babadeda | 8b82cb03647b6123ec1b5d38dbc1c6b5714bd1ccc543840cb9080bca470d2a7d

Analysis

max time kernel
146s
max time network
150s
platform
windows7_x64
resource
win7-20241023-en
resource tags

arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
submitted
24/12/2024, 17:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
CLFsecurity.exe
Size 35.1MB
Sample241224-vll4fasmav
SHA256 23b14288d49610a8eef61977b7fc49a963f1261fe29b1668b4443a04eaf493cb
MD5 edde1633579f5e1f0543140cfbfa50fb
SHA1 4233ff7941da62b86fc2c2d92be0572c9ab534c8
SHA512 e03a1575824ea04d30e3c3290d87e73be689014970e94ddc56f157766bc048faa5129e4589be0b8a404ce75c0fdf4301973c21cb5593a9c6006f26709507bf5c
SSDEEP 786432:SQRwdPcRZMRDY8X9XRTuCpZD7U4qRVOtIqNi0f9jphU7oDM8ETp9an3aZO:1RwdPcRZuDYg1pZfUNRctpNi0f9dhU7a
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

babadeda netsupport crypter discovery evasion loader persistence privilege_escalation rat spyware stealer trojan

Malware Config

Signatures

Babadeda
Babadeda is a crypter delivered as a legitimate installer and used to drop other malware families.
loader crypter babadeda

Babadeda Crypter 1 IoCs

resource	yara_rule
behavioral1/files/0x000500000001a4e9-936.dat	family_babadeda

Babadeda family
babadeda
NetSupport
NetSupport is a remote access tool sold as a legitimate system administration software.
rat netsupport
Netsupport family
netsupport

Boot or Logon Autostart Execution: Active Setup 2 TTPs 7 IoCs

Adversaries may achieve persistence by adding a Registry key to the Active Setup of the local machine.

persistence

Active Setup

T1547.014

Modify Registry

T1112

description	ioc	Process
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}\IsInstalled = "1"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Version = "43,0,0,0"	setup.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components	setup.exe
Key created	\REGISTRY\MACHINE\Software\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}\ = "Google Chrome"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}\StubPath = "\"C:\\Program Files\\Google\\Chrome\\Application\\109.0.5414.120\\Installer\\chrmstp.exe\" --configure-user-settings --verbose-logging --system-level"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Active Setup\Installed Components\{8A69D345-D564-463c-AFF1-A69D9E530F96}\Localized Name = "Google Chrome"	setup.exe

Event Triggered Execution: Image File Execution Options Injection 1 TTPs 2 IoCs

persistence

Image File Execution Options Injection

T1546.012

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe	GoogleUpdate.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Image File Execution Options\GoogleUpdate.exe\DisableExceptionChainValidation = "0"	GoogleUpdate.exe

Checks computer location settings 2 TTPs 6 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Control Panel\International\Geo\Nation	chrome.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Control Panel\International\Geo\Nation	chrome.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Control Panel\International\Geo\Nation	chrome.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Control Panel\International\Geo\Nation	chrome.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Control Panel\International\Geo\Nation	chrome.exe
Key value queried	\REGISTRY\USER\S-1-5-21-1163522206-1469769407-485553996-1000\Control Panel\International\Geo\Nation	chrome.exe

Drops startup file 1 IoCs

description	ioc	Process
File opened for modification	C:\Users\Admin\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\NetSupport.url	gwspro.exe

Event Triggered Execution: Component Object Model Hijacking 1 TTPs
Adversaries may establish persistence by executing malicious content triggered by hijacked references to Component Object Model (COM) objects.
persistence privilege_escalation

Component Object Model Hijacking
T1546.015

Executes dropped EXE 44 IoCs

pid	Process
2608	gwspro.exe
1884	client32.exe
2968	uninstall.exe
1628	GoogleUpdate.exe
2700	GoogleUpdate.exe
2804	GoogleUpdate.exe
2332	GoogleUpdateComRegisterShell64.exe
1480	GoogleUpdateComRegisterShell64.exe
1908	GoogleUpdateComRegisterShell64.exe
2044	GoogleUpdate.exe
944	GoogleUpdate.exe
2568	GoogleUpdate.exe
2264	109.0.5414.120_chrome_installer.exe
1760	setup.exe
1344	setup.exe
2976	setup.exe
1688	setup.exe
656	GoogleCrashHandler64.exe
2064	GoogleCrashHandler.exe
2480	GoogleUpdate.exe
2124	GoogleUpdateOnDemand.exe
2932	GoogleUpdate.exe
2352	chrome.exe
2712	chrome.exe
2748	chrome.exe
1684	chrome.exe
2788	chrome.exe
1332	chrome.exe
1200	chrome.exe
476	Process not Found
1840	elevation_service.exe
1456	chrome.exe
1028	chrome.exe
2500	chrome.exe
2900	chrome.exe
1916	chrome.exe
3060	chrome.exe
1324	chrome.exe
2108	chrome.exe
2988	chrome.exe
1656	chrome.exe
2388	chrome.exe
2180	chrome.exe
2780	chrome.exe

Loads dropped DLL 64 IoCs

pid	Process
1524	CLFsecurity.exe
1524	CLFsecurity.exe
1524	CLFsecurity.exe
1524	CLFsecurity.exe
1524	CLFsecurity.exe
1524	CLFsecurity.exe
1524	CLFsecurity.exe
1524	CLFsecurity.exe
1524	CLFsecurity.exe
1524	CLFsecurity.exe
1524	CLFsecurity.exe
1524	CLFsecurity.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe
2608	gwspro.exe

Reads user/profile data of web browsers 3 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
spyware stealer

Data from Local System
T1005

Credentials In Files
T1552.001

Credentials from Web Browsers
T1555.003
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Checks whether UAC is enabled 1 TTPs 1 IoCs

evasion trojan

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System\EnableLUA	CLFsecurity.exe

Maps connected drives based on registry 3 TTPs 2 IoCs

Disk information is often read in order to detect sandboxing environments.

Query Registry

T1012

Peripheral Device Discovery

T1120

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\disk\Enum	gwspro.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\services\Disk\Enum\0	gwspro.exe

Checks system information in the registry 2 TTPs 2 IoCs

System information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\SystemInformation\SystemManufacturer	chrome.exe

Drops file in Program Files directory 64 IoCs

description	ioc	Process
File created	C:\Program Files\chrome_ComponentUnpacker_BeginUnzipping2352_1495100049\_metadata\verified_contents.json	chrome.exe
File created	C:\Program Files (x86)\Google\Temp\GUMBBC1.tmp\GoogleUpdateCore.exe	uninstall.exe
File created	C:\Program Files (x86)\Google\Temp\GUMBBC1.tmp\goopdateres_ru.dll	uninstall.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\goopdateres_ro.dll	GoogleUpdate.exe
File created	C:\Program Files\Google\Chrome\Application\chrome.exe	setup.exe
File created	C:\Program Files\chrome_ComponentUnpacker_BeginUnzipping2352_1418904579\LICENSE.txt	chrome.exe
File created	C:\Program Files\chrome_ComponentUnpacker_BeginUnzipping2352_1418904579\manifest.fingerprint	chrome.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\goopdateres_en.dll	GoogleUpdate.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\Locales\en-GB.pak	setup.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\Locales\tr.pak	setup.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\elevation_service.exe	setup.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\Locales\ms.pak	setup.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\Locales\vi.pak	setup.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\chrome_wer.dll	setup.exe
File created	C:\Program Files (x86)\Google\Temp\GUMBBC1.tmp\goopdateres_sl.dll	uninstall.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\goopdateres_gu.dll	GoogleUpdate.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\goopdateres_lv.dll	GoogleUpdate.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\goopdateres_sw.dll	GoogleUpdate.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\WidevineCdm\LICENSE	setup.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\eventlog_provider.dll	setup.exe
File created	C:\Program Files (x86)\Google\Temp\GUMBBC1.tmp\goopdateres_pt-PT.dll	uninstall.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\Locales\ro.pak	setup.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\Locales\th.pak	setup.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\v8_context_snapshot.bin	setup.exe
File created	C:\Program Files (x86)\Google\Temp\GUMBBC1.tmp\goopdateres_ta.dll	uninstall.exe
File created	C:\Program Files (x86)\Google\Temp\GUMBBC1.tmp\goopdateres_tr.dll	uninstall.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\vk_swiftshader_icd.json	setup.exe
File created	C:\Program Files\chrome_ComponentUnpacker_BeginUnzipping2352_1495100049\manifest.fingerprint	chrome.exe
File created	C:\Program Files (x86)\Google\Temp\GUMBBC1.tmp\psuser.dll	uninstall.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\goopdateres_mr.dll	GoogleUpdate.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\chrome_pwa_launcher.exe	setup.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\goopdateres_fi.dll	GoogleUpdate.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\Locales\mr.pak	setup.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\WidevineCdm\_platform_specific\win_x64\widevinecdm.dll	setup.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\Locales\es-419.pak	setup.exe
File opened for modification	C:\Program Files (x86)\Google\Update\Install\{A84B853F-5C37-4F5B-A033-EDFB42A7D73C}\CR_D2220.tmp\setup.exe	109.0.5414.120_chrome_installer.exe
File created	C:\Program Files (x86)\Google\Temp\GUMBBC1.tmp\goopdate.dll	uninstall.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\goopdateres_bg.dll	GoogleUpdate.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\goopdateres_kn.dll	GoogleUpdate.exe
File opened for modification	C:\Program Files (x86)\Google\Update\Install\{A84B853F-5C37-4F5B-A033-EDFB42A7D73C}\CR_D2220.tmp\SETUP.EX_	109.0.5414.120_chrome_installer.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleUpdateOnDemand.exe	GoogleUpdate.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\Locales\ar.pak	setup.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\Locales\en-US.pak	setup.exe
File created	C:\Program Files\chrome_ComponentUnpacker_BeginUnzipping2352_1495100049\LICENSE	chrome.exe
File created	C:\Program Files (x86)\Google\Temp\GUMBBC1.tmp\goopdateres_is.dll	uninstall.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\goopdateres_ms.dll	GoogleUpdate.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\goopdateres_pl.dll	GoogleUpdate.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\goopdateres_pt-PT.dll	GoogleUpdate.exe
File created	C:\Program Files (x86)\Google\Temp\GUMBBC1.tmp\goopdateres_fi.dll	uninstall.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\goopdateres_nl.dll	GoogleUpdate.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\goopdateres_pt-BR.dll	GoogleUpdate.exe
File created	C:\Program Files (x86)\Google\Temp\GUMBBC1.tmp\psmachine_64.dll	uninstall.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\Locales\lv.pak	setup.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\Extensions\external_extensions.json	setup.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\VisualElements\LogoCanary.png	setup.exe
File opened for modification	C:\Program Files\Google\Chrome\Application\chrome.exe	setup.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleUpdateBroker.exe	GoogleUpdate.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\Locales\hu.pak	setup.exe
File created	C:\Program Files\Google\Chrome\Application\chrome_proxy.exe	setup.exe
File created	C:\Program Files (x86)\Google\Temp\GUMBBC1.tmp\goopdateres_lv.dll	uninstall.exe
File created	C:\Program Files (x86)\Google\Update\1.3.36.132\goopdateres_ca.dll	GoogleUpdate.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\Locales\el.pak	setup.exe
File created	C:\Program Files\Google\Chrome\Temp\source1760_304690833\Chrome-bin\109.0.5414.120\Locales\nl.pak	setup.exe
File created	C:\Program Files (x86)\Google\Temp\GUMBBC1.tmp\goopdateres_iw.dll	uninstall.exe

Browser Information Discovery 1 TTPs
Enumerate browser information.
discovery

Browser Information Discovery
T1217
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 14 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	GoogleUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	GoogleUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	GoogleCrashHandler.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	GoogleUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	GoogleUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	client32.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	uninstall.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	GoogleUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	GoogleUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	gwspro.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	GoogleUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	GoogleUpdate.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	GoogleUpdateOnDemand.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	CLFsecurity.exe

System Network Configuration Discovery: Internet Connection Discovery 1 TTPs 2 IoCs

Adversaries may check for Internet connectivity on compromised systems.

discovery

Internet Connection Discovery

T1016.001

pid	Process
2044	GoogleUpdate.exe
2480	GoogleUpdate.exe

Checks processor information in registry 2 TTPs 3 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0	CLFsecurity.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\Identifier	CLFsecurity.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	CLFsecurity.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	chrome.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	chrome.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	chrome.exe

Modifies registry class 64 IoCs

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{34527502-D3DB-4205-A69B-789B27EE0414}\NumMethods\ = "23"	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4E223325-C16B-4EEB-AEDC-19AA99A237FA}\ProxyStubClsid32	GoogleUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{128C2DA6-2BC0-44C0-B3F6-4EC22E647964}\NumMethods\ = "6"	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{909489C2-85A6-4322-AA56-D25278649D67}\ProxyStubClsid32	GoogleUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{8A1D4361-2C08-4700-A351-3EAA9CBFF5E4}\LOCALSERVER32	GoogleUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{05A30352-EB25-45B6-8449-BCA7B0542CE5}\ProxyStubClsid32\ = "{A6B5068B-8F3E-4850-B5C8-B004AFE2B38B}"	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A50E9E56-BA18-4FCD-8DDF-B91F12D0B6B9}\InprocHandler32	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{31AC3F11-E5EA-4A85-8A3D-8E095A39C27B}\ProxyStubClsid32	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{B3A47570-0A85-4AEA-8270-529D47899603}\NumMethods	GoogleUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DCAB8386-4F03-4DBD-A366-D90BC9F68DE6}\ = "IPackage"	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{0CD01D1E-4A1C-489D-93B9-9B6672877C57}\ProxyStubClsid32	GoogleUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{31AC3F11-E5EA-4A85-8A3D-8E095A39C27B}\ = "IGoogleUpdate"	GoogleUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DAB1D343-1B2A-47F9-B445-93DC50704BFE}\NumMethods\ = "4"	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4DE778FE-F195-4EE3-9DAB-FE446C239221}\NumMethods	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{8476CE12-AE1F-4198-805C-BA0F9B783F57}\NumMethods	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{BCDCB538-01C0-46D1-A6A7-52F4D021C272}\ProxyStubClsid32	GoogleUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{4E223325-C16B-4EEB-AEDC-19AA99A237FA}\ProxyStubClsid32\ = "{A6B5068B-8F3E-4850-B5C8-B004AFE2B38B}"	GoogleUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C6271107-A214-4F11-98C0-3F16BC670D28}\InprocServer32\ThreadingModel = "Both"	GoogleUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{ABC01078-F197-4B0B-ADBC-CFE684B39C82}\LOCALSERVER32	GoogleUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{F63F6F8B-ACD5-413C-A44B-0409136D26CB}\ProxyStubClsid32	GoogleUpdateComRegisterShell64.exe
Key deleted	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{9D6AA569-9F30-41AD-885A-346685C74928}	GoogleUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{9B2340A0-4068-43D6-B404-32E27217859D}\ProgID\ = "GoogleUpdate.CoreMachineClass.1"	GoogleUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A2C6CB58-C076-425C-ACB7-6D19D64428CD}\LocalServer32\ServerExecutable = "C:\\Program Files\\Google\\Chrome\\Application\\109.0.5414.120\\notification_helper.exe"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{708860E0-F641-4611-8895-7D867DD3675B}\AppID = "{708860E0-F641-4611-8895-7D867DD3675B}"	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\.shtml\OpenWithProgids\ChromeHTML	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\GoogleUpdate.CoreClass.1\CLSID\ = "{E225E692-4B47-4777-9BED-4FD7FE257F0E}"	GoogleUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DAB1D343-1B2A-47F9-B445-93DC50704BFE}\ProxyStubClsid32	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{19692F10-ADD2-4EFF-BE54-E61C62E40D13}	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{0CD01D1E-4A1C-489D-93B9-9B6672877C57}\NumMethods	GoogleUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{3D05F64F-71E3-48A5-BF6B-83315BC8AE1F}\ProxyStubClsid32\ = "{A6B5068B-8F3E-4850-B5C8-B004AFE2B38B}"	GoogleUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{5B25A8DC-1780-4178-A629-6BE8B8DEFAA2}\NumMethods	GoogleUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\GoogleUpdate.Update3WebMachineFallback\CLSID\ = "{598FE0E5-E02D-465D-9A9D-37974A28FD42}"	GoogleUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{ADDF22CF-3E9B-4CD7-9139-8169EA6636E4}\VersionIndependentProgID\ = "GoogleUpdate.PolicyStatusMachineFallback"	GoogleUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{0CD01D1E-4A1C-489D-93B9-9B6672877C57}\ProxyStubClsid32	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DD42475D-6D46-496A-924E-BD5630B4CBBA}\NumMethods	GoogleUpdateComRegisterShell64.exe
Set value (int)	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\Elevation\Enabled = "1"	GoogleUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{534F5323-3569-4F42-919D-1E1CF93E5BF6}\VersionIndependentProgID	GoogleUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{084D78A8-B084-4E14-A629-A2C419B0E3D9}\NumMethods\ = "43"	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A6B5068B-8F3E-4850-B5C8-B004AFE2B38B}	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{4DE778FE-F195-4EE3-9DAB-FE446C239221}\ProxyStubClsid32	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{FE908CDD-22BB-472A-9870-1A0390E42F36}	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\CLSID\{B3D28DBD-0DFA-40E4-8071-520767BADC7E}\ProgID	GoogleUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{49D7563B-2DDB-4831-88C8-768A53833837}\ = "IJobObserver"	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{3D05F64F-71E3-48A5-BF6B-83315BC8AE1F}\NumMethods	GoogleUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2D363682-561D-4C3A-81C6-F2F82107562A}\ProxyStubClsid32\ = "{A6B5068B-8F3E-4850-B5C8-B004AFE2B38B}"	GoogleUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{31AC3F11-E5EA-4A85-8A3D-8E095A39C27B}\NumMethods\ = "5"	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{27634814-8E41-4C35-8577-980134A96544}	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{494B20CF-282E-4BDD-9F5D-B70CB09D351E}\NumMethods	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2D363682-561D-4C3A-81C6-F2F82107562A}	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{4DE778FE-F195-4EE3-9DAB-FE446C239221}	GoogleUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{247954F9-9EDC-4E68-8CC3-150C2B89EADF}	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\Software\Classes\TypeLib\{463ABECF-410D-407F-8AF5-0DF35A005CC8}\1.0	setup.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2D363682-561D-4C3A-81C6-F2F82107562A}\NumMethods\ = "4"	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{128C2DA6-2BC0-44C0-B3F6-4EC22E647964}\ProxyStubClsid32	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\Software\Classes\.xht\OpenWithProgids	setup.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{49D7563B-2DDB-4831-88C8-768A53833837}\ProxyStubClsid32	GoogleUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{DCAB8386-4F03-4DBD-A366-D90BC9F68DE6}\ProxyStubClsid32\ = "{A6B5068B-8F3E-4850-B5C8-B004AFE2B38B}"	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{5B25A8DC-1780-4178-A629-6BE8B8DEFAA2}	GoogleUpdateComRegisterShell64.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Wow6432Node\Interface\{18D0F672-18B4-48E6-AD36-6E6BF01DBBC4}\NumMethods	GoogleUpdate.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{2D363682-561D-4C3A-81C6-F2F82107562A}	GoogleUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\GoogleUpdate.PolicyStatusMachine.1.0\ = "Google Update Broker Class Factory"	GoogleUpdate.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{19692F10-ADD2-4EFF-BE54-E61C62E40D13}\ = "IJobObserver2"	GoogleUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{C6271107-A214-4F11-98C0-3F16BC670D28}\InprocServer32\ThreadingModel = "Both"	GoogleUpdateComRegisterShell64.exe
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\Classes\Interface\{494B20CF-282E-4BDD-9F5D-B70CB09D351E}\ProxyStubClsid32\ = "{A6B5068B-8F3E-4850-B5C8-B004AFE2B38B}"	GoogleUpdateComRegisterShell64.exe

