7e955543f89c1cdddf7f507be671f7a5ce976cd59d80e12383ead2dd655ef2e3

Analysis

max time kernel
289s
max time network
303s
platform
windows10-2004_x64
resource
win10v2004-20230621-en
resource tags

arch:x64arch:x86image:win10v2004-20230621-enlocale:en-usos:windows10-2004-x64system
submitted
28-06-2023 03:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Todesk_437778217.exe
Size

4.9MB
MD5

b04bf24c595cc63b27fc383e4ef8cf08
SHA1

c0339e7ad57976cde8f3c7b892081a13b30b9848
SHA256

7e955543f89c1cdddf7f507be671f7a5ce976cd59d80e12383ead2dd655ef2e3
SHA512

0e5394da301d069dacfa8e060136241e9cc7a19148f67b1bbc660ebb1a65dbac9c0a7e512812cf5f205a95905c45d97aebfd4b6cb20f5e7ed2f9ba3098515180
SSDEEP

98304:n33U6vME7QCEmCvAPsxgaLna/bxNrf4cUMGOnk6LPVkoVc0KR4jLqmWaJdVC/y:0ohiBvAPKgKndcUMzFPxtDFr

Score

8^/10

bootkit discovery persistence

Malware Config

Signatures

Downloads MZ/PE file

Writes to the Master Boot Record (MBR) 1 TTPs 4 IoCs

Bootkits write to the MBR to gain persistence at a level below the operating system.

bootkit persistence

Bootkit

T1067

Processes:

ComputerZTray.execomputercenter.exeTodesk_437778217.exeLdsHelper.exe

description	ioc	process
File opened for modification	\??\PhysicalDrive0	ComputerZTray.exe
File opened for modification	\??\PhysicalDrive0	computercenter.exe
File opened for modification	\??\PhysicalDrive0	Todesk_437778217.exe
File opened for modification	\??\PhysicalDrive0	LdsHelper.exe

Checks computer location settings 2 TTPs 1 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

Processes:

Todesk_437778217.exe

description	ioc	process
Key value queried	\REGISTRY\USER\S-1-5-21-922299981-3641064733-3870770889-1000\Control Panel\International\Geo\Nation	Todesk_437778217.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Drops file in Program Files directory 64 IoCs

Processes:

Todesk_437778217.exe

description	ioc	process
File opened for modification	C:\Program Files (x86)\BirdWallpaper\plugin\extension\condition_utils_lib	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\BirdWallpaper\Base.dll	Todesk_437778217.exe
File created	C:\Program Files (x86)\BirdWallpaper\Utils\SoulDancer.exe	Todesk_437778217.exe
File created	C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\UI\icon\black.ico	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\360Base.dll	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\DataMgr_x64.dll	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\Ludashi\Utils\cef\widevinecdmadapter.dll	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\BirdWallpaper\Config\loop\static\img\bg.ec7d6cb0.png	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\HardwareProtectEx_x64.sys	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Setting.dll	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\Ludashi\Utils\cef\cef.pak	Todesk_437778217.exe
File created	C:\Program Files (x86)\BirdWallpaper\NewWp\NewPlay.exe	Todesk_437778217.exe
File created	C:\Program Files (x86)\BirdWallpaper\Utils\BirdHelper.exe	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\game\GamePage.dll	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\Utils\cef\locales\nl.pak	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\Themes\UI\ludashi.dat	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\BirdWallpaper\Config\loop\static\img\mc.0fb3d2ff.png	Todesk_437778217.exe
File created	C:\Program Files (x86)\BirdWallpaper\Utils\Beautify\BeautifyProxy.exe	Todesk_437778217.exe
File created	C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\Default\ComputerZMonitor\ComputerZMonitor_theme.ui	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\tabx_pp.tpi	Todesk_437778217.exe
File created	C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\HardwareProtectEx.sys	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\Utils\cef\locales\kn.pak	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\BirdWallpaper\Config\loop\static\img	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\BirdWallpaper\Utils\arctrl.dll	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\{BD720EF7-FF6E-4927-8317-AEB10EAEE18E}.tf	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\360P2SP.dll	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\sweeper\MemoryOptimizer.exe	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\Ludashi\Utils\cef\cef_resources.pak	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\Utils\cef\locales\he.pak	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\Utils\cef\locales\vi.pak	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\Utils\cef\d3dcompiler_43.dll	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\BirdWallpaper\Config\loop\static\img\bbx.7f53484d.png	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\BirdWallpaper\Utils\LdsDrvInst32.exe	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\Utils\cef\locales\sv.pak	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\BirdWallpaper\Config\loop\static\img\new.851fdb53.png	Todesk_437778217.exe
File created	C:\Program Files (x86)\BirdWallpaper\Config\newui\themes\default\default_theme.ui	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\BirdWallpaper\Utils\cef\CefView.exe.manifest	Todesk_437778217.exe
File created	C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\DataMgr.dll	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\Utils\PCStoreSetup_officialwebsite.dll	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\BirdWallpaper\lpi\WpSvc.dll	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\ProcSpecial.dat	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\Utils\cef\locales\ko.pak	Todesk_437778217.exe
File created	C:\Program Files (x86)\BirdWallpaper\plugin\Basic.tpi	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\BirdWallpaper\birdsrv.dll	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\Default\ComputerZMonitor\ComputerZMonitor_theme.xml	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\Utils\cef\locales\fi.pak	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\Utils\cef\locales\sr.pak	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\BirdWallpaper\lpi\WpSvc64.dll	Todesk_437778217.exe
File created	C:\Program Files (x86)\BirdWallpaper\Utils\LdsDrvInst32.exe	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\Ludashi\Utils\cef\cef_200_percent.pak	Todesk_437778217.exe
File created	C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\cef\CefView.exe	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\BirdWallpaper\Config\newui\themes\default\default_theme.ui	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\Ludashi\Utils\cef\locales\da.pak	Todesk_437778217.exe
File created	C:\Program Files (x86)\BirdWallpaper\lpi\WpSvc.dll	Todesk_437778217.exe
File created	C:\Program Files (x86)\BirdWallpaper\Utils\WpDynamicApp.exe	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\Ludashi\Utils\cef\locales\tr.pak	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\game\ModeIdentify.dat	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\Plugin\chat_pp.tpi	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\ComputerMonZ.dll	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\game\ModeIdentify.dll	Todesk_437778217.exe
File opened for modification	C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\SignHelper.dll	Todesk_437778217.exe
File created	C:\Program Files (x86)\Ludashi\Themes\Default\ComputerZMonitor\ComputerZMonitor_theme.blackgold.ui	Todesk_437778217.exe
File created	C:\Program Files (x86)\BirdWallpaper\Utils\Down.exe	Todesk_437778217.exe
File created	C:\Program Files (x86)\BirdWallpaper\Config\loop\index.html	Todesk_437778217.exe

Executes dropped EXE 3 IoCs

Processes:

LdsHelper.exeComputerZTray.execomputercenter.exe

pid process

4852 LdsHelper.exe
3140 ComputerZTray.exe
4144 computercenter.exe

pid	process
4852	LdsHelper.exe
3140	ComputerZTray.exe
4144	computercenter.exe

Loads dropped DLL 14 IoCs

Processes:

Todesk_437778217.exeComputerZTray.execomputercenter.exe

pid	process
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
3140	ComputerZTray.exe
3140	ComputerZTray.exe
3140	ComputerZTray.exe
3140	ComputerZTray.exe
4144	computercenter.exe
3140	ComputerZTray.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Modifies system certificate store 2 TTPs 8 IoCs

evasion spyware trojan

Install Root Certificate

T1130

Modify Registry

T1112

Processes:

Todesk_437778217.exe

description	ioc	process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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	Todesk_437778217.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81	Todesk_437778217.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob = 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	Todesk_437778217.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\91C6D6EE3E8AC86384E548C299295C756C817B81\Blob = 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	Todesk_437778217.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43	Todesk_437778217.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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	Todesk_437778217.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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	Todesk_437778217.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\0563B8630D62D75ABBC8AB1E4BDFB5A899B24D43\Blob = 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	Todesk_437778217.exe

Suspicious behavior: EnumeratesProcesses 24 IoCs

Processes:

Todesk_437778217.exeLdsHelper.exeComputerZTray.exe

pid	process
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4852	LdsHelper.exe
4852	LdsHelper.exe
3140	ComputerZTray.exe
3140	ComputerZTray.exe
3140	ComputerZTray.exe
3140	ComputerZTray.exe
3140	ComputerZTray.exe
3140	ComputerZTray.exe

Suspicious behavior: LoadsDriver 1 IoCs

Processes:

pid process

664

pid	process
664

Suspicious use of AdjustPrivilegeToken 4 IoCs

Processes:

Todesk_437778217.exe

description	pid	process
Token: SeDebugPrivilege	4544	Todesk_437778217.exe
Token: SeDebugPrivilege	4544	Todesk_437778217.exe
Token: SeDebugPrivilege	4544	Todesk_437778217.exe
Token: SeDebugPrivilege	4544	Todesk_437778217.exe

Suspicious use of FindShellTrayWindow 64 IoCs

Processes:

Todesk_437778217.exe

pid	process
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe

Suspicious use of SendNotifyMessage 64 IoCs

Processes:

Todesk_437778217.exe

pid	process
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe
4544	Todesk_437778217.exe

Suspicious use of SetWindowsHookEx 1 IoCs

Processes:

ComputerZTray.exe

pid process

3140 ComputerZTray.exe

pid	process
3140	ComputerZTray.exe

Suspicious use of WriteProcessMemory 9 IoCs

Processes:

Todesk_437778217.exeComputerZTray.exe

description	pid	process	target process
PID 4544 wrote to memory of 4852	4544	Todesk_437778217.exe	LdsHelper.exe
PID 4544 wrote to memory of 4852	4544	Todesk_437778217.exe	LdsHelper.exe
PID 4544 wrote to memory of 4852	4544	Todesk_437778217.exe	LdsHelper.exe
PID 4544 wrote to memory of 3140	4544	Todesk_437778217.exe	ComputerZTray.exe
PID 4544 wrote to memory of 3140	4544	Todesk_437778217.exe	ComputerZTray.exe
PID 4544 wrote to memory of 3140	4544	Todesk_437778217.exe	ComputerZTray.exe
PID 3140 wrote to memory of 4144	3140	ComputerZTray.exe	computercenter.exe
PID 3140 wrote to memory of 4144	3140	ComputerZTray.exe	computercenter.exe
PID 3140 wrote to memory of 4144	3140	ComputerZTray.exe	computercenter.exe

C:\Users\Admin\AppData\Local\Temp\Todesk_437778217.exe
"C:\Users\Admin\AppData\Local\Temp\Todesk_437778217.exe"
1⤵
- Writes to the Master Boot Record (MBR)
- Checks computer location settings
- Drops file in Program Files directory
- Loads dropped DLL
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of WriteProcessMemory
PID:4544

C:\Program Files (x86)\Ludashi\Utils\LdsHelper.exe
"C:\Program Files (x86)\Ludashi\Utils\LdsHelper.exe"
2⤵
- Writes to the Master Boot Record (MBR)
- Executes dropped EXE
- Suspicious behavior: EnumeratesProcesses
PID:4852

C:\Program Files (x86)\Ludashi\ComputerZTray.exe
"C:\Program Files (x86)\Ludashi\ComputerZTray.exe" /NoFloat /disable_panel /disable_temp_alarm /HideBand /SoftMgr="/s --pid=ldsimp_1105 --sourceid=0 --softid=313627 --from=site --webid=1105 --softname=Todesk --show=3 --exg=1"
2⤵
- Writes to the Master Boot Record (MBR)
- Executes dropped EXE
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:3140

C:\Program Files (x86)\Ludashi\computercenter.exe
"C:\Program Files (x86)\Ludashi\computercenter.exe" "C:\Program Files (x86)\Ludashi\ComputerZTray.exe" /NoFloat /disable_panel /disable_temp_alarm /HideBand /SoftMgr="/s --pid=ldsimp_1105 --sourceid=0 --softid=313627 --from=site --webid=1105 --softname=Todesk --show=3 --exg=1"
3⤵
- Writes to the Master Boot Record (MBR)
- Executes dropped EXE
- Loads dropped DLL
PID:4144

C:\Windows\SysWOW64\regsvr32.exe
"regsvr32.exe" "C:\Program Files (x86)\Ludashi\Utils\LdsCleanShell_x64.dll" /s
4⤵
PID:1356

C:\Program Files (x86)\Ludashi\ComputerZService.exe
"C:\Program Files (x86)\Ludashi\ComputerZService.exe"
3⤵
PID:5020

C:\Program Files (x86)\Ludashi\Utils\dll_service.exe
"C:\Program Files (x86)\Ludashi\Utils\dll_service.exe" --dll="ComputerZ_HardwareDll.dll" --entry="OpenCLTestProcess" --wnd=131788
4⤵
PID:2080

C:\Program Files (x86)\Ludashi\Utils\dll_service.exe
"C:\Program Files (x86)\Ludashi\Utils\dll_service.exe" --dll="ComputerZ_HardwareDll.dll" --entry="NvidiaMonitorSizeOfProcess" --wnd=131788
4⤵
PID:2304

C:\Program Files (x86)\Ludashi\Utils\dll_service.exe
"C:\Program Files (x86)\Ludashi\Utils\dll_service.exe" --dll="ComputerZ_HardwareDll.dll" --entry="WMITestProcess" --wnd=131788
4⤵
PID:3460

C:\Program Files (x86)\Ludashi\Utils\dll_service.exe
"C:\Program Files (x86)\Ludashi\Utils\dll_service.exe" --dll="ComputerZ_HardwareDll.dll" --entry="UsbDeviceProcess" --wnd=131788
4⤵
PID:1452

C:\Program Files (x86)\Ludashi\Utils\dll_service.exe
"C:\Program Files (x86)\Ludashi\Utils\dll_service.exe" --dll="ComputerZ_HardwareDll.dll" --entry="DirectXVersionProcess" --wnd=131788
4⤵
PID:3048

C:\Program Files (x86)\Ludashi\ComputerZService_x64.exe
"C:\Program Files (x86)\Ludashi\ComputerZService_x64.exe" --dll="HardwareEx_x64.dll" --entry="NvmlInfoProcess" --wnd=131788 --server
4⤵
PID:4560

C:\Program Files (x86)\Ludashi\ComputerZService_x64.exe
"C:\Program Files (x86)\Ludashi\ComputerZService_x64.exe" --dll="HardwareEx_x64.dll" --entry="HardwareExProcess" --wnd=131788 --server --nonforever
4⤵
PID:552

C:\Program Files (x86)\Ludashi\ComputerZMonHelper.exe
"C:\Program Files (x86)\Ludashi\ComputerZMonHelper.exe" "C:\Program Files (x86)\Ludashi\ComputerZTray.exe" /NoFloat /disable_panel /disable_temp_alarm /HideBand /SoftMgr="/s --pid=ldsimp_1105 --sourceid=0 --softid=313627 --from=site --webid=1105 --softname=Todesk --show=3 --exg=1"
3⤵
PID:4004

C:\Program Files (x86)\Ludashi\softmgr\PCStoreX\StoreTray.exe
"C:\Program Files (x86)\Ludashi\softmgr\PCStoreX\StoreTray.exe" --softid=313627 --show=3 --webid=1105 --softname=Todesk --sourceid=0 --exg=1 --from=newinstall
3⤵
PID:4472

C:\Program Files (x86)\Ludashi\softmgr\PCStoreX\PCStore.exe
"C:\Program Files (x86)\Ludashi\softmgr\PCStoreX\PCStore.exe" --exg=1 --from=tray --show=3 --softid=313627 --softname=Todesk --sourceid=0 --webid=1105
4⤵
PID:1252

C:\Windows\SysWOW64\svchost.exe
C:\Windows\SysWOW64\svchost.exe -k netsvcs -s HpSvc
1⤵
PID:3884

C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\unsecapp.exe -Embedding
1⤵
PID:2348

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Bootkit

T1067

Privilege Escalation

Defense Evasion

Install Root Certificate

T1130

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Program Files (x86)\LuDaShi\360Conf.dll

Filesize
287KB

MD5
4731241f01bab84b3b10f844d057dbb2

SHA1
fe6190df827ed844a4507ecf01fc7b1cca0cc9f4

SHA256
bb82423b24a3ab1b54bea0246e3478818aee2c625cf84b5128ef282915a8465d

SHA512
cf0f0ae5369e91030502e546367893e9ee134ee27d0278a638e7c80e3c7fa4a254175665e3d27d326d65266afe350d842536877d1d4b0aef43b9b2d6068fa9a9

Download Submit
C:\Program Files (x86)\LuDaShi\ComputerZ.set

Filesize
217B

MD5
6bd43f579eb7643d7a7fc27239078ed6

SHA1
fdefda6369f9e3bf98369eb11993921d95b9c657

SHA256
7daaa1f3d726d8ef35c0ef06db7324760287815f509713a818ffa95f7569e1b2

SHA512
78aa72594331f31c480e8c47ec02891e2709ce9cc3ad0fcde10ba8f03db801c6e3e39138fe35ee85d4dfc02309608e0f87238e5b3a9830ad24da65d4abeaf4be

Download Submit
C:\Program Files (x86)\LuDaShi\ComputerZ.set

Filesize
415B

MD5
8d6aa0360cf3923616dec8659a9f62a3

SHA1
22afd795d628799537c51931039030e034efc4ee

SHA256
e2e3dee6e013ea1a767074c92df4cc845aa053e019dbdf31ff108485081b1075

SHA512
cedc4d2d9060290b87f4be1fa9161f6ee5433e0c3b61b8131a6fa9d3073f3b4391941d20cfa47ed5685afab3b16563b07c53f101c083822ddcfcb17f90d3ff8e

Download Submit
C:\Program Files (x86)\LuDaShi\ComputerZ.set

Filesize
547B

MD5
1fa2bf176ac0a6b13b117bf9b40a7d54

SHA1
b238e25b8751e62609ade35e3f91a7c35f5bd5c4

SHA256
f8f203d3d455710feb8ddfbe766d2e82a60a78449541366c8417953d7513dcba

SHA512
d20246615dc44a27b58d55b4f22d3327d5a9e32ef1a11652f0198b47fc89046dda263c0390a1dcf1b2067ab52942874e40934f6bd61fc937f65377f83c247b99

Download Submit
C:\Program Files (x86)\LuDaShi\ComputerZ.set

Filesize
886B

MD5
e6107cdf6cda0923df90a7001d46c606

SHA1
17e8929fb2a315e11c73e827e47ca556b9c24ad0

SHA256
6bb6659d73c057eb3de6ed04715d6849bf756a94a132cea8ae8b6112b8903986

SHA512
a1d4c12619ccf3ae2a80cc16f5dd3c448f81ae33689a9554356dde7406f1e382dc9a7a86c2e26f487d5b9782661219c8e3d59fa29b938b77c9be9990657bfc72

