Analysis

  • max time kernel
    134s
  • max time network
    131s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20231023-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20231023-enlocale:en-usos:windows10-2004-x64system
  • submitted
    28-10-2023 21:25

General

  • Target

    Redragon K630RGB.exe

  • Size

    5.4MB

  • MD5

    f43d545ff7b4f38313212f30114d7c62

  • SHA1

    84848dd6b0735eb19f27002f700b7d4d811b5501

  • SHA256

    246f1dbfde08b40348ddf8c4d5b12bc5f8bd1391366809b188e85e086dcff02c

  • SHA512

    ae051b47070c074be7860122fec08a5e21d2af8be7cadf8f8fafd177b5b93cb6dba7a85e83a60b06d77e9935a7e9712ec1845260e37902c939ce7b3abc71e5b5

  • SSDEEP

    98304:Mj8w1b2sn6foZ2RdsX3eyhwMbe83txarJXj7PbbMNhNk1kc1N:MQs6wZ2R7r83bEJboNhWkc1N

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 3 IoCs
  • Loads dropped DLL 8 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Checks SCSI registry key(s) 3 TTPs 5 IoCs

    SCSI information is often read in order to detect sandboxing environments.

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 11 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SendNotifyMessage 1 IoCs
  • Suspicious use of SetWindowsHookEx 4 IoCs
  • Suspicious use of WriteProcessMemory 5 IoCs
  • Uses Volume Shadow Copy service COM API

    The Volume Shadow Copy service is used to manage backups/snapshots.

Processes

  • C:\Users\Admin\AppData\Local\Temp\Redragon K630RGB.exe
    "C:\Users\Admin\AppData\Local\Temp\Redragon K630RGB.exe"
    1⤵
    • Checks computer location settings
    • Loads dropped DLL
    • Adds Run key to start application
    • Drops file in Program Files directory
    • Suspicious use of WriteProcessMemory
    PID:1152
    • C:\Users\Admin\AppData\Local\Temp\{E49CBC5A-3B3A-43C3-AEB1-60DD70B618D9}\ISBEW64.exe
      C:\Users\Admin\AppData\Local\Temp\{E49CBC5A-3B3A-43C3-AEB1-60DD70B618D9}\ISBEW64.exe {EFB7539B-24F3-46B6-AF6E-3B021B51EFEF}:{CA5B8A82-8EF9-4906-BA16-A2B472703A21}
      2⤵
      • Executes dropped EXE
      PID:2976
    • C:\Program Files (x86)\Redragon K630-RGB\Redragon K630-RGB.exe
      "C:\Program Files (x86)\Redragon K630-RGB\Redragon K630-RGB.exe" /Start
      2⤵
      • Executes dropped EXE
      • Suspicious use of FindShellTrayWindow
      • Suspicious use of SendNotifyMessage
      • Suspicious use of SetWindowsHookEx
      PID:708
  • C:\Windows\system32\vssvc.exe
    C:\Windows\system32\vssvc.exe
    1⤵
    • Checks SCSI registry key(s)
    • Suspicious use of AdjustPrivilegeToken
    PID:4800
  • C:\Windows\system32\srtasks.exe
    C:\Windows\system32\srtasks.exe ExecuteScopeRestorePoint /WaitForRestorePoint:2
    1⤵
    • Suspicious use of AdjustPrivilegeToken
    PID:4420
  • C:\Program Files (x86)\Redragon K630-RGB\Redragon K630-RGB.exe
    "C:\Program Files (x86)\Redragon K630-RGB\Redragon K630-RGB.exe"
    1⤵
    • Executes dropped EXE
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of SetWindowsHookEx
    PID:4640

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Program Files (x86)\InstallShield Installation Information\{4761100C-E6EA-42F8-885A-B3F73F2D9BDC}\data1.cab

    Filesize

    509KB

    MD5

    5af0621d2e5aa3cfc2d88c76399ffb6a

    SHA1

    97f981798399bdbf11144ef2795336235630d22f

    SHA256

    6d177ba4f28b6bd3f88a674d8e8aca83a0f4e5a4176b858f3878ae5c21c77f23

    SHA512

    35c911f0d31d7cc10ebc6501054e90b04ac15007c5c60317fa6770c8351f2c346acd05f8b29dca5a05ae24e65d23a401a81236bf186c4c4cd9543e7cb956b685

  • C:\Program Files (x86)\InstallShield Installation Information\{4761100C-E6EA-42F8-885A-B3F73F2D9BDC}\data73e3.rra

    Filesize

    22KB

    MD5

    d412e3a840139e689145ca698771da33

    SHA1

    81af513cbb4f8e4553d8e2a71edee71edb85dcee

    SHA256

    ffce622033846dc2e29c3b5cfea7179643dc5783805c9ffebb230c3367dcb42b

    SHA512

    18d6e45e31832a5776aa4abd77230ec3e411f089b7d73722f91b70d88a19b2b910562e73bce8aa5dfc6831649e3d4024a8201041f4d03941a2be861103b100b7

  • C:\Program Files (x86)\InstallShield Installation Information\{4761100C-E6EA-42F8-885A-B3F73F2D9BDC}\layout.bin

    Filesize

    455B

    MD5

    8449669c799c791a50b0664b66b1e7d2

    SHA1

    243adda1161ca43252561923967cc9101d0dad12

    SHA256

    15f2b9ecb993ebd1cd69fc6f10a3eeb347d109060201a94290a83760b118fc70

    SHA512

    1225160f9e64bf3b8ac1148da9b4d7265a8cbda4b256b28cfd8980d9a4a0035e333ba845e56d72778d7e7298e42fd82766fc873c452fdda309a8ef5bdf69511b

  • C:\Program Files (x86)\InstallShield Installation Information\{4761100C-E6EA-42F8-885A-B3F73F2D9BDC}\setu7402.rra

    Filesize

    384KB

    MD5

    8d699c26857440661fad1aed839ffc79

    SHA1

    7c38f49f874da346a4a3e4f3850d7cc287d83576

    SHA256

    350e4cfc8a692fc8382571d64ef00f6f4d4f997b85bb687e67ea222cdb2556ac

    SHA512

    4053a6cefe15cd29dfc4ece4d5521e1473dfc8af6275dfb7cca8863722b3807fc3ee7cdba33f0ba6ef417b3530b2cabe8d74e6235dab0554f00201305b465b9c

  • C:\Program Files (x86)\InstallShield Installation Information\{4761100C-E6EA-42F8-885A-B3F73F2D9BDC}\setup.ini

    Filesize

    570B

    MD5

    b3cb57c511ff3e9354cfc597abc9b8bf

    SHA1

    b5cf25dc40487ac42ad85d0db03b950a8bb05a28

    SHA256

    f7601be8bd1e95d1754bcc3d5aba54a7fea4f29b737a0460c3232780340957bd

    SHA512

    96b6bd78c00fea661e711848f66fa60c501e7794e5b9bb287cf585c41c763d91ea1eec25d2f8ae7d23715a25718f11d2e4f83c9dbb643bce1794ae72eec981c5

  • C:\Program Files (x86)\Redragon K630-RGB\Lang0409.ini

    Filesize

    20KB

    MD5

    4bec080428eded4e3fd8f872cbc18964

    SHA1

    64ce9436ce2c4af802e8fc7266e8a1ed5b5461b2

    SHA256

    1118ac09f097d8d8b36c9b3917de87bef1d0e2c2ce15c17fee591c73800847b3

    SHA512

    677c90d26aa5a331c32c683c07514dee801bd4f0929080c57cf9f49ae9ed873bf71282f7872e50d8bf7b2143bec747ad7f96810a76a4cf9c5605cde78197bdc5

