30e248df598327c72d4f293fe8e69dd11e91494476e9ae56557bce939833bb7b

Analysis

max time kernel
151s
max time network
157s
platform
windows10-2004_x64
resource
win10v2004-20230221-en
resource tags

arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
submitted
21/03/2023, 19:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

JJSploit Installer.exe
Size

50.0MB
MD5

662d26b4e627e44a0da5e5e99fa41942
SHA1

93ea678ba8449bfdfd7a26e82fae39f00185e8d8
SHA256

30e248df598327c72d4f293fe8e69dd11e91494476e9ae56557bce939833bb7b
SHA512

284078b1afaf2ff213aecf30fb298a6cf026cbf884227bc6864fedc60a40770a264a3b1a601b9fc1094e9bf1d8a0213359841631e5c83f1232c7db08a6b72cda
SSDEEP

1572864:G78WsLBU07HgOYzXNfeZtTJt0mwS8LlMUzD2:G78WGBU0036T7mLlMUzK

Score

7^/10

discovery

Malware Config

Signatures

Checks computer location settings 2 TTPs 2 IoCs

Looks up country code configured in the registry, likely geofence.

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000\Control Panel\International\Geo\Nation	JJS-UI.exe
Key value queried	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000\Control Panel\International\Geo\Nation	Un_A.exe

Executes dropped EXE 6 IoCs

pid	Process
3372	JJS-UI.exe
8	JJS-UI.exe
32	JJS-UI.exe
980	JJS-UI.exe
4348	Uninstall JJS-UI.exe
3748	Un_A.exe

Loads dropped DLL 21 IoCs

pid	Process
452	JJSploit Installer.exe
452	JJSploit Installer.exe
452	JJSploit Installer.exe
452	JJSploit Installer.exe
452	JJSploit Installer.exe
452	JJSploit Installer.exe
452	JJSploit Installer.exe
3372	JJS-UI.exe
3372	JJS-UI.exe
8	JJS-UI.exe
32	JJS-UI.exe
980	JJS-UI.exe
8	JJS-UI.exe
8	JJS-UI.exe
8	JJS-UI.exe
3748	Un_A.exe
3748	Un_A.exe
3748	Un_A.exe
3748	Un_A.exe
3748	Un_A.exe
3748	Un_A.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

System Information Discovery
T1082

Enumerates processes with tasklist 1 TTPs 2 IoCs

Process Discovery

T1057

pid	Process
4560	tasklist.exe
5908	tasklist.exe

Enumerates system info in registry 2 TTPs 3 IoCs

Query Registry

T1012

System Information Discovery

T1082

description	ioc	Process
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemManufacturer	msedge.exe
Key value queried	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS\SystemProductName	msedge.exe
Key opened	\REGISTRY\MACHINE\HARDWARE\DESCRIPTION\System\BIOS	msedge.exe

Modifies Internet Explorer settings 1 TTPs 2 IoCs

adware spyware

Modify Registry

T1112

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000\Software\Microsoft\Internet Explorer\Toolbar	explorer.exe
Set value (int)	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000\SOFTWARE\Microsoft\Internet Explorer\Toolbar\Locked = "1"	explorer.exe

Modifies registry class 7 IoCs

description	ioc	Process
Key created	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\NodeSlots	explorer.exe
Set value (data)	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell\BagMRU\MRUListEx = ffffffff	explorer.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	Un_A.exe
Key created	\REGISTRY\MACHINE\SOFTWARE\Classes\CLSID\{1f3427c8-5c10-4210-aa03-2ee45287d668}\Instance\	msedge.exe
Key created	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Local Settings	explorer.exe
Key created	\REGISTRY\USER\S-1-5-21-2805025096-2326403612-4231045514-1000_Classes\Local Settings\Software\Microsoft\Windows\Shell	explorer.exe

Suspicious behavior: AddClipboardFormatListener 1 IoCs

pid	Process
3208	explorer.exe

Suspicious behavior: EnumeratesProcesses 18 IoCs

pid	Process
452	JJSploit Installer.exe
452	JJSploit Installer.exe
4560	tasklist.exe
4560	tasklist.exe
980	JJS-UI.exe
980	JJS-UI.exe
32	JJS-UI.exe
32	JJS-UI.exe
2440	msedge.exe
2440	msedge.exe
1792	msedge.exe
1792	msedge.exe
1472	msedge.exe
1472	msedge.exe
3748	Un_A.exe
3748	Un_A.exe
5908	tasklist.exe
5908	tasklist.exe

Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary 4 IoCs

pid	Process
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe

Suspicious use of AdjustPrivilegeToken 5 IoCs

description	pid	Process
Token: SeDebugPrivilege	4560	tasklist.exe
Token: SeSecurityPrivilege	452	JJSploit Installer.exe
Token: 33	5240	AUDIODG.EXE
Token: SeIncBasePriorityPrivilege	5240	AUDIODG.EXE
Token: SeDebugPrivilege	5908	tasklist.exe

Suspicious use of FindShellTrayWindow 4 IoCs

pid	Process
1472	msedge.exe
1472	msedge.exe
1472	msedge.exe
3208	explorer.exe

Suspicious use of SetWindowsHookEx 2 IoCs

pid	Process
4348	Uninstall JJS-UI.exe
3748	Un_A.exe

Suspicious use of WriteProcessMemory 64 IoCs

description	pid	Process	procid_target
PID 452 wrote to memory of 100	452	JJSploit Installer.exe	86
PID 452 wrote to memory of 100	452	JJSploit Installer.exe	86
PID 452 wrote to memory of 100	452	JJSploit Installer.exe	86
PID 100 wrote to memory of 4560	100	cmd.exe	88
PID 100 wrote to memory of 4560	100	cmd.exe	88
PID 100 wrote to memory of 4560	100	cmd.exe	88
PID 100 wrote to memory of 2956	100	cmd.exe	89
PID 100 wrote to memory of 2956	100	cmd.exe	89
PID 100 wrote to memory of 2956	100	cmd.exe	89
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 8	3372	JJS-UI.exe	101
PID 3372 wrote to memory of 32	3372	JJS-UI.exe	102
PID 3372 wrote to memory of 32	3372	JJS-UI.exe	102
PID 3372 wrote to memory of 32	3372	JJS-UI.exe	102
PID 3372 wrote to memory of 980	3372	JJS-UI.exe	103
PID 3372 wrote to memory of 980	3372	JJS-UI.exe	103
PID 3372 wrote to memory of 980	3372	JJS-UI.exe	103
PID 3372 wrote to memory of 3908	3372	JJS-UI.exe	106
PID 3372 wrote to memory of 3908	3372	JJS-UI.exe	106
PID 3372 wrote to memory of 1472	3372	JJS-UI.exe	108
PID 3372 wrote to memory of 1472	3372	JJS-UI.exe	108
PID 3908 wrote to memory of 4640	3908	msedge.exe	107
PID 3908 wrote to memory of 4640	3908	msedge.exe	107
PID 1472 wrote to memory of 4084	1472	msedge.exe	109
PID 1472 wrote to memory of 4084	1472	msedge.exe	109

C:\Users\Admin\AppData\Local\Temp\JJSploit Installer.exe
"C:\Users\Admin\AppData\Local\Temp\JJSploit Installer.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:452
- C:\Windows\SysWOW64\cmd.exe
  cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq JJS-UI.exe" | %SYSTEMROOT%\System32\find.exe "JJS-UI.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:100
- - C:\Windows\SysWOW64\tasklist.exe
    tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq JJS-UI.exe"
    3⤵
    - Enumerates processes with tasklist
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:4560
- - C:\Windows\SysWOW64\find.exe
    C:\Windows\System32\find.exe "JJS-UI.exe"
    3⤵
    PID:2956

C:\Users\Admin\AppData\Local\Programs\JJS-UI\JJS-UI.exe
"C:\Users\Admin\AppData\Local\Programs\JJS-UI\JJS-UI.exe"
1⤵
- Executes dropped EXE
- Loads dropped DLL
- Suspicious use of WriteProcessMemory
PID:3372
- C:\Users\Admin\AppData\Local\Programs\JJS-UI\JJS-UI.exe
  "C:\Users\Admin\AppData\Local\Programs\JJS-UI\JJS-UI.exe" --type=gpu-process --field-trial-handle=1716,8347345569810781402,2722892256135407644,131072 --enable-features=WebComponentsV0Enabled --disable-features=SpareRendererForSitePerProcess --gpu-preferences=KAAAAAAAAADgAAAwAAAAAAAAYAAAAAAAEAAAAAAAAAAAAAAAAAAAACgAAAAEAAAAIAAAAAAAAAAoAAAAAAAAADAAAAAAAAAAOAAAAAAAAAAQAAAAAAAAAAAAAAAFAAAAEAAAAAAAAAAAAAAABgAAABAAAAAAAAAAAQAAAAUAAAAQAAAAAAAAAAEAAAAGAAAA --mojo-platform-channel-handle=1724 --ignored=" --type=renderer " /prefetch:2
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  PID:8
- C:\Users\Admin\AppData\Local\Programs\JJS-UI\JJS-UI.exe
  "C:\Users\Admin\AppData\Local\Programs\JJS-UI\JJS-UI.exe" --type=utility --field-trial-handle=1716,8347345569810781402,2722892256135407644,131072 --enable-features=WebComponentsV0Enabled --disable-features=SpareRendererForSitePerProcess --lang=en-US --service-sandbox-type=network --mojo-platform-channel-handle=2256 /prefetch:8
  2⤵
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:32
- C:\Users\Admin\AppData\Local\Programs\JJS-UI\JJS-UI.exe
  "C:\Users\Admin\AppData\Local\Programs\JJS-UI\JJS-UI.exe" --type=renderer --field-trial-handle=1716,8347345569810781402,2722892256135407644,131072 --enable-features=WebComponentsV0Enabled --disable-features=SpareRendererForSitePerProcess --lang=en-US --app-path="C:\Users\Admin\AppData\Local\Programs\JJS-UI\resources\app.asar" --no-sandbox --no-zygote --preload="C:\Users\Admin\AppData\Local\Programs\JJS-UI\resources\app.asar\build\preload.js" --enable-remote-module --background-color=#fff --enable-websql --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=2400 /prefetch:1
  2⤵
  - Checks computer location settings
  - Executes dropped EXE
  - Loads dropped DLL
  - Suspicious behavior: EnumeratesProcesses
  PID:980
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/channel/UC3YNONzSHPW12m3AT48fMHw?view_as=subscriber
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:3908
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffd934f46f8,0x7ffd934f4708,0x7ffd934f4718
    3⤵
    PID:4640
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2120,7601433501621465684,17056653716444574819,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2184 /prefetch:3
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:2440
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2120,7601433501621465684,17056653716444574819,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2132 /prefetch:2
    3⤵
    PID:4940
- C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
  "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --single-argument https://www.youtube.com/c/Omnidev_
  2⤵
  - Enumerates system info in registry
  - Modifies registry class
  - Suspicious behavior: EnumeratesProcesses
  - Suspicious behavior: NtCreateUserProcessBlockNonMicrosoftBinary
  - Suspicious use of FindShellTrayWindow
  - Suspicious use of WriteProcessMemory
  PID:1472
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=crashpad-handler "--user-data-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" /prefetch:7 --monitor-self-annotation=ptype=crashpad-handler "--database=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad" "--metrics-dir=C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data" --annotation=IsOfficialBuild=1 --annotation=channel= --annotation=chromium-version=92.0.4515.131 "--annotation=exe=C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --annotation=plat=Win64 "--annotation=prod=Microsoft Edge" --annotation=ver=92.0.902.67 --initial-client-data=0xf8,0xfc,0x100,0xd4,0x104,0x7ffd934f46f8,0x7ffd934f4708,0x7ffd934f4718
    3⤵
    PID:4084
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --field-trial-handle=2084,2091200286193649196,12637086876259632380,131072 --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2260 /prefetch:3
    3⤵
    - Suspicious behavior: EnumeratesProcesses
    PID:1792
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=gpu-process --field-trial-handle=2084,2091200286193649196,12637086876259632380,131072 --gpu-preferences=UAAAAAAAAADgAAAQAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHgAAAAAAAAAeAAAAAAAAAAoAAAABAAAACAAAAAAAAAAKAAAAAAAAAAwAAAAAAAAADgAAAAAAAAAEAAAAAAAAAAAAAAADQAAABAAAAAAAAAAAQAAAA0AAAAQAAAAAAAAAAQAAAANAAAAEAAAAAAAAAAHAAAADQAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2184 /prefetch:2
    3⤵
    PID:3612
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=storage.mojom.StorageService --field-trial-handle=2084,2091200286193649196,12637086876259632380,131072 --lang=en-US --service-sandbox-type=utility --mojo-platform-channel-handle=2624 /prefetch:8
    3⤵
    PID:4060
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2091200286193649196,12637086876259632380,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3572 /prefetch:1
    3⤵
    PID:5212
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2091200286193649196,12637086876259632380,131072 --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=3584 /prefetch:1
    3⤵
    PID:5224
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2091200286193649196,12637086876259632380,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=4108 /prefetch:1
    3⤵
    PID:5396
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=renderer --field-trial-handle=2084,2091200286193649196,12637086876259632380,131072 --disable-gpu-compositing --lang=en-US --disable-client-side-phishing-detection --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=8 --no-v8-untrusted-code-mitigations --mojo-platform-channel-handle=5216 /prefetch:1
    3⤵
    PID:5816
- - C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe
    "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --field-trial-handle=2084,2091200286193649196,12637086876259632380,131072 --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5432 /prefetch:8
    3⤵
    PID:5208

