797909fdbd0628da77ab50f40929797c7cd781328601

    SHA512

    ff7b8c70077d01c58276f114a25ffcfb882b4a1f5537805ed55c1648b5267eb1f55ad58596b2a3218d28112198a45841e9f238a4e5a1b962b533cc510854ab33

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\Engine.dll

    Filesize

    543KB

    MD5

    9f9e96a16ed79d18986d7e07246b7103

    SHA1

    14b9aac3639ca4e128194b11b6cdd32d7cf1ca68

    SHA256

    9183d348149f6a803870797909fdbd0628da77ab50f40929797c7cd781328601

    SHA512

    ff7b8c70077d01c58276f114a25ffcfb882b4a1f5537805ed55c1648b5267eb1f55ad58596b2a3218d28112198a45841e9f238a4e5a1b962b533cc510854ab33

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\Engine.dll

    Filesize

    543KB

    MD5

    9f9e96a16ed79d18986d7e07246b7103

    SHA1

    14b9aac3639ca4e128194b11b6cdd32d7cf1ca68

    SHA256

    9183d348149f6a803870797909fdbd0628da77ab50f40929797c7cd781328601

    SHA512

    ff7b8c70077d01c58276f114a25ffcfb882b4a1f5537805ed55c1648b5267eb1f55ad58596b2a3218d28112198a45841e9f238a4e5a1b962b533cc510854ab33

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\Engine.dll

    Filesize

    543KB

    MD5

    9f9e96a16ed79d18986d7e07246b7103

    SHA1

    14b9aac3639ca4e128194b11b6cdd32d7cf1ca68

    SHA256

    9183d348149f6a803870797909fdbd0628da77ab50f40929797c7cd781328601

    SHA512

    ff7b8c70077d01c58276f114a25ffcfb882b4a1f5537805ed55c1648b5267eb1f55ad58596b2a3218d28112198a45841e9f238a4e5a1b962b533cc510854ab33

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\MovieImager.dll

    Filesize

    76KB

    MD5

    e49b948e42ae58312e71b73abb975933

    SHA1

    52cdec7e76c64b5b53ea3ccdd2308fb1b18f0d6d

    SHA256

    6f2f816e32656e353aefba3d2f8c8a2be9229e1a04cafc1e63cf16a9371d74fb

    SHA512

    420118b04836cf94a2d5f94ac1fd6aac499a65ddff5d560cb23c1f8273888c06c8ad1acef483561fa1d77a18d1ead5032f28ecd5d756d77d9cb102cec91588b0

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\MovieImager.dll

    Filesize

    76KB

    MD5

    e49b948e42ae58312e71b73abb975933

    SHA1

    52cdec7e76c64b5b53ea3ccdd2308fb1b18f0d6d

    SHA256

    6f2f816e32656e353aefba3d2f8c8a2be9229e1a04cafc1e63cf16a9371d74fb

    SHA512

    420118b04836cf94a2d5f94ac1fd6aac499a65ddff5d560cb23c1f8273888c06c8ad1acef483561fa1d77a18d1ead5032f28ecd5d756d77d9cb102cec91588b0

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\MovieImager.dll

    Filesize

    76KB

    MD5

    e49b948e42ae58312e71b73abb975933

    SHA1

    52cdec7e76c64b5b53ea3ccdd2308fb1b18f0d6d

    SHA256

    6f2f816e32656e353aefba3d2f8c8a2be9229e1a04cafc1e63cf16a9371d74fb

    SHA512

    420118b04836cf94a2d5f94ac1fd6aac499a65ddff5d560cb23c1f8273888c06c8ad1acef483561fa1d77a18d1ead5032f28ecd5d756d77d9cb102cec91588b0

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\MovieImager.dll

    Filesize

    76KB

    MD5

    e49b948e42ae58312e71b73abb975933

    SHA1

    52cdec7e76c64b5b53ea3ccdd2308fb1b18f0d6d

    SHA256

    6f2f816e32656e353aefba3d2f8c8a2be9229e1a04cafc1e63cf16a9371d74fb

    SHA512

    420118b04836cf94a2d5f94ac1fd6aac499a65ddff5d560cb23c1f8273888c06c8ad1acef483561fa1d77a18d1ead5032f28ecd5d756d77d9cb102cec91588b0

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\MovieTextureRenderer.dll

    Filesize

    34KB

    MD5

    7a964aee4653b4463287bb9d32a05abe

    SHA1

    e027dc630031ab9bd5294629d1989c07e0560125

    SHA256

    a99e86396d62ad8fc9ddd6554c06ec91beb13f50561107c5650ed07e2d2b4f83

    SHA512

    5d1a22f4aa2c8354d453af95d335d3d20318633824dda96d59ec79a760c77374c1b3419aaed188262128757ee4b39dc697f4c1fd33d296df431f3cd1d1b1e601

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\RSoft32.dll

    Filesize

    208KB

    MD5

    f19a4f87c00641a88d25375e60d01e87

    SHA1

    2a03b45ad2b539e27ebc152a6b33a81b57154857

    SHA256

    c8f26b1c70df4a1944166ce97acde7f7933ccadad5878d5e2a9aabff0f0bae49

    SHA512

    408180eb35fd648ee1beacf189e3335e9d8bf3ba54262cdecb851a500d8bf612a52d939f294f739c5c8ff3a6a55b95e0e341d1d8f7027cfa1ea734fc6b8cd1ea

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\RevancheDX5.dll

    Filesize

    69KB

    MD5

    efb0b8865733943096eeaddc6607ec03

    SHA1

    70d12d2113d61d1853e43a87ba0be0f3cc3537d2

    SHA256

    0054faeabe5dfb88dc28d5b00c9342a42e0af52b8afc710d730917e0f37b44df

    SHA512

    370425d95deb7aae584092d6349bc5502a8831eb417a54c617dc5d1209f6517d7e7aa3aeabd3b75d785ac265467ee90db75b5a0db446797fae9fe36635f92e8f

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\RevancheDX7.dll

    Filesize

    93KB

    MD5

    988986f8ed4ca683fc4678105118bf3a

    SHA1

    0a0a3dd9bf344dc44a04c28573b5d3f33b59a33b

    SHA256

    026b3c5afd65b6dcdcee264d86a73f71b4699d174a371f135da361b6092bc0d6

    SHA512

    36339d7283ef58efe31980c9f6ef75ed548aefe2b65f79eedc831043fd773db92ac2995134091bdeb358d64d1d7777c61023e16a13ba1d9379c59b50082fe09e

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\RevancheOGL.dll

    Filesize

    70KB

    MD5

    1709dbfe2b08a7cd0501b40938f68f60

    SHA1

    c52bf68924f09dec9cb6f63912421d0d55e17526

    SHA256

    eff2a2948298acb45b0ed980fe4dcec1e200d37833d13bfbf061cc1a62d81608

    SHA512

    b3dd4563dd327d22757863ad5106bdf17ef086c9193f236dbb11e938ea8e1c3e0822d554d718bedb7db876f0165194441897c37d5d2a1099ae55326548da220c

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\Rob.dll

    Filesize

    240KB

    MD5

    bfcf04106aef3c0bf7fd0ce0b68372fe

    SHA1

    f19e6977e89f4e60b57abae7bcd7b4565d710a01

    SHA256

    ff77716f501de64545ec91a872090061268697ab5f4650090c8e0154c9f4c4ba

    SHA512

    55e4de271c213e3c395f5e051bcca2d6660c04e12db41ee9b4573728f866da385fbad69c021956897569a76176556b701405546478ac7443ae02bfbb08185ce4

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\Shelley3.dll

    Filesize

    259KB

    MD5

    6315da1a6fd5ca89b100a7736ad02fba

    SHA1

    346210967b700681d11edaafc792a7bfc287b3a6

    SHA256

    a5a495ea718ba3cdcfcab72f54568a84ee4bbc409c9049c9d59f2c7d42c50e0f

    SHA512

    45c86f93f88ebfd1564ce9b1c857fd97dccaee3307ad318294ed03ec540749ed5dcf81af86190cb6eb775d8b59c0692863d1c4e8ba2acf21132d22eef0e966e3

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\chameleon.dll

    Filesize

    195KB

    MD5

    29cb2d93b4bb5cdde6c40089eed88659

    SHA1

    6d58ca5003e6b6ce61408b81fe9a9ac637ad01f3

    SHA256

    5bedcf8507830eb430247c23304ff7a1d17697f518fb9550bb98172dae62fe76

    SHA512

    f7ff40029d8e132b8a18abcc17afc2214c269fe3da6969f6b41ee6917ed7c1d380d274460d5eeb7c353829c3459b020c8930eabb53a0f9c5c0d180ebd00ea47e

