Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

7

Static

static

3

Solar Clie....0.exe

windows7-x64

7

$PLUGINSDI...er.dll

windows7-x64

1

$PLUGINSDI...ls.dll

windows7-x64

3

$PLUGINSDI...em.dll

windows7-x64

3

$PLUGINSDI...ll.dll

windows7-x64

3

LICENSES.c...m.html

windows7-x64

1

Solar Tweaks.exe

windows7-x64

7

d3dcompiler_47.dll

windows7-x64

1

ffmpeg.dll

windows7-x64

1

libEGL.dll

windows7-x64

1

libGLESv2.dll

windows7-x64

1

resources/app.js

windows7-x64

3

resources/elevate.exe

windows7-x64

1

swiftshade...GL.dll

windows7-x64

1

swiftshade...v2.dll

windows7-x64

1

vk_swiftshader.dll

windows7-x64

1

vulkan-1.dll

windows7-x64

1

$PLUGINSDI...ec.dll

windows7-x64

3

$PLUGINSDI...ss.dll

windows7-x64

3

$PLUGINSDI...7z.dll

windows7-x64

3

Uninstall ...ks.exe

windows7-x64

Analysis

  • max time kernel
    296s
  • max time network
    299s
  • platform
    windows7_x64
  • resource
    win7-20240220-en
  • resource tags

    arch:x64arch:x86image:win7-20240220-enlocale:en-usos:windows7-x64system
  • submitted
    30/06/2024, 14:52

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    Solar Client/Solar-Tweaks-Setup-4.2.0.exe

  • Size

    59.3MB

  • MD5

    dfdea5f4a771556305d2faef94c8cf18

  • SHA1

    f0cbbd1a88c7ebbc84a8b68cbf695eead7273328

  • SHA256

    16a152d46f5bccb505d769cc3863277c7ef2e15f7f9d3fee570f98377d69c91b

  • SHA512

    08ac72e28a3e621c05929bd8e0421975ca65749f0321d2eee163a16be7072ea0e81ad3d65bba7e455cedca33289f2aa6f6c5dfb42b45a627b95b3960db3b8642

  • SSDEEP

    1572864:qy1s9ggeDH7QDv2zFZJTCT6MR9L0T+wKseEc:qy1sHYcL2zfNwbnLbdEc

Score
7/10
discovery

Malware Config

Signatures

  • Checks computer location settings 2 TTPs 10 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 25 IoCs
  • Loads dropped DLL 64 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