Suspicious behavior: EnumeratesProcesses 17 IoCs

pid	Process
1524	CLFsecurity.exe
1524	CLFsecurity.exe
1628	GoogleUpdate.exe
1628	GoogleUpdate.exe
1628	GoogleUpdate.exe
1628	GoogleUpdate.exe
1628	GoogleUpdate.exe
1628	GoogleUpdate.exe
944	GoogleUpdate.exe
944	GoogleUpdate.exe
2480	GoogleUpdate.exe
2480	GoogleUpdate.exe
1628	GoogleUpdate.exe
1628	GoogleUpdate.exe
1628	GoogleUpdate.exe
2352	chrome.exe
2352	chrome.exe

Suspicious use of AdjustPrivilegeToken 64 IoCs

description	pid	Process
Token: SeDebugPrivilege	1628	GoogleUpdate.exe
Token: SeDebugPrivilege	1628	GoogleUpdate.exe
Token: SeDebugPrivilege	1628	GoogleUpdate.exe
Token: SeSecurityPrivilege	1884	client32.exe
Token: 33	2264	109.0.5414.120_chrome_installer.exe
Token: SeIncBasePriorityPrivilege	2264	109.0.5414.120_chrome_installer.exe
Token: 33	656	GoogleCrashHandler64.exe
Token: SeIncBasePriorityPrivilege	656	GoogleCrashHandler64.exe
Token: 33	2064	GoogleCrashHandler.exe
Token: SeIncBasePriorityPrivilege	2064	GoogleCrashHandler.exe
Token: SeDebugPrivilege	944	GoogleUpdate.exe
Token: SeDebugPrivilege	2480	GoogleUpdate.exe
Token: SeDebugPrivilege	1628	GoogleUpdate.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe
Token: SeShutdownPrivilege	2352	chrome.exe

Suspicious use of FindShellTrayWindow 35 IoCs

pid	Process
1884	client32.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe

Suspicious use of SendNotifyMessage 32 IoCs

pid	Process
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe
2352	chrome.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 1524 wrote to memory of 2608	1524	CLFsecurity.exe	30
PID 1524 wrote to memory of 2608	1524	CLFsecurity.exe	30
PID 1524 wrote to memory of 2608	1524	CLFsecurity.exe	30
PID 1524 wrote to memory of 2608	1524	CLFsecurity.exe	30
PID 2608 wrote to memory of 1884	2608	gwspro.exe	31
PID 2608 wrote to memory of 1884	2608	gwspro.exe	31
PID 2608 wrote to memory of 1884	2608	gwspro.exe	31
PID 2608 wrote to memory of 1884	2608	gwspro.exe	31
PID 2608 wrote to memory of 2968	2608	gwspro.exe	32
PID 2608 wrote to memory of 2968	2608	gwspro.exe	32
PID 2608 wrote to memory of 2968	2608	gwspro.exe	32
PID 2608 wrote to memory of 2968	2608	gwspro.exe	32
PID 2608 wrote to memory of 2968	2608	gwspro.exe	32
PID 2608 wrote to memory of 2968	2608	gwspro.exe	32
PID 2608 wrote to memory of 2968	2608	gwspro.exe	32
PID 2968 wrote to memory of 1628	2968	uninstall.exe	33
PID 2968 wrote to memory of 1628	2968	uninstall.exe	33
PID 2968 wrote to memory of 1628	2968	uninstall.exe	33
PID 2968 wrote to memory of 1628	2968	uninstall.exe	33
PID 2968 wrote to memory of 1628	2968	uninstall.exe	33
PID 2968 wrote to memory of 1628	2968	uninstall.exe	33
PID 2968 wrote to memory of 1628	2968	uninstall.exe	33
PID 1628 wrote to memory of 2700	1628	GoogleUpdate.exe	35
PID 1628 wrote to memory of 2700	1628	GoogleUpdate.exe	35
PID 1628 wrote to memory of 2700	1628	GoogleUpdate.exe	35
PID 1628 wrote to memory of 2700	1628	GoogleUpdate.exe	35
PID 1628 wrote to memory of 2700	1628	GoogleUpdate.exe	35
PID 1628 wrote to memory of 2700	1628	GoogleUpdate.exe	35
PID 1628 wrote to memory of 2700	1628	GoogleUpdate.exe	35
PID 1628 wrote to memory of 2804	1628	GoogleUpdate.exe	36
PID 1628 wrote to memory of 2804	1628	GoogleUpdate.exe	36
PID 1628 wrote to memory of 2804	1628	GoogleUpdate.exe	36
PID 1628 wrote to memory of 2804	1628	GoogleUpdate.exe	36
PID 1628 wrote to memory of 2804	1628	GoogleUpdate.exe	36
PID 1628 wrote to memory of 2804	1628	GoogleUpdate.exe	36
PID 1628 wrote to memory of 2804	1628	GoogleUpdate.exe	36
PID 2804 wrote to memory of 2332	2804	GoogleUpdate.exe	37
PID 2804 wrote to memory of 2332	2804	GoogleUpdate.exe	37
PID 2804 wrote to memory of 2332	2804	GoogleUpdate.exe	37
PID 2804 wrote to memory of 2332	2804	GoogleUpdate.exe	37
PID 2804 wrote to memory of 1480	2804	GoogleUpdate.exe	38
PID 2804 wrote to memory of 1480	2804	GoogleUpdate.exe	38
PID 2804 wrote to memory of 1480	2804	GoogleUpdate.exe	38
PID 2804 wrote to memory of 1480	2804	GoogleUpdate.exe	38
PID 2804 wrote to memory of 1908	2804	GoogleUpdate.exe	39
PID 2804 wrote to memory of 1908	2804	GoogleUpdate.exe	39
PID 2804 wrote to memory of 1908	2804	GoogleUpdate.exe	39
PID 2804 wrote to memory of 1908	2804	GoogleUpdate.exe	39
PID 1628 wrote to memory of 2044	1628	GoogleUpdate.exe	40
PID 1628 wrote to memory of 2044	1628	GoogleUpdate.exe	40
PID 1628 wrote to memory of 2044	1628	GoogleUpdate.exe	40
PID 1628 wrote to memory of 2044	1628	GoogleUpdate.exe	40
PID 1628 wrote to memory of 2044	1628	GoogleUpdate.exe	40
PID 1628 wrote to memory of 2044	1628	GoogleUpdate.exe	40
PID 1628 wrote to memory of 2044	1628	GoogleUpdate.exe	40
PID 1628 wrote to memory of 944	1628	GoogleUpdate.exe	41
PID 1628 wrote to memory of 944	1628	GoogleUpdate.exe	41
PID 1628 wrote to memory of 944	1628	GoogleUpdate.exe	41
PID 1628 wrote to memory of 944	1628	GoogleUpdate.exe	41
PID 1628 wrote to memory of 944	1628	GoogleUpdate.exe	41
PID 1628 wrote to memory of 944	1628	GoogleUpdate.exe	41
PID 1628 wrote to memory of 944	1628	GoogleUpdate.exe	41
PID 2568 wrote to memory of 2264	2568	GoogleUpdate.exe	45
PID 2568 wrote to memory of 2264	2568	GoogleUpdate.exe	45

C:\Users\Admin\AppData\Local\Temp\CLFsecurity.exe
"C:\Users\Admin\AppData\Local\Temp\CLFsecurity.exe"
1⤵
- Loads dropped DLL
- Checks whether UAC is enabled
- System Location Discovery: System Language Discovery
- Checks processor information in registry
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of WriteProcessMemory
PID:1524
- C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gwspro.exe
  "C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gwspro.exe"
  2⤵
  - Drops startup file
  - Executes dropped EXE
  - Loads dropped DLL
  - Maps connected drives based on registry
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:2608
- - C:\Users\Admin\AppData\Roaming\NetSupport_v_2.27964\client32.exe
    "C:\Users\Admin\AppData\Roaming\NetSupport_v_2.27964\client32.exe"
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    PID:1884
- - C:\Users\Admin\AppData\Roaming\NetSupport_v_2.27964\uninstall.exe
    "C:\Users\Admin\AppData\Roaming\NetSupport_v_2.27964\uninstall.exe"
    3⤵
    - Executes dropped EXE
    - Drops file in Program Files directory
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:2968
  - - C:\Program Files (x86)\Google\Temp\GUMBBC1.tmp\GoogleUpdate.exe
      "C:\Program Files (x86)\Google\Temp\GUMBBC1.tmp\GoogleUpdate.exe" /installsource taggedmi /install "appguid={8A69D345-D564-463C-AFF1-A69D9E530F96}&iid={1266CA4D-0917-452A-19FA-B8B51EF60ACD}&lang=ru&browser=4&usagestats=1&appname=Google%20Chrome&needsadmin=prefers&ap=x64-stable-statsdef_1&installdataindex=empty"
      4⤵
      Event Triggered Execution: Image File Execution Options Injection
      Executes dropped EXE
      Drops file in Program Files directory
      System Location Discovery: System Language Discovery
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of WriteProcessMemory
      PID:1628
    - - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
        
        "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /regsvc
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Modifies registry class
        
        PID:2700
    - - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
        
        "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /regserver
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Modifies registry class
        Suspicious use of WriteProcessMemory
        
        PID:2804
      - C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleUpdateComRegisterShell64.exe
        
        "C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleUpdateComRegisterShell64.exe"
        6⤵
        Executes dropped EXE
        Modifies registry class
        
        PID:2332
      - C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleUpdateComRegisterShell64.exe
        
        "C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleUpdateComRegisterShell64.exe"
        6⤵
        Executes dropped EXE
        Modifies registry class
        
        PID:1480
      - C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleUpdateComRegisterShell64.exe
        
        "C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleUpdateComRegisterShell64.exe"
        6⤵
        Executes dropped EXE
        Modifies registry class
        
        PID:1908
    - - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
        
        "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ping PD94bWwgdmVyc2lvbj0iMS4wIiBlbmNvZGluZz0iVVRGLTgiPz48cmVxdWVzdCBwcm90b2NvbD0iMy4wIiB1cGRhdGVyPSJPbWFoYSIgdXBkYXRlcnZlcnNpb249IjEuMy4zNi4xMzIiIHNoZWxsX3ZlcnNpb249IjEuMy4zNi4xMzEiIGlzbWFjaGluZT0iMSIgc2Vzc2lvbmlkPSJ7MjQ4MUU0QkItMDVEQi00NENFLTgxQkQtNjJCREI4MTg0RkREfSIgdXNlcmlkPSJ7MEEzRDIyMTQtRDIxNi00MDA2LUI1REQtODkyMDI3NTcwMjhBfSIgaW5zdGFsbHNvdXJjZT0idGFnZ2VkbWkiIHJlcXVlc3RpZD0iezRFMDFBNzg0LUIzMTEtNEU1NS04RTE1LTQ1OEQxMkU4MzlBNH0iIGRlZHVwPSJjciIgZG9tYWluam9pbmVkPSIwIj48aHcgcGh5c21lbW9yeT0iMiIgc3NlPSIxIiBzc2UyPSIxIiBzc2UzPSIxIiBzc3NlMz0iMSIgc3NlNDE9IjEiIHNzZTQyPSIxIiBhdng9IjEiLz48b3MgcGxhdGZvcm09IndpbiIgdmVyc2lvbj0iNi4xLjc2MDEuMCIgc3A9IlNlcnZpY2UgUGFjayAxIiBhcmNoPSJ4NjQiLz48YXBwIGFwcGlkPSJ7NDMwRkQ0RDAtQjcyOS00RjYxLUFBMzQtOTE1MjY0ODE3OTlEfSIgdmVyc2lvbj0iMS4zLjM2LjE1MSIgbmV4dHZlcnNpb249IjEuMy4zNi4xMzIiIGxhbmc9InJ1IiBicmFuZD0iIiBjbGllbnQ9IiIgaWlkPSJ7MTI2NkNBNEQtMDkxNy00NTJBLTE5RkEtQjhCNTFFRjYwQUNEfSI-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIgaW5zdGFsbF90aW1lX21zPSIyMzc2Ii8-PC9hcHA-PC9yZXF1ZXN0Pg
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        System Network Configuration Discovery: Internet Connection Discovery
        
        PID:2044
    - - C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
        
        "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /handoff "appguid={8A69D345-D564-463C-AFF1-A69D9E530F96}&iid={1266CA4D-0917-452A-19FA-B8B51EF60ACD}&lang=ru&browser=4&usagestats=1&appname=Google%20Chrome&needsadmin=prefers&ap=x64-stable-statsdef_1&installdataindex=empty" /installsource taggedmi /sessionid "{2481E4BB-05DB-44CE-81BD-62BDB8184FDD}"
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:944

C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
"C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /svc
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
- Suspicious use of WriteProcessMemory
PID:2568
- C:\Program Files (x86)\Google\Update\Install\{A84B853F-5C37-4F5B-A033-EDFB42A7D73C}\109.0.5414.120_chrome_installer.exe
  "C:\Program Files (x86)\Google\Update\Install\{A84B853F-5C37-4F5B-A033-EDFB42A7D73C}\109.0.5414.120_chrome_installer.exe" --verbose-logging --do-not-launch-chrome --system-level /installerdata="C:\Program Files (x86)\Google\Update\Install\{A84B853F-5C37-4F5B-A033-EDFB42A7D73C}\gui229E.tmp"
  2⤵
  - Executes dropped EXE
  - Drops file in Program Files directory
  - Suspicious use of AdjustPrivilegeToken
  PID:2264
- - C:\Program Files (x86)\Google\Update\Install\{A84B853F-5C37-4F5B-A033-EDFB42A7D73C}\CR_D2220.tmp\setup.exe
    "C:\Program Files (x86)\Google\Update\Install\{A84B853F-5C37-4F5B-A033-EDFB42A7D73C}\CR_D2220.tmp\setup.exe" --install-archive="C:\Program Files (x86)\Google\Update\Install\{A84B853F-5C37-4F5B-A033-EDFB42A7D73C}\CR_D2220.tmp\CHROME.PACKED.7Z" --verbose-logging --do-not-launch-chrome --system-level /installerdata="C:\Program Files (x86)\Google\Update\Install\{A84B853F-5C37-4F5B-A033-EDFB42A7D73C}\gui229E.tmp"
    3⤵
    - Boot or Logon Autostart Execution: Active Setup
    - Executes dropped EXE
    - Drops file in Program Files directory
    - Modifies registry class
    PID:1760
  - - C:\Program Files (x86)\Google\Update\Install\{A84B853F-5C37-4F5B-A033-EDFB42A7D73C}\CR_D2220.tmp\setup.exe
      "C:\Program Files (x86)\Google\Update\Install\{A84B853F-5C37-4F5B-A033-EDFB42A7D73C}\CR_D2220.tmp\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=109.0.5414.120 --initial-client-data=0x154,0x158,0x15c,0x128,0x160,0x13f981148,0x13f981158,0x13f981168
      4⤵
      Executes dropped EXE
      PID:1344
  - - C:\Program Files (x86)\Google\Update\Install\{A84B853F-5C37-4F5B-A033-EDFB42A7D73C}\CR_D2220.tmp\setup.exe
      "C:\Program Files (x86)\Google\Update\Install\{A84B853F-5C37-4F5B-A033-EDFB42A7D73C}\CR_D2220.tmp\setup.exe" --system-level --verbose-logging --create-shortcuts=2 --install-level=1
      4⤵
      Executes dropped EXE
      PID:2976
    - - C:\Program Files (x86)\Google\Update\Install\{A84B853F-5C37-4F5B-A033-EDFB42A7D73C}\CR_D2220.tmp\setup.exe
        
        "C:\Program Files (x86)\Google\Update\Install\{A84B853F-5C37-4F5B-A033-EDFB42A7D73C}\CR_D2220.tmp\setup.exe" --type=crashpad-handler /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler --database=C:\Windows\TEMP\Crashpad --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=109.0.5414.120 --initial-client-data=0x154,0x158,0x15c,0x128,0x160,0x13f981148,0x13f981158,0x13f981168
        5⤵
        Executes dropped EXE
        
        PID:1688
- C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe
  "C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of AdjustPrivilegeToken
  PID:2064
- C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe
  "C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleCrashHandler64.exe"
  2⤵
  - Executes dropped EXE
  - Suspicious use of AdjustPrivilegeToken
  PID:656
- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ping 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-PGV2ZW50IGV2ZW50dHlwZT0iNSIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMCIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiIGRvd25sb2FkZXI9ImJpdHMiIHVybD0iaHR0cDovL2VkZ2VkbC5tZS5ndnQxLmNvbS9lZGdlZGwvcmVsZWFzZTIvY2hyb21lL2N6YW8yaHJ2cGs1d2dxcmt6NGtrczVyNzM0XzEwOS4wLjU0MTQuMTIwLzEwOS4wLjU0MTQuMTIwX2Nocm9tZV9pbnN0YWxsZXIuZXhlIiBkb3dubG9hZGVkPSI5MzEyMjYwMCIgdG90YWw9IjkzMTIyNjAwIiBkb3dubG9hZF90aW1lX21zPSIxNzc5MyIvPjxldmVudCBldmVudHR5cGU9IjEiIGV2ZW50cmVzdWx0PSIxIiBlcnJvcmNvZGU9IjAiIGV4dHJhY29kZTE9IjAiLz48ZXZlbnQgZXZlbnR0eXBlPSI2IiBldmVudHJlc3VsdD0iMSIgZXJyb3Jjb2RlPSIwIiBleHRyYWNvZGUxPSIwIi8-PGV2ZW50IGV2ZW50dHlwZT0iMiIgZXZlbnRyZXN1bHQ9IjEiIGVycm9yY29kZT0iMCIgZXh0cmFjb2RlMT0iMTk2NzA3IiBzb3VyY2VfdXJsX2luZGV4PSIwIiB1cGRhdGVfY2hlY2tfdGltZV9tcz0iMzMwNCIgZG93bmxvYWRfdGltZV9tcz0iMTg0NTQiIGRvd25sb2FkZWQ9IjkzMTIyNjAwIiB0b3RhbD0iOTMxMjI2MDAiIGluc3RhbGxfdGltZV9tcz0iMjQ4ODQiLz48L2FwcD48L3JlcXVlc3Q-
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - System Network Configuration Discovery: Internet Connection Discovery
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious use of AdjustPrivilegeToken
  PID:2480

C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleUpdateOnDemand.exe
"C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleUpdateOnDemand.exe" -Embedding
1⤵
- Executes dropped EXE
- System Location Discovery: System Language Discovery
PID:2124
- C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
  "C:\Program Files (x86)\Google\Update\GoogleUpdate.exe" /ondemand
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  PID:2932
- - C:\Program Files\Google\Chrome\Application\chrome.exe
    "C:\Program Files\Google\Chrome\Application\chrome.exe" --from-installer
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Checks system information in the registry
    - Drops file in Program Files directory
    - Enumerates system info in registry
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of FindShellTrayWindow
    - Suspicious use of SendNotifyMessage
    PID:2352
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Google\Chrome\User Data" --url=https://clients2.google.com/cr/report --annotation=channel= --annotation=plat=Win64 --annotation=prod=Chrome --annotation=ver=109.0.5414.120 --initial-client-data=0xc0,0xc4,0xc8,0x94,0xcc,0x7fef5da6b58,0x7fef5da6b68,0x7fef5da6b78
      4⤵
      Executes dropped EXE
      PID:2712
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1052 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:2
      4⤵
      Executes dropped EXE
      PID:2748
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1476 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:1684
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1536 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:2788
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2072 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:1
      4⤵
      Checks computer location settings
      Executes dropped EXE
      PID:1332
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2080 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:1
      4⤵
      Checks computer location settings
      Executes dropped EXE
      PID:1200
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3044 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:1
      4⤵
      Checks computer location settings
      Executes dropped EXE
      PID:1456
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=2348 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:1028
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=gpu-process --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --use-gl=angle --use-angle=swiftshader-webgl --mojo-platform-channel-handle=1368 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:2
      4⤵
      Executes dropped EXE
      PID:2500
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=10 --mojo-platform-channel-handle=3416 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:1
      4⤵
      Checks computer location settings
      Executes dropped EXE
      PID:2900
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3792 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:1916
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=3796 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:3060
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3840 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:1324
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3980 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:2108
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=data_decoder.mojom.DataDecoderService --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=4004 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:2988
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=renderer --extension-process --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=4 --enable-main-frame-before-activation --renderer-client-id=17 --mojo-platform-channel-handle=4052 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:1
      4⤵
      Checks computer location settings
      Executes dropped EXE
      PID:1656
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilWin --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=736 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:2388
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=3260 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:2180
  - - C:\Program Files\Google\Chrome\Application\chrome.exe
      "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=unzip.mojom.Unzipper --lang=en-US --service-sandbox-type=service --mojo-platform-channel-handle=1004 --field-trial-handle=1284,i,17643245443662696554,4304696758405211160,131072 /prefetch:8
      4⤵
      Executes dropped EXE
      PID:2780

