deb86fa83c092e6e4a963c43cb36109e8622b46b0a32c7009e7abf1d194ba632

Analysis

user interaction
yes
max time kernel
146s
max time network
137s
platform
windows11-ltsc_2024_x64
resource
win11ltsc2024-20260911-en
resource tags

arch:x64arch:x86image:win11ltsc2024-20260911-enlocale:en-usos:windows11-ltsc_2024-x64systemwindows
submitted
24/10/2026, 17:17

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
Unishade-Setup-0.6.2.exe
Size 3.3MB
Sample261024-vtq3csfd46
SHA256 deb86fa83c092e6e4a963c43cb36109e8622b46b0a32c7009e7abf1d194ba632
MD5 1ca1426dbd6af5900322db3f272d94ac
SHA1 59da7507f24082ff9b53b985b8233cecea1ec3d5
SHA512 e14d7d1f04f52d6fbb7e3b76bc6f9886e120eb775d3234996385a3f13e17f9ab4402be5b4dbffa06cdaef98360893618f7b329c2e6380d021291403e7e9af0d6
SSDEEP 49152:+dGeNQ5epuwk1+knmjJK6qhuaQhV2nvRTLgb1IcSFH1nJKjJHpJwewm3znIC:ppQEkyuezJJsZ
TLSH
T1EDF5BE1AA2E401FCE0BBC179CE969907EB72780A07709ADF07E056951F637E05F7A712
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery

Malware Config

Signatures

Downloads MZ/PE file 3 IoCs

flow	pid	Process
26	4080	Unishade-Setup-0.6.2.exe
26	4080	Unishade-Setup-0.6.2.exe
26	4080	Unishade-Setup-0.6.2.exe

Executes dropped EXE 2 IoCs

pid	Process
4112	ReShade-Setup.exe
2320	Unishade.exe

Loads dropped DLL 3 IoCs

pid	Process
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012

Contacts third-party web service commonly abused for C2 1 TTPs 3 IoCs

Legitimate web (hosting) services can be abused by malware authors to host malware or C2s.

Web Service

T1102

flow	ioc
1	raw.githubusercontent.com
9	raw.githubusercontent.com
16	raw.githubusercontent.com

Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

Reads the TCP/IP host and domain name from the registry 1 TTPs 6 IoCs

The configured hostname and DNS domain identify the machine and are commonly collected to profile a host before it reports in.

discovery

System Network Configuration Discovery

T1016

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Unishade-Setup-0.6.2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Unishade-Setup-0.6.2.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	ReShade-Setup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	ReShade-Setup.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Hostname	Unishade.exe
Key value queried	\REGISTRY\MACHINE\SYSTEM\ControlSet001\Services\Tcpip\Parameters\Domain	Unishade.exe

Modifies Control Panel 1 IoCs

defense_evasion

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000\Control Panel\Colors	Unishade-Setup-0.6.2.exe

Modifies registry class 41 IoCs

description	ioc	Process
Set value (data)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 02	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{d3162b92-9365-467a-956b-92703aca08af}\Instance\	Unishade-Setup-0.6.2.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Mode = "4"	Unishade-Setup-0.6.2.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:PID = "0"	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{088e3905-0323-4b02-9826-5d99428e115f}\Instance\	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	Unishade-Setup-0.6.2.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 00000000ffffffff	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{4336a54d-038b-4685-ab02-99bb52d3fb8b}\Instance\	Unishade-Setup-0.6.2.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\IconSize = "16"	Unishade-Setup-0.6.2.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByKey:FMTID = "{00000000-0000-0000-0000-000000000000}"	Unishade-Setup-0.6.2.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupByDirection = "1"	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A8CDFF1C-4878-43be-B5FD-F8091C1C60D0}\Instance\	Unishade-Setup-0.6.2.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\MRUListEx = ffffffff	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{374DE290-123F-4565-9164-39C4925E467B}\Instance\	Unishade-Setup-0.6.2.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\Sort = 000000000000000000000000000000000100000030f125b7ef471a10a5f102608c9eebac0a00000001000000	Unishade-Setup-0.6.2.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\ColInfo = 00000000000000000000000000000000fddfdffd100000000000000000000000040000001800000030f125b7ef471a10a5f102608c9eebac0a0000001001000030f125b7ef471a10a5f102608c9eebac0e0000009000000030f125b7ef471a10a5f102608c9eebac040000007800000030f125b7ef471a10a5f102608c9eebac0c00000050000000	Unishade-Setup-0.6.2.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1"	Unishade-Setup-0.6.2.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots = 0202	Unishade-Setup-0.6.2.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1\NodeSlot = "2"	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\NotificationData	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{B4BFCC3A-DB2C-424C-B029-7FE99A87C641}\Instance\	Unishade-Setup-0.6.2.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\FFlags = "1092616257"	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1CF1260C-4DD0-4ebb-811F-33C572699FDE}\Instance\	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{A0953C92-50DC-43bf-BE83-3742FED03C9C}\Instance\	Unishade-Setup-0.6.2.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\LogicalViewMode = "1"	Unishade-Setup-0.6.2.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = 0100000000000000ffffffff	Unishade-Setup-0.6.2.exe
Set value (str)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\Shell\SniffedFolderType = "Documents"	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3dfdf296-dbec-4fb4-81d1-6a3438bcf4de}\Instance\	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg	Unishade-Setup-0.6.2.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}\GroupView = "0"	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	Unishade-Setup-0.6.2.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1 = 14001f481cffcda87848be43b5fdf8091c1c60d00000	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\1	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{3ADD1653-EB32-4cb0-BBD7-DFA0ABB5ACCA}\Instance\	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{f86fa3ab-70d2-4fc7-9c99-fcbf05467f3a}\Instance\	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{24ad3ad4-a569-4530-98e1-ab02f9417aa8}\Instance\	Unishade-Setup-0.6.2.exe
Key created	\REGISTRY\USER\S-1-5-21-1704430598-3087477806-3297458608-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\Bags\2\ComDlg\{7D49D726-3C21-4F05-99AA-FDC2C9474656}	Unishade-Setup-0.6.2.exe

Suspicious behavior: EnumeratesProcesses 64 IoCs

pid	Process
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe

Suspicious behavior: GetForegroundWindowSpam 2 IoCs

pid	Process
4080	Unishade-Setup-0.6.2.exe
2320	Unishade.exe

Suspicious use of AdjustPrivilegeToken 1 IoCs

description	pid	Process
Token: SeDebugPrivilege	4112	ReShade-Setup.exe

Suspicious use of FindShellTrayWindow 3 IoCs

pid	Process
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe

Suspicious use of SendNotifyMessage 3 IoCs

pid	Process
2320	Unishade.exe
2320	Unishade.exe
2320	Unishade.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4080	Unishade-Setup-0.6.2.exe
4080	Unishade-Setup-0.6.2.exe