    discovery
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 9 IoCs
  • Drops file in Program Files directory 64 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Enumerates system info in registry 2 TTPs 3 IoCs
  • Modifies registry class 31 IoCs
  • Modifies system certificate store 2 TTPs 16 IoCs
    evasionspywaretrojan
  • Suspicious behavior: EnumeratesProcesses 25 IoCs
  • Suspicious use of AdjustPrivilegeToken 23 IoCs
  • Suspicious use of FindShellTrayWindow 35 IoCs
  • Suspicious use of SendNotifyMessage 32 IoCs
  • Suspicious use of SetWindowsHookEx 1 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\Solar Client\Solar-Tweaks-Setup-4.2.0.exe
    "C:\Users\Admin\AppData\Local\Temp\Solar Client\Solar-Tweaks-Setup-4.2.0.exe"
    1⤵
    • Loads dropped DLL
    • Drops file in Program Files directory
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    PID:2872
  • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
    "C:\Program Files\Solar Tweaks\Solar Tweaks.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Modifies system certificate store
    • Suspicious use of WriteProcessMemory
    PID:1924
    • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
      "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=1372,4325396764200272201,2040948427251382035,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1380 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2232
    • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
      "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1372,4325396764200272201,2040948427251382035,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=1684 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:608
    • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
      "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=renderer --field-trial-handle=1372,4325396764200272201,2040948427251382035,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-path="C:\Program Files\Solar Tweaks\resources\app.asar" --no-sandbox --no-zygote --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=3 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1816 /prefetch:1
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:2072
    • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
      "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=1372,4325396764200272201,2040948427251382035,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=swiftshader-webgl --mojo-platform-channel-handle=1380 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2804
  • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
    "C:\Program Files\Solar Tweaks\Solar Tweaks.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Modifies system certificate store
    PID:2416
    • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
      "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=1128,4058165253842884989,9242566660715696334,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1136 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2740
    • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
      "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1128,4058165253842884989,9242566660715696334,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=1408 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:1004
    • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
      "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=renderer --field-trial-handle=1128,4058165253842884989,9242566660715696334,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-path="C:\Program Files\Solar Tweaks\resources\app.asar" --no-sandbox --no-zygote --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1536 /prefetch:1
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:2876
    • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
      "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=1128,4058165253842884989,9242566660715696334,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=swiftshader-webgl --mojo-platform-channel-handle=1136 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:1932
  • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
    "C:\Program Files\Solar Tweaks\Solar Tweaks.exe"
    1⤵
    • Checks computer location settings
    • Executes dropped EXE
    • Loads dropped DLL
    • Modifies system certificate store
    PID:1448
    • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
      "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=1388,148863178064202050,8608521546162475840,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1392 /prefetch:2
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      PID:2484
    • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
      "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1388,148863178064202050,8608521546162475840,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=1648 /prefetch:8
      2⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:1512
    • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
      "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=renderer --field-trial-handle=1388,148863178064202050,8608521546162475840,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-path="C:\Program Files\Solar Tweaks\resources\app.asar" --no-sandbox --no-zygote --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1904 /prefetch:1
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious behavior: EnumeratesProcesses
      PID:572
      • C:\Windows\system32\cmd.exe
        C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
        3⤵
          PID:2644
          • C:\Windows\System32\reg.exe
            C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
            4⤵
              PID:1260
        • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
          "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=1388,148863178064202050,8608521546162475840,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=swiftshader-webgl --mojo-platform-channel-handle=1392 /prefetch:2
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:1780
      • C:\Program Files\Google\Chrome\Application\chrome.exe
        "C:\Program Files\Google\Chrome\Application\chrome.exe"
        1⤵
        • Enumerates system info in registry
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SendNotifyMessage
        PID:2828
        • C:\Program Files\Google\Chrome\Application\chrome.exe
          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=106.0.5249.119 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef73c9758,0x7fef73c9768,0x7fef73c9778
          2⤵
            PID:672
          • C:\Program Files\Google\Chrome\Application\chrome.exe
            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1132 --field-trial-handle=1232,i,1064083778512963388,15844613819661231156,131072 /prefetch:2
            2⤵
              PID:2316
            • C:\Program Files\Google\Chrome\Application\chrome.exe
              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1464 --field-trial-handle=1232,i,1064083778512963388,15844613819661231156,131072 /prefetch:8
              2⤵
                PID:2328
              • C:\Program Files\Google\Chrome\Application\chrome.exe
                "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=1548 --field-trial-handle=1232,i,1064083778512963388,15844613819661231156,131072 /prefetch:8
                2⤵
                  PID:2464
                • C:\Program Files\Google\Chrome\Application\chrome.exe
                  "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2256 --field-trial-handle=1232,i,1064083778512963388,15844613819661231156,131072 /prefetch:1
                  2⤵
                    PID:1664
                  • C:\Program Files\Google\Chrome\Application\chrome.exe
                    "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2260 --field-trial-handle=1232,i,1064083778512963388,15844613819661231156,131072 /prefetch:1
                    2⤵
                      PID:1716
                    • C:\Program Files\Google\Chrome\Application\chrome.exe
                      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1420 --field-trial-handle=1232,i,1064083778512963388,15844613819661231156,131072 /prefetch:2
                      2⤵
                        PID:828
                      • C:\Program Files\Google\Chrome\Application\chrome.exe
                        "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --display-capture-permissions-policy-allowed --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=8 --mojo-platform-channel-handle=2156 --field-trial-handle=1232,i,1064083778512963388,15844613819661231156,131072 /prefetch:1
                        2⤵
                          PID:2716
                        • C:\Program Files\Google\Chrome\Application\chrome.exe
                          "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3420 --field-trial-handle=1232,i,1064083778512963388,15844613819661231156,131072 /prefetch:8
                          2⤵
                            PID:2972
                          • C:\Program Files\Google\Chrome\Application\chrome.exe
                            "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3412 --field-trial-handle=1232,i,1064083778512963388,15844613819661231156,131072 /prefetch:8
                            2⤵
                              PID:1428
                            • C:\Program Files\Google\Chrome\Application\chrome.exe
                              "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3836 --field-trial-handle=1232,i,1064083778512963388,15844613819661231156,131072 /prefetch:8
                              2⤵
                                PID:1912
                            • C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe
                              "C:\Program Files\Google\Chrome\Application\106.0.5249.119\elevation_service.exe"
                              1⤵
                                PID:2808
                              • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
                                "C:\Program Files\Solar Tweaks\Solar Tweaks.exe"
                                1⤵
                                • Checks computer location settings
                                • Executes dropped EXE
                                • Loads dropped DLL
                                • Modifies registry class
                                • Modifies system certificate store
                                • Suspicious use of SetWindowsHookEx
                                PID:612
                                • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
                                  "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=1368,1033004539760926344,4495553465903338771,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1376 /prefetch:2
                                  2⤵
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  PID:2476
                                • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
                                  "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1368,1033004539760926344,4495553465903338771,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=1652 /prefetch:8
                                  2⤵
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:2488
                                • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
                                  "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=renderer --field-trial-handle=1368,1033004539760926344,4495553465903338771,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-path="C:\Program Files\Solar Tweaks\resources\app.asar" --no-sandbox --no-zygote --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1840 /prefetch:1
                                  2⤵
                                  • Checks computer location settings
                                  • Executes dropped EXE
                                  • Loads dropped DLL
                                  • Suspicious behavior: EnumeratesProcesses
                                  PID:2744
                                  • C:\Windows\system32\cmd.exe
                                    C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
                                    3⤵
                                      PID:2060
                                      • C:\Windows\System32\reg.exe
                                        C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
                                        4⤵
                                          PID:2560
                                    • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
                                      "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=1368,1033004539760926344,4495553465903338771,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=swiftshader-webgl --mojo-platform-channel-handle=1376 /prefetch:2
                                      2⤵
                                      • Executes dropped EXE
                                      • Loads dropped DLL
                                      PID:696
                                  • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
                                    "C:\Program Files\Solar Tweaks\Solar Tweaks.exe"
                                    1⤵
                                    • Checks computer location settings
                                    • Executes dropped EXE
                                    • Loads dropped DLL
                                    PID:2616
                                    • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
                                      "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=1396,313797417209573138,12188268857889504617,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --mojo-platform-channel-handle=1404 /prefetch:2
                                      2⤵
                                      • Executes dropped EXE
                                      PID:2664
                                    • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
                                      "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=1396,313797417209573138,12188268857889504617,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --service-sandbox-type=none --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=1648 /prefetch:8
                                      2⤵
                                      • Executes dropped EXE
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:1416
                                    • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
                                      "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=renderer --field-trial-handle=1396,313797417209573138,12188268857889504617,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --lang=en-US --standard-schemes=app --secure-schemes=app --bypasscsp-schemes --cors-schemes --fetch-schemes --service-worker-schemes --streaming-schemes --app-path="C:\Program Files\Solar Tweaks\resources\app.asar" --no-sandbox --no-zygote --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=1820 /prefetch:1
                                      2⤵
                                      • Checks computer location settings
                                      • Executes dropped EXE
                                      • Suspicious behavior: EnumeratesProcesses
                                      PID:2728
                                      • C:\Windows\system32\cmd.exe
                                        C:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"
                                        3⤵
                                          PID:1932
                                          • C:\Windows\System32\reg.exe
                                            C:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid
                                            4⤵
                                              PID:2720
                                        • C:\Program Files\Solar Tweaks\Solar Tweaks.exe
                                          "C:\Program Files\Solar Tweaks\Solar Tweaks.exe" --type=gpu-process --field-trial-handle=1396,313797417209573138,12188268857889504617,131072 --disable-features=CookiesWithoutSameSiteMustBeSecure,SameSiteByDefaultCookies,SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand --gpu-preferences=SAAAAAAAAADgAAAwAAAAAAAAAAAAAAAAAABgAAAAAAAoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAB4AAAAAAAAAHgAAAAAAAAAKAAAAAQAAAAgAAAAAAAAACgAAAAAAAAAMAAAAAAAAAA4AAAAAAAAABAAAAAAAAAAAAAAAAUAAAAQAAAAAAAAAAAAAAAGAAAAEAAAAAAAAAABAAAABQAAABAAAAAAAAAAAQAAAAYAAAAIAAAAAAAAAAgAAAAAAAAA --use-gl=swiftshader-webgl --mojo-platform-channel-handle=1404 /prefetch:2
                                          2⤵
                                          • Executes dropped EXE
                                          PID:1388
                                      • C:\Windows\explorer.exe
                                        "C:\Windows\explorer.exe"
                                        1⤵
                                          PID:1548
                                        • C:\Windows\system32\AUDIODG.EXE
                                          C:\Windows\system32\AUDIODG.EXE 0x170
                                          1⤵
                                          • Suspicious use of AdjustPrivilegeToken
                                          PID:2684

                                        Network

                                        MITRE ATT&CK Enterprise v15

                                        Replay Monitor

                                        Loading Replay Monitor...