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\chameleon.dll

    Filesize

    195KB

    MD5

    29cb2d93b4bb5cdde6c40089eed88659

    SHA1

    6d58ca5003e6b6ce61408b81fe9a9ac637ad01f3

    SHA256

    5bedcf8507830eb430247c23304ff7a1d17697f518fb9550bb98172dae62fe76

    SHA512

    f7ff40029d8e132b8a18abcc17afc2214c269fe3da6969f6b41ee6917ed7c1d380d274460d5eeb7c353829c3459b020c8930eabb53a0f9c5c0d180ebd00ea47e

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\chameleon.dll

    Filesize

    195KB

    MD5

    29cb2d93b4bb5cdde6c40089eed88659

    SHA1

    6d58ca5003e6b6ce61408b81fe9a9ac637ad01f3

    SHA256

    5bedcf8507830eb430247c23304ff7a1d17697f518fb9550bb98172dae62fe76

    SHA512

    f7ff40029d8e132b8a18abcc17afc2214c269fe3da6969f6b41ee6917ed7c1d380d274460d5eeb7c353829c3459b020c8930eabb53a0f9c5c0d180ebd00ea47e

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\chameleon.dll

    Filesize

    195KB

    MD5

    29cb2d93b4bb5cdde6c40089eed88659

    SHA1

    6d58ca5003e6b6ce61408b81fe9a9ac637ad01f3

    SHA256

    5bedcf8507830eb430247c23304ff7a1d17697f518fb9550bb98172dae62fe76

    SHA512

    f7ff40029d8e132b8a18abcc17afc2214c269fe3da6969f6b41ee6917ed7c1d380d274460d5eeb7c353829c3459b020c8930eabb53a0f9c5c0d180ebd00ea47e

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\corteai.dll

    Filesize

    8KB

    MD5

    81515ec256c1342b81a2a0accf93decd

    SHA1

    27ba52b80daf5c2255636578e819f41e35beed40

    SHA256

    6fdb1533ce8a6631a8ab2cbaac97f2e244c899112ebb8eed5d7089600f4d1408

    SHA512

    3493aee63e60068cbdb2dba42559d4e3581abe973ed4dbb009e679d168bd01b500ac81e11456d01919cd8b50641b1e05a135561df10e0e1a56243ddf576c1a35

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\corteai.dll

    Filesize

    8KB

    MD5

    81515ec256c1342b81a2a0accf93decd

    SHA1

    27ba52b80daf5c2255636578e819f41e35beed40

    SHA256

    6fdb1533ce8a6631a8ab2cbaac97f2e244c899112ebb8eed5d7089600f4d1408

    SHA512

    3493aee63e60068cbdb2dba42559d4e3581abe973ed4dbb009e679d168bd01b500ac81e11456d01919cd8b50641b1e05a135561df10e0e1a56243ddf576c1a35

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\corteai.dll

    Filesize

    8KB

    MD5

    81515ec256c1342b81a2a0accf93decd

    SHA1

    27ba52b80daf5c2255636578e819f41e35beed40

    SHA256

    6fdb1533ce8a6631a8ab2cbaac97f2e244c899112ebb8eed5d7089600f4d1408

    SHA512

    3493aee63e60068cbdb2dba42559d4e3581abe973ed4dbb009e679d168bd01b500ac81e11456d01919cd8b50641b1e05a135561df10e0e1a56243ddf576c1a35

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\corteai.dll

    Filesize

    8KB

    MD5

    81515ec256c1342b81a2a0accf93decd

    SHA1

    27ba52b80daf5c2255636578e819f41e35beed40

    SHA256

    6fdb1533ce8a6631a8ab2cbaac97f2e244c899112ebb8eed5d7089600f4d1408

    SHA512

    3493aee63e60068cbdb2dba42559d4e3581abe973ed4dbb009e679d168bd01b500ac81e11456d01919cd8b50641b1e05a135561df10e0e1a56243ddf576c1a35

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortjava.dll

    Filesize

    40KB

    MD5

    288fc0d7bf4b03f4fd5643c11fc06558

    SHA1

    557d59cf3aa921a0aad0f691fb0c7188d17a2016

    SHA256

    2cae60e4616c42c3f3aeb7d6903c081b54262d0fffdbef4fdc70beb5db285270

    SHA512

    aa3602fb4de3d5367da0a9063c636a6e246052374b7fc858c88e9721646384dadf0d2deb9a5d44f1c907dad0da57ea8e5118716b2fa5ea0037e7556130611cec

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortjava.dll

    Filesize

    40KB

    MD5

    288fc0d7bf4b03f4fd5643c11fc06558

    SHA1

    557d59cf3aa921a0aad0f691fb0c7188d17a2016

    SHA256

    2cae60e4616c42c3f3aeb7d6903c081b54262d0fffdbef4fdc70beb5db285270

    SHA512

    aa3602fb4de3d5367da0a9063c636a6e246052374b7fc858c88e9721646384dadf0d2deb9a5d44f1c907dad0da57ea8e5118716b2fa5ea0037e7556130611cec

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortjava.dll

    Filesize

    40KB

    MD5

    288fc0d7bf4b03f4fd5643c11fc06558

    SHA1

    557d59cf3aa921a0aad0f691fb0c7188d17a2016

    SHA256

    2cae60e4616c42c3f3aeb7d6903c081b54262d0fffdbef4fdc70beb5db285270

    SHA512

    aa3602fb4de3d5367da0a9063c636a6e246052374b7fc858c88e9721646384dadf0d2deb9a5d44f1c907dad0da57ea8e5118716b2fa5ea0037e7556130611cec

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_control.dll

    Filesize

    219KB

    MD5

    5bfccc08d9fcce50839b3f20d65b245d

    SHA1

    6ea87835b9285b2c2042a11f12163db2cfa4bf31

    SHA256

    c7ba154232b766b8dbc6ddbe58554acb69062b03db56d6899f593915b97dd067

    SHA512

    90a2bc3e0fe4708df4b484b69dfa990cb71642b8f28cd67a5d780a6c34f585eaa71e4bcf0eb10487b84ee1647a54fe9d6496a8a3cff186872f31c6b5c1b57a21

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_control.dll

    Filesize

    219KB

    MD5

    5bfccc08d9fcce50839b3f20d65b245d

    SHA1

    6ea87835b9285b2c2042a11f12163db2cfa4bf31

    SHA256

    c7ba154232b766b8dbc6ddbe58554acb69062b03db56d6899f593915b97dd067

    SHA512

    90a2bc3e0fe4708df4b484b69dfa990cb71642b8f28cd67a5d780a6c34f585eaa71e4bcf0eb10487b84ee1647a54fe9d6496a8a3cff186872f31c6b5c1b57a21

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_control.dll

    Filesize

    219KB

    MD5

    5bfccc08d9fcce50839b3f20d65b245d

    SHA1

    6ea87835b9285b2c2042a11f12163db2cfa4bf31

    SHA256

    c7ba154232b766b8dbc6ddbe58554acb69062b03db56d6899f593915b97dd067

    SHA512

    90a2bc3e0fe4708df4b484b69dfa990cb71642b8f28cd67a5d780a6c34f585eaa71e4bcf0eb10487b84ee1647a54fe9d6496a8a3cff186872f31c6b5c1b57a21

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_dxs.dll

    Filesize

    63KB

    MD5

    08f909b9f818e036496f33c249558062

    SHA1

    e9066f5b63bd8225274aacdf1e0a6ad492dc84a6

    SHA256

    b439988fcf507e52ae352397ad9cf2437ce6cf9813779ed36515f34109afa4c8

    SHA512

    e0d69643d9231966f9479f0da37ad2d462a234932aaad2b31bd950a656053358100a1ebfe0e8c7f87adb9f882f9b0b4b9a101aaf9337be5a080ac89563044ce8

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_dxs.dll

    Filesize

    63KB

    MD5

    08f909b9f818e036496f33c249558062

    SHA1

    e9066f5b63bd8225274aacdf1e0a6ad492dc84a6

    SHA256

    b439988fcf507e52ae352397ad9cf2437ce6cf9813779ed36515f34109afa4c8

    SHA512

    e0d69643d9231966f9479f0da37ad2d462a234932aaad2b31bd950a656053358100a1ebfe0e8c7f87adb9f882f9b0b4b9a101aaf9337be5a080ac89563044ce8

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_dxs.dll

    Filesize

    63KB

    MD5

    08f909b9f818e036496f33c249558062

    SHA1

    e9066f5b63bd8225274aacdf1e0a6ad492dc84a6

    SHA256

    b439988fcf507e52ae352397ad9cf2437ce6cf9813779ed36515f34109afa4c8

    SHA512

    e0d69643d9231966f9479f0da37ad2d462a234932aaad2b31bd950a656053358100a1ebfe0e8c7f87adb9f882f9b0b4b9a101aaf9337be5a080ac89563044ce8

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_dxs.dll

    Filesize

    63KB

    MD5

    08f909b9f818e036496f33c249558062

    SHA1

    e9066f5b63bd8225274aacdf1e0a6ad492dc84a6

    SHA256

    b439988fcf507e52ae352397ad9cf2437ce6cf9813779ed36515f34109afa4c8

    SHA512

    e0d69643d9231966f9479f0da37ad2d462a234932aaad2b31bd950a656053358100a1ebfe0e8c7f87adb9f882f9b0b4b9a101aaf9337be5a080ac89563044ce8

