Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    119s
  • max time network
    143s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    10/05/2024, 13:04

General

  • Target

    硕思闪客精灵.exe

  • Size

    8.3MB

  • MD5

    fa450d0813179d6bd841fdc6a88f2b53

  • SHA1

    f208f71bd78bc8608f5e460a5f4f596fa2474d4b

  • SHA256

    e2d1396e68a7663d1b49d1679bdcecc88ee084595789285a3b07e29d27296a3e

  • SHA512

    3d184fb37f2090fc7083b6339899f90f95db94e0b097cc7a8aa1d2e569ec74e60de8142a0ffba1138b138ba7a4832dec7871d8fd20f68bb9d056f42148298c78

  • SSDEEP

    98304:kbryTpxTk4V3rE25o188sgvi8a3KBiTc/X85o0ojZCmd2Hb33bGI8tp5S9ZhG3by:xtxTjgvudKX85I0m0LKIg+9ZhGZlFc7N

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 9 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Modifies Internet Explorer settings 1 TTPs 34 IoCs
  • Suspicious behavior: EnumeratesProcesses 1 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 7 IoCs
  • Suspicious use of WriteProcessMemory 16 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\硕思闪客精灵.exe
    "C:\Users\Admin\AppData\Local\Temp\硕思闪客精灵.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious use of WriteProcessMemory
    PID:2060
    • C:\Users\Admin\AppData\Local\Temp\7za.exe
      C:\Users\Admin\AppData\Local\Temp\7za.exe x C:\Users\Admin\AppData\Local\Temp\7ZS.7z -y -oC:\Users\Admin\AppData\Local\Temp\Release\
      2⤵
      • Executes dropped EXE
      PID:2620
    • C:\Users\Admin\AppData\Local\Temp\Release\SWFDecompiler.exe
      C:\Users\Admin\AppData\Local\Temp\Release\SWFDecompiler.exe
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      • Suspicious use of SetWindowsHookEx
      • Suspicious use of WriteProcessMemory
      PID:2600
      • C:\Program Files\Internet Explorer\iexplore.exe
        "C:\Program Files\Internet Explorer\iexplore.exe" http://www.sothink.com/support/flash.htm
        3⤵
        • Modifies Internet Explorer settings
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:2492
        • C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE
          "C:\Program Files (x86)\Internet Explorer\IEXPLORE.EXE" SCODEF:2492 CREDAT:275457 /prefetch:2
          4⤵
          • Modifies Internet Explorer settings
          • Suspicious use of SetWindowsHookEx
          PID:1596

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015

    Filesize

    68KB

    MD5

    29f65ba8e88c063813cc50a4ea544e93

    SHA1

    05a7040d5c127e68c25d81cc51271ffb8bef3568

    SHA256

    1ed81fa8dfb6999a9fedc6e779138ffd99568992e22d300acd181a6d2c8de184

    SHA512

    e29b2e92c496245bed3372578074407e8ef8882906ce10c35b3c8deebfefe01b5fd7f3030acaa693e175f4b7aca6cd7d8d10ae1c731b09c5fa19035e005de3aa

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    35d2dc90c5a72ed01c6d9d537384ef10

    SHA1

    5e35aed688ad0b4293cee34971e3e52207d59814

    SHA256

    f621a84f3f9d42137f37d22dc6c7094ce98735fa662f3d53f5a0f15df58d4723

    SHA512

    55abc17431f5b509bcd00effbbe1566cffb3405e9a188b78ac8a7f9ffdca3c5f1bd704c4bc6d00f54a1d3cd238f6061edce83959511229a9453a88dabfc2d426

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    605dfc8e7a17d68073fff83078685aae

    SHA1

    170f15a7f101a3267633a14e3cc9b9c692d2b1c8

    SHA256

    7776565034822b9781ff449e76a24af7d42fbbd90bcde1603e26b9ee34293589

    SHA512

    d8ebd65ac58b6d817585d39da58f82762ac27fa090918055816278a7823484f4c462187b1fca8545c90e19e28c92111bd79af1d8547b59dcbbfcc486ad49d752

