Analysis

  • max time kernel
    142s
  • max time network
    156s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240709-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240709-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-07-2024 22:33

General

  • Target

    f45b008c2dc3a65788aeac2040a067bd1a6100a06f8855d741ed9c82b94b7c3b.exe

  • Size

    27.7MB

  • MD5

    6e026f6349a5d57614b356d4fb57e705

  • SHA1

    ebba9da5397ee72c10d87b1a307bf828b08b2c8f

  • SHA256

    f45b008c2dc3a65788aeac2040a067bd1a6100a06f8855d741ed9c82b94b7c3b

  • SHA512

    4d9fe9f6f6d454e2c50820707cf5de133c2b5c84ec4945389a8529151dd5baa95da657c0de5f3588d35037a18e9e1417a3995f0ce22c5f6c0f1916c6cf1d025d

  • SSDEEP

    786432:w7QTm20juGqZXia4jHIbRXnomozy4k1zZB+YH90:wiAu7bRXoV2XF+YH90

Malware Config

Signatures

  • NetSupport

    NetSupport is a remote access tool sold as a legitimate system administration software.

  • Command and Scripting Interpreter: PowerShell 1 TTPs 1 IoCs

    Run Powershell to modify Windows Defender settings to add exclusions for file extensions, paths, and processes.

  • Checks computer location settings 2 TTPs 1 IoCs

    Looks up country code configured in the registry, likely geofence.

  • Executes dropped EXE 2 IoCs
  • Loads dropped DLL 11 IoCs
  • Adds Run key to start application 2 TTPs 1 IoCs
  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s).

  • Suspicious behavior: EnumeratesProcesses 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of FindShellTrayWindow 1 IoCs
  • Suspicious use of SetWindowsHookEx 6 IoCs
  • Suspicious use of WriteProcessMemory 12 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\f45b008c2dc3a65788aeac2040a067bd1a6100a06f8855d741ed9c82b94b7c3b.exe
    "C:\Users\Admin\AppData\Local\Temp\f45b008c2dc3a65788aeac2040a067bd1a6100a06f8855d741ed9c82b94b7c3b.exe"
    1⤵
    • Suspicious use of WriteProcessMemory
    PID:4792
    • C:\Users\Admin\AppData\Local\Temp\is-3L6OK.tmp\f45b008c2dc3a65788aeac2040a067bd1a6100a06f8855d741ed9c82b94b7c3b.tmp
      "C:\Users\Admin\AppData\Local\Temp\is-3L6OK.tmp\f45b008c2dc3a65788aeac2040a067bd1a6100a06f8855d741ed9c82b94b7c3b.tmp" /SL5="$900DA,28175153,776192,C:\Users\Admin\AppData\Local\Temp\f45b008c2dc3a65788aeac2040a067bd1a6100a06f8855d741ed9c82b94b7c3b.exe"
      2⤵
      • Checks computer location settings
      • Executes dropped EXE
      • Suspicious use of WriteProcessMemory
      PID:3132
      • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\ReplayMediaSplitter.exe
        "C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\ReplayMediaSplitter.exe"
        3⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Adds Run key to start application
        • Suspicious use of AdjustPrivilegeToken
        • Suspicious use of FindShellTrayWindow
        • Suspicious use of SetWindowsHookEx
        • Suspicious use of WriteProcessMemory
        PID:1728
        • C:\Windows\SysWOW64\cmd.exe
          C:\Windows\system32\cmd.exe /c powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\ReplayMediaSplitter.exe"
          4⤵
          • Suspicious use of WriteProcessMemory
          PID:1812
          • C:\Windows\SysWOW64\WindowsPowerShell\v1.0\powershell.exe
            powershell -inputformat none -outputformat none -NonInteractive -Command Add-MpPreference -ExclusionPath "C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\ReplayMediaSplitter.exe"
            5⤵
            • Command and Scripting Interpreter: PowerShell
            • Suspicious behavior: EnumeratesProcesses
            • Suspicious use of AdjustPrivilegeToken
            PID:4988

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • C:\Users\Admin\AppData\Local\Temp\__PSScriptPolicyTest_ru1ogcc4.4wz.ps1

    Filesize

    60B

    MD5

    d17fe0a3f47be24a6453e9ef58c94641

    SHA1

    6ab83620379fc69f80c0242105ddffd7d98d5d9d

    SHA256

    96ad1146eb96877eab5942ae0736b82d8b5e2039a80d3d6932665c1a4c87dcf7

    SHA512

    5b592e58f26c264604f98f6aa12860758ce606d1c63220736cf0c779e4e18e3cec8706930a16c38b20161754d1017d1657d35258e58ca22b18f5b232880dec82

  • C:\Users\Admin\AppData\Local\Temp\is-3L6OK.tmp\f45b008c2dc3a65788aeac2040a067bd1a6100a06f8855d741ed9c82b94b7c3b.tmp

    Filesize

    3.0MB

    MD5

    204644e80661ab38e4fde52bf5889811

    SHA1

    18c51c1efed1b39c3e0144d36771319436d76865

    SHA256

    50c82674ea25abb3e6e460d935847a2d7e8847c6ecf003b00f6674d3fbfe91ea

    SHA512

    dbfa37c1716a3cd573e4f7b7ef4dd3d3f91d8d7f3249de11f7be0d435cc399c5270297bc0a35ec7f204fe6a9577af1195de1200a2eb49275ee0d2b2a84f3d7ff

  • C:\Users\Admin\AppData\Local\Temp\is-SJA4E.tmp\ViewCompanion Premium Unity\asfbncor.dll