C:\Program Files\Google\Chrome\Application\109.0.5414.120\elevation_service.exe
"C:\Program Files\Google\Chrome\Application\109.0.5414.120\elevation_service.exe"
1⤵
- Executes dropped EXE
PID:1840

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Active Setup

T1547.014

Event Triggered Execution

T1546

Component Object Model Hijacking

T1546.015

Image File Execution Options Injection

T1546.012

Defense Evasion

Modify Registry

T1112

Credential Access

Credentials from Password Stores

T1555

Credentials from Web Browsers

T1555.003

Unsecured Credentials

T1552

Credentials In Files

T1552.001

Discovery

Browser Information Discovery

T1217

Peripheral Device Discovery

T1120

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

System Network Configuration Discovery

T1016

Internet Connection Discovery

T1016.001

Lateral Movement

Collection

Data from Local System

T1005

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

GoogleUpdate.exe

Path C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleUpdate.exe
Size 164KB
SHA256 63854e78780866d2ae56a58958a1fda017a71f54b71fe70cf5403958e961862a
MD5 e885bf92c289c674cd32f3e85ab2b922
SHA1 c0a98fd8c74d031f54fda658a1c67d8886b5e076
SHA512 618d0cb1e6b50716ad877616da547d45099d92c6d00158da0ee2a76cf08f13ee540d365f747a031f0da96b238acc7fc9c0996c8de3feb7753966a9458e5f2512
SSDEEP 3072:IwzvOYRt5YP/aKavT/DvbEvK9aobNI2B+hlsfni3YGByThXKBZkZN4GhQ2eRZh+p:ftiP/aK2h9H/B+rw
MD5 SHA1 SHA512 SSDEEP

Submit Download

GoogleUpdateSetup.exe

Path C:\Program Files (x86)\Google\Update\1.3.36.132\GoogleUpdateSetup.exe
Size 1.3MB
SHA256 1308e32b6dea50fa265ed488f3a247b95b97ccff3b519c549a416c88af4c5363
MD5 4e1e03e33a0ff86e7ffa9e36adfaad83
SHA1 ed7f595df8910b3cb3b377acb8afdbc55ecb6651
SHA512 7f062bba2829febe9134c2c3c07d900e88be95562ecce98e5b03f14b81f23394daf0f8fe4290aee27445ea6f1dc3e4850d59d01cc7778f192e1dfbd56963075a
SSDEEP 24576:6w8KH/B1FBgDXZNFfZoWe0KVIC9ClKa5IrykTHhQ5NoRyftZZriXWzr6pfKuI:aK51rgXteP3Vz9oI2mhoNosVDP+fX
MD5 SHA1 SHA512 SSDEEP

Submit Download

setup.exe

Path C:\Program Files\Google\Chrome\Application\109.0.5414.120\Installer\setup.exe
Size 4.7MB
SHA256 19545e8376807bce8a430c37cab9731e85052103f769dd60a5da3d93ca68c6ec
MD5 b42b8ac29ee0a9c3401ac4e7e186282d
SHA1 69dfb1dd33cf845a1358d862eebc4affe7b51223
SHA512 b5269e7392e77a0fa850049ff61e271c5aab90d546945b17a65cc2ea6420432ae56321e1e39cfd97ccdb3dfc37ddbd6ff77907f5685cc2323b8635c8cdb4a84f
SSDEEP 49152:6ElXGIAODJaMagddod2aA40Xx3HVCmz4BjnnwPE/b34oonGLSIYg83wPUcMXnH8D:DLXClnwPWrDSIYg5MHKO6HCD2zog
MD5 SHA1 SHA512 SSDEEP

Submit Download

6a65cc42-c42f-4986-9970-d08e155dd2da.tmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\6a65cc42-c42f-4986-9970-d08e155dd2da.tmp
Size 12KB
SHA256 45fa954d74ad58a518385f5219963ed51cc79600d6ec4af22eb4eeefdf849977
MD5 e82bb7a9994facb2442e75bf42d8e2ad
SHA1 7668395ce94484a3c3977c5605f6ac462f2c350a
SHA512 61e8b0a4a948b48eea3898b9d91d2ccf112a08c42f3b0a1d46f307262c8d37e6fa8ea42d5cdc99a648914ba5464a7a62f508463cab3a2c2783b54ab10806138e
SSDEEP 384:cRZXf1kXqKf/pUZNCgVLH2Hfk0rUKHGFbjarm5ka:cf1kXqKf/pUZNCgVLH2HfXrUaGoha
MD5 SHA1 SHA512 SSDEEP

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.6_0\_locales\en\messages.json
Size 593B
SHA256 92f1246c21dd5fd7266ebfd65798c61e403d01a816cc3cf780db5c8aa2e3d9c9
MD5 91f5bc87fd478a007ec68c4e8adf11ac
SHA1 d07dd49e4ef3b36dad7d038b7e999ae850c5bef6
SHA512 fdc2a29b04e67ddbbd8fb6e8d2443e46badcb2b2fb3a850bbd6198cdccc32ee0bd8a9769d929feefe84d1015145e6664ab5fea114df5a864cf963bf98a65ffd9
MD5 SHA1 SHA512

Submit Download

000006.dbtmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GCM Store\Encryption\000006.dbtmp
Size 16B
SHA256 4166bf17b2da789b0d0cc5c74203041d98005f5d4ef88c27e8281e00148cd611
MD5 aefd77f47fb84fae5ea194496b44c67a
SHA1 dcfbb6a5b8d05662c4858664f81693bb7f803b82
SHA512 b733d502138821948267a8b27401d7c0751e590e1298fda1428e663ccd02f55d0d2446ff4bc265bdcdc61f952d13c01524a5341bc86afc3c2cde1d8589b2e1c3
MD5 SHA1 SHA512

Submit Download

data_1

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\GPUCache\data_1
Size 264KB
SHA256 b1e963d702392fb7224786e7d56d43973e9b9efd1b89c17814d7c558ffc0cdec
MD5 f50f89a0a91564d0b8a211f8921aa7de
SHA1 112403a17dd69d5b9018b8cede023cb3b54eab7d
SHA512 bf8cda48cf1ec4e73f0dd1d4fa5562af1836120214edb74957430cd3e4a2783e801fa3f4ed2afb375257caeed4abe958265237d6e0aacf35a9ede7a2e8898d58
SSDEEP 3:MsEllllkEthXllkl2zE:/M/xT02z
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 11616abb93909127a5bc83418314338e29bcaafc5d2e3bc163afa264f6182046
MD5 fcc3a79cae34c850e5c0e0ff21d887ca
SHA1 d9504786d9a540b34e7d81f5b5fe040827d77aa9
SHA512 f48b57fbee925e87e6e407bbf25acec8cf1fee3c403509aaa3ad35ee500e912dc20059fd1c63c9a23f0161ad78fe846eaf8d4df8ea7447585916996b54b5feb8
SSDEEP 96:hmvZwKI38fd8iZRy7Dx+6MSmue5IOLQ3mT2MrVhYtjEsXt0/cgXup:hmRwyl8syh+FJfPQtjEsXtSc7
MD5 SHA1 SHA512 SSDEEP

Submit Download

Preferences

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Preferences
Size 6KB
SHA256 230058273940e9a45840116578321ea948f03f255e9f78ef518f8235774770d0
MD5 16670361cace64020e0ffd056aad4e46
SHA1 8197ed1c3511e7bddaefebf92d537c8241f9b426
SHA512 7233846d51dcab9a7b833245e2155ab9b44737fcfd7c30dcd022f6a77693130ed166a662fc2fde44e97789846d43c0661e1a2501f408ccb0ee99414783a506bb
SSDEEP 96:hmvZwKI38fd8iZRy7Dx+6MSmueJOLQC3mT2MrVhYtjEsXt0/cgXup:hmRwyl8syh+F7PQtjEsXtSc7
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_0

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnCache\data_0
Size 8KB
SHA256 d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
MD5 cf89d16bb9107c631daabf0c0ee58efb
SHA1 3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA512 8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
SSDEEP 3:MsFl:/F
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_2

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnCache\data_2
Size 8KB
SHA256 ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
MD5 0962291d6d367570bee5454721c17e11
SHA1 59d10a893ef321a706a9255176761366115bedcb
SHA512 f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
SSDEEP 3:MsHlDll:/H
MD5 SHA1 SHA512 SSDEEP

Submit Download

data_3

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\DawnCache\data_3
Size 8KB
SHA256 e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
MD5 41876349cb12d6db992f1309f22df3f0
SHA1 5cf26b3420fc0302cd0a71e8d029739b8765be27
SHA512 e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
SSDEEP 3:MsGl3ll:/y
MD5 SHA1 SHA512 SSDEEP

Submit Download

000002.dbtmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\000002.dbtmp
Size 16B
SHA256 1005a525006f148c86efcbfb36c6eac091b311532448010f70f7de9a68007167
MD5 206702161f94c5cd39fadd03f4014d98
SHA1 bd8bfc144fb5326d21bd1531523d9fb50e1b600a
SHA512 0af09f26941b11991c750d1a2b525c39a8970900e98cba96fd1b55dbf93fee79e18b8aab258f48b4f7bda40d059629bc7770d84371235cdb1352a4f17f80e145
MD5 SHA1 SHA512

Submit Download

CURRENT

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Local Storage\leveldb\CURRENT
Size 16B
SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
MD5 46295cac801e5d4857d09837238a6394
SHA1 44e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA512 8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
MD5 SHA1 SHA512

Submit Download

MANIFEST-000001

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\nmmhkkegccagdldgiimedpiccmgmieda\def\Session Storage\MANIFEST-000001
Size 41B
SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
MD5 5af87dfd673ba2115e2fcf5cfdb727ab
SHA1 d5b5bbf396dc291274584ef71f444f420b6056f1
SHA512 de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
MD5 SHA1 SHA512

Submit Download

000007.dbtmp

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\Sync Data\LevelDB\000007.dbtmp
Size 16B
SHA256 8af72f43857550b01eab1019335772b367a17a9884a7a759fdf4fe6f272b90aa
MD5 18e723571b00fb1694a3bad6c78e4054
SHA1 afcc0ef32d46fe59e0483f9a3c891d3034d12f32
SHA512 43bb0af7d3984012d2d67ca6b71f0201e5b948e6fe26a899641c4c6f066c59906d468ddf7f1df5ea5fa33c2bc5ea8219c0f2c82e0a5c365ad7581b898a8859e2
MD5 SHA1 SHA512

Submit Download

trusted_vault.pb

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Default\trusted_vault.pb
Size 38B
SHA256 f7d5893372edaa08377cb270a99842a9c758b447b7b57c52a7b1158c0c202e6d
MD5 3433ccf3e03fc35b634cd0627833b0ad
SHA1 789a43382e88905d6eb739ada3a8ba8c479ede02
SHA512 21a29f0ef89fec310701dcad191ea4ab670edc0fc161496f7542f707b5b9ce619eb8b709a52073052b0f705d657e03a45be7560c80909e92ae7d5939ce688e9c
MD5 SHA1 SHA512

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 179KB
SHA256 3c49eec53398745f395ed831fe47343629d58fbad51bce6f37bd6f5f5d41285a
MD5 32d0fd8d22edb847f24ef9e13b0728de
SHA1 a4317386ef5f5f5b6d2534bb9b84ecfce2ccb7b1
SHA512 068641220c5ee933d9c657af2ef57e703dccd2965c41553d876bb03aa0b36272326f8b957d3439e5f4f273fee68ee81b059df88851072dbfd672a3bd161e044f
SSDEEP 3072:i8cDeAp/eXcROhcUUwpSExRoFghCw0ovCxsYF24mY8ohSOy:+vBe1ctXQwghR0oqxsUiokz
MD5 SHA1 SHA512 SSDEEP

Submit Download

Local State

Path C:\Users\Admin\AppData\Local\Google\Chrome\User Data\Local State
Size 347KB
SHA256 36e51f2da28be4bcf88a96ded2f232077159ee446b97aa230f40147df076ed3e
MD5 aee4f5ce16b077827ef88f1e70f31526
SHA1 f8940a961dc20202832d07d1f846143c22b510ed
SHA512 788c5239c471449646fc0f9151be01fc09d36a04bbee7d3d810e2a2b5c82e727277df5a721a4b24e21eea3711cc0a25302adcf78877e1ea918a2fff3ce54c414
SSDEEP 6144:i72U6T8ti83qySxjKR0c6kJzrlvBe1ctXQwghR0oqxsUiokc:jeejKR0cbFk1OQn5o/
MD5 SHA1 SHA512 SSDEEP

Submit Download

messages.json

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2352_1778043583\CRX_INSTALL\_locales\en\messages.json
Size 450B
SHA256 c0945dd5fdecab40c45361bec068d1996e6ae01196dce524266d740808f753fe
MD5 dbedf86fa9afb3a23dbb126674f166d2
SHA1 5628affbcf6f897b9d7fd9c17deb9aa75036f1cc
SHA512 931d7ba6da84d4bb073815540f35126f2f035a71bfe460f3ccaed25ad7c1b1792ab36cd7207b99fddf5eaf8872250b54a8958cf5827608f0640e8aafe11e0071
MD5 SHA1 SHA512

Submit Download

a3c822ef-a451-422a-87fd-3b76d61a15bc.tmp

Path C:\Users\Admin\AppData\Local\Temp\scoped_dir2352_1778043583\a3c822ef-a451-422a-87fd-3b76d61a15bc.tmp
Size 242KB
SHA256 81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82
MD5 541f52e24fe1ef9f8e12377a6ccae0c0
SHA1 189898bb2dcae7d5a6057bc2d98b8b450afaebb6
SHA512 d779d78a15c5efca51ebd6b96a7ccb6d718741bdf7d9a37f53b2eb4b98aa1a78bc4cfa57d6e763aab97276c8f9088940ac0476690d4d46023ff4bf52f3326c88
SSDEEP 3072:r+nmRykNgoldZ8GjJCiUXZSk+QSVh85PxEalRVHmcld9R6yYfEp4ABUGDcaKklrv:k3oF4Z4h45P99Fld9RBQYBVcaxlnfL
MD5 SHA1 SHA512 SSDEEP

Submit Download

DC120V104_32.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\DC120V104_32.dll
Size 498KB
SHA256 d3934aea56cc3a31756bc7f4b9697d6720bc07982e40a11b285d56cb928ff5d5
MD5 fae88f89279ea1bb44b35bfec9b2f82e
SHA1 9e9ab285e35f68785b5c1affaa340500a15cc752
SHA512 36c006621a195ee8f08adbf246c5597f7d2dd6fba33b74ce4ce591b338adc53eaf6e4bb26b03e958171b738243915fb5e86af36df34ce8cda7720b88e12a1f0b
SSDEEP 6144:uf1KbZ6evD3C3BfjeFWoP7xAJ6H1Z/lAVlfRDLKMIjLS5T4ahoYu0cw/L:6KAaSJj2WoP7xUQ0lpDLKvj8T4aBv
MD5 SHA1 SHA512 SSDEEP

Submit Download

DefaultTheme.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\DefaultTheme.dll
Size 1.3MB
SHA256 5749bd96a435534f6b0d9088ee7cea7214fd447d325ec048ec0a5472f2202adb
MD5 dc99fd39b53682c85ad34e496398b211
SHA1 194d20d41cc885be04c86fcf1c2c59d6757572ca
SHA512 9166bc851577f5e5dc60af08e4c4a55230e9b5ab85e98053f5a654445be0de84e8c1bb720ed12f04a20093d329149f2534f0bfb47a525cab11fd155913479668
SSDEEP 24576:DuNBacKsF+aUpp5B82fMhRYcTgJ0/ps0/Ub+Ikt5+:6q7wh9gJ0/pJ/mpktA
MD5 SHA1 SHA512 SSDEEP

Submit Download

FastNoise.txt

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\FastNoise.txt
Size 1KB
SHA256 ad4bdae53bad35e6f0e1c7174225ac9fe6547f63507953010294217492e887d3
MD5 03d6a3dee63f32cd6e64a24e8215301c
SHA1 a2624070ad77e592691cedaf64ae272bf0c3b04e
SHA512 2727f6e740be1be2ade3a6eb3ab27984f50e4f3bae9320aac89514b58edf5e1861bfde34e80a9c761fa40de716ccb338a35b002b4f4af9487efdc0a213ba309a
MD5 SHA1 SHA512

Submit Download

GWSPhotographyWorkshop.txt

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\GWSPhotographyWorkshop.txt
Size 11KB
SHA256 192d2cb44f76b48e5f6977e64fff09838114d972e9ea624b266d210b7926ec1e
MD5 2d4621280623305b6f0f27377c736db2
SHA1 9ff9f1453024bcda292d79d728afec2b974a9450
SHA512 e94759e0e8e0a57761098dade3636c5eb305b7f6d972bfe924df490d1ee13173b757867b243e83f3a0af41d67446ba8ddf5231757dbd973e3af9336f9fb5b883
SSDEEP 192:rDsFysIvDodXxSmkPmFsJodXxh0RHnp55z0qMlBo9xioWxweJ5yd:sF2DodXEvJodXra55z03zo9UoWC0od
MD5 SHA1 SHA512 SSDEEP

Submit Download

GraphicWorkshopPro12.png

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\GraphicWorkshopPro12.png
Size 20KB
SHA256 fe8e59d899cb8fe22fa488e33c83038c1f1ab383b39840f888b01c6450b1bf20
MD5 bc616257998ddd052dd97751c411517d
SHA1 c07dce4a4abee8f3a896cd0f663a5e9bb73389c8
SHA512 0cf67853f64da7d03e17c2d4b50c05e3842600defe36ad4b222b2e4e522b5a0b5bc333d00031ee61b866831045152bb712ec72db2900185f907f41c1eb73e1ba
SSDEEP 384:v5hu1z2EDkLg35FLuTGOHJgB2hFU8OyOUSoRi0l4fNAZmN6:BU1z2F+OpgchSVdc00l4qZr
MD5 SHA1 SHA512 SSDEEP

Submit Download

ImageMagickLicense.txt

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\ImageMagickLicense.txt
Size 18KB
SHA256 8bb1faed08a336d4d9a548a03f032ca8ad8f0e86f4d540a3dc2cf1dd55991d9d
MD5 f34e4278da859f67261104e6cc602c57
SHA1 7f6056dddd9331ee2a0279ee0e4265e6fced02ae
SHA512 987679977471ba3fab78d64fd18842179866720e6bcfa7731bb09ccbf1d55499b539fc504fbbbd3d6e06e10bc5118f9d1ab78f780a04e88a0d8284227bf781f5
SSDEEP 384:2f7E1OuiKEP71REplep9frv7rNwADrs8rsJKZxFjMk+IV5v:XOuiKEP712Efj7Rw6nrZxiKL
MD5 SHA1 SHA512 SSDEEP

