Resubmissions

18-04-2023 20:38

230418-zezheafh7w 7

03-04-2023 18:01

230403-wlzvzaaa9t 7

03-04-2023 17:41

230403-v9jyzsgb85 7

02-04-2023 22:37

230402-2j33haba52 7

02-04-2023 22:01

230402-1xkyeacb9t 7

Analysis

  • max time kernel
    23s
  • max time network
    125s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20230221-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20230221-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18-04-2023 20:38

General

  • Target

    RonaWindSetup.exe

  • Size

    67.6MB

  • MD5

    d68dc63c71466ab7473b8452773ee381

  • SHA1

    e2b62184339c066f3958975e8d7e9c02f6185dec

  • SHA256

    485c10e2cdfb12719af452698a0dfc4ccc77a5fa875fe9ded9458d50493b657d

  • SHA512

    83ef1e09a2b5d859047ec92f275176a24b281febe34adf133066e9c508cb9b406fe0d50d04df0ee4dd146bd1ec28be1a3d3c931856ec641a1c290d08f018efb3

  • SSDEEP

    1572864:/kn/bfPa1o9Yl/7JJ7Ko7bFZg6+Nk8YQMKRI+FMKNpBVPjIUyY/X:/KbK1o9YjJuyFZ9+mmRKK/bhVv

Score
7/10

Malware Config

Signatures

  • Loads dropped DLL 6 IoCs
  • Checks installed software on the system 1 TTPs

    Looks up Uninstall key entries in the registry to enumerate software on the system.

  • Enumerates physical storage devices 1 TTPs

    Attempts to interact with connected storage/optical drive(s). Likely ransomware behaviour.

  • Enumerates processes with tasklist 1 TTPs 3 IoCs
  • Suspicious behavior: EnumeratesProcesses 4 IoCs
  • Suspicious use of AdjustPrivilegeToken 2 IoCs
  • Suspicious use of WriteProcessMemory 9 IoCs

Processes

  • C:\Users\Admin\AppData\Local\Temp\RonaWindSetup.exe
    "C:\Users\Admin\AppData\Local\Temp\RonaWindSetup.exe"
    1⤵
    • Loads dropped DLL
    • Suspicious behavior: EnumeratesProcesses
    • Suspicious use of AdjustPrivilegeToken
    • Suspicious use of WriteProcessMemory
    PID:680
    • C:\Windows\SysWOW64\cmd.exe
      cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq RonaWind.exe" | %SYSTEMROOT%\System32\find.exe "RonaWind.exe"
      2⤵
      • Suspicious use of WriteProcessMemory
      PID:4740
      • C:\Windows\SysWOW64\tasklist.exe
        tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq RonaWind.exe"
        3⤵
        • Enumerates processes with tasklist
        • Suspicious behavior: EnumeratesProcesses
        • Suspicious use of AdjustPrivilegeToken
        PID:3888
      • C:\Windows\SysWOW64\find.exe
        C:\Windows\System32\find.exe "RonaWind.exe"
        3⤵
          PID:3144
    • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
      "C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe"
      1⤵
        PID:2192
        • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
          "C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\ronawind" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1596 --field-trial-handle=1644,i,3586751637613352103,17673956097402375761,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
          2⤵
            PID:4452
          • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
            C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe C:\Users\Admin\AppData\Local\Programs\ronawind\resources\app.asar\src\inject.js
            2⤵
              PID:1792
              • C:\Windows\system32\tasklist.exe
                tasklist
                3⤵
                • Enumerates processes with tasklist
                PID:4724
            • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
              "C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\ronawind" --mojo-platform-channel-handle=2052 --field-trial-handle=1644,i,3586751637613352103,17673956097402375761,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
              2⤵
                PID:5112
            • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
              "C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe"
              1⤵
                PID:2452
                • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
                  "C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe" --type=gpu-process --user-data-dir="C:\Users\Admin\AppData\Roaming\ronawind" --gpu-preferences=UAAAAAAAAADgAAAYAAAAAAAAAAAAAAAAAABgAAAAAAAwAAAAAAAAAAAAAAAQAAAAAAAAAAAAAAAAAAAAAAAAAEgAAAAAAAAASAAAAAAAAAAYAAAAAgAAABAAAAAAAAAAGAAAAAAAAAAQAAAAAAAAAAAAAAAOAAAAEAAAAAAAAAABAAAADgAAAAgAAAAAAAAACAAAAAAAAAA= --mojo-platform-channel-handle=1504 --field-trial-handle=1676,i,6741140271507734973,10762424120007241465,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:2
                  2⤵
                    PID:2224
                  • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
                    C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe C:\Users\Admin\AppData\Local\Programs\ronawind\resources\app.asar\src\inject.js
                    2⤵
                      PID:2064
                      • C:\Windows\system32\tasklist.exe
                        tasklist
                        3⤵
                        • Enumerates processes with tasklist
                        PID:4396
                    • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe
                      "C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --user-data-dir="C:\Users\Admin\AppData\Roaming\ronawind" --mojo-platform-channel-handle=1916 --field-trial-handle=1676,i,6741140271507734973,10762424120007241465,131072 --disable-features=SpareRendererForSitePerProcess,WinRetrieveSuggestionsOnlyOnDemand /prefetch:8
                      2⤵
                        PID:1044

                    Network

                    MITRE ATT&CK Enterprise v6

                    Replay Monitor

                    Loading Replay Monitor...

                    Downloads

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\D3DCompiler_47.dll

                      Filesize

                      4.7MB

                      MD5

                      cb9807f6cf55ad799e920b7e0f97df99

                      SHA1

                      bb76012ded5acd103adad49436612d073d159b29

                      SHA256

                      5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

                      SHA512

                      f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

                      Filesize

                      154.5MB

                      MD5

                      bf1c8883c15bca4b7ba6a5bb44012f2f

                      SHA1

                      9864ce59c85603bab48f58a56894fd892cecc505

                      SHA256

                      da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

                      SHA512

                      82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

                      Filesize

                      154.5MB

                      MD5

                      bf1c8883c15bca4b7ba6a5bb44012f2f

                      SHA1

                      9864ce59c85603bab48f58a56894fd892cecc505

                      SHA256

                      da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

                      SHA512

                      82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

                      Filesize

                      154.5MB

                      MD5

                      bf1c8883c15bca4b7ba6a5bb44012f2f

                      SHA1

                      9864ce59c85603bab48f58a56894fd892cecc505

                      SHA256

                      da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

                      SHA512

                      82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

                      Filesize

                      154.5MB

                      MD5

                      bf1c8883c15bca4b7ba6a5bb44012f2f

                      SHA1

                      9864ce59c85603bab48f58a56894fd892cecc505

                      SHA256

                      da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

                      SHA512

                      82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

                      Filesize

                      154.5MB

                      MD5

                      bf1c8883c15bca4b7ba6a5bb44012f2f

                      SHA1

                      9864ce59c85603bab48f58a56894fd892cecc505

                      SHA256

                      da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

                      SHA512

                      82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

                      Filesize

                      154.5MB

                      MD5

                      bf1c8883c15bca4b7ba6a5bb44012f2f

                      SHA1

                      9864ce59c85603bab48f58a56894fd892cecc505

                      SHA256

                      da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

                      SHA512

                      82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

                      Filesize

                      154.5MB

                      MD5

                      bf1c8883c15bca4b7ba6a5bb44012f2f

                      SHA1

                      9864ce59c85603bab48f58a56894fd892cecc505

                      SHA256

                      da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

                      SHA512

                      82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

                      Filesize

                      144.7MB

                      MD5

                      5d0b103d0f7d31cb89bd6d19c9a60246

                      SHA1

                      51e135012b9f29c6f3fd5c0e52b37d60cbda4e0b

                      SHA256

                      556586832da78d9d92b9e19278855980581b083586b2d6a190657a791ff33b87

                      SHA512

                      3c444174b920e35649feebd75bebdbc0997381faf176a6dd724099c4b60ae1c466a105230d4f9b3bfb095bbff23dac171c5ce72ae526f0df6e1b8e2bfcdccc2d

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\RonaWind.exe

                      Filesize

                      140.2MB

                      MD5

                      7f8fb7705609feaa4cdbf7163f028a86

                      SHA1

                      aea4ccba1125a3be050cbad3423115e83231d2b1

                      SHA256

                      0c021c84b099b8d4443e3c0e0310f6f84840c77dacf395c1c5591d7f138d20ed

                      SHA512

                      924a3ac52fd2e4cd762f36a14e5b7bd31d19c70e443faaf8cc07d637a028ec51ffabc0c6f926de0a47370226dd522f58ec67cf02300e1fef5fafab3de1575b82

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\chrome_100_percent.pak

                      Filesize

                      126KB

                      MD5

                      8626e1d68e87f86c5b4dabdf66591913

                      SHA1

                      4cd7b0ac0d3f72587708064a7b0a3beca3f7b81c

                      SHA256

                      2caa1da9b6a6e87bdb673977fee5dd771591a1b6ed5d3c5f14b024130a5d1a59

                      SHA512

                      03bcd8562482009060f249d6a0dd7382fc94d669a2094dec08e8d119be51bef2c3b7b484bb5b7f805ae98e372dab9383a2c11a63ab0f5644146556b1bb9a4c99

