Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Resubmissions

18/04/2023, 20:38 UTC

230418-zezheafh7w 7

03/04/2023, 18:01 UTC

230403-wlzvzaaa9t 7

03/04/2023, 17:41 UTC

230403-v9jyzsgb85 7

02/04/2023, 22:37 UTC

230402-2j33haba52 7

02/04/2023, 22:01 UTC

230402-1xkyeacb9t 7

Analysis

  • max time kernel
    301s
  • max time network
    303s
  • platform
    windows10-1703_x64
  • resource
    win10-20230220-en
  • resource tags

    arch:x64arch:x86image:win10-20230220-enlocale:en-usos:windows10-1703-x64system
  • submitted
    03/04/2023, 17:41 UTC

General

  • Target

    RonaWindSetup.exe

  • Size

    67.6MB

  • MD5

    d68dc63c71466ab7473b8452773ee381

  • SHA1

    e2b62184339c066f3958975e8d7e9c02f6185dec

  • SHA256

    485c10e2cdfb12719af452698a0dfc4ccc77a5fa875fe9ded9458d50493b657d

  • SHA512

    83ef1e09a2b5d859047ec92f275176a24b281febe34adf133066e9c508cb9b406fe0d50d04df0ee4dd146bd1ec28be1a3d3c931856ec641a1c290d08f018efb3

  • SSDEEP

    1572864:/kn/bfPa1o9Yl/7JJ7Ko7bFZg6+Nk8YQMKRI+FMKNpBVPjIUyY/X:/KbK1o9YjJuyFZ9+mmRKK/bhVv

Score
7/10

Malware Config

Signatures

  • Executes dropped EXE 10 IoCs
  • Loads dropped DLL 29 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Enumerates processes with tasklist 1 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 12 IoCs
  • Suspicious behavior: GetForegroundWindowSpam 2 IoCs
  • Suspicious use of AdjustPrivilegeToken 64 IoCs
  • Suspicious use of FindShellTrayWindow 2 IoCs
  • Suspicious use of WriteProcessMemory 64 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\RonaWindSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\RonaWindSetup.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:1744
    • C:\Windows\SysWOW64\cmd.exe
      cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq RonaWind.exe" | %SYSTEMROOT%\System32\find.exe "RonaWind.exe"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:2372
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq RonaWind.exe"
        3⤵
        • Enumerates processes with tasklist
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:4300
      • C:\Windows\SysWOW64\find.exe
        C:\Windows\System32\find.exe "RonaWind.exe"
        3⤵
          PID:4256
    • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
      "C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe"
      1⤵
      • Executes dropped EXE
      • Loads dropped DLL
      • Suspicious use of AdjustPrivilegeToken
      • Suspicious use of WriteProcessMemory
      PID:4704
      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
        C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe C:\Users\Admin\AppData\Local\Programs\ronawind\resources\app.asar\src\inject.js
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of WriteProcessMemory
        PID:1036
        • C:\Windows\system32\tasklist.exe
          tasklist
          3⤵
          • Enumerates processes with tasklist
          • Suspicious use of AdjustPrivilegeToken
          PID:864
      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
        "C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\ronawind" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1408 --field-trial-handle=1632,i,16482907954927940360,18124939645502055399,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:1296
      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
        "C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\ronawind" --mojo-platform-channel-handle=1800 --field-trial-handle=1632,i,16482907954927940360,18124939645502055399,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        PID:3568
      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
        "C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --user-data-dir="C:\Users\Admin\AppData\Roaming\ronawind" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1404 --field-trial-handle=1632,i,16482907954927940360,18124939645502055399,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
        2⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious behavior: EnumeratesProcesses
        PID:2292
    • C:\Windows\System32\rundll32.exe
      C:\Windows\System32\rundll32.exe C:\Windows\System32\shell32.dll,SHCreateLocalServerRunDll {9aa46009-3ce0-458a-a354-715610a075e6} -Embedding
      1⤵
        PID:3876
      • C:\Program Files\7-Zip\7zFM.exe
        "C:\Program Files\7-Zip\7zFM.exe" "C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe"
        1⤵
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of FindShellTrayWindow
        PID:4336
      • C:\Program Files\7-Zip\7zG.exe
        "C:\Program Files\7-Zip\7zG.exe" h -scrcSHA256 -i#7zMap24431:122:7zEvent23287
        1⤵
        • Suspicious behavior: GetForegroundWindowSpam
        • Suspicious use of FindShellTrayWindow
        PID:4740
      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
        "C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe"
        1⤵
        • Executes dropped EXE
        • Loads dropped DLL
        • Suspicious use of WriteProcessMemory
        PID:4924
        • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
          C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe C:\Users\Admin\AppData\Local\Programs\ronawind\resources\app.asar\src\inject.js
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:4796
          • C:\Windows\system32\tasklist.exe
            tasklist
            3⤵
            • Enumerates processes with tasklist
            PID:2264
        • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
          "C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\ronawind" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1500 --field-trial-handle=1584,i,3638413287355526251,10566216201042901215,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:3224
        • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
          "C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\ronawind" --mojo-platform-channel-handle=1792 --field-trial-handle=1584,i,3638413287355526251,10566216201042901215,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          PID:2084
        • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
          "C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe" --type=gpu-process --disable-gpu-sandbox --use-gl=disabled --gpu-vendor-id=5140 --gpu-device-id=140 --gpu-sub-system-id=0 --gpu-revision=0 --gpu-driver-version=10.0.15063.0 --user-data-dir="C:\Users\Admin\AppData\Roaming\ronawind" --gpu-preferences=UAAAAAAAAADoAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAACQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1360 --field-trial-handle=1584,i,3638413287355526251,10566216201042901215,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          2⤵
          • Executes dropped EXE
          • Loads dropped DLL
          • Suspicious behavior: EnumeratesProcesses
          PID:2076

      Network

      • flag-us
        DNS
        dns.google
        RonaWind.exe
        Remote address:
        8.8.8.8:53
        Request
        dns.google
        IN A
        Response
        dns.google
        IN A
        100.100.45.3
      • flag-us
        DNS
        dns.google
        RonaWind.exe
        Remote address:
        8.8.8.8:53
        Request
        dns.google
        IN Unknown
        Response
        dns.google
        IN A
        100.102.42.48
      • flag-us
        DNS
        dns.google
        RonaWind.exe
        Remote address:
        8.8.8.8:53
        Request
        dns.google
        IN A
        Response
        dns.google
        IN A
        100.67.15.122
      • flag-us
        DNS
        dns.google
        RonaWind.exe
        Remote address:
        8.8.8.8:53
        Request
        dns.google
        IN Unknown
        Response
        dns.google
        IN A
        100.92.175.95
      • flag-us
        DNS
        3.45.100.100.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        3.45.100.100.in-addr.arpa
        IN PTR
        Response
        3.45.100.100.in-addr.arpa
        IN A
        100.116.128.16
      • flag-us
        DNS
        122.15.67.100.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        122.15.67.100.in-addr.arpa
        IN PTR
        Response
        122.15.67.100.in-addr.arpa
        IN A
        100.64.67.221
      • flag-us
        DNS
        api.deltaproject.dev
        RonaWind.exe
        Remote address:
        8.8.8.8:53
        Request
        api.deltaproject.dev
        IN A
        Response
        api.deltaproject.dev
        IN A
        100.108.97.105
      • flag-us
        DNS
        105.97.108.100.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        105.97.108.100.in-addr.arpa
        IN PTR
        Response
        105.97.108.100.in-addr.arpa
        IN A
        100.69.163.66
      • flag-us
        DNS
        26.61.127.100.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        26.61.127.100.in-addr.arpa
        IN PTR
        Response
        26.61.127.100.in-addr.arpa
        IN A
        100.113.183.217
      • flag-us
        DNS
        dns.google
        RonaWind.exe
        Remote address:
        8.8.8.8:53
        Request
        dns.google
        IN A
        Response
        dns.google
        IN A
        100.117.103.207
      • flag-us
        DNS
        dns.google
        RonaWind.exe
        Remote address:
        8.8.8.8:53
        Request
        dns.google
        IN Unknown
        Response
        dns.google
        IN A
        100.95.95.4
      • flag-us
        DNS
        dns.google
        RonaWind.exe
        Remote address:
        8.8.8.8:53
        Request
        dns.google
        IN A
        Response
        dns.google
        IN A
        100.92.98.238
      • flag-us
        DNS
        dns.google
        RonaWind.exe
        Remote address:
        8.8.8.8:53
        Request
        dns.google
        IN Unknown
        Response
        dns.google
        IN A
        100.113.206.106
      • flag-us
        DNS
        238.98.92.100.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        238.98.92.100.in-addr.arpa
        IN PTR
        Response
        238.98.92.100.in-addr.arpa
        IN A
        100.81.93.152
      • flag-us
        DNS
        207.103.117.100.in-addr.arpa
        Remote address:
        8.8.8.8:53
        Request
        207.103.117.100.in-addr.arpa
        IN PTR
        Response
        207.103.117.100.in-addr.arpa
        IN A
        100.78.74.99
      • 100.100.45.3:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.67.15.122:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.5kB
        6
        5
      • 100.67.15.122:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.5kB
        6
        5
      • 100.100.45.3:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.108.97.105:443
        api.deltaproject.dev
        tls
        RonaWind.exe
        489 B
        1.5kB
        5
        4
      • 100.100.45.3:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.67.15.122:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.67.15.122:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.100.45.3:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.100.45.3:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.67.15.122:443
        dns.google
        tls
        RonaWind.exe
        863 B
        1.6kB
        7
        6
      • 20.42.65.90:443
        322 B
        7
      • 100.67.15.122:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.100.45.3:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.100.45.3:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.67.15.122:443
        dns.google
        tls
        RonaWind.exe
        863 B
        1.6kB
        7
        6
      • 100.100.45.3:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.67.15.122:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.67.15.122:443
        dns.google
        tls
        RonaWind.exe
        863 B
        1.6kB
        7
        6
      • 100.100.45.3:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.67.15.122:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.100.45.3:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.67.15.122:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.100.45.3:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.108.97.105:443
        api.deltaproject.dev
        tls
        RonaWind.exe
        489 B
        1.5kB
        5
        4
      • 100.92.98.238:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.117.103.207:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.5kB
        6
        5
      • 100.92.98.238:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.5kB
        6
        5
      • 100.117.103.207:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.92.98.238:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.117.103.207:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.117.103.207:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.92.98.238:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.117.103.207:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.92.98.238:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.92.98.238:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.117.103.207:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.117.103.207:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.92.98.238:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.117.103.207:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.92.98.238:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.5kB
        6
        5
      • 100.67.15.122:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.117.103.207:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.92.98.238:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.100.45.3:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.117.103.207:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.92.98.238:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.117.103.207:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.92.98.238:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.67.15.122:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.100.45.3:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.117.103.207:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 100.92.98.238:443
        dns.google
        tls
        RonaWind.exe
        817 B
        1.6kB
        6
        6
      • 8.8.8.8:53
        dns.google
        dns
        RonaWind.exe
        56 B
        82 B
        1
        1

