xred | f103e09b2c63f5dfb439a8029ff30c0d4f9bc59a7005bcd4562e5ddf8ae0d377

Analysis

max time kernel
149s
max time network
149s
platform
windows11-21h2_x64
resource
win11-20260513-en
resource tags

arch:x64arch:x86image:win11-20260513-enlocale:en-usos:windows11-21h2-x64systemwindows
submitted
01/06/2026, 19:24

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
2026-06-01_ae1156abbce2aa4c64eafcd9810d60d4_dark-comet_darkgate_elex_gcleaner_glassworm_hijackloader_stealc_stop_tofsee.exe
Size 1.6MB
Sample260601-x4llqsft3n
SHA256 f103e09b2c63f5dfb439a8029ff30c0d4f9bc59a7005bcd4562e5ddf8ae0d377
MD5 ae1156abbce2aa4c64eafcd9810d60d4
SHA1 7be24b56a4b5965fca5126688ca31ecf48602898
SHA512 2a759b0f7580e8e819d925fa7c2971d518d537a61dc8d8b75813cbce2679378c74ce5c9dea34947abc11ba3f081f0067d6ffb6554ede0ef6adfa4ac86f4cedad
SSDEEP 24576:EnsJ39LyjbJkQFMhmC+6GD9YivtCXWeGKHFGMzB0Oc1CvwUq:EnsHyjtk2MYC5GDDtCXWPycKPcIRq
TLSH
T1C975BF267191C037C1231FB98C9ADB675429FE413F26750E77E41E4C6F39A812AB62B3
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

backdoor discovery xred persistence

Malware Config

Extracted

Family

xred

xred.mooo.com

Attributes

email
[email protected]
payload_url
http://freedns.afraid.org/api/?action=getdyndns&sha=a30fa98efc092684e8d1c5cff797bcc613562978

https://docs.google.com/uc?id=0BxsMXGfPIZfSVlVsOGlEVGxuZVk&export=download

https://www.dropbox.com/s/n1w4p8gc6jzo0sg/SUpdate.ini?dl=1

http://xred.site50.net/syn/SUpdate.ini

https://docs.google.com/uc?id=0BxsMXGfPIZfSVzUyaHFYVkQxeFk&export=download

https://www.dropbox.com/s/zhp1b06imehwylq/Synaptics.rar?dl=1

http://xred.site50.net/syn/Synaptics.rar

https://docs.google.com/uc?id=0BxsMXGfPIZfSTmlVYkxhSDg5TzQ&export=download

https://www.dropbox.com/s/fzj752whr3ontsm/SSLLibrary.dll?dl=1

http://xred.site50.net/syn/SSLLibrary.dll

Signatures

Family: Xred
Xred is backdoor written in Delphi.
backdoor xred

Executes dropped EXE 12 IoCs

pid	Process
3304	._cache_2026-06-01_ae1156abbce2aa4c64eafcd9810d60d4_dark-comet_darkgate_elex_gcleaner_glassworm_hijackloader_stealc_stop_tofsee.exe
4972	Synaptics.exe
5004	BlueStacksInstaller.exe
1248	._cache_Synaptics.exe
2892	Synaptics.exe
2652	BlueStacksInstaller.exe
1380	._cache_Synaptics.exe
2424	HD-CheckCpu.exe
2836	BlueStacksInstaller.exe
1092	HD-CheckCpu.exe
3816	HD-CheckCpu.exe
2112	HD-CheckCpu.exe

Adds Run key to start application 2 TTPs 1 IoCs

persistence

Registry Run Keys / Startup Folder

T1547.001

Modify Registry

T1112

description	ioc	Process
Set value (str)	\REGISTRY\MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\Synaptics Pointing Device Driver = "C:\\ProgramData\\Synaptics\\Synaptics.exe"	2026-06-01_ae1156abbce2aa4c64eafcd9810d60d4_dark-comet_darkgate_elex_gcleaner_glassworm_hijackloader_stealc_stop_tofsee.exe

Drops file in System32 directory 2 IoCs

description	ioc	Process
File created	C:\Windows\SysWOW64\._cache_Synaptics.exe	Synaptics.exe
File opened for modification	C:\Windows\SysWOW64\._cache_Synaptics.exe	Synaptics.exe

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

System Location Discovery: System Language Discovery 1 TTPs 9 IoCs

Attempt gather information about the system language of a victim in order to infer the geographical location of that host.

discovery

System Language Discovery

T1614.001

description	ioc	Process
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	2026-06-01_ae1156abbce2aa4c64eafcd9810d60d4_dark-comet_darkgate_elex_gcleaner_glassworm_hijackloader_stealc_stop_tofsee.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	._cache_2026-06-01_ae1156abbce2aa4c64eafcd9810d60d4_dark-comet_darkgate_elex_gcleaner_glassworm_hijackloader_stealc_stop_tofsee.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	._cache_Synaptics.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Synaptics.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	._cache_Synaptics.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	HD-CheckCpu.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	HD-CheckCpu.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	Synaptics.exe
Key opened	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Control\NLS\Language	HD-CheckCpu.exe

Checks processor information in registry 2 TTPs 3 IoCs

Processor information is often read in order to detect sandboxing environments.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\CentralProcessor\0	EXCEL.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\~MHz	EXCEL.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\CentralProcessor\0\ProcessorNameString	EXCEL.EXE

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key opened	\REGISTRY\MACHINE\Hardware\Description\System\BIOS	EXCEL.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemFamily	EXCEL.EXE
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemSKU	EXCEL.EXE

Modifies registry class 3 IoCs

description	ioc	Process
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	2026-06-01_ae1156abbce2aa4c64eafcd9810d60d4_dark-comet_darkgate_elex_gcleaner_glassworm_hijackloader_stealc_stop_tofsee.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	Synaptics.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	Synaptics.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
4864	EXCEL.EXE

Suspicious behavior: EnumeratesProcesses 19 IoCs

pid	Process
5004	BlueStacksInstaller.exe
2652	BlueStacksInstaller.exe
2652	BlueStacksInstaller.exe
2652	BlueStacksInstaller.exe
2652	BlueStacksInstaller.exe
2652	BlueStacksInstaller.exe
2652	BlueStacksInstaller.exe
2652	BlueStacksInstaller.exe
2836	BlueStacksInstaller.exe
5004	BlueStacksInstaller.exe
5004	BlueStacksInstaller.exe
5004	BlueStacksInstaller.exe
5004	BlueStacksInstaller.exe
5004	BlueStacksInstaller.exe
2836	BlueStacksInstaller.exe
2836	BlueStacksInstaller.exe
2836	BlueStacksInstaller.exe
2836	BlueStacksInstaller.exe
2836	BlueStacksInstaller.exe

Suspicious use of AdjustPrivilegeToken 3 IoCs

description	pid	Process
Token: SeDebugPrivilege	5004	BlueStacksInstaller.exe
Token: SeDebugPrivilege	2652	BlueStacksInstaller.exe
Token: SeDebugPrivilege	2836	BlueStacksInstaller.exe

Suspicious use of SetWindowsHookEx 9 IoCs

pid	Process
4864	EXCEL.EXE
4864	EXCEL.EXE
4864	EXCEL.EXE
4864	EXCEL.EXE
4864	EXCEL.EXE
4864	EXCEL.EXE
4864	EXCEL.EXE
4864	EXCEL.EXE
4864	EXCEL.EXE

Suspicious use of WriteProcessMemory 11 IoCs

description	pid	Process	procid_target
PID 1584 wrote to memory of 3304	1584	2026-06-01_ae1156abbce2aa4c64eafcd9810d60d4_dark-comet_darkgate_elex_gcleaner_glassworm_hijackloader_stealc_stop_tofsee.exe	81
PID 1584 wrote to memory of 4972	1584	2026-06-01_ae1156abbce2aa4c64eafcd9810d60d4_dark-comet_darkgate_elex_gcleaner_glassworm_hijackloader_stealc_stop_tofsee.exe	82
PID 3304 wrote to memory of 5004	3304	._cache_2026-06-01_ae1156abbce2aa4c64eafcd9810d60d4_dark-comet_darkgate_elex_gcleaner_glassworm_hijackloader_stealc_stop_tofsee.exe	84
PID 4972 wrote to memory of 1248	4972	Synaptics.exe	85
PID 1248 wrote to memory of 2652	1248	._cache_Synaptics.exe	88
PID 2892 wrote to memory of 1380	2892	Synaptics.exe	90
PID 2652 wrote to memory of 2424	2652	BlueStacksInstaller.exe	91
PID 1380 wrote to memory of 2836	1380	._cache_Synaptics.exe	93
PID 5004 wrote to memory of 1092	5004	BlueStacksInstaller.exe	94
PID 2652 wrote to memory of 3816	2652	BlueStacksInstaller.exe	96
PID 2836 wrote to memory of 2112	2836	BlueStacksInstaller.exe	98