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    d6d9efe650f04b19cf8adebb3e478db7

    SHA1

    15796650654363f4f32004fc970f5644682c86d7

    SHA256

    f3b54cdb9eeb0bb49980fc97b0dd0d422641d9a8bbc8c23f56c342ea07320543

    SHA512

    5b7d6b654cb27e703baa5bebba144150fc8e4a1f1c470562d806da92c92c194c107d99a90066ea03de3edbb3790179e0b2edcdbc266216fee03f0cf0f2464180

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    7d1d15456bb6f58e5d14bb0e7d86a222

    SHA1

    27728abd98d04a6e11980ca844c0c24c989231e9

    SHA256

    5f1c9ba55f64338b87637724e440b25c5f4072a4188466b70ed6e848ebe2e744

    SHA512

    3c17b09796e1305df6e885c99e9fd34c6912f6eb132000c7b09c4017e17b2a924e1d78459a68510bd90fcfd71c53ef1f350aeccc52bd0ec89ce3d56e0a797ebe

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    5accc4999576594b4226bb96f84e619e

    SHA1

    92c97a8f777f5ae3a62f5a37faad17ea8b3ec685

    SHA256

    b0e5dba15a174191e685bcf1778e59fce72c96d717f2197bb2315b2748cc5743

    SHA512

    0164ae79f46dba578597b475418c5cb8c63364e03dad52e5b56ef5a4a9e2bbfe7d99db515cd230091f7e3b6c4defcb6ef7979b37d5999f12efa7494a9b95cc78

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    820ffefde5215fb453a431eeee3884ba

    SHA1

    1528f543be020fb86be88c6b5ca6c600627d4e21

    SHA256

    1588b2e0ba7bf3d3e92da6164089576f5c1d15362a1fdf0576dd92c43e94bcc0

    SHA512

    6f9e486098384df7f1548697b7024953610c0fe298d0a660207ba1d826545cc95fc1b8bc2d9a8f97492e21e1cf9a402fe7fdc215f1302811dcf431a71938c443

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e7e458c35be0223be7863c9fa8c18ea3

    SHA1

    4b01c1fad7d3b0f8da0075724547949bb64ec8d3

    SHA256

    f19129874c13670fcc70d941a9ebcd6f213fd04f3b6950d4ab93d00c8c197c44

    SHA512

    e19acc27e859da0691e7ca880a19ec957277638fdf961d7a3d128df692ff1988b8a7c13cbc53ac3d9f9e7b55ad9e6706e41882b59440387bd4f572cb45c0a625

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    1424fb51311305994ff1939b6362e4ca

    SHA1

    14a9a4889746b9cff6f2b13b4a06ea34f7f30c23

    SHA256

    8d1b53ae4b7b9b0fc20bbb225251a13fa0aa85efd544ddf788b96932f1e89578

    SHA512

    882846e4ad4043e02ff552910753e9a9cff75a6336b656481d7030f9f2cab1cd836c938968aa02212a9afd35612bacb0a025219a3f84fda62ada7b47894fb04d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    b7487cc36c2df0ceee87f9761e6e4f54

    SHA1

    b181701cba92f88d474eba64f3954d47b5044124

    SHA256

    eff2fa03388fae63dfa27ac1da3e9b7cb4c245d4ac52f05395c5c9b7f7a9ba53

    SHA512

    256ef5c14aca48f644c18f39e4e18044688d9cc2d37a37aab71fea20e081e5b4dd558455113ada70d5a8f0bc472b1c5ab01ba0515ffad1ed2fbdbd03ad39b4df

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4722369e685612a91a0728f38e84db69