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5040

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:2428

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:1560

C:\Windows\system32\AUDIODG.EXE
C:\Windows\system32\AUDIODG.EXE 0x498 0x49c
1⤵
- Suspicious use of AdjustPrivilegeToken
PID:5240

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:5956

C:\Windows\SysWOW64\DllHost.exe
C:\Windows\SysWOW64\DllHost.exe /Processid:{06622D85-6856-4460-8DE1-A81921B41C4B}
1⤵
PID:4196

C:\Windows\explorer.exe
C:\Windows\explorer.exe /factory,{5BD95610-9434-43C2-886C-57852CC8A120} -Embedding
1⤵
- Modifies Internet Explorer settings
- Modifies registry class
- Suspicious behavior: AddClipboardFormatListener
- Suspicious use of FindShellTrayWindow
PID:3208
- C:\Users\Admin\AppData\Local\Programs\JJS-UI\Uninstall JJS-UI.exe
  "C:\Users\Admin\AppData\Local\Programs\JJS-UI\Uninstall JJS-UI.exe" /currentuser
  2⤵
  - Executes dropped EXE
  - Suspicious use of SetWindowsHookEx
  PID:4348
- - C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe
    "C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe" /currentuser _?=C:\Users\Admin\AppData\Local\Programs\JJS-UI\
    3⤵
    - Checks computer location settings
    - Executes dropped EXE
    - Loads dropped DLL
    - Modifies registry class
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of SetWindowsHookEx
    PID:3748
  - - C:\Windows\SysWOW64\cmd.exe
      cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq JJS-UI.exe" | %SYSTEMROOT%\System32\find.exe "JJS-UI.exe"
      4⤵
      PID:2428
    - - C:\Windows\SysWOW64\tasklist.exe
        
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq JJS-UI.exe"
        5⤵
        Enumerates processes with tasklist
        Suspicious behavior: EnumeratesProcesses
        Suspicious use of AdjustPrivilegeToken
        
        PID:5908
    - - C:\Windows\SysWOW64\find.exe
        
        C:\Windows\System32\find.exe "JJS-UI.exe"
        5⤵
        
        PID:4524

C:\Windows\System32\CompPkgSrv.exe
C:\Windows\System32\CompPkgSrv.exe -Embedding
1⤵
PID:3840

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Modify Registry

T1112

Web Service

T1102

Credential Access

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
5a10efe23009825eadc90c37a38d9401

SHA1
fd98f2ca011408d4b43ed4dfd5b6906fbc7b87c0

SHA256
05e135dee0260b4f601a0486401b64ff8653875d74bf259c2da232550dbfb4f5

SHA512
89416a3f5bf50cd4a432ac72cd0a7fb79d5aeb10bdcc468c55bbfa79b9f43fab17141305d44cb1fe980ec76cc6575c27e2bcfcbad5ccd886d45b9de03fb9d6d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
5a10efe23009825eadc90c37a38d9401

SHA1
fd98f2ca011408d4b43ed4dfd5b6906fbc7b87c0

SHA256
05e135dee0260b4f601a0486401b64ff8653875d74bf259c2da232550dbfb4f5

SHA512
89416a3f5bf50cd4a432ac72cd0a7fb79d5aeb10bdcc468c55bbfa79b9f43fab17141305d44cb1fe980ec76cc6575c27e2bcfcbad5ccd886d45b9de03fb9d6d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
5a10efe23009825eadc90c37a38d9401

SHA1
fd98f2ca011408d4b43ed4dfd5b6906fbc7b87c0

SHA256
05e135dee0260b4f601a0486401b64ff8653875d74bf259c2da232550dbfb4f5

SHA512
89416a3f5bf50cd4a432ac72cd0a7fb79d5aeb10bdcc468c55bbfa79b9f43fab17141305d44cb1fe980ec76cc6575c27e2bcfcbad5ccd886d45b9de03fb9d6d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
5a10efe23009825eadc90c37a38d9401

SHA1
fd98f2ca011408d4b43ed4dfd5b6906fbc7b87c0

SHA256
05e135dee0260b4f601a0486401b64ff8653875d74bf259c2da232550dbfb4f5

SHA512
89416a3f5bf50cd4a432ac72cd0a7fb79d5aeb10bdcc468c55bbfa79b9f43fab17141305d44cb1fe980ec76cc6575c27e2bcfcbad5ccd886d45b9de03fb9d6d7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c1a3c45dc07f766430f7feaa3000fb18

SHA1
698a0485bcf0ab2a9283d4ebd31ade980b0661d1

SHA256
adaba08026551b1b8f6c120143686da79f916d02adbef4a8d1c184e32a19fd48

SHA512
9fc93f01ab4b14f555791d757ffe881787cc697102547c61847552e597e206e70c6d35fedff559c72a0a67d1b95e769095ecb0a8a7d4f07cf58a7a0d57d3e9f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c1a3c45dc07f766430f7feaa3000fb18

SHA1
698a0485bcf0ab2a9283d4ebd31ade980b0661d1

SHA256
adaba08026551b1b8f6c120143686da79f916d02adbef4a8d1c184e32a19fd48

SHA512
9fc93f01ab4b14f555791d757ffe881787cc697102547c61847552e597e206e70c6d35fedff559c72a0a67d1b95e769095ecb0a8a7d4f07cf58a7a0d57d3e9f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Crashpad\settings.dat

Filesize
152B

MD5
c1a3c45dc07f766430f7feaa3000fb18

SHA1
698a0485bcf0ab2a9283d4ebd31ade980b0661d1

SHA256
adaba08026551b1b8f6c120143686da79f916d02adbef4a8d1c184e32a19fd48

SHA512
9fc93f01ab4b14f555791d757ffe881787cc697102547c61847552e597e206e70c6d35fedff559c72a0a67d1b95e769095ecb0a8a7d4f07cf58a7a0d57d3e9f4

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000001

Filesize
22KB

MD5
a34c77847d7a957a99edaf10a7deaccd

SHA1
1619cedec658842283a7a474adba2efdcb0d3598

SHA256
ebee5d0011bcd484c4e7067822a1bcac208a0d03a33fced5c6a222666df67350

SHA512
afe20d031816081eba10587141518fbce91ed5f3b44fa002a593f784603d4b2007c89713cd6d9ef3eee3ecb8b53a57ecd078826ba0fcc5d02f2b7de814dd1b7c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Cache\f_000002

Filesize
1.6MB

MD5
a3caa6495ea395e39626cc5b7e88abd9

SHA1
82c4fba5dd454b581a972e77ebc47544b62b7f75

SHA256
c4b5ef9870b8c50ccfe85d6c75d460efe80352bca6a55f0b6d1287623ae52f0e

SHA512
7d2b1c7cdda30e4bcc781bc9664665f8eda9184855ede2f8ee509d4bebbaeb4616a33c4786ad242124761427b1eba9bdd59b82ff9ab1867815e88983ebe21ba7

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
61fe73971edc5757fd216e2a969ee2e8

SHA1
b341a21a91f824279f5d532653a022e672d66a26

SHA256
dde71c974d350a9a215ec265f19d8e68ac7068168272d427b8c1f86cce128fab

SHA512
68766df299b0e0e50b8e9a2b645ba2b59f689807def88c9614ce54c331f20cb90b761e8e804027efe86a72dc4f2d313b11716ba7282db4d2335aa13010fad60b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index

Filesize
408B

MD5
c697e809923fd42415011f7f3b52be7d

SHA1
d87ba3e95e6c80929f9ffc5c0bfddb7e05984877

SHA256
5d5af121e85488f69dfd5423ee09c966a8ba2f94540e250e2d3b368e29dd6eb2

SHA512
f0d22869973c35ea1aebabe09e19a84a5c5a02c78f3608a5386fe538e818f9247e0f45554afcddf905574824eb87d38f9bea0d694ee41b35211e807c55449be9

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Code Cache\js\index-dir\the-real-index~RFe587097.TMP

Filesize
48B

MD5
e063b28c25f1ca3f60c1e9ef2e59b988

SHA1
109bebcb8eacef9f6c9c60153802bfac625166b3

SHA256
fdf93d756211647fe1840552a080cc79f2f2ba8077b37e371e9c308630f2208c

SHA512
60b5829214b7642ed15f241cc5a3897eff545affde9af019794daa0390f46f9e9c93c99e9d4075b7167e553e57be0d5eebc703684e15cada10eddf231c25f7bb

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Edge Profile.ico

Filesize
70KB

MD5
e5e3377341056643b0494b6842c0b544

SHA1
d53fd8e256ec9d5cef8ef5387872e544a2df9108

SHA256
e23040951e464b53b84b11c3466bbd4707a009018819f9ad2a79d1b0b309bc25

SHA512
83f09e48d009a5cf83fa9aa8f28187f7f4202c84e2d0d6e5806c468f4a24b2478b73077381d2a21c89aa64884df3c56e8dc94eb4ad2d6a8085ac2feb1e26c2ef

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Extension State\MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_0

Filesize
8KB

MD5
cf89d16bb9107c631daabf0c0ee58efb

SHA1
3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

SHA256
d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

SHA512
8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_1

Filesize
264KB

MD5
d0d388f3865d0523e451d6ba0be34cc4

SHA1
8571c6a52aacc2747c048e3419e5657b74612995

SHA256
902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b

SHA512
376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_2

Filesize
8KB

MD5
0962291d6d367570bee5454721c17e11

SHA1
59d10a893ef321a706a9255176761366115bedcb

SHA256
ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

SHA512
f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\GPUCache\data_3

Filesize
8KB

MD5
41876349cb12d6db992f1309f22df3f0

SHA1
5cf26b3420fc0302cd0a71e8d029739b8765be27

SHA256
e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

SHA512
e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Microsoft Edge.lnk

Filesize
2KB

MD5
6afd90cf7025b125568cd7ba6a24b661

SHA1
5db3744abc104286b399bf7c091dbf18f3f7a7c3

SHA256
ce6e63e3e240235fe09ecbc38edcf2038ce71f17de2ce19914e2a8ae38ee7c07

SHA512
f952befcf16966618dd798bb2ca02052e3db9d72f5e0ab8955333b543f3621a389e274ce1debd82d20ee282db8ac9a3ab37e4826f705d9f188261744d1c15785

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
111B

MD5
285252a2f6327d41eab203dc2f402c67

SHA1
acedb7ba5fbc3ce914a8bf386a6f72ca7baa33c6

SHA256
5dfc321417fc31359f23320ea68014ebfd793c5bbed55f77dab4180bbd4a2026

SHA512
11ce7cb484fee66894e63c31db0d6b7ef66ad0327d4e7e2eb85f3bcc2e836a3a522c68d681e84542e471e54f765e091efe1ee4065641b0299b15613eb32dcc0d