  • C:\Program Files (x86)\Redragon K630-RGB\Redragon K630-RGB.exe

    Filesize

    3.8MB

    MD5

    6a00d8863e140c7d8b578c4f773c7dba

    SHA1

    b3b873b0d8995a2eed649f2f8d6dd500c6680e8d

    SHA256

    3959ab766ef923b0e9397df29c2bad8f3f1862368747bc44fd28e4e84cde9fbf

    SHA512

    1582a78bab5a7a68ed036da88ab36f1f760fc4b89fdc561e30cc3aaf34a96d4952e52a684650dc0a3ebe1e689a1168dd67a4d84c86cc5add582b930a1718d807

  • C:\Program Files (x86)\Redragon K630-RGB\Redragon K630-RGB.exe

    Filesize

    3.8MB

    MD5

    6a00d8863e140c7d8b578c4f773c7dba

    SHA1

    b3b873b0d8995a2eed649f2f8d6dd500c6680e8d

    SHA256

    3959ab766ef923b0e9397df29c2bad8f3f1862368747bc44fd28e4e84cde9fbf

    SHA512

    1582a78bab5a7a68ed036da88ab36f1f760fc4b89fdc561e30cc3aaf34a96d4952e52a684650dc0a3ebe1e689a1168dd67a4d84c86cc5add582b930a1718d807

  • C:\Program Files (x86)\Redragon K630-RGB\Redragon K630-RGB.exe

    Filesize

    3.8MB

    MD5

    6a00d8863e140c7d8b578c4f773c7dba

    SHA1

    b3b873b0d8995a2eed649f2f8d6dd500c6680e8d

    SHA256

    3959ab766ef923b0e9397df29c2bad8f3f1862368747bc44fd28e4e84cde9fbf

    SHA512

    1582a78bab5a7a68ed036da88ab36f1f760fc4b89fdc561e30cc3aaf34a96d4952e52a684650dc0a3ebe1e689a1168dd67a4d84c86cc5add582b930a1718d807

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\0.bmp

    Filesize

    8KB

    MD5

    b52f80f98eb85d401e81c1cafb53412b

    SHA1

    83c3d57280dca7d07346ca3e05830267a55a77eb

    SHA256

    46e78c6d781440339f79e26b076d8929ef2aff135826c0a68a155658134005d4

    SHA512

    08fd677c71b3e26c22e3e7a885c4fa654e3f645f7b3c27f6534cfdc581753b9939260d8d5b7b7606438c06d92e040f0dc89ea25cbe125c3795a0b30163749f88

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\07654.rra

    Filesize

    8KB

    MD5

    b52f80f98eb85d401e81c1cafb53412b

    SHA1

    83c3d57280dca7d07346ca3e05830267a55a77eb

    SHA256

    46e78c6d781440339f79e26b076d8929ef2aff135826c0a68a155658134005d4

    SHA512

    08fd677c71b3e26c22e3e7a885c4fa654e3f645f7b3c27f6534cfdc581753b9939260d8d5b7b7606438c06d92e040f0dc89ea25cbe125c3795a0b30163749f88

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\1.bmp

    Filesize

    8KB

    MD5

    371b5ab6fefd27e63efb1754a8744de8

    SHA1

    bb4c1022d118ed0e8d6d9c38fa7a9dcff0c0d882

    SHA256

    6887c40f48edb4ac4670b2298312c90295ab27db7a6e9e4ea4424d1ef5e45123

    SHA512

    5adca7c7768c4e5accb88a89268ad070518f50b96bd267aadd887dc3ca65f2ac9a5c3fef963e7c616227d9bac6c0e4796c30873189879c5329a8fbb35533b17e

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\17664.rra

    Filesize

    8KB

    MD5

    371b5ab6fefd27e63efb1754a8744de8

    SHA1

    bb4c1022d118ed0e8d6d9c38fa7a9dcff0c0d882

    SHA256

    6887c40f48edb4ac4670b2298312c90295ab27db7a6e9e4ea4424d1ef5e45123

    SHA512

    5adca7c7768c4e5accb88a89268ad070518f50b96bd267aadd887dc3ca65f2ac9a5c3fef963e7c616227d9bac6c0e4796c30873189879c5329a8fbb35533b17e

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\2.bmp

    Filesize

    8KB

    MD5

    0166f9a3c470b1f764e8cfdc9fcd8796

    SHA1

    fd6305a3b1664067325466fec0b75ce5de415bea

    SHA256

    7f02fe10a7074598401f9ecbe2d069cdf9ec398da2a77f2f4f1607a990034b24

    SHA512

    e41d4e71a7a1a955bb3a5c2e7c5fecee14a9aecead2404e9c3d343f4fd33d7407e792c0fbf64ec0a56b1f21406c4983e450a2baffab440eb6ca6b69f76096ef8

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\27673.rra

    Filesize

    8KB

    MD5

    0166f9a3c470b1f764e8cfdc9fcd8796

    SHA1

    fd6305a3b1664067325466fec0b75ce5de415bea

    SHA256

    7f02fe10a7074598401f9ecbe2d069cdf9ec398da2a77f2f4f1607a990034b24

    SHA512

    e41d4e71a7a1a955bb3a5c2e7c5fecee14a9aecead2404e9c3d343f4fd33d7407e792c0fbf64ec0a56b1f21406c4983e450a2baffab440eb6ca6b69f76096ef8

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\3.bmp

    Filesize

    8KB

    MD5

    a2123a0a43fd27a7c445f0b31964863e

    SHA1

    b66acdf36cef369fdce4349467f8e51f8d0e689e

    SHA256

    90dbb45de88e93d4b789d179ee1f8ada853689993ae14192676d451060fc4221

    SHA512

    3a68f57b8672eb40a1185174e1ce32a60c67c29bdf7ee11085cb69845fb428952ddbb9a6fc1347a0eef8f5b52cbaa891eeb66214e196bda9ad99c144da4a5e4a

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\37673.rra

    Filesize

    8KB

    MD5

    a2123a0a43fd27a7c445f0b31964863e

    SHA1

    b66acdf36cef369fdce4349467f8e51f8d0e689e

    SHA256

    90dbb45de88e93d4b789d179ee1f8ada853689993ae14192676d451060fc4221

    SHA512

    3a68f57b8672eb40a1185174e1ce32a60c67c29bdf7ee11085cb69845fb428952ddbb9a6fc1347a0eef8f5b52cbaa891eeb66214e196bda9ad99c144da4a5e4a

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\47683.rra

    Filesize

    8KB

    MD5

    3dc1a622de24a8203bdc4fcbf43d9104

    SHA1

    167f2ff045ed3165731cfc401981e67d46e9acb9

    SHA256

    d0447d326093e3b49038a48f1f297dec5933dc67b7886d469dc9e8fbc8d7ce06

    SHA512

    f472a2d4bc28b131d6f1fb621c89214d9dcc26ab475db1ce2f69b8d8df8e92dbd18795f81150b1712590919225a60591c5288c907d3fa415396b375a36bdc7f3