C:\Users\Admin\AppData\Local\Temp\2026-06-01_ae1156abbce2aa4c64eafcd9810d60d4_dark-comet_darkgate_elex_gcleaner_glassworm_hijackloader_stealc_stop_tofsee.exe
"C:\Users\Admin\AppData\Local\Temp\2026-06-01_ae1156abbce2aa4c64eafcd9810d60d4_dark-comet_darkgate_elex_gcleaner_glassworm_hijackloader_stealc_stop_tofsee.exe"
1⤵
- Adds Run key to start application
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:1584
- C:\Users\Admin\AppData\Local\Temp\._cache_2026-06-01_ae1156abbce2aa4c64eafcd9810d60d4_dark-comet_darkgate_elex_gcleaner_glassworm_hijackloader_stealc_stop_tofsee.exe
  "C:\Users\Admin\AppData\Local\Temp\._cache_2026-06-01_ae1156abbce2aa4c64eafcd9810d60d4_dark-comet_darkgate_elex_gcleaner_glassworm_hijackloader_stealc_stop_tofsee.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:3304
- - C:\Users\Admin\AppData\Local\Temp\7zS8EC05168\BlueStacksInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\7zS8EC05168\BlueStacksInstaller.exe"
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:5004
  - - C:\Users\Admin\AppData\Local\Temp\7zS8EC05168\HD-CheckCpu.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS8EC05168\HD-CheckCpu.exe" --cmd checkHypervEnabled
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      PID:1092
- C:\ProgramData\Synaptics\Synaptics.exe
  "C:\ProgramData\Synaptics\Synaptics.exe" InjUpdate
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Modifies registry class
  - Suspicious use of WriteProcessMemory
  PID:4972
- - C:\Users\Admin\AppData\Local\Temp\._cache_Synaptics.exe
    "C:\Users\Admin\AppData\Local\Temp\._cache_Synaptics.exe" InjUpdate
    3⤵
    - Executes dropped EXE
    - System Location Discovery: System Language Discovery
    - Suspicious use of WriteProcessMemory
    PID:1248
  - - C:\Users\Admin\AppData\Local\Temp\7zS0E411478\BlueStacksInstaller.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS0E411478\BlueStacksInstaller.exe" InjUpdate
      4⤵
      Executes dropped EXE
      Suspicious behavior: EnumeratesProcesses
      Suspicious use of AdjustPrivilegeToken
      Suspicious use of WriteProcessMemory
      PID:2652
    - - C:\Users\Admin\AppData\Local\Temp\7zS0E411478\HD-CheckCpu.exe
        
        "C:\Users\Admin\AppData\Local\Temp\7zS0E411478\HD-CheckCpu.exe" --cmd checkHypervEnabled
        5⤵
        Executes dropped EXE
        System Location Discovery: System Language Discovery
        
        PID:2424
    - - C:\Users\Admin\AppData\Local\Temp\7zS0E411478\HD-CheckCpu.exe
        
        "C:\Users\Admin\AppData\Local\Temp\7zS0E411478\HD-CheckCpu.exe" --cmd checkSSE4
        5⤵
        Executes dropped EXE
        
        PID:3816

C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE
"C:\Program Files\Microsoft Office\Root\Office16\EXCEL.EXE" /automation -Embedding
1⤵
- Checks processor information in registry
- Enumerates system info in registry
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of SetWindowsHookEx
PID:4864

C:\ProgramData\Synaptics\Synaptics.exe
C:\ProgramData\Synaptics\Synaptics.exe
1⤵
- Executes dropped EXE
- Drops file in System32 directory
- System Location Discovery: System Language Discovery
- Modifies registry class
- Suspicious use of WriteProcessMemory
PID:2892
- C:\Windows\SysWOW64\._cache_Synaptics.exe
  "C:\Windows\system32\._cache_Synaptics.exe"
  2⤵
  - Executes dropped EXE
  - System Location Discovery: System Language Discovery
  - Suspicious use of WriteProcessMemory
  PID:1380
- - C:\Users\Admin\AppData\Local\Temp\7zS465F4058\BlueStacksInstaller.exe
    "C:\Users\Admin\AppData\Local\Temp\7zS465F4058\BlueStacksInstaller.exe"
    3⤵
    - Executes dropped EXE
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    - Suspicious use of WriteProcessMemory
    PID:2836
  - - C:\Users\Admin\AppData\Local\Temp\7zS465F4058\HD-CheckCpu.exe
      "C:\Users\Admin\AppData\Local\Temp\7zS465F4058\HD-CheckCpu.exe" --cmd checkHypervEnabled
      4⤵
      Executes dropped EXE
      System Location Discovery: System Language Discovery
      PID:2112

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Privilege Escalation

Boot or Logon Autostart Execution

T1547

Registry Run Keys / Startup Folder

T1547.001

Defense Evasion

Modify Registry

T1112

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Location Discovery

T1614

System Language Discovery

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Synaptics.exe

Path C:\ProgramData\Synaptics\Synaptics.exe
Size 1.6MB
SHA256 f103e09b2c63f5dfb439a8029ff30c0d4f9bc59a7005bcd4562e5ddf8ae0d377
MD5 ae1156abbce2aa4c64eafcd9810d60d4
SHA1 7be24b56a4b5965fca5126688ca31ecf48602898
SHA512 2a759b0f7580e8e819d925fa7c2971d518d537a61dc8d8b75813cbce2679378c74ce5c9dea34947abc11ba3f081f0067d6ffb6554ede0ef6adfa4ac86f4cedad
SSDEEP 24576:EnsJ39LyjbJkQFMhmC+6GD9YivtCXWeGKHFGMzB0Oc1CvwUq:EnsHyjtk2MYC5GDDtCXWPycKPcIRq
TLSH
T1C975BF267191C037C1231FB98C9ADB675429FE413F26750E77E41E4C6F39A812AB62B3
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlueStacksMicroInstaller_5.11.56.1003.log

Path C:\Users\Admin\AppData\Local\BlueStacks\BlueStacksMicroInstaller_5.11.56.1003.log
Size 1KB
SHA256 ed6ac54d08cabd77a199398eb56d46d35375a6b2472991bdca800370a557ec29
MD5 76d81e92be6161a19e611c983d1d0a32
SHA1 d38a847277645d97d58704a2f469ba561281b16c
SHA512 f8353ce8a4acc976f8144e5fd759a73bbe7d6a2febbcae385316b129197f0ba264586db01d98cef0a43924af592b0bb6767d0e254eec148146800775c4a557cc
TLSH
T1D331E7F0057AE1ADF31A16C3E2A07CEF510A782311D768656FD938C8CA7144A4BAE973
MD5 SHA1 SHA512 TLSH

Submit Download

BlueStacksMicroInstaller_5.11.56.1003.log

Path C:\Users\Admin\AppData\Local\BlueStacks\BlueStacksMicroInstaller_5.11.56.1003.log
Size 3KB
SHA256 337521e063463a5a263b165d1ab3d71195901896da541244d3a27fb4fffbab9f
MD5 1b45bfef260ec2951346a66d034b2e3b
SHA1 8fa7cb67331d494eb2f8b56b483c2cd76f71e650
SHA512 d57713d3a2c026a767991e84d28ad40eb0e85cb0dafd6628b087dcd01edeebb473a5673af355b68e5846c61480331886071d721a5c87d7f5cd9b03953c6ca05f
TLSH
T1768148E005BAD5EEF31A12C7E2A17DEF5109782315D768616FD938C8CA624064BEE873
MD5 SHA1 SHA512 TLSH

