Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

7

Hone - Installer.exe

windows7-x64

4

Hone - Installer.exe

windows10-2004-x64

4

$PLUGINSDI...p.html

windows7-x64

1

$PLUGINSDI...p.html

windows10-2004-x64

1

$PLUGINSDI...x.html

windows7-x64

1

$PLUGINSDI...x.html

windows10-2004-x64

1

$PLUGINSDI...app.js

windows7-x64

1

$PLUGINSDI...app.js

windows10-2004-x64

1

$PLUGINSDI...uts.js

windows7-x64

1

$PLUGINSDI...uts.js

windows10-2004-x64

1

$PLUGINSDI...dle.js

windows7-x64

1

$PLUGINSDI...dle.js

windows10-2004-x64

1

$PLUGINSDI...min.js

windows7-x64

1

$PLUGINSDI...min.js

windows10-2004-x64

1

$PLUGINSDI...ons.js

windows7-x64

1

$PLUGINSDI...ons.js

windows10-2004-x64

1

$PLUGINSDI...ics.js

windows7-x64

1

$PLUGINSDI...ics.js

windows10-2004-x64

1

$PLUGINSDI...nds.js

windows7-x64

1

$PLUGINSDI...nds.js

windows10-2004-x64

1

$PLUGINSDI...ies.js

windows7-x64

1

$PLUGINSDI...ies.js

windows10-2004-x64

1

$PLUGINSDI...ate.js

windows7-x64

1

$PLUGINSDI...ate.js

windows10-2004-x64

1

$PLUGINSDI...der.js

windows7-x64

1

$PLUGINSDI...der.js

windows10-2004-x64

1

$PLUGINSDI...ils.js

windows7-x64

1

$PLUGINSDI...ils.js

windows10-2004-x64

1

$PLUGINSDI...ler.js

windows7-x64

1

$PLUGINSDI...ler.js

windows10-2004-x64

1

$PLUGINSDI...ate.js

windows7-x64

1

$PLUGINSDI...ate.js

windows10-2004-x64

1

Resubmissions

11/04/2024, 06:06

240411-gt1pxagh4y 7

11/04/2024, 05:53

240411-gllk1sdg28 7

11/04/2024, 05:51

240411-gj89asgf81 7

11/04/2024, 05:48

240411-ghl3dadf69 7

11/04/2024, 05:44

240411-gfgpwagf3y 7

11/04/2024, 05:39

240411-gcnn1sde52 7

Analysis

  • max time kernel
    147s
  • max time network
    153s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240319-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240319-enlocale:en-usos:windows10-2004-x64system
  • submitted
    11/04/2024, 05:48

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Hone - Installer.exe

  • Size

    2.0MB

  • MD5

    67d529ffa7aef6629700ce3a9e990ac2

  • SHA1

    6ba55f541defc22f92473a45d2187848a0d4126a

  • SHA256

    bcc8812a2385f7a4db7d7633eb5ce0770e5cc3b5093873fd3e0a7c239f8daa1d

  • SHA512

    bdda91b0d95292ddae966754c6b3af618b60f4e575033306023db5e923b4a422b7a82bca1974645a15d8631221f7e4cacb399a34737c2c1f1961416c74ae7c64