    Filesize

    545KB

    MD5

    12d32e5c2e2ef89f50ca2c52632db6db

    SHA1

    88a661b715b85e5e67440535aef04a82b9e292e4

    SHA256

    6d941795fea233c0f601308273bf26306f21e3b0fe273032052faace9dd85db5

    SHA512

    f2ba4afd2f12ac7e65f7d2452b65eec623e1ce43f062772f6396a8342b308ec23c1b39c79bc8bf1b8bed832dd4a75c405a77e57892f0b1fccb80d46b5e2d88a1

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Register.dll

    Filesize

    429KB

    MD5

    f3d3bcd19da5213105f5a7c51f57a033

    SHA1

    ef9e61ba85315643158ffa6526a9c17249d852c1

    SHA256

    6922b293f882318d737d5e891ac3740adaaf713b065bec9196415389d56e74f2

    SHA512

    3731b09dde11297ec52c7e64a4d4d7a230bee686191f450bceea0db6c982f93d70de879b983634191a452dbb483b61fddb17c1f7b0580b64f40b9587809181b6

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\ReplayMediaSplitter.exe

    Filesize

    21.7MB

    MD5

    5dc12e72ba1af3f9e63d4627277e7a9d

    SHA1

    cc2fe4529909cdfaf23e4312f00f8ea761655c09

    SHA256

    74b86605a3a2100a9c80bfabc84d22f69b2123ae0a942a1b9a3c4ed050186e0c

    SHA512

    35ccbf4c5c9d7027246a7d85d57c0a0e3a0afa21fd1356ab1c558f334ee44b6d834e669239c8346b1407758a4568dd3360f9ddf4ee314d4c3df1993e55a8b1de

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\B5-V

    Filesize

    2KB

    MD5

    0aed608aa1199f4c6590d7ac5ea3b399

    SHA1

    c3b2651396cd02556f670a35a84914045d9ff364

    SHA256

    449ff860b710a27095feccbc46e12c042ca2370f85ff34a1e4e49ede825c6765

    SHA512

    80199b4bfeecb187edd9d7e878caa752fa83077001743168acd2ce34356ee7866812e678979741a7296d206a6fb3890c53944479781d7b8e7df566d5b2ab553e

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\B5pc-UCS2

    Filesize

    1KB

    MD5

    149fb652f2a526e615d6028e6f283a48

    SHA1

    6c608a392ee72ec66d8ae1431bdd1b4baad47152

    SHA256

    b27a53b3157967cd89b9a708b76a0113afdd3de8682e94f166b8f1e5ffa3f7dd

    SHA512

    3e2d56d52f3c86e359338736e400f275217fbab721e57149c3123aa4f79836e32ff3ed0ae86c6965f28cf03b075af6a29e96726fa3080b328f3e5bf5f2f266dc

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\B5pc-V

    Filesize

    2KB

    MD5

    cd5d04be1f69629d02672d0338363b0d

    SHA1

    57b0df73e8d6c3e097c6b6a8f67c78f47cd5f7bf

    SHA256

    f1b09f3752437a802f0992297a18361fd3bceed8e208cfbb97f2e6c035a29d2e

    SHA512

    20db94834ea3a40a773720ececf8b2df166eb99ab80e22fbe972154513ac2f7ac578b8654d45c8dac8e24807cc58607ebe8ee006da114e8644ceb8018c82f9cc

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\CNS1-V

    Filesize

    2KB

    MD5

    3edcd1a889e5ecbc4200e7e73cd3a06a

    SHA1

    45a27b0d9cb6e33f09cc99a614e74165e4841034

    SHA256

    47b710e5e4f8e6115e49dc94bdebff328d10e25b1214ea1a7deab61f4780f94a

    SHA512

    99dd59e61cb728baeefaa2e24078fc3fda6ae3d0554a94121ada1dcd0e6d95caf539d3b6f53bdf225acd37fdac1e9047a78150c112823a886330ff31da144e5d

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\CNS2-V

    Filesize

    2KB

    MD5

    526941e5ce7ffe8c867b73f3ae1c0d03

    SHA1

    98113e2e0baa6077b7380d9e6b823a091ad5175a

    SHA256

    b9550e27b3290e40e8db266fc9a65213d8b58c5dc253ff6654d305f305950c78

    SHA512

    8deba3f6a9af62f89119052a975bd2f3c69e101b99176460fab342cdedf1b71f906936ec9c8841d410dfa5574efb16d3b30b4eed1f3d2a8394c1980e13e5b19c

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\ETHK-B5-V

    Filesize

    2KB

    MD5

    d632bb7d23946f2da0bc3fadb33d7511

    SHA1

    e033f88b2ce0ecdbcdd74cbb1cabdd8ff23e0ec2

    SHA256

    552daa355f17027489d57e4a9b0ce517760f16eb3039d966e48fba7bdd2a6829

    SHA512

    7a0dc4ad7ff07aad84fc784580bb7a791611d4f61c5b8eaa7fa31a31fbf9b9bca73f9e9e8de39a7b10f9d2ab9120edf87aa230ba2dddc1a46b1ce28184e5c86b

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\ETen-B5-V

    Filesize

    2KB

    MD5

    5d347b8a17c236ed0def5a250c7764f8

    SHA1

    c65a9f2827a809fba2c1bbcdac7fd5cd4003c7b3

    SHA256

    0e6f041edd60516e92c9470254c4d45522b4cf079f1809b82862d43a3f1e1663

    SHA512

    b8a9584b0747c068ef8a73afcd2121f0e0f05ebe9fd57f1f52a17ced0f3562647949d3d1f6dcb78a83a96abe15b53f36156503ed32a48a3408ceb89fe70c66a3