Submit Download

Logs.log

Path C:\Users\Admin\AppData\Local\Bluestacks\Logs.log
Size 381B
SHA256 54bdfa5e20020630e4c7dc131e3d5b20fb12bcee36f2eb8c94618fddfc9af660
MD5 71e2ebaf75896804540c813b6771870a
SHA1 eee11bca0d3ce119f9ea4e63ea1aca9be76b32f6
SHA512 ab496b2cc90792932128ea095662e74935a0100873cf9b07f2ba7e7dfa9700828fd7d834e113aa6df271dd31a054694bc2fba64c07bcf4030424ebd4b7c56ed1
TLSH
T1FDE022F14069D099E38002E27000B9FA0403F03762CA0460EBCA34C88B6304804ACD73
MD5 SHA1 SHA512 TLSH

Submit Download

Logs.log

Path C:\Users\Admin\AppData\Local\Bluestacks\Logs.log
Size 932B
SHA256 fc7575167f108adecbb62ae4dbc3bd30f1da4a985963ea62fd106be05ef4be1e
MD5 333293b3a1c47702a2b200d8e11c5610
SHA1 cc782ad87c14c864bba545a51fc3e014592aaf21
SHA512 d03e0583b9545ba83b3a0fbe5c37cc893955b35dba18e72f79848bdff278e4d6055b70747c0f86a53b29823454ef8875a73d6302fe5f1348e81639acf0e58a07
TLSH
T11E112BF145B6E29EE35402DAF050BDEE1907742321D61461EBD63CC4CF6245919ADCB3
MD5 SHA1 SHA512 TLSH

Submit Download

._cache_2026-06-01_ae1156abbce2aa4c64eafcd9810d60d4_dark-comet_darkgate_elex_gcleaner_glassworm_hijackloader_stealc_stop_tofsee.exe

Path C:\Users\Admin\AppData\Local\Temp\._cache_2026-06-01_ae1156abbce2aa4c64eafcd9810d60d4_dark-comet_darkgate_elex_gcleaner_glassworm_hijackloader_stealc_stop_tofsee.exe
Size 892KB
SHA256 fe94ac4cf00a017a75644d241199a304cf9f2cfc8a3b18c9da081c33c03e8fcc
MD5 4ab4a263f586d1a1cc5e0236fe3c8263
SHA1 c2ddcd0cd42c8965505692a66e62ec83bcdb2bb1
SHA512 ada2ecdd065ed98bb66d22c3808784e5c07217c49e92d62a8c3ee0294e1017ffb32f53a967ebb31f8b171c9e325eefaf04e095b6d403b87f9951c4c001f105cd
SSDEEP 12288:uivtCXQd0gjKX7zuqGKHFGPDy1xSrBU0AFjQrM0M2bKc1Cvwzfk6An:uivtCXWeGKHFGMzB0Oc1CvwUn
TLSH
T16F15CF5C21A1C0B7CA530FF2C4D5DF636114FA853B23A12EA6912E997A30E964BF7137
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

exit_close.png

Path C:\Users\Admin\AppData\Local\Temp\7zS0E411478\Assets\exit_close.png
Size 670B
SHA256 7aaef329ba9fa052791d1a09f127551289641ea743baba171de55faa30ec1157
MD5 26eb04b9e0105a7b121ea9c6601bbf2a
SHA1 efc08370d90c8173df8d8c4b122d2bb64c07ccd8
SHA512 9df3c723314d11a6b4ce0577eb61488061f2f96a9746a944eb6a4ee8c0c4d29131231a1b20988ef5454b79f9475b43d62c710839ecc0a9c98324f977cab6db68
TLSH
T1150188D435988F4D07CD96678D540F00C8F0461AC4C9DC13461508608658574BA57F96
MD5 SHA1 SHA512 TLSH

Submit Download

minimize_progress.png

Path C:\Users\Admin\AppData\Local\Temp\7zS0E411478\Assets\minimize_progress.png
Size 212B
SHA256 2f62d4e8c643051093f907058dddc78cc525147d9c4f4a0d78b4d0e5c90979f6
MD5 1504b80f2a6f2d3fefc305da54a2a6c2
SHA1 432a9d89ebc2f693836d3c2f0743ea5d2077848d
SHA512 675db04baf3199c8d94af30a1f1c252830a56a90f633c3a72aa9841738b04242902a5e7c56dd792626338e8b7eabc1f359514bb3a2e62bc36c16919e196cfd94
TLSH
T115D023D757C544F46915072E4DFF4C13502144235F318518C54B0D7F75217908579FC2
MD5 SHA1 SHA512 TLSH

Submit Download

i18n.en-US.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS0E411478\Locales\i18n.en-US.txt
Size 17KB
SHA256 64447fd07169bcac318a5d0050163d9c35461559f078d808013717a73c74da80
MD5 afdab4141bdd259bdf57c3459887e0d7
SHA1 b1405390b7f11212ea7c97c68aadf43d2accd410
SHA512 bcd6fa7e8688f43b291710ec14f14164e344371350486b103270bbe7a7d0faded58ca0129bce9d58441cdcb1812c0169f5179788f4e5c24d68955038c9ecce68
SSDEEP 384:aBvGq6rKPsL/ds89JplYTWfUvcABRGjV+qXOJtUmEIpNjU6+FKvtCFV30Y4TWEaU:aBvGqaKPsL/ds893l+WfacWRGjV+qXO/
TLSH
T1FC822C8BD777136DAAE1014A94E93542B507A35B33683A11BCADC07B1B1790E133FADE
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

backicon.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\backicon.png
Size 15KB
SHA256 fa64884054171515e97b78aaa1aad1ec5baa9d1daf9c682e0b3fb4a41a9cb1c1
MD5 7ff5dc8270b5fa7ef6c4a1420bd67a7f
SHA1 b224300372feaa97d882ca2552b227c0f2ef4e3e
SHA512 f0d5a842a01b99f189f3d46ab59d2c388a974951b042b25bbce54a15f5a3f386984d19cfca22ba1440eebd79260066a37dfeff6cb0d1332fca136add14488eef
SSDEEP 48:b//6zMh8k29WJsEvda/PSeld0/u1BLW3qLWoxN+Y9rNGZGvsc5uG7yUWT:b/Ss8kEWmkGPMAxNXrNGZGvsc5VyUA
TLSH
T1D36250A4FDF17565D849F6321DC168068C730B83EA809C86BACE8D277F01BE98C4F196
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

checked_gray.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\checked_gray.png
Size 538B
SHA256 d8e502fab00b0c6f06ba6abede6922ab3b423fe6f2d2f56941dabc887b229ad3
MD5 ce144d2aab3bf213af693d4e18f87a59
SHA1 df59dc3dbba88bdc5ffc25f2e5e7b73ac3de5afa
SHA512 0f930edd485a0d49ef157f6cc8856609c087c91b77845adeb5cc8c8a80ebc7ec5416df351ffa1af780caad884dbb49dcc778b0b30de6fb7c85ffef22d7220ebe
TLSH
T1ADF020933A94808CE3CEF532B6CA805BE8FE9315948B568AC890D03FEC81D5C0994F88
MD5 SHA1 SHA512 TLSH

Submit Download

checked_gray_hover.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\checked_gray_hover.png
Size 412B
SHA256 d7c79677d2ef897fa0ad1efc90e916c46da29f571208f78f24505603b7165c20
MD5 ea22933e94c7ab813b639627f2b38286
SHA1 c5358c5cb7fb1a0744c775f8148c2376928fb509
SHA512 ba447a1aedec49419e2b4a8de85c6047886f1a5ebb94f1c45e205a3780c6826f412a3892e97115b35e43839f43e346f3c72ffbf0c57d57f6d26b360ae61b3964
TLSH
T136E0ABF082CDCCD8C65FA12625E91D12FDA419264446A5387920BA5BB60EA58F8C9B32
MD5 SHA1 SHA512 TLSH