  • SSDEEP

    49152:6Dr+mxE87vxpsrFpIvPBDurAaMs/Y6NTTCca:6H+4PN+TIvyMZ+O

Score
4/10

Malware Config

Signatures

  • Executes dropped EXE 1 IoCs
  • Loads dropped DLL 11 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious use of AdjustPrivilegeToken 1 IoCs
  • Suspicious use of SetWindowsHookEx 3 IoCs
  • Suspicious use of WriteProcessMemory 2 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Hone - Installer.exe
    "C:\Users\Admin\AppData\Local\Temp\Hone - Installer.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:3932
    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\OWinstaller.exe
      "C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\OWinstaller.exe" Sel=0&Extension=mgkabooemhaamambocobpeoeelpadcjhjgbcfhlc&Name=Hone&Referer=hone.gg&Browser=opera -partnerCustomizationLevel 1 -customPromoPages --owelectronUrl=https://download.overwolf.com/setup/electron/mgkabooemhaamambocobpeoeelpadcjhjgbcfhlc --disable-change-location --disable-ow-shortcut-ui --disable-app-shortcut-ui --enable-app-shortcut --silent-setup --app-name="Hone" --auto-close -exepath C:\Users\Admin\AppData\Local\Temp\Hone - Installer.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of SetWindowsHookEx
      PID:2928
  • C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=asset_store.mojom.AssetStoreService --lang=en-US --service-sandbox-type=asset_store_service --no-appcompat-clear --mojo-platform-channel-handle=3864 --field-trial-handle=2244,i,11986678581565715302,451159359636456336,262144 --variations-seed-version /prefetch:8
    1⤵
      PID:3668

    Network

    MITRE ATT&CK Enterprise v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • C:\Users\Admin\AppData\Local\Overwolf\Settings\SettingsPageBasic.xml
      Filesize

      752B

      MD5

      790d67bd0a781c8e7f8ffb4821c5906d

      SHA1

      0be5b5adcf56c557cd2e9e26d89f5362ca21417f

      SHA256

      93e51272f2b2cefaff5b0e5013b5e34d71960e0ad86597ff221100a402397fb9

      SHA512

      2e45e5e2e8e093c9f74238ec73a66263f5253a9a2015ac42f48c7e7cebd17720ee23393eca774689dcb85600892617b0447f5e01075484286ed920a3e010ee86

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\CommandLine.dll
      Filesize

      68KB

      MD5

      a68e017222aea5d2ec74111404e908d0

      SHA1

      b6afde07da7e8d4c92e44424cf69269369bc4815

      SHA256

      db072dafd56c8e71353ba12ecf5751723c65e56db70b90c57fc979850da7ea2d

      SHA512

      c8526970c5288dd6b9bd44f8a2a25e8b22565e2cbb5d77e70e866d9ce19e468a879501a8f29dc7bd60e259688d421c879f894510c75934b4b23ca24488f6ef34

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\INetC.dll
      Filesize

      24KB

      MD5

      640bff73a5f8e37b202d911e4749b2e9

      SHA1

      9588dd7561ab7de3bca392b084bec91f3521c879

      SHA256

      c1e568e25ec111184deb1b87cfda4bfec529b1abeab39b66539d998012f33502

      SHA512

      39c6c358e2b480c8cbebcc1da683924c8092fb2947f2da4a8df1b0dc1fdda61003d91d12232a436ec88ff4e0995b7f6ee8c6efbdca935eaa984001f7a72fea0a

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\Newtonsoft.Json.dll
      Filesize

      692KB

      MD5

      98cbb64f074dc600b23a2ee1a0f46448

      SHA1

      c5e5ec666eeb51ec15d69d27685fe50148893e34

      SHA256

      7b44639cbfbc8ddac8c7a3de8ffa97a7460bebb0d54e9ff2e1ccdc3a742c2b13

      SHA512

      eb9eabee5494f5eb1062a33cc605b66d051da6c6990860fe4fd20e5b137458277a636cf27c4f133012d7e0efaa5feb6f48f1e2f342008482c951a6d61feec147

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\OWInstaller.exe
      Filesize

      298KB

      MD5

      698245574b5bc050e19cd1b3bee62439

      SHA1

      d0a48d07f102966f80c01186f70ed1f56f44a6b3

      SHA256

      971e35ab45daed3b5a837508fd151854db7b5f448785518c9df85f3d298a2c07

      SHA512

      ca4446593cd5372d1b0fe6b6280a32ac92b8e04c2860d5ce2c4ad41f12c6f72ecf77ef8f59e20b863ef689e0f93dc46701ea012899996777df7d22034187e72c

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\OWinstaller.exe.config
      Filesize