                                        Downloads

                                        • C:\Program Files\Solar Tweaks\chrome_100_percent.pak
                                          Filesize

                                          138KB

                                          MD5

                                          03aaa4f8525ba4b3e30d2a02cb40ab7a

                                          SHA1

                                          dd9ae5f8b56d317c71d0a0a738f5d4a320a02085

                                          SHA256

                                          c3f131faeefab4f506bf61c4b7752a6481f320429731d758ef5413a2f71441f7

                                          SHA512

                                          c89a1b89b669602ba7c8bf2c004755cac7320189603fecb4f4c5cf7a36db72da651c7b613607146f0c6da9eec5df412c7fba75475352192351c02aebdaa7d9a9

                                          Download Submit

                                        • C:\Program Files\Solar Tweaks\chrome_200_percent.pak
                                          Filesize

                                          202KB

                                          MD5

                                          7d4f330a5443eadf32e041c63e7e70ad

                                          SHA1

                                          26ce6fb98c0f28f508d7b88cf94a442b81e80c88

                                          SHA256

                                          b8704be578e7396ee3f2188d0c87d0ede5c5702e9bb8c841b5f8d458abf1356d

                                          SHA512

                                          f1b9b0dd7396863aa0feca06175b7f9ea0be4122351ecf0a0549ee4c34f85ac8c63cc927d7409a40b6e19fa91d2cb00a145616ba19f47045b2345bfbc2d4802d

                                          Download Submit

                                        • C:\Program Files\Solar Tweaks\icudtl.dat
                                          Filesize

                                          9.9MB

                                          MD5

                                          80a7528515595d8b0bf99a477a7eff0d

                                          SHA1

                                          fde9a195fc5a6a23ec82b8594f958cfcf3159437

                                          SHA256

                                          6e0b6b0d9e14c905f2278dbf25b7bb58cc0622b7680e3b6ff617a1d42348736b

                                          SHA512

                                          c8df47a00f7b2472d272a26b3600b7e82be7ca22526d6453901ff06370b3abb66328655868db9d4e0a11dcba02e3788cc4883261fd9a7d3e521577dde1b88459

                                          Download Submit

                                        • C:\Program Files\Solar Tweaks\locales\en-US.pak
                                          Filesize

                                          88KB

                                          MD5

                                          af5c77e1d94dc4f772cb641bd310bc87

                                          SHA1

                                          0ceeb456e2601e22d873250bcc713bab573f2247

                                          SHA256

                                          781ef5aa8dce072a3e7732f39a7e991c497c70bfaec2264369d0d790ab7660a4

                                          SHA512

                                          8c3217b7d9b529d00785c7a1b2417a3297c234dec8383709c89c7ff9296f8ed4e9e6184e4304838edc5b4da9c9c3fe329b792c462e48b7175250ea3ea3acc70c

                                          Download Submit

                                        • C:\Program Files\Solar Tweaks\resources.pak
                                          Filesize

                                          4.9MB

                                          MD5

                                          91f8a4b158df6967163ccbbe765e095a

                                          SHA1

                                          95db67f0a2352fd898f4a4cfdfc860f6a9c58c87

                                          SHA256

                                          a30b8269e588c6cc2cea5fd4685da3012fd10451edb59a283005116f8e033182

                                          SHA512

                                          6450d75d53f24d11e1c1e7e3cacfc57ee9dd09c00ca0dc2ff30f580b59a6b17e7ad7d96682195bd7d806b49068653538c77ca4200491560cecff128a0b012d92

                                          Download Submit

                                        • C:\Program Files\Solar Tweaks\resources\app.asar
                                          Filesize

                                          6.0MB

                                          MD5

                                          9c12e7fb205f75b66a6ee62e4ca92a9b

                                          SHA1

                                          8e9976b84c9bf1827bb96fc61c0b7dc96e2f596e

                                          SHA256

                                          a8018e6d6af92f4e0a19b35fafc1d47a3362045335f4bf50da1af3adf34e5f50

                                          SHA512

                                          2e49f8568506ae002dba30badd7a137f07d3e90949d93c2d741e166e53c752ada9bccd970c5a9f55cde54f8c4f53cc2d6dd6b908c6300e2c172d911c10dda029

                                          Download Submit

                                        • C:\Program Files\Solar Tweaks\v8_context_snapshot.bin
                                          Filesize

                                          161KB

                                          MD5

                                          e47426f88649c7f8e27b8a1516cc0137

                                          SHA1

                                          5452aadfddbc55d6c5c18b801087e39529859b12

                                          SHA256

                                          09686ad5bf03d95de7c251d204e60a8e3824bd6420bedddee80b2c6e5609fb26

                                          SHA512

                                          f9647a35ff273ca622b3db4aefb9aaf75075386c42a31e085f916fc82f3a18fed25b0e05dcc09e678ca419408f59f0c34fa5762e5f945db35f9c6f67b7b94bc0

                                          Download Submit

                                        • C:\Users\Admin\.lunarclient\solartweaks\logs\launcher-latest.log
                                          Filesize

                                          302B

                                          MD5

                                          b351ecd37e7273f3e554730684be4c32

                                          SHA1

                                          25ac62a889aabe97d7f519a142b918eb4c133a9b

                                          SHA256

                                          db7f08cbe03c974f820ae376fc68ba409230db49cb6308684732a4e4f8a8c655

                                          SHA512

                                          a2ece88f3c5fc4712f0a8476a4d54d3510ac7ae8a016f127c748e293024de4a3a48e3993bb7d326030742036130b60614b2973d88f443c450dce8d35bc8df38f

                                          Download Submit

                                        • C:\Users\Admin\.lunarclient\solartweaks\logs\launcher-latest.log
                                          Filesize

                                          453B

                                          MD5

                                          11afa40bc1f573652782900ac6104199

                                          SHA1

                                          fdabfcef6517437fe6bfa084d9a438afe1a7b752

                                          SHA256

                                          d359386130977a9b8f5897b44821ad32634a8fd7f7d97ec093d69348f345d173

                                          SHA512

                                          79e3c697fb9f7cb3d5af051999360b0dd9108ef72ea895b79dd3167ed796fa0504ac654de2940e80976036e8c832e63267f25cc8e60bb3bb2de58db25d4325ed

                                          Download Submit

                                        • C:\Users\Admin\.lunarclient\solartweaks\logs\launcher-latest.log
                                          Filesize

                                          869B

                                          MD5

                                          ee4a3d377e493421001099fc2219cadc

                                          SHA1

                                          75f5d210332c9a140c9aa3adaca03a201396eaf4

                                          SHA256

                                          41708492d74d487e36a2ae3eeab5b55dafc82791967fefe9900cef4682681a2d

                                          SHA512

                                          93f3d93e3e04d941f457fa271daf49c1c0453dbf58b53dcbe22ce5d0dd5e3f32c7fff55975bc241b420dd8387f7c7e73f1b4ed850b251020f7082135d72f9698

                                          Download Submit

                                        • C:\Users\Admin\.lunarclient\solartweaks\logs\launcher-latest.log
                                          Filesize