        DNS Request

        dns.google

        DNS Response

        100.100.45.3

      • 8.8.8.8:53
        dns.google
        dns
        RonaWind.exe
        56 B
        82 B
        1
        1

        DNS Request

        dns.google

        DNS Response

        100.102.42.48

      • 8.8.8.8:53
        dns.google
        dns
        RonaWind.exe
        56 B
        82 B
        1
        1

        DNS Request

        dns.google

        DNS Response

        100.67.15.122

      • 8.8.8.8:53
        dns.google
        dns
        RonaWind.exe
        56 B
        82 B
        1
        1

        DNS Request

        dns.google

        DNS Response

        100.92.175.95

      • 8.8.8.8:53
        3.45.100.100.in-addr.arpa
        dns
        71 B
        112 B
        1
        1

        DNS Request

        3.45.100.100.in-addr.arpa

        DNS Response

        100.116.128.16

      • 8.8.8.8:53
        122.15.67.100.in-addr.arpa
        dns
        72 B
        114 B
        1
        1

        DNS Request

        122.15.67.100.in-addr.arpa

        DNS Response

        100.64.67.221

      • 8.8.8.8:53
        api.deltaproject.dev
        dns
        RonaWind.exe
        66 B
        102 B
        1
        1

        DNS Request

        api.deltaproject.dev

        DNS Response

        100.108.97.105

      • 8.8.8.8:53
        105.97.108.100.in-addr.arpa
        dns
        73 B
        116 B
        1
        1

        DNS Request

        105.97.108.100.in-addr.arpa

        DNS Response

        100.69.163.66

      • 8.8.8.8:53
        26.61.127.100.in-addr.arpa
        dns
        72 B
        114 B
        1
        1

        DNS Request

        26.61.127.100.in-addr.arpa

        DNS Response

        100.113.183.217

      • 8.8.8.8:53
        dns.google
        dns
        RonaWind.exe
        56 B
        82 B
        1
        1

        DNS Request

        dns.google

        DNS Response

        100.117.103.207

      • 8.8.8.8:53
        dns.google
        dns
        RonaWind.exe
        56 B
        82 B
        1
        1

        DNS Request

        dns.google

        DNS Response

        100.95.95.4

      • 8.8.8.8:53
        dns.google
        dns
        RonaWind.exe
        56 B
        82 B
        1
        1

        DNS Request

        dns.google

        DNS Response

        100.92.98.238

      • 8.8.8.8:53
        dns.google
        dns
        RonaWind.exe
        56 B
        82 B
        1
        1

        DNS Request

        dns.google

        DNS Response

        100.113.206.106

      • 8.8.8.8:53
        238.98.92.100.in-addr.arpa
        dns
        72 B
        114 B
        1
        1

        DNS Request

        238.98.92.100.in-addr.arpa

        DNS Response

        100.81.93.152

      • 8.8.8.8:53
        207.103.117.100.in-addr.arpa
        dns
        74 B
        118 B
        1
        1

        DNS Request

        207.103.117.100.in-addr.arpa

        DNS Response

        100.78.74.99

      MITRE ATT&CK Enterprise v6

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • C:\Users\Admin\AppData\Local\Programs\ronawind\D3DCompiler_47.dll

        Filesize

        4.7MB

        MD5

        cb9807f6cf55ad799e920b7e0f97df99

        SHA1

        bb76012ded5acd103adad49436612d073d159b29

        SHA256

        5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

        SHA512

        f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

        Filesize

        154.5MB

        MD5

        bf1c8883c15bca4b7ba6a5bb44012f2f

        SHA1

        9864ce59c85603bab48f58a56894fd892cecc505

        SHA256

        da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

        SHA512

        82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

        Filesize

        154.5MB

        MD5

        bf1c8883c15bca4b7ba6a5bb44012f2f

        SHA1

        9864ce59c85603bab48f58a56894fd892cecc505

        SHA256

        da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

        SHA512

        82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

        Filesize

        154.5MB

        MD5

        bf1c8883c15bca4b7ba6a5bb44012f2f

        SHA1

        9864ce59c85603bab48f58a56894fd892cecc505

        SHA256

        da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

        SHA512

        82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

        Filesize

        154.5MB

        MD5

        bf1c8883c15bca4b7ba6a5bb44012f2f

        SHA1

        9864ce59c85603bab48f58a56894fd892cecc505

        SHA256

        da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

        SHA512

        82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

        Filesize

        154.5MB

        MD5

        bf1c8883c15bca4b7ba6a5bb44012f2f

        SHA1

        9864ce59c85603bab48f58a56894fd892cecc505

        SHA256

        da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

        SHA512

        82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

        Filesize

        154.5MB

        MD5

        bf1c8883c15bca4b7ba6a5bb44012f2f

        SHA1

        9864ce59c85603bab48f58a56894fd892cecc505

        SHA256

        da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

        SHA512

        82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

        Filesize

        154.5MB

        MD5

        bf1c8883c15bca4b7ba6a5bb44012f2f

        SHA1

        9864ce59c85603bab48f58a56894fd892cecc505

        SHA256

        da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

        SHA512

        82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

        Filesize

        154.5MB

        MD5

        bf1c8883c15bca4b7ba6a5bb44012f2f

        SHA1

        9864ce59c85603bab48f58a56894fd892cecc505

        SHA256

        da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

        SHA512

        82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

        Filesize

        154.5MB

        MD5

        bf1c8883c15bca4b7ba6a5bb44012f2f

        SHA1

        9864ce59c85603bab48f58a56894fd892cecc505

        SHA256

        da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

        SHA512

        82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

        Filesize

        154.5MB

        MD5

        bf1c8883c15bca4b7ba6a5bb44012f2f

        SHA1

        9864ce59c85603bab48f58a56894fd892cecc505

        SHA256

        da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

        SHA512

        82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

      • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

        Filesize

        154.5MB

        MD5

        bf1c8883c15bca4b7ba6a5bb44012f2f

        SHA1

        9864ce59c85603bab48f58a56894fd892cecc505

        SHA256

        da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

        SHA512

        82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

      • C:\Users\Admin\AppData\Local\Programs\ronawind\chrome_100_percent.pak

        Filesize

        126KB

        MD5

        8626e1d68e87f86c5b4dabdf66591913

        SHA1

        4cd7b0ac0d3f72587708064a7b0a3beca3f7b81c

        SHA256

        2caa1da9b6a6e87bdb673977fee5dd771591a1b6ed5d3c5f14b024130a5d1a59

        SHA512

        03bcd8562482009060f249d6a0dd7382fc94d669a2094dec08e8d119be51bef2c3b7b484bb5b7f805ae98e372dab9383a2c11a63ab0f5644146556b1bb9a4c99

      • C:\Users\Admin\AppData\Local\Programs\ronawind\chrome_100_percent.pak

        Filesize

        126KB

        MD5

        8626e1d68e87f86c5b4dabdf66591913

        SHA1

        4cd7b0ac0d3f72587708064a7b0a3beca3f7b81c

        SHA256

        2caa1da9b6a6e87bdb673977fee5dd771591a1b6ed5d3c5f14b024130a5d1a59

        SHA512

        03bcd8562482009060f249d6a0dd7382fc94d669a2094dec08e8d119be51bef2c3b7b484bb5b7f805ae98e372dab9383a2c11a63ab0f5644146556b1bb9a4c99

      • C:\Users\Admin\AppData\Local\Programs\ronawind\chrome_200_percent.pak

        Filesize

        175KB

        MD5

        48515d600258d60019c6b9c6421f79f6

        SHA1

        0ef0b44641d38327a360aa6954b3b6e5aab2af16

        SHA256

        07bee34e189fe9a8789aed78ea59ad41414b6e611e7d74da62f8e6ca36af01ce

        SHA512

        b7266bc8abc55bd389f594dac0c0641ecf07703f35d769b87e731b5fdf4353316d44f3782a4329b3f0e260dead6b114426ddb1b0fb8cd4a51e0b90635f1191d9

      • C:\Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

        Filesize

        2.7MB

        MD5

        87e93fd4312521881bc9739cf4e77687

        SHA1

        62a33cff725443dcf958df15c927661f9429aeeb

        SHA256

        98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

        SHA512

        3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

      • C:\Users\Admin\AppData\Local\Programs\ronawind\icudtl.dat

        Filesize

        10.1MB

        MD5

        adfd2a259608207f256aeadb48635645

        SHA1

        300bb0ae3d6b6514fb144788643d260b602ac6a4

        SHA256

        7c8c7b05d70145120b45ccb64bf75bee3c63ff213e3e64d092d500a96afb8050

        SHA512

        8397e74c7a85b0a2987cae9f2c66ce446923aa4140686d91a1e92b701e16b73a6ce459540e718858607ecb12659bedac0aa95c2713c811a2bc2d402691ff29dc