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Network Persistent State

Filesize
3KB

MD5
2f8025636f168c3a8cb88661b7c99c19

SHA1
9acf4e616870b0fbd5c0ac59b49c503c5aec9f87

SHA256
fc873f73199910a98342e4d6fc945e5a9f1e630879de692fc90daa5b5c5292fe

SHA512
76018ed5e01ce3e261c80ed62ab9b1f330411aab0d88d56d58bd48c4ee5296a6e8cbd39e71fbb592496cfc687e5aa453d63061ac2c60f60ccf1a6f95ea095888

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
4KB

MD5
e83a6a0316ebc10c5f43c4d2b9e070f3

SHA1
854ca18e8dfa6c8afa3d2f4b9d571389b293b075

SHA256
fe859e1c173e819e0ebcca24026b6574d7cb6d7392e0d9ee049c5478d8541fc1

SHA512
18d8c8324703a4c8c1529efdaabb6ba528882e96965195047131857eca36549bb38b1c641270288f6cc601783565a57692f1ecd7d3ec38322315b97bbc4ddd60

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
5KB

MD5
8b6bd95b8bfb441ceca9d15cb3d52679

SHA1
05348419752a412e296aa7b52bee79a47e154181

SHA256
5d07c7d202d9c4ca028e91097eaac79f1ed4e869065e14c72f593d478719273e

SHA512
97cd95447fe5cea06fb251e221ce9ff268a44644be4557c2aef44ea4178a3da597f4fd884a015f323c2b570dc41bf03c9de876f47e10a22db6bff6d8d133081b

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Preferences

Filesize
6KB

MD5
f4be5bd49180ead572623dfdb6e7dd7c

SHA1
5a007ec36d70f5d8fe78fb0e4421a2d063d0e48b

SHA256
5dacdb8184dd087b2a3083448a04cc67ce35bc635a3e24aa41491789d1a63c0c

SHA512
35214eaa59af2d2e9f9a8db557098c584278a42cbb2c8cc3db4f16e3d7a1656d3219a92ea6de87e0faaad1a145cf81a4c771455883b273c6c8afe8f956a2079f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Secure Preferences

Filesize
24KB

MD5
5edab6d3ffbeee247ccb4423f929a323

SHA1
a4ad201d149d59392a2a3163bd86ee900e20f3d9

SHA256
460cddb95ea1d9bc8d95d295dd051b49a1436437a91ddec5f131235b2d516933

SHA512
263fa99f03ea1ef381ca19f10fbe0362c1f9c129502dc6b730b076cafcf34b40a70ee8a0ee9446ec9c89c3a2d9855450609ec0f8cf9d0a1b2aebdd12be58d38c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\a16e2e74-7e2e-4dd4-a7ce-58eb8eaf8e62\index-dir\the-real-index

Filesize
624B

MD5
30e1ddca334721f0fc41564df7d59993

SHA1
a6a84c5c035f0fae8c15b15fa55784d6f1aed9fc

SHA256
3de8b728b60269934ae26ddf564a39e41d26774b9ce7f101b8ea5b845bbfbdbb

SHA512
8c97067ffd35554c51daf61e7b53869597f24ef18e5c8fb7ea69731b665525c5347c32bf40289ffe812898cea0c79ad2d6686baef3fce6cd9305e8d72377ede1

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\a16e2e74-7e2e-4dd4-a7ce-58eb8eaf8e62\index-dir\the-real-index~RFe582da3.TMP

Filesize
48B

MD5
214c4bd062257ddc5418295dd2542d89

SHA1
83f0c559e9876cc046e4d7b9597acdabc081dff7

SHA256
d24d989c0d7f1de5e664df14ab60e0be945f09742c06a175430f18e392d380ed

SHA512
e94adcf2720ae39db4e1d0a70b6047b913a0711027b0a5195c1f5ea26aa4c663d24abbc420d1f4527b25a8cf14e0453f33b934cc0d93c80ae5be81d3b4d1f2c0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\ea982b19-ad38-4685-bc3a-d2926f6c624a\index

Filesize
24B

MD5
54cb446f628b2ea4a5bce5769910512e

SHA1
c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

SHA256
fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

SHA512
8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
26B

MD5
2892eee3e20e19a9ba77be6913508a54

SHA1
7c4ef82faa28393c739c517d706ac6919a8ffc49

SHA256
4f110831bb434c728a6895190323d159df6d531be8c4bb7109864eeb7c989ff2

SHA512
b13a336db33299ab3405e13811e3ed9e5a18542e5d835f2b7130a6ff4c22f74272002fc43e7d9f94ac3aa6a4d53518f87f25d90c29e0d286b6470667ea9336ae

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
99B

MD5
db724f23813a248abebdd204641cc8fb

SHA1
bd371572fecb765d13a0666163ef0dcfa68fbdd1

SHA256
10a8f262e009ad13b522981d51540c9ed4b9e9154d8d327f8f25e3fb5bc473df

SHA512
aa6c3eb59d4173881e9833be249438f6d51cdd710c505e19d60236746de4e0198353c21c7a851d9a5d50369bec5cd436dd633c6ed645bdce21b16bbd60906622

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
159B

MD5
2e624b4f473303c0fe5899ce78220535

SHA1
0b173ef487efaf5af3d256baf1343e5f02d004e9

SHA256
9112fbd3e23264d8a02631717f5e86e945bbe3f52763888df263b4b16413faae

SHA512
fdd434ba5f9d90ffda28a8d87a185961b22e8c8c3a326d530cc2d1a91f36510a849040d72986d19fef98c1d80f0b4296bb3081708e9443f1fd0350aa1a4ab3a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt

Filesize
95B

MD5
5f714e755ae68cc8238936e5f23d15e5

SHA1
83bd3c455ebc8c2b552549e4bfa24d24ebe42e9b

SHA256
654549af1760605c8fa414856bff3426d7205b43e314af6aab449d297adf9ffa

SHA512
3e4ce86700125b43fbdf5b6615e233fa85576a033827c6da1f1eb23f8724387375e96a8cee49c0f11a38788a66bdfb7ed4074dca062906e6ce0f3c347197225c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\CacheStorage\379f1cbab5b08b6fc9e08681e42d8be311441c88\index.txt~RFe57c4c7.TMP

Filesize
90B

MD5
f16f5931ce50dee4b93b7e55a7a12a51

SHA1
4c96597087e7cdb38d4d914337f7483575306fde

SHA256
d92ac4bae19e1c91583271b92ce68f5160ff04dccc30a1483f120e7e2e132fb1

SHA512
a03cb1fa9a205b13a441db902428cf0aec76e4e05196327e40dfb9059794db83ca2e6476b2498630e268c32e9e4eaba4a3dfb7a07c0ef44168dbd2b00f21776f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index

Filesize
96B

MD5
64def66e5c3c13704f953bb7727eb635

SHA1
30c99a2b9fdc13dbbc3698da8818c287e7f89d9c

SHA256
61f365240e931824054861803df0f26f58b91b89a86d14ae1b6a7293d89802a8

SHA512
369c910cfb0506e0f0d9f34ea42727b1865ce5ad2721aeea4e6deb13bb1509f51b3a4fb56b7ed5203e51579b75834911f77becc9af6c8c87950db37c9d63d804

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\Service Worker\ScriptCache\index-dir\the-real-index~RFe5814bc.TMP

Filesize
48B

MD5
95a7ac713a86a9919406a11976e8b23f

SHA1
b0c4c5afb453473030707dcd0ad6e66cdcd25f5c

SHA256
a506d054a0c5589068a8820787d373a614b1462287d8e693da2840ca16ff8341

SHA512
c54998ef35e042def3aac3989565e44437eaa396477b11decfff1d4670da7a848d47a17b7b02197de619f75fe535ec1a0f973e9a52a557f36a5351ba59af5723

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity

Filesize
706B

MD5
d12ac26b894fb3438cf477874f5bb8b8

SHA1
5cedf62efb8e15343f6cc9afc6be44b98315efeb

SHA256
168b4db6377fd9876b3396f667e2264847480334a890262c68fc7a1b8e8b65d3

SHA512
43eb6ab7ddc756b36ba12f09ead6362edec24dc99cbfd1527623b2413c1a8667ca38af0c942f0425affa4f3e7357482e037ea20edcf4948adaa83dec2713659c

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\TransportSecurity~RFe5805c7.TMP

Filesize
706B

MD5
97781232e128bfa04d8469b20d943220

SHA1
bf3e8e4f9429da8f1b1ba17b4a499d15014e784c

SHA256
1fd5fcd04e8024fc4142fcdaad521cd2c261afe2d4952853332acf3bc5d0f53f

SHA512
cc006c4163319802e51354dea5c3bb065fe5c34d63f36d419c3398a1248b868330940b3933ab1c48eb19318aa95b0e4f8e657e439350b70ac30d173d05407266

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Default\shared_proto_db\CURRENT

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
2KB

MD5
c5ccf5aebf76264c99c3b7624861cfb6

SHA1
b63fb9426965553e09815018c42258378f2acdd0

SHA256
24f3195fe657cfc74aa0de16dda7bad7a1db2535e0dad3536d6b90eab9a8f422

SHA512
80e6574b7057b6d626c42c97690923341a9e3e958ed9c6b9b3a5cc6539eb8f8add3dcbd83b6f1be3393bf201cb6a027f9f63a607521110e1280edb68102c74a2

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
9KB

MD5
93e7090d5c0c83a33fbb29413b3c392a

SHA1
e50794d9c69903fe2a95b666cb45be48c83ff253

SHA256
88a3a0521d9687119889a8d0593a7e167dfb24b101e2b4a8b5b60edf5d695609

SHA512
078f61d06a9fd0bcc47ebfd33e78e42581ccc69694026a6f87a681ae948915d6d3f1012e340e25bbbf86d1bcbd846db80a61c18651c2bdeadb58e43cfe20a8f5

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
12KB

MD5
5d015776d16f6604aa0bc5402204feb4

SHA1
2d0fb7434fecefcb2192ea83778a1d27f379d8c4

SHA256
686d97cffa5c1de380d2ed1c2dbf31882ca07aceff213a8078731349f7ab6c4f

SHA512
d9f986b2a28f7981ad26a56438f535d9171e484626e0d23dfb0b0754f179c982d523698acd1be0e9c45246eaccaec2e0db507ac094558c42eb569340f632c06f

Download Submit
C:\Users\Admin\AppData\Local\Microsoft\Edge\User Data\Local State

Filesize
2KB

MD5
c5ccf5aebf76264c99c3b7624861cfb6

SHA1
b63fb9426965553e09815018c42258378f2acdd0

SHA256
24f3195fe657cfc74aa0de16dda7bad7a1db2535e0dad3536d6b90eab9a8f422

SHA512
80e6574b7057b6d626c42c97690923341a9e3e958ed9c6b9b3a5cc6539eb8f8add3dcbd83b6f1be3393bf201cb6a027f9f63a607521110e1280edb68102c74a2

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\D3DCompiler_47.dll

Filesize
3.5MB

MD5
6bc4ada9a7cab72f49c564e6c86b4c3e

SHA1
f0fba01542a0fbe585106f7efd884df65e8c89dc

SHA256
7d0d1290382ea0e44a3178446a0c202696237e27dbb5f8f0827691092b8f2228

SHA512
d7ec39514c104b40a42cd3ca956ba84f5a78f237a39f40d85ba54983145bce2dfbc7ec5e0cbc1bf8ab64d1d370371a7cba5e30202d2c1f37782db32486ed7f6e

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\JJS-UI.exe

Filesize
86.3MB

MD5
f5785ecacd2d277155d5508c2da9691a

SHA1
9493e996f43ab114ca81c6e7471b09aaacf9cac6

SHA256
9726f363853807338f7affc14689320ac9aefef3a08f030d2d9f6f1770f1f657

SHA512
080f30724a0dabf1a8d6b843c47ea073448e012680213592563180281dd13fbccf5634aba51f618cbcb9737de1088abaf39319be6a8606a4f10d822ee0caa97c