Suspicious use of WriteProcessMemory 2 IoCs

description	pid	Process	procid_target
PID 4080 wrote to memory of 4112	4080	Unishade-Setup-0.6.2.exe	89
PID 4080 wrote to memory of 2320	4080	Unishade-Setup-0.6.2.exe	91

C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-0.6.2.exe
"C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-0.6.2.exe"
1⤵
- Downloads MZ/PE file
- Reads the TCP/IP host and domain name from the registry
- Modifies Control Panel
- Modifies registry class
- Suspicious behavior: GetForegroundWindowSpam
- Suspicious use of SetWindowsHookEx
- Suspicious use of WriteProcessMemory
PID:4080
- C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\ReShade-Setup.exe
  "C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\ReShade-Setup.exe" --headless --api dxgi "C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\reshade\Unishade.exe"
  2⤵
  - Executes dropped EXE
  - Reads the TCP/IP host and domain name from the registry
  - Suspicious use of AdjustPrivilegeToken
  PID:4112
- C:\Users\Admin\Documents\Outlook Files\Unishade\Unishade.exe
  "C:\Users\Admin\Documents\Outlook Files\Unishade\Unishade.exe"
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Reads the TCP/IP host and domain name from the registry
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: GetForegroundWindowSpam
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of SendNotifyMessage
  PID:2320

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s CaptureService
1⤵
PID:3244

C:\Windows\system32\svchost.exe
C:\Windows\system32\svchost.exe -k LocalService -p -s CaptureService
1⤵
PID:2372

Network

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Query Registry

T1012

System Information Discovery

T1082

System Network Configuration Discovery

T1016

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

18159EBD3277736D0444419407768451_2FD781D15115165DD3192E4E42E088C7

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\18159EBD3277736D0444419407768451_2FD781D15115165DD3192E4E42E088C7
Size 313B
SHA256 fc74daf542642cc7fbd3da172569a24d6044b1aced251daf43eeb132bba6941b
MD5 ba06585434062dacc3a5f731f0bdfb5c
SHA1 0a88d58b9a8fe0d0f8d9a02c8294a6cf4e06a178
SHA512 5ae20cf5c98d1599ee1e63383bb58c2fcf0b68f9c8b32db7ba88eca4a4d764fe86b01cdc20910adb2ee4ae2887d9318cb70c0c66b67f5c6f8e02178ac7ae2641
TLSH
T19AE07D19E60D25A13E120F714171452BB401108D848EA60DB91C09D10C47326D907508
MD5 SHA1 SHA512 TLSH

Submit Download

421EC2E1E0F47FC59DB99BB19E16DA88

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\421EC2E1E0F47FC59DB99BB19E16DA88
Size 278B
SHA256 aa127391105344e3fdc5bb79aa83e5fe84fbe3fbdab295c0a15844df595163e3
MD5 07ee69dc747b4e11ce7d8cb7c16175d2
SHA1 7b541c98dacacd622306b3c9823d314023c14657
SHA512 5e84548c6b41c0cbcfb85f39c81f32b41bc5ab5534107f77da39df5633ef41890d4e09b07416ecb3ff50bfb90f7e08a9abb69866a98b24a43b06ff353f02309e
TLSH
T1D2D09513ECF75D223F35CD3454D05A15724364A793D6D658F5C1C5D454459791F03248
MD5 SHA1 SHA512 TLSH

Submit Download

D0E1C4B6144E7ECAB3F020E4A19EFC29_A16793B4EA930C0E219244CEE32C9A44

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\D0E1C4B6144E7ECAB3F020E4A19EFC29_A16793B4EA930C0E219244CEE32C9A44
Size 976B
SHA256 ac3b9420d8f28ab9603b250a1645eb92d819b1e80938bc9a7a62db83694b8df6
MD5 77926681e106c6f5f18af1d72cb4e264
SHA1 0f649289cff3929d6a05b48de459152c307416ed
SHA512 978b7c78b433a6a777b1c2fa616eeb2cacd7658736438be800c43d8ef0dc3ffe884e66d321e2cc4fe2c204f12dfa293a3019fa912cd30da82be300db2cdd50f7
TLSH
T1FB1165D65FE4B08049E30760CAF4C1253CB034812CEA748118828996309675DBF0903E
MD5 SHA1 SHA512 TLSH

Submit Download

18159EBD3277736D0444419407768451_2FD781D15115165DD3192E4E42E088C7

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\18159EBD3277736D0444419407768451_2FD781D15115165DD3192E4E42E088C7
Size 488B
SHA256 a43d1fbe1e80055886af40315d4466d3e975b07042bf6abd87319ff5434e8b5b
MD5 57fe1e2b96e365696ba4be2fd3dcd014
SHA1 a2cca065b13a8eee1082e5543414fb91f39ffd21
SHA512 85f788138ffbc6986413768077140d507a211353896aa22886f50eb11d5e8e7544b6cd638dabb8e7d383e9b0861614f3c78f0dc6558b813c954c098c334f70fc
TLSH
T10DF0EC3C46FC40BDE036DA78DAD6F6577E15F232584445A91A924B089903F426D55524
MD5 SHA1 SHA512 TLSH

Submit Download

421EC2E1E0F47FC59DB99BB19E16DA88

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\421EC2E1E0F47FC59DB99BB19E16DA88
Size 484B
SHA256 2ce36ef85932dcb86398477d0c5f6670cf7258a5e8db33068b003722a6eda027
MD5 868ddc2c70dfbe945eeacfb32e4edfdf
SHA1 ac8ed6012dad1eb30e5e94585bcf9856c5dbb8bf
SHA512 47aea9b5410535a07923bddf0e2c1618b76562eaa54d7412a0bb4dedf447e40c04e3220f4bba40d2f49087f428e25952cc4a77ecd4ee2097704cc7e5e8261913
TLSH
T17EF05C186578402EF072DA39C2C122B5AD35E016780966B105E6450A5A15F013D6152E
MD5 SHA1 SHA512 TLSH

Submit Download

D0E1C4B6144E7ECAB3F020E4A19EFC29_A16793B4EA930C0E219244CEE32C9A44

Path C:\Users\Admin\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\D0E1C4B6144E7ECAB3F020E4A19EFC29_A16793B4EA930C0E219244CEE32C9A44
Size 488B
SHA256 745157e40186d24b07bafac68126c7183fdd17bdd98e435c9c72f2db711cd364
MD5 9220816a4b7ca7cca460b02e612ff4b4
SHA1 efe6ed524f7fc3d97b2a6921ccc4428408a84607
SHA512 6020139ec4b50dad52a07ab9c6947fad00e0d109d74d4fd03eb03b80429216b92eb2b19a0a6d057886bffad12d4510f8b37720bf4ba1efb817fc76a395560685
TLSH
T13EF05C2819E2426FE6696B7805F0675A9F15F2563804C4F526EA070AFE16F402C10439
MD5 SHA1 SHA512 TLSH

