cb863074fab6f6c85b2c413a3139cd847c5c5ed55ba468aab262b0153aa53463

Analysis

max time kernel
126s
max time network
135s
platform
windows11-21h2_x64
resource
win11-20241007-en
resource tags

arch:x64arch:x86image:win11-20241007-enlocale:en-usos:windows11-21h2-x64system
submitted
19/11/2024, 18:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

CrosshairX-SteamRIP.com.rar
Size

180.4MB
MD5

ad9641e6ec9d58436e67a52793a90dc1
SHA1

c1bedb9938b5207a0f491088f760cb0ecf57a8d6
SHA256

cb863074fab6f6c85b2c413a3139cd847c5c5ed55ba468aab262b0153aa53463
SHA512

791f6f6b04f481b2b73ec6236ead87def5c17923676d708f099eb699290b3b27d7c742c0c107b5ffb47484ac0dddeae2724fad85b1ee7d4287707ac763c94326
SSDEEP

3145728:ztdoUbuPhv7rSnrr+zEnmBTa6SjNy5fb4s1yqCHxeVqvlvm7PyJgbNw+LtbINmv:YPRnSnrwEmBGjNy5fbqxet7PpfLtssv

Score

7^/10

persistence

Malware Config

Signatures

Executes dropped EXE 15 IoCs

pid	Process
1308	CrosshairX.exe
2700	CrosshairX.exe
2844	CrosshairX.exe
1688	CrosshairX.exe
1120	CrosshairX.exe
3332	CrosshairX.exe
5652	CrosshairX.exe
2432	CrosshairX.exe
4640	CrosshairX.exe
760	CrosshairX.exe
224	CrosshairX.exe
5872	CrosshairX.exe
3564	CrosshairX.exe
5688	CrosshairX.exe
2464	CrosshairX.exe

Loads dropped DLL 36 IoCs

pid	Process
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
2700	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
2844	CrosshairX.exe
1688	CrosshairX.exe
2844	CrosshairX.exe
2844	CrosshairX.exe
2844	CrosshairX.exe
2844	CrosshairX.exe
1120	CrosshairX.exe
3332	CrosshairX.exe
5652	CrosshairX.exe
2432	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
760	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
224	CrosshairX.exe
5872	CrosshairX.exe
224	CrosshairX.exe
3564	CrosshairX.exe
5688	CrosshairX.exe
2464	CrosshairX.exe

Adds Run key to start application 2 TTPs 2 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Software\Microsoft\Windows\CurrentVersion\Run\CrosshairX = "\"C:\\Users\\Admin\\Desktop\\CrosshairX\\CrosshairX.exe\""	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Software\Microsoft\Windows\CurrentVersion\Run\CrosshairX = "\"C:\\Users\\Admin\\Desktop\\CrosshairX\\CrosshairX.exe\""	CrosshairX.exe

Modifies Control Panel 17 IoCs

evasion

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\Help = "%SystemRoot%\\cursors\\aero_helpsel.cur"	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\IBeam	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\No = "%SystemRoot%\\cursors\\aero_unavail.cur"	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\SizeWE = "%SystemRoot%\\cursors\\aero_ew.cur"	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\Arrow = "%SystemRoot%\\cursors\\aero_arrow.cur"	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\AppStarting = "%SystemRoot%\\cursors\\aero_working.ani"	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\Crosshair	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\SizeNWSE = "%SystemRoot%\\cursors\\aero_nwse.cur"	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\Pin	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\NWPen = "%SystemRoot%\\cursors\\aero_pen.cur"	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\SizeNESW = "%SystemRoot%\\cursors\\aero_nesw.cur"	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\UpArrow = "%SystemRoot%\\cursors\\aero_up.cur"	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\Wait = "%SystemRoot%\\cursors\\aero_busy.ani"	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\SizeNS = "%SystemRoot%\\cursors\\aero_ns.cur"	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\SizeAll = "%SystemRoot%\\cursors\\aero_move.cur"	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\Hand = "%SystemRoot%\\cursors\\aero_link.cur"	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000\Control Panel\Cursors\Person	CrosshairX.exe

Modifies registry class 12 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\crosshair-x\URL Protocol	CrosshairX.exe
Key created	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\crosshair-x\shell\open\command	CrosshairX.exe
Key created	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\crosshair-x\shell\open	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\crosshair-x\shell\open\command\ = "\"C:\\Users\\Admin\\Desktop\\CrosshairX\\CrosshairX.exe\" \"%1\""	CrosshairX.exe
Key created	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\crosshair-x	CrosshairX.exe
Key created	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\crosshair-x\shell	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\crosshair-x\shell\open\command\ = "\"C:\\Users\\Admin\\Desktop\\CrosshairX\\CrosshairX.exe\" \"%1\""	CrosshairX.exe
Key created	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\crosshair-x	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\crosshair-x\URL Protocol	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\crosshair-x\ = "URL:crosshair-x"	CrosshairX.exe
Key created	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\crosshair-x\shell\open\command	CrosshairX.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-4249425805-3408538557-1766626484-1000_Classes\crosshair-x\ = "URL:crosshair-x"	CrosshairX.exe

Modifies system certificate store 2 TTPs 3 IoCs

evasion spyware trojan

Install Root Certificate

T1553.004

Modify Registry

T1112

description	ioc	Process
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 0400000001000000100000003e455215095192e1b75d379fb187298a0f00000001000000140000005a6d07b6371d966a2fb6ba92828ce5512a49513d090000000100000068000000306606082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050508020206082b0601050507030606082b0601050507030706082b0601050507030906082b0601050507030106082b06010505070308530000000100000040000000303e301f06092b06010401a032010130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00b000000010000003000000047006c006f00620061006c005300690067006e00200052006f006f00740020004300410020002d002000520031000000620000000100000020000000ebd41040e4bb3ec742c9e381d31ef2a41a48b6685c96e7cef3c1df6cd4331c99140000000100000014000000607b661a450d97ca89502f7d04cd34a8fffcfd4b1d00000001000000100000006ee7f3b060d10e90a31ba3471b9992367f000000010000000c000000300a06082b060105050703097a000000010000000c000000300a06082b060105050703097e00000001000000080000000000042beb77d501030000000100000014000000b1bc968bd4f49d622aa89a81f2150152a41d829c190000000100000010000000a823b4a20180beb460cab955c24d7e21200000000100000079030000308203753082025da003020102020b040000000001154b5ac394300d06092a864886f70d01010505003057310b300906035504061302424531193017060355040a1310476c6f62616c5369676e206e762d73613110300e060355040b1307526f6f74204341311b301906035504031312476c6f62616c5369676e20526f6f74204341301e170d3938303930313132303030305a170d3238303132383132303030305a3057310b300906035504061302424531193017060355040a1310476c6f62616c5369676e206e762d73613110300e060355040b1307526f6f74204341311b301906035504031312476c6f62616c5369676e20526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100da0ee6998dcea3e34f8a7efbf18b83256bea481ff12ab0b9951104bdf063d1e26766cf1cddcf1b482bee8d898e9aaf298065abe9c72d12cbab1c4c7007a13d0a30cd158d4ff8ddd48c50151cef50eec42ef7fce952f2917de06dd535308e5e4373f241e9d56ae3b2893a5639386f063c88695b2a4dc5a754b86c89cc9bf93ccae5fd89f5123c927896d6dc746e934461d18dc746b2750e86e8198ad56d6cd5781695a2e9c80a38ebf224134f73549313853a1bbc1e34b58b058cb9778bb1db1f2091ab09536e90ce7b3774b97047912251631679aeb1ae412608c8192bd146aa48d6642ad78334ff2c2ac16c19434a0785e7d37cf62168efeaf2529f7f9390cf0203010001a3423040300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff301d0603551d0e04160414607b661a450d97ca89502f7d04cd34a8fffcfd4b300d06092a864886f70d01010505000382010100d673e77c4f76d08dbfecbaa2be34c52832b57cfc6c9c2c2bbd099e53bf6b5eaa1148b6e508a3b3ca3d614dd34609b33ec3a0e363551bf2baefad39e143b938a3e62f8a263befa05056f9c60afd38cdc40b705194979804dfc35f94d515c914419cc45d7564150dff5530ec868fff0def2cb96346f6aafcdfbc69fd2e1248649ae095f0a6ef298f01b115b50c1da5fe692c6924781eb3a71c7162eecac897ac175d8ac2f847866e2ac4563195d06789852bf96ca65d469d0caa82e49951dd70b7db563d61e46ae15cd6f6fe3dde41cc07ae6352bf5353f42be9c7fdb6f7825f85d24118db81b3041cc51fa4806f1520c9de0c880a1dd66655e2fc48c9292669e0	CrosshairX.exe
Set value (data)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C\Blob = 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	CrosshairX.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\B1BC968BD4F49D622AA89A81F2150152A41D829C	CrosshairX.exe

