87adbec79dcd01e83991586bcb02f9e44c900b2c1a4ea4b6f438549aab67b21e

Analysis

max time kernel
39s
max time network
34s
platform
windows7_x64
resource
win7-20230220-en
resource tags

arch:x64arch:x86image:win7-20230220-enlocale:en-usos:windows7-x64system
submitted
21/05/2023, 18:34

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

Clash.for.Windows.Setup.0.20.22.exe
Size

81.8MB
MD5

15ed27c7099acd9cd3c0f3c3262265bf
SHA1

032d641488ce245cf0eaedd34eb0de8508f97756
SHA256

87adbec79dcd01e83991586bcb02f9e44c900b2c1a4ea4b6f438549aab67b21e
SHA512

d3cb4a72530a0f8f240f76296193473a9ff33b2ffd97167de4fcb757e7d1d4641d63ee8183199b259eb11a722b88dca459aaa57fb8dc5f47c937e1148596ef88
SSDEEP

1572864:9iu+Ov1LgdeUo0UD2BZRbKK0+0s7GyqqRUus8X30cC/KmTEe:9iu+EUa0UDSKKiulrUupkhKoN

Score

7^/10

discovery

Malware Config

Signatures

Loads dropped DLL 9 IoCs

pid	Process
2044	Clash.for.Windows.Setup.0.20.22.exe
2044	Clash.for.Windows.Setup.0.20.22.exe
2044	Clash.for.Windows.Setup.0.20.22.exe
2044	Clash.for.Windows.Setup.0.20.22.exe
2044	Clash.for.Windows.Setup.0.20.22.exe
2044	Clash.for.Windows.Setup.0.20.22.exe
2044	Clash.for.Windows.Setup.0.20.22.exe
2044	Clash.for.Windows.Setup.0.20.22.exe
2044	Clash.for.Windows.Setup.0.20.22.exe

Checks installed software on the system 1 TTPs
Looks up Uninstall key entries in the registry to enumerate software on the system.
discovery

Query Registry
T1012
Enumerates physical storage devices 1 TTPs
Attempts to interact with connected storage/optical drive(s).

System Information Discovery
T1082

NSIS installer 2 IoCs

installer

resource	yara_rule
behavioral1/files/0x0006000000016cba-698.dat	nsis_installer_1
behavioral1/files/0x0006000000016cba-698.dat	nsis_installer_2

Enumerates processes with tasklist 1 TTPs 1 IoCs

Process Discovery

T1057

pid	Process
1760	tasklist.exe

Suspicious behavior: EnumeratesProcesses 3 IoCs

pid	Process
2044	Clash.for.Windows.Setup.0.20.22.exe
1760	tasklist.exe
1760	tasklist.exe

Suspicious use of AdjustPrivilegeToken 2 IoCs

description	pid	Process
Token: SeDebugPrivilege	1760	tasklist.exe
Token: SeSecurityPrivilege	2044	Clash.for.Windows.Setup.0.20.22.exe

Suspicious use of WriteProcessMemory 12 IoCs

description	pid	Process	procid_target
PID 2044 wrote to memory of 1504	2044	Clash.for.Windows.Setup.0.20.22.exe	28
PID 2044 wrote to memory of 1504	2044	Clash.for.Windows.Setup.0.20.22.exe	28
PID 2044 wrote to memory of 1504	2044	Clash.for.Windows.Setup.0.20.22.exe	28
PID 2044 wrote to memory of 1504	2044	Clash.for.Windows.Setup.0.20.22.exe	28
PID 1504 wrote to memory of 1760	1504	cmd.exe	30
PID 1504 wrote to memory of 1760	1504	cmd.exe	30
PID 1504 wrote to memory of 1760	1504	cmd.exe	30
PID 1504 wrote to memory of 1760	1504	cmd.exe	30
PID 1504 wrote to memory of 1340	1504	cmd.exe	31
PID 1504 wrote to memory of 1340	1504	cmd.exe	31
PID 1504 wrote to memory of 1340	1504	cmd.exe	31
PID 1504 wrote to memory of 1340	1504	cmd.exe	31

C:\Users\Admin\AppData\Local\Temp\Clash.for.Windows.Setup.0.20.22.exe
"C:\Users\Admin\AppData\Local\Temp\Clash.for.Windows.Setup.0.20.22.exe"
1⤵
- Loads dropped DLL
- Suspicious behavior: EnumeratesProcesses
- Suspicious use of AdjustPrivilegeToken
- Suspicious use of WriteProcessMemory
PID:2044
- C:\Windows\SysWOW64\cmd.exe
  cmd /c tasklist /FI "USERNAME eq %USERNAME%" /FI "IMAGENAME eq Clash for Windows.exe" | %SYSTEMROOT%\System32\find.exe "Clash for Windows.exe"
  2⤵
  - Suspicious use of WriteProcessMemory
  PID:1504
- - C:\Windows\SysWOW64\tasklist.exe
    tasklist /FI "USERNAME eq Admin" /FI "IMAGENAME eq Clash for Windows.exe"
    3⤵
    - Enumerates processes with tasklist
    - Suspicious behavior: EnumeratesProcesses
    - Suspicious use of AdjustPrivilegeToken
    PID:1760
- - C:\Windows\SysWOW64\find.exe
    C:\Windows\System32\find.exe "Clash for Windows.exe"
    3⤵
    PID:1340

Network

MITRE ATT&CK Enterprise v6

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1057

Query Registry

T1012

System Information Discovery

T1082

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\Clash for Windows.exe

Filesize
150.4MB

MD5
6638f05707658886098d89385cfc8bd2

SHA1
d02824b4603be6108fc6f623fc28d536d0e455ac

SHA256
9d0c59ab3698317bc13f31f483eb128de1eaa5ea9b289ba35dce552b733b4cb3

SHA512
af0116a99a92a9dca305d9b910a38b1fc6c7e1fa7f88327578c5d43fceb17e2563bff98a2afab2659cdb0b82d6fcd8f76343b1d7bd3d90657d42abfeec4a34a0

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\LICENSE.electron.txt

Filesize
1KB

MD5
4d42118d35941e0f664dddbd83f633c5

SHA1
2b21ec5f20fe961d15f2b58efb1368e66d202e5c

SHA256
5154e165bd6c2cc0cfbcd8916498c7abab0497923bafcd5cb07673fe8480087d

SHA512
3ffbba2e4cd689f362378f6b0f6060571f57e228d3755bdd308283be6cbbef8c2e84beb5fcf73e0c3c81cd944d01ee3fcf141733c4d8b3b0162e543e0b9f3e63

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\LICENSES.chromium.html

Filesize
6.5MB

MD5
d18c09a075cb6531d7ffd7c3da77bd4e

SHA1
571f29b6004007111782bf5727c4bc9510cca286

SHA256
86f5222580a4ab03dad8ea62e6cea22b23454dccf1c77e74ae0e0410a13b16fc

SHA512
091cd68e12633919fc6100b606f3002b16f4b9c7c6d7c820ff20e31a3b9ea690c8a1fc90529ff3e5c21e8d778e254743a8708049830c3bb046eda8f2653000b7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\chrome_100_percent.pak

Filesize
126KB

MD5
d31f3439e2a3f7bee4ddd26f46a2b83f

SHA1
c5a26f86eb119ae364c5bf707bebed7e871fc214

SHA256
9f79f46ca911543ead096a5ee28a34bf1fbe56ec9ba956032a6a2892b254857e

SHA512
aa27c97bf5581eb3f5e88f112df8bfb6a5283ce44eb13fbc41855008f84fb5b111dfe0616c310c3642b7f8ac99623d7c217aecc353f54f4d8f7042840099abc5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\chrome_200_percent.pak