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\ETenms-B5-H

    Filesize

    2KB

    MD5

    d7a13300fe4e44a6a1f5a33d015582fa

    SHA1

    a236620de53c636bfa23e3c1949e05982e963d08

    SHA256

    051a38392481d6069608f41962ef9393e142797a8977d7f7fbd534b051a6e231

    SHA512

    65f5ed149ff248e4db0a7faabab4844ada3e4b6260cdaa52bd882d8317864a9b0a70f30c826c4aa7a16f2f2800c34d36f0e3a6be3ae58b1db93a0f0259bfac8c

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\ETenms-B5-V

    Filesize

    2KB

    MD5

    861027afad2131bb56067357d5b43228

    SHA1

    a22e99af1f7abd25bb4491db0102f0615ce33c24

    SHA256

    477e42501dd0c27301b992ab004d6044bf5406277ee7a353d3b04cc08092a9e0

    SHA512

    87d11b5af8b1a349f73f006d06ef686a4bbc51d6fe51133b6b624ce2a7d49959697edb4d0cd7d5ee873b258b5262d0a24e2c9764b40fee100329ad3e3442658d

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\GB-V

    Filesize

    3KB

    MD5

    cae70329f18616be44984e2a5c5a2666

    SHA1

    a745a5abd706e7689b46c677a111f84120033e25

    SHA256

    8183888d47318ee30bf2b4f2a07aa953137ab43ac72df265c83f79f2b6180a62

    SHA512

    c3f7dd5dc17ec36dcc1675c22f3df6d832f13ad7971f3c6478e5861f4c2c7b85925928ccde12bf6c9e6e7f448d01a6084c006f10283734ee5e68e8f67e08b0de

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\GBK-EUC-V

    Filesize

    3KB

    MD5

    675e3ec665d51c178ea86557007d1063

    SHA1

    137ecc3174dbfab5151d4c9fcd0ccc9c260e291d

    SHA256

    73381a5bc2d0aacbf6b2ec211f34e042e7c74895342fcee073b0f9be2dbc8703

    SHA512

    a07f9ee1a3c6569f058ef66858404fb1e3abcf731854de8e4f47198acd2ea1afbc7f7aecc7887dde9101613c3ae107dde9f3624a91e1eb2cb111e373a7f02dff

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\GBT-V

    Filesize

    3KB

    MD5

    b9e909bf1fcc56fdfc12fe04bc73d5fe

    SHA1

    f62c2943c8393171c9853442f910fb6b2bf3b6e3

    SHA256

    04f4f5ddfd909d8a9f127957b3dcd549d121dba9b3459da396ae80abea94a0b1

    SHA512

    4141751106fdd420b3355646e60607b5d11fe57edc7505061f24cfe7da89fc921f780287d075b34f71eee86999509348266afc49fddb916655ae9785224d0a3b

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\GBpc-EUC-UCS2

    Filesize

    1KB

    MD5

    6863d6265e410a554a60f9c7d0cdbb55

    SHA1

    9c6bd6a23c32dc0ade2b73235b8bce5a331e15f7

    SHA256

    85fb961a54fbb1cb29148400f2804ea7e9f5c1cc4cebe79a48c680866bda57fb

    SHA512

    56c522ecefccdfc6ecfa422b0311ca1af0c2bcf30bd2b7358183a249afd15cfceae3917beb58925589f200e36ee2dd7c0dfa7828b41b7c21bcde48a944da0925

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\HKdla-B5-V

    Filesize

    2KB

    MD5

    ad0a3c6b305e010095a7d9381442acaf

    SHA1

    155554c7ef760c4fc6a1b4e0f9ce13ae82a37140

    SHA256

    0ef767fb0c28ab6068183f2253e47f1b1fff1779260e73d15ac01b138da57367

    SHA512

    7e4efb775a4d8e6642f1a3611b7c13a3d6448d7703d06f2b5706f61f6d2a297bfaf81f219fce7e2f24c3ee015fb94e41d80536e2d84567b0f9567cc6d352a6df

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\HKdlb-B5-V

    Filesize

    2KB

    MD5

    caded9a1e929b3da8753ce62a8a79252

    SHA1

    27d7c8faff7ccd29a92c1a978c52c666ddd63342

    SHA256

    aef49aa9c31386b7a57aba5822bf4269975eb05ea4fe51bda9ca0fb5bf31edba

    SHA512

    c517da06e378601a1c29ec6dd11b0d06ca4610d98edab6dec5e2495027dd7c8ac5021eb7dff986f75e469c781620bb1a5560225b32c2a66e8279fe162883247a

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\HKgccs-B5-V

    Filesize

    2KB

    MD5

    8bd09a40ca6ccec9e3cd6893762c16ab

    SHA1

    d68d68f8054762058f699954ce9923de42108257

    SHA256

    d164ee025e214dd64a3921d826e9ef9dcc3cd3e6381c527302f6802b9a4c7043

    SHA512

    18e37f6ddc3f7790d44a1bfd67df217fd7995974aa3d431dee1e74e01db80b956f0e47f8830ec183719ff29c8bc5b0d3d2ca86b1bf97e6175c270ef5a6ec0b35