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_imagers.dll

    Filesize

    81KB

    MD5

    8bfb7ddb1826cab9a61b31bd3fa97c7e

    SHA1

    c945ab1de7dccdada15d330df20fba11dfe78c9f

    SHA256

    51016602a383b039123ed1e6457837821f328f3a603125f6f0136d0b04ff014d

    SHA512

    7b487b87fab851f54e54432d2842889588b082add42857a9b48233c1432605f3aeb866a72d3fff6936e5002b0f77cc592a13f52928c0630ade1c2531f340a893

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_imagers.dll

    Filesize

    81KB

    MD5

    8bfb7ddb1826cab9a61b31bd3fa97c7e

    SHA1

    c945ab1de7dccdada15d330df20fba11dfe78c9f

    SHA256

    51016602a383b039123ed1e6457837821f328f3a603125f6f0136d0b04ff014d

    SHA512

    7b487b87fab851f54e54432d2842889588b082add42857a9b48233c1432605f3aeb866a72d3fff6936e5002b0f77cc592a13f52928c0630ade1c2531f340a893

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_imagers.dll

    Filesize

    81KB

    MD5

    8bfb7ddb1826cab9a61b31bd3fa97c7e

    SHA1

    c945ab1de7dccdada15d330df20fba11dfe78c9f

    SHA256

    51016602a383b039123ed1e6457837821f328f3a603125f6f0136d0b04ff014d

    SHA512

    7b487b87fab851f54e54432d2842889588b082add42857a9b48233c1432605f3aeb866a72d3fff6936e5002b0f77cc592a13f52928c0630ade1c2531f340a893

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_imagers.dll

    Filesize

    81KB

    MD5

    8bfb7ddb1826cab9a61b31bd3fa97c7e

    SHA1

    c945ab1de7dccdada15d330df20fba11dfe78c9f

    SHA256

    51016602a383b039123ed1e6457837821f328f3a603125f6f0136d0b04ff014d

    SHA512

    7b487b87fab851f54e54432d2842889588b082add42857a9b48233c1432605f3aeb866a72d3fff6936e5002b0f77cc592a13f52928c0630ade1c2531f340a893

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_js2.dll

    Filesize

    381KB

    MD5

    5467eaf9ef241516892b314c05a668ef

    SHA1

    185731dc35a29a82583ea9be539a6d8322f9e54f

    SHA256

    90b1a8a443c8849edc4da87fe269b3c13cb5823765a40b70f59e9b342cc12393

    SHA512

    de21a9a3bec40e82f051511f086da146b743cfc4cda35d323051ec72e676b8579328d3dcb1869cf837e613bc0cb098a39360d92ace02a086c1604eaf75c5c16a

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_js2.dll

    Filesize

    381KB

    MD5

    5467eaf9ef241516892b314c05a668ef

    SHA1

    185731dc35a29a82583ea9be539a6d8322f9e54f

    SHA256

    90b1a8a443c8849edc4da87fe269b3c13cb5823765a40b70f59e9b342cc12393

    SHA512

    de21a9a3bec40e82f051511f086da146b743cfc4cda35d323051ec72e676b8579328d3dcb1869cf837e613bc0cb098a39360d92ace02a086c1604eaf75c5c16a

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_js2.dll

    Filesize

    381KB

    MD5

    5467eaf9ef241516892b314c05a668ef

    SHA1

    185731dc35a29a82583ea9be539a6d8322f9e54f

    SHA256

    90b1a8a443c8849edc4da87fe269b3c13cb5823765a40b70f59e9b342cc12393

    SHA512

    de21a9a3bec40e82f051511f086da146b743cfc4cda35d323051ec72e676b8579328d3dcb1869cf837e613bc0cb098a39360d92ace02a086c1604eaf75c5c16a

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_js2.dll

    Filesize

    381KB

    MD5

    5467eaf9ef241516892b314c05a668ef

    SHA1

    185731dc35a29a82583ea9be539a6d8322f9e54f

    SHA256

    90b1a8a443c8849edc4da87fe269b3c13cb5823765a40b70f59e9b342cc12393

    SHA512

    de21a9a3bec40e82f051511f086da146b743cfc4cda35d323051ec72e676b8579328d3dcb1869cf837e613bc0cb098a39360d92ace02a086c1604eaf75c5c16a

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_native.dll

    Filesize

    54KB

    MD5

    f6631c39c9c91f76831ba0a0561ae348

    SHA1

    8b935b1a32e147d2447ffbbcf037aba1ab84d9fd

    SHA256

    474a937df025e40c25778c180ef14a0bf22c6945a70bacea0bfb77682536f1aa

    SHA512

    f2cabf58e9681283048e3bb6b181bab3363b3c1bdf3dfcb8f9f00b26fac5dbeb48518a04bb0cbe95c567768914424450f981849fac391ceca7e880c86d344c68

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_native.dll

    Filesize

    54KB

    MD5

    f6631c39c9c91f76831ba0a0561ae348

    SHA1

    8b935b1a32e147d2447ffbbcf037aba1ab84d9fd

    SHA256

    474a937df025e40c25778c180ef14a0bf22c6945a70bacea0bfb77682536f1aa

    SHA512

    f2cabf58e9681283048e3bb6b181bab3363b3c1bdf3dfcb8f9f00b26fac5dbeb48518a04bb0cbe95c567768914424450f981849fac391ceca7e880c86d344c68

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_native.dll

    Filesize

    54KB

    MD5

    f6631c39c9c91f76831ba0a0561ae348

    SHA1

    8b935b1a32e147d2447ffbbcf037aba1ab84d9fd

    SHA256

    474a937df025e40c25778c180ef14a0bf22c6945a70bacea0bfb77682536f1aa

    SHA512

    f2cabf58e9681283048e3bb6b181bab3363b3c1bdf3dfcb8f9f00b26fac5dbeb48518a04bb0cbe95c567768914424450f981849fac391ceca7e880c86d344c68

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_native.dll

    Filesize

    54KB

    MD5

    f6631c39c9c91f76831ba0a0561ae348

    SHA1

    8b935b1a32e147d2447ffbbcf037aba1ab84d9fd

    SHA256

    474a937df025e40c25778c180ef14a0bf22c6945a70bacea0bfb77682536f1aa

    SHA512

    f2cabf58e9681283048e3bb6b181bab3363b3c1bdf3dfcb8f9f00b26fac5dbeb48518a04bb0cbe95c567768914424450f981849fac391ceca7e880c86d344c68

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_res.dll

    Filesize

    135KB

    MD5

    a3bc4026a6a797ebdc16afabd38895dd

    SHA1

    04816a03f64b0213a3a9a935a614b4740791cc0a

    SHA256

    b652fb44133c92cc8c67622d80113cb807b0c35c13bc4c2f303eb3c29eac498e

    SHA512

    e51a8f65f40535da102ae02be2bc06eb28f4a9e66f7ac33edccea301e67cec48d4f84450050768c33116c5395706d5fff024321a6a826d0875966f495123c823

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_res.dll

    Filesize

    135KB

    MD5

    a3bc4026a6a797ebdc16afabd38895dd

    SHA1

    04816a03f64b0213a3a9a935a614b4740791cc0a

    SHA256

    b652fb44133c92cc8c67622d80113cb807b0c35c13bc4c2f303eb3c29eac498e

    SHA512

    e51a8f65f40535da102ae02be2bc06eb28f4a9e66f7ac33edccea301e67cec48d4f84450050768c33116c5395706d5fff024321a6a826d0875966f495123c823

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_res.dll

    Filesize

    135KB

    MD5

    a3bc4026a6a797ebdc16afabd38895dd

    SHA1

    04816a03f64b0213a3a9a935a614b4740791cc0a

    SHA256

    b652fb44133c92cc8c67622d80113cb807b0c35c13bc4c2f303eb3c29eac498e

    SHA512

    e51a8f65f40535da102ae02be2bc06eb28f4a9e66f7ac33edccea301e67cec48d4f84450050768c33116c5395706d5fff024321a6a826d0875966f495123c823

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_res.dll

    Filesize

    135KB

    MD5

    a3bc4026a6a797ebdc16afabd38895dd

    SHA1

    04816a03f64b0213a3a9a935a614b4740791cc0a

    SHA256

    b652fb44133c92cc8c67622d80113cb807b0c35c13bc4c2f303eb3c29eac498e

    SHA512

    e51a8f65f40535da102ae02be2bc06eb28f4a9e66f7ac33edccea301e67cec48d4f84450050768c33116c5395706d5fff024321a6a826d0875966f495123c823