      • C:\Users\Admin\AppData\Local\Programs\ronawind\libegl.dll

        Filesize

        468KB

        MD5

        3171b22e16fab918464fcb153e30453b

        SHA1

        523d6489b693de92ea94dc876421ccf4b139cfd7

        SHA256

        56ef67da075e2a182de2d94ae6017e3f9fd285113087dcb7755ee28023e5fe64

        SHA512

        9fca92325c59bb5dd5c41ebf32c90e5b731ab46d09365b6f3386d32848aa744fb12b083268f97d7b95a07a2cbf48ac702f2c97a1dd4afe357186fd385b66cfbd

      • C:\Users\Admin\AppData\Local\Programs\ronawind\libglesv2.dll

        Filesize

        7.2MB

        MD5

        03a914c978b65af2549f5001c0688b6c

        SHA1

        2800791c2903f38542a7e181807957343747e6a1

        SHA256

        869e57011a299243d09159b29a804ec9c6ecb1b833ab2f0f8dd3860a30b83330

        SHA512

        b51dc6865487862be8fa364449c9b28bb5d86d1fe7dfce2d8f857af650b9a8c119cab2c1dd0db0d97a29687954942f95f9f335274510976b95eb25d6b520b09b

      • C:\Users\Admin\AppData\Local\Programs\ronawind\locales\en-US.pak

        Filesize

        326KB

        MD5

        19d18f8181a4201d542c7195b1e9ff81

        SHA1

        7debd3cf27bbe200c6a90b34adacb7394cb5929c

        SHA256

        1d20e626444759c2b72aa6e998f14a032408d2b32f957c12ec3abd52831338fb

        SHA512

        af07e1b08bbf2dd032a5a51a88ee2923650955873753629a086cad3b1600ce66ca7f9ed31b8ca901c126c10216877b24e123144bb0048f2a1e7757719aae73f2

      • C:\Users\Admin\AppData\Local\Programs\ronawind\resources.pak

        Filesize

        5.2MB

        MD5

        a25607b61da11ffc7def1bf5aebd12d8

        SHA1

        2d0d846f49437cc424263600ffd709621d695fa7

        SHA256

        587844d8e4afcf492fe17cd70bf60c175701726eda1ca0768d1c6913f0713bd9

        SHA512

        0abb12cedefb272b7dd7bb9eba14f569c28d5d0eba49e4212f54ee6efd36e7bd0398d2da37bafded9bfefbd5abda4481bce04f12848c50200a1cdeea20537dfc

      • C:\Users\Admin\AppData\Local\Programs\ronawind\resources\app.asar

        Filesize

        1.9MB

        MD5

        e037dd64f4a61ba2fdd2e1a1454044e0

        SHA1

        4e5dbfff80c32cd8ea148b115b7e874289cdd729

        SHA256

        1b66ee832a0df4d4643e3caf5e6ac3a499de5018ba35df213d8bdd935aba08ee

        SHA512

        4edef1db852ad1f1e79f1c298493f3ec81e85e68a194e76d4f7dd56c3f990547acf91afa159832e911e679824db90fb23ac3c18ba5605a37c202a1b113131d9b

      • C:\Users\Admin\AppData\Local\Programs\ronawind\v8_context_snapshot.bin

        Filesize

        465KB

        MD5

        73828e08c1432e49a17416bb7dd2abb4

        SHA1

        83167a7dd282aef3ad8be66a2c168a6e15706616

        SHA256

        91fab2bc8a09cc544625bde8d6e9568619a2292aea1192fb36d804bc7adc19cf

        SHA512

        27ed3c1bf35128af87f8a45f999560991d162976360e2b4fbc980fd93373050432a9f0a3db88924529d2284a173772f555b9c4ffe80f46ecef7976a3ebae9ac5

      • C:\Users\Admin\AppData\Local\Programs\ronawind\vk_swiftshader.dll

        Filesize

        5.0MB

        MD5

        0fc9322c9591192cdaa748757486ed6c

        SHA1

        aefbbb381d09d1f48d52d45bb26b088977a67d41

        SHA256

        3a59877511ff66096b3e5bfae39487d6001c657216b6495aac11ae5ecd2e723a

        SHA512

        0927ccf56ce60d2cd7825e0c42c17adacaba184de86d6ce8c1902f5d693c98ca9ac0a3c052ebab70ab1e310e4d6a591a703ede14cdc75a8d25a26710b96480a9

      • C:\Users\Admin\AppData\Local\Programs\ronawind\vk_swiftshader_icd.json

        Filesize

        106B

        MD5

        8642dd3a87e2de6e991fae08458e302b

        SHA1

        9c06735c31cec00600fd763a92f8112d085bd12a

        SHA256

        32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

        SHA512

        f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

      • C:\Users\Admin\AppData\Local\Programs\ronawind\vulkan-1.dll

        Filesize

        899KB

        MD5

        c1f13770551b9c9793080d34681c27a8

        SHA1

        c9e704646dbd3c41d455677c5c651b256dab1fe8

        SHA256

        2224ee42a19eafd2959c5a722222a411acbcf15b08f7e8cf8970c455737ffa2a

        SHA512

        643fa95cbfd8f57100eb9f7ed845a43ee3b87dc92bea563cafa191c7b000ed39e6bfe20374a54a4fe2158761a88b17afd9d679a71dea0d06b790ee5cf2f11511

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\LICENSE.electron.txt

        Filesize

        1KB

        MD5

        4d42118d35941e0f664dddbd83f633c5

        SHA1

        2b21ec5f20fe961d15f2b58efb1368e66d202e5c

        SHA256

        5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

        SHA512

        3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\LICENSES.chromium.html

        Filesize

        6.4MB

        MD5

        c3528648bedbde1223a2faab1a3f9af3

        SHA1

        934d3c8f184258338ff380964ed89053ce69ac5b

        SHA256

        57b8e5a3f2cd62805001aefca035c7348b4d1abac157e6df3d798bb31f2ec3d2

        SHA512

        3e3cc0fd7a55f67ee0afff9696beef33bdc9524375bbe9d8e8f7660fd408c756c1156ca0b02ecccdc22799c7b8e74dbde012732ad6b3ebe0a3cfc54ff5132b35

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\RonaWind.exe

        Filesize

        154.5MB

        MD5

        bf1c8883c15bca4b7ba6a5bb44012f2f

        SHA1

        9864ce59c85603bab48f58a56894fd892cecc505

        SHA256

        da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

        SHA512

        82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\chrome_200_percent.pak

        Filesize

        175KB

        MD5

        48515d600258d60019c6b9c6421f79f6

        SHA1

        0ef0b44641d38327a360aa6954b3b6e5aab2af16

        SHA256

        07bee34e189fe9a8789aed78ea59ad41414b6e611e7d74da62f8e6ca36af01ce

        SHA512

        b7266bc8abc55bd389f594dac0c0641ecf07703f35d769b87e731b5fdf4353316d44f3782a4329b3f0e260dead6b114426ddb1b0fb8cd4a51e0b90635f1191d9

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\d3dcompiler_47.dll

        Filesize

        4.7MB

        MD5

        cb9807f6cf55ad799e920b7e0f97df99

        SHA1

        bb76012ded5acd103adad49436612d073d159b29

        SHA256

        5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

        SHA512

        f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\ffmpeg.dll

        Filesize

        2.7MB

        MD5

        87e93fd4312521881bc9739cf4e77687

        SHA1

        62a33cff725443dcf958df15c927661f9429aeeb

        SHA256

        98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

        SHA512

        3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\icudtl.dat

        Filesize

        10.1MB

        MD5

        adfd2a259608207f256aeadb48635645

        SHA1

        300bb0ae3d6b6514fb144788643d260b602ac6a4

        SHA256

        7c8c7b05d70145120b45ccb64bf75bee3c63ff213e3e64d092d500a96afb8050

        SHA512

        8397e74c7a85b0a2987cae9f2c66ce446923aa4140686d91a1e92b701e16b73a6ce459540e718858607ecb12659bedac0aa95c2713c811a2bc2d402691ff29dc

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\libEGL.dll

        Filesize

        468KB

        MD5

        3171b22e16fab918464fcb153e30453b

        SHA1

        523d6489b693de92ea94dc876421ccf4b139cfd7

        SHA256

        56ef67da075e2a182de2d94ae6017e3f9fd285113087dcb7755ee28023e5fe64

        SHA512

        9fca92325c59bb5dd5c41ebf32c90e5b731ab46d09365b6f3386d32848aa744fb12b083268f97d7b95a07a2cbf48ac702f2c97a1dd4afe357186fd385b66cfbd

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\libGLESv2.dll

        Filesize

        7.2MB

        MD5

        03a914c978b65af2549f5001c0688b6c

        SHA1

        2800791c2903f38542a7e181807957343747e6a1

        SHA256

        869e57011a299243d09159b29a804ec9c6ecb1b833ab2f0f8dd3860a30b83330

        SHA512

        b51dc6865487862be8fa364449c9b28bb5d86d1fe7dfce2d8f857af650b9a8c119cab2c1dd0db0d97a29687954942f95f9f335274510976b95eb25d6b520b09b

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\af.pak

        Filesize

        353KB

        MD5

        464e5eeaba5eff8bc93995ba2cb2d73f

        SHA1

        3b216e0c5246c874ad0ad7d3e1636384dad2255d

        SHA256

        0ad547bb1dc57907adeb02e1be3017cce78f6e60b8b39395fe0e8b62285797a1

        SHA512

        726d6c41a9dbf1f5f2eff5b503ab68d879b088b801832c13fba7eb853302b16118cacda4748a4144af0f396074449245a42b2fe240429b1afcb7197fa0cb6d41