      632B

      MD5

      82d22e4e19e27e306317513b9bfa70ff

      SHA1

      ff3c7dd06b7fff9c12b1beaf0ca32517710ac161

      SHA256

      272e4c5364193e73633caa3793e07509a349b79314ea01808b24fdb12c51b827

      SHA512

      b0fb708f6bcab923f5b381b7f03b3220793eff69559e895d7cf0e33781358ec2159f9c8276bf8ba81302feda8721327d43607868de5caaa9015d7bb82060a0b9

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\OverWolf.Client.CommonUtils.dll
      Filesize

      645KB

      MD5

      4ede0a9a0c751563ab155934d9662b69

      SHA1

      10d4e31b6ef865f8ffe9f1e02384b4d9f462ca9a

      SHA256

      c9d29eb4d36152fa2841d2684c8f1769edcc50af6759712ad591b9a04b3d1622

      SHA512

      fe83de892d0c1ce8e4188ba6d2edf2b1e234065de3477bc7d09049c36ca011330a2785063a268a7e855cb2f521fda4b1a741f1a0f68e3c5e7b83fd547327e0e2

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\SharpRaven.dll
      Filesize

      80KB

      MD5

      c5d79f6248a8e360e21fb1978032e009

      SHA1

      64644020bdeaae3a5ef37cf406a6d041ba02470d

      SHA256

      23d1590ca13f9bc7d6ce53a5cd5087f65d424172716de0809e61207640175275

      SHA512

      e133802b1e6d759283229349821776ef54efce7d7ee854b31d967ad09b5b54f548e374d6c9cee6f4a215ac6a2e4f6cdbdde17045f6da9b4722f9ff66b414e6f4

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\System.dll
      Filesize

      11KB

      MD5

      7399323923e3946fe9140132ac388132

      SHA1

      728257d06c452449b1241769b459f091aabcffc5

      SHA256

      5a1c20a3e2e2eb182976977669f2c5d9f3104477e98f74d69d2434e79b92fdc3

      SHA512

      d6f28ba761351f374ae007c780be27758aea7b9f998e2a88a542eede459d18700adffe71abcb52b8a8c00695efb7ccc280175b5eeb57ca9a645542edfabb64f1

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\UserInfo.dll
      Filesize

      4KB

      MD5

      9301577ff4d229347fe33259b43ef3b2

      SHA1

      5e39eb4f99920005a4b2303c8089d77f589c133d

      SHA256

      090c4bc8dc534e97b3877bd5115eb58b3e181495f29f231479f540bab5c01edc

      SHA512

      77dc7a1dedaeb1fb2ccefaba0a526b8d40ea64b9b37af53c056b9428159b67d552e5e3861cbffc2149ec646fdfe9ce94f4fdca51703f79c93e5f45c085e52c79

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\assets\fonts\lato\LatoLatin-Regular.eot
      Filesize

      66KB

      MD5

      6cfad5881181ae658a6efdd68889a690

      SHA1

      5b54f6ccc20ed3a078fbdf94d7a68ac80002624d

      SHA256

      c6c970b103b3c3aa83f7a45172619a4451ea5f015f9f3ef4fd08c9a4aa895cbc

      SHA512

      ddd3d43540eb3d4eef48d0834136de1e7bf23a52f286d0a666cf57c7d685aadf1cea6d37c88f9d7ce5ad6143d7c3213f54b16a11f616b7dce154bba50997bbe7

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\images\icon.ico
      Filesize

      14KB

      MD5

      9a03fbfd56d8e501797359aac3d72ed1

      SHA1

      b31e87a87486c00f9266559707e2cae4831f9d44

      SHA256

      81c69b545c347e1708603fb912511d8eddf755cb27f37fdc6a6fd959c6cfb94e

      SHA512

      29eb96fe4bdded257f3330672b1f9f2086c28e1e863a093a6fb750b6e59210b47b5ed481e3828442f38c5c6d63ef37709716af1e3913afdf37bf8e574f976fb4

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\index.html
      Filesize

      20KB

      MD5

      6d8c9edde0ce101ce0abd73be45c684a

      SHA1

      ce6d94d2d1a7f4761438781affd3aa991018e4f5

      SHA256

      f15c54f4ac4f55bcfa281b668220eb144e63b9de2292e970095a4dc566209682

      SHA512

      06f35ece48e4e19174da18ecc5dcac3a7e4d7ffbb102c4859221c7c569027ca72e40c9ed945872bf4396bc02ced7ae46655c88e3ec40d0a2f2e3bd0fcec80203