Submit Download

IteratedSystems.txt

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\IteratedSystems.txt
Size 7KB
SHA256 662443571e63ce315ddb8f07fc9ebf4fd7def58622e1244559c7c0d967c8db3a
MD5 e257e3b2ed0279b2da4371b0ce7330d8
SHA1 bd6bb1222a7a8e3c127f453a689200b970821f34
SHA512 8c726173472ef7a4858e17c422656d9e67a004471efeb0378751257f7bfd998db4223432a46b89a057963d1a9cd6ae0d55016f47854cebfe00323451f1e4aac9
SSDEEP 192:UANV/7hdf6JhYnH1JxCdPthxg6Hz7RCeB:UA/mqxgP6UsU
MD5 SHA1 SHA512 SSDEEP

Submit Download

LIBPQ.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\LIBPQ.dll
Size 247KB
SHA256 be7ca5471f4bd0a21158fd0f31b5662ef0dbaa7e18d843f672a3e20d30ad42f4
MD5 2c78fd25db6f58f66a5a8b4279edac58
SHA1 d8efb224382bd4a533891cd30a94479b103870be
SHA512 5475bc9e853248baaf8f71a440d26986f774469ee7281fdbb55ecb69a4e50bc1541be6352f6e1f0fb567ad5e52a95c29c10cb3eb81d227b195170ce64bce6c23
SSDEEP 6144:J9Wy+WkHBxBR5lZ8J5ak3OsK3SKkZGsQy+tHDI4ld4Mox7apSO3Q:nWy+WkHBxBR0Uk3O1SKkZGstil7g
MD5 SHA1 SHA512 SSDEEP

Submit Download

LibZipLicense.txt

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\LibZipLicense.txt
Size 1KB
SHA256 5cdf63ebcf8611b4c8db891f4cc26f386e0186623adff4f55c616c556fafc780
MD5 6ff931e256d6b6f6be245ce11393e916
SHA1 a01ee5aba828ce573ac0f328622905853b9450e9
SHA512 90d4af068c51c229814124487273642df95de9db52acb877ada3a61c7d1398e8bb8555cbe21b1a3be8dc58252c70bc8e37c2f8515ab004cf161e151eb66e809a
MD5 SHA1 SHA512

Submit Download

OpenCV License.txt

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\OpenCV License.txt
Size 1KB
SHA256 9bebc63ab0dc093a65b39c1a06253eb1f5c6bfdd2ec5dea721c8e3a655b9564a
MD5 de7ed2b6bae65ed14373456743a268ee
SHA1 ad8e25023c083ee1ad216a3e409a679a25cf552d
SHA512 69e3055e36e03f11c6303b9b169c7f5e5159c201671e8722fe90b78076315831b2b391d8ad22a1fd624d061bb6821b51f2152fdcafe86921340a843b998b28a9
MD5 SHA1 SHA512

Submit Download

RAR License.txt

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\RAR License.txt
Size 737B
SHA256 aa326761552c992526989d666cad9550ed0a86bb9062fc1b038bd7ce649324d6
MD5 a6fea61bc47066b5234cac8d00d46042
SHA1 bbdefa210c51e44a515498d278d74e59de29a456
SHA512 6c367b71e66639deb3f25d233673aeef174054608d46dcc4cb68ee60eaf40133370b52a6c4e5cc383c7099916efc4ce317f6874349c22409b24f801f7aa57a70
MD5 SHA1 SHA512

Submit Download

api-ms-win-core-console-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-console-l1-1-0.dll
Size 11KB
SHA256 97955d1f5134350fbe6c829061e01106304978651979f4ecd5ec146bfc70d36b
MD5 22df48515382f53b828728892c65e62d
SHA1 f834220481f9acab2fce917bd6271705c3300872
SHA512 97507029a6d0057812da1a917b14e021747a1e13e4a1406e73d4f330f0fd1b9822f6300a5030d2aca8063da6da2a5a1e6e9a5a2c8ca612401188713e779fa608
SSDEEP 192:7vmMWVghWLT71ojDBQABJWkBtPqnajxcRGlPMRd54apd:3W2hWYDBRJWCPll7PedGAd
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-datetime-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-datetime-l1-1-0.dll
Size 11KB
SHA256 4e560ebdfe0bc1193a0f3feaac35634b0655829d5cc7e79d113f3a994f16d3ed
MD5 b669e6de4647cd31009b15d5edd7c999
SHA1 16f05edfa04378e99d906e9162b502c99d8ddb61
SHA512 afc8ac85c8fa15fbb3e72b8192314b8ca7eaa0a686ef77747adadd0b902260f2cb0482f76012cfd5023a12a7c0d89b973af97bd4f208389d8ca26005fe4e16dd
SSDEEP 96:FyZEWVghWwmXDX/kDbzuT714pVUtOwDD0pBDXiebs/Am2grWXGu2DXWwDylDD0C5:FZWVghWdT71ojDBQABJmqnaj9RlS6VW
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-debug-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-debug-l1-1-0.dll
Size 11KB
SHA256 c3003ff52917dbac5d3feec1bdea8ad4163893ec2d320f904b6d3698a6dbc7bc
MD5 bf8a71efcaa8260de58ab657dbf624c6
SHA1 48a1e8fd73c0b16304f0fafd6e7f6b5efb476314
SHA512 e1284fe0c7f42204043320322dbbaadfe194aae4eef0aa863b25176107ec9900a2a0dfe4778b7ca5960d6b187e7cc61e028bd02ae0dae20a90591e33165dbc0f
SSDEEP 192:TdavWVghWmT71ojDBQABJ9P5qnaj9RlS6Vtw:8vW2hWnDBRJ9hlBRAktw
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-errorhandling-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-errorhandling-l1-1-0.dll
Size 11KB
SHA256 3e8d67f3978e40a636c5fa86c310801d6d6b74127e556c57ff6fde8e1d7b706d
MD5 1a456489a0e26cf602d4af97fd537b0c
SHA1 fa62a55a403ee92b1d5f31ce2c5cc65e2de03247
SHA512 04a61c6d79c72d729d602c4a5d069c73cd92b0586d988056b2f2cebf88bac5723c1928d4a1a08fe13151ba9905cc28aeafbe344c829fadc66f138aac43e8c147
SSDEEP 192:1F87mxD3XWVghWgT71ojDBQABJVAMqnaj9RlS6VxnReG:Q70W2hWlDBRJVlBRAkWG
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-file-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-file-l1-1-0.dll
Size 14KB
SHA256 f6eb872448b5147e59f373eee8a9852d1afc5eecb967f713a7f7acb4939e9a63
MD5 977831a443ea30ac8cb70f4a069a2795
SHA1 b07313dc2760c524d1bae783e81a7f18743bff87
SHA512 0c17bb97188b6b2aaa49fb3cef94053bf20e7b587cca9307ec4a4e166f4703d17a50c12148b3112cb5d98088bfd186adacb8c55c3d8a634ead2dad93b70b5f18
SSDEEP 192:WCYPvVX8rFTsdWVghWKCT71ojDBQABJy6qnaj9RlS6V+:UPvVXfW2hWKDBRJy6lBRAk+
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-file-l1-2-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-file-l1-2-0.dll
Size 11KB
SHA256 3c9b67616fd0ceb3dd92e605918b08556683ebab5537aa76dff300fbd54b0337
MD5 86279521328398e87699d248628eb13a
SHA1 e4d4c39bda90635f1f5c2fc58b1304e2daac9caf
SHA512 2cc328955611ad8369ff9facf9c1aabe99a20c3ded2977ad86c69e0f54acd78fa6f572ed688625c8c63016826a10b3578e3c186ef2b39c4bf393ab5e399913a6
SSDEEP 192:JWVghWzT71ojDBQABJ6zTqnajxcRGlPMRd545negg:JW2hWwDBRJYTll7PedG5egg
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-file-l2-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-file-l2-1-0.dll
Size 11KB
SHA256 e04642684dc7376839c570bc11e9b46cae14420f1a85f7562fd2c4d656a22956
MD5 422adad24e8da100f85bf3de86b5f302
SHA1 7004b3ed8663b5890cd25e1a7899a766be912728
SHA512 e689ecb1a1cb1e7735cb6a961fd054d87bcad01acf76950b14a3bf4e08ddb7a8d31805c203374ee081a4ec13c40b25b3dc83b3895b9bfbd9c135673e98e6ee63
SSDEEP 192:wUWVghWtT71ojDBQABJUw2sTqnajMHxxBNT0662ON/:wUW2hW2DBRJ32sTlI663U/
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-handle-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-handle-l1-1-0.dll
Size 11KB
SHA256 d2926dcb85ab577be75ecab1fc8dcd062318f147e0a9262a3b807bb5acb62beb
MD5 c8d52cde743f4559e6eda1472ad44277
SHA1 09a19c5c5bc45dbf5391d882015b47cdad4b5631
SHA512 3a031f282303cf664c6ab04c1561598595ef776799005d8ac7ae091ffd140e4d1d1e23b9f6783618c2bae4dc4d1cf741fdb3f83390d6854de97d85af4c940b23
SSDEEP 192:3YOWVghWRT71ojDBQABJFMJGqnajsl/cxzLI0aK:PW2hWKDBRJFMJGlPJRD
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-heap-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-heap-l1-1-0.dll
Size 11KB
SHA256 eb02fc995bb92b214dd684e24c1060735f61ad4884ccb4aafa86c7c1de66d621
MD5 6e306654a55454e40889407e9334da0c
SHA1 0612894d9fbd8f92299541535f78db05fba3a78e
SHA512 f5a6980824cbfa82c47b20581658eb9fa8eeb2dbcf6bf9b148fe09099a3b131c2a4cc2a129135e708fb72f1cc43f083f93fc85a0e03209b75dfcc09106b977ac
SSDEEP 192:IGmS6l6WVghWFT71ojDBQABJHkqnajsl/cxzKI3k:0l6W2hWeDBRJHklPJ7k
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-interlocked-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-interlocked-l1-1-0.dll
Size 11KB
SHA256 76f092341fbef40d5f35f70bab55f2eeb3e70a9b60f46043b342ceab7f79cef1
MD5 8dcf3111501ed0a01855ebb328537bf7
SHA1 2134bca1fa16133632a1b3f28fc38edc15e933ac
SHA512 4cb596ca11b4941571f3b998c98707bdf45ad608c9f661e0f0ae528fdb797190c9bb22e58ff65a98e52e3e51396f4c8b22229eefe54f0a73eb49c79d07ce1604
SSDEEP 192:WvlYsFeWVghWQT71ojDBQABJr6PqnajLQvTP+8jP9Tz89M:WvlYsFeW2hWVDBRJr2lvQyURz8W
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-libraryloader-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-libraryloader-l1-1-0.dll
Size 11KB
SHA256 8784c4912a2f391d5f0c79b38f48baf88e98bf4fa61614ccb9232d9bd1e4ad54
MD5 b0537a9eccc0f909c0715fc93b473d8d
SHA1 79e9929c83f5f73314c52f26be4147a74aa80e23
SHA512 d68e50361566e8800afb5fae32c65c90d2ac7877f9a02f3e2e6af61ccd8f99b484c808a9ba62ec9e4727481798b3d3f4f74d19b16c6ed80536cf89351071bab6
SSDEEP 192:AbvuBL3BuWVghWcT71ojDBQABJAnTqnajMHxxBNT0662ONSadfh:AbvuBL3BuW2hWxDBRJAnTlI663U1dfh
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-localization-l1-2-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-localization-l1-2-0.dll
Size 13KB
SHA256 43b98f74476c86107c8317749f54a107e2955696e4f79d3d02683dd7034d1d52
MD5 602a35b140d9d68d7b3e488896158365
SHA1 f1ba615abb54ff786ddbc74dffffd56394bfc892
SHA512 4388947f90838cae8b5f8137c9ed2a099028b4341da8c574d536c6ad096bad0e217e105f0367750c70e3d3ca4857255b674955c71ecff0fda9c47a4b1951b8b6
SSDEEP 384:9OMw3zdp3bwjGjue9/0jCRrndbVW2hWaDBRJAlI663U7:9OMwBprwjGjue9/0jCRrndbzL1PZ66k7
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-memory-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-memory-l1-1-0.dll
Size 11KB
SHA256 5c950723ff3118801884df67b6a14543978263a2d2a0437d8c8b2fe8ef3925d4
MD5 98b1e6d052cee5ccbb7e5af795b9f48c
SHA1 357ef3f8011d7e7f1d4cb30beae58d24d6b05085
SHA512 31d961ada87eedfc4c1bb8938b0c4b44842153f4450f48a0c1dc12208f5c1ba62b076ef91a0dbd1c3f98d1e96517904b95e072002c50d2873c8638ddb25417d7
SSDEEP 192:TYaBWVghWpT71ojDBQABJa9uqnajsl/cxzSInL:5BW2hWSDBRJ8ulPJv
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-namedpipe-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-namedpipe-l1-1-0.dll
Size 11KB
SHA256 8979fe86afe23035caedd5df135786da2b28c095b69ce0179b6484fd680c9b91
MD5 a8f889870885c5784afd47f5e3d33eed
SHA1 494b86c51c8908d17e563c80da0d42350aaf1155
SHA512 bb18675a9b311e4c34806ec834886659a95207a4ec9b48b082f5fa0e05f016b9f946db29c7aa20662b4090c7f42a606f9f3a5df48d7ed20c5b404ccf91a1b7eb
SSDEEP 192:Vhkd6WVghWVT71ojDBQABJeSXqnajL1dHx3tKrSwk/o:UYW2hWuDBRJe2lXBtFwk/o
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-processenvironment-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-processenvironment-l1-1-0.dll
Size 12KB
SHA256 98ee724aa3f5a8ec4f3f8596be5aba5cd19b556f88ef9fbaff1569051a4d0dc1
MD5 56813b784a1f8cdabedcc10de6e84864
SHA1 b636ba140e1ba7de5e59932702e7b4e53025d651
SHA512 f11739be9ff624044035678cf39b91d28a53f1ac56342baf985a4328da4c64c81107d7e1787ee50efb382472e4d46bb21c520918b8831edc7f6b3db70befa068
SSDEEP 192:SkZjWVghWIT71ojDBQABJxoqqnajMHxxBNT0662ONMPe:jjW2hW9DBRJaqlI663U0e
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-processthreads-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-processthreads-l1-1-0.dll
Size 13KB
SHA256 50b3e4ffee430c1b45f0ca75959936608f756ae5eb0352e8f3f5f69c5adfaa20
MD5 2557484c75d4507688b68a64882e0022
SHA1 ff78c6d44f7474d98402f8e17cfce5d712c41b95
SHA512 e1c502e889664a46acaf0d8cab5d5082f46ad3f6f1a24ec702ec5174d077fff51cce7f80b13c5c22704937ce380ec3b14c088955d94eef1050d293c078869870
SSDEEP 192:ggIOk1JzX9cKSIxWVghWDT71ojDBQABJuRqnajMHxxBNT0662ON1A:wOk1JzNcKSIxW2hWADBRJuRlI663UK
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-processthreads-l1-1-1.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-processthreads-l1-1-1.dll
Size 11KB
SHA256 6be230837149dc2a8c7772142a674c3f90930a55da7f91d791942d8276d5440b
MD5 a07afa26ab56a8d3b8b16591a1962005
SHA1 2b6f3143487f747911ee20f039f1ffb1381858ac
SHA512 b77b277d10cf6b8d209679684ead55b4347caef3213acdccdee35b5d4fe0e3fc136daf057830512c5473c4653a8d66357927c4b7d204c07d7508f792299d7fe9
SSDEEP 192:xgxDfIeJWVghWrT71ojDBQABJsVhqnajMHxxBNT0662ON6wf:YDfIeJW2hW4DBRJsVhlI663Uj
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-profile-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-profile-l1-1-0.dll
Size 10KB
SHA256 04c0a5392a18a7555635cde23f9111ea4da550c309827b725a74bb6fd4f0cc64
MD5 258caf72fd7c60586b4bacfee6b37872
SHA1 4a473ff7cdf254336cf2ff3ddeb03bd047b35af5
SHA512 121a366f79ca1c9212d109d1f72a53b31f0bf0394b947949e2a0191629ace8ed107118e512bc8f4e9b43a84b6c936422372be2ff497f2cf13276217b15d079c5
SSDEEP 192:A49vgWVghW+T71ojDBQABJr99XqnajL1dHx3tKrSwsTTBY:A4eW2hWvDBRJTlXBtFws+
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-rtlsupport-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-rtlsupport-l1-1-0.dll
Size 10KB
SHA256 a5f4f23b01cac69058b7ec0e30b470f90bfc6d40de20e618c3045bf06e4a2cfd
MD5 cec2f0ac232cd07d217299386118692b
SHA1 7cd8218afc5ccf528bb2807168e11e5820c8bddd
SHA512 e06fc36de71caec6732d2553b5afcd6daf0b8eb4f1aea7d6f6c2ae00b3e3f4172c932458ebb6644e41dd26a48b66dbe935a40bcee68aa7cad4af155befe7019f
SSDEEP 192:P8vG1WVghWbT71ojDBQABJjHUeqnajsl/cxzOINqO1:CG1W2hWoDBRJVlPJYs
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-string-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-string-l1-1-0.dll
Size 11KB
SHA256 dcb3fc36c43a402b4b35644f1e7f6d6db31ef8d0a731c3b882e2cf3201a6714c
MD5 01cbaa0aafba1275cc23c29f139d399e
SHA1 5ca1434545c02c3f34bc9facf9b2eecc89ec3a24
SHA512 f5a3d05690bf409d2b8d7eb96ac4fde1e2d27add79945d6d9f2482ee61c6698ee0e167e9677a61a435d99175979e8651f34b92a6d057236254a0a2ba1a9cc79f
SSDEEP 192:LYWMyMvJWVghWST71ojDBQABJJf6Aqnajsl/cxzSI7:4yMvJW2hWDDBRJ9rlPJ3
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-synch-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-synch-l1-1-0.dll
Size 13KB
SHA256 9c1d190c85b9ccfb171d3db4ec363c97a3452bb365dd75dbda5ec9cad1a5d803
MD5 efbbbcef1514840d5ad9d8c084a0147e
SHA1 d046a440556ff7b9857963d86dd050ccd6b0533c
SHA512 fe78850b3acaa725f4a3f65fccc3c2644ef43eebe3c0083c0d4e9e967cfb230d966dee87dcd8a27f4dc452d7e72ea7efb24ab7b9dbcd58ab81f78d0d110829bc
SSDEEP 384:kdv3V0dfpkXc0vVafW2hWJDBRJKMJlvQyURz81j0:kdv3VqpkXc0vVaBI1PKCvU2u
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-synch-l1-2-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-synch-l1-2-0.dll
Size 11KB
SHA256 8b7c8fc657e0dab0f2506001ca4bb76e675ffd18a2b4d9c1e03b876e008a7a26
MD5 ed215daa7493bf93c5eadef178a261e0
SHA1 b20c8dc7ba00f98a326f5f4fd55329b72f8e5699
SHA512 3ed052eada11c3dc44f81f330bd2a2526170515bc6a90281872a93ee49f9add8c9ad36b9a9e9185e251d664c1694d06625e0148e113addc32e53d705d2655f03
SSDEEP 192:2dvttZ34WVghWHT71ojDBQABJHIqnajMHxxBNT0662ON3O:QtZ34W2hWUDBRJolI663U3O
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-sysinfo-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-sysinfo-l1-1-0.dll
Size 12KB
SHA256 fb7ffa16bfdf7392535b8e78a86db89ed9032f67a16b127a105582fab118cf2b
MD5 aed0b2511a396bb258a7bc7bb646b951
SHA1 151b08d20538990b894afef34de451708b5f334e
SHA512 dd7cdb5f401dce1566e331a3184ebd2c71f6d2dc4eb59f384bfb2daea8ce8a146d7449d989da2193abf30cd568e67bc932e28c8b93c7d6beceac0c7cb9ae1f5c
SSDEEP 192:cvj+UKIMFsWVghW2T71ojDBQABJEUDBnqqnajsl/cxzTwIF:C+UhW2hW3DBRJ7DclPJX
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-timezone-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-timezone-l1-1-0.dll
Size 11KB
SHA256 ded52bac23633a03341969c5b98b0d94d24fa3284c1ddd0c489e453b39cec659
MD5 a9c7db516186c8e367fed757e238c61a
SHA1 1318d6496e7146e773aca85be6d0e9b87a09e284
SHA512 6aad003287afe86abccf34f6b15338c0c7380f4837805d919064a26380d2f3f7698515f927c148e618c12f0943d3621184bebc70a8b07eed64ad88689fbcc5cb
SSDEEP 192:R6awWVghW0T71ojDBQABJO8qnaj9RlS6VqMxJc:mW2hWZDBRJO8lBRAkqmJc
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-core-util-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-core-util-l1-1-0.dll
Size 11KB
SHA256 21c57c8ae9407cedb50bcebf7f844a5933d274676f3194a87997672c7177cadb
MD5 7294cef433dd8afa73982ea96dbd6f6a
SHA1 c73b123197e6ad47b13febeafa912fdad566c8ee
SHA512 24048bd06f0a3ce593eadab4fee4e26aa339faba52ae52dd36f0c66ee5d7c166f68fff8ff5dbfffde26588351ca4b6de033528dd4b0a15b0afe3ddcaf13b8661
SSDEEP 192:6GMWVghWST71ojDBQABJXXqnajL1dHx3tKrSw9KU:UW2hWDDBRJHlXBtFw9KU
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-crt-conio-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-crt-conio-l1-1-0.dll
Size 12KB
SHA256 7b5d400a141f363f553f61fa11e94a6851d1eeb510cb7988012862ed13208c97
MD5 6e044455d104db0a31983ba722394d00
SHA1 aec808b8c70326506b7a07241b6aac817ca8bfa6
SHA512 eb092e48f9bc4edac67ba5cc11199ad06f313a37df1b29053e105843519a59ada48915a5448d74d464cd1b05e0750c0f4339e6aed6390b31acbeff2d84f9b166
SSDEEP 192:BGvj8DWVghWeT71ojDBQABJeWdXXqnajL1dHx3tKrSwhbae:sjcW2hWPDBRJeWdHlXBtFw9x
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-crt-convert-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-crt-convert-l1-1-0.dll
Size 15KB
SHA256 060636cfc58587b4344a6d0ff4f44dd77266f2bbdb877cb50cb1b44a7e3969bc
MD5 c6385b316bb04ca36d76b077eeb9a61e
SHA1 fc376f68798fecd41fb1c936eed1bce3f2ee6bef
SHA512 bddf0f34bedb17ecf1d270a0613f27d174ae04f920192d7d1af6c15245175318b29691e748c36e2ce0a3027495b2f5a0bb688ae16095fad9dcd8c283b6d1b1d4
SSDEEP 192:6YNpdkKBcyNWVghWkT71ojDBQABJViqnajMHxxBNT0662ONfC:NuyNW2hWJDBRJwlI663U6
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-crt-environment-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-crt-environment-l1-1-0.dll
Size 11KB
SHA256 369cc4d3bb05f4160a0bc9683feb1df2e94d02f061e4b23d53c3a6e2230cd5e4
MD5 311e582d5d3d8421e883c4a8248eacc8
SHA1 c99e61d1446fce0f883a2aad261af22d77953a59
SHA512 050ed1310e667e6bb22bb7952794745df1eee0c78f18240cc2217e748a11213d094b48153964c3da0ad8141da1709ece637315633396c77c035bb0565fa981b4
SSDEEP 192:rWVghWgT71ojDBQABJHqnajsl/cxztmIiqZ:rW2hWlDBRJHlPJtCG
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-crt-filesystem-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-crt-filesystem-l1-1-0.dll
Size 13KB
SHA256 9f3eb90963916194f167e98e049707b14fa84a3f11cb8cc7b940d95956601700
MD5 10731d3320c12abb62d3866d7e728cce
SHA1 df4e131c825d1ca5cd14e00e5c04785d6ca508f7
SHA512 7eeef98682872fd95a38a03435546349c8488607e59870086b486b807e8b53893603175d9ad0f3b80c1924381daca8d14868a6079988a944b005783b4e2e358e
SSDEEP 192:BhOW7q6nWlC0i5C1WVghW1T71ojDBQABJHvqnajMHxxBNT0662ON7:6gq6nWm5C1W2hWODBRJPlI663U7
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-crt-heap-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-crt-heap-l1-1-0.dll
Size 12KB
SHA256 9382fc8d5cbcc23c5d05e6f48f4188af3f96efbbdc5a7ec05b37e252440ecfc1
MD5 cf5f256e8cd76ba85e6c3047f078814a
SHA1 b7cde77313ceaae76a46c1111b33b3d8f47c4214
SHA512 856eff4fff1d11a725af9c3e5ceac6d02a89297a16e97edec171839aa12c468fc37d60ec5df06d507cee695f71b7fbd4bc0ba51b7934d886e66a43b249e62da5
SSDEEP 192:S79Y17aFBRAWVghWuT71ojDBQABJzWAkqnajsl/cxz2kI1:ltW2hWfDBRJTklPJa
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-crt-locale-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-crt-locale-l1-1-0.dll
Size 11KB
SHA256 43c9ea4ddecf2f34852559cf0b40b5261e6701d3743ab219f48d43a312707ad9
MD5 60ffdc3ef20b127e3fd14a0719328c34
SHA1 b510833350328f79a79fa464ea9d5e9455643659
SHA512 caef6ee08c9f6fabecef1f0be37ab34e2d4dc22f15a775b2f0dcacda1f0fcdf2259399e6fbab85f0f00e8e4b03d77fe88b85b901a9ba2f775a50f2da724da26e
SSDEEP 192:mWVghWgT71ojDBQABJQkJ8LqnajMHxxBNT0662ONWwD:mW2hWlDBRJolI663UWk
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-crt-math-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-crt-math-l1-1-0.dll
Size 21KB
SHA256 8673dd898f899de831fc3052c8b8254b7b85ee7f2b9b6c422736668689c9b14f
MD5 78dfcb76dc8b42411dbc682f78f5c6eb
SHA1 e50f6719fee44c70518cf8442737a688b5f45e62
SHA512 968bb3bc952f4057f74c9c8825fcc2db34b9c56166ee39db3bab3d4ecf51fb65af250a8a65340274a1a0c0eed73b6c8962df5d2fce586c1ef4e19706edd5e6e1
SSDEEP 384:h47isbM4Oe5grykfIgTmLSW2hWrDBRJMc+lBRAkru:O1Mq5grxfInqO1PMccRA9
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-crt-multibyte-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-crt-multibyte-l1-1-0.dll
Size 19KB
SHA256 e2c9693500cc7ce5cba81f81a68abf2ca783e187cfbaa9b52dd6c157c940a854
MD5 a11597ab7e11d673c8f0b9082f16abb6
SHA1 09efc61cea01812db305cfa8b8ff95b4acad3b1d
SHA512 3fd3b0ebed8e97bf4c6dfa4ff2ce3c9b5e82905c2d8d674da64f4e3a9b0362c8b35f10895445d34b008b00c77b7d5ea079416d34b10ccce99fe6c7da6d17d72c
SSDEEP 384:ny+Kr6aLPmIHJI6/CpG3t2G3t4odXLhW2hWFDBRJryolBRAkg:nZKrZPmIHJI6Ng1PryWRA3
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-crt-private-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-crt-private-l1-1-0.dll
Size 64KB
SHA256 722edc4fcf0cedc233f56227848b25318e2c211d5b3a4944fc294551f80d2652
MD5 8f2b23d0d913fca49fb5b9a715a73519
SHA1 6adde370204c8fde3979f707fa6306f831dea8ec
SHA512 bc8e7b572fbb9a5cc5110617b1bb525fb41f0f435dfff7a332571785d50dfd43449fbacdd3c2ffe64539a26fbd33147f1b219f167b55eb7825249eb3237188da
SSDEEP 1536:jt2b2De5c4bFX2Jy2cvxXWpD9d3334BkZnkPgZPgA:jw2De5c4bFX2Jy2cvxXWpD9d3334BkZZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-crt-process-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-crt-process-l1-1-0.dll
Size 12KB
SHA256 253caf243f9fd21f45c052384ed08f4c10ed0da0dc3ac55aa1c9e4249e1103d9
MD5 48e6bb6df76fc8f009b066f588b13c1f
SHA1 1db7352875992737effbc487252ccfa09ac3dc53
SHA512 0c4ad3cfd90515c27efdb7e9fac2082e5a33a006f38c5be526e7a85d3046b28424c10d59ad88bda72ec07445231dffda47326de2451df65a2cddec791bf83623
SSDEEP 192:iYTRQqjd7NWVghWeT71ojDBQABJUCqnaj9RlS6VO:pKcW2hWPDBRJNlBRAkO
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-crt-runtime-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-crt-runtime-l1-1-0.dll
Size 15KB
SHA256 8edc95578b8c9ca93a65907e428fa2b57fef8370b902912689332bc61094904c
MD5 8bd7a27e6ca969d3eb46086d411ce05d
SHA1 3bbf6f55853b1487debca58d7cb5c877d0abd517
SHA512 fee8359398efe6a995a214d4e47de43aba12d33bb9cb1de18659d332d94ef83a4a77618b6caa9f455b0c6da4c10ab459209d483b9e778d9b522771ca692ca454
SSDEEP 192:wsYH0CjfhrpIhhf4AN5/jijWVghWzT71ojDBQABJ/ht4qnajsl/cxzsIL9S:wLb7hrKIW2hWwDBRJ/halPJbS
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-crt-stdio-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-crt-stdio-l1-1-0.dll
Size 17KB
SHA256 3a03d727d291be57057587227273af410eda935438d8a0a165ec63ae772809af
MD5 f681a45c47ebb2c56c1465677ec33ff3
SHA1 06bf7798c51325cf1806e14dea56ff98b05b7846
SHA512 eeb05f1af7e1c714c658e9aa06e8c6dbeeb5f2e8dcf3fdb7b9b408018e41402d83893472114e0cf6d3a9a3bf54ec45c4f7a4840a09570d190277aa3514681ab8
SSDEEP 192:SGxFbNpuWYFxEpahjWVghWIDT71ojDBQABJpqnajMHxxBNT0662ON/s9:zUFVhjW2hWzDBRJplI663U09
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-crt-string-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-crt-string-l1-1-0.dll
Size 17KB
SHA256 82d26998b4b3c26dbc1c1fff9d6106109a081205081d3c0669e59d20d918bc5a
MD5 00446e48d60abf044acc72b46d5c3afb
SHA1 0ccc0c5034ac063e1d4af851b0de1f4ea99aff97
SHA512 69114f0efb3c853bffb55c15e5ad1b7919057a676056d57634a6a39916e232cde2dcdc49ea0f9751ddea6550ffa58f84b1f8918b3c9fd7e88c8b8f7eb4afeaf2
SSDEEP 384:niFMx0C5yguNvZ5VQgx3SbwA7yMVIkFGl/W2hWwDBRJWlXBtFw3r:n6S5yguNvZ5VQgx3SbwA71IkF+51Psyb
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-crt-time-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-crt-time-l1-1-0.dll
Size 13KB
SHA256 b0b8fc7de3641c3f23d30a4792c8584db33db6133ee29135c70bb504e80e4a2c
MD5 376b4a7a02f20ed3aede05039ec3daf0
SHA1 c9149b37f85cfc724bedc0ecd543d95280055de1
SHA512 ff7fba7cd8c9b55c1c87104d7d9074ef0eed524b02480ecf2c80e5cd489c568e1ed63bc62699a03272cab3dcbf20e6437e1f47ce112bcb3336d27ed2790430c5
SSDEEP 192:W7hamDSWVghWIT71ojDBQABJTwqnajMHxxBNT0662ONX9:pzW2hW9DBRJTwlI663UX9
MD5 SHA1 SHA512 SSDEEP