Filesize
175KB

MD5
5604b67e3f03ab2741f910a250c91137

SHA1
a4bb15ac7914c22575f1051a29c448f215fe027f

SHA256
1408387e87cb5308530def6ce57bdc4e0abbbaa9e70f687fd6c3a02a56a0536c

SHA512
5e6f875068792e862b1fc8bb7b340ac0f1f4c51e53e50be81a5af8575ca3591f4e7eb9239890178b17c5a8ff4ebb23719190d7db0bd8a9aa6dcb4308ffa9a34d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\d3dcompiler_47.dll

Filesize
4.7MB

MD5
cb9807f6cf55ad799e920b7e0f97df99

SHA1
bb76012ded5acd103adad49436612d073d159b29

SHA256
5653bc7b0e2701561464ef36602ff6171c96bffe96e4c3597359cd7addcba88a

SHA512
f7c65bae4ede13616330ae46a197ebad106920dce6a31fd5a658da29ed1473234ca9e2b39cc9833ff903fb6b52ff19e39e6397fac02f005823ed366ca7a34f62

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\ffmpeg.dll

Filesize
2.6MB

MD5
ffd1be425c1f639c596c31fc7b93dfb1

SHA1
9a02c7f2d853c6a943c51157a9cfc1cec5a5059f

SHA256
60e97ca3036e48287ba36ab240db9c1129d81ef9b914134e61897581c3314c14

SHA512
878e842a3ee8c83a22af70c0b1988723a37e5877c1b53befb0a6b5cf4924ee8b2368df3f41a31901f50dd2648da89da57def18acdc43537ab594d0092514a386

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\icudtl.dat

Filesize
10.0MB

MD5
76bef9b8bb32e1e54fe1054c97b84a10

SHA1
05dfea2a3afeda799ab01bb7fbce628cacd596f4

SHA256
97b978a19edd4746e9a44d9a44bb4bc519e127a203c247837ec0922f573449e3

SHA512
7330df8129e7a0b7b3655498b2593321595ec29445ea193c8f473c593590f5701eb7125ff6e5cde970c54765f9565fa51c2c54af6e2127f582ab45efa7a3a0f6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\libEGL.dll

Filesize
473KB

MD5
fc0e6a706fb42aeacde7921b6de88a16

SHA1
f996441fe48926d660894fa6b8583cd1b72990d0

SHA256
6827bea63dc615fe824a25949a21283fcbb3af8fc78272e1af22b0b39367116c

SHA512
d2d9dc1beefb5a88792a84ba7bcfdf062aecd45dbf614ae409467023b8a504cb8ba325cba65b8d9069aa2bc2d8da234c0d070ec513d01cb5a29955c5b9e8b6c4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\libGLESv2.dll

Filesize
7.2MB

MD5
a93d8332a4f8d73a1b548bb5bcee988d

SHA1
b67063be344db937d71a93cd2ab5593eb09a0d7d

SHA256
a1d8c59c6e0f1f868177ed79acd6f2174f96fd235cab62f967c8a92cbe978554

SHA512
a38e2dd36e048fe695d9c136e8247d3c77b8743360bfb39ffe4150938759b0bd5ab12b895336a2d50045e029f616236f1d57b161611980de045615f182210202

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\af.pak

Filesize
340KB

MD5
198092a7a82efced4d59715bd3e41703

SHA1
ac3cdfba133330fce825816b2f9579ac240dc176

SHA256
d63222c4a20fa9741f5262634cf9751f22fbb4fcd9d3138d7c8d49e0efb57fba

SHA512
590dcc02bc3411fa585321a09f2033ca1839dd67b083622be412d60683c2c086aac81a27bc56029101f6158515cc6ae4def39d3f246b7499b30d02690904af0d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\am.pak

Filesize
551KB

MD5
952933d2d388683c91ee7eaa7539e625

SHA1
7a0f5a10d7d61c32577c0d027db8c66c27e56c7d

SHA256
55357baf28716a73f79ac9a6af1ae63972eb79f93c415715518027fc5c528504

SHA512
5aa5ef0ed1da98b36840389e694dc5dcef496524314b61603d0c5ee03a663bb4c753623fb400792754b51331df20ac6d9cf97c183922f19fc0072822688f988d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\ar.pak

Filesize
602KB

MD5
98f8a48892b41e64bef135b86f3d4a6c

SHA1
32f8d57ec505332f711b9203aed969704bd97bc9

SHA256
e34d5cabaed4634c672591074057c12947bc9e728004228a9e75f87829f4a48a

SHA512
6ed3fe415b2f6de24136917da870b47c653d15c7a561baae55a285946a6f75e5141aba3bc064982f99baef0a893266693864c2d603c5c22c2b95627b2035f7a4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\bg.pak

Filesize
631KB

MD5
9dc95c3b9b47cc9fe5a34b2aab2d4d01

SHA1
bc19494d160e4af6abd0a10c5adbc8114d50a714

SHA256
fc4a59ea60d04b224765be4916090e97ed8ddda6b136a92a3827ed0fcc64bb0e

SHA512
a05a506a13ac4566ecbfe7961ace091295967ea4e72a2865e647b5fa9adac9f7cf5e80b53fae0e3917dfb0b9a3f469189cd595cc4ae9239d3a849f5cedd60e46

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\bn.pak

Filesize
812KB

MD5
d6ccc9689654b84bc095cec4f1952cca

SHA1
286130971826b0af1b6d29c5283dfa71af7cd7b0

SHA256
e325d936cd97c3f9ddfca2d87caefb8b6e7465ffa31d0386ae2456b18f7a92da

SHA512
db0400820c5cd1100337c955084eac3036b55bbf66b403337bec2079bc47696e2e48a771214662b286f4f45f763d2ad423aeccbd0f06cf0bc11038662558f4a5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\ca.pak

Filesize
384KB

MD5
2f8d050c228583559cda181291b76e5a

SHA1
b047f1cfb30b1162b1dd79f7e424a83fd807eec7

SHA256
e1d6b5fd0bc411f2895eaaa1409916f5ffe39a5c6bd1bafe8af7ce33da5be17d

SHA512
e4f150cd9942ef5105e72376835da6edc31ef91783e41cd2fc04600c04f342bbc96e08e23c8af1c0c1e563bb8a7d3840a2289767525c30d08c2f23d0e837801f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\cs.pak

Filesize
393KB

MD5
26765c7be201444f0238962bb16a506b

SHA1
f9d4a33795e45127c14bcf35cc770845627e15e8

SHA256
936466784a55b965d23b016bc49377655bc5d281d012c8369c0809c961e05c74

SHA512
577d52d2d5048cd952aff1e76121a495328c1978cdea2eaa4f85812cc513917f69510e135e96f7967f4ed43cf88e180cb1d9059e17c855c8d4f94ca036730214

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\da.pak

Filesize
356KB

MD5
fecabf71853bab84eacdd95699c49f69

SHA1
8519afc13e100a550ca3d756518a0bc33674e0d3

SHA256
1b0793b1cbeb6a56ff1e64523c37ba753457320aa29f9718022caa07b4981d8f

SHA512
e932d382d41a79ece172349e916221a67d97f5fd4b2dc1325d6bd2f7c6757cbc01d6fbc8d9846f6ec462eb637210f7c650f6944418edbd3f8614ef99030d9392

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\de.pak

Filesize
381KB

MD5
ec069f60c9825080b9d18ff6492e816d

SHA1
34ce5101c9646f9c2deb9820a3b26eb91c525ebc

SHA256
e0f632ce324951002c80e019dd0169be9f6b0640533fa434cd6ca80f28a1d3f7

SHA512
95a88ac98f0957e5f200af76c1a743b976228f7da1bb6c6b3b88a54adcff05e1172d7cf2e6f0a82cbc8ad0aa79974a1bc046516250a3a5889fd7b2e4d7c0b804

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\el.pak

Filesize
691KB

MD5
306a80dadadb1f9182810733269537fd

SHA1
bc01a65a9d024ec72e613aedc60f4838be798040

SHA256
92403b6160e38746597d4dd7f64d64cf19e30b5e7862901263c39679187b2c91

SHA512
491016b8fcca59a7dc9523358c4a7b56c55360f424e8fe9330d6f01480835805e961f1e48f8777660510d9af9a66961c639df162190dec595a867d54150eecfc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\en-GB.pak