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\am.pak

        Filesize

        569KB

        MD5

        2c933f084d960f8094e24bee73fa826c

        SHA1

        91dfddc2cff764275872149d454a8397a1a20ab1

        SHA256

        fa1e44215bd5acc7342c431a3b1fddb6e8b6b02220b4599167f7d77a29f54450

        SHA512

        3c9ecfb0407de2aa6585f4865ad54eeb2ec6519c9d346e2d33ed0e30be6cc3ebfed676a08637d42c2ca8fa6cfefb4091feb0c922ff71f09a2b89cdd488789774

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\ar.pak

        Filesize

        624KB

        MD5

        fdbad4c84ac66ee78a5c8dd16d259c43

        SHA1

        3ce3cd751bb947b19d004bd6916b67e8db5017ac

        SHA256

        a62b848a002474a8ea37891e148cbaf4af09bdba7dafebdc0770c9a9651f7e3b

        SHA512

        376519c5c2e42d21acedb1ef47184691a2f286332451d5b8d6aac45713861f07c852fb93bd9470ff5ee017d6004aba097020580f1ba253a5295ac1851f281e13

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\bg.pak

        Filesize

        652KB

        MD5

        38bcabb6a0072b3a5f8b86b693eb545d

        SHA1

        d36c8549fe0f69d05ffdaffa427d3ddf68dd6d89

        SHA256

        898621731ac3471a41f8b3a7bf52e7f776e8928652b37154bc7c1299f1fd92e1

        SHA512

        002adbdc17b6013becc4909daf2febb74ce88733c78e968938b792a52c9c5a62834617f606e4cb3774ae2dad9758d2b8678d7764bb6dcfe468881f1107db13ef

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\bn.pak

        Filesize

        838KB

        MD5

        9340520696e7cb3c2495a78893e50add

        SHA1

        eed5aeef46131e4c70cd578177c527b656d08586

        SHA256

        1ea245646a4b4386606f03c8a3916a3607e2adbbc88f000976be36db410a1e39

        SHA512

        62507685d5542cfcd394080917b3a92ca197112feea9c2ddc1dfc77382a174c7ddf758d85af66cd322692215cb0402865b2a2b212694a36da6b592028caafcdf

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\ca.pak

        Filesize

        400KB

        MD5

        4cd6b3a91669ddcfcc9eef9b679ab65c

        SHA1

        43c41cb00067de68d24f72e0f5c77d3b50b71f83

        SHA256

        56efff228ee3e112357d6121b2256a2c3acd718769c89413de82c9d4305459c6

        SHA512

        699be9962d8aae241abd1d1f35cd8468ffbd6157bcd6bdf2c599d902768351b247baad6145b9826d87271fd4a19744eb11bf7065db7fefb01d66d2f1f39015a9

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\cs.pak

        Filesize

        409KB

        MD5

        eeee212072ea6589660c9eb216855318

        SHA1

        d50f9e6ca528725ced8ac186072174b99b48ea05

        SHA256

        de92f14480770401e39e22dcf3dd36de5ad3ed22e44584c31c37cd99e71c4a43

        SHA512

        ea068186a2e611fb98b9580f2c5ba6fd1f31b532e021ef9669e068150c27deee3d60fd9ff7567b9eb5d0f98926b24defabc9b64675b49e02a6f10e71bb714ac8

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\da.pak

        Filesize

        371KB

        MD5

        e58916a6af2805db6397624b8387e1c0

        SHA1

        f27d9a10796735de61bbdcb2684d89e6782ef640

        SHA256

        1108efa686a1f7e24380d405083acab23d5c33a9ddf562ceaad9e6c0b9f75b00

        SHA512

        9d9d49443722bdc206345b815665046fdecaefe2ab2a23af16daa57cc3ef5d273f0c95808e29b4c8457bcf5c473ed1097fe0917d07e33cb18ff6922b9a041a59

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\de.pak

        Filesize

        397KB

        MD5

        e0d3e944726b5669178fda09a80a2f3f

        SHA1

        b5f60c57f1fe58675c3b3e05e0de853c588218ad

        SHA256

        9641546e0c030b4817fc3f7d7fc71aad637ae3f0bfbf1e9c956dd1a53a7be7bf

        SHA512

        e6a52be58e13bf791a843c9511b6c0f8d923206359ef81305af249be85cac6b7583ddf13cf1071aff3772da59f6ecc9c539ab2453790e56ada873e755138da4b

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\el.pak

        Filesize

        712KB

        MD5

        e66a75680f21ce281995f37099045714

        SHA1

        d553e80658ee1eea5b0912db1ecc4e27b0ed4790

        SHA256

        21d1d273124648a435674c7877a98110d997cf6992469c431fe502bbcc02641f

        SHA512

        d3757529dd85ef7989d9d4cecf3f7d87c9eb4beda965d8e2c87ee23b8baaec3fdff41fd53ba839215a37404b17b8fe2586b123557f09d201b13c7736c736b096

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\en-GB.pak

        Filesize

        324KB

        MD5

        825ed4c70c942939ffb94e77a4593903

        SHA1

        7a3faee9bf4c915b0f116cb90cec961dda770468

        SHA256

        e11e8db78ae12f8d735632ba9fd078ec66c83529cb1fd86a31ab401f6f833c16

        SHA512

        41325bec22af2e5ef8e9b26c48f2dfc95763a249ccb00e608b7096ec6236ab9a955de7e2340fd9379d09ac2234aee69aed2a24fe49382ffd48742d72a929c56a

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\en-US.pak

        Filesize

        326KB

        MD5

        19d18f8181a4201d542c7195b1e9ff81

        SHA1

        7debd3cf27bbe200c6a90b34adacb7394cb5929c

        SHA256

        1d20e626444759c2b72aa6e998f14a032408d2b32f957c12ec3abd52831338fb

        SHA512

        af07e1b08bbf2dd032a5a51a88ee2923650955873753629a086cad3b1600ce66ca7f9ed31b8ca901c126c10216877b24e123144bb0048f2a1e7757719aae73f2

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\es-419.pak

        Filesize

        395KB

        MD5

        7da3e8aa47ba35d014e1d2a32982a5bb

        SHA1

        8e35320b16305ad9f16cb0f4c881a89818cd75bb

        SHA256

        7f85673cf80d1e80acfc94fb7568a8c63de79a13a1bb6b9d825b7e9f338ef17c

        SHA512

        1fca90888eb067972bccf74dd5d09bb3fce2ceb153589495088d5056ed4bdede15d54318af013c2460f0e8b5b1a5c6484adf0ed84f4b0b3c93130b086da5c3bf

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\es.pak

        Filesize

        394KB

        MD5

        2b7583747afa8b4382c96b02e33567e8

        SHA1

        314a18dde3cbbaebd693548c73525a3ac8f37be7

        SHA256

        6eb8265c9e704e409efae40bdbce5cf88e8285ad4425ccb7fa71335fa6ad55ac

        SHA512

        2cb7a152deb401b2abec03739f8cbd92e66b51cb2ff661f74e8e8491f9b466086a34f200cb5c6d66f1f52b6dca8841c3da2d1d880f03399f53271496bb66d652

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\et.pak

        Filesize

        356KB

        MD5

        ccc71f88984a7788c8d01add2252d019

        SHA1

        6a87752eac3044792a93599428f31d25debea369

        SHA256

        d69489a723b304e305cb1767e6c8da5d5d1d237e50f6ddc76e941dcb01684944

        SHA512

        d35ccd639f2c199862e178a9fab768d7db10d5a654bc3bc1fab45d00ceb35a01119a5b4d199e2db3c3576f512b108f4a1df7faf6624d961c0fc4bca5af5f0e07

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\fa.pak

        Filesize

        577KB

        MD5

        2e37fd4e23a1707a1eccea3264508dff

        SHA1

        e00e58ed06584b19b18e9d28b1d52dbfc36d70f3

        SHA256

        b9ee861e1bdecffe6a197067905279ea77c180844a793f882c42f2b70541e25e

        SHA512

        7c467f434eb0ce8e4a851761ae9bd7a9e292aab48e8e653e996f8ca598d0eb5e07ec34e2b23e544f3b38439dc3b8e3f7a0dfd6a8e28169aa95ceff42bf534366

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\fi.pak

        Filesize

        365KB

        MD5

        f5f176adae8cec52dde0a44dae03a3a9

        SHA1

        c4dcecde9aa3a93ec942587b44cbbaffc8e8bea7

        SHA256

        4e5a63b1e70f96da3e7f17660b511c3cdd67e630e7af29a400f24e395bc9ab4a

        SHA512

        4016afa43718dd8499d27a3ddcc3efc0031eaf965c6860bc4b274f3172deba17aec05b962fcdd0a808b01b858cf43a3fdbdf90aa3d292f55fa9b62571538da94

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\fil.pak

        Filesize

        410KB

        MD5

        d7df2ea381f37d6c92e4f18290c6ffe0

        SHA1

        7cacf08455aa7d68259fcba647ee3d9ae4c7c5e4

        SHA256

        db4a63fa0d5b2baba71d4ba0923caed540099db6b1d024a0d48c3be10c9eed5a

        SHA512

        96fc028455f1cea067b3a3dd99d88a19a271144d73dff352a3e08b57338e513500925787f33495cd744fe4122dff2d2ee56e60932fc02e04feed2ec1e0c3533f

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\fr.pak

        Filesize

        426KB

        MD5

        e3037594b18590d02837e4c4af7362b0

        SHA1

        8a7168a3573431db50fa7e43cd8ab9b61a1f7e3a

        SHA256

        6db92b75f3ccd6814aaa33f87099fde12177f79ac5483cafe3f2bfcf0b23f4d9

        SHA512

        24b75a411c796559d61e7fa52e60db46f9870487b782436f9e219ae06991490f8b051b3ff38e404e50e4e6f90b1ad7e04ebfa0aa9e42f107c28927f0f430d27e