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\JJS-UI.exe

Filesize
86.3MB

MD5
f5785ecacd2d277155d5508c2da9691a

SHA1
9493e996f43ab114ca81c6e7471b09aaacf9cac6

SHA256
9726f363853807338f7affc14689320ac9aefef3a08f030d2d9f6f1770f1f657

SHA512
080f30724a0dabf1a8d6b843c47ea073448e012680213592563180281dd13fbccf5634aba51f618cbcb9737de1088abaf39319be6a8606a4f10d822ee0caa97c

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\JJS-UI.exe

Filesize
86.3MB

MD5
f5785ecacd2d277155d5508c2da9691a

SHA1
9493e996f43ab114ca81c6e7471b09aaacf9cac6

SHA256
9726f363853807338f7affc14689320ac9aefef3a08f030d2d9f6f1770f1f657

SHA512
080f30724a0dabf1a8d6b843c47ea073448e012680213592563180281dd13fbccf5634aba51f618cbcb9737de1088abaf39319be6a8606a4f10d822ee0caa97c

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\JJS-UI.exe

Filesize
86.3MB

MD5
f5785ecacd2d277155d5508c2da9691a

SHA1
9493e996f43ab114ca81c6e7471b09aaacf9cac6

SHA256
9726f363853807338f7affc14689320ac9aefef3a08f030d2d9f6f1770f1f657

SHA512
080f30724a0dabf1a8d6b843c47ea073448e012680213592563180281dd13fbccf5634aba51f618cbcb9737de1088abaf39319be6a8606a4f10d822ee0caa97c

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\JJS-UI.exe

Filesize
86.3MB

MD5
f5785ecacd2d277155d5508c2da9691a

SHA1
9493e996f43ab114ca81c6e7471b09aaacf9cac6

SHA256
9726f363853807338f7affc14689320ac9aefef3a08f030d2d9f6f1770f1f657

SHA512
080f30724a0dabf1a8d6b843c47ea073448e012680213592563180281dd13fbccf5634aba51f618cbcb9737de1088abaf39319be6a8606a4f10d822ee0caa97c

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\LICENSE.electron.txt

Filesize
1KB

MD5
f8436f54558748146ec7ebd61ca6ac38

SHA1
ef226e5b023d458efcdc59dc653694d89802f81c

SHA256
34f6f27c26d1bb8682ebb42ae401f558228fd608455bd7c6561d5fd500b7d05b

SHA512
5b310b48bbee286f03e645e4bfad0ec870a7c68c445d54f46f3eaaa9c427f9de6cd0561d451838bd53c78a5289e9f0bda19cda4257a4657580afa6c357913050

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\LICENSES.chromium.html

Filesize
4.6MB

MD5
19a7200e2813cfa87d728205db3de87a

SHA1
b24e2313e0ecbee03fc132f24fe54e84850513f2

SHA256
34cbc992a26037e2e57f948ab34cf0f65c2a50503580c54309ed63246681fbd7

SHA512
94b54bef938aac9156ffcd9c83d75cc8564849c1c5042de060c31f190e406f29fdf046a961a72fb71f2a5b3b41eb13a65f90fada99ba34d83a2717edee102cc9

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\Uninstall JJS-UI.exe

Filesize
143KB

MD5
29e24bfff74f418edbb71e88b6b08bf4

SHA1
1ded6597d9c689388677b35e2b44f1f06d066a6b

SHA256
d28ccdcc911d7284e956fa59c9fc93103240e6d589f9905edbb1fce57961a78b

SHA512
d37621fc6a89d75743e9bfe6e25e13e357319f128226655832602dffb71340df526f26083c64fcfc92ded698f5d9d6820e13eef7bea23946ec653f564cbd1968

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\Uninstall JJS-UI.exe

Filesize
143KB

MD5
29e24bfff74f418edbb71e88b6b08bf4

SHA1
1ded6597d9c689388677b35e2b44f1f06d066a6b

SHA256
d28ccdcc911d7284e956fa59c9fc93103240e6d589f9905edbb1fce57961a78b

SHA512
d37621fc6a89d75743e9bfe6e25e13e357319f128226655832602dffb71340df526f26083c64fcfc92ded698f5d9d6820e13eef7bea23946ec653f564cbd1968

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\chrome_100_percent.pak

Filesize
175KB

MD5
3ff806f44723cee528a1aaee4d3a289e

SHA1
56830e7ff31f803077aed774fafebd4e6c5e6c90

SHA256
65cb11d090b32e0fb3c740a736c13c0a47cb1bcb265c084e3de5bb7474fb662f

SHA512
03dafb839308d644a9943ba66838536fbd1f606cafe392f90925ce51766b5e3a9064d60ca8463bacf7238258beded570d5a0007f3ce11c14f87b10faa2da2977

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\chrome_100_percent.pak

Filesize
175KB

MD5
3ff806f44723cee528a1aaee4d3a289e

SHA1
56830e7ff31f803077aed774fafebd4e6c5e6c90

SHA256
65cb11d090b32e0fb3c740a736c13c0a47cb1bcb265c084e3de5bb7474fb662f

SHA512
03dafb839308d644a9943ba66838536fbd1f606cafe392f90925ce51766b5e3a9064d60ca8463bacf7238258beded570d5a0007f3ce11c14f87b10faa2da2977

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\chrome_200_percent.pak

Filesize
312KB

MD5
bd66e8de6979dfe12cbaa29390d11a64

SHA1
967916eb7587f0163fbce50c7b4822d06e939d5a

SHA256
cd584f20aeed80fe5852d5d5656a12d25d9116d6b805ddbec3874d310925df2a

SHA512
f77bd5004d8da54e8588ffcf6962b3244b8e4a9f6310d31f0c7c44d913504577c9e3fb858078705c384649fbcf26223d8f98dd02778e259a8924028f2be3bc1c

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\d3dcompiler_47.dll

Filesize
3.5MB

MD5
6bc4ada9a7cab72f49c564e6c86b4c3e

SHA1
f0fba01542a0fbe585106f7efd884df65e8c89dc

SHA256
7d0d1290382ea0e44a3178446a0c202696237e27dbb5f8f0827691092b8f2228

SHA512
d7ec39514c104b40a42cd3ca956ba84f5a78f237a39f40d85ba54983145bce2dfbc7ec5e0cbc1bf8ab64d1d370371a7cba5e30202d2c1f37782db32486ed7f6e

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\exploit-main.dll

Filesize
10.1MB

MD5
7f55ec2bdc0c13477ccc69099995758a

SHA1
91f85b2f9ae4a388d63dffe870d357f3069d2b0e

SHA256
49ee698cb08b490f714f473e97c8fa93191e62696b8671c8cace932006e103c5

SHA512
656eab4917cc386ae4c7d724419ff142340fca5e51213832fea9f0d6ee2084912482cea088bea76df5913ce0b5d1a2eeef9f47b6b00cac13fbabc0bdeb5c61c9

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\ffmpeg.dll

Filesize
2.1MB

MD5
f193d766add1c6386ff6dbbccf7e176a

SHA1
c467242b06dd9ad3b81f47f3fd4cb2faf320f0f1

SHA256
cb7e3974970f4e306e444a4b605e4ed9a83fe62383cfa4897755c77eecec7893

SHA512
8ea7dcd2a417d3cb49ff8523a250ee804158101b355f61377f967d7ff309ec743e9c3c055022179c37dc736314ed73097b601c9376d11cf34d750049ab6e1984

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\ffmpeg.dll

Filesize
2.1MB

MD5
f193d766add1c6386ff6dbbccf7e176a

SHA1
c467242b06dd9ad3b81f47f3fd4cb2faf320f0f1

SHA256
cb7e3974970f4e306e444a4b605e4ed9a83fe62383cfa4897755c77eecec7893

SHA512
8ea7dcd2a417d3cb49ff8523a250ee804158101b355f61377f967d7ff309ec743e9c3c055022179c37dc736314ed73097b601c9376d11cf34d750049ab6e1984

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\ffmpeg.dll

Filesize
2.1MB

MD5
f193d766add1c6386ff6dbbccf7e176a

SHA1
c467242b06dd9ad3b81f47f3fd4cb2faf320f0f1

SHA256
cb7e3974970f4e306e444a4b605e4ed9a83fe62383cfa4897755c77eecec7893

SHA512
8ea7dcd2a417d3cb49ff8523a250ee804158101b355f61377f967d7ff309ec743e9c3c055022179c37dc736314ed73097b601c9376d11cf34d750049ab6e1984

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\ffmpeg.dll

Filesize
2.1MB

MD5
f193d766add1c6386ff6dbbccf7e176a

SHA1
c467242b06dd9ad3b81f47f3fd4cb2faf320f0f1

SHA256
cb7e3974970f4e306e444a4b605e4ed9a83fe62383cfa4897755c77eecec7893

SHA512
8ea7dcd2a417d3cb49ff8523a250ee804158101b355f61377f967d7ff309ec743e9c3c055022179c37dc736314ed73097b601c9376d11cf34d750049ab6e1984

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\ffmpeg.dll

Filesize
2.1MB

MD5
f193d766add1c6386ff6dbbccf7e176a

SHA1
c467242b06dd9ad3b81f47f3fd4cb2faf320f0f1

SHA256
cb7e3974970f4e306e444a4b605e4ed9a83fe62383cfa4897755c77eecec7893

SHA512
8ea7dcd2a417d3cb49ff8523a250ee804158101b355f61377f967d7ff309ec743e9c3c055022179c37dc736314ed73097b601c9376d11cf34d750049ab6e1984

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\finj5.exe

Filesize
6.2MB

MD5
8295c8fda3b0594491b7cce9ae5c3ec8

SHA1
62894c682bd6f2bff7a078019644ab0a5dbc43d3

SHA256
40997f97497e5317784f103515fd69b5ab827359922bd350a4e4d01f3fe3a0d7

SHA512
9e4276a1aef5237cc0cf67661ec36665df9a36c042f4d5fce16cdfb2acba8f1c4ee3870d9b459737a0bb479de1b1a161fc4f000a3f26b5dcc9528da1d478b731

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\icudtl.dat

Filesize
10.0MB

MD5
3f019441588332ac8b79a3a3901a5449

SHA1
c8930e95b78deef5b7730102acd39f03965d479a

SHA256
594637e10b8f5c97157413528f0cbf5bc65b4ab9e79f5fa34fe268092655ec57

SHA512
ee083ae5e93e70d5bbebe36ec482aa75c47d908df487a43db2b55ddd6b55c291606649175cf7907d6ab64fc81ead7275ec56e3193b631f8f78b10d2c775fd1a9

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\kernel64.sys.dll

Filesize
3.7MB

MD5
f93f877a08d53de51adb7d17fc262fa5

SHA1
2200e8c8cd10a4ca26a23e04f7bdb357b8ddde80

SHA256
401b72ad66f28b09674e5d88e1cf341896f899959e16bcca53b716aa6baab044

SHA512
8e8f1b9cf177167198de38ddce481290d64a2005f9889c915cf6342665bf4882217e4636714f7221d8fdee74f3751174efde26ddb9b47dcf379194f7bdb951b8

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\libEGL.dll

Filesize
304KB

MD5
2fec05027b1db52241c68b5fb6bb5ab8

SHA1
6572166b997d4a184839aaee860df62a2d4d5621

SHA256
8e246db7ed22106f8a30ec428310befdde0b20ceb40130ec974eebba2073b11e

SHA512
7a1b3819f82b83ee419337fedba664df9e76d95af5e44767517d720ad0e1518a4c0fc1cfdf34af9a1aa20c7a5736cf1a380208c39454cf02c567749893fa4c9b

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\libGLESv2.dll

Filesize
6.6MB

MD5
10de79e499b2bf943ffeeb1ccf176100

SHA1
91cd06464698ddde2387e6629d71e91490adc67e

SHA256
675e2546dac53d77ad1e531713fcbd43cbbb275b7db8c0198bd3dbbfb2cdaa48

SHA512
61c4c124814e9d48176a3c9a943f42573af1c70400a67e5d7f753e21fcafe16f414f4c14354c8696b576cf2f078f534edb212bae5867f4e9fdc969f617f669fb