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\HKm314-B5-V

    Filesize

    2KB

    MD5

    f922ecca5fcffb7738823bd204a3df18

    SHA1

    1eab5700f9f3c4210dbb267763baa47052e05f7b

    SHA256

    28258c0aeea002495a13190786f3d4025ae426248a6a872b21958d8d4a22f957

    SHA512

    53c00b76b71aab157f61fbfdd7d594311d625d7d7ce0a0f7c984a46e20a68d18dcdcb2495727ad8f5cdfabaa13f73f40f6759ed47b353980b335a24eafd55b08

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\HKm471-B5-V

    Filesize

    2KB

    MD5

    e1754ec0d0209d7bcd0ccb43fa5ff303

    SHA1

    055624e7994f56eed8edf25aa84a40c9077a8ad7

    SHA256

    7f97034b0baaeaa2a3cc01f691534e61a5425b3ff9a89025082a9c14bff02a4b

    SHA512

    7f24ffcc8fd8ac9179c93ba105e0bc16d79f0d5cf864fa013f490f1722c33235a65953736f9b17ed87004ddf0d9dfcc6eb06cfea6bcd81fc35a5ff96c87e6703

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\HKscs-B5-V

    Filesize

    2KB

    MD5

    b960fa50f71935cd8ede29897ae376a0

    SHA1

    4dd09478fe22ae90a48ec02e69eccdb7b46f806c

    SHA256

    1f6f7f06216987d973c18e23d1a8c79044d9f1b301e01c738867ca1fdf50e237

    SHA512

    94346b57ff336599964910a55db5d49ef53c2698fa9deebcc50650cdebf573786bf4d49d6c71d0165d962eb1a030eb6a51594dbf7a6f4d3ae3accc6066c0345d

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\UniCNS-UCS2-V

    Filesize

    2KB

    MD5

    959b8560f9a906bed149a42e24f01201

    SHA1

    5b069847cda522c915db78933dfac78b1f2909e0

    SHA256

    745fd7a922bedd2d124006a4b5e6a909aaaa9f11eebefbb0477c22a01439a3a8

    SHA512

    f60127bf032fa551ea39a65dbfd6c8fce741d0608d9c4c44e039e3a7260a9c11d0341ad9c8f992a5886101c01cb7fbb3aa9286e2559ccfcfc402687a10c3ebf5

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\UniCNS-UTF16-V

    Filesize

    2KB

    MD5

    2db13db02fe6809881e55657355cf23e

    SHA1

    3c455c190ce2f9b0046fe157cc005a5846cae027

    SHA256

    d21175d1f8a083b606a9a1e17fa98d1cb901a0e833e19d47a6c08fb452c91c11

    SHA512

    c26b712bc954f9af25712f8dc3e8e1fec9ef14f6dea35f13227f976c8a4df96a244437d0bf2ffec0fd9c002ad8ae3aba4b49d6e6bc10e837a8d823c623512441

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\UniCNS-UTF32-V

    Filesize

    2KB

    MD5

    e82e8e750a5a5fb42f4935bc83468666

    SHA1

    c2c86b141b9f4790b7432f2e3fafeb3d073d0d81

    SHA256

    85e38fda8328d3a7917486cb18094a7a18c4fb52dfe76c36e4eeaca0444aa101

    SHA512

    c9f7af5cdadcad19813e542af21e5e84c18bf7ec5b6810bf571b40c8af042fecd9cf96951876343ea596a7aff2fca4c9cf000f18e7ba01d1061f80526fa66f34

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\UniCNS-UTF8-V

    Filesize

    2KB

    MD5

    a5a043603f5e3170a6f41b6f7847a270

    SHA1

    64938ac3ab17b62dabbe37d3d6aec39bcba068dc

    SHA256

    b609e60fb74b493ce46d2f3b2393d0bc81244ac9a10711a96d61fa476e684a94

    SHA512

    b2ad15daad4f4eed6f0a29790add5d35153469fce08d43cf759b91b6e69bfda11a72980758ae0f30ec1068886e66a1fe2f2cca90d2703a75f7714ab31ba77717

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Chineese\UniGB-UTF16-V

    Filesize

    2KB

    MD5

    17dcf03584e2d46f8ff87deaf217a0d1

    SHA1

    40faad2d061451082ed116cf88d66d09f9d5fdd5

    SHA256

    7d40dc464b46ad8da9bf4d063dae76b0dc190e29805cbd2826e1599e4b432001

    SHA512

    9df274a97d4628f2a7338ff926f9d5e3d9f7b141c1387169cd04f155d2ae0eeb7a6c162eee4b7b8b62728b0684fe07863cb97f4a14690363b642cf43fbc194ee

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Identity\Identity-V

    Filesize

    2KB

    MD5

    900e3a66d1f99750ab463dab43889d70

    SHA1

    1469995c822e2ef52b26792f9b56ff768d563290

    SHA256

    c03430489caf73dc71c723d9ae0413a31132f6ac9f16149d9a1d19e5d913af0f

    SHA512

    8c2027e661d6831985aaa140f7921202f520569e4a1681479196ff6556d857e005e78d49ef10f70bdca771b3929c78dbe4833b5bfc88f1577170533ea9f95245

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Identity\README.txt

    Filesize

    143B

    MD5

    aa19260775dcdbdc1dddcb6f37dc81d9

    SHA1

    2bae5d7ae14c06b5b73579538cfb8e25fdee5bd8

    SHA256

    d2954b88d32c642bc307f754fc8042043be02a9b0b952868cf02ac0ce01d2713

    SHA512

    4f3709b69c26cfff382ad2cb008234ccb6a86f4456ab3a6a4bc97dbe2d73d4364c6cf1844a705dcba5d0d60daa09650082c351208bc9da9c32f6749545c46f63