Submit Download

ReShade-Setup.exe

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\ReShade-Setup.exe
Size 4.1MB
SHA256 afe4c8f13048306307983b8b3d41d5bf00a86820440b0e57dea10950e1176445
MD5 f60d494242dd9e4af2936a5e504b0a60
SHA1 373d1e30d64d60044a021d84c627cff76da98daf
SHA512 399ecfc3ad428433a08873968fcaba1dcf77a260a78ab368480f557b0dbd7c40691efaa4930466a302422a8d6560f56cb087a6146c992a3c72dd2a682d45b086
SSDEEP 98304:NcEZif4vfj7ZERmkK/EUUHeX1DR+J2gxSKr2ncFuAs:NcMiQjmRwcUUHs9SVrVQn
TLSH
T1CF163301A2D28510E4FBA779B85ACCA28AFAF44795F9C2CE36CD045C1F3638E9D95713
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

addon-downloads.ini

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\addon-downloads.ini
Size 620B
SHA256 9cb1435e5aef96ca79b101f85c3c4cea09027fa9c8007d2d2aa89a7dd9331155
MD5 4422ada146917908b2e3b1442344ac2e
SHA1 3fe1a064778c86ee00a501c620231117aeb98daf
SHA512 abeecbac9ea223d57e3741fdf149dcaa76dd7d39b1b785fb22c5eef463699fa5b8bef98bfbd8c5747a3bed5e00ccfc18888955bb0094d5f3ffb8dd19c792c856
TLSH
T131F078EB56F260847F80A5D29B565A66FAE3788F8047D82950142C24E4A28F28793CB7
MD5 SHA1 SHA512 TLSH

Submit Download

addon-downloads.ini

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\addon-downloads.ini
Size 396B
SHA256 55a6465396ce0692fc0eb32611d81f6a3d18e5bc9e58f383b84976236c3c0eb8
MD5 4537b58990872bffb986763e486ca4ef
SHA1 80c367f404bccc6b9c6707cbf821d377680cf24f
SHA512 f180d6d361e50c463256ae212ee8f286ada2529398e21c62ca5282d6a270f06e0afa5abb2c5ccd08278e667b389ad6374c9c4c76b21a7c8916f03cde8a6c30a7
TLSH
T1F1E061CB511304DA3F0555C6CE882172FFD6479EC087C45DD112B81CC0A59F74196C72
MD5 SHA1 SHA512 TLSH

Submit Download

EffectPackages.ini

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\files\EffectPackages.ini
Size 24KB
SHA256 97ab336719d25359abd1ae693d12742296d6f1bccc1e18113f3b5703c9d0e414
MD5 ae8358a5c5f243465ac3449518288a6b
SHA1 616608b9cdc750a6056263489456e193b147cbe1
SHA512 c07a19d6c283319f3d318b7dc5ef130845463d723e0264fa893c2d3e964aed997fc99681946cfbbc961bae479ba197be95a6dc5c8d98509224e19b2b724c7d1c
SSDEEP 384:2UlUXf5U0JsmUE99fnRP3QsucYpMhUL4nUZwYlCAO3FGnKOAGUd5oc8ZOqojUIOE:G95PhlK3c3JWwzwPWB
TLSH
T1E7B264EB05E5C48C2E1377CDEE947DB2293A918CEC5988C892B685496DF693CD58303B
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Unishade.exe

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\files\Unishade.exe
Size 1.2MB
SHA256 1712a3c63bd293f8657e8f27b66573be8dcb69b2818418330741fb300d121247
MD5 b7118abb4c99080d7b32e298d1739e31
SHA1 06197274d18b90fff69e5ad5cef1c44478100779
SHA512 a822fa633093f628375cc0b78cf992c644e2aa49eec6e60e94b36725d00e37d479913bc3e94bc094f73692d80a59fc99b08194fee48bb7e92052e8f541ad7242
SSDEEP 24576:BqhuaQh2e2nvRT+vWJuhhvmqga9IWHUKSFH1nJKMGbu:BqhuaQhV2nvRTLgb1IcSFH1nJKj
TLSH
T16655AE1EA2D402BCE0B7C2B98E968842E772784A07B19ADF07D095654F776E44F3E713
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

GenericPreset1.ini

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\files\presets\GenericPreset1.ini
Size 1KB
SHA256 cc8899f300270e391adc6106c06673d0e2012cb78f8baadf42e45fb62b2a6b56
MD5 8b03bc05c5382f6ac0232f76cef9e123
SHA1 1bd4e43f4650f11eef29b61ba4c73d18948a19f2
SHA512 1663b73613164777e94cee08b0ece3ae33bc7136238420409c52434204a01eccb11fce79eb648345fd8d9d913bee58ab4289ce3f59dde7947976af904cc61c54
TLSH
T11931DF924D360A49F8A7C01AC7B332B021F73A2FADE8F85152C414155D4BD572B8E11B
MD5 SHA1 SHA512 TLSH

Submit Download

GenericPreset2.ini

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\files\presets\GenericPreset2.ini
Size 1KB
SHA256 608218ab87a2ca5643caabd45c538310be0a5205ec052d37c88cbeb4acecbf6a
MD5 b451581e1a8b3e8485bbe94a9cce7ab7
SHA1 8528f8070fc53469a79a79af58c99ee72bc09ea6
SHA512 a12bfdef24282e6db571edfb9e06347034e860e90e9564dc2a92d5217bc22003223a23491fc4220b86e664c1e5519bfdcf7f574d8c45ab34ee35072ef24a0bc5
TLSH
T162314182893984CDE81BC81ADBB231F412FA3E6FBDE8F46062C005600D9B9573B8E117
MD5 SHA1 SHA512 TLSH