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\locales\am.pak

Filesize
128KB

MD5
c84f7c8db81288100b568ac1022951e5

SHA1
6ef718615084f1d271ff569a1476cfe07809cc02

SHA256
284ee6fc489f27135e227ee38b347e9b8f9418543580f736ae80290dcd320753

SHA512
a73913e5416cb7dc1f023e98c230edd280a96c6c5043184fa78cd366ff0bede8b6f51260b3fc1936026c8ea284ad7a096b97e25960f9662389f73c96fc98d3cb

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\locales\ar.pak

Filesize
128KB

MD5
b6d2b984886716a25efd937efe6797bb

SHA1
fe3e841c2aefc7fca0de30eac89be8855b67eafc

SHA256
725b43e7fa5aaa6a75fa7288311d487cc419885bc31518b02bee65876cb5a1cf

SHA512
71095960f016e25f5256807c6a605d1003497b888e0893b731034536c8c70adeda5cca53e8fd1375354fbe8b554db0bca8d61860d51979ee63932f00f2a4c13b

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\locales\bg.pak

Filesize
138KB

MD5
5b5a425ab5e9f8e83f029f45759bb4fa

SHA1
26479ec207ba4c4d01cf5cfea97e2e77425b4a16

SHA256
5139638fbf7fefe0e4b0edda3ae404ff715ecb0492a620d9cafd01e5f1efe234

SHA512
666609df1d051326a24043ab4607ad038a0ec7f0e8078a115ac2fe8d62fb7c4b0f9a849eb98b3bb70dbe888f0afe6263186c98cf23d42e624139491398e75e91

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\locales\en-US.pak

Filesize
75KB

MD5
a2201115723fd61d1e68ab001e6cdca0

SHA1
a97073e22adf7b300e702e717743cd249e64b4fb

SHA256
3333cf1fb2b0c15ea819787ba672d2274f3136e6a8729f2e5d2796b740688183

SHA512
e68c451602a0c2cd47ee3652daf1d74d87e6e61ebda9166cbb182301f03118b72288968695f85a1bcdefb45e4753ba7187dd5159b6694952f33238af39d89479

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\resources.pak

Filesize
8.9MB

MD5
5118ebd39acde0236a71fad2880add8c

SHA1
1daa8e701f17a793c0e70f4b0aa36fbb376962ae

SHA256
e3386c5fd98dc711a70eae7a9f6bf3139de3e9a15e3a022d343a459b747c6471

SHA512
925ae1d8c643e4f3c20221ae850a171e6032d9e391cf07e5efab4a4a29e8f6640973a8f0dc97704df5263ed93dfd4c32650c656fbc9874c98ab87c6131fdcaa8

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\resources\app.asar

Filesize
25.5MB

MD5
66c0a1c656ab24aecb609cd8a19ba260

SHA1
a86f3c6b9a6d109a08122a331f58f056f269bfce

SHA256
55fa1a547472dacc5b91e29ff3693ca62e155a7c1dd3dcca5e52bad5c16ba2b5

SHA512
d6036159be4088b2e0a703056072254a9a00ef58921a036858e9c7c9830d397c7222fb159ff3faad3a258ae69bfbbdb3ae4f3d6f332edb350e0654cf688b4216

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\swiftshader\libEGL.dll

Filesize
326KB

MD5
cb5e28007c9d61871ceb5dcb2b657985

SHA1
f2fcd64cbcfd8657a6326c152b14f6114eb74606

SHA256
c3dc1eaaf67f0a8c7bf80dcdd2830d79c5d980fca19aa854512cd69c79df8b1c

SHA512
18635d1120cb983601c234bf662d85939f0046a84bfc652f680c078e52a0cfc41b2e2b3098f3a365663f14a9ea1ad51c93527370f58d57788e9ceea46b507dee

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\swiftshader\libGLESv2.dll

Filesize
2.9MB

MD5
34c323f53fcc4021f446fb1e4c14ff09

SHA1
d4160430c8fb300d7d5505fc08d671e53f1e1b6b

SHA256
6202bf896139be5e8d7f38ffa1e68c65828ccfe02c33e7912c67883031f4647a

SHA512
e591366d71edf938ea5b921b2efd1647c73a97442c2fbe038f1f35e2fec0323848c20e6858189f655ff222672a40b3d8d31e1cb7bcb22cb00597e71d5172f655

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\swiftshader\libegl.dll

Filesize
326KB

MD5
cb5e28007c9d61871ceb5dcb2b657985

SHA1
f2fcd64cbcfd8657a6326c152b14f6114eb74606

SHA256
c3dc1eaaf67f0a8c7bf80dcdd2830d79c5d980fca19aa854512cd69c79df8b1c

SHA512
18635d1120cb983601c234bf662d85939f0046a84bfc652f680c078e52a0cfc41b2e2b3098f3a365663f14a9ea1ad51c93527370f58d57788e9ceea46b507dee

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\swiftshader\libglesv2.dll

Filesize
2.9MB

MD5
34c323f53fcc4021f446fb1e4c14ff09

SHA1
d4160430c8fb300d7d5505fc08d671e53f1e1b6b

SHA256
6202bf896139be5e8d7f38ffa1e68c65828ccfe02c33e7912c67883031f4647a

SHA512
e591366d71edf938ea5b921b2efd1647c73a97442c2fbe038f1f35e2fec0323848c20e6858189f655ff222672a40b3d8d31e1cb7bcb22cb00597e71d5172f655

Download Submit
C:\Users\Admin\AppData\Local\Programs\JJS-UI\v8_context_snapshot.bin

Filesize
541KB

MD5
bd06321191c06413bb9c15c3987859ef

SHA1
eb6a73a3429f3151632a05d5ca5e3590b782ed85

SHA256
cfbc1a5e921074913a87b1ce7d6d99cb4accf6d7926d242bd264846142dc635d

SHA512
48ddbd1d8c77857b2a2bee65f4b903441bd675fc7bf53e96be2a78557f85c00f27344e7cdd29352ec9977417b991316365d66f5e40b4b9884415693aba283ded

Download Submit
C:\Users\Admin\AppData\Local\Temp\20743705-0398-4a14-a174-58e86bce23ef.tmp.node

Filesize
117KB

MD5
80b6d5f12dfe42f21dc5ec5ee793ad08

SHA1
53aca73b99b75191bdce2a025151848b370dfeae

SHA256
0d7f23c4e4b1a3dd6e2e77465b4bbe1487a82e9681c327e48090abf3c726ec0f

SHA512
236fa76c080f915f221d0584445261b87c77425400f260555395f0f5a29ca3cffb6ee8c9e477d1d4895c10406e651c8d87771f1b1de889fca5bd6bc4f818bc9d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsn31DA.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsn31DA.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsn31DA.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsn31DA.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsn31DA.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\JJS-UI.exe

Filesize
86.3MB

MD5
f5785ecacd2d277155d5508c2da9691a

SHA1
9493e996f43ab114ca81c6e7471b09aaacf9cac6

SHA256
9726f363853807338f7affc14689320ac9aefef3a08f030d2d9f6f1770f1f657

SHA512
080f30724a0dabf1a8d6b843c47ea073448e012680213592563180281dd13fbccf5634aba51f618cbcb9737de1088abaf39319be6a8606a4f10d822ee0caa97c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\LICENSE.electron.txt

Filesize
1KB

MD5
f8436f54558748146ec7ebd61ca6ac38

SHA1
ef226e5b023d458efcdc59dc653694d89802f81c

SHA256
34f6f27c26d1bb8682ebb42ae401f558228fd608455bd7c6561d5fd500b7d05b

SHA512
5b310b48bbee286f03e645e4bfad0ec870a7c68c445d54f46f3eaaa9c427f9de6cd0561d451838bd53c78a5289e9f0bda19cda4257a4657580afa6c357913050

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\LICENSES.chromium.html

Filesize
4.6MB

MD5
19a7200e2813cfa87d728205db3de87a

SHA1
b24e2313e0ecbee03fc132f24fe54e84850513f2

SHA256
34cbc992a26037e2e57f948ab34cf0f65c2a50503580c54309ed63246681fbd7

SHA512
94b54bef938aac9156ffcd9c83d75cc8564849c1c5042de060c31f190e406f29fdf046a961a72fb71f2a5b3b41eb13a65f90fada99ba34d83a2717edee102cc9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\chrome_200_percent.pak

Filesize
312KB

MD5
bd66e8de6979dfe12cbaa29390d11a64

SHA1
967916eb7587f0163fbce50c7b4822d06e939d5a

SHA256
cd584f20aeed80fe5852d5d5656a12d25d9116d6b805ddbec3874d310925df2a

SHA512
f77bd5004d8da54e8588ffcf6962b3244b8e4a9f6310d31f0c7c44d913504577c9e3fb858078705c384649fbcf26223d8f98dd02778e259a8924028f2be3bc1c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\d3dcompiler_47.dll

Filesize
3.5MB

MD5
6bc4ada9a7cab72f49c564e6c86b4c3e

SHA1
f0fba01542a0fbe585106f7efd884df65e8c89dc

SHA256
7d0d1290382ea0e44a3178446a0c202696237e27dbb5f8f0827691092b8f2228

SHA512
d7ec39514c104b40a42cd3ca956ba84f5a78f237a39f40d85ba54983145bce2dfbc7ec5e0cbc1bf8ab64d1d370371a7cba5e30202d2c1f37782db32486ed7f6e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\ffmpeg.dll

Filesize
2.1MB

MD5
f193d766add1c6386ff6dbbccf7e176a

SHA1
c467242b06dd9ad3b81f47f3fd4cb2faf320f0f1

SHA256
cb7e3974970f4e306e444a4b605e4ed9a83fe62383cfa4897755c77eecec7893

SHA512
8ea7dcd2a417d3cb49ff8523a250ee804158101b355f61377f967d7ff309ec743e9c3c055022179c37dc736314ed73097b601c9376d11cf34d750049ab6e1984

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\icudtl.dat

Filesize
10.0MB

MD5
3f019441588332ac8b79a3a3901a5449

SHA1
c8930e95b78deef5b7730102acd39f03965d479a

SHA256
594637e10b8f5c97157413528f0cbf5bc65b4ab9e79f5fa34fe268092655ec57

SHA512
ee083ae5e93e70d5bbebe36ec482aa75c47d908df487a43db2b55ddd6b55c291606649175cf7907d6ab64fc81ead7275ec56e3193b631f8f78b10d2c775fd1a9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\libEGL.dll

Filesize
304KB

MD5
2fec05027b1db52241c68b5fb6bb5ab8

SHA1
6572166b997d4a184839aaee860df62a2d4d5621

SHA256
8e246db7ed22106f8a30ec428310befdde0b20ceb40130ec974eebba2073b11e

SHA512
7a1b3819f82b83ee419337fedba664df9e76d95af5e44767517d720ad0e1518a4c0fc1cfdf34af9a1aa20c7a5736cf1a380208c39454cf02c567749893fa4c9b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\libGLESv2.dll

Filesize
6.6MB

MD5
10de79e499b2bf943ffeeb1ccf176100

SHA1
91cd06464698ddde2387e6629d71e91490adc67e

SHA256
675e2546dac53d77ad1e531713fcbd43cbbb275b7db8c0198bd3dbbfb2cdaa48

SHA512
61c4c124814e9d48176a3c9a943f42573af1c70400a67e5d7f753e21fcafe16f414f4c14354c8696b576cf2f078f534edb212bae5867f4e9fdc969f617f669fb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\am.pak

Filesize
128KB

MD5
c84f7c8db81288100b568ac1022951e5

SHA1
6ef718615084f1d271ff569a1476cfe07809cc02

SHA256
284ee6fc489f27135e227ee38b347e9b8f9418543580f736ae80290dcd320753

SHA512
a73913e5416cb7dc1f023e98c230edd280a96c6c5043184fa78cd366ff0bede8b6f51260b3fc1936026c8ea284ad7a096b97e25960f9662389f73c96fc98d3cb