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\Main.ini

    Filesize

    10KB

    MD5

    301676627b94194bbc62e33c3d3a3c0d

    SHA1

    6f3a28f2c126dbd9720f5044434bec93071aaf43

    SHA256

    d80e1db12f1627bf0aa8d43a7404fe2143aaa96e65fa613c0f976a93a389c91a

    SHA512

    c9001aeff371ab97444f8fc16cb8541395956c712502f1ffa474071e46ea5418275289cb723555b5121a8396bb21fb4f17e70d82869a6193fc1b4b8424240294

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\UserDengColor_3.userd

    Filesize

    24KB

    MD5

    84cf4a9d9d0fb18a9aef9054c655f97b

    SHA1

    d815547ecb3643eb1ce99908c6529df18af1f8e1

    SHA256

    78768da7a3ed80e8b74f334d2bca19a993f7f17c52cb82f61a96414f2424b3c7

    SHA512

    dd6d8a2622c3b1382506cbac298d91ab0075cd59f0b9fb8c56486f1817531e678fb1e5f0c5de07518d19c4f40b15104e1f4afc768b589dc71ace887d6b17e429

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\add.bmp

    Filesize

    248B

    MD5

    8de2c71f0d16b252d578926911948f4f

    SHA1

    a425cb17f66280d064953464f17c9e68a36d14d8

    SHA256

    c24e3133f1ce6f7dac5007e30744546cd67c2ed5e6055a3d5b0d9362ad423e2a

    SHA512

    f40a9e6064c058791089e60ee415d739425b2eaa779fad09eb781ec75b76b218918d61c2e039fc85bb68111afaf0a1f0048ce2f91e1c5d983157a87d6dbcdbcd

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\dengdown.bmp

    Filesize

    672B

    MD5

    dffe99c4d5bc247f9bdbaf42c562e0b4

    SHA1

    46bb93725f64f35e4710c9ebe13f13f71ea4d2c2

    SHA256

    c6dc434a7d723939187636df03b864d10dac8021833a21752a1da49ca4caae07

    SHA512

    34a7dd757e13daf7ff453da6d69ff86fe583f64407eb128419eb0721cdfc7b8a06ebe5ef81a6fd35b0b18476bc78edfb7258fe350bc545b7e901e7ff602288e4

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\dengup.bmp

    Filesize

    840B

    MD5

    a1ade0dbab7f7be4271972ff64cf3752

    SHA1

    59574ec409ddb6c528ee510857ec3a975d98c822

    SHA256

    f97a96dd435e03a7ce59de4af391185312b0238a7fa8da381510a547095413d9

    SHA512

    1a29bcbd8bec59c2e2e7be0e1d66e70a3369cff625c53e6ab5e6e9e5e3de7efe1e3053ae804e021ee2996e8230457d7983b0908e8d8b2f36ac1f7b4c795676d3

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\downdown.bmp

    Filesize

    1KB

    MD5

    d19e023a5b7a4589843defde78774928

    SHA1

    e367aee0fa458ac35ad0286cb34eb26b43a9fb33

    SHA256

    f149c43b9ff97d4f7416f2d5c6b60cf4cf920fe58a51753541cc78b702a86134

    SHA512

    2f8a14adc9797e47f748c61c0b898526799896d834aaa34b3f83279036db1234b9156cb98045a7f0f5c550e513d6279bec40c83f9b360c59209a15d571006b3c

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\downup.bmp

    Filesize

    1KB

    MD5

    99311c4813a0eb978d6859e00e6efb4d

    SHA1

    ab25666a9350c234ef9f90174ab939aee5128aba

    SHA256

    2dbbc939824543765478f312a025b5c2a928f9ed353912fa517363b83239eb6b

    SHA512

    32dddc038a91b0e651926f6d51428324a29a266be6a4403640334ce2718cb7deb983e2c60ad0d5bb8b347adc7c42722bf61fea0f7217200e10988df09fec6311

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\hong.bmp

    Filesize

    13KB

    MD5

    e0693503b4d1a2351ee8c50ca181538f

    SHA1

    c684c2f435dec4c4e0781729621980fcb60e53dc

    SHA256

    faf7805804ec989387f2660862eb5b10c6dc4cb0437e6bf6b5a638db82976fc3

    SHA512

    8c4cf6bc42fdfc057c2983ac8de02ee5dadf75f911b1db8e23a8ca04973a8898c4047be8ea34f366337e212f3893478a5e8b57ed02385d3938d9467e4c3397d4

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\hongok.bmp

    Filesize

    13KB

    MD5

    36634b2e0bd66cf9c64cc8764e30cae9

    SHA1

    3a68b0a4cc802c2a44a8d0f566d9b19e7d489c88

    SHA256

    c4c522aa0720c6c258e83e380d4386a3cd654088444904707a427ee42b083f06

    SHA512

    08fa5dc8464423d022b7d208818a4acf7611c52601e112737faa86245c1bef32ccc017deaecaf186ccdc4f0819f196f0078de3b0fc0a0cec2479af2944633790

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\huang.bmp

    Filesize

    13KB

    MD5

    3d358c20d9db5007c2f2ea79a0bc99b8

    SHA1

    36035d09dd796ab43efc4ad6e5520f2edecdb7d3

    SHA256

    a234ef838fdbcfa7c02d299fbf47eabbf817bcedbdea2b7cf4367eda66eec2c6

    SHA512

    6840a703f0e0fa77bd874c566b5805f7c6fd459147f33c58687a07d09789d84b2a1e2f7dd2f3b5e4e59b766a43312d0c3e3b39c7b65443512ca77f7979194f4c

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\huangok.bmp

    Filesize

    13KB

    MD5

    45763e7b24d1ab3289d5e71ddd0536ae

    SHA1

    9ebdefd7916682bc8a65cfff7d24945957874d2c

    SHA256

    1c5cac75e5037b879f35c0d936ee3f2bf889e1db16effa8ea36460cf4291ab75

    SHA512

    e4bcd5bb5d92004fdd0138b394af5dec87e1317b43f81e39093079d33f61f2dec4e541f4b5ad01e7603705de54117a6f41f27ae4ccdce6458fa3405898ee70ba

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\jdt1.bmp

    Filesize

    13KB

    MD5

    178d28915cdbbce099a769c4695b6402

    SHA1

    d0d16df10996faa96fa8f691a45771ea3db284e5

    SHA256

    b552c19c54a89227b076fbada66bffddc6264cb7d33aa87729199285ec4d5081

    SHA512

    48dec0930ae38fe178f8143f94100d0726249ac1d1f0f8bfe225f7f25231cec2c3dbe9f70e5245bce0259ca8cb3df717b7d7a564a42c257e7b5584e404a4e55e

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\jdt10.bmp

    Filesize

    13KB

    MD5

    493deb35907aeb7ff0b27f5b62e27ecf

    SHA1

    87c6d95145859ca7b91f692c0948f4d97dba3079

    SHA256

    4bf3202d4520b74bf5d2998827b25ba2d5c9d5dc2fa8ce9d2869b57745c386ac

    SHA512

    43b9275757886b80357efaed6bccb2655f9526936394e1f20bf7fb11d3f909e5b0cfcf93c1c624cb8733709ac5d7c5e1ae8c1b12b3808157a70375e7652b7246