Filesize
310KB

MD5
502260e74b65b96cd93f5e7bf0391157

SHA1
b66d72b02ff46b89ee8245c4dd9c5b319fc2abf7

SHA256
463af7da8418d7fb374ebf690e2aa79ee7cb2acc11c28a67f3ba837cf7a0937b

SHA512
0f0f9aac8e6b28c1e116377ab8ee0ffadbf0802a4026e57aedb42d21c38fbf70159be9e0314799c1de1f7638fbbd25d289dff7cd2c9eb7c82e1b62b6c4e87690

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\en-US.pak

Filesize
313KB

MD5
3f6f4b2c2f24e3893882cdaa1ccfe1a3

SHA1
b021cca30e774e0b91ee21b5beb030fea646098f

SHA256
bb165eaa51456b52fcbdf7639ee727280e335a1f6b4cfb91afc45222895b564f

SHA512
bd80ddaa87f41cde20527ff34817d98605f11b30a291e129478712ebebe47956dbd49a317d3eeb223adf736c34750b59b68ad9d646c661474ad69866d5a53c5c

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\es-419.pak

Filesize
380KB

MD5
774ced79da2fd32bd1ba52a0f16e0a19

SHA1
ff36dcf8b62046871f441f301dd7af51cb9ce7ee

SHA256
5aff3762747a6e8c6df9f2a3b470bf231b44163006b17ce87e2a03694be27b81

SHA512
7763c15fa97efa9a5af73dcdedd4fe260139bd8ff782ca3aa0937d9355b2d14c3e482e570844ac33d22d7b016c7b9097d727c1dd585f421dccd59ca7bbc24269

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\es.pak

Filesize
380KB

MD5
ba80f46ef6e141cef4085273a966fd91

SHA1
878f35e15b02558f75f68ec42a5cc839368c6d61

SHA256
267e7b6376e7e5ab806b16fde93bbbcd961bf0c3a7b3a2cabccab37faa9a1d16

SHA512
8a8b4f7db23d4c93756b6dc4219f00c77358a8fe992da1f51431597b82c3aa87abf3a98d79e13e7b4a14a1a9e94d388760fb6abf3a744406dee951c8e78cf361

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\et.pak

Filesize
342KB

MD5
e97fe1e6d06a2275a20d158dc4e3b892

SHA1
1575b9b1fc331a70bbe4ca7d1095d4ed6777ecc1

SHA256
d984aee4d18ca24a88846b1b6e0294d373733430f30bb4f1b97bc7d50d512c2e

SHA512
77879a4d1062671b616ba9b2ce0b6f69a5dbed6bd56b73ded902d1f9f44ecd96a2212690b3568c0ba273c73d91589ff2bf18c7ef9b66e0630fbaafde2a61b1b1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\fa.pak

Filesize
557KB

MD5
d55f65c6fda6ed6f549d2c9f0a4ce874

SHA1
952792f2da5ed9cb1cfed14e5afb8abf5cf29cb3

SHA256
221bbbde078d135f6daca4978a31cc6a82f8f46536467ebc9a0cd322c58a7785

SHA512
d0bb83467182d8b3a8f8371d749e682cf05f89daefe28764f2c263e7cfbfc3f86cb388061b48dadda26c3dd246dd6f7a57af58ca9344c2f6b90de87af1e91c69

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\fi.pak

Filesize
351KB

MD5
fa7dbd2ee35587ff31fde3c7107e4603

SHA1
baaa093dcb7eccf77ce599c8ff09df203e434b60

SHA256
5339b8ca52500bd0082e0ba5a5f440c5f04733803da47963280479760c7fff2c

SHA512
587f6d0e216d1688227345a8a75b94848ee710ec633fe6805db66bb0e8cad1b8d24a1e6a7e234061516770d881571166c78d8fa1c40e6335f3dcb1339fbffc14

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\fil.pak

Filesize
394KB

MD5
3126f74d021e9423d71913bb45a62935

SHA1
c9a80c8585aabbfec34ae891416794b1b3e29a11

SHA256
4cd3fa70487e894400ad29e3bfbfba3e1c5edd799aab12c62c3aff3c2580ce5e

SHA512
fb360723ee53b3f7038eebd1b919a36784a0e3dc878e810bc905c4297379dade6006c8872ed68412b06161cacb0d6e32a7157ecf97d9e103a4ca3b2b71db8765

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\fr.pak

Filesize
410KB

MD5
51ee1ed54fec49effd103c29677885b5

SHA1
ced6fd3354007d1ef3ea7b6689aae5213c20cc69

SHA256
1f6bc09499ee37456968a28b67b81bbf5b9df4f0c6035a388242d2037a3b65a1

SHA512
dfd50ad99b89345940afead11c3a6940d4408a0e6265cddda1d71ad92527ea00d8057ac77ceb2ffe137a3f0d2f321c210bc7cf97ed821f01e538dc08d07149a4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\gu.pak

Filesize
787KB

MD5
b7f4c73d56be31042d8edd7e8ea080f3

SHA1
c0c3595701c0a75c14931ed65958d36df0d925c5

SHA256
c36a20730d5f2b91cb61b5b2a5912db2ea5a328a9b8abe0fca0af300446d3c20

SHA512
ea0d766a754604cad4d5f3180c30f7dfdc3e1cfe79d67365b72adc0d7574851f21bdd5b748b16e8b4a95ade40c8ed0442bcefd511a2934cc9c701e379c955d60

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\he.pak

Filesize
488KB

MD5
6376d0a5f4273b76b1f4aabade194e0c

SHA1
337ba39f09454c0779ab64872b9fa11f866d6adc

SHA256
875712bb852c698f677c0c74e088f62d31adb2bce65648fc390607aad8705c45

SHA512
00347f16b5abbaf47fb08663d5efde26ab7de0c7a2fa42e6b5f03c41a83cecbd8e78cc3aef41d5f08658cf346e0ade732774485e8a10008a43fa41ffaf73b2be

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\hi.pak

Filesize
821KB

MD5
ede7fa471c5eebc1fa55b9b3b6f92d00

SHA1
1d1f529c615799bb3a3319ddd1357cb5dc71464e

SHA256
1e9623c7407ae8b8a88df3f69a47ae8117f74c4dcb56897bb794a9c38ee5805b

SHA512
0f51ea54e828700080effa6c728230c523ff8e26fb350e6f337028d18614d5dfc4a2792cb92b5e606bd0702067f55fea546029cddd1ebf7fa74ef5521ff08338

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\hr.pak

Filesize
381KB

MD5
7095ef4caf6bd39174487002a4e09300

SHA1
1efe686bd0b7f035aee7ab4c52be6133121cd0f3

SHA256
3d7685163c5eb6a11e745ff934312b8681c5f85dfa8d9ea701e9dcaee1e7a285

SHA512
45488d46dfe7a31a007932917f7baf4c195da899de5dc56d98e555336668af3edb77996487649b86f56beac688374ce77f8feadc01e3f84d30d83bd67631f9c1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\hu.pak

Filesize
411KB

MD5
d6904e7d1b6750d43a6478877c42618d

SHA1
919f090a6a3aa1112916f5bb0d5b73a62be43c1e

SHA256
3ec43893c6de5ec0f9433841afd5fa9feaaf59ddcef05f7e1cab14dba799887f

SHA512
d600fedb5ef1b2eb49a0122536c642b350ce67bb7a9da205890d9d13a195ac17c14607b4489715fd34506ec0ea4c80f245e09cf048aef52dcc8094f3138b2fad

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\id.pak

Filesize
336KB

MD5
881ff04e220aa8c6ed9d0d76bfa07cb8

SHA1
cacf3620d1bf85648329902216e6cdc6f588a5ba

SHA256
9210c4c4c33e7ceb5f70005a92a4fd36ca4facdd41701fdc1d2ce638db8adf22

SHA512
9134102928aa80c49bbf2b862e8079b2ee23636ce63412a4c3813f234d623ff563f5ca1ac407ddb77cecf1224896ed59ae979dcf63435d35a4f13de9c22755d5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\it.pak