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\chrome_100_percent.pak

                      Filesize

                      126KB

                      MD5

                      8626e1d68e87f86c5b4dabdf66591913

                      SHA1

                      4cd7b0ac0d3f72587708064a7b0a3beca3f7b81c

                      SHA256

                      2caa1da9b6a6e87bdb673977fee5dd771591a1b6ed5d3c5f14b024130a5d1a59

                      SHA512

                      03bcd8562482009060f249d6a0dd7382fc94d669a2094dec08e8d119be51bef2c3b7b484bb5b7f805ae98e372dab9383a2c11a63ab0f5644146556b1bb9a4c99

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\chrome_200_percent.pak

                      Filesize

                      175KB

                      MD5

                      48515d600258d60019c6b9c6421f79f6

                      SHA1

                      0ef0b44641d38327a360aa6954b3b6e5aab2af16

                      SHA256

                      07bee34e189fe9a8789aed78ea59ad41414b6e611e7d74da62f8e6ca36af01ce

                      SHA512

                      b7266bc8abc55bd389f594dac0c0641ecf07703f35d769b87e731b5fdf4353316d44f3782a4329b3f0e260dead6b114426ddb1b0fb8cd4a51e0b90635f1191d9

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\d3dcompiler_47.dll

                      Filesize

                      4.7MB

                      MD5

                      cb9807f6cf55ad799e920b7e0f97df99

                      SHA1

                      bb76012ded5acd103adad49436612d073d159b29

                      SHA256

                      5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

                      SHA512

                      f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\d3dcompiler_47.dll

                      Filesize

                      4.7MB

                      MD5

                      cb9807f6cf55ad799e920b7e0f97df99

                      SHA1

                      bb76012ded5acd103adad49436612d073d159b29

                      SHA256

                      5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

                      SHA512

                      f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

                      Filesize

                      2.7MB

                      MD5

                      87e93fd4312521881bc9739cf4e77687

                      SHA1

                      62a33cff725443dcf958df15c927661f9429aeeb

                      SHA256

                      98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

                      SHA512

                      3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

                      Filesize

                      2.7MB

                      MD5

                      87e93fd4312521881bc9739cf4e77687

                      SHA1

                      62a33cff725443dcf958df15c927661f9429aeeb

                      SHA256

                      98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

                      SHA512

                      3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

                      Filesize

                      2.7MB

                      MD5

                      87e93fd4312521881bc9739cf4e77687

                      SHA1

                      62a33cff725443dcf958df15c927661f9429aeeb

                      SHA256

                      98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

                      SHA512

                      3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

                      Filesize

                      2.7MB

                      MD5

                      87e93fd4312521881bc9739cf4e77687

                      SHA1

                      62a33cff725443dcf958df15c927661f9429aeeb

                      SHA256

                      98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

                      SHA512

                      3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

                      Filesize

                      2.7MB

                      MD5

                      87e93fd4312521881bc9739cf4e77687

                      SHA1

                      62a33cff725443dcf958df15c927661f9429aeeb

                      SHA256

                      98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

                      SHA512

                      3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

                      Filesize

                      2.7MB

                      MD5

                      87e93fd4312521881bc9739cf4e77687

                      SHA1

                      62a33cff725443dcf958df15c927661f9429aeeb

                      SHA256

                      98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

                      SHA512

                      3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

                      Filesize

                      2.7MB

                      MD5

                      87e93fd4312521881bc9739cf4e77687

                      SHA1

                      62a33cff725443dcf958df15c927661f9429aeeb

                      SHA256

                      98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

                      SHA512

                      3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

                      Filesize

                      2.7MB

                      MD5

                      87e93fd4312521881bc9739cf4e77687

                      SHA1

                      62a33cff725443dcf958df15c927661f9429aeeb

                      SHA256

                      98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

                      SHA512

                      3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\ffmpeg.dll

                      Filesize

                      2.7MB

                      MD5

                      87e93fd4312521881bc9739cf4e77687

                      SHA1

                      62a33cff725443dcf958df15c927661f9429aeeb

                      SHA256

                      98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

                      SHA512

                      3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\icudtl.dat

                      Filesize

                      10.1MB

                      MD5

                      adfd2a259608207f256aeadb48635645

                      SHA1

                      300bb0ae3d6b6514fb144788643d260b602ac6a4

                      SHA256

                      7c8c7b05d70145120b45ccb64bf75bee3c63ff213e3e64d092d500a96afb8050

                      SHA512

                      8397e74c7a85b0a2987cae9f2c66ce446923aa4140686d91a1e92b701e16b73a6ce459540e718858607ecb12659bedac0aa95c2713c811a2bc2d402691ff29dc

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\libEGL.dll

                      Filesize

                      468KB

                      MD5

                      3171b22e16fab918464fcb153e30453b

                      SHA1

                      523d6489b693de92ea94dc876421ccf4b139cfd7

                      SHA256

                      56ef67da075e2a182de2d94ae6017e3f9fd285113087dcb7755ee28023e5fe64

                      SHA512

                      9fca92325c59bb5dd5c41ebf32c90e5b731ab46d09365b6f3386d32848aa744fb12b083268f97d7b95a07a2cbf48ac702f2c97a1dd4afe357186fd385b66cfbd

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\libEGL.dll

                      Filesize

                      468KB

                      MD5

                      3171b22e16fab918464fcb153e30453b

                      SHA1

                      523d6489b693de92ea94dc876421ccf4b139cfd7

                      SHA256

                      56ef67da075e2a182de2d94ae6017e3f9fd285113087dcb7755ee28023e5fe64

                      SHA512

                      9fca92325c59bb5dd5c41ebf32c90e5b731ab46d09365b6f3386d32848aa744fb12b083268f97d7b95a07a2cbf48ac702f2c97a1dd4afe357186fd385b66cfbd

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\libGLESv2.dll

                      Filesize

                      7.2MB

                      MD5

                      03a914c978b65af2549f5001c0688b6c

                      SHA1

                      2800791c2903f38542a7e181807957343747e6a1

                      SHA256

                      869e57011a299243d09159b29a804ec9c6ecb1b833ab2f0f8dd3860a30b83330

                      SHA512

                      b51dc6865487862be8fa364449c9b28bb5d86d1fe7dfce2d8f857af650b9a8c119cab2c1dd0db0d97a29687954942f95f9f335274510976b95eb25d6b520b09b

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\libGLESv2.dll

                      Filesize

                      7.2MB

                      MD5

                      03a914c978b65af2549f5001c0688b6c

                      SHA1

                      2800791c2903f38542a7e181807957343747e6a1

                      SHA256

                      869e57011a299243d09159b29a804ec9c6ecb1b833ab2f0f8dd3860a30b83330

                      SHA512

                      b51dc6865487862be8fa364449c9b28bb5d86d1fe7dfce2d8f857af650b9a8c119cab2c1dd0db0d97a29687954942f95f9f335274510976b95eb25d6b520b09b

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\libegl.dll

                      Filesize

                      468KB

                      MD5

                      3171b22e16fab918464fcb153e30453b

                      SHA1

                      523d6489b693de92ea94dc876421ccf4b139cfd7

                      SHA256

                      56ef67da075e2a182de2d94ae6017e3f9fd285113087dcb7755ee28023e5fe64

                      SHA512

                      9fca92325c59bb5dd5c41ebf32c90e5b731ab46d09365b6f3386d32848aa744fb12b083268f97d7b95a07a2cbf48ac702f2c97a1dd4afe357186fd385b66cfbd

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\libglesv2.dll

                      Filesize

                      7.2MB

                      MD5

                      03a914c978b65af2549f5001c0688b6c

                      SHA1

                      2800791c2903f38542a7e181807957343747e6a1

                      SHA256

                      869e57011a299243d09159b29a804ec9c6ecb1b833ab2f0f8dd3860a30b83330

                      SHA512

                      b51dc6865487862be8fa364449c9b28bb5d86d1fe7dfce2d8f857af650b9a8c119cab2c1dd0db0d97a29687954942f95f9f335274510976b95eb25d6b520b09b

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\locales\en-US.pak

                      Filesize

                      326KB

                      MD5

                      19d18f8181a4201d542c7195b1e9ff81

                      SHA1

                      7debd3cf27bbe200c6a90b34adacb7394cb5929c

                      SHA256

                      1d20e626444759c2b72aa6e998f14a032408d2b32f957c12ec3abd52831338fb

                      SHA512

                      af07e1b08bbf2dd032a5a51a88ee2923650955873753629a086cad3b1600ce66ca7f9ed31b8ca901c126c10216877b24e123144bb0048f2a1e7757719aae73f2

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\resources.pak

                      Filesize

                      5.2MB

                      MD5

                      a25607b61da11ffc7def1bf5aebd12d8

                      SHA1

                      2d0d846f49437cc424263600ffd709621d695fa7

                      SHA256

                      587844d8e4afcf492fe17cd70bf60c175701726eda1ca0768d1c6913f0713bd9

                      SHA512

                      0abb12cedefb272b7dd7bb9eba14f569c28d5d0eba49e4212f54ee6efd36e7bd0398d2da37bafded9bfefbd5abda4481bce04f12848c50200a1cdeea20537dfc

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\resources\app.asar

                      Filesize

                      1.9MB

                      MD5

                      e037dd64f4a61ba2fdd2e1a1454044e0

                      SHA1

                      4e5dbfff80c32cd8ea148b115b7e874289cdd729

                      SHA256

                      1b66ee832a0df4d4643e3caf5e6ac3a499de5018ba35df213d8bdd935aba08ee

                      SHA512

                      4edef1db852ad1f1e79f1c298493f3ec81e85e68a194e76d4f7dd56c3f990547acf91afa159832e911e679824db90fb23ac3c18ba5605a37c202a1b113131d9b