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\jdt2.bmp

    Filesize

    13KB

    MD5

    6d01458fcf354ff68dc5ed59055788e8

    SHA1

    112879bcf95823d4c091bf85549e98d387b5641f

    SHA256

    cdeae6a3715fe1d0f17dd6e9e14a2cff3d73a6e4bc709b4a914bd70064de102b

    SHA512

    83fc9def32c41d9caadf47c2e48d70d400c6fde997558e853b80398f150c25f0351e71d1c7f80c39a07aae10f366091e963cf3409015e066c5b2ef6830713cda

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\jdt3.bmp

    Filesize

    13KB

    MD5

    73da54c80710789bbead1788d5587662

    SHA1

    40828a596f2754cf122c0aeea940fb54c2f950bb

    SHA256

    fa51e553d9fa7dc89750786e5293653c02652780f75ff24b02c6cc125754b1c1

    SHA512

    4b20e867824f1e3b12832adf6077e022ad9bb850fdb1c157c0ca238eb91605711146298ddea5774995c734ee8da3e419ab1f37289712a4ec21bf4c296bc67aca

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\jdt4.bmp

    Filesize

    13KB

    MD5

    ca0514a068a2cc47d67f0133305c96cd

    SHA1

    5bab6d0e420121103eb6b4b1ef21620a9a5f49a1

    SHA256

    a928e46455a1bb924505294aa166f6fda7023c3fcf86c79ea518538689fb4a03

    SHA512

    b3ac58896b13b38f6d40e96df9ae727e095c18b5181f726386f5e2738d08374acf7aec6eb1f6c3a6e8512989630fb328f1532e8d887e5c308e167c74f42d73cb

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\jdt5.bmp

    Filesize

    13KB

    MD5

    f5dec5a5911e74de1db644808fcebde4

    SHA1

    cdb95d553e302d60b516e7031d22810014f8764f

    SHA256

    d357059f3a0269bef999e821252b69628a4bd3a88b0e0256f654987d653a27ad

    SHA512

    76cf174893de460e2c27e647290cf9797522f43fd84406eec99724465cbb78664cca3e00ad0ec19937ae1ed7f7a203d6734cf4f6de0ab380f3cdfc7be23f4a95

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\jdt6.bmp

    Filesize

    13KB

    MD5

    bf855286984d3308ff493d1b08d05c05

    SHA1

    37834802cfa146fe3f066a03a8996ed6559b2bc7

    SHA256

    aaf69acdc900d27e6cd9ee414571adc7371d7a329c94bd92014542217e6ce89b

    SHA512

    64d039c2b4621a5b9062346de68ccf55b528542964722f2036e7189d41bea32e996c4488e85bcbd01a656d712d1535b6024ff62f621a292c5f2c42d252e8ebce

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\jdt7.bmp

    Filesize

    13KB

    MD5

    e4ac62b4d84e171167c4d83ab92c26eb

    SHA1

    430367061d7a7cb822d23a8c276db551d08edc6e

    SHA256

    c27193b3d16fddb193cc0206a46ba9ab3f753a4f37cd30407286a45547b4f255

    SHA512

    0d92bc495a826e65f40fe31f90d98bb8abb614063f9cc58b6625f5cac627c38460bc54433f22dcf7d41a0ab6f7a0b4830148b8a58cb97f53a2a1b917e16b2870

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\jdt8.bmp

    Filesize

    13KB

    MD5

    494c11da781a05c047eca3f7ac76b101

    SHA1

    1150c8bcd33063d97329d57cf630a7fa7282bd78

    SHA256

    191e4af226ddb778e8d1f8de5ea580c55da1c1a5d25f7c4c5d8899bdd432d3d4

    SHA512

    0c7bd92038bd1fa8e4ae29d62dd45eb6c541fd38c68c0f4a9d3e040d937a955f695bedbae5f2bc96514ad38052807c2f1a66f637e3cde9a1adb5665020305c66

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\jdt9.bmp

    Filesize

    13KB

    MD5

    1c52e0b462c0d853630bdc1a1119e6ec

    SHA1

    a23acbc7956b7da24a89825c603105e063b40c79

    SHA256

    73112b7338d7b55d23177ee19edd5071a2d7ec0fd0efd1999f06310ad39aab54

    SHA512

    47ba5b53013e175ea4bfed22297547ae2c9b0a098eded29391fcd455e60a422c16132c5d3a05550c86a6ad1347976b2f8d4a655cc681cdbee79e82683aa2c3a0

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\julong.bmp

    Filesize

    1KB

    MD5

    37a84ca9c723545434adc0dc4de9c206

    SHA1

    ce577cd87c4cce328a7211cb0d12715b2c8ea5b3

    SHA256

    735a21f1f732edc113ed9ffdcbc15e3cc66d7d8010f1ec8406e5d8835b6bd243

    SHA512

    089123ed4cc25eed937c477b436e08b06b4516a2f9d954ea9c04b27698af378f3fba267079961d7f63982e7485a605423225c33b197123b40d1be9787b458d06

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\julongdown.bmp

    Filesize

    1KB

    MD5

    4a07eef473a84bc2c19912cba4b7a604

    SHA1

    d1da8c36205f082b97978eeef358b8ae5831135c

    SHA256

    baa709b52f66585fea670f928e6ae15084c2ea5da21171ad6a5198a2dbe8c8c6

    SHA512

    50e5d9cb043c2fd2f529bd40f3eb95e5a28afacd1eb480d53423a541f17d4e39aa871e2ed0a01139799180f3201e9f485181dc58cba83acc75697e47f064337c

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\key_down.jpg

    Filesize

    42KB

    MD5

    df07049968d3dd9592d9520b957d4935

    SHA1

    08377d1a56cc6a735ea4b9d0c85b57f7b5186a9b

    SHA256

    1aa892c43b563098278c2451595238f4f4173228b3b9791bf4f658fa39ce75ae

    SHA512

    fbadccf2135f577f340b313accbaab3504c786fe53df131f7d7fd90392622b21780012b4d8f7862e5bf15753ef29eb8370c8a75150df400c6d108eeb2024e1b0

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\key_mask.bmp

    Filesize

    517KB

    MD5

    bcf892b0ec0d067592518978c8949f7b

    SHA1

    8677c4fecdd2e63eda6931bcc0eb81d3ad9e5d6c

    SHA256

    40ac46abbbcb7ae0dbbc1d14115d0bb6624192c6415ac6ca168c6dc3f185230e

    SHA512

    9cd22a27b63e4647d103e9076039faf70d2ad32ab29afd5ba3859b5c83923e682a5696a8ff44e566373ba8094ed571255abdda9681c845babd28942141af6d03

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\key_over.jpg

    Filesize

    40KB

    MD5

    792b783449e22a39e768a73ed6f75f66

    SHA1

    e5ccc80f38fd05230a1baec773a378b5f5fdba8c

    SHA256

    f564b62886729ace71b520cad31a66a06901b35ca151142c0bbf99f1d08b1ca3

    SHA512

    dd4eb9b41d10920bd4662b2102e0625035a2ed091e851bf88e0574a67e6a3f433923d40d406a88efa9e86110b4bd86be741b6e0174ed3f3ab111f3b977e9cc2e

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\kuosan.bmp

    Filesize

    1KB

    MD5

    2e3c15e9bcf1e087c6a4e48028f6171e

    SHA1

    96884b25d4bf5c83340dcd83e58b69204350e75e

    SHA256

    8b9d529ee1666a1e5b9a69ae75bb4c353e6c32e5e1e55a669f187656fd81532b

    SHA512

    d02ff65b84e393bfc96f4eeeb7cc7ef73d453acd25b42c171e91ec6303d7d778659fba4632a746d774d8f143ff6f1e948613c7c81e03bd76a304efa42078213b