Submit Download

close_red.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\close_red.png
Size 15KB
SHA256 d0b6d143642d356b40c47459a996131a344cade6bb86158f1b74693426b09bfb
MD5 93216b2f9d66d423b3e1311c0573332d
SHA1 5efaebec5f20f91f164f80d1e36f98c9ddaff805
SHA512 922a7292de627c5e637818556d25d9842a88e89f2b198885835925679500dfd44a1e25ce79e521e63c4f84a6b0bd6bf98e46143ad8cee80ecdbaf3d3bc0f3a32
SSDEEP 48:2/6FwMlYk29WJsEvkch6/Clu5tlL88Lem/fLu5A/luaxN+Y97sc52G7Z+EazEyIc:2SFvYkEWmDCccHAxNX7sc5dZabT
TLSH
T1CA625065BDF075A65589F5322CC564055C730B83DAC09C88FACE5C2B6F01BEA9C1F58A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

close_red_click.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\close_red_click.png
Size 15KB
SHA256 d5a7e6fc5e92e0b29a4f65625030447f3379b4e3ac4bed051a0646a7932ce0cd
MD5 6db7460b73a6641c7621d0a6203a0a90
SHA1 d39b488b96f3e5b5fe93ee3eecb6d28bb5b03cf3
SHA512 a0e6911853f51d73605e8f1a61442391fad25ff7b50a3f84d140d510fd98e262c971f130fb8a237a63704b8162c24b8440a5f235f51a5c343389f64e67c1c852
SSDEEP 48:2/6FwMlYk29WJsEvkch6/ilABnlL88L0t/wLAB2/I/dxN+Y97sc52G79dBXjmh9:2SFvYkEWmDiuGHxNX7sc5d5e
TLSH
T156628365FDF071A59849E2332DC628446C770B83DAC19C88BACE8C276F107ED8C4F296
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

close_red_hover.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\close_red_hover.png
Size 15KB
SHA256 7c625ae4668cc03e37e4ffc478b87eace06b49b77e71e3209f431c23d98acdd0
MD5 5ceab43aa527bc146f9453a1586ddf03
SHA1 88ffb3cadccb54d4be3aabf31cf4d64210b5f553
SHA512 8a5c81c048fb7d02b246ed23a098ae5f95cdf6f4ca58fd3d30e4fe3001c933444310ca6391096cfaeed86b13f568236f84df4ea9a3d205c0677e31025616f19e
SSDEEP 48:2/6FwMlYk29WJsEvkch6/9al3UlL88LHT/7L3D/piWxN+Y97sc52G7+lKM4ONuTM:2SFvYkEWmDcCxNX7sc5d+lvVqM
TLSH
T104627065FEF175A59589A1322DC124026C370B839BC09C48FADE9C276F11BED8C5F687
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

custom.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\custom.png
Size 17KB
SHA256 fbece8bb5f4dfa55dcfbf41151b10608af807b9477e99acf0940954a11e68f7b
MD5 03b17f0b1c067826b0fcc6746cced2cb
SHA1 e07e4434e10df4d6c81b55fceb6eca2281362477
SHA512 67c78ec01e20e9c8d9cdbba665bb2fd2bb150356f30b88d3d400bbdb0ae92010f5d7bcb683dcf6f895722a9151d8e669d8bef913eb6e728ba56bb02f264573b2
SSDEEP 96:wkEWMrbxNXW5G53p1pCcXdV8WMIPX7kTCM4:wkEdV8WM4YWM4
TLSH
T168727229FDF2B2EC450A523339C654015D7307C3E681AC85BACE8D162F21BDD8C8F659
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

custom_click.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\custom_click.png
Size 15KB
SHA256 1318e0f34a551edae1e82818fdf7de5ac627493db5b24556d919f525052d5b90
MD5 ced07c9db242115400e159d9a02bb7b7
SHA1 6f2bebd1714dd7522479b5f3e3f2b3f0d18e8c77
SHA512 d52e63792a5b4172d4ac4e2d369b22b170578616d04de5a40be15b260a2741bf8158b3aed9509760c334283360dd13a4fa21538fc4547ba464be5dd700a22b70
SSDEEP 48:zM+k29W8sEvWccxN+Y9hNM/sTpBCq8LRNp/bI7cdp2G7urBubDtxvTJYuEEOr:lkEWR3xNXsfCcXdkBSfrJmEOr
TLSH
T19E62A565BDF1B1A08546F2331DC158465C370783FA829D89B6CE8D276F117D99C0F24A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

custom_hover.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\custom_hover.png
Size 15KB
SHA256 d588ef0eaa334ed8482f32e5839a7ee0d0b544d5b8d5f7720b8c57010e080424
MD5 f3e05f142e742e25a98d4f5af3ae0623
SHA1 88363e81ddef700803f4859d2f3f0b4af516bbf3
SHA512 5f07a7163c9834564dc4de5a1a484ac8208151bc244f8e72d64556abf88c35f6a81dd6718a3e6f681265c10e2dbbadb07570fa64c31113342a88fd605019496a
SSDEEP 48:zM+k29W8sEvWDVDnxN+Y9Ou/1bTOBCus8LeL/DmI7cdp2G78Ainnqu9C:lkEWRrxNXO61SomCcXd89bC
TLSH
T1E1628625BDF176A49546E2322DC968455C3B0B83DAC19D89FBCD9C276F007DD8C4F28A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

error_icon.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\error_icon.png
Size 1KB
SHA256 666ad4fe456216ddc06618967846ed31f81d8db5be97da6531842c0667352b89
MD5 dab2c4538a83422b5deae0e0de9b7a30
SHA1 78c2ab2271aa4020df1e0289bc3c1ba9a43fd424
SHA512 24cb30a68ce117ba16edd1e94c7d066343eb265c874cd55467db2f913c01b9d776b2ad846e3414cd820c0ba10d93f132aea27739d16165b6e9dd5fbc8890bfdc
TLSH
T18B412ED999C54CDCAEC5780AB5D7DC51981274A6106AF1C02142DE68E491B2DD41DF43
MD5 SHA1 SHA512 TLSH

Submit Download

exit_close_hover.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\exit_close_hover.png
Size 575B
SHA256 bcc053a9a087e077d58114106d29701a34f7851f4052f3157102811355d3e709
MD5 92c2bf222d6ab81fe7a0c072bf31c107
SHA1 8853eb08a2aa3e99fae6dabb9cff6461704f2a2e
SHA512 6548d0038f4bda1db69de0729cc9648725d744953649a396b9147afb16abf018a5aef7ff7d3bb019031863f20c81bc202d6e37d171027ab9fde3b37402e179c7
TLSH
T1BDF0A2D73D44456846A9882916A297E139784616408E194FE880E4999BD66C061CA5A5
MD5 SHA1 SHA512 TLSH

Submit Download

installer_bg.jpg

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\installer_bg.jpg
Size 78KB
SHA256 4c7471c986e16de0cd451be27d4b3171e595fe2916b4b3bf7ca52df6ec368904
MD5 3478e24ba1dd52c80a0ff0d43828b6b5
SHA1 b5b13bbf3fb645efb81d3562296599e76a2abac0
SHA512 5c8c9cc76d6dbc7ce482d0d1b6c2f3d48a7a510cd9ed01c191328763e1bccb56daeb3d18c33a9b10ac7c9780127007aa13799fa82d838de27fbe0a02ad98119d
SSDEEP 1536:/8jAVIA5IyKedQSsmprMWI/xKdefJeGhuvIDU1pY7EQGZRV3/X35ev:IAVPVsylI/xJfJHovsU1poEBZP/H5ev
TLSH
T15473F1DC3E9FDDD855E1A3964224A3ED3E99B85E258FFD8CB8200506705A4E37DE7012
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer_logo.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\installer_logo.png
Size 14KB
SHA256 9f3104493216c1fa114ff935d23e3e41c7c3511792a30b10a40b507936c0d183
MD5 e33432b5d6dafb8b58f161cf38b8f177
SHA1 d7f520887ce1bfa0a1abd49c5a7b215c24cbbf6a
SHA512 520dc99f3176117ebc28da5ef5439b132486ef67d02fa17f28b7eab0c59db0fa99566e44c0ca7bb75c9e7bd5244e4a23d87611a55c841c6f9c9776e457fb1cbf
SSDEEP 384:APozDg4Z4zsdNDNDTex/fsjmL6XLVY1mp2cU:soDh9DcImMVY1mp2d
TLSH
T12362CF8345C9484CB71B62083B181956892C3B839BEB1DBF15417C5B327E60E0ABBF93
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

installer_minimize.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\installer_minimize.png
Size 113B
SHA256 a064f417e3c2b8f3121a14bbded268b2cdf635706880b7006f931de31476bbc2
MD5 38b539a1e4229738e5c196eedb4eb225
SHA1 f027b08dce77c47aaed75a28a2fce218ff8c936c
SHA512 2ce433689a94fae454ef65e0e9ec33657b89718bbb5a038bf32950f6d68722803922f3a427278bad432395a1716523e589463fcce4279dc2a895fd77434821cc
TLSH
T162B02BC13608FC34C64E0935416290009921001D011024101E0500680C1B19051A4F00
MD5 SHA1 SHA512 TLSH

