Analysis
-
max time kernel
147s -
max time network
583s -
platform
windows10-2004_x64 -
resource
win10v2004-20230220-en -
resource tags
arch:x64arch:x86image:win10v2004-20230220-enlocale:en-usos:windows10-2004-x64system -
submitted
31-03-2023 18:24
Static task
static1
General
-
Target
setup.exe
-
Size
74.0MB
-
MD5
4e09d136fa5de1d448ca1b45be6ccd74
-
SHA1
f028d356a6b1f3cc465b51b744417265be157e2a
-
SHA256
9b993ae2a03205f3b405268a7d18954b7ac77fb3d44544bed32d451abcc31f9a
-
SHA512
f395999908f91eb010ef6926a12e5149273917f04bf827c7e704510d11576164dbb53c6663461802ce9645dc1c021cc6529578d098172898c38cdd067ca1f9e6
-
SSDEEP
1572864:dh2KQ+naf15fFr6foEdW5GedVHIW98cFVuiG+J44AD5EPEEOb7S:dYmnaf11so7wevHIW9RJ4NG
Malware Config
Signatures
-
Checks computer location settings 2 TTPs 10 IoCs
Looks up country code configured in the registry, likely geofence.
Processes:
Salwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exedescription ioc process Key value queried \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\Geo\Nation Salwyrr Launcher.exe Key value queried \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\Geo\Nation Salwyrr Launcher.exe Key value queried \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\Geo\Nation Salwyrr Launcher.exe Key value queried \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\Geo\Nation Salwyrr Launcher.exe Key value queried \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\Geo\Nation Salwyrr Launcher.exe Key value queried \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\Geo\Nation Salwyrr Launcher.exe Key value queried \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\Geo\Nation Salwyrr Launcher.exe Key value queried \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\Geo\Nation Salwyrr Launcher.exe Key value queried \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\Geo\Nation Salwyrr Launcher.exe Key value queried \REGISTRY\USER\S-1-5-21-2275444769-3691835758-4097679484-1000\Control Panel\International\Geo\Nation Salwyrr Launcher.exe -
Executes dropped EXE 16 IoCs
Processes:
Salwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exepid process 3220 Salwyrr Launcher.exe 3568 Salwyrr Launcher.exe 4368 Salwyrr Launcher.exe 4400 Salwyrr Launcher.exe 3676 Salwyrr Launcher.exe 2076 Salwyrr Launcher.exe 3428 Salwyrr Launcher.exe 4808 Salwyrr Launcher.exe 1492 Salwyrr Launcher.exe 4880 Salwyrr Launcher.exe 1860 Salwyrr Launcher.exe 1888 Salwyrr Launcher.exe 4504 Salwyrr Launcher.exe 4864 Salwyrr Launcher.exe 2184 Salwyrr Launcher.exe 1420 Salwyrr Launcher.exe -
Loads dropped DLL 38 IoCs
Processes:
setup.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exeSalwyrr Launcher.exepid process 4452 setup.exe 4452 setup.exe 4452 setup.exe 4452 setup.exe 4452 setup.exe 4452 setup.exe 4452 setup.exe 4452 setup.exe 4452 setup.exe 4452 setup.exe 3220 Salwyrr Launcher.exe 3568 Salwyrr Launcher.exe 4400 Salwyrr Launcher.exe 3676 Salwyrr Launcher.exe 4368 Salwyrr Launcher.exe 2076 Salwyrr Launcher.exe 2076 Salwyrr Launcher.exe 4368 Salwyrr Launcher.exe 4368 Salwyrr Launcher.exe 4368 Salwyrr Launcher.exe 4368 Salwyrr Launcher.exe 4368 Salwyrr Launcher.exe 3428 Salwyrr Launcher.exe 4808 Salwyrr Launcher.exe 4808 Salwyrr Launcher.exe 1492 Salwyrr Launcher.exe 4880 Salwyrr Launcher.exe 1860 Salwyrr Launcher.exe 1888 Salwyrr Launcher.exe 1888 Salwyrr Launcher.exe 1888 Salwyrr Launcher.exe 1888 Salwyrr Launcher.exe 1888 Salwyrr Launcher.exe 1888 Salwyrr Launcher.exe 4504 Salwyrr Launcher.exe 4864 Salwyrr Launcher.exe 2184 Salwyrr Launcher.exe 1420 Salwyrr Launcher.exe -
Reads user/profile data of web browsers 2 TTPs
Infostealers often target stored browser data, which can include saved credentials etc.
-
Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops file in Program Files directory 64 IoCs
Processes:
setup.exedescription ioc process File created C:\Program Files\Salwyrr Launcher\locales\da.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\tr.pak setup.exe File created C:\Program Files\Salwyrr Launcher\resources\app.asar setup.exe File created C:\Program Files\Salwyrr Launcher\vk_swiftshader_icd.json setup.exe File created C:\Program Files\Salwyrr Launcher\locales\de.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\uk.pak setup.exe File opened for modification C:\Program Files\Salwyrr Launcher\resources\libraries setup.exe File created C:\Program Files\Salwyrr Launcher\Uninstall Salwyrr Launcher.exe setup.exe File created C:\Program Files\Salwyrr Launcher\locales\en-GB.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\fil.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\pt-PT.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\ro.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\ml.pak setup.exe File created C:\Program Files\Salwyrr Launcher\resources\libraries\java\launcher.jar setup.exe File created C:\Program Files\Salwyrr Launcher\libEGL.dll setup.exe File created C:\Program Files\Salwyrr Launcher\vulkan-1.dll setup.exe File opened for modification C:\Program Files\Salwyrr Launcher\locales setup.exe File created C:\Program Files\Salwyrr Launcher\locales\el.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\ja.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\th.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\ur.pak setup.exe File created C:\Program Files\Salwyrr Launcher\LICENSE.electron.txt setup.exe File created C:\Program Files\Salwyrr Launcher\locales\es.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\et.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\fr.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\ms.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\zh-CN.pak setup.exe File created C:\Program Files\Salwyrr Launcher\d3dcompiler_47.dll setup.exe File created C:\Program Files\Salwyrr Launcher\locales\es-419.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\hi.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\lt.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\sr.pak setup.exe File created C:\Program Files\Salwyrr Launcher\resources\libraries\java\PackXZExtract.jar setup.exe File created C:\Program Files\Salwyrr Launcher\v8_context_snapshot.bin setup.exe File created C:\Program Files\Salwyrr Launcher\locales\am.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\fi.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\nb.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\ar.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\pl.pak setup.exe File created C:\Program Files\Salwyrr Launcher\resources\app-update.yml setup.exe File created C:\Program Files\Salwyrr Launcher\locales\zh-TW.pak setup.exe File created C:\Program Files\Salwyrr Launcher\resources.pak setup.exe File created C:\Program Files\Salwyrr Launcher\snapshot_blob.bin setup.exe File created C:\Program Files\Salwyrr Launcher\locales\id.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\ru.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\ca.pak setup.exe File opened for modification C:\Program Files\Salwyrr Launcher\resources\libraries\java setup.exe File created C:\Program Files\Salwyrr Launcher\ffmpeg.dll setup.exe File created C:\Program Files\Salwyrr Launcher\libGLESv2.dll setup.exe File created C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe setup.exe File created C:\Program Files\Salwyrr Launcher\locales\bg.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\mr.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\sl.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\ta.pak setup.exe File opened for modification C:\Program Files\Salwyrr Launcher\resources setup.exe File created C:\Program Files\Salwyrr Launcher\owutility.dll setup.exe File created C:\Program Files\Salwyrr Launcher\vk_swiftshader.dll setup.exe File created C:\Program Files\Salwyrr Launcher\locales\af.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\kn.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\gu.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\lv.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\nl.pak setup.exe File created C:\Program Files\Salwyrr Launcher\locales\sv.pak setup.exe File opened for modification C:\Program Files\Salwyrr Launcher\chrome_100_percent.pak setup.exe -
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.
-
Enumerates processes with tasklist 1 TTPs 1 IoCs
-
Processes:
Salwyrr Launcher.exeSalwyrr Launcher.exedescription ioc process Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 Salwyrr Launcher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 Salwyrr Launcher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 1900000001000000100000006cf252fec3e8f20996de5d4dd9aef424030000000100000014000000dac9024f54d8f6df94935fb1732638ca6ad77c1368000000010000000800000000409120d035d9017e000000010000000800000000c001b39667d6017f000000010000000e000000300c060a2b0601040182370a03041d00000001000000100000004558d512eecb27464920897de7b66053140000000100000014000000c4a7b1a47b2c71fadbe14b9075ffc415608589100b000000010000001e000000440053005400200052006f006f00740020004300410020005800330000006200000001000000200000000687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd6770739090000000100000042000000304006082b06010505070302060a2b0601040182370a030c060a2b0601040182370a030406082b0601050507030406082b0601050507030106082b060105050703080f00000001000000140000005bcaa1c2780f0bcb5a90770451d96f38963f012d20000000010000004e0300003082034a30820232a003020102021044afb080d6a327ba893039862ef8406b300d06092a864886f70d0101050500303f31243022060355040a131b4469676974616c205369676e617475726520547275737420436f2e311730150603550403130e44535420526f6f74204341205833301e170d3030303933303231313231395a170d3231303933303134303131355a303f31243022060355040a131b4469676974616c205369676e617475726520547275737420436f2e311730150603550403130e44535420526f6f7420434120583330820122300d06092a864886f70d01010105000382010f003082010a0282010100dfafe99750088357b4cc6265f69082ecc7d32c6b30ca5becd9c37dc740c118148be0e83376492ae33f214993ac4e0eaf3e48cb65eefcd3210f65d22ad9328f8ce5f777b0127bb595c089a3a9baed732e7a0c063283a27e8a1430cd11a0e12a38b9790a31fd50bd8065dfb7516383c8e28861ea4b6181ec526bb9a2e24b1a289f48a39e0cda098e3e172e1edd20df5bc62a8aab2ebd70adc50b1a25907472c57b6aab34d63089ffe568137b540bc8d6aeec5a9c921e3d64b38cc6dfbfc94170ec1672d526ec38553943d0fcfd185c40f197ebd59a9b8d1dbada25b9c6d8dfc115023aabda6ef13e2ef55c089c3cd68369e4109b192ab62957e3e53d9b9ff0025d0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020106301d0603551d0e04160414c4a7b1a47b2c71fadbe14b9075ffc41560858910300d06092a864886f70d01010505000382010100a31a2c9b17005ca91eee2866373abf83c73f4bc309a095205de3d95944d23e0d3ebd8a4ba0741fce10829c741a1d7e981addcb134bb32044e491e9ccfc7da5db6ae5fee6fde04eddb7003ab57049aff2e5eb02f1d1028b19cb943a5e48c4181e58195f1e025af00cf1b1ada9dc59868b6ee991f586cafab96633aa595bcee2a7167347cb2bcc99b03748cfe3564bf5cf0f0c723287c6f044bb53726d43f526489a5267b758abfe67767178db0da256141339243185a2a8025a3047e1dd5007bc02099000eb6463609b16bc88c912e6d27d918bf93d328d65b4e97cb15776eac5b62839bf15651cc8f677966a0a8d770bd8910b048e07db29b60aee9d82353510 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8\Blob = 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 Salwyrr Launcher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob = 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 Salwyrr Launcher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\AD7E1C28B064EF8F6003402014C3D0E3370EB58A\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 