Submit Download

StageDepthmap.png

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\CorgiFX-master\Textures\StageDepthmap.png
Size 9KB
SHA256 dd27edc7d9bfe4bdc1c237bfafa10e738432abaf4832a9d65c6b9418f079aa0b
MD5 696aee65a1eac0b861fc57f943ee6e90
SHA1 a0d531274bd002d3ef027ea6b7801f80bae6c3ac
SHA512 75f4d84ca53e01c8fc171920e51702d1e931e94dc23ff488c4da1d58e17e28f643664cd268a99f478947ce6005927d6bebf3c13bf8ab44352b4936c85e0575fa
SSDEEP 96:cSUo7FmWlknNY9sB8exHfNHTHYNf/gnMAXo:cS57FrknR2ex/Nz49Ifo
TLSH
T15612D48FED20074CE488DAB5D4FA6B69A7AF65FF510A536E6F68E4290CD0276CC0A041
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

fognoise.jpg

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\CorgiFX-master\Textures\fognoise.jpg
Size 48KB
SHA256 0a2cc46fc10922428a49e988afc4c58aef4549b147dc64d7ced1212eee98482e
MD5 738562860cd74372cb234534e2003b04
SHA1 10cab599cf259d1898af4804a12b08dee28535f9
SHA512 6b0c91b95d5ec349364d03397b918716dbf0bdaf33504ba54a0328e753d4f887980dda1bee6fd7e886844594324a460b73841367e1510ea97061a6fa82f0b8bb
SSDEEP 768:GrKlTbS0vW2814K7CqG+hPHh4WWTss4SFClh/WII1B67uz6e+rGSxrmKQaJ4Qao:GrKlnLl815Y+hPHiaEIIHTz6e/a9ao
TLSH
T19823F10AD67B9754A658E6BFB61771401AB6D004D9F30A92F084DBCEE6982CFC3D8C4D
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ArcaneBloom_Dirt.png

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\FXShaders-master\Textures\ArcaneBloom_Dirt.png
Size 716KB
SHA256 97a1ea1d13d328fbed460391fe7f5b5a7b06215be0e301d0864de6b361b4288e
MD5 5607908b9404e26ef2cab1064a650f83
SHA1 b1c43afb9d144463358854743ae90e93352a59cf
SHA512 c1dcec8b3f420bc5809554675dd49c0297efc348215894fc92cbfdbd8d9d2e08ed09b823e1b4e4e8874ce832d83b2054473bd236c4981a8aa405915e36b9fe60
SSDEEP 12288:phOUnOu75Gm+bpGo955MD2tqUlcqzepdv2g3fvUe79AsqLS130acJxeMI:7OU75G/Qo95jqiTmVkOsOOhbO
TLSH
T16CF4332F48DE3921D84F8C0D5DDAB35504A331328B74F2D5BC968AF9156EB932C8AF49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mmx_bxdf.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\METEOR-main\Shaders\MartysMods\mmx_bxdf.fxh
Size 8KB
SHA256 2052c6268c5647f67ab5a04d1147fbd0fe15bb9f597a644cc72a06c65df88e3f
MD5 e2a06b83155d5b89396b619dbfeea4a7
SHA1 b9b3749a27ad0e7cef093c9a5529185ba3906596
SHA512 3923e8b360aff61645a9c20356bb9fb76dc7d2fbae56f6689696b1a675780eafa584fbf8303e77c7a811f1d995274d7784df3e354b99d7ebd1ea20d3349693df
SSDEEP 192:zQHXSAd+F2KpB24P/XJpUPjpLTDuee/dav+R40xMn4VhmRRUwc2xuY2v+n/do:zMCBal/0BRNxM8ho+pBXT
TLSH
T18802210C1B6A11190E5AF82E9F4FEB48521A56DB4A059D017D0D73260F0A79FC2B5FEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mmx_camera.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\METEOR-main\Shaders\MartysMods\mmx_camera.fxh
Size 2KB
SHA256 d59bec69f2aa19f93cc4972fc67da257b94db69675bf730bb1d0ed4c6c029566
MD5 a47e69a2a9bc0ca91001b213481d89d9
SHA1 1b517bb10e542164a648d7ff51dc302e31abc490
SHA512 3e4df737a6217615bf14aa626319a13f95ca2e2fa1fd5f5d5b22d3be0e58d499cff8a6b5226df46b8f197f3219e6f70b5bffd9c87d8e279a6f664c200bc0fc90
TLSH
T1F141671895F68D828D1511C9DE419514B34FA2632DBEA512781EF2450FB23BDC1BB7F0
MD5 SHA1 SHA512 TLSH

Submit Download

mmx_colorspaces.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\METEOR-main\Shaders\MartysMods\mmx_colorspaces.fxh
Size 5KB
SHA256 c5a6ddf47a3896b9c439c440ba3dfe145864d896d89cd78d60d653165b04201e
MD5 e3955e3eece854a7e087478cfe463d9d
SHA1 55c67942ace91de2cd94b2f717f96b9e51c3137e
SHA512 d8f1323e493b8739386d7a8546660004edb15f7a2c76b42f1529109b7096dfba487ab44e08c4d9777f92b2645a3124907a4725fbfee6f2dad14cff4cdedf2070
SSDEEP 96:nFZQHXor0c11iy3RcEzh+JFyugxhJOz/gfYP26PrwhYREn9q290:zQHXFxyXzh+JFyugxTi/gfYP26PkhYRd
TLSH
T1E8C1559E13F394015E4DA0CADD028F94736A5DE35C29A640B44C6AD22F6672EC8A6EC9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mmx_debug.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\METEOR-main\Shaders\MartysMods\mmx_debug.fxh
Size 2KB
SHA256 1425c64bef0ba76875636c6aec17f1ce877b434f6ed354cf24b6da72107c4001
MD5 3fa070fd18b5f7b9f41ab4ca5c987b61
SHA1 c74dab72cb62294c9ea0b59d189996a688d338d0
SHA512 326674327db4d7ce9ef7d3e11fe34b989b505bab9c4f670b1ed81cfb7484ce75fe177ea3333eff6ef239ca920034a13e9a9088c4e9176a1e3f37cd2b5027cd72
TLSH
T1A251126D6DC1BDF39EA781940C09AF1492E296DA44054B0AF5CDA3429F197AEC0E7FC1
MD5 SHA1 SHA512 TLSH

Submit Download

mmx_deferred.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\METEOR-main\Shaders\MartysMods\mmx_deferred.fxh
Size 3KB
SHA256 34efa062ffb5819ae89855e18060872ab8c50e8c13cf32127e1d49a4b62057e5
MD5 8aeeac788bfed1a8bf6865b90f396bf4
SHA1 3527b3521dabfbda9fb19f39ac38b548e9d3ca07
SHA512 d7d1b6f6f1e9525a95fa1e2851764b73eb081f933c946679680b5d93bb865601ba437b798b5783055a559ccc85abe3202afc7a14c25b71659cd011454220fb53
TLSH
T10081E9D204E1A7129F471023FEE59654E06FC7C798BAC353681C0809379CBA8C1B3E9C
MD5 SHA1 SHA512 TLSH