Suspicious behavior: EnumeratesProcesses 12 IoCs

pid	Process
1308	CrosshairX.exe
1308	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe

Suspicious behavior: GetForegroundWindowSpam 1 IoCs

pid	Process
3436	7zFM.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeRestorePrivilege	3436	7zFM.exe
Token: 35	3436	7zFM.exe
Token: SeSecurityPrivilege	3436	7zFM.exe
Token: SeShutdownPrivilege	1308	CrosshairX.exe
Token: SeCreatePagefilePrivilege	1308	CrosshairX.exe
Token: SeShutdownPrivilege	1308	CrosshairX.exe
Token: SeCreatePagefilePrivilege	1308	CrosshairX.exe
Token: SeShutdownPrivilege	1308	CrosshairX.exe
Token: SeCreatePagefilePrivilege	1308	CrosshairX.exe
Token: SeShutdownPrivilege	1308	CrosshairX.exe
Token: SeCreatePagefilePrivilege	1308	CrosshairX.exe
Token: SeShutdownPrivilege	1308	CrosshairX.exe
Token: SeCreatePagefilePrivilege	1308	CrosshairX.exe
Token: SeShutdownPrivilege	1308	CrosshairX.exe
Token: SeCreatePagefilePrivilege	1308	CrosshairX.exe
Token: SeShutdownPrivilege	1308	CrosshairX.exe
Token: SeCreatePagefilePrivilege	1308	CrosshairX.exe
Token: SeShutdownPrivilege	1308	CrosshairX.exe
Token: SeCreatePagefilePrivilege	1308	CrosshairX.exe
Token: SeShutdownPrivilege	1308	CrosshairX.exe
Token: SeCreatePagefilePrivilege	1308	CrosshairX.exe
Token: SeShutdownPrivilege	1308	CrosshairX.exe
Token: SeCreatePagefilePrivilege	1308	CrosshairX.exe
Token: SeShutdownPrivilege	1308	CrosshairX.exe
Token: SeCreatePagefilePrivilege	1308	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe
Token: SeCreatePagefilePrivilege	4640	CrosshairX.exe
Token: SeShutdownPrivilege	4640	CrosshairX.exe

Suspicious use of FindShellTrayWindow 64 IoCs

pid	Process
3436	7zFM.exe
3436	7zFM.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe

Suspicious use of SendNotifyMessage 64 IoCs

pid	Process
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
1308	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe

Suspicious use of SetWindowsHookEx 4 IoCs

pid	Process
1308	CrosshairX.exe
1308	CrosshairX.exe
4640	CrosshairX.exe
4640	CrosshairX.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1308 wrote to memory of 644	1308	CrosshairX.exe	85
PID 1308 wrote to memory of 644	1308	CrosshairX.exe	85
PID 644 wrote to memory of 1736	644	cmd.exe	87
PID 644 wrote to memory of 1736	644	cmd.exe	87
PID 1308 wrote to memory of 2700	1308	CrosshairX.exe	88
PID 1308 wrote to memory of 2700	1308	CrosshairX.exe	88
PID 1308 wrote to memory of 1008	1308	CrosshairX.exe	89
PID 1308 wrote to memory of 1008	1308	CrosshairX.exe	89
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 2844	1308	CrosshairX.exe	91
PID 1308 wrote to memory of 1688	1308	CrosshairX.exe	92
PID 1308 wrote to memory of 1688	1308	CrosshairX.exe	92
PID 1008 wrote to memory of 1176	1008	cmd.exe	93
PID 1008 wrote to memory of 1176	1008	cmd.exe	93
PID 1308 wrote to memory of 1120	1308	CrosshairX.exe	94
PID 1308 wrote to memory of 1120	1308	CrosshairX.exe	94
PID 1308 wrote to memory of 3332	1308	CrosshairX.exe	95
PID 1308 wrote to memory of 3332	1308	CrosshairX.exe	95
PID 1308 wrote to memory of 5652	1308	CrosshairX.exe	96
PID 1308 wrote to memory of 5652	1308	CrosshairX.exe	96
PID 1308 wrote to memory of 2432	1308	CrosshairX.exe	97
PID 1308 wrote to memory of 2432	1308	CrosshairX.exe	97
PID 2432 wrote to memory of 4640	2432	CrosshairX.exe	98
PID 2432 wrote to memory of 4640	2432	CrosshairX.exe	98
PID 4640 wrote to memory of 5700	4640	CrosshairX.exe	99
PID 4640 wrote to memory of 5700	4640	CrosshairX.exe	99
PID 5700 wrote to memory of 5596	5700	cmd.exe	101
PID 5700 wrote to memory of 5596	5700	cmd.exe	101

C:\Program Files\7-Zip\7zFM.exe
"C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Temp\CrosshairX-SteamRIP.com.rar"
1⤵
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
PID:3436

C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
1⤵
PID:2060

C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe
"C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Adds Run key to start application
- Modifies registry class
- Modifies system certificate store
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of FindShellTrayWindow
- Suspicious use of SendNotifyMessage
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:1308
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "chcp"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:644
- - C:\Windows\system32\chcp.com
    chcp
    3⤵
    PID:1736
- C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe
  C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\CrosshairX /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\CrosshairX\Crashpad --url=https://f.a.k/e --annotation=_productName=CrosshairX --annotation=_version=8.11.0 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=21.4.4 --initial-client-data=0x5ec,0x610,0x618,0x614,0x61c,0x7ff6b98a06e0,0x7ff6b98a06f0,0x7ff6b98a0700
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2700
- C:\Windows\system32\cmd.exe
  C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\system32\reg.exe QUERY "HKLM\Software\Microsoft\Cryptography" /v MachineGuid"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1008
- - C:\Windows\system32\reg.exe
    C:\Windows\system32\reg.exe QUERY "HKLM\Software\Microsoft\Cryptography" /v MachineGuid
    3⤵
    PID:1176
- C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe
  "C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\CrosshairX" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1980 --field-trial-handle=2088,i,7698806157022818733,18049930069511911959,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:2844
- C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe
  "C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\CrosshairX" --standard-schemes --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=2320 --field-trial-handle=2088,i,7698806157022818733,18049930069511911959,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1688
- C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe
  "C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\CrosshairX" --standard-schemes --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --app-path="C:\Users\Admin\Desktop\CrosshairX\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2960 --field-trial-handle=2088,i,7698806157022818733,18049930069511911959,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:1120
- C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe
  "C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\CrosshairX" --standard-schemes --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --app-path="C:\Users\Admin\Desktop\CrosshairX\resources\app.asar" --no-sandbox --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3136 --field-trial-handle=2088,i,7698806157022818733,18049930069511911959,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:3332
- C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe
  "C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\CrosshairX" --standard-schemes --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --app-path="C:\Users\Admin\Desktop\CrosshairX\resources\app.asar" --no-sandbox --no-zygote --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3240 --field-trial-handle=2088,i,7698806157022818733,18049930069511911959,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:5652
- C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe
  "C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe" --type=relauncher --no-sandbox --- "C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious use of WriteProcessMemory
  PID:2432
- - C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe
    "C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe"
    3⤵
    - Executes dropped EXE
    - Loads dropped DLL
    - Adds Run key to start application
    - Modifies Control Panel
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    - Suspicious use of SetWindowsHookEx
    - Suspicious use of WriteProcessMemory
    PID:4640
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /d /s /c "chcp"
      4⤵
      Suspicious use of WriteProcessMemory
      PID:5700
    - - C:\Windows\system32\chcp.com
        