Submit Download

api-ms-win-crt-utility-l1-1-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\api-ms-win-crt-utility-l1-1-0.dll
Size 11KB
SHA256 e36763df57cd26ec2b4d52e27de51a4ca6f18caf86cbac8307bf4817705f9a0e
MD5 6376bf5bac3f0208f0a5d11415ccd444
SHA1 c3fe96e51c3f3e622dcedd2ddf8d23f9442361b8
SHA512 9614e423c850bdb584f18555825214d42106966b1ee71e75ba7407591aa5de407b43909ce972e1923df82e9a0e953597fe19646296962194ebeb1579493d91c2
SSDEEP 192:4Y9fHQduPWVghWy1T71ojDBQABJEGN1qnaj9RlS6VzG:1f5W2hWZDBRJEG1lBRAky
MD5 SHA1 SHA512 SSDEEP

Submit Download

apng32.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\apng32.dll
Size 570KB
SHA256 0d5d934d541754810a90a984730451c6ea060429d86f7eba388d602a9afe7707
MD5 f24096816476ea797435acd2a8b0b4c7
SHA1 a2a1f1e3fc5dcd119cde5919fd046dfcd0638330
SHA512 b1dc96124b2f56e495ac1694c945465c4ede5e92d81bde60e3f31bf55e21837945f4f73f741f1ab8f13e509ae7ea092a1b40055a61c9ca41b4c05f0dce09a97a
SSDEEP 6144:sbvNsu8kIWOEBqcQdALlUTCvzDYh4PUzrFmt5sSpFUyz3yJSqaOkEwUOCGn:sb1supDBPQUlU2v/Y6PjsSwyziJXNIn
MD5 SHA1 SHA512 SSDEEP

Submit Download

brotlicommon.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\brotlicommon.dll
Size 132KB
SHA256 441039fe954cfb6e3545aeca5d5750b7e3322eb9efc633508cca1dbefb26b24b
MD5 0e868ec6a67e491d43ca20ed71c8345d
SHA1 b45397b8bafa891a04476f7ffa55fb5bba0e57b9
SHA512 45e6588671c65ef5eb39abd5f6db790bf1bc8414bfa9073cc9cbbd2bdcd6b9f82a4c6ba47a059521836c34c0504b86b6aa51a19a12317084459d6a6c544829b0
SSDEEP 3072:w4lzbWhNbNL8DXGvVh73pbi0tdpvGJaoZB7PxBl:w4AhdNorGvHdbi09GJL
MD5 SHA1 SHA512 SSDEEP

Submit Download

brotlidec.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\brotlidec.dll
Size 42KB
SHA256 d9fce48811df001c7f8fe60361f1ea270fc37df7aa73a06a853fd102317cf49d
MD5 1616310c08ec85ab5f0437fbf82faf84
SHA1 c65cb7266cd21f45728097009147596ca08c0a73
SHA512 ddb8a547367cb40d29a5b3ae54edeb157a707d21993b4cbf5f83617d50795fe8c5235e1afe850515f5b3ddd286c5bd704c7a2fec14f5eb6998d4719e79bf9a85
SSDEEP 768:VEfW1PIKOYvWpvnuW8gu2WavpunWGf0SAcDtkWAcazQxARbYs3XxxuF:CQwDYvUvnuQ/hzS7JIBx
MD5 SHA1 SHA512 SSDEEP

Submit Download

bz2.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\bz2.dll
Size 63KB
SHA256 f004cd4113a8d832fc4a57f0e28a9001c2fddf67b3544590dd36d0f60d0cef8c
MD5 37b38a8e9fbc70f3ed962e5720795a04
SHA1 171692daf0a136154edde6e22c791d238ae8c1d0
SHA512 9d34222337bf50122c613f2132346b7dca0df51990921ff0c7372463f0be69a441eab18122c02e1a94c8fcaa71b533dd477282d74dbc769fb490f4d46aba2607
SSDEEP 768:4VlrJkgjro3k2+aAkYxKC8wqMvd2lFZMIeWm+priJ8rBZMPebN23ACQ:qlOaEBk8ZMvdqsIrm+xqc8eJ8
MD5 SHA1 SHA512 SSDEEP

Submit Download

cpuid.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\cpuid.dll
Size 65KB
SHA256 bcfaf8b17923b18091b47dae3db34967ff773c970cb116e00782acf5bb1b33ec
MD5 66cc9189d93b34fbc90d199c9b90f9d7
SHA1 bc7128ce3af3ec90b695feb63976f90e6c94010e
SHA512 17b70865c7c17beefd77da2acbaf16f45537f6b74dd0881858444cc868eb47cb6390e48ae650de00828a392a78f1a2547d5c189e49460ba749586b6e58161b9d
SSDEEP 1536:xncDnaNWHiBZtY/1P7ikhPnFTCU3hcG8G0D3Q69e1D:5cDaNWCBXWhPFv3cQj1D
MD5 SHA1 SHA512 SSDEEP

Submit Download

deco_32.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\deco_32.dll
Size 222KB
SHA256 9ce2cd070187852f1ab624c77f1a21b714e43db13366625089a00b3d97f10345
MD5 9932706e9fc0d6fd80d0158bc975ea10
SHA1 d0aeff5c8b43deb9d35264f10b8eb87642e2c726
SHA512 77a54976f73d394ffe382b92190296382646ac137ff9e12b5567d3bc2265c2ba242b7d6c737103ebdf779610428f49b920a60bf43dc3ae92b3043603646af6a3
SSDEEP 3072:N7yvgFrHEEGFhRfjBSILMyK/xa5d7PEF5YBAfb/d/WZwnlZz0blDvgvmvmv4ETa4:YgFriBSIk4zPEP/fb/dlfzIA6X7Lg
MD5 SHA1 SHA512 SSDEEP

Submit Download

epntwrpr.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\epntwrpr.dll
Size 85KB
SHA256 ea45a85c9329b2f29cd1c9451f555e235417afd020bad9ed09b38e430b232b77
MD5 f2b3583cd1db274cf3fa0b8840530218
SHA1 bf5f9e12140299479ac2b15b9a72b748324cdc6d
SHA512 7c49f7179c5036a101af7a0ad71102b9e85039b0c68278e0f14322feb5c9a921501dea9a003bacc87c95c48bdec6035f288e850247359c45e3bb393ae38683a4
SSDEEP 1536:So31q1GUZBCL4TUsU1QC+JpHH50EP1x2sjHYix3:131qAyCLOdJpn50WmG4O
MD5 SHA1 SHA512 SSDEEP

Submit Download

eztwain3.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\eztwain3.dll
Size 955KB
SHA256 4f8e325f92ec8cb31b895b963042332e057a639d1e16b93f0333db0bc9d71dfd
MD5 01f52ce786cb11ea2470ec6d77f29b2d
SHA1 dc44c0736feb317d3008c7ad52fb2643e2bddbec
SHA512 f08e230db7ce26a6462d6a32c282560c5cec01dbb749a6ad35f258fd3d5477062b114fbddc91a341515e36fd20fec057595779faa1e3e6e19ac988cbfacb6665
SSDEEP 12288:Kw8YaabOALYgMEarCzh69W1VAixslnYpK0dsF0YjnFjMTJ+XjQmlnH:KwTpbOAk8arCz1VAHYpK0dsF0WuEnH
MD5 SHA1 SHA512 SSDEEP

Submit Download

fpxacc.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\fpxacc.dll
Size 263KB
SHA256 37092ad75a8c98198c4a2a1876856884b200a06167cd76c3e9dd117af97e3aa1
MD5 dc563514fc7f69b9a956b685a163a6c7
SHA1 525f2fcafc2beb17966dc937c7b1a773f5bd3034
SHA512 ac6ce021ff20cfd33b4e450cb4ac4572411950bf3dab0f325c084420d884ae6fdf88400ed5525c0014c684e8ae96f51c4711f1b2d02229c31ebf3ed416f2067b
SSDEEP 6144:gcwbxn1RwSstciKZXx8c3azL4pKXq7pw:AzstciKZX+c3aQpV7p
MD5 SHA1 SHA512 SSDEEP