Download Submit
C:\Program Files (x86)\LuDaShi\ComputerZ10.dll

Filesize
780KB

MD5
b738fa3cc26287b0ff567f2185e7a1cb

SHA1
d44c59eb3fde51d7173f30512e9b55a9637f3ba8

SHA256
4f14e3f37020f39a38206c6d5a300c2188c45e05d9130f02a47d43d31b4a1fbf

SHA512
1303ed770f8aeb0e9767d944f58f5444aa4236327ebfd39f9e36bb039404960dadcef22065e5ebb4fc830dd06ff5fed96c41f9dc6a582d9b4bdc2b5693e2ad7e

Download Submit
C:\Program Files (x86)\LuDaShi\ComputerZTray.exe

Filesize
6.3MB

MD5
51e3cd56be3b54016d24845354d321f6

SHA1
5ac68d17cf2f1cce0cba91f53b0cfc9df4acb117

SHA256
5736e3cfe69f7aba73ed603b1a422a729ed923f9bee5449ada5f184e5cca9c8b

SHA512
c44d133077b8952be71abbf4531896ad71203d9c41f7ca36344ca323b1512cf727227de62e3c106383f88df91f818573e02e06b7ff71b611cc8796e7671aa18d

Download Submit
C:\Program Files (x86)\LuDaShi\DataMgr.dll

Filesize
976KB

MD5
2ed7532cc0ffcc67f948c8d1469504c2

SHA1
3e84b817fd88786c680dbf5587b24035c0a2846c

SHA256
d069c6509ba8608ab15f301f57016ba7dcce42e35201a4c2c4e97167e0ce54b7

SHA512
7173c8bd56a2f6e103ad1fe684c5f0bb8aacaac07f705e7646057fe9c44f1b483650ec89d5c048cdb8b73b99f38147252ee863651e6de11582c275f61d274665

Download Submit
C:\Program Files (x86)\LuDaShi\NetBridge.dll

Filesize
231KB

MD5
9d145902fb5b9a6da62ac85761434e31

SHA1
c817d77f59e3767d75cf5f5298d6b5711308f7e5

SHA256
98d795d55329b1057f4fd590468e648a8c34b620207fd9a0a6953f3e98d1ea43

SHA512
bbb3109bcd5ded909bfdaeb7f4f006fc5928a9bc501bad5ae8ba9805bc0d924a2c4da8bbd215480db936d663852abd9b0435fa241a40224a4cd93c4b7aff79a9

Download Submit
C:\Program Files (x86)\LuDaShi\Plugin\Basic.tpi

Filesize
2.1MB

MD5
5467928ba57bc06451313f9b5c2d2c48

SHA1
d91c2c8fc3a9cd5d2d21853ef4a5f6b1c4f01494

SHA256
6d97a803bac0d2c4a4c9c5fb8bc41be0fc16d081acc99a961a6e51e78bf0f8f3

SHA512
fdb9adb2627e1b0d05ad744dd3a1eb226785f645493033f2195093215b71fb948512100e4cb5569cc430b04b88011828dbfc27801b027190d9377bcd43bab4e1

Download Submit
C:\Program Files (x86)\LuDaShi\Plugin\ConfigCenter.dll

Filesize
758KB

MD5
2bc1a4d540ab92087d6cb25f4a2e60ec

SHA1
ae85d85551f63a8d75fcee60f26e0043aca395db

SHA256
2c6ffb4f0221577b73de559157be525473e78ab5e3e23ba74ae7cf271a1791a3

SHA512
2024c41895783f7eff0350fbc6f6ccb5d837930702d5fd468e5948c1b9ab3847f0225174d5e9038e613086199f521bbfb1c6446dfc132533aee4636343808161

Download Submit
C:\Program Files (x86)\LuDaShi\Utils\7z.dll

Filesize
1.1MB

MD5
2706693dda10c6cc79eed24c56d4e5ef

SHA1
4f34ef1bd49273a0d260b9dab15c73eb0ccb6383

SHA256
0edad8a1af22d5b97c1f324791c86243a6ecce7b5a9d2f30415af99aba9129c3

SHA512
7e7f7ae894528587ba33b6e10999549bb9a2ec2748b5662fa1b8806e5f4ce33af47507b3ef2954f2747a76b5b7c775c1cd671061f577c5016d1f8ba165bbe21c

Download Submit
C:\Program Files (x86)\LuDaShi\Utils\CefHelper.dll

Filesize
477KB

MD5
91d986307ab1e56f7f77710664cdb70d

SHA1
18fe10c7b1ec55632c03b9f06f9d881a022c970a

SHA256
d85bfd004e2ca8dbdfa72a4bdcb1510df76ed56d46ef5128500883c8c7f7c8fb

SHA512
480659e912ef3053a4542eb2e8eaa3a70df92569e9834d950d9d7ee07e8c9d740b59f1eaed90276454ab71211da41d2f3d945cc486539cba7be3a5c5c0a61e32

Download Submit
C:\Program Files (x86)\LuDaShi\Utils\CefRes.dll

Filesize
24.2MB

MD5
9bbefe9cad9a78601c66dcd1a0b23dad

SHA1
0adcea52658234a43ebe9415e2be782e1a673b96

SHA256
d08f714eda44528db314f12ecb7b69fa0cc76079c32dd6e377886c60870bd1ef

SHA512
03197f0636cfd04de2379febd76264b144330799425abc9803164d05022b276bb5f9b523cea40455fddae1cfcedeab32c7dd46002a82339c806016eb5c284cb5

Download Submit
C:\Program Files (x86)\LuDaShi\Utils\Ldshelper.exe

Filesize
897KB

MD5
ffbeadd5b92e067c75ec009492bdbc22

SHA1
d9f5a96f2a05f5e5dcdb747eabba0c2ac91c5d4c

SHA256
b573bb9e46b68496f8b7348f8ba7419e7c24686ba14ab953a4d25bed39c96a48

SHA512
551d759550e54bbb22299e3424769431388011d48a72df88a7bb94d9f1e9a77eb4f02775a4ffc2384382f0e1ab9a21581b20d5fed359c53aabc652e1c17fb8c5

Download Submit
C:\Program Files (x86)\LuDaShi\Utils\arctrl.dll

Filesize
551KB

MD5
5d5ff285798b4fb701632f92a598142d

SHA1
709d2346fd44ae3171afc065589f0db547b49eaf

SHA256
d9dec9914a31e6396349186659c6ffb351cfb0766a8b5f9108fbaa41c92462d5

SHA512
456a41902614f7c838c1cf68a96f551fad428629ac8f0738091f4b9ce73b3862f63ff95d6856f93ddff64578d05998aa0927c29fd03d94b15fe78b121692b942

Download Submit
C:\Program Files (x86)\LuDaShi\Utils\arctrl.dll

Filesize
551KB

MD5
5d5ff285798b4fb701632f92a598142d

SHA1
709d2346fd44ae3171afc065589f0db547b49eaf

SHA256
d9dec9914a31e6396349186659c6ffb351cfb0766a8b5f9108fbaa41c92462d5

SHA512
456a41902614f7c838c1cf68a96f551fad428629ac8f0738091f4b9ce73b3862f63ff95d6856f93ddff64578d05998aa0927c29fd03d94b15fe78b121692b942

Download Submit
C:\Program Files (x86)\LuDaShi\Utils\netul.dll

Filesize
1.9MB

MD5
9dd742a37e5a1415d7b5b0974cdf2a00

SHA1
982f419dc699c88f9ceb16b85755d1e3d00cff01

SHA256
eeaf89982987a985ffb27c216d3eb28e9be2ab6ed1f1f77d678b629d6a98de2f

SHA512
521d061bf83b99329927166ed523b55c9a8277ec4e545bed2be86c7f1329c6d06b4621be2dbf7460aa8da02f20ca5324aef4f5d0cf25072039a36e0524d4be0b

Download Submit
C:\Program Files (x86)\LuDaShi\Utils\product_helper.dll

Filesize
728KB

MD5
f63f0a084ee462e88c1072cc1836fcb4

SHA1
dd581a5c54a0e066b7006dd2c4657d3fedab9ae6

SHA256
4e345bbf2021041d6d5f333abeb91e5751538110754861818d8a7c202befcdcf

SHA512
c5b37b40e7b7271ab94309e94de707135e1e109e511a7dd510913d889f17e4688fa1c4e6247e328fb652a2f547ee6939c3280524ee0379f56ea95439f2e29d58

Download Submit
C:\Program Files (x86)\LuDaShi\Utils\product_helper.dll

Filesize
728KB

MD5
f63f0a084ee462e88c1072cc1836fcb4

SHA1
dd581a5c54a0e066b7006dd2c4657d3fedab9ae6

SHA256
4e345bbf2021041d6d5f333abeb91e5751538110754861818d8a7c202befcdcf

SHA512
c5b37b40e7b7271ab94309e94de707135e1e109e511a7dd510913d889f17e4688fa1c4e6247e328fb652a2f547ee6939c3280524ee0379f56ea95439f2e29d58

Download Submit
C:\Program Files (x86)\LuDaShi\computercenter.exe

Filesize
1.2MB

MD5
302c2e096402ff92c4cd1c1ef1dedf5a

SHA1
4a4e87f90f11fe64c54bf0db820daaa3d3ae535f

SHA256
1508adf83b1a0bd3230160c7c1c28167f2d3218b6da554511c5d8527ba726ea9

SHA512
ba714a9feddb557c9510fe7d0d6ef7a78e03244245102838db63d6ee5c4d9ef894eff1e56cb998470455844a97d67b96860ac99a9fdbe339807a8003cea639ef

Download Submit
C:\Program Files (x86)\LuDaShi\deviceid.ini

Filesize
580B

MD5
51aaa8305194cb3269fddfb1d72a2ccd

SHA1
df2e686abbb14148ce994570f224c8d9eb5d65be

SHA256
58cdd18fc7b5b950cd522935a2e621cf11ff33056d7be16a76890704de0a716d

SHA512
161ba8dbf3ecbf5f44909f5d99ef6c122919220af4977dc673bc2129a2c03afaf3b45db363782cf82d0da7e8740f27f121e2884d88c01f85c13e9f831badaae7

Download Submit
C:\Program Files (x86)\LuDaShi\game\GameTray.dll

Filesize
457KB

MD5
39bbb7af971f719b5b2aea41defff699

SHA1
37483ba9fb0bba070a11a7e81bbcbb02b624edad

SHA256
16ff1a3abe13bb4f406ebcb1badcd90d29bc1244cae587b8b560c13e4b6b9af8

SHA512
2f2db044bfe42f6c3acc3acb3959db8a739b0057b43b1a920c6c5b899c96368333e799f4106531a457a383d32d892599c53bc7efc6e1856d2263bd1f0f617de8

Download Submit
C:\Program Files (x86)\LuDaShi\netul.dll

Filesize
1.9MB

MD5
9dd742a37e5a1415d7b5b0974cdf2a00

SHA1
982f419dc699c88f9ceb16b85755d1e3d00cff01

SHA256
eeaf89982987a985ffb27c216d3eb28e9be2ab6ed1f1f77d678b629d6a98de2f

SHA512
521d061bf83b99329927166ed523b55c9a8277ec4e545bed2be86c7f1329c6d06b4621be2dbf7460aa8da02f20ca5324aef4f5d0cf25072039a36e0524d4be0b

Download Submit
C:\Program Files (x86)\LuDaShi\softmgr\PCStoreX\PCStore.exe

Filesize
2.5MB

MD5
b0480b9fbf64ffc2e19394067e40ce2e

SHA1
6658e3a8825bab770bf1feddd460da9240d5b5db

SHA256
ee60ea24af12c3415a6f612584397b7432f4b1c2d5663a04e57a4b0301e7ae06

SHA512
4028be4a15e473e8539d053bb359296687b61705bd9f104105627ca73ce21e6009980b2c3563b096378b5bb07503980000cff54c00a665cd87fe81319fb6e507

Download Submit
C:\Program Files (x86)\LuDaShi\softmgr\PCStoreX\PCStore_setup.log

Filesize
6KB

MD5
8dc6269c125ba6f506fd119966b3f623

SHA1
264905a013ab06725ceab86faeacf798bff5dd5c

SHA256
0f17b03bd5d45b65dff2dbb916f736693f8af84eb65410a9cab919b0ede7336b

SHA512
9e1eaf57935893e48864c6bcb9fa03b06626abc96c218eed93d7104aaa1f1d4dce43b4be29337e6bcc797b4ca3107e8232fadd933dacdea23ccafbb6836b970c

Download Submit
C:\Program Files (x86)\LuDaShi\softmgr\PCStoreX\StoreTray.exe

Filesize
6.4MB

MD5
1e2fed80275cd429289cabaf10e1113e

SHA1
4a15e4db3a46252bdc6a466ba8cb9261c5e48c77

SHA256
8cc4680fa3941958069a37b5f299a0bd71913baaa381740c57f8cf520bf66090

SHA512
91cb9228727a69f9a4797ef291a816d7829662eaac2d3c0cea51614a130fedb96e9e82a002cbc81aca77a1f39d03497a23ec0ecbe048be7af561773c7c4b6c2f

Download Submit
C:\Program Files (x86)\LuDaShi\softmgr\PCStoreX\Utils\Cef.7z

Filesize
8.4MB

MD5
fdd9d37bdf4a085a8852e64018565965

SHA1
40b70a0d8452201e0752723ee239b0cd1896e50f

SHA256
48166a0e3f402dddbba6945b1183fb2a745615493d6d8b9bf98cd1c86f4a7bd0

SHA512
1b589dbc2467513676eefdb93b50f0fc232a93d27b95fe3cc058ea714573e1530699bde7b8eb61cea8ac8c64df2f791103ccb55fda4cbc1b3005c70b6de10232

Download Submit
C:\Program Files (x86)\LuDaShi\softmgr\PCStoreX\Utils\cef\CefView.exe.manifest

Filesize
1KB

MD5
6980e65828c9584dce3f5c5b4aab5a23

SHA1
e56dba4f49f8550e90027f216002c3d1f8d2348d

SHA256
5ae59e5db966c00655abb9d184cf27af44efcc1faebd54081e169bfca7e9de13

SHA512
109c684f8f9d1dd705fd267c0bf64e1357ef44e8b6791b91b2a56c5d35cc0bc3f9eb28552cd4771a0f4b0bd8611eee899b948a7afcb16c37601dc8e3d0fce973

Download Submit
C:\Program Files (x86)\LuDaShi\softmgr\PCStoreX\Utils\cef\d3dcompiler_43.dll

Filesize
2.0MB

MD5
1c9b45e87528b8bb8cfa884ea0099a85

SHA1
98be17e1d324790a5b206e1ea1cc4e64fbe21240

SHA256
2f23182ec6f4889397ac4bf03d62536136c5bdba825c7d2c4ef08c827f3a8a1c

SHA512
b76d780810e8617b80331b4ad56e9c753652af2e55b66795f7a7d67d6afcec5ef00d120d9b2c64126309076d8169239a721ae8b34784b639b3a3e2bf50d6ee34

Download Submit
C:\Program Files (x86)\LuDaShi\softmgr\PCStoreX\imageCache\Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030.png

Filesize
761B

MD5
bd8bceb9ba24b18c86e0b1046eac769a

SHA1
5949ffb1f7fe7ee80aa332515c77de9e30120f28

SHA256
befd9222cc2acef3f364c54499a53b0a6731fd9d15746d61d8421496ff158fda

SHA512
4c04e6503f990166a45eed87b4430cb5bd848c001f4e39b4550b1147a599570d076a8c96f61a8ce40bf0649e2fd7eb27ec343dd4305f47795d9abc4fcd6e5298

Download Submit
C:\Program Files (x86)\LuDaShi\softmgr\PCStoreX\updatecfg.ini

Filesize
583B

MD5
4abfdf64f4e0598bba7980c8cb8eb7ad

SHA1
db66e4658d7e4bc860bb5fe34290a2c28a76385d

SHA256
2f0556dcb2461ea8c7553a466c8bed457c60a6521b4111fc1bbbc908f8d57f18

SHA512
e64ef56dc076c2096a19a0b4f980bd09a620a5a2d6ffa74fa320729740192fe531e21405ad7bf39397e93425762dd8d062146e22a62274eabe0dc7d81e609dbe

Download Submit
C:\Program Files (x86)\LuDaShi\updatecfg.ini

Filesize
11KB

MD5
d3762796d47863b6db70edcd7724d04a

SHA1
224a6ad22114ca66636df4bcde284e7de59af646

SHA256
bb90eca510c656bdd9a8c93e47b3ad52c59080297b0fae69e8a7cde0104f1be8

SHA512
3c198effbc5ccba44ac6acca0e0a968b661875be4b558af79a495e375fc389e93f2f9bab1a5cd7a7ed94eb3f837e8bfe5a16f3204255e57c2222a9b3c8b92caa

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\360Base.dll

Filesize
949KB

MD5
2b8821999eea9cd0ac7572d2a4d080f6

SHA1
53863d14ad64a7baea003a9309da874f79d53bfa

SHA256
b6acbfad2af31852e8803d23997c2e7083bec4c46919530425fa10786fb3611d

SHA512
a1d9375ef2671088a47a5b5746e64f8cb9fd8fecfc73590eecd825ad68597b2e81b6bece10bc91d9d1b7d678621e5fd814fab1f95887985e3c5f5e25cfb2959d

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\360Base64.dll

Filesize
1.1MB

MD5
2a127e5724e60eb59724cfe7d67559d6

SHA1
7791fc41cb3e88e9b951db2a4b374d6466266093

SHA256
b95e1a466c0b5a1f4a2203f639f764fe5cb55b0f80cb75764e9ccfacfdb0dd48

SHA512
ada24eafbe74012d5ed90bf816d11c5b2a0a3d3416c78dba170f438ac14d8f94363fb74082ec44f5662ed31d21edbdb03ec179adb3173735e007dc60e8106355

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\360Common.dll

Filesize
301KB

MD5
b2e95f5d8b0602398910aab331513e48

SHA1
2042be353a55fa15d8c5c4d375d6588fc905b43c

SHA256
cf0cdefb95a74c7a3b3a4f61245c9207a9672262764adb6e706e5a129a8bb0ea

SHA512
05eb9badf63690be77cf6358e1e38e7a1252e51548874bad0c8a9ad1236be6458a0eae213c68f96c1abe7eeb10384e947e5bd7a08f8053a421802f3d22e987b2

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\360Conf.dll

Filesize
287KB

MD5
4731241f01bab84b3b10f844d057dbb2

SHA1
fe6190df827ed844a4507ecf01fc7b1cca0cc9f4

SHA256
bb82423b24a3ab1b54bea0246e3478818aee2c625cf84b5128ef282915a8465d

SHA512
cf0f0ae5369e91030502e546367893e9ee134ee27d0278a638e7c80e3c7fa4a254175665e3d27d326d65266afe350d842536877d1d4b0aef43b9b2d6068fa9a9