Submit Download

mmx_depth.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\METEOR-main\Shaders\MartysMods\mmx_depth.fxh
Size 4KB
SHA256 14d747980ff5d0e7197be4e1196361eb51716fd813684ead0fefac23d7ec3dca
MD5 15c0f80dda5395ca97642b28ca6682df
SHA1 5e197759ee93ce92e6221a0a622f2e2c03f9ee62
SHA512 928244d417ee7994882efe5ea753b72cf0656f45bfb5da1580c71085a9881b7dbbcbea1de8bbdc1cc751020054128e5e8a05a6a34914f8625d196e735bbefa8b
SSDEEP 96:nFZQHXorXByxKpQnI6LpL6iVf7C5kQUfBgn3:zQHXUBqIQf7HfBgn3
TLSH
T17C81FE35ECE204D902F8867B4A836B842107F1AB69A9D199741DD88CCF743FCC5ABAD5
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mmx_fft.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\METEOR-main\Shaders\MartysMods\mmx_fft.fxh
Size 8KB
SHA256 98cd9d4254ce7fe1da856e649804d672bf009e448f0b87f18aeba5fd596da9a3
MD5 11ef64d22e12f2da919d91e0d20c5edb
SHA1 7e4d3c3beeb115958ac386c2156f68a6f2a4cca0
SHA512 07a670b4a1a3ef393220bde39e22e15dfc91b66b636811030397af28a3ce7d267ccb8613f0e28def73937b112448d69af6fd24c5ce5462ccfdea81008b0f1eff
SSDEEP 192:zQHXDWLIxcQqQ28lu6RhCSwC8/AYlPgY1dfARvSl7d8Buszxzsx:zMDqxQFllu62gABAFO7dmuixox
TLSH
T1DD12EE1BD1B35376243B46AC8FC20045C92E824374ADEA0B3C3E53946F96FAED57859A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mmx_global.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\METEOR-main\Shaders\MartysMods\mmx_global.fxh
Size 11KB
SHA256 ecbff2770f0c3aa72442c4f42512c23a23c14759794c71c2f5787f24688f9d30
MD5 ea2100be53208251d4e529528420fef5
SHA1 6629552f220659e491117b8705c280fddce6ff01
SHA512 6750e5859c78838e33d6141ea7e0f1a87d55c9fb6ef7a7f9fa3a3cc7ab581c4313cda357afd6e10535453466950c42dcc123ff277e2ec997c5811c3289eccdab
SSDEEP 192:zQHXlxhmbCykTDudG2IKYng3Vq3uIvNXKXmXjXyX6XyXaXyX6XqXaXWX6X2XOX2e:zMjhmetKYngSF6WTCqiKiqaKGqm+mOCG
TLSH
T1D2320DA0A1A1CB764D96E4508C7AAF24F34988F668DD7DD1F00C18AD3FD2759C1F4AE2
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mmx_harmonics.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\METEOR-main\Shaders\MartysMods\mmx_harmonics.fxh
Size 2KB
SHA256 f5c7490c8d5bc85adab0fd368dfa857089e766d554273175d91f31d6ae841729
MD5 b6214184a9d62414bd4e35af19ff9863
SHA1 9484f05f55b171798f62edf315c514bb5c5e9eb7
SHA512 ce876d89250bcb0eac69d289b80184903262f8b3a93869da7a4d219dd00f1d56ef2bcd1db64fbea57c95f6f75ce24c9ccf14dfb6c4ccd6156a2f44facf478925
TLSH
T1B251521A26A029620D01B39DAF87AF85400B51F6200B6551BC3CBA110F4236FF4FBBCA
MD5 SHA1 SHA512 TLSH

Submit Download

mmx_hash.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\METEOR-main\Shaders\MartysMods\mmx_hash.fxh
Size 2KB
SHA256 4c1bf89bb3881434aeffca4e7afa03355bf7e461e7438569fda5af9c45e8237d
MD5 507cf2bbe7b305912082ddfad3d443e9
SHA1 7204c1965bed0466fea4bc32916652f6429f81c7
SHA512 af04babe43762b9f398373ed6ce8e00aa49bc4a8883902530e986b092c1520ffc34738f3461b3c1bf2649ee7dca2a890ecd381d29b21ff5862145e8920edd5ef
TLSH
T12A41EF4438FAD94F6E0A86741C1C243DFA8AF5A51DEE9A01FC2C61452B1734CCCFD99A
MD5 SHA1 SHA512 TLSH

Submit Download

mmx_input.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\METEOR-main\Shaders\MartysMods\mmx_input.fxh
Size 2KB
SHA256 4564cd9ba6dd12d4ee24f03291d05ae3477c6e5b21ad64e3a948560c8644dbef
MD5 1bd583789d580c396445d62f27521c65
SHA1 d66fe4b11a8fc819ac287bfdd13ef1f212ea4a94
SHA512 7cbe31cd7dd49d49495825260fb79dfd5663bcdade1f0b4ce484fc00858eced00e49c12581450ca8e4068b81a36cb0119ad97528b3e219d146e86a2da2ddb071
TLSH
T1974184E888A20C201D2821989DA7955CE26BB977752BD9C47C4DE7081F0331DE9F7DDB
MD5 SHA1 SHA512 TLSH

Submit Download

mmx_math.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\METEOR-main\Shaders\MartysMods\mmx_math.fxh
Size 11KB
SHA256 775014fcb7e37a1c60311c817ee3fc517346e19721cd131b3d3f644f755ef034
MD5 384da6ac1038f1945e99b0334bec8264
SHA1 4955d6e04927403147130d387b95f12c3142f728
SHA512 a358a1a18ba3ce7e73bbfcb18c8eb7aa287540b40212f6e09f0dc2356402507c6b5f71b4b09acb84a7808831bfaa226975d6799ca1159ef80369fe44ee57b8f9
SSDEEP 192:zQHX3Q3XJXLX5XZrWxqFcJJQ0zWdug48pT2d1Ft/NgTfZ7A37jC7p9Bv1hu3L7ee:zM3WZbJaqpo6jHK
TLSH
T14A32743825B667C1393F5206CE6565885A5F62B36E09260DF83D32E11FCB3B9C873AD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mmx_qmc.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\METEOR-main\Shaders\MartysMods\mmx_qmc.fxh
Size 6KB
SHA256 58dac456c2ed37f3f79b58432fc71769b2c8a2ca637671998597cbb2131f362b
MD5 30b5ed11829d1c3a20b03008ec874e6c
SHA1 b974851e1c3b6a0b0b0d72aeef0ae5db18d170d1
SHA512 4744aaf8bd9ba737d7d71d9621737eed7abd2f93b1800a35e0aa91fbc4c8a34a7e2a6cd1c2e5a5f6536c43497cf48e7274a5179a0a60d99e572d6ac000889a5f
SSDEEP 192:zQHXqEThLDJCvkoAXfqXcX7I64Z7hX7F0qot7a90NVmCHbHFTzps:zMvdvc8nysMb7lCHTk
TLSH
T11ED1A81729E299832D96257DDE5A706BE705C42368EAF522382E036C1F4331CC6F1FD1
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

mmx_sfc.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\METEOR-main\Shaders\MartysMods\mmx_sfc.fxh
Size 3KB
SHA256 3ac268e3581a5057fdb45d40ae63a9190174da06e3d3e9c8c50acc86b4a2c46f
MD5 93a01884b6810bd5052253eda7edb59a
SHA1 a78de0dedcb572268e52d440a18ed71f03bcb4e9
SHA512 9575e89ac25eb63cf06d1ab27748e80c83cff7a93443070d75aeae6673027cbe943970ba95a696b9f80924386c3dd622bb3ae288d2f96e1094a40e790c1ede5a
TLSH
T1C2710EA810A62737D4065D3D5FAEB058D30AF023A9E6FC027C5C62684F11BAD86B5E1A
MD5 SHA1 SHA512 TLSH