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\kuosandown.bmp

    Filesize

    1KB

    MD5

    1a59ff7d8687d24b3666d2e5d4b49918

    SHA1

    149a0f638ba77c2c8af5cb1b89b85ab262d53464

    SHA256

    0662dffefd445683e3b6b0442a68f082e11042b181d819430f2fc1067cae9b0a

    SHA512

    da1d0b278e99b31fda1bf1abf3931f6ea7505301487e10a574eb3d39d8cb803374094840730c6c271b300744e3dee3d66ed6ff08c374fdc6f5e4cdb9a69c4103

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\lan.bmp

    Filesize

    13KB

    MD5

    ab74b5e351a11c4b4cdaf95179f98640

    SHA1

    eb5ea743eda1f31277bfb9229513ed0975e75636

    SHA256

    63df03f6053d6d14ec0aa941100ffaa69c533450cc52dd023457693683f6b1e6

    SHA512

    e06308c3c370adf2cb7e43eedb3d25874df0c8635e2539285417e44546325df61dd5281865e9368a7bf61727a4456ebba1559064a7e3de3dfe9ea1eaba118e59

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\lanok.bmp

    Filesize

    13KB

    MD5

    c5eb9a314c4e1a131103f5f9baa5b24b

    SHA1

    58076d5c8561dc70543b8b8a5f66a5aa828dfbaa

    SHA256

    c7bbbe6f5b5f46bc8f5f27512d7b9a4d72ea102bb654ac070dee9d65f3f682ce

    SHA512

    1d49e715057cea6f066e2137b95523ba0e3063ff62c0ecf63a6ad719137a82ee4c53afdd0182774efe6f7c19b7f374a2ec44d6360718aa235bdce70e6178f13a

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\leftdown.bmp

    Filesize

    1KB

    MD5

    a49fe6818eb6530510c51191ad10a0d2

    SHA1

    e88ac4d5d88599adeb4faaa67538e903016bf0a0

    SHA256

    76fd8e17a90ebbf3763c2b72bd6df2348d29dba456a88b8d4ff32a33c2db4cf9

    SHA512

    c76a2151895aa2ebe59c0b59519ad707251e4807efa58cd335185045edb265213e8a8aa100fa2805811ee39a9efb0bf1c124aba97c718b08725f9478d08096ed

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\leftup.bmp

    Filesize

    1KB

    MD5

    3e2a4425a1a024385a45d4765dcf0cd7

    SHA1

    72bb2025fd05e5ee5fa15d7efda4360b7da1b0db

    SHA256

    a9574449716dbb59e57073b10ed23d5beb09dbd1875f92f679012640aef6e710

    SHA512

    86235c795cb6270377f03e48746fd3732e94a68288310b87a5aae45a9e27b6aa33bdececaa0008668192998b2901fbbc3e843f0c1543604c1d1b8edcd87e3848

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\lv.bmp

    Filesize

    13KB

    MD5

    642daa8295dca62c7306e5c7d51fc0a9

    SHA1

    d7da887265caaae9956919a88e56534e7c9cf415

    SHA256

    5d9f185ca3eb0053a915bb8df95a65d9b94a82c4ff9c7604e7090f30aa723ab4

    SHA512

    c02dbfa838fa35546452ddddf30e4067ff9239cfc3110c2cae405f2f87e9f6f9e83b48bfb4a28057a51d3bb85e732f1e802351adaebaf90b85804ff28332201a

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\lvok.bmp

    Filesize

    13KB

    MD5

    a9c429f966de5b54bb16a62587687372

    SHA1

    8140eca4374f4f6b2baf7f87a5e85d9e79805f36

    SHA256

    328997585c6e2b7e10fc57bd015d52411f2ad0ed99b82b57f0599140f3307453

    SHA512

    e52ceb923f157fdcdd77225aa96cb7dadd60989ef36ebb3857c1606a7d5fb3f588791cecdaad3fd7e4241e9b464e5b4c6c5b204f9ef2295c8b5b68cbddb632d2

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\main_Mask.bmp

    Filesize

    1.8MB

    MD5

    758a1ec3fec97ac83e2afb655d0384eb

    SHA1

    ae22519e7f9df44af3fc6b0378d05ac02ff77811

    SHA256

    07fd734e209b65072688ae12fdfa30fadcec80479734cb4b8815967b747a4e25

    SHA512

    b04cd9f467f698a62915bfc57d18bdeccc1a63420c8878dbe9d3e2e4f40a150f305b650a1e5523854beb29cfbfc9c3b8fd0b843369ed9e77c5eae9765738c6fe

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\main_disable.jpg

    Filesize

    191KB

    MD5

    d6ad147c684c4cf6c81843772c973345

    SHA1

    6519c7122fba5c50163599bbc0fc4616c2b04703

    SHA256

    d80066f4c291c2b971583d9f0ba2a187b89612a8e064ea068876e596da7e525c

    SHA512

    80b1491f5bc6c91e324e9ef5e6f0b16ceb5d5f6f79d90719fea2c838cd4d90ea130e8f85422e77f78362450d47d9cb0755512faf0cc1c35c398256269b95dd43

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\main_down.jpg

    Filesize

    157KB

    MD5

    c0909087b0876f24da12e4613cf04083

    SHA1

    deb5353be329247a3c9473f39bcfbdbacd45eb5b

    SHA256

    16a89de45af9eb092df42fec037a049292075d51239c03f2238d5503b6a00a05

    SHA512

    7a95ca6f0770c908e9d019cf2d9a7ef1436875dd9fc6dba95047979e287ec42aeb15a525a9c1b6854c3e04d9b45b7002ebf96522a36eefac95a618479daecfad

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\main_normal.jpg

    Filesize

    154KB

    MD5

    788a957c01ed708aa331514865754020

    SHA1

    b491ed9ef8aa2948a398c41f6d945a7a22d7a869

    SHA256

    0d08630b0ddec62a3b843abdbc84537202f1c451daf831eb21881b6e31ca3900

    SHA512

    fdbccaabe2b96c42843eff15805bd6c9d2321649f8b8a98f30720f3d021e0ddfd01ddb8fd8b3511ced3724b42f9bc39214acd37e7573dff8ce4974585b3ce5bb

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\main_over.jpg

    Filesize

    178KB

    MD5

    5203a94747f3fe5383d4a4562b62dfb3

    SHA1

    89b13e50f091759219fc83833edf7b58d215ee39

    SHA256

    83c4936d5b9b6c811f7b038998e48c6c325ab901a8da5bc1676a96d62f40e4eb

    SHA512

    8618f774c14369f91f89a3c166fee920081693d3a7820c2a1313ab407716fbd77802eeb9be2f4a02cfa94cef74787dae637fe594440ad1a314c750cca7af216f

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\rightdown.bmp

    Filesize

    1KB

    MD5

    ed93f09176a1ff7b2c2108feb36bc988

    SHA1

    c59c831bc48a218eb0c9a5b31d7d6e5d711152d6

    SHA256

    d0a0012af2e12280872fbd121ee1d22aba63694493bbe9f1e1fe21e546c41650

    SHA512

    44fda8896d4edd0aff0bf9589226374328d65e61cd89a8992606f4943a5e646a9e569281d02a00b9fde5edb6239205d4cc57032f0106f34c1847a685082bd388