5c000000010000000400000000080000190000000100000010000000ba4f3972e7aed9dccdc210db59da13c90300000001000000140000005fb7ee0633e259dbad0c4c9ae6d38f1a61c7dc251d00000001000000100000008f76b981d528ad4770088245e2031b630b0000000100000012000000440069006700690043006500720074000000140000000100000014000000b13ec36903f8bf4701d498261a0802ef63642bc36200000001000000200000007431e5f4c3c1ce4690774f0b61e05440883ba9a01ed00ba6abd7806ed3b118cf090000000100000034000000303206082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030106082b06010505070308530000000100000040000000303e301f06096086480186fd6c020130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c00f0000000100000014000000e35ef08d884f0a0ade2f75e96301ce6230f213a8040000000100000010000000d474de575c39b2d39c8583c5c065498a2000000001000000c9030000308203c5308202ada003020102021002ac5c266a0b409b8f0b79f2ae462577300d06092a864886f70d0101050500306c310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312b30290603550403132244696769436572742048696768204173737572616e636520455620526f6f74204341301e170d3036313131303030303030305a170d3331313131303030303030305a306c310b300906035504061302555331153013060355040a130c446967694365727420496e6331193017060355040b13107777772e64696769636572742e636f6d312b30290603550403132244696769436572742048696768204173737572616e636520455620526f6f7420434130820122300d06092a864886f70d01010105000382010f003082010a0282010100c6cce573e6fbd4bbe52d2d32a6dfe5813fc9cd2549b6712ac3d5943467a20a1cb05f69a640b1c4b7b28fd098a4a941593ad3dc94d63cdb7438a44acc4d2582f74aa5531238eef3496d71917e63b6aba65fc3a484f84f6251bef8c5ecdb3892e306e508910cc4284155fbcb5a89157e71e835bf4d72093dbe3a38505b77311b8db3c724459aa7ac6d00145a04b7ba13eb510a984141224e656187814150a6795c89de194a57d52ee65d1c532c7e98cd1a0616a46873d03404135ca171d35a7c55db5e64e13787305604e511b4298012f1793988a202117c2766b788b778f2ca0aa838ab0a64c2bf665d9584c1a1251e875d1a500b2012cc41bb6e0b5138b84bcb0203010001a3633061300e0603551d0f0101ff040403020186300f0603551d130101ff040530030101ff301d0603551d0e04160414b13ec36903f8bf4701d498261a0802ef63642bc3301f0603551d23041830168014b13ec36903f8bf4701d498261a0802ef63642bc3300d06092a864886f70d010105050003820101001c1a0697dcd79c9f3c886606085721db2147f82a67aabf183276401057c18af37ad911658e35fa9efc45b59ed94c314bb891e8432c8eb378cedbe3537971d6e5219401da55879a2464f68a66ccde9c37cda834b1699b23c89e78222b7043e35547316119ef58c5852f4e30f6a0311623c8e7e2651633cbbf1a1ba03df8ca5e8b318b6008892d0c065c52b7c4f90a98d1155f9f12be7c366338bd44a47fe4262b0ac497690de98ce2c01057b8c876129155f24869d8bc2a025b0f44d42031dbf4ba70265d90609ebc4b17092fb4cb1e4368c90727c1d25cf7ea21b968129c3c9cbf9efc805c9b63cdec47aa252767a037f300827d54d7a9f8e92e13a377e81f4a Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 040000000100000010000000410352dc0ff7501b16f0028eba6f45c50f00000001000000140000005bcaa1c2780f0bcb5a90770451d96f38963f012d090000000100000042000000304006082b06010505070302060a2b0601040182370a030c060a2b0601040182370a030406082b0601050507030406082b0601050507030106082b060105050703086200000001000000200000000687260331a72403d909f105e69bcf0d32e1bd2493ffc6d9206d11bcd67707390b000000010000001e000000440053005400200052006f006f0074002000430041002000580033000000140000000100000014000000c4a7b1a47b2c71fadbe14b9075ffc415608589101d00000001000000100000004558d512eecb27464920897de7b660537f000000010000000e000000300c060a2b0601040182370a03047e000000010000000800000000c001b39667d60168000000010000000800000000409120d035d901030000000100000014000000dac9024f54d8f6df94935fb1732638ca6ad77c131900000001000000100000006cf252fec3e8f20996de5d4dd9aef42420000000010000004e0300003082034a30820232a003020102021044afb080d6a327ba893039862ef8406b300d06092a864886f70d0101050500303f31243022060355040a131b4469676974616c205369676e617475726520547275737420436f2e311730150603550403130e44535420526f6f74204341205833301e170d3030303933303231313231395a170d3231303933303134303131355a303f31243022060355040a131b4469676974616c205369676e617475726520547275737420436f2e311730150603550403130e44535420526f6f7420434120583330820122300d06092a864886f70d01010105000382010f003082010a0282010100dfafe99750088357b4cc6265f69082ecc7d32c6b30ca5becd9c37dc740c118148be0e83376492ae33f214993ac4e0eaf3e48cb65eefcd3210f65d22ad9328f8ce5f777b0127bb595c089a3a9baed732e7a0c063283a27e8a1430cd11a0e12a38b9790a31fd50bd8065dfb7516383c8e28861ea4b6181ec526bb9a2e24b1a289f48a39e0cda098e3e172e1edd20df5bc62a8aab2ebd70adc50b1a25907472c57b6aab34d63089ffe568137b540bc8d6aeec5a9c921e3d64b38cc6dfbfc94170ec1672d526ec38553943d0fcfd185c40f197ebd59a9b8d1dbada25b9c6d8dfc115023aabda6ef13e2ef55c089c3cd68369e4109b192ab62957e3e53d9b9ff0025d0203010001a3423040300f0603551d130101ff040530030101ff300e0603551d0f0101ff040403020106301d0603551d0e04160414c4a7b1a47b2c71fadbe14b9075ffc41560858910300d06092a864886f70d01010505000382010100a31a2c9b17005ca91eee2866373abf83c73f4bc309a095205de3d95944d23e0d3ebd8a4ba0741fce10829c741a1d7e981addcb134bb32044e491e9ccfc7da5db6ae5fee6fde04eddb7003ab57049aff2e5eb02f1d1028b19cb943a5e48c4181e58195f1e025af00cf1b1ada9dc59868b6ee991f586cafab96633aa595bcee2a7167347cb2bcc99b03748cfe3564bf5cf0f0c723287c6f044bb53726d43f526489a5267b758abfe67767178db0da256141339243185a2a8025a3047e1dd5007bc02099000eb6463609b16bc88c912e6d27d918bf93d328d65b4e97cb15776eac5b62839bf15651cc8f677966a0a8d770bd8910b048e07db29b60aee9d82353510 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 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 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D1EB23A46D17D68FD92564C2F1F1601764D8E349\Blob = 5c000000010000000400000000080000040000000100000010000000497904b0eb8719ac47b0bc11519b74d0030000000100000014000000d1eb23a46d17d68fd92564c2f1f1601764d8e3491d00000001000000100000002e0d6875874a44c820912e85e964cfdb140000000100000014000000a0110a233e96f107ece2af29ef82a57fd030a4b40b000000010000001c0000005300650063007400690067006f002000280041004100410029000000620000000100000020000000d7a7a0fb5d7e2731d771e9484ebcdef71d5f0c3e0a2948782bc83ee0ea699ef453000000010000004300000030413022060c2b06010401b231010201050130123010060a2b0601040182373c0101030200c0301b060567810c010330123010060a2b0601040182373c0101030200c0090000000100000054000000305206082b0601050507030206082b06010505070303060a2b0601040182370a030406082b0601050507030406082b0601050507030606082b0601050507030706082b0601050507030106082b060105050703080f00000001000000140000003e8e6487f8fd27d322a269a71edaac5d578112861900000001000000100000002aa1c05e2ae606f198c2c5e937c97aa2200000000100000036040000308204323082031aa003020102020101300d06092a864886f70d0101050500307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c18414141204365727469666963617465205365727669636573301e170d3034303130313030303030305a170d3238313233313233353935395a307b310b3009060355040613024742311b301906035504080c1247726561746572204d616e636865737465723110300e06035504070c0753616c666f7264311a3018060355040a0c11436f6d6f646f204341204c696d697465643121301f06035504030c1841414120436572746966696361746520536572766963657330820122300d06092a864886f70d01010105000382010f003082010a0282010100be409df46ee1ea76871c4d45448ebe46c883069dc12afe181f8ee402faf3ab5d508a16310b9a06d0c57022cd492d5463ccb66e68460b53eacb4c24c0bc724eeaf115aef4549a120ac37ab23360e2da8955f32258f3dedccfef8386a28c944f9f68f29890468427c776bfe3cc352c8b5e07646582c048b0a891f9619f762050a891c766b5eb78620356f08a1a13ea31a31ea099fd38f6f62732586f07f56bb8fb142bafb7aaccd6635f738cda0599a838a8cb17783651ace99ef4783a8dcf0fd942e2980cab2f9f0e01deef9f9949f12ddfac744d1b98b547c5e529d1f99018c7629cbe83c7267b3e8a25c7c0dd9de6356810209d8fd8ded2c3849c0d5ee82fc90203010001a381c03081bd301d0603551d0e04160414a0110a233e96f107ece2af29ef82a57fd030a4b4300e0603551d0f0101ff040403020106300f0603551d130101ff040530030101ff307b0603551d1f047430723038a036a0348632687474703a2f2f63726c2e636f6d6f646f63612e636f6d2f414141436572746966696361746553657276696365732e63726c3036a034a0328630687474703a2f2f63726c2e636f6d6f646f2e6e65742f414141436572746966696361746553657276696365732e63726c300d06092a864886f70d010105050003820101000856fc02f09be8ffa4fad67bc64480ce4fc4c5f60058cca6b6bc1449680476e8e6ee5dec020f60d68d50184f264e01e3e6b0a5eebfbc745441bffdfc12b8c74f5af48960057f60b7054af3f6f1c2bfc4b97486b62d7d6bccd2f346dd2fc6e06ac3c334032c7d96dd5ac20ea70a99c1058bab0c2ff35c3acf6c37550987de53406c58effcb6ab656e04f61bdc3ce05a15c69ed9f15948302165036cece92173ec9b03a1e037ada015188ffaba02cea72ca910132cd4e50826ab229760f8905e74d4a29a53bdf2a968e0a26ec2d76cb1a30f9ebfeb68e756f2aef2e32b383a0981b56b85d7be2ded3f1ab7b263e2f5622c82d46a004150f139839f95e93696986e Salwyrr Launcher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\D69B561148F01C77C54578C10926DF5B856976AD Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\5FB7EE0633E259DBAD0C4C9AE6D38F1A61C7DC25\Blob = 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 Salwyrr Launcher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\ROOT\Certificates\CABD2A79A1076A31F21D253635CB039D4329A5E8 Salwyrr Launcher.exe Key created \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\DAC9024F54D8F6DF94935FB1732638CA6AD77C13 Salwyrr Launcher.exe Set value (data) \REGISTRY\MACHINE\SOFTWARE\Microsoft\SystemCertificates\AuthRoot\Certificates\2796BAE63F1801E277261BA0D77770028F20EEE4\Blob = 5c00000001000000040000000008000019000000010000001000000063664b080559a094d10f0a3c5f4f62900300000001000000140000002796bae63f1801e277261ba0d77770028f20eee41d000000010000001000000099949d2179811f6b30a8c99c4f6b4226140000000100000014000000d2c4b0d291d44c1171b361cb3da1fedda86ad4e3620000000100000020000000c3846bf24b9e93ca64274c0ec67c1ecc5e024ffcacd2d74019350e81fe546ae409000000010000002a000000302806082b0601050507030206082b0601050507030306082b0601050507030406082b0601050507030153000000010000004800000030463021060b6086480186fd6d0107170330123010060a2b0601040182373c0101030200c03021060b6086480186fd6e0107170330123010060a2b0601040182373c0101030200c00b000000010000005200000047006f00200044006100640064007900200043006c00610073007300200032002000430065007200740069006600690063006100740069006f006e00200041007500740068006f00720069007400790000000f00000001000000140000005d82adb90d5dd3c7e3524f56f787ec537261877604000000010000001000000091de0625abdafd32170cbb25172a846720000000010000000404000030820400308202e8a003020102020100300d06092a864886f70d01010505003063310b30090603550406130255533121301f060355040a131854686520476f2044616464792047726f75702c20496e632e3131302f060355040b1328476f20446164647920436c61737320322043657274696669636174696f6e20417574686f72697479301e170d3034303632393137303632305a170d3334303632393137303632305a3063310b30090603550406130255533121301f060355040a131854686520476f2044616464792047726f75702c20496e632e3131302f060355040b1328476f20446164647920436c61737320322043657274696669636174696f6e20417574686f7269747930820120300d06092a864886f70d01010105000382010d00308201080282010100de9dd7ea571849a15bebd75f4886eabeddffe4ef671cf46568b35771a05e77bbed9b49e970803d561863086fdaf2ccd03f7f0254225410d8b281d4c0753d4b7fc777c33e78ab1a03b5206b2f6a2bb1c5887ec4bb1eb0c1d845276faa3758f78726d7d82df6a917b71f72364ea6173f659892db2a6e5da2fe88e00bde7fe58d15e1ebcb3ad5e212a2132dd88eaf5f123da0080508b65ca565380445991ea3606074c541a572621b62c51f6f5f1a42be025165a8ae23186afc7803a94d7f80c3faab5afca140a4ca1916feb2c8ef5e730dee77bd9af67998bcb10767a2150ddda058c6447b0a3e62285fba41075358cf117e3874c5f8ffb569908f8474ea971baf020103a381c03081bd301d0603551d0e04160414d2c4b0d291d44c1171b361cb3da1fedda86ad4e330818d0603551d230481853081828014d2c4b0d291d44c1171b361cb3da1fedda86ad4e3a167a4653063310b30090603550406130255533121301f060355040a131854686520476f2044616464792047726f75702c20496e632e3131302f060355040b1328476f20446164647920436c61737320322043657274696669636174696f6e20417574686f72697479820100300c0603551d13040530030101ff300d06092a864886f70d01010505000382010100324bf3b2ca3e91fc12c6a1078c8e77a03306145c901e18f708a63d0a19f98780116e69e4961730ff3491637238eecc1c01a31d9428a431f67ac454d7f6e5315803a2ccce62db944573b5bf45c924b5d58202ad2379698db8b64dcecf4cca3323e81c88aa9d8b416e16c920e5899ecd3bda70f77e992620145425ab6e7385e69b219d0a6c820ea8f8c20cfa101e6c96ef870dc40f618badee832b95f88e92847239eb20ea83ed83cd976e08bceb4e26b6732be4d3f64cfe2671e26111744aff571a870f75482ecf516917a002126195d5d140b2104ceec4ac1043a6a59e0ad595629a0dcf8882c5320ce42b9f45e60d9f289cb1b92a5a57ad370faf1d7fdbbd9f Salwyrr Launcher.exe -
Suspicious behavior: EnumeratesProcesses 4 IoCs
Processes:
setup.exetasklist.exepid process 4452 setup.exe 4452 setup.exe 3112 tasklist.exe 3112 tasklist.exe -
Suspicious use of AdjustPrivilegeToken 64 IoCs
Processes:
tasklist.exesetup.exeSalwyrr Launcher.exeSalwyrr Launcher.exedescription pid process Token: SeDebugPrivilege 3112 tasklist.exe Token: SeSecurityPrivilege 4452 setup.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3568 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3568 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3568 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3568 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3568 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3568 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3568 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3568 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3568 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3568 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3568 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3568 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3568 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3568 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3568 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3568 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3568 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3568 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3568 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3568 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3568 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3568 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3568 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3568 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3568 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3568 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3220 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3220 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3568 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3568 Salwyrr Launcher.exe Token: SeShutdownPrivilege 3568 Salwyrr Launcher.exe Token: SeCreatePagefilePrivilege 3568 Salwyrr Launcher.exe -