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\360P2SP.dll

Filesize
681KB

MD5
aa4cff7d5beda6879e97720f8647f2f4

SHA1
145669bb813e3d169462ba60e622c545bd2c8266

SHA256
6fc2dd846615e2490de1041ddd99fc8998c0166dc431657dd7c237a538b72abd

SHA512
6f5a932e2dd94e7db949da0dadf7430277a516a1210cc2fe8dfc7400e9a8fca91593c3eff804abc284f11f09edec9a875c2e1924878e6d7c66cc13f9f85e5f98

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\360net.dll

Filesize
472KB

MD5
e5060848f4dccaacaf947a931577e976

SHA1
c2b0532c5d1ebce2e6501d0ca51369f2c6a9ece6

SHA256
413d3d985eacf2c88d4d3b8c744c72626ac26a74e9b9d4f6efd44ac3e7b1b11a

SHA512
eea0414151f6c326e1ae2e4561cf880313cc3df59838222fa9afbf84db8731da4585e67eac2d3ee8a88e52830a204dd2fa89b768e4c04d70c56c93e9d9addc18

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerMonZ.dll

Filesize
5.4MB

MD5
bdcc696f0aa582b5b9f522872dafd2f1

SHA1
eff1ecf3adbc77f40f0e15fab4badc87b4e6fa55

SHA256
b050d0512465ed604d8f42d865501bfcea3e7bb7e4547f4f2c616421ec73323c

SHA512
0f542cd6ac6dd528933bec4941adaa34e63c262fa7fde696adc354663e734dc632cd965d608d7990809d5f940a43e83120f8e9555e33e4c7dd10c69793f4b874

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerZ.sys

Filesize
47KB

MD5
8a973be665923e9708974e72228f9805

SHA1
34b2986f1ff5146f7145433f1ef5dfe6210131d0

SHA256
3f3684a37b2645fa6827943d9812ffc2d83e89e962935b29874bec7c3714a06f

SHA512
b7faddbeaab9f28000447cd35a2891ef400eef0b1f2ed37030c9537978c8d50b6daa21288318cd62ec8e174f85793f9503f9806b8610bd1b658c529a56920cb5

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerZ10.dll

Filesize
780KB

MD5
b738fa3cc26287b0ff567f2185e7a1cb

SHA1
d44c59eb3fde51d7173f30512e9b55a9637f3ba8

SHA256
4f14e3f37020f39a38206c6d5a300c2188c45e05d9130f02a47d43d31b4a1fbf

SHA512
1303ed770f8aeb0e9767d944f58f5444aa4236327ebfd39f9e36bb039404960dadcef22065e5ebb4fc830dd06ff5fed96c41f9dc6a582d9b4bdc2b5693e2ad7e

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerZ11.dll

Filesize
131KB

MD5
ced86614c84144d295a3b69983249308

SHA1
f606e46ae4b8fd77cd6e230193b86953f79ef1be

SHA256
9f7cdee3054308cabf448ce66bf3b1992a200cfcce29bde6bb535b215a00043e

SHA512
ca0ee4dc67c029c55278020cf66c58ca39220fd23804b3009ba0af1db6756cc86cf9d82867c5a8508923e22aef99818b6259e851518620f6bfd6ed84dfc9ea2e

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerZ7.dll

Filesize
1.3MB

MD5
1168af9eb3cc467dfbc242bfb97309cb

SHA1
6f5ad9e06172a5537500a2fba405ae8d9609ac63

SHA256
c366b15b706e684738719124f34e928a945606867c53ab37361a4909178f8a7e

SHA512
3a400f61b0b19ce31bef0991b85fdae9b23681aa29eddb964176cd935b979287b991fd63c8035d122bbf206b5ce36a1ef2dd912751040bd623d9361f38653509

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerZ7_x64.dll

Filesize
1.7MB

MD5
cff22f5657db3d15a2628aa0c920687f

SHA1
0e6b7adec7b91cdc4dad06635d479a90c3b04280

SHA256
6e9ce095da5f97365537424795de99faf9d5f1cfc410d739af0f7def19c89727

SHA512
cb2e420d9d5f9b6ccffef1c898fd36271d878d69ef4ea3a003cd4b403a4f84f4e6e1be079468d6c7b6b411b1cf6e2b53a0596b44135bd75f77d52b72c2c8c34a

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerZHelper_x64.exe

Filesize
179KB

MD5
bd2ac84785c7b4c98d3a26142a4253ab

SHA1
ea4b459dfc871f96237df65a5437158d6ac3a2e7

SHA256
8db9b45d0f789153c88806c781d631f30bad534a10375457c9fdc5caabe598f1

SHA512
ccd50b509e107e2f767f989e13f01e814c6bbfeaeb1fb2170f9b0e33f3a3cd1f1720fbff0a44337c91d77f135737611738869e5f2a90123293e0e042ceb843a3

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerZMonHelper.exe

Filesize
714KB

MD5
b845e1de0ee30c54b974f4177d0a2e5f

SHA1
eb618ae218846787097002c049f1dd52cd7e863b

SHA256
1fa06436152063b23b331bd4f169000e7f70da5a0e6462221b4fa45dc5a8d3fd

SHA512
7bec2d138639a23725af0069481b01c70409f79e2464f207083530afd1bb0ce356aeb3fb9eda5e79e743755006ad1b8fd93ca0429bf3a6ac18202ed6a73647fa

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerZService.exe

Filesize
1.5MB

MD5
a58db24695b473ad2e1ffeaf6976ae4b

SHA1
2b79f6aaec560ea0e63383828c82893d01c19764

SHA256
44bdc4086a28d943cc8bb6b2c8d1398f76e86c37bef19f2ab4d8bd6e404596d4

SHA512
eb5aa5ca66660c425fdf40ba123cdcd6b6284e558fc9dd23b13a0d960fef9e9fa163afb7dce8cab03f5ac025875f0de81df030c392305eed9323e66e95575928

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerZTinyTray.exe

Filesize
1.2MB

MD5
a88299432ba223e764980ebc3c4928d8

SHA1
fff7ea24d212cca91b24aefc384d3124a900541f

SHA256
19937055c7c6aec0001f86da9cedd4c77a077fdfd6203b3a167e6ac4f23bf8c7

SHA512
356bfc59c51f02ac6306d278218418eefb4bd3da30429570200a6c531a35e696c83428c5498ccb01311a84c84fe55d024121b5f5272826213d03b86b8ce0a7af

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerZTray.exe

Filesize
6.3MB

MD5
51e3cd56be3b54016d24845354d321f6

SHA1
5ac68d17cf2f1cce0cba91f53b0cfc9df4acb117

SHA256
5736e3cfe69f7aba73ed603b1a422a729ed923f9bee5449ada5f184e5cca9c8b

SHA512
c44d133077b8952be71abbf4531896ad71203d9c41f7ca36344ca323b1512cf727227de62e3c106383f88df91f818573e02e06b7ff71b611cc8796e7671aa18d

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerZ_Accelerator.dll

Filesize
177KB

MD5
d4ad9eb3ce065b3e5071418e679710f4

SHA1
ba252459d96902a8a843b999124344f113852dca

SHA256
4cbadc06bb703181c26fab7b1392e8515a38661db47b5366c62f1f812f506f64

SHA512
581f2f24ec68aeaa897bfcc2756b29c770eb6ef0be4dfc52bd59f4ca306fb51a4ce980a33e4dcfe4456eca10e13007a78af5ffeb33c6c1463038a09e717f33ae

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerZ_CN.exe

Filesize
8.0MB

MD5
954d545795daa5ff615a51bfe0ab5020

SHA1
66a6f53462e2dd4656039821b86fd97d2767c8d1

SHA256
8850e119b863325592f5d7dc1c35916365c637e2b812aa639dda203f214eb8bc

SHA512
2a90a02fc8e8270d2a42b0509a6b505063ac0455c03fbc83db21245316faae983e78466ead53a5832122c7a56b3e910312bc17d268530ba3025b5434419a9d2b

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerZ_HardwareDll.dll

Filesize
10.8MB

MD5
79286fa04bc93b9a69d6e247a74e1133

SHA1
4a6b70e291ca59203cf71a8900253eca27850d0e

SHA256
1975f068591430a2e01cdd05da2ff5e2c4d4f1126f76c4bbc378b8bd0eb763ad

SHA512
2225641fbfb8b7167f6509ee0f6787e98884add16ce190442aebf3d8881aa7e2a33b19fe94763e735fecb464de7aeb329ad557a14c5fefbcd29cb4a66aa821fb

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerZ_PowerSaveDll.dll

Filesize
392KB

MD5
8c41e40ef94188a789e8db2daec04579

SHA1
6f6fd41957da2d91b30d8b4c83b4008fd9638158

SHA256
c1949b6c7009887317fbd597a36f651d2d356cd4e7c8db07f750107fd16587e6

SHA512
60692bcd617317ea4201769aaad25b98733d12485991058f79ec4731364607412936fe530193ce699d63199230c7d8b32119615b19b4d67ff36c81512cf35c03

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerZ_x64.sys

Filesize
49KB

MD5
6ba221afb17342a3c81245a4958516a2

SHA1
7c996d9ef7e47a3b197ff69798333dc29a04cc8a

SHA256
37d999df20c1a0b8ffaef9484c213a97b9987ed308b4ba07316a6013fbd31c60

SHA512
31bc500ce58a3774ffc47a5a84ce4a1c6195aed5f9078a116b6ef590f37c2242655b2ecce4e292b523f2aebb5dd60180b437fa1ab38f3a35f8878619ec8220d4

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ComputerzService_x64.exe

Filesize
1.3MB

MD5
a48806aaed1245321765bade85b24449

SHA1
320ee7fcad2873b03ec120555f370991347b9295

SHA256
23f98564956f29073dae134bb3fcf7176199316a85c328d3003dd9126fd67e7f

SHA512
63d0e422962d608f52c7dc4d5ca5c770d399e45fd29fb4b8589f2a29922b88738f5dc035fb393c1578db9b22f2743dec41b0b17580bb85fdc55eebcc9d783e56

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\DataMgr.dll

Filesize
976KB

MD5
2ed7532cc0ffcc67f948c8d1469504c2

SHA1
3e84b817fd88786c680dbf5587b24035c0a2846c

SHA256
d069c6509ba8608ab15f301f57016ba7dcce42e35201a4c2c4e97167e0ce54b7

SHA512
7173c8bd56a2f6e103ad1fe684c5f0bb8aacaac07f705e7646057fe9c44f1b483650ec89d5c048cdb8b73b99f38147252ee863651e6de11582c275f61d274665

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\DataMgr_x64.dll

Filesize
1.2MB

MD5
320735d39993e6f6d439fabaed759e62

SHA1
b50cd9156b5e114859867564bb05fa0c013359a0

SHA256
7210077a45b2b6d2a41ad3bfbee6c8464bdf334b9ef78e692c8893fce2f15b10

SHA512
2959b76f5950c05802fa6106c3fbd5f0d5dad3f68785b2fe0a326176acfb2ac8705a01703c320b6ca1c6564923769e686ea8f2314e688e838ba4d77f36097927

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\DrvMgr\360NetUL.dll

Filesize
241KB

MD5
240e9b9b2b3f2a134070b7d5084278d3

SHA1
a39ce3213f364ec8435833afa36619e6d6fd24b0

SHA256
003e2f8225ae4bfe3487dea759c6e44176fb96ff89fb162904c7c923e9c78720

SHA512
2cdd9cd946b4a6df110f22197290090c1b4b734c9b9120e6403866342b17c50cd8a71d566ff0f284a03b5202af9f06248de71da1314486dbed58a64225cf5745

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\HardwareEx_x64.dll

Filesize
470KB

MD5
25a737d286aadc73547f6fd6c37b3dc8

SHA1
cd345f12168dab026fc1851f57098569c6dd48ac

SHA256
ebe19080978f52eb0b874affd25acc07d959f9a1913a6b0e1fcf913d42598327

SHA512
69cfe72da90db39afcf2124310a44bade066e59e67a4cf2719b9af00ccf5b058148d3571e5351bf88873ef962ac29247ebac0a6f9c812a1f37e557510536dde8

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\HardwareProtectEx.sys

Filesize
823KB

MD5
17886cea8ca119d81c18386db2d60dcb

SHA1
f32ee26e2f714274cdd0263c5d283ba7acaf8556

SHA256
0ec17f2a91a39ac5bbfcfedcbf2b2d6203cffd6cb4acff1100a17e7947143aa9

SHA512
c6dbf58f3f655f41a0488f0b508ddd9b29963c9259b8b5ae6cd6b7ab65a7715715f05a0fc3bd91744b69dd5be30decb788b61c1ff8b2c91e32ece98a9b97f8c1

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\HardwareProtectEx_x64.sys

Filesize
1.5MB

MD5
e0214b87cfd2696be7251a9a172c5c3c

SHA1
32b14f8c830e9c2be4ea5e6a6306e8b03d44f15f

SHA256
e7387e12a0cddaa29a6397f226fdf21143d4c5419500cc614c09a555bb3bda00

SHA512
16caaa2af15504463963373b8e14ade78d8024e5e4b4d9a821dcee1441baa0dc1f38e06d9bff9d2488436ac09d1fb12865759e79e3ce75a57fab9ed5bfdfe10e

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\HardwareProtectSlim.sys

Filesize
717KB

MD5
bc999ef2f36ff70d992fa3b67e514cfb

SHA1
304dd7e223ea1e18e983360bc9dd003985ba1b58

SHA256
b78ec94f6512f32d431bafb074cecd8480210ee9b9b2a40eb889414e7f7a0423

SHA512
f580ac422ccc8e1eb44b128b16c013551f52a269bb2424f394fceed43d4552caad3f7a32e5a1419bcf5a7437013838a84f62ae31f2ead651ddcffe5d94f9e3eb

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\HardwareProtectSlim_x64.sys

Filesize
1.3MB

MD5
d2840a4a5a86bf1047724cc06b37a2e8

SHA1
811b7ec3b686393827d47b67f30b6cee1b6b92e6

SHA256
b090e6fbea1a7260b195ccf58564719405efadf7b3b5eb80d1564389f04c9bbc

SHA512
90cbb26c020ddf2583a9edfeaf52c9350629996af9e473b7fcb4bff342019095d847450455ad3a88087030e3b12bca36d4f5f2aa1a0b8ef566e6f5eea79bceed

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Hardware\hdw_disk_scan.exe

Filesize
1.0MB

MD5
0b0de3a89bba1942bcb8fb4d2a3ba983

SHA1
3ac4760c3b5f56ec640bc56c51ff2ade064ace26

SHA256
ef5c458ffcc3dd9c34fa4bd14dea60e3e43186295e070a8feab11d9a4ce38168

SHA512
8f4b9132897f788197734e00fbcf3b07dcb2db5eeaf870563b8cd800c35ae36d075fd6402220d7bf591e77741016e4ba83a5f7d58269874322c17cdfa35def1d

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\LiveUpd360.dll

Filesize
587KB

MD5
8c6e07f98390f538585cc1afbfb0ec64

SHA1
08b82d428e80ffe2f0b8466397ddfd0d5bb92e80

SHA256
fdc0e8ae03d75c8a37225b06fae4a8d0414a9df2db02f62fadd082a490c81bda

SHA512
9fb439913799dcbbe9d1771f786f1614bd95fec49a8a1124dc7ceabaa30f93dff74d71735e4f6ad68ad39a2d761d27c22cf713cea4079d69c60fb1a13fa28bbb

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\LiveUpdate360.exe

Filesize
648KB

MD5
e57aaeb774ea4535de51d5600d022e53

SHA1
c135153e9f0e07d73c035047be4e63aaad99a100

SHA256
62cc143284de17881dbc96e91a90665be56c3e402024eb0f2a080f6ae0df2749

SHA512
24d3602f546b6ce23b4e8b261aa7eecb0c4ffe00f8e03b2d674d7cdef918dce7ad1e45cd32a512ce507c83b5dd2950a0b82a6219cb232d692805c9efcefebac5

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\LudashiProtect64.sys

Filesize
145KB

MD5
8d4d4636dab931f3f2c0356265d2356b

SHA1
925c7a4e08acba16c55988a20eb11010dd1ea033

SHA256
9c88cdc95ec81d887c17d4436841202a2433cba467f8ada6aebfa8b0949e4364

SHA512
429d6469349d711dea57c5632d56aa9e9b8d0bc073da789ae7633a8b9905f2303d50fc9cc42b3eecf1c3be3de62657a7b17968d3f2f0987f43c65539186236c2

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\MiniUI.dll

Filesize
892KB

MD5
9e963b8f83da38385c6fc7fc6432f8db

SHA1
cc2dbb17bb583161146095dfb1dd0e3a5e2e17e2

SHA256
42955f9128e2c430cfc6af454b151e6bb45830945d39fa428d18143c2b65cba2

SHA512
5f09c0b164a04831d9304e1c189edad8388fd0710bfe5df7f97e87d5643e487a640ab177375e95c3000c1ad6d80e1b16b77c08267e558f838d7a5f31b4cb4fd1

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ModuleUpdate.exe

Filesize
649KB

MD5
b40bbcdccc2381ec779e4c421456697b

SHA1
abcee3a866a1f850b069e991e7584240bab2d5b8

SHA256
963548e8bf223d45fa530efee8fbaea8cf6ab47c5a6a9a9ecc3a295dc21522eb

SHA512
594f3e8e6cb9799236cbc364411b7247c2ce409133e472502aa1f54b0d9754cdcfbc39c8e1d6eaf0dc2900d125b3935fb8439584458dda1e24d5a2f24c0cc3a2

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Monitors.dat

Filesize
43B

MD5
6680554ea775295aece8a7d482a391e8

SHA1
1900992a69385aa53221c61b0a024b8fb6de8a71

SHA256
a5a34980b5040eba26db728b149ca2dfc024dc310f3309538e30315e36553724

SHA512
e83dc8118ab953ca0b8860a508f0186c80fead668841f8052287a41b956824e3943bea73aae9df1778f41c2ce9b9db5bbca7cfc9e8d4b54dfcf2e2bc9a6e9789

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\PDown.dll

Filesize
224KB

MD5
5e22d9a7d0f556d7ea3310f3d995e376

SHA1
aafdb87a76edd236982013a6a349ffd276c64178

SHA256
5b67db19ec17d441724fc06353332c61b0e3b4412d71ac5418ffd0225d44b88b

SHA512
9bcf005971f4916a0cbd56c97ab476cfde59d401d37055fb3776aab37072dc86ab40d65ed9881d5857fcd98542185a67cae89137ebdd40c829eadd332525f605