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\v8_context_snapshot.bin

                      Filesize

                      465KB

                      MD5

                      73828e08c1432e49a17416bb7dd2abb4

                      SHA1

                      83167a7dd282aef3ad8be66a2c168a6e15706616

                      SHA256

                      91fab2bc8a09cc544625bde8d6e9568619a2292aea1192fb36d804bc7adc19cf

                      SHA512

                      27ed3c1bf35128af87f8a45f999560991d162976360e2b4fbc980fd93373050432a9f0a3db88924529d2284a173772f555b9c4ffe80f46ecef7976a3ebae9ac5

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\vk_swiftshader.dll

                      Filesize

                      5.0MB

                      MD5

                      0fc9322c9591192cdaa748757486ed6c

                      SHA1

                      aefbbb381d09d1f48d52d45bb26b088977a67d41

                      SHA256

                      3a59877511ff66096b3e5bfae39487d6001c657216b6495aac11ae5ecd2e723a

                      SHA512

                      0927ccf56ce60d2cd7825e0c42c17adacaba184de86d6ce8c1902f5d693c98ca9ac0a3c052ebab70ab1e310e4d6a591a703ede14cdc75a8d25a26710b96480a9

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\vk_swiftshader.dll

                      Filesize

                      5.0MB

                      MD5

                      0fc9322c9591192cdaa748757486ed6c

                      SHA1

                      aefbbb381d09d1f48d52d45bb26b088977a67d41

                      SHA256

                      3a59877511ff66096b3e5bfae39487d6001c657216b6495aac11ae5ecd2e723a

                      SHA512

                      0927ccf56ce60d2cd7825e0c42c17adacaba184de86d6ce8c1902f5d693c98ca9ac0a3c052ebab70ab1e310e4d6a591a703ede14cdc75a8d25a26710b96480a9

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\vk_swiftshader_icd.json

                      Filesize

                      106B

                      MD5

                      8642dd3a87e2de6e991fae08458e302b

                      SHA1

                      9c06735c31cec00600fd763a92f8112d085bd12a

                      SHA256

                      32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

                      SHA512

                      f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\vulkan-1.dll

                      Filesize

                      899KB

                      MD5

                      c1f13770551b9c9793080d34681c27a8

                      SHA1

                      c9e704646dbd3c41d455677c5c651b256dab1fe8

                      SHA256

                      2224ee42a19eafd2959c5a722222a411acbcf15b08f7e8cf8970c455737ffa2a

                      SHA512

                      643fa95cbfd8f57100eb9f7ed845a43ee3b87dc92bea563cafa191c7b000ed39e6bfe20374a54a4fe2158761a88b17afd9d679a71dea0d06b790ee5cf2f11511

                    • C:\Users\Admin\AppData\Local\Programs\ronawind\vulkan-1.dll

                      Filesize

                      899KB

                      MD5

                      c1f13770551b9c9793080d34681c27a8

                      SHA1

                      c9e704646dbd3c41d455677c5c651b256dab1fe8

                      SHA256

                      2224ee42a19eafd2959c5a722222a411acbcf15b08f7e8cf8970c455737ffa2a

                      SHA512

                      643fa95cbfd8f57100eb9f7ed845a43ee3b87dc92bea563cafa191c7b000ed39e6bfe20374a54a4fe2158761a88b17afd9d679a71dea0d06b790ee5cf2f11511

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\LICENSE.electron.txt

                      Filesize

                      1KB

                      MD5

                      4d42118d35941e0f664dddbd83f633c5

                      SHA1

                      2b21ec5f20fe961d15f2b58efb1368e66d202e5c

                      SHA256

                      5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

                      SHA512

                      3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\LICENSES.chromium.html

                      Filesize

                      6.4MB

                      MD5

                      c3528648bedbde1223a2faab1a3f9af3

                      SHA1

                      934d3c8f184258338ff380964ed89053ce69ac5b

                      SHA256

                      57b8e5a3f2cd62805001aefca035c7348b4d1abac157e6df3d798bb31f2ec3d2

                      SHA512

                      3e3cc0fd7a55f67ee0afff9696beef33bdc9524375bbe9d8e8f7660fd408c756c1156ca0b02ecccdc22799c7b8e74dbde012732ad6b3ebe0a3cfc54ff5132b35

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\RonaWind.exe

                      Filesize

                      154.5MB

                      MD5

                      bf1c8883c15bca4b7ba6a5bb44012f2f

                      SHA1

                      9864ce59c85603bab48f58a56894fd892cecc505

                      SHA256

                      da2e4fb15f6f4059a5a8e9ce9f336781de574305c83cc76ded47c0f6d356c246

                      SHA512

                      82df03fa71f946704696f5116760ede96901d08265a3155269b3e0522d9f124e35b7783708c2369587594ef10ed1f12e3d229c5d6a993ee8868eba41a77f5ad9

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\chrome_200_percent.pak

                      Filesize

                      175KB

                      MD5

                      48515d600258d60019c6b9c6421f79f6

                      SHA1

                      0ef0b44641d38327a360aa6954b3b6e5aab2af16

                      SHA256

                      07bee34e189fe9a8789aed78ea59ad41414b6e611e7d74da62f8e6ca36af01ce

                      SHA512

                      b7266bc8abc55bd389f594dac0c0641ecf07703f35d769b87e731b5fdf4353316d44f3782a4329b3f0e260dead6b114426ddb1b0fb8cd4a51e0b90635f1191d9

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\d3dcompiler_47.dll

                      Filesize

                      4.7MB

                      MD5

                      cb9807f6cf55ad799e920b7e0f97df99

                      SHA1

                      bb76012ded5acd103adad49436612d073d159b29

                      SHA256

                      5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

                      SHA512

                      f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\ffmpeg.dll

                      Filesize

                      2.7MB

                      MD5

                      87e93fd4312521881bc9739cf4e77687

                      SHA1

                      62a33cff725443dcf958df15c927661f9429aeeb

                      SHA256

                      98b1e8096f1be8d40c781d96f05cb19f7ced321bdee2b145cd6fd990b156f01c

                      SHA512

                      3bcdd88cdeb7dfdca8162401b7473bf454896f3889290ea18a3ed01b0da0bd66e12d0e2758c41a27c318a4e21f152e3927b371c0ae4d4d9a11fae0d3a7fb40dc

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\icudtl.dat

                      Filesize

                      10.1MB

                      MD5

                      adfd2a259608207f256aeadb48635645

                      SHA1

                      300bb0ae3d6b6514fb144788643d260b602ac6a4

                      SHA256

                      7c8c7b05d70145120b45ccb64bf75bee3c63ff213e3e64d092d500a96afb8050

                      SHA512

                      8397e74c7a85b0a2987cae9f2c66ce446923aa4140686d91a1e92b701e16b73a6ce459540e718858607ecb12659bedac0aa95c2713c811a2bc2d402691ff29dc

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\libEGL.dll

                      Filesize

                      468KB

                      MD5

                      3171b22e16fab918464fcb153e30453b

                      SHA1

                      523d6489b693de92ea94dc876421ccf4b139cfd7

                      SHA256

                      56ef67da075e2a182de2d94ae6017e3f9fd285113087dcb7755ee28023e5fe64

                      SHA512

                      9fca92325c59bb5dd5c41ebf32c90e5b731ab46d09365b6f3386d32848aa744fb12b083268f97d7b95a07a2cbf48ac702f2c97a1dd4afe357186fd385b66cfbd

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\libGLESv2.dll

                      Filesize

                      7.2MB

                      MD5

                      03a914c978b65af2549f5001c0688b6c

                      SHA1

                      2800791c2903f38542a7e181807957343747e6a1

                      SHA256

                      869e57011a299243d09159b29a804ec9c6ecb1b833ab2f0f8dd3860a30b83330

                      SHA512

                      b51dc6865487862be8fa364449c9b28bb5d86d1fe7dfce2d8f857af650b9a8c119cab2c1dd0db0d97a29687954942f95f9f335274510976b95eb25d6b520b09b

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\af.pak

                      Filesize

                      353KB

                      MD5

                      464e5eeaba5eff8bc93995ba2cb2d73f

                      SHA1

                      3b216e0c5246c874ad0ad7d3e1636384dad2255d

                      SHA256

                      0ad547bb1dc57907adeb02e1be3017cce78f6e60b8b39395fe0e8b62285797a1

                      SHA512

                      726d6c41a9dbf1f5f2eff5b503ab68d879b088b801832c13fba7eb853302b16118cacda4748a4144af0f396074449245a42b2fe240429b1afcb7197fa0cb6d41

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\am.pak

                      Filesize

                      569KB

                      MD5

                      2c933f084d960f8094e24bee73fa826c

                      SHA1

                      91dfddc2cff764275872149d454a8397a1a20ab1

                      SHA256

                      fa1e44215bd5acc7342c431a3b1fddb6e8b6b02220b4599167f7d77a29f54450

                      SHA512

                      3c9ecfb0407de2aa6585f4865ad54eeb2ec6519c9d346e2d33ed0e30be6cc3ebfed676a08637d42c2ca8fa6cfefb4091feb0c922ff71f09a2b89cdd488789774