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\gu.pak

        Filesize

        813KB

        MD5

        308619d65b677d99f48b74ccfe060567

        SHA1

        9f834df93fd48f4fb4ca30c4058e23288cf7d35e

        SHA256

        e40ee4f24839f9e20b48d057bf3216bc58542c2e27cb40b9d2f3f8a1ea5bfbb4

        SHA512

        3ca84ad71f00b9f7cc61f3906c51b263f18453fce11ec6c7f9edfe2c7d215e3550c336e892bd240a68a6815af599cc20d60203294f14adb133145ca01fe4608f

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\he.pak

        Filesize

        507KB

        MD5

        7f6859bce77448a7d304a68fd9fc86e3

        SHA1

        a9e6471cc7c00c14ec3838d45ff7653316caf4fb

        SHA256

        2b553b86347cb0d023b1b4de3bf0594a70691dfec7278e55bb05a83866efc125

        SHA512

        6f689a9bb29d5b1ee23bcf53dd14b28e84596c91e8657c346ba0c848a03cfc25b3826666f13ad9e3a35b72de3b3ae67ea86893ddd90a762104b7d205f7e6c493

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\hi.pak

        Filesize

        848KB

        MD5

        b5dfce8e3ba0aec2721cc1692b0ad698

        SHA1

        c5d6fa21a9ba3d526f3e998e3f627afb8d1eecf3

        SHA256

        b1c7fb6909c8a416b513d6de21eea0b5a6b13c7f0a94cabd0d9154b5834a5e8b

        SHA512

        facf0a9b81af6bb35d0fc5e69809d5c986a2c91a166e507784bdad115644b96697fe504b8d70d9bbb06f0c558f746c085d37e385eef41f0a1c29729d3d97980f

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\hr.pak

        Filesize

        397KB

        MD5

        255f808210dbf995446d10ff436e0946

        SHA1

        1785d3293595f0b13648fb28aec6936c48ea3111

        SHA256

        4df972b7f6d81aa7bdc39e2441310a37f746ae5015146b4e434a878d1244375b

        SHA512

        8b1a4d487b0782055717b718d58cd21e815b874e2686cdfd2087876b70ae75f9182f783c70bf747cf4ca17a3afc68517a9db4c99449fa09bef658b5e68087f2a

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\hu.pak

        Filesize

        427KB

        MD5

        2aa0a175df21583a68176742400c6508

        SHA1

        3c25ba31c2b698e0c88e7d01b2cc241f0916e79a

        SHA256

        b59f932df822ab1a87e8aab4bbb7c549db15899f259f4c50ae28f8d8c7ce1e72

        SHA512

        03a16feb0601407e96bcb43af9bdb21e5218c2700c9f3cfd5f9690d0b4528f9dc17e4cc690d8c9132d4e0b26d7faafd90aa3f5e57237e06fb81aab7ab77f6c03

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\id.pak

        Filesize

        350KB

        MD5

        b6fcd5160a3a1ae1f65b0540347a13f2

        SHA1

        4cf37346318efb67908bba7380dbad30229c4d3d

        SHA256

        7fd715914e3b0cf2048d4429f3236e0660d5bd5e61623c8fef9b8e474c2ac313

        SHA512

        a8b4a96e8f9a528b2df3bd1251b72ab14feccf491dd254a7c6ecba831dfaba328adb0fd0b4acddb89584f58f94b123e97caa420f9d7b34131cc51bdbdbf3ed73

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\it.pak

        Filesize

        388KB

        MD5

        3f70274c332b4b3a2fe0a2e8dfaa39cf

        SHA1

        d7d452884993428823227f5f217932e93571f586

        SHA256

        5a71f23e65aff5d3d8345bb4c3e828486a27fb05e3385b089b892ed588df9ed1

        SHA512

        a48114f026fe72d465447a6ebc4f3ae0aa7f4f77136e3fc1f080a0137b04b4fb81ff86734b81f240fc918639ef5abcde41875b32986ae2c42cdaf54c6486dcc0

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\ja.pak

        Filesize

        472KB

        MD5

        4e6cc9965f7a8bad7505d95d4f50b3e6

        SHA1

        8b126d5da1ffeb210661957f184a0c33103e8e60

        SHA256

        180dae8282f0ea6d926632d36ea39e89e7c2c53c3d45b99946ef824040e3d3ad

        SHA512

        c29f4fffc8b385e936aeeb5f33715848678528f67b6892142a3a85b29104232cc87f52f1ae179e84e562b8d14e91a0187fc009d2dd813ad5775b8e5eeaee9c71

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\kn.pak

        Filesize

        938KB

        MD5

        fccd5d8ad5e1c774771b19dda55d9b9a

        SHA1

        fabbaf469e4aec44342a7e6f74b837cde2203b71

        SHA256

        47c77fdf73267865a025a54027865a8d67e26943264a43c6e794ccbd6eec549b

        SHA512

        c9dc6cf0ff5a4094cc07ce4881319778a076b44651b16a220940d7a587ffaa92b6b80f7264605a3c8e6dd780e9c3d8e4d403d01cd8f94e0122ac19cd4d636aac

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\ko.pak

        Filesize

        398KB

        MD5

        c9344b5b436da62a3d18bf10e60c77c8

        SHA1

        68a969f9b6453fa13f9bc849befd6df0ce4b8e08

        SHA256

        e2ad6e0af9fa8fcc4dfbb37e89e171702052c758362875c81dfd466b12cf13a3

        SHA512

        6e166d0bc19abb9d2b4072516e20bf3f8ab7fc68dca74957e214e6d41b8ae114ed84472a04f42c0967e5dbfc204e0ee9c09d3c4cefd77dfb61979de72439ae14

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\lt.pak

        Filesize

        429KB

        MD5

        64b08ffc40a605fe74ecc24c3024ee3b

        SHA1

        516296e8a3114ddbf77601a11faf4326a47975ab

        SHA256

        8a5d6e29833374e0f74fd7070c1b20856cb6b42ed30d18a5f17e6c2e4a8d783e

        SHA512

        05d207413186ac2b87a59681efe4fdf9dc600d0f3e8327e7b9802a42306d80d0ddd9ee07d103b17caf0518e42ab25b7ca9da4713941abc7bced65961671164ac

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\lv.pak

        Filesize

        427KB

        MD5

        a8cbd741a764f40b16afea275f240e7e

        SHA1

        317d30bbad8fd0c30de383998ea5be4eec0bb246

        SHA256

        a1a9d84fd3af571a57be8b1a9189d40b836808998e00ec9bd15557b83d0e3086

        SHA512

        3da91c0ca20165445a2d283db7dc749fcf73e049bfff346b1d79b03391aefc7f1310d3ac2c42109044cfb50afcf178dcf3a34b4823626228e591f328dd7afe95

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\ml.pak

        Filesize

        974KB

        MD5

        1c81104ac2cbf7f7739af62eb77d20d5

        SHA1

        0f0d564f1860302f171356ea35b3a6306c051c10

        SHA256

        66005bc01175a4f6560d1e9768dbc72b46a4198f8e435250c8ebc232d2dac108

        SHA512

        969294eae8c95a1126803a35b8d3f1fc3c9d22350aa9cc76b2323b77ad7e84395d6d83b89deb64565783405d6f7eae40def7bdaf0d08da67845ae9c7dbb26926

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\mr.pak

        Filesize

        797KB

        MD5

        5657d67f6d21b507aab24ff62b0d4701

        SHA1

        b685a327c525b7e42eece306984e6d88dd803a29

        SHA256

        671c3cb2a805a63a275ad608d37d0577c6a2813dd67fb6c2b70f8232323aac04

        SHA512

        637c60834edc6f31c80692274af05e3f78466cd5ddb2fd7c79315b0f54939f41f25c3b30c86fd10751d032def1f99cb853c3186128a76a3a82a6989eaf14a835

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\ms.pak

        Filesize

        365KB

        MD5

        aee105366a1870b9d10f0f897e9295db

        SHA1

        eee9d789a8eeafe593ce77a7c554f92a26a2296f

        SHA256

        c6471aee5f34f31477d57f593b09cb1de87f5fd0f9b5e63d8bab4986cf10d939

        SHA512

        240688a0054bfebe36ea2b056194ee07e87bbbeb7e385131c73a64aa7967984610fcb80638dd883837014f9bc920037069d0655e3e92a5922f76813aedb185fa

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\nb.pak

        Filesize

        358KB

        MD5

        55d5ad4eacb12824cfcd89470664c856

        SHA1

        f893c00d8d4fdb2f3e7a74a8be823e5e8f0cd673

        SHA256

        4f44789a2c38edc396a31aba5cc09d20fb84cd1e06f70c49f0664289c33cd261

        SHA512

        555d87be8c97f466c6b3e7b23ec0210335846398c33dba71e926ff7e26901a3908dbb0f639c93db2d090c9d8bda48eddf196b1a09794d0e396b2c02b4720f37e

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\nl.pak

        Filesize

        370KB

        MD5

        0f04bac280035fab018f634bcb5f53ae

        SHA1

        4cad76eaecd924b12013e98c3a0e99b192be8936

        SHA256

        be254bcda4dbe167cb2e57402a4a0a814d591807c675302d2ce286013b40799b

        SHA512

        1256a6acac5a42621cb59eb3da42ddeeacfe290f6ae4a92d00ebd4450a8b7ccb6f0cd5c21cf0f18fe4d43d0d7aee87b6991fef154908792930295a3871fa53df

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\pl.pak

        Filesize

        412KB

        MD5

        8854aef2a3a62472a6085c8ee8c1ec52

        SHA1

        16ae447f8fa5dee9beb3622a338843ef51652bc4

        SHA256

        ac8387ebe1e37070d2de5eb2a6909602a9463957bad0cb4eaba1156d3eafd6e2

        SHA512

        b701d8b46100decbd47886f053bafb4d9898f48c15a36a5760447b2001900fe4088211c4445891da199af04f1d18b695703cfa3603a7a80ae3fba9c0ce9cfd73