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Perfmon.dll

Filesize
343KB

MD5
ab8ed36d4586424ef9e16699819b1dc4

SHA1
449875f827cbcbbdc421dd1a8ee503a2a91164b7

SHA256
0e884c87d9c228ef47ffc364869d7ba604dfac3bd258f3fdbf8266631fab4ccf

SHA512
25f7a31818847861af494662790cb229c6420b6b656e5f0164c7193718f86ac2444f5fd238646cf2934ce1aea73c0547826a7e9d1aa6a01cce81a98d223d2bd8

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\Basic.tpi

Filesize
2.1MB

MD5
5467928ba57bc06451313f9b5c2d2c48

SHA1
d91c2c8fc3a9cd5d2d21853ef4a5f6b1c4f01494

SHA256
6d97a803bac0d2c4a4c9c5fb8bc41be0fc16d081acc99a961a6e51e78bf0f8f3

SHA512
fdb9adb2627e1b0d05ad744dd3a1eb226785f645493033f2195093215b71fb948512100e4cb5569cc430b04b88011828dbfc27801b027190d9377bcd43bab4e1

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\BrowserBasic.tpi

Filesize
1.6MB

MD5
9ce5a7cc5a58ce05f3d1300865741509

SHA1
87e8436cfd3e330073313f2e54ecc23e631fbb9b

SHA256
417c532e08e7eef04a76d0350d470d952a8edfab6d2575a8a61b61927da3aa15

SHA512
9ab0aa77e6de0fd97a4e0887ecae366fb40d5c371d3f9e93804782ce54533b2bcfbaedda7af5e50bcf3ab67d1fb303910c5e4a18a297b965c1929bc0d2c097e2

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\ConfigCenter.dll

Filesize
758KB

MD5
2bc1a4d540ab92087d6cb25f4a2e60ec

SHA1
ae85d85551f63a8d75fcee60f26e0043aca395db

SHA256
2c6ffb4f0221577b73de559157be525473e78ab5e3e23ba74ae7cf271a1791a3

SHA512
2024c41895783f7eff0350fbc6f6ccb5d837930702d5fd468e5948c1b9ab3847f0225174d5e9038e613086199f521bbfb1c6446dfc132533aee4636343808161

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\ConfigCenterStub.dll

Filesize
459KB

MD5
e53a689291129e6d575887bb55372264

SHA1
c1ccdbe625b1121c81bbeef09553f07f79e84a26

SHA256
56d660dd38f1f51e37d2cfd04a50c570d0f08999fe4a270f59f14a768b1a2d17

SHA512
ca79111b3c3861192a7af7674a02a10226fbb98b64b205afca88c1d06a11e19027eefa4713f2018f433e34977e76602ef4cff795364d5889d05903e55309d054

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\Misc.tpi

Filesize
794KB

MD5
8c5c21d305e6aa9674e1119a445a2b19

SHA1
0b8efa2b863dc9ee89cd424899bc049144222db2

SHA256
cfe64766c9566951c1d2aa58f128923d22b0000fac5c75e9183604b4454fb0f5

SHA512
5c2638922545a751ead4fe2a39041db6bbd297a87fdb8399b38a9719e2acb5ffb4bfa9497c7cfca2b4127626377d2eb7d7be76d1b7d1035dd8c60051d55fde76

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\NetShield.tpi

Filesize
698KB

MD5
33ae3fb1d4079250c234732375d18239

SHA1
0935ad265454ac61ce8042f20d469bd46b6f08e9

SHA256
9d126a63ddd9b92e4400bcdf4dab58f3e8fff9bdfaf442193368cb516e9a65e8

SHA512
6afb14a9f531308f18dbd296dbd058a9863a2e8b76de53ef24aa3d445fe29f85e273cf430e889c2655131187cb450edde493ad23d8d0b902c2ce01c4a2cbd09d

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\PopMgr.tpi

Filesize
1.2MB

MD5
9d19086362fae72229291b4daa8b6acb

SHA1
6cd3a88090137fc2b60991a2a8e56526f33d31e2

SHA256
992859156e72035be5527bbefac086919815f7546ff8f89c7c5da65a5b6c72ee

SHA512
2284dadc729ca618437299e2803959201bc2743f83ae156ef1246ab9e6fe9f759c929151ee38a070820108d1de9d3f8d0d560a63f459dff2d42517ad37c9617a

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\PopMgrStub.dll

Filesize
1.2MB

MD5
584877d7dc6931e58db4464bedb76ff9

SHA1
b8c9b0549fcb5f46dac544903b7d387afdc3446e

SHA256
c0620d420398141be882228a54182e38e1a9dc9dd01db441327a1fefe95f082e

SHA512
c54b86f20819c000ffb6d8d4b5f8919328fc06923cef299ba2234a21a8f8d1144f1d0b11895165ed9cdcba07e0b113b57563c3f9b7d87474fabce465b0c53292

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\RunExtention.tpi

Filesize
529KB

MD5
3d2e57c4806baa94da7a7ee8b1268bd3

SHA1
a47e0b38d13b20d89bb91d60483662f50dd06815

SHA256
d0da237bc848cf0a498771d266f1d8b16a2ea54d629a7a412929d44da3e45910

SHA512
2cc4dcec21426bc3e15ea8748ea35948fac634ce8f072353bffb0c15ee3380ae70720e1c6f4b7b972b193579c20c4a2c0a1b0883da05761dae95a105b55afbd0

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\WallpaperPreview.tpi

Filesize
3.1MB

MD5
f0208e7a1b2d618ecbbb39da489ad97c

SHA1
56382976b0f0ef919eb485b08a3c8cf73fb91024

SHA256
3dcc677688935fdce1bb918d1b1e15fff70695c1cf669ffd0c8d786acde02f34

SHA512
8aa192108aeec38c7a13da90294e086338e75b55f201ece440de7489badf62f6b9c06f1b872b2e241cecf39bb011adf1c03e7bdb3bfb4c4777334f00b2e3d622

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\account_client.tpi

Filesize
699KB

MD5
eae4c6481fc6ac33207d00d68de2f325

SHA1
5d2ff26718bbb439412bf1b074281c35f1561203

SHA256
d9b957db890243ea72c15123f85e5417387e412615e19d2acc8b23ceab99e46e

SHA512
980dcacc7267415a998f13f266a99c45d19db0f9bf81f22f7f7709d3ea5b3a517b2f558c8fb1f63300530e4cf9a6354c6c9d252c32247249a5cfc9b45845496b

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\chat_pp.tpi

Filesize
2.8MB

MD5
7849ccbcdd9841daaacf5d11165f520c

SHA1
e822108529d49a67b74d6dedecc838348132e514

SHA256
4b3b853ec71dde6e9e4ac8432ba4b4dc4dea6ec464500a1fab5b8b210a2c04a7

SHA512
e8333679012d125569d554184ccb46614c9d1da628ff05bcf0d8635380abbc4b0f2d7bd8efc477eb11a95f424d803a775b5c75477b4285597ada96cc25913d5a

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\dzip.tpi

Filesize
3.0MB

MD5
3c1c41ee457ee408c71f92266a311fb1

SHA1
c3917d2c0c29e67f2a288b9bee6b5136cd3bbaae

SHA256
8f623c07b248f1f8749e9e316f1e89658010ab64174f09cd7f02349dbeb4eaa4

SHA512
1ac319052c271f720126c294bf493bb47a848f43a7ea8a8eb3aa66d29fc1bc3b28f458c45b61fdd99725cd1324a07fed42509ce7d513e23ab4ed69a9acbd05db

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\inst_pop.tpi

Filesize
902KB

MD5
a2ff4c7c6edeb90f430226b0aca0bd4a

SHA1
c76ecdd83f557583159833f73ee18ebae164add4

SHA256
82d7be27707b17671ce1f3ea12be217f15f37722eeb8cf3a4b85247fe3060e76

SHA512
62f913b4e4affaa16efad936fdf616a7e194ffac29413224213353d7c03ba80e442fc714372122b6741172d2f2f9dbaa626bc552e9d6e01a9b2cbd259ba74e7a

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\jdesk_pp.tpi

Filesize
2.0MB

MD5
ff6e4692abdaf16871ac351b40acbe45

SHA1
f6a7a9ff717dcbec8f254d6c9700de0677be7c5e

SHA256
d773edc26ead659e42f0f4ac395a528883e315ca30cf8adc9e75827a5a44fea4

SHA512
87e435a0fc980ef441f06ac072c34a86704d5c6a17492d6851a1b84d2b71bc4f35f42df4fd8d4539b741c284bde3eb8c0c797a3d9f249b7e5fd0c76fdb689b40

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Plugin\tabx_pp.tpi

Filesize
1.9MB

MD5
eca5593b62faebc77ff1bb0828388531

SHA1
fb1028ede532bf41a5dcf0e925f6ecb27578e788

SHA256
03b5c58988d689de7077dde71c17c7dea5589dc802a9d68b5ee89be0fb37e90a

SHA512
4ecf4c340bbd412dc716926805c13b07f387ceef7b98adf573cd2742ce469c127f4f21f9a3a0492c3a0230b5619cdaa3beb29837450a240cdf925a2428659599

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ProcSpecial.dat

Filesize
63KB

MD5
bce4b4c95b5a6594a2baf8b1c1410777

SHA1
11b6577d5dcb1a66f427f5643963bcf20d7dd000

SHA256
d09d1ecdfae8c4c7132993c85426d1c068aa1ca361cc28562361797691a30910

SHA512
73ae2f88cf83ddc30c2c870372129bbee23ce292106878bc44d61e69a47b543a979f11bfc387e26b36e1c97911cd4f5408e20d3ae759fc95c8132df45c998de2

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Safelive.dll

Filesize
599KB

MD5
34062c13b5e872d0cae5c75fb9f7e072

SHA1
9056a6e5d2f9bee476128451acd26882d4b164c0

SHA256
f0aeb4ed4eff8d3642c315eb7c16a296160c0da36a6242623fee3b3f5dc6485d

SHA512
56444ebc6319c3350810b51ce2fcbbbd3b2f520657f1f521ee5d3130549471d6ec224a6756bd21aef62db2b3029e56d978efd613529092f4eed86e535e92ac92

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\SchemeLib.dat

Filesize
4KB

MD5
75e8f3dc39fee250012d72e1081e79a8

SHA1
e1dccd72b40782b192f9e1561633d3ccc5354539

SHA256
6d6e0768aa28ed549f41fb6d37c45d06213c7108f0d5cf6b1384923833a457b0

SHA512
d34e8f25085e3dafc4bf5b093f49b5cfd917d85141d3544339aa6cb9f55eb2b9bb52b98860319beb87086da0e7dcaa97491b99bc69059ff5f23b06de46333c88

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Setting.dll

Filesize
456KB

MD5
7c4876ec3e392a17d8897bee2b82557e

SHA1
d698af8a3e1476cec57272ac080009d5646728a5

SHA256
f603b116245b5dfe7075b998a98e0a6d1462a82e09e185aa2a24d30bca4eaa61

SHA512
7bca41f89d066c896e7d419867deae7726c55233e0edd6a73ef8541f7c3a71c855ba444e7001e3d3fc1324f4044113872e38341f59f32b293be4a6d14da8b4a8

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\SettingCenter.exe

Filesize
2.0MB

MD5
6e21975d4f91accb819b48d05c52b4ac

SHA1
2b90b0190464a32f325082d62ef4a22d9a9e6dc7

SHA256
0e8f9d4b75df5ea0f61991dcc39d9c1ab3acabcfa9230bc2bac347d7c5dfe326

SHA512
48b8d904af683f7c61c506d66ccfeb2608dd60b1a5b2d264bc6514c263d7d6b4e694cf8b7a424e3c016d72f2401be24047a505f6d8698e0bd3cb6379c953f9a0

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\SignHelper.dll

Filesize
121KB

MD5
89a54234ffd37c911981eabc31f8df08

SHA1
7568a10a94f118937e4d55d40da4e2ad7506a3aa

SHA256
a2129546f55048b036cb50e2ec376b19e236f45da868fcb914f208c580a1cadf

SHA512
7c652f5f7015827518c62a79355a2547828d8dc15bb133be53bdf56a0bda71ae44cdffa1538a2ad237416234f36776cd0cabc43c0e01b7843ec37a8a916ed471

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\SiteUIHelper.dll

Filesize
283KB

MD5
0a7377c8c1af0ea7d1b343572c17f481

SHA1
c25a90239ab06b75c50e8574f41bcfe65a2a6fba

SHA256
70d6d90f9cf7e3c1f86ed5928b645607d445665de0f25b60ab0c496ff84eeab7

SHA512
32b86a60bffdf665973387f220a6ceb8955d9145d1fa612a15c3ef90f2c1f3cf1e896305b96f6adcd7b7f6201570e2b14d129c988f957de8e774c81228005fa3

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\TemperatureHistory.dll

Filesize
1.2MB

MD5
27f5f18aab66e51c0e1899392027964e

SHA1
7c64c9674178e689f43892a0327dcf1b0d9cbed9

SHA256
822790709281ae8461fe8235d40e623ed5c2a71ab80fbc915b20fded0ef06efa

SHA512
f678b9caeeea45dce15428db0295ee98ba5a16a67f6b2603bd57d04de7646de8b39d6e6519c3fda18513b48daf111b4653966fda7706dbb46882661138256175

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\Default\ComputerZMonitor\ComputerZMonitor_theme.blackgold.ui

Filesize
254KB

MD5
7bca630d513e3ad1e95e02e24dc0a2b7

SHA1
bc25ae8535ba2fae7e32743d9a1355c493709cc5

SHA256
f539bc878cc403d17c40d60c7a9b48f71a47d6329cd7e246e47cf53165706f5c

SHA512
7901aabdc6f119cfb3c5fbe6d9e13574a51c38aaeaf33d946ffbac0d8019bc3cc3319c9d0a3fd039dbb78dcbc4e744c94522406d7b7e2506447bb71d2ccf75b4

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\Default\ComputerZMonitor\ComputerZMonitor_theme.blackgold.xml

Filesize
34KB

MD5
176ca9442717ceb2b9599e34d40e7800

SHA1
6e25197d5f9caf31904232aa9ca7435d2cc7e536

SHA256
4f249900f003ec3db1caf90b49bc69837183c3369d5cb5c0cf05976780370161

SHA512
d0f76d77a062ac10aa4295ea20ee6f4094314a7f275e2fadbc50deeaa6436873d38b20afb4536002f4d33ce3d442b0414ae5d23090ef8b483762629c4ecb07b5

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\Default\ComputerZMonitor\ComputerZMonitor_theme.normal.ui

Filesize
312KB

MD5
de5d984a4005eaf45d58acc121dc3d40

SHA1
9cd053d961d67722f476c4ff628733afcd1bd688

SHA256
13a4176fd6b7e8d47b26679ff911a645d716abccb54dd07ec966ecba4aa02c5c

SHA512
4350e6aa0b547fedebcc9c1ab5a8aef48a956d80a08421fb0fdbbb97ac94454e82522f7812e03c7755b049884c8f11882c4880388bf24768b350f7306a31cdc1

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\Default\ComputerZMonitor\ComputerZMonitor_theme.normal.xml

Filesize
32KB

MD5
658aeee5d6093cc517329a6378159484

SHA1
48cea490c74777c067f1967871167b781c645a8b

SHA256
a076fcb286f346c9f78e8eb9760e69056ed922af2cca1f86add5a838e9a30591

SHA512
116a90451599a4875ab39fdce72fc76f3c3717ad68562a3398d7773a41c1b83ea83b163f17b38dab1673f7b2470532bfa62dad1c4840cb849bb5c1f1008b7fff

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\Default\ComputerZTray\ComputerZTray_theme.ui

Filesize
281KB

MD5
70e8e66d24e168d7b7bfd059766c0c23

SHA1
15c843065257a3e2441a77c8910db9892a822ccc

SHA256
8c0f2c913f32360daefc42ccaace0809a696295c890685c01905fa4f369fce7a

SHA512
78604e202741af5119a1e90f25f6cdec7b5f952c6fdf5a4774c9062540028a81e958b02e7a6740d3fb7e185c405b990e6a7366cf945d8f96258bf505a5e2361e

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\Default\ComputerZTray\ComputerZTray_theme.xml

Filesize
28KB

MD5
a1a3bb45e7c2ebae8c66e0794c271c2d

SHA1
926d3d7dc9c3981562377b1a3b13a9ac283775a0

SHA256
3048673ecc799b91ce098c29c1845d2bd60c169a5df74a510167c398ac36cde7

SHA512
d09647bb255d4e65900b48da5f77ccb0fc0c2dd7a9c5eb2da6c72b00333a61d1e9234cf29d2eecbefa7efb1977c7252f4faa3aae2a5e375919829180c82719e6

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\Default\SettingCenter\SettingCenter_theme.ui

Filesize
301KB

MD5
945d94928269dd2a34021a62a1efe688

SHA1
e8b1dc202a37a014f09fbde45853e60b31980877

SHA256
8e224c89d60a2743f1eb0538131870a94ec3d8460538e851b072ac90fa55b3aa

SHA512
1d69c92e5219e981c7a312319212e785a1d850cfbf43ff622d7d47ed320e95be251bab2462ff2b03e9da57bde920388c6e565e9aca1d12e3cfb9e5521774b949

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\Default\SettingCenter\SettingCenter_theme0.ui

Filesize
186KB

MD5
da1897b8c7c1dafd05aea02ce716bc21

SHA1
f79c8bdb7f07c9feb4fda88cb9e86aa0f84aefdc

SHA256
1dce958949801c4d411836be7e13a2f0dc8d2ed55f4a71d5ba74a62f3355ff49

SHA512
278120aadd65629d9e20b447daff1b7d13e0c52e7f771056a1e5608a287aa721e97d61ffa16b3c3ad47ead972ff7724f3788e80430ea4c8d9ea085ff4440f4d9

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\Default\SettingCenter\SettingCenter_theme1.ui

Filesize
294KB

MD5
41a6d31e8d66e3a4da5ac69459ec2e52

SHA1
5d28520e99af53e7a90765b9483a8636565ff5b9

SHA256
f0e4982654ac84c744d8e8f59b74b77d3f7e372152d3b3c710ee1d8235985e10

SHA512
08fcc9322293c7439f13bcb950e47b64f4148e7400498a675bdbb66a20044a40a8781c9b5d0a9b9316a041b7aa0bfaa576aba82976d7ce7b84cd1e4e49e149b3

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\Default\SettingCenter\SettingCenter_theme1.xml

Filesize
95KB

MD5
03b77ffc70e78920e90ce19c72aa7467

SHA1
9695f89078da7ddeedfcb35efc1a7d6436da61cd

SHA256
c2aceef7fb2b2421f23f008ac3784659b0a6d5d4e6fe5f318df422edd015a58d

SHA512
8b31ccfafe403e2b34acf2275735638f5af043947da5be6b30e7927c2003d0742ed012b75a318cf701e5b56a64f2065dbf1cbed12f929362cd4a5d53ff36082b