Suspicious use of WriteProcessMemory 64 IoCs
Processes:
setup.execmd.exeSalwyrr Launcher.execmd.exedescription pid process target process PID 4452 wrote to memory of 1040 4452 setup.exe cmd.exe PID 4452 wrote to memory of 1040 4452 setup.exe cmd.exe PID 4452 wrote to memory of 1040 4452 setup.exe cmd.exe PID 1040 wrote to memory of 3112 1040 cmd.exe tasklist.exe PID 1040 wrote to memory of 3112 1040 cmd.exe tasklist.exe PID 1040 wrote to memory of 3112 1040 cmd.exe tasklist.exe PID 1040 wrote to memory of 2692 1040 cmd.exe find.exe PID 1040 wrote to memory of 2692 1040 cmd.exe find.exe PID 1040 wrote to memory of 2692 1040 cmd.exe find.exe PID 3220 wrote to memory of 5036 3220 Salwyrr Launcher.exe cmd.exe PID 3220 wrote to memory of 5036 3220 Salwyrr Launcher.exe cmd.exe PID 5036 wrote to memory of 3124 5036 cmd.exe reg.exe PID 5036 wrote to memory of 3124 5036 cmd.exe reg.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4368 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 2076 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 2076 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4400 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 4400 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 3676 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 3676 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 3428 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 3428 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 3428 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 3428 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 3428 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe PID 3220 wrote to memory of 3428 3220 Salwyrr Launcher.exe Salwyrr Launcher.exe
Processes
-
C:\Users\Admin\AppData\Local\Temp\setup.exe"C:\Users\Admin\AppData\Local\Temp\setup.exe"1⤵
- Loads dropped DLL
- Drops file in Program Files directory
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\cmd.execmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Salwyrr Launcher.exe" | %SYSTEMROOT%\System32\find.exe "Salwyrr Launcher.exe"2⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\SysWOW64\tasklist.exetasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Salwyrr Launcher.exe"3⤵
- Enumerates processes with tasklist
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
-
C:\Windows\SysWOW64\find.exeC:\Windows\System32\find.exe "Salwyrr Launcher.exe"3⤵
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Modifies system certificate store
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /d /s /c "%windir%\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid"2⤵
- Suspicious use of WriteProcessMemory
-
C:\Windows\System32\reg.exeC:\Windows\System32\REG.exe QUERY HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Cryptography /v MachineGuid3⤵
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1632 --field-trial-handle=1748,i,15005927856663311000,13070604464620167117,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:22⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --app-path="C:\Program Files\Salwyrr Launcher\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2168 --field-trial-handle=1748,i,15005927856663311000,13070604464620167117,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:12⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --app-path="C:\Program Files\Salwyrr Launcher\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --js-flags=--expose_gc --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=2864 --field-trial-handle=1748,i,15005927856663311000,13070604464620167117,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:12⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --app-path="C:\Program Files\Salwyrr Launcher\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --js-flags=--expose_gc --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=2892 --field-trial-handle=1748,i,15005927856663311000,13070604464620167117,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:12⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --mojo-platform-channel-handle=1816 --field-trial-handle=1748,i,15005927856663311000,13070604464620167117,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:82⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=cs "--cs-app=Salwyrr Launcher"2⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --app-path="C:\Program Files\Salwyrr Launcher\resources\app.asar" --enable-sandbox --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3928 --field-trial-handle=1748,i,15005927856663311000,13070604464620167117,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:12⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=4116 --field-trial-handle=1748,i,15005927856663311000,13070604464620167117,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:22⤵
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"1⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
- Modifies system certificate store
- Suspicious use of AdjustPrivilegeToken
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1520 --field-trial-handle=1720,i,5532079688589802736,11392049502134922791,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:22⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=cs "--cs-app=Salwyrr Launcher"2⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --app-path="C:\Program Files\Salwyrr Launcher\resources\app.asar" --no-sandbox --no-zygote --first-renderer-process --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=4 --mojo-platform-channel-handle=2204 --field-trial-handle=1720,i,5532079688589802736,11392049502134922791,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:12⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" "C:\Program Files\Salwyrr Launcher\resources\app.asar\app\assets\js\assetexec.js" JavaGuard 1.8.93⤵
-
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Runtime Environment" /reg:644⤵
-
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Development Kit" /reg:644⤵
-
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Runtime Environment" /reg:644⤵
-
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Development Kit" /reg:644⤵
-
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Runtime Environment\1.8.0_66" /v JavaHome /reg:644⤵
-
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Runtime Environment\1.8" /v JavaHome /reg:644⤵
-
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Development Kit\1.8.0_66" /v JavaHome /reg:644⤵
-
C:\Windows\system32\reg.exeC:\Windows\system32\reg.exe QUERY "HKLM\SOFTWARE\JavaSoft\Java Development Kit\1.8" /v JavaHome /reg:644⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /d /s /c ""C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -XshowSettings:properties"4⤵
-
C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe"C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -XshowSettings:properties5⤵
-
C:\Windows\system32\cmd.exeC:\Windows\system32\cmd.exe /d /s /c ""C:\Program Files\Java\jdk1.8.0_66\bin\javaw.exe" -XshowSettings:properties"4⤵
-
C:\Program Files\Java\jdk1.8.0_66\bin\javaw.exe"C:\Program Files\Java\jdk1.8.0_66\bin\javaw.exe" -XshowSettings:properties5⤵
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" "C:\Program Files\Salwyrr Launcher\resources\app.asar\app\assets\js\assetexec.js" AssetGuard C:\Users\Admin\AppData\Roaming\.Salwyrr\common "C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe"3⤵
-
C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe"C:\Program Files\Java\jre1.8.0_66\bin\javaw.exe" -Xms256M -jar "C:\Program Files\Salwyrr Launcher\resources\libraries\java\launcher.jar" --version 1.8.9 23⤵
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --mojo-platform-channel-handle=1784 --field-trial-handle=1720,i,5532079688589802736,11392049502134922791,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:82⤵
- Executes dropped EXE
- Loads dropped DLL
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --app-path="C:\Program Files\Salwyrr Launcher\resources\app.asar" --enable-sandbox --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=5 --mojo-platform-channel-handle=3364 --field-trial-handle=1720,i,5532079688589802736,11392049502134922791,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:12⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --app-path="C:\Program Files\Salwyrr Launcher\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --js-flags=--expose_gc --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=6 --mojo-platform-channel-handle=3500 --field-trial-handle=1720,i,5532079688589802736,11392049502134922791,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:12⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=renderer --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --app-path="C:\Program Files\Salwyrr Launcher\resources\app.asar" --enable-sandbox --enable-blink-features --disable-blink-features --js-flags=--expose_gc --disable-gpu-compositing --lang=en-US --device-scale-factor=1 --num-raster-threads=2 --enable-main-frame-before-activation --renderer-client-id=7 --mojo-platform-channel-handle=3668 --field-trial-handle=1720,i,5532079688589802736,11392049502134922791,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:12⤵
- Checks computer location settings
- Executes dropped EXE
- Loads dropped DLL
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe"C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.19041.546 --user-data-dir="C:\Users\Admin\AppData\Roaming\Salwyrr Launcher" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=2272 --field-trial-handle=1720,i,5532079688589802736,11392049502134922791,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:22⤵
Network
MITRE ATT&CK Matrix ATT&CK v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
C:\Program Files\Salwyrr Launcher\D3DCompiler_47.dllFilesize
4.7MB
MD5cb9807f6cf55ad799e920b7e0f97df99
SHA1bb76012ded5acd103adad49436612d073d159b29
SHA2565653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
SHA512f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exeFilesize
150.5MB
MD530e8ec2da3b43a30be3485da3643362a
SHA15948ba721af67d826dfdb3bf8036fac0a1fe123c
SHA2565f8443158252cccd3ccb72aef92a847953f8a9cc0b897cf425cc3f7c6cd5f691
SHA512c9663dc0b4267b3558e5265c4fca87f71f822be2e301d1832312048db1416fe97411e20c4251d327dcdbe3e1f6e4e6b75b760ecfa34f6fac4987300c24ffaabf
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exeFilesize
150.5MB
MD530e8ec2da3b43a30be3485da3643362a
SHA15948ba721af67d826dfdb3bf8036fac0a1fe123c
SHA2565f8443158252cccd3ccb72aef92a847953f8a9cc0b897cf425cc3f7c6cd5f691
SHA512c9663dc0b4267b3558e5265c4fca87f71f822be2e301d1832312048db1416fe97411e20c4251d327dcdbe3e1f6e4e6b75b760ecfa34f6fac4987300c24ffaabf
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exeFilesize
150.5MB
MD530e8ec2da3b43a30be3485da3643362a
SHA15948ba721af67d826dfdb3bf8036fac0a1fe123c
SHA2565f8443158252cccd3ccb72aef92a847953f8a9cc0b897cf425cc3f7c6cd5f691
SHA512c9663dc0b4267b3558e5265c4fca87f71f822be2e301d1832312048db1416fe97411e20c4251d327dcdbe3e1f6e4e6b75b760ecfa34f6fac4987300c24ffaabf
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exeFilesize
150.5MB
MD530e8ec2da3b43a30be3485da3643362a
SHA15948ba721af67d826dfdb3bf8036fac0a1fe123c
SHA2565f8443158252cccd3ccb72aef92a847953f8a9cc0b897cf425cc3f7c6cd5f691
SHA512c9663dc0b4267b3558e5265c4fca87f71f822be2e301d1832312048db1416fe97411e20c4251d327dcdbe3e1f6e4e6b75b760ecfa34f6fac4987300c24ffaabf
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exeFilesize
150.5MB
MD530e8ec2da3b43a30be3485da3643362a
SHA15948ba721af67d826dfdb3bf8036fac0a1fe123c
SHA2565f8443158252cccd3ccb72aef92a847953f8a9cc0b897cf425cc3f7c6cd5f691
SHA512c9663dc0b4267b3558e5265c4fca87f71f822be2e301d1832312048db1416fe97411e20c4251d327dcdbe3e1f6e4e6b75b760ecfa34f6fac4987300c24ffaabf
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exeFilesize
150.5MB
MD530e8ec2da3b43a30be3485da3643362a
SHA15948ba721af67d826dfdb3bf8036fac0a1fe123c