Submit Download

freetype.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\freetype.dll
Size 554KB
SHA256 ac40311bc17fc9eaf16f4aaf08c07d8a256e07aa4af081c9db9b552b56119e6e
MD5 839c270a8ba5444eebddd293c61e6333
SHA1 0fcfab6030a91c722aebea4bfd1bcbe2138c71f9
SHA512 d34c0f4fcd77c70fa131af3ca19ed82a1d991f599ef8bf69295be25618a0c94af859a67cd80d4893ce105559a432202281ea2ee67af352878c69f8438a1e48cd
SSDEEP 12288:AD+p1LHu3FK0VSttZOgcI42W6RipA8ZZZH4NM/BazMfEWm:ADF4ttcjI4GRJMLH4a5AZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

gcsbmp32.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gcsbmp32.dll
Size 201KB
SHA256 289f87e244f0035faf5ac03e46bdc1f585aed94e915183424b4877d01d2e3429
MD5 6107ad83f5252e92924d8055673aa735
SHA1 821758f468102b5972fe8bb8df93f24038439434
SHA512 2c778b791532e87dff18d935346f57bce2e23d244f3fda06fd0c6cabdc890a2a5f7aa8185bbf9d9e296f5f7326470f47c4a0854b777a77155d0d8b7970c0bd59
SSDEEP 1536:6OMOdvRaWA+AQfV0FQBpoGkGlxrQcgRtV9O3OpMSezaWu4UKEm+zPjh34sjHYixQ:6fOdvRaB+ZSFQBNxAVHpHWAruG4vJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

gcsgif32.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gcsgif32.dll
Size 203KB
SHA256 15b9106953681a2a7e3be6ccaa632267427ff8dec94be1917bce305b7e0540d5
MD5 a58907c477313fb51bdb32932460197c
SHA1 3f485c414f22c87d68352d441105b141f15720bb
SHA512 b9393f8f41dc9bbdc17a7f71b3d19a9cbf67766656bdd44bde106a53e15b4aee9cf47a08437da93fb5a78758fe6a527985b4f2c7cf37ccdbd2d7b5585a50b0bb
SSDEEP 1536:hhGoI1YGLU6RlgOzfOyFEcJOFSGW8xRQcgRtV9O3OpMSezaWe6X8m+zPjh37sjH7:d6fgozFEFx6VHpHWwW8VG4I
MD5 SHA1 SHA512 SSDEEP

Submit Download

gcsjpg32.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gcsjpg32.dll
Size 341KB
SHA256 0be2a13e61c2c5a32a41662bc3fc702d220260667b6a995f848781b4ea77928c
MD5 983374ec1ae996798f27c00fe7bb0e2d
SHA1 bc535a09d4931a78b69237d8496db200e6fa81a0
SHA512 26502f9186b8b4a411726b118fe7fa48863ae1cd4c0475dc3d5c25eee7af1916febb0b92bd5bf300e3892873a5e3239fc9fb487b73fb42999b46f47ea0ba837f
SSDEEP 6144:QIUgRw0aKFWcsB3PkplgauF4e1k4cOkEw3ykGh:RUgRBWtkp+arFh6h
MD5 SHA1 SHA512 SSDEEP

Submit Download

gcspcx32.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gcspcx32.dll
Size 200KB
SHA256 458c53ceeea5aaf2c01a56b36d7feeef061200105e20312491acf14d9e9c3de3
MD5 3a7c558c612c1fac418fdd96a606055c
SHA1 f4ac1552e4493694e666bd6be7b357751c81312d
SHA512 fcc5fd1e0b35fb509fb884a4812208e37762af20b8643f79c754a183f34809a3fb0df9034cbf0c8cea430e694a4191503edcd3fa58acc2b3d773b79af5200026
SSDEEP 1536:GIPccrfXFAjIdMGvx4QcgRtV9O3OpMSezaWeE8+zPjh3rsjHYixU1:zcmvFAuxbVHpHWwE7G4z
MD5 SHA1 SHA512 SSDEEP

Submit Download

gcspng32.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gcspng32.dll
Size 440KB
SHA256 4a3481818f15287c6c17d45ebccb9460e9b9385bbec76efba2f7f30ef74f1c9b
MD5 d7847759b9a8516d60274c9ec9a70aed
SHA1 073ff2a5bf1d98d94ed8fed8425af90bfb14b0cf
SHA512 5f32ad14b45dbc96033545b4f075a31dab9534ca961f0e833f9ee8c326994251c57865cadd6c59be168de273394a764de3e5831d826d14fb555dd00ed994c94f
SSDEEP 6144:BP1zgFa/MqO1CHiuenCy9nAdrXa4QF8Bc2IMCPGH:BPgN1YiueCyK1Xa4ZBOwH
MD5 SHA1 SHA512 SSDEEP

Submit Download

gcstga32.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gcstga32.dll
Size 201KB
SHA256 2104851ea84e9a4ce66b3403103b9f102e77b68bbe8e04ade4e585fda6ed768a
MD5 d2c9c2a0a4315dee824fb2c605c56c45
SHA1 647f262fda6916d63f8dee1fb29431043c99df47
SHA512 0dc236983c3d48696052d9922af7dc518bba558b1ef4fac644b9207a61a7900f3472b859ac788784004e6023392bc0c5ac79360661f3280846cb21407346a2c7
SSDEEP 1536:xCuhn9f8FQZh4v9xHhG4xn/QcgRtV9O3OpMSezaWOom+zPjh3gsjHYixyA:x7h9EFQcFVx8VHpHWgomG4vA
MD5 SHA1 SHA512 SSDEEP

Submit Download

gdiplus.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gdiplus.dll
Size 1.6MB
SHA256 8199452af9e5289c126d0ff9d99f2302c52861ec49008702b7f95d64d316383c
MD5 4d328694bb516e46d2d184950d94433f
SHA1 9b31771a8c201b74c846da1f1a254866dc2f912d
SHA512 dadf21cb702e309ba0f271e13a9c3e9d4bdb5cdd79699d331242c988c591716c265c11fb5a35a8b0d5892861d1c6d519ace228f2d4fcf0d3e604e33be4fa7cd2
SSDEEP 24576:GSWwWpX3g7mgl074FUSIgi3g4bMG0x15IMQMLklslaswMeEd5DoQbcnO5c/K:GhwltF7C3/ouMvoslp3on
MD5 SHA1 SHA512 SSDEEP

Submit Download

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gp
Size 1.3MB
SHA256 ecd3c98b032e2df4bc73096f6883460c652869f451663fd2848186345c9f3db2
MD5 6ac7a7c1dc39c1a7030ced9d5b444427
SHA1 d12b9ff52220f76955493e948a0d188b59412e3c
SHA512 ed9e62c0e84f1a753e680c280d7e96ef1d971bc461efd1b0833ea08c011cebf7455aaededf8e21b7b6c848810132852d0654b68c824f8538278e2109542eb945
SSDEEP 12288:oXGBUXejyaQyvGg/98dX6SukVRmjOL0W7g9W7bWM:eOK2yajFeX6SDVnAWkQbWM
MD5 SHA1 SHA512 SSDEEP

Submit Download

gumbo.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gumbo.dll
Size 477KB
SHA256 694ebe2fd5a5f71d6abd8d0c758128aff8238247d11d1095c2f955c0b784ad90
MD5 c493ffa23b36b8d56c647d55cdafb622
SHA1 a6fb3c57e5bc7c6bf4a1b0b22345db7424261f7e
SHA512 34e8536dd04825cb65a0ba15d5484a519da3107311a87319d700a7a662362429f514494f505ded6d5b4c7c4b5941865a241d9a171ff5da833dae68e433600d7b
SSDEEP 12288:gHeuAUpaEHejs0YEDlzuhDlPHSViJJelfxi:4pAUp02EmvCiJQ9xi
MD5 SHA1 SHA512 SSDEEP

Submit Download

gumbo.txt

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gumbo.txt
Size 11KB
SHA256 17fa39b5f12225602d967c908f39d3598be207d652bda3ca9deb6a426e2b909d
MD5 4e6e3a246bc1ccf52fa84868df1d1b0a
SHA1 cbc61fce2fd732b6ebb98642bca199ace8652d26
SHA512 81a070239cb0a6ee7d22f2611886411a6d9fc98ea09ca417e303043e955d97b881c80735b07924c42292e6c35d142fadb454db94d5bf3f871d7dcfc3620ef396
SSDEEP 192:6f9qG4QSAVOSbwF1wOFXuFJyQtxmG3ep/7rlzKfHbxc+Xq0rhlkT8SHfH2:UOu9b01DY/rGBt+dc+aclkT8SH+
MD5 SHA1 SHA512 SSDEEP

Submit Download

gwsaverlib.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gwsaverlib.dll
Size 212KB
SHA256 11cdb6f026ccfba11a7f30ba987befa3c32f447dbdf3100cd3b41048362ab3a5
MD5 7389e64d85e6864d96e9bc11df328f18
SHA1 cd8bb72f43135a22676c9848802ef414e6c8df7e
SHA512 7b2b811d4a32d312332a925e10fa6a5a2a5e43655f1aba93191da8c416dc76031282cdfcab6af6f861ff0dbb4ad71bdb7721c091b15741db2927df7bcab08b82
SSDEEP 3072:1z3U+gRomXbNMj14GRuhUJOghk1qbEgf:1z3U+gRoYuj1Pu2JOJqb
MD5 SHA1 SHA512 SSDEEP

Submit Download

gwsfiltr.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gwsfiltr.dll
Size 8.8MB
SHA256 76a4ad74a53bef71afa0f7be6c055287a11418aa117c2386881d424fd52d3922
MD5 735b7766552aef741b7d76219dfc4e78
SHA1 fed6aba5db69dc0c13d8aafd8e751343eb0e5a2d
SHA512 e3ee40c8377955efd280af9449385b0dab5e3faf2d1c71f1984a5242fd5f320b46389aed5f1d1c022a52836b04c978f9e8934ad7bd2a4d802793a6596cad47c1
SSDEEP 49152:Epad8joZhqpF/xuCBpSRYFk1y3EzIJvX8xILY6pDAyJtkeGvRH:Ewd2K26CBpSuFktIvLYLyJWeGvRH
MD5 SHA1 SHA512 SSDEEP

Submit Download

gwshdp.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gwshdp.dll
Size 277KB
SHA256 5e920fbcc14ac82ec5abf2ca63523fa17f03a261dc09ee6b1976b291c2ab0097
MD5 e1a773c2ceec1d3798be988269b36806
SHA1 06906aee0ddba30e560e4b60e140e0c098519bb2
SHA512 f1468b9b12060a5b5143331cf16d7e30b1c042b621133818cd337d621a8bcc25306dd4c7e97af9ed32573f0da253d6e2d0b88bb75332abf57ae80c75c9055058
SSDEEP 6144:Y4Z8cXNl9VAk+VAVDFe2FBEXOLPM+XJIwKLGyTr7sNpxxQyTuqJmzXG2:YOXNvVAk+VAVpjBEXOLU+XJIwgl7sNfU
MD5 SHA1 SHA512 SSDEEP

Submit Download

gwsjpg.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gwsjpg.dll
Size 529KB
SHA256 026b0032a14ea867f640508fa4959e37215af83458d579c469c6f99b7d1b3522
MD5 eac122fbb0d32a242ecc412c125314dc
SHA1 7f5a1cb200270e938ce88bb9fd0752af1a222967
SHA512 3df8c47e5f14c9318b8524465fc3e0eeb5ca17bb93093b27616ef871c33a6e55a57721aae45bd40986f3f09fc92daa85a773a8426ea4b13f45bad47dc26b70d7
SSDEEP 3072:u+SlDD9JQK2QNJVPEjOKObhcJiteA++mbqI+Az6cuRRnrmXSihi5vCAeKRO3Yp05:rmV6KuGR75cZiOaLFM7LMRbGF
MD5 SHA1 SHA512 SSDEEP

Submit Download

gwspng.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gwspng.dll
Size 309KB
SHA256 70ab3b3b2f232f2a20e08feadb9ae5286dd10e71f62321f371e5bb532e0b0f38
MD5 a32fe44873d30c83c70f8f811d89dfd7
SHA1 a1879a07bdc6b068fbffb27ed2dbfce1cfeac7a0
SHA512 98739f4a890a0b4d3987717047e9b45dcb8919da74781966bddfdbd6e9efe58bbe9ebd7d5fb5ed4fe3ca4edfa1cc462b65f64a00760ab59257f26ae717d13ede
SSDEEP 6144:kxP5zJFxDIxyUq9qfQC7d3WtWueFZvKm46G5:cPAYU8qfl7I0uHm475
MD5 SHA1 SHA512 SSDEEP

Submit Download

gwspro.exe

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gwspro.exe
Size 21.8MB
SHA256 af81ae71376bb3abc9eb1a9f59c76224a43b2a68aceb6e5ac3d93f05fc259715
MD5 8dc6f7a135d4a70ff1ef4b25dad052ec
SHA1 7c090065de1090fa92ff01f06739fbca04e6936d
SHA512 f6651693e448861a3a6aee89e5c62fa4dc23305ed9b967d388bcad70cd4d2d3a5b8a69166f69577dde4e165f629805d9d3f97c45a9e26f1f4ffaa1a3c2cf0868
SSDEEP 393216:bQA2agCDj7jo8lNqi3PdIMQbscP8S0rt3cuy6YM+Qndc39vi60LH//8oN:bHbXsr9QcILH//8oN
MD5 SHA1 SHA512 SSDEEP

Submit Download

gwspro.tip

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gwspro.tip
Size 13KB
SHA256 3cb2a5c6ccba3bc464a9ef69110301f5e3dcb1c34c79a74071874d6aa9388134
MD5 aa580378b4aa99ab96d9277959f96c11
SHA1 259e60bb48ac4e7d182cecd01c462b419e1a2a42
SHA512 eb92bc1e57a38bac86fccf72718bb03f316bfdc0bf1387bf1a457b5492594680f52f4ae5ee7564343d0f57dce13360f720fe36f3a7ee560ceb24021fa74a6343
SSDEEP 192:642TzR684Q+O7OE9JElix9RBYe0VMOhMWnbfRTlYkvIQByPiAPl9sk0jJ:WzX4TO7XPJ9rYe0zukvp8PiAPl9mjJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

gwsrrsc.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gwsrrsc.dll
Size 4.1MB
SHA256 9d1f3f68b7980066ea033de45cc07624fa55cf249b88f52fd6a0df1b7b6809d6
MD5 96f8c087e3d9b29b206ab62aa7d7226e
SHA1 fe6d635d593a8d69f1cde64a3f45a2088c2567ca
SHA512 d759250fc53a7631a504e53264396236ad591e5e3fe62b36dedd77450512fa5b7a3e87a65c17673a33e4ef12f9672c8dce3957d94894678e832cbc59f95e3dea
SSDEEP 98304:fmw3Ht9Shz+ZLS0f/lrloZHX5ls+WvSaosfmDd:fm+t8hQG0VCZ3HspSazE
MD5 SHA1 SHA512 SSDEEP

Submit Download

gwswlppr.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gwswlppr.dll
Size 50KB
SHA256 f7843283a75360e044054c95722acc006ccd64f8efa728a77a2558e25040f016
MD5 796a98ef59669806095657cd78f980d2
SHA1 086474723e522e378c3cc7697cb032272e57d22c
SHA512 cddea7c64ca5aad748a551257063cc968fd9e5cdb8d027777064cbbf249676ec2c49a0ae074e25418bb20bdb9211fe9eda134fad660867c40f4b610d0842ebd8
SSDEEP 768:wUvtvliMf24S4F+91HvRU68J01r6oM5L2OnsjHYiRPPz:nv1u4SV1Hv0srU5L2osjHYixb
MD5 SHA1 SHA512 SSDEEP

Submit Download

gwszip.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\gwszip.dll
Size 223KB
SHA256 2ea236b7434f0d570e5d2f480ffe53fc2dda34a4963ebe2a3ba62cb547a6e98f
MD5 6a6097d8afca60c9a260b080f33b9e09
SHA1 cb9b800c40a40d3e519ef306becc07ce4fee784f
SHA512 df8b72ddd52b0ead992c272671c71329f8de4ab3764ab59c6e8728a9a258b2037d5d858ec01c4f9493102592922a6e630ae81a66cb07f417369158513883d887
SSDEEP 6144:kdc0WxbYRkCamOD2eqkeQGUgbEoq4cZYTBuEaEOBG7:keHL9oFTIE1OU7
MD5 SHA1 SHA512 SSDEEP

Submit Download

imatch.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\imatch.dll
Size 353KB
SHA256 0e5e4c2ac303baec9c6a5f20d9044ef84c064e48e25ce13cc1c9fb5ac1507b8a
MD5 14b533e180b8c4a1954e09e4f56f0b05
SHA1 51c9da4f81b83319c2efeb4d08ad8971b732f33d
SHA512 7c6632eb8c01794af712b1232b32c8ea797ffd29196ba146ac0678ed84a3fb1ccb22c845ccfcea672137dbc8ec6dc58f65ed0fe5b5eaa5a9bdbbfc420f2025c2
SSDEEP 6144:As9YpXKVX+CIrEAmJIVFfLEFtHg4N3Jd+uL+9bGX:AsCNKVX+tEAmGFjSZlLVX
MD5 SHA1 SHA512 SSDEEP

Submit Download

jpeg.txt

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\jpeg.txt
Size 36KB
SHA256 7782e494c687284b2f4821f37c19017733d83a3a0f8a06cfa4de5e7fbe095014
MD5 f0a150accc2b3a54f73f4d06aa60deee
SHA1 04d3b235f1bb17cc5fdc8de6f78a967dc159f589
SHA512 5ced9faeaa2f8aac06c6691c44122584a755208efd069315450706d6c932811362b5b96752d8a159ec00eeb20ed23c69daf6bba28d0cd487b245cf9e683cfdce
SSDEEP 768:NCmomESVvwnYvbSG7dUSMrwWz4vQDNdkbSE+B+7T3BNdjgHJn:NfFEALvLRUSMTz4tK+xNdE
MD5 SHA1 SHA512 SSDEEP

Submit Download

jpegacc.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\jpegacc.dll
Size 101KB
SHA256 2aa43154f35acdcde7296daf38607a84961ddd9a4754054ea69b1d49be640d98
MD5 10561ddeebed28a3ad75ef436165d802
SHA1 8366a8f26dce385215ee73f0c6b7771d7292fc40
SHA512 a90bfc2c91288592594648e39e2f4f8eebd1fdfce1c708e795582e865741b3ea065ed745cb9a33413d022925ef697ce03f576ec75b180f10c46f80e8902f4027
SSDEEP 1536:ZNVlYMqDMBgGmqiMnrVNDhl6ytvR6Sm1TV5uVzTmIRgPZ/Etu0kvqMB3X50:+qiMxNDZER5ukNe4h0
MD5 SHA1 SHA512 SSDEEP

Submit Download

lame.txt

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\lame.txt
Size 605B
SHA256 326de616457909152879072ac3cd3f811445a82fef19b6141b50b36cb2f8f40b
MD5 bc5b9d872fe40e70045dfc9b09186b97
SHA1 a672ac7498f5980d97fe97602f845cdb0d6bdd0c
SHA512 f3da5a6e2d68e5f121235d3ef34bb6dbd4f67ff3cc4d021b185261455628ac4705cf2b8ced659328aea091cb6e1a8cec4bc2e86c2e5e0a1e831ea8b6f8228c47
MD5 SHA1 SHA512

Submit Download

lame_enc.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\lame_enc.dll
Size 231KB
SHA256 c92be45102e00729d6328a11d6fd9bddcbc937cb9eee146205616ba7024d24c3
MD5 2bef09d7469e9411fd63ca6f79e31846
SHA1 5fb213a4b4e8b2fa16b107a482505cccd50ce333
SHA512 310354eb3fdedeac6ef1eac295fd144217391dee794b44f7d033f9f47ded4fb3305cca0c39d197438011b6ab186df3cd6bca9b72e15febecd9bb42925be0ae7f
SSDEEP 6144:aB3i20r2DzRZR9gid2fC5IUc/u9xRnlTv3BqaDFhuL:aBvRGic6KUc/u3UaDHk
MD5 SHA1 SHA512 SSDEEP