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\ar.pak

                      Filesize

                      624KB

                      MD5

                      fdbad4c84ac66ee78a5c8dd16d259c43

                      SHA1

                      3ce3cd751bb947b19d004bd6916b67e8db5017ac

                      SHA256

                      a62b848a002474a8ea37891e148cbaf4af09bdba7dafebdc0770c9a9651f7e3b

                      SHA512

                      376519c5c2e42d21acedb1ef47184691a2f286332451d5b8d6aac45713861f07c852fb93bd9470ff5ee017d6004aba097020580f1ba253a5295ac1851f281e13

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\bg.pak

                      Filesize

                      652KB

                      MD5

                      38bcabb6a0072b3a5f8b86b693eb545d

                      SHA1

                      d36c8549fe0f69d05ffdaffa427d3ddf68dd6d89

                      SHA256

                      898621731ac3471a41f8b3a7bf52e7f776e8928652b37154bc7c1299f1fd92e1

                      SHA512

                      002adbdc17b6013becc4909daf2febb74ce88733c78e968938b792a52c9c5a62834617f606e4cb3774ae2dad9758d2b8678d7764bb6dcfe468881f1107db13ef

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\bn.pak

                      Filesize

                      838KB

                      MD5

                      9340520696e7cb3c2495a78893e50add

                      SHA1

                      eed5aeef46131e4c70cd578177c527b656d08586

                      SHA256

                      1ea245646a4b4386606f03c8a3916a3607e2adbbc88f000976be36db410a1e39

                      SHA512

                      62507685d5542cfcd394080917b3a92ca197112feea9c2ddc1dfc77382a174c7ddf758d85af66cd322692215cb0402865b2a2b212694a36da6b592028caafcdf

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\ca.pak

                      Filesize

                      400KB

                      MD5

                      4cd6b3a91669ddcfcc9eef9b679ab65c

                      SHA1

                      43c41cb00067de68d24f72e0f5c77d3b50b71f83

                      SHA256

                      56efff228ee3e112357d6121b2256a2c3acd718769c89413de82c9d4305459c6

                      SHA512

                      699be9962d8aae241abd1d1f35cd8468ffbd6157bcd6bdf2c599d902768351b247baad6145b9826d87271fd4a19744eb11bf7065db7fefb01d66d2f1f39015a9

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\cs.pak

                      Filesize

                      409KB

                      MD5

                      eeee212072ea6589660c9eb216855318

                      SHA1

                      d50f9e6ca528725ced8ac186072174b99b48ea05

                      SHA256

                      de92f14480770401e39e22dcf3dd36de5ad3ed22e44584c31c37cd99e71c4a43

                      SHA512

                      ea068186a2e611fb98b9580f2c5ba6fd1f31b532e021ef9669e068150c27deee3d60fd9ff7567b9eb5d0f98926b24defabc9b64675b49e02a6f10e71bb714ac8

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\da.pak

                      Filesize

                      371KB

                      MD5

                      e58916a6af2805db6397624b8387e1c0

                      SHA1

                      f27d9a10796735de61bbdcb2684d89e6782ef640

                      SHA256

                      1108efa686a1f7e24380d405083acab23d5c33a9ddf562ceaad9e6c0b9f75b00

                      SHA512

                      9d9d49443722bdc206345b815665046fdecaefe2ab2a23af16daa57cc3ef5d273f0c95808e29b4c8457bcf5c473ed1097fe0917d07e33cb18ff6922b9a041a59

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\de.pak

                      Filesize

                      397KB

                      MD5

                      e0d3e944726b5669178fda09a80a2f3f

                      SHA1

                      b5f60c57f1fe58675c3b3e05e0de853c588218ad

                      SHA256

                      9641546e0c030b4817fc3f7d7fc71aad637ae3f0bfbf1e9c956dd1a53a7be7bf

                      SHA512

                      e6a52be58e13bf791a843c9511b6c0f8d923206359ef81305af249be85cac6b7583ddf13cf1071aff3772da59f6ecc9c539ab2453790e56ada873e755138da4b

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\el.pak

                      Filesize

                      712KB

                      MD5

                      e66a75680f21ce281995f37099045714

                      SHA1

                      d553e80658ee1eea5b0912db1ecc4e27b0ed4790

                      SHA256

                      21d1d273124648a435674c7877a98110d997cf6992469c431fe502bbcc02641f

                      SHA512

                      d3757529dd85ef7989d9d4cecf3f7d87c9eb4beda965d8e2c87ee23b8baaec3fdff41fd53ba839215a37404b17b8fe2586b123557f09d201b13c7736c736b096

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\en-GB.pak

                      Filesize

                      324KB

                      MD5

                      825ed4c70c942939ffb94e77a4593903

                      SHA1

                      7a3faee9bf4c915b0f116cb90cec961dda770468

                      SHA256

                      e11e8db78ae12f8d735632ba9fd078ec66c83529cb1fd86a31ab401f6f833c16

                      SHA512

                      41325bec22af2e5ef8e9b26c48f2dfc95763a249ccb00e608b7096ec6236ab9a955de7e2340fd9379d09ac2234aee69aed2a24fe49382ffd48742d72a929c56a

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\en-US.pak

                      Filesize

                      326KB

                      MD5

                      19d18f8181a4201d542c7195b1e9ff81

                      SHA1

                      7debd3cf27bbe200c6a90b34adacb7394cb5929c

                      SHA256

                      1d20e626444759c2b72aa6e998f14a032408d2b32f957c12ec3abd52831338fb

                      SHA512

                      af07e1b08bbf2dd032a5a51a88ee2923650955873753629a086cad3b1600ce66ca7f9ed31b8ca901c126c10216877b24e123144bb0048f2a1e7757719aae73f2

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\es-419.pak

                      Filesize

                      395KB

                      MD5

                      7da3e8aa47ba35d014e1d2a32982a5bb

                      SHA1

                      8e35320b16305ad9f16cb0f4c881a89818cd75bb

                      SHA256

                      7f85673cf80d1e80acfc94fb7568a8c63de79a13a1bb6b9d825b7e9f338ef17c

                      SHA512

                      1fca90888eb067972bccf74dd5d09bb3fce2ceb153589495088d5056ed4bdede15d54318af013c2460f0e8b5b1a5c6484adf0ed84f4b0b3c93130b086da5c3bf

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\es.pak

                      Filesize

                      394KB

                      MD5

                      2b7583747afa8b4382c96b02e33567e8

                      SHA1

                      314a18dde3cbbaebd693548c73525a3ac8f37be7

                      SHA256

                      6eb8265c9e704e409efae40bdbce5cf88e8285ad4425ccb7fa71335fa6ad55ac

                      SHA512

                      2cb7a152deb401b2abec03739f8cbd92e66b51cb2ff661f74e8e8491f9b466086a34f200cb5c6d66f1f52b6dca8841c3da2d1d880f03399f53271496bb66d652

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\et.pak

                      Filesize

                      356KB

                      MD5

                      ccc71f88984a7788c8d01add2252d019

                      SHA1

                      6a87752eac3044792a93599428f31d25debea369

                      SHA256

                      d69489a723b304e305cb1767e6c8da5d5d1d237e50f6ddc76e941dcb01684944

                      SHA512

                      d35ccd639f2c199862e178a9fab768d7db10d5a654bc3bc1fab45d00ceb35a01119a5b4d199e2db3c3576f512b108f4a1df7faf6624d961c0fc4bca5af5f0e07

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\fa.pak

                      Filesize

                      577KB

                      MD5

                      2e37fd4e23a1707a1eccea3264508dff

                      SHA1

                      e00e58ed06584b19b18e9d28b1d52dbfc36d70f3

                      SHA256

                      b9ee861e1bdecffe6a197067905279ea77c180844a793f882c42f2b70541e25e

                      SHA512

                      7c467f434eb0ce8e4a851761ae9bd7a9e292aab48e8e653e996f8ca598d0eb5e07ec34e2b23e544f3b38439dc3b8e3f7a0dfd6a8e28169aa95ceff42bf534366

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\fi.pak

                      Filesize

                      365KB

                      MD5

                      f5f176adae8cec52dde0a44dae03a3a9

                      SHA1

                      c4dcecde9aa3a93ec942587b44cbbaffc8e8bea7

                      SHA256

                      4e5a63b1e70f96da3e7f17660b511c3cdd67e630e7af29a400f24e395bc9ab4a

                      SHA512

                      4016afa43718dd8499d27a3ddcc3efc0031eaf965c6860bc4b274f3172deba17aec05b962fcdd0a808b01b858cf43a3fdbdf90aa3d292f55fa9b62571538da94

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\fil.pak

                      Filesize

                      410KB

                      MD5

                      d7df2ea381f37d6c92e4f18290c6ffe0

                      SHA1

                      7cacf08455aa7d68259fcba647ee3d9ae4c7c5e4

                      SHA256

                      db4a63fa0d5b2baba71d4ba0923caed540099db6b1d024a0d48c3be10c9eed5a

                      SHA512

                      96fc028455f1cea067b3a3dd99d88a19a271144d73dff352a3e08b57338e513500925787f33495cd744fe4122dff2d2ee56e60932fc02e04feed2ec1e0c3533f

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\fr.pak

                      Filesize

                      426KB

                      MD5

                      e3037594b18590d02837e4c4af7362b0

                      SHA1

                      8a7168a3573431db50fa7e43cd8ab9b61a1f7e3a

                      SHA256

                      6db92b75f3ccd6814aaa33f87099fde12177f79ac5483cafe3f2bfcf0b23f4d9

                      SHA512

                      24b75a411c796559d61e7fa52e60db46f9870487b782436f9e219ae06991490f8b051b3ff38e404e50e4e6f90b1ad7e04ebfa0aa9e42f107c28927f0f430d27e