        chcp
        5⤵
        
        PID:5596
  - - C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe
      C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe --type=crashpad-handler --user-data-dir=C:\Users\Admin\AppData\Roaming\CrosshairX /prefetch:7 --no-rate-limit --monitor-self-annotation=ptype=crashpad-handler --database=C:\Users\Admin\AppData\Roaming\CrosshairX\Crashpad --url=https://f.a.k/e --annotation=_productName=CrosshairX --annotation=_version=8.11.0 --annotation=plat=Win64 --annotation=prod=Electron --annotation=ver=21.4.4 --initial-client-data=0x5f0,0x614,0x61c,0x4f4,0x620,0x7ff6b98a06e0,0x7ff6b98a06f0,0x7ff6b98a0700
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:760
  - - C:\Windows\system32\cmd.exe
      C:\Windows\system32\cmd.exe /d /s /c "C:\Windows\system32\reg.exe QUERY "HKLM\Software\Microsoft\Cryptography" /v MachineGuid"
      4⤵
      PID:844
    - - C:\Windows\system32\reg.exe
        
        C:\Windows\system32\reg.exe QUERY "HKLM\Software\Microsoft\Cryptography" /v MachineGuid
        5⤵
        
        PID:3516
  - - C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe
      "C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe" --type=gpu-process --disable-gpu-sandbox --no-sandbox --disable-gpu-rasterization --user-data-dir="C:\Users\Admin\AppData\Roaming\CrosshairX" --gpu-preferences=UAAAAAAAAADgAgAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=disabled --mojo-platform-channel-handle=2040 --field-trial-handle=2092,i,14604785490200791455,12319933397063391461,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:224
  - - C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe
      "C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-sandbox --user-data-dir="C:\Users\Admin\AppData\Roaming\CrosshairX" --standard-schemes --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --mojo-platform-channel-handle=2212 --field-trial-handle=2092,i,14604785490200791455,12319933397063391461,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5872
  - - C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe
      "C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\CrosshairX" --standard-schemes --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --app-path="C:\Users\Admin\Desktop\CrosshairX\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --no-sandbox --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=3360 --field-trial-handle=2092,i,14604785490200791455,12319933397063391461,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:3564
  - - C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe
      "C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\CrosshairX" --standard-schemes --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --app-path="C:\Users\Admin\Desktop\CrosshairX\resources\app.asar" --no-sandbox --no-zygote --no-sandbox --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3528 --field-trial-handle=2092,i,14604785490200791455,12319933397063391461,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:5688
  - - C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe
      "C:\Users\Admin\Desktop\CrosshairX\CrosshairX.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\CrosshairX" --standard-schemes --secure-schemes=sentry-ipc --bypasscsp-schemes=sentry-ipc --cors-schemes=sentry-ipc --fetch-schemes=sentry-ipc --service-worker-schemes --streaming-schemes --app-path="C:\Users\Admin\Desktop\CrosshairX\resources\app.asar" --no-sandbox --no-zygote --no-sandbox --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3608 --field-trial-handle=2092,i,14604785490200791455,12319933397063391461,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:1
      4⤵
      Executes dropped EXE
      Loads dropped DLL
      PID:2464

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Subvert Trust Controls

T1553

Install Root Certificate

T1553.004

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\7zEC6D45AB7\CrosshairX\resources\app.asar.unpacked\logo_Jvr_icon.ico

Filesize
307KB

MD5
01e76c738affeaa9c7e9037dbdd45ea6

SHA1
6d4ca95ba5d095f14bd419c69ae168ed97cc3a97

SHA256
dfa948433e77bbb36fb0d0418f940af9a7861185214767092aa1c04342456549

SHA512
1a5da5eed6be6050e88a2abf33af25f62bee6034f881281cd52a5199138989f2108639e871a1a2724fa01dc085fc73df630e1266b7c1913ac5ec78e4e278796f

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zEC6D45AB7\CrosshairX\resources\app.asar.unpacked\node_modules\ds5js\build\Release\concrt140.dll

Filesize
301KB

MD5
9ba7d7b031112db0ad82fb1f69d7a54b

SHA1
4cd6315d34207646c9c6d1e08da57f043c314ab5

SHA256
18bdbd2fb1d9bc4df715081ac7e284268639120fd9ff4c20d6e009de4633ad29

SHA512
6f62ded15edf98bf236712f68d507da774b45d7769a5533692c92bbffd2aa6032a3b713a885ec9236cba2b6226c9553c0c7622d137535c0e0588ab3d8b45154a

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zEC6D45AB7\CrosshairX\resources\app.asar.unpacked\node_modules\ds5js\build\Release\msvcp140.dll

Filesize
550KB

MD5
b40e9cae45bba605c85ab2212b962a22

SHA1
f33aacb3889b50be186f27ee197bc1d119bce48b

SHA256
762c1beb041e72149d605f4051695a9634c56e62a517c46d45ff97590f61403c

SHA512
27dba0c7be2724c32e77f5fb9e5037878a6c813d5a3799d917bb64b9ef2e07c8b0080ff3b5a93e7aceda89355a410bf5795e1e4e598faa7489f8f32b1e71dd42

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zEC6D45AB7\CrosshairX\resources\app.asar.unpacked\node_modules\ds5js\build\Release\msvcp140_1.dll

Filesize
23KB

MD5
34877a1657f68d16487ba4a203939d9f

SHA1
72b660463f3dda1eeb0f82ff22554dbc7c4ac62c

SHA256
298ce5d744fc49568b9faee14bc19d9821b5c131a215cee1a6160aaaccc14065

SHA512
2f2685e64694e47f91950ee277c12393e099fb9c2d3633d322830ef6918446b6b4c89e1e9afac5369ce2f666a5a33e71dd61abdb559bb55e65beaea1dfc05948

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zEC6D45AB7\CrosshairX\resources\app.asar.unpacked\node_modules\ds5js\build\Release\msvcp140_2.dll

Filesize
181KB

MD5
bf612c316317397e0659ee725be57a40

SHA1
55e1538cef3e98fd16fe50cba11720057cc2a81a

SHA256
f79757b3b8c3b215da7eb4247931dca4abcda2b70674aec784709269e3ab7984

SHA512
0fa2da84681abf9a8260846bf60e7a5a680b9df83d3a9c6f0037727ad42e0595c21d36678dd1e82301420e37e50d42ff3f82fa6f907be73b7e7d7644a26cd573

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zEC6D45AB7\CrosshairX\resources\app.asar.unpacked\node_modules\ds5js\build\Release\msvcp140_atomic_wait.dll

Filesize
40KB

MD5
ba7b2b0a7c5591a488181eb8e8101907

SHA1
66ce44a91c3c999dbbc32f142685e6f7c454a030

SHA256
a61111ba40c0be3859af9f155dbcda5ec0c530e55f9d7b85ef186fdc9de56fd7

SHA512
cbce4785ff8102f4c71bbb26d46d80454e3174191cc6daf6291a3e35daab0aa63323a3783018da732ea0f28db757d24590fa25d33d0838757c20390c6b1ecaa6

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zEC6D45AB7\CrosshairX\resources\app.asar.unpacked\node_modules\ds5js\build\Release\msvcp140_codecvt_ids.dll

Filesize
19KB

MD5
40ab60d3dd13617c107c327d5492a970

SHA1
2c711f1a360011f5cf372bdfa1677c6573909bae

SHA256
8a7505b8bbc21598b85e3b5f4e8f8f8bc5fdb4b818c3d07f43a60564a86d25ec

SHA512
b0b69fce0375bf969808d8aa8b57a28546b392f46d5b7fc40074382e75f0c8b12263648202d496dab15d3d40d2e8c0d99a592754c68b3e3081045577843273da

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zEC6D45AB7\CrosshairX\resources\app.asar.unpacked\node_modules\ds5js\build\Release\vcamp140.dll