Filesize
373KB

MD5
91391f388b4b6c12a72710c35f4c355d

SHA1
f89e6ea977a10a9f050395489285ce8c041c2c05

SHA256
c0dc0a4a87f7bb054a30eb1174c3228ea2014bd94668a7d22995b99c4937d817

SHA512
8796d69d1a8bdbc7690ded45404174b7fa0b5bec8453d79a3c85bf4707c3f32caf634c792c72ce7bda3522eceb5fc6761b696471586397064d9f1f1988ceee88

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\ja.pak

Filesize
456KB

MD5
8209dd8cf4e416416e015ff239b7c483

SHA1
7affd1707b9eec52c26a4c17708c8471c369e2f6

SHA256
3accfd9a1833ddeedb2082fb94101beb59b555c60f42e3070e9e04a372eba84a

SHA512
6a58a1ea8a46c325cac0629f2e3b571532a9a2a342ed61ca47bd1dcee20ce0b0350e4f6d3e8e4c6903c7ba4a4592a6382bf0fcb5437febd1673b3c2ce8cd7499

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\kn.pak

Filesize
910KB

MD5
d3d6bc60bead608e68e776e07d21ad30

SHA1
e40e38ca99026056c127e9e1a1ff821a50310887

SHA256
90b2df3338468e84e2cf2f2f67597cba5c3ceb5dba9c59ebd072ec15a70ce741

SHA512
05421db2f1202573a34de1e722c6bdb55a35821c4aebd54c80e6594fc92075cd9b97e5bfdfe93b4228c3a2646b92a27da4722ef3826e2807238dcc56ba273706

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\ko.pak

Filesize
383KB

MD5
b31780fff9541290c1d9f5b76141430d

SHA1
8b0fbdccd0a7f8141846763a0d27e4e0da0552dc

SHA256
b04c1b91cab31054be70cb851dc6716065545445801045daceb96eeee4d2334a

SHA512
a573dd09520059832e7f53386a64dcdde47452b02ce1e5d7e11385abbc8b734dcee0065b4ca351591bf9cc2f66fae204b9300702246d20265e8ddff4f7c1e6d8

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\lt.pak

Filesize
412KB

MD5
7b6bf901352885c0699db71239b7cf24

SHA1
9e3ec5f327c0d0e54a449332061e60a8c79243cf

SHA256
9200a9509bd77834d9912f4ba8f4219d2b9bd2cdad49a11873db30e99b9d1350

SHA512
79ebef723fb4c17581eb869b4b4e1a364a3d28df0e168e7e1a3583e0c1ec5b9716dd270925c0545b8247421a64b03705f10910fe3416900de9258840c470d580

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\lv.pak

Filesize
410KB

MD5
e664eb35f1284e9fc615e1bb4fab892b

SHA1
e777653abec377a394170b04f79e78acbe4b6a3b

SHA256
b5a31cbfcb40ad8d911de1618c4eb7e8cc67b97eb8878220f15d40eb014d8ac8

SHA512
c3232997e8d306e91ded72e9d81ffae2018af3e6c32fe620532e03bccd2883fce59b2a2290a1580d7080c468c02bcd24c1bc90051f06bfa9a4e17857d4aa583f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\ml.pak

Filesize
948KB

MD5
00292b0801e0dd0a74091bf53f1574c9

SHA1
63a002e7a8796bc4b4459a19c95ce426fbd1ec7f

SHA256
61a372f170de0a22712be980c3c78b22035ebf40ce79332fab75cdcc4208c9e6

SHA512
e2e15f66851aa435e3bf4de6672f4aa8b01204d8efe11ec6ee9a51d9877ec4f2e71d7e9547d6eab9bfa04af1bea71fa72aa4963fa08b48717bf1c3fd21c00cd5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\mr.pak

Filesize
772KB

MD5
b9a2aa88c69c42ebcc41fef00c980a38

SHA1
9e373dfa11f95c31ffdca70bd83d2f66e1ddcef8

SHA256
481faf7dd66cf10a476d8b156fb4ea452f920322d8007f7e25d41b2837bdbc09

SHA512
5f4582723429a44dd517322babae4466efb4e8723c0247754e2a9a2929133d6fee5c3533c4cf567954e2a5aab47940a136a178405de36e38b50e8d4a6d5c504f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\ms.pak

Filesize
351KB

MD5
d5da199f347452c5904bff9332a08f84

SHA1
b5fb8c22708a7e3130684f1a9923b6dab10c3ae5

SHA256
fe58cc4f62fc31e32c1fb9a0893a5483391ab6a91b1c92ed4a5e3103a962da7a

SHA512
9fddeb376bececc51dec997b3ed1e22821340fa172636f641af774dae8bc9b5c0780757380bf3fa8df0f9682a555ede81c449ae9468f63215c17123d13ee9f35

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\nb.pak

Filesize
344KB

MD5
bbae0915edec081b04bb903b689bc40b

SHA1
6a0fc635ce1c431e512b8b3b8448176aa4025556

SHA256
d565c6c95dad89d3f2b7210de4ec3fc437633de4dcfc994fde0704b92bb53ff8

SHA512
573a9fe43213829a6a4b39e67be25bc330b417750ea6d66e26163de7a80c29f6f5deeb841d9ff8303595943a81fc01ab668aab02a5cac4eda078ed06120138b4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\nl.pak

Filesize
356KB

MD5
9f547a24e2840d77339ca20625125b4c

SHA1
23366411b334f990a0328a032b80b2667fda2fcd

SHA256
55413d5eddb3300e0ae0fa5d79d26fdf1e5a12922d7018c8054b1faa9d660301

SHA512
34da7a0b58ee3904d00cf02d16d5a3ef508fb708d7c0a887286fc32cd6145b2bd857d317c784d1d1b17662041eadcf7e225908980eb93f2b81161d845c0bb67f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\pl.pak

Filesize
396KB

MD5
0dc77139d3530695cb4e85b708bc0bf6

SHA1
6915655afd1e37361c011f5c2113d72c7a0e85bc

SHA256
53b59486361b11512fb90f15065104b15ee2322bb7804f859cde2f2ecf9581fb

SHA512
ee1ca1d99ac279df4cc0e532aef2fc531061736b636a84310bdbd627e0f2435eac1a386ebb19aa901b6eae3929bda1c5da4f41b73a25a1b20137522e34547600

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\pt-BR.pak

Filesize
374KB

MD5
a064cb9d7cf18936600e9ccc03297006

SHA1
eb436a0c584ba91acb05dfccde139afbe26fe9f4

SHA256
c9ec3822044365457b8736348cf95a8e39bdfe3ed36267449bf3ed739accef2e

SHA512
95af684abf9d24cfc4d0668a02da1e2e69f5e671d671d8cdfadc22ec991908c6aa5663fe1fa88ca8e85c0508f409fa6c2bbc174c53674270f2b188018d358415

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\pt-PT.pak

Filesize
376KB

MD5
3f367760b57a5e4360dabcd4a650bc5f

SHA1
8d7cd6b0eb42361ee862455ecfa475d28f5aa934

SHA256
c89170385b3afb2ec89fbd61b8470ac718713c7296441c8430f173dac218e74b

SHA512
3dc30780d57dee91215a716dc6b4cb432838aa0161af4371f49f70db2076bd155b170fd2c1617f59e1b572144a2e150a34143eda82d9f2227d24d2281d5aba60

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\ro.pak

Filesize
387KB

MD5
745a9b8c6422682f2cfa5561cc1f4022

SHA1
31e3616ef09f9b1fd1c41cf8f43e504a6f90276f

SHA256
7247470057a936d03bfa2a8776508ab66aa1040c41a4eb8f79c1e93551c74bb8

SHA512
8e0b7f98cb842a862ceca65e0166462275feed26c32c9c299aba9986d36b716a90d4a8db5ccef355ac266b7e969071014cc7ab6439778e77c52754bc23b4c575