SHA2565f8443158252cccd3ccb72aef92a847953f8a9cc0b897cf425cc3f7c6cd5f691
SHA512c9663dc0b4267b3558e5265c4fca87f71f822be2e301d1832312048db1416fe97411e20c4251d327dcdbe3e1f6e4e6b75b760ecfa34f6fac4987300c24ffaabf
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exeFilesize
150.5MB
MD530e8ec2da3b43a30be3485da3643362a
SHA15948ba721af67d826dfdb3bf8036fac0a1fe123c
SHA2565f8443158252cccd3ccb72aef92a847953f8a9cc0b897cf425cc3f7c6cd5f691
SHA512c9663dc0b4267b3558e5265c4fca87f71f822be2e301d1832312048db1416fe97411e20c4251d327dcdbe3e1f6e4e6b75b760ecfa34f6fac4987300c24ffaabf
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exeFilesize
150.5MB
MD530e8ec2da3b43a30be3485da3643362a
SHA15948ba721af67d826dfdb3bf8036fac0a1fe123c
SHA2565f8443158252cccd3ccb72aef92a847953f8a9cc0b897cf425cc3f7c6cd5f691
SHA512c9663dc0b4267b3558e5265c4fca87f71f822be2e301d1832312048db1416fe97411e20c4251d327dcdbe3e1f6e4e6b75b760ecfa34f6fac4987300c24ffaabf
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exeFilesize
150.5MB
MD530e8ec2da3b43a30be3485da3643362a
SHA15948ba721af67d826dfdb3bf8036fac0a1fe123c
SHA2565f8443158252cccd3ccb72aef92a847953f8a9cc0b897cf425cc3f7c6cd5f691
SHA512c9663dc0b4267b3558e5265c4fca87f71f822be2e301d1832312048db1416fe97411e20c4251d327dcdbe3e1f6e4e6b75b760ecfa34f6fac4987300c24ffaabf
-
C:\Program Files\Salwyrr Launcher\Salwyrr Launcher.exeFilesize
150.5MB
MD530e8ec2da3b43a30be3485da3643362a
SHA15948ba721af67d826dfdb3bf8036fac0a1fe123c
SHA2565f8443158252cccd3ccb72aef92a847953f8a9cc0b897cf425cc3f7c6cd5f691
SHA512c9663dc0b4267b3558e5265c4fca87f71f822be2e301d1832312048db1416fe97411e20c4251d327dcdbe3e1f6e4e6b75b760ecfa34f6fac4987300c24ffaabf
-
C:\Program Files\Salwyrr Launcher\chrome_100_percent.pakFilesize
126KB
MD5d31f3439e2a3f7bee4ddd26f46a2b83f
SHA1c5a26f86eb119ae364c5bf707bebed7e871fc214
SHA2569f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e
SHA512aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5
-
C:\Program Files\Salwyrr Launcher\chrome_100_percent.pakFilesize
126KB
MD5d31f3439e2a3f7bee4ddd26f46a2b83f
SHA1c5a26f86eb119ae364c5bf707bebed7e871fc214
SHA2569f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e
SHA512aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5
-
C:\Program Files\Salwyrr Launcher\chrome_200_percent.pakFilesize
175KB
MD55604b67e3f03ab2741f910a250c91137
SHA1a4bb15ac7914c22575f1051a29c448f215fe027f
SHA2561408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c
SHA5125e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d
-
C:\Program Files\Salwyrr Launcher\d3dcompiler_47.dllFilesize
4.7MB
MD5cb9807f6cf55ad799e920b7e0f97df99
SHA1bb76012ded5acd103adad49436612d073d159b29
SHA2565653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
SHA512f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62
-
C:\Program Files\Salwyrr Launcher\ffmpeg.dllFilesize
2.6MB
MD549c57860c47863a502fb24f4b926fb5b
SHA12ac52b15c915666ddcbcbc724753341fce7e8e8a
SHA256106b9ef910cb037e0f19d55c7526124fa3b39c5e849c3d5d6c3a116b34121ea1
SHA5129e4c5ed13890df070e16772769376fbc7cfd967b5bfe243a74d52b30607bc7618a4a8fa6a77f580e7ad9e704f0a248620c9b3e8fe10a0871723b8e5053b0b4fe
-
C:\Program Files\Salwyrr Launcher\ffmpeg.dllFilesize
2.6MB
MD549c57860c47863a502fb24f4b926fb5b
SHA12ac52b15c915666ddcbcbc724753341fce7e8e8a
SHA256106b9ef910cb037e0f19d55c7526124fa3b39c5e849c3d5d6c3a116b34121ea1
SHA5129e4c5ed13890df070e16772769376fbc7cfd967b5bfe243a74d52b30607bc7618a4a8fa6a77f580e7ad9e704f0a248620c9b3e8fe10a0871723b8e5053b0b4fe
-
C:\Program Files\Salwyrr Launcher\ffmpeg.dllFilesize
2.6MB
MD549c57860c47863a502fb24f4b926fb5b
SHA12ac52b15c915666ddcbcbc724753341fce7e8e8a
SHA256106b9ef910cb037e0f19d55c7526124fa3b39c5e849c3d5d6c3a116b34121ea1
SHA5129e4c5ed13890df070e16772769376fbc7cfd967b5bfe243a74d52b30607bc7618a4a8fa6a77f580e7ad9e704f0a248620c9b3e8fe10a0871723b8e5053b0b4fe
-
C:\Program Files\Salwyrr Launcher\ffmpeg.dllFilesize
2.6MB
MD549c57860c47863a502fb24f4b926fb5b
SHA12ac52b15c915666ddcbcbc724753341fce7e8e8a
SHA256106b9ef910cb037e0f19d55c7526124fa3b39c5e849c3d5d6c3a116b34121ea1
SHA5129e4c5ed13890df070e16772769376fbc7cfd967b5bfe243a74d52b30607bc7618a4a8fa6a77f580e7ad9e704f0a248620c9b3e8fe10a0871723b8e5053b0b4fe
-
C:\Program Files\Salwyrr Launcher\ffmpeg.dllFilesize
2.6MB
MD549c57860c47863a502fb24f4b926fb5b
SHA12ac52b15c915666ddcbcbc724753341fce7e8e8a
SHA256106b9ef910cb037e0f19d55c7526124fa3b39c5e849c3d5d6c3a116b34121ea1
SHA5129e4c5ed13890df070e16772769376fbc7cfd967b5bfe243a74d52b30607bc7618a4a8fa6a77f580e7ad9e704f0a248620c9b3e8fe10a0871723b8e5053b0b4fe
-
C:\Program Files\Salwyrr Launcher\ffmpeg.dllFilesize
2.6MB
MD549c57860c47863a502fb24f4b926fb5b
SHA12ac52b15c915666ddcbcbc724753341fce7e8e8a
SHA256106b9ef910cb037e0f19d55c7526124fa3b39c5e849c3d5d6c3a116b34121ea1
SHA5129e4c5ed13890df070e16772769376fbc7cfd967b5bfe243a74d52b30607bc7618a4a8fa6a77f580e7ad9e704f0a248620c9b3e8fe10a0871723b8e5053b0b4fe
-
C:\Program Files\Salwyrr Launcher\ffmpeg.dllFilesize
2.6MB
MD549c57860c47863a502fb24f4b926fb5b
SHA12ac52b15c915666ddcbcbc724753341fce7e8e8a
SHA256106b9ef910cb037e0f19d55c7526124fa3b39c5e849c3d5d6c3a116b34121ea1
SHA5129e4c5ed13890df070e16772769376fbc7cfd967b5bfe243a74d52b30607bc7618a4a8fa6a77f580e7ad9e704f0a248620c9b3e8fe10a0871723b8e5053b0b4fe
-
C:\Program Files\Salwyrr Launcher\ffmpeg.dllFilesize
2.6MB
MD549c57860c47863a502fb24f4b926fb5b
SHA12ac52b15c915666ddcbcbc724753341fce7e8e8a
SHA256106b9ef910cb037e0f19d55c7526124fa3b39c5e849c3d5d6c3a116b34121ea1
SHA5129e4c5ed13890df070e16772769376fbc7cfd967b5bfe243a74d52b30607bc7618a4a8fa6a77f580e7ad9e704f0a248620c9b3e8fe10a0871723b8e5053b0b4fe
-
C:\Program Files\Salwyrr Launcher\ffmpeg.dllFilesize
2.6MB
MD549c57860c47863a502fb24f4b926fb5b
SHA12ac52b15c915666ddcbcbc724753341fce7e8e8a
SHA256106b9ef910cb037e0f19d55c7526124fa3b39c5e849c3d5d6c3a116b34121ea1
SHA5129e4c5ed13890df070e16772769376fbc7cfd967b5bfe243a74d52b30607bc7618a4a8fa6a77f580e7ad9e704f0a248620c9b3e8fe10a0871723b8e5053b0b4fe
-
C:\Program Files\Salwyrr Launcher\icudtl.datFilesize
10.0MB
MD576bef9b8bb32e1e54fe1054c97b84a10
SHA105dfea2a3afeda799ab01bb7fbce628cacd596f4
SHA25697b978a19edd4746e9a44d9a44bb4bc519e127a203c247837ec0922f573449e3
SHA5127330df8129e7a0b7b3655498b2593321595ec29445ea193c8f473c593590f5701eb7125ff6e5cde970c54765f9565fa51c2c54af6e2127f582ab45efa7a3a0f6
-
C:\Program Files\Salwyrr Launcher\libEGL.dllFilesize
473KB
MD56d74b74470bdcfe55d5ea6c672c1c856
SHA1e0ef3f552db4c0d386bd001bbf545cb92674d68c
SHA2568e69fdb7575a626b6111986275b139d15fb56e60156ceb5315c5e503a0fda357
SHA51258a78d316023223dafa96aaa1f1111a139f1b3ca6aa4cd3dbb2ebf1abce44ad08ce8f2e1e69c6109ea62c36f298a05a93b2e71634e972711555127ee8889864e
-
C:\Program Files\Salwyrr Launcher\libGLESv2.dllFilesize
7.2MB
MD57780d8c6e51d729c3e248fefa462a1cf
SHA1361f9a5d1370730d543ce40c5fd091f57dc432ff
SHA256ab282c140b24eacf351fedd21a1ddf4ab9f7f2bb8283fa4726c2be814a1eb31f
SHA5125ab8bd42c646f7f9ef075f5cd60c3fac307ff1b7bb17d2c41ddcd0ba6c6ce70c89509ea4c8a84028fa9f9bb1b30c1e5c04d3c716489634ac19a402be2a1ec338
-
C:\Program Files\Salwyrr Launcher\libegl.dllFilesize
473KB
MD56d74b74470bdcfe55d5ea6c672c1c856
SHA1e0ef3f552db4c0d386bd001bbf545cb92674d68c
SHA2568e69fdb7575a626b6111986275b139d15fb56e60156ceb5315c5e503a0fda357
SHA51258a78d316023223dafa96aaa1f1111a139f1b3ca6aa4cd3dbb2ebf1abce44ad08ce8f2e1e69c6109ea62c36f298a05a93b2e71634e972711555127ee8889864e
-
C:\Program Files\Salwyrr Launcher\libglesv2.dllFilesize
7.2MB
MD57780d8c6e51d729c3e248fefa462a1cf
SHA1361f9a5d1370730d543ce40c5fd091f57dc432ff
SHA256ab282c140b24eacf351fedd21a1ddf4ab9f7f2bb8283fa4726c2be814a1eb31f
SHA5125ab8bd42c646f7f9ef075f5cd60c3fac307ff1b7bb17d2c41ddcd0ba6c6ce70c89509ea4c8a84028fa9f9bb1b30c1e5c04d3c716489634ac19a402be2a1ec338
-
C:\Program Files\Salwyrr Launcher\locales\en-US.pakFilesize
313KB
MD53f6f4b2c2f24e3893882cdaa1ccfe1a3
SHA1b021cca30e774e0b91ee21b5beb030fea646098f
SHA256bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f
SHA512bd80ddaa87f41cde20527ff34817d98605f11b30a291e129478712ebebe47956dbd49a317d3eeb223adf736c34750b59b68ad9d646c661474ad69866d5a53c5c
-
C:\Program Files\Salwyrr Launcher\owutility.dllFilesize
1.4MB
MD50b72a72b76b71076c78773802495d377
SHA1921101f1342c180677c4bfc7006baf3292a77f9a
SHA256c127bd152b674d35a7c5a65cc933c385d64622ae2ea09b7194c1de7bdda1c690
SHA51228afe1b4982e31784393182a06925b6758a19436eba28f89dedc2a380845939d31e947ef676fe8e34f382c7ae28fa88078380df9e83ba9ce7d7c1e9df96a952c
-
C:\Program Files\Salwyrr Launcher\owutility.dllFilesize
1.4MB
MD50b72a72b76b71076c78773802495d377
SHA1921101f1342c180677c4bfc7006baf3292a77f9a
SHA256c127bd152b674d35a7c5a65cc933c385d64622ae2ea09b7194c1de7bdda1c690
SHA51228afe1b4982e31784393182a06925b6758a19436eba28f89dedc2a380845939d31e947ef676fe8e34f382c7ae28fa88078380df9e83ba9ce7d7c1e9df96a952c
-
C:\Program Files\Salwyrr Launcher\owutility.dllFilesize
1.4MB
MD50b72a72b76b71076c78773802495d377
SHA1921101f1342c180677c4bfc7006baf3292a77f9a
SHA256c127bd152b674d35a7c5a65cc933c385d64622ae2ea09b7194c1de7bdda1c690
SHA51228afe1b4982e31784393182a06925b6758a19436eba28f89dedc2a380845939d31e947ef676fe8e34f382c7ae28fa88078380df9e83ba9ce7d7c1e9df96a952c
-
C:\Program Files\Salwyrr Launcher\resources.pakFilesize
5.1MB
MD5e5ed3ea494b9ddec4b6aedc45ef172ba
SHA1bd7ff0e1c817f4eeeae0421b6e9d107584d35c30
SHA2563dfde11380615c1204b026f94e39ac503f1785d4b967e40d5384bd092c4f0c74
SHA5122da9c70fa89a91525661d346cdc67d51772b3be38dee15727fea77f83cc545a621dc43c6dd01e8425072335cc11591daeb92a0acba134918094676cf6b00cb82
-
C:\Program Files\Salwyrr Launcher\resources\app.asarFilesize
19.8MB
MD565b9679c5a22a83bcb18db581a50e3ed
SHA1a28fe9d22a5237f2f375ad02e2f59e8ee2dbb2a3
SHA256b600276028f5edc33ae4cc60f9c6840b527f099a65c590f7d6f54c2d431ce11d
SHA5123495c9b655ce0e646c3633e312ad23df665c2f77e99106669b3f057df1299e87db1f9314d48199f0de19df18598f346e4c3441375e920c84cfc62a214beabc39
-
C:\Program Files\Salwyrr Launcher\v8_context_snapshot.binFilesize
471KB
MD5031ea03da08fe1247280cfe781658791
SHA1e91db50ad16b5a5fbbaf4118672d60b347ea6161
SHA256c16dcec41919a6d2850214f2275824be8a97d8c5e694e2ec8dd7d16ab2d5015c
SHA512b3d6f282761f8ab8760728ecb108f64741f6f3cd2a143813042ff63a3b6604fcfe7c1feabafb65f9f67906217edb5851f44605a34f7a50ed2058c25ce5efb30a
-
C:\Program Files\Salwyrr Launcher\vk_swiftshader.dllFilesize
4.9MB
MD5054c57ca1e444b9ba8262835e0cc947a
SHA1c20b1ae7ec7315187051e7a46e14359f9d12b709
SHA256011fc0f126868903dac9fecaa948eeffbc43aea2244cda071f69da08dc2f110e
SHA5129d7854a681c4abffb95f17b0ec81ee21dc36c482fdd6dfdc8cc7296ca19e7193e7e2ef4ad71d28304cfbb94d96065ba53139d4042c31edf64897e9105ca5e360
-
C:\Program Files\Salwyrr Launcher\vk_swiftshader.dllFilesize
4.9MB
MD5054c57ca1e444b9ba8262835e0cc947a
SHA1c20b1ae7ec7315187051e7a46e14359f9d12b709
SHA256011fc0f126868903dac9fecaa948eeffbc43aea2244cda071f69da08dc2f110e
SHA5129d7854a681c4abffb95f17b0ec81ee21dc36c482fdd6dfdc8cc7296ca19e7193e7e2ef4ad71d28304cfbb94d96065ba53139d4042c31edf64897e9105ca5e360
-
C:\Program Files\Salwyrr Launcher\vk_swiftshader_icd.jsonFilesize
106B
MD58642dd3a87e2de6e991fae08458e302b
SHA19c06735c31cec00600fd763a92f8112d085bd12a
SHA25632d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
SHA512f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
-
C:\Program Files\Salwyrr Launcher\vulkan-1.dllFilesize
894KB
MD5b139ce07e2d87e65cb101f3ca90f5511
SHA151516e2fc7aa3532a76795cbfc318da19e3e2d54
SHA256c94823faa547813d388b41f72a791fcd2f36665c444ca88475d69ab7f1e9c3cb
SHA5128eba17cd8e70377083509a4c5316b6b784c613e4248001a6c61f2d26acccb5fac1ab45b491c84a05f93a772576e203b514109e8f17cfc593d08104f1746b3a1d
-
C:\Program Files\Salwyrr Launcher\vulkan-1.dllFilesize
894KB
MD5b139ce07e2d87e65cb101f3ca90f5511
SHA151516e2fc7aa3532a76795cbfc318da19e3e2d54
SHA256c94823faa547813d388b41f72a791fcd2f36665c444ca88475d69ab7f1e9c3cb
SHA5128eba17cd8e70377083509a4c5316b6b784c613e4248001a6c61f2d26acccb5fac1ab45b491c84a05f93a772576e203b514109e8f17cfc593d08104f1746b3a1d
-
C:\Users\Admin\AppData\Local\Temp\88e0ca60-c817-46d2-8b6c-51bda74f996a.tmp.icoFilesize
16KB
MD516c42a4d0a4c826dd74a3232f6e980c1
SHA182e9c8e479c95802465c0845bfa613dcb092b189
SHA256c7bcd8291312e4ae4cebc7ae163bd21bd2238901b249ce3d342da3e319563f38
SHA512d7e115a38762bfeb75c891e942289c4a0dfee92c7fabca7ab607fc9247ce55cd77c580f0c05801e58fb7e289887326990fb0c4d88dc76a27f4bd555719efe3bc
-
C:\Users\Admin\AppData\Local\Temp\cs_2013Filesize
96KB
MD5d367ddfda80fdcf578726bc3b0bc3e3c
SHA123fcd5e4e0e5e296bee7e5224a8404ecd92cf671
SHA2560b8607fdf72f3e651a2a8b0ac7be171b4cb44909d76bb8d6c47393b8ea3d84a0
SHA51240e9239e3f084b4b981431817ca282feb986cf49227911bf3d68845baf2ee626b564c8fabe6e13b97e6eb214da1c02ca09a62bcf5e837900160cf479c104bf77
-
C:\Users\Admin\AppData\Local\Temp\cs_3ad7Filesize
20KB