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\ar.pak

Filesize
128KB

MD5
b6d2b984886716a25efd937efe6797bb

SHA1
fe3e841c2aefc7fca0de30eac89be8855b67eafc

SHA256
725b43e7fa5aaa6a75fa7288311d487cc419885bc31518b02bee65876cb5a1cf

SHA512
71095960f016e25f5256807c6a605d1003497b888e0893b731034536c8c70adeda5cca53e8fd1375354fbe8b554db0bca8d61860d51979ee63932f00f2a4c13b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\bg.pak

Filesize
138KB

MD5
5b5a425ab5e9f8e83f029f45759bb4fa

SHA1
26479ec207ba4c4d01cf5cfea97e2e77425b4a16

SHA256
5139638fbf7fefe0e4b0edda3ae404ff715ecb0492a620d9cafd01e5f1efe234

SHA512
666609df1d051326a24043ab4607ad038a0ec7f0e8078a115ac2fe8d62fb7c4b0f9a849eb98b3bb70dbe888f0afe6263186c98cf23d42e624139491398e75e91

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\bn.pak

Filesize
181KB

MD5
7f2cb8612ee91a32419fe28783ef9d6d

SHA1
f8ca0466ecfc0052224ee69c45528b88dfdafeb2

SHA256
b8d44cd025c614a2cd7b6d500578f08b894e8f27768ce2061283744e15526b06

SHA512
f6fd686cc9bd363cb998cc329dd7f28a98a6e7db1a780f665470b1b2c6e9bf6bde248ba68f1cc7891d2d6101f1ca763e3532b51e6c2840bfeb8c210351cc21f3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\ca.pak

Filesize
90KB

MD5
6d13a30079cd53a81646ccb9c9b1555a

SHA1
171aee0f111bdff28bc418b1f687afe9782474b5

SHA256
f94b3f96a43ed8b2186473171d184ae5eb356b3d5f5565c82c8056ce02582212

SHA512
d487d4caa1760c85e56532c1075475eae6da9dd818525bedb306c2fc3039b5e94cf15cf84e1a1e8e5f479e8aa763d8b9966f74d13e91655fee4e6544526bb3a0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\cs.pak

Filesize
92KB

MD5
73d3c460e8973f690b394b7294865bef

SHA1
8ae376a73f6f4717316a651596c9103bd92e0320

SHA256
a2223c090eed8429176b40ae98eaf9e7386d98c7099e13c769eb6a49833a7e68

SHA512
4368422da5b98d7125deaaccdfb29a7d439aca67311785a3ec12df9df11dce88bdf4e2d9a61b9821f35f2973d636bd175f0e2d8a97521f508a2e7caf2becc4d7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\da.pak

Filesize
83KB

MD5
004c465a2b2e8031cd608e2d0ce15351

SHA1
d6a6352f3b0a6035265f321a05c0d5a64aba9bd7

SHA256
b4250379ffa96d7cbe8a02266e43d27aeea76f404f8a85b5e1780ff15d5d5003

SHA512
77449505b3c10f9259bbb49c1e1d6964acd5c4db3274a73eee132cbd1a1dd8c2295ca2fef6dd8141fa1811503ed7d53997cc56884e82f84d996d4c12d2b55ca1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\de.pak

Filesize
89KB

MD5
785c18b8b55e1765161b1831660a0dab

SHA1
e85e7b91a95e1824c724838be5a258c6f876f7c7

SHA256
59917a4e00216cf882bd14d17b8b71f2fc2b6e319d14ce88aa9737393064217f

SHA512
acfa2e65a6859e49089e0023301e424042bdda720c3e34ea14f24c3ba718465c04449c48ab207068f571787d0ba83ec9882ce4b7f99e308807ef8f23ea73b366

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\el.pak

Filesize
155KB

MD5
74f2894ae2241bdf702074950c34afc5

SHA1
048400cd9beb12af0750fb920b168015ff0f090c

SHA256
981f2179c8a71dedd53048d09b6c4d7b6d5ba30441f3132b381cc70dbb9bbfc9

SHA512
1a53b5f23cf80a206bf357a84dd4e5dd0c90c7b2a34784bb8f57b0d36ff3589f1f5c8e073cee1099d3655403fe213ba7b768b8ccb71618cf20559b41884e814c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\en-GB.pak

Filesize
75KB

MD5
2a4a527cf7ad42d0d873850de8841797

SHA1
d8ed2bb231bf70277881ce22f3028eb4265a5249

SHA256
96ee955686d67eb5a79db5deeabf3efce9f7e9f28c2af270ce2f210d9ebe0e99

SHA512
f0defc6002661c3aecf785c81927d588b41b032bdb2e24aa10614c8d6ddcce1765b1cdab5b9b03725c353edddf59c1abdbaf11157ecbc305e936b41cf45bc068

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\en-US.pak

Filesize
75KB

MD5
a2201115723fd61d1e68ab001e6cdca0

SHA1
a97073e22adf7b300e702e717743cd249e64b4fb

SHA256
3333cf1fb2b0c15ea819787ba672d2274f3136e6a8729f2e5d2796b740688183

SHA512
e68c451602a0c2cd47ee3652daf1d74d87e6e61ebda9166cbb182301f03118b72288968695f85a1bcdefb45e4753ba7187dd5159b6694952f33238af39d89479

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\es-419.pak

Filesize
88KB

MD5
c9197645c4210fe9fa4f68f55f4a4ae6

SHA1
7558b10eed52ad0eff8abfa4857e632d01c37322

SHA256
ea4d8d8fd1de22885dc300dde896fcad6ab0eefb240622299dff5f2e8fceb27f

SHA512
d9d3f2324064ac419c0792eeaf960491a4079e96203ed47d05ca449597e1dafd230770cd4d7b1f883d8912c7ece2da2370c2b4435c19d71e01fbfc6254a57642

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\es.pak

Filesize
90KB

MD5
60ba508fe191540a8dcff410115e1ad4

SHA1
0f177be034212cd65c8bc0ea53e37980d1f2b83d

SHA256
4a5798f4ef51459da394dd965d1b8d8a49ee4d1a972eb36dbf8568c254a941a7

SHA512
9d97a916c684492e97e643a7c6cdfcc64c003bae3b4855e16f5082e10f9103d2365f714fd4e30afa7acfcd5705ae8e9a50d948026bdcfad01fb4a15e434569fa

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\et.pak

Filesize
80KB

MD5
e8b34b2d2195e4b354076d65799b1c03

SHA1
b9def252d7bcbd87c7c232647abd6082e17f6e21

SHA256
814e619eab543efecd46ad68fc8b3570faae3d2477a7a00c30ea91f9ed47099a

SHA512
49332ce53f7d9c05f9ccd3430ba0bf549df033a1f70fa1b6907365c9fa116568b585107cfb69eeb17c8ae2bc94bcb105bb06f28d21a2e26292e2cf64f505f80a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\fa.pak

Filesize
124KB

MD5
4a148f67f1bddaf1e913cf8260f3df3b

SHA1
75dce20fc9b991382e235d30dd0814cd12b4c6bd

SHA256
cd4383ec902a3d40c6d50b345fdd9667b088f5a001fcf45345863032bafb67c0

SHA512
fe68c88611686d0a0660260241fefa26be59c24a81797e18f03e1617524cd20bea28f5767d73763bb98344ac199793edb4ee8fa59ab62998e8eb1c558f3ebcc5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\fi.pak

Filesize
83KB

MD5
284ce722318cfa37f9bc410f04adba70

SHA1
98e0d100e87eb1784a5400ea993052fa7ef0952d

SHA256
b8bc57d8de7cd461fa35407c916c94b45a90cfed852756cd9479da8b897608fb

SHA512
e57de236a6bb3cd6f065c4895a8d1e1eab38ee408a37b847b9fb0973af5354b8f4aa6e1ea07cf5435fa74dfd6e76a861517e3a79cb2a447111c04fbdbad7e339

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\fil.pak

Filesize
91KB

MD5
95d2404493d96a5223b64173bcebeaba

SHA1
b9100a45400ae28946ef7a5f9cf4cd6922e0c1d5

SHA256
94ea365974e0a5c8398f3a8074ebe12562651dc027b86ce19bee55bcfc2228fe

SHA512
7fc443571dfe4732b453faf6e6f9e09df738599a3366518469ccdafbeebfe0bdf3292a9819171820692264da1830037789397afe13717886e2f4896474d566de

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\fr.pak

Filesize
97KB

MD5
d2aa149c80f9ad2b65e01f97f374f88c

SHA1
45a60304fad8cb1becb7d355610eb9d11aa08fbc

SHA256
2e45c08e1c77698f26c1fe71a2d02dabc118deaa119d7f80ac77ac228a82bbeb

SHA512
9ed0c0b229f298eac9d7d5dfd3bdb42b1825e6c4ad4b0c40eb0f7d13f6b8bc615b188d6a8f00854025e4f4feb2f0b285666db257b9158747329e7c2749126fa1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\gu.pak

Filesize
174KB

MD5
49bc780cd3f5d8d51ab4b8d8df2c142c

SHA1
0c05e9993d0318ce276a81c6ab780312d679a7b1

SHA256
1b5115f0133831bfba4109b519b34eb021694205db0c2c5c2b9a1522396bb53a

SHA512
7eb3806342fec541be0472beefe852df6dddbe63376c1bd31d9a7419b2352981dca433ac09be7764ad8879c58028fa95acd4ad7a83cb5684be12e83805766946

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\he.pak

Filesize
108KB

MD5
bb2551c3a287c8770a27a5af3de9e8a0

SHA1
c3712becee34f76f922f6cdb7d1d3407702b0a71

SHA256
0ec6eac081c28970f758332d527a8dc2a8a8e3363c1fd39c41d39d6aec95f6e4

SHA512
c42ec011b92a8ec9469d22747851af733f77b036d51159c8293b2d693bec11c9f5558cc567758fc464346fef2421c7c9ad429de036f56562ec2f7c0f508c23e7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\hi.pak

Filesize
178KB

MD5
92c24cfbfdeb23aae5db03abd87df1c1

SHA1
9c2be010b97f6061fde387ee11e631db84a5ab6b

SHA256
adafbe271870bf80b97a0814c7c0dbf6188d7f82541a84ae739e972961191079

SHA512
6041b9caf161af4006cc02a1f3626e600e71e840760aab9d52e566487354e1b01637fbaf830f59f58c0556893d4ec75582118eeadcb42614267aafa11798841e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\hr.pak

Filesize
87KB

MD5
370297a1ec575b63e833669c402b78d0

SHA1
65651e5fd47034ad41944cdd1cda25cbdd815945

SHA256
9a110e4288f65409a702386b105b6ed1e6ff774e9012438a5d73f9413346cf5d

SHA512
9f47d17ab7e73a5530aeb4e86fe86878ca81c1736cce8186247581e3f1b5c6148b54b4f2a9d0e0d72b746cf0646bf196b04988c3c4db9e39ce70a39cd99aa883

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\hu.pak

Filesize
93KB

MD5
d96c570a3b75fa8cc01157197e2f38c3

SHA1
a7c4a10b4e27f4e77316ed536fe028b993e92af5

SHA256
f55ee86cf653b2ed5ca8fa0ebd54d7b6faf7e6e5ff2db63b46d9ecc8f7774dcf

SHA512
bcded6b118ba7d324aa6f62ff277b489a4fa6fbee308d1a35433f2cfa86628744f24736466c2d19e24d4145f9b61a4a79057ebadc9b60e17e8299ffaa07e0966

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\id.pak

Filesize
81KB

MD5
59f115f158fcc57bff56ec92273f8a5e

SHA1
556006be545101049e981fa9b7a4f733ccfe93b9

SHA256
5ffb4f703e0ebb25726da3463b5113282b7250e376a3e251ea75dc7414b36c9a

SHA512
c0023b3ad8f0124439e01c643d3ac8dfcd72a81c1e904aa04c0e2dfdadf889940a4cca53cd49a95f8d608481082b6659e6a0f6c00e0d19b722cbc2b571847c9e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\it.pak