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\Default\default_theme.ui

Filesize
90KB

MD5
cdf53b97941b9140fdb70420cf8b0d09

SHA1
c72caf3a88984b8ee78fd94a2a72e0c6105da1b0

SHA256
602dae8b624b29498c5c13d58f65a3697b82e238bf7870c9f5c93eda3cc7ec8a

SHA512
012231f4e7a0940e983f50c2aa4635734e72c7d760c21d51b31330db2e15b4ef4e2f4f2cf84320be65a1aeb9fe31c5844c10277d3df929a9ab3a35daf8a1d5ba

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\UI\GuidePopup.dat

Filesize
541KB

MD5
888c453c574be7bb6049598f7f44bc81

SHA1
62da566c01517f9242c6d3c3b4857e946020a703

SHA256
c8e45467c3f15cf084b2f39101f6007ac153b43d0ee91446ad43ff02d9821176

SHA512
b1150096b41cf05fa0dfe83a482c5d243a98ff0eaaa75e52596bec7a7a9ebd0a129e54042c255a85fd6f8accd91e0b90bd002d145ce23b97b3c186a9b50c3d3f

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\UI\SuperApp.dat

Filesize
914KB

MD5
c5b3b695b72d8fc5c6b4745b45350c01

SHA1
6a00b1df784f09d1d02ec1a4cd250fefa580d86b

SHA256
bcd38e7616a4210e3f398b46c1b003b3d8812ddacc6e1e0c6bd0afe29d55e0a5

SHA512
4dabf36f2d44cb3b16b7d86867e90baf405fddd274786fc547729325c25501944be8d8eaba87ed9c0479a0ad970bd4607c31028fd1377ff30818477296e707be

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\UI\computerz_desk_taskbar.ui

Filesize
254KB

MD5
f4fff01e65b194e3336b1cfa6d548674

SHA1
a8482e79954dc5ff78c102654cf503d9aec27b04

SHA256
4494fd4fc80cd217452a62eadbaa75f2590cdd660f571df958ed44eb3658ce8f

SHA512
02b45117bc0e31b7ef6aeed7bc63e80baba457346fe82dff3a2b424a7b0279144936bf4667401458558b9ecf87db47bd6d201f0d1412907b8a6783ced03104c2

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\UI\general_setup.dat

Filesize
460KB

MD5
824ed2740510bf61a9d2a7587bff695c

SHA1
421809fa4f815e57bca4604a644af4c30078d780

SHA256
b1afe2d791837c69d9811070b186e71e1dc87e9b5913c41b198328fe483b166f

SHA512
1784b13294b4c18d9d267a26a923354ef5ee11633ee965fdada67b90a6b6047ba1c3f1f35a9690d342e5f01d6c657c129ac05d04cd5c1e4e94e956c4875f8ac1

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\UI\icon\black.ico

Filesize
422KB

MD5
a66f344828525de77489241c22317b0b

SHA1
ee8c6f024477849c534f62628bddeeab2da9ebbc

SHA256
67fda2a81adf58814c3e72c33aaddac38b1da36a1dfb6f3f7578e195d8ce224b

SHA512
8118ed34c7fa40943605a705bcbee05195737ddac39c9d067ac5c4455a4a26a2fa0407ed82621773bb8470879480db96832c034110ee65295021e3fb8d17a374

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\UI\icon\web_host.ico

Filesize
84KB

MD5
bb8cc3d7be41b32d830f71019ada291c

SHA1
99eaaa3971c64e06cd9c5f42151275b7de49acd0

SHA256
70f9ca4f2ae6c36bc4093c72b5b4867f68bc028563c463d858e624856b455b9e

SHA512
dd611b84e5cc5ff443b9de886d23f97a9a325f1f88913b4e0f94008aeb19654e7b81d95d0d7a7034d2bab18b0ed82aa5e0386f19aabcd37ee5f6fffbbf8df2d3

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\UI\lds_account.dat

Filesize
1.8MB

MD5
f9ece4f85461c36185a13984b3f3b192

SHA1
90052dc30db4283019932eac143fc156ba681bd4

SHA256
6a7419e7c9314d0decc84eca127381f741ec33799b73ed6742f48917004a20e2

SHA512
6a1737b98de286cc6cbae8d130f51d3c27023799a91be9676600ab4e891cea4fdfafebcccb41b5941dd5df515896df97cac8030735677cbbfb8e3ca92bd92f1e

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\UI\lite_download.dat

Filesize
253KB

MD5
4ff5be91f01a08a1c650fe75db509996

SHA1
f1c8be81eeadcbc4542d362005c4c4aad4a70967

SHA256
4b8f2db354eaa9facc3d2ca571e9963f418503401842bde1296135d40c4bba79

SHA512
1abc3019abfb3cb6732f5e2f23f9040e61fbbdae6f179fdddbab44cddb923aa1f6ebd1b4647365e98b366d2508f5677ff089bc6a86366620f4a76f75c7cd3f60

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\UI\ludashi.dat

Filesize
4.0MB

MD5
65833b98dfdbbb70e91c318a58cb6e45

SHA1
0ba0fe856aa758b004f6a3372727ce3fcf41dfb0

SHA256
d940d3dc63f12ba76aaadddbd7f510adfd26ac732fef8b0bddd609a6e48f5ad3

SHA512
cf46cfd5eab49742099f0eff3a24c8aab3ff48fed9524a64a68dfe2e64b6a557bdbc010ddf331adbe85b9b78543b537c6c6e6a16986656fde74df3decbb6df3d

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\UI\monitor.dat

Filesize
6.8MB

MD5
50472951a8177e74b77b93b9ba2dbffd

SHA1
653cd5cd79babd051a78fddb2df8830cc0d13e72

SHA256
5df818adce8217141bea6f51b283ffc587e494097b0120b9a8f13fff72274293

SHA512
c185d8d440bc86f128c79db4f516946e1bce87a0ec24941dee0d10c6a3a09b613722a588ec43678f9cc889073a5940d244cc7a351af82468c9119ec7c093355c

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Themes\UI\ranking.dat

Filesize
609KB

MD5
f9ece8be31470aef183680ef9cac4d0f

SHA1
3ddb4733bc6ec4d7c1a245249ca0b20b00d30fb1

SHA256
013dad98ee864d397a49bce37559fc39c8eb1bc21542f185a8c926968dc23972

SHA512
2b14953d85b02537c631eb7f9d30ec26dc556759e6d2de8895e489847c2179373d06cd819caf206163d7963c9d542ab94c9337cbccb641d755fb6d01dfe9bd7f

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\AccountPlugin.dll

Filesize
776KB

MD5
39b83ab0530cb42e50183272842ad0e7

SHA1
4fcc3c6c2b1f0a9d8589a7764e9aed50cbd5c060

SHA256
cfedb69c99d3a1ed39b26307ade441d1f9ff6bbf208dc26f6da6400e0479ffe6

SHA512
4230b773a9d9f28ed0c42655d1c72ff143fc07ba6c475dee31f30ffe98805e21117298016afff164bcb000ba12452126446f0a94781309663e174ccebfb1ed30

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\CefHelper.dll

Filesize
477KB

MD5
91d986307ab1e56f7f77710664cdb70d

SHA1
18fe10c7b1ec55632c03b9f06f9d881a022c970a

SHA256
d85bfd004e2ca8dbdfa72a4bdcb1510df76ed56d46ef5128500883c8c7f7c8fb

SHA512
480659e912ef3053a4542eb2e8eaa3a70df92569e9834d950d9d7ee07e8c9d740b59f1eaed90276454ab71211da41d2f3d945cc486539cba7be3a5c5c0a61e32

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\CefRes.dll

Filesize
24.2MB

MD5
9bbefe9cad9a78601c66dcd1a0b23dad

SHA1
0adcea52658234a43ebe9415e2be782e1a673b96

SHA256
d08f714eda44528db314f12ecb7b69fa0cc76079c32dd6e377886c60870bd1ef

SHA512
03197f0636cfd04de2379febd76264b144330799425abc9803164d05022b276bb5f9b523cea40455fddae1cfcedeab32c7dd46002a82339c806016eb5c284cb5

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\ComputerZ12.dll

Filesize
977KB

MD5
e2b20bb4dcf9194350120d684d0872cb

SHA1
09144a7504aa245ef1ceaf9a12a9f679faf66641

SHA256
8c82208cf744bf8d26ead4b3d867987c7c3ef401bcd2fab22a989bb6bfcc294f

SHA512
12e6e3332718e0452195a04ec776a5abd36b49e199c9a378928f6eef5ada756ccbd438843f391d0c353a6c82fcb4dd7b3cffae1f52021a9d40b30a9cdb85d39e

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\ComputerZ12_x64.dll

Filesize
1.3MB

MD5
53a542f8d5e267225f5a9529ae476ab4

SHA1
2c00041c6b65dd28b39cb693f7904399713d5ea4

SHA256
2935165e31ebb2d2abfc5380a4a181a718e648574a26b3d808b7be21ff6f2bf3

SHA512
f8494946cdb4283c9d64e7d91c1164a2c679ea33fb28060b84cfbbf99a621f4b5d2001e050f7a6e13a553d2e5bc88628a7e264cec561ce1c8386f87ce2a8cc27

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\ComputerZ8.dll

Filesize
241KB

MD5
08d4addb59ec78303aeeb2b08030defb

SHA1
ea058e83945ef8e20712ff1c7659d528362d1b46

SHA256
c27454a2e8b56665a9282fd774b8568da3aad3a00b1ff673c5115a28acdb5f25

SHA512
ef792cda42ebca4ea3c6547b0c7f4d1aa603cb71922db154b96b22deef6ba22d1a5cb23849cf168281aaf7c956fbd46976e929ae15f3295491724c363e567b6c

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\ComputerZ8_x64.dll

Filesize
288KB

MD5
5a0f33714bf8ae637fb6800473819af7

SHA1
b788684a669362765f472083fc316f7d36c0eeaf

SHA256
f2e0d6fa5d7590bfc694ffe222e503dc7171ce585bde4feec3f165899caf09a1

SHA512
71113af332c7e78a8cf9a1a7221d4c10c8b6db6f61f739b3ed3755d50e130dbe26e6a73e2c370be5fb9c89ea3f711f5027a19e8df32920407fe8fb67a5236dae

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\ComputerZDeskTaskbar.exe

Filesize
1.6MB

MD5
5f1d25c04e5675ce0e652827176f02d5

SHA1
54863d79cdfb5013c6a2a94ea667f6f489a88ab8

SHA256
a13fa0fa0e9a7c07ffab2504550de838be20ac7d0ca16dfa66dbcd9b5350b7a6

SHA512
31c9ff2e684cbbe3238b78a5663ce029fa43fe0a3d6667609e1cc9ac66de68678f98a9c2f3eccee3cfee0181836f9f7e9ced117bcbcc6d42e7bf1314821cb3f3

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\Down.exe

Filesize
437KB

MD5
a0130a070aec075c02fc6ca471b0f3df

SHA1
6fde46f246a033a0b1dba2f2acd26add94cdc899

SHA256
b90af685ede673e3d642a29fcf49364c6c267c031dda95958e4d21da5b7b51ce

SHA512
1dc6776a287f5f04b64c13f5991504698fd39480a8fec868e5c8a44ae46a177e46307a6cf3f0f252bf736a5fc96278e11438cf458116d990d40cbcf678bf1716

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\DumpUper.exe

Filesize
1.2MB

MD5
36d14fad81472f702cfedabe336a52ba

SHA1
ff0f6d2a74e64f97abadaecc52dd6d925be9db4e

SHA256
39432ac51469d8838797794d0f990a1bacd0b11ccf96fd68e7b00a43d842dff2

SHA512
7997fc1fab8d85822c96bae0ae561c6b07d404912e8f800b79d01064de5b715b566dc49cd49ca271e8c63719c27158d1f2cb5ac90566d11fd0eb5917de23fd45

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\DumpUper_x64.exe

Filesize
1.7MB

MD5
e24724ebab287120baf2d70bc17d96ca

SHA1
339f2775264b2e3e6868df4919cac9a3bb235963

SHA256
a5a972e8f1f095e118169a536bf577d532a264feec847d13a7f6fbede8533f93

SHA512
aedaebd2ec2179196c461362e1865f8852cde8098b775547ffd335172190d10761f5d1865f02deda39192c5ad3e9476054587ffe70acf08ed56e6febaf17b0d0

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\Extention.exe

Filesize
974KB

MD5
71d0e9e8604eed96a7150fc78a02c8d9

SHA1
2c95c614079dc32bd9ce1dacb3d6a37a562d95a5

SHA256
344d312899308f7889be36e5037aa44eda3bfc7a8bb91c3d43608a78d611cd1a

SHA512
429837239e845f1d4c2bdf1a15af191d7bbc9b3a1151b47b17fa8640f886490aa1f5e30e8649a79c46df1c5397d09ec604970f64420f4dedf8babf3ac1016465

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\LdsVolumeCtrl.dll

Filesize
104KB

MD5
e3de14a4c2e1ea9c73d6e865a0fab837

SHA1
489f2b30c5e6c2af516e69ccad1f96d34411e66c

SHA256
23785aa5bae50bf822f3b2306fda41743b5937d770a8d9f391fae8f50497e20b

SHA512
941d8ec98afa5acd4b6a9d52c126e86c1e1f3460660171f70631124a422ec24b7f3c9ceca17eca01142b398a71cda045e136ffd420c01eba8cc4c883ef0cb0ef

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\Ldshelper.exe

Filesize
897KB

MD5
ffbeadd5b92e067c75ec009492bdbc22

SHA1
d9f5a96f2a05f5e5dcdb747eabba0c2ac91c5d4c

SHA256
b573bb9e46b68496f8b7348f8ba7419e7c24686ba14ab953a4d25bed39c96a48

SHA512
551d759550e54bbb22299e3424769431388011d48a72df88a7bb94d9f1e9a77eb4f02775a4ffc2384382f0e1ab9a21581b20d5fed359c53aabc652e1c17fb8c5

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\LuDaShiHelper.dll

Filesize
164KB

MD5
48484aa35450ac9595af42af04dd7f4e

SHA1
734653c55ba2a66e893b3884e9fe31d57851051c

SHA256
04b4b37315904097e7d12d72400dd43c3f1afa39147f974299e506a152a75542

SHA512
cafcb978b36c0ad7aa4255f207dcd7b69c32217c959f03c4a63dd6f67d4f9a7e1fd008787f2ba38deabeefb5e4b58c1a7e274baf327005ad35e33b0f00758a3c

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\NavLauncher64.dll

Filesize
570KB

MD5
5d7d0d0f4889d1e93437c4ec5cd1fb25

SHA1
3dd4776f95035b2356cdcc15bf18331efadaea7b

SHA256
065366586b42c653f8d10078ed2f8d9670e328f15b883486cd1e56ed3d14a644

SHA512
04b6fb28fec7a6450d8bcbe241bf7c07de524f4bbf6d3a4ce1803cf372ca3c3d4d898a8e1d7126ae3a64c3b0062ad4d27d939892755c5babeb56e6196963c973

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\NavProxy64.exe

Filesize
492KB

MD5
a75a17b9177a4dbda06d9f5650931191

SHA1
a7587d5e76c54ac6aab26005a163537465848c8a

SHA256
158ffab8c4699c9fda9408f7b6f599d16b167beae4781ee3ac0057e48787edc0

SHA512
de9dacb2b453ae7faed63b91a6b05f3885c69204ed3ace6716d360dc372c86c10ff731791bcbbc1ba057decf4784840d1c0592ec06f366269552b8f1c756c201

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\PCStoreSetup_officialwebsite.dll

Filesize
15.5MB

MD5
644dd395683f6e24eaab2ea8ef97755e

SHA1
35ad8af0b8e5016880e1a674db0503b5ed6213c5

SHA256
113d3accf947cad2e90fad7c4e77da325b824e0dddfc451b3bdd72da6b5dd272

SHA512
c5d420dd7d860576cf4bd7682d0ebc3f641f828dbdc7e24f6476d4826a6d7a773d8b71a212cf72bbbfce158eb4cb3f5fca68f8c81f6452b3c484c43a508e0681

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\PageMgr.dll

Filesize
425KB

MD5
019559fa067a3d9393d6ef37eed4719c

SHA1
35fbd0221ac8bad7a14f8d7fa86750d89fd595bb

SHA256
eff4f5d5632a3ffdc06ee91b80f429df3a85d3b4c73916a2a08fac433230bdbd

SHA512
48b6fc945d356ca57e0c72249f39d1fd1adbec6276050c0cce247d725a3a1162a3c61c0badcbd0180f16abd705969f1ad7ab2f9de331b1e3521bd0c959b96eba

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\ProductInfo.dat

Filesize
90KB

MD5
b3fb833e5eb09cb3e3e14059b6095404

SHA1
cfe20977787576451903bfe20621aff456597811

SHA256
76f320735f3ee474fcf00631e5cd81c994a0659dd1420a2f18e5fa215f93b8c1

SHA512
dc859e69dee7f4515eb51777e9abd32689cd0d760439894fe6d85eb85ad01a5da3cca94dfe397e1a524cd1dc5c609556d6ba4a8ec3aa36c4165f09553c8467be

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\RunDll.exe

Filesize
950KB

MD5
4dd415fbfdc1f5abb61906e216300e17

SHA1
b51c5395676a58da83ee99de48a2c82122f20cd1

SHA256
3498a6cb76372bd7d8d010964b558824923e66e530d37b8625284741c01c9d17

SHA512
2056bd43299f1c1030686e4cef186399554611d8792f2e6af36e9d69a834b9b36b5d202683507f56cf602cc0e25a536b93aba3ab95217d52b00e571f8c369548

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\RunExe.exe

Filesize
484KB

MD5
9f1ca9a7d9f78c97f6e4b7fe9e24256a

SHA1
22cfd6dfd137341cc07048455f394dcf85cc1eda

SHA256
493b956ff6b76920c68ecf0e011f1702431fdcfc9f11b902d059b890b71c71d8

SHA512
48ec27bbf116f488557030ee9a4b375318346f7d96b1b4748c08337fcfb0d38cfb084baac326677219f608bf8c4d63e9e2bd94dd7206e075733f003d5bb8a1df

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\WebDataMgr.dll

Filesize
838KB

MD5
8cba74320966b82c739229598e038f90

SHA1
2ad5e77ca9ccfba98708e485a269c03db24d6ea5

SHA256
db06ee46db8f6b86fed52b99ce4a2f3e51233cd0ed8317026047605bd9114b1e

SHA512
dac6d696497f0d887ba1410c6dd90f63d949a77104bf9a63caa455d3fd73cb9fc422ed6e50557a588be35b506a4e7e8e8d5bd4451b17fb695955e28d93bc7064