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\app.js
      Filesize

      21KB

      MD5

      f718bd3f18dd499612623852cd2a2135

      SHA1

      9432b7898f655fbbd8132f4b3f8822959ae3ff97

      SHA256

      a14fcaf11a16ad7d904960538ca35d5b05e1c1b6a916f228db6b319c6195acbb

      SHA512

      90a697f93f239e8210ad47b6f012d3b40ea9c23a92ab909434d0e2d71bc3d9663d1aa73c64646e3dbf417f9636d1190b3d0cf20d349456dee6b6b8d5536d0338

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\block_inputs.js
      Filesize

      789B

      MD5

      b5b52c92b90f4283a761cb8a40860c75

      SHA1

      7212e7e566795017e179e7b9c9bf223b0cdb9ec2

      SHA256

      f8dbd6793b35f7a26806f4dabad157aaafdf6d66fad094b50c77d60f223fd544

      SHA512

      16ad53ede5424ca1384e3caea25225589e9eec9e80e2d845948802db90fad222f709a7b651cd7601a34ba67a0627433f25764638fd542cbd4612871308e7b353

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\libs\cmp.bundle.js
      Filesize

      324KB

      MD5

      1de143ca1babd3c02744f478c8c05c5f

      SHA1

      ac918b3d2d5f9cbd9e3b3f5e075ce3c96eec16b3

      SHA256

      7fbc3a088ec303143109e0c1b2c04f4c5a6e450a2d6f3071fefb66e92f643ea0

      SHA512

      6e419e11f35a3258124127970961907ed8fe0619f618a4c15542ee7f8a01a9f4a7af4d290b634444d21b823ca1afea65f97d5788fff6665d55c2231214edff24

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\libs\jquery-1.10.2.min.js
      Filesize

      90KB

      MD5

      44e3f0db3e4ab6fedc5758c05cf27591

      SHA1

      2d408aa1d35661019c95adcc60b78c0727ed25b4

      SHA256

      bc44d3631ffef1df7960e359f02002d3ada45ee05205c2cf1edd85da2f518144

      SHA512

      4d4844e53e686fc59a52e86588f328dca3ed6fdad7195c58942a98c51755a24981b903ee7c7b27785375eaad5a7d9501cf74b999674b79f214e66103bad9efdc

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\models\notifications.js
      Filesize

      5KB

      MD5

      85afdf9897bb1236eff3afa40d15ece6

      SHA1

      4362bdd139458eaf4a2dcb34294b43e2d53f4a26

      SHA256

      9dd03dfc92bcb74f3725aae60e904c0a56cc84f299bbb8e863a869719f6fdd32

      SHA512

      4ab86c6bafba18f53f01ca913ceaa80f14900107069a1d5f65b108d35690bd8b50b1a6cdf1563fc5775909f69208dabebd139f3cf3d8576269d560d57cf9994c

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\utils\analytics.js
      Filesize

      4KB

      MD5

      525281e9959af4c1c0d11b9243c798a1

      SHA1

      237a84c5b57bd132f48446d718b20640cb28c263

      SHA256

      c37f0699cf8ba7d9e3e0f73f1b2af65f4bdc2a31f44594ffc8c73e98b6c2fd1d

      SHA512

      fe5bafda7773e69c65dd63270e0306abcd39cb2d886b675ab8c714ae0833efde963b69623d468551a1ab37f1db1a1d457f1568f7a29d9cf0bb23bb0edcab5fc4

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\utils\commands.js
      Filesize

      12KB

      MD5

      65015f2e2e490f6786abc0560e33e1d0

      SHA1

      47b5c2b3b1f9381e4d2b9d1f3d82ba62828ce28e

      SHA256

      e874c959c7b8e4351d730d263231df7176b5062580a7d3e0a2684001b510f5d7

      SHA512

      a4ad579acfa6000fd8074893a6b45df74558c57afd5b957217491784fa25df370c59d9f92ff245abbdf3d26b42114cc22359ef95c4baa322e326c7e210f43edf