Submit Download

mmx_texture.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\METEOR-main\Shaders\MartysMods\mmx_texture.fxh
Size 5KB
SHA256 b263d2d9c1c97d642547036cf1a0cd6d80c2230c8709f4582aff017fb2f73248
MD5 6457f11b554aea91384796d86c55de4e
SHA1 0effdf36d657639f510dbb30ef5917c0f2790fcd
SHA512 070e4855743ed9df68f3d511fb13314b0c361357b331c914c57650a5bb3ac2d659183f3f7aa7a9f674f56f48cc11a9e3a80ed336d50c52517c8ec9645289d426
SSDEEP 96:nFZQHXorTdgOdqEoh04UPwKV+MvcoPdKndqzpdI+TVNiEYjXIinYkYTYv:zQHXugOdqEohlqwKV90oAdeOWYj4inY8
TLSH
T121B1616E56921A07BE4AC11DEF82514842CB55D34EA5DD84BC0D27760FA332F9EE0BDC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

NTSC_RetroArch.fx

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\RSRetroArch-main\Shaders\NTSC_RetroArch.fx
Size 10KB
SHA256 119ffc60fc43cd315583d848c0925ffb8257eb5d5167cf3ec663b94d7ffdd12a
MD5 b7aa5abd7f8bcd830ab2155a7edb7c31
SHA1 ddcd81f72bcc6988ec2eceb062ef0c58b883102e
SHA512 96e88b12f27b8e7db2308a91ed9ce6dbd2e8425938dc566fa07a047e09fe38757106f049bb5035f2b388c0867e1d604ef59f801ddacc1cea05e3c9069d19e74b
SSDEEP 192:KxdXrpk1v438dDUHUL9ZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZZssfZZZZZZZZZZc:tpDem9ZZZZZZZZZZZZZZZZZZZZZZZZZs
TLSH
T17422ADE02BE03D45F90B9846FD4E732031B576BB08D89F4C35CC66AD1D4791AC69A29E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

lilium__font_atlas.png

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\ReShade_HDR_shaders-master\Textures\lilium__font_atlas.png
Size 14KB
SHA256 11a711a8167d1c1606892e6fa6f661a477e749d6cbdb1ff700ac381842066ec3
MD5 cbd1c9d6989a60c54f41866e876ec0ca
SHA1 e4a2e21ea6b5812a3aaa9b5a78e4b116ff3b6c12
SHA512 6076d1313af8370afe1a78769e7d4a2295fbc95a07647438588b1a14b5deb517db62ced8a662d6012886748a421f4d9d0b928091d198e21c88174b91362663cf
SSDEEP 384:NjLR7ysp92gPIjnd20yRgje1VJLHwWkxmHoCO2:NfNVIj00NjGAVxmHoz2
TLSH
T1B062BFBAA6189EABC7F008842E5A0038545D25FF2FC2285AF70F26EE1D045651FD6E5E
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

1_catmullrom_9tap_dx0p000_dy0p000.png

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\Reshade-Shades-main\misc\output\resample_vis\1\1_catmullrom_9tap_dx0p000_dy0p000.png
Size 13KB
SHA256 fb2faf0e0d9699c4ede0ca34a7217f053505892dd14c9e46dcf6be24a4233c6a
MD5 3349dfd1921f13bd3d0fcc1e896830e5
SHA1 0a97b69f5b4c980dee5fdbfd8c601591eef268be
SHA512 d4246d0add11b38675b2f4f45985e24ca6ac415aaf779bc93d219458cbdb453833ec8e7e5af8882a2d258cc284f8ec2dc327cc5475a88185f25ddf8683fe02af
SSDEEP 384:RMSYj7NBPIQKKhni7yl+96KUhARQ93ezt:WDhwyQ69AR6uzt
TLSH
T14A52BF9BB16120E2E2AC9E999B176DDC83772FC2C877464BB1FF7517150D610CA180AA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

2_catmullrom_9tap_dx0p000_dy0p000.png

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\Reshade-Shades-main\misc\output\resample_vis\2\2_catmullrom_9tap_dx0p000_dy0p000.png
Size 9KB
SHA256 d617d4fffd3ec24e598783e17669950055eca89d774e6a245b7ef36c64069897
MD5 82c276e0828a11e59422aadb9afe093b
SHA1 24718868b5359bd0f4eeee0b6d30b1fa2ac7551d
SHA512 94d266c16c47460debce9ee809a34bba00da4886639c446b86c04655438375e977d773dcec4e438fdce38e2b56f420a18e6b3d1166f07403e9aad6292fd3b73a
SSDEEP 192:vL1hLQ6cJPMsMKirk/lxaqSiW4l/mkSe9Dsayw1qcthnOxuvUG:vL1m5v4rk/lx1Sp4l/XRs0thOxu9
TLSH
T1D9129FD5C76F17BAB722B7D2B143408344CAC26E9C3E60F520DD61580BEB2DD256900A
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

3_catmullrom_9tap_dx0p000_dy0p000.png

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\Reshade-Shades-main\misc\output\resample_vis\3\3_catmullrom_9tap_dx0p000_dy0p000.png
Size 14KB
SHA256 8dccc569f27c1ee312106b3b62aa93540e66ce8bf52a81a4c4e236ff19cd75b0
MD5 e3553f4d8e3498eee15541c28916122b
SHA1 84c0977a0399366e213025be2a8254982c86711f
SHA512 e017a8fc187b3069e834345665babdc0dcc46716e5eee148bfe7aac19cddeb710a4f6f141d2a9d272111b8fa59e5269e27c8f0af5df44744b7624fadf3754eb0
SSDEEP 384:7fog7s6LAfU+WjJ7ygSliLRhxaVaHIlUa4kcmywxhEiKn1E/PV+Cb:7n41s+MJymxawIKa40ywGn1a4Y
TLSH
T16C62AE0BB9EBF5130258D33192006EBF9E5D606E4B045ACD95B0CA66792C33E76F2A49
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