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\gu.pak

                      Filesize

                      813KB

                      MD5

                      308619d65b677d99f48b74ccfe060567

                      SHA1

                      9f834df93fd48f4fb4ca30c4058e23288cf7d35e

                      SHA256

                      e40ee4f24839f9e20b48d057bf3216bc58542c2e27cb40b9d2f3f8a1ea5bfbb4

                      SHA512

                      3ca84ad71f00b9f7cc61f3906c51b263f18453fce11ec6c7f9edfe2c7d215e3550c336e892bd240a68a6815af599cc20d60203294f14adb133145ca01fe4608f

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\he.pak

                      Filesize

                      507KB

                      MD5

                      7f6859bce77448a7d304a68fd9fc86e3

                      SHA1

                      a9e6471cc7c00c14ec3838d45ff7653316caf4fb

                      SHA256

                      2b553b86347cb0d023b1b4de3bf0594a70691dfec7278e55bb05a83866efc125

                      SHA512

                      6f689a9bb29d5b1ee23bcf53dd14b28e84596c91e8657c346ba0c848a03cfc25b3826666f13ad9e3a35b72de3b3ae67ea86893ddd90a762104b7d205f7e6c493

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\hi.pak

                      Filesize

                      848KB

                      MD5

                      b5dfce8e3ba0aec2721cc1692b0ad698

                      SHA1

                      c5d6fa21a9ba3d526f3e998e3f627afb8d1eecf3

                      SHA256

                      b1c7fb6909c8a416b513d6de21eea0b5a6b13c7f0a94cabd0d9154b5834a5e8b

                      SHA512

                      facf0a9b81af6bb35d0fc5e69809d5c986a2c91a166e507784bdad115644b96697fe504b8d70d9bbb06f0c558f746c085d37e385eef41f0a1c29729d3d97980f

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\hr.pak

                      Filesize

                      397KB

                      MD5

                      255f808210dbf995446d10ff436e0946

                      SHA1

                      1785d3293595f0b13648fb28aec6936c48ea3111

                      SHA256

                      4df972b7f6d81aa7bdc39e2441310a37f746ae5015146b4e434a878d1244375b

                      SHA512

                      8b1a4d487b0782055717b718d58cd21e815b874e2686cdfd2087876b70ae75f9182f783c70bf747cf4ca17a3afc68517a9db4c99449fa09bef658b5e68087f2a

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\hu.pak

                      Filesize

                      427KB

                      MD5

                      2aa0a175df21583a68176742400c6508

                      SHA1

                      3c25ba31c2b698e0c88e7d01b2cc241f0916e79a

                      SHA256

                      b59f932df822ab1a87e8aab4bbb7c549db15899f259f4c50ae28f8d8c7ce1e72

                      SHA512

                      03a16feb0601407e96bcb43af9bdb21e5218c2700c9f3cfd5f9690d0b4528f9dc17e4cc690d8c9132d4e0b26d7faafd90aa3f5e57237e06fb81aab7ab77f6c03

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\id.pak

                      Filesize

                      350KB

                      MD5

                      b6fcd5160a3a1ae1f65b0540347a13f2

                      SHA1

                      4cf37346318efb67908bba7380dbad30229c4d3d

                      SHA256

                      7fd715914e3b0cf2048d4429f3236e0660d5bd5e61623c8fef9b8e474c2ac313

                      SHA512

                      a8b4a96e8f9a528b2df3bd1251b72ab14feccf491dd254a7c6ecba831dfaba328adb0fd0b4acddb89584f58f94b123e97caa420f9d7b34131cc51bdbdbf3ed73

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\it.pak

                      Filesize

                      388KB

                      MD5

                      3f70274c332b4b3a2fe0a2e8dfaa39cf

                      SHA1

                      d7d452884993428823227f5f217932e93571f586

                      SHA256

                      5a71f23e65aff5d3d8345bb4c3e828486a27fb05e3385b089b892ed588df9ed1

                      SHA512

                      a48114f026fe72d465447a6ebc4f3ae0aa7f4f77136e3fc1f080a0137b04b4fb81ff86734b81f240fc918639ef5abcde41875b32986ae2c42cdaf54c6486dcc0

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\ja.pak

                      Filesize

                      472KB

                      MD5

                      4e6cc9965f7a8bad7505d95d4f50b3e6

                      SHA1

                      8b126d5da1ffeb210661957f184a0c33103e8e60

                      SHA256

                      180dae8282f0ea6d926632d36ea39e89e7c2c53c3d45b99946ef824040e3d3ad

                      SHA512

                      c29f4fffc8b385e936aeeb5f33715848678528f67b6892142a3a85b29104232cc87f52f1ae179e84e562b8d14e91a0187fc009d2dd813ad5775b8e5eeaee9c71

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\kn.pak

                      Filesize

                      938KB

                      MD5

                      fccd5d8ad5e1c774771b19dda55d9b9a

                      SHA1

                      fabbaf469e4aec44342a7e6f74b837cde2203b71

                      SHA256

                      47c77fdf73267865a025a54027865a8d67e26943264a43c6e794ccbd6eec549b

                      SHA512

                      c9dc6cf0ff5a4094cc07ce4881319778a076b44651b16a220940d7a587ffaa92b6b80f7264605a3c8e6dd780e9c3d8e4d403d01cd8f94e0122ac19cd4d636aac

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\ko.pak

                      Filesize

                      398KB

                      MD5

                      c9344b5b436da62a3d18bf10e60c77c8

                      SHA1

                      68a969f9b6453fa13f9bc849befd6df0ce4b8e08

                      SHA256

                      e2ad6e0af9fa8fcc4dfbb37e89e171702052c758362875c81dfd466b12cf13a3

                      SHA512

                      6e166d0bc19abb9d2b4072516e20bf3f8ab7fc68dca74957e214e6d41b8ae114ed84472a04f42c0967e5dbfc204e0ee9c09d3c4cefd77dfb61979de72439ae14

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\lt.pak

                      Filesize

                      429KB

                      MD5

                      64b08ffc40a605fe74ecc24c3024ee3b

                      SHA1

                      516296e8a3114ddbf77601a11faf4326a47975ab

                      SHA256

                      8a5d6e29833374e0f74fd7070c1b20856cb6b42ed30d18a5f17e6c2e4a8d783e

                      SHA512

                      05d207413186ac2b87a59681efe4fdf9dc600d0f3e8327e7b9802a42306d80d0ddd9ee07d103b17caf0518e42ab25b7ca9da4713941abc7bced65961671164ac

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\lv.pak

                      Filesize

                      427KB

                      MD5

                      a8cbd741a764f40b16afea275f240e7e

                      SHA1

                      317d30bbad8fd0c30de383998ea5be4eec0bb246

                      SHA256

                      a1a9d84fd3af571a57be8b1a9189d40b836808998e00ec9bd15557b83d0e3086

                      SHA512

                      3da91c0ca20165445a2d283db7dc749fcf73e049bfff346b1d79b03391aefc7f1310d3ac2c42109044cfb50afcf178dcf3a34b4823626228e591f328dd7afe95

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\ml.pak

                      Filesize

                      974KB

                      MD5

                      1c81104ac2cbf7f7739af62eb77d20d5

                      SHA1

                      0f0d564f1860302f171356ea35b3a6306c051c10

                      SHA256

                      66005bc01175a4f6560d1e9768dbc72b46a4198f8e435250c8ebc232d2dac108

                      SHA512

                      969294eae8c95a1126803a35b8d3f1fc3c9d22350aa9cc76b2323b77ad7e84395d6d83b89deb64565783405d6f7eae40def7bdaf0d08da67845ae9c7dbb26926

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\mr.pak

                      Filesize

                      797KB

                      MD5

                      5657d67f6d21b507aab24ff62b0d4701

                      SHA1

                      b685a327c525b7e42eece306984e6d88dd803a29

                      SHA256

                      671c3cb2a805a63a275ad608d37d0577c6a2813dd67fb6c2b70f8232323aac04

                      SHA512

                      637c60834edc6f31c80692274af05e3f78466cd5ddb2fd7c79315b0f54939f41f25c3b30c86fd10751d032def1f99cb853c3186128a76a3a82a6989eaf14a835

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\ms.pak

                      Filesize

                      365KB

                      MD5

                      aee105366a1870b9d10f0f897e9295db

                      SHA1

                      eee9d789a8eeafe593ce77a7c554f92a26a2296f

                      SHA256

                      c6471aee5f34f31477d57f593b09cb1de87f5fd0f9b5e63d8bab4986cf10d939

                      SHA512

                      240688a0054bfebe36ea2b056194ee07e87bbbeb7e385131c73a64aa7967984610fcb80638dd883837014f9bc920037069d0655e3e92a5922f76813aedb185fa

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\nb.pak

                      Filesize

                      358KB

                      MD5

                      55d5ad4eacb12824cfcd89470664c856

                      SHA1

                      f893c00d8d4fdb2f3e7a74a8be823e5e8f0cd673

                      SHA256

                      4f44789a2c38edc396a31aba5cc09d20fb84cd1e06f70c49f0664289c33cd261

                      SHA512

                      555d87be8c97f466c6b3e7b23ec0210335846398c33dba71e926ff7e26901a3908dbb0f639c93db2d090c9d8bda48eddf196b1a09794d0e396b2c02b4720f37e