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\utils\cookies.js
      Filesize

      1KB

      MD5

      6c60e675f8c8c68c0174b644d3a63a2a

      SHA1

      3635a3fe07ccc4a6f33a986ddb690522d0611abb

      SHA256

      9d3cb3822e20d6f5157faa02dc69bdaef44576c3fb5523e00aa152107ce30287

      SHA512

      1dc9ec7b139bcf37107ecd673c01e4fcc606332ea1645a4a1b4e5d95f817d4c99d5964cd3d941a6a526689341d9623b17b4efc002cdf4c73404299d52b1be452

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\utils\modal-events-delegate.js
      Filesize

      1KB

      MD5

      117e4fdbdb0ecf211c8bd909efd337d1

      SHA1

      9f8684d856b7c95bdffb139217dfd89f41373187

      SHA256

      267661f932a2ea78d8c7a98cc03d1b18d7cb8132deb84636772ecd1fcfbe4857

      SHA512

      f474ee20b59d3d0c11f9f6aee6b6e2b66f7025beaec9841f88455e60533dc96cb4e27910be0dae92b0028c5578932b7f459fdb91d594ad010f72a3b3af6addb1

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\utils\strings-loader.js
      Filesize

      5KB

      MD5

      9c94eb933d8a43dd3825e67a7e30c980

      SHA1

      7ec7b16af6f399219209ba5967d377040486a11b

      SHA256

      96445709fde2613af50f4b8908296d4bfccdccb2d9db9febc34a9bf4dcc70ecf

      SHA512

      a662a299e31633f71a9b9675970359430fdac06dcc284fd7ce92919f244c7f921639f97a42356e993a95865e6c9f198dcba82c126f82065bf2009a31ec9b02f5

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\utils\utils.js
      Filesize

      118B

      MD5

      a0952ebeab701c05c75710c33d725e7e

      SHA1

      1da8a2e889f1213d481ae3cd5571670c01e64adc

      SHA256

      b4f0c48cbfeaf8141fd44b12031e3f0410cb0cdc313888ffdb14fdf1d2341246

      SHA512

      5e5ae616d3fded7d2bf47a326242c4477ca3119fb52897bfb41de0be230ccbd6c3da2c00268b3973e9bf7b4f2886aba64fd9719b448662e4130ee66d87913389

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\cri\cri-controller.js
      Filesize

      3KB

      MD5

      4e4b4a9e2d86ae3c108105078db6d730

      SHA1

      826946be793c999316af6c1db10523950b18ea2c

      SHA256

      cee7fc5a36a01a439125be031923d7e7415ec56194255048098169a0108034b7

      SHA512

      1420065cd000ce9b9c39d27b5dc5f4055f67146e06573a03184649851c9745f0c0af2b5e35b41b5923703dd74e32f9ed95fc59a43db25f854584e319950beffe

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\cri\template.js
      Filesize

      1KB

      MD5

      76c1ef0cb437db144c2bed53a5a8a5d7

      SHA1

      aaab8fff649f8e46d1e9510018118ee9abe01498

      SHA256

      505d3c4de7d9cf8f0155b5b1a3c8792bc0ca2eda6781b441bd85455f144be22e

      SHA512

      822bf9feda91c89539d263c6c9053163e8dfa3c511195bc61a9b608b4687fb4048733323f03dd30a7ab661a4be4acf6c8d8ae7bb6723771122540a9551899c3e

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\finish-with-recommended-app\finish-with-recommended-app-controller.js
      Filesize

      1KB

      MD5

      eb6d6bd7e05d4477e2704dd87b57ca35

      SHA1

      f42672ec1e23a3f4bcc2952746d87ba8deff44be

      SHA256

      5ca97132a258ed1f36e401d70ccb95be2c9e18395e6010c40f61172914477de5

      SHA512

      1402d611f910cf5078e804175fa4693b591348d3e7cf6d0a6bbe026c259eb9e0bc285233c80cb2f4690674c3e927bc72fbdcbe758826b98fd02ecb3ed82e339a