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\rightup.bmp

    Filesize

    1KB

    MD5

    0891631497ead76fe4f1da93f76ce6df

    SHA1

    9fabf5c750e80963ab7433f84c43b8e7ed128d61

    SHA256

    8f4fd8a318d894b0ea480dfe774858d0b00b2d5a493e6ccb286ce5ee7569f856

    SHA512

    89332f3c6b9cd99d8e95a14fa711aafcd595de2dc44b1d2ae0bd9452cae1abb334accde5791b0f4db471aa359f3e17c6fe114b9b47eb952128afa7789145f3e1

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\sjsdown.bmp

    Filesize

    488B

    MD5

    8f7b8048389e0be586874b08a573ffd9

    SHA1

    4a63c31b3994497d0f9781904e451e7450efbc44

    SHA256

    28ec98201c70e40231debf2b768035d56badac5cafcc69025196ec8bcec8cfd3

    SHA512

    a5eb1cfaa0a9e4eb14ef6b10279301ac5258d724d7449c25d4cf3557798afdc23fac9507056922650c5e7e1fb1096f85fc510d9b88a4d7164532f7873d992ea4

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\sjsover.bmp

    Filesize

    488B

    MD5

    737c23893ef954f668d8bd9df6710550

    SHA1

    402ff178a9beaf20e3f08329df5511c5544748fb

    SHA256

    42b80b7561d75ba9cf7d85f16c39be51c5e10d95fdba95a9c1c554b3f59edea2

    SHA512

    641501f5805aca17dd9d28a1f6bad051d1315dde687e59ecb17dcaeb659c35212a8f1146d827a675f1cdef5f80ab69bb9a99cfb4d50e2a87a03352b58e8132ca

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\sjsup.bmp

    Filesize

    488B

    MD5

    737c23893ef954f668d8bd9df6710550

    SHA1

    402ff178a9beaf20e3f08329df5511c5544748fb

    SHA256

    42b80b7561d75ba9cf7d85f16c39be51c5e10d95fdba95a9c1c554b3f59edea2

    SHA512

    641501f5805aca17dd9d28a1f6bad051d1315dde687e59ecb17dcaeb659c35212a8f1146d827a675f1cdef5f80ab69bb9a99cfb4d50e2a87a03352b58e8132ca

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\sub.bmp

    Filesize

    248B

    MD5

    42c1de025c023d4d6d014e82a8791847

    SHA1

    d1ad38ed705f677b01f49cb70098e5cc6af237dc

    SHA256

    f4afaa21691a788e0da2522d581371d9eb6c333cb72770dfab09a7f7dd9b4bdd

    SHA512

    fd839ea8106818b28becfe48eaca1accabd7d956108fcc764d668c3e397f8168d80ee0d3c903aadaa4d9926246a229990d976a9a30e1927743bf9a47d242e0c1

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\updown.bmp

    Filesize

    1KB

    MD5

    c6823b7e7e49e687b64a06c3ac5acfc8

    SHA1

    4abff8eb754b8963be40763c0aad4768a7ef99d4

    SHA256

    3322185d2620569c888ada777da69f390b5b5041cac9ae50b799c72737bcf5f1

    SHA512

    c5266df0d23d56fd83b13fe7d4c242687bbfd67d0552feb2e8200714bc1290ef13b1471953991e8edf3cf960f2df442c8ebbe5eab9308c8982dd36028427f913

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\upup.bmp

    Filesize

    1KB

    MD5

    ac4f7011822fe9d711a5aab8836a89e3

    SHA1

    5d423b92e4bc39e160b0f0a8b1a9af0992529896

    SHA256

    911325035c3c8e90e86015fc9e29d197b272e73845856f0c59a6e4a8e958b41d

    SHA512

    6e4cb5557d7e781d37d52a1b638425c628c490e86189541228367036323973eb9c6b9274639453f048a823ea3972d8519ca494cec4521d9b1c05c51a795a9a7d

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\user1down.bmp

    Filesize

    1KB

    MD5

    448a39793b4bcb248331d353f3f049bf

    SHA1

    77cc4c427a095aab2461f31492a665ed78c74573

    SHA256

    3708b62578fa1038642dd6cc5965c47ee05ad3c1d94ec40ea4b1e63178b49f4a

    SHA512

    56b951444694ad34c16f006887001d45f15ceea49ef2a580bcd10370177d114d900b7e0a57257ce02b6e6aa0767399f58b5e46da0405aea194647ea9de9c13cc

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\user1up.bmp

    Filesize

    1KB

    MD5

    3ecb1bccdf386e40a50012d79b7ef41e

    SHA1

    f11057ad713f24bfeef6a893ed77390089499b2d

    SHA256

    5191a5dfd71a102d6ea2bfa98b81740dfcfe02e24171947cdd330a9b0ad4c2bf

    SHA512

    f0b0d3ac6ed223937fc53c689e65b0955ec3f11d4c240ca4dc67f33afc0d3dadb4f16f44ddb411114277a71e45a16a25f6544ca76c1ac2b9a81d4c3c2758e9c5

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\user2down.bmp

    Filesize

    1KB

    MD5

    15f02e900820a72f5c82519b45b80bd5

    SHA1

    6d8ac2c4979215750bf833866990170e4c40abd4

    SHA256

    a813c7819b49dee1b8dbc866bfacedb7d7586a63a0c31524840a4bed8193a3d6

    SHA512

    ec3a57f218ea2085eb8c0ca7c0e28792a3f3bfd85a45e2b1ad73c7306d1f1f3e9f7241cfb0270536dc8e54051066603b798b719e1c99d301dc1888a11847ca48

  • C:\Program Files (x86)\Redragon K630-RGB\Skins\user2up.bmp

    Filesize

    1KB

    MD5

    5240980a18717aa952587db2ab59b9c9

    SHA1

    0b912b631e109cd9d188e6360d6feb0479cf0def

    SHA256

    f39c6ad330b589d6d4e7c19275e1f6a1467ab520be99694589dbf8e22fcd3c36

    SHA512

    88b9bebc03dbe2215457db53defb479a87a2935db6cf609c5ac7966df1c58df862019e817f652c722ffa568ba3d88df18ca7d76de0974d39044b79b5b4f1edb2

  • C:\Users\Admin\AppData\Local\Redragon_K630RGB\UserDengColor_1.userd

    Filesize

    24KB

    MD5

    84cf4a9d9d0fb18a9aef9054c655f97b

    SHA1

    d815547ecb3643eb1ce99908c6529df18af1f8e1

    SHA256

    78768da7a3ed80e8b74f334d2bca19a993f7f17c52cb82f61a96414f2424b3c7

    SHA512

    dd6d8a2622c3b1382506cbac298d91ab0075cd59f0b9fb8c56486f1817531e678fb1e5f0c5de07518d19c4f40b15104e1f4afc768b589dc71ace887d6b17e429

  • C:\Users\Admin\AppData\Local\Temp\{E49CBC5A-3B3A-43C3-AEB1-60DD70B618D9}\ISBEW64.exe