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_support.dll

    Filesize

    103KB

    MD5

    33fc940aae0904e3a4b7326a50ccf928

    SHA1

    d9fac4fc62e4ef5a62c3877b05bce6731d62901d

    SHA256

    4963d84072aa62984172f74fd8a2db157af1ac3d0cf1b75b86c9606f3c586cab

    SHA512

    6c8362381ba28273f8e3ee82440e2a5621733efbd407276edf279170ca99714b7ea5c697f41351c68f362612475a77dfbe16b2a7bf59490af893d3425cf56d5d

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_support.dll

    Filesize

    103KB

    MD5

    33fc940aae0904e3a4b7326a50ccf928

    SHA1

    d9fac4fc62e4ef5a62c3877b05bce6731d62901d

    SHA256

    4963d84072aa62984172f74fd8a2db157af1ac3d0cf1b75b86c9606f3c586cab

    SHA512

    6c8362381ba28273f8e3ee82440e2a5621733efbd407276edf279170ca99714b7ea5c697f41351c68f362612475a77dfbe16b2a7bf59490af893d3425cf56d5d

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_support.dll

    Filesize

    103KB

    MD5

    33fc940aae0904e3a4b7326a50ccf928

    SHA1

    d9fac4fc62e4ef5a62c3877b05bce6731d62901d

    SHA256

    4963d84072aa62984172f74fd8a2db157af1ac3d0cf1b75b86c9606f3c586cab

    SHA512

    6c8362381ba28273f8e3ee82440e2a5621733efbd407276edf279170ca99714b7ea5c697f41351c68f362612475a77dfbe16b2a7bf59490af893d3425cf56d5d

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_support.dll

    Filesize

    103KB

    MD5

    33fc940aae0904e3a4b7326a50ccf928

    SHA1

    d9fac4fc62e4ef5a62c3877b05bce6731d62901d

    SHA256

    4963d84072aa62984172f74fd8a2db157af1ac3d0cf1b75b86c9606f3c586cab

    SHA512

    6c8362381ba28273f8e3ee82440e2a5621733efbd407276edf279170ca99714b7ea5c697f41351c68f362612475a77dfbe16b2a7bf59490af893d3425cf56d5d

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_support.dll

    Filesize

    103KB

    MD5

    33fc940aae0904e3a4b7326a50ccf928

    SHA1

    d9fac4fc62e4ef5a62c3877b05bce6731d62901d

    SHA256

    4963d84072aa62984172f74fd8a2db157af1ac3d0cf1b75b86c9606f3c586cab

    SHA512

    6c8362381ba28273f8e3ee82440e2a5621733efbd407276edf279170ca99714b7ea5c697f41351c68f362612475a77dfbe16b2a7bf59490af893d3425cf56d5d

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_support.dll

    Filesize

    103KB

    MD5

    33fc940aae0904e3a4b7326a50ccf928

    SHA1

    d9fac4fc62e4ef5a62c3877b05bce6731d62901d

    SHA256

    4963d84072aa62984172f74fd8a2db157af1ac3d0cf1b75b86c9606f3c586cab

    SHA512

    6c8362381ba28273f8e3ee82440e2a5621733efbd407276edf279170ca99714b7ea5c697f41351c68f362612475a77dfbe16b2a7bf59490af893d3425cf56d5d

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_support.dll

    Filesize

    103KB

    MD5

    33fc940aae0904e3a4b7326a50ccf928

    SHA1

    d9fac4fc62e4ef5a62c3877b05bce6731d62901d

    SHA256

    4963d84072aa62984172f74fd8a2db157af1ac3d0cf1b75b86c9606f3c586cab

    SHA512

    6c8362381ba28273f8e3ee82440e2a5621733efbd407276edf279170ca99714b7ea5c697f41351c68f362612475a77dfbe16b2a7bf59490af893d3425cf56d5d

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_support.dll

    Filesize

    103KB

    MD5

    33fc940aae0904e3a4b7326a50ccf928

    SHA1

    d9fac4fc62e4ef5a62c3877b05bce6731d62901d

    SHA256

    4963d84072aa62984172f74fd8a2db157af1ac3d0cf1b75b86c9606f3c586cab

    SHA512

    6c8362381ba28273f8e3ee82440e2a5621733efbd407276edf279170ca99714b7ea5c697f41351c68f362612475a77dfbe16b2a7bf59490af893d3425cf56d5d

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_transport.dll

    Filesize

    42KB

    MD5

    f5fb62801f5cb2cd7350e54f0131f4b8

    SHA1

    c3528d8826ea1d5bdf05efc55d8a5c99cbfa977d

    SHA256

    eadcb868896154638f86af934cf7078b71274e267e48f004fefe2cd8aa9cfe17

    SHA512

    5c4df91004005000f423ea94b7ecf52ae55a8e0756ee9a2b5d6f112dcc5cac96ecf65a6c93df12f0656fabfe3f769e27521c211ae8ea5379d4a39056f1d494d2

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_transport.dll

    Filesize

    42KB

    MD5

    f5fb62801f5cb2cd7350e54f0131f4b8

    SHA1

    c3528d8826ea1d5bdf05efc55d8a5c99cbfa977d

    SHA256

    eadcb868896154638f86af934cf7078b71274e267e48f004fefe2cd8aa9cfe17

    SHA512

    5c4df91004005000f423ea94b7ecf52ae55a8e0756ee9a2b5d6f112dcc5cac96ecf65a6c93df12f0656fabfe3f769e27521c211ae8ea5379d4a39056f1d494d2

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_transport.dll

    Filesize

    42KB

    MD5

    f5fb62801f5cb2cd7350e54f0131f4b8

    SHA1

    c3528d8826ea1d5bdf05efc55d8a5c99cbfa977d

    SHA256

    eadcb868896154638f86af934cf7078b71274e267e48f004fefe2cd8aa9cfe17

    SHA512

    5c4df91004005000f423ea94b7ecf52ae55a8e0756ee9a2b5d6f112dcc5cac96ecf65a6c93df12f0656fabfe3f769e27521c211ae8ea5379d4a39056f1d494d2

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\cortona_transport.dll

    Filesize

    42KB

    MD5

    f5fb62801f5cb2cd7350e54f0131f4b8

    SHA1

    c3528d8826ea1d5bdf05efc55d8a5c99cbfa977d

    SHA256

    eadcb868896154638f86af934cf7078b71274e267e48f004fefe2cd8aa9cfe17

    SHA512

    5c4df91004005000f423ea94b7ecf52ae55a8e0756ee9a2b5d6f112dcc5cac96ecf65a6c93df12f0656fabfe3f769e27521c211ae8ea5379d4a39056f1d494d2

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\dsound_renderer.dll

    Filesize

    29KB

    MD5

    66d28df5023e4f65d7ee2a4dca590279

    SHA1

    faf6af22c5f966907d7fc91ba7da9f1325ed21c8

    SHA256

    9ccc6215004f19f7533742c772b01e7b48d9d697755a15d717e4ceb27a914e35

    SHA512

    a5c22e2fa4fab5fae6dd9820a601a2b095570804ce97914ad39bdedc649966b21c280b554452ea53ddd230dc63c75da43ca3e79630ab02863ffb81c6980286c2

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\dsound_renderer.dll

    Filesize

    29KB

    MD5

    66d28df5023e4f65d7ee2a4dca590279

    SHA1

    faf6af22c5f966907d7fc91ba7da9f1325ed21c8

    SHA256

    9ccc6215004f19f7533742c772b01e7b48d9d697755a15d717e4ceb27a914e35

    SHA512

    a5c22e2fa4fab5fae6dd9820a601a2b095570804ce97914ad39bdedc649966b21c280b554452ea53ddd230dc63c75da43ca3e79630ab02863ffb81c6980286c2

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\dsound_renderer.dll

    Filesize

    29KB

    MD5

    66d28df5023e4f65d7ee2a4dca590279

    SHA1

    faf6af22c5f966907d7fc91ba7da9f1325ed21c8

    SHA256

    9ccc6215004f19f7533742c772b01e7b48d9d697755a15d717e4ceb27a914e35

    SHA512

    a5c22e2fa4fab5fae6dd9820a601a2b095570804ce97914ad39bdedc649966b21c280b554452ea53ddd230dc63c75da43ca3e79630ab02863ffb81c6980286c2

  • C:\Program Files (x86)\Common Files\ParallelGraphics\Cortona\dsound_renderer.dll

    Filesize

    29KB

    MD5

    66d28df5023e4f65d7ee2a4dca590279

    SHA1

    faf6af22c5f966907d7fc91ba7da9f1325ed21c8

    SHA256

    9ccc6215004f19f7533742c772b01e7b48d9d697755a15d717e4ceb27a914e35

    SHA512

    a5c22e2fa4fab5fae6dd9820a601a2b095570804ce97914ad39bdedc649966b21c280b554452ea53ddd230dc63c75da43ca3e79630ab02863ffb81c6980286c2