                                          618B

                                          MD5

                                          ddec08fd27166c4a4e013db93c10c74c

                                          SHA1

                                          2297de577cc76106747c10efdad7d7389e2959d5

                                          SHA256

                                          971b90066ad2bfbf5de6974f4b75ee0676d9d176655dc72f3669f3dcbceef7e4

                                          SHA512

                                          5a2cff5fc3b1ba056572e67f705afc050ad1cce5d15a8805380e70c426c743bcb6205be34f53ff8e668d172fe2e8fa571decfd6e0167a5655943acf0092e47d2

                                          Download Submit

                                        • C:\Users\Admin\.lunarclient\solartweaks\logs\launcher-latest.log
                                          Filesize

                                          1KB

                                          MD5

                                          f727a17722d604c54a413a0e501c5c85

                                          SHA1

                                          ef6f556d479cffee0a435094a696b83f3f9f832e

                                          SHA256

                                          443e0e5c8d87b2247a22e1388f0ef2a55496a78fb328a742a1cd818d5a4e828b

                                          SHA512

                                          d1a3fcf234a5acfc58f08645b41dd07f1135754a4bb51adc0ecd8deee794f41bbf30e0080ec363ccc4d11d5014b7367594bead0d782b1af43d0c97f8429ca4b5

                                          Download Submit

                                        • C:\Users\Admin\.lunarclient\solartweaks\logs\launcher-latest.log
                                          Filesize

                                          1011B

                                          MD5

                                          d78b3da360fd9669fe1b03c09faa2e05

                                          SHA1

                                          aec032a30320ca8df18a0a8b28ce703c75671b23

                                          SHA256

                                          56afd00b8f2dd0a99b899151510c46a52d5685a1435570fe0304e65ed91fb817

                                          SHA512

                                          b21ce92da317b255fa1fcb7606ec04ced0b79c801fc66d0c7f93baa9cde0c0bea2dac2d62f4ad6f7f852dc4e6a3e86f43b8ebc063721f2fc4404f3cbe2b86381

                                          Download Submit

                                        • C:\Users\Admin\.lunarclient\solartweaks\logs\launcher-latest.log
                                          Filesize

                                          111B

                                          MD5

                                          c2c1e71fd0afca3f34673d59286360a6

                                          SHA1

                                          4205b4fcf1610cccffa11d08a86eb1def0a458ca

                                          SHA256

                                          f3e8a70312eb0ba9e98bb550edf645f8fb3644b088cbaf8f22ba12d780c42ad0

                                          SHA512

                                          0f4f906a14ad66a714256f6fa8441550f817438906af3c39261fabac66d3fd44485d19f170fc9be14e850b38cbb182f8075e575580595ced45d2d911912fbbf7

                                          Download Submit

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\94308059B57B3142E455B38A6EB92015
                                          Filesize

                                          70KB

                                          MD5

                                          49aebf8cbd62d92ac215b2923fb1b9f5

                                          SHA1

                                          1723be06719828dda65ad804298d0431f6aff976

                                          SHA256

                                          b33efcb95235b98b48508e019afa4b7655e80cf071defabd8b2123fc8b29307f

                                          SHA512

                                          bf86116b015fb56709516d686e168e7c9c68365136231cc51d0b6542ae95323a71d2c7acec84aad7dcecc2e410843f6d82a0a6d51b9acfc721a9c84fdd877b5b

                                          Download Submit

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                          Filesize

                                          342B

                                          MD5

                                          2f35420bb3ab53f45d329f6f0ca9ecc2

                                          SHA1

                                          b84033910540f4457f3deeedf1e77ef35cbe649e

                                          SHA256

                                          2f6a8f13257e5ded794f0d53441a5780e4f6db832126b7d24b433192067b9f6e

                                          SHA512

                                          e07ff035c6f5934ae869db6ecc01102300b8c4e3340e4b7f7cb5ab74fcf5492d02e1abcbf8aff5422365f0d9e893ef8b4c66605d79c625b7bf70023277ead057

                                          Download Submit

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                          Filesize

                                          342B

                                          MD5

                                          887dc5b5614c12f74f3676ac87549992

                                          SHA1

                                          1cf494d44024e123218982b3d9d27c5107c39776

                                          SHA256

                                          d816ca159a20c0157622be6947d683627604bfaa4bc80e5942bc2bd2e9ab14c7

                                          SHA512

                                          2464a45bf21a5f11091bfd768605cf472c9c240a645996f77e2d40f129d6459cb5305d8bc6e865e98654b2ae5009c06412c40954b18278a5d6380943966ff34a

                                          Download Submit

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                          Filesize

                                          342B

                                          MD5

                                          a1e8510108e52a76d1fe9fe20d412584

                                          SHA1

                                          df22c040b2e7643ab9aad43fa2fa558bf27fe427

                                          SHA256

                                          dde18c281a7abcc27149981338561fdc4bb31b5ad10291054a751cdcd56e1bfc

                                          SHA512

                                          3e5b5d0ff1c57540fa0ac9d765677dc1fb769e3c0835c9e188c3a5387b812ba4a32e416870764ce296d96a0a349d35e003c296eb37e648610d783a3efc8d0e6e

                                          Download Submit

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                          Filesize

                                          342B

                                          MD5

                                          15c49d4284ff9ba0af0a5c2f4240c625

                                          SHA1

                                          6f02fdbb00858a8cfd74e4c4afccbe7a28af7f49

                                          SHA256

                                          2a8c272652dd07b2c9c7d8ac70be1f251f03916c5b23847c82c2316502cee502

                                          SHA512

                                          0db6e0f3e214d1c026c2c0efdacfb9de92fc987fcad33f3972930beda5874bf05e27389b786bd7b40ddd829b9fda527c3b769b222361dea7dcf1700dc88edd65

                                          Download Submit

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                          Filesize

                                          342B

                                          MD5

                                          11d1fe2b6c38be00dd67bce36c9c368c

                                          SHA1

                                          10d331d7c7e114e573ceb6df436046dc50f86088

                                          SHA256

                                          704af73a6a8e27737b60e47ba82b8e55655e03aac39543554523c39fb9f0b8dd

                                          SHA512

                                          244707bf7006dbcee6c6595627344bf159e4ace79cfef97539c072563730c6fa92e1fe9889df94d36bd86f3b5c715e1374e63136dd98050dd64abe873818c554

                                          Download Submit

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                          Filesize

                                          342B

                                          MD5

                                          6485ee722a914a32465e054bc3d79aee

                                          SHA1

                                          79758f9a877781ac9b461607a21dea9d7077ea3b

                                          SHA256

                                          ef5be9fa28294ff4333347d11ab5e3e740eb7030b49f03b07d9a0b52541be9d8

                                          SHA512

                                          25023b11bbbdacfbfa7781023086697a332458cec7bcc7f6ea5396fa3657db8d1fce12113a91022e26de3295287e5a37610c48534a7681bccd0ea0a42211a376

                                          Download Submit

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                          Filesize