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\ru.pak

Filesize
634KB

MD5
5cc0f54e022a9996773dbd64906d5580

SHA1
87c103bd69724579b478f904235e03caf61d5d79

SHA256
b4223b56ec88235819a427d60bb937eb3984076523f02a018f57819e0429bea9

SHA512
b3365fedcba50643cecf1a70297e1e67990d63ae05caa87de01a70ef6f28e0f73a9a0edb0ff80b4138c624e51aa2dac065a2d40877fc92137714ae07734c2f4a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\sk.pak

Filesize
399KB

MD5
72946b939f7bcaa98ab314cfba634e0b

SHA1
71c79a61712c8c5d3dac07a65d4c727e3b80ab17

SHA256
75f179897cad221ca6e36b47f53cead7f3fb4159ee196f1d10a5181b84e1b5b7

SHA512
2a8fa7108c58f4cb263900a555714d5638d961d14d9f4ddf8a9ab5b880afdbc5d2325fed1e158dbaf42a9cd20e8e372e6a8f52fce842a6940ea52e43e4a1f1e5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\sl.pak

Filesize
385KB

MD5
4ad22c6c64dbe0fc432afaa28090c4d9

SHA1
19eb65ae52a585dbd9c25c32f22b099020c43091

SHA256
6002c129a56558832e9bd260c427c0bd2e1566e0aea3ad999f89c8e479534f9b

SHA512
94f9d34e76560059ef80fc04be4d54e52a7d934dd28747db7f0f6684243b841087245699a471a55d667623d2ce5e597a3d2c6bc37cfd7ebd2f5b8fb40e6207e7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\sr.pak

Filesize
595KB

MD5
fca817ed4b839b976ebcbf59cac66d68

SHA1
413efa65470319999032b6a25b3b2ee33b8cd047

SHA256
524acc64e70918a77cda43fd9b27a727645b28ad2d4cce16b327105101c8bbeb

SHA512
cb246d5c5cea30d6e7514841ab93803984cda37461a09b6c340ca64f7cbce4e1212951a4de421d928d433a619dac18454fb403b42581757b76c7eb124ce70cf2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\sv.pak

Filesize
347KB

MD5
5130a033016b45ae2c3363edb3df7324

SHA1
9f696d78b1b9efec180dc89ee0defc3ba23e6677

SHA256
3420a1fbcca5bf8c2d65d6dcb0db78b03f95f7f2fc56479a0de6e3312333ce6f

SHA512
401b71360dcacf3b1fdc411c92195051370db110863cbed37143263e7804cb24b75ff1908ee39ee848c28776df00d6edd8cc748acf3725668af7815929e8066b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\sw.pak

Filesize
365KB

MD5
9632dd7d883fa4deb3963ea663e0ffd4

SHA1
0db135be4b3a7c54c39e9df5034d5576b68ea92e

SHA256
690027c4a31c4aea00b7d1b32ec6cd3fa50b1eac412ae273ab15e72eb485dd6e

SHA512
3aac1857784dfecd2ae5f7c4056f58e27a966a6cb949e02eaba56fc1fc283243ed6213f17628d62d435e33fa4771eb43623f25da6510aa4ce6f2149f72ab0d37

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\ta.pak

Filesize
936KB

MD5
f100566697a96ce1f0a0c7e0bbfbe36d

SHA1
4c80a4930ba7d174c4203c199492463242bddf62

SHA256
7e818deedd50a533851bbf08e056bf2ad8d45f442a1a61d9b48e66804ea848db

SHA512
dfa6132a5b7e819e8d326bf5ee539d9ecb2dcd7fea429c75afec2291df9eeead6fa347b01f9feaf2235bce627fd39116176195f7a3d7d74de28951f939db1645

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\te.pak

Filesize
869KB

MD5
b1b6a9e3a04be79080ebbfacc1a0eb2d

SHA1
a5c8eb6a930062f6021d073d5f74ae146dc7fbc8

SHA256
d839531c4ff4a2885c993e0d358f78667215b0950c77a06ef01a6acff9221c5b

SHA512
bf0b163c8fc3988bfeb3cbb4b981596ce5afdf7e40149622fc3b60994e7d8efa5bb24c830036d168a6638feca48b8755aefa8640faae37055cae8fffb6a85568

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\th.pak

Filesize
731KB

MD5
a970b7e9d3aec2cd1b8ab798b3179f07

SHA1
bf17a7e80e01ac1704a1efdf27baf271b4c21e36

SHA256
cd80bf232f2f128a3d411f52c8039987559dbc1055f746eed6e0e8478b116dc1

SHA512
880555a2ac2f278aecb8794d8cc51f0833052e9f4ca187ed91fa35bb475e68ae3255cfe1dc074eac960c73c203e62c6b38077b266f5fab66ccc3ca73e94d4d60

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\tr.pak

Filesize
371KB

MD5
46f9b2a35efdf1120a8a946e4f1d0115

SHA1
af7bec1fba32d912b50288a7d988440627e4ee85

SHA256
b22fc7b75c52cc142f201d5cf107d17c1b173a494a6add022127f559fb46bcb0

SHA512
cd67f9c328408a8295f224aec190c7c411a868755fc5c9e90b4985b3c41a05d6d34dd30d4a3866f6c24e1d640f4c324bfba8c7ab806a6b216151cf0a504a03d7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\uk.pak

Filesize
634KB

MD5
3b2a976a25dca963e91df3695c502d8c

SHA1
ce7ae51211f512c3723bb43ea0de9e6debb70597

SHA256
28ea88f19b2c34699d535ca0c691449b7e4001c12e8aed8d04b2078916e88a37

SHA512
ba41ee074239afdf8f194b4ccb33060fa9655e3ccdac6a16090959d3214f8db15396b3e038d7de26c478fdd003472f680d2b6ac9a92acaf6ebf8aa258747ecc6

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\ur.pak

Filesize
552KB

MD5
ba86f1f13fdc37a2c48c1da34c84f4c4

SHA1
2f1578d0eee76e60effb63967712b15c0d56829e

SHA256
4c7affdcc324cd791d10e235da809ce7501e8005be64340b6e8bf5595647a707

SHA512
fb2fe1548574da860bf27408a4f29d781fcefc300f744f4214843f343e343ad8bae29cb7047f87f5c3277641f561c6a30e5bc9d6490afbefc7af36974305a688

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\vi.pak

Filesize
439KB

MD5
065179c466c5b7457e249f11d152b99f

SHA1
cfc05e9dfb91b2af2944aed4718fa05b43844914

SHA256
b75694e390bd2e20780b3bc72f6e1473ba45d7537c27642a7d888dfd3bb6c3bb

SHA512
fb598391a028b7d3c7e25cae21ccfde655e6f871e498767a54f7cf0d5d4e48207213cd2598ca88e4f46c303cd2d8175238a5a5b720ab37beec1873d681165a8d

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\zh-CN.pak

Filesize
319KB

MD5
2febe4ef32e1a3884089908f402ad62f

SHA1
e65c54adc127b78494dd6189cca71f1c7bd2a5b0

SHA256
a7ac9fda6f4cd189b75fdadc4b70cd0d369a09b66eaeb5d032678cb97ffc98f6

SHA512
8e8b030af4c952c32ec277850d5573414630ff5196eaed52820f44e9c5bd03ab6f71a8add19215b0456eed859be0d5a6f28d48e12f1677d39842f35feffd5e57

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\locales\zh-TW.pak

Filesize
316KB

MD5
02e9e0bc5c30ca60a869ea761fb662eb

SHA1
c5200f692544b681af8757627da430aeea4283ee

SHA256
c5061ec00bd969f76f3c0c6ff15ddacafed7491260bd8ced78118691ba57bdff

SHA512
07b5f401f89dfc36499a3e74318b471d9b2e795dc363dfd5a9394089d4783a4b51fd78e2092701b6974f1c51020f3b5f81171ce21690f8547ff3c8f3d54ce781