MD5c9ff7748d8fcef4cf84a5501e996a641
SHA102867e5010f62f97ebb0cfb32cb3ede9449fe0c9
SHA2564d3f3194cb1133437aa69bb880c8cbb55ddf06ff61a88ca6c3f1bbfbfd35d988
SHA512d36054499869a8f56ac8547ccd5455f1252c24e17d2b185955390b32da7e2a732ace4e0f30f9493fcc61425a2e31ed623465f998f41af69423ee0e3ed1483a73
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\LICENSE.electron.txtFilesize
1KB
MD54d42118d35941e0f664dddbd83f633c5
SHA12b21ec5f20fe961d15f2b58efb1368e66d202e5c
SHA2565154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d
SHA5123ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\LICENSES.chromium.htmlFilesize
6.5MB
MD560afa16cbc3798cb1352314311e93a07
SHA10a9daab3a20586ab2a07cd2857a2f2cd65c25d32
SHA256ec105b4cf1588e28ebd596b2c354e44b4fe2cce5e6d5abbc7174ec7be3df6a09
SHA512839905cb7d697ae77beba74a3c82e65d1d6328c62fea6933fd8d490231d1a6bffd692fdbaffee86483ae967e86fd0772fb2bb327b054d08fc0c9177f3c9c26fa
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\chrome_200_percent.pakFilesize
175KB
MD55604b67e3f03ab2741f910a250c91137
SHA1a4bb15ac7914c22575f1051a29c448f215fe027f
SHA2561408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c
SHA5125e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\d3dcompiler_47.dllFilesize
4.7MB
MD5cb9807f6cf55ad799e920b7e0f97df99
SHA1bb76012ded5acd103adad49436612d073d159b29
SHA2565653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a
SHA512f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\ffmpeg.dllFilesize
2.6MB
MD549c57860c47863a502fb24f4b926fb5b
SHA12ac52b15c915666ddcbcbc724753341fce7e8e8a
SHA256106b9ef910cb037e0f19d55c7526124fa3b39c5e849c3d5d6c3a116b34121ea1
SHA5129e4c5ed13890df070e16772769376fbc7cfd967b5bfe243a74d52b30607bc7618a4a8fa6a77f580e7ad9e704f0a248620c9b3e8fe10a0871723b8e5053b0b4fe
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\icudtl.datFilesize
10.0MB
MD576bef9b8bb32e1e54fe1054c97b84a10
SHA105dfea2a3afeda799ab01bb7fbce628cacd596f4
SHA25697b978a19edd4746e9a44d9a44bb4bc519e127a203c247837ec0922f573449e3
SHA5127330df8129e7a0b7b3655498b2593321595ec29445ea193c8f473c593590f5701eb7125ff6e5cde970c54765f9565fa51c2c54af6e2127f582ab45efa7a3a0f6
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\libEGL.dllFilesize
473KB
MD56d74b74470bdcfe55d5ea6c672c1c856
SHA1e0ef3f552db4c0d386bd001bbf545cb92674d68c
SHA2568e69fdb7575a626b6111986275b139d15fb56e60156ceb5315c5e503a0fda357
SHA51258a78d316023223dafa96aaa1f1111a139f1b3ca6aa4cd3dbb2ebf1abce44ad08ce8f2e1e69c6109ea62c36f298a05a93b2e71634e972711555127ee8889864e
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\libGLESv2.dllFilesize
7.2MB
MD57780d8c6e51d729c3e248fefa462a1cf
SHA1361f9a5d1370730d543ce40c5fd091f57dc432ff
SHA256ab282c140b24eacf351fedd21a1ddf4ab9f7f2bb8283fa4726c2be814a1eb31f
SHA5125ab8bd42c646f7f9ef075f5cd60c3fac307ff1b7bb17d2c41ddcd0ba6c6ce70c89509ea4c8a84028fa9f9bb1b30c1e5c04d3c716489634ac19a402be2a1ec338
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\af.pakFilesize
340KB
MD5198092a7a82efced4d59715bd3e41703
SHA1ac3cdfba133330fce825816b2f9579ac240dc176
SHA256d63222c4a20fa9741f5262634cf9751f22fbb4fcd9d3138d7c8d49e0efb57fba
SHA512590dcc02bc3411fa585321a09f2033ca1839dd67b083622be412d60683c2c086aac81a27bc56029101f6158515cc6ae4def39d3f246b7499b30d02690904af0d
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\am.pakFilesize
551KB
MD5a2a17bdd83467a027505bc817d1ac028
SHA1cc1266a22606a1055db9653b82e90c9d1f551d44
SHA256f92b0299185d963337e96df1016e1cf5ca335e22ff86568c1a6507c3fea29094
SHA512193c5db0a30a3c8ef5e8c821cafb9d0b5671b7e7821748c7b432e927bd4638ecf5bfc1d99721ce89fb3df4f6f23b5e55d753430e8ef2bedd1e1633e613321028
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\ar.pakFilesize
602KB
MD5b2a23f285858db5e3e53d6a5d5291623
SHA1674adfeb57075f86f40ff4b14916c3af29695813
SHA2567ab39416b60ee342ff2874aaa7b9b95b290828807b1395192cdbd29ee1be15e8
SHA51292c9b31f82f62b15eed3edaf437412cb630e8deb2226ad162d7cb4c252d8cb7f0453b3121a846ffcb1547570e2eadb04cfd3877ab120496a7fefb47a6d96cba0
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\bg.pakFilesize
631KB
MD59dc95c3b9b47cc9fe5a34b2aab2d4d01
SHA1bc19494d160e4af6abd0a10c5adbc8114d50a714
SHA256fc4a59ea60d04b224765be4916090e97ed8ddda6b136a92a3827ed0fcc64bb0e
SHA512a05a506a13ac4566ecbfe7961ace091295967ea4e72a2865e647b5fa9adac9f7cf5e80b53fae0e3917dfb0b9a3f469189cd595cc4ae9239d3a849f5cedd60e46
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\bn.pakFilesize
812KB
MD5fac2c752c57175a4b1f4630e3667123e
SHA1a2dbcf1dd7b3cac499b9f782c7393ab438039584
SHA25671f99a67bb310fab8068eeed7ce24ea7624a66051ba4e719d051cc7e67e78001
SHA5124820704bd92dfb60736da5b84c8bc9135fca484c678585ec9d26dcb90632e382f354d03b539599f4816feb027dd285ff06ed8a520bede56d7a1c590d942e4250
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\ca.pakFilesize
384KB
MD50312c87b6436e733a037bfb3084f7550
SHA1e3f30b8f3bfc8ddbf4b8f85f845733ed5ac8c632
SHA256b6c895fbca90c36ae2cfefefda989922162a2cc259603fbca066f0cfbf43c4ff
SHA51224b7780211b9dcaf7cbe3915851c7b873562e0cff022c29ca1b4e159b9da152b517305f81dd33712a0224fc3b77e594405e432fe5eecf29b7a4f83f441d6905e
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\cs.pakFilesize
393KB
MD5ff919631102a3a9ec635b3080b63e305
SHA1e43b117ad5b2d5b373321ab0ae63dd4bc1352a89
SHA2561b8c3add009028eb567b0094759daff29b7861e11d5a9d864071012200e9735a
SHA51221833774413cc71ba9c0c592504ae6288e3c8ac4e5d1d62768f4b3eca09e90009abec5e8fadcb4e7d63b99a522ae48fd608aad432eb4165ec7021c8888ad7df1
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\da.pakFilesize
356KB
MD54bccba46add5ebaf6efd4ade3c42aed9
SHA1e48dcc2de930bbf0ea8ee7b735ead321dadb5be8
SHA2562497368658a988e4eb3f64cd17423ea04e7555b104d43c8996c0ecbbfed5f74d
SHA512e2059e2a7f80353981eef6982a7da006fa3753aeba9aca5279eef71aa2fa4b7adbf9cbb17c85b8060359f9e871b1a5c665226f8d3b8a6fe49f908fd44e1b46bd
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\de.pakFilesize
381KB
MD58569900305a5661573f7766b93909f16
SHA13529376f54e32c17447b065d08c77314c4db2ec8
SHA256068ba3e34e7f253fad7dc526b1078aaa969bea044d48171925534598aa8becb3
SHA512d544febbe20a9bc5cf31f79f7ef74c1a742cccc99136e9828187c9a643bd0317c7cc48706346ee1a3c9eda8984be9c8606e9dfa7a6ce2cff49db2d785c2aa1c3
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\el.pakFilesize
691KB
MD58025eb8756d4bf3126d83c9078935520
SHA178895218a90680fe223af0b003c195da84902e1f
SHA256e42aeaea80dabe82657983a462e4cd3ec74f71d4f08a689f5825f55fc02f3141
SHA512f99f47e54583b60857a31648b985216713725496d8653ca04eb1d6634f2b7f7a1f9f70b8a7938529bfc6c8665360da5e6bfb6b68c314c011fef4a9817010c42b
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\en-GB.pakFilesize
310KB
MD5502260e74b65b96cd93f5e7bf0391157
SHA1b66d72b02ff46b89ee8245c4dd9c5b319fc2abf7
SHA256463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b
SHA5120f0f9aac8e6b28c1e116377ab8ee0ffadbf0802a4026e57aedb42d21c38fbf70159be9e0314799c1de1f7638fbbd25d289dff7cd2c9eb7c82e1b62b6c4e87690
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\en-US.pakFilesize
313KB
MD53f6f4b2c2f24e3893882cdaa1ccfe1a3
SHA1b021cca30e774e0b91ee21b5beb030fea646098f
SHA256bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f
SHA512bd80ddaa87f41cde20527ff34817d98605f11b30a291e129478712ebebe47956dbd49a317d3eeb223adf736c34750b59b68ad9d646c661474ad69866d5a53c5c
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\es-419.pakFilesize
380KB
MD502452424bb0cf6ab832808d04883f147
SHA1a8e97ee52f3d97c1a4c678f7578808416e9fac65
SHA2561b23cda69927c77764bda121ee398ffefcf5edcb5866432aa3526c378553c9b5
SHA5129e750b26ab40b5f1c075acbdeb15a57cda9e6bd8049488cfaf368b5cbe8cd9b6e5dc96130e4137370c90bb0777b97515ea2be0787e255cff750fb7e188e22ab2
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\es.pakFilesize
380KB
MD54ca91891b2d4670d02931f0ca84e4744
SHA185f6559b09c80af2575e3b7626842c10081e188e
SHA25685fff1ca6bd2527073de03fa77dd013db2557a57cce1fd370caa2b185abb9336
SHA51283eae7ab2f03598c657786bff6171803b6bbe2128d1a5b8a01d9a13337113632279712dd8ffcd3b707fa6052a936d92a57cb67d848c77ee291e75700e29f2bf8
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\et.pakFilesize
342KB
MD574eda453b23793ced4480ea7a595fe44
SHA176964af9c8024bd84fa1d89f60784e7ee6569350
SHA256e2d38131a5ef4b0e8438f45e8c74c56bcf666760d4682120c8071c9220230555
SHA512e9928cfac01f10b040c74e63242ffa1f7f616d8598f49f0aa7ddad063e18666cf5649cc65d00b3526526af8a7b46ee3b3655da22adf46aa44c0c6a1c2ac4dc7b
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\fa.pakFilesize
557KB
MD599de8cfda36ab9ab3342889fb6da393d
SHA16bdd3d627d4b6702f43725039089562af58898c0
SHA256b93145f30e25122015373a248d6ea22a539c7d0d58c8aa853ac35cc80dc06bfe
SHA512aa20793f9ece5823cb9e74a4a3ff97d7a1860a593f427fb5eacb0390569a48122589610fe5a02577577f3a30f981c5e3da97cf73bdfe158a6bb845586c5b19d6
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\fi.pakFilesize
351KB
MD5fa7dbd2ee35587ff31fde3c7107e4603
SHA1baaa093dcb7eccf77ce599c8ff09df203e434b60
SHA2565339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c
SHA512587f6d0e216d1688227345a8a75b94848ee710ec633fe6805db66bb0e8cad1b8d24a1e6a7e234061516770d881571166c78d8fa1c40e6335f3dcb1339fbffc14
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\fil.pakFilesize
394KB
MD50b7d25d70a2d94a032b7ff7faea45a75
SHA1d9d473b2ea936ffea4f751d8716cb03407a95785
SHA256a737a14f84b10b2e3c9ad4d147b430fd30c5ac0e125d5aaaf1ea19b0507de5af
SHA512e4dbef6fae4cb56c3cd7bd5dbb239b5136eb2534a17cacbf628f5e5d77bfca924580ad4e4d0ec580ffaf94d6e1fafad58e9c5f472c3a3ff782702ea5eae2aea3
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\fr.pakFilesize
410KB
MD5a7c88eda9e12b6dbd432c544767acbe2
SHA181f1abe537870f7888431e820b636b17b5213835
SHA256a4d0e5a39241a6326143afa4c8ec881d6edb0382c66425411881946f98e053e0
SHA51288ca203256aaaaa26afd4a0aacb6fba2eb41618d09df6fc6aaa80ab8d699b30e73c373fa75098b1ec4912c042341dd1c79ee3d04f98b4bd59a44481d350a7988
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\gu.pakFilesize
787KB
MD53268b8d9b4d4db87ec627b09f1c55a6d
SHA1683ba367e40abb2fefd4548805e845fc1b452855
SHA256dee5ef4f4b36fc5fe0f3b5e10c7cc3a7edc14bf948317b31a3287a95bfe0afa4
SHA51259cff62843d35f790092f42b611e9bcd80d948c0ef27a770b2d7af859997f40c320d67df3c5a9420d28d5c8f1678df4677e01cb99b729664d198b3b95b5fbd20
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\he.pakFilesize
488KB
MD56376d0a5f4273b76b1f4aabade194e0c
SHA1337ba39f09454c0779ab64872b9fa11f866d6adc
SHA256875712bb852c698f677c0c74e088f62d31adb2bce65648fc390607aad8705c45
SHA51200347f16b5abbaf47fb08663d5efde26ab7de0c7a2fa42e6b5f03c41a83cecbd8e78cc3aef41d5f08658cf346e0ade732774485e8a10008a43fa41ffaf73b2be
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\hi.pakFilesize
821KB
MD59b5d94450fb03c34759653deb0551441
SHA1b9134fbc75304ca73b156e77425505ed6dc6d629
SHA2565e8f2593dbea5a57c3a974558a3fc91b6087329a1e7b11622a6eac120a973718
SHA512caed9535d487833bdde51e82b76d3b8d2e6ea18ec0b4b7a98552be9266ff0728bb1133d8f9cbd169345aa08b0073f04d649baa71bb487483951cfa1a92080d63
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\hr.pakFilesize
381KB
MD57dbd4a9de6e30de028c97a7d39f8038a
SHA118d68f37b3c5eea3a2fe42c4ab1694a439a189c0
SHA256e1c793e08e062043cc65271718d9b21d5742729dfa2e076ab012e8a008d06c04
SHA512a18c43257d26380ec14ae0259cf192257fee0c6895b82240c3b41c5d6e8bd6f8023cb39dc2da0701bbcf05e8eb2cd13c84af971c28c94099a6d0ea02ce745ddd
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\hu.pakFilesize
411KB
MD5d6904e7d1b6750d43a6478877c42618d
SHA1919f090a6a3aa1112916f5bb0d5b73a62be43c1e
SHA2563ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f
SHA512d600fedb5ef1b2eb49a0122536c642b350ce67bb7a9da205890d9d13a195ac17c14607b4489715fd34506ec0ea4c80f245e09cf048aef52dcc8094f3138b2fad
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\id.pakFilesize
336KB
MD5881ff04e220aa8c6ed9d0d76bfa07cb8
SHA1cacf3620d1bf85648329902216e6cdc6f588a5ba
SHA2569210c4c4c33e7ceb5f70005a92a4fd36ca4facdd41701fdc1d2ce638db8adf22
SHA5129134102928aa80c49bbf2b862e8079b2ee23636ce63412a4c3813f234d623ff563f5ca1ac407ddb77cecf1224896ed59ae979dcf63435d35a4f13de9c22755d5
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\it.pakFilesize
373KB
MD56629c344b6e5ee8fb476522627b34221
SHA128335e3c96a68a560c68756860394a0a86c21870
SHA256e76c3f15529fa7cc088dc32903c6885f4cfa170a1e0144710b05965f3210c31c
SHA51278ca2ebf40d6cc3eb7035cca78364be63b8eb69e27caf2cae57e3489b39a9e443409e800fd95e1b646d37655c37ee8a9ae1ab344b506cf65f8603a6a3ad892ed
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\ja.pakFilesize
456KB
MD5c294012268f9e611fdc2904be57e45d8
SHA19ba4bd190ced7ffe053fa74071fc5836bdebea53
SHA25621cd7ae581f6d0c19e90ac7df03d7dd5305b882776a1f091573f824bd28514da
SHA512d16653f30617e52a040c5e033896a71055fee9992e54ffca5029601bb62a41b9685a68655b9c8bf7a7ba54a914836a0f7a49cccacae0eda180a6b68c0471a268