                                          342B

                                          MD5

                                          949340d7a36d0aaa55b49254a642b72f

                                          SHA1

                                          e69dcfbec13f1415883103047e3c9dbf7664d0d9

                                          SHA256

                                          66549291e61640e2446dba490fccb5655ade6e78225baae8d1a6970d9b8301d9

                                          SHA512

                                          3ab9e5b617d3d695674e5482c7d9734f32ee9b969a5b542066abd1c8492e23a7adc445f9e2bc16d837093efe8d42d140a93879387765f2a606028aaabaaa44d2

                                          Download Submit

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                          Filesize

                                          342B

                                          MD5

                                          6cde04c37f6bba9e0dd87714ba26445b

                                          SHA1

                                          9987a252956b140c3ef17d58e6c159664d17f612

                                          SHA256

                                          fe058f1342673cc5e46c07ddf54b25216bf7c9d6691893d3e729215160f65f36

                                          SHA512

                                          ca55a3afe75a542f051bc5d80e7ffb26b269075b37348d7386259365723f3e22d8bae5ef7a8559cfbd0460691a05d65eb71bff466e35daf19723ac0c771d6db9

                                          Download Submit

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                          Filesize

                                          342B

                                          MD5

                                          f0f58d0b84066ad3a2156d621013de82

                                          SHA1

                                          f4a45f4e422841f8e28aea08fe846011b6ab9803

                                          SHA256

                                          4cfcb6bf69f13f0097cdcd0f8dbd83b0d4a4275d9430a65a97d73e58d3c91710

                                          SHA512

                                          f81e3d52123595dd2ea13259c8b06dfc4986bd68b3aaa71349389f02b9fd42b649a56cae42174d924cdbcbec1dcbef754d6c28544ac368ad5631673e616e5fbf

                                          Download Submit

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                          Filesize

                                          342B

                                          MD5

                                          a8160948dd4e6ec890268d47a978b621

                                          SHA1

                                          fead22f362a29dbaade686f291e0c96df403c05d

                                          SHA256

                                          ee67ce93864e5c714e454a6f6b2f4b360f9e7a3e7b00c4c07eb937e5140427d7

                                          SHA512

                                          1f0de512e51ac3719f7fd8cd348ef98dfa781ea7c86cb2f563366af3e07a0b4b0f50ff2d1ec8c85dc9023597d06bb03130aacb46207262552fb9ef1b70be20cd

                                          Download Submit

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                          Filesize

                                          342B

                                          MD5

                                          2f58a71eeb21ce1fcf23d3f876ffc414

                                          SHA1

                                          da42cbf354ad3e477bf9dec25920b31d3feb9012

                                          SHA256

                                          941e26f2a760b6418b81303f3c4db1b39787f721e0d71b0b3d96476664255949

                                          SHA512

                                          c9c4ba21a32ba0e5b32f343f752306e15a5f42a7f3e80f5c0ed4e7e491ec427eb0605b77b93c6b717a83e757c222a0f68e442d95477ebdc85621532989fb5fd4

                                          Download Submit

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                          Filesize

                                          342B

                                          MD5

                                          9924d3bb3f98c5492e7263752e213a8a

                                          SHA1

                                          36409a7c5b8cb962412f3c9da7f98979748cd7d2

                                          SHA256

                                          792d4b3a6d902535b08c3b0722ecfb9ff624561761320ba75503c92f8e7960d6

                                          SHA512

                                          180499c6c5495fbe52f285240362a3a0689d9935e95e677a9823274802eac8463ffa6c5ff1040c6177f696187d8dce2a295ecbad1da35c16e22f41a84311b860

                                          Download Submit

                                        • C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\94308059B57B3142E455B38A6EB92015
                                          Filesize

                                          342B

                                          MD5

                                          55276306c6a841b079b9630762f46061

                                          SHA1

                                          7dc615b11d90004fbc179f4acb8c0348fe4de5f4

                                          SHA256

                                          cae597f4f2e948a2fbe38368207f8308455a33e91da1eaadef4750173b4d8149

                                          SHA512

                                          ce5517ae8613366c6e8a05cee0ed0d069a1f8c9cb1c2813723d4447c71712fa437740995f87a998ee7f9fe6de2a11ede84185c126fd62eb9e324833431eaa1e6

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000006.dbtmp
                                          Filesize

                                          16B

                                          MD5

                                          aefd77f47fb84fae5ea194496b44c67a

                                          SHA1

                                          dcfbb6a5b8d05662c4858664f81693bb7f803b82

                                          SHA256

                                          4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611

                                          SHA512

                                          b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp
                                          Filesize

                                          16B

                                          MD5

                                          18e723571b00fb1694a3bad6c78e4054

                                          SHA1

                                          afcc0ef32d46fe59e0483f9a3c891d3034d12f32

                                          SHA256

                                          8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa

                                          SHA512

                                          43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Google\Chrome\User Data\fb3999e9-2799-438f-836a-f078b1c64822.tmp
                                          Filesize

                                          282KB

                                          MD5

                                          fc70a24474df062410c1e4c1bb24e3ed

                                          SHA1

                                          91ef3393a21d67bcd4e6c58f4555ec75257ac6ed

                                          SHA256

                                          b626c0654fe8743acee3b9b7b8a47012bb24a8d11866945e3536558f5749deda

                                          SHA512

                                          c863674d0f6db4cce91b10d97713b9260814130a2d76387f140919779a5dc36488bb07b130772b0b0f5979b776df5a22aee3196d9cd1310bea8ca79318f912d4

                                          Download Submit

                                        • C:\Users\Admin\AppData\Local\Temp\Tar3173.tmp
                                          Filesize

                                          181KB

                                          MD5

                                          4ea6026cf93ec6338144661bf1202cd1

                                          SHA1

                                          a1dec9044f750ad887935a01430bf49322fbdcb7

                                          SHA256

                                          8efbc21559ef8b1bcf526800d8070baad42474ce7198e26fa771dbb41a76b1d8

                                          SHA512

                                          6c7e0980e39aacf4c3689802353f464a08cd17753bd210ee997e5f2a455deb4f287a9ef74d84579dbde49bc96213cd2b8b247723919c412ea980aa6e6bfe218b

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\Code Cache\js\index
                                          Filesize

                                          24B

                                          MD5

                                          54cb446f628b2ea4a5bce5769910512e

                                          SHA1

                                          c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

                                          SHA256

                                          fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

                                          SHA512

                                          8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\Code Cache\wasm\index-dir\the-real-index
                                          Filesize

                                          48B

                                          MD5

                                          5efab2140e16a68d3d15cd9b381622fa

                                          SHA1

                                          abecffb868e409f4221bcb181892c6035ec734cd

                                          SHA256

                                          3f2b49366b4bc390b7b78210c24d3efac928ff18e0385c2ae1c9b514e694ec53

                                          SHA512

                                          15a24da9c692e8f4dc7831ae0b0d2e6bd6fd2df137e18d4375bf2982f875a319d0c453ea2b324ee0c0eaf9005e4a5db0124bc189c7827718f49535d72c94e1a2