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\pt-BR.pak

        Filesize

        389KB

        MD5

        126eff8c773ad239b64a3d171729ee08

        SHA1

        d47175d9df435e16d9126eb8fe0f4fb27621d90c

        SHA256

        04f98b1ee125a1a749e0d1e61f69a58a5b7af897b4322454387f9ba165703fdf

        SHA512

        50a226a3a964a8ec83a74cec0d60306eafa3e123d43130cf9b6425ddf2d613f215a5698419de640d7c47171ab33e2e80bee1fc873ab2d9bffe20bbff0da77e93

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\pt-PT.pak

        Filesize

        391KB

        MD5

        7a20beb0dfa3aeb2629d000d8e5482ea

        SHA1

        8627a45042186d490e950ab3c34e962fc9dfb7e1

        SHA256

        029fe6070235dc6f38a2ab6ba8d290d4d84673ca908cdda8891707735bc69500

        SHA512

        ac70f35719618e0511e8c7b5f22a58813f0ec15f853631e3cc85efad13f2553112ebc0f81eb8fc22228ecb01c3ac477b69af5f0d567f042b6dee016bdc6e428b

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\ro.pak

        Filesize

        403KB

        MD5

        d2758f6adbaeea7cd5d95f4ad6dde954

        SHA1

        d7476db23d8b0e11bbabf6a59fde7609586bdc8a

        SHA256

        2b7906f33bfbe8e9968bcd65366e2e996cdf2f3e1a1fc56ad54baf261c66954c

        SHA512

        8378032d6febea8b5047ada667cb19e6a41f890cb36305acc2500662b4377caef3dc50987c925e05f21c12e32c3920188a58ee59d687266d70b8bfb1b0169a6e

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\ru.pak

        Filesize

        656KB

        MD5

        0907d70c073653e7b1a65ec411e6be2e

        SHA1

        d20d72467eeb08115fbfd2e68e5024cbc459fd42

        SHA256

        f8326292b47146f9c0a355a12d3d0c7c0a07849ffe71578e1ca3f2c756539bd9

        SHA512

        8bfa3d080151d39bdadd6dde07c8cc3f96df8c160e50e81025df64476aa4652f567f68f08c79bff188858518334c872c14cb58ba71c28094a535f9e8e9c657f0

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\sk.pak

        Filesize

        416KB

        MD5

        b7e97cc98b104053e5f1d6a671c703b7

        SHA1

        0f7293f1744ae2cd858eb3431ee016641478ae7d

        SHA256

        b0d38869275d9d295e42b0b90d0177e0ca56a393874e4bb454439b8ce25d686f

        SHA512

        ef3247c6f0f4065a4b68db6bf7e28c8101a9c6c791b3f771ed67b5b70f2c9689cec67a1c864f423382c076e4cbb6019c1c0cb9ad0204454e28f749a69b6b0de0

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\sl.pak

        Filesize

        401KB

        MD5

        ca763e801de642e4d68510900ff6fabb

        SHA1

        c32a871831ce486514f621b3ab09387548ee1cff

        SHA256

        340e0babe5fddbfda601c747127251cf111dd7d79d0d6a5ec4e8443b835027de

        SHA512

        e2847ce75de57deb05528dd9557047edcd15d86bf40a911eb97e988a8fdbda1cd0e0a81320eadf510c91c826499a897c770c007de936927df7a1cc82fa262039

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\sr.pak

        Filesize

        616KB

        MD5

        c68c235d8e696c098cf66191e648196b

        SHA1

        5c967fbbd90403a755d6c4b2411e359884dc8317

        SHA256

        ab96a18177af90495e2e3c96292638a775aa75c1d210ca6a6c18fbc284cd815b

        SHA512

        34d14d8cb851df1ea8cd3cc7e9690eaf965d8941cfcac1c946606115ad889630156c5ff47011b27c1288f8df70e8a7dc41909a9fa98d75b691742ec1d1a5e653

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\sv.pak

        Filesize

        361KB

        MD5

        251682c6f4238bef8ab5471870a5454b

        SHA1

        2bf36466446abe39d487c61898d335901bbb09b0

        SHA256

        e1cbce672de3ba3a01272b9b763dcfd8229fba0883df2b4117ac6b0f9916c073

        SHA512

        de1e507b24e71f60c298253aacff49724b6a8c6336455d8dfcc6e939e53ed5e7a95dc5574e66a7fae38b6666446ac9cd83e5ad1b794b4ffa38d06052663c1f45

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\sw.pak

        Filesize

        379KB

        MD5

        67a443a5c2eaad32625edb5f8deb7852

        SHA1

        a6137841e8e7736c5ede1d0dc0ce3a44dc41013f

        SHA256

        41dfb772ae4c6f9e879bf7b4fa776b2877a2f8740fa747031b3d6f57f34d81dd

        SHA512

        e0fdff1c3c834d8af8634f43c2f16ba5b883a8d88dfd322593a13830047568faf9f41d0bf73cd59e2e33c38fa58998d4702d2b0c21666717a86945d18b3f29e5

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\ta.pak

        Filesize

        964KB

        MD5

        18ec8ff3c0701a6a8c48f341d368bab5

        SHA1

        8bff8aee26b990cf739a29f83efdf883817e59d8

        SHA256

        052bcdb64a80e504bb6552b97881526795b64e0ab7ee5fc031f3edf87160dee9

        SHA512

        a0e997fc9d316277de3f4773388835c287ab1a35770c01e376fb7428ff87683a425f6a6a605d38dd7904ca39c50998cd85f855cb33ae6abad47ac85a1584fe4e

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\te.pak

        Filesize

        894KB

        MD5

        a17f16d7a038b0fa3a87d7b1b8095766

        SHA1

        b2f845e52b32c513e6565248f91901ab6874e117

        SHA256

        d39716633228a5872630522306f89af8585f8092779892087c3f1230d21a489e

        SHA512

        371fb44b20b8aba00c4d6f17701fa4303181ad628f60c7b4218e33be7026f118f619d66d679bffcb0213c48700fafd36b2e704499a362f715f63ea9a75d719e7

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\th.pak

        Filesize

        753KB

        MD5

        a32ba63feeed9b91f6d6800b51e5aeae

        SHA1

        2fbf6783996e8315a4fb94b7d859564350ee5918

        SHA256

        e32e37ca0ab30f1816fe6df37e3168e1022f1d3737c94f5472ab6600d97a45f6

        SHA512

        adebde0f929820d8368096a9c30961ba7b33815b0f124ca56ca05767ba6d081adf964088cb2b9fcaa07f756b946fffa701f0b64b07d457c99fd2b498cbd1e8a5

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\tr.pak

        Filesize

        385KB

        MD5

        ca201fed1301187dbe9ed65b4ccd3547

        SHA1

        f904ea7325915401491e42610855f5769be28120

        SHA256

        46d2ac624470e5fb747b3d403581b1692892661aa474149067fd5acebc1130e5

        SHA512

        4c2913c4266d00acd446875e2c966c96065c13acca58de8d3151b445f759ecb35481d2013b46e099573b899d745dc54732fc3428251acbe4b0a05d3bd7a4c0b7

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\uk.pak

        Filesize

        657KB

        MD5

        c7286527971d88cc50659b8c00bdb7a0

        SHA1

        a0ef230d46d214ac469e2dc84f1d46d8f8d83eed

        SHA256

        52de620f977dffe77da843562d592ef41775af5dfc5f3be769739c050d049cb7

        SHA512

        e5573eb59a12c27f953c6132a993a9d5f76509f3e83528ccc51b80d33de9948c7932231965e55b7887ed88b4c179d9a0cbe9d41769d228c41c447d8c167915a4

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\ur.pak

        Filesize

        571KB

        MD5

        1ca4fa13bd0089d65da7cd2376feb4c6

        SHA1

        b1ba777e635d78d1e98e43e82d0f7a3dd7e97f9c

        SHA256

        3941364d0278e2c4d686faa4a135d16a457b4bc98c5a08e62aa12f3adc09aa7f

        SHA512

        d0d9eb1aa029bd4c34953ee5f4b60c09cf1d4f0b21c061db4ede1b5ec65d7a07fc2f780ade5ce51f2f781d272ac32257b95eedf471f7295ba70b5ba51db6c51d

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\vi.pak

        Filesize

        455KB

        MD5

        befc24124201bc716386fe618a3675ef

        SHA1

        15b4717c135be1292974270f5c36506a0ae76d71

        SHA256

        eb62bfa59587f59bdb48670bcd1a5cf884e3420aa3954718cb5e22750c182344

        SHA512

        1f443783f5da53d931fdb0853ea0b9993d3b3d305a559dccdb11048fa87ecba65b5dd8e03a7168d6db8911cbf9ee33639aca2e9fa67381f1c43d13db7d1a18f7

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\zh-CN.pak

        Filesize

        332KB

        MD5

        8f10fd388eb732a6b0eb02185fbc6e21

        SHA1

        2ebdaeeb7460e8d4c434380983df6ef5b2e9a48d

        SHA256

        b28272271f771e11edd01a119aca71430eff42d3ed640088c8e89a9c2910bd8d

        SHA512

        98f6a76b7b658a9deaacba03f22137ee887e72a73f423f9cc2113db67281ad12630aeb943a56d15780684bbcb34eecd6e7ef93a10c3f390cf1035ca7a1e16096