Filesize
385KB

MD5
33d180ae01b83e614cea1453bf411ac1

SHA1
cf18dc5cee1aeec3213ed64f8fc23113976d13e5

SHA256
5a7b73945839759623146c10c876f831c06913f00a1dbc1f039b5bd11b0255c4

SHA512
8fc1a016fa0ed14e104cbd8b4d5b63362788d427a69e4f8fcc35af3d6169c45222efcf898e54b386eef59072491c023fbf8432e649fadd83f8fe06a3274a3dbc

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zEC6D45AB7\CrosshairX\resources\app.asar.unpacked\node_modules\ds5js\build\Release\vccorlib140.dll

Filesize
323KB

MD5
181e3c600c758f28b1639a4f0197aa13

SHA1
cb9ebb1b7167de7febcf9c06480327c18c778188

SHA256
c4c18cb2ae4564494f630be9eede08f8a370fc3d3709f5207a50836a859c02d0

SHA512
5b7514889ed2e853585fb8d481787484f3290a466a6d422032e808cdeeefb23bcb1e115c5c68a02e42512c77918c8f97d28016f2d53d840432c449cd07f414fe

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zEC6D45AB7\CrosshairX\resources\app.asar.unpacked\node_modules\ds5js\build\Release\vcomp140.dll

Filesize
173KB

MD5
9b40459caa6d8737e56b9c44bb342b60

SHA1
9bb0cc40e536cf14bd968802f19d40b5664a2f8a

SHA256
2153553e83bdd694daac0d15d15255212f4f3560ad5eb1ca46780f219b803e90

SHA512
7bb6d65d535a96389a54ffe462e18cf6b41891bca42a5697140e54a0a9f1fdc83b03bfcdc9e443fc14e6e14eac862ce5fe5748d0ae9b56a9377710d850ce2ed9

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zEC6D45AB7\CrosshairX\resources\app.asar.unpacked\node_modules\ds5js\build\Release\vcruntime140.dll

Filesize
93KB

MD5
b74e7f67f6faea43e31a612cd45549f1

SHA1
ea14d7e82adb63a75a43560a92eeb00372ff02d0

SHA256
3242739842db5f32021de2ba87b4e5c884fcf47cb97b65fe38a4f8ad28722d98

SHA512
dea066cca2d6ac12941ee779ae78065e7ab4ba0e773fbbfc100075c5e3cfc2cfe6cf8881d0bd2c39f15415807b4a2196a2884c4ffd5dc5d23d5cfe6798e8bcfc

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zEC6D45AB7\CrosshairX\resources\app.asar.unpacked\node_modules\ds5js\build\Release\vcruntime140_1.dll

Filesize
35KB

MD5
33d84a4fbd00450f781aaee90abfab3d

SHA1
bb4d63385a1b157acb2685cfaccef8463aebc081

SHA256
721831b56cbc8531802b036044610f7442397d02a58ebe82aa82fc7f9d99b2d8

SHA512
8d589b69db1c7e44ee847ce3b48bd82d5869a38315882ca050bd4c60e92db055e5047d47c96fb964afa7a4a556c154eb0a1f13f1cc926d79a62640a89e5712b3

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zEC6D45AB7\CrosshairX\resources\app.asar.unpacked\node_modules\jimp\browser\examples\dice.png

Filesize
213KB

MD5
206fa05527ccbaec58391b202c73e500

SHA1
6da7812435aae769e15ad1d21f96773b3613cd6a

SHA256
af8e81e3089ad082f171266b4de154bd398de4df0d41c90dc592bb12ef5723a6

SHA512
392d4c5f63cad358ff0c114b797a545cc5b1c8616dbdb074305107460a63f1ed6c2f6002b66060247bd24b5ebf69d538fc7a1080fa2a0d1653f49ab2b8c440db

Download Submit
C:\Users\Admin\AppData\Local\Temp\7zEC6D45AB7\CrosshairX\resources\app.asar.unpacked\scripts\distribution\AppXManifest\Images\Square44x44Logo.targetsize-48.png

Filesize
13KB

MD5
62513f03aef0e30411d6be73c2b631f2

SHA1
57c95d8a21503133c6996f2b65ff44f36c3a7153

SHA256
3b2b7cfb174b38b4985de84f3cfb00babba6f5997827cab133dae820d95a0dfe

SHA512
1cfb9b9607ce421c917cdfc56936b81d5f1444ef03d86f69c81fb3ec42fcd54fe87676605f10f91cd2fb35089ce0595bd0f6d530b9994b0a754ef215349a7f93

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\76f734a4-a493-4f76-8fa8-f4da3fb76e2d.tmp

Filesize
57B

MD5
58127c59cb9e1da127904c341d15372b

SHA1
62445484661d8036ce9788baeaba31d204e9a5fc

SHA256
be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de

SHA512
8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\Crashpad\settings.dat

Filesize
40B

MD5
5bebc7346918b5e01c196f75489b0010

SHA1
4fdac611d98658aca2af7a3f22dfb971d30023e5

SHA256
a5789b7d4b1ebacbc51927a0359b14b44d04c65da4f59384cb405b6ad13e8e1e

SHA512
9f9d32b1c92c2c0b3aba4537d4a3c97152bcaa5d0e52c83468d9779e780adb03c179aa57ed52a8af7af1664c29c831dc82b7739374d840a3b4ebab2a260bed7e

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\DawnCache\data_1

Filesize
264KB

MD5
f50f89a0a91564d0b8a211f8921aa7de

SHA1
112403a17dd69d5b9018b8cede023cb3b54eab7d

SHA256
b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec

SHA512
bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\GPUCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\GPUCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\GPUCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\Local Storage\leveldb\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\Network\Network Persistent State

Filesize
807B

MD5
39b29fadaedf960bd8d5d4c02aceddfe

SHA1
475a86304e88dbdd6de52eafc744a33f6ebd2025

SHA256
86562b7686bd2448482a4f3683eb5dddadab657a48876cffbfb595af78bc8135

SHA512
187975b9db057bb3d44168d1d1c638630d6ebb388519a79e8c3533645bec8f5a8a0066a3adde41541f456b98bef675ff39e3ee542dd865e20fb05560e80aeb2d

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\Network\Network Persistent State

Filesize
1KB

MD5
fd0b10f7718102137d5ccd2307712b1e

SHA1
d61cdd4fb5091c9f1a2606f6f2f22b72686c2618

SHA256
bc968308bb0affdf804dea128613acbfd3711f3afbf9fc69162d2609cac8c3b1

SHA512
7f6c190880a275eccd17fd46d3aff37c021272e1ad94115f91a59c8c5bcb447c75ced32edb59609eafd72fb9b670673f771d93143d6742dec8a6c7b9c07a259d

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\Network\Network Persistent State

Filesize
1008B

MD5
13e4d88a6777d987c89a986e9a56d12f

SHA1
a93bf9bc8f64416c50a8b1c9fd2a61eb0ec3ba2d

SHA256
dfa8a8f4e4603fef178279e09aca6937d2e6c49a9952097eae09affb225bfaed

SHA512
65b48c5567766164e548b151b4ce7e6bccebaa49f7002b5dcedf2d3316d9fdbb9984462d948ec20cf152119b82eb3669851eb128bb88081ebc5146992e6a8585

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\Network\Network Persistent State~RFe586b57.TMP

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\Network\TransportSecurity

Filesize
536B

MD5
2d918501ad99410659da54aee96b9057

SHA1
9870a3e5bb859cb4621bc05dfeb1fd544a27c751

SHA256
4ded8c309a6a365e7ed3b56d563b4ded4b48a70ed188635c83473205ee28b061

SHA512
2afc0998e87bc03340fbb2130e18d250f187edc00cf97e25a6638c9b178e643a57d9e9ef5f4ec4dc42d02f68bd25f7a508744d54ecca9a56d5b80e9de017f7a0

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\Network\TransportSecurity

Filesize
528B

MD5
4562cd6f8197ba360b38c7b74dbf33e7

SHA1
2fbd4f52d4329437ad70de8754eb6ea939787be1

SHA256
daf8616b2eb2fbcf6959e626c281a1d256845c2ff21ea82a6d0f8a8baa017e93

SHA512
1e47bad3b7556fe7ba6a6118cc8f302784fdfce9e27039654ec33a6123c3e0a8a4180365722f67678752af2bab8079bbf09446b598bae223ac6a3e7f409648d4