Submit Download

installer_minimize_click.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\installer_minimize_click.png
Size 112B
SHA256 2599d6a55a8e12b1f05a6e8982d55559151a25ae3690e6637510b6283622dd95
MD5 08fc39a69fa17e0f529915919cea1633
SHA1 2966a3f739698e2ce368585fb7f6ac4eae4497b1
SHA512 f5eae902f9b631410b03b6d4f9be1b4cf6547a94f1a2eee6bf70b0f3036499c01a42c9d58cf98ffbe10edbe79577a01e64faf0e527a70bc9470a1c3d9263b805
TLSH
T1AFB022C2380CAC28838EA03B8A23B000BC2A828B00802222AA00002A002C0C002A2F02
MD5 SHA1 SHA512 TLSH

Submit Download

installer_minimize_hover.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\installer_minimize_hover.png
Size 112B
SHA256 57aae4bf49dcbb0ad6cff6263200015c89d7752dc75c2ad918bf846e1ce9646d
MD5 18fb6465b029206477d0222e8da6fdf9
SHA1 b7f91e5e3002a5d3c84a30ca6cebe1a89a65ba7b
SHA512 f045dfed35ea9ff31336cd354a0dd2e9a7ac2582cea1d25a444fffa3bd01e03d73611f786873a81a27a370e5ddb3a6043713e29f064d274088df1c925eb6785f
TLSH
T183B012D2B70DBD78D78D147A4663A00DFC3546EE04C12A19A60996E8019C4C861E1F52
MD5 SHA1 SHA512 TLSH

Submit Download

installer_upgrade_image_bg.jpg

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\installer_upgrade_image_bg.jpg
Size 19KB
SHA256 b7f75233e633107d50f24ca82099225c83a832571cd2ce92901f2db3897f058b
MD5 3bb85d2c8cef28c89a2d07adf931e955
SHA1 596d13e7742455afce8a534382b28cfd2f6aa185
SHA512 7075fe989d69ad5f0f4cca5fbbbabad16e0949c2ab8538f3f96020b831a4ec1cc3a701dcb7332e577b5eceba230449efbbf8e288dad47a53d76e40c2337dc730
SSDEEP 384:/8iAqLzu1zmpwEUPz9eWAwtHDLlKOHEA3QPVu3cTlf7bW:/8ywhxePkthHzQPVGcT17y
TLSH
T1BF92E0B6CFD4A3C7D1051278E84217553BD6CE09F8F68A36902D5EC5E8336E9EE234A4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

loader.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\loader.png
Size 279B
SHA256 076263cc65f9824f4f82eb6beaa594d1df90218a2ee21664cf209181557e04b1
MD5 03903fd42ed2ee3cb014f0f3b410bcb4
SHA1 762a95240607fe8a304867a46bc2d677f494f5c2
SHA512 8b0e717268590e5287c07598a06d89220c5e9a33cd1c29c55f8720321f4b3efc869d20c61fcc892e13188d77f0fdc4c73a2ee6dece174bf876fcc3a6c5683857
TLSH
T17FD0EB93F339AC52F8018213C788083CD2FA26852E476E4C022A8CB60280D3E8AE018B
MD5 SHA1 SHA512 TLSH

Submit Download

minimize_progress_hover.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\minimize_progress_hover.png
Size 214B
SHA256 1a4aaa46893e2a9b011c478fbb0cd0e84c199f9f3520703189640088969ef5cd
MD5 fc2a0361a751177d3aacdba9c31b2682
SHA1 0a8f672d7a8777d1106e3b8ee36bd6e45bd322ab
SHA512 a15542c90972387133d86f6a94c17435432b1493b02502533c4d7978428ed7d44a7d3c5564fe08946561638f8a5a3dd0b35b81979c2929dcc386ee5f6f7ecccb
TLSH
T106D023C377054CB9490546BF45EF10917E93041A4D70C90454DB493E2428551E82D607
MD5 SHA1 SHA512 TLSH

Submit Download

powered_by_bs.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\powered_by_bs.png
Size 9KB
SHA256 3d2afe5236ec813d9e8063bc43eb34b88c2155784e1bce19c6a533c32767af35
MD5 7a2e5c21140aa8269c2aafd207f5dbaa
SHA1 4e0d9e7e1b09e67eba10100d73dc51623517821e
SHA512 63f512559f2068a9702c7c527c126f6017cd8d1d16af52e41b884aa9a64ff4294a57243ec78c3a416f70fb6178a79877d68345357725ff92c935709a2ef8adde
SSDEEP 192:NwY0zaBp8tTgj/cX/X1OKlY9n8O4pNP6NANqb/MgQJisi9oDxEFGho3R:NwY0zGMTgj/cXon3WPfNi/TQxiWD+3R
TLSH
T10522AFC920E4D231E2B4CB364744AA1F35C718E9694451EA09681F3F6DDBBA47E618CB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setpath.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\setpath.png
Size 15KB
SHA256 5bbb2f41f9f3a805986c3c88a639bcc22d90067d4b8de9f1e21e3cf9e5c1766b
MD5 b2e7f40179744c74fded932e829cb12a
SHA1 a0059ab8158a497d2cf583a292b13f87326ec3f0
SHA512 b95b7ebdb4a74639276eaa5c055fd8d9431e2f58a5f7c57303f7cf22e8b599f6f2a7852074cf71b19b49eb31cc9bf2509aedf41d608981d116e49a00030c797c
SSDEEP 96:iS5YkEWmE5+W+BxNXrNGyxGvsc5RxZ8af:iSqk6C+z5mf
TLSH
T10E624E65FDF0B565D989E2322DC928025C730B83D6809D45BACE8CA72F00BE98D5F593
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setpath_click.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\setpath_click.png
Size 15KB
SHA256 c94924e95a49b175c8fc00bdc2821bb70a85b864cc193becc553b32f0024dde1
MD5 624e84e9b49bc150043aa9fb0eed2822
SHA1 f23f2a4ec609e3e9cff9319533e561968ccabb22
SHA512 288e1954d29bd3d22b56fadb2e0d3d10580a540fa1f2bab1284d957708bad96df5e38b67c6dc14784e1e275b89082c57370b786c0d0c4307601c0d2bf3704460
SSDEEP 96:iS5YkEWmEZVW/5xZTbxNXrNGyxGvsc5Rz:iSqk6p/5xZTd5g
TLSH
T1C8624064FDF2B965D589E2321DC168065C770B83D5C0AC85BBDE8D276F00BA98D4F683
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

setpath_hover.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\setpath_hover.png
Size 15KB
SHA256 2da3f9367c847e47131370dd163f611c4639287512a47f487e0025c5665830e0
MD5 b1e53a76b6ddb3ecff52bfc1a8e5b09d
SHA1 012b5879e879fa25bf48e4bb62c35ee829eea571
SHA512 4369891858b4adaf9144636c44b55979290177bcff57f67f341071e42e90f992531024e122c0bc5436ddb8c55e994e7b913ec37137a642dc0164e6e2516f0b68
SSDEEP 96:iS5YkEWmECF8WgrZxNXrNGyxGvsc5RhZ8af:iSqk6pfM75uf
TLSH
T177626164FDF1796A9559E2321DC928064C730BC3DAC09C85BACE8C666F00BED8D4F583
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

unchecked_gray.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\unchecked_gray.png
Size 192B
SHA256 671f26795b12008fbea1943143f660095f3dca5d925f67d765e2352fd7ee2396
MD5 e50df2a0768f7fc4c3fe8d784564fea3
SHA1 d1fc4db50fe8e534019eb7ce70a61fd4c954621a
SHA512 c87a8308a73b17cbdd179737631fb1ba7fdaeb65e82263f6617727519b70a81266bb695867b9e599c1306ee2cf0de525452f77ce367ca89bf870ea3ae7189998
TLSH
T1BBC02292B92C9C6E868A003BF0311A40A03B037201808A199211E020D6967328B832B2
MD5 SHA1 SHA512 TLSH