    Filesize

    114KB

    MD5

    2a276ba2b7782476302c59d0f760f4bc

    SHA1

    43bbb884a7b65534c417ae5a3f3f17f7e80e2f7d

    SHA256

    d3294cc8c750c4bd63016e87e9d2c53a501c173567f4edb9a3c6f1bd9836064a

    SHA512

    6bed8d3291ed422aed187637838bfb957ea59c772be3bc52c12242474712f411e174afe55ed6955b910a8ce3635f1552260063cf6db428a4e34bc76a4e3e01f6

  • C:\Users\Admin\AppData\Local\Temp\{E49CBC5A-3B3A-43C3-AEB1-60DD70B618D9}\ISBEW64.exe

    Filesize

    114KB

    MD5

    2a276ba2b7782476302c59d0f760f4bc

    SHA1

    43bbb884a7b65534c417ae5a3f3f17f7e80e2f7d

    SHA256

    d3294cc8c750c4bd63016e87e9d2c53a501c173567f4edb9a3c6f1bd9836064a

    SHA512

    6bed8d3291ed422aed187637838bfb957ea59c772be3bc52c12242474712f411e174afe55ed6955b910a8ce3635f1552260063cf6db428a4e34bc76a4e3e01f6

  • C:\Users\Admin\AppData\Local\Temp\{E49CBC5A-3B3A-43C3-AEB1-60DD70B618D9}\{4761100C-E6EA-42F8-885A-B3F73F2D9BDC}\DIFxData.ini

    Filesize

    86B

    MD5

    10baa5b67536f4433f37534b9c8bb828

    SHA1

    82e5c34b1279afda223b639b49078d03c52875f5

    SHA256

    1b9fd5c1f18357bd459be20bfcbf47ee18fa0c5d5cc42f6aed2705d5868b65f4

    SHA512

    49c6798ebb3b6137cafb78b88350d02094367523dcf8f9e580de1941e514b8b3df786d1d817090e5dab80ac4d0d015796b2ce28b296db31d111e0d0bbaeebb37

  • C:\Users\Admin\AppData\Local\Temp\{E49CBC5A-3B3A-43C3-AEB1-60DD70B618D9}\{4761100C-E6EA-42F8-885A-B3F73F2D9BDC}\FontData.ini

    Filesize

    39B

    MD5

    00f313e3e007599349a0c4d81c7807c4

    SHA1

    f0171f15aab836a1979d3833e46b5e59e4ea32e0

    SHA256

    766ee687d90b0217eb41cb85aca04375bdc24db986a33536631f864b7ce1a08a

    SHA512

    8bb25a62c0b1640dec36403a493ed54c05f7cde7b7357c8faea785a79c4b76bbe6a3d6fe78db52b558a37abac90c2b2e8b13868a76294554d51670e9fa8764ad

  • C:\Users\Admin\AppData\Local\Temp\{E49CBC5A-3B3A-43C3-AEB1-60DD70B618D9}\{4761100C-E6EA-42F8-885A-B3F73F2D9BDC}\VASData.ini

    Filesize

    30B

    MD5

    b16ff78e4420d4049da82fffe3026d31

    SHA1

    612be1fde59d3d4534a4d8e0947b65060ed6146b

    SHA256

    029f695d7a558a0070bdb42c07d35c7ae436fbd0688079b7ada58093505d9579

    SHA512

    8042f5a1f12ef644b7def42c52c90a252ff4a6c099956530cff8147daf2edd8934f5bc79bb560f550d47755fead71a1d0fbe7d52fdc0fb30a0ad64471beaaf7a

  • C:\Users\Admin\AppData\Local\Temp\{E49CBC5A-3B3A-43C3-AEB1-60DD70B618D9}\{4761100C-E6EA-42F8-885A-B3F73F2D9BDC}\_IsRes.dll

    Filesize

    545KB

    MD5

    936570437cdd944172b100e677603523

    SHA1

    97e56b29733846d4ffef7791830f3e9ae355783a

    SHA256

    682e00f308be80c69172b0e7d76f2ed555b7838be7b7f61774687aa1cdf1ce8b

    SHA512

    d357c39570079e2ce64c0affb0c33b46033c41244df9812e69b7bff7cc75287ea103bbe27dc7ae775b41d4a2dc0fe1088ad04369b6b435dbdb5ef70145ab9df4

  • C:\Users\Admin\AppData\Local\Temp\{E49CBC5A-3B3A-43C3-AEB1-60DD70B618D9}\{4761100C-E6EA-42F8-885A-B3F73F2D9BDC}\_IsRes.dll

    Filesize

    545KB

    MD5

    936570437cdd944172b100e677603523

    SHA1

    97e56b29733846d4ffef7791830f3e9ae355783a

    SHA256

    682e00f308be80c69172b0e7d76f2ed555b7838be7b7f61774687aa1cdf1ce8b

    SHA512

    d357c39570079e2ce64c0affb0c33b46033c41244df9812e69b7bff7cc75287ea103bbe27dc7ae775b41d4a2dc0fe1088ad04369b6b435dbdb5ef70145ab9df4

  • C:\Users\Admin\AppData\Local\Temp\{E49CBC5A-3B3A-43C3-AEB1-60DD70B618D9}\{4761100C-E6EA-42F8-885A-B3F73F2D9BDC}\_IsRes.dll

    Filesize

    545KB

    MD5

    936570437cdd944172b100e677603523

    SHA1

    97e56b29733846d4ffef7791830f3e9ae355783a

    SHA256

    682e00f308be80c69172b0e7d76f2ed555b7838be7b7f61774687aa1cdf1ce8b

    SHA512

    d357c39570079e2ce64c0affb0c33b46033c41244df9812e69b7bff7cc75287ea103bbe27dc7ae775b41d4a2dc0fe1088ad04369b6b435dbdb5ef70145ab9df4

  • C:\Users\Admin\AppData\Local\Temp\{E49CBC5A-3B3A-43C3-AEB1-60DD70B618D9}\{4761100C-E6EA-42F8-885A-B3F73F2D9BDC}\isrt.dll

    Filesize

    217KB

    MD5

    0f68d760fb480a1b039ca7d6b877d24c

    SHA1

    259d101a49646c3abe17114111ff9aa7df1b8fc2

    SHA256

    5974ce20a780d384383cfc24af4dc62bc22ca67ce1d76ea9981c42631480ab63

    SHA512

    d551553ceca5b9ba86f7422893df78ce71167096cbeae65319c344abf57601e8e6c8f9779a9a45ed28ce32c3e1c477b843d8ad4437e0643c0fabf56ab7f586d1

  • C:\Users\Admin\AppData\Local\Temp\{E49CBC5A-3B3A-43C3-AEB1-60DD70B618D9}\{4761100C-E6EA-42F8-885A-B3F73F2D9BDC}\isrt.dll

    Filesize

    217KB

    MD5

    0f68d760fb480a1b039ca7d6b877d24c

    SHA1

    259d101a49646c3abe17114111ff9aa7df1b8fc2

    SHA256

    5974ce20a780d384383cfc24af4dc62bc22ca67ce1d76ea9981c42631480ab63

    SHA512

    d551553ceca5b9ba86f7422893df78ce71167096cbeae65319c344abf57601e8e6c8f9779a9a45ed28ce32c3e1c477b843d8ad4437e0643c0fabf56ab7f586d1

  • C:\Users\Admin\AppData\Local\Temp\{E49CBC5A-3B3A-43C3-AEB1-60DD70B618D9}\{4761100C-E6EA-42F8-885A-B3F73F2D9BDC}\isrt.dll