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\WebView.dll

Filesize
2.1MB

MD5
a1c2a27d04eac0a29b0059cdbf928a4b

SHA1
5a92213bc81287c570bbecd84e7cca5c803f275e

SHA256
12e25824f5bbd24326db59d63093e8e744be9fe0dfcddb5c136d72ba9aa97e40

SHA512
c50e130764c5c27f36d2eefcc9ba47a3dc7d283a5d250e99feb7553d9a4d9f733e856ef92a5d5c64ff2c991d7cc8cfa5f495da4465e744278ba801a4d9b3a9e2

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\Websocket.dll

Filesize
1.8MB

MD5
1c659410366b145d81cdbf3c92878faf

SHA1
e87c7811afc4b2fc7c08750a03027381c4cb609e

SHA256
8238b12809fa9540566b373e97e3947a8543d27def5a6cdca428d8516256dffb

SHA512
c82fe7e7943cb9c6d2f5e9f5904ae41096182d2ae777460721f563781305cff9296d470fb118fb4e30ea29f55e67f230de41e604dc418c8fbecd206353487ebb

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\arctrl.dll

Filesize
551KB

MD5
5d5ff285798b4fb701632f92a598142d

SHA1
709d2346fd44ae3171afc065589f0db547b49eaf

SHA256
d9dec9914a31e6396349186659c6ffb351cfb0766a8b5f9108fbaa41c92462d5

SHA512
456a41902614f7c838c1cf68a96f551fad428629ac8f0738091f4b9ce73b3862f63ff95d6856f93ddff64578d05998aa0927c29fd03d94b15fe78b121692b942

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\cef\CEF LICENSE.txt

Filesize
1KB

MD5
c8ea01f99f863e909e364ee4d5ad05ca

SHA1
5b0bbcdba9496a88f9b5e02614a6ee1fb7c2da80

SHA256
3dc5a7f60a914dba0fe5a74a23f529cb2f9cbdb226aaa15bf17c1f6f655d5709

SHA512
5ec8a382de98b4fd2f54b269e3baa81dde8cda4ab9e976ae1843f732f6ddf6fbbb9f10c065df12762abe480743e08f320afaceae68a85e98065123d264ae2b72

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\cef\CefView.exe

Filesize
2.4MB

MD5
43f06852f39316b8a9fb66cdf1655e50

SHA1
c7614b7f9dceb4316d43b4278c4a8f4514b407e9

SHA256
e2ec8057d4bcea3896881b6b8a774e35141ff24eb555ecbe37d68355f480b980

SHA512
bd0cf4f1e53f493fbe019d00567bdcbedddaa6d1b757982a358353734ee49a3abd5fb7d03577587f29422e31c02e79364c4611a386a02b7b46ce871debd12c4d

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\dll_service.exe

Filesize
1.0MB

MD5
5ca4f9ead5cb5c52cda0a996dcbd68b3

SHA1
2d5810d7685c2b5750202e98796e11387706fed5

SHA256
538d256ea228c8430bdd85937295a2176e16b6b3eeb866dcf4d7dd79c161acc5

SHA512
841605bc6f9b5c74eb46a379d7fe2e347eaa87e1cb83dfce71c6c8742410b6193b7ba814c7dfed4a8037fc81fdef56115e2059fb068f8a554265cd0429d2a788

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\general_setup.exe

Filesize
1.3MB

MD5
2faeed26c17e1c3b5bef4289c2beb72c

SHA1
9a1eb78e1f66f83426832f27156243be2655fd27

SHA256
53178f296e220549932a16c99c68e85b29f21e39c5ef66b2130c35fcc9027a7a

SHA512
7fca20380d5c508a0239e6478744187217099c57d4d5b3ab29c1bc0fe2aab810790f16ad256d0daabc7174efd494babd393e3f41a0056016022d592cdace038e

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\guardhp.exe

Filesize
849KB

MD5
cd8551a3a787f58eae004ea78cedaad6

SHA1
ce20f0778e7f89f01b804c31faaba0c3c9545976

SHA256
35a213dc648173d673d3487d80166559c2f7053406cc38678efb10da454274e3

SHA512
f74e219df6032f5b4e09e35473f797222e73599233d288014eee5f9ec0f0d2e0dddbb7603d07ad0ee8e4d2f74bc24e2522b009447009775d53d9063d6a257819

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\ie\IeView.exe

Filesize
1.5MB

MD5
9c9bcf0a32d2c7b1730aa6620b6709b3

SHA1
02c47c897c7e64fb70afbecc8871b76a166f6bf4

SHA256
a4de8fe0a20d46e361cae76bc60d1fc107d90e44448ef5c401d5de48fe4675dc

SHA512
bd31697e2c614e28b239d5f0b4f29afa970548aa7636f715f1fe1aac8e8af39419b318a7f25dc47637a6d1b712a48910d85638f21e9dcf8317caa552075182ea

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\instcore.dll

Filesize
411KB

MD5
47b2c31bc568b8692b607bef27f4fa1d

SHA1
00e542b7fca1ee66030adaf40c8bbfaade17dd87

SHA256
36200786c7e9c0b66636b0be13b8d15ceeb21ea797b59b4bd118ac21e3417207

SHA512
bcd09ff477433baf937da073157f1800e0a03a95f792d7b62cb4f0d52b5d6446698192186dcbaf090d9a0627a5c1711d2b1f9d8589495e91268900bde8ea7f19

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\js_basic.dll

Filesize
1.1MB

MD5
79779f7e33eed9df7f1ca0582f737ad4

SHA1
322b68086ac37a99a8638b6376ed521ad6a656c9

SHA256
29f4652ef3ac7d8b9fc7a5b3ef418cfb1170dd60cbc167d42c93c7992d800c8d

SHA512
d49e1960f1a7f54c65019b286cf39e82194d355fa66bcaa3d25893fb36b2c2732fc2a2f7265fbf619d75f46ba475604415b9b08611fbac03d3faa40d6ffe7f26

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\product_helper.dll

Filesize
728KB

MD5
f63f0a084ee462e88c1072cc1836fcb4

SHA1
dd581a5c54a0e066b7006dd2c4657d3fedab9ae6

SHA256
4e345bbf2021041d6d5f333abeb91e5751538110754861818d8a7c202befcdcf

SHA512
c5b37b40e7b7271ab94309e94de707135e1e109e511a7dd510913d889f17e4688fa1c4e6247e328fb652a2f547ee6939c3280524ee0379f56ea95439f2e29d58

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\product_helper_x64.dll

Filesize
839KB

MD5
3dc20b526b90d2f64230a0823407a975

SHA1
beb556e7d92b7d4690e5e2630049a4fef3140103

SHA256
01e668e9d7b33243ad0b22cbd87f26b77e70799c6caff78813bade501aabdf45

SHA512
da1a9146274aacdaccca7cbfa5672163a04b9e391ac18b10660446db9b3450bc7313245f131773dae8af25dda4e6e4e897ad99d7c37c15fcbeacaabf649cab6b

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\Utils\web_host.exe

Filesize
744KB

MD5
8dfc0de5e7a96ed43b204b7b9c1464d0

SHA1
0f1d650f0cd4cf8f6b55cdc19dfd15e6314a006f

SHA256
796c3508bab236f7d97f7c707e1b64dff8cdf205464adf2767a4c1f9d772de36

SHA512
cea483e95994cfad1f489143a602e52c21e78a2285073779166add140d8966cadc7ae0babcc146645ecfe099fc6f2d4c4164fc33ef6c50da6161c1705958a19e

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\computercenter.exe

Filesize
1.2MB

MD5
302c2e096402ff92c4cd1c1ef1dedf5a

SHA1
4a4e87f90f11fe64c54bf0db820daaa3d3ae535f

SHA256
1508adf83b1a0bd3230160c7c1c28167f2d3218b6da554511c5d8527ba726ea9

SHA512
ba714a9feddb557c9510fe7d0d6ef7a78e03244245102838db63d6ee5c4d9ef894eff1e56cb998470455844a97d67b96860ac99a9fdbe339807a8003cea639ef

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\game\360GameIdentify.dll

Filesize
238KB

MD5
17cf9846f166f9d50e8c45b92b1484be

SHA1
2a2fa8c14e733f72b299e90d059d1a4f6cb32601

SHA256
c9319f37bd9bc0e0b39fd20c9398a88fed5cd36e06394685c0cfe752b241994c

SHA512
3739ac344213eebd4278f8b96f8976251247e8505f9e7e37ce7683150cb4f034751457992fbf3e373bd331742527a1225643c75af6b9b85c243e64bf082db356

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\game\360WebIdentify.dll

Filesize
233KB

MD5
4ab7e6739f39d952968c0fd2dec3d7f8

SHA1
24713a6c7e9b2c55edf593928f69a0663dd154a2

SHA256
0790b145e77cb2296daf5b10312a8d7405739316d01d02de99905bc1ab1e125c

SHA512
3aaa54a76b2f0d4e87e8bd45dc6f2726c7de335c8f71a0b20f2c765a488ab62f4c2947b97feeb6a71761ad96e63054e5feb6e572e41ed6efe178fc29ba383cec

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\game\GamePage.dll

Filesize
728KB

MD5
fc84ed9e5d96ab44bbaecb6f503bfa71

SHA1
0d46d98160549426ea37a4f00bf96a3402e7d32c

SHA256
80c7529efe4997e70ecaff18e4bff534a77eaf5addc43e8a4cd6d543afac9790

SHA512
6e18889c6fc9286e29711493ca9ce8d839dd9b9ea8b41c9ad81f63df2f159d1435dcc6ada0d3d46c1f08972595653ae4b1aada2d2050aacddbac81617ed8bbf4

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\game\GameTray.dll

Filesize
457KB

MD5
39bbb7af971f719b5b2aea41defff699

SHA1
37483ba9fb0bba070a11a7e81bbcbb02b624edad

SHA256
16ff1a3abe13bb4f406ebcb1badcd90d29bc1244cae587b8b560c13e4b6b9af8

SHA512
2f2db044bfe42f6c3acc3acb3959db8a739b0057b43b1a920c6c5b899c96368333e799f4106531a457a383d32d892599c53bc7efc6e1856d2263bd1f0f617de8

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\game\ModeIdentify.dat

Filesize
181KB

MD5
3265b4c3777f606729f9dbf15ceaa196

SHA1
262438625eea135b5c72f3fc071e49d78bde8513

SHA256
cc35962997cc03498f406985a3890702ed324dd7b9f86a9936c379ae19487558

SHA512
0bcddee152680c97ea0dcd94538433ffb6dd663fe42791a4c5c539e1c2a3dd8fe0788d1ea7e578260b88f651289212730c123b019e566cf3bcccfa02997608c6

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\game\ModeIdentify.dll

Filesize
799KB

MD5
e0cb719cd1a615373aeb5052f004b4f1

SHA1
5b14ad29b2ccf7c08bf05fc555eac4d6395ac2ef

SHA256
1259ff2410b0b39bf3efec3ab26eaa1d3c17d11330a6ac42f40586933f11d6de

SHA512
ddad289d49263c220f4e8eb9a1fcbc06f0e5c52ebdcceea1d75503d6e4facf775e0b5b635ca8e4910f84116d40d2adb36b4240614adc7970c0ac2d62d2fde88f

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\game\gameidentify.dat

Filesize
47KB

MD5
fc2aa6b5bf738a3e69002c0c18f6b00a

SHA1
67a6cd36a0e63e1e8a624cfbf1332898d6ab7f0d

SHA256
c235d5768f71a5b62c3b9f72e290680fb6c9c7bfc68ce30b66448d1416538c21

SHA512
da161c9a26b0d71a3b1988e39ecd057e6e7bcf2e56d7e41c536d4ddbc06c05e703bdcf57b184c88148a9a4dab3d68204d0480e40884a59991a69b76c8b9e5b01

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\game\gameidentify_inc.dat

Filesize
65KB

MD5
5af25c6151afb444b998cd161a56020f

SHA1
e4e06ce6069990ca5e4501d0107f41bbafe362bb

SHA256
9803371a8efaa18c39c7f632d913739a927d944f4895a186224e2e832a68534f

SHA512
e37f851e27812f3e00c8df5ab7fd6aa878c840989e465e9f7e255ab00553fa978574ee18761244ef14993471e76b65df536f83e17fe184442bf3b516a2ea197f

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\game\widef.dat

Filesize
2KB

MD5
78601450e8124d307a7d6f2c45eb3405

SHA1
265b261688c4d546f51e4cd3efd01d781be6a7c8

SHA256
ac4922c89c04172e42235dc458b00f0cad756c1aae99b928e01905dd74590367

SHA512
f619d8c9b8c91e1a1d354a5c1692cf0a80da1646c918c738cd430b1b0c91b334742b03ab9a992e764007ae784a1f75d2eacbb2f26ea6689fc171a71ed684dd6c

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\ipc\ipcservice.dll

Filesize
576KB

MD5
95a4ab3cafd05d6c5889fa82f3198038

SHA1
c48c56d2027fce73d7ac70c07cad02002f8cc91d

SHA256
7b1d5bff2856365180c551c6992735880922516cb6141d3b1e779ac4c3a58803

SHA512
abb35ea9c6132ce892df263c70da5218b7509afd61f5ceff654ef5673f6a1044adc8334bbffb07ec51bb9d0fe4b39d4096371a241cb9c5c6ef3e8ac0e65865de

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\lpi\HpSvc.dll

Filesize
688KB

MD5
a14a78069ae0ff7f24094463de5c3bdb

SHA1
e5d311be7d0235171e22443ed1323dbad76ffe8c

SHA256
10576832e1b2c832da7b7e728cab2195a87f472aa73ae454f068d1966ef32743

SHA512
d255e064296e43fab5aa55d96531453fcf876b54ea57a2a008e70b0ccaa6e54b8353310207733d890995c56c9f4b8f36828c1f52ba45198b506f4598e484aa90

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\lpi\TmSvc.dll

Filesize
498KB

MD5
22c746bb6fc68dd2ab82a58f04387990

SHA1
49bfad928e7758eab657f2c192997716746527b3

SHA256
bff481a6df2f5f4f5a7c261459aac192f7dca9b05afd8b272c5ad05ceaf9be72

SHA512
f84696a360eee703a05d7fee692b31b867fe36b96c05d7ebf9b30fa1a275ad23d6a65ec9bae67448901d1606054ef3e6aef856cc3d62c71d504d12acbea5bcd9

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\motherboard.dat

Filesize
68KB

MD5
36a4c7f6f93b3640716cc8f7a9f6db3f

SHA1
db3f9df09d8a094e43b363f972eacd27edf00743

SHA256
a361e44ee778b08f9021e48d77eb1ae445231be9742f3a105fd90584ecde548f

SHA512
d8a8d178b550f071994cbe3bc656cc0872cff25c74e6d92c408fcd64b8eec8b3223a62a5e9d157f94a25a1e60ab846b66e1a20a6b65a8ca828d70214496e696a

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\netul.dll

Filesize
1.9MB

MD5
9dd742a37e5a1415d7b5b0974cdf2a00

SHA1
982f419dc699c88f9ceb16b85755d1e3d00cff01

SHA256
eeaf89982987a985ffb27c216d3eb28e9be2ab6ed1f1f77d678b629d6a98de2f

SHA512
521d061bf83b99329927166ed523b55c9a8277ec4e545bed2be86c7f1329c6d06b4621be2dbf7460aa8da02f20ca5324aef4f5d0cf25072039a36e0524d4be0b

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\netul64.dll

Filesize
2.3MB

MD5
54ee8f3b8f7220a979b9dcb0ed8dc283

SHA1
7f8b568c1540e0bade05144cb8289432b770f693

SHA256
e1f5f535baf57133eccf9da9f80231d611740172e00194a5f88eb11af1518ff3

SHA512
e098271fbf4ac6283c4d61ab3bdf7a232a0f31468eede8cdae9ad1594951f9fdb9ca686e92eedaa8b507d729dfb927e87cb5030111bc3175a0104d4c395f6981

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\sites.dll

Filesize
1.4MB

MD5
bcad5c8aeb6756c24e1c3d2d62a3e6a9

SHA1
4082d5561dcb55f81d2751ae98ab01f113361885

SHA256
4bf0a6d8c9ddbd671ceefe0e58d39e942bcf631cd7aa43604fbd1aaa41a5f814

SHA512
2998794ae6693b0330990ce7fdfdea0cd37b05a7142d293805c2067237349387eab0cf60fc32e6840de74979b8048e6557a76a5472865a9178dcd97e5a8d1862

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\sqlite3.dll

Filesize
621KB

MD5
2ba88dc1ee8055903e985ad9bcdc9e2a

SHA1
9fe6934fe6a8df83e70789d65ebcd2984b90552e

SHA256
ff3985a5c5c380e5bc19926e47ce246fd2c90d142af341a1d01d7ee597fea020

SHA512
7ddb14ced42e17ca0e290b7e2f5b081a691ce6ddf2c644643c63d1946ce2d49c514ce5bcbd93eecf38053216e8d467f83b4e6d3aeef0d35b2a4746670686e65b

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\sweeper\MemoryOptimizer.exe

Filesize
2.4MB

MD5
0e185b5107730dd7633ec3209cc394be

SHA1
f626ba88b28edbb8f52739ff09b191f72325c9f3

SHA256
3e9c6473fd24ace629aebc5877833c9dd0f9b1693f8c3a9a65e0fe7017dd4aa7

SHA512
2908f043df58a962c9dce1181ade1f853a9e043ef99282384122d4ea454618bc90e26eeae34cf7f16af83b0bfa1642e55c36844b0905dca51cf1cae340c0641c

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\sweeper\filemove.dll

Filesize
1.6MB

MD5
3df7574ab3ffcd8c67e3bc920221e3e1

SHA1
ceb97930ba65e1b68c00323b94af956c2ad6c59a

SHA256
0b9575f07e018a1c0f1e18d533bc01459b3555eaa8ae8364575405dcbf30850d

SHA512
bec99e982a4f34b83a7e616c532d9fac39f8c4e0c4ad7f5794f18809182c55921ba52b3128e2c02000e75cc53ba46c2d196d6e2c5ca5037d770357c6e7f49f3f

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\sweeper\software.db

Filesize
36KB

MD5
302a3c7eb815c6313819f88f73c31643

SHA1
7ef85fbcb7cda14a9a748777659bdbc5f2d45a8e

SHA256
13bb64dfcb333bcfd803b990cd55d64fbbc4798488e8ab718787e4a7a6a3d2f8

SHA512
406c333a281a95d685d0fbda59176a6aac7207db0f8d6148aa45f534276f33e6178920df3efdba89f4551848fc2e1a8b5739a2b81f2b93926fc6dfc5d9722cb1