Submit Download

unchecked_gray_hover.png

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Assets\unchecked_gray_hover.png
Size 176B
SHA256 a631e26bd5b6ea19c8c65b766a056c92ba8a47e1483768dcf12b05293c9a7a0d
MD5 62d7f14c26608f8392537d68f43dece1
SHA1 add4f30e7c3af4f7622e6bc55d960db612f3bb0a
SHA512 e41210a78e6076954f75a2f73c0f7628e8604a09ecbb1d2ee0972741d4ef1d814b366828977c02944736b03ed116bc559a2ae47ddb7cbc6f4e54578c8263edf4
TLSH
T1A5C0C0C216ACBC3DC88E2C3A38DEFC91FE2104FD00D8080F7C05E42412144C4D0A1202
MD5 SHA1 SHA512 TLSH

Submit Download

HD-CheckCpu.exe

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\HD-CheckCpu.exe
Size 200KB
SHA256 2e14887f3432b4a313442247fc669f891dbdad7ef1a2d371466a2afa88074a4c
MD5 81234fd9895897b8d1f5e6772a1b38d0
SHA1 80b2fec4a85ed90c4db2f09b63bd8f37038db0d3
SHA512 4c924d6524dc2c7d834bfc1a0d98b21753a7bf1e94b1c2c6650f755e6f265512d3a963bc7bc745351f79f547add57c37e29ba9270707edbf62b60df3a541bc16
SSDEEP 3072:KjDeWjpu716WoCYv8NBa3eSx8LHGYwj6V4NL1q7HOAg0FujFfnk601hWNxK:opcoCYv8Xa3eSqL8j/3AOpNq
TLSH
T1FA147C10B4C18433D9B715314DF8DAB99A3DB8110B2559EB73D80B7E4F346E3BA31A6A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.ar-EG.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.ar-EG.txt
Size 22KB
SHA256 cafaae4284775b01b30a302038d0f906228fd1601f6f92f86a9d7a64740a949a
MD5 2fc470c94b751dea811f6718aa820cdf
SHA1 2473362cf95e14b08525c504213d8672330ffe8c
SHA512 d1b971d97d62eee88ba8843d8ff983ce930f7e4b1eeba5b7e466488c6bd06c0f71cbe1400c3b712f7ba8998dc2bf49c301eab7a0f01915eccce03d39cc0c7869
SSDEEP 384:7p2FOkxzPHa9nyhxKSRxeEAUYKCN3hsGIv9X+8hM8WKfsXp8DAx3yXHOpjbyaZFG:7pkOkxzPHa9nyh/xaULCZhyv9X+8hM8L
TLSH
T1ABA2BCE24A3642714BE6890AD1E13468D477BE23B38EF831389B8532578750FD36DB79
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.ar-IL.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.ar-IL.txt
Size 14KB
SHA256 65e7b0f37b5e2aa805ac8d57969804d803430186f34e9703ca9fa09ba908ef90
MD5 9fb07e066cc2f213a64d35a97a8c2922
SHA1 a70db989f5c562bc69caad89a1402c8ad7c9b80e
SHA512 81680bff55b475a62a4bf29a8c219230b84894c1165f60e372209a5aacdba8e4819c3dfb76f3b55c15d472ababeabf0cd4b30c04e7daa26df63c8a5101970c3c
SSDEEP 384:yOBwYhy3MToUwSB6128OTHwezHZKaja95x1mYflbAGYTl6kMCeYYbXdHtiDeONER:yOBwSy3MToUJBJ8OTHwezHZKCa95xMYH
TLSH
T1516284D412C7037583B1A84BDFA4BC10EFB78E3235AAB9207645411A5D9B4D6F326ABC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.de-DE.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.de-DE.txt
Size 19KB
SHA256 34eed8d2bd7562bdd69d7b03e44bf5ddd8d95958329208a626bc9681c8ff8a98
MD5 aa9a125e3532e388e93f1a0636266cd1
SHA1 e56b97448af0aff9d74e70eeed691b4fe38685c9
SHA512 8b0aba5dbff43f68e3cb0412982f90a0a1a2c43026a1a7378f42f2667f06732f86476ccca8a753bffbd551d686f3cad5e7b12e3d956b617d312302e6257afc18
SSDEEP 384:WFu0uF++ll0OrMgw0sQmgcTPN1VH3RIw//UQL0ctXIh20r2KB+ExqGPRpVoA/p7i:W80uF++ll0OrMg1sQmgcr7VH3RIw/cQx
TLSH
T169923FD7D67B236DA2C21309A4A67953B45BF36B32693A112DDCD43B0B0346E037C9D9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.es-ES.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.es-ES.txt
Size 18KB
SHA256 72c44ee6d3fa4908baa99d40e3e565258cc70e095453632a36a5e60e381929ba
MD5 f060f79affc7b5ff644db023c757293e
SHA1 8571ce9f66be6e8ca1a66c01fe4d28a31bc3e321
SHA512 09badde6d025a26970fdd00c07edc20490c2cc407b4ed0a1408ea1cdd692feaa4f3ee522bd4c7a93fab231491711f772df3e0d89dcbbd8806f3e032ee5960d8f
SSDEEP 384:VjeAKX46zHt0V4QZXdomruFXT/Z5QZOFINJ0mOImrmmoZvu5a13ZUQjyXIxpnl45:VjebX3zHte42domruFXT/ZKZOFINJ0mI
TLSH
T13E927193C6BB1359A6E2050944D6B613E047B31B342CAA51BCBEC533279B94E433EADD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.fr-FR.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.fr-FR.txt
Size 19KB
SHA256 4afd4d3f6f2d39b63ab97d22b7c5cbb39719396c2a659a13784cc63de9c6a131
MD5 11914239247581b44297af9ebdc4abf0
SHA1 c5fd0a02121a320a08bf583164a8ef59436b6b1a
SHA512 016c10dd99dcbf71fa670ca32d5aaad04cfb3d8c5618d83fa2ec6857ac7d72fe1888fe0854ce9261a4daea87d3f767b2c66c8b4085358726d1b24c54e90d61b7
SSDEEP 384:SJfHJ89vJE24kOm/MEoWiahdgkkIqlIeDUwRwXJm2IxmUxTjwL1vbqBksBetjmbK:SJfHJ8TE24kOm5oXahek1qlIeDLRwXJr
TLSH
T1BE9294CFD6BB135CA6C1021A64E23513E827B32B726876107CAEC12B079789D537E9DD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.id-ID.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.id-ID.txt
Size 17KB
SHA256 4c5b9143fe03022927746a8dd36fba4888257815d301616cc0dd2d24d40b46bd
MD5 8343545115de103b6513b5f8bb0b86fb
SHA1 ae212125f4f6d104acccd0e32a4b098437281072
SHA512 893a5841f838223e3cad5eb1c7e64ba8f84c9e559913b59f00489ba2c3968c33c5032e86937148a4c02a5d9ab8c66ed9c4085d5b823d6af695d3e7adab122f3f
SSDEEP 384:LVh/rDVUGQxb+MfNqShmJl4Hk9Jwc9QDJabbmLwI+p6cm1/KhRGv5SWVeszaEJgN:LVh/rDeGQxbTfNqSkX4Hk9JZQ9abbmL0
TLSH
T1D582EC87C67B234C66D502D880EA3606684F7327775836212DACCE331B57A5E133EACD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.it-IT.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.it-IT.txt
Size 18KB
SHA256 8ee83d9f4a9ff38551b1344d4336344ea59fd02235780c07ee214d6fc1be8466
MD5 bae112965398422ca81998a199f05ae9
SHA1 7c501e752a5dbb5af4e909cdac4b10a0869ddc19
SHA512 a1252507c5ee0c093e4d45816cc98724d2fe3fa368e16336c558531f718d97cc57ad25efa60e82d45252d8f1a857b7ba97d3bd6e1910821d3e6c8bb09d6cbacb
SSDEEP 384:4g47uKBBJfNU2OfGVmHuFha/HkNLdfXLlmKBeuCrahmD9I5GE9KlvYq9HVx591Es:4R7uKBBdNU2QGo+o/HkNLdfXLl34uCrP
TLSH
T1F48252BBD67B1358A6E3020D84E53005B51BB39B7A2C35102CAEC13B278B90D677DADD
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.ja-JP.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.ja-JP.txt
Size 21KB
SHA256 fecd2ea2e436b489c5ca8b4b6cc527275150ef0fc202cbc6812b130c47617121
MD5 7ba627a33030cce61657009102e1dc67
SHA1 a8e919b0d9981da7b749ec2408d6cb64924dfc84
SHA512 852618b5a6999ac63740ee6557dce33fc293b21bb7702ea00562195560466a63d374f3fa607f15cadb9a1324a99f69c46be2fbda532952b212593094c56de8bd