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\finish-with-recommended-app\template.js
      Filesize

      681B

      MD5

      d1cb34b57cef7e28b9286454b197b712

      SHA1

      f3a964b319bab82d4eda07e126bbfd6dec35c349

      SHA256

      b61dfc304b46e8cd95d7b15bb93c6160b30523a1a093397a84fc8b8bed00ac42

      SHA512

      3a07de9c58134edbb7998f85e6d037a0cd066e32c4daa07594a949a7574f5693153bbcdb59739e1a92e847ab1128e2369fb30ba76a7b9cdfa9a37a409db691c1

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\finish\finish-controller.js
      Filesize

      1KB

      MD5

      138240ea22084428e9e25583e9156568

      SHA1

      e8bef7eab5b6e7040b996ec9504436e073444bd9

      SHA256

      4cb4e1aa25c15ae5f2e63fa4658a8acff0ce63e0f59cb6eb634df2dfe336e2ec

      SHA512

      e97b81b0ecd964e6e909019353efe4f5582f65763ac4197d754f1c4eea19cfc249900ae597fd33e29f531bb0d1c7e0f010793c59a2b0099fa75ad0b7d01ce8a7

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\finish\template.js
      Filesize

      1KB

      MD5

      f092de7ea66d8e920b345f38537fa35d

      SHA1

      82d107a409f18878307ae0cefe24074db64937c4

      SHA256

      b05f111369e12ecb4cdc6526dd554061eb31097aa0de4bd126ddc185b69d922f

      SHA512

      14942c0122f216c07595cbaae498f9c4d37a2d0fd95f262c332502befdf4566c7a042c4d85702c1d82a111123dde677096195e9efeb1d74eb1dfd4df84d01a23

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\main\main-controller.js
      Filesize

      11KB

      MD5

      15b665a5c915004e1aa7e9e11a710f7e

      SHA1

      7821924e42bb19d60c572ff80bbaaa04d7aaeefb

      SHA256

      84dc33e2eb3118fc77a38b0ca53af42c53f6eb85cfb1e8737dbe39fa03515653

      SHA512

      dd47f7bac0dbaac714e6d2fc91b4c24756ca4acb70bdbc4b54cd5216552d6bb85ba2e1c3c8445c5fb40d116dfab6569945cd74730bb7c8f3cf46e8d08f8afa02

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\main\template.js
      Filesize

      3KB

      MD5

      a118c7724c208f12083240cafccfd10b

      SHA1

      f89c676a215b869626737862a08c9eb07d440211

      SHA256

      63a43bb08403972d0f4b0e381bd264af14e826e0035242bc1baa9a815956b8fc

      SHA512

      9fede79044ae5de7baf5bfba0d5a515ce462a25420026ff45bcf1751e57510023cb40df42d08e880114f62b38ddb218355d5357b725df32a41ae4e6a18414cb3

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\modal\modal-controller.js
      Filesize

      2KB

      MD5

      b04bdfd1c7d09bdbdb94a2455fdd677b

      SHA1

      f000ba4866ff16d75bfd6cf446763498e19b12b1

      SHA256

      4565ee81ffe222b31982088b1c18850076e3acf59198ebce08118e12cbd87ea1

      SHA512

      3cb6ef0a16309046e7f407e7321eb12212b0eec09ec1a04b1d813f6c7a04546714865c3b398a93985041f598156ed905ebd23a64260801281b29ada9bc19ec5c

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\privacy\privacy-controller.js
      Filesize

      2KB

      MD5

      15bbec339f5046f525e3aa96d36c30ec

      SHA1

      f73d40bf06584737fe327f1eec6f4b0446545226

      SHA256

      14d9c60cd97f18e74fee2dd80b6a190eaccc526085991f356feb6b4d330a0fc3

      SHA512

      2b0edfd2d5efb3f739e56eb6f3bcfae4789af3e1639f5f8e5f7530f5af10eb1a61464d665c9d9b2f4eb3796f2445108599d8bea75f1709aa562feebee519da4e