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Japanese\90pv-RKSJ-UCS2

    Filesize

    2KB

    MD5

    91070a7f585137e78a89241f3e0e1004

    SHA1

    a728c7c607be70c80c98e4b4fc10d5a87cd0e03d

    SHA256

    0b1800909e4ef9972811c776d118fd85c21cc155a2f17ffdd03b4fc78375a81b

    SHA512

    7bfaab85865b1f54802c40131775da8cca018a532677fda1e56a87785b6967244d5811102db1cec4259259a1afae97e16f23466de2f77eea8edd5f3bd85de29d

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Japanese\Hankaku

    Filesize

    2KB

    MD5

    f70aa97fc64e4d2864f7e315193f9ff9

    SHA1

    97f5a7397176c63813b7ab31e91e11f3768ecb55

    SHA256

    a582e384265b625921729f6fa344f38f100502cd969a3310f8d17b236b67a2c8

    SHA512

    b06bb8b8e1520feefa0fd36f36f9e353937cef1e22ebcc36866245439a7f135fceb7e9b7cd480b5efaaf3483ce9a5b3160f9561d7a68b6f9bc11f7481109aa42

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Japanese\Hiragana

    Filesize

    2KB

    MD5

    6f3e620c06d09a327a8c479f95e890cd

    SHA1

    23116c45ee33bdbcb2c6fc87c80c25bf574cb4b1

    SHA256

    f41d2a00f8411311cf8643830fd02eb255bd79afde8c07eb2c147de8e1f4b992

    SHA512

    de2b8018c29a92d1224b35551d2a09ef7e9cc909c66ec2c6b74a68e729f0464db7afe344e598851c41280ea09f30822d74b2af7d0f6b250f9d6873eaa1251b06

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Japanese\Katakana

    Filesize

    2KB

    MD5

    139c8427aee902b74b87109ae78a6a10

    SHA1

    e19e37f0a061b33242f3529580c1eff656b99671

    SHA256

    d2f827654583b9d243593a9bdbf9407fc1a1c4ba6ffab1f7789155bd3b4f52ba

    SHA512

    b8315a2001864453169e5f07fc89bf13f892b01165ffc39f856c66c757f90827a719179000cf81c9437bcc105ff3c22f6b8fa9c4bd1b78bfce4a4051d842d047

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Japanese\Roman

    Filesize

    2KB

    MD5

    32b59a9cdd59216a71b106064f42ef51

    SHA1

    9db4f5905a7131b18fb484d755d9948589223878

    SHA256

    561c18239a2c308fac2fb53bb3a4af385577b7399fae9bcbfcb5cce5e7f44a55

    SHA512

    16481f9ee2af202ed6d471fc104ce347736c6799b8eac18d6afbc1ff057ccfc4ca14c73b60644eb409e88ee490b43b53812d550eb8a95201494e131333fdc843

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Japanese\UniJIS-UCS2-HW-H

    Filesize

    2KB

    MD5

    521894d24440468789a3f7c49c865d51

    SHA1

    84714ea1f5d333303d0a0c9b80f9a6580b7992d3

    SHA256

    782f9d14dffa2a538302c8aa02b7d4650ff41d3bbe49215546c66a786be92bed

    SHA512

    659575416a18326148ce7c01847b50c2721e9ad676e85c7073373221bdcd961772691ed290dfe0c9e2153cc62d3821a5b1a3964d48ac7e97b30b9b1673b0945f

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Japanese\WP-Symbol

    Filesize

    3KB

    MD5

    8c72929014f35978f51c1a9332e241c0

    SHA1

    68b311fad697e7663f67b7aa639e04f96d06f5c1

    SHA256

    6174dd5cd3acaf8439764be7596f5aea1d0515ba81aa9ad01270d92e171fea87

    SHA512

    c51c4f3400f43b53c77a4f028905d5bc9776f52ff69398573d6a9e94b9e76ca8d87d2188f0e93db8acbe08f3b4d56fcb48a79c086ef7ffac4119e5cc7d2e6dc4

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Korean\Adobe-KR-0

    Filesize

    2KB

    MD5

    93be2dc52ad55a0c558b25297191af3a

    SHA1

    ff2d1dc4ea087a54525c4bed27c15b1b260890ef

    SHA256

    ca58ef1abc2de732d5ff285ded96bb70700e293c19c416a89bae92a163037618

    SHA512

    1ee2d3f690831fc5cc49d717304ed41e04df5ee2d5f7b3ea2b3142b41135551c9bfe88f2cff6bba15ccc1e6dc5512902d09d609c3712844f842aa5d630b69f18

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Korean\Adobe-KR-1

    Filesize

    2KB

    MD5

    fdf9e7421cc004f9a566c057146a1787

    SHA1

    e0af8f88354a2939e7aef575f26ec6e2a5c08eaf

    SHA256

    3b470c60b3d6196322be671571325b5025097fa97bedc51964948a7c6f927f7d

    SHA512

    53de7786582c2700fd3ee4b478fbc3c45342c97a76a60b756f21134408527f3d08e39631243801a82d9e2ba98e25ee6255f27074162df7883f74f9957d8bbc79

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Korean\KSC-EUC-V

    Filesize

    2KB

    MD5

    7649b12cb7c844488c7ca700606fd166

    SHA1

    897d44364c8ac52564cd2139fb839f1f02e3da7d

    SHA256

    a51f69ff435ff83b3c200b2043572492be05ac08e98f4662f3938b3f6a1b9a6c

    SHA512

    d289045b21bb55fe52f00cf8f89d7591e2d4c2156b56a0dc9906be56a37d36333f4f55c00cf4f184d51344c5d9c5bdc2487fd4018b6c6b70305c624da3bd6b62