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources.pak

Filesize
5.1MB

MD5
fb620332959ee6e46ac1c2a2f0e1b2d1

SHA1
eb18c735d187647c3c529932b8b80d9c9af09286

SHA256
66153f7b388503a9bab9df1fa157d3af88548bee264525694bca9a61ce3495e7

SHA512
1e5bfcac24a76ca8fae7b7fa5407f4eafeecfcda54726d66586f1171a7ba30cf76544d75aa44f1eb64b202e686ccd2c00c8cc0b24b249fc5c6c28c156cd03775

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\app-update.yml

Filesize
87B

MD5
279e58ce22fff44adcf97b95af7d03d2

SHA1
a01e3585ddbf5d16d50b5bcafc47012b047158ff

SHA256
1fd4011942886a4ec2100cc366accfee73bc0afb262bc4ba79cde3ad8bc67a53

SHA512
800a77f22f327e03c378a05142ae0b24c5d8c110ea265af83b1ac61fc2a94d6df66b8e36e8479a7079cc1f3037778daf78a3f127e150226398c814cc9f5ce0a2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\app.asar

Filesize
29.7MB

MD5
2e60b750135b1aa302f88a21dd31bd42

SHA1
eeb57461780814fc4891a5a823fb81375a60d1eb

SHA256
f40ee04eb52a16194701bd62c2f57fa6f388d198ef1e4e0c63eb69485079a53c

SHA512
e2cf163c2a61a27078da1c1ea10037e359027a153b481e5b1481fea012e24765faafbf45fd2210dceca0448b526192caaaae10221390fea5288996bd303b60a2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\elevate.exe

Filesize
105KB

MD5
792b92c8ad13c46f27c7ced0810694df

SHA1
d8d449b92de20a57df722df46435ba4553ecc802

SHA256
9b1fbf0c11c520ae714af8aa9af12cfd48503eedecd7398d8992ee94d1b4dc37

SHA512
6c247254dc18ed81213a978cce2e321d6692848c64307097d2c43432a42f4f4f6d3cf22fb92610dfa8b7b16a5f1d94e9017cf64f88f2d08e79c0fe71a9121e40

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\default\Country.mmdb

Filesize
4.0MB

MD5
601aa80a0a9c4eead525b5e5e19bb2e7

SHA1
0c57500be84ef443fcd94a655f87858f3e3473ab

SHA256
5725eda4f16f731ae444af0be0bc7e5eca8baa196523d2151fae47b65671d646

SHA512
824fd187fb1b3da805d9ad654095b1850af722b799c6a9d243e318259437633ecc12a05f4ff6bfd2ad913c7efab289ec63d11f659b65132eafcb693b62599937

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\EnableLoopback.exe

Filesize
73KB

MD5
ec50c94623ebe0f146a7b64814534eaf

SHA1
e473507942810e34b7e23d6fc52293c62ff5ca99

SHA256
3eeb10d58eb1d42a3933b5d5ce66301789761c0e88769e7691d4a4564610a844

SHA512
537053a867de4b2c5c5ec2e02f27c44e20be67321b212a0437839cd25bec5012e2eabd7901965f95f381e3995bf3590e14bce8967cf840b7f1f605b3ab7256fc

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\schtasks.xml

Filesize
1KB

MD5
72bdab049d406483a9d43b9bf9fae051

SHA1
d6ac154b91a887104461f33c407b8b5c6851031c

SHA256
d944aad1c2cc0dc87056abd4861d65d21e6654e942923813805aea0fd6041bf1

SHA512
5a39b2f332b47c128962219cca1d429424a3d59da2be07ed0cb966cd7cdadabcdd5a00fa98c63806b00a9b98d7e738708a50ae8889b261dd8ac86bf4469d38b5

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\service.yml

Filesize
158B

MD5
3c984d36be95955ed4deb94047209224

SHA1
80faf51b190f89dc47db8beffab1f7f0f02b89fa

SHA256
b3281a85e12298a017b5d6204e84887610eed003bd496031f0464766d6d21e33

SHA512
80d910e96437d0e8542191b5047370e3f736f3087a46d6a7e145d43e1fc673629a2ed7fc9a348d721ffea07d0333663ed4940f56371a56c7af545f219c33bc52

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\sysproxy.exe

Filesize
102KB

MD5
37ddcca40070900cd870f5e1d42f267b

SHA1
150e649f1011a985c55be9eb585642c9daf03c6f

SHA256
ec334e443a3362a84b5915a266bec60e63f604fdb77b09c993898ec7a438294b

SHA512
e10c460e271fb53d84ad779e4df596f1be0d80e2b846a3f68020584b5febb3e134432c67996a2f5a98df2c9d54196c01d836fc50e0d849e5eff0f924075bbc32

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\tun2socks\add_tap_device.bat

Filesize
6KB

MD5
3fb2c4fb98ff7a078f330c8f985ea35b

SHA1
6c0cfae79240fcad3bbbcbb5e5011ea378ceeb69

SHA256
ed6f83806dc72c6c3cdbf2cfaef42be40b1485a7320e77b1069b5b519c68e2d3

SHA512
88c36191870cdc8a423c51cdfc68b1976e042a501997bd739ab014ea4df6614794f5c1e7519dd8d4a45839bb9006a73678044fbfd0f4cc4eeed24859131f417e

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\tun2socks\amd64\OemVista.inf

Filesize
7KB

MD5
4fafe22e1400bbb8d171c79649b3e957

SHA1
9596bb99aba89339b303a4fb8aea3544f4d8e684

SHA256
fcfade8b1fc1f0a43a28e44990a0911ed328a919a38cafb61282b4e89cf34dc3

SHA512
816995d4dbbf152ee778951251ba2e8da957aec5617274f50a75aa07cf58c57aa6d622b609446209ac3b621534e77d0c6d941e6531ffc7e6b14d5731827c2105

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\tun2socks\amd64\tap0901.cat

Filesize
10KB

MD5
88b33d5328b65660ecbffa5150f15966

SHA1
390898559d8a8237f502bc3531240639a8edee00

SHA256
093c0e0884e64fbb6cb2b24babe7a3c88ded72b3eb2598ac8e31b75c835fe240

SHA512
39e60d7ff8988ce74e7eeedef500d63e05d2dbf72fd965dffa57855c3713d3a5b49c4f195eaa0120ad3f51b788f03620408534becfb5cff29fe187ea37fc0367

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\tun2socks\amd64\tap0901.sys

Filesize
36KB

MD5
78e846835a02eb1e0cf96830ef7df8b3

SHA1
85bc996482465ed957f924f915fe120d427049b5

SHA256
9156340ca18c463628a65304f49abfd0bb1fdedf1ecc448949f565e08f7ee610

SHA512
70b4a885b7fa2e2243e6c5ab3e5956f8439468cf4cced6ec323be400d3aa2002a792c330d5765326b6ad232760b8658bbf78747a4f3da2825bdb2b09b44a3379

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\tun2socks\amd64\tapinstall.exe

Filesize
114KB

MD5
1e7dffa25ea5641f9cfd494fe6f7c4cd

SHA1
01ffefd175f2daf0f87ae8d88bd2f2ce12d42110

SHA256
41743846ea01749aba94622d49190895d4dc01bc730dabcee8f3b0429b80e0aa

SHA512
de58b602717b667d908012e5ddc9b6436702078be042d1db845f655458eb8bf8e1e50181e64dd9efa85817564c63bcd930baaf1898ec4d1dc267c7fe0b8498e9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\tun2socks\find_tap_device_name.bat

Filesize
3KB

MD5
c5f6fc512ff7389f28fd61983365afbc

SHA1
1c8fcd8429f9d16db7b70f4eb930f1505383b170

SHA256
a21da8d44bda0acb8a7b68da0a986a1fadcb1fa034ce4ec8ee3215a649a23ef2

SHA512
e3ad3be7e80336176ad1c437fb14bb8df89a80839e3af4af62b4224d7c36143ebedd13e0f00c781836b97a58e561ac396afc0aed874d4065491b36a88f38c609