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\uninst.exe

Filesize
2.3MB

MD5
99f6b915fe6a928762740a03d8c8e29a

SHA1
be033704f8558339c2e61c09389b82a722c881f4

SHA256
2299fd64e1f5751a7d61e7613bc6cc7283a5dd33d299bf0c441e408f5a690b21

SHA512
e87063fdee2dac7ff0b8437ed640be8662f72afceefb0da75774b4eac52f12b069bed29aa99f0740070aa3f70de506a2c0f1a388fabd22ec4d4b30df5a95fe52

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\update.exe

Filesize
1.4MB

MD5
f44c521ba4d3899782db174635de75a3

SHA1
4dd2b8872fe6743ef088e9dcc4a7007310ab2b23

SHA256
d7b5b511ed2d9047f8ffa321e632a7200e84e1d83273e2b5bafb3590352ae955

SHA512
21f9d424fb33100a2fd89c891298021c38436ac109179abb784b43a8897546897de499acc150fc60857f0508213fbb3016b2af7efef12c3187ca93ece20b26a8

Download Submit
C:\Program Files (x86)\LuDaShi\{FFE6951F-DB5A-46c6-9233-BB84C63539A6}.tmp\updatecfg.ini

Filesize
10KB

MD5
c224650b4fc83fa13219184f36bdf3e7

SHA1
cf5fc9099b8adf3eda5c4e3ef44f07bd57ee4deb

SHA256
e81c21201d9954a24995fc4fc4132a56032fc2b74f9c3a64c3228ed3f02e648f

SHA512
1d750ef9a9ca7f071ee5c3329a8b30312c0406a0666d46a93d2d070e8517e73191baa8901042f7311dedf3d30d2d2e7d9f109a97525379829655acb4d1aba6a6

Download Submit
C:\Program Files (x86)\Ludashi\360Conf.dll

Filesize
287KB

MD5
4731241f01bab84b3b10f844d057dbb2

SHA1
fe6190df827ed844a4507ecf01fc7b1cca0cc9f4

SHA256
bb82423b24a3ab1b54bea0246e3478818aee2c625cf84b5128ef282915a8465d

SHA512
cf0f0ae5369e91030502e546367893e9ee134ee27d0278a638e7c80e3c7fa4a254175665e3d27d326d65266afe350d842536877d1d4b0aef43b9b2d6068fa9a9

Download Submit
C:\Program Files (x86)\Ludashi\ComputerZ.set

Filesize
158B

MD5
84428c12e81a1ad1dc35cb30a981c229

SHA1
a256d3850d88e27cbebeaab79702332e62ee5cdf

SHA256
c431879c2d0ccb0aa7f58339971a72799d114e84ff4a4645d9e8d369498b0668

SHA512
f85981a3c6dd40632df8d4a2551251bc29de277957f0dbe23a50f966848167dccba1384a70a5714c7d98277ef651bf5edad49adaf2dc5032c8d89e90bdcd34d8

Download Submit
C:\Program Files (x86)\Ludashi\ComputerZ.set

Filesize
205B

MD5
bc3bd581fbf320f6422e9e0123f84760

SHA1
0331abe9b965f4a3c33d79adb28e5786eae96b6c

SHA256
6b74b4b23a5e373015fd75cc9a6e41b35523be8558bc61fe591318839b1a179e

SHA512
45e9b0e0fdcfe53ac299971d143a2be44f6153fae18afd1cf5ef15c575e55cb2c5ebf664d6be3f4a6b2521e5f7b3dddb9fb3120481e2fbce40e24f65c51d8d90

Download Submit
C:\Program Files (x86)\Ludashi\ComputerZ.set

Filesize
205B

MD5
bc3bd581fbf320f6422e9e0123f84760

SHA1
0331abe9b965f4a3c33d79adb28e5786eae96b6c

SHA256
6b74b4b23a5e373015fd75cc9a6e41b35523be8558bc61fe591318839b1a179e

SHA512
45e9b0e0fdcfe53ac299971d143a2be44f6153fae18afd1cf5ef15c575e55cb2c5ebf664d6be3f4a6b2521e5f7b3dddb9fb3120481e2fbce40e24f65c51d8d90

Download Submit
C:\Program Files (x86)\Ludashi\ComputerZ.set

Filesize
278B

MD5
840277008960d6f54c2efc16ca93fe53

SHA1
31071c3bd7e2b54dbaa3fa8791b356a28d0ce575

SHA256
4db08f65072ce278e83a3875153a57fa42eeea6a756620c6f10d4c0a145ed384

SHA512
2b143f15b24cadfd40d8af679eb954a73c86b4b86fff3ad478f8aadb67a4c6e1f74afa9f86b5882863c3a8fecd9a8865273e2a46cbc26b32bbe435c592a8bf29

Download Submit
C:\Program Files (x86)\Ludashi\ComputerZ.set

Filesize
292B

MD5
381c8a1f94e14a5984c3e30cdd63cde3

SHA1
d517244be57e2bb7858d2a5988462e816c805aeb

SHA256
a779ad8fe3a3504d639f79c32940e08c42a8ab71f33e1189574c7bb9d91c5d9b

SHA512
5ca379e422a469290d0e8e181cde29a60742f6d5baf81df02ee4c392f46b112b584c90d343045a6f35dcea1374975df28a7151a017b69e42d72742789cc84e50

Download Submit
C:\Program Files (x86)\Ludashi\ComputerZ10.dll

Filesize
780KB

MD5
b738fa3cc26287b0ff567f2185e7a1cb

SHA1
d44c59eb3fde51d7173f30512e9b55a9637f3ba8

SHA256
4f14e3f37020f39a38206c6d5a300c2188c45e05d9130f02a47d43d31b4a1fbf

SHA512
1303ed770f8aeb0e9767d944f58f5444aa4236327ebfd39f9e36bb039404960dadcef22065e5ebb4fc830dd06ff5fed96c41f9dc6a582d9b4bdc2b5693e2ad7e

Download Submit
C:\Program Files (x86)\Ludashi\ComputerZTray.exe

Filesize
6.3MB

MD5
51e3cd56be3b54016d24845354d321f6

SHA1
5ac68d17cf2f1cce0cba91f53b0cfc9df4acb117

SHA256
5736e3cfe69f7aba73ed603b1a422a729ed923f9bee5449ada5f184e5cca9c8b

SHA512
c44d133077b8952be71abbf4531896ad71203d9c41f7ca36344ca323b1512cf727227de62e3c106383f88df91f818573e02e06b7ff71b611cc8796e7671aa18d

Download Submit
C:\Program Files (x86)\Ludashi\ComputerZ_CN.exe

Filesize
8.0MB

MD5
954d545795daa5ff615a51bfe0ab5020

SHA1
66a6f53462e2dd4656039821b86fd97d2767c8d1

SHA256
8850e119b863325592f5d7dc1c35916365c637e2b812aa639dda203f214eb8bc

SHA512
2a90a02fc8e8270d2a42b0509a6b505063ac0455c03fbc83db21245316faae983e78466ead53a5832122c7a56b3e910312bc17d268530ba3025b5434419a9d2b

Download Submit
C:\Program Files (x86)\Ludashi\ComputerZ_HardwareDll.dll

Filesize
10.8MB

MD5
79286fa04bc93b9a69d6e247a74e1133

SHA1
4a6b70e291ca59203cf71a8900253eca27850d0e

SHA256
1975f068591430a2e01cdd05da2ff5e2c4d4f1126f76c4bbc378b8bd0eb763ad

SHA512
2225641fbfb8b7167f6509ee0f6787e98884add16ce190442aebf3d8881aa7e2a33b19fe94763e735fecb464de7aeb329ad557a14c5fefbcd29cb4a66aa821fb

Download Submit
C:\Program Files (x86)\Ludashi\DataMgr.dll

Filesize
976KB

MD5
2ed7532cc0ffcc67f948c8d1469504c2

SHA1
3e84b817fd88786c680dbf5587b24035c0a2846c

SHA256
d069c6509ba8608ab15f301f57016ba7dcce42e35201a4c2c4e97167e0ce54b7

SHA512
7173c8bd56a2f6e103ad1fe684c5f0bb8aacaac07f705e7646057fe9c44f1b483650ec89d5c048cdb8b73b99f38147252ee863651e6de11582c275f61d274665

Download Submit
C:\Program Files (x86)\Ludashi\NetBridge.dll

Filesize
231KB

MD5
9d145902fb5b9a6da62ac85761434e31

SHA1
c817d77f59e3767d75cf5f5298d6b5711308f7e5

SHA256
98d795d55329b1057f4fd590468e648a8c34b620207fd9a0a6953f3e98d1ea43

SHA512
bbb3109bcd5ded909bfdaeb7f4f006fc5928a9bc501bad5ae8ba9805bc0d924a2c4da8bbd215480db936d663852abd9b0435fa241a40224a4cd93c4b7aff79a9

Download Submit
C:\Program Files (x86)\Ludashi\Plugin\Basic.tpi

Filesize
2.1MB

MD5
5467928ba57bc06451313f9b5c2d2c48

SHA1
d91c2c8fc3a9cd5d2d21853ef4a5f6b1c4f01494

SHA256
6d97a803bac0d2c4a4c9c5fb8bc41be0fc16d081acc99a961a6e51e78bf0f8f3

SHA512
fdb9adb2627e1b0d05ad744dd3a1eb226785f645493033f2195093215b71fb948512100e4cb5569cc430b04b88011828dbfc27801b027190d9377bcd43bab4e1

Download Submit
C:\Program Files (x86)\Ludashi\Utils\7z.dll

Filesize
1.1MB

MD5
2706693dda10c6cc79eed24c56d4e5ef

SHA1
4f34ef1bd49273a0d260b9dab15c73eb0ccb6383

SHA256
0edad8a1af22d5b97c1f324791c86243a6ecce7b5a9d2f30415af99aba9129c3

SHA512
7e7f7ae894528587ba33b6e10999549bb9a2ec2748b5662fa1b8806e5f4ce33af47507b3ef2954f2747a76b5b7c775c1cd671061f577c5016d1f8ba165bbe21c

Download Submit
C:\Program Files (x86)\Ludashi\Utils\AccountPlugin.dll

Filesize
776KB

MD5
39b83ab0530cb42e50183272842ad0e7

SHA1
4fcc3c6c2b1f0a9d8589a7764e9aed50cbd5c060

SHA256
cfedb69c99d3a1ed39b26307ade441d1f9ff6bbf208dc26f6da6400e0479ffe6

SHA512
4230b773a9d9f28ed0c42655d1c72ff143fc07ba6c475dee31f30ffe98805e21117298016afff164bcb000ba12452126446f0a94781309663e174ccebfb1ed30

Download Submit
C:\Program Files (x86)\Ludashi\Utils\CefHelper.dll

Filesize
477KB

MD5
91d986307ab1e56f7f77710664cdb70d

SHA1
18fe10c7b1ec55632c03b9f06f9d881a022c970a

SHA256
d85bfd004e2ca8dbdfa72a4bdcb1510df76ed56d46ef5128500883c8c7f7c8fb

SHA512
480659e912ef3053a4542eb2e8eaa3a70df92569e9834d950d9d7ee07e8c9d740b59f1eaed90276454ab71211da41d2f3d945cc486539cba7be3a5c5c0a61e32

Download Submit
C:\Program Files (x86)\Ludashi\Utils\CefRes.dll

Filesize
24.2MB

MD5
9bbefe9cad9a78601c66dcd1a0b23dad

SHA1
0adcea52658234a43ebe9415e2be782e1a673b96

SHA256
d08f714eda44528db314f12ecb7b69fa0cc76079c32dd6e377886c60870bd1ef

SHA512
03197f0636cfd04de2379febd76264b144330799425abc9803164d05022b276bb5f9b523cea40455fddae1cfcedeab32c7dd46002a82339c806016eb5c284cb5

Download Submit
C:\Program Files (x86)\Ludashi\Utils\ComputerZ12.dll

Filesize
977KB

MD5
e2b20bb4dcf9194350120d684d0872cb

SHA1
09144a7504aa245ef1ceaf9a12a9f679faf66641

SHA256
8c82208cf744bf8d26ead4b3d867987c7c3ef401bcd2fab22a989bb6bfcc294f

SHA512
12e6e3332718e0452195a04ec776a5abd36b49e199c9a378928f6eef5ada756ccbd438843f391d0c353a6c82fcb4dd7b3cffae1f52021a9d40b30a9cdb85d39e

Download Submit
C:\Program Files (x86)\Ludashi\Utils\ComputerZ12_x64.dll

Filesize
1.3MB

MD5
53a542f8d5e267225f5a9529ae476ab4

SHA1
2c00041c6b65dd28b39cb693f7904399713d5ea4

SHA256
2935165e31ebb2d2abfc5380a4a181a718e648574a26b3d808b7be21ff6f2bf3

SHA512
f8494946cdb4283c9d64e7d91c1164a2c679ea33fb28060b84cfbbf99a621f4b5d2001e050f7a6e13a553d2e5bc88628a7e264cec561ce1c8386f87ce2a8cc27

Download Submit
C:\Program Files (x86)\Ludashi\Utils\ComputerZ8.dll

Filesize
241KB

MD5
08d4addb59ec78303aeeb2b08030defb

SHA1
ea058e83945ef8e20712ff1c7659d528362d1b46

SHA256
c27454a2e8b56665a9282fd774b8568da3aad3a00b1ff673c5115a28acdb5f25

SHA512
ef792cda42ebca4ea3c6547b0c7f4d1aa603cb71922db154b96b22deef6ba22d1a5cb23849cf168281aaf7c956fbd46976e929ae15f3295491724c363e567b6c

Download Submit
C:\Program Files (x86)\Ludashi\Utils\ComputerZ8_x64.dll

Filesize
288KB

MD5
5a0f33714bf8ae637fb6800473819af7

SHA1
b788684a669362765f472083fc316f7d36c0eeaf

SHA256
f2e0d6fa5d7590bfc694ffe222e503dc7171ce585bde4feec3f165899caf09a1

SHA512
71113af332c7e78a8cf9a1a7221d4c10c8b6db6f61f739b3ed3755d50e130dbe26e6a73e2c370be5fb9c89ea3f711f5027a19e8df32920407fe8fb67a5236dae

Download Submit
C:\Program Files (x86)\Ludashi\Utils\LdsHelper.exe

Filesize
897KB

MD5
ffbeadd5b92e067c75ec009492bdbc22

SHA1
d9f5a96f2a05f5e5dcdb747eabba0c2ac91c5d4c

SHA256
b573bb9e46b68496f8b7348f8ba7419e7c24686ba14ab953a4d25bed39c96a48

SHA512
551d759550e54bbb22299e3424769431388011d48a72df88a7bb94d9f1e9a77eb4f02775a4ffc2384382f0e1ab9a21581b20d5fed359c53aabc652e1c17fb8c5

Download Submit
C:\Program Files (x86)\Ludashi\Utils\LdsVolumeCtrl.dll

Filesize
104KB

MD5
e3de14a4c2e1ea9c73d6e865a0fab837

SHA1
489f2b30c5e6c2af516e69ccad1f96d34411e66c

SHA256
23785aa5bae50bf822f3b2306fda41743b5937d770a8d9f391fae8f50497e20b

SHA512
941d8ec98afa5acd4b6a9d52c126e86c1e1f3460660171f70631124a422ec24b7f3c9ceca17eca01142b398a71cda045e136ffd420c01eba8cc4c883ef0cb0ef

Download Submit
C:\Program Files (x86)\Ludashi\Utils\LuDaShiHelper.dll

Filesize
164KB

MD5
48484aa35450ac9595af42af04dd7f4e

SHA1
734653c55ba2a66e893b3884e9fe31d57851051c

SHA256
04b4b37315904097e7d12d72400dd43c3f1afa39147f974299e506a152a75542

SHA512
cafcb978b36c0ad7aa4255f207dcd7b69c32217c959f03c4a63dd6f67d4f9a7e1fd008787f2ba38deabeefb5e4b58c1a7e274baf327005ad35e33b0f00758a3c

Download Submit
C:\Program Files (x86)\Ludashi\Utils\NavLauncher64.dll

Filesize
570KB

MD5
5d7d0d0f4889d1e93437c4ec5cd1fb25

SHA1
3dd4776f95035b2356cdcc15bf18331efadaea7b

SHA256
065366586b42c653f8d10078ed2f8d9670e328f15b883486cd1e56ed3d14a644

SHA512
04b6fb28fec7a6450d8bcbe241bf7c07de524f4bbf6d3a4ce1803cf372ca3c3d4d898a8e1d7126ae3a64c3b0062ad4d27d939892755c5babeb56e6196963c973

Download Submit
C:\Program Files (x86)\Ludashi\Utils\PCStoreSetup_officialwebsite.dll

Filesize
15.5MB

MD5
644dd395683f6e24eaab2ea8ef97755e

SHA1
35ad8af0b8e5016880e1a674db0503b5ed6213c5

SHA256
113d3accf947cad2e90fad7c4e77da325b824e0dddfc451b3bdd72da6b5dd272

SHA512
c5d420dd7d860576cf4bd7682d0ebc3f641f828dbdc7e24f6476d4826a6d7a773d8b71a212cf72bbbfce158eb4cb3f5fca68f8c81f6452b3c484c43a508e0681

Download Submit
C:\Program Files (x86)\Ludashi\Utils\PageMgr.dll

Filesize
425KB

MD5
019559fa067a3d9393d6ef37eed4719c

SHA1
35fbd0221ac8bad7a14f8d7fa86750d89fd595bb

SHA256
eff4f5d5632a3ffdc06ee91b80f429df3a85d3b4c73916a2a08fac433230bdbd

SHA512
48b6fc945d356ca57e0c72249f39d1fd1adbec6276050c0cce247d725a3a1162a3c61c0badcbd0180f16abd705969f1ad7ab2f9de331b1e3521bd0c959b96eba

Download Submit
C:\Program Files (x86)\Ludashi\Utils\WebDataMgr.dll

Filesize
838KB

MD5
8cba74320966b82c739229598e038f90

SHA1
2ad5e77ca9ccfba98708e485a269c03db24d6ea5

SHA256
db06ee46db8f6b86fed52b99ce4a2f3e51233cd0ed8317026047605bd9114b1e

SHA512
dac6d696497f0d887ba1410c6dd90f63d949a77104bf9a63caa455d3fd73cb9fc422ed6e50557a588be35b506a4e7e8e8d5bd4451b17fb695955e28d93bc7064

Download Submit
C:\Program Files (x86)\Ludashi\Utils\WebView.dll

Filesize
2.1MB

MD5
a1c2a27d04eac0a29b0059cdbf928a4b

SHA1
5a92213bc81287c570bbecd84e7cca5c803f275e

SHA256
12e25824f5bbd24326db59d63093e8e744be9fe0dfcddb5c136d72ba9aa97e40

SHA512
c50e130764c5c27f36d2eefcc9ba47a3dc7d283a5d250e99feb7553d9a4d9f733e856ef92a5d5c64ff2c991d7cc8cfa5f495da4465e744278ba801a4d9b3a9e2