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\Session Storage\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
2KB

MD5
25d9b65e88989ed49243a224d9f7d2c4

SHA1
7ba15e43e0549d91e7fbcbdca9ed1494e171218e

SHA256
874d6caa4108f4f8b68c76576ad2b869b4155dc9a9aa864faea785b11f3b5248

SHA512
ee8a3d6aaeb24285fb35869a29e46fa5e9d295e1f3d6d6ced497e5c12b06a524395d23d3fba97b9ad8ec1718ff2ce19da36bb150c15b5bc51c1ce431ea6667e3

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
3KB

MD5
9e3946d895373020b600642e00f0a900

SHA1
8cea14a2ef52427f9772008554f10cde021aaa9b

SHA256
265a279df665c9f30524f344f2384e4463ff7e48f823db26c3d9846bd75f4c88

SHA512
e16ca9247d0ce2c606927edac25c10e2e2f0e3fb47d0d0c45aff6debfc94b402eb8153d815db5c60a491994ced28465ac26da491821d79515b87a0e74f7ec2c2

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
3KB

MD5
c5b8a9e682455b871d6a754b239fc724

SHA1
30281259e30f7fe8e363b8bdafe31d2f0102dcee

SHA256
598539b369db816d02a6760c76c1cbd8a471ec47c420507042f41464f8358fcd

SHA512
9e2dbdc4dca628851835d98d80eece7e2193614715b45d7cfbe585bfad7725186080b35615d5746d3b675e41c198d4eac23757a0bd80a3a123ca949ca46a2b35

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
3KB

MD5
01ba8079ea76fc6be4116c43f83ae99e

SHA1
addbb5a3e891da4927f5ce201f4b9a47c63c8294

SHA256
28281700c4716171319c8eaf7df9db2543ac00048fca57d2245ab494bdefc53e

SHA512
9343b92f0ea7a84270bda0f7bd3c5733f0ee081544cb310bc54aada98d9da9983b0256d5573cdfccfc4433eee3a98843a2b7fd8b585bf293974fac802b41b5b0

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
3KB

MD5
4b2d43a1708e7804656ce2c36e7987c9

SHA1
0be40ad27b2ff60acc2185c702ecdf1fd16f9b11

SHA256
fc748e360513f714c90cd5456c443568995ec4cf6d690cdef40440adcdce78f3

SHA512
dd1eb34ddb18467fee68e842fc1f9f242891e5332ea50d95f952206343b09bf296c613fc38fdeece603ef7c50fb517a42c4072f9dff9c8b100c6b83c2049286b

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
3KB

MD5
51a0a053d7d7e84b0ad096396bd6026c

SHA1
7376372875d75cc37a8b34c2ed148ecf32aa34e2

SHA256
ee03062bd09ad2b45af936ba837e85b3a201870239cff2db1b396bb06823f256

SHA512
7a40d4aef20213419a55c09bcff5ab0cf624e72c27ea8e2d8bc102c2f48858a515e0c013d31c67ed874b24074075453f0416778e8d040f3c23e00e3a32874676

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
3KB

MD5
2eb53437872ff16fde1c19d03128ab59

SHA1
73055a7776fe467cf8d1ac06e50bc7e410401080

SHA256
faefb937e1c63b39a52df958ab11178dbf534756aaaf8196e976882ce2eaeae2

SHA512
fa7dc2a9ef0591f8e1d918e64adde2759d5167b58186ceb04c40d274ea84dc842281b8ac9bf403c6aebaa13cbfcc81c0c6fc046c4c794b5852aa44600107724d

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
3KB

MD5
cd072052f188781dbb95d80a012f5cdd

SHA1
49adb0d03c502bed78b603dd1034a25b51a66e7a

SHA256
4c72860c750297e06fa1cdbb81608354779e0feac89496fbe22cb7e29ecd781e

SHA512
ebbb6b2672dc19267d3458da90a45212262e9c634a2dbebaeae7a8bed05ae1d0686f2b0cbb7f24701f2ae0d9dbc9c1b5ef5ca314fb41a8d5af0ee7fbca28ca50

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
3KB

MD5
d8064a3883e01b942fa2b144a4551e1c

SHA1
5defd2a725dca98db0a440627997b14b52db5c3d

SHA256
b402ceea357471717e3c9748d0597380d942b424356c48bba9e2761e5e2ec419

SHA512
3e1246382f3e918e3cefc0e05f777e06efb09d1544e42ea7fdeef6fb619fe14fd14e7c626d4a81a111b9040f4e52116dc6ec2f865901cdf6b04024cc95e6b5ed

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
3KB

MD5
fc1a20e5c9460de6bb88204ff28cabe6

SHA1
75f1ef963705f967e9d788256a4e0fe58b4ac949

SHA256
57df77b044ee6bccac2e32fbf859e8c5cee85ba890c1570df5d7281fe9ec9612

SHA512
ad34355d2ea9368b25e8e48a1169633a684cfeafb9ec9411c32f212872b02bfc5714b536b397a4349c8db65d0ff19ef360a5f46001e3ea07bc3098ca2145274d

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
3KB

MD5
1bbe2f05958a6ddf69e8689dfa1f9675

SHA1
7dc14291e9654ee392385335d602e7b056c75e88

SHA256
d2fef69c9e14407c143437b61b79ee4bb3a7607f418a6020dc76e143fbfccb9f

SHA512
87450153abfac629bc48aa31f3015f320a61a823341b7a7c2c28a43b827f8186e36d3dc9e25ac36fa4477134dfc77674f61f93369344d9aed71870d348c08f0c

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
3KB

MD5
ca6b2166b0e79c61c8a80c0091994663

SHA1
ef06a0221ecdc15d45f1bfa7376234fd3c4e8dfc

SHA256
f2fcf8b1d002b471705adc77f5a9066be151cf50452eae27c0580cfc6846d300

SHA512
8ea79120ab293f90587450806568912f4141f7d4aa9ca01326b628a549ead983efcfd0cbec19cb55066d33f6678a63fa805b83efa756784fc8ea54ccc1e8d238

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
4KB

MD5
3c29774a29af8bdcabf8a51546d47bcf

SHA1
6c92d7a917a832c267c62394c68aff3c8a7810c9

SHA256
56bca77d0e02a223d7bbd2b5cf784e802c31fd92b01ee224c6ea7fb0bb9a70e7

SHA512
521a5f260b644f5f8d40acb3c2c2187f690fb4d541284fb702a8d3303b666c639394377b146a02eed4d26ccb78c1f2485ec8f6a5a7d93c59dff5d735a4692c1e

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
3KB

MD5
edad568176af6f38e4aa3151b7d0c6b5

SHA1
f43603d911b9fb1bb01ee0cc428c5866e51d3472

SHA256
8eadeabfd80aca5a36910d8e4cc044182f4f20717d4d514ccbc8b17cf9590a56

SHA512
8bf75352545db2d6297a3160a380e4d1c5bb7c5074899b6b518043a143edbd46370433b20cda50fa0b81fa20fd5c0852e19a6379b9769ce6099c5257b6b8eb35

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
3KB

MD5
ea16a40d23e467f0a72f65898d984c3c

SHA1
7870603b4866d4680895aeb54f9daca96b4a430f

SHA256
e0092e2f935c221ab6907babc1778911a8f647f13a9b5c0353f121a30cc499e7

SHA512
bc792ea8eb5a023667d14e98441207c271741dcecceb974789451758c15730c3895f77044c0734016a25354216c2415faa9f09b69207e5a3535cb6a6415de8ea

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json

Filesize
3KB

MD5
5c72ac91c08d4df043d5d8c1b43bcd57

SHA1
9ce8b9f9ec4ae93f4247dd2ae1c2186c1b5c939c

SHA256
40ea4cb20bb7b1cc111ddbef1fae83e693de95664ed8cc279c6f1ae8c2fdb089

SHA512
ddc6313bace9f721648ccacdfc718ce1ebccdfa7fb4961c853060fb3d1daf75765acf72a3cd8bc4d42dcfec813e5a7bc0e6e0942d86b601cf7d322912d0815d1