    Filesize

    217KB

    MD5

    0f68d760fb480a1b039ca7d6b877d24c

    SHA1

    259d101a49646c3abe17114111ff9aa7df1b8fc2

    SHA256

    5974ce20a780d384383cfc24af4dc62bc22ca67ce1d76ea9981c42631480ab63

    SHA512

    d551553ceca5b9ba86f7422893df78ce71167096cbeae65319c344abf57601e8e6c8f9779a9a45ed28ce32c3e1c477b843d8ad4437e0643c0fabf56ab7f586d1

  • C:\Users\Admin\AppData\Local\Temp\{E49CBC5A-3B3A-43C3-AEB1-60DD70B618D9}\{4761100C-E6EA-42F8-885A-B3F73F2D9BDC}\setup.inx

    Filesize

    227KB

    MD5

    9a5b4fdd682d12784ffcdbfeb3fd7921

    SHA1

    79f6adb35ff02978c44271a7f38ccaa811f5c366

    SHA256

    203f31adde3544cd7a3073a567590016db2c3b20244dc8853c529e59f9013259

    SHA512

    d57e66307d4e7f3e8574e1115fc77e493d1bb9c570617fb78c0bddcaba3e29fec47d6fad237c05ae6cdd67a6b21e9aa54bba4fc083afa3cec892ce6b9e480b91

  • C:\Users\Admin\AppData\Local\Temp\{EBD9FF43-5FE1-4AD1-9F56-86A760D84720}\Disk1\ISSetup.dll

    Filesize

    542KB

    MD5

    2dd1c4a68e2a8a401018f5efdab5adde

    SHA1

    13fc964947516230c70d38281d0312bc1afe13c0

    SHA256

    7c173cdaea8e3a3cc95b7196681cb904f3996f81289d5890b30f38c99eba45ae

    SHA512

    c69f3e46d36e07e6093f66cf072c83fc8c7249ff86c9cd84168ee46dbb7a621d562cee7de5685b408bd5f71889d6433e99ff8045955e5b8ab2c9eeb71941d165

  • C:\Users\Admin\AppData\Local\Temp\{EBD9FF43-5FE1-4AD1-9F56-86A760D84720}\Disk1\ISSetup.dll

    Filesize

    542KB

    MD5

    2dd1c4a68e2a8a401018f5efdab5adde

    SHA1

    13fc964947516230c70d38281d0312bc1afe13c0

    SHA256

    7c173cdaea8e3a3cc95b7196681cb904f3996f81289d5890b30f38c99eba45ae

    SHA512

    c69f3e46d36e07e6093f66cf072c83fc8c7249ff86c9cd84168ee46dbb7a621d562cee7de5685b408bd5f71889d6433e99ff8045955e5b8ab2c9eeb71941d165

  • C:\Users\Admin\AppData\Local\Temp\{EBD9FF43-5FE1-4AD1-9F56-86A760D84720}\Disk1\ISSetup.dll

    Filesize

    542KB

    MD5

    2dd1c4a68e2a8a401018f5efdab5adde

    SHA1

    13fc964947516230c70d38281d0312bc1afe13c0

    SHA256

    7c173cdaea8e3a3cc95b7196681cb904f3996f81289d5890b30f38c99eba45ae

    SHA512

    c69f3e46d36e07e6093f66cf072c83fc8c7249ff86c9cd84168ee46dbb7a621d562cee7de5685b408bd5f71889d6433e99ff8045955e5b8ab2c9eeb71941d165

  • C:\Users\Admin\AppData\Local\Temp\{EBD9FF43-5FE1-4AD1-9F56-86A760D84720}\_Setup.dll

    Filesize

    153KB

    MD5

    7d0a617a8820e4615d3af7012938214c

    SHA1

    625dc413c271403512e77cbc15eac534a78b5522

    SHA256

    f8ccb1f1bf5c6d066056c67644b43b561f994a909f2d0d4c53071016f2dccd1e

    SHA512

    67c3e2c71c07022575e92ad0038e95dd1899311f680fe7dd7296a2dddb2e4235a8b5962e4b00679992917e3a93fa719337f8f5ec317d1fe493d992e4f27b2869

  • C:\Users\Admin\AppData\Local\Temp\{EBD9FF43-5FE1-4AD1-9F56-86A760D84720}\_Setup.dll

    Filesize

    153KB

    MD5

    7d0a617a8820e4615d3af7012938214c

    SHA1

    625dc413c271403512e77cbc15eac534a78b5522

    SHA256

    f8ccb1f1bf5c6d066056c67644b43b561f994a909f2d0d4c53071016f2dccd1e

    SHA512

    67c3e2c71c07022575e92ad0038e95dd1899311f680fe7dd7296a2dddb2e4235a8b5962e4b00679992917e3a93fa719337f8f5ec317d1fe493d992e4f27b2869

  • C:\Users\Admin\AppData\Local\Temp\{EBD9FF43-5FE1-4AD1-9F56-86A760D84720}\_Setup.dll

    Filesize

    153KB

    MD5

    7d0a617a8820e4615d3af7012938214c

    SHA1

    625dc413c271403512e77cbc15eac534a78b5522

    SHA256

    f8ccb1f1bf5c6d066056c67644b43b561f994a909f2d0d4c53071016f2dccd1e

    SHA512

    67c3e2c71c07022575e92ad0038e95dd1899311f680fe7dd7296a2dddb2e4235a8b5962e4b00679992917e3a93fa719337f8f5ec317d1fe493d992e4f27b2869

  • C:\Users\Admin\AppData\Local\Temp\{EBD9FF43-5FE1-4AD1-9F56-86A760D84720}\setup.ini

    Filesize

    496B

    MD5

    3fd6b58e10044bd9e5ef6f759be63387

    SHA1

    b4d7d301f49ffe1f119c5f2a989f509e304aaf38

    SHA256

    a8bd1bacb00fee25fb4e0f1df57b87f24273f9c590426594ec80c59719201f0c

    SHA512

    39424e6bc86f962eeccef0751453aa1342238f754660d87644bd2d7df57349f5a33227b1a44c689b15628c92a6932a5be5f085779b07921d914e6e89863390c5

  • memory/1152-29-0x0000000000660000-0x0000000000662000-memory.dmp

    Filesize

    8KB

  • memory/1152-95-0x0000000004C10000-0x0000000004C98000-memory.dmp

    Filesize

    544KB

  • memory/1152-28-0x00000000027C0000-0x000000000295A000-memory.dmp

    Filesize

    1.6MB

  • memory/1152-25-0x00000000027C0000-0x000000000295A000-memory.dmp

    Filesize

    1.6MB

  • memory/1152-96-0x0000000004C10000-0x0000000004C98000-memory.dmp

    Filesize

    544KB

  • memory/1152-102-0x0000000004ED0000-0x0000000004F59000-memory.dmp

    Filesize

    548KB

  • memory/1152-97-0x0000000004180000-0x0000000004182000-memory.dmp

    Filesize

    8KB

  • memory/1152-129-0x00000000027C0000-0x000000000295A000-memory.dmp

    Filesize

    1.6MB

  • memory/1152-130-0x0000000004C10000-0x0000000004C98000-memory.dmp

    Filesize

    544KB

  • memory/1152-564-0x00000000027C0000-0x000000000295A000-memory.dmp

    Filesize

    1.6MB