  • C:\Program Files (x86)\ParallelGraphics\Cortona VRML Client\license.txt

    Filesize

    5KB

    MD5

    5e1805fb33bf0693c3bfe1efe66926a2

    SHA1

    deb3810d90a0e62abc8c55a69d5bdaf80b4ded6c

    SHA256

    f7d51d21110c95367f3d8a7c9f61a6e57244d2f8b6b6915a226efcf850b4dbb6

    SHA512

    1c44f636aab7677a91ef214ea9dceb9702eb7b2bb2fffb83d542c23c3e6f98da3ab13ca00b3fce01fafb08e4fdc32c09f224c2f657d07ec95c18e38fc320d0de

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\Cortona_guide.html

    Filesize

    31KB

    MD5

    53cec44fb9a1b31b8a0dfdea71285a7e

    SHA1

    a0fce4a23edb80a099f6cfdb6645f007b291d579

    SHA256

    2f28af615234cdde8cb9a4dc6933d8d7cb872d15c73868d47f69b325200f97e5

    SHA512

    7e800c13b63ecd67bc4a6b3af37c37406747d72f69157b9e03cd10566ea93c61e323a8bf50e36431fe66dc631a89f50489087ba92189d05e1dd70b1d37549535

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\Unwise32.exe

    Filesize

    149KB

    MD5

    973567b98cdfc147df4e60471d9df072

    SHA1

    3c4735750c99c63e6861170a8c459a608594211e

    SHA256

    69b9dd6160524e0eb44905224f5b1747dfce43243c00c11c87f5c2ec55102876

    SHA512

    e891e3a413691eddd895a31293117aec8d151ecf18f84d3aa73bc1c4eb95582df1dfe04d51b7011eb55b5e754e2240de4c6269f9547f3cab3519985da1e07294

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\align.gif

    Filesize

    763B

    MD5

    c2d71f7dd281d1bb5735285fda2186e9

    SHA1

    857dc74167ee7988f37057d32b26c5772e5be242

    SHA256

    eb6cc56c7822fb19a8312de191f7b3bed15835435cac15bc06f9ef0d07d33763

    SHA512

    187fe4bb885f55cf3b0b9408abb2303ffbda61687a7f5b796f057949a4cc059b2dd925bd8062e6101f7c84da7c9f860a9ba075618a926ecf99c8c22f7f5496a9

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\anchor.gif

    Filesize

    184B

    MD5

    7cd88ef075ef89afc553cf23829ae01a

    SHA1

    3bafa8bb9cf331f04c6863562bffd27716e6d0e3

    SHA256

    77875584985fb99be7256c766ca5219b969dd62be9964225a1475c61c044bc64

    SHA512

    cbfcf0b9d16b50cf8dc663842c13c5cf99339d2fcf4f0b7c7d88382bc5b82029446b364033d69f02374f0cff12d70bc301e3b1081c9343f045dc0c2767c6f87b

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\cad.zip

    Filesize

    41KB

    MD5

    41df7da49ce508ee9e43acdbb923cce8

    SHA1

    520988d466a3d6fdf9905f802484a8daa069163f

    SHA256

    8945fe8ce081481bd3780bde14fe29a59a8aa14f60c7888f67f1715fe028af85

    SHA512

    87b65d533d95b4eadbbce8c2377b01f121a574eec3b2f662d1717d78bf5eb4af1480d7269295cb3f0a952b258d51419ac4e612c0e001874fec1516dc905cf501

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\classes.zip

    Filesize

    113KB

    MD5

    5771664d61ad700cd0aa2bee90a86e96

    SHA1

    9e94a556c5f465b75bf395bc0c2ebc8bd2b3cff7

    SHA256

    19efd09ef2ba03ca0717b26929e2d1b8d9c777693ec3aa2ebd9f02ffad8c5aaf

    SHA512

    63aa72b03672ef320b2d14e57a852ac4adb5537b2fd95e6ddb215e89d172ff8fa765a8de0bfd02a5fe5d32a965117af5c90035af2b1213c6ae6da89ef0e882ec

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\corteai.zip

    Filesize

    612KB

    MD5

    0fb982342f31e1ab69de3993c7bb32f2

    SHA1

    ad5b7ab576dbe34defef74566434be81e01ebc24

    SHA256

    ac79462ecc116bc43ca9946b84abd67ce8f311467f3d8636de419361644a52a5

    SHA512

    d9131da28a54c2559b7b650c2648e10862e0058d9919a5d147a5ef5b61476090fb5e82384502ab7334906a15031ad8cba1b7c4ac19288b76a395cb28a61a8bb1

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\cylinder.gif

    Filesize

    168B

    MD5

    1574f2cf8158f0262be21533e2f910d8

    SHA1

    198d75ae7ce9236aef78f2368781915515c610fc

    SHA256

    b816bc1d12028d057508e8cd0ffe23aa11b2c183cc4a0a04136e459c0a86d63c

    SHA512

    0289e95958f42546aa3d9429d0c6c4340f2ed28d3ac2bda2e8cdd4c272732fa1dca81d82404b2e74be2720b2b061ce6ad1f4a6f6e7bc1f90bd7b14b6599805cc

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\drop_s.gif

    Filesize

    156B

    MD5

    787290f360ef1da94ff26635e0cc42a1

    SHA1

    0a6108080c39e4363564b980ba2c5206e2141fd1

    SHA256

    a6de3a093325793f4cc75555986b6ccb4855446444687f36f3f18a5f852710e9

    SHA512

    ea6b9d159d8d000a2f926c7d19ca352f51539d38e85148155e86c3f68dac993e6e4ed6eab1288622c4f65603d9b1c7fb1f80f585fbd766430df326fc38739d44

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\embed.html

    Filesize

    426B

    MD5

    84056dd151318ad0297f0cf88ff20995

    SHA1

    e2a2eb41be7e9b3e955acb05ba72901e6627fa58

    SHA256

    9d503c8cb979b906c97c14171ddb0ba12dd8f46418ed0d6481f50dc3fcc04370

    SHA512

    176f9d3506e6a37fe7773c6b400164cf68f584f36b005c9bf6b53ced0c38b88b435ba1b34cef47c1539ab3fe12cec7793a6a1aa27823714932fa3b71d913b0f0

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\finger.gif

    Filesize

    133B

    MD5

    158efe095b3124d6921e97e72bdfd838

    SHA1

    72b145d790624dde7234cdba18c794b978123e31

    SHA256

    cf981aede0dc78a40066f137135a4973962b564d5a42545a3d8946d8a0da891b

    SHA512

    ff3c5501c9be1480ed981a823c953369c0c9ac0c0c0db88b5dcb9cbb2c799c6a084f801b79c4ab4643e34d25013480c6115d92a3d30e7d413cafcbccc62b7e00

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\fit.gif

    Filesize

    686B

    MD5

    64bcb72df20aa94f1480be02edcddf37

    SHA1

    f2b28df86a5041c4d0f0d02a3398253716931aac

    SHA256

    f0fe24a2e3803994282f39d5f61f157bc3f9a02fb1e9d9cac2db7daaf689b055

    SHA512

    c816234238fe9f5bb22a990089bf01c0e91b9efe76608b8275a75505da5ea852130540daa612687b795bc508802184db1db92bd84045026e977c4d1d5bdc26e9

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\fly.gif

    Filesize

    549B

    MD5

    cc009c0f6b99dae219bb5ff4bf1296cd

    SHA1

    2186bd7aca92c2d29297d10f0faac8f2174e7e73

    SHA256

    ad2d6ad631c015da63f6b2b0414c12a16b1e4b710e21fc357d05cf7c8056124f

    SHA512

    7e5997c1ca8fab05244f981116b2128d3b4a835e316313d6c5a2c6ff424ea0b0d113fc34daa8732c99849cd120f0bc47e721a5df42f7d31ac0a3709cce88fa0d

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\goto.gif

    Filesize

    750B

    MD5

    73435396528e5a689413763c71669e86

    SHA1

    3d5188283c59747aba319d8d0c31ec769a428ebd

    SHA256

    9c688dbe3c0a2a23c3b6b00bc109030efa6c531f25fd2d0230968da3a8ea08d2

    SHA512

    7cd69122340f22ceb0d8e2f52fd30d1f9a3ebf5aec492ed5939b2e770da6d386f18c046f6c1dab15f106c51d33dbb2f5026b261db60cc7fba82d6f17063d4938

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\navigb.gif

    Filesize

    903B

    MD5

    fc0b6c4506ebae3c19a3a41a6f331195

    SHA1

    d07db150b09876b133f909d6b2c9b1d2ef09a488

    SHA256

    6599b1ad5181f4fcb94d1bd88c25df953b3d0c6b4209aac916d7e0f0dec2366d

    SHA512

    c2eef61834406e80909ccacaddf8198400ffe5a63a4e25ce14321643abf2baf9119de8967fdf9c5b1de7734462476c0b5ab593710cbb7e9b17a9c26c9d92d44d