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\kn.pakFilesize
910KB
MD501e8dc084d07743fbda50d54d86ee3bd
SHA1e0709217e1a6785706b7d14037b1478ee2a3a59d
SHA256ae4e003458f1a8bd3652e61241e11ff91bd887f6b95c1fe2700e76a117ba2119
SHA5127d8db84f975d778bde21253f43d174921c2c71111644a953ad8671754e5d656f72bcabf62f4b960cbf4ca0ccc5f67d1558ed250b568c1f2308a31970e380654d
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\ko.pakFilesize
383KB
MD5ce19dea7b7d0b9472f99427de2b307f0
SHA19c84dbff9927c052dcb9818ed73bb272abf9054a
SHA256586f34de2c7bb0e92fc376f3ad962bf9bae1a768398459d39f8ed06b59d8ccbb
SHA5129a6c84ef9bb03be9ce96948bea94ec0ba83ecbd06ed648acab9d6fd27c1ab85f011a5670591da6256781dc147fc234d627cfc4bf5eb29bc2c8bfc84aaf89085f
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\lt.pakFilesize
412KB
MD57b6bf901352885c0699db71239b7cf24
SHA19e3ec5f327c0d0e54a449332061e60a8c79243cf
SHA2569200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350
SHA51279ebef723fb4c17581eb869b4b4e1a364a3d28df0e168e7e1a3583e0c1ec5b9716dd270925c0545b8247421a64b03705f10910fe3416900de9258840c470d580
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\lv.pakFilesize
410KB
MD5cccbd7f8a0c34c7094ce4d7b8e7e0588
SHA11a08401e2dc8c59200c4ecaa1886b43b6faa6979
SHA2567467360f9addd4d8694e1508a6ab3a3e00dce57e5897d5376ad27d8e651b23d4
SHA5122cc43437f1cd8d5fda0e95e7dd117c9b82e90cfed58ad8f492f46b4634aa01cd1b0ebe39377231a0828fc1ccd39641e4efc2f1210d629f9aba12ea9048accd95
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\ml.pakFilesize
948KB
MD500292b0801e0dd0a74091bf53f1574c9
SHA163a002e7a8796bc4b4459a19c95ce426fbd1ec7f
SHA25661a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6
SHA512e2e15f66851aa435e3bf4de6672f4aa8b01204d8efe11ec6ee9a51d9877ec4f2e71d7e9547d6eab9bfa04af1bea71fa72aa4963fa08b48717bf1c3fd21c00cd5
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\mr.pakFilesize
772KB
MD5b9a2aa88c69c42ebcc41fef00c980a38
SHA19e373dfa11f95c31ffdca70bd83d2f66e1ddcef8
SHA256481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09
SHA5125f4582723429a44dd517322babae4466efb4e8723c0247754e2a9a2929133d6fee5c3533c4cf567954e2a5aab47940a136a178405de36e38b50e8d4a6d5c504f
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\ms.pakFilesize
351KB
MD56de7b004a86967a3433545b3b38bf89d
SHA1113bd5b28dda669b27c798e0b46fd680f3a04956
SHA256ead5a37549b98d55839ffcf0dc8f8201d37d71968ec9138fdea79d7c9b79549d
SHA512239c4acd2c0b6c08fb92fd95b89a302ddefc01ea843950a0247b7310c2b024383ae98286c2d4b83b99833452c41b386e047b2ef33610ef122fcf2f439ef43726
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\nb.pakFilesize
344KB
MD5bbae0915edec081b04bb903b689bc40b
SHA16a0fc635ce1c431e512b8b3b8448176aa4025556
SHA256d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8
SHA512573a9fe43213829a6a4b39e67be25bc330b417750ea6d66e26163de7a80c29f6f5deeb841d9ff8303595943a81fc01ab668aab02a5cac4eda078ed06120138b4
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\nl.pakFilesize
356KB
MD59fdf47fef5b549497005ef8efd2a2c59
SHA13449de72bfc2be537f4b007c81e5bc5de6ff3d0a
SHA25665a9c1efcdd451504e2e9b44b0c8fafd2c3c1445d760fd6c435305e2f8534f59
SHA5123e77178dcd9e8894847039a997c87d5d04eef8a1ace1846132fde229285da08ffc8d3ba697226130bd07ab122a868cc53693981a21f8211c839ccdaba77207cd
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\pl.pakFilesize
396KB
MD5c9da926441d438b952149650c86a033e
SHA174ee60342bda33048570dd3c03f897668cdfc971
SHA256ce96fd415ffcda01345146faac716e2d45e2c556e5c6c38e9a1ea5ac19dafe84
SHA5123e718e8df695cbd80146c3e911de9b235ccc06f574739e5720d47952f69eab089b56451cdc321174da9b239c0a71a720baf9d68b46046efa0edcb2a3f1804ea0
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\pt-BR.pakFilesize
374KB
MD5c68170e4948cf3ae6910364c1e68ce90
SHA1420f3a392db28b6fd6be44fd702b455518b67bbd
SHA256b26499a256d66feed42b372ea2eaceb75c279694b40a7b5d0f8c1a5c24cf381c
SHA51229482ced2091873a8c6242a608ed641b3a4d72fb93ccc2eb58d2769c446195f717b438d5633522f457234f3d209029936e9ea4ccd65d45ba8ae0c2df71043797
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\pt-PT.pakFilesize
376KB
MD59b04c89c2d17c7c00a6a4342f0771fec
SHA1a0886040fd5f870023cc3038f5722f4ba6d7c8b6
SHA256abb012215610178b7f8203f61f41103546d3949ac3df4acb3a622b01663f39cc
SHA5127c4cf5e7bfad4709db49779c1e3e762b8d0bac6cd736c511711ddca7682e08bc6b3274c9872d88db78bc36b0456b29680d3c4e518d4a401830cfb37b48567bb8
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\ro.pakFilesize
387KB
MD59b9c22a12ddce43a4a3c0c047a16a5c3
SHA1901e072d644a79e0b18be2f4a81e6842b070485d
SHA2563e89d43b86b2582fd7db236659af47ff459a44c5b5ebcbb0bcc9eda244c8e501
SHA512196a5bb1b0b5093d4a18279037ef7993525c36c136d4560b7e902c815687f7992ecd2b64d96422911a3468cf3f1478b21df6465d3b31486466cbb5573ff0e7e0
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\ru.pakFilesize
634KB
MD5aa75c21bfe54bb70e7abd9fce1347a8f
SHA13492307cec15b367274c948beb76598f72347846
SHA256bd981aa65536b544228ed1d60a552ff4c7800b46f815177b33b3e628b97d77e4
SHA5120e77f1c7e4b5410e9eaed875f5dae6485d8de5b650ec44133b1634645cc3055fa7bea316e843b491f29d9c137b20623b120e014b1c74bbf4e8d1f08dbeaf5bb2
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\sk.pakFilesize
399KB
MD572946b939f7bcaa98ab314cfba634e0b
SHA171c79a61712c8c5d3dac07a65d4c727e3b80ab17
SHA25675f179897cad221ca6e36b47f53cead7f3fb4159ee196f1d10a5181b84e1b5b7
SHA5122a8fa7108c58f4cb263900a555714d5638d961d14d9f4ddf8a9ab5b880afdbc5d2325fed1e158dbaf42a9cd20e8e372e6a8f52fce842a6940ea52e43e4a1f1e5
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\sl.pakFilesize
385KB
MD56a2efcb886dd33a5d05a112c141c520d
SHA1ba89d9ef7ce1862d1e9933e910529ec5a3e2a933
SHA2564fa004d80c7e89e38cdfed3a652003787fa810256d294c16aab0bca815eb7c02
SHA5120475df28a602ec90c4331da4e7d742eded2cb3264b41924628bfc45e2662f2ceb7b9518ac88a231da1c3caf18d176ff3a4931c2b1751f3b74bce3af73d0088cc
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\sr.pakFilesize
595KB
MD5fca817ed4b839b976ebcbf59cac66d68
SHA1413efa65470319999032b6a25b3b2ee33b8cd047
SHA256524acc64e70918a77cda43fd9b27a727645b28ad2d4cce16b327105101c8bbeb
SHA512cb246d5c5cea30d6e7514841ab93803984cda37461a09b6c340ca64f7cbce4e1212951a4de421d928d433a619dac18454fb403b42581757b76c7eb124ce70cf2
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\sv.pakFilesize
347KB
MD514ecf7684d7987950a9655258d3a72be
SHA1b1506b3b4be332081dde72bf54a197b1ee0bde66
SHA256690a83bbefe1e97de5d2c1c0791707e8ddc3414a12cf30b79329fa5d21840d6e
SHA512fd9d36c63b00bb1caf6a25f2c797f3a844395f16016a9010819462d647e8e759fd8887e5eae3ef300871f4abef05f4ceca9edb5b30ffdd56efeede9c75f56e30
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\sw.pakFilesize
365KB
MD59632dd7d883fa4deb3963ea663e0ffd4
SHA10db135be4b3a7c54c39e9df5034d5576b68ea92e
SHA256690027c4a31c4aea00b7d1b32ec6cd3fa50b1eac412ae273ab15e72eb485dd6e
SHA5123aac1857784dfecd2ae5f7c4056f58e27a966a6cb949e02eaba56fc1fc283243ed6213f17628d62d435e33fa4771eb43623f25da6510aa4ce6f2149f72ab0d37
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\ta.pakFilesize
936KB
MD5714ef30e819d791b41ab093d515e1704
SHA15410b58dcaa0bc82146655ed56493581d18d5c04
SHA2569be97a18356b05ac4c3aa2b7e719eb29b47d8ad406aa50cf0f24bdde1d613083
SHA512a35074a54dc12a68301553345c69f02ad31bc010690d5f4c4fad5d65b3fd9c3f7c3ec7e3637673d250cb33496b93a9582e28b5210d11137bc0bd5b2e219c0aab
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\te.pakFilesize
869KB
MD528f500e12a7b91d91d8f99395fce8332
SHA1885fd6c78259ae38f7dba3887f7fee783c1766bc
SHA25606dd7ae122d6f1f394aeb85089a9c837ec05dad627b0bcc92863ab2830e971c9
SHA5126f0fe4a527e9c53a41d20f95cafda7a2488bab310eecf68c98271a2db6f3efe5d2180e158b5018a9c56a0580b0735146f0ae07d884f564de1e8780956a10d190
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\th.pakFilesize
731KB
MD5d34a2993eaf0ee6bf65c3729baee426d
SHA1d796911e57c89b11a603c645dd0e32aad7819d75
SHA2567870b92c64f7776c469b4d19be8881ce30a5263cc8287c3d7de573aed43c7dba
SHA512eb2f4b3cb7741c996acbd121d0c69eda6cfac6bdbd7b8036dc6394ed7e49c9a45641c7983431b5f8c5db685fc7ce958e7c9f5e79837b381caeecf009f79ca4c2
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\tr.pakFilesize
371KB
MD50662e2b67524444e843d0104adab0b7e
SHA1ec39112f57e28010295398c24c6a17e60a88fd47
SHA256e8f86dc87dbf11935863efb3a5af8213a97123889019e98a7ef313b488088790
SHA5126529083d04e777be3cdaa14f06bb6b3a3d26006ed9d067f7a1bdfcf669856cc6340bf0caf90bbceb75666062fac1bc02ca2d2cff94c6ca5627ccaece6f973a65
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\uk.pakFilesize
634KB
MD50d9b7f3ce815f7bcfd63ee3492350d52
SHA16138b5dc296cf406b2314b8b797f9f96de2b40fb
SHA256b86358579a9cec015c996c6ae862ddcb8cb558f30eedd0d0b9ef3cb18c3cc130
SHA51217d874849e5eb17bff2ac98c8191f9f38a07a66eccc502122c0ed2bdd6af94eb17db1b0a2477a75c1fd4f3ed00c76b1818eac5bc4093d92eca0d0a5323718cc0
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\ur.pakFilesize
552KB
MD56733dba4f3f0afeffc40bd87300b9d6e
SHA1610aab026d25f2cec6c636fbaee922c099d26ef2
SHA256d0c8ae8f4f60f04d4eee8cc639ee3b52ad073f5c9ee6fb84c774eb855fd51e9c
SHA51240c1cb7be3709bb6ef01a4e66bfd85e20641020a800292a2a14f4cf188242aa0b8d42cabd0f323acd3d2f257243c7dc04b346a39475343c761af7a1833c3366a
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\vi.pakFilesize
439KB
MD55b8fc875f0b57ac7793e19e0ac6f4899
SHA1b8ec064365fc29a70bc3a8d3df0ef222ed244fa8
SHA256ff3cdd834569cf9f957a444ab8a51ebe673bd26d7c907a907aedfeed248d4890
SHA512f3a9ad912823aaae0d089cf53151cfba0b6fbc2cebf826b1b7c70fec03bf3f967e440558fef94c990c87349b82c36379bf645b828ab6b69eb9f396165dd6178d
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\zh-CN.pakFilesize
319KB
MD537b051269289e0eaafd411d374663135
SHA1fa94bc7fe89475f1d5e1c9a2d88161cc992a638b
SHA2564ff334da089d2ffb9c6173de7c918b74c9326ed7bd76317b2696d57861871488
SHA512357350ec552765df460cd66ae59ebcc771df72431baa380247750627ee974f1859bfa423461a2197d4e608063d021faa7fc94bd30c6fe2b1a0cf9b9f7e64ea73
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\locales\zh-TW.pakFilesize
316KB
MD5032c4f24764d531d0de876f1e9d51dc9
SHA16662a5e3466c1ca415e219634cd67863ff830b32
SHA256a0a715a3ef1ead036f0f03d02a8252fbdbd52ce6f8cc5b9298fc1c4494d4e508
SHA5123cf212a638cfe9d08e625f7f70d453263e44721be9550c2aebfb67462666a8d67b87cd2ed613cc12c7d1fc7d1c1368c7d198a6669fa3a10c2c2bf61966c46aff
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\owutility.dllFilesize
1.4MB
MD50b72a72b76b71076c78773802495d377
SHA1921101f1342c180677c4bfc7006baf3292a77f9a
SHA256c127bd152b674d35a7c5a65cc933c385d64622ae2ea09b7194c1de7bdda1c690
SHA51228afe1b4982e31784393182a06925b6758a19436eba28f89dedc2a380845939d31e947ef676fe8e34f382c7ae28fa88078380df9e83ba9ce7d7c1e9df96a952c
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\resources.pakFilesize
5.1MB
MD5e5ed3ea494b9ddec4b6aedc45ef172ba
SHA1bd7ff0e1c817f4eeeae0421b6e9d107584d35c30
SHA2563dfde11380615c1204b026f94e39ac503f1785d4b967e40d5384bd092c4f0c74
SHA5122da9c70fa89a91525661d346cdc67d51772b3be38dee15727fea77f83cc545a621dc43c6dd01e8425072335cc11591daeb92a0acba134918094676cf6b00cb82
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\resources\app-update.ymlFilesize
99B
MD5172ba00d700bac5ac3bd88062e52a9c3
SHA192a83cfcacb5bd11924a0413546a60e531424f36
SHA25638c8aad86e8a999394fbc565c58a53204971766c6e85550e2268063f9c662bdf
SHA512be7b82158e2feeecdf1e85060c2b315bfccdd1ce1e2ed1e97930aa563d013c52a81663939277f4d5cffd1d39498d3392f87de88f8064607bfc7197c00304225a
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\resources\app.asarFilesize
19.8MB
MD565b9679c5a22a83bcb18db581a50e3ed
SHA1a28fe9d22a5237f2f375ad02e2f59e8ee2dbb2a3
SHA256b600276028f5edc33ae4cc60f9c6840b527f099a65c590f7d6f54c2d431ce11d
SHA5123495c9b655ce0e646c3633e312ad23df665c2f77e99106669b3f057df1299e87db1f9314d48199f0de19df18598f346e4c3441375e920c84cfc62a214beabc39
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\resources\elevate.exeFilesize
105KB
MD5792b92c8ad13c46f27c7ced0810694df
SHA1d8d449b92de20a57df722df46435ba4553ecc802
SHA2569b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37
SHA5126c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\resources\libraries\java\PackXZExtract.jarFilesize
120KB
MD5cf8aa6c50804b3d2448b316b1cd24b17
SHA1a69190724b20156dd17504162fbe771309415b73
SHA256a847432bdf7da12571bbd5bda3b11ca3664675d1ff9baad5abd59b2d0689fa93
SHA512d897b843cf6d138885ffbcddcd53c84819bca0a1ac9de46334601d67fa9ba05d6b857b396a67b6f92e9f7745fce3f1a0402b76e4b31bd56d3cd36c339ac1e07c
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\resources\libraries\java\launcher.jarFilesize
3.9MB
MD59a5abfabdd49abbde1fed4ba49a6f448
SHA101114924703c564dd23cfd40aefabef383a73d88
SHA2567ad63334d0e7ed08b7a24f80bf8c0e7485b382363e2ed3abf70d1be7a9856553
SHA5126bc043e0a3daa16bc0f3fd8e169bc2593178702e83c9330da07116c00b024327a49f73cad803149bba93c24c32c1d84c513087e67010c5fe8e781aa2e4c2eb65