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\locales\zh-TW.pak

        Filesize

        330KB

        MD5

        fbb2cc32d7e3de0618a783b819bf8711

        SHA1

        b6965efef25d9146061d2b990ebb0a23b9b703ad

        SHA256

        a2df611bc31135da1ddaacce772106ba5e60ce950d9837e958744eeb13b12e1c

        SHA512

        66acf52606bd5d0dba9933f9733e7f943ee7806cdcd6b01980e61a51e6bd228f3115417bcb00a6e049f77efa56148aeed5414f6573c86060fa2778f4f89ae54d

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\resources.pak

        Filesize

        5.2MB

        MD5

        a25607b61da11ffc7def1bf5aebd12d8

        SHA1

        2d0d846f49437cc424263600ffd709621d695fa7

        SHA256

        587844d8e4afcf492fe17cd70bf60c175701726eda1ca0768d1c6913f0713bd9

        SHA512

        0abb12cedefb272b7dd7bb9eba14f569c28d5d0eba49e4212f54ee6efd36e7bd0398d2da37bafded9bfefbd5abda4481bce04f12848c50200a1cdeea20537dfc

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\resources\app.asar

        Filesize

        1.9MB

        MD5

        e037dd64f4a61ba2fdd2e1a1454044e0

        SHA1

        4e5dbfff80c32cd8ea148b115b7e874289cdd729

        SHA256

        1b66ee832a0df4d4643e3caf5e6ac3a499de5018ba35df213d8bdd935aba08ee

        SHA512

        4edef1db852ad1f1e79f1c298493f3ec81e85e68a194e76d4f7dd56c3f990547acf91afa159832e911e679824db90fb23ac3c18ba5605a37c202a1b113131d9b

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\resources\elevate.exe

        Filesize

        105KB

        MD5

        792b92c8ad13c46f27c7ced0810694df

        SHA1

        d8d449b92de20a57df722df46435ba4553ecc802

        SHA256

        9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

        SHA512

        6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\snapshot_blob.bin

        Filesize

        158KB

        MD5

        a0c15be6ca6ac3e64a9c40618967918f

        SHA1

        e16310dc5599fc5eb5a22c8af0fbe12b943ed604

        SHA256

        ba80660764b93ed858490896d75e6a7e83acbfd346b1e459d78cff1c9b228fdb

        SHA512

        13d53a7873d03cd136df77828ed44538017dd268d863e184ec80c26c4ca129d04ddc3af0ca6a589eb531da14ea5a742667e5d65bf88c2ee2f4c3b46889b9eea5

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\v8_context_snapshot.bin

        Filesize

        465KB

        MD5

        73828e08c1432e49a17416bb7dd2abb4

        SHA1

        83167a7dd282aef3ad8be66a2c168a6e15706616

        SHA256

        91fab2bc8a09cc544625bde8d6e9568619a2292aea1192fb36d804bc7adc19cf

        SHA512

        27ed3c1bf35128af87f8a45f999560991d162976360e2b4fbc980fd93373050432a9f0a3db88924529d2284a173772f555b9c4ffe80f46ecef7976a3ebae9ac5

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\vk_swiftshader.dll

        Filesize

        5.0MB

        MD5

        0fc9322c9591192cdaa748757486ed6c

        SHA1

        aefbbb381d09d1f48d52d45bb26b088977a67d41

        SHA256

        3a59877511ff66096b3e5bfae39487d6001c657216b6495aac11ae5ecd2e723a

        SHA512

        0927ccf56ce60d2cd7825e0c42c17adacaba184de86d6ce8c1902f5d693c98ca9ac0a3c052ebab70ab1e310e4d6a591a703ede14cdc75a8d25a26710b96480a9

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\vk_swiftshader_icd.json

        Filesize

        106B

        MD5

        8642dd3a87e2de6e991fae08458e302b

        SHA1

        9c06735c31cec00600fd763a92f8112d085bd12a

        SHA256

        32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

        SHA512

        f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\7z-out\vulkan-1.dll

        Filesize

        899KB

        MD5

        c1f13770551b9c9793080d34681c27a8

        SHA1

        c9e704646dbd3c41d455677c5c651b256dab1fe8

        SHA256

        2224ee42a19eafd2959c5a722222a411acbcf15b08f7e8cf8970c455737ffa2a

        SHA512

        643fa95cbfd8f57100eb9f7ed845a43ee3b87dc92bea563cafa191c7b000ed39e6bfe20374a54a4fe2158761a88b17afd9d679a71dea0d06b790ee5cf2f11511

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\StdUtils.dll

        Filesize

        100KB

        MD5

        c6a6e03f77c313b267498515488c5740

        SHA1

        3d49fc2784b9450962ed6b82b46e9c3c957d7c15

        SHA256

        b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

        SHA512

        9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

      • C:\Users\Admin\AppData\Local\Temp\nspACEF.tmp\WinShell.dll

        Filesize

        3KB

        MD5

        1cc7c37b7e0c8cd8bf04b6cc283e1e56

        SHA1

        0b9519763be6625bd5abce175dcc59c96d100d4c

        SHA256

        9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

        SHA512

        7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

      • C:\Users\Admin\AppData\Roaming\ronawind\249061b4-0281-4cbf-82e5-3c9d4728dd2e.tmp

        Filesize

        57B

        MD5

        58127c59cb9e1da127904c341d15372b

        SHA1

        62445484661d8036ce9788baeaba31d204e9a5fc

        SHA256

        be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de

        SHA512

        8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a

      • C:\Users\Admin\AppData\Roaming\ronawind\Code Cache\js\index

        Filesize

        24B

        MD5

        54cb446f628b2ea4a5bce5769910512e

        SHA1

        c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

        SHA256

        fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

        SHA512

        8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

      • C:\Users\Admin\AppData\Roaming\ronawind\Code Cache\js\index-dir\the-real-index

        Filesize

        48B

        MD5

        50774dcae9034981e10f2462b9ef9204

        SHA1

        a8a99ca972b4c2e504c6ecedff75fd78f237f7b8

        SHA256

        4b3e844cba36ba5f6d2b20136e720462b07e72512f1c79cbb24be13c66f54dfe

        SHA512

        6fb7611dddf2a2660cd35de404b57084a1d8627727181aeecc9314dba3308165a4be056d95df6834ff7211d23b3a16668d19f6fd2bfe5116a9c3f5865f574bf6

      • C:\Users\Admin\AppData\Roaming\ronawind\Code Cache\wasm\index

        Filesize

        24B

        MD5

        54cb446f628b2ea4a5bce5769910512e

        SHA1

        c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

        SHA256

        fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

        SHA512

        8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

      • C:\Users\Admin\AppData\Roaming\ronawind\Code Cache\wasm\index-dir\the-real-index

        Filesize

        48B

        MD5

        32710c410f22f3615459edbf663c2ce4

        SHA1

        77c88980291441493547ce631028abc9ee0b3e69

        SHA256

        792f2d379c178fcd01657e9d294b406b328290b1297fc232f1eaaefaf23112dd

        SHA512

        b5e099ba6ee078d9f7dc22bfb160c3a523c7e7f57ffb8ce62e20c679b798e7fdc71b142ed43804c20a60462d70968118b6496c003c8f7ef1edd59a3b05a3cab6

      • C:\Users\Admin\AppData\Roaming\ronawind\Local State

        Filesize

        389B

        MD5

        6bcd581251914d9966154d1bd2c30f20

        SHA1

        6c9139d90831a0b741ba16c1d7989afe0d4d5326

        SHA256

        868022f74a6b93b9f0ebbe1f9835694fe4b4ae8fca6b0bacf455f70f87f09d8f

        SHA512

        92cc0b3deb3e80416a6729b5320e3d965a4002b732f6b86ae7006bda8ff104627c502fa209b91d1b836f918f185efd9a23d55266b64d5459fae630ddce39ebea