    SHA1

    38da51d45539c579d968b4f5de7aa592439dda5f

    SHA256

    3f0e52997129be7819911f2115d86911e605250fd993e9161cb82811e3313f99

    SHA512

    8e263af10f31a293356ad31cb8fe7da6751bc0a1b6d56bde793aa9fac455f03baa964f1be6dc96d8890b869bd56b5c58bcffd9915843f192ed51ce0658696091

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    4c7546cb4f770ee647018741bb861107

    SHA1

    aa6aa81ac8447176445ec9c24bbecb8d7c452309

    SHA256

    b22c1cc27d8eb9a07533b64b5e7ef149ee88db3fa8817627bd8182ecf0526969

    SHA512

    b16fe741c2e04183d32254a55a0724379adcb4718494249a30e2702635af7d6eedc74a55bff547b074106004668dc40aebf4fe51747ec5ac800636a7597c88c3

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    38e546dc8257db67cf62e13f5b357ce3

    SHA1

    5a4c36a3f6f6e2624cef25fda336145e18a10b9f

    SHA256

    3ecfca30b16f8ac7e942ec9cd6d1aae53fff0634c33d148089c81287900664e7

    SHA512

    386b4ef29655bc9cdd95ce24ae8ccc10054d0b4e45b183c522a00513e67f4c76db953df699ed73384fc66c66441666f16304f80dd11717a19ff60138cf88e78d

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    e10f07ed0cfb517b21008954dbc1be1d

    SHA1

    9f5d0a967d523b1bba12e8f548afd5e5c20efa6b

    SHA256

    8d8699d2695bcad6d6aa883fa825066b0942732baf7f92d2742e1e186cf40324

    SHA512

    9d0b3e8f5aeb58d2fbb3cfb6635d7532a0abc825f9bef7947f7ffeefbe461415727fe2d3e4cdc1b7ee767f97258da735d8e8e66068fd9a891a304d22afc581da

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f912ca51378b47ee74a2edae558b796c

    SHA1

    637aa3b57cc79354f76ff7543c4620be4b5a0cc5

    SHA256

    0fddb8692f5ab944dd499ced02babdea4f596d00a602dc6c337fac7d4de7321c

    SHA512

    c1bba511b350ff3aec841c4defd8e74a38aad3228651d8e6f39844c6b009e68edb305eceb7d925a736e1cc3b1c01c7e08966a673520a5c9b5cc9ac497fcbf70c

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    f033d3b6d5f204ffeb8b4b784be14297

    SHA1

    3e8124cb89bd9f7dee624cda8ed1a53cd399d268

    SHA256

    101220a9e059297908d652d370a8fa504127cf039512ddfc3a9991fd3d790ae1

    SHA512

    5c1e5715fe275e4251491ee44124ed457b5884c6b23654168f2a339dd27e5c76a81a1c5d086e289fedc21ffb7311e66262473306a5293d226e2302b26b0ad7de

  • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015

    Filesize

    344B

    MD5

    8e95b01c2aeaabd5a40f1ea1d836527c

    SHA1

    e35e8d0f2100e453afd8ef634e0c0ab66d347ee4

    SHA256

    c474154e71a6440d044d58208f7ae4239c89e7f1f0d4f475961c1a26898a36e1

    SHA512

    f06da9b59c24488ba74f473ac74c1886ae9cd9eaddf42c31a175134b2e9a3c75158f54aff548c9631062fed286329a9da1b06864469b69743a21f135ac8f20b5

  • C:\Users\Admin\AppData\Local\Temp\7ZS.7z

    Filesize

    2.1MB

    MD5

    13b406841bcd73a302e800b103cc597f

    SHA1

    f3822fb541d0e50b5790fed5a896c50d1054a306

    SHA256

    e00e1e7681fd5dbc35808e82ddb1849f93864ccb6d91adb7a3c2c34333096c41

    SHA512

    b61129ff5f5b69b8e3647faacbc09992df5731d785b0816620f533b4881293dd8929fd3e510057d610001363530b1b96bfeddd791e4545d8996b0be96a2133fe