Filesize
87KB

MD5
e7c010440966a4676104f8b18e5021fc

SHA1
79f56f8202a4cbe465cc9c28701f7ecd83d4eeb0

SHA256
8888d0c0e2463178844312e69dbfd7e76ff4874add65ad325e1eb535dc2cd630

SHA512
b3f016768a02c8908564a489c8383e136ed9a86637e71dd17751869fc5def1047b0b97f55c184bbb2759855af6281b8b6ae286003dcf73d4d65e8297fe560cab

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\ja.pak

Filesize
106KB

MD5
9c489794ebce84257f56a88e7dabe4af

SHA1
5615b602f1fed481cee51c6196d0b4c4477a74cd

SHA256
a7f49f6aa7ea5cea489ae9326b757fbb86b070a45febf306fbdd10b25c9b8757

SHA512
420b5ae73c90e818d5b71291954896839dca5ad91a02084a61a6cf95d73ed6c2c4e936d2ef1242683ed9f04e9c0d6d1ba5466b9dad9ba7de963ddfc6a73192e6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\kn.pak

Filesize
200KB

MD5
cc66ae516c7cdd4d3bcc265011c079fb

SHA1
d859332e8d7fd038d754396043648472220c134f

SHA256
3be74f453993ffa49a47fd30156d36250334c3637d2f352486e22d6f29eaf49f

SHA512
6a54a822c999bd4b38cdeb95c548b543b3259871f425126c7eb759d339266fddc591f2691f64e5bf28c1d6028e86ec2fe54d7d5403dfca473ca68207db2e28db

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\ko.pak

Filesize
89KB

MD5
4e7e3525366815c67fdd70056b9f0205

SHA1
1c57fd77f8ead45e6c7ec2b4f22f86b3eb24aa5b

SHA256
c9fedca3ccf77512631a42b38f157a52598a7ea0f45dddbd65591b251dc5921c

SHA512
8457aab3149e8430cc489e4458522ad45885fddcec52ddb54df3d2b04f508504f25627b4d268b3b804de5a4aaec506d22c88bf8ff45295ea6ab6fb017ae7f295

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\lt.pak

Filesize
95KB

MD5
282d88626612ac1bb749c78434165d92

SHA1
56a1725fdf4e94aabd7cd65f997053ac127bf416

SHA256
af338b1077a917ec36a3323e248f4c4dbf40d78f7bb25b82b6442ad84b20df37

SHA512
cb13e189d2de6ba210fbb0c8d182f0efe4f6851842380e7c80c9b50a98b09d6bbdf311496fcd6c86932d54a7e4eaad4d59b140d3ec0b1b6501e80675ed7f3a32

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\lv.pak

Filesize
94KB

MD5
332e41a8e58791441debfa7ba48eb4a6

SHA1
28e0753c1f372c91e8a63416fcb38c63c1ab7c57

SHA256
941f26e6e457ee4612468448b47e7eee15801c6faca4571d19929641879b2259

SHA512
2f5df84bb0e50c12c437180496299132d3ace1e8ea0fcf7b4804faf84ba58b3d6c2c27dc7761c8d8bd519cc615cf39ea1091d3b00dab85f594a52afb59c98bed

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\ml.pak

Filesize
212KB

MD5
c5a107d4f85c85224a7556653b688210

SHA1
d14c60f984d232d721307154a00b2d5995f1fb33

SHA256
ba0284f9316bccad25053a24ae9482de8d17da592be6233f6729e612906c63df

SHA512
5b44ef21d70c074fb82f0ab12eb8f4537fe02cb6262a8113ce68c59cb8c332cbdea1fc4449cb766605bb187e5b78b668a6ebf865e32417223ef501cc466bb281

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\mr.pak

Filesize
172KB

MD5
6a7f40b52eaf8a138a7995987e04c8c9

SHA1
b77b7a51812f498687c3391f476a7560580ac765

SHA256
4042effb4a5dd5c4cc72af11dc7fcba6ce12c60a1d5dcda8396d22103de489e8

SHA512
521a5af3ed941c3080ec9b9d3cf72bd57dfbb9dfb1d0eafb891df58df7081d82ffdbf200693c3bcfc418f668871354b7e63e8ec324941dfb91345f6634bf0cd3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\ms.pak

Filesize
83KB

MD5
d90b0ca68951da156c0006becb458354

SHA1
166347f49dbd860a8854c7a0a4a9044051613b18

SHA256
48b930b457e54c4017ce271f54441f9d7d22f9501cc10ea63d2c458d70c9818e

SHA512
f3c7cf105fa1aeaaa576254095ee0bdeda6f634badbfaee8278b8a1f428f4b5f96cdab452e3fa29d569073b5ecdbe040cedbb7e26f0da323fff650169e29fe47

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\nb.pak

Filesize
81KB

MD5
c442821b9c9488c04cda751fa0e16f27

SHA1
a7a5d5f14d185fd57064554784c1585898bc8429

SHA256
179f72f882e7f81caeefbefa978cda5f36975cc457235b8631c04e1074aa5cd0

SHA512
f8462b5d8259de42b32cd6d9544f0a5b91f1241430d9387ebb1dd67e71e3628c4e3612b2928223e6a9150e4da88249fa6379559b99efa0fcf931eeded98e037b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\nl.pak

Filesize
85KB

MD5
ae7f0fce7016ca8a0ca09c873edaafb7

SHA1
95d97fd49b3437a814b240f646ab9a082b203cb6

SHA256
0b11b4212bd9156b0c0e243a4800d7127722d9633a76517b5c8c514e78131d25

SHA512
6ec2621387699718341ad6081fb8de25bfd30e3edce9adcc338ce9f2f1b5023b9d07a812c2ef4e7fed7f39e2226f692cc383bd4c08c3d1345b0307637f8ef22c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\pl.pak

Filesize
91KB

MD5
327bcae3a9f16ee119a8758f6e81e1dc

SHA1
d71ad0f88b9c4452bd38dc1c1b40305b7f63e458

SHA256
a758db08da7dfc64d92354c6c8003b3ff6645d4eb8322a7f25ca0833d9a8bad8

SHA512
120c8241cae67f607c63e638fc08e1e698b287bc4c8b0012b5b6823a34455eea4585a5272da6925d5e0f502ba1662cd8ad6770684ab1eb9e8f4470daced51e4d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\pt-BR.pak

Filesize
87KB

MD5
d7e0200889573353d565cf3fa204100c

SHA1
9caf8c68506eb3b8426b5255b5cf1a3346e63f66

SHA256
fa809c459129ad31e8093decf1e037ef8b5c92e4069d09eba675f183becd8b16

SHA512
22a18d83d60419fd5c472dc23043b69dc33a36a3f258dc4dc56cb13a66f05fc7c2dccf60f46f714d78f80e5e322426ba09662b8de8c6a194fa840f9d395fe969

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\pt-PT.pak

Filesize
88KB

MD5
25bd39d4574e42614b8bedf17221474e

SHA1
9487ef83dd55cf08b02b5ead01900c5bd97e8d44

SHA256
ebce096d5060e7d8a33683263057841c50555ef3c98df8e3a48e0f534d976f39

SHA512
51107c2a97240cbddcb0d459035ca4adb39a7a317c7609942437029fd93bb3a57c299c4a4405fa691292e2d225dcb4554268f1b8671191300167f3eb42ccf65d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\ro.pak

Filesize
90KB

MD5
83bf02181e7e118d1588c35bfacd5273

SHA1
1b60e69ea0371186a248e173ad7969b27e2c87cc

SHA256
6d17f5241516edb4e9ce545800fa0f2c8d3ac92d6f42919bea359d57f54b822d

SHA512
86f34822987550580b7d2cc63753882b22af3b78a8c84933b39ad50d287631a79f04cc156dbad06438ab710c8ee2ef690228202dc374fb99a7c4143063d4514e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\ru.pak

Filesize
141KB

MD5
f1ccbacedb66aee867961303d883127e

SHA1
f157f2ade560abe9f3cd964da8141e87509ece79

SHA256
5764ac5fc75dd85f25b718eec1a408ec11c1a5ec74cb5e5a56d60128bc5f8096

SHA512
f75b261e2b5b79b83b98c3e514cbcbcc1749b50ee2ff174a871857132f675b9bf868b81080a650d02569540395e63cfec50415b2c5b346220dcf36ebbf6a2fd9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\sk.pak

Filesize
93KB

MD5
30a5df90714695ac94e77897f742c79b

SHA1
f9cd0816751a80e2375ed06a29f7387c6e522165

SHA256
079fcc92584f6f0dc5dfba3a6b1356f069c1d3d7fc61a0fbfdf3b80f2e626810

SHA512
64d7b3a658605bb1e37e0d4927bded715e460b1c740ffb9b7534f8fe8e5da90da48506dad3bc19d9953731dfb6b22c2563cb70376528b24283d111cb07fa6a26

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\sl.pak

Filesize
89KB

MD5
8597ed97f8dd5d2fd994ad429bc68f00

SHA1
43b92ca68142e8fae4095a9b0d75221cc2512e26

SHA256
6e506590a119f932b51eb549e78c6d0fab1b412a5cca8c320e328813acdc20ac

SHA512
cc4b14ccfb4c168dada4b3ab0e63e0da84c01b25fe2b49ed100289acd659af4672ae2e220989c254dfcf8755ae7b28dbb3b8253744d54ae7a7f9c4ab2a96f3be

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\sr.pak

Filesize
133KB

MD5
e8238899197fcdc57d3bdb12376c40a1

SHA1
d4cf9dea556090d0bf16f0fa309eb7c0fa757e7f

SHA256
aecfcb69ad1b633c0bb1add968b154fc1463a520fcf208b5a3539712cfb59a16

SHA512
47fb5101e76d4e1207ad158c4eee52ef049d1eb10935a968b306f84c120b5c3f7b25d7aecc08abb551bd29b6ea83fbfc87e0e7287e382490fe28d01e63f0d118

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\sv.pak

Filesize
81KB

MD5
f3e0de109ffd4d310d7895b623df3ebc

SHA1
4e973c9e860aeb29ea4466465c1122fec79b8af5

SHA256
36cc32bb8c339989756bac5826852fb8f80d541aab35d8899686b15bb06efb1e

SHA512
20c1e47b7f7143da3e11c5dcaaef2ceb4a34e966334f988c2765ef5f7bc10d72ae4dae918ffd76d666aa8d4eace958c8393dbb138f7b66f9ea110626c43c1dbf

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\sw.pak

Filesize
83KB

MD5
96c49458fa17f5877d66ff37f4b5fc7b

SHA1
6e8cb53bc91188e70c8868758c3ea0d233c6474c

SHA256
86387ca0fcb8187c2aacc4cf627e71090e2fa2feefaa6acc2dd3c2107c673e0a

SHA512
f033e7502d5b0d8c9d161ea628f45db4a01fa8d53422d2e20956d462411ae27c97b32425bd1cb441ec812e1719207f176bdda1dfe9fb08c335792f73ed224dbe

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\ta.pak

Filesize
205KB

MD5
9f5167c9e807ea69fcc4a320abcbad10

SHA1
8be8fea48eb0f743d4b76a2fdd0139979e356695

SHA256
17ee6b48122a4327246240aa7d8c5467ea77f1badab8f91aa274d05cb8a2ca79

SHA512
a9cfef12d42f73741b25e53116ed1e1b937288e3d7c09dfecc64a628f830e71baf7382f51b6158ee11f73d9f4e6228790bc3136c618566e596cd28b2a1bec675

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\te.pak

Filesize
191KB

MD5
1e5c7715619e0f5e28ed48132c9870e0

SHA1
779747ba653d5c98ba207c5f5bdbe4c147f390d8

SHA256
78ee8574f55488c938a39533193f8696582054ac01e1a96d9968c5cbe73a5377

SHA512
038082ae2321ceb3dcb4ac19c39c61ebf5f156eba8ad05839b70af7477c1b90ff47b8b00ef207d70e35888fad958de3e42a522b1a0b819dfbaee1e958fc6f60f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\th.pak