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\tun2socks\i386\OemVista.inf

Filesize
7KB

MD5
41884571579f88540326252b81d0a9f8

SHA1
cfd0ba5db827d21e4fa71663c045b5676d303d6e

SHA256
a461b764e248d3e59a1a730ff94af7e61121f5a02004e02b3b866ac8fd1689be

SHA512
3eeeffc02998c73a11d4a0988fe3823b52ce560f8cb40c76ab810d5ea78dd42811cf30ae35bf11d55f17b3804154ddb483acff2f11261bfc382b5e18eb42688b

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\tun2socks\i386\tap0901.cat

Filesize
18KB

MD5
ad8a5cbec4f83ae4f850c793713ee770

SHA1
bee00a5037d4f1232837d27bca21658efcff1750

SHA256
878c1b205887b61906f6f4f8da5783d2bb8756d0a39359288d09f65f983b27c2

SHA512
5e88ce1ba2c1dc17e04d26d9afaa97987e61d1c57c97bb1e8a07561b33f763052d0e4bddd184e11ac19e514c7041f9750a6dc576f27161a136765fd1240e5327

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\tun2socks\i386\tap0901.sys

Filesize
22KB

MD5
f49967c396969b71c3a72537db03a68b

SHA1
f59d3a5d2afd85fbb9fb36f1411c767be2bf96cf

SHA256
3b1ff5252012d6e8a7dd6e4621ec43812510dca1a25a9a2e07288800f445dd41

SHA512
cda4269b5a13e573469b3e3a75432117079c65279e06322519af704a80862e43bceb4cc9d6352dd19db00bb10d10f64b02eee6c5dc29f56fa5f99c89823a62e3

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\tun2socks\i386\tapinstall.exe

Filesize
94KB

MD5
f8578c73ba8bbc356b13f28ce00396aa

SHA1
7d73019d2414bd8840e10854e30ab9e37515c9cd

SHA256
adde2601408dc3caa3450e1b7d86a8d434c4b3eaa9654c7e69e0f33122c37da6

SHA512
a055e805200b760f07e4599c0284772cdb8990d98abfe3823bea48ebcb54d583ef03c61fbf166f12054db0c69f0b3812a924c8b857df9bfd4a9148c9a875bf55

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\tun2socks\remove_tap_device.bat

Filesize
409B

MD5
ccfea0ce2150a1c8e78ef9085912d8eb

SHA1
148a92e210e3381eb27a02a4e7c67567cb72aa04

SHA256
3b4822291f9c4dda0db619ea80265dfe0f220769f7ed97355d63e91c3fb13c4f

SHA512
c628b62407c57220cf5a33f4d69b3c12e2c481754a197d4440402118663a78cadab3d908078f51d5461ac10cbe51bf17ac0feffedc35ae00cdf6bfb6d59f50b4

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\common\tun2socks\tap-windows-installer.exe

Filesize
566KB

MD5
a3a7cffb27a64e9090f0b6b8b8073838

SHA1
ba381f02590fb031092c3a3ee587a2c7efc8a7db

SHA256
9023a2a4c6e9412255eab618b0f0a954e5e92ef977f5a83a0c3d7d3e2cca3507

SHA512
aeb174212b2afa835f21c5ba04d45f64cf1695ea2138fcb72a2f95edfe9f7898190b3dbc766cdae7d0b9523bda7d4261e5fe975c04d32c4a5a88f8fb67aa48ec

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\x64\clash-win64.exe

Filesize
14.1MB

MD5
4836b1b485d859d7814d8597d6239b83

SHA1
46d8aba1c00699bd2292071f3f317608c4b83757

SHA256
cea0f9755b949626e1036516edaafdb2e2966234a8be2bd8b6a9bdd04cc82108

SHA512
c37813e64701966a543c48022d83fa0b5eb52dd103d838338450bb10898e49777f8bbc8e4bed529cc8e79a3d1bbd69986de7f09ab4344b1796ec177fedd5c3b9

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\x64\clash-win64.exe.sign

Filesize
88B

MD5
3bc12edff0b50e188f2f9b8d6e706b19

SHA1
ce2c1e73be64022736af51d0a60fb1110cb292fc

SHA256
256f00e82bd67adab22d7b02c641504e9b1c7525dd51353cc70d40d595e8ae65

SHA512
74708f4ad6be6b4c717bc5ede02b70dd557595548e83e7d6d3d3f2aee57838071efa7796405761e296a2bd571565196f897345c14df892f6171c718401f6d0c7

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\x64\go-tun2socks.exe

Filesize
2.7MB

MD5
54b3c271f8ee681b6fa7add96fbafdc7

SHA1
90956308cb86ad6824f7d614cc5a0099936b6796

SHA256
34042346b04a1fce0800477a6f651c3fc7100dbdcdbffaf645a33b89abd01e09

SHA512
80b283ba0bfe2509ec85656f5df75bff5ae1bc40e4d7490da41baaa4806b52fa79a6d4812407e0ba316bb2948abb04e26970aafe870c18cc7862dcefb45d1cbf

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\x64\service\clash-core-service.exe

Filesize
5.2MB

MD5
7d929e7c85504a77dda9a2526aa349f3

SHA1
e8133e394760a8bff43f5fadd950e7588e2322d0

SHA256
fa1e60e83030b114d73acf1e3d348902885e9e24df4ed9e712946cf675528689

SHA512
e9400fdde2b8ec68cc8be2f82706d70995860f98028b2f04dd35f19aa8bdfc9996afb46957b0d4ce7aaeefb9ee7c82ac60615cee59418ff04d8bcdf151817fc2

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\x64\service\service.exe

Filesize
667KB

MD5
dfac85571d69882cbe7e106fb658a941

SHA1
83561bdb596dc7b8624f42ca812525c826e118ea

SHA256
2c93d1c50400410f019ca0ebb56b2c5229c710a84d2c5d97235088d173839a24

SHA512
7393c6dc3b6911b12cc152d0d1feecb67bba5844eb267bd61023b192a814d4ec3bafb60ce28a3831aca6b0dbbeaf97b619dc9f6a54de070a3ea1abd827656034

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\files\win\x64\wintun.dll

Filesize
417KB

MD5
e861eb5789c50997d9476a6172d1c269

SHA1
647eb6588b149efe2477fd192c8cab74d018d8ef

SHA256
e5da8447dc2c320edc0fc52fa01885c103de8c118481f683643cacc3220dafce

SHA512
d8b49a6834c1ea5d73fee6979c59def18900c86d598ea900ab741ce71eefdaaadb4862afefa14e6cc093007eae5d4325857633549f1ade555baa0344b18e6112

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\imgs\logo_64.png

Filesize
1KB

MD5
cef8c5a9f379074f116bd4b1a8c6ec3c

SHA1
b96b1d203b038bb2cfe40ae64581e9f18bd3bb99

SHA256
fbd447cf53d2c17950b7aab19ea531ff1822ef1041a89796d73ea5a6a6a0f108

SHA512
a85bea1d4dc14773158708e2e227a11b185710eaaf75b3c496cd4e361942d1ba3fa6ced8d39a9a66db616f67b373fe1264bdb82ec174fe0d57a85fcec2787e10

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\resources\static\imgs\logo_64_eyes.png

Filesize
3KB

MD5
babe4ceb9576c68066daa6d6c285d5b8

SHA1
361fb4444a5803f7cc672039dca0091ddcc1771a

SHA256
23b5eb30e0ad71f7000270bb5537cf8a6d7fe80a15fa6f4f065db818b6dc9b79

SHA512
2529103fac2d8e94c0a1489cc32286f99c30d865ed810dbf1b66682e182209696f35f6cf44697505fe656fd2ebdb087975579378e9db51b6adbc0458ec87027a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\snapshot_blob.bin