Download Submit
C:\Program Files (x86)\Ludashi\Utils\Websocket.dll

Filesize
1.8MB

MD5
1c659410366b145d81cdbf3c92878faf

SHA1
e87c7811afc4b2fc7c08750a03027381c4cb609e

SHA256
8238b12809fa9540566b373e97e3947a8543d27def5a6cdca428d8516256dffb

SHA512
c82fe7e7943cb9c6d2f5e9f5904ae41096182d2ae777460721f563781305cff9296d470fb118fb4e30ea29f55e67f230de41e604dc418c8fbecd206353487ebb

Download Submit
C:\Program Files (x86)\Ludashi\Utils\arctrl.dll

Filesize
551KB

MD5
5d5ff285798b4fb701632f92a598142d

SHA1
709d2346fd44ae3171afc065589f0db547b49eaf

SHA256
d9dec9914a31e6396349186659c6ffb351cfb0766a8b5f9108fbaa41c92462d5

SHA512
456a41902614f7c838c1cf68a96f551fad428629ac8f0738091f4b9ce73b3862f63ff95d6856f93ddff64578d05998aa0927c29fd03d94b15fe78b121692b942

Download Submit
C:\Program Files (x86)\Ludashi\Utils\cef\CefView.exe

Filesize
2.4MB

MD5
43f06852f39316b8a9fb66cdf1655e50

SHA1
c7614b7f9dceb4316d43b4278c4a8f4514b407e9

SHA256
e2ec8057d4bcea3896881b6b8a774e35141ff24eb555ecbe37d68355f480b980

SHA512
bd0cf4f1e53f493fbe019d00567bdcbedddaa6d1b757982a358353734ee49a3abd5fb7d03577587f29422e31c02e79364c4611a386a02b7b46ce871debd12c4d

Download Submit
C:\Program Files (x86)\Ludashi\Utils\instcore.dll

Filesize
411KB

MD5
47b2c31bc568b8692b607bef27f4fa1d

SHA1
00e542b7fca1ee66030adaf40c8bbfaade17dd87

SHA256
36200786c7e9c0b66636b0be13b8d15ceeb21ea797b59b4bd118ac21e3417207

SHA512
bcd09ff477433baf937da073157f1800e0a03a95f792d7b62cb4f0d52b5d6446698192186dcbaf090d9a0627a5c1711d2b1f9d8589495e91268900bde8ea7f19

Download Submit
C:\Program Files (x86)\Ludashi\Utils\js_basic.dll

Filesize
1.1MB

MD5
79779f7e33eed9df7f1ca0582f737ad4

SHA1
322b68086ac37a99a8638b6376ed521ad6a656c9

SHA256
29f4652ef3ac7d8b9fc7a5b3ef418cfb1170dd60cbc167d42c93c7992d800c8d

SHA512
d49e1960f1a7f54c65019b286cf39e82194d355fa66bcaa3d25893fb36b2c2732fc2a2f7265fbf619d75f46ba475604415b9b08611fbac03d3faa40d6ffe7f26

Download Submit
C:\Program Files (x86)\Ludashi\Utils\netul.dll

Filesize
1.9MB

MD5
9dd742a37e5a1415d7b5b0974cdf2a00

SHA1
982f419dc699c88f9ceb16b85755d1e3d00cff01

SHA256
eeaf89982987a985ffb27c216d3eb28e9be2ab6ed1f1f77d678b629d6a98de2f

SHA512
521d061bf83b99329927166ed523b55c9a8277ec4e545bed2be86c7f1329c6d06b4621be2dbf7460aa8da02f20ca5324aef4f5d0cf25072039a36e0524d4be0b

Download Submit
C:\Program Files (x86)\Ludashi\Utils\product_helper.dll

Filesize
728KB

MD5
f63f0a084ee462e88c1072cc1836fcb4

SHA1
dd581a5c54a0e066b7006dd2c4657d3fedab9ae6

SHA256
4e345bbf2021041d6d5f333abeb91e5751538110754861818d8a7c202befcdcf

SHA512
c5b37b40e7b7271ab94309e94de707135e1e109e511a7dd510913d889f17e4688fa1c4e6247e328fb652a2f547ee6939c3280524ee0379f56ea95439f2e29d58

Download Submit
C:\Program Files (x86)\Ludashi\Utils\product_helper_x64.dll

Filesize
839KB

MD5
3dc20b526b90d2f64230a0823407a975

SHA1
beb556e7d92b7d4690e5e2630049a4fef3140103

SHA256
01e668e9d7b33243ad0b22cbd87f26b77e70799c6caff78813bade501aabdf45

SHA512
da1a9146274aacdaccca7cbfa5672163a04b9e391ac18b10660446db9b3450bc7313245f131773dae8af25dda4e6e4e897ad99d7c37c15fcbeacaabf649cab6b

Download Submit
C:\Program Files (x86)\Ludashi\computercenter.exe

Filesize
1.2MB

MD5
302c2e096402ff92c4cd1c1ef1dedf5a

SHA1
4a4e87f90f11fe64c54bf0db820daaa3d3ae535f

SHA256
1508adf83b1a0bd3230160c7c1c28167f2d3218b6da554511c5d8527ba726ea9

SHA512
ba714a9feddb557c9510fe7d0d6ef7a78e03244245102838db63d6ee5c4d9ef894eff1e56cb998470455844a97d67b96860ac99a9fdbe339807a8003cea639ef

Download Submit
C:\Program Files (x86)\Ludashi\game\gametray.dll

Filesize
457KB

MD5
39bbb7af971f719b5b2aea41defff699

SHA1
37483ba9fb0bba070a11a7e81bbcbb02b624edad

SHA256
16ff1a3abe13bb4f406ebcb1badcd90d29bc1244cae587b8b560c13e4b6b9af8

SHA512
2f2db044bfe42f6c3acc3acb3959db8a739b0057b43b1a920c6c5b899c96368333e799f4106531a457a383d32d892599c53bc7efc6e1856d2263bd1f0f617de8

Download Submit
C:\Program Files (x86)\Ludashi\netul.dll

Filesize
1.9MB

MD5
9dd742a37e5a1415d7b5b0974cdf2a00

SHA1
982f419dc699c88f9ceb16b85755d1e3d00cff01

SHA256
eeaf89982987a985ffb27c216d3eb28e9be2ab6ed1f1f77d678b629d6a98de2f

SHA512
521d061bf83b99329927166ed523b55c9a8277ec4e545bed2be86c7f1329c6d06b4621be2dbf7460aa8da02f20ca5324aef4f5d0cf25072039a36e0524d4be0b

Download Submit
C:\Program Files (x86)\Ludashi\plugin\ConfigCenter.dll

Filesize
758KB

MD5
2bc1a4d540ab92087d6cb25f4a2e60ec

SHA1
ae85d85551f63a8d75fcee60f26e0043aca395db

SHA256
2c6ffb4f0221577b73de559157be525473e78ab5e3e23ba74ae7cf271a1791a3

SHA512
2024c41895783f7eff0350fbc6f6ccb5d837930702d5fd468e5948c1b9ab3847f0225174d5e9038e613086199f521bbfb1c6446dfc132533aee4636343808161

Download Submit
C:\Program Files (x86)\Ludashi\utils\ProductInfo.dat

Filesize
90KB

MD5
b3fb833e5eb09cb3e3e14059b6095404

SHA1
cfe20977787576451903bfe20621aff456597811

SHA256
76f320735f3ee474fcf00631e5cd81c994a0659dd1420a2f18e5fa215f93b8c1

SHA512
dc859e69dee7f4515eb51777e9abd32689cd0d760439894fe6d85eb85ad01a5da3cca94dfe397e1a524cd1dc5c609556d6ba4a8ec3aa36c4165f09553c8467be

Download Submit
C:\ProgramData\Microsoft\Windows\Start Menu\Programs\鲁大师\鲁大师.lnk

Filesize
2KB

MD5
59e007e7c03e81a5b7efaa2583a6b88a

SHA1
b269acb7fb2b8a4dde36bd68a86d70b9381cf73a

SHA256
9c0758b210d267e001bf30cb2f01926aef59147ac9cf27221e14eae7e51bda70

SHA512
bde8b798375bf25005ae863ca4b1dd7bace702a2809130e8e7ee4d2f47150b4125bbc6542c7e48c3ac3c68786581a89b039ee77225597ac72c0ec70edc58c9c3

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\97XIF11T\pc[1].htm

Filesize
37B

MD5
ada78a022ea49f281ec66c46d0e079c2

SHA1
e21d7168ddfb77b723d01e2d8a24001f9524f20b

SHA256
b96fff2e4edb3bd0c1ed901021b69a2dffe7040b022a409b47a66ec4a00d9e91

SHA512
24933940a69bbcd247636316ed9b7373020b86c00984fbed79a7f635c8e4620910d86a3340e58ee57611a9c5c5542e499bc5813416d0e4b640eeb5a7a01756b4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Windows\INetCache\IE\X5UAFQZD\dzip[1].txt

Filesize
2B

MD5
444bcb3a3fcf8389296c49467f27e1d6

SHA1
7a85f4764bbd6daf1c3545efbbf0f279a6dc0beb

SHA256
2689367b205c16ce32ed4200942b8b8b1e262dfc70d9bc9fbc77c49699a4f1df

SHA512
9fbbbb5a0f329f9782e2356fa41d89cf9b3694327c1a934d6af2a9df2d7f936ce83717fb513196a4ce5548471708cd7134c2ae99b3c357bcabb2eafc7b9b7570

Download Submit
C:\Users\Admin\AppData\Local\Temp\lds_setup.log

Filesize
4KB

MD5
3b6267403c33deb2432d6a316d9d8f8c

SHA1
19568b3b078c59b84a63ec86d36b5ed9792cd527

SHA256
20331003eea6b97d7f4a681c7b8c7c1e32fbc652a5186cc5e007974c31ce3d73

SHA512
d601cef3d4876be52fddd6507732af78d0134cb4fa2952b8726c49b3b7d299da23717ce628552c26a41f88b588155f4c0f5569b497af63e250aea06a41c7d4b6

Download Submit
C:\Users\Admin\AppData\Local\Temp\lds_setup.log

Filesize
4KB

MD5
3b6267403c33deb2432d6a316d9d8f8c

SHA1
19568b3b078c59b84a63ec86d36b5ed9792cd527

SHA256
20331003eea6b97d7f4a681c7b8c7c1e32fbc652a5186cc5e007974c31ce3d73

SHA512
d601cef3d4876be52fddd6507732af78d0134cb4fa2952b8726c49b3b7d299da23717ce628552c26a41f88b588155f4c0f5569b497af63e250aea06a41c7d4b6

Download Submit
C:\Users\Admin\AppData\Local\Temp\netul.dll

Filesize
1.9MB

MD5
d8ff9e646813bf8fab7d19bc13e73d29

SHA1
210be4d33d822d8de7106c17c6e3c2bbd3d7f5f3

SHA256
8ce1e27291649fc3a4f9089774487764e9b6b1c524bb1d645876c9f79b8899f0

SHA512
6a75d492f92870f36d5885e86b2b09f252a0fd8c5a420af414f138c270576852d34a05c4c1d798e84e9d1b1ac9ccdc8abb32feac7c095793d45b772291120580

Download Submit
C:\Users\Admin\AppData\Local\Temp\{7900D1DE-76D5-48b0-9D32-C19BA15450CE}.tmp\NetBridge.dll

Filesize
231KB

MD5
9d145902fb5b9a6da62ac85761434e31

SHA1
c817d77f59e3767d75cf5f5298d6b5711308f7e5

SHA256
98d795d55329b1057f4fd590468e648a8c34b620207fd9a0a6953f3e98d1ea43

SHA512
bbb3109bcd5ded909bfdaeb7f4f006fc5928a9bc501bad5ae8ba9805bc0d924a2c4da8bbd215480db936d663852abd9b0435fa241a40224a4cd93c4b7aff79a9

Download Submit
C:\Users\Admin\AppData\Local\Temp\{7900D1DE-76D5-48b0-9D32-C19BA15450CE}.tmp\NetBridge.dll

Filesize
231KB

MD5
9d145902fb5b9a6da62ac85761434e31

SHA1
c817d77f59e3767d75cf5f5298d6b5711308f7e5

SHA256
98d795d55329b1057f4fd590468e648a8c34b620207fd9a0a6953f3e98d1ea43

SHA512
bbb3109bcd5ded909bfdaeb7f4f006fc5928a9bc501bad5ae8ba9805bc0d924a2c4da8bbd215480db936d663852abd9b0435fa241a40224a4cd93c4b7aff79a9

Download Submit
C:\Users\Admin\AppData\Local\Temp\{B45925A6-96EC-4a45-A6F2-3FE2B9DFF898}.tmp\7z.dll

Filesize
1.1MB

MD5
d35446fb052c78b036f835522323fc6e

SHA1
5806829baccf2e518717d313045dcce74834fab2

SHA256
ba64b39617186970a3a4ce9a4c051b9c0d49d0a2eb9aed34923d7571dac2e7a4

SHA512
8f406448a93a8a2fdd28ccda9bb6f4efea085a158dc28e8fd6fba082d0b35d888eed2ceed82922431e0b13b9d4e94c8958f082c239e035beaeb0df655335b9fa

Download Submit
C:\Users\Admin\AppData\Local\Temp\{CCEB3DAE-792C-4654-9D13-ADCBD1619E34}.tmp\7z.dll

Filesize
1.1MB

MD5
2706693dda10c6cc79eed24c56d4e5ef

SHA1
4f34ef1bd49273a0d260b9dab15c73eb0ccb6383

SHA256
0edad8a1af22d5b97c1f324791c86243a6ecce7b5a9d2f30415af99aba9129c3

SHA512
7e7f7ae894528587ba33b6e10999549bb9a2ec2748b5662fa1b8806e5f4ce33af47507b3ef2954f2747a76b5b7c775c1cd671061f577c5016d1f8ba165bbe21c

Download Submit
C:\Users\Admin\AppData\Local\Temp\{CCEB3DAE-792C-4654-9D13-ADCBD1619E34}.tmp\7z.dll

Filesize
1.1MB

MD5
2706693dda10c6cc79eed24c56d4e5ef

SHA1
4f34ef1bd49273a0d260b9dab15c73eb0ccb6383

SHA256
0edad8a1af22d5b97c1f324791c86243a6ecce7b5a9d2f30415af99aba9129c3

SHA512
7e7f7ae894528587ba33b6e10999549bb9a2ec2748b5662fa1b8806e5f4ce33af47507b3ef2954f2747a76b5b7c775c1cd671061f577c5016d1f8ba165bbe21c

Download Submit
C:\Users\Admin\AppData\Local\Temp\{F5DF6D46-B8ED-4a36-A67D-CD76006F6305}.tmp

Filesize
7.3MB

MD5
a58f8571f350850847a024b2dced1ec9

SHA1
bb62aeaae4d49cb76acc491d31e579ccecd8bc7f

SHA256
e649b125a2aa297dfee7ea2dbf19dfc1a7ab13680b942c01fd93c53664ae1644

SHA512
12ada40cc84bd95f963ebbfa8d3eeb36984c7f9e8976880eb8740104f135a9fbd5bd8efecb1db8d93a58cc7cc6f9cf22d6179dc19cd8c538674c74f83e36e250

Download Submit
C:\Users\Admin\AppData\Roaming\ludashi\setup.dll

Filesize
94.3MB

MD5
1630775c088be6d6fc9a694316e31353

SHA1
08c5e9402143ca1247cff59c4da32405be28a28e

SHA256
77f353ea5118e4703b638421845d4231dc69074c93abc30a19b3eccad322116b

SHA512
8fb1244e7637eb5c64bd800ad25d131f3c82df75ab7572de10972e84444f0b87366e17e86d52fa6614ed37aecaabe828b60e09bbd30f67fe36a7bb4a9768eb68

Download Submit
C:\Users\Admin\AppData\Roaming\ludashi\setup.dll

Filesize
94.3MB

MD5
1630775c088be6d6fc9a694316e31353

SHA1
08c5e9402143ca1247cff59c4da32405be28a28e

SHA256
77f353ea5118e4703b638421845d4231dc69074c93abc30a19b3eccad322116b

SHA512
8fb1244e7637eb5c64bd800ad25d131f3c82df75ab7572de10972e84444f0b87366e17e86d52fa6614ed37aecaabe828b60e09bbd30f67fe36a7bb4a9768eb68

Download Submit
C:\Users\Public\Desktop\鲁大师.lnk

Filesize
2KB

MD5
66fad43a02cca6e22a5e601b05c52ef6

SHA1
99cfdcac595416a0200091b6de13d682aacc2034

SHA256
d7e9a67ed191ed8ac2c11becaec8dff3ce10ce8e9586a878c09e30ba373119b4

SHA512
7db74bfd474145db0114aad968dc1c53b085452030449ac67adb7dddb30ae1d525055ef01aee6da2ee5d488d69da3c48c0898800a619bc993425098c4ff9f769

Download Submit
memory/4472-3698-0x0000000001B20000-0x0000000001B21000-memory.dmp

Filesize
4KB

Download
memory/4544-168-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-186-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-174-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-169-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-193-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-194-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-170-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-195-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-196-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-134-0x0000000001660000-0x0000000001661000-memory.dmp

Filesize
4KB

Download
memory/4544-197-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-161-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-171-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-172-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-160-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-158-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-159-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-173-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-157-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-192-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-156-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-191-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-154-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-190-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-188-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-153-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-189-0x0000000003890000-0x000000000398A000-memory.dmp

Filesize
1000KB

Download
memory/4544-187-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-151-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-162-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-185-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-152-0x0000000077180000-0x0000000077190000-memory.dmp

Filesize
64KB

Download
memory/4544-184-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-183-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-150-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-149-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-133-0x0000000001650000-0x0000000001651000-memory.dmp

Filesize
4KB

Download
memory/4544-148-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-182-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-147-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-146-0x0000000077180000-0x0000000077190000-memory.dmp

Filesize
64KB

Download
memory/4544-181-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-135-0x0000000001670000-0x0000000001671000-memory.dmp

Filesize
4KB

Download
memory/4544-180-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-179-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-145-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-144-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-143-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-142-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-139-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-178-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-177-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-176-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-138-0x00000000016B0000-0x00000000016B1000-memory.dmp

Filesize
4KB

Download
memory/4544-137-0x00000000016A0000-0x00000000016A1000-memory.dmp

Filesize
4KB

Download
memory/4544-175-0x0000000000770000-0x0000000000FFB000-memory.dmp

Filesize
8.5MB

Download
memory/4544-136-0x0000000001690000-0x0000000001691000-memory.dmp

Filesize
4KB

Download
memory/4852-2496-0x0000000077180000-0x0000000077190000-memory.dmp

Filesize
64KB

Download
memory/5020-3211-0x0000000077180000-0x0000000077190000-memory.dmp

Filesize
64KB

Download