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-2041078498b7a072

Filesize
3KB

MD5
7d03fb8735cd720f37652a09d1070ccf

SHA1
68381e5910e045684955d63c5840e9feb070e74b

SHA256
b219e2e13541812b4770371253d6bf39d6ac2d76bd1ee8953ba275a02964f148

SHA512
a92a98b4ddf5b98f6756e1082f473902efb19bf4450e264165857d42b26bfce62e5c2f96caf3e9f7c354b628f01b255bd91daf457ecce49152f5f6727a4e0382

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-2041078529a56c9f

Filesize
3KB

MD5
b9215fedae77593f8b95ab3f2cbe54cd

SHA1
4018576154167447fca05facb7606963c8574555

SHA256
0dbf0894bddd80849ca7741ff79baee0ef3e1a66937b9ccff8538646a763ae68

SHA512
47cc49fa3bdc967f5caa5d2be0a7196d727d1f60ef8eb61a71dc48a2377b72dcf06f4ba8a9274866265ba75b8adc5c7878cf564bea2e4bbdadbc3f9dbc1fa473

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-204107856006b2ae

Filesize
3KB

MD5
e2a1b80efff3659fae79870ab9a096af

SHA1
d67d197ae4feee446cc5f8026e16aaf02990b248

SHA256
c0bfda56b359d50af425b30f5785315500d732e3e59765695507ff2f9aad97dc

SHA512
36d6b95bf904f844524249543fb44214150649f4aa6c2132bd9481b729c3dfc60cf224305ed45535ed23356161541664f67dd597739da2dcb6306159bcb6f6f0

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-2041078654c72d0a

Filesize
3KB

MD5
b6f78d2b505cdc81994a6c9b13bfdf7c

SHA1
ffd8e5964ad816b820dcd8f819326857c669f29b

SHA256
11396cbb989940caa3db57ce16400b75f10f196c6aae7d7a384eaa9f6dd25cb5

SHA512
3117dfd7bd9207fced3e2a1ccd92626ef2676305ccab038d05fa773c621c411516ff72a97d36c8814cc6f11b62ed9697aa33555d9172c25f726e849b9d83de63

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-20410787017b0742

Filesize
3KB

MD5
061ba058c0cfc81d41ce115ae6843e74

SHA1
6be1e67724cb3a4854ee81287f86362785aba1e5

SHA256
2841f544c8a032ad4c203abd163bb8154f0937aedf4edee5fe830d60f0bf1274

SHA512
cb4e55098199134df1a4cf51eb202573dcdb9e3e725596935d75cf87290c9d181530a50b0d215e5acc28cd8ee436b991654774f1412ccaea2d2b58c04713ab92

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-2041082678819d3c

Filesize
3KB

MD5
c7246b1b5ff78326bc2ebf34561ee124

SHA1
10f631dc1f9263bdb7d8d5991f807393f4903c0f

SHA256
d2f4dbcc0f01a9a7a5a8da319f75936e633c7c1c551144a09e3310b7c38147dd

SHA512
0745e2569cbf424c6ffa878a3d2127abd2e67ad84471d05835dbfe324e70271b063cb11f90a33ffb0f2b0feb932c009ef0422ace7b376088fbb6b1cf9c230aa6

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-2041087779a7f941

Filesize
3KB

MD5
7f876e3595870fcfddbe968282537322

SHA1
a4bae2e3729680584416dff0f8cd5db353d0857d

SHA256
3550bb35f1d0b511b71f5f4fd77b207e532de0b5ec99e1c23181ed662b28bad6

SHA512
39c6c13c17d79025f88a41a94c2b27e3ccb808071190582e2efeed72796c244a4899d2ef8198d1369b1037043f5a34eeaa564f0139f0419e316d7ea2abe9c1eb

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-2041106873902584

Filesize
3KB

MD5
1dc1b9fbfbc82c060445e6ed75d0c817

SHA1
ccb1dc7980dd53e7b9e9db77b5b171fb4d2bb71b

SHA256
d770014dfb445134511e6c9ba2000edb742012e5a45df3ccb492a54126d602da

SHA512
e9e3f747304ea568217cf277e55e85fbf40a0e6b6358ba90854bc513d456f9a1767dfbecc087a477de75c85f0782498c016ffba69c89dcd9bd469d5ed22e25ea

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-204110689537eae4

Filesize
3KB

MD5
f0ee9cbdb787ad50b4b4187eabe1925f

SHA1
6c1ddf8c1d5ab522d32fe87aa7082621e9aaf98a

SHA256
32947ca9a6afd9c6674c82ed232b560515f3089a352d49c3726f544500ea5b37

SHA512
578e371051503aaca06bb150d9e72947fa6bd3735b89284ccf7d541f9873ac327366826b8528c5dff290b1edb7b7ff6e0d46a25e6146d95fb4c6eb0e7cc93712

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-2041114197759975

Filesize
3KB

MD5
bab2c26bc3424c820c144bf61c2fefd9

SHA1
9d4ec62a261bc698486c673e2814e554bec3602e

SHA256
0a6c1deb8006ba8509925eb4fece4f35d7f275f5e83770067c069998be250887

SHA512
fd3d87d19da196624e1b83f3b88f9e07892853c24dbc316fd37dc8d71698bb26d9a79e77f690e5c7a9e4c19f51b494c6268b96ce5afcaf554bc9e67e6c53f1b0

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-2041114242880685

Filesize
3KB

MD5
43cb465809f1dc8b0031186fb6d4003c

SHA1
441f4fefcecee61183eee6f821e1fcb1cf8e94a7

SHA256
0b5b9fe7316d9e3d52904713ba9d6846f5c6cb439585794f4275435340158dc5

SHA512
a73e47830dcab313e58fd9320411b64c285ac516aad3d4d290426663d0efd909c39c34ad93ee35895652d0a737a2e967f727bdff001ec806bfaa032c3fb5ba21

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-2041129047591efb

Filesize
3KB

MD5
dabc52d25ca0f1a2067fb08a0de1ac98

SHA1
9175b24dd8d22aebb7e7b864b2b56a106207aa23

SHA256
d8bf3daf9b4706e421c5ad67add50afbaf10c2591a03c2a200a297bda2060bf5

SHA512
24720b9218277e9c34750dd626b601255f226b9160b8e377fb37c369eca966d37b59d45c3390e3b323c831db41277637d8a8a8d52ca653c328383623c5a44402

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-204113473708d496

Filesize
4KB

MD5
335c1bc0bdf376686e7bb270f32f662d

SHA1
5dbd66f13e5b392853eaadbac51ccfc03f01d351

SHA256
5a2092d424747aa3f59e0af32a06ba20b44ad33f90f54fa27d8e22266d42f16f

SHA512
bf40a76365e488735e852f3e6c0f9ef91a4a14af3f706a669de8c9f829683893eeccc099387b15fe0711a5304f4e6e357ab01c0435c377ca2dcad6a486f5f3e7

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-2041137064fdad84

Filesize
3KB

MD5
a4ba9669dea55ad245e11fcfd8b1094f

SHA1
59631cd51cbbf31c4ae92adc9d5638d7b55b3b7f

SHA256
5265bec13c481f17b0e861e583fc6d831b37096279b066e8205312d68380edb5

SHA512
56ef234aa1307023908aa00ed2800d328dc14209f022c3a5c14a0490fedc38794629ba063f165f6fe4887349dde68e19d8803ece339e849d0d19025497bd9a8e

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-20411433629419f2

Filesize
3KB

MD5
4eef01c54025bbcdb367fe85d20fbba4

SHA1
81e8e1ec663a841bcb188f4a4d591eac22c74fe1

SHA256
9b3a29ebf58185d8aff259b78f65c47a05ed3640812b9f3c6782d63a8ae9961f

SHA512
20cdf0a33b976edbe849b633783cf3941346abc4d6edcbf394ac36cf729c83eb14b2239cb8f456a6c463ee3135cdea73c0f576fc9421a01ca418015e2169004b