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Korean\KSC-Johab-V

    Filesize

    2KB

    MD5

    09033aa7e2f3d5b49c9f4a0431281d56

    SHA1

    b69de59974eb10c0a001f1f49add0bc52db1d661

    SHA256

    3894ebe91d454fca07dd0a3fa68473188580d63f0d7ccdf2b24e248507a86d27

    SHA512

    a1335347ba88251792568963e226e78cae16ee4a154f2733bc4c67efbb0cef47748cb8fdbea97ebdf708c9fcd34dc341bcc1743859afc26682ffd735635c9d4e

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Korean\KSC-V

    Filesize

    2KB

    MD5

    d12dd5df708905181f72d3f0b979bd24

    SHA1

    a031080d8a5e998a2c417a5b62418a41adb3122f

    SHA256

    c06c74a7f1e76a6797432e2b2b29bb30d65acbfcc80dc3c6dae60e0e045ee9e1

    SHA512

    b5e46c0d85c6eb644affc46a6ad8471eeca1b72a20627e60420fa1558ee5d1af46adc79aacbea385584af4a31a1940aaa14024492d10fa28705c1118f8057571

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Korean\KSCms-UHC-HW-V

    Filesize

    2KB

    MD5

    ceea0e1e5c6c1efc89e306ef8ab334cb

    SHA1

    613cebc77dab885b6351832e24d9f1df880b593c

    SHA256

    b6052023250b12413fe7ac8552d64362720374df3c0d1beb2406922856a504fa

    SHA512

    96991847c7ba1a708e09809bd37d283be8eb3fdd8ac070ab5cf0e51857cee5ec6fd9c5347957222faf38b2945bebdda423b2e4fae9d1af4e90c0a4e4864142dd

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Korean\KSCms-UHC-V

    Filesize

    2KB

    MD5

    9141ae5968ac3c108aa030c161298c16

    SHA1

    a377d7003a157229ee4ab5664431737a7a0ee208

    SHA256

    1ca4c9a90aa3079ffdc8ceb7e288f034d0afbc7142a7fae705416368fc581186

    SHA512

    b83b23235cfbea6e28585e523e14386b3dbd115fe626d0c66e506daa6b6687ca400d933e368dae23c46fd742db1e146e6b70a2a8ee6d115479c8d6b7cb935457

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Korean\KSCpc-EUC-V

    Filesize

    2KB

    MD5

    a218e48227aab3f61856a709643cbb57

    SHA1

    32ecbff6fc4faa12d5edef8f7375ff7a55f26471

    SHA256

    2fc9b120724cea591b2ffd2bb4206a31329a085815e45d73e2b93ab5c1ac9f5a

    SHA512

    87a24e180288c6afcbf7d5b18ffbb25bd741a167c24fc4c8e435a0d9e82438041ea3c79dafed86ae366ea6ef1f22d6e9e075a273c7a1ebc7eaf8c1e7f96e9368

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Korean\UniKS-UCS2-V

    Filesize

    3KB

    MD5

    702928972b7d86d7d9112cf610d668fc

    SHA1

    ae0a3ed22e1cf81d590162ce609d637f8d9cc440

    SHA256

    76c08c4aace48d92a252e686f9d748ebde009337b59361ec286c4bdc037e5933

    SHA512

    401ca483c06b5f767096538025a1a5a28f828efe30437ae31fda3a5fdfb5f802719047bd81ea0609f07faf00449f301069618c8e0178b6984b7a47dddb6e0c28

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Korean\UniKS-UTF16-V

    Filesize

    2KB

    MD5

    4c1917f69cfeefd8c136708732798c03

    SHA1

    3612974c74ec58e47bb11ab10991fde360c39948

    SHA256

    681aecd86956265504f7875af43eae3985ab263175aa782baa884b0f514f2aa6

    SHA512

    679ce95816cf48285c78f6e19021ef608d4f0ea5a8f90f959ee42826a9b63dce20082b71b9d837d2617d415af8b5396613c66f329d5708aeb217992a9ab0e8f9

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\Korean\UniKS-UTF8-V

    Filesize

    3KB

    MD5

    37767a72f6c62675e8c2a0b252f8f7d2

    SHA1

    0c690c8f05f14ed5f5ffa3cf5f44dfbca71dfb8a

    SHA256

    ee17a18a7dc48249938263110745162835fc77e6648616c03464c1de1ecce499

    SHA512

    d24f06d1d8a343195a9b9c88ea7437cb1b8701a7dfc1e744d13becba90595a0229b26dc21b02e7062fb2e91b7c91708315b0d485d16ef4252733d6bc2cc48e65

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\Resource\CMap\README.txt

    Filesize

    481B

    MD5

    9047ac94d14fcc73bedb3a8e9ede1d84

    SHA1

    12c38b1072456f2694a69d0c9d985780b1d0a79d

    SHA256

    476b8f1a4911da2b48d8b60e3442fa4563120d82814677c237a2375ebeee090e

    SHA512

    2e049bfeec077d052edf85373df22032c1b72d28cf501b152bca198e593e33cf66447349da16a7533ca5ef4668781f4ca3967a2f2830255f35bbe1d441a6b40f