  • C:\Users\Admin\AppData\Local\Temp\7za.exe

    Filesize

    553KB

    MD5

    0d55ba3c5ca7f20522aba98ffc673004

    SHA1

    f2d49e1259aba91b5691d6280409258fa9ac6a10

    SHA256

    45b8f9918ce24da60273573fcdec3be5bc4156e337c4f475aaee7a4991ce4eae

    SHA512

    ac21d069461038949b19f27c85251fded3b6d8a718f8e9a0da26906c3a8c33eeafdb3dfce14833a3aa38c80a596d93a41ea24e735097676b46938bd1bc403fca

  • C:\Users\Admin\AppData\Local\Temp\Cab6D37.tmp

    Filesize

    65KB

    MD5

    ac05d27423a85adc1622c714f2cb6184

    SHA1

    b0fe2b1abddb97837ea0195be70ab2ff14d43198

    SHA256

    c6456e12e5e53287a547af4103e0397cb9697e466cf75844312dc296d43d144d

    SHA512

    6d0ef9050e41fbae680e0e59dd0f90b6ac7fea5579ef5708b69d5da33a0ece7e8b16574b58b17b64a34cc34a4ffc22b4a62c1ece61f36c4a11a0665e0536b90d

  • C:\Users\Admin\AppData\Local\Temp\Release\GldData.dll

    Filesize

    2.1MB

    MD5

    a5de825f1c32af98fd02cdb0d076b88c

    SHA1

    b55864e122de0749234c0d197ee7e49c07eac068

    SHA256

    227921e2c58cec1bde0998629a5ec8c682b3f4726501132a5662b2bd55ca125c

    SHA512

    f93e9abe71bcb97699c26f21211cb31a99ddf2db66a9a7b1c598adb84c3b613f7dfcc915355ab3e3f786daffffa4c4cb9bfd69519455617a753ca211805e408b

  • C:\Users\Admin\AppData\Local\Temp\Release\GraphPainter.dll

    Filesize

    1.9MB

    MD5

    e2a94ac1264bc409ae1cf93e40ae655e

    SHA1

    162c4816f3b0afd4eb6ccd34323a4331f275e7ff

    SHA256

    d637655f59c4e8bc39248195c04bf2c55531685aead8c3048a06ebb0ba666cdc

    SHA512

    95fcce46d06c267cd4ad1f59f5c7c57935b9f52d0d6f4cae5236ca52ca82c928878cc2d0aca9fc8c2de50bae8a71c5445dde1134692fb809424ddcefb4796e4b

  • C:\Users\Admin\AppData\Local\Temp\Release\Languages\Languages.xml

    Filesize

    205B

    MD5

    ce1785f1ce3baf2ef15d9dd98ebc97b1

    SHA1

    75bd612bf3b289c28e56f5fa9d250609cc3fd503

    SHA256

    aac33b763df9b914b151995e5b1530d6f59190154f5235dd39968c87c165d416

    SHA512

    4ec4551f72876a6c38675bb77cb8f634510e8da44e29d81dfbc05c31864ac2ff79f1c2715a84a4dce048408b3267bd28c2754b7449ff2bf047272b6b24f5ee58

  • C:\Users\Admin\AppData\Local\Temp\Release\SWFDecompiler.exe

    Filesize

    1.9MB

    MD5

    0da3242f90fd65c73a8a12fd6f8cea85

    SHA1

    862be65c5edb70e2f007309d29815f053097f984

    SHA256

    aa0787edf053f3c4a73c9b75528341acb161c72a36f61027beb89eaab936f02d

    SHA512

    b073cc4011cca65d4a45c4a7526630a2fe0106b6b2a8a3498379515060686fbd8ca611c45147a458861a68666c0cfc3d724dd42d499406c3e05563c670ae0db2