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\Dictionaries\en-US-9-0.bdic
                                          Filesize

                                          441KB

                                          MD5

                                          a78ad14e77147e7de3647e61964c0335

                                          SHA1

                                          cecc3dd41f4cea0192b24300c71e1911bd4fce45

                                          SHA256

                                          0d6803758ff8f87081fafd62e90f0950dfb2dd7991e9607fe76a8f92d0e893fa

                                          SHA512

                                          dde24d5ad50d68fc91e9e325d31e66ef8f624b6bb3a07d14ffed1104d3ab5f4ef1d7969a5cde0dfbb19cb31c506f7de97af67c2f244f7e7e8e10648ea8321101

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\FontLookupTableCache\font_unique_name_table.pb
                                          Filesize

                                          125KB

                                          MD5

                                          ccc86f4311f0d792a9f64a2194caf8fb

                                          SHA1

                                          a66a43e1d95843397479709ead139e5485c63542

                                          SHA256

                                          de23b8a2252792abfe5e5fb969ec386c03c2321459490c631b42ca764584b2d8

                                          SHA512

                                          f026972bf0e989273700b71066d09bdf51a22969c6ed8c3f3c8fcc3d7bd71db6ce6c2bfae8baa6edcb8e7b55134cd5a1b52c1d93ed6e7abb89ea8a6f0a44ab79

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\GPUCache\data_0
                                          Filesize

                                          8KB

                                          MD5

                                          cf89d16bb9107c631daabf0c0ee58efb

                                          SHA1

                                          3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                                          SHA256

                                          d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                                          SHA512

                                          8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\GPUCache\data_1
                                          Filesize

                                          264KB

                                          MD5

                                          f50f89a0a91564d0b8a211f8921aa7de

                                          SHA1

                                          112403a17dd69d5b9018b8cede023cb3b54eab7d

                                          SHA256

                                          b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

                                          SHA512

                                          bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\GPUCache\index
                                          Filesize

                                          256KB

                                          MD5

                                          750d2930074779f2356296fdc2392f66

                                          SHA1

                                          67be71b7ecb86af701374864861b5de54e7a9bef

                                          SHA256

                                          4bac7f9adb64e5ab36d0df0d121b6d1c4ed67531088c164848a2cb7330e3cb56

                                          SHA512

                                          3e4cb1ab316591a6d4215957a8b53360c2de182b10ead014aac34f6e3fb873a266db1523e251406a0dc7c830bd237d007bed7de69e4d5d73678ea30d0121f4de

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\Preferences
                                          Filesize

                                          57B

                                          MD5

                                          58127c59cb9e1da127904c341d15372b

                                          SHA1

                                          62445484661d8036ce9788baeaba31d204e9a5fc

                                          SHA256

                                          be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de

                                          SHA512

                                          8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\Session Storage\CURRENT
                                          Filesize

                                          16B

                                          MD5

                                          46295cac801e5d4857d09837238a6394

                                          SHA1

                                          44e0fa1b517dbf802b18faf0785eeea6ac51594b

                                          SHA256

                                          0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

                                          SHA512

                                          8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\Session Storage\MANIFEST-000001
                                          Filesize

                                          41B

                                          MD5

                                          5af87dfd673ba2115e2fcf5cfdb727ab

                                          SHA1

                                          d5b5bbf396dc291274584ef71f444f420b6056f1

                                          SHA256

                                          f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

                                          SHA512

                                          de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\TransportSecurity
                                          Filesize

                                          683B

                                          MD5

                                          2f442401f95ad720d1b05f1a9be8a4e3

                                          SHA1

                                          b6d9955c378be701518a8e61766f83e2ae2bccd5

                                          SHA256

                                          ebe6dda51dc84d1147f91c55de9274bb5b5f15ba34e1463b0fcab2d5d476645c

                                          SHA512

                                          2340aa91d6ce38e6752d735d517e3cdeba76131bb3d4665dceeefe980cf0d9c9d3e0cb5ca95c87cf65b6767176e609d541e95ce279c035cf18fe7a011f389990

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\TransportSecurity
                                          Filesize

                                          360B

                                          MD5

                                          ca1da36ccd35ebfe8749b326b62b9e1c

                                          SHA1

                                          d4d26eaf53def2d563e92a0c2238dd9a56f86f2d

                                          SHA256

                                          776fd5a67982650383ada5dfb20c43d8fa02a00e9db21eaeafc7f34aa312fc2c

                                          SHA512

                                          93650538d39768c077629f6806ad683ded787cc1bbbfe476efaa73edb4e7c559b7354e185f4aeb8bab60faf9512a07f0a49cc16ab0759fe657fdb6ff1121d2b3

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\TransportSecurity
                                          Filesize

                                          683B

                                          MD5

                                          3f1e60bf719ff2225eaf10b0d0afdd76

                                          SHA1

                                          692ad8ebc817efcd4650b050d8d501f02e1e0d1d

                                          SHA256

                                          6b156f2bee920914cf29b73182bd23b5c00b622faf7174bdc3b1738947b64f45

                                          SHA512

                                          5e7a8574179e5bce71b622d10889b6af51f9beeed13a7f504ca63e76cc84f97f51a14f15636f0d5b236c4b784ebd56555380f745c314b5c6855fd0fe6f7973e9

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\TransportSecurity
                                          Filesize

                                          683B

                                          MD5

                                          b710e11594bcfb26cb719be3f8c4c1ed

                                          SHA1

                                          5a4b6fbbe1b37f7be2f6bccf9bddbe6cdb277a6c

                                          SHA256

                                          a5dd14611a86c456be1acf9f150c8edb41807270cd8fb344a67c281d4f943c57

                                          SHA512

                                          13414ffcbb3fa779263d67baa0047a4f4c554bc59c160601deb1aede77f6d56bd7f510a8e50c8aa51b4b954d11f2cad66668210f56272142aeb54a4b1d10ef52

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\settings.json
                                          Filesize

                                          1KB

                                          MD5

                                          68554dc79b76010a8bbddf8c26cc59c5

                                          SHA1

                                          d75e94a13d929e1116d6f24c8c175360d2b5df52

                                          SHA256

                                          b7150ed4797d6425be17fa90a84f92d53b7a018e00690011e316d36f2110db7f

                                          SHA512

                                          51f908842daf41700a732d46f7492a3101f58caee558f5d7d14b6832673654fea4f0b25a45c7897e5deee3948c1d11761f95b7649a9bfdf259db1c852351b5a1

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\settings.json
                                          Filesize

                                          2B

                                          MD5

                                          99914b932bd37a50b983c5e7c90ae93b

                                          SHA1

                                          bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

                                          SHA256

                                          44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

                                          SHA512

                                          27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\settings.json
                                          Filesize