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\chat.wav

    Filesize

    3.1MB

    MD5

    8aa0c53d6e7cc1a619b98e984e396fb5

    SHA1

    f4be478877abb1d09afbe4c583944179e2230e41

    SHA256

    220e0cd51ce48404796ef33f81b238f9b7440bd3a6533c9fe266b93fb47dbf4b

    SHA512

    b36c376aca579cf7514815f2003ce4f7da7ea52d0301fffd1cb3715b55812f71f3f3426f19881d20cc541f596a4c9942f26d0ad559dc45ae5404e32777c2bac0

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\dev_MegaStack.dll

    Filesize

    822KB

    MD5

    077d35032c236cbb68931c77707a20c9

    SHA1

    037607991573c300548ad7681b0cc947371e3557

    SHA256

    6a099e8b3c59eaa6bfd9172354e3a91573962e83ad8a2f7c4e981b74e0534245

    SHA512

    b1b5ab01613975fc0fdb93807d5f33ea00e83512f20565d307a7e4b2a788669bbd22974000d4dc0b9e2fb2ab295ab0ddd11804275c9c7c2fcf981320fcd13741

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\libservice-backgroundcache.dll

    Filesize

    9.1MB

    MD5

    b97e9897ff11ad30636622f3b065b8e9

    SHA1

    d0347dd947f9e01975cd1f5fbbea59b900722488

    SHA256

    77688adc940848dadf0edaf3ea66e03221fa1dd22d2a1a72a09f0c4598929c3b

    SHA512

    7ccf468afeeb4effa9bd4e824692e2cdfa44bd9d463b97642403781df1fd2161da4351f714a5f43da085e98dcbb51b69d64ade48e032c2f46c76cef5886a4413

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\libxs.dll

    Filesize

    3.0MB

    MD5

    5955dba1afff03e5d600db86065c2749

    SHA1

    da5d671b89ab87c87cc4e93226f53f784b91882c

    SHA256

    2c612a9918b8c57f4c4fe097d42faa6606934f5d5d658d4c155d222013bb335a

    SHA512

    f5e4da1d81b2bfdfd585dc887dd6a9990621d091bb7fb5c8469b5f55194e6deb9c46320efda34a6e3f480a09d79f692c3085bd94775dfd1f23fa9e22d61dc0ef

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\licenses\DCMTK-license.txt

    Filesize

    1KB

    MD5

    ef66fc02201b74ee725d84caa9956826

    SHA1

    17c0d1042bc9591ab194a849ba4eb484c63c66fd

    SHA256

    8b6a982ff021c45afb7c748d19b246a8003fe8f70c6446328e5021cb6203781a

    SHA512

    f76526195be6c9ede2537ac9d9dfc245817cbdcac936ee2a59d2c3aa4d468c52f73194ec962279173821bdbca4ac6998af643e81d987d2e7b7813ac9a577bf2f

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\licenses\copyright.txt

    Filesize

    1KB

    MD5

    e037daad915bd736c008b205fccbc3ed

    SHA1

    8f64ef5b1079718425ced13b1c5e475c430e4fc4

    SHA256

    2ff5af27cab4f3813aa5a34a18a0c620293135cb4f996411fada41534237ac47

    SHA512

    f0df0c05d978abcf6e433aa6e6866163ef9883d8c22526ca5f78a02f95df29670551e37ae27250440da798200b0be13a76300ca68b11c81f061aec3bf1c74199

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\licenses\libtiff.txt

    Filesize

    1KB

    MD5

    7fd893e6039448f69ff3eca0211c3120

    SHA1

    8299bcff91d05fbaf13327c0335942d533159049

    SHA256

    ad6f65f21107e2bc7f15872335453069239a3b3f1bcb73d22e3825a73d999853

    SHA512

    912cc4fcd5094baec2337a3f487e0c3b2c20872fe2eee0b678370e2efba6ac96ee1aa2435419b72077a5ceafe77ca325385484c0854082477245d2b5f1b29af2

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\msvcr100.dll

    Filesize

    755KB

    MD5

    0e37fbfa79d349d672456923ec5fbbe3

    SHA1

    4e880fc7625ccf8d9ca799d5b94ce2b1e7597335

    SHA256

    8793353461826fbd48f25ea8b835be204b758ce7510db2af631b28850355bd18

    SHA512

    2bea9bd528513a3c6a54beac25096ee200a4e6ccfc2a308ae9cfd1ad8738e2e2defd477d59db527a048e5e9a4fe1fc1d771701de14ef82b4dbcdc90df0387630

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\nsm.lic

    Filesize

    261B

    MD5

    886e4bb84e1ecc4a04ae599d76fcce1d

    SHA1

    3f0493bb2088af50bcc8223462db0b207354e946

    SHA256

    5eeb014e3b390e0c85ce72988d422dcd9de1520566b11755c70bdd9bb7376060

    SHA512

    f4db9038a113c4b1e2462b3e0becef2500c9532a79c8187f51d011d690bc68c6d1a99585e43136cb082bd6a232136546db50265f226ff19e67d8430306a8761f

  • C:\Users\Admin\AppData\Local\ViewCompanion Premium Unity\readme.txt

    Filesize

    1KB

    MD5

    4f6b1697a0bfb47c7d6fc98814e74717

    SHA1

    bdcee6176617cee7da69ee83a6a75cca6e5ece98

    SHA256

    3f0bb262e441898eb41240e4d7998097b8c7adfe64db5258571b2e78e5562fe0

    SHA512

    f25c1742b40f9677dc168c4ede93ee73695e5c93f5a1de2dfe68e5e22f613699b66ae10925e4f95ae5895b5f34b730918143050d8c103f14beea47cb7a94bf17