Filesize
168KB

MD5
b82ff216a0babf602940759b9a3af870

SHA1
07e8a22dcf8d7be04a6ddbcab3098e040494bb0e

SHA256
943b27009d41801c5a649caf680e32d4dd25de002787a4ccd86b0925b3aac3a5

SHA512
da157570afbab7be135f7749df7f4518df1452ea24f98d8f5189430e732ad06ed438afc701cb70451bbc7137b5f35a0c5957df92ecb40d47d54c1071ea79fba1

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\v8_context_snapshot.bin

Filesize
471KB

MD5
031ea03da08fe1247280cfe781658791

SHA1
e91db50ad16b5a5fbbaf4118672d60b347ea6161

SHA256
c16dcec41919a6d2850214f2275824be8a97d8c5e694e2ec8dd7d16ab2d5015c

SHA512
b3d6f282761f8ab8760728ecb108f64741f6f3cd2a143813042ff63a3b6604fcfe7c1feabafb65f9f67906217edb5851f44605a34f7a50ed2058c25ce5efb30a

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\vk_swiftshader.dll

Filesize
4.9MB

MD5
77c94eb6a804ba921c97e69984723255

SHA1
f95fc5eb8874451d0c01ffdc47c5a89b77df1826

SHA256
06d4f44d33b240b774ff6f2b96a07f6bb217161869e3284c82b233abe3645015

SHA512
d6d88394bb198259644cc25ac9e0c5f2e263a6784937f630370130bbe2ee54a16ad2c9d1529a352d9fc3d0d0082e80f3bbd90ee44f4efbba24527cc7153c0e28

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\vk_swiftshader_icd.json

Filesize
106B

MD5
8642dd3a87e2de6e991fae08458e302b

SHA1
9c06735c31cec00600fd763a92f8112d085bd12a

SHA256
32d83ff113fef532a9f97e0d2831f8656628ab1c99e9060f0332b1532839afd9

SHA512
f5d37d1b45b006161e4cefeebba1e33af879a3a51d16ee3ff8c3968c0c36bbafae379bf9124c13310b77774c9cbb4fa53114e83f5b48b5314132736e5bb4496f

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\7z-out\vulkan-1.dll

Filesize
894KB

MD5
2a9605e987ade338e3f3c14e3ab5e336

SHA1
cf472c2920d86f1b1b92d59c18b34e5b58c4139a

SHA256
cd6c20b0efcab65ceec5b6271efd541982b49ad0e55bf0e10cf91ad1ddccf2e2

SHA512
2336592538e8d01ffd227f69ebbf69fa4e8b052a2122e53605099ef5b05bacaa0a910564ef185c08a6838269b3431d5d66600118350bfc240bb089234f4b0cdd

Download Submit
C:\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
\Users\Admin\AppData\Local\Programs\Clash for Windows\Clash for Windows.exe

Filesize
150.4MB

MD5
6638f05707658886098d89385cfc8bd2

SHA1
d02824b4603be6108fc6f623fc28d536d0e455ac

SHA256
9d0c59ab3698317bc13f31f483eb128de1eaa5ea9b289ba35dce552b733b4cb3

SHA512
af0116a99a92a9dca305d9b910a38b1fc6c7e1fa7f88327578c5d43fceb17e2563bff98a2afab2659cdb0b82d6fcd8f76343b1d7bd3d90657d42abfeec4a34a0

Download Submit
\Users\Admin\AppData\Local\Programs\Clash for Windows\Clash for Windows.exe

Filesize
150.4MB

MD5
6638f05707658886098d89385cfc8bd2

SHA1
d02824b4603be6108fc6f623fc28d536d0e455ac

SHA256
9d0c59ab3698317bc13f31f483eb128de1eaa5ea9b289ba35dce552b733b4cb3

SHA512
af0116a99a92a9dca305d9b910a38b1fc6c7e1fa7f88327578c5d43fceb17e2563bff98a2afab2659cdb0b82d6fcd8f76343b1d7bd3d90657d42abfeec4a34a0

Download Submit
\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\StdUtils.dll

Filesize
100KB

MD5
c6a6e03f77c313b267498515488c5740

SHA1
3d49fc2784b9450962ed6b82b46e9c3c957d7c15

SHA256
b72e9013a6204e9f01076dc38dabbf30870d44dfc66962adbf73619d4331601e

SHA512
9870c5879f7b72836805088079ad5bbafcb59fc3d9127f2160d4ec3d6e88d3cc8ebe5a9f5d20a4720fe6407c1336ef10f33b2b9621bc587e930d4cbacf337803

Download Submit
\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\System.dll

Filesize
12KB

MD5
0d7ad4f45dc6f5aa87f606d0331c6901

SHA1
48df0911f0484cbe2a8cdd5362140b63c41ee457

SHA256
3eb38ae99653a7dbc724132ee240f6e5c4af4bfe7c01d31d23faf373f9f2eaca

SHA512
c07de7308cb54205e8bd703001a7fe4fd7796c9ac1b4bb330c77c872bf712b093645f40b80ce7127531fe6746a5b66e18ea073ab6a644934abed9bb64126fea9

Download Submit
\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\UAC.dll

Filesize
14KB

MD5
adb29e6b186daa765dc750128649b63d

SHA1
160cbdc4cb0ac2c142d361df138c537aa7e708c9

SHA256
2f7f8fc05dc4fd0d5cda501b47e4433357e887bbfed7292c028d99c73b52dc08

SHA512
b28adcccf0c33660fecd6f95f28f11f793dc9988582187617b4c113fb4e6fdad4cf7694cd8c0300a477e63536456894d119741a940dda09b7df3ff0087a7eada

Download Submit
\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\WinShell.dll

Filesize
3KB

MD5
1cc7c37b7e0c8cd8bf04b6cc283e1e56

SHA1
0b9519763be6625bd5abce175dcc59c96d100d4c

SHA256
9be85b986ea66a6997dde658abe82b3147ed2a1a3dcb784bb5176f41d22815a6

SHA512
7acf7f8e68aa6066b59ca9f2ae2e67997e6b347bc08eb788d2a119b3295c844b5b9606757168e8d2fbd61c2cda367bf80e9e48c9a52c28d5a7a00464bfd2048f

Download Submit
\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\nsDialogs.dll

Filesize
9KB

MD5
466179e1c8ee8a1ff5e4427dbb6c4a01

SHA1
eb607467009074278e4bd50c7eab400e95ae48f7

SHA256
1e40211af65923c2f4fd02ce021458a7745d28e2f383835e3015e96575632172

SHA512
7508a29c722d45297bfb090c8eb49bd1560ef7d4b35413f16a8aed62d3b1030a93d001a09de98c2b9fea9acf062dc99a7278786f4ece222e7436b261d14ca817

Download Submit
\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\nsExec.dll

Filesize
6KB

MD5
ec0504e6b8a11d5aad43b296beeb84b2

SHA1
91b5ce085130c8c7194d66b2439ec9e1c206497c

SHA256
5d9ceb1ce5f35aea5f9e5a0c0edeeec04dfefe0c77890c80c70e98209b58b962

SHA512
3f918f1b47e8a919cbe51eb17dc30acc8cfc18e743a1bae5b787d0db7d26038dc1210be98bf5ba3be8d6ed896dbbd7ac3d13e66454a98b2a38c7e69dad30bb57

Download Submit
\Users\Admin\AppData\Local\Temp\nsy15E3.tmp\nsis7z.dll

Filesize
424KB

MD5
80e44ce4895304c6a3a831310fbf8cd0

SHA1
36bd49ae21c460be5753a904b4501f1abca53508

SHA256
b393f05e8ff919ef071181050e1873c9a776e1a0ae8329aefff7007d0cadf592

SHA512
c8ba7b1f9113ead23e993e74a48c4427ae3562c1f6d9910b2bbe6806c9107cf7d94bc7d204613e4743d0cd869e00dafd4fb54aad1e8adb69c553f3b9e5bc64df

Download Submit