  • C:\Users\Admin\AppData\Local\Temp\Release\SWFDecompiler.exe

    Filesize

    2.1MB

    MD5

    2acfc822c87ccdea6bd23c51b5dd9902

    SHA1

    a69fcedf0274b75eb1ab9aaf670f9b8a5e68f68d

    SHA256

    72e04a6080906c488f2da5767eb3213addd501983532aa2017cd3fae9fb1c4c6

    SHA512

    8a0bb4785c7b19d0fabd5c636bab47d80d117d300420fd5cc1a5c62a8d95abae40ccc66f2fc94048d8635adc5f40bbc3d59738f95aee87e7b3bacfde88ee08d9

  • C:\Users\Admin\AppData\Local\Temp\Release\certdata.dat

    Filesize

    218KB

    MD5

    7e68fd47dcba9001eb5f406c773f6bc6

    SHA1

    18b645e696aea0b39cc4cd9cef2c52726156c279

    SHA256

    2bcf2e228677e925cef17051fd3cf951b30fe7ed69beea396f7f5e497c435898

    SHA512

    a91e66210ca409ac248a1832ba029bc420a284b63005a1ea89b06c3178683e3e9d658b6cb0299759497515ec8b7b2da41642a9e949c34e1d1ea86ec2237154a3

  • C:\Users\Admin\AppData\Local\Temp\Release\gdiplus.dll

    Filesize

    1.6MB

    MD5

    5e79b6ccd6ed8d1932ff52f54c2bede1

    SHA1

    6ba69225b5c0b3e69bc8413972a235568508ddeb

    SHA256

    7f9b6fb0db9bd2efe098a37bf39e96200b20a4c395c911ea8afb621bbf3fe2ea

    SHA512

    f3bb1a3e908670ff0a318270aed8363469ebee8208a6d77c30673827579e30a544e2f307e03afdb626bb85ce534c58a7d6c343cff06a810de9ad43dfca1b5688

  • C:\Users\Admin\AppData\Local\Temp\Release\gldDataLFStyleCtrl.dll

    Filesize

    448KB

    MD5

    bc9cbf8ce1149f10dd9e88462c49ee77

    SHA1

    2f65790ad584cde1a78e921a9d30a284cc20148b

    SHA256

    94c7df2d0e1a374dcf0c8176562080a4b1956f73b877772179d04a4a6483550b

    SHA512

    b4c6837427ad865e40158fb613f33ac2b4cfbe6b4c53957fafaa41437fd45529baf2a7b3b72027095213a96a8ffe1a11e8d2fade129ad4321a31f608bfff03ca

  • C:\Users\Admin\AppData\Local\Temp\Release\gldDataTransform.dll

    Filesize

    192KB

    MD5

    71f87aaed95ba597a5dcf6956ee2a917

    SHA1

    dbcc99c08a90c85d54982688306f6da98e9f0c43

    SHA256

    c5d2e714f639131bbaa9d42a085f227de76ed6cfe687cf8765ffe0918d75b3bf

    SHA512

    f452e9840e2c522b7e1c1ede6fe2cb31f195d41ac3a4729e8af0d313673473826297c3c05d8098eb9e4dd76d191add8f07de09c5b3773f45e6210b7296802006

  • C:\Users\Admin\AppData\Local\Temp\Tar73F2.tmp

    Filesize

    177KB

    MD5

    435a9ac180383f9fa094131b173a2f7b

    SHA1

    76944ea657a9db94f9a4bef38f88c46ed4166983

    SHA256

    67dc37ed50b8e63272b49a254a6039ee225974f1d767bb83eb1fd80e759a7c34

    SHA512

    1a6b277611959720a9c71114957620517ad94541302f164eb872bd322292a952409bafb8bc2ac793b16ad5f25d83f8594ccff2b7834e3c2b2b941e6fc84c009a