  • memory/1728-1250-0x0000000008110000-0x0000000008269000-memory.dmp

    Filesize

    1.3MB

  • memory/1728-1282-0x0000000008110000-0x0000000008269000-memory.dmp

    Filesize

    1.3MB

  • memory/1728-1146-0x0000000071BF0000-0x0000000071CC1000-memory.dmp

    Filesize

    836KB

  • memory/1728-1150-0x0000000007990000-0x0000000007A79000-memory.dmp

    Filesize

    932KB

  • memory/1728-1151-0x0000000007990000-0x0000000007A79000-memory.dmp

    Filesize

    932KB

  • memory/1728-1329-0x0000000008110000-0x0000000008269000-memory.dmp

    Filesize

    1.3MB

  • memory/1728-1153-0x0000000008110000-0x0000000008269000-memory.dmp

    Filesize

    1.3MB

  • memory/1728-1333-0x0000000007990000-0x0000000007A79000-memory.dmp

    Filesize

    932KB

  • memory/1728-1344-0x0000000008110000-0x0000000008269000-memory.dmp

    Filesize

    1.3MB

  • memory/1728-1271-0x0000000007990000-0x0000000007A79000-memory.dmp

    Filesize

    932KB

  • memory/1728-1216-0x0000000007990000-0x0000000007A79000-memory.dmp

    Filesize

    932KB

  • memory/1728-1223-0x0000000008110000-0x0000000008269000-memory.dmp

    Filesize

    1.3MB

  • memory/1728-1210-0x0000000008110000-0x0000000008269000-memory.dmp

    Filesize

    1.3MB

  • memory/1728-1237-0x0000000008110000-0x0000000008269000-memory.dmp

    Filesize

    1.3MB

  • memory/1728-1212-0x0000000008110000-0x0000000008269000-memory.dmp

    Filesize

    1.3MB

  • memory/1728-1211-0x0000000008110000-0x0000000008269000-memory.dmp

    Filesize

    1.3MB

  • memory/1728-1249-0x0000000008110000-0x0000000008269000-memory.dmp

    Filesize

    1.3MB

  • memory/1728-1255-0x0000000008110000-0x0000000008269000-memory.dmp

    Filesize

    1.3MB

  • memory/3132-1215-0x0000000000400000-0x0000000000706000-memory.dmp

    Filesize

    3.0MB

  • memory/3132-6-0x0000000000400000-0x0000000000706000-memory.dmp

    Filesize

    3.0MB

  • memory/3132-1332-0x0000000000400000-0x0000000000706000-memory.dmp

    Filesize

    3.0MB

  • memory/3132-1145-0x0000000000400000-0x0000000000706000-memory.dmp

    Filesize

    3.0MB

  • memory/4792-2-0x0000000000401000-0x00000000004A9000-memory.dmp

    Filesize

    672KB

  • memory/4792-0-0x0000000000400000-0x00000000004CB000-memory.dmp

    Filesize

    812KB

  • memory/4792-1132-0x0000000000400000-0x00000000004CB000-memory.dmp

    Filesize

    812KB

  • memory/4988-1291-0x0000000005AB0000-0x0000000005B16000-memory.dmp

    Filesize

    408KB

  • memory/4988-1302-0x0000000005B90000-0x0000000005EE4000-memory.dmp

    Filesize

    3.3MB

  • memory/4988-1303-0x00000000061A0000-0x00000000061BE000-memory.dmp

    Filesize

    120KB

  • memory/4988-1304-0x00000000061D0000-0x000000000621C000-memory.dmp

    Filesize

    304KB

  • memory/4988-1305-0x0000000006760000-0x0000000006792000-memory.dmp

    Filesize

    200KB

  • memory/4988-1306-0x000000006A400000-0x000000006A44C000-memory.dmp

    Filesize

    304KB

  • memory/4988-1316-0x00000000067A0000-0x00000000067BE000-memory.dmp

    Filesize

    120KB

  • memory/4988-1317-0x0000000007180000-0x0000000007223000-memory.dmp

    Filesize

    652KB

  • memory/4988-1318-0x0000000007B10000-0x000000000818A000-memory.dmp

    Filesize

    6.5MB

  • memory/4988-1319-0x00000000074D0000-0x00000000074EA000-memory.dmp

    Filesize

    104KB

  • memory/4988-1320-0x0000000007550000-0x000000000755A000-memory.dmp

    Filesize

    40KB

  • memory/4988-1321-0x0000000007740000-0x00000000077D6000-memory.dmp

    Filesize

    600KB

  • memory/4988-1322-0x00000000076D0000-0x00000000076E1000-memory.dmp

    Filesize

    68KB

  • memory/4988-1323-0x0000000007700000-0x000000000770E000-memory.dmp

    Filesize

    56KB

  • memory/4988-1324-0x0000000007710000-0x0000000007724000-memory.dmp

    Filesize

    80KB

  • memory/4988-1325-0x0000000007800000-0x000000000781A000-memory.dmp

    Filesize

    104KB

  • memory/4988-1326-0x00000000077F0000-0x00000000077F8000-memory.dmp

    Filesize

    32KB

  • memory/4988-1292-0x0000000005B20000-0x0000000005B86000-memory.dmp

    Filesize

    408KB

  • memory/4988-1290-0x0000000005300000-0x0000000005322000-memory.dmp

    Filesize

    136KB

  • memory/4988-1289-0x0000000005350000-0x0000000005978000-memory.dmp

    Filesize

    6.2MB

  • memory/4988-1288-0x0000000002BB0000-0x0000000002BE6000-memory.dmp

    Filesize

    216KB