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\nl.pak

                      Filesize

                      370KB

                      MD5

                      0f04bac280035fab018f634bcb5f53ae

                      SHA1

                      4cad76eaecd924b12013e98c3a0e99b192be8936

                      SHA256

                      be254bcda4dbe167cb2e57402a4a0a814d591807c675302d2ce286013b40799b

                      SHA512

                      1256a6acac5a42621cb59eb3da42ddeeacfe290f6ae4a92d00ebd4450a8b7ccb6f0cd5c21cf0f18fe4d43d0d7aee87b6991fef154908792930295a3871fa53df

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\pl.pak

                      Filesize

                      412KB

                      MD5

                      8854aef2a3a62472a6085c8ee8c1ec52

                      SHA1

                      16ae447f8fa5dee9beb3622a338843ef51652bc4

                      SHA256

                      ac8387ebe1e37070d2de5eb2a6909602a9463957bad0cb4eaba1156d3eafd6e2

                      SHA512

                      b701d8b46100decbd47886f053bafb4d9898f48c15a36a5760447b2001900fe4088211c4445891da199af04f1d18b695703cfa3603a7a80ae3fba9c0ce9cfd73

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\pt-BR.pak

                      Filesize

                      389KB

                      MD5

                      126eff8c773ad239b64a3d171729ee08

                      SHA1

                      d47175d9df435e16d9126eb8fe0f4fb27621d90c

                      SHA256

                      04f98b1ee125a1a749e0d1e61f69a58a5b7af897b4322454387f9ba165703fdf

                      SHA512

                      50a226a3a964a8ec83a74cec0d60306eafa3e123d43130cf9b6425ddf2d613f215a5698419de640d7c47171ab33e2e80bee1fc873ab2d9bffe20bbff0da77e93

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\pt-PT.pak

                      Filesize

                      391KB

                      MD5

                      7a20beb0dfa3aeb2629d000d8e5482ea

                      SHA1

                      8627a45042186d490e950ab3c34e962fc9dfb7e1

                      SHA256

                      029fe6070235dc6f38a2ab6ba8d290d4d84673ca908cdda8891707735bc69500

                      SHA512

                      ac70f35719618e0511e8c7b5f22a58813f0ec15f853631e3cc85efad13f2553112ebc0f81eb8fc22228ecb01c3ac477b69af5f0d567f042b6dee016bdc6e428b

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\ro.pak

                      Filesize

                      403KB

                      MD5

                      d2758f6adbaeea7cd5d95f4ad6dde954

                      SHA1

                      d7476db23d8b0e11bbabf6a59fde7609586bdc8a

                      SHA256

                      2b7906f33bfbe8e9968bcd65366e2e996cdf2f3e1a1fc56ad54baf261c66954c

                      SHA512

                      8378032d6febea8b5047ada667cb19e6a41f890cb36305acc2500662b4377caef3dc50987c925e05f21c12e32c3920188a58ee59d687266d70b8bfb1b0169a6e

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\ru.pak

                      Filesize

                      656KB

                      MD5

                      0907d70c073653e7b1a65ec411e6be2e

                      SHA1

                      d20d72467eeb08115fbfd2e68e5024cbc459fd42

                      SHA256

                      f8326292b47146f9c0a355a12d3d0c7c0a07849ffe71578e1ca3f2c756539bd9

                      SHA512

                      8bfa3d080151d39bdadd6dde07c8cc3f96df8c160e50e81025df64476aa4652f567f68f08c79bff188858518334c872c14cb58ba71c28094a535f9e8e9c657f0

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\sk.pak

                      Filesize

                      416KB

                      MD5

                      b7e97cc98b104053e5f1d6a671c703b7

                      SHA1

                      0f7293f1744ae2cd858eb3431ee016641478ae7d

                      SHA256

                      b0d38869275d9d295e42b0b90d0177e0ca56a393874e4bb454439b8ce25d686f

                      SHA512

                      ef3247c6f0f4065a4b68db6bf7e28c8101a9c6c791b3f771ed67b5b70f2c9689cec67a1c864f423382c076e4cbb6019c1c0cb9ad0204454e28f749a69b6b0de0

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\sl.pak

                      Filesize

                      401KB

                      MD5

                      ca763e801de642e4d68510900ff6fabb

                      SHA1

                      c32a871831ce486514f621b3ab09387548ee1cff

                      SHA256

                      340e0babe5fddbfda601c747127251cf111dd7d79d0d6a5ec4e8443b835027de

                      SHA512

                      e2847ce75de57deb05528dd9557047edcd15d86bf40a911eb97e988a8fdbda1cd0e0a81320eadf510c91c826499a897c770c007de936927df7a1cc82fa262039

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\sr.pak

                      Filesize

                      616KB

                      MD5

                      c68c235d8e696c098cf66191e648196b

                      SHA1

                      5c967fbbd90403a755d6c4b2411e359884dc8317

                      SHA256

                      ab96a18177af90495e2e3c96292638a775aa75c1d210ca6a6c18fbc284cd815b

                      SHA512

                      34d14d8cb851df1ea8cd3cc7e9690eaf965d8941cfcac1c946606115ad889630156c5ff47011b27c1288f8df70e8a7dc41909a9fa98d75b691742ec1d1a5e653

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\sv.pak

                      Filesize

                      361KB

                      MD5

                      251682c6f4238bef8ab5471870a5454b

                      SHA1

                      2bf36466446abe39d487c61898d335901bbb09b0

                      SHA256

                      e1cbce672de3ba3a01272b9b763dcfd8229fba0883df2b4117ac6b0f9916c073

                      SHA512

                      de1e507b24e71f60c298253aacff49724b6a8c6336455d8dfcc6e939e53ed5e7a95dc5574e66a7fae38b6666446ac9cd83e5ad1b794b4ffa38d06052663c1f45

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\sw.pak

                      Filesize

                      379KB

                      MD5

                      67a443a5c2eaad32625edb5f8deb7852

                      SHA1

                      a6137841e8e7736c5ede1d0dc0ce3a44dc41013f

                      SHA256

                      41dfb772ae4c6f9e879bf7b4fa776b2877a2f8740fa747031b3d6f57f34d81dd

                      SHA512

                      e0fdff1c3c834d8af8634f43c2f16ba5b883a8d88dfd322593a13830047568faf9f41d0bf73cd59e2e33c38fa58998d4702d2b0c21666717a86945d18b3f29e5

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\ta.pak

                      Filesize

                      964KB

                      MD5

                      18ec8ff3c0701a6a8c48f341d368bab5

                      SHA1

                      8bff8aee26b990cf739a29f83efdf883817e59d8

                      SHA256

                      052bcdb64a80e504bb6552b97881526795b64e0ab7ee5fc031f3edf87160dee9

                      SHA512

                      a0e997fc9d316277de3f4773388835c287ab1a35770c01e376fb7428ff87683a425f6a6a605d38dd7904ca39c50998cd85f855cb33ae6abad47ac85a1584fe4e

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\te.pak

                      Filesize

                      894KB

                      MD5

                      a17f16d7a038b0fa3a87d7b1b8095766

                      SHA1

                      b2f845e52b32c513e6565248f91901ab6874e117

                      SHA256

                      d39716633228a5872630522306f89af8585f8092779892087c3f1230d21a489e

                      SHA512

                      371fb44b20b8aba00c4d6f17701fa4303181ad628f60c7b4218e33be7026f118f619d66d679bffcb0213c48700fafd36b2e704499a362f715f63ea9a75d719e7

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\th.pak

                      Filesize

                      753KB

                      MD5

                      a32ba63feeed9b91f6d6800b51e5aeae

                      SHA1

                      2fbf6783996e8315a4fb94b7d859564350ee5918

                      SHA256

                      e32e37ca0ab30f1816fe6df37e3168e1022f1d3737c94f5472ab6600d97a45f6

                      SHA512

                      adebde0f929820d8368096a9c30961ba7b33815b0f124ca56ca05767ba6d081adf964088cb2b9fcaa07f756b946fffa701f0b64b07d457c99fd2b498cbd1e8a5

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\tr.pak

                      Filesize

                      385KB

                      MD5

                      ca201fed1301187dbe9ed65b4ccd3547

                      SHA1

                      f904ea7325915401491e42610855f5769be28120

                      SHA256

                      46d2ac624470e5fb747b3d403581b1692892661aa474149067fd5acebc1130e5

                      SHA512

                      4c2913c4266d00acd446875e2c966c96065c13acca58de8d3151b445f759ecb35481d2013b46e099573b899d745dc54732fc3428251acbe4b0a05d3bd7a4c0b7

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\uk.pak

                      Filesize

                      657KB

                      MD5

                      c7286527971d88cc50659b8c00bdb7a0

                      SHA1

                      a0ef230d46d214ac469e2dc84f1d46d8f8d83eed

                      SHA256

                      52de620f977dffe77da843562d592ef41775af5dfc5f3be769739c050d049cb7

                      SHA512

                      e5573eb59a12c27f953c6132a993a9d5f76509f3e83528ccc51b80d33de9948c7932231965e55b7887ed88b4c179d9a0cbe9d41769d228c41c447d8c167915a4