                                          1KB

                                          MD5

                                          f11cf927d4d7a56bac9104486a9d14e5

                                          SHA1

                                          c57fde0722a3c693650087de0693da7231f6b28f

                                          SHA256

                                          25819e40938b42829fc746d5819156a92c406972967e1a6229e2f7baa4516abe

                                          SHA512

                                          2c949348570832b39a4728d87532dfe4e433a93d3cc530a3d2af2b557c7397f08a96e9787da9164508f82462ceea03e46cb8ba00dfa585501deae52c9e4b64b5

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\settings.json
                                          Filesize

                                          493B

                                          MD5

                                          edbcbd231c2186d5bd53cde7258baf5d

                                          SHA1

                                          f41b10d1147820156f4adef21e26af7cca4566e9

                                          SHA256

                                          1746979f7ca58c2ba6a34821af3429d1330b2efb19d8c57152138a9e7d489a87

                                          SHA512

                                          85932c5f43f6f59e2c06a7f22075cbc1a7c1cb2729fc0513a2dcae4548caea1838fed1c7de18274277a435767123f0a7cf2a23b87f2cf4e2c48a0a622aa53134

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\settings.json
                                          Filesize

                                          469B

                                          MD5

                                          314b7c7236071b55b52464a7bc9fe03a

                                          SHA1

                                          a5a534f406ecc2e53f4b433b7549a2b0ceffa125

                                          SHA256

                                          4f6e6459cf8e736d6d71049937027a1d2e400a76b54bb1246cee9fda820b5a11

                                          SHA512

                                          d3184858dd13daaf2e5a3851e96ac6286e3bdbe54233130c2e43699dd88985ea07ac48bb10e8f961219aa706043ca8a72aae32ec135510813be9a2c8d0ab10f1

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\settings.json
                                          Filesize

                                          536B

                                          MD5

                                          c3356663cde6458ad946c82b7a6c5e80

                                          SHA1

                                          b15d79d196ccafdfbda53a6753c4b03879c76630

                                          SHA256

                                          83d367797cfc5a8a8a95fa3a6560e70c0e5555e6ae1177975acdbbb2539f4188

                                          SHA512

                                          c9accf43a001a5d330f1778f7ae785fcef47bacc4bcea7902b3707b27d9ae69870d8e4a0fcc528101040167dd483aa00a0aa7b57d0a5c2578ae2b7e5999e23fc

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\settings.json
                                          Filesize

                                          515B

                                          MD5

                                          ac0c3e6ec6263000b467558f7392cb29

                                          SHA1

                                          753aaf5333d56bdf504f068a09e9ce28950a258e

                                          SHA256

                                          d5ea7c2c201bb58ad091e4daa7fac1bd54cf4414335141bee5c836847f5eab54

                                          SHA512

                                          dc9aed010a6458e05429be6bb28b31585942251619bd942c4b9c33579afe6a5df0e5822e69d9a2e53c5df65369e9725965e47573be1539d44cb685015570dac2

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\settings.json
                                          Filesize

                                          1KB

                                          MD5

                                          df8e6770d3b1986951afdf71824b315e

                                          SHA1

                                          655c24f91793f8d2da7fc01ef141f4cc20cd0cf2

                                          SHA256

                                          96e4f738d028ebe1ff9056107e3d42ceb1f781d4c19824714cf9a5d68805158e

                                          SHA512

                                          afbb0c1d0d669960d761812f264d885a4a3fcb52a6af31b110276f6f721c59d2d62a5c295d2f22ac6966ccfce6ad6cc7080f270a52f56a607a126c7bb7c80e82

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\settings.json
                                          Filesize

                                          1KB

                                          MD5

                                          0a7ee5889db0e10c9d4b4a08548860e7

                                          SHA1

                                          ad6e7e89fc3c38c958d483d74375942898c820e5

                                          SHA256

                                          163e4973d0bc383fb3094af8ba0463c809316a6054e4ec1c5a80e75c9e61df14

                                          SHA512

                                          b890b8647747a5b3a76bb090314f791c0be0107142cb6343da30926ad4a0390797654ba21e29d9ff9209515c8fd6086be1a5e6ed9ad1e55a20fcf81315bf3e12

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\settings.json
                                          Filesize

                                          1KB

                                          MD5

                                          6b03d21763e7edf58ace3688cf7dd8f3

                                          SHA1

                                          7351bbe010c4b94aa57b0d0f2b97ba77db824873

                                          SHA256

                                          ef0b1a32d5c0a695cf471c6db1f4aa4fcd8d8ae243f51e63e999b1155dd564f3

                                          SHA512

                                          4844365ee7deaa844fd9bfe2a762fd7df8347d1a56d4900c673890df76d9597c74da282ec2d56dc5d159a0d5878fcceabd58dfe3db7e4e1459ab0f30e8b4aa96

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\settings.json
                                          Filesize

                                          1KB

                                          MD5

                                          15fa429e269ce22729a747cbce7f546b

                                          SHA1

                                          5c18e1993798a3d317c184ec8ec55b56c98fa2d2

                                          SHA256

                                          14ec9b6cdc8a2816f84e9f73aab3ee150baf5eab32336831e590cd1ef1df1fc3

                                          SHA512

                                          6cad63cba5ddc4eb4fe7b61166a20fd008804e9fc31b7fc16083cf4e946859d4fc3df7718dabd281b555b730e2b587874ce59c44ad0c14da215c72b6395143e9

                                          Download Submit

                                        • C:\Users\Admin\AppData\Roaming\solartweaks\settings.json.2341907587
                                          Filesize

                                          1KB

                                          MD5

                                          5b9fe80564ee533438b2aaefe8495c35

                                          SHA1

                                          97cc1ac830eeb88edbac54d330a686fb5d026eab

                                          SHA256

                                          33bf00eb61b3e3e0b632c86b62782f1f1504317741a9228150ef264ec49a0aea

                                          SHA512

                                          5ea906471879eea94ea2ab9b038f7530dcc1ddedbf2d1f4e333aa0437f556638c53ec873eff17b364fceb33420e5ff4c5fa73f9b3a4e1d9b07ba7cca337ec7d2

                                          Download Submit

                                        • \Program Files\Solar Tweaks\d3dcompiler_47.dll
                                          Filesize

                                          4.3MB

                                          MD5

                                          7641e39b7da4077084d2afe7c31032e0

                                          SHA1

                                          2256644f69435ff2fee76deb04d918083960d1eb

                                          SHA256

                                          44422e6936dc72b7ac5ed16bb8bcae164b7554513e52efb66a3e942cec328a47

                                          SHA512

                                          8010e1cb17fa18bbf72d8344e1d63ded7cef7be6e7c13434fa6d8e22ce1d58a4d426959bdcb031502d4b145e29cb111af929fcbc66001111fbc6d7a19e8800a5

                                          Download Submit

                                        • \Program Files\Solar Tweaks\ffmpeg.dll
                                          Filesize