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-20411519804dadfc

Filesize
3KB

MD5
0ad7f31d34de66b5c5dff0f5787506f7

SHA1
cf93aa5029881cf8031de808bae4d818b66a2102

SHA256
03d26701f34ab7af77efdf700a05386fe8104b123127e1c8c8646e185484166d

SHA512
76a3f61ab00c3bf261f138c1fd76c5de84cd7bc2629511491d5bee132a7a7eb19d7e081487b8d4d0fa20072d73a87625b5ac9867aed55e6f8a68f164c094394c

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-2041155410a191ce

Filesize
5KB

MD5
d41259e75a77ba64b4ad169e0f0b0536

SHA1
e76eb645c8fe1dab0b284db96614669e9b03e8d3

SHA256
6a73e2b633353ac912c06c6b183055136c750faa4bb98241ff014d6d670138cd

SHA512
dc184d609550e1accaddfde439397f9cf5d17ae9f80b2a1709d4329c855e36c0b1ac90952ef01ebd8f1572bc61bc5602bfedc80c0ab0f837bcb5b64569bd7c6b

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-2041170272cf198c

Filesize
3KB

MD5
18637e4dfd7a366ca81940a3357e2f6e

SHA1
3515fabfef8f54860f629659e33298dcb9783a72

SHA256
04ae5d64cd7188c92728cae5798e01f73b394067bce00c8450f660db4eff1ef6

SHA512
b364eb263114eb8326e2042c2d23bf3c3e93f18ab82d77a1fe04de224b76bddbd8abbbd900c0c25bb5e1e60b6a8b64f3a5fa69fd71271dc8e1eae41326a2f5f3

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-2041171114ecd949

Filesize
3KB

MD5
36594101632993739400a677b779f2cb

SHA1
a7610f39a1e521307cc94015179f8f5c1962df12

SHA256
1dcaae6f820b0ee0a79d0f20c73bdbe21d076b1c9f73543e3f6b727bfabc48c9

SHA512
de26fc884ba7b711836ff797212575c29f393068c4913df1ad12bf09fa7c138a0da79c7a9186b6b078833a27ecb154bb72dcf6881f58d80b4f86597abf3aa3d4

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\crosshairx-user-preferences.json.tmp-2041172400e6427e

Filesize
3KB

MD5
6fba77a90746c6cae9683d086398efdf

SHA1
d8e8fb5e6a610fed1d91eb7c726215ebdf013655

SHA256
3725c984c785984cf7c8ff349e8dce825e65cd4a4c90dae71aa64a8e565f149d

SHA512
cafcbe8c099f4e876e8b10b7d7ee454aff0f5cec49247dd027444b5e7b0d6c16c16eee7ece4a750b8957726ac288e64fc0b48aaed8b892cb95f5d4a5c8b0a890

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\sentry\scope_v3.json

Filesize
12KB

MD5
0f2d19cc922ddc1ad73d20fdccbbcc8b

SHA1
488c46313c8c5bc2ab74d478bf176c954133f2ca

SHA256
cb5742339b14e32c6bb0260c2c15d88f57c928ed93653b6fb0f0593841cc539f

SHA512
9c59fadd7bd7510cb0b0b13fb98056d3a8c35c8a966c521c2523c0bc23d75714a02e8f22718b1ec3171dea5a680224353f3271a7ad1c6cb5610522e4d00dc145

Download Submit
C:\Users\Admin\AppData\Roaming\CrosshairX\sentry\scope_v3.json

Filesize
11KB

MD5
ff30989e5212d20ebfd483428d3bca51

SHA1
efa4ec1e67b47335c26de4ee5667e51504d93dfb

SHA256
f4e0fb55fa0b36acfc2f834f280ee5fd54f32bba2b17cb494d7d22be0e9764f1

SHA512
642ae5781a33f67c71224532ba042d17a6fe0ab0898e3ea652143f781297e6277adda3d8773c6334d432722e68ba4a6914d69e98af2faf8e7c57e63cadc5d04e

Download Submit
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

Filesize
2B

MD5
f3b25701fe362ec84616a93a45ce9998

SHA1
d62636d8caec13f04e28442a0a6fa1afeb024bbb

SHA256
b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

SHA512
98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

Download Submit
C:\Users\Admin\Desktop\CrosshairX\chrome_100_percent.pak

Filesize
126KB

MD5
44a69827d4aa75426f3c577af2f8618e

SHA1
7bdd115425b05414b64dcdb7d980b92ecd3f15b3

SHA256
bca4401b578a6ac0fe793e8519fed82b5444972b7d6c176ec0369ed13beaad7b

SHA512
5c7bdf1f1deb72c79b860bf48f16c19cb19b4d861c0b6beb585512ad58b1bc4b64e24edfcd97233e5b91dcd0f63ed1c7b278d22ec062fd0dfe28fe49cae52049

Download Submit
C:\Users\Admin\Desktop\CrosshairX\chrome_200_percent.pak

Filesize
175KB

MD5
9c379fc04a7bf1a853b14834f58c9f4b

SHA1
c105120fd00001c9ebdf2b3b981ecccb02f8eefb

SHA256
b2c25fb30fee5f04ccdb8bf3c937a667502d266e428425feeb5af964f6167d48

SHA512
f28844dba7780e5f5c9d77ac3d29069dfcd6698447d5723886e510eadd51d6285e06adbda06bf4a69f841afc161c764cb2e5b9ad2c92f0a87176709b4acd2c13

Download Submit
C:\Users\Admin\Desktop\CrosshairX\d3dcompiler_47.dll

Filesize
4.7MB

MD5
cb9807f6cf55ad799e920b7e0f97df99

SHA1
bb76012ded5acd103adad49436612d073d159b29

SHA256
5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

SHA512
f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

Download Submit
C:\Users\Admin\Desktop\CrosshairX\ffmpeg.dll

Filesize
2.6MB

MD5
f7478ad3e40fcf468bb7218a152c7dc2

SHA1
c81ef6dd8ddea5c23ad1afe05ff830720ffcd80b

SHA256
906b781978ee1524039abc6eafea3c66e7fa45748184e87fb4cf2931e774b6f4

SHA512
eac024adaf1958c8b858fbca65da11cf35b244770567f4d269bb90db9da65dd5897e9d431bcd5d5d8787631f1eaf3dedc71f5a1e2ec710cf296e386c9370383f

Download Submit
C:\Users\Admin\Desktop\CrosshairX\icudtl.dat

Filesize
10.0MB

MD5
cf9421b601645bda331c7136a0a9c3f8

SHA1
9950d66df9022f1caa941ab0e9647636f7b7a286

SHA256
8d8a74ca376338623170d59c455476218d5a667d5991a52556aa9c9a70ebc5e5

SHA512
bc9601e2b4ab28130bfadfd6f61b3ed500deb0bd235dc5ca94999c09f59d10bdcbf278869a9802f918830041f620c88e2c3b506608ade661db48ccd84c1977eb

Download Submit
C:\Users\Admin\Desktop\CrosshairX\libEGL.dll

Filesize
464KB

MD5
4b1c6fae4e5ad623642408f029dbcd93

SHA1
9a5e55ef7afb81061b0be90c183957db77268511

SHA256
71e4896016446bb46984a4cb11741a1fea9f2da40fcc2808847206147530fae4

SHA512
ae69e3b782ddfda96b8d168be0839c10bae5eaf297cf3a2f8676329c513259f9c31c81e0f1ea59ed69add79196c2793a5465da2a3ea12948ecc2629cff548232

Download Submit
C:\Users\Admin\Desktop\CrosshairX\libGLESv2.dll

Filesize
7.0MB

MD5
c4f82de52f2f0e59720c982f12c0dd35

SHA1
e9cade984f41a1e476b2cbdc65d1798245037326

SHA256
7de7578c77d402fa646ea6d051ce6c31e1c133bd44e45ac013f1175d2ad7fffe

SHA512
84ccda975f8b714f6e1f9c617ee0b32be18d304c2ca2785c2f467fae465801452f45562cf012a5b543fdc553ff850519fd8f14a44849e5db500de17e27319074