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\snapshot_blob.binFilesize
168KB
MD5b82ff216a0babf602940759b9a3af870
SHA107e8a22dcf8d7be04a6ddbcab3098e040494bb0e
SHA256943b27009d41801c5a649caf680e32d4dd25de002787a4ccd86b0925b3aac3a5
SHA512da157570afbab7be135f7749df7f4518df1452ea24f98d8f5189430e732ad06ed438afc701cb70451bbc7137b5f35a0c5957df92ecb40d47d54c1071ea79fba1
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\v8_context_snapshot.binFilesize
471KB
MD5031ea03da08fe1247280cfe781658791
SHA1e91db50ad16b5a5fbbaf4118672d60b347ea6161
SHA256c16dcec41919a6d2850214f2275824be8a97d8c5e694e2ec8dd7d16ab2d5015c
SHA512b3d6f282761f8ab8760728ecb108f64741f6f3cd2a143813042ff63a3b6604fcfe7c1feabafb65f9f67906217edb5851f44605a34f7a50ed2058c25ce5efb30a
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\vk_swiftshader.dllFilesize
4.9MB
MD5054c57ca1e444b9ba8262835e0cc947a
SHA1c20b1ae7ec7315187051e7a46e14359f9d12b709
SHA256011fc0f126868903dac9fecaa948eeffbc43aea2244cda071f69da08dc2f110e
SHA5129d7854a681c4abffb95f17b0ec81ee21dc36c482fdd6dfdc8cc7296ca19e7193e7e2ef4ad71d28304cfbb94d96065ba53139d4042c31edf64897e9105ca5e360
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\vk_swiftshader_icd.jsonFilesize
106B
MD58642dd3a87e2de6e991fae08458e302b
SHA19c06735c31cec00600fd763a92f8112d085bd12a
SHA25632d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9
SHA512f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\7z-out\vulkan-1.dllFilesize
894KB
MD5b139ce07e2d87e65cb101f3ca90f5511
SHA151516e2fc7aa3532a76795cbfc318da19e3e2d54
SHA256c94823faa547813d388b41f72a791fcd2f36665c444ca88475d69ab7f1e9c3cb
SHA5128eba17cd8e70377083509a4c5316b6b784c613e4248001a6c61f2d26acccb5fac1ab45b491c84a05f93a772576e203b514109e8f17cfc593d08104f1746b3a1d
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\StdUtils.dllFilesize
100KB
MD5c6a6e03f77c313b267498515488c5740
SHA13d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA256b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
SHA5129870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\StdUtils.dllFilesize
100KB
MD5c6a6e03f77c313b267498515488c5740
SHA13d49fc2784b9450962ed6b82b46e9c3c957d7c15
SHA256b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e
SHA5129870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\System.dllFilesize
12KB
MD50d7ad4f45dc6f5aa87f606d0331c6901
SHA148df0911f0484cbe2a8cdd5362140b63c41ee457
SHA2563eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
SHA512c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\System.dllFilesize
12KB
MD50d7ad4f45dc6f5aa87f606d0331c6901
SHA148df0911f0484cbe2a8cdd5362140b63c41ee457
SHA2563eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca
SHA512c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\UAC.dllFilesize
14KB
MD5adb29e6b186daa765dc750128649b63d
SHA1160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA2562f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
SHA512b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\UAC.dllFilesize
14KB
MD5adb29e6b186daa765dc750128649b63d
SHA1160cbdc4cb0ac2c142d361df138c537aa7e708c9
SHA2562f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08
SHA512b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\WinShell.dllFilesize
3KB
MD51cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA10b9519763be6625bd5abce175dcc59c96d100d4c
SHA2569be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
SHA5127acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\WinShell.dllFilesize
3KB
MD51cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA10b9519763be6625bd5abce175dcc59c96d100d4c
SHA2569be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
SHA5127acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\WinShell.dllFilesize
3KB
MD51cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA10b9519763be6625bd5abce175dcc59c96d100d4c
SHA2569be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
SHA5127acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\WinShell.dllFilesize
3KB
MD51cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA10b9519763be6625bd5abce175dcc59c96d100d4c
SHA2569be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
SHA5127acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\WinShell.dllFilesize
3KB
MD51cc7c37b7e0c8cd8bf04b6cc283e1e56
SHA10b9519763be6625bd5abce175dcc59c96d100d4c
SHA2569be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6
SHA5127acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\nsDialogs.dllFilesize
9KB
MD5466179e1c8ee8a1ff5e4427dbb6c4a01
SHA1eb607467009074278e4bd50c7eab400e95ae48f7
SHA2561e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
SHA5127508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\nsDialogs.dllFilesize
9KB
MD5466179e1c8ee8a1ff5e4427dbb6c4a01
SHA1eb607467009074278e4bd50c7eab400e95ae48f7
SHA2561e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172
SHA5127508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\nsExec.dllFilesize
6KB
MD5ec0504e6b8a11d5aad43b296beeb84b2
SHA191b5ce085130c8c7194d66b2439ec9e1c206497c
SHA2565d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
SHA5123f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\nsExec.dllFilesize
6KB
MD5ec0504e6b8a11d5aad43b296beeb84b2
SHA191b5ce085130c8c7194d66b2439ec9e1c206497c
SHA2565d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962
SHA5123f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\nsis7z.dllFilesize
424KB
MD580e44ce4895304c6a3a831310fbf8cd0
SHA136bd49ae21c460be5753a904b4501f1abca53508
SHA256b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
SHA512c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
-
C:\Users\Admin\AppData\Local\Temp\nsi8487.tmp\nsis7z.dllFilesize
424KB
MD580e44ce4895304c6a3a831310fbf8cd0
SHA136bd49ae21c460be5753a904b4501f1abca53508
SHA256b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592
SHA512c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df
-
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dicFilesize
2B
MD5f3b25701fe362ec84616a93a45ce9998
SHA1d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA51298c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
-
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dicFilesize
2B
MD5f3b25701fe362ec84616a93a45ce9998
SHA1d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA51298c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
-
C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.excFilesize
2B
MD5f3b25701fe362ec84616a93a45ce9998
SHA1d62636d8caec13f04e28442a0a6fa1afeb024bbb
SHA256b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209
SHA51298c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Cache\Cache_Data\data_0Filesize
44KB
MD59d1719e47ed25186a71759b792b77e8a
SHA16cf209c5d0eec980d7cac8ff8d623fbb6adb6419
SHA256dbc2652a636a4b01d6d54feb97e865a9f9ebd5e1678fd6c4933868f5cf8e29ad
SHA512018829b317c5f38c6a6f2d853ea0d6f1a436056187e9782128052de4edb8ab0edefa01875108eda225deaaa80ab29e433ef39a77bc27b38988b48ea803a5d0c5
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Cache\Cache_Data\data_1Filesize
264KB
MD5cb2e1e4c285b7003edc5db42edfd2541
SHA1d8d4cada8d814f2a079f06d146b311eba2927bdc
SHA256a237f9a0d703add6d050363be4a167bc414a18e1e3c63565e86207eaa4115e79
SHA5129413230746c1048cf22186d44e79fe8eb71b1d12c07766476facaf611c21782891098e0678ea7d676cd02d47c56cc45326cd3dd5ff1028531829b0f2b42a5d53
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Cache\Cache_Data\data_2Filesize
8KB
MD50962291d6d367570bee5454721c17e11
SHA159d10a893ef321a706a9255176761366115bedcb
SHA256ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Cache\Cache_Data\data_3Filesize
8KB
MD541876349cb12d6db992f1309f22df3f0
SHA15cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Cache\Cache_Data\indexFilesize
256KB
MD52b94f80352b8288c414ece32d6465742
SHA1978fc90315b73ad66201cb8db56c3c9545803764
SHA25630b41c26245c36eae9e525fef51aea9dd566b668dba9b6a92df3011bb30a91e9
SHA51276a4bf94236ff4848156b0001d6b1f30d9600b6c372a29264d66b942ba9ba57af120bed9460a380fb415c9f7955dad44dea20aee382548e67796808d30e41792
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Code Cache\js\indexFilesize
24B
MD554cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Code Cache\js\index-dir\temp-indexFilesize
960B
MD570eba1fd35c6a67ceac267e7163635c1
SHA19e008258f7a098f1896361b1df0d1e1420e7ab38
SHA2561ded2c33c72dcc59a555e893f4d1be48fa15409af99880fe08ab8fbcb767d2fe
SHA512d716add4081c62ef68ea077ac170025bdda198c7bde68271946057eb1daa921c97b75e2952c5a516d77812fa1b96c99b870cc25e9ef7e1e5727e02935ce7a574
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Code Cache\js\index-dir\the-real-indexFilesize
120B
MD50407d1cbafb6db679b446e33edd357e0
SHA1c4ebbcf131d411231140962839e86ac4aad5e6c1
SHA256919d5f7e1739d473d8d56d08307f5637668a59e2ea137efa6f8f6de64012bb9b
SHA512faca8b740c9edc0b3fd3e9248eff71d8897dd0dfa7e758b8ea41856860c1de83a6a18565eb6cd52b601e6856be7bffc513b03c5e538e1b1ab74c71384ac28035
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Code Cache\js\index-dir\the-real-indexFilesize
1KB
MD593c5d145689652ed9e2df164d0be3133
SHA1ea04f983ab00da9b29fe2bf290fa0a96b948f496
SHA256dada153a39b5e266bae6fd62bb1564096897c400b98cbf17cb9babac91d5d9f0
SHA512b8d10e46b62903c21baa289170976ed175ea906ba3d271e4023b65fbcf9006f611a3af3484a20fb40f6f1691998c71c559c254db7933ec4ff3e358e4099fd150
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Code Cache\js\index-dir\the-real-indexFilesize
48B
MD5e1aea5debf537d13b1c0f355e84b2c6b
SHA116b893507085ffe1b726c57b5a1f843d07e09ae2
SHA25665d8331408d60754c1f777f78c699bb99f95003d6061c50b7441437cf891ef97
SHA512d3526d78eb21f53d9ecdc314fa94f11a23d115775bb7449500dd7a23f34582f27a5d6c22b0fa8f552c133d251c3dfae683884660cfe16a9761b8110d126d31f4
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Code Cache\js\index-dir\the-real-indexFilesize
72B
MD59d62b43778296aa873555a6b8d4765fa
SHA13ac9378977a4abdf5de5b1feb6c466edd112fb21
SHA2561f9c601601d13a633fc97a9cda3786040be77ea92383d4a851393cd57f83e83a
SHA51257f4e57afd5e8c18f86fd8c50e9b2328f380e4bba6ca42e1ee590afbafac7d6d59f3e6618c4c9e5fb46f6263ab68a02947b1eab9c9a82b9579d9d7a73a4c5a0e
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Code Cache\js\index-dir\the-real-indexFilesize
72B
MD51fa0ec40f508cd4957b4ae994d172011
SHA1de4e23df3ae02225fe9f27cab0b6f79642976ce1
SHA256413c2239b54e0871671cb41d5981b91e5d5be98e0c03580354a0f433bfbb3fb9
SHA5128c1803aed9de4fa7c1591e34a941c6878e64eb8b385fd1004b7184633bd91caa3ecb5f4a32c0acfc229beba5664d4459fe65061a743e0f4c7f982a8fe593eddb
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Code Cache\js\index-dir\the-real-indexFilesize
864B
MD511c8b7d631ad5d578109479251a4a1d9
SHA19f34561454e49d77d7cbbb1a7c91d552c65f9d74
SHA25609644195b0cb2ad5f6d0314d956083e051c1184cd412ee1a1af0d1802767aab3
SHA51261915d982d33381c78b6b675026617aa93e47627b3f0042b72960e6d28abb0b4d0155bae7c288d843595378ef678231e0cca4f2e6b820a86b2d52d93ea47a5d1
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Code Cache\wasm\indexFilesize
24B
MD554cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Code Cache\wasm\index-dir\the-real-indexFilesize
48B
MD5e1aea5debf537d13b1c0f355e84b2c6b
SHA116b893507085ffe1b726c57b5a1f843d07e09ae2
SHA25665d8331408d60754c1f777f78c699bb99f95003d6061c50b7441437cf891ef97
SHA512d3526d78eb21f53d9ecdc314fa94f11a23d115775bb7449500dd7a23f34582f27a5d6c22b0fa8f552c133d251c3dfae683884660cfe16a9761b8110d126d31f4
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\GPUCache\data_0Filesize
8KB
MD5cf89d16bb9107c631daabf0c0ee58efb
SHA13ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b
SHA256d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e
SHA5128cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\GPUCache\data_1Filesize
264KB
MD51407a937308a0a8714f221548b2896a7
SHA187872fd0344bc2bd994b40f71f8d68a1ca0d4b25
SHA256f8d1ab48d246c3337e474c5106bfa441109af37b798c7d4539df3f0a4a6b12bb
SHA512c80414dd2ef65dcf046d95aba37ddfcd3c4552ebe120a22edf4ce850e2fa6abadcce93653e2b4484c0cb745527899b6c69d4494ddcd7e9b7b90ad4c429ee8610
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\GPUCache\data_2Filesize
8KB
MD50962291d6d367570bee5454721c17e11
SHA159d10a893ef321a706a9255176761366115bedcb
SHA256ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7
SHA512f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\GPUCache\data_3Filesize
8KB
MD541876349cb12d6db992f1309f22df3f0
SHA15cf26b3420fc0302cd0a71e8d029739b8765be27
SHA256e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c
SHA512e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Local StateFilesize
389B
MD5bf6648e972387a453ebc94650d5861e9
SHA1fd4294c6fe8e1f8d29cbc0ca35bb0d9ad37fddb2