                                          2.6MB

                                          MD5

                                          7c3c780de9ae5cc4abeccbd7cb6b367b

                                          SHA1

                                          bda27b3c0b1ec023e2a0a97099a84b10e04cb135

                                          SHA256

                                          39293258d5a2418841edb5ccf9ab3ad23064fb95e1ddfa7a3c6295a24c272a08

                                          SHA512

                                          80a79f827c3154461158ec6f466db0c2ecd9ce9ffd7728001644d4cf382721d09c0758f98f73d7fa548e4e220ffd2b8842303d67a43e79b9146e8b882853658c

                                          Download Submit

                                        • \Program Files\Solar Tweaks\libEGL.dll
                                          Filesize

                                          429KB

                                          MD5

                                          b3017453d487a7d33445c1d2d9b9bc13

                                          SHA1

                                          7e643ccb8984a4a92dd439eeb4bdaaeb62bd8862

                                          SHA256

                                          23046e7fe2bbf76ee2c5596b6beac723ad465fdbaa44266486102cdb292148a1

                                          SHA512

                                          fd583f4b95aa974d72628bcc548feb22bc86c5ab0fd1536995bd796e28422f56e6799d60e2c3bef9aed9a1080eaf12338a3b29b8c3d40ba5166030a219572baf

                                          Download Submit

                                        • \Program Files\Solar Tweaks\libGLESv2.dll
                                          Filesize

                                          7.6MB

                                          MD5

                                          dd8d815769cbf46af41a41931e9b4572

                                          SHA1

                                          f242fcc4cfd5030f3f543c22f141185cd86e7142

                                          SHA256

                                          dd74029716da56a0e4b64bc5cea0c169e1c4b31143ff39213d3c544792e8f2b9

                                          SHA512

                                          69a12f862157746ffc27b637941261a0c5c494175c3e674c7de4d0c4452a5b9358735944e8e0568b7279a7791cf178c9b1afd5ea4a781e93f28cd775a0a6096f

                                          Download Submit

                                        • \Program Files\Solar Tweaks\swiftshader\libEGL.dll
                                          Filesize

                                          448KB

                                          MD5

                                          038a73114d439bfc94be4732b2794998

                                          SHA1

                                          4b7a9d52da1bd808af979cf5cfb146404494317a

                                          SHA256

                                          b1054e0dc2ab31a7cf3cd7f3dae07b1ec31acd42c157be13ce47ea870840f0cc

                                          SHA512

                                          8788e43de424e1d7a163d0b7f4d719c36bf8fdee9808d405aeb05993c446d4f2a595741cb4d98f5e9611cd16d09de9445bf72176a799f4189168bb8509b115ff

                                          Download Submit

                                        • \Program Files\Solar Tweaks\swiftshader\libGLESv2.dll
                                          Filesize

                                          3.1MB

                                          MD5

                                          38ec86347b3e467c5868e35ab48f89f2

                                          SHA1

                                          4db17d065cc330b277a70f9fb8dff0c4b426f314

                                          SHA256

                                          2e10d308d0207835b07df3bb38bee88300aa57fcb214051e8654d29587257744

                                          SHA512

                                          2b2405ed51ea1d232f2d60072e4f57e70f36f1a8f9d0a935772bfb9a3be50c1d6136cee496fde9fb3dda1f0d2f1c643cb9f162e0b68828ff854645eb1e8216f4

                                          Download Submit

                                        • \Users\Admin\AppData\Local\Temp\nst199A.tmp\SpiderBanner.dll
                                          Filesize

                                          9KB

                                          MD5

                                          17309e33b596ba3a5693b4d3e85cf8d7

                                          SHA1

                                          7d361836cf53df42021c7f2b148aec9458818c01

                                          SHA256

                                          996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

                                          SHA512

                                          1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

                                          Download Submit

                                        • \Users\Admin\AppData\Local\Temp\nst199A.tmp\StdUtils.dll
                                          Filesize

                                          100KB

                                          MD5

                                          c6a6e03f77c313b267498515488c5740

                                          SHA1

                                          3d49fc2784b9450962ed6b82b46e9c3c957d7c15

                                          SHA256

                                          b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

                                          SHA512

                                          9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

                                          Download Submit

                                        • \Users\Admin\AppData\Local\Temp\nst199A.tmp\System.dll
                                          Filesize

                                          12KB

                                          MD5

                                          0d7ad4f45dc6f5aa87f606d0331c6901

                                          SHA1

                                          48df0911f0484cbe2a8cdd5362140b63c41ee457

                                          SHA256

                                          3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

                                          SHA512

                                          c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

                                          Download Submit

                                        • \Users\Admin\AppData\Local\Temp\nst199A.tmp\WinShell.dll
                                          Filesize

                                          3KB

                                          MD5

                                          1cc7c37b7e0c8cd8bf04b6cc283e1e56

                                          SHA1

                                          0b9519763be6625bd5abce175dcc59c96d100d4c

                                          SHA256

                                          9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                                          SHA512

                                          7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                                          Download Submit

                                        • \Users\Admin\AppData\Local\Temp\nst199A.tmp\nsProcess.dll
                                          Filesize

                                          4KB

                                          MD5

                                          f0438a894f3a7e01a4aae8d1b5dd0289

                                          SHA1

                                          b058e3fcfb7b550041da16bf10d8837024c38bf6

                                          SHA256

                                          30c6c3dd3cc7fcea6e6081ce821adc7b2888542dae30bf00e881c0a105eb4d11

                                          SHA512

                                          f91fcea19cbddf8086affcb63fe599dc2b36351fc81ac144f58a80a524043ddeaa3943f36c86ebae45dd82e8faf622ea7b7c9b776e74c54b93df2963cfe66cc7

                                          Download Submit

                                        • \Users\Admin\AppData\Local\Temp\nst199A.tmp\nsis7z.dll
                                          Filesize

                                          424KB

                                          MD5

                                          80e44ce4895304c6a3a831310fbf8cd0

                                          SHA1

                                          36bd49ae21c460be5753a904b4501f1abca53508

                                          SHA256

                                          b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

                                          SHA512

                                          c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

                                          Download Submit

                                        • memory/612-1773-0x000000000AE90000-0x000000000AEA0000-memory.dmp

                                          Filesize

                                          64KB

                                          Download

                                        • memory/2232-259-0x00000000775C0000-0x00000000775C1000-memory.dmp

                                          Filesize

                                          4KB

                                          Download

                                        • memory/2232-226-0x0000000000060000-0x0000000000061000-memory.dmp

                                          Filesize

                                          4KB

                                          Download

                                        • memory/2476-1587-0x00000000775C0000-0x00000000775C1000-memory.dmp

                                          Filesize

                                          4KB

                                          Download

                                        • memory/2484-1159-0x00000000775C0000-0x00000000775C1000-memory.dmp

                                          Filesize

                                          4KB

                                          Download

                                        • memory/2664-1903-0x00000000775C0000-0x00000000775C1000-memory.dmp

                                          Filesize

                                          4KB

                                          Download

                                        • memory/2872-208-0x0000000002E00000-0x0000000002E02000-memory.dmp

                                          Filesize

                                          8KB

                                          Download