Filesize
166KB

MD5
3508d4a2bb116683488bdcd4c96ed6a4

SHA1
8d0b29a10affe834ea0bfefd12162a1426886d1d

SHA256
6f9aaba073e70d0dc106b27c6006b95ea6ef47e19caa28608d83a310d416ff2d

SHA512
e2480b5da516db5a21b66827f009cc38979585d4402203e31d4940a279f07a6f508e0223036e952545861e71d1364425c7bf48f7f9ae51bbeda99349e250476d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\tr.pak

Filesize
86KB

MD5
ba20e2ec957d8eb235495f293436a552

SHA1
a21e163206a10021143ccf1b2ad498bf0a710c85

SHA256
1825c836e9626b03953c32cf121ea836f10f2b18a336d92534627eabbdc84d7f

SHA512
eac6cd3899347e5d696b9afeda716023444178106995f807be80141a534279aef8597d97cd312a3c402540d85f958579086482baf4525dfb84c03f9b2736acec

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\uk.pak

Filesize
142KB

MD5
46370ee446be05a917e7ba8e4d7e8ee0

SHA1
3b99df868561b825734c7a542b3bc12606413311

SHA256
9e9b51adecb9fd13dc876a269ddc5f52110d8597dee8c39979e28bb4c5dcab58

SHA512
bc49cf29e1414d00e7085f906ac4a6aa953f264a1903dfc5d21fa8bf1725a2e5b891da366f6c30b53c3683bc90ff1297faa9214742a8a07f94f6bba555ff5894

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\vi.pak

Filesize
101KB

MD5
e7d1c17a05f12cebcda04c1862c406db

SHA1
68de353af622c42db9ccbea8f5c52ff50267bb88

SHA256
b3a8b93f05a3ebbe2942d92101bf1ccb48df804606f3edae48dd46df35082b7d

SHA512
9fa12d67224bc695e863070bdaf7b2ffb7f2ab1d3ed8fcc477e02e58049e15d242fd4696f236c2069feeff56da5570c80a3179a12298d9517a0e6c51805ba8fa

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\zh-CN.pak

Filesize
75KB

MD5
8d291a0d7faae29884c1a4513ef604e9

SHA1
47f283db182242b682c9782f463aa97824dbc181

SHA256
d68db393922237f82aa2910cf45ea4b9c6e3692f3c0b62a4a85bc0fa8081a780

SHA512
342b46594c527f9aa046dfb699824005235f89c12291879d2ed4a977df4fbbb22b1218e5d146391a43fe95717a88d0a9b4ba7327a19cf21c8dbe664fe19bcf37

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\locales\zh-TW.pak

Filesize
75KB

MD5
2c3bddf272fdf787546a5eb340d0816f

SHA1
eb23a01975e51191869d829fb9d470cd69649894

SHA256
06ddd5df0f0aaf2722c81f5722d6b4b1c37935ca9c88f680e2825e10c8687dca

SHA512
c5164db124e9b9bf7309871ce0d1645358871ed305bcf0cb3152d4ccbc806d39bc99b07a58a20523d4898532ec8320cc701f4132b5ded5ab619189acf2e75908

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\resources.pak

Filesize
8.9MB

MD5
5118ebd39acde0236a71fad2880add8c

SHA1
1daa8e701f17a793c0e70f4b0aa36fbb376962ae

SHA256
e3386c5fd98dc711a70eae7a9f6bf3139de3e9a15e3a022d343a459b747c6471

SHA512
925ae1d8c643e4f3c20221ae850a171e6032d9e391cf07e5efab4a4a29e8f6640973a8f0dc97704df5263ed93dfd4c32650c656fbc9874c98ab87c6131fdcaa8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\resources\app.asar

Filesize
25.5MB

MD5
66c0a1c656ab24aecb609cd8a19ba260

SHA1
a86f3c6b9a6d109a08122a331f58f056f269bfce

SHA256
55fa1a547472dacc5b91e29ff3693ca62e155a7c1dd3dcca5e52bad5c16ba2b5

SHA512
d6036159be4088b2e0a703056072254a9a00ef58921a036858e9c7c9830d397c7222fb159ff3faad3a258ae69bfbbdb3ae4f3d6f332edb350e0654cf688b4216

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\resources\elevate.exe

Filesize
105KB

MD5
792b92c8ad13c46f27c7ced0810694df

SHA1
d8d449b92de20a57df722df46435ba4553ecc802

SHA256
9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

SHA512
6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\snapshot_blob.bin

Filesize
231KB

MD5
e496035dee1cf748e3754394182ce94f

SHA1
9e806623e1bc0eed5d55d2bd3250d1395e985c8f

SHA256
ed8dc7e61bde90d34dfe20a2dffa5673c5545d2cbea70f2ba5b0e2566ea0addb

SHA512
618f684076861af1d1d85d3d85183c3bc3b56a4aaba5eb73b1be827e76d6d09fbcb5843b95aa7f12ef51c7628582f4672d2542249fb1c20487af99491cbe15f5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\swiftshader\libEGL.dll

Filesize
326KB

MD5
cb5e28007c9d61871ceb5dcb2b657985

SHA1
f2fcd64cbcfd8657a6326c152b14f6114eb74606

SHA256
c3dc1eaaf67f0a8c7bf80dcdd2830d79c5d980fca19aa854512cd69c79df8b1c

SHA512
18635d1120cb983601c234bf662d85939f0046a84bfc652f680c078e52a0cfc41b2e2b3098f3a365663f14a9ea1ad51c93527370f58d57788e9ceea46b507dee

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\swiftshader\libGLESv2.dll

Filesize
2.9MB

MD5
34c323f53fcc4021f446fb1e4c14ff09

SHA1
d4160430c8fb300d7d5505fc08d671e53f1e1b6b

SHA256
6202bf896139be5e8d7f38ffa1e68c65828ccfe02c33e7912c67883031f4647a

SHA512
e591366d71edf938ea5b921b2efd1647c73a97442c2fbe038f1f35e2fec0323848c20e6858189f655ff222672a40b3d8d31e1cb7bcb22cb00597e71d5172f655

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\v8_context_snapshot.bin

Filesize
541KB

MD5
bd06321191c06413bb9c15c3987859ef

SHA1
eb6a73a3429f3151632a05d5ca5e3590b782ed85

SHA256
cfbc1a5e921074913a87b1ce7d6d99cb4accf6d7926d242bd264846142dc635d

SHA512
48ddbd1d8c77857b2a2bee65f4b903441bd675fc7bf53e96be2a78557f85c00f27344e7cdd29352ec9977417b991316365d66f5e40b4b9884415693aba283ded

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\vk_swiftshader.dll

Filesize
14.2MB

MD5
92597ce319c8ecc857a64c46b870c684

SHA1
a6d5c3158da476b758e1c7770a0530b06258d7b3

SHA256
5813ea77c04120c2d26aeeca5cc58c5108e17cdbe05a2b72ba2aa41c0b8ad9f8

SHA512
c1b72b30406761b3adbb28f4e3b3823326c0c1cc36126dbe1666173fb4e6d39ac25c800cc8c79a3995851944ae3c5ed9053ea83319020f9b9d3f85b1b7e35f0a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\7z-out\vk_swiftshader_icd.json

Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\SpiderBanner.dll

Filesize
9KB

MD5
17309e33b596ba3a5693b4d3e85cf8d7

SHA1
7d361836cf53df42021c7f2b148aec9458818c01

SHA256
996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

SHA512
1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsqBC60.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit
C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe

Filesize
143KB

MD5
29e24bfff74f418edbb71e88b6b08bf4

SHA1
1ded6597d9c689388677b35e2b44f1f06d066a6b

SHA256
d28ccdcc911d7284e956fa59c9fc93103240e6d589f9905edbb1fce57961a78b

SHA512
d37621fc6a89d75743e9bfe6e25e13e357319f128226655832602dffb71340df526f26083c64fcfc92ded698f5d9d6820e13eef7bea23946ec653f564cbd1968

Download Submit
C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe

Filesize
143KB

MD5
29e24bfff74f418edbb71e88b6b08bf4

SHA1
1ded6597d9c689388677b35e2b44f1f06d066a6b

SHA256
d28ccdcc911d7284e956fa59c9fc93103240e6d589f9905edbb1fce57961a78b

SHA512
d37621fc6a89d75743e9bfe6e25e13e357319f128226655832602dffb71340df526f26083c64fcfc92ded698f5d9d6820e13eef7bea23946ec653f564cbd1968

Download Submit
C:\Users\Admin\AppData\Local\Temp\~nsuA.tmp\Un_A.exe

Filesize
143KB

MD5
29e24bfff74f418edbb71e88b6b08bf4

SHA1
1ded6597d9c689388677b35e2b44f1f06d066a6b

SHA256
d28ccdcc911d7284e956fa59c9fc93103240e6d589f9905edbb1fce57961a78b

SHA512
d37621fc6a89d75743e9bfe6e25e13e357319f128226655832602dffb71340df526f26083c64fcfc92ded698f5d9d6820e13eef7bea23946ec653f564cbd1968

Download Submit
C:\Users\Admin\AppData\Roaming\JJS-UI\Dictionaries\en-US-8-0.bdic

Filesize
436KB

MD5
0af2c2ded404eafedc91003914dc1650

SHA1
1ffddb9c1958a872401e906928934a34529b7433

SHA256
1ed02f55bb7a2689704b7995f0f7953fbcf9bfc7ce7f7f178168fe58f3481575

SHA512
60294b1ec4bd71c328f0aebd2ddffc6d1acb24be783d939b35ec059053f407b8c2d1cb8b082d3479ac1a12b87aa62e0055695a43b205e0be2aa7da210ba41526

Download Submit
C:\Users\Admin\AppData\Roaming\JJS-UI\Network Persistent State~RFe57dea8.TMP

Filesize
59B

MD5
2800881c775077e1c4b6e06bf4676de4

SHA1
2873631068c8b3b9495638c865915be822442c8b

SHA256
226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

SHA512
e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

Download Submit
C:\Users\Admin\AppData\Roaming\JJS-UI\a7dab421-0546-4df6-8883-41ad59f01d19.tmp

Filesize
340B

MD5
0e31e47873420dc769d14bd59b9cec27

SHA1
e010aae8fe8d1d4cfadb4b99fa71794cca0744c5

SHA256
b85860eb22d5d6ab9d0d93ee2850040e40977a4d9b33d52bbfdff6d4290529f0

SHA512
519e8c936151ce2958747f34cc59f85d400a109286af763896f1af472ccb762361efa70fd32924022940fa071077f6efb8b011b04e644bc6f1cd2f4304944ba1

Download Submit
C:\Users\Admin\AppData\Roaming\jjv5conf.json

Filesize
37B

MD5
272d5b39896b5187819716769533a3a5

SHA1
137450dbc4b8828d4f2c04c5ca33a266edf62aef

SHA256
48b4c0e8fcb52d2eb9d42f188b023652f35c12dc02fa0890f1d341581ad220e8

SHA512
8777dda2b2389726642e20a7cce43f59e6d9521ca54bbb2eab40e05e0a24d5f3b6612dfd561da986d1356cd80bcde95e6773c4e642cd55cc59bf49c8f3a64b04

Download Submit
C:\Users\Admin\AppData\Roaming\jjv5conf.json

Filesize
118B

MD5
889ae06c4e16ddb308e5ffdc6bb93046

SHA1
039154e3bc01d9475ab4f258eb8332339ef1eaf0

SHA256
5ec5938ff9d14138ccb55e7f2731f7f05f12c975650e91b7c1c9a8358526c79c

SHA512
45beaf835fa76a06473e0b177433d972c29fee32d9579d85bb99100ed01a421bc45857743f2369ecd56fd52cf275d3e95c7e37f545d62a095939e479dc71913f

Download Submit
C:\Users\Admin\AppData\Roaming\jjv5conf.json

Filesize
331B

MD5
42daa38500e485c875961c5a040e73a1

SHA1
fbed4af90ef8896c88af9608fdeaabd40c2c67e3

SHA256
b8072070bc78da4b41d6741b3156f7414cc4ef3fbe62bde39f2d64ff430fa8a2

SHA512
42b0697036d69a3dfef9083d76af26d67302dd8c33edd46818782c78c8ad362527b98c37bf91ef22042222ff8824f42ceea5d1b3dfef1bcc8eb34e1b05872418

Download Submit