Submit Download

libcrypto-3.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\libcrypto-3.dll
Size 2.7MB
SHA256 77e9a6177a7ce319567273897f43c265fdadd8af1e8410adc686cd0079588d03
MD5 6c60acb6b6d3f4532ab36188eb78f376
SHA1 825900023ccd8e9293a1f3269ea82a3a20404fe6
SHA512 791c1446dcfd28484a68d568dc4c2fe4d6f897eab395add656a2eb0db9eefdb3949292d328351c9bfa57224f3aa9ff798fff49e270f534b5c71e3e2dfa87362a
SSDEEP 49152:sCjClF7fXawI8c+P/vzJOOSOr1CPwDvt3uF7DCjD04Ig:sCjOaS9OOjr1CPwDvt3uF7DCj
MD5 SHA1 SHA512 SSDEEP

Submit Download

libmpg123-0.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\libmpg123-0.dll
Size 261KB
SHA256 04439f2b52603a16b17384b22122eaf26222fc088de0bc0a489767da01525b46
MD5 3e77f11b5dc0de36e76808fe72243545
SHA1 3a18faf61af904260be351841fd306103a9c228d
SHA512 3540104bb5cbf8e83ce161eea3849dda7e6b00e67a9c1e45c99eed2a12f1bec509bed4033f586f9ff35cae16baf707ff0c32b8e8de0f36df3350bd9bd7c713a4
SSDEEP 6144:MfsPgmVHM1/HuIyugc79mEXJZqBxULI3ANU0DyNYedgIK5ITk:lPLVs1/vuc7o32hXuI
MD5 SHA1 SHA512 SSDEEP

Submit Download

libnoise.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\libnoise.dll
Size 174KB
SHA256 fe279cfc76c514810bbceba281254e6fd9ff696fc33ecfaba175d778e565a866
MD5 48bf2825c8e989edf818ae1a82fb7fe1
SHA1 a857a7f315be110cdb0bae1bc8f6e00fc3cd37b0
SHA512 48b4f30ee23f95537cd1a8016758c057437794a6e3e42407bde9c3e8fd8c26a1add34bda0cbe0b9297cd9c01bb3960bbadf5ea6b7de41f69ffd8cad99789a731
SSDEEP 3072:RDvaUgDTw/O7svViV19TgtftlISAg0FuJK5OPAmOnxOgJkrG4m:R+xCrlAOSN/krGJ
MD5 SHA1 SHA512 SSDEEP

Submit Download

libogg.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\libogg.dll
Size 17KB
SHA256 b5ee1821c351a38494f69ff5408762fada4ad103b82c1ba4a87e67ddfba1d62a
MD5 b05f5447cd2457ede470a822c4f5bfe9
SHA1 56e68959d483174e841844a1d1b3f6f7fc0ebc51
SHA512 3d690bfe2d380541b24e695966bd1b16afb2e1b0d77d3610f3c1d080e98ccdef17674b0f51a8f3f55515bec885fcdc7ae2e7ae6b4bcc8cf3df7301becab31953
SSDEEP 384:kfN/eBjyY6IpHZuYgNKU+KOWItC1+RddjK2UJq:qeEfIpHZjk+KOHtCI1ck
MD5 SHA1 SHA512 SSDEEP

Submit Download

libpng16.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\libpng16.dll
Size 162KB
SHA256 1ceae383d27ef1b45d19f7bff2ab8fe02d553c861342ac8c2d6a32f9a6c1b825
MD5 8bb4c17afdeadb4c81da2f407dcb9809
SHA1 ce2bb6eddedf31e9dee7e43d4535250da442e852
SHA512 b944a4b1e0e9a3b5418169429810c8933910bcdfe13b87d01027d0a4786ca7ddd44b4540da07a09b9a56a196f7681d31a878b72766991fa3dddc5221bfee82bd
SSDEEP 3072:sqdhHheGX0K4rtnlvaPuW9uwSIvBV4SDzYcMLSFKv5+SV403udZx4Pksrng/fCbX:irtxWm+4uzYcMLSFKv5+W3i4YXCi
MD5 SHA1 SHA512 SSDEEP

Submit Download

libresample.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\libresample.dll
Size 79KB
SHA256 3d742f33f681c4eacc3f011170bf597e9d6ae5c41dda0070df61fcf23181f611
MD5 4f29a41a2cbda9f77865932b899c2121
SHA1 7aeecaddb0568dd526378becbf4f783192238da4
SHA512 fc7abec42e52bc5f7775cf71b8447c2a0c586f7d4c5d84c2c9433c99552892d53f37a1c78d2b15153671f6a6a8b15c164e7793015d21fd9c112acb071a3b9428
SSDEEP 1536:EMtsHFnw1HV1jY4NVH5MIvC7PFVrU7H5:EZqv7dwY7H5
MD5 SHA1 SHA512 SSDEEP

Submit Download

libresample.txt

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\libresample.txt
Size 2KB
SHA256 bd65e3af3b1e6266b97bd458260e1573e8abdf3d4bb0718626f6b93d949269f1
MD5 e9da4d1a73ab0aca4d0139d73944b6a7
SHA1 8e13d85dd589f84a12caf61e860f8ab063f99747
SHA512 5581d8940e46902b7e354e9172e13f51a4072bc7ec6e090d1eabeb841564ac2dab43a247c92a78bbdc1e77a9448bff0ebd61a09b7725fa6353856503960b52ea
MD5 SHA1 SHA512

Submit Download

libssl-3.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\libssl-3.dll
Size 441KB
SHA256 6c79bb2a98f61dadec8b56547d52c8f50edbd861988b0521c064a524d4f879fb
MD5 c2cc87f43c956c3978d65ee6c23a9f96
SHA1 b1f8a79be78054fee8765b7f0c9efd2b625c1d63
SHA512 61eca6ffdf43dc2b9b9059f1a14f963bba43b52db5d468c3da9764fb235666bcddf7ca44fd6b44918ed4edab6304713cb88ba421679aa4911aa4f1b4717a26af
SSDEEP 12288:RleZPMhMi4+f3wBjiRj4bufHOdaDGvAo3HLnQSQ4h7aG9vB3p82ZMautqCGarNP9:66AI9oX3+rNHVNJwU9Fe9XbfA
MD5 SHA1 SHA512 SSDEEP

Submit Download

libup40.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\libup40.dll
Size 23KB
SHA256 ecaf6da2a4dbe72fca16b9a758ed0bc2751884d9315411285555d8781617ef58
MD5 dad62964697e998a6917373c0c115358
SHA1 2d6b1900e093c9c8bcce642792e3fadc90b3b0ac
SHA512 fd357e94ab7d7b131d0b8a6d5e2180479d8fa82179c4b04a3d80cf7f2ca796b21d0e8f4f0102734dcadba103138d37000f558dec941a06fb12dcaaa954bef476
SSDEEP 384:aXVsCpdAvzh23sOQsadeLWwZGI+S/vJmjMjAnOGDNdUDJoaMN4TSw4:aXUOAeXvvjAOG521oa/T
MD5 SHA1 SHA512 SSDEEP

Submit Download

libvorbis.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\libvorbis.dll
Size 641KB
SHA256 0ddf0cb5fa7cd28918b4b7efcb131948ad6c13c65be6b26dbedd62534530f126
MD5 9cfe7e14c0c9a1a94a005388d53f0bb2
SHA1 acb77c0c73b15a1d37bca58be5288bc072c69de6
SHA512 132975cfd47da538d2e121438d09e72cc1480195787af4a3fc4839fd868d72dfd673bd100c23ec8927e5cf3fd677a906ffc2415a5bd8b8c2f9aa921751bac894
SSDEEP 12288:lN/e57n6fG5AoUGKcFtRcpcQpKApxBhXz8S:lN/e5mfIAoySRcpcQpKApxBhXz
MD5 SHA1 SHA512 SSDEEP

Submit Download

mpg123.txt

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\mpg123.txt
Size 25KB
SHA256 48e27fa4fea30b20d7ed02fc2321f9bdc5b479bc3c19a5224bc0269dce0dbd74
MD5 17aa40ae4eed636dab627e286e4695b3
SHA1 0d7791d148674d4ef2139ea75460cf14138252cf
SHA512 cfc19d823c2cfbd23e90b51f3afa7614ec3eb3209f82ac94e0a303f2ffe6f370115cc2c3f2fea93108b1bde8c65b22dff6ad365cfed5a0e4ed2bdeaf0553a7c6
SSDEEP 384:KzBJ16jpBIk+x/vIUk0Zkt6sT6AATeANgKP+lHQ41fgcmmIxyOQMM9Yf0EJP:A16VBJs/k0TeLlLkF/TfjJP
MD5 SHA1 SHA512 SSDEEP

Submit Download

msvcp140.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\msvcp140.dll
Size 428KB
SHA256 21570bcb7a77e856f3113235d2b05b2b328d4bb71b4fd9ca4d46d99adac80794
MD5 fdd04dbbcf321eee5f4dd67266f476b0
SHA1 65ffdfe2664a29a41fcf5039229ccecad5b825b9
SHA512 04cfc3097fbce6ee1b7bac7bd63c3cffe7dca16f0ec9cd8fe657d8b7ebd06dcba272ff472f98c6385c3cfb9b1ac3f47be8ca6d3ea80ab4aeed44a0e2ce3185dd
SSDEEP 12288:IdyX+9Tk5fb+5J56HgGwKz2zRThUgiW6QR7t5s03Ooc8dHkC2es+Fpyd:LX+9TkR+5J56AjKz2VA03Ooc8dHkC2eu
MD5 SHA1 SHA512 SSDEEP

Submit Download

oggvorbis.txt

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\oggvorbis.txt
Size 2KB
SHA256 2cba6d23f7c45935cb9fb68589b6b622bfc5df4d7ddebfff3e6e0a87a15e0d0f
MD5 30b29f32974206e317404805ef05c58a
SHA1 4629fea096ba0db41d65f5cd6b92757e581e79cc
SHA512 4c5b8686b378db4576a917e10997262e2bc55d6faae11422e6135be20f1612298253d43e7570d56c4c584638723f75990f2bd05670f48b577acdc8f0a2914caa
MD5 SHA1 SHA512

Submit Download

pcdlib32.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\pcdlib32.dll
Size 185KB
SHA256 30a5ccaa5b1f4e122a40ba8a6351d1b97d2ba615d60580de7e280202c1d6ad6e
MD5 7f11e662730110fe7395339862ba7e4c
SHA1 1000a7dc52f7f27d9fb248ee5b0e18d43ad1a22d
SHA512 07dccbd96ba6ad83aee4f6ad0ce4fbbe6e5de14a835be4393c42cb22dd51663dc2fc8fce104e9296bd1afd776444cff4d7e04fa022150bd32995bd81ce33f66f
SSDEEP 3072:hMXZEYcZ/+h0+tmA+zvXdtFuW3EwwPLzg7RWvYu/B593TzgRCElfx:KZb+2itXztuknw3glWvYu/B59+CEl
MD5 SHA1 SHA512 SSDEEP

Submit Download

pcdwrip.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\pcdwrip.dll
Size 320KB
SHA256 b4d83e808ccccb077e93253d7187dc11b0724a84be91452184f082fe564a46dc
MD5 4a4267c2355ab073b27885e13e58f5f7
SHA1 99c58be2f7f3643e18185223110444d224be54e7
SHA512 1ccac485bb0d2b08043196078a4e225fc2a91534f6ef6f0e882e6755c66dd558b4d0c00da3e92ea5c955f3995a3bf970bffeaf6e1fbb1a9cbeb2d6b78a1dff10
SSDEEP 6144:St83AByHew1111111111/KG1111111111QG:3ABBeK
MD5 SHA1 SHA512 SSDEEP

Submit Download

pcsbmp32.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\pcsbmp32.dll
Size 201KB
SHA256 b4a23618928c34614e75adb737acfa4203bc9858c64057903cb148992fb84027
MD5 73c364b0032729c4023cc8418efd72d4
SHA1 0e88308546f63a9ef91082c4e7e0b979e7fa30c2
SHA512 fee89c02277ffca43582b264b23e60b1d0c1e66164b924cdc1a56284a66541b96c1255971176ecf2122fa21d7d8e37bab16d30bd8f2ed0370f6a689a05febe14
SSDEEP 1536:8P7Gl3RjZ4OIfkmFQZpo80G7xzQcgRtV9O3OpMSezaW+Hom+zPjh3MsjHYix4UNN:A7Gl3RN4rRFQZFxYVHpHWwI6G4ti
MD5 SHA1 SHA512 SSDEEP

Submit Download

pcspng32.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\pcspng32.dll
Size 440KB
SHA256 fc9f60026ad842cd76689ddd84427f3a61a81e170ef1770bd20d6e103e00b61c
MD5 dfea29a523d557390053e45644b6fcd7
SHA1 d1ae7ac69da229b6cbb04dd77e42d66ed890a8f9
SHA512 a70b5c42ca55f85154878c092e35e28ba531f93cae1cd6e0c60661a7ccd7c6fc3868dc194692c6b21d349517a8fbbb532bef3ebee84bb105302b0177fa8af394
SSDEEP 6144:cP6zoFCvSeR9rdzr/CzF3l31Uef9Fa+6PVGL:cPrW95zrKzflUefK+6AL
MD5 SHA1 SHA512 SSDEEP

Submit Download

pcstga32.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\pcstga32.dll
Size 201KB
SHA256 9e99c78791001b86f930aa49e22495b24b89f780abf6a3cd270b378edd3ae43f
MD5 6bc70bb3cbfc653096e9210bd6ad9353
SHA1 5c94e310bd7d2aae8f4cbf92b7b8e2c7a0bf5c2d
SHA512 279f6f17151e134a763a5ad26ec7ad39ec7b04e353e6579b49dfcb640384b72d9247e105d91ef0ea01bb4dac72b692ac0fbffa62ad2d4ae72767c2a71e7a374f
SSDEEP 1536:F00YufeFQxwh4v9MGYGXx9QcgRtV9O3OpMSezaWOu2m+zPjh3NsjHYixPm:i032FQvF3xeVHpHWgljG4om
MD5 SHA1 SHA512 SSDEEP

Submit Download

pcswebp32.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\pcswebp32.dll
Size 334KB
SHA256 d13072f7ff1fa2dafe71823df97390c7b3d01c7978a3e41eedd0206c463fcb69
MD5 0061b311be6ad1cc68258ecd2d507c94
SHA1 c686403ce797f336b63d332c34627da13141e814
SHA512 26c0e613f7966e90c3be87a2004592ce261ad9ec49f3c5fb871657fdf43b60f6e4e02ddd1a3aa4bc1f8aab7829da15df51c0e87e36b0162a7ee0b844c0fd74b2
SSDEEP 6144:ua1DTVkWe/4mooZdR1KcyAH6F/p6mOkEwIZ4Gx:T13Vo9qczHxPTx
MD5 SHA1 SHA512 SSDEEP

Submit Download

qtmlClient.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\qtmlClient.dll
Size 232KB
SHA256 cdf59914f79903e0964facb10c19558ef398f95519587fdcd53cbf181cf254a6
MD5 172cddaa4d578d0c1adc98b78b1a9810
SHA1 5fdc3adf63f99b67a19ecf121ad372e4379eb3d5
SHA512 91c71b46c5d51da147a929a7d6302c83c70726ab2f2b83f4679c2836d0453748f265054915edfee389377415a385b1e2a9307e80ee3de397d9294c72603eebe4
SSDEEP 3072:UB2VVRynIdOD05Ql2LchCYteTE/g1GhOHMkqKro2vmpTo9O/Sr9sFrsHmUBF:UJWm+s/csFO
MD5 SHA1 SHA512 SSDEEP

Submit Download

sfwfmt.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\sfwfmt.dll
Size 120KB
SHA256 1828696734e091fc5adb507f0aaf2731cfebb3c402faf4314fbcc07dd85eb794
MD5 e428cbd5a3278191ea7f9051b0f6aba0
SHA1 3094eb4effa9a7db956a9e192773f73260cb7149
SHA512 46942e5345dfafb52ae328ed4e0de97345ce9b0f9fafad8c484d2495d75d6037a58e5fecbb275d9fab860dd932ac923f634c06afbd14a824eef6f969755a4624
SSDEEP 3072:osLPqWcZ1HJwvNW/rYh2aHrPPPPP2eb6FF+e7BufkFl/UH1A0PF:osLBcGIvFce7BwSl/U+
MD5 SHA1 SHA512 SSDEEP

Submit Download

swfex.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\swfex.dll
Size 180KB
SHA256 87eb8bc7404a7f7019dda05896831f77649479dbe761ac1efc8af37e4ea2bcb0
MD5 67f16582d51d20bc4aef0a19731d3280
SHA1 61679dbe1d13d9c25000142fd51b9f4e952a7098
SHA512 159043e070e0e237c2a9fd3721b3bd687cff50f79f12312037d68b471c1d3418c41a7f8a23889ffe4994e5a950b4642a77071e47ad9c358f56f432ed9ce96f96
SSDEEP 1536:8sNrZ8xNIOopLQZb+lz9ZTDCwsg6VJ3u3Ndd0eg3J2lzaoiUJoREWwlUxz5Y8GU4:8Q8IOoDPZ+g0Edd0IaIsESl5jfKoA
MD5 SHA1 SHA512 SSDEEP

Submit Download

turbojpeg.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\turbojpeg.dll
Size 664KB
SHA256 ad75b80862195b952053322b9054e3c75983897591f9420b897fa2343c428b36
MD5 81c0d4330aefd7287395dcc3a7ad5896
SHA1 4d20f691ebc46b36061cee8f5a52fc822ee247a0
SHA512 bb01f24eff62c7ad449aa61dd865056e0b9a9053aa510a8d6c53f82af58268e0514259e15fd4dc6261077495dace35af434550d2c9744977d6253590e1518c35
SSDEEP 12288:s2Ai+aY23hhGlbNPC8CjOzblzgeNnqKG6cVr:sGGdCCzxzDNn5Jmr
MD5 SHA1 SHA512 SSDEEP

Submit Download

unrar.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\unrar.dll
Size 171KB
SHA256 edf1bb28df67d04f73bb290338a3488a7267be2ea7c68340a568f847513f7adf
MD5 8269c503475678f513b8837b9450df00
SHA1 052105c6f902ee1e07a460a5074c7e5d0db6ef29
SHA512 546f8b8b9df82648baa007e468b6873f360cf719ebe66be2879634ce9df96578e93cd8020ea7b9ec26d64b34db06c5707367931e73e8c5ef91f320c28ef362ad
SSDEEP 3072:3a7HfrMnizJTTMdICs6zpsLJUQ1or46nbVRjBv2VaOyYx+9fO:K7HDMiVTTMOA+torR1canpf
MD5 SHA1 SHA512 SSDEEP

Submit Download

uri.dat

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\uri.dat
Size 3.6MB
SHA256 1caa74873b477cb828057300c12b9788cb088f8f4c0d4abe4d492e18377397f1
MD5 e3b264467e9a2e5a45f8ea094b196f1e
SHA1 01d81e735408efc142c1bc904b3b29826b5a5417
SHA512 bca81be1097f6a31f5e00b4a834ee2715f30a4e83d22062c5ebcf878b150f3c9052ed0d1b8056dc6bd125667ace4481afbd9e70deffb005d15632c28ef2cf143
SSDEEP 49152:3jVcnRMyhQgkThso49xL/zDY49cg+UW+KDChw5HRbLQ+n0RftoVUsQCIW2p:3joCyhQgLo4sbPUWZxhG9sQ/W8
MD5 SHA1 SHA512 SSDEEP

Submit Download

uriparser.txt

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\uriparser.txt
Size 1KB
SHA256 23f2cd0c81dc56b88f1a048928775830b6f322257bd7a009f2fe7d74ec37ba85
MD5 addf299d53664aef098ff6b168efd390
SHA1 0676c571934c44efd23f3f9fcde00f7486b6d93f
SHA512 defdde3359f201a689740cfaef4858b7a90f96bba8be6c560062cdfd6021e1bfd3b4a337fd32d5d464690f21e7e1a7ede6449d5ba06bd4abeedd7b007db9af87
MD5 SHA1 SHA512