SSDEEP 384:dhOYuPDlfOPhK/trDWUfmGV/MwU9L8zRMcDultsltdcujYdFgtZXgVBcFLbEs/BD:dhOFZfOPumlGV/MR8zRMcDultqbcujYK
TLSH
T175A2C16ED3B72765DAC1026204ED35C1A407AE5BF9A53A31196DC0327F2268ED73CDB8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.ko-KR.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.ko-KR.txt
Size 19KB
SHA256 4842dbe9b95a738a8008f0970b06a8c53684c7453c0010316feb9ec0eac46a18
MD5 1031d95695f223f765823cea83dad64d
SHA1 a06a83b29c308255d19f634bcaabd4d740bcc245
SHA512 0836ad2af7e3f2c6da098fa52e37edd3b47c1c34acb10c1b58a943b7c0ad5e59ead05cbb6084bc3587e2c036b1eb2821315c8e56e425c517518aa0a02400a2ef
SSDEEP 384:Trw8SNRRvgTzqbpvuoBKd7Gugcg/UzuYv2BnTFbBzpQ1Y9UW3l9sFO+4nJVMtkEy:Trw8SNRRITzqbpvuoi7Gugcg/UzuY+BT
TLSH
T1C49240E39ABB0388A2D2044159E9B6015247B327B76B39607D9CCC7B4F5698F033D9ED
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.pl-PL.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.pl-PL.txt
Size 18KB
SHA256 9eb07f0705cb5b1f3da6681ff106ab5532eee082bf8a32931d7c25b9cc98f4a4
MD5 f41019645f2ab4f7782d9055213f6c16
SHA1 35df264e0576c24f30866c79ffd38da388c25b4f
SHA512 a7a4ad451b45c2d56f1e12112dc36eeaaf4ed8e0b68c222eec4d68722439b977928291e22d1578142ec3e489c68ae3a4b71ca7676f3eabe7eaca3730ee9bb6fe
SSDEEP 384:ZfLi/oyBnk/sYSZXA7aV1kymyZ50jjfuXfdEQTBnLWcaYW161gIZtiJqENX/rvEV:ZfLi/oyBk/sYSNA7a7ky9Z50jjfuXfdJ
TLSH
T17A82448BC2BB178DABE1048C94F63646A48F736B725C7A553CAEC027174750E037DA9E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.pt-BR.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.pt-BR.txt
Size 18KB
SHA256 63912d615871188db923d55a88a540a64e4276e2b383b8af69e609404fbf9e81
MD5 541c5b2e9153b00e9bc9d732758ad1ae
SHA1 79f96d06a6fa1d35bf273d1d844d278bb31345c2
SHA512 495a5dd325e521cfd1c3df04fa92ab20038b7cac92583990cf2067a5353ba48ee20cea36b1070b07b752a85215825ed7cb33889e3afbb02b388adfce7c68357c
SSDEEP 384:lIQnBaZYmiAJ1ot2OTo9qUs7KJGTYf+CX5I+GgZeIhaagZtvR8Oh1/Y8p+NaYcjW:lIQnBaZYm7JqtTTo9qUs7KJGTYf+2I+7
TLSH
T16882619BC7B7034997D1034654E63A03B587331B392CA942ACAECA2357D784E173EDD9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.ru-RU.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.ru-RU.txt
Size 25KB
SHA256 3b0f5e4663ee13c1e3d92252d5bd5a2bbdf1b82eb2ef5966e8e2cfe44ed52c04
MD5 a129f8826545c8592a3eeeddfe836f40
SHA1 577dce8b4e7b786f37f702b76f45c5a2ba25bc32
SHA512 a25f0838ea5a64dc12c927d479cbb9bc036e868d5a71464e1e1691c104b36ce38693fe7114b2135dc1a9bfc7dbd70096d19ad522f6c9f505f3f76d748ef0dfc8
SSDEEP 768:U3Lzj4kLoepGBXY9BhwFdPjokDmu3B9+emNsUkfXaDvo7pkkNzJnuJd47DQfOB/q:U3Lzj4kLoepGZY9BhwFdPjokDmu3B9+Z
TLSH
T1AAC2DD5286BB22DE12C1A00BD8547D0A78DB62FF3B6E671228A86D7F36F3018533D559
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.th-TH.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.th-TH.txt
Size 30KB
SHA256 8d13595bfe54368239d45cf5b567a89deead621627c68802c894c89dd62d22b4
MD5 f28be3c34575da2bdd145c29fc60c583
SHA1 8b587bd82e80c7686e3d95f5b1fd7ced1cb80b5a
SHA512 8be0f6a7755f50a69f7650d7931abd050cb80ae2b2e9e30ae255c740e86b5d6c51124d1df3600500e70848e941216c29aba2756cf8a42c3ff36b32ac28493100
SSDEEP 768:JK5FChNcKP+L982kGu5W9d/Tz3mYgzkKg1nCFe1HfB75OWIRyIFFf9c1EMe1g60I:JKvsdmfkGuAPv3T/9MWIbfiEMavlgiFT
TLSH
T142D29C7362575A9475C01A0B25AA7340661BBF6B3B72F8D0588D606723F170E8336EFB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.tr-TR.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.tr-TR.txt
Size 18KB
SHA256 426c9fe8c7a9a0241b7d350c189354539c4f573216a3c36224b09b683a3f73e5
MD5 f40d617acf0dd479c44ab5e0e7b18a35
SHA1 a4e2ba424eb5e4d6609b66c0561824b1a9b60612
SHA512 5a9eae12387aeda8f149f939e0454a91e9d106277dffa068c97922dc3082591290227bf1efe566cd4676206c2fefe2247be3a98138450dd8e4ba6edbac214f36
SSDEEP 384:HNcbnt7WE3EMQ2yM2lj/EuvNVYyvRelkxe6KyqjefgmdpO32o595FXhy9uLLurvG:HNWnt7WE3NHyMaj/jNVYyvRwkxe6Kyqd
TLSH
T1F9823E93EA7B170D93D2158A90E53602F44BB72B3364B9017DADC4375B8729F13BD988
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.vi-VN.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.vi-VN.txt
Size 20KB
SHA256 a3bcda3d73c50c6bf5c83bb8776fa528db5ce5c550226afa7124df360ae1bcd6
MD5 0df617f28c7809f8482bbb2c38b340b9
SHA1 8529933d46bc396e395f9215e5342f21669c8037
SHA512 52a6dd0cc31c424b978c5ee82b5c54c5820a088db92650264e5889b52e519fed865ba484e3a3ba60e921360c441b1a461fd6a7cc213914d2d37096f2efca7a3f
SSDEEP 384:dcFiHdtPv3OS38Lu0OY3QpLDgOMpGteyp83kn+RlmkIgCYWDY7onzket2V6tzaSf:d+iHdtPv3OS38pOY3QpL8OMQ4E83kilg
TLSH
T16BA2F053477A235491DD542DC8E93809ABCBB62FF2946E503CAC847B5BA700D2B3DE8D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.zh-CN.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.zh-CN.txt
Size 16KB
SHA256 45038b7817538089392393312bf6814fd8edea8ff63a59c06f7d7bfb1d5999ab
MD5 211e3a4600b5d4321225911a04f4a9e1
SHA1 427508634fc39a689e9351ee165b674ff1846bee
SHA512 24855ff45cc2af5f638d300ad2a6e20a8b172c852638597135c039c664ba05a8ab4d240d3f55246c40be21a710b1316ed0ba2355f990948ecc68cbe05c4e2336
SSDEEP 384:EN6Rgh7vvsXikllMeH/1y3N93GcchtmLOoyIEmDIOShDqcFKkHkCVN4H/DjPY62Z:EN4gh7vvsikXlf1y3H3GcchtcOorEmUH
TLSH
T1B672E993C27B1798D2C2114455F9391AA457B32B73E8BEA26D9DC4232F5790E073CE8E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

i18n.zh-TW.txt

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\Locales\i18n.zh-TW.txt
Size 16KB
SHA256 3f28b65236e2113704f1979b88d2e052c4b7e3eac0f4316755878842c49014a5
MD5 cc964efa164eb43d248b66e8681a8f01
SHA1 5ca4b4522d571b0ecde9032edb5c13841b91bdd0
SHA512 9810c8101a94c54b9a01bb07c56fb4b1a5171ae124cfca3452b188a95497f8da2da9eb600cb6307e19ba6408c43483ce26487bd35e5543b6ff31c22f5d41f996
SSDEEP 384:sEdHm612cAxJJhl/lJWHo0UYcGgm0jIVBz3QmrIjgjFFTkxtlVtvM9Y7hnySV9mO:sEdHm6kcAxJTltsHo0UNGgm0jIVR3Qmw
TLSH
T1B87209A7CA7B0B9CD2C1265846E53906640B731B36E87E627CACC1736F1791E173C98E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ThemeFile