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\privacy\template.js
      Filesize

      655B

      MD5

      cf8d2c26520d7c84e560dfa79e31dcd3

      SHA1

      716f2ec17480d5cc9c145bc147833fbfc39d36f0

      SHA256

      95c459eae0edccdb94702aea603a097e461daa0e5f37dcd0e30de7df665433a8

      SHA512

      d466dcf7e86a4295857020feea281fc89f519f6bf1e79c3b5e1046d0745c9c9010377b1941e06c9a9b2c78a4173ed9909332d5d6c39b05f460e8a863086c895b

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\progress\progress-1-controller.js
      Filesize

      1KB

      MD5

      82f0b997ed552c52a510a9f2ab29dc3a

      SHA1

      92aec3a656053c71eccdde610130f5d8008fa96f

      SHA256

      838bab990ce38372dfedb50eb0a270db705811729630ab8557c08bd1e9e8e105

      SHA512

      ecf67f877002d746eff8af3a50155aa381513ddafd17b6bff0188c85f0765579fea0112e82e1371f962b1f5decc94b65e6120f21fb516533dac35a2d541065bf

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\progress\template.js
      Filesize

      242B

      MD5

      92b145e6649ba0add3dee9a69d3fa91e

      SHA1

      4db1a45392ec973cc8a7eecf3a30a9a7ecc7a64d

      SHA256

      a7128a08bca53dd919cab3e5cb4dab31ded7ae2dafc957209b9fdd23f3b944ab

      SHA512

      747a087dffdba5c92d9f4c8923615d388b9c4c79d3b71d3cb90487aa37c132290a4f5107eef3055c03eadcb9614e20d4655393dc9251fab7e0ee2438f0d95751

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\settings\settings-controller.js
      Filesize

      6KB

      MD5

      378c18dd7d5cee6ca7c4ddd0396b535b

      SHA1

      d5f81d4fab29201fd1629dc4d8e6f918c0c30479

      SHA256

      b5c5dc5e0684fd97eb4c45896dc1c2de8a6a6fdc63b6aa83a99103c15787ef35

      SHA512

      c29416b3f0245f4826d857dc8c52c969071d2410c945bda96f38f59a9bc7137ee534d84865e5ac55a1e3cea6bb705c5d592725af709cd97e7f38ff05dbaafe5b

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\settings\template.js
      Filesize

      4KB

      MD5

      28513de0830383a516028e4a6e7585a0

      SHA1

      d31fc3a6f4a3ce6c4afb82ff2342a1ed718809e5

      SHA256

      8014a7c919da249ba2f2196d9c9b62639d20851be426f3ffaef161cbe477c45f

      SHA512

      0f7321c2ae13145bb694368dae1b74e6fe20e6b09712da2178bc46e6aa65223ab84c38abbf0ed074c85b42dba1a238a5f3f8d1ae060a0af6df748c5befe11b61

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\welcome\template.js
      Filesize

      1KB

      MD5

      17f54fca6723b983875d940d931e0afb

      SHA1

      01774cd5cea36bd74c80a708d6f77567e8091024

      SHA256

      42c546e9da748ef76fdab56b96fd511eb607617a9ba37b3dc420148b769d8acb

      SHA512

      401df9a54cd14c19227d91bd08b4775a7b437644b4ca0d1d636d3e07b04591f9c5516e80040ae6a79ba400457d15e3d80aa148a63de870a64664fc5a02f7a038

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\js\windows\welcome\welcome-controller.js
      Filesize

      2KB

      MD5

      50f676754862a2ab47a582dd4d79ecf3

      SHA1

      1cb2f4b11f9f8cfc8dc57ff29d0256dec4811158

      SHA256

      6155691dbdd66290109afb91617f9cf68af6bd912991d5d27b922f5faa7f530b

      SHA512

      ccfc89e08fd36f0a694fcda17efb84ca285b6c62afe2e3a794fdad19b6882a4b618645f4d9171673ba56fb4c55fce336d6b8d26dec3a5cc11293ae2b211f499f