  • \Users\Admin\AppData\Local\Temp\7za.exe

    Filesize

    448KB

    MD5

    60667787db5db9bdd6da85c59c6ef5fd

    SHA1

    773ddb9124a42b2dd2804d5b1d805c3e8fe5d86c

    SHA256

    36b2013d82ae08887b0fa0b25cb0b6c9e1ea67ba5a17ca9ac061cf27b4453972

    SHA512

    2b23c99dcacc31a004f4240c6e55616fa55dc5c6de3e53a3782e2218690e515f5e583e389bbafdfaaab31780ac428f397518e52bcba1b717e87bf8ce1984ca94

  • \Users\Admin\AppData\Local\Temp\Release\GldData.dll

    Filesize

    1.2MB

    MD5

    53182de61cd98c0fd88488395e5977b4

    SHA1

    d127b6d1c431b48f0a6a9c6544fb76815a711cfe

    SHA256

    c165e847d93cadfcf1b1bb65c86a387532a672d0a0ec9f4544c03afc443d3a91

    SHA512

    963ef31c66a05a251e4f1c1d9cd03f6684b8898bd6ecfca62dbc541ce89a787843d57c04fc41691408643fed745247b467f4a69c2a7ba09cea5c156599978d4e

  • \Users\Admin\AppData\Local\Temp\Release\GraphPainter.dll

    Filesize

    1.2MB

    MD5

    ace5d2e7ae78da30fae1dfd8d1fd9769

    SHA1

    d21ea2d2d9497a9bb200e04dc20440f580faf1f3

    SHA256

    1cfd26e44354e364510b13bd9e7ef43b7024ea8ccc47fdcc6ae0b847267bf8fe

    SHA512

    f7c9ede2968d2c580827061192e069c14726d5411f7ac2c89f7abf8ecbf83e626609a6b47910ffcb9fb841d6edff2b573cfabf484937723bd21a8343455c3d0d

  • \Users\Admin\AppData\Local\Temp\Release\Lame.dll

    Filesize

    309KB

    MD5

    97420212d070f724af851cd94442f689

    SHA1

    b0f548ee0cc15477fb1ff61355a5650ccf13605f

    SHA256

    1bb5c73d802fc513e38d53414676239cbe3c2658edede7cfd1a081aabe1c7665

    SHA512

    0fbe40d8199182b2a76514ff626baa138aceb926899e9e503911d347961d77d70f09fc31a9dca7b3ff8070381211593479857b9788573c0fd666b2b76dc56570

  • \Users\Admin\AppData\Local\Temp\Release\Libsndfile.dll

    Filesize

    362KB

    MD5

    54395e2ea5cfc8283d624facac3d7ed4

    SHA1

    fb0e9bf6b4955917f3db0babab09314097bc1515

    SHA256

    558152428f4fa0fc0c91fc34070d6b5be8d6944cf049845ea00c37a22c526742

    SHA512

    40e29be5115c5fb83cc50919aea811a9ed7b6b49ef8ce540c0ff8dcdefe2486adec910c3c6adf3c6a2b9118e32b9b07532e055bb99c8d06ad84ff8f8aec5f5c0

  • \Users\Admin\AppData\Local\Temp\Release\gldDataTransform.dll

    Filesize

    448KB

    MD5

    4b9c5356396134a06727167434710802

    SHA1

    5353071b24e368fc82b9bc768a6a9733e90f33f9

    SHA256

    aad8c4529b03f5899751640b4b73c7ac1aa1873b4957767b3a67dc2229d68a2b

    SHA512

    a468f8b4df15e3e0979760161647dc95775b7eb1c812545fbcb52721d4fcb4d19dbed26812ae0bd795b5f0eea4a58caf5be58d52c57f773875a644db6c52d367

  • memory/2060-71-0x0000000003C20000-0x0000000005209000-memory.dmp

    Filesize

    21.9MB

  • memory/2600-89-0x0000000000400000-0x00000000019E9000-memory.dmp

    Filesize

    21.9MB

  • memory/2600-81-0x0000000000400000-0x00000000019E9000-memory.dmp

    Filesize

    21.9MB

  • memory/2600-79-0x00000000019F0000-0x0000000001A96000-memory.dmp

    Filesize

    664KB