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\navigcb.gif

    Filesize

    923B

    MD5

    1d2c0060318b4b4bb093a1d5a67e88bf

    SHA1

    073c21c9f081394aa20abaabe4305609c56a31ba

    SHA256

    b33a88ae2452327695952705c855699ea6d04959704277f8bc50bdf8c19da9eb

    SHA512

    a7689fd31b0c22eb202ba1e22ac3c39dbb510e866c77f50b42bc9979e4027b2ecefdf696da189452b7a10569dcf014c695e9c2f07c33b51e65015dff40e6cee9

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\navigcl.gif

    Filesize

    935B

    MD5

    a3ea42661d5ee3ceac492182e704dddf

    SHA1

    9c67cd278fabd2bb7f04cd7222815e19cf83ef34

    SHA256

    133b3ae236d070ab6e5f1aa2f766eee4ed8c3b36c3740ce01a59c1c823a62be6

    SHA512

    cb29e39f496f4a22c311859f73f878ea68da793861f21a19ed6bddd168fddf6c73d3a74a308afb7bb0ad9113e720bf003ad19c24b692f6cc42a5887a64c42207

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\navigcr.gif

    Filesize

    934B

    MD5

    7eef279502574562d80e4480e9df974d

    SHA1

    dba1a4760acb3e5a1ae22c0a6e169cf4af35ccd8

    SHA256

    56f46e676553cc1e5c1bf1f719ad21a14254b73c32a5e7eed0d5425df7765003

    SHA512

    387f87f08d6e1f8c1928a9f62f4d677898c9b7404f4dba4752fc169200b691e46270794367e496bb60ddf608d9f76665b5880641a088cd96232f64a7b829cd79

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\navigct.gif

    Filesize

    920B

    MD5

    45ed978d732115a3184ddf05eba5329c

    SHA1

    2a287a9e1a18e34f0cc3ec22ed67aea57b535823

    SHA256

    60b50ff0e2ae5145f9e468d55d52707b6462d8808d1572419bd2385cf45dbd31

    SHA512

    798c937f2c2601bff7172a63749e0012b5b65e172dec2d632e330ce61927544a1f950f4e066b78930a4a46a3f1c66141b27f90e40aac7d005dbf2bb19b5e1b17

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\navigd.gif

    Filesize

    918B

    MD5

    5b19592866b74aeb19b90a2ee2322565

    SHA1

    94539caeea811017f9563dd03fab399db76a4059

    SHA256

    f878154c02201a7d34ab241122b7ad5dac5c0a96c6ad3760ff27302c54c153cb

    SHA512

    e8f1a8772da167b070c77fe9ea6d1d3124f0d7cd8b5d02694ebaa548765ee5fa2e385089fd3ad84807a141d4f5987d2529d0dc0d0be1909e7e404182db0cf7ab

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\navigf.gif

    Filesize

    902B

    MD5

    2756de1879dcb832c423215a1680be8a

    SHA1

    e1667a6fdc1b2814831fd648ac7c00943d8f2e73

    SHA256

    14781a2ef4c79cabc475684c515a94fbd2e81c86ca4d0c1e891a3d3bd5369b83

    SHA512

    2e6e4dfab7c8832a870fa23dad8ef15ab8b38b357e45312f6ea73111272b8590dd4edb87a5f7cd542e7ffa2039e9580b6df9d274076d20f4876260061db8be3e

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\navigl.gif

    Filesize

    903B

    MD5

    5fa24674d9c58534b98faa1157155c0c

    SHA1

    eec1ff39f269c9344559cd860d9b629985df82de

    SHA256

    0cdbacae7958b8a72d296e6601e3cb85c8197a08ff042f217f05ac93c7e6abbb

    SHA512

    d91d425509c59e5c6006907dfa2be20eb1db7093642c171906599e0143559aadd95cfb5cd92ea2d0239abd7d89dd69b363ff5435d93a4f54cf65c455d0b4c861

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\navigr.gif

    Filesize

    902B

    MD5

    18327aa1f817f74e1526c451b40e56b1

    SHA1

    eacbe9e7a4b5cc88ea3d520332ce72f791e087d4

    SHA256

    ccdcc53c69388b1eefb4ea8d68aeda9aa8e3703fb081c8568e70834435699dd1

    SHA512

    a81d3a8fb1b9280f09285d06611d06d2c68158f8d0d724e99e131ca56143a0219da7f2f7ef3e3ce93c6d1d7f6e469e482edfcf4565b1104eaa4d6af84bd2ee04

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\navigrl.gif

    Filesize

    931B

    MD5

    8d065acad9b54341d23ad8854d941fc7

    SHA1

    ca60844127cfc8bec6d37bafe514b97e8dbc64e3

    SHA256

    59d1861f0253e3d98b715b2209d27735432f258a39a00ab367c6a46fa9c9af1d

    SHA512

    f5ce8b92c6804f99961972ac35420fdeb47b8ddaa119fe5e0a41f724ca3773e3a88dbffc499214d77da61af8e12e2f5a80719019a32b0ed74f9f6387bddb086b

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\navigrr.gif

    Filesize

    930B

    MD5

    aabcc681a88f7ab0627b6b00287fae33

    SHA1

    1df78e0f3f6e758b427450828c9dc1c98b20dd87

    SHA256

    3d5940f97900107c7c31942ed5eace6bfe75fe208001d9bf90c6af40b5be0365

    SHA512

    10529ed9c9893b519a18c5f6b9dc878f56479d699f7f0afa00afa0413a743502687c0dcedb9c4ac974d0f397e8fde6d33acb8cfde897b92156f961fa3c87bf19

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\navigu.gif

    Filesize

    925B

    MD5

    d859e2604a0d108d89721ed38f703653

    SHA1

    2a42ad9f7d878ebcae08b1143812c40792129a87

    SHA256

    d0cbfa0d072eb904c77f792b6b3112302d620829d472490ce6a80f590960586d

    SHA512

    0162a2e8513c76baeaaffdc191e8869dc221e21dd8816f42d5dbbffe49376666d83b5f1c47eb45d006b63176cb35ce6451fa4d55d584249ebca9a1ba93d9a60e

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\object.html

    Filesize

    342B

    MD5

    38e33c20df9d556fb72ecdb8a10ada1f

    SHA1

    39ebc144d352758196a4ebb06d3c41aa1e9e9119

    SHA256

    87f38daa37a57c60c64f25bfb6de7c000434240b6b9b901f23490762cb5ab3a7

    SHA512

    c020c22207deeb52e17b6842f011f38b4e2c3db591d9197740ae060980d2b652a858c653b6d0febff060a31262ec6c73343e4b2aafee87f2b1ab01c98ccfea67

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\pan.gif

    Filesize

    563B

    MD5

    5bae90604ea0c09bff34fa5515184dcb

    SHA1

    ed20542c64b6f16b25be72aad7e688f588730dfd

    SHA256

    8a85eded969f445e67795c67254fb188be4bb470457563df5a3a265423fc483b

    SHA512

    8d17d46f19384ea3a7f62c2222532626f64dd1ec59908ce7a58b2c48f85871e743f308c42a59e8e9b97d8feda0c2742cde81620f86a3ce42066d1684ac6bc81b

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\plan.gif

    Filesize

    619B

    MD5

    88ab759ec7cf58b0a727b2ae935e088e

    SHA1

    5fc4f4b91d296f60353bf8bc546d0e6f55dde845

    SHA256

    6019e753f2eb52d7b803143c1e236a931d9bae26ea5ae4124e987af48672eba6

    SHA512

    115e9a7e0749bf6d5dcbe2ebd04d6b02bc87b6b53b0031590a55748ab6478c3f56e6321e9e952bf6f0e4673c0f57746d37271cd5555c3c8dc283553acad78273

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\plane_s.gif

    Filesize

    148B

    MD5

    8fefbf0af85ba00b482ddc5fe9c1f61b

    SHA1

    d5821a2898ba81c6361b3fe612764e9d456261e4

    SHA256

    4c1e7624df6ee2d62b2382d6083bbbec35415b2477abf86ef5140d6821ccd71c

    SHA512

    1bf45bd58be0c8527bcc6730974027cc37a2cc81b129413cc4575081d917c1153a9aa3eb9fa323ec057578809249fdabdb62c93c12e05c92c28c00e6f30022ad

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\readme.txt

    Filesize

    4KB

    MD5

    ab2bf4f3680114be7a57401eddf96d22

    SHA1

    96e94d52f679270092b087ebb005a301651dee9d

    SHA256

    1be532b3b520e52380bd4aa719bb3d4bc1791b65e54b557b90f13067303a6907

    SHA512

    307a8869082b151424a027ebc2e140c060ceb3b17e79c5053c7e2771dafe343c14860c61713ca230c833571907320b7aabe7214aa42618ec7efdf4da2d416d75

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\restor.gif

    Filesize

    864B

    MD5

    8e552804c03a50401104b57ee5974c37

    SHA1

    d096c83202519f5cc8927617a76615a66042b946

    SHA256

    b4eb3df46b62201ec922f2ea87a231cc7718cc66023fc089da6798be5ea6ff62

    SHA512

    8a27ac6f1ec92964195a3ff9b0237bb91293b0f14be72f21a6e637f0d96e8f856e7e5b3c84e96fe52b014ec4a4c1ab06713ca18c95ec97d06e86cd2ce01db840