TriDither.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\SHADERDECK-main\Shaders\SHADERDECK\Include\Functions\TriDither.fxh
Size 3KB
SHA256 d6f780996889c0ea2efebde26b515c4acc1ad4310e06affc3d5d42e2f325c42d
MD5 eda68c1a8aeb46c6fddb3ac8137de27a
SHA1 6d959d4a09632e85aeaa86efea9db35c102dce58
SHA512 2d64d2ec5f2ddb256c0350398ce316dcf545ab84643960675a96ca521fd7054270376cf56d6bfa78c36753ad6a982f4f930536689558e043ed8a618311a00712
TLSH
T1ED61444D52E1321F1C1D5196AFCCE68B3A0FA0578B48DE11700EB39A1F9643EA2609EF
MD5 SHA1 SHA512 TLSH

Submit Download

CustomNegative.png

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\SHADERDECK-main\Textures\SHADERDECK\LUTs\CustomNegative.png
Size 4KB
SHA256 b35e64f34accdd0053c1166ef0c241e362f7421d043d1926787eaccc5543b9ff
MD5 d281d952fe103cd930c4acbf61dba2c7
SHA1 7cb236e37b69421f4d23740cb6fdbadc175b79cc
SHA512 75d1c559de8472569c613ad68bacba82907e4f7462ae13e18148a35e7dccf3995cbdb945e69a2c41c8a0b5d64ffd9cfdf78e1dc97ef5ac225f3ef0a3e55928b0
SSDEEP 96:MlQP55b+2aXCVwt0aWUoUMyEB9Oldx4yFnQfSeknmWIVP4yyHU0H2/H7Fy:aCX+w9hUMRwlsSeknH00QI
TLSH
T110A11A28F890AC91855CAF9972DE63973FBB0BF1DB91900538DA061BBA115F5C92C096
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ui_box13_mask.png

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\UniqFX-main\Textures\UniqFX\ui_box13_mask.png
Size 67B
SHA256 a4d4c009619311d9b83904acfd62fe3b7f918c312522bbcc6ad51cdec4fd1edf
MD5 aa78de6842c7c0fa92d5fd8329f229cf
SHA1 5a9d058778beb4e96d1f968a29a98ecc3d9dff06
SHA512 ec3552d929a9e640c73bcf06318f5724b73b6499cecd421ed4916bc1ce9a004e8da419606c46512b8621360ec88dad69aba4f9edaa0402be100b21e0a44dedc5
TLSH
T1C9A022C33302CC38C382A233A22002A0E8300A000AC30388002B802C2CA830B8A88282
MD5 SHA1 SHA512 TLSH

Submit Download

pd80_gaussnoise.png

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\prod80-ReShade-Repository-master\Textures\pd80_gaussnoise.png
Size 650KB
SHA256 70f200a55be9f83829b26a1420470c53c595c959bdfff6e501dcdf433e4f6ebd
MD5 d50953e437b8ac33d8555865063af8e0
SHA1 04e1e616da554f045d999c18f1c1a3c22495a78d
SHA512 61e49053eb0f9ddaed2b786a2796557d7aa37f610ed25d7b96ef7d1bca359b7af208c739923c3e133cfec3e47e12cfb0f9641bd094127a494bf3a39ade09ef69
SSDEEP 12288:GWFfIwwucGBKUD6nyDl/YSO6eQUezlxoXgEtaD5O5zBU:l1IZurBd6nyWSOOlxoXgEtGO5dU
TLSH
T13DE412E4A27994671FF22521E85D3D48CD74621C80ED8530502BFC7A6AE03AB465EEEF
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

neutral_lut.png

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\reshade-shaders-master\Textures\neutral_lut.png
Size 273B
SHA256 c81d61b0c7caa5cb8ff77b10183f2a00ffc5b4601ef328f7b9368e625fa9a214
MD5 3e2ecbaccddecba4b57cab15b4dcf172
SHA1 7105cfbb7d641a81e87353f811fc7edd1953c193
SHA512 b83c0dcdab29781347830cc79a6ab879f86a3a9724c66a50801c85c9bbbaf2c8e68794ec5de258d869dc3834ba1a3e3dea841c913d228f7636616056777e6e69
TLSH
T1C8D0A7F24A484CF9E1866633DC1B0844BF778060639611FB055A933A5CA3314ADC7552
MD5 SHA1 SHA512 TLSH

Submit Download

FXAA.fxh

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\package\reshade-vrtoolkit-main\Shaders\FXAA.fxh
Size 83KB
SHA256 26435f77adef392fd751ed6a648a05d375c57ac88d00bbad19653c75ac9c36fa
MD5 21329f400d0f311d4caa3d8f0743be4b
SHA1 1308c6634fbbd28c1d00e78f5fdc9b029a6cfabb
SHA512 6929f5e6900183d9d4b7ca5b4b1037b231a5024426d3fc016e2279308850048f1843da411f5a3516c26b5e6546109b0d9020e11900334d2f28c52429babc7f76
SSDEEP 768:Tu82+sezwqMcCN5hK1Tk8BtQN5EQAjYz+9y:h2AG/fmj+x
TLSH
T12F8363E90DE2125C0D55D1755B121455DF188ACFBAEAFF0CF80CD6980FA032686EE6EB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

preset-downloads.ini

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\preset-downloads.ini
Size 187B
SHA256 0a9c9ededec4a587ee261d27462b1ec070f005c18f2cfe311e983075121dcf07
MD5 7f57a96b4f2daa741d3be0f277663007
SHA1 77873d6a63a8e2391f7e37aa4e891bb5ca8e386a
SHA512 45ebe68f41c617a36e2cd374d66650edc8a7cc686142165854aba5aa7ca3192a3196896301f6b5954eb28d24711691ec3aaf6c3f6ea651d55b34ece1dbe54e8d
TLSH
T124C0220CE6218AABDC89B6290E1980B323A7230F208FA02320E4A2812361C020E71C04
MD5 SHA1 SHA512 TLSH

Submit Download

ReShade.ini

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\reshade\ReShade.ini
Size 297B
SHA256 3097a5c06fd96547391f8e99c38f67e91e047b320ce3096effd0880c97f5af9d
MD5 ddfdca32a18a413dcdf21c0f927dae73
SHA1 8c7bbf2a7433eb676d6a4ca8ab6105bda7e5eb52
SHA512 69cbc4ab8e1d1f0919527ec81612e95629aadb857559372bc8d8bf6d83dd1d1e2cf99d943ab1bc5591a1624fcc8d7e414e7e079a87410cc8894a92830f763799
TLSH
T171E0C224746321CA86E60266607797C924B3B8A998EA88119004EA0F8D103BB9127F1A
MD5 SHA1 SHA512 TLSH