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\app\manifest.json
      Filesize

      691B

      MD5

      f87acaf6a7b29b4b53efe207fe416d61

      SHA1

      1ecff6c32cde13b1f98c08b6db0b6a51eefe1092

      SHA256

      b05c3a93afae91439d7d43d05c71a058339afd4914f0a77739a097e015e7f23d

      SHA512

      a9d3b5b2d9c53ad1fd1be006efbd374d57cda4f506fda92abf6e5cde9f6754515fbdd4d7b129b60a695a6623d78b28b928ac85b7da05268714a5e6c5b1190151

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\log4net.dll
      Filesize

      270KB

      MD5

      f15c8a9e2876568b3910189b2d493706

      SHA1

      32634db97e7c1705286cb1ac5ce20bc4e0ec17af

      SHA256

      ae9c8073c3357c490f5d1c64101362918357c568f6b9380a60b09a4a4c1ff309

      SHA512

      805cd0a70aba2f1cf66e557d51ad30d42b32fbafcfbc6685ec204bc69847619479f653f4f33a4e466055707880d982eb1574ddab8edfa3c641e51cda950e2a0e

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\uac.dll
      Filesize

      14KB

      MD5

      adb29e6b186daa765dc750128649b63d

      SHA1

      160cbdc4cb0ac2c142d361df138c537aa7e708c9

      SHA256

      2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

      SHA512

      b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

      Download Submit

    • C:\Users\Admin\AppData\Local\Temp\nsh8BC6.tmp\utils.dll
      Filesize

      55KB

      MD5

      aad3f2ecc74ddf65e84dcb62cf6a77cd

      SHA1

      1e153e0f4d7258cae75847dba32d0321864cf089

      SHA256

      1cc004fcce92824fa27565b31299b532733c976671ac6cf5dbd1e0465c0e47e8

      SHA512

      8e44b86c92c890d303448e25f091f1864946126343ee4665440de0dbeed1c89ff05e4f3f47d530781aa4db4a0d805b41899b57706b8eddfc95cfa64c073c26e2

      Download Submit

    • memory/2928-142-0x000001B76E1E0000-0x000001B76E1F4000-memory.dmp

      Filesize

      80KB

      Download

    • memory/2928-140-0x00007FF8A12B0000-0x00007FF8A1D71000-memory.dmp

      Filesize

      10.8MB

      Download

    • memory/2928-143-0x000001B770900000-0x000001B770E28000-memory.dmp

      Filesize

      5.2MB

      Download

    • memory/2928-161-0x000001B7706F0000-0x000001B7707A0000-memory.dmp

      Filesize

      704KB

      Download

    • memory/2928-182-0x000001B770530000-0x000001B770540000-memory.dmp

      Filesize

      64KB

      Download

    • memory/2928-144-0x000001B770530000-0x000001B770540000-memory.dmp

      Filesize

      64KB

      Download

    • memory/2928-183-0x000001B770530000-0x000001B770540000-memory.dmp

      Filesize

      64KB

      Download

    • memory/2928-179-0x000001B770640000-0x000001B770662000-memory.dmp

      Filesize

      136KB

      Download

    • memory/2928-139-0x000001B770320000-0x000001B7703C4000-memory.dmp

      Filesize

      656KB

      Download

    • memory/2928-135-0x000001B76DDC0000-0x000001B76DE0C000-memory.dmp

      Filesize

      304KB

      Download

    • memory/2928-146-0x000001B7703D0000-0x000001B770416000-memory.dmp

      Filesize

      280KB

      Download

    • memory/2928-218-0x000001BF73AF0000-0x000001BF74296000-memory.dmp

      Filesize

      7.6MB

      Download

    • memory/2928-150-0x000001B770440000-0x000001B770458000-memory.dmp

      Filesize

      96KB

      Download

    • memory/2928-220-0x00007FF8A12B0000-0x00007FF8A1D71000-memory.dmp

      Filesize

      10.8MB

      Download