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\roll.gif

    Filesize

    560B

    MD5

    f0c9b91d677c55c13df719bdccd621a6

    SHA1

    6e2e725c6dc8cca9be6c413a5f3f9e45dc21c6b9

    SHA256

    8d26e51627b9d109eee3c96ba05912577103f3cd9080fc491924a89d715816ae

    SHA512

    66ae2fa7b57e040c6fa3ecc807a8c069704e02d07d515d63e48f5c6280806945da9e4b819afbeade7de49d51ebd4ab873e8265eb1eda553cab372cbcb100b2de

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\rose.wrl

    Filesize

    1KB

    MD5

    42368967f45d59868b076f20f56a4517

    SHA1

    7ca8c3370e6a8a2d6a6285539919772fa04f9729

    SHA256

    8eb158f47968ba08404b60381f9a5b09ed208ce3347534f0b295006bf4401e40

    SHA512

    490fcafc27485fe5463e2de957cbd66ae2e0957fd094d9f629a483e6dcad2c78d10b4f1ce25956bbd4cb0530073d341b2ddbd17658556b87184dc0fb431f84fe

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\sphere_s.gif

    Filesize

    151B

    MD5

    c4b64521bf013d6654bc87d1456d4567

    SHA1

    83ea8c7f846c9fb6f7a533547957dc76a5559aed

    SHA256

    4d61774206eb941d539426532544a151abe0d486a27601139d1ed0f0f05abbac

    SHA512

    a71c3fcb0295a56feaf5ed7ba790efca8fd3e25e4667ae1cb3dcf4d3fc48f126e5e59b5c91daabadc1d470a9077a3748ea5356a9bfeae4ee1de11c77f8beb722

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\study.gif

    Filesize

    596B

    MD5

    316dc2505302a118496227b152e0b86d

    SHA1

    42b11118a1f443b1f4738887f0692eb55ab23969

    SHA256

    64aeb9784744177b26314e8e56ef7d4a9fe0e91438017cecc3c84832d4d7dc19

    SHA512

    8896ef68661481ffbd52a919ecf578faec45cb541853c93a94558e1ae3f41c814a4faaa5f0830e3a31a30b0a24090ef2134ed1cdd86b89dff6610a0000f118cb

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\turn.gif

    Filesize

    601B

    MD5

    2079275c367d8896f9022b3ec42407ac

    SHA1

    bf47b75b01a3e2a781a83db387129680ecd47b06

    SHA256

    a3619dee895fb3beb3ab30d2ef937bba41f84eab61ace288114083c297397c0b

    SHA512

    1339ea589cc2518792dde2890bdd320da2c550350688b431d722800d0e4826de4782dfdd8beee3006e65378b1e8de12a7596e5e6e229a75306989a58a90c5f15

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\view.gif

    Filesize

    1KB

    MD5

    f1ebcba36fd5faeabd81879e08909e53

    SHA1

    f64729e9d770a19741717aa8889b336996c8f3d6

    SHA256

    77d326fd3ce70de4ff2099b1ca9050e380528228d99c9614171e48603c2d7736

    SHA512

    cdb0a631560cdf2f21fc4ff5c087e94f2907de72ae34bc2ffc018adb553dea68cbbca27ce1cf1a19999f25b9c18599704e1825c0dd9f4dd0182845df77b92cf7

  • C:\Users\Admin\AppData\Local\Temp\Cortona_GLF895E.tmp\walk.gif

    Filesize

    584B

    MD5

    0263f28617f1ff5c7b8504e1470c7518

    SHA1

    ffffbf4566f6e010a2e4f0fde062ba2eee844ba4

    SHA256

    2f95abfcda1f44835b434b353c86c92a008d6d14731991edb3f851e776dff384

    SHA512

    a3fde7e04d0e5af300587056ecf531f3602e80260f352eef05e710369848940fc8da4b8863ac812f968a1e7bf7aa7b59b9408a24b9958baba2966a6c64f93cf0

  • C:\Users\Admin\AppData\Local\Temp\GLB837D.tmp

    Filesize

    70KB

    MD5

    cbcbfb65878712722299f418de91569d

    SHA1

    7c73177237ef218bc5d99f500b8ef3d381bf2b79

    SHA256

    997da9603de11e749148dcc9366e1dc71a5e08eb7c8b0dd7ad337809c24b5875

    SHA512

    88af034d697a243cd7b41da7996eb53f8ce1724b75b2a744f7d48f3238368dcc416fc4737850c8498fc409531c4a82c192c85c0a449c23e94d4c0f9ad93e9447

  • C:\Users\Admin\AppData\Local\Temp\GLB837D.tmp

    Filesize

    70KB

    MD5

    cbcbfb65878712722299f418de91569d

    SHA1

    7c73177237ef218bc5d99f500b8ef3d381bf2b79

    SHA256

    997da9603de11e749148dcc9366e1dc71a5e08eb7c8b0dd7ad337809c24b5875

    SHA512

    88af034d697a243cd7b41da7996eb53f8ce1724b75b2a744f7d48f3238368dcc416fc4737850c8498fc409531c4a82c192c85c0a449c23e94d4c0f9ad93e9447

  • C:\Users\Admin\AppData\Local\Temp\GLC84E4.tmp

    Filesize

    161KB

    MD5

    8c97d8bb1470c6498e47b12c5a03ce39

    SHA1

    15d233b22f1c3d756dca29bcc0021e6fb0b8cdf7

    SHA256

    a87f19f9fee475d2b2e82acfb4589be6d816b613064cd06826e1d4c147beb50a

    SHA512

    7ad0b2b0319da52152c2595ee45045d0c06b157cdaaa56ad57dde9736be3e45fd7357949126f80d3e72b21510f9bf69d010d51b3967a7644662808beed067c3f

  • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp

    Filesize

    2KB

    MD5

    6f608d264503796bebd7cd66b687be92

    SHA1

    bb82145e86516859dae6d4b3bffb08c727b13c65

    SHA256

    49833d2820afb1d7409dfbd916480f2cdf5787d2e2d94166725beb9064922d5d

    SHA512

    c14b7ec747357c232f9d958b44760e3a018df628291e87de52b8174ccc4ada546eba90a0e70172d1db54feca01b40cd3aeaa61b8a2b6f22d414baad1f62e8e54

  • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp

    Filesize

    2KB

    MD5

    6f608d264503796bebd7cd66b687be92

    SHA1

    bb82145e86516859dae6d4b3bffb08c727b13c65

    SHA256

    49833d2820afb1d7409dfbd916480f2cdf5787d2e2d94166725beb9064922d5d

    SHA512

    c14b7ec747357c232f9d958b44760e3a018df628291e87de52b8174ccc4ada546eba90a0e70172d1db54feca01b40cd3aeaa61b8a2b6f22d414baad1f62e8e54

  • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp

    Filesize

    2KB

    MD5

    6f608d264503796bebd7cd66b687be92

    SHA1

    bb82145e86516859dae6d4b3bffb08c727b13c65

    SHA256

    49833d2820afb1d7409dfbd916480f2cdf5787d2e2d94166725beb9064922d5d

    SHA512

    c14b7ec747357c232f9d958b44760e3a018df628291e87de52b8174ccc4ada546eba90a0e70172d1db54feca01b40cd3aeaa61b8a2b6f22d414baad1f62e8e54

  • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp

    Filesize

    2KB

    MD5

    6f608d264503796bebd7cd66b687be92

    SHA1

    bb82145e86516859dae6d4b3bffb08c727b13c65

    SHA256

    49833d2820afb1d7409dfbd916480f2cdf5787d2e2d94166725beb9064922d5d

    SHA512

    c14b7ec747357c232f9d958b44760e3a018df628291e87de52b8174ccc4ada546eba90a0e70172d1db54feca01b40cd3aeaa61b8a2b6f22d414baad1f62e8e54

  • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp

    Filesize

    2KB

    MD5

    6f608d264503796bebd7cd66b687be92

    SHA1

    bb82145e86516859dae6d4b3bffb08c727b13c65

    SHA256

    49833d2820afb1d7409dfbd916480f2cdf5787d2e2d94166725beb9064922d5d

    SHA512

    c14b7ec747357c232f9d958b44760e3a018df628291e87de52b8174ccc4ada546eba90a0e70172d1db54feca01b40cd3aeaa61b8a2b6f22d414baad1f62e8e54

  • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp

    Filesize

    2KB

    MD5

    6f608d264503796bebd7cd66b687be92

    SHA1

    bb82145e86516859dae6d4b3bffb08c727b13c65

    SHA256

    49833d2820afb1d7409dfbd916480f2cdf5787d2e2d94166725beb9064922d5d

    SHA512

    c14b7ec747357c232f9d958b44760e3a018df628291e87de52b8174ccc4ada546eba90a0e70172d1db54feca01b40cd3aeaa61b8a2b6f22d414baad1f62e8e54

  • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp

    Filesize

    2KB

    MD5

    6f608d264503796bebd7cd66b687be92

    SHA1

    bb82145e86516859dae6d4b3bffb08c727b13c65

    SHA256

    49833d2820afb1d7409dfbd916480f2cdf5787d2e2d94166725beb9064922d5d

    SHA512

    c14b7ec747357c232f9d958b44760e3a018df628291e87de52b8174ccc4ada546eba90a0e70172d1db54feca01b40cd3aeaa61b8a2b6f22d414baad1f62e8e54

  • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp

    Filesize

    2KB

    MD5

    6f608d264503796bebd7cd66b687be92

    SHA1

    bb82145e86516859dae6d4b3bffb08c727b13c65

    SHA256

    49833d2820afb1d7409dfbd916480f2cdf5787d2e2d94166725beb9064922d5d

    SHA512

    c14b7ec747357c232f9d958b44760e3a018df628291e87de52b8174ccc4ada546eba90a0e70172d1db54feca01b40cd3aeaa61b8a2b6f22d414baad1f62e8e54

  • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp

    Filesize

    2KB

    MD5

    6f608d264503796bebd7cd66b687be92

    SHA1

    bb82145e86516859dae6d4b3bffb08c727b13c65

    SHA256

    49833d2820afb1d7409dfbd916480f2cdf5787d2e2d94166725beb9064922d5d

    SHA512

    c14b7ec747357c232f9d958b44760e3a018df628291e87de52b8174ccc4ada546eba90a0e70172d1db54feca01b40cd3aeaa61b8a2b6f22d414baad1f62e8e54

  • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp

    Filesize

    2KB

    MD5

    6f608d264503796bebd7cd66b687be92

    SHA1

    bb82145e86516859dae6d4b3bffb08c727b13c65

    SHA256

    49833d2820afb1d7409dfbd916480f2cdf5787d2e2d94166725beb9064922d5d

    SHA512

    c14b7ec747357c232f9d958b44760e3a018df628291e87de52b8174ccc4ada546eba90a0e70172d1db54feca01b40cd3aeaa61b8a2b6f22d414baad1f62e8e54

  • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp

    Filesize

    2KB

    MD5

    6f608d264503796bebd7cd66b687be92

    SHA1

    bb82145e86516859dae6d4b3bffb08c727b13c65

    SHA256

    49833d2820afb1d7409dfbd916480f2cdf5787d2e2d94166725beb9064922d5d

    SHA512

    c14b7ec747357c232f9d958b44760e3a018df628291e87de52b8174ccc4ada546eba90a0e70172d1db54feca01b40cd3aeaa61b8a2b6f22d414baad1f62e8e54

  • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp

    Filesize

    2KB

    MD5

    6f608d264503796bebd7cd66b687be92

    SHA1

    bb82145e86516859dae6d4b3bffb08c727b13c65

    SHA256

    49833d2820afb1d7409dfbd916480f2cdf5787d2e2d94166725beb9064922d5d

    SHA512

    c14b7ec747357c232f9d958b44760e3a018df628291e87de52b8174ccc4ada546eba90a0e70172d1db54feca01b40cd3aeaa61b8a2b6f22d414baad1f62e8e54

  • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp

    Filesize

    2KB

    MD5

    6f608d264503796bebd7cd66b687be92

    SHA1

    bb82145e86516859dae6d4b3bffb08c727b13c65

    SHA256

    49833d2820afb1d7409dfbd916480f2cdf5787d2e2d94166725beb9064922d5d

    SHA512

    c14b7ec747357c232f9d958b44760e3a018df628291e87de52b8174ccc4ada546eba90a0e70172d1db54feca01b40cd3aeaa61b8a2b6f22d414baad1f62e8e54

  • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp

    Filesize

    2KB

    MD5

    6f608d264503796bebd7cd66b687be92

    SHA1

    bb82145e86516859dae6d4b3bffb08c727b13c65

    SHA256

    49833d2820afb1d7409dfbd916480f2cdf5787d2e2d94166725beb9064922d5d

    SHA512

    c14b7ec747357c232f9d958b44760e3a018df628291e87de52b8174ccc4ada546eba90a0e70172d1db54feca01b40cd3aeaa61b8a2b6f22d414baad1f62e8e54

  • C:\Users\Admin\AppData\Local\Temp\GLJ8553.tmp

    Filesize

    2KB

    MD5

    6f608d264503796bebd7cd66b687be92

    SHA1

    bb82145e86516859dae6d4b3bffb08c727b13c65

    SHA256

    49833d2820afb1d7409dfbd916480f2cdf5787d2e2d94166725beb9064922d5d

    SHA512

    c14b7ec747357c232f9d958b44760e3a018df628291e87de52b8174ccc4ada546eba90a0e70172d1db54feca01b40cd3aeaa61b8a2b6f22d414baad1f62e8e54

  • C:\Users\Admin\AppData\Local\Temp\cort_util.dll

    Filesize

    33KB

    MD5

    a28108fda905907f07dcf122017d1502

    SHA1

    eefba3a50c4443ddbf345dc178de57f414eaa3b6

    SHA256

    327c1c1db5d8b7f4af3cee4cf22dd64ea48c8d0df2a681b3653d1bb64f9dcfa8

    SHA512

    4b6fc75419fb6b199bd8cf2232459d3b14b9d3072f179a114d2212b7c207bf38609c92602cb4d1c866587471381e90e9edb556da0b27fb9ae98717d3114f965a

  • C:\Users\Admin\AppData\Local\Temp\cort_util.dll

    Filesize

    33KB

    MD5

    a28108fda905907f07dcf122017d1502

    SHA1

    eefba3a50c4443ddbf345dc178de57f414eaa3b6

    SHA256

    327c1c1db5d8b7f4af3cee4cf22dd64ea48c8d0df2a681b3653d1bb64f9dcfa8

    SHA512

    4b6fc75419fb6b199bd8cf2232459d3b14b9d3072f179a114d2212b7c207bf38609c92602cb4d1c866587471381e90e9edb556da0b27fb9ae98717d3114f965a

  • C:\Users\Admin\AppData\Local\Temp\cort_util.dll

    Filesize

    33KB

    MD5

    a28108fda905907f07dcf122017d1502

    SHA1

    eefba3a50c4443ddbf345dc178de57f414eaa3b6

    SHA256

    327c1c1db5d8b7f4af3cee4cf22dd64ea48c8d0df2a681b3653d1bb64f9dcfa8

    SHA512

    4b6fc75419fb6b199bd8cf2232459d3b14b9d3072f179a114d2212b7c207bf38609c92602cb4d1c866587471381e90e9edb556da0b27fb9ae98717d3114f965a

  • C:\Users\Admin\AppData\Local\Temp\cortall.cab

    Filesize

    1.4MB

    MD5

    ac38d97d22a7717516708b6fdc02c5d2

    SHA1

    7821d9401a2850ad790f11a6202077eaf16952df

    SHA256

    dbf0f899294cb68131e0b5c39e1f2614f8b32dea3527bed90163391fb77e4e70

    SHA512

    97181473463fea6ad00648d449a5aec58781b86db04d0617c81b88ac49b9b08245d18ed84c03e840eeb243f58a30a90ebbbfa13fa285a461d4d8842207eb6a26

  • memory/448-605-0x0000000000680000-0x0000000000693000-memory.dmp

    Filesize

    76KB

  • memory/520-611-0x0000000000760000-0x0000000000778000-memory.dmp

    Filesize

    96KB

  • memory/1012-646-0x00000000004E0000-0x00000000004EB000-memory.dmp

    Filesize

    44KB

  • memory/1084-640-0x00000000001F0000-0x00000000001FE000-memory.dmp

    Filesize

    56KB

  • memory/2152-659-0x0000000000410000-0x0000000000427000-memory.dmp

    Filesize

    92KB

  • memory/2904-634-0x0000000000450000-0x000000000046D000-memory.dmp

    Filesize

    116KB

  • memory/2940-661-0x00000000001F0000-0x00000000001FC000-memory.dmp

    Filesize

    48KB

  • memory/3108-584-0x0000000000530000-0x0000000000563000-memory.dmp

    Filesize

    204KB

  • memory/3196-665-0x0000000000590000-0x00000000005D4000-memory.dmp

    Filesize

    272KB

  • memory/4312-601-0x0000000001EC0000-0x0000000001F1E000-memory.dmp

    Filesize

    376KB

  • memory/4592-652-0x00000000006D0000-0x000000000075F000-memory.dmp

    Filesize

    572KB

  • memory/4596-617-0x00000000006C0000-0x0000000000723000-memory.dmp

    Filesize

    396KB

  • memory/5084-151-0x00000000021E0000-0x00000000021ED000-memory.dmp

    Filesize

    52KB

  • memory/5084-307-0x0000000002FE0000-0x0000000002FFD000-memory.dmp

    Filesize

    116KB