      • C:\Users\Admin\AppData\Roaming\ronawind\Network\Network Persistent State

        Filesize

        59B

        MD5

        2800881c775077e1c4b6e06bf4676de4

        SHA1

        2873631068c8b3b9495638c865915be822442c8b

        SHA256

        226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

        SHA512

        e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

      • C:\Users\Admin\AppData\Roaming\ronawind\Preferences

        Filesize

        57B

        MD5

        58127c59cb9e1da127904c341d15372b

        SHA1

        62445484661d8036ce9788baeaba31d204e9a5fc

        SHA256

        be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de

        SHA512

        8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a

      • \Users\Admin\AppData\Local\Programs\ronawind\d3dcompiler_47.dll

        Filesize

        4.7MB

        MD5

        cb9807f6cf55ad799e920b7e0f97df99

        SHA1

        bb76012ded5acd103adad49436612d073d159b29

        SHA256

        5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

        SHA512

        f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

      • \Users\Admin\AppData\Local\Programs\ronawind\d3dcompiler_47.dll

        Filesize

        4.7MB

        MD5

        cb9807f6cf55ad799e920b7e0f97df99

        SHA1

        bb76012ded5acd103adad49436612d073d159b29

        SHA256

        5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

        SHA512

        f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

      • \Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

        Filesize

        2.7MB

        MD5

        87e93fd4312521881bc9739cf4e77687

        SHA1

        62a33cff725443dcf958df15c927661f9429aeeb

        SHA256

        98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

        SHA512

        3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

      • \Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

        Filesize

        2.7MB

        MD5

        87e93fd4312521881bc9739cf4e77687

        SHA1

        62a33cff725443dcf958df15c927661f9429aeeb

        SHA256

        98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

        SHA512

        3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

      • \Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

        Filesize

        2.7MB

        MD5

        87e93fd4312521881bc9739cf4e77687

        SHA1

        62a33cff725443dcf958df15c927661f9429aeeb

        SHA256

        98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

        SHA512

        3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

      • \Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

        Filesize

        2.7MB

        MD5

        87e93fd4312521881bc9739cf4e77687

        SHA1

        62a33cff725443dcf958df15c927661f9429aeeb

        SHA256

        98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

        SHA512

        3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

      • \Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

        Filesize

        2.7MB

        MD5

        87e93fd4312521881bc9739cf4e77687

        SHA1

        62a33cff725443dcf958df15c927661f9429aeeb

        SHA256

        98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

        SHA512

        3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

      • \Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

        Filesize

        2.7MB

        MD5

        87e93fd4312521881bc9739cf4e77687

        SHA1

        62a33cff725443dcf958df15c927661f9429aeeb

        SHA256

        98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

        SHA512

        3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

      • \Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

        Filesize

        2.7MB

        MD5

        87e93fd4312521881bc9739cf4e77687

        SHA1

        62a33cff725443dcf958df15c927661f9429aeeb

        SHA256

        98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

        SHA512

        3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

      • \Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

        Filesize

        2.7MB

        MD5

        87e93fd4312521881bc9739cf4e77687

        SHA1

        62a33cff725443dcf958df15c927661f9429aeeb

        SHA256

        98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

        SHA512

        3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

      • \Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

        Filesize

        2.7MB

        MD5

        87e93fd4312521881bc9739cf4e77687

        SHA1

        62a33cff725443dcf958df15c927661f9429aeeb

        SHA256

        98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

        SHA512

        3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

      • \Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

        Filesize

        2.7MB

        MD5

        87e93fd4312521881bc9739cf4e77687

        SHA1

        62a33cff725443dcf958df15c927661f9429aeeb

        SHA256

        98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

        SHA512

        3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

      • \Users\Admin\AppData\Local\Programs\ronawind\libEGL.dll

        Filesize

        468KB

        MD5

        3171b22e16fab918464fcb153e30453b

        SHA1

        523d6489b693de92ea94dc876421ccf4b139cfd7

        SHA256

        56ef67da075e2a182de2d94ae6017e3f9fd285113087dcb7755ee28023e5fe64

        SHA512

        9fca92325c59bb5dd5c41ebf32c90e5b731ab46d09365b6f3386d32848aa744fb12b083268f97d7b95a07a2cbf48ac702f2c97a1dd4afe357186fd385b66cfbd

      • \Users\Admin\AppData\Local\Programs\ronawind\libEGL.dll

        Filesize

        468KB

        MD5

        3171b22e16fab918464fcb153e30453b

        SHA1

        523d6489b693de92ea94dc876421ccf4b139cfd7

        SHA256

        56ef67da075e2a182de2d94ae6017e3f9fd285113087dcb7755ee28023e5fe64

        SHA512

        9fca92325c59bb5dd5c41ebf32c90e5b731ab46d09365b6f3386d32848aa744fb12b083268f97d7b95a07a2cbf48ac702f2c97a1dd4afe357186fd385b66cfbd

      • \Users\Admin\AppData\Local\Programs\ronawind\libGLESv2.dll

        Filesize

        7.2MB

        MD5

        03a914c978b65af2549f5001c0688b6c

        SHA1

        2800791c2903f38542a7e181807957343747e6a1

        SHA256

        869e57011a299243d09159b29a804ec9c6ecb1b833ab2f0f8dd3860a30b83330

        SHA512

        b51dc6865487862be8fa364449c9b28bb5d86d1fe7dfce2d8f857af650b9a8c119cab2c1dd0db0d97a29687954942f95f9f335274510976b95eb25d6b520b09b

      • \Users\Admin\AppData\Local\Programs\ronawind\libGLESv2.dll

        Filesize

        7.2MB

        MD5

        03a914c978b65af2549f5001c0688b6c

        SHA1

        2800791c2903f38542a7e181807957343747e6a1

        SHA256

        869e57011a299243d09159b29a804ec9c6ecb1b833ab2f0f8dd3860a30b83330

        SHA512

        b51dc6865487862be8fa364449c9b28bb5d86d1fe7dfce2d8f857af650b9a8c119cab2c1dd0db0d97a29687954942f95f9f335274510976b95eb25d6b520b09b

      • \Users\Admin\AppData\Local\Programs\ronawind\vk_swiftshader.dll

        Filesize

        5.0MB

        MD5

        0fc9322c9591192cdaa748757486ed6c

        SHA1

        aefbbb381d09d1f48d52d45bb26b088977a67d41

        SHA256

        3a59877511ff66096b3e5bfae39487d6001c657216b6495aac11ae5ecd2e723a

        SHA512

        0927ccf56ce60d2cd7825e0c42c17adacaba184de86d6ce8c1902f5d693c98ca9ac0a3c052ebab70ab1e310e4d6a591a703ede14cdc75a8d25a26710b96480a9

      • \Users\Admin\AppData\Local\Programs\ronawind\vk_swiftshader.dll

        Filesize

        5.0MB

        MD5

        0fc9322c9591192cdaa748757486ed6c

        SHA1

        aefbbb381d09d1f48d52d45bb26b088977a67d41

        SHA256

        3a59877511ff66096b3e5bfae39487d6001c657216b6495aac11ae5ecd2e723a

        SHA512

        0927ccf56ce60d2cd7825e0c42c17adacaba184de86d6ce8c1902f5d693c98ca9ac0a3c052ebab70ab1e310e4d6a591a703ede14cdc75a8d25a26710b96480a9

      • \Users\Admin\AppData\Local\Programs\ronawind\vk_swiftshader.dll

        Filesize

        5.0MB

        MD5

        0fc9322c9591192cdaa748757486ed6c

        SHA1

        aefbbb381d09d1f48d52d45bb26b088977a67d41

        SHA256

        3a59877511ff66096b3e5bfae39487d6001c657216b6495aac11ae5ecd2e723a

        SHA512

        0927ccf56ce60d2cd7825e0c42c17adacaba184de86d6ce8c1902f5d693c98ca9ac0a3c052ebab70ab1e310e4d6a591a703ede14cdc75a8d25a26710b96480a9

      • \Users\Admin\AppData\Local\Programs\ronawind\vk_swiftshader.dll

        Filesize

        5.0MB

        MD5

        0fc9322c9591192cdaa748757486ed6c

        SHA1

        aefbbb381d09d1f48d52d45bb26b088977a67d41

        SHA256

        3a59877511ff66096b3e5bfae39487d6001c657216b6495aac11ae5ecd2e723a

        SHA512

        0927ccf56ce60d2cd7825e0c42c17adacaba184de86d6ce8c1902f5d693c98ca9ac0a3c052ebab70ab1e310e4d6a591a703ede14cdc75a8d25a26710b96480a9

      • \Users\Admin\AppData\Local\Programs\ronawind\vulkan-1.dll

        Filesize

        899KB

        MD5

        c1f13770551b9c9793080d34681c27a8

        SHA1

        c9e704646dbd3c41d455677c5c651b256dab1fe8

        SHA256

        2224ee42a19eafd2959c5a722222a411acbcf15b08f7e8cf8970c455737ffa2a

        SHA512

        643fa95cbfd8f57100eb9f7ed845a43ee3b87dc92bea563cafa191c7b000ed39e6bfe20374a54a4fe2158761a88b17afd9d679a71dea0d06b790ee5cf2f11511

      • \Users\Admin\AppData\Local\Programs\ronawind\vulkan-1.dll

        Filesize

        899KB

        MD5

        c1f13770551b9c9793080d34681c27a8

        SHA1

        c9e704646dbd3c41d455677c5c651b256dab1fe8

        SHA256

        2224ee42a19eafd2959c5a722222a411acbcf15b08f7e8cf8970c455737ffa2a

        SHA512

        643fa95cbfd8f57100eb9f7ed845a43ee3b87dc92bea563cafa191c7b000ed39e6bfe20374a54a4fe2158761a88b17afd9d679a71dea0d06b790ee5cf2f11511

      • \Users\Admin\AppData\Local\Temp\nspACEF.tmp\SpiderBanner.dll

        Filesize

        9KB

        MD5

        17309e33b596ba3a5693b4d3e85cf8d7

        SHA1

        7d361836cf53df42021c7f2b148aec9458818c01

        SHA256

        996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

        SHA512

        1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

      • \Users\Admin\AppData\Local\Temp\nspACEF.tmp\StdUtils.dll

        Filesize

        100KB

        MD5

        c6a6e03f77c313b267498515488c5740

        SHA1

        3d49fc2784b9450962ed6b82b46e9c3c957d7c15

        SHA256

        b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

        SHA512

        9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

      • \Users\Admin\AppData\Local\Temp\nspACEF.tmp\System.dll

        Filesize

        12KB

        MD5

        0d7ad4f45dc6f5aa87f606d0331c6901

        SHA1

        48df0911f0484cbe2a8cdd5362140b63c41ee457

        SHA256

        3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

        SHA512

        c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

      • \Users\Admin\AppData\Local\Temp\nspACEF.tmp\WinShell.dll

        Filesize

        3KB

        MD5

        1cc7c37b7e0c8cd8bf04b6cc283e1e56

        SHA1

        0b9519763be6625bd5abce175dcc59c96d100d4c

        SHA256

        9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

        SHA512

        7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

      • \Users\Admin\AppData\Local\Temp\nspACEF.tmp\WinShell.dll

        Filesize

        3KB

        MD5

        1cc7c37b7e0c8cd8bf04b6cc283e1e56

        SHA1

        0b9519763be6625bd5abce175dcc59c96d100d4c

        SHA256

        9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

        SHA512

        7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

      • \Users\Admin\AppData\Local\Temp\nspACEF.tmp\nsExec.dll

        Filesize

        6KB

        MD5

        ec0504e6b8a11d5aad43b296beeb84b2

        SHA1

        91b5ce085130c8c7194d66b2439ec9e1c206497c

        SHA256

        5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

        SHA512

        3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

      • \Users\Admin\AppData\Local\Temp\nspACEF.tmp\nsis7z.dll

        Filesize

        424KB

        MD5

        80e44ce4895304c6a3a831310fbf8cd0

        SHA1

        36bd49ae21c460be5753a904b4501f1abca53508

        SHA256

        b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

        SHA512

        c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

      We care about your privacy.

      This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.