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\ur.pak

                      Filesize

                      571KB

                      MD5

                      1ca4fa13bd0089d65da7cd2376feb4c6

                      SHA1

                      b1ba777e635d78d1e98e43e82d0f7a3dd7e97f9c

                      SHA256

                      3941364d0278e2c4d686faa4a135d16a457b4bc98c5a08e62aa12f3adc09aa7f

                      SHA512

                      d0d9eb1aa029bd4c34953ee5f4b60c09cf1d4f0b21c061db4ede1b5ec65d7a07fc2f780ade5ce51f2f781d272ac32257b95eedf471f7295ba70b5ba51db6c51d

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\vi.pak

                      Filesize

                      455KB

                      MD5

                      befc24124201bc716386fe618a3675ef

                      SHA1

                      15b4717c135be1292974270f5c36506a0ae76d71

                      SHA256

                      eb62bfa59587f59bdb48670bcd1a5cf884e3420aa3954718cb5e22750c182344

                      SHA512

                      1f443783f5da53d931fdb0853ea0b9993d3b3d305a559dccdb11048fa87ecba65b5dd8e03a7168d6db8911cbf9ee33639aca2e9fa67381f1c43d13db7d1a18f7

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\zh-CN.pak

                      Filesize

                      332KB

                      MD5

                      8f10fd388eb732a6b0eb02185fbc6e21

                      SHA1

                      2ebdaeeb7460e8d4c434380983df6ef5b2e9a48d

                      SHA256

                      b28272271f771e11edd01a119aca71430eff42d3ed640088c8e89a9c2910bd8d

                      SHA512

                      98f6a76b7b658a9deaacba03f22137ee887e72a73f423f9cc2113db67281ad12630aeb943a56d15780684bbcb34eecd6e7ef93a10c3f390cf1035ca7a1e16096

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\locales\zh-TW.pak

                      Filesize

                      330KB

                      MD5

                      fbb2cc32d7e3de0618a783b819bf8711

                      SHA1

                      b6965efef25d9146061d2b990ebb0a23b9b703ad

                      SHA256

                      a2df611bc31135da1ddaacce772106ba5e60ce950d9837e958744eeb13b12e1c

                      SHA512

                      66acf52606bd5d0dba9933f9733e7f943ee7806cdcd6b01980e61a51e6bd228f3115417bcb00a6e049f77efa56148aeed5414f6573c86060fa2778f4f89ae54d

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\resources.pak

                      Filesize

                      5.2MB

                      MD5

                      a25607b61da11ffc7def1bf5aebd12d8

                      SHA1

                      2d0d846f49437cc424263600ffd709621d695fa7

                      SHA256

                      587844d8e4afcf492fe17cd70bf60c175701726eda1ca0768d1c6913f0713bd9

                      SHA512

                      0abb12cedefb272b7dd7bb9eba14f569c28d5d0eba49e4212f54ee6efd36e7bd0398d2da37bafded9bfefbd5abda4481bce04f12848c50200a1cdeea20537dfc

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\resources\app.asar

                      Filesize

                      1.9MB

                      MD5

                      e037dd64f4a61ba2fdd2e1a1454044e0

                      SHA1

                      4e5dbfff80c32cd8ea148b115b7e874289cdd729

                      SHA256

                      1b66ee832a0df4d4643e3caf5e6ac3a499de5018ba35df213d8bdd935aba08ee

                      SHA512

                      4edef1db852ad1f1e79f1c298493f3ec81e85e68a194e76d4f7dd56c3f990547acf91afa159832e911e679824db90fb23ac3c18ba5605a37c202a1b113131d9b

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\resources\elevate.exe

                      Filesize

                      105KB

                      MD5

                      792b92c8ad13c46f27c7ced0810694df

                      SHA1

                      d8d449b92de20a57df722df46435ba4553ecc802

                      SHA256

                      9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

                      SHA512

                      6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\snapshot_blob.bin

                      Filesize

                      158KB

                      MD5

                      a0c15be6ca6ac3e64a9c40618967918f

                      SHA1

                      e16310dc5599fc5eb5a22c8af0fbe12b943ed604

                      SHA256

                      ba80660764b93ed858490896d75e6a7e83acbfd346b1e459d78cff1c9b228fdb

                      SHA512

                      13d53a7873d03cd136df77828ed44538017dd268d863e184ec80c26c4ca129d04ddc3af0ca6a589eb531da14ea5a742667e5d65bf88c2ee2f4c3b46889b9eea5

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\v8_context_snapshot.bin

                      Filesize

                      465KB

                      MD5

                      73828e08c1432e49a17416bb7dd2abb4

                      SHA1

                      83167a7dd282aef3ad8be66a2c168a6e15706616

                      SHA256

                      91fab2bc8a09cc544625bde8d6e9568619a2292aea1192fb36d804bc7adc19cf

                      SHA512

                      27ed3c1bf35128af87f8a45f999560991d162976360e2b4fbc980fd93373050432a9f0a3db88924529d2284a173772f555b9c4ffe80f46ecef7976a3ebae9ac5

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\vk_swiftshader.dll

                      Filesize

                      5.0MB

                      MD5

                      0fc9322c9591192cdaa748757486ed6c

                      SHA1

                      aefbbb381d09d1f48d52d45bb26b088977a67d41

                      SHA256

                      3a59877511ff66096b3e5bfae39487d6001c657216b6495aac11ae5ecd2e723a

                      SHA512

                      0927ccf56ce60d2cd7825e0c42c17adacaba184de86d6ce8c1902f5d693c98ca9ac0a3c052ebab70ab1e310e4d6a591a703ede14cdc75a8d25a26710b96480a9

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\vk_swiftshader_icd.json

                      Filesize

                      106B

                      MD5

                      8642dd3a87e2de6e991fae08458e302b

                      SHA1

                      9c06735c31cec00600fd763a92f8112d085bd12a

                      SHA256

                      32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

                      SHA512

                      f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\7z-out\vulkan-1.dll

                      Filesize

                      899KB

                      MD5

                      c1f13770551b9c9793080d34681c27a8

                      SHA1

                      c9e704646dbd3c41d455677c5c651b256dab1fe8

                      SHA256

                      2224ee42a19eafd2959c5a722222a411acbcf15b08f7e8cf8970c455737ffa2a

                      SHA512

                      643fa95cbfd8f57100eb9f7ed845a43ee3b87dc92bea563cafa191c7b000ed39e6bfe20374a54a4fe2158761a88b17afd9d679a71dea0d06b790ee5cf2f11511

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\SpiderBanner.dll

                      Filesize

                      9KB

                      MD5

                      17309e33b596ba3a5693b4d3e85cf8d7

                      SHA1

                      7d361836cf53df42021c7f2b148aec9458818c01

                      SHA256

                      996a259e53ca18b89ec36d038c40148957c978c0fd600a268497d4c92f882a93

                      SHA512

                      1abac3ce4f2d5e4a635162e16cf9125e059ba1539f70086c2d71cd00d41a6e2a54d468e6f37792e55a822d7082fb388b8dfecc79b59226bbb047b7d28d44d298

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\StdUtils.dll

                      Filesize

                      100KB

                      MD5

                      c6a6e03f77c313b267498515488c5740

                      SHA1

                      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

                      SHA256

                      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

                      SHA512

                      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\StdUtils.dll

                      Filesize

                      100KB

                      MD5

                      c6a6e03f77c313b267498515488c5740

                      SHA1

                      3d49fc2784b9450962ed6b82b46e9c3c957d7c15

                      SHA256

                      b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

                      SHA512

                      9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\System.dll

                      Filesize

                      12KB

                      MD5

                      0d7ad4f45dc6f5aa87f606d0331c6901

                      SHA1

                      48df0911f0484cbe2a8cdd5362140b63c41ee457

                      SHA256

                      3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

                      SHA512

                      c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\WinShell.dll

                      Filesize

                      3KB

                      MD5

                      1cc7c37b7e0c8cd8bf04b6cc283e1e56

                      SHA1

                      0b9519763be6625bd5abce175dcc59c96d100d4c

                      SHA256

                      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                      SHA512

                      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\WinShell.dll

                      Filesize

                      3KB

                      MD5

                      1cc7c37b7e0c8cd8bf04b6cc283e1e56

                      SHA1

                      0b9519763be6625bd5abce175dcc59c96d100d4c

                      SHA256

                      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                      SHA512

                      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\WinShell.dll

                      Filesize

                      3KB

                      MD5

                      1cc7c37b7e0c8cd8bf04b6cc283e1e56

                      SHA1

                      0b9519763be6625bd5abce175dcc59c96d100d4c

                      SHA256

                      9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

                      SHA512

                      7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\nsExec.dll

                      Filesize

                      6KB

                      MD5

                      ec0504e6b8a11d5aad43b296beeb84b2

                      SHA1

                      91b5ce085130c8c7194d66b2439ec9e1c206497c

                      SHA256

                      5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

                      SHA512

                      3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

                    • C:\Users\Admin\AppData\Local\Temp\nsk8969.tmp\nsis7z.dll

                      Filesize

                      424KB

                      MD5

                      80e44ce4895304c6a3a831310fbf8cd0

                      SHA1

                      36bd49ae21c460be5753a904b4501f1abca53508

                      SHA256

                      b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

                      SHA512

                      c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

                    • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.acl

                      Filesize

                      2B

                      MD5

                      f3b25701fe362ec84616a93a45ce9998

                      SHA1

                      d62636d8caec13f04e28442a0a6fa1afeb024bbb

                      SHA256

                      b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                      SHA512

                      98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                    • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.acl