Submit Download

ReShade.ini

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\reshade\ReShade.ini
Size 401B
SHA256 bf9f15e6891b6bf8f2fa067d6e770a0eca0b6f452bf504220ddf1f4a048b70ed
MD5 2dc261f75a7411a0618fe61a4245e9ad
SHA1 7a4a0f1ae3f9cc5d587cdf0c53f7566ebb246a6b
SHA512 17adf1cc9f755afafd2107aaf9cab00ea7b0f0b6c5a71253ffb1ff549fc95465d33fb6c5acd8a75130c123826e7c564d4ba1eb5fda405ffd9d97df1df270c8ee
TLSH
T1B3E0222834A211CE5AF3026210B66BC62473F468949B94449119EA4FA8E27BED127B0A
MD5 SHA1 SHA512 TLSH

Submit Download

ReShade.log

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\reshade\ReShade.log
Size 982B
SHA256 a649ccd07dc38931801de04c3523da3f22cc021232095938d59df693cae77670
MD5 d9a1dd79235bde84b66c30a881d724d5
SHA1 353b9b15d231ad167cab89c38f62f1465b38185d
SHA512 a4e1a690f1d88f42c7c7ca3663f6847c608d5c2f679c9c88f2bf3f58776bf38a656be70c7aa35ce3afc64b81d9227aa9c1460ceb64ec4f5158dc0430a955b914
TLSH
T1DA11540B6B4513F281B3472A111A39C6EF4392AA737458F2386C111C3333879D7B95C9
MD5 SHA1 SHA512 TLSH

Submit Download

dxgi.dll

Path C:\Users\Admin\AppData\Local\Temp\Unishade-Setup-24aa50426a210bc6e2d08025ebe1a11a\reshade\dxgi.dll
Size 5.3MB
SHA256 0cee63f9c9f13f3ac909c5b4903f4dbb4b719a7ab3b4f13b0deaf83c814b94f7
MD5 b1de41b152b9758e30a9044c4408de23
SHA1 7b394c12765ec31d9488574514497fad3da6943d
SHA512 2136313ce9e14d14bf7296b9891c0afeb7d23c8131b0a9449a5e527d169514b12124f2b04ef18bac940cfd5fb712406df42023c7d63cb3d3206fad2fbee947ec
SSDEEP 98304:Z/E2S7z5Wv3XUGwnU8ddZm/iSS8xagvHRYx5ic+FuZ:lA7z5Wv3XrwnU8ddZm/iSS8xawHRYx5d
TLSH
T15F469D16B3F911ACE177D178CB275A07EB72344A0330A6EF169486652F237E05B7E722
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

ReShade.ini

Path C:\Users\Admin\Documents\Outlook Files\Unishade\ReShade.ini
Size 2KB
SHA256 9f31042ff1435829a481f3e40b600a8f74eab4388f459d79f986135c2a2d1624
MD5 1a279653f1dfea213060ba8f5189f41e
SHA1 7c8f14f5c1fb62c67f0c42e5ba1e976cec607b8c
SHA512 058d3eaca5d53b39ac578af4d2b0318f4063c5f31ceec30f4564661736c18bcdd3918cb0efb50a306a4123d35e111879281e2e3d5042a76ab6c18fb8dc949828
TLSH
T1E251ECE90258D0D9D496D2A1A27AB3E275D1B0CFC0DCF886A2D74F8A1CA7EF31308751
MD5 SHA1 SHA512 TLSH

Submit Download

RobloxShadeHost.ini

Path C:\Users\Admin\Documents\Outlook Files\Unishade\RobloxShadeHost.ini
Size 174B
SHA256 7c8212423b52d89b2a1259d9a576af6d8fdb3526a61cb6dfb624d25c6f4b6f7a
MD5 b8af09adfdcdd55d7f1335e601329f38
SHA1 a99ff5803d14b80f021ea9ac0c46a154f9a7a143
SHA512 887ebe01b86d105a2a591510aa85901a9d4b10ca8517895660887c3e6602facc96a5b24ec87eba7dbd0dcf40c254e145b6a5787658cb54d5ad43349397e77727
TLSH
T1EAC08C17E70508238ECD23FAEB8AC1E4F61B000CC008B1C280B21C3E4BC9CF103005E0
MD5 SHA1 SHA512 TLSH

Submit Download

UnishadeUi.dll

Path C:\Users\Admin\Documents\Outlook Files\Unishade\UnishadeUi.dll
Size 743KB
SHA256 51300d959721414fb49cb1f29ea54f234fbb095144e7d31e49823b46ce0a7134
MD5 3ea8baacb0d7b347dadf41c9fb9350aa
SHA1 e7388a82bbb74aeae728ee0ca57393de16fe867a
SHA512 682090832620f435fbe086bb4a9cf73f24921787f6acc0e8caffa3445053f30d1eb654462fc95896e44758e88cf21521795095fd182ff41d398d6466ba270e74
SSDEEP 12288:gWYqipuW5lsodOiK8u4SQp4N3mC6nKSfc/iCsnioO/mpa:Sqipv5eodOeLuN3mCyYizniXz
TLSH
T136F4AE95F2F941F9E07B9139D987AA0BFA717808076099DF13E405982FA37E057BB312
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

renodx-dlss.addon64

Path C:\Users\Admin\Documents\Outlook Files\Unishade\renodx-dlss.addon64
Size 2.5MB
SHA256 1d855cf226857dce890cffbf7206ba9b6497ce1d471b217c1c8b44b6cd5d27e9
MD5 2e992e584f65e8955180ac0e0098cba6
SHA1 be3185a005e77158eac054e412fd22f3601a1ac0
SHA512 4e21e63683ebc236eeda6de674258f1a4210ee60b23e0ccbdbfe0f058af12ace3b5bd5eeed314b8a94fb4d44b45bac6303fa9a64e5e125e8332b5e6156538b8c
SSDEEP 49152:iYq7k4//r4CxGW2RqMpRkaNK2DtpPBQj:rqz3rmRqMfFmj
TLSH
T135C57C16B65610ADC457C0B8875B9A62EB7274CA0B21B9EF02D486753FB7BF01B3E710
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

memory/2320-3388-0x00007FFE42000000-0x00007FFE42010000-memory.dmp

Download

memory/4112-37-0x000001EBBAE00000-0x000001EBBAE0A000-memory.dmp

Download

memory/4112-36-0x000001EBBADD0000-0x000001EBBADE2000-memory.dmp

Download

memory/4112-34-0x000001EBA16C0000-0x000001EBA16CE000-memory.dmp

Download

memory/4112-33-0x000001EBA17D0000-0x000001EBA180E000-memory.dmp

Download

memory/4112-32-0x000001EBA16B0000-0x000001EBA16B8000-memory.dmp

Download

memory/4112-31-0x000001EB9F8B0000-0x000001EB9F8DA000-memory.dmp

Download