Submit Download

util32.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\util32.dll
Size 67KB
SHA256 1edcb48235a8740203238dc23e047a77f9692699439021fe3f30a408e57570b8
MD5 f0727cb46641ae290305602792f93592
SHA1 985a8ff6ffd7bb2031d7d5a480af1c276cadff45
SHA512 cd3b5a2928f4fc6a428b0e9c995e2151986b3c57034f11f91a44918759f218edcfe6783f3149ac319d64fde3bf9cd404cb5e8579bce5dc89e1410df23dac87e1
SSDEEP 1536:DeAhPuRI8w5ZtYRzKsVh+/S5bx3pvGcGGD1YkRsjHYixO+:6QPuRe5Xwh+qPnRG4T+
MD5 SHA1 SHA512 SSDEEP

Submit Download

vcruntime140.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\vcruntime140.dll
Size 77KB
SHA256 141690572594dbd3618a4984712e9e36fc09c9906bb845ce1a9531ac8f7ad493
MD5 ba65db6bfef78a96aee7e29f1449bf8a
SHA1 06c7beb9fd1f33051b0e77087350903c652f4b77
SHA512 ca63eeac10ef55d7e2e55479b25cf394e58aef1422951f361f762ab667f72a3454f55afc04e967e8cdd20cf3eebe97083e0438ea941916a09e7d091818ea830e
SSDEEP 1536:5UwZIDobDaHrrAPsCbU4qzBHXpHo0ecbGp9yBOBDozi:7ZPDaHrrobUHzDxecbG3yGo
MD5 SHA1 SHA512 SSDEEP

Submit Download

w7lib.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\w7lib.dll
Size 52KB
SHA256 7540f41195740520f4b36635e1c5eeb5875cec535b2bc0a310eda95cda0da847
MD5 43057351be7c9c3c8f1b08fa1560c0a5
SHA1 4a42c7467e43237094529104674f10cca3af049f
SHA512 c4e2910bbb552dc6b9ba08ba040da47f50f2a8eaece99dc91f691d8ee18174d381d9e7e8cbca5c3aea37e787918ae5b051592c5c52d9adbb6402a6b844a193f5
SSDEEP 768:TloJvEzZA+wxVg+AO6fzGC7201glMRKhasjHYiRPyP7C:hoKd4xVXAFfbZRKQsjHYixd
MD5 SHA1 SHA512 SSDEEP

Submit Download

webp.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\webp.dll
Size 523KB
SHA256 888461862802a909b5d63fd4eb447ee0969c2b6840587481e74cdba0473738d1
MD5 6bb6ef53bdc0d27a56db202f33a89e30
SHA1 292f51edd8abb2dae92c646196e67459e56bcc82
SHA512 9c9449d24f38f8454611343354d782eb9add163a35855b160f76f87a701491f5499646e163a35b44d65168ad2b8ddb00acea7bce9c3e0fafb84068b4860ff50b
SSDEEP 6144:0g9J877lA1v+gkWT7EAaOF0sKyQw5pek1IoDzaqFV8Ms/hXCKZJevhXDjvYKCweI:Nu3HOJK8ekeXCKZJcXD3zeU7n
MD5 SHA1 SHA512 SSDEEP

Submit Download

webp.txt

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\webp.txt
Size 1KB
SHA256 17c029a902ad45a199dfe8e3a1c39305ab28d302b0703360c4a27351a4673dcb
MD5 19f0b6b4a88473e1eed9ca57e11045f4
SHA1 00a7d2da8ecfab54b7859887e65ff57c71774f84
SHA512 1c0c3284eaaaa2282faea552cf9346330ea8e2db9c2e3793114fae1593db5941ddebb0d1ee3f47f97de651be4fd394b076543c7da17f6b052d6c9844f4b1a454
MD5 SHA1 SHA512

Submit Download

wthnl.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\wthnl.dll
Size 109KB
SHA256 b32cddf0c6e505ea0bb75873b85879c763b73a83b32eaf3bf2b88ea6196ca127
MD5 29421f04688f0b790469d4b4ab5efdb2
SHA1 0a57f1c054fe841221f4c255c90d04ca9e409794
SHA512 7bb4fe85d232f31318e3533e8101a8ab960da59ff7cad88138cef68061d00c08066b2041cb0841a8e3b4977531b48a7fc02bb2aa26154a5f0a0aca38208bff7a
SSDEEP 1536:ZlfK1mhj55WKZtusMsE+y9TB7Xn5HHFGcGKDyykFMSezaWc9rWSpsjHYixF:S1mhj5IKXA9TxBqykFHWi9npG4c
MD5 SHA1 SHA512 SSDEEP

Submit Download

zlib1.dll

Path C:\Users\Admin\AppData\Roaming\Steelray Project Viewer\zlib1.dll
Size 76KB
SHA256 59281018c70bfec371d593d4bd005f8c52c8a3440d96fdf28ad4881bf3c4d78f
MD5 0ac2236d42d8ced5dbd181bf19637783
SHA1 59e317e893831615b7d338f3c328de42c3a04f2d
SHA512 3c71c2f83110e51c44a6c79efd83490bbc93f022a937d6759cfed103fc250b46a7d895df5d880247381a74642ab8eb6497463202b455f1935d28b24ae0389183
SSDEEP 1536:Ohjs4eFkQjuHaqvazHWRs6eHngpB0Ik2FgCgTUIQIOsIOLUWh31:ijsnjjvqOs1eApBVgCJIGiLUWh
MD5 SHA1 SHA512 SSDEEP

Submit Download

BRA9A7.tmp

Path \Users\Admin\AppData\Local\Temp\BRL000005f4\BRA9A7.tmp
Size 99KB
SHA256 75fc64a55afa86173947948d78ba5de98dfc35c487166a6682fe71ed5f6f877a
MD5 2c9676a3167739f36912818acb8e9860
SHA1 cd9e5e56cc408c40c45caf49614c26fc7fde39f6
SHA512 a6c375511d9d339b889adcca4a95bc23df9e207f86605f6d6d04ab7e211901cdc3012860ed844a5c36737369e01dc70b212f5960d8a662fdc720ad98e1202aa1
SSDEEP 1536:p8adBcjOkZ7jRgVkWW6BFeeqSoRgtwIX4mbUWYfbS7dVEaTa:pbdBcjOkZRgV66Seobb8VEaTa
MD5 SHA1 SHA512 SSDEEP

Submit Download

BRA9E7.tmp

Path \Users\Admin\AppData\Local\Temp\BRL000005f4\BRA9E7.tmp
Size 288KB
SHA256 f675eba3b22e0a2238ec4961d99de3bacca0ab553ab26eecb49800a12a9371ab
MD5 122a3741699fb5c0950273245c9dea15
SHA1 811f9149e3310a8e6521da156f92f3aaab012145
SHA512 567c480f70fdc78769ae45bf83b6632f7ab380ebeb00689028d39ff03840c8b778149a3fafe1dab2ac77a1fd17a23b09f58774b1c5e791bfd33b99528225eccc
SSDEEP 6144:yfmgpf/EQmPK6Yrzp2FaujGwkvmriOPNyh:af/ENPK/Fq8vJqNyh
MD5 SHA1 SHA512 SSDEEP

Submit Download

BRAA26.tmp

Path \Users\Admin\AppData\Local\Temp\BRL000005f4\BRAA26.tmp
Size 35KB
SHA256 78827e2b1ef0aad4f8b1b42d0964064819aa22bfcd537ebaacb30d817edc06d8
MD5 08ad4cd2a940379f1dcdbdb9884a1375
SHA1 c302b7589ba4f05c6429e7f89ad0cb84dd9dfbac
SHA512 f37bd071994c31b361090a149999e8b2d4a7839f19ea63e1d4563aada1371be37f2bfcc474e24de95ff77ca4124a39580c9f711e2fbe54265713ab76f631835a
SSDEEP 384:i760QouLg/TgeoyZQ82FXRivC4yPTyNeOnEOqjLtKjIUZuVnrufvS0QOwOP2H:pxR1u9CpKVZuFBNOeH
MD5 SHA1 SHA512 SSDEEP

Submit Download

BRAA46.tmp

Path \Users\Admin\AppData\Local\Temp\BRL000005f4\BRAA46.tmp
Size 169KB
SHA256 0912c84ded4670c427db1f405eb68a5763eae8fa0a735abe44eea81be7dc44ea
MD5 cf2d7b4de923b25955d96d2e65ce76bc
SHA1 8feee81fe77a7649b969d375778d2b78d842cf48
SHA512 d26a0983f0323655eddc48863a409d172a4623bd7ed465b5a4675477938de10127323040da77c80201c3a816315d98cace5194207e22b0a6ac2e65ae6795dc4f
SSDEEP 3072:m3NYEI54msFzW8J9K+kPGlz2U0EsaWEeoErlF:G2EI5NsFJ99SKzWTEa
MD5 SHA1 SHA512 SSDEEP

Submit Download

BRAA47.tmp

Path \Users\Admin\AppData\Local\Temp\BRL000005f4\BRAA47.tmp
Size 532KB
SHA256 5dd27e845af9333ad7b907a37ab3d239b75be6ccc1f51ef4b21e59b037ce778c
MD5 a6f7a08b0676f0564a51b5c47973e635
SHA1 d56f5f9e2580b81717317da6582da9d379426d5b
SHA512 1101813034db327af1c16d069a4dfa91ab97ee8188f9ed1a6da9d25558866e7e9af59102e58127e64441d3e4a768b2ad788fd0e5a16db994a14637bfbade2954
SSDEEP 12288:Qw1Hlm6R2DcKd8wux3cb6PejVKpcPY03bKMhAy:Qwx06AwKd8wux3cb6PejVKpcPYSXh3
MD5 SHA1 SHA512 SSDEEP

Submit Download

BRAA68.tmp

Path \Users\Admin\AppData\Local\Temp\BRL000005f4\BRAA68.tmp
Size 72KB
SHA256 5ddee4aab3cf33e505f52199d64809125b26de04fb9970ca589cd8619c859d80
MD5 c04970b55bcf614f24ca75b1de641ae2
SHA1 52b182caef513ed1c36f28eb45cedb257fa8ce40
SHA512 a5f2660e336bf74a1936fb2e1c724220d862632907f5fd690b365009ac3e1bf35fa6689071f3da4049e495f340ff83f8438b79079ef1f248b9dcaedbdd5d3e40
SSDEEP 768:bC4uF9R4GHnSiWo3xRFTo5THDMOBPw6s//vABzvBcdWlNK2nPpjCesWjcdgMLsZt:bCHQ5HDMK2ADBcd5esWjcdA1jQ5J
MD5 SHA1 SHA512 SSDEEP

Submit Download

BRAA78.tmp

Path \Users\Admin\AppData\Local\Temp\BRL000005f4\BRAA78.tmp
Size 14KB
SHA256 b017168c69ef40115141813e47122391602e1af28af342c56495b09f1c3c7522
MD5 77fe66d74901495f4b41a5918acd02ff
SHA1 ce5bbd53152cd5b03df8bcc232a1aea36a012764
SHA512 cc6e323d0076577a0a04dbe2c33d90dc616cb5ec3637d3df67cbf169766ca2e6de567fcff4f32938fd6118d98e4796642a3010b7264f0ae247fa8f0fe079bd70
SSDEEP 384:rHvsqY62moTfzR8VPBnOOOOOOOOOOOOrOOkHyMH:z0qzozzSV5nOOOOOOOOOOOOrOOkSK
MD5 SHA1 SHA512 SSDEEP

Submit Download

BRAAE6.tmp

Path \Users\Admin\AppData\Local\Temp\BRL000005f4\BRAAE6.tmp
Size 14KB
SHA256 f1029f5cca3dabfeffe2c9db6ad84a9ff0f64f5b2fb85cb6ab348740f756e07d
MD5 d74aadd701bfacc474c431acab7b9265
SHA1 8a2b424d1f949430ddc1faddee3e9ccb79c95de2
SHA512 0ef85e311fb4843997fd5f87f0a2eec9715e26eae76bfb7bb701d8c043720aeaf7f4825d25187bf35e0a9f00def15ed071120128805445f1330c07c3e0ea5ced
SSDEEP 192:vLBvanDsGzcSu8M6fB+8yTzSJvwZ6Slp2sWOq9+moFelNtflD9Ndk:DBvCDsGzcSDMc+D6FxWR8wF6NP9k
MD5 SHA1 SHA512 SSDEEP

Submit Download

BRAB93.tmp

Path \Users\Admin\AppData\Local\Temp\BRL000005f4\BRAB93.tmp
Size 74KB
SHA256 41788435f245133ec5511111e2c5d52f7515e359876180067e0b5ba85c729322
MD5 924b90c3d9e645dfad53f61ea4e91942
SHA1 65d397199ff191e5078095036e49f08376f9ae4e
SHA512 76833708828c8f3fad941abeea158317aff98cf0691b5d5dfa4bca15279cdad1cc23a771258e4de41cf12a58f7033a3ee08b0b5eb834d22be568ea98b183ccd9
SSDEEP 768:f5eCnPrwdD7+HgVqoQKJ03cu9F/HTTuDNV3ILkjVSWTn1ytIddmV1TQW/2Y:f5eCMFqHgV1J03cu99HGRCS1yt73Qk
MD5 SHA1 SHA512 SSDEEP

Submit Download

BRABA4.tmp

Path \Users\Admin\AppData\Local\Temp\BRL000005f4\BRABA4.tmp
Size 150KB
SHA256 931c52c91ffbe12d820ff96570ba8db8abc36ac2fb852c87f2ef99271d7183fa
MD5 efd81ea220094b0e91630b648d00e731
SHA1 226635424baf8146af055908c4c12b0a3faecd4f
SHA512 fca9ffbcf94507cda23b5a68c4a598a25f0a0e22a7d429a125acbf95bdd03fd63ac80cf8738ae22d1730a73edb3325edc5b85af8d3337a62a97ac0f63dbccdbe
SSDEEP 1536:Lnm9vcFCoP4OP39IfX8gtYcj5pdQ2SaqltWT2548eqSo1KtwIX4mbvroIlwMFz8D:LnhCoAX9ycVpdvqli29eo6lwiz8C9qD
MD5 SHA1 SHA512 SSDEEP

Submit Download

gwstif.dll

Path \Users\Admin\AppData\Roaming\Steelray Project Viewer\gwstif.dll
Size 337KB
SHA256 8f91fcc534dd362cd396db278bc77e099e640ae512912356a3270d5bb27af1a1
MD5 0d64f5aa32fe233c9e1c904f2c2ee1cb
SHA1 123cba972afcd5fd1807232f6e47dea8e0355fc6
SHA512 f1990718dc1115f23fa5b6f7b5723acf950ce8e964b8ed6604383f72f5aeece5a1e51e6104bb1eefc68d4fc1a2bc269bc76f51edd7f01ccffffbda114a0a6b1f
SSDEEP 6144:JtI9j3b0V4P89isUL1duscx18v6Ivrih6TXHvTqp4tDFRaFT8xJGU:Jy9j3b0V4P89NUL1dLcxM/Xdtw8iU
MD5 SHA1 SHA512 SSDEEP

Submit Download

gwstxtr.dll

Path \Users\Admin\AppData\Roaming\Steelray Project Viewer\gwstxtr.dll
Size 8.8MB
SHA256 0777a20e126badc87177973bc324963e22ad133b69af0ab71f84b3342487d817
MD5 01a2a91d47aee9ed5ded3906b5445c6a
SHA1 c3877815053c706a72c7a57244c2e8eff799a48d
SHA512 dacea5bffdfd0c05b1b87145c9a5ef0e5fb38e67d8c092c1ee45d35b5445f6d417071a1ee96bbd30088c2b2da0c5a43baf5bb35687c2cff4345acb36e6e5be8e
SSDEEP 98304:BVnRcvHB6cMalA8uFtLyqYIKouxITwXr+IEOyxyJWeGvRs:BkluxuxIGCJb8Wri
MD5 SHA1 SHA512 SSDEEP

Submit Download

ucrtbase.dll

Path \Users\Admin\AppData\Roaming\Steelray Project Viewer\ucrtbase.dll
Size 880KB
SHA256 6255112c9978c07a05c6feaee01cf4be74b2920dc7017fbc1a42f8f5d23c20f9
MD5 5dafe0bfb955e780b3d50da4524b752f
SHA1 91c0d9fabe748d373215ba21b90278671b5f8957
SHA512 37fd37f3ad87838f596d1e8e497fe66d1a1c4128625ab456ec850179dd1e1f33cf4945d0faaf6cdbd1ed586ecfb7ff3e7cf10a88a823cc5eb06c2fc4fa16bff3
SSDEEP 24576:Lqaw9+lq6qElzORB37mV60TZAty7dmcvIZPoy4NJC:/w90dORBFAZjLs
MD5 SHA1 SHA512 SSDEEP

Submit Download

memory/1524-1304-0x00000000009D0000-0x0000000000C7C000-memory.dmp

Download

memory/1524-1305-0x0000000074CB0000-0x0000000074CCD000-memory.dmp

Download

memory/1524-1312-0x00000000746C0000-0x00000000746EA000-memory.dmp

Download

memory/1524-1311-0x0000000066C00000-0x0000000066C14000-memory.dmp

Download

memory/1524-1310-0x0000000066C40000-0x0000000066C4B000-memory.dmp

Download

memory/1524-1309-0x00000000746F0000-0x00000000746FB000-memory.dmp

Download

memory/1524-1308-0x0000000067C80000-0x0000000067D0C000-memory.dmp

Download

memory/1524-1307-0x00000000712C0000-0x00000000712EE000-memory.dmp

Download

memory/1524-1306-0x0000000066680000-0x000000006668E000-memory.dmp

Download

memory/2608-1167-0x0000000007B40000-0x000000000840B000-memory.dmp

Download

memory/2608-1258-0x0000000000120000-0x00000000001A6000-memory.dmp

Download

memory/2608-1259-0x00000000001B0000-0x00000000001FF000-memory.dmp

Download

memory/2608-1260-0x0000000000290000-0x00000000002E6000-memory.dmp

Download

memory/2608-1261-0x0000000007B40000-0x000000000840B000-memory.dmp

Download

memory/2608-1262-0x0000000008410000-0x0000000008CDC000-memory.dmp

Download

memory/2608-1257-0x0000000000400000-0x00000000019D6000-memory.dmp

Download

memory/2608-1252-0x0000000010DD0000-0x0000000010E8C000-memory.dmp

Download

memory/2608-1226-0x0000000010DD0000-0x0000000010E8C000-memory.dmp

Download

memory/2608-1225-0x0000000010DD0000-0x0000000010E8C000-memory.dmp

Download

memory/2608-1227-0x0000000010DD0000-0x0000000010E8C000-memory.dmp

Download

memory/2608-1228-0x0000000010DD0000-0x0000000010E8C000-memory.dmp

Download

memory/2608-1231-0x0000000010DD0000-0x0000000010E8C000-memory.dmp

Download

memory/2608-1232-0x0000000010DD0000-0x0000000010E8C000-memory.dmp

Download

memory/2608-1220-0x0000000010DD0000-0x0000000010E8C000-memory.dmp

Download

memory/2608-1215-0x0000000010DD0000-0x0000000010E8C000-memory.dmp

Download

memory/2608-1156-0x0000000000120000-0x00000000001A6000-memory.dmp

Download

memory/2608-1159-0x00000000001B0000-0x00000000001FF000-memory.dmp

Download

memory/2608-1162-0x0000000000290000-0x00000000002E6000-memory.dmp

Download

memory/2608-1170-0x0000000008410000-0x0000000008CDC000-memory.dmp

Download

memory/2608-1173-0x00000000002F0000-0x000000000031E000-memory.dmp

Download

memory/2608-1177-0x0000000000320000-0x000000000034D000-memory.dmp

Download

memory/2608-1213-0x00000000003A0000-0x00000000003E1000-memory.dmp

Download