SHA2562ca280a3877ea7b99c48073706e72210c8e827e03e4d7cc098e6fab90f265db1
SHA512b6529bd8bfbea562eaf67fafef4791929608a94f1118ede0675c2b72beb3febb75b957cf6a3a781edd403c3a04b4f4332386dd0b1e32ada1b4346fa31d78eb57
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Local Storage\leveldb\MANIFEST-000001Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\09f908cc-50db-446d-8aea-535b330cc028.tmpFilesize
4KB
MD5eee66b65ba2b6074f94404df00205c45
SHA1ad95573f46d30909761ff39fab4df95449c0071f
SHA256807966a3ff6c209015dd5c67448a381d3252e6395ac5c9952187b463f0252d54
SHA51252f07915d3ae24407a3b59256a069116159d6aeef4dc1a6e5195ac72299dfedb29d566faa692cd7aa49c4ecf8847b0b55f6457c072a16f6fa7642d213fd9e394
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\31c30efa-9ee8-4edf-b503-a7407def949c.tmpFilesize
4KB
MD57d3dc892a3156ae0142c060d2161d9af
SHA12a75312bae3a02f14a16ae466b47075c947194eb
SHA2561625fd7ffc3885fe00738fb50dd9752562e8e5b10067784caa8fd14b61eba14a
SHA512a62d260042a650ec3f129245eb233cf04ebd3d1b79502c9c249537dd7c76a48bb592f6ba5ade9285de0a9807a42e5a3f8f215f8357f1f274f8ddc00cecbf32bd
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\43d1b6d7-02a1-4fc3-a0f9-fabe7a24763c.tmpFilesize
59B
MD52800881c775077e1c4b6e06bf4676de4
SHA12873631068c8b3b9495638c865915be822442c8b
SHA256226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974
SHA512e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\77cf40d5-f045-4129-bc82-1e87e2bf0723.tmpFilesize
2KB
MD55b28036ed7ee2b959047b213e90bbdfb
SHA110b0e763fed8edd4910fd938748c891fa08c45b7
SHA256bc6795a333f66e23c73faa27f07404e799abbd9156479fd43d2e49695d5a2564
SHA512099576bc60ec25fb93107d5e8b716fbaef31c27db997b2d4a5d5a0c489bbb0012bb439280bb2796964e96f0de8e31670e02b23bac0c300cc10ee91c8fe54797e
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\CookiesFilesize
28KB
MD53ddd3c668e70e0003ed989fb4ea449fe
SHA1959d6c3047fb294c51bdb5136d560c9698a89b13
SHA256950488c22e6616e5732fcd0b4b4363138f97bc01ef39f7eaebbb4fc3c03d0218
SHA512ecc7c00d592fa4b62ba8c6202f2e01dd8aec040251f0e124d46e3226562961e7b56fea08e5868c8e901fc7701915a398ac2dc7b020ab94f982c79d4eb9a098b3
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\CookiesFilesize
28KB
MD523dab541ffb232985d369919f63564a1
SHA1a6b5b329d594ee485755026972fbad36aa742c8a
SHA256abc56376bc5978fbd3645bdfa59ffefd9b93239d6d62b43ed0d51f9727dd3b8e
SHA512d0bf8b473f12c7e3983d8bd359b07551c95e96280b06086a67dd75a56d5b5d4dcb27c90af86ed7cbba2444b70b6087c6e0e400667c46f43a0902407abdf1d51e
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\Cookies-journalMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\Network Persistent StateFilesize
11KB
MD5d27774bb8779e14302d8883b47b0d67d
SHA172cd03927fa0f9e9117889dd66b79fdfd33e5bd4
SHA256d15ac6534a7d70819685c031f14afc501eb37aebf6b5a7df1b8782383d3cc3c3
SHA51204c3b78459b2fd941d5732da3cdd5476eb37032e80e68e5c4143a8e9512b12ce017c735c037fc9a4359d4f6134c0f1182219458e3687db8c8234fb63d3ee8525
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\Network Persistent StateFilesize
11KB
MD58e64687cf930507543780b580cec5e85
SHA1e779cb41ba0baae41d185f0e9e5d127edff2bc8c
SHA256dd7266ddda0c634a7bd1cca262623fcf9448ec5d1b3d6f95a4abf2158f5d8eb7
SHA512f644d684254408ca372fc18e7a1bc4596655e9489d3f01023c301e4242d6689bad8b1f0e712d828c9973737ee7149d29a8a1e27694b761a8339a7657e5b73416
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\Network Persistent StateFilesize
978B
MD5ab2bbc88d1914487a80ab63a339a8ec1
SHA1d35c0e28dcb3f14dfa23c0ea5d9678deef3a4e60
SHA2561e6e3da9f4dfb762fe69550357372a9b2176d57cdd95ebb60926bccb08314def
SHA5122a5ff3d030e04618b8982b9ebbfc29cd7d5921625583dfd7e1c8d5d157bd59f5b120ec388f6a3e9f0ca25f556b84b9f7e5b0fab021d0e56ad40a7c2d5e7de524
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\Network Persistent StateFilesize
10KB
MD5389f3c2e055df5d79b8394dfc9d7d257
SHA14f7aec03feaa09d5dfa9fc1a3bdd6cbea0f8028e
SHA256c4cc077dc75b4f23913b85760f24bb19b16a55bd9b7928010b33ca8524b24af8
SHA512ae4c3e86b389360bc8fc73cb728b695302880b926b01e6f08e6f280d6bae2805c0d026b64aab98f273fca4ed01decf0cec35186fd07dbed6c2e92ce74c1f87e4
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\Network Persistent StateFilesize
6KB
MD57b9398e740c3d58d98a4061c633ff817
SHA113515221a83b2ba048ee7de1d970313e4d593985
SHA256d7e98dc758512e357f830722f3ac474de0e8b5f08e0c5902c2a783d268e4a603
SHA512119d6828b036510117a54e680dbbcbfef578c4fb7e973aa81ad20ce7b96a91228cb77488ef2bf42db7340ea3585619fc14bcca2252fd8e327265696155d3b1fb
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\Network Persistent StateFilesize
10KB
MD58631e9ab3ea58434174003b0d0b29753
SHA1a0f2ac3614580cf6afd709e796bd8524d48886a9
SHA256f84134ebc13c33396675dd7ad23eca385f90983b9d0752cda368f85cc4a18d29
SHA512e06a47601488994328e53eace1fad501b6dd8de8d17923169f79108db87f99de4f48bd29f36c41d77d7270b6b358bd3836c74ef71e3c96a2482fbb6d612a523f
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\Network Persistent StateFilesize
978B
MD563247d12b86ab72d2f1292504c5404ed
SHA140d4a415ae2f53e2866484246be6912073647f45
SHA2560d44a487c886e1a2f9e530c8a513aacd5cf55318c2c8e8b848640bd91e7c94ed
SHA512fdfc212d6c782b69670b7b81ebc6adcbcd849ba03ed81dc9ad362cb2e01687d8bd7420231b0d29e8415e4ff58f0720f44989e888f4fdd041ca793c86dab3b8e9
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\TransportSecurityFilesize
4KB
MD59e04c6c7e6051208be50e8e955327772
SHA18b5522bdabecfc93e366e9b13008edfaf12b6fd5
SHA2565c3d9d6c39816df8f1f6bab8be9cdf6c39b95b90fa4500000254f2c818dd37f5
SHA5121e5a4d4962531a7f5e0c9a7ff89a5e3e52139cbdf393557093ed972267f49be01bf07b7b00450690298e2f76e07fb0dff2fa33819ea6383f88acb2db98caa93d
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\TransportSecurityFilesize
368B
MD53ae392178dab6b0e5af19046fc87b8e1
SHA12896e1261d490967c9dc228c9b32e7876a12e17e
SHA2566620345aa38b75445f47f5ead0e6102dc0358e0f18950fdba736f2c554e76568
SHA5121b9d7f3ecd5a6e03cb832c88ee6bdbb92594b9fecd733d703a6bb28a5991f82ee524e721b4a744ed462385d114708c5eb95a255866af9f032ff9191bfb5822f7
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\TransportSecurityFilesize
4KB
MD51ee28969d7c4441fb3a78e8661da393b
SHA1d44a7c087a8f96edc8ac6e751c49aa3c0caa7759
SHA2568bd5ea8740bab0aba433ef9c7f274b6d5b1be2799e23e228717df02a3ed849d2
SHA5121ebda90741cc2577c16bd817bcc6ae5954ce22da33a78d191b08f1f4991d7fdad6f7bb88977d645b892f7cfaadf8a57b33066afb7adc35fbc4f02edb91fddb3d
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\TransportSecurityFilesize
704B
MD55d0d956df7abdf801b6537f6abeffe80
SHA1f60052ecddedf37e735f3d87c8276e0b7cb5d59f
SHA256145e9d8d84d8a84fb83999df5e279ef3f29d28e8813d862e69ad0e3efd1de4df
SHA5129fe8d5f7a4991614a35359c603ff4b0df46d4dc1deed5975493dc147ac761ecf2c6d3016a79df0aff16cbab8c1a4b77ca7c95ad187e04dad77c4486a02817488
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\TransportSecurityFilesize
370B
MD5bb2f743c5fd474e0770027fbbfc36efb
SHA1cd7895776a83410070668a2f59f4fc39bc3e3892
SHA256819ca702bfd2cd253bb59cc33a05975b2d8245755207b2260404bbe314c53c1c
SHA51220ef14a7fc2e84176331634de674cd3ce06b3e58d3bd0f7a217b1ce09de16a921102318d45295a87ca09f71e942ffee8e80639f72b097c1622d7639d2a94a815
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\TransportSecurityFilesize
4KB
MD5aa5dad8dec4ba2071098a083562415bd
SHA1c40bbe5e984816911c1f3dadf4ac78828a0a6aae
SHA2562de3ba9f94cde3cbc4d6c29143fd79053dd67db2b8dcad35d15c8a6d33e8dc83
SHA512fbcb030fc5bcd8d04715544ebc4c47abfe01f0ff5e486b90cda39ace4ffdb06f1cf3442c26164c7da1bbb8fe92fbc5909f5c07a2770947b5bffcb994f7ea374c
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\TransportSecurityFilesize
370B
MD5fc0f181b0c0595364d57385b12dcf04c
SHA11c43eaf58dffd8231611ef43798e22bdbaeadeff
SHA25648b5e504dcdf170559c353c7e40ad34586f9f749efddd04fca2cd6e546e83014
SHA51280b5ec5b41688e80e6e5f2623a9c3debf19baad4ddeef0a1daa40930410da7e2ae4b9ce3272496f613c2678a31be2ee951ec8c9273377375059ee277e8512a06
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\TransportSecurityFilesize
1KB
MD50c67d0da050b75744b50f569015eaff9
SHA1958172aff1a7d4d9b3f980b35f11b4ef77617d88
SHA2567c13661061030ce05128f1fafa5f3c082ebaff55dff79ee5550f1072399970ae
SHA512bbf93cf1c74c5da3b6f6ad28a5c223f7569476c0ade2f29313152c8942fbe88bd664cf8e0b7513cbd34736923eef04ba160e9e58e23d8c655554a7db5c8616a8
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\TransportSecurityFilesize
1KB
MD53435d1ec5486ad07f342b3e4cb9db64f
SHA179a460b614777f5e93c8c7e12459152e83e48062
SHA25665a3f9d09e01e051a2c9d065fcf24f47799fc6cdf1baca841b4addecb95675f8
SHA512f765c9db30a901a706b65256bece14dbaeffd3a61461ce7178724175454167961585fd34257d59666a82caa37537ee305a13e236b22336c6c1aa05412c230981
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\TransportSecurityFilesize
4KB
MD5b57c37e2ad6faadf2a69e308d4e8738f
SHA126c2b120b447e9f27b794981d800eddd5be5fb52
SHA256726f4c9c1549a0fef77d8daf6fb978ffdd2a1d07ef532128b56901b234a8cdfa
SHA512caba0fbde134f29cb39da5f232eb4a57b2cfb498b573181e4e5181dfbd89412880a06e636f9b245cfedbaec4ffb2eb32a9bed575acae1bf749af2118e3466db1
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\TransportSecurityFilesize
4KB
MD55ead62f594caca1cf4deb9984879dc4e
SHA1c16c41f0c244588d50dc6827add981e522a22aa1
SHA256b841c4a95df4b047b3304d1063826e1dfa7d5dafc462b676755016c5eb64983c
SHA512149ef42a999bac7349cfbad9dd2c1b5657091b9b96e3b7605717fc9aeac6f3e4b655183ca6360f9114c5193dcc95480ebc0c5590fa38d879c7565713f71176f3
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\TransportSecurityFilesize
4KB
MD5b8b305fc5f969e1e275292d594d8d59e
SHA19d423c41e106526683dd8afb09db777f0d5744b2
SHA2567526717ebca281f1cc849db798da36702cc4010f5b56b5f1e24e574f2e8850a1
SHA512e1c1c55a8eb39391d520e209ffe14fbebb4515bd96bccd32ab158b3b01a6915564713f722313958b1bfaf5931f60a8be9abe1a676a9e850b8b9bb97396d176c3
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\a9a7b715-4d30-4f4d-a411-c1f5864ecb33.tmpFilesize
4KB
MD526119884ea5c2b410057adb1f7a8e194
SHA1c06e2725d9f1a3f76dd7589009f987c68aca2fc1
SHA256758c49277630fdad6f86b6aacd95cca7e10b7bc961ed4e569d65f284f8bb4398
SHA512cd0017f28830061e2ea5f1fe5c732b25f16b3a2fead9a44db527dc7b638bf4b8f3b1d7e691c8235e076f90e2e7d7ce4b3860b21692b9bef40c62b7e3fd736ffe
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Network\f757b00d-3692-4425-8125-b0cdab6465bc.tmpFilesize
11KB
MD5f7e51119724ebeb13ea5def223204771
SHA1e11a12b2572d2eaa0bcf8408ac29072da14a235b
SHA2562f3ecdbba14789dfe80177f0855200b06e4b14964d41caea7a4e0d0a52438f1b
SHA5129fa0b445d12083e62907a60204f4a9355597b432818afc6fdaccd1655dbac01c7c64885831ae66d7c859e0605627caa8805ef7f6c6fdee4a92e9fe52c7e5d5d0
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\PreferencesFilesize
86B
MD5d11dedf80b85d8d9be3fec6bb292f64b
SHA1aab8783454819cd66ddf7871e887abdba138aef3
SHA2568029940de92ae596278912bbbd6387d65f4e849d3c136287a1233f525d189c67
SHA5126b7ec1ca5189124e0d136f561ca7f12a4653633e2d9452d290e658dfe545acf6600cc9496794757a43f95c91705e9549ef681d4cc9e035738b03a18bdc2e25f0
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\Session Storage\CURRENTFilesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
C:\Users\Admin\AppData\Roaming\Salwyrr Launcher\config.jsonFilesize
140B
MD52dee85ac19aebaa50662a4ba424441af
SHA1d0b03e28e9a14d48a1a9b206e92dc1bf1266328e
SHA256dc4d87159e452383f6e39c1b7dd2830c69457a547565c43cfd9e9b86f336f336
SHA512651d95e57716081376c14c26852e01997c77597da0e0350620ad4cadbf14f0a02956d7b3e8cbdf52a777b64f7ef7db63066791e24074d5e5b57a38af2b7c6a6e
-
C:\Users\Admin\AppData\Roaming\ow-electron\ehdhabenpndnlfhfchfacfmnkhmnmigdjjlkeimc\ow-electron.jsonFilesize
20B
MD5de93512630deff8901388cee77ead550
SHA19e626a31eb87df5975342997d09d1fcc2f0e8bc1
SHA2560a509ef7076fad8b251614fc3bcc7b73bc893a7cac19c5fb6537d70ab576bd4b
SHA51209e52ee4c5cecb43ca98f5883b1359949a44d9db2b2ae4c70989f71214d36624692bc6a3bef274fde14535deb250d9d6345ea0ae44b41157a9c7af1f3380d38a
-
memory/1420-1206-0x0000019789BB0000-0x0000019789F05000-memory.dmpFilesize
3.3MB
-
memory/1492-1099-0x0000015EBA7A0000-0x0000015EBAAF5000-memory.dmpFilesize
3.3MB
-
memory/1888-1105-0x000001CE69B80000-0x000001CE69ED5000-memory.dmpFilesize
3.3MB
-
memory/2184-1205-0x0000021BC6080000-0x0000021BC63D5000-memory.dmpFilesize
3.3MB
-
memory/3428-1083-0x00007FF86C0C0000-0x00007FF86C0C1000-memory.dmpFilesize
4KB
-
memory/3428-1098-0x000001B308940000-0x000001B308C95000-memory.dmpFilesize
3.3MB
-
memory/3428-1047-0x00007FF86C230000-0x00007FF86C231000-memory.dmpFilesize
4KB
-
memory/4368-956-0x00007FF86BBB0000-0x00007FF86BBB1000-memory.dmpFilesize
4KB
-
memory/4368-1089-0x00000295517C0000-0x0000029551B15000-memory.dmpFilesize
3.3MB
-
memory/4504-1142-0x000002232CBB0000-0x000002232CF05000-memory.dmpFilesize
3.3MB
-
memory/4864-1152-0x000002458E470000-0x000002458E7C5000-memory.dmpFilesize
3.3MB