Path C:\Users\Admin\AppData\Local\Temp\7zS465F4058\ThemeFile
Size 80KB
SHA256 de1a2e6b560e036da5ea6b042e29e81a5bfcf67dde89670c332fc5199e811ba6
MD5 c3e6bab4f92ee40b9453821136878993
SHA1 94493a6b3dfb3135e5775b7d3be227659856fbc4
SHA512 a64b6b06b3a0f3591892b60e59699682700f4018b898efe55d6bd5fb417965a55027671c58092d1eb7e21c2dbac42bc68dfb8c70468d98bed45a8cff0e945895
SSDEEP 1536:Vq0UZUzBB6YjhX8knUVXVqlp1D88p/LUP8f/MPFntuevdxG+PchojU1yZwbP8fZS:pUFmL
TLSH
T178832B9DEADD3C39323F52AEB6361453C847301B7912896ABA1F21215FBC89F3417B25
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlueStacksInstaller.exe

Path C:\Users\Admin\AppData\Local\Temp\7zS8EC05168\BlueStacksInstaller.exe
Size 597KB
SHA256 8b7657ccf76b1b036d540387c409f25665abe00b13bd3ec4baa4dfeff72c15ba
MD5 0e894366b039ee8d0d055717d43dbf0a
SHA1 83290090e5ea8f4cfaf475c269e99d58c5de108c
SHA512 60a208e9915b61e22656b219f5de8f10fcf577b094604e640761358a3a3a5d713c4ad21d099ab5b4ebc587f434fed65f0ee1785b74cd46b9deb27e2597488165
SSDEEP 12288:vCvqzUVRppRCmImV2OGFPKkUZvB5b6MCy/82:qqzGfpwmImV2O8LUn82
TLSH
T176D4094923F48526F2BF4FB9A4B14F134635FD567A52D61E0181288E2DB2B41CEB273B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

BlueStacksInstaller.exe.config

Path C:\Users\Admin\AppData\Local\Temp\7zS8EC05168\BlueStacksInstaller.exe.config
Size 324B
SHA256 d6d316584b63bb0d670a42f88b8f84e0de0db4275f1a342084dc383ebeb278eb
MD5 1b456d88546e29f4f007cd0bf1025703
SHA1 e5c444fcfe5baf2ef71c1813afc3f2c1100cab86
SHA512 c545e416c841b8786e4589fc9ca2b732b16cdd759813ec03f558332f2436f165ec1ad2fbc65012b5709fa19ff1e8396639c17bfad150cabeb51328a39ea556e6
TLSH
T1C9E0C21941D8FD2B5D734B13A3128852EFB0A2A391A4544CF0EE7F830F3308A6697332
MD5 SHA1 SHA512 TLSH

Submit Download

JSON.dll

Path C:\Users\Admin\AppData\Local\Temp\7zS8EC05168\JSON.dll
Size 411KB
SHA256 d2c8d26f95f55431e632c8581154db7c19547b656380e051194a9d2583dd2156
MD5 f5fd966e29f5c359f78cb61a571d1be4
SHA1 a55e7ed593b4bc7a77586da0f1223cfd9d51a233
SHA512 d99e6fe250bb106257f86135938635f6e7ad689b2c11a96bb274f4c4c5e9a85cfacba40122dbc953f77b5d33d886c6af30bff821f10945e15b21a24b66f6c8be
SSDEEP 6144:GmyZXnmtWrnngnnnKnanlywwwBwwA5wwwwswww+wwwGwwwbwwwLwwwwwwwwwnwwd:GmIWtWrnngnnnKnanxNYhX
TLSH
T11F947250D8535838CA244778BA7396B02DF9EC718A07E6716B207EE7F13BA20ED75532
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

C1685E00

Path C:\Users\Admin\AppData\Local\Temp\C1685E00
Size 22KB
SHA256 ef66b8b70bd5fc9fc969d9a33db4e15bf3d8af57a82a37c1badbefc68e3d4438
MD5 2092513d79c454d43d47b7737de66da2
SHA1 fabc3ec4dff87ecc114c27f22b030e84534cc949
SHA512 f63bc0f3d8845b4b788f5e024aa84a92b89f9e7a625472ac1e95d49e49647431d9a437716e21c84b1d076ee48f89858d6808684d7266dd0cf5b607ee35174121
SSDEEP 384:MUMmLw47p+o5bUKMz+vSESRMCpccaw/OIpPXqEnRJF8BOPd/33tVIdyR1LQg:MUMm8474o5bUKw+vSLpNZ/LvRBMOPd/Z
TLSH
T10DA2E101EE29EC1BF43248BAD2180375F7553243D04D5C0E2599D3F76A9A9C3A7A768E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TvQCoJAI.xlsm

Path C:\Users\Admin\AppData\Local\Temp\TvQCoJAI.xlsm
Size 17KB
SHA256 8e574b4ae6502230c0829e2319a6c146aebd51b7008bf5bbfb731424d7952c15
MD5 e566fc53051035e1e6fd0ed1823de0f9
SHA1 00bc96c48b98676ecd67e81a6f1d7754e4156044
SHA512 a12f56ff30ea35381c2b8f8af2446cf1daa21ee872e98cad4b863db060acd4c33c5760918c277dadb7a490cb4ca2f925d59c70dc5171e16601a11bc4a6542b04
SSDEEP 384:oUaZLPzMfVSa1VvYXmrsdPkLmDAx7r/l0:oUatwNSSvY2IdsHr/y
TLSH
T15482B009E788FC53D03B503E442E18B5270D7186724BDA0C384A365A66DA79F47AF6CF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/1584-1-0x00000000004A0000-0x00000000004A1000-memory.dmp

Download

memory/1584-231-0x0000000000400000-0x00000000005A1000-memory.dmp

Download

memory/1584-0-0x0000000002440000-0x0000000002441000-memory.dmp

Download

memory/2652-646-0x000000001D780000-0x000000001D7B8000-memory.dmp

Download

memory/2652-647-0x000000001D750000-0x000000001D75E000-memory.dmp

Download

memory/2652-637-0x000000001E440000-0x000000001E968000-memory.dmp

Download

memory/2892-495-0x0000000000400000-0x00000000005A1000-memory.dmp

Download

memory/4864-417-0x00007FF984890000-0x00007FF9848A0000-memory.dmp

Download

memory/4864-475-0x00007FF9825F0000-0x00007FF982600000-memory.dmp

Download

memory/4864-411-0x00007FF984890000-0x00007FF9848A0000-memory.dmp

Download

memory/4864-476-0x00007FF9825F0000-0x00007FF982600000-memory.dmp

Download

memory/4864-412-0x00007FF984890000-0x00007FF9848A0000-memory.dmp

Download

memory/4864-414-0x00007FF984890000-0x00007FF9848A0000-memory.dmp

Download

memory/4864-410-0x00007FF984890000-0x00007FF9848A0000-memory.dmp

Download

memory/4972-233-0x0000000000400000-0x00000000005A1000-memory.dmp

Download

memory/4972-701-0x0000000000400000-0x00000000005A1000-memory.dmp

Download

memory/4972-716-0x0000000000400000-0x00000000005A1000-memory.dmp

Download

memory/4972-742-0x0000000000400000-0x00000000005A1000-memory.dmp

Download

memory/5004-653-0x000000001DAD0000-0x000000001DAD8000-memory.dmp

Download

memory/5004-420-0x000000001C530000-0x000000001C598000-memory.dmp

Download

memory/5004-409-0x0000000000230000-0x00000000002C8000-memory.dmp

Download