Download Submit
C:\Users\Admin\Desktop\CrosshairX\locales\en-US.pak

Filesize
302KB

MD5
3fef69b20e6f9599e9c2369398e571c0

SHA1
92be2b65b62938e6426ab333c82d70d337666784

SHA256
a99bd31907bbdc12bdfbff7b9da6ddd850c273f3a6ece64ee8d1d9b6ef0c501c

SHA512
3057edfb719c07972fd230514ac5e02f88b04c72356fa4a5e5291677dcbab03297942d5ecdc62c8e58d0088aed4d6ea53806c01f0ea622942feb06584241ad2d

Download Submit
C:\Users\Admin\Desktop\CrosshairX\resources.pak

Filesize
5.2MB

MD5
f6dd61d802bfe64545deaf4c93eb6db9

SHA1
96be1ec4723a6dc2b1dc6e073a7dab026443b1fb

SHA256
f7fdde9650504d8872a7aa2b68e1f5b3cedd100ded1e19e44c2b6282eb637813

SHA512
33585e7f19222e43926bad8cdbf36bfd395feb4d043f524f82053920405afd933eec4d294b6558409ee9419c977553e513549470638532dc19bb93296387cf76

Download Submit
C:\Users\Admin\Desktop\CrosshairX\resources\app.asar.unpacked\build\static\media\logo.5dac78d7.png

Filesize
21KB

MD5
5dac78d757cb4f54256594efa9df2940

SHA1
94e2321906fe47c3a2671ad08848c091b6b4a108

SHA256
2421a5433dbe2ff23d90366bfbaa1178f9a0a1bed828b9c8b5a7e3deef3e13c9

SHA512
2470c340d4adaee53079ece215f1379ec204bf67c9933c14623f26fd846e6ff8dea068d345e9a51fb1504176b81491ae4263132edd4560e436a38c93c7d20505

Download Submit
C:\Users\Admin\Desktop\CrosshairX\resources\app.asar.unpacked\node_modules\ds5js\build\Release\ds5js.node

Filesize
137KB

MD5
48e4db1b51bb1cb2820b08bf17c3ca3f

SHA1
fb4fff17125e662e37f419baf160c3d6e07aaf4b

SHA256
048a22d4315420dd3d2717c7cf83fc6e5276e601e4b59d6fdc2134cd85193ace

SHA512
1d25f55fa203aa6cb01750a06ef4d8a2f2e5ddda2194d766327544c2cda00d49c630052797920e101892644ba022321e910f935fd7ed8be08e21d8c59a609164

Download Submit
C:\Users\Admin\Desktop\CrosshairX\resources\app.asar.unpacked\node_modules\koffi\build\koffi\win32_x64\koffi.node

Filesize
2.2MB

MD5
34144ba3ace32e06c8bc9e327142afe8

SHA1
3ca2b16ef6245bf81216667b5166863f35bb3a03

SHA256
d5b8bddccb65485d0e2456331732d0182c1c75cac35d9abe4193774b0e0b09d5

SHA512
98435776468eba91eb30e939951adde768cd9b44af1d0d2f96834ad9fc83554cc93b800c628f77afddde71595c41f65d05fb636de6df488c25850d93cf56478f

Download Submit
C:\Users\Admin\Desktop\CrosshairX\resources\app.asar.unpacked\node_modules\steamworks.js\dist\win64\steam_api64.dll

Filesize
1.9MB

MD5
37a7e0deae6e7bd1154f8fd059f9a241

SHA1
5787b8db0d0d656d13474cd7d2caf66c443e181c

SHA256
eb9b78ef3c339591c1993c9c364098de386edd391e1169ea0a6daa39ae9735a9

SHA512
6d375c3abceb83a48b277ebafa7da24128fa97cdde7b3f3e89970671582ff3af8a413fead8d074127a97fc34cc423fd218f878ee3a218f6f28be3aededbf83f7

Download Submit
C:\Users\Admin\Desktop\CrosshairX\resources\app.asar.unpacked\node_modules\steamworks.js\dist\win64\steamworksjs.win32-x64-msvc.node

Filesize
1.3MB

MD5
3a3b709de5070858b5ff5bca162ef8db

SHA1
65f61f0c7873f25fac0cd6a4abaca6a97c5aa5fd

SHA256
cabf82a89deefc7a6350c29aa0fb6ddee25dd886a1df02540ab69e7743f4b8e8

SHA512
20a434e91604f85256a45850b7e61e7581aea2761732f71923e7417ec927c9f64e2c3764791e53ff635ede92498ccbcbad41d91ae4846d8077faccca94fbc969

Download Submit
C:\Users\Admin\Desktop\CrosshairX\resources\app.asar.unpacked\node_modules\wineventjs\build\Release\wineventjs.node

Filesize
145KB

MD5
6aa5dffe2984447589d4256396197bcf

SHA1
d871d7ad55988ba2bb5a20e022525739f134165b

SHA256
bdb1b15ee14dfb29050678af6b250ff392a3e72b901ef98b152caac9ff92b331

SHA512
77f97fb774630a54bfde0e1f491b580e3af95a7ad7c3c9dcf12233836b0c27f77811e7517f3c567b2d5f2f336b37e59a3ba92b9447b1d0992b68694d45171c87

Download Submit
C:\Users\Admin\Desktop\CrosshairX\resources\app.asar.unpacked\node_modules\wininputjs\build\Release\wininputjs.node

Filesize
274KB

MD5
ea536f9738b8afbc783d1a1bc0f8c5b6

SHA1
930d264baf0b73705b5259233510ebe99bf89f88

SHA256
7c6465dfc9ee79cb246aecf2c29e1a8e3a418d9a251ef24d738e07d7f9169a98

SHA512
c3b0de5dde61e4e71a14ef2ba9fa366ed603fa18a9676e78a9076a7c505b746398046192d1b56513cd03302f9494cc6fa939d049a088f554d3206bc937885ea6

Download Submit
C:\Users\Admin\Desktop\CrosshairX\resources\app.asar.unpacked\node_modules\xinputjs\build\Release\xinputjs.node

Filesize
134KB

MD5
48cb1bb29ca488c03e73950043aef764

SHA1
57c73ca537088eea18706859ad3c8db064d10a7c

SHA256
2c1301f78fca07d44a846515bd73e720213a74b146f507e896dfde7dc98b6682

SHA512
2882919839fc0ad82dc0fd1038d58272514a0b42a7390055c61475b0705bc9d511db0c5b7bf61d918e9efa78cf655351188da31ab76119aff786cb1b2954f0f6

Download Submit
C:\Users\Admin\Desktop\CrosshairX\v8_context_snapshot.bin

Filesize
710KB

MD5
4d582d568efb15b489a15be358d9a68f

SHA1
295393f0707d04ed60ebda8ea7c0297c411c7f33

SHA256
ea2ea0f97ac908fd127a423f505241ebf4acea0ba5d02635cae40f7cd9c2f464

SHA512
ed8a6af3d51904020abc8e8f3e734ccbf1663d8bd3c0f526e1d69ebfdf47b6061fcf3660b70239ba755f1273f6c608054d6dccd3721a4bcd81e7e9f3a3c7daf9

Download Submit
C:\Users\Admin\Desktop\CrosshairX\vk_swiftshader.dll

Filesize
4.8MB

MD5
78063ec6110108c74579751e27276989

SHA1
89a45e07df44bfb2802938efe1415a3d9e0297f8

SHA256
56809fc84c83b7b651014df670631399546e6c335fbb69ece77681cbf0163866

SHA512
2fdc6d61a7b12c432458b9d6a47487b294f3ab0cf70650958306bdc809bdfaf27241ace9970afd8b686edd4e4ba2bd5ef7cfd5ec69fe078805f467d66efee977

Download Submit
memory/2844-2925-0x000001A221820000-0x000001A221940000-memory.dmp

Filesize
1.1MB

Download
memory/2844-2121-0x00007FFF6BC60000-0x00007FFF6BC61000-memory.dmp

Filesize
4KB

Download