                      Filesize

                      2B

                      MD5

                      f3b25701fe362ec84616a93a45ce9998

                      SHA1

                      d62636d8caec13f04e28442a0a6fa1afeb024bbb

                      SHA256

                      b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                      SHA512

                      98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                    • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                      Filesize

                      2B

                      MD5

                      f3b25701fe362ec84616a93a45ce9998

                      SHA1

                      d62636d8caec13f04e28442a0a6fa1afeb024bbb

                      SHA256

                      b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                      SHA512

                      98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                    • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                      Filesize

                      2B

                      MD5

                      f3b25701fe362ec84616a93a45ce9998

                      SHA1

                      d62636d8caec13f04e28442a0a6fa1afeb024bbb

                      SHA256

                      b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                      SHA512

                      98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                    • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.dic

                      Filesize

                      2B

                      MD5

                      f3b25701fe362ec84616a93a45ce9998

                      SHA1

                      d62636d8caec13f04e28442a0a6fa1afeb024bbb

                      SHA256

                      b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                      SHA512

                      98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                    • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc

                      Filesize

                      2B

                      MD5

                      f3b25701fe362ec84616a93a45ce9998

                      SHA1

                      d62636d8caec13f04e28442a0a6fa1afeb024bbb

                      SHA256

                      b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                      SHA512

                      98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                    • C:\Users\Admin\AppData\Roaming\Microsoft\Spelling\en-US\default.exc

                      Filesize

                      2B

                      MD5

                      f3b25701fe362ec84616a93a45ce9998

                      SHA1

                      d62636d8caec13f04e28442a0a6fa1afeb024bbb

                      SHA256

                      b3d510ef04275ca8e698e5b3cbb0ece3949ef9252f0cdc839e9ee347409a2209

                      SHA512

                      98c5f56f3de340690c139e58eb7dac111979f0d4dffe9c4b24ff849510f4b6ffa9fd608c0a3de9ac3c9fd2190f0efaf715309061490f9755a9bfdf1c54ca0d84

                    • C:\Users\Admin\AppData\Roaming\ronawind\Cache\Cache_Data\data_0

                      Filesize

                      8KB

                      MD5

                      cf89d16bb9107c631daabf0c0ee58efb

                      SHA1

                      3ae5d3a7cf1f94a56e42f9a58d90a0b9616ae74b

                      SHA256

                      d6a5fe39cd672781b256e0e3102f7022635f1d4bb7cfcc90a80fffe4d0f3877e

                      SHA512

                      8cb5b059c8105eb91e74a7d5952437aaa1ada89763c5843e7b0f1b93d9ebe15ed40f287c652229291fac02d712cf7ff5ececef276ba0d7ddc35558a3ec3f77b0

                    • C:\Users\Admin\AppData\Roaming\ronawind\Cache\Cache_Data\data_1

                      Filesize

                      264KB

                      MD5

                      d0d388f3865d0523e451d6ba0be34cc4

                      SHA1

                      8571c6a52aacc2747c048e3419e5657b74612995

                      SHA256

                      902f30c1fb0597d0734bc34b979ec5d131f8f39a4b71b338083821216ec8d61b

                      SHA512

                      376011d00de659eb6082a74e862cfac97a9bb508e0b740761505142e2d24ec1c30aa61efbc1c0dd08ff0f34734444de7f77dd90a6ca42b48a4c7fad5f0bddd17

                    • C:\Users\Admin\AppData\Roaming\ronawind\Cache\Cache_Data\data_2

                      Filesize

                      8KB

                      MD5

                      0962291d6d367570bee5454721c17e11

                      SHA1

                      59d10a893ef321a706a9255176761366115bedcb

                      SHA256

                      ec1702806f4cc7c42a82fc2b38e89835fde7c64bb32060e0823c9077ca92efb7

                      SHA512

                      f555e961b69e09628eaf9c61f465871e6984cd4d31014f954bb747351dad9cea6d17c1db4bca2c1eb7f187cb5f3c0518748c339c8b43bbd1dbd94aeaa16f58ed

                    • C:\Users\Admin\AppData\Roaming\ronawind\Cache\Cache_Data\data_3

                      Filesize

                      8KB

                      MD5

                      41876349cb12d6db992f1309f22df3f0

                      SHA1

                      5cf26b3420fc0302cd0a71e8d029739b8765be27

                      SHA256

                      e09f42c398d688dce168570291f1f92d079987deda3099a34adb9e8c0522b30c

                      SHA512

                      e9a4fc1f7cb6ae2901f8e02354a92c4aaa7a53c640dcf692db42a27a5acc2a3bfb25a0de0eb08ab53983132016e7d43132ea4292e439bb636aafd53fb6ef907e

                    • C:\Users\Admin\AppData\Roaming\ronawind\Cache\Cache_Data\index

                      Filesize

                      256KB

                      MD5

                      8b1721ca9fae28278f702b2d2065dd83

                      SHA1

                      61eb626fe4028d4126b6e6ec5aff7d0bbef79691

                      SHA256

                      93dce74364ea614737ce1efb507004dc7b1b1fb77903c0b3882ad252d99a043a

                      SHA512

                      e7e771c86ba3938e3b55a70c61d2b99f5261530377a84694db20e6f2962e07095d919d3bdca36137e400f17e43aec06126ba733eac5b5f861fafa7ddf0da9826

                    • C:\Users\Admin\AppData\Roaming\ronawind\Code Cache\js\index

                      Filesize

                      24B

                      MD5

                      54cb446f628b2ea4a5bce5769910512e

                      SHA1

                      c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

                      SHA256

                      fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

                      SHA512

                      8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

                    • C:\Users\Admin\AppData\Roaming\ronawind\Code Cache\js\index-dir\the-real-index

                      Filesize

                      48B

                      MD5

                      ec958cfe6a20ea6333b1a4e4627f1ccf

                      SHA1

                      886447f99885ff8e69a29221a361399b482a13eb

                      SHA256

                      c5a42b58b6a8efd80baaf1c35019e09c2b8015508cccc187d13b4f8ba4ca030e

                      SHA512

                      ff6b0d35058844139c45405672e4109cefaeceede8d2a9788e917e3c15ad8d0f3aec4ce4b0b5cc6c454b492ad0cb5e3839d36cfdc3f0d22a8bff94e0deeae72e

                    • C:\Users\Admin\AppData\Roaming\ronawind\Code Cache\wasm\index

                      Filesize

                      24B

                      MD5

                      54cb446f628b2ea4a5bce5769910512e

                      SHA1

                      c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

                      SHA256

                      fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

                      SHA512

                      8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

                    • C:\Users\Admin\AppData\Roaming\ronawind\Code Cache\wasm\index-dir\the-real-index

                      Filesize

                      48B

                      MD5

                      0fb5cd9060dfbb880b79321fbb440720

                      SHA1

                      061c157297d5d0d618e69010bdbc69752f0ad157

                      SHA256

                      dd46532f486e3de77bae6c0d62f6f75bb879435c7cae808c81d24bb9ce9415fa

                      SHA512

                      ecf5b942583ad7017a6fa84bb6ef478dc527da9594af180a044d3eb5c258f268fea20a72b124b7febd2ac2f619c7168eed4f0d32c0871c84f6ae931d71ae28f2

                    • C:\Users\Admin\AppData\Roaming\ronawind\Local State

                      Filesize

                      389B

                      MD5

                      f246ccb36f480523e88116c74da9f04a

                      SHA1

                      1dc5746a7426d43646f739590a18024f61c7fb82

                      SHA256

                      db61c0b14cc89cf3fe20d026bc0d4ead054a27bd13de0d57e55f258e65b6231c

                      SHA512

                      4de5cd804f022db4cbaef03fe1da18ba6d1d81a38e24deb3bb4061193caff204d396a6c087ab19a5320aa31219d874e7846a6af8fdb477f4ffb3a767a4910351

                    • C:\Users\Admin\AppData\Roaming\ronawind\Network\Network Persistent State

                      Filesize

                      59B

                      MD5

                      2800881c775077e1c4b6e06bf4676de4

                      SHA1

                      2873631068c8b3b9495638c865915be822442c8b

                      SHA256

                      226eec4486509917aa336afebd6ff65777b75b65f1fb06891d2a857a9421a974

                      SHA512

                      e342407ab65cc68f1b3fd706cd0a37680a0864ffd30a6539730180ede2cdcd732cc97ae0b9ef7db12da5c0f83e429df0840dbf7596aca859a0301665e517377b

                    • C:\Users\Admin\AppData\Roaming\ronawind\Preferences

                      Filesize

                      57B

                      MD5

                      58127c59cb9e1da127904c341d15372b

                      SHA1

                      62445484661d8036ce9788baeaba31d204e9a5fc

                      SHA256

                      be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de

                      SHA512

                      8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a

                    • C:\Users\Admin\AppData\Roaming\ronawind\b4b42e0d-9aff-48f0-91ac-feadbba262eb.tmp

                      Filesize

                      57B

                      MD5

                      58127c59cb9e1da127904c341d15372b

                      SHA1

                      62445484661d8036ce9788baeaba31d204e9a5fc

                      SHA256

                      be4b8924ab38e8acf350e6e3b9f1f63a1a94952d8002759acd6946c4d5d0b5de

                      SHA512

                      8d1815b277a93ad590ff79b6f52c576cf920c38c4353c24193f707d66884c942f39ff3989530055d2fade540ade243b41b6eb03cd